| *** zzs has joined #openstack-dev | 00:01 | |
| *** dolphm has joined #openstack-dev | 00:01 | |
| openstackgerrit | A change was merged to openstack/quantum: Sync latest Oslo components for updated copyright. https://review.openstack.org/24382 | 00:02 |
|---|---|---|
| *** jog0 has quit IRC | 00:07 | |
| *** Tross has quit IRC | 00:07 | |
| *** dolphm has quit IRC | 00:10 | |
| ayoung | termie, this patch is not last minute. I posted the first version of it in Deceber. It has been vetted by many people, and it fills a significant need. | 00:11 |
| ayoung | Your basic argument against it, if I understand correctly, follows from your desire to avoid indexes on the tokens backend | 00:13 |
| ayoung | As far as null expires...I have no strong feelings on that, and am willing to reverse it with a decent argument. | 00:14 |
| *** stevebaker has quit IRC | 00:15 | |
| ayoung | vishy, devstack does URLS all the way down to http://hostname:5000/V2.0 whereas, if a user only specifies http://hostname:5000/ they will get the latest version, which is v3. | 00:17 |
| *** stevebaker has joined #openstack-dev | 00:18 | |
| termie | ayoung: i think null expires should not be allowed, i found it weird that there was a test explicitly for it | 00:18 |
| *** stevebaker has left #openstack-dev | 00:18 | |
| termie | ayoung: my basic argument is not about indexes, it is that i don | 00:19 |
| *** pfreund has quit IRC | 00:19 | |
| termie | ayoung: 't think it is a good solution to the problem being described | 00:19 |
| ayoung | termie, ok, so token indexing aside...what are your issues with trusts? | 00:19 |
| ayoung | Becasue the real problem has been the same that what Keystone was origianlly tried to address | 00:20 |
| ayoung | in order to perform an action in the future | 00:20 |
| ayoung | services were holding on to users credentials | 00:20 |
| ayoung | so, in the case I gave you before | 00:20 |
| ayoung | where a service had to do something on my behalf a month from now, they would need to have my userid and password | 00:20 |
| *** tserong_ is now known as tserong | 00:21 | |
| *** Tross has joined #openstack-dev | 00:21 | |
| termie | ayoung: you've already got two different cases in here, "impersonate" vs not | 00:22 |
| ayoung | termie, that is true. Trusts were origiananlly "impersonate only" but there is no reason that they had to be. It is a decision made by the person creating the trust how much they want to delegate | 00:22 |
| ayoung | Impersonation is kindof "whole hog" but is necessary for swift (I've been told) where objects are actually owned by users | 00:23 |
| termie | ayoung: sure sure, i would call that over-engineering | 00:23 |
| ayoung | elsewhere, impersonation is sufficient | 00:23 |
| ayoung | er | 00:23 |
| ayoung | delegation of roles is sufficient | 00:23 |
| termie | ayoung: anyway, for the "impersonate" version, you just need a long-lived token with a limited scope | 00:23 |
| termie | ayoung: right? | 00:23 |
| *** stevebaker has joined #openstack-dev | 00:24 | |
| ayoung | termie, except that "long lived tokens" which are bearer tokens are basically a bad idea. | 00:24 |
| ayoung | Yes, that would work, but the longer a shared secret lies around, the more likely it is to get compromised | 00:24 |
| termie | ayoung: the system uses bearer tokens right now, so that isn't a current issue, but for eliminating that there is an existing solution in oauth | 00:25 |
| ayoung | With a trust, the trustee still needs to authenticate before getting a token, impersonation or no. | 00:25 |
| termie | ayoung: are we on the same page there? | 00:26 |
| termie | ayoung: (are you familiar with oauth?) | 00:26 |
| ayoung | termie, I've looked in to oauth, but, to be honest, I am not comfortable with most of the web SSO solutions. There might be details that I am missing, but the basic premises seem flawed... | 00:27 |
| ayoung | which is "we have to deal with the web as it is deployed today" | 00:27 |
| ayoung | and thus doing things like redirects etc. | 00:27 |
| ayoung | However | 00:27 |
| termie | ayoung: it is not web-only | 00:27 |
| *** tomoe_ has joined #openstack-dev | 00:28 | |
| termie | ayoung: nor is it SSO | 00:28 |
| termie | ayoung: just a system for delegated auth | 00:28 |
| termie | ayoung: with a bunch of descriptions for how to do it over the web | 00:28 |
| termie | ayoung: as that is the largest market for delegated auth | 00:28 |
| *** yidclare has quit IRC | 00:29 | |
| termie | ayoung: but, anyway, where we stand now is in a world of bearer tokens | 00:30 |
| termie | ayoung: and the use case for "impersonating | 00:30 |
| termie | ayoung: would be solved in that world with a long-lived token with a limited scope | 00:30 |
| *** zzs has quit IRC | 00:30 | |
| ayoung | Except that I am hoping the mechanism we design here outlives bearer tokens. | 00:31 |
| *** lloydde has quit IRC | 00:32 | |
| termie | ayoung: sure sure, i am trying to hit basic principles here | 00:32 |
| *** ek6 has quit IRC | 00:32 | |
| termie | ayoung: are there other problems you see with what i am describing so far? | 00:34 |
| *** stevebaker has quit IRC | 00:34 | |
| *** roampune has quit IRC | 00:34 | |
| ayoung | termie, we have a rule now that when a user changes password or roles, we revoke all their tokens. THat would break a long term contract for something like HA. You might argue that it is an acceptable behavior to do so, or that we could make an exception for that case.... | 00:36 |
| ayoung | A long lived token would have to be lived validated...but we still support that.... | 00:37 |
| ayoung | and the trust IDs really are not much different from tokens. | 00:37 |
| ayoung | YOu would have to set up your token backend to not timeout the token.... | 00:37 |
| *** jhesketh has joined #openstack-dev | 00:37 | |
| ayoung | your could make it fit, but it is a mismatch | 00:38 |
| *** ek6 has joined #openstack-dev | 00:38 | |
| termie | ayoung: so, to paraphrase, you want the long-lived token possibly not to be invalidated by a user password change | 00:38 |
| ayoung | If your argument is that we should just leave berer tokens alone until we can replace the whole kit and kaboodle... | 00:38 |
| ayoung | hmmm | 00:38 |
| *** stevebaker has joined #openstack-dev | 00:39 | |
| ayoung | you could view trusts as a long lived token that can only be used to get another token, and that other token is limited to exactly the roles outlined in it | 00:39 |
| ayoung | calling it a trust versus a token is, I think, better documentation of the intention | 00:39 |
| alop | getting a slew of 'NovaException: Unable to find host for Instance' today | 00:39 |
| alop | anyone care to take a look at this with me? http://paste.openstack.org/show/33630/ | 00:40 |
| ayoung | all the rules would be the same...any tokens I created from a trust token have to be revoked if the trust gets revoked. We don't actually have a way of tracking the on a per token basis (token b was created from token a) but we could do that instead.... | 00:40 |
| ayoung | actually...we probably should have that as an option....hmmm | 00:41 |
| ayoung | termie, you have very good arguments. I think it comes down to the semantic differences between a short term entity like tokens and a long term entity like trusts. You could potentially shoehorn the two concepts into the same entity, but I think that doesn;t simplify things. | 00:43 |
| ayoung | There is something comparable in other worlds, though..profgiles for creating X509 certs comes to mind | 00:43 |
| ayoung | but also extensions | 00:44 |
| *** markmcclain has joined #openstack-dev | 00:44 | |
| *** stevebaker has quit IRC | 00:44 | |
| termie | ayoung: well i think that went a little off-track | 00:45 |
| ayoung | termie, no, I am just chewing over what you are saying...you have some good points. | 00:45 |
| ayoung | And I like being challenged on this, to justify it. | 00:46 |
| ayoung | There is prior art from the Kerberos world, BTW. It is called Service for User To Proxy or S4U2Proxy. Its used, for example, if you need to contact a web server that then needs an additional service ticket to perform some action in a remote system on your behalf. | 00:47 |
| *** salv-orlando has quit IRC | 00:47 | |
| termie | ayoung: i've written a few delegated auth systems in my time ;) | 00:47 |
| ayoung | Heh | 00:47 |
| *** salv-orlando has joined #openstack-dev | 00:47 | |
| ayoung | termie, if I had my druthers, we would have taken a pre-exiting system instead of writing Keystone, but we play the cards we are dealt, and that was the hand left at the open seat at the table when I sat down. | 00:48 |
| *** cloudchimp has quit IRC | 00:48 | |
| termie | ayoung: which pre-existing system is "Trusts" ? | 00:49 |
| ayoung | none. but I had to work with Keystone. | 00:49 |
| termie | ayoung: as far as i can tell i'm providing you a solution that works with keystone | 00:49 |
| termie | ayoung: and a way forward after it | 00:50 |
| termie | ayoung: that _is_ based on an existing solution | 00:50 |
| *** stevebaker has joined #openstack-dev | 00:50 | |
| *** stevebaker is now known as stevebake- | 00:50 | |
| ayoung | If you look at all the changes we would have to make to implement your solution, it would basically look like trusts: we would need to specify that the long lived token could not get another token with a different set of roles, not get revoked at password change... | 00:53 |
| ayoung | so I called them trusts and put them in a different backend. | 00:53 |
| termie | it doesn't seem like a different backend when it is a new argument in the token driver | 00:53 |
| *** amerine has quit IRC | 00:54 | |
| termie | i don't think the idea is sufficiently thought through | 00:54 |
| ayoung | termie the user_id is also a foreign key to a different backend. | 00:54 |
| *** stevebaker has joined #openstack-dev | 00:54 | |
| *** stevebaker_ has joined #openstack-dev | 00:54 | |
| ayoung | tokens are ephemeral. You lose the token database, nothing is broken, people just get new tokens | 00:54 |
| ayoung | lost the identity back ed or the trust backend and systems are broken | 00:54 |
| termie | well, i would argue that nobody is using the trust backend | 00:55 |
| termie | ;) | 00:55 |
| *** stevebake- has quit IRC | 00:55 | |
| *** baba has joined #openstack-dev | 00:55 | |
| ayoung | heh, I have people that have asked me to build it, both in my organization and elsewhere. | 00:55 |
| *** fire has quit IRC | 00:55 | |
| ayoung | But, yes, no one is using it yet because the code just landed and still has bugs | 00:55 |
| *** amerine has joined #openstack-dev | 00:55 | |
| ayoung | which is what I am supposed to be fixing right now... | 00:56 |
| termie | tear it out, make it completely an extension | 00:56 |
| termie | if what you are saying is that it's purpose is to provide an additional set of credentials by which a third party can get a token on behalf of the user | 00:57 |
| ayoung | But a credential managed by Keystone | 00:58 |
| *** aeperezt has quit IRC | 00:59 | |
| termie | so is ec2 | 00:59 |
| termie | it's an extension | 00:59 |
| termie | it needs have no integration with the core except that when it creates tokens they have a limited set of roles | 00:59 |
| ayoung | slightly more than that | 01:00 |
| termie | define | 01:00 |
| ayoung | we want to make sure a token created by a trust cannot get another token | 01:00 |
| termie | role | 01:00 |
| termie | done | 01:00 |
| termie | next? | 01:00 |
| termie | it isn't even a token | 01:00 |
| termie | it is a credential | 01:00 |
| ayoung | and there is revocation | 01:00 |
| termie | it lives in the Trusts Extension | 01:00 |
| ayoung | it lives in the trust backend. | 01:00 |
| termie | trusts extension db, still no issue in coer | 01:00 |
| termie | they are going to have to request a new token from the Trusts Extension API | 01:01 |
| ayoung | By itself, a trust is not a credential | 01:01 |
| *** mrodden has quit IRC | 01:01 | |
| *** ewindisch has joined #openstack-dev | 01:01 | |
| termie | i don't care, together that plus whatever service's credential constitute a credential | 01:01 |
| *** markmcclain has quit IRC | 01:01 | |
| *** aeperezt has joined #openstack-dev | 01:02 | |
| ayoung | and that is how it is presented...as the scope of a token. User presents credential and trust_id and gets a token. Now, maybe the trust should be one of the plugins...but I haven;t gotten to refactoring that. Trusts was actually written before the V3 API | 01:03 |
| termie | tear it out, make it an extension | 01:03 |
| termie | it is a perfect example of something that should be an extension | 01:03 |
| *** halfss has joined #openstack-dev | 01:03 | |
| termie | it is an alternate interface for getting new tokens | 01:03 |
| *** gongysh has quit IRC | 01:03 | |
| ayoung | termie, have you looked at the V3 api? | 01:04 |
| termie | a bit, why? | 01:04 |
| ayoung | specifically, how we are trying to deal with Multifactor? | 01:04 |
| termie | how is that related? | 01:04 |
| ayoung | so the "methods" thing you were complaining about. | 01:04 |
| ayoung | Those are passed in with the token request | 01:05 |
| ayoung | the idea is that there will be multiple plugins for auth, possibly checked on the same request | 01:05 |
| termie | those are passed in to the core token request or the trust extensions token request? | 01:05 |
| ayoung | core V3 | 01:05 |
| ayoung | right now there are two methods accepted | 01:06 |
| termie | great, carry on? | 01:06 |
| ayoung | password and token | 01:06 |
| ayoung | we know of other that are coming | 01:06 |
| termie | (waiting for how this relates to trust) | 01:06 |
| termie | s/trust/the trusts extension/ | 01:06 |
| ayoung | but we are not implementing for V3. | 01:06 |
| ayoung | The point is, there will not be an extension per credential type | 01:06 |
| termie | this isn't a credential type, this is a Trusts Extension that takes credentials The Trusts Extension cares about | 01:07 |
| ayoung | so trusts are in keeping with the design of the V3 API. Which is designed to allow for stackable authentication | 01:07 |
| termie | it is free to re-use core apis, but not modify them | 01:07 |
| termie | because it is... The Trusts Extension | 01:07 |
| ayoung | and my implementation says that it only works with tokens, but others may decide that trust_id plus kerberos principal is what it needs, or X509, or OpenID. | 01:07 |
| termie | i guess you better make your extension support pluggable backends as well then, eh, wouldn't want to get caught looking not pluggable | 01:08 |
| *** maoy has joined #openstack-dev | 01:08 | |
| ayoung | funny you should mention that. One of the biggest requests we've had from just about everywhere is to allow authentication against LDAP in a read only manner | 01:08 |
| *** maoy has quit IRC | 01:08 | |
| *** woodspa has left #openstack-dev | 01:09 | |
| termie | it can live in contrib, doesn't have to be a separate project | 01:09 |
| ayoung | I implemented the LDAP "backend" last year based on the SQL and other backends. | 01:09 |
| termie | i think everybody in the world was expecting a read-only ldap to begin with | 01:09 |
| ayoung | but it only solves a small subest of the actual problems. | 01:09 |
| termie | how far is this going away from the Trusts Extension discussion? | 01:10 |
| *** sthaha has joined #openstack-dev | 01:10 | |
| ayoung | why weren't tokens an extension? | 01:11 |
| termie | ayoung: plenty of reasons, for one they were there first | 01:12 |
| termie | ayoung: why shouldn't Trusts Extension be an extension>? | 01:12 |
| *** nati_ueno has quit IRC | 01:12 | |
| *** baba has quit IRC | 01:12 | |
| ayoung | no, the first thing we had was duplication of userID and password. As you yourself poointed out, bearer tokens was something you fought against. EC2 Credentials also pre-exsited, and would have been preferable to bearer tokens. | 01:14 |
| SpamapS | why does keystone run openssl cli instead of using the python openssl bindings? | 01:14 |
| ayoung | SpamapS, because it runs in eventlet. | 01:14 |
| ayoung | The python openssl bidings take the GIL | 01:14 |
| ayoung | effectively blocking all responses from the web server | 01:14 |
| ayoung | the two alternatives were to use a thread pool and to fork it off to a separate process. | 01:15 |
| *** bdpayne has joined #openstack-dev | 01:15 | |
| *** networkstatic has joined #openstack-dev | 01:15 | |
| termie | ayoung: i don't think there was duplication of user/pass, the tokens came from rackspace in their first implementation of keystone | 01:15 |
| SpamapS | ayoung: very interesting conundrum there | 01:15 |
| ayoung | The separate process is actually the cleaner solution, as the thread pool still has the GIL issue | 01:15 |
| termie | ayoung: i fought against using their design in openstack, not against adding the token functionality as it was already there | 01:16 |
| termie | ayoung: ec2 credentials did not exist in keystone and were added as an extension | 01:16 |
| ayoung | SpamapS, yep | 01:17 |
| *** amerine has quit IRC | 01:17 | |
| ayoung | SpamapS, one possible solution is to use NSS instead of openssl, but I am not 100% convinced it doesn't have the GIL issue either. | 01:18 |
| *** stevemar has joined #openstack-dev | 01:18 | |
| termie | ayoung: i think Trusts Extension will make a fine extension and a terrible part of core | 01:18 |
| *** fedgoat has joined #openstack-dev | 01:18 | |
| termie | ayoung: let's move it | 01:18 |
| SpamapS | ayoung: right any C library is going to have to be very careful to remain thread safe and not end up in the GIL | 01:18 |
| ayoung | the NSS command line tool didn't allow stripping down the tokens as small. | 01:18 |
| *** topol has joined #openstack-dev | 01:18 | |
| ayoung | termie, let me fix it first....I've been trying to get back to the patch on it all night. | 01:18 |
| ayoung | SpamapS, and doing C code in the context of OpenStack is beyond the acceptable for the project. | 01:19 |
| SpamapS | ayoung: what about having a resident daemon that just sits there talking to keystone via a unix socket? Same IPC overhead, w/o the forks | 01:19 |
| ayoung | SpamapS, also considered, and might be implemented if called for. | 01:20 |
| ayoung | But it still is serializing requests | 01:20 |
| ayoung | popen is unix level parallelization | 01:20 |
| *** stevebaker has quit IRC | 01:20 | |
| ayoung | it is a simpler implementation. | 01:21 |
| SpamapS | ayoung: I ran into an issue last night where forks failed because of OOM .. not a normal condition, but it basically left keystone in an undefined state and with thousands of unreaped pipes. | 01:21 |
| ayoung | Interesting.... | 01:21 |
| ayoung | bug report for that, please | 01:21 |
| SpamapS | ayoung: I'm trying to reproduce. OOM killer makes that tricky ;) | 01:21 |
| salv-orlando | hi folks. In my env Quantum is pretty much not logging anything since "870f9c3 sync Oslo Grizzly stable branch with Quantum". Do I need to tweak something in the config? There's nothing obvious in the diff | 01:21 |
| *** stevebaker_ has quit IRC | 01:21 | |
| ayoung | SpamapS, regardless, report the bug, and update once you can reproduce. | 01:21 |
| ayoung | Was the OOM due to Keystone? | 01:21 |
| *** READ10 has quit IRC | 01:22 | |
| SpamapS | ayoung: the box was running devstack in 1G (with heat and quantum) ... it was almost out of memory just after stack.sh returned | 01:23 |
| *** adjohn has quit IRC | 01:23 | |
| SpamapS | ayoung: but left it running overnight.. and when returned.. OOM's.. forks.. too many open files.. | 01:23 |
| SpamapS | ayoung: I had to kill that to get some time sensitive things done, but I'm working on reproducing now | 01:23 |
| *** adjohn has joined #openstack-dev | 01:23 | |
| fedgoat | Anyone know why Folsom+Quantum rootwrap fails to write iptables rules after issuing iptables-restore | 01:24 |
| *** markmcclain has joined #openstack-dev | 01:27 | |
| *** stevebaker_ has joined #openstack-dev | 01:27 | |
| *** adjohn has quit IRC | 01:29 | |
| *** marun has quit IRC | 01:29 | |
| *** obondarev_ has quit IRC | 01:29 | |
| *** enikanorov-w has quit IRC | 01:29 | |
| ayoung | termie, let me think about it. | 01:29 |
| *** enikanorov-w has joined #openstack-dev | 01:29 | |
| termie | ayoung: it'll feel sooo good | 01:29 |
| *** mrodden has joined #openstack-dev | 01:29 | |
| termie | ayoung: to have this perfectly contained extension | 01:29 |
| termie | ayoung: you'll be making keystone work for YOU | 01:29 |
| ayoung | Its a lot of churn several weeks after code freeze, and I am not sure I buy the argument. | 01:30 |
| ayoung | Heh\ | 01:30 |
| termie | ayoung: you totally buy the argument | 01:30 |
| termie | ayoung: it _does_ make a perfect example of an extension | 01:30 |
| ayoung | Hah | 01:30 |
| *** enikanorov_ has joined #openstack-dev | 01:30 | |
| *** obondarev has joined #openstack-dev | 01:30 | |
| termie | ayoung: and it isn't really churn, it is reducing the load of the code | 01:30 |
| *** pabelanger has joined #openstack-dev | 01:30 | |
| *** novas0x2a|lapto1 has quit IRC | 01:30 | |
| ayoung | I want you to know that after seeing your instagram with the black mustache, I read everything you say with the accent of the lead singer of Golgol Bordello | 01:31 |
| ayoung | Or maybe Frank Zappa, it varies | 01:31 |
| *** ogelbukh has quit IRC | 01:31 | |
| termie | ayoung: oh man the bordello guy is awesome | 01:31 |
| termie | ayoung: so is zappa, but in a different way | 01:32 |
| *** enikanorov has quit IRC | 01:32 | |
| *** enikanorov_ has quit IRC | 01:33 | |
| openstackgerrit | A change was merged to openstack/quantum: Imported Translations from Transifex https://review.openstack.org/24388 | 01:34 |
| *** enikanorov has joined #openstack-dev | 01:34 | |
| *** ogelbukh has joined #openstack-dev | 01:34 | |
| *** Mandell has quit IRC | 01:36 | |
| *** dsanders has quit IRC | 01:39 | |
| *** dolphm has joined #openstack-dev | 01:42 | |
| dolphm | vishy: o/ | 01:43 |
| dolphm | vishy: still poking at the same issue? | 01:44 |
| *** mrodden1 has joined #openstack-dev | 01:46 | |
| *** vkmc has quit IRC | 01:46 | |
| *** mrodden has quit IRC | 01:46 | |
| vishy | dolphm: well i figured it out | 01:47 |
| vishy | dolphm: got a work around but we need to update the client libraries to parse v3 catalogs properly | 01:47 |
| *** stevemar has quit IRC | 01:48 | |
| *** HenryG has quit IRC | 01:48 | |
| *** yaguang has joined #openstack-dev | 01:54 | |
| openstackgerrit | A change was merged to openstack/nova: List ConsoleTypeInvalid as a client exception. https://review.openstack.org/24248 | 01:55 |
| *** stevebaker_ has quit IRC | 01:56 | |
| *** zzs has joined #openstack-dev | 01:56 | |
| *** zb has joined #openstack-dev | 01:59 | |
| *** pixelbeat has quit IRC | 01:59 | |
| *** markwash has joined #openstack-dev | 01:59 | |
| *** dprince has quit IRC | 02:00 | |
| *** zaneb has quit IRC | 02:02 | |
| openstackgerrit | A change was merged to openstack/nova: Force nova to use keystone v2.0 for auth_token https://review.openstack.org/24386 | 02:05 |
| openstackgerrit | A change was merged to openstack/nova: Remove sqlalchemy calling back to DB API https://review.openstack.org/24372 | 02:05 |
| *** alexxu has joined #openstack-dev | 02:06 | |
| openstackgerrit | A change was merged to openstack/nova: Fix cells instance deletion https://review.openstack.org/24252 | 02:07 |
| *** sacharya has joined #openstack-dev | 02:08 | |
| *** alop has quit IRC | 02:10 | |
| *** obondarev has quit IRC | 02:10 | |
| *** stevebaker_ has joined #openstack-dev | 02:12 | |
| *** obondarev has joined #openstack-dev | 02:13 | |
| *** markmcclain has quit IRC | 02:13 | |
| *** jcmartin has quit IRC | 02:14 | |
| *** stevebaker_ has quit IRC | 02:17 | |
| *** stevebaker has joined #openstack-dev | 02:17 | |
| *** pabelanger has quit IRC | 02:17 | |
| *** fedgoat has quit IRC | 02:22 | |
| *** fedgoat has joined #openstack-dev | 02:23 | |
| *** optyx1 has joined #openstack-dev | 02:24 | |
| *** Ryan_Lane has quit IRC | 02:28 | |
| *** fedgoat has quit IRC | 02:30 | |
| *** jasdeepH has quit IRC | 02:31 | |
| crazed | hm, anyone able to give some advice as to why self.identity_man.create_user seems to fail to actually create a user in the live ldap environment vs the faked ldap setup | 02:31 |
| *** adjohn has joined #openstack-dev | 02:34 | |
| *** networkstatic has quit IRC | 02:36 | |
| *** adjohn_ has joined #openstack-dev | 02:37 | |
| *** Tross has quit IRC | 02:37 | |
| *** adjohn has quit IRC | 02:38 | |
| *** sacharya has quit IRC | 02:39 | |
| *** sacharya has joined #openstack-dev | 02:39 | |
| *** ayoung has quit IRC | 02:40 | |
| *** darjeeling has quit IRC | 02:42 | |
| *** pabelanger has joined #openstack-dev | 02:43 | |
| *** aeperezt has quit IRC | 02:46 | |
| crazed | seems to be using the manager fails but using the api succeeds | 02:47 |
| *** bdpayne has quit IRC | 02:48 | |
| *** morganfainberg has quit IRC | 02:50 | |
| *** stevebaker has quit IRC | 02:50 | |
| *** zzs has quit IRC | 02:52 | |
| *** alexpilotti has quit IRC | 02:53 | |
| *** sandywalsh has quit IRC | 02:55 | |
| openstackgerrit | A change was merged to openstack/keystone: Added test cases to improve LDAP project testing https://review.openstack.org/24023 | 02:56 |
| *** ijw has quit IRC | 02:58 | |
| *** martine has joined #openstack-dev | 02:58 | |
| *** Tross has joined #openstack-dev | 02:58 | |
| *** garyk has quit IRC | 03:01 | |
| *** salv-orlando has quit IRC | 03:01 | |
| *** salv-orlando has joined #openstack-dev | 03:02 | |
| openstackgerrit | A change was merged to openstack/keystone: Migrate roles from metadata to user_project_metadata https://review.openstack.org/23979 | 03:03 |
| *** Tross has quit IRC | 03:09 | |
| *** jcmartin has joined #openstack-dev | 03:10 | |
| *** jbresnah has quit IRC | 03:10 | |
| *** jbresnah has joined #openstack-dev | 03:10 | |
| *** garyk has joined #openstack-dev | 03:14 | |
| *** melwitt has quit IRC | 03:14 | |
| *** Tross has joined #openstack-dev | 03:16 | |
| *** Tross has quit IRC | 03:21 | |
| *** jasdeepH has joined #openstack-dev | 03:21 | |
| *** jcmartin has quit IRC | 03:21 | |
| *** Ryan_Lane has joined #openstack-dev | 03:22 | |
| *** markwash has quit IRC | 03:25 | |
| *** bdpayne has joined #openstack-dev | 03:26 | |
| *** darjeeling has joined #openstack-dev | 03:29 | |
| *** optyx1 has quit IRC | 03:29 | |
| *** optyx1 has joined #openstack-dev | 03:29 | |
| *** sthaha has quit IRC | 03:32 | |
| *** stevebaker has joined #openstack-dev | 03:32 | |
| *** Mandell has joined #openstack-dev | 03:32 | |
| *** hemna has joined #openstack-dev | 03:32 | |
| *** stevebaker has quit IRC | 03:38 | |
| *** darjeeling has quit IRC | 03:41 | |
| *** amerine has joined #openstack-dev | 03:41 | |
| *** darjeeling has joined #openstack-dev | 03:41 | |
| *** markwash has joined #openstack-dev | 03:42 | |
| *** jimfehlig has quit IRC | 03:42 | |
| *** colinmcnamara has quit IRC | 03:43 | |
| *** colinmcnamara has joined #openstack-dev | 03:44 | |
| *** stevebaker has joined #openstack-dev | 03:46 | |
| *** darjeeling has quit IRC | 03:46 | |
| openstackgerrit | A change was merged to openstack/keystone: duplicated trust tests https://review.openstack.org/23695 | 03:48 |
| *** adjohn_ has quit IRC | 03:48 | |
| *** stevebaker has quit IRC | 03:49 | |
| *** vipul is now known as vipul|away | 03:49 | |
| *** vipul|away is now known as vipul | 03:49 | |
| *** Tross has joined #openstack-dev | 03:51 | |
| *** stevebaker has joined #openstack-dev | 03:52 | |
| crazed | hehe progress FAILED (SKIP=41, errors=2, failures=2) | 03:58 |
| *** jcmartin has joined #openstack-dev | 03:59 | |
| *** SergeyLukjanov has joined #openstack-dev | 04:02 | |
| crazed | alright sleep time, will fix the last 4 tomorrow | 04:03 |
| *** vipul is now known as vipul|away | 04:04 | |
| *** stevebaker has quit IRC | 04:07 | |
| *** martine has quit IRC | 04:09 | |
| *** alop has joined #openstack-dev | 04:10 | |
| *** aditirav has joined #openstack-dev | 04:10 | |
| *** stevebaker has joined #openstack-dev | 04:11 | |
| *** martine has joined #openstack-dev | 04:11 | |
| *** nati_ueno has joined #openstack-dev | 04:11 | |
| *** vipul|away is now known as vipul | 04:13 | |
| *** sthaha has joined #openstack-dev | 04:14 | |
| *** markwash has quit IRC | 04:15 | |
| *** sirushti has quit IRC | 04:23 | |
| *** pabelanger has quit IRC | 04:24 | |
| *** ociuhandu has quit IRC | 04:26 | |
| *** navid_ has joined #openstack-dev | 04:33 | |
| *** hemna has quit IRC | 04:36 | |
| *** anniec has quit IRC | 04:37 | |
| *** nunosantos has quit IRC | 04:42 | |
| *** rushiagr has joined #openstack-dev | 04:42 | |
| *** sride has joined #openstack-dev | 04:43 | |
| *** sandeepr has joined #openstack-dev | 04:43 | |
| *** rushiagr has joined #openstack-dev | 04:44 | |
| *** martine has quit IRC | 04:44 | |
| *** beagles has quit IRC | 04:46 | |
| *** manas has joined #openstack-dev | 04:46 | |
| *** sirushti has joined #openstack-dev | 04:49 | |
| *** bdpayne has quit IRC | 04:50 | |
| *** ewindisch has quit IRC | 04:51 | |
| *** stevebaker has quit IRC | 04:52 | |
| *** stevebaker has joined #openstack-dev | 04:52 | |
| *** rushiagr1 has joined #openstack-dev | 04:52 | |
| *** rushiagr has quit IRC | 04:53 | |
| *** rushiagr has joined #openstack-dev | 04:53 | |
| *** amerine has quit IRC | 04:53 | |
| *** rushiagr1 has quit IRC | 04:57 | |
| *** colinmcnamara has quit IRC | 04:58 | |
| *** beagles has joined #openstack-dev | 04:58 | |
| *** adjohn has joined #openstack-dev | 04:59 | |
| *** aditirav has quit IRC | 05:02 | |
| *** aditirav has joined #openstack-dev | 05:02 | |
| *** adjohn has quit IRC | 05:04 | |
| *** stevebaker has quit IRC | 05:06 | |
| enikanorov | devstack folks, please review, it needs 1 more approval: https://review.openstack.org/#/c/23808/ | 05:08 |
| *** otherwiseguy has quit IRC | 05:10 | |
| *** alexxu has quit IRC | 05:10 | |
| *** colinmcnamara has joined #openstack-dev | 05:10 | |
| *** hattwick has quit IRC | 05:12 | |
| *** alexxu has joined #openstack-dev | 05:14 | |
| *** SergeyLukjanov has quit IRC | 05:15 | |
| *** koolhead17 has joined #openstack-dev | 05:16 | |
| *** mscott has quit IRC | 05:16 | |
| *** colinmcnamara has quit IRC | 05:18 | |
| *** lloydde has joined #openstack-dev | 05:20 | |
| *** optyx1 has quit IRC | 05:22 | |
| *** amerine has joined #openstack-dev | 05:23 | |
| *** darjeeling has joined #openstack-dev | 05:23 | |
| *** anniec has joined #openstack-dev | 05:23 | |
| *** darjeeli_ has joined #openstack-dev | 05:24 | |
| *** darjeeling has quit IRC | 05:28 | |
| *** markwash has joined #openstack-dev | 05:30 | |
| *** syst3mw0rm has quit IRC | 05:32 | |
| *** kbringard has joined #openstack-dev | 05:33 | |
| *** gongysh has joined #openstack-dev | 05:36 | |
| *** sirushti has quit IRC | 05:37 | |
| *** yaguang has quit IRC | 05:38 | |
| *** markwash has quit IRC | 05:39 | |
| *** garyk has quit IRC | 05:43 | |
| *** sirushti has joined #openstack-dev | 05:49 | |
| *** davidha has joined #openstack-dev | 05:55 | |
| *** sacharya has quit IRC | 06:02 | |
| *** andrewbogott is now known as andrewbogott_afk | 06:03 | |
| *** lloydde has quit IRC | 06:05 | |
| *** SergeyLukjanov has joined #openstack-dev | 06:07 | |
| *** alop has quit IRC | 06:07 | |
| *** jasdeepH has quit IRC | 06:07 | |
| *** markwash has joined #openstack-dev | 06:08 | |
| *** glikson has joined #openstack-dev | 06:17 | |
| *** fifieldt has quit IRC | 06:21 | |
| *** olaph has joined #openstack-dev | 06:26 | |
| *** yaguang has joined #openstack-dev | 06:27 | |
| *** olaph_ has quit IRC | 06:28 | |
| *** SergeyLukjanov has quit IRC | 06:29 | |
| *** seats has quit IRC | 06:31 | |
| *** seats has joined #openstack-dev | 06:31 | |
| *** kbringard has quit IRC | 06:32 | |
| *** SergeyLukjanov has joined #openstack-dev | 06:36 | |
| *** koolhead17 has quit IRC | 06:36 | |
| *** reed has quit IRC | 06:40 | |
| *** topol has quit IRC | 06:40 | |
| *** markwash has quit IRC | 06:41 | |
| *** topol has joined #openstack-dev | 06:41 | |
| *** tserong_ has joined #openstack-dev | 06:42 | |
| *** tserong_ has joined #openstack-dev | 06:42 | |
| *** tserong has quit IRC | 06:43 | |
| *** mrunge has joined #openstack-dev | 06:43 | |
| *** garyk has joined #openstack-dev | 06:45 | |
| *** gongysh has quit IRC | 06:45 | |
| *** tserong_ is now known as tserong | 06:48 | |
| *** nati_ueno has quit IRC | 06:49 | |
| *** matiu has quit IRC | 06:53 | |
| *** adjohn has joined #openstack-dev | 06:53 | |
| *** nati_ueno has joined #openstack-dev | 06:59 | |
| *** adjohn has quit IRC | 06:59 | |
| *** glikson has quit IRC | 07:00 | |
| *** eglynn has quit IRC | 07:00 | |
| *** koert has joined #openstack-dev | 07:01 | |
| *** reed has joined #openstack-dev | 07:03 | |
| *** davidha has quit IRC | 07:12 | |
| *** lloydde has joined #openstack-dev | 07:16 | |
| *** zaitcev has quit IRC | 07:17 | |
| *** topol has quit IRC | 07:17 | |
| *** Ruetobas has quit IRC | 07:18 | |
| *** lloydde has quit IRC | 07:20 | |
| *** eglynn has joined #openstack-dev | 07:22 | |
| *** Ruetobas has joined #openstack-dev | 07:22 | |
| *** mmagr has joined #openstack-dev | 07:23 | |
| *** dolphm has quit IRC | 07:25 | |
| *** giulivo has joined #openstack-dev | 07:27 | |
| *** giroro_ has joined #openstack-dev | 07:33 | |
| *** Ruetobas has quit IRC | 07:35 | |
| *** jcmartin has quit IRC | 07:36 | |
| *** eglynn has quit IRC | 07:37 | |
| *** varto has joined #openstack-dev | 07:40 | |
| *** psedlak has quit IRC | 07:44 | |
| *** glikson has joined #openstack-dev | 07:48 | |
| *** alexxu has quit IRC | 07:54 | |
| *** nati_ueno has quit IRC | 07:58 | |
| *** Nachi has joined #openstack-dev | 07:58 | |
| *** reidrac has joined #openstack-dev | 08:00 | |
| *** tomoe_ has quit IRC | 08:04 | |
| *** flaper87 has joined #openstack-dev | 08:04 | |
| *** psedlak has joined #openstack-dev | 08:05 | |
| *** rafaduran has joined #openstack-dev | 08:08 | |
| *** boden has joined #openstack-dev | 08:08 | |
| *** adjohn has joined #openstack-dev | 08:11 | |
| *** thouveng has joined #openstack-dev | 08:11 | |
| *** amerine has quit IRC | 08:12 | |
| *** salv-orlando has quit IRC | 08:12 | |
| *** salv-orlando has joined #openstack-dev | 08:13 | |
| *** egallen has joined #openstack-dev | 08:14 | |
| *** jgallard has joined #openstack-dev | 08:14 | |
| *** avishay has joined #openstack-dev | 08:14 | |
| *** adjohn has quit IRC | 08:15 | |
| *** psedlak has quit IRC | 08:17 | |
| *** psedlak has joined #openstack-dev | 08:17 | |
| *** egallen has quit IRC | 08:19 | |
| *** egallen has joined #openstack-dev | 08:19 | |
| *** locke1051 has quit IRC | 08:22 | |
| *** darjeeling has joined #openstack-dev | 08:22 | |
| *** darjeeli_ has quit IRC | 08:23 | |
| *** jgallard has quit IRC | 08:24 | |
| *** xga has joined #openstack-dev | 08:24 | |
| *** alexxu has joined #openstack-dev | 08:26 | |
| *** doude has joined #openstack-dev | 08:38 | |
| *** alexisT has joined #openstack-dev | 08:40 | |
| *** zoresvit has joined #openstack-dev | 08:40 | |
| *** sulo_ has joined #openstack-dev | 08:42 | |
| *** darjeeli_ has joined #openstack-dev | 08:42 | |
| *** sulo_ has quit IRC | 08:44 | |
| *** darjeeli_ has quit IRC | 08:45 | |
| *** darjeeling has quit IRC | 08:46 | |
| *** mattymo has quit IRC | 08:46 | |
| *** mattymo has joined #openstack-dev | 08:46 | |
| *** sulo_ has joined #openstack-dev | 08:49 | |
| *** dev_sa has joined #openstack-dev | 08:50 | |
| *** rushiagr1 has joined #openstack-dev | 08:52 | |
| *** rushiagr has quit IRC | 08:52 | |
| *** pixelbeat has joined #openstack-dev | 08:53 | |
| *** pasquier-s has quit IRC | 08:54 | |
| *** corXi has joined #openstack-dev | 08:55 | |
| *** ndipanov has joined #openstack-dev | 08:55 | |
| *** zoresvit has quit IRC | 08:58 | |
| *** egallen has quit IRC | 08:59 | |
| *** eglynn has joined #openstack-dev | 09:02 | |
| *** johnthetubaguy has joined #openstack-dev | 09:04 | |
| *** zoresvit has joined #openstack-dev | 09:05 | |
| *** alexxu has quit IRC | 09:05 | |
| *** deagle has left #openstack-dev | 09:06 | |
| *** afazekas has joined #openstack-dev | 09:07 | |
| *** bogdando has joined #openstack-dev | 09:07 | |
| *** jbresnah has quit IRC | 09:08 | |
| *** boris-42 has joined #openstack-dev | 09:11 | |
| *** koolhead17 has joined #openstack-dev | 09:12 | |
| *** jbr_ has joined #openstack-dev | 09:13 | |
| *** dosaboy has joined #openstack-dev | 09:14 | |
| *** pfreund has joined #openstack-dev | 09:17 | |
| *** adjohn has joined #openstack-dev | 09:21 | |
| *** adjohn has quit IRC | 09:25 | |
| *** adjohn has joined #openstack-dev | 09:25 | |
| *** jpich has joined #openstack-dev | 09:26 | |
| *** zb is now known as zaneb | 09:30 | |
| *** Nachi has quit IRC | 09:30 | |
| *** nati_ueno has joined #openstack-dev | 09:31 | |
| *** [1]glikson has joined #openstack-dev | 09:35 | |
| *** nati_ueno has quit IRC | 09:35 | |
| *** hattwick has joined #openstack-dev | 09:35 | |
| *** henrynash has joined #openstack-dev | 09:37 | |
| *** glikson has quit IRC | 09:38 | |
| *** [1]glikson is now known as glikson | 09:38 | |
| *** SergeyLukjanov has quit IRC | 09:43 | |
| *** jamespage_ has joined #openstack-dev | 09:45 | |
| *** darraghb has joined #openstack-dev | 09:46 | |
| *** SergeyLukjanov has joined #openstack-dev | 09:49 | |
| *** dev_sa has quit IRC | 09:59 | |
| *** SergeyLukjanov has quit IRC | 10:04 | |
| *** psedlak has quit IRC | 10:05 | |
| *** psedlak_ has joined #openstack-dev | 10:05 | |
| *** egallen has joined #openstack-dev | 10:06 | |
| *** psedlak_ is now known as psedlak | 10:06 | |
| *** danpb has joined #openstack-dev | 10:08 | |
| *** HenryG has joined #openstack-dev | 10:08 | |
| *** Hg_ has joined #openstack-dev | 10:10 | |
| *** fire has joined #openstack-dev | 10:10 | |
| *** m4xmr has joined #openstack-dev | 10:10 | |
| *** markmc has joined #openstack-dev | 10:12 | |
| *** HenryG has quit IRC | 10:14 | |
| *** bswartz has quit IRC | 10:15 | |
| *** almaisan-away is now known as al-maisan | 10:15 | |
| *** SergeyLukjanov has joined #openstack-dev | 10:18 | |
| *** m4xmr has left #openstack-dev | 10:26 | |
| openstackgerrit | A change was merged to openstack/python-keystoneclient: Make keystone client handle the response code 300. https://review.openstack.org/23661 | 10:32 |
| *** shang has quit IRC | 10:34 | |
| *** topol has joined #openstack-dev | 10:35 | |
| *** salv-orlando has quit IRC | 10:37 | |
| *** yaguang has quit IRC | 10:38 | |
| *** sulo_ has quit IRC | 10:39 | |
| *** Yada has joined #openstack-dev | 10:40 | |
| *** adjohn has quit IRC | 10:40 | |
| *** al-maisan is now known as almaisan-away | 10:41 | |
| *** trapni has joined #openstack-dev | 10:43 | |
| *** boris-42 has quit IRC | 10:46 | |
| *** sulo_ has joined #openstack-dev | 10:49 | |
| *** jamespage_ has quit IRC | 10:50 | |
| *** beagles has quit IRC | 10:52 | |
| *** beagles has joined #openstack-dev | 10:52 | |
| *** [1]glikson has joined #openstack-dev | 11:04 | |
| *** yamahata_ has joined #openstack-dev | 11:05 | |
| *** darjeeling has joined #openstack-dev | 11:06 | |
| *** glikson has quit IRC | 11:08 | |
| *** [1]glikson is now known as glikson | 11:08 | |
| *** halfss has quit IRC | 11:10 | |
| *** rkukura has quit IRC | 11:11 | |
| openstackgerrit | A change was merged to openstack/python-keystoneclient: Make auth_token lazy load the auth_version. https://review.openstack.org/24370 | 11:11 |
| *** egallen has quit IRC | 11:19 | |
| *** egallen has joined #openstack-dev | 11:20 | |
| *** matiu has joined #openstack-dev | 11:23 | |
| *** matiu has quit IRC | 11:23 | |
| *** matiu has joined #openstack-dev | 11:23 | |
| *** sandeepr has quit IRC | 11:24 | |
| *** alobbs1 has quit IRC | 11:25 | |
| *** alobbs has joined #openstack-dev | 11:25 | |
| openstackgerrit | A change was merged to openstack/swift: Remove check for valid Origin for the "actual request". https://review.openstack.org/24362 | 11:29 |
| *** anuj has joined #openstack-dev | 11:32 | |
| *** alexxu has joined #openstack-dev | 11:34 | |
| *** egallen has quit IRC | 11:38 | |
| *** rnirmal has joined #openstack-dev | 11:39 | |
| *** rnirmal has quit IRC | 11:40 | |
| *** rnirmal has joined #openstack-dev | 11:40 | |
| *** doude has quit IRC | 11:43 | |
| *** doude has joined #openstack-dev | 11:43 | |
| *** jamielennox has quit IRC | 11:44 | |
| *** manas has quit IRC | 11:46 | |
| *** pcm_ has joined #openstack-dev | 11:52 | |
| *** aditirav_ has joined #openstack-dev | 11:53 | |
| *** olaph_ has joined #openstack-dev | 11:53 | |
| *** SunilThaha has joined #openstack-dev | 11:54 | |
| *** SunilThaha has quit IRC | 11:54 | |
| *** martine_ has joined #openstack-dev | 11:55 | |
| *** aditirav has quit IRC | 11:56 | |
| *** aditirav_ has quit IRC | 11:56 | |
| *** aditirav has joined #openstack-dev | 11:56 | |
| *** olaph has quit IRC | 11:56 | |
| *** martine_ has quit IRC | 11:56 | |
| *** davetucker has joined #openstack-dev | 11:58 | |
| *** johnthetubaguy1 has joined #openstack-dev | 12:00 | |
| *** johnthetubaguy has quit IRC | 12:02 | |
| *** vkmc has joined #openstack-dev | 12:02 | |
| sride | Hi | 12:05 |
| sride | I am trying to setup devstack for multi hosts | 12:06 |
| sride | but it doesn't seem to work | 12:06 |
| sride | can someone help me with it | 12:06 |
| *** dprince has joined #openstack-dev | 12:06 | |
| *** salv-orlando has joined #openstack-dev | 12:11 | |
| *** zul has joined #openstack-dev | 12:11 | |
| *** sirushti has quit IRC | 12:19 | |
| *** salv-orlando has quit IRC | 12:21 | |
| *** sgordon has joined #openstack-dev | 12:21 | |
| *** martine has joined #openstack-dev | 12:25 | |
| *** zul has quit IRC | 12:27 | |
| *** aloga has quit IRC | 12:31 | |
| *** aloga has joined #openstack-dev | 12:31 | |
| matiu | Should I be filing bugs to describe features ? | 12:32 |
| matiu | or is it that a feature is a blueprint | 12:32 |
| *** matiu has left #openstack-dev | 12:32 | |
| *** matiu has joined #openstack-dev | 12:32 | |
| matiu | Or is that a feature goes in a blueprint | 12:32 |
| matiu | and something that's broken goes into a bug report ? | 12:33 |
| danpb | matiu: depends if you intend to implement the blueprint yourself or not | 12:33 |
| matiu | yeah doing it myself | 12:33 |
| danpb | matiu: if you're merely wanting to request a feature, then file a bug | 12:33 |
| danpb | but if you're doing it yourself, then skip the bug and just file a blueprint | 12:33 |
| danpb | and create a wiki page to describe what you're proposing to implement and add that wiki link to the blueprint | 12:34 |
| matiu | ah ok. So is it ok for this time what I've done: https://bugs.launchpad.net/nova/+bug/1154790 | 12:34 |
| uvirtbot | Launchpad bug 1154790 in nova "Scheduler and Cells need minimum reserved hosts" [Undecided,In progress] | 12:34 |
| matiu | it's just a tiny thing this time around.. | 12:34 |
| matiu | next time, for new functionality, I'll do a blueprint instead of a bug though | 12:35 |
| matiu | thanks danpb | 12:35 |
| danpb | yeah depends just how big the new feature is - if it is a small thing the blueprint is unneccessary overhead & a bug would suffice | 12:36 |
| danpb | blueprints are important if you need to explain / outline design information to people | 12:36 |
| matiu | ah perfect | 12:36 |
| matiu | now I understand much better :) | 12:36 |
| matiu | so would you use a blueprint for a complicated bug fix ? | 12:37 |
| matiu | like, if the fix required refactoring and stuff ? | 12:37 |
| danpb | yep, if there was a need for design discussions on the refactoring or new code | 12:39 |
| matiu | thanks danpb, you have broadened my understanding :) | 12:40 |
| *** salv-orlando has joined #openstack-dev | 12:45 | |
| *** topol has quit IRC | 12:46 | |
| *** bswartz has joined #openstack-dev | 12:46 | |
| *** anuj has quit IRC | 12:49 | |
| *** egallen has joined #openstack-dev | 12:49 | |
| *** mkollaro has joined #openstack-dev | 12:50 | |
| *** sirushti has joined #openstack-dev | 12:52 | |
| *** salv-orlando has quit IRC | 12:53 | |
| *** jruzicka has joined #openstack-dev | 12:55 | |
| *** jhesketh has quit IRC | 12:56 | |
| *** egallen has quit IRC | 12:57 | |
| *** mkollaro has quit IRC | 12:57 | |
| *** koolhead17 has quit IRC | 12:57 | |
| *** koert has joined #openstack-dev | 12:58 | |
| *** salgado_ has joined #openstack-dev | 13:02 | |
| *** salgado_ has quit IRC | 13:04 | |
| *** akscram has quit IRC | 13:05 | |
| *** gray-- has joined #openstack-dev | 13:07 | |
| *** alunduil has quit IRC | 13:08 | |
| *** derekh has joined #openstack-dev | 13:09 | |
| *** timello has joined #openstack-dev | 13:10 | |
| *** doude has quit IRC | 13:12 | |
| *** aditirav_ has joined #openstack-dev | 13:12 | |
| *** aditirav_ has quit IRC | 13:13 | |
| *** rcj has joined #openstack-dev | 13:13 | |
| *** aditirav has quit IRC | 13:14 | |
| *** mkollaro has joined #openstack-dev | 13:14 | |
| *** akscram has joined #openstack-dev | 13:15 | |
| *** adalbas has joined #openstack-dev | 13:16 | |
| *** joesavak has joined #openstack-dev | 13:17 | |
| *** gray-- has quit IRC | 13:17 | |
| *** johnthetubaguy1 has quit IRC | 13:20 | |
| *** johnthetubaguy has joined #openstack-dev | 13:21 | |
| *** rushiagr1 has quit IRC | 13:25 | |
| *** bknudson has joined #openstack-dev | 13:26 | |
| *** romcheg has joined #openstack-dev | 13:27 | |
| *** gray-- has joined #openstack-dev | 13:28 | |
| *** akscram has quit IRC | 13:31 | |
| *** romcheg has left #openstack-dev | 13:31 | |
| *** bswartz has quit IRC | 13:32 | |
| *** rkukura has joined #openstack-dev | 13:35 | |
| *** ijw has joined #openstack-dev | 13:37 | |
| *** sride has quit IRC | 13:37 | |
| *** jruzicka has quit IRC | 13:38 | |
| *** ijw has quit IRC | 13:39 | |
| *** ijw has joined #openstack-dev | 13:40 | |
| *** spzala has joined #openstack-dev | 13:40 | |
| *** digitalsanctum has joined #openstack-dev | 13:41 | |
| *** aabes__ has joined #openstack-dev | 13:43 | |
| *** aabes__ is now known as aabes | 13:43 | |
| *** imsplitbit has joined #openstack-dev | 13:44 | |
| *** matiu has quit IRC | 13:44 | |
| *** jsavak has joined #openstack-dev | 13:45 | |
| *** akscram has joined #openstack-dev | 13:47 | |
| *** joesavak has quit IRC | 13:49 | |
| *** avishay has quit IRC | 13:50 | |
| *** READ10 has joined #openstack-dev | 13:53 | |
| *** jruzicka has joined #openstack-dev | 13:54 | |
| *** radez_g0n3 is now known as radez | 13:54 | |
| *** nunosantos has joined #openstack-dev | 13:54 | |
| *** jimfehlig has joined #openstack-dev | 13:56 | |
| *** dolphm has joined #openstack-dev | 13:57 | |
| *** sthaha has quit IRC | 13:59 | |
| *** akscram has quit IRC | 14:00 | |
| *** koolhead17 has joined #openstack-dev | 14:00 | |
| *** bswartz has joined #openstack-dev | 14:02 | |
| *** ayoung has joined #openstack-dev | 14:07 | |
| *** stevemar has joined #openstack-dev | 14:11 | |
| *** davetucker has quit IRC | 14:11 | |
| *** adalbas has quit IRC | 14:12 | |
| *** sacharya has joined #openstack-dev | 14:12 | |
| *** markmcclain has joined #openstack-dev | 14:12 | |
| *** otherwiseguy has joined #openstack-dev | 14:14 | |
| *** alexxu has quit IRC | 14:14 | |
| *** eharney has joined #openstack-dev | 14:15 | |
| *** lloydde has joined #openstack-dev | 14:15 | |
| *** eharney is now known as Guest16202 | 14:16 | |
| *** Guest16202 is now known as eharney | 14:16 | |
| *** eharney has joined #openstack-dev | 14:16 | |
| *** pabelanger has joined #openstack-dev | 14:18 | |
| *** dblundell has joined #openstack-dev | 14:19 | |
| *** topol has joined #openstack-dev | 14:20 | |
| *** akscram has joined #openstack-dev | 14:21 | |
| *** sacharya has quit IRC | 14:23 | |
| *** cloudchimp has joined #openstack-dev | 14:25 | |
| *** doude has joined #openstack-dev | 14:25 | |
| *** cp16net is now known as cp16net|away | 14:25 | |
| *** akscram has quit IRC | 14:26 | |
| *** mtreinish has joined #openstack-dev | 14:26 | |
| *** colinmcnamara has joined #openstack-dev | 14:29 | |
| *** adalbas has joined #openstack-dev | 14:31 | |
| *** varto has quit IRC | 14:31 | |
| *** aeperezt has joined #openstack-dev | 14:31 | |
| *** yamahata_ has quit IRC | 14:31 | |
| *** woodspa has joined #openstack-dev | 14:35 | |
| *** kbringard has joined #openstack-dev | 14:35 | |
| *** gordc has joined #openstack-dev | 14:36 | |
| *** SergeyLukjanov has quit IRC | 14:37 | |
| *** cppcabrera has joined #openstack-dev | 14:37 | |
| *** cppcabrera has quit IRC | 14:37 | |
| *** cppcabrera has joined #openstack-dev | 14:38 | |
| *** m4xmr has joined #openstack-dev | 14:39 | |
| *** medberry is now known as med_ | 14:40 | |
| *** edmund has joined #openstack-dev | 14:40 | |
| *** akscram has joined #openstack-dev | 14:40 | |
| *** egallen has joined #openstack-dev | 14:42 | |
| *** terryh has joined #openstack-dev | 14:44 | |
| *** navid_ has quit IRC | 14:45 | |
| *** cppcabrera has quit IRC | 14:47 | |
| ayoung | henrynash, dolphm a couple easy ones for you: https://review.openstack.org/#/c/23701/ https://review.openstack.org/#/c/24325/ | 14:47 |
| *** cppcabrera has joined #openstack-dev | 14:47 | |
| *** navid_ has joined #openstack-dev | 14:49 | |
| *** garyTh has joined #openstack-dev | 14:50 | |
| dolphm | ayoung: i'm reviewing your RC1 blocker as well | 14:52 |
| *** kpavel has joined #openstack-dev | 14:52 | |
| *** cppcabrera has left #openstack-dev | 14:52 | |
| *** rkukura has quit IRC | 14:52 | |
| *** yaguang has joined #openstack-dev | 14:54 | |
| *** sacharya has joined #openstack-dev | 14:54 | |
| *** colinmcnamara has quit IRC | 14:56 | |
| crazed | topol: got the live tests down to 2 errors and 2 fails | 14:56 |
| topol | crazed, thats awesome. Im so sorry but have been swamped with other stuff at work | 14:57 |
| *** kashyap has quit IRC | 14:57 | |
| *** kashyap has joined #openstack-dev | 14:58 | |
| topol | crazed, will you be uploading a new work in progress patch I can look at? | 14:58 |
| *** datsun180b has joined #openstack-dev | 14:58 | |
| *** rkukura has joined #openstack-dev | 14:59 | |
| *** alexryabkov has joined #openstack-dev | 14:59 | |
| *** [1]glikson has joined #openstack-dev | 14:59 | |
| *** john5223 has joined #openstack-dev | 15:01 | |
| *** glikson has quit IRC | 15:02 | |
| *** [1]glikson is now known as glikson | 15:02 | |
| *** mrodden1 has quit IRC | 15:02 | |
| *** lloydde has quit IRC | 15:02 | |
| davidkranz | ttx: We are going to discuss the proposals at the QA meeting today. Any idea of how many slots QA will have? | 15:06 |
| davidkranz | ttx: At the summit. | 15:07 |
| ttx | davidkranz: will be discussed starting tomorrow | 15:07 |
| ttx | davidkranz: let me check how much I have in my strawman | 15:07 |
| davidkranz | ttx: THanks. A minimum number would help. | 15:07 |
| crazed | topol: yeah it's uploaded | 15:07 |
| crazed | topol: no worries, also swamped here | 15:08 |
| ttx | davidkranz: 9-12 I think | 15:08 |
| davidkranz | ttx: OK, great. | 15:08 |
| crazed | topol: just really want my dereferencing patch accepted so i need to get this going | 15:08 |
| *** Gordonz has joined #openstack-dev | 15:08 | |
| topol | crazed what are the review links? | 15:09 |
| *** aabes has left #openstack-dev | 15:10 | |
| *** doude has quit IRC | 15:11 | |
| *** zoresvit has quit IRC | 15:11 | |
| crazed | topol: live tests: https://review.openstack.org/24237, deref patch: https://review.openstack.org/24139 | 15:11 |
| *** Gordonz has quit IRC | 15:11 | |
| *** jasdeepH has joined #openstack-dev | 15:12 | |
| *** Gordonz has joined #openstack-dev | 15:12 | |
| *** Mandell has quit IRC | 15:12 | |
| *** psedlak has quit IRC | 15:13 | |
| *** jgriffith has quit IRC | 15:14 | |
| *** ivoks has quit IRC | 15:14 | |
| topol | crazed, on the deref patch you will need to add a new unit test to test this function like ayoung mentioned. | 15:14 |
| *** digitalsanctum has quit IRC | 15:14 | |
| crazed | topol: for sure, i just want to get the live test stuff going first | 15:14 |
| topol | crazed, on the livetest are you stuck or just have more work to do? | 15:15 |
| *** lloydde has joined #openstack-dev | 15:15 | |
| *** ivoks has joined #openstack-dev | 15:15 | |
| *** ivoks has joined #openstack-dev | 15:15 | |
| ayoung | crazed, a nit, but please make sure you put a space between an URL you post and the comma, or the IRC clients assume the comma is part of the URL, and I get a 404 | 15:15 |
| *** salgado is now known as salgado-lunch | 15:15 | |
| *** jgriffith has joined #openstack-dev | 15:15 | |
| *** mmagr has quit IRC | 15:15 | |
| crazed | ayoung: sorry, yea i remember that being a problem in some terminals i've used | 15:16 |
| *** joesavak has joined #openstack-dev | 15:17 | |
| crazed | topol: i'm not really stuck, except on the enable mask test (test_user_enable_attribute_mask) | 15:17 |
| crazed | ran out of hours before i had to sleep and decided to put it off till today | 15:17 |
| *** cp16net|away is now known as cp16net | 15:18 | |
| *** colinmcnamara has joined #openstack-dev | 15:18 | |
| ayoung | crazed, so you know the history of the enable_attribute_mask madness, right? AD does enabled as a bit field in a larger attribute | 15:19 |
| ayoung | Open LDAP doesn't do that, so that test might not port over to the liveldap. | 15:19 |
| *** jsavak has quit IRC | 15:19 | |
| *** SergeyLukjanov has joined #openstack-dev | 15:20 | |
| crazed | hm interesting | 15:21 |
| *** pfreund has quit IRC | 15:21 | |
| *** jcmartin has joined #openstack-dev | 15:21 | |
| crazed | ayoung: i did read the bit about AD on the docs, what do you suggest we do about that for the live test? | 15:21 |
| *** digitalsanctum has joined #openstack-dev | 15:22 | |
| ayoung | crazed, I think it is OK to skip that one for Live | 15:22 |
| ayoung | crazed, let me look at it to confirm, but I don't think we can do that against openldap\ | 15:22 |
| ayoung | yeah, skip that test. Here is what it is doing | 15:23 |
| ayoung | CONF.ldap.user_enabled_mask = 2 | 15:23 |
| ayoung | CONF.ldap.user_enabled_default = 512 | 15:23 |
| ayoung | that is checking for a specific bit set in a bit field. | 15:23 |
| *** olaph_ has quit IRC | 15:23 | |
| crazed | cool, what is the right message for the skip? i see a bunch with notes about specific bugs | 15:24 |
| ayoung | raise nose.exc.SkipTest('Test is for Active Directory Only') | 15:24 |
| *** zoresvit has joined #openstack-dev | 15:25 | |
| crazed | thanks | 15:25 |
| *** olaph has joined #openstack-dev | 15:25 | |
| ayoung | raise nose.exc.SkipTest('Test because the backend is silly') | 15:25 |
| crazed | haha | 15:25 |
| ayoung | raise nose.exc.SkipTest('Test because we just refuse') | 15:25 |
| crazed | okay so it doesn't really matter | 15:25 |
| crazed | i'll go with the first one though | 15:25 |
| ayoung | Well, it matters to one specific LDAP server | 15:25 |
| ayoung | It might be possible to test against OpenLDAP, but people that run openLDAP or other standard DS are not going to use a bit field for enabled, it is a Microsoftism. | 15:26 |
| *** andrewbogott_afk is now known as andrewbogott | 15:27 | |
| ayoung | If the Ad people care enough about it, let them hack the config file to allow that test if the DS is AD or something. | 15:27 |
| crazed | fair enough | 15:27 |
| openstackgerrit | A change was merged to openstack/tempest: add find_stack_traces tool https://review.openstack.org/24233 | 15:28 |
| ayoung | crazed, BTW, feel free to update the live LDAP config file to something other than my home domain name | 15:28 |
| topol | ayoung, +1 good call | 15:28 |
| topol | crazed I posted some review comments | 15:28 |
| openstackgerrit | A change was merged to openstack/tempest: Switch to final 1.1.0 oslo.config release https://review.openstack.org/24219 | 15:29 |
| openstackgerrit | A change was merged to openstack/tempest: Add a test to list the security group rules https://review.openstack.org/23793 | 15:29 |
| openstackgerrit | A change was merged to openstack/tempest: fix the confused issue in server_client about list_server https://review.openstack.org/24294 | 15:29 |
| openstackgerrit | A change was merged to openstack/tempest: Convert try/expect/else as per new Tempest style. https://review.openstack.org/24403 | 15:29 |
| crazed | ayoung: yeah i was meaing to ask about that, i just have mine set to assume-unchanged in git for now | 15:29 |
| *** jcmartin has quit IRC | 15:29 | |
| *** capnkooc has joined #openstack-dev | 15:29 | |
| crazed | topol: thanks, i'll check them out | 15:29 |
| *** koert has quit IRC | 15:29 | |
| ayoung | crazed, lets make it right, here. Match what we do in devstack | 15:30 |
| *** markwash has joined #openstack-dev | 15:30 | |
| *** hemna has joined #openstack-dev | 15:30 | |
| *** mlavalle has joined #openstack-dev | 15:31 | |
| topol | ayoung +1, crazed do you know how to find what we do in devstack | 15:31 |
| ayoung | crazed, https://github.com/openstack-dev/devstack/tree/master/files/ldap | 15:31 |
| crazed | topol: ayoung, thanks | 15:32 |
| crazed | i haven't set up my devstack just yet | 15:32 |
| crazed | it's nice that keystone runs without a full environment | 15:32 |
| ayoung | crazed, probably should add a few itesm to the backend entities list..or remove it. | 15:32 |
| ayoung | I think that value is no longer used, vestige | 15:32 |
| crazed | yeah it's not used | 15:32 |
| crazed | i removed it from mine | 15:32 |
| *** lloydde has quit IRC | 15:33 | |
| ayoung | crazed feel free to remove it from backend_ldap.conf as well. | 15:33 |
| *** akscram has quit IRC | 15:33 | |
| ayoung | topol, crazed you guys want to see something cool? | 15:34 |
| crazed | sure | 15:34 |
| ayoung | I don't have a public server where I can show it, but when you get a chance, pull https://review.openstack.org/#/c/24443/ | 15:35 |
| topol | yes | 15:35 |
| ayoung | and run the keystone server. Then point a browser at it. | 15:35 |
| ayoung | 35357 or 5000 bot h work, I think. | 15:35 |
| termie | ayoung: good idea | 15:36 |
| crazed | very cool | 15:36 |
| topol | ayoung, looks very cool | 15:36 |
| ayoung | termie, thanks. | 15:36 |
| ayoung | Its just a Proof of concept. But I figure, get input early | 15:36 |
| ayoung | It works as far as getting a token. | 15:36 |
| *** mscott has joined #openstack-dev | 15:36 | |
| topol | ayoung, K | 15:37 |
| termie | ayoung: i think we didn't do anything like that before because all the web people were focused on horizon | 15:37 |
| *** lloydde has joined #openstack-dev | 15:37 | |
| ayoung | My original thought was that we could put the token into a secure cookie, but I am a little wary of building a XSRF attack in up front | 15:37 |
| *** akscram has joined #openstack-dev | 15:37 | |
| *** davidkranz has quit IRC | 15:37 | |
| ayoung | so, for now, you can't really do anything that needs auth. | 15:38 |
| *** lloydde has quit IRC | 15:38 | |
| *** mattymo has quit IRC | 15:38 | |
| ayoung | To do it "right" I think it would require a little bit of browser side javascript to pull the token out of the previous request, and add it to the next request. | 15:38 |
| termie | ayoung: avoiding xsrf is pretty straightforward, https://docs.djangoproject.com/en/dev/ref/contrib/csrf/#how-it-works | 15:38 |
| *** markmcclain has quit IRC | 15:38 | |
| *** davidkranz has joined #openstack-dev | 15:38 | |
| termie | ayoung: (i also build websites) | 15:38 |
| ayoung | termie, yeah. We had to do that For my last project. | 15:38 |
| *** lloydde has joined #openstack-dev | 15:39 | |
| chmouel | ayoung: any idea why launching the tests on auth_token are failing for me? http://pastie.org/pastes/6493296/text?key=86ejhn866lfnpp40imhssq, I have openssl version 1.0.1c-3ubuntu2.2 | 15:39 |
| *** lcheng has quit IRC | 15:40 | |
| termie | chmouel: bad pastie | 15:40 |
| termie | oh nvm | 15:40 |
| termie | comma | 15:40 |
| ayoung | chmouel, cert is not yet valid | 15:41 |
| openstackgerrit | A change was merged to openstack/tempest: Fix exception name in test_server_actions https://review.openstack.org/24384 | 15:41 |
| crazed | test_configurable_allowed_project_actions during update_project, why would that attempt to add a member attribute considering the member is already there? causes an ldap error with type or value exists | 15:41 |
| chmouel | ayoung: so heu what should I do to launch the tests ? (I am using virtualenv/tox) | 15:41 |
| ayoung | chmouel, sounds like you have a date/time issue. | 15:42 |
| chmouel | ayoung: ah could be my nfs mounted share | 15:42 |
| chmouel | ayoung: thanks | 15:42 |
| ayoung | I've not seen that problem, but it sounds like you generated a cert with a valid start time in the future | 15:42 |
| chmouel | ayoung: yep i mount my code on a nfs share and my vm has different tz | 15:42 |
| *** gyee has joined #openstack-dev | 15:43 | |
| *** bdpayne has joined #openstack-dev | 15:43 | |
| *** lloydde has quit IRC | 15:44 | |
| chmouel | ayoung: I confirm it works when run locally | 15:46 |
| *** kaushikc has joined #openstack-dev | 15:48 | |
| *** [1]glikson has joined #openstack-dev | 15:49 | |
| *** torandu has joined #openstack-dev | 15:49 | |
| *** psedlak has joined #openstack-dev | 15:50 | |
| ttx | jgriffith: still targeting today for cinder rc1 ? | 15:50 |
| *** rushiagr has joined #openstack-dev | 15:50 | |
| jgriffith | ttx: sighh... yes, but might need more time | 15:50 |
| jgriffith | ttx: not sure how long you're around tonight | 15:51 |
| ttx | jgriffith: I can show up around 2100 UTC and see where we are | 15:52 |
| jgriffith | ttx: if that works for you, I'd say just cut it then | 15:52 |
| ttx | or you just send me an email when you're ready. i don't really need you for the cut | 15:52 |
| *** glikson has quit IRC | 15:52 | |
| *** [1]glikson is now known as glikson | 15:52 | |
| ttx | (unlike for folsom, yay simplified procedure) | 15:52 |
| jgriffith | ttx: :) | 15:52 |
| jgriffith | ttx: Let's just plan on you doing it at 2100 or there abouts (whenever works for you) | 15:53 |
| ttx | ok | 15:53 |
| jgriffith | ttx: Thanks | 15:53 |
| ttx | notmyname: ping | 15:53 |
| *** kashyap has quit IRC | 15:54 | |
| ayoung | dolphm, checkout https://review.openstack.org/#/c/24443/ when you have some time | 15:54 |
| gyee | ayoung, are you introduction federationness? | 15:55 |
| gyee | introducing | 15:56 |
| *** jgallard has joined #openstack-dev | 15:56 | |
| ayoung | gyee, no, progressive enhancement | 15:56 |
| gyee | ayoung, that login xml looks like a piece out of federation | 15:57 |
| ayoung | It is as simple a transform as I can think of. One thing it will need is a smart way to lable the tags for CSS to make use of | 15:58 |
| ayoung | it is not login xml | 15:58 |
| ayoung | it is login simplistic HTML | 15:58 |
| termie | lulz | 15:58 |
| ayoung | well, xhtml...must have copied from the wrong website | 15:59 |
| *** kashyap has joined #openstack-dev | 15:59 | |
| ayoung | and yes, it has bugs, now that I look at the source | 16:00 |
| gyee | wtf's xhtml? :) | 16:00 |
| termie | it is too early in the day to have given up | 16:01 |
| termie | but i think i just did | 16:01 |
| ayoung | Ha! | 16:01 |
| gyee | ayoung, are you going to update the spec as well? | 16:02 |
| ayoung | xhtml is when you try to comply with as many different standards at once. | 16:02 |
| ayoung | gyee, this is proof of concept. | 16:02 |
| ayoung | I'm thinking that we need to figure out pieces that are missing in order to drill down, then write the spec off of that | 16:03 |
| *** digitalsanctum has quit IRC | 16:03 | |
| ayoung | gyee, the thing that is missing from Keystone in general is the answer to "What data do I need to provide in order to perform this action." | 16:03 |
| ayoung | We assume people know it a-priori, but the visual web provides it in the forms. | 16:04 |
| ayoung | I think there is a need to be able to autogenerate the visual forms from the list of attributes accepted by the controllers, but I am not quite sure how we want to make that happen. It ties in with the XMLNS and the specs | 16:05 |
| termie | deaaaaaththhh | 16:05 |
| *** reidrac has quit IRC | 16:05 | |
| *** donaldh has joined #openstack-dev | 16:05 | |
| ayoung | <beavis>Are you threatening me?</beavis> | 16:06 |
| *** digitalsanctum has joined #openstack-dev | 16:06 | |
| *** yaguang has quit IRC | 16:07 | |
| *** mrunge has quit IRC | 16:11 | |
| *** stevemar has quit IRC | 16:11 | |
| *** rmohan has quit IRC | 16:11 | |
| *** stevemar has joined #openstack-dev | 16:11 | |
| jgriffith | clayg: ping | 16:12 |
| jgriffith | clayg: on the 422 errors, you ok with leaving V1 and updating V2 and Contrib? https://review.openstack.org/#/c/24125/ | 16:13 |
| *** rmohan has joined #openstack-dev | 16:15 | |
| *** jcmartin has joined #openstack-dev | 16:17 | |
| *** david-lyle has joined #openstack-dev | 16:18 | |
| *** digitalsanctum has quit IRC | 16:18 | |
| *** donaldh has quit IRC | 16:19 | |
| *** kaushikc has quit IRC | 16:19 | |
| *** dkehn has joined #openstack-dev | 16:19 | |
| *** navid_ has left #openstack-dev | 16:20 | |
| *** mrodden has joined #openstack-dev | 16:20 | |
| *** tomoe_ has joined #openstack-dev | 16:21 | |
| *** kaushikc has joined #openstack-dev | 16:21 | |
| *** kaushikc has quit IRC | 16:21 | |
| *** tomoe_ has quit IRC | 16:21 | |
| *** reed has quit IRC | 16:22 | |
| openstackgerrit | A change was merged to openstack/keystone: quiet route logging on skipped tests https://review.openstack.org/24325 | 16:24 |
| openstackgerrit | A change was merged to openstack/glance: Do not return location in headers https://review.openstack.org/24437 | 16:24 |
| *** dontalton has joined #openstack-dev | 16:25 | |
| *** amerine has joined #openstack-dev | 16:25 | |
| *** flaper87 has quit IRC | 16:25 | |
| *** SergeyLukjanov has quit IRC | 16:26 | |
| *** radez is now known as radez_g0n3 | 16:27 | |
| openstackgerrit | A change was merged to openstack/keystone: Remove TODO that didn't land in grizzly https://review.openstack.org/23473 | 16:27 |
| openstackgerrit | A change was merged to openstack/nova: Resize/Migrate refactoring fixes and test cases https://review.openstack.org/24066 | 16:27 |
| *** alexisT has joined #openstack-dev | 16:28 | |
| *** SergeyLukjanov has joined #openstack-dev | 16:29 | |
| openstackgerrit | A change was merged to openstack/python-novaclient: Fix Copyright Headers from LLC to Foundation https://review.openstack.org/24379 | 16:29 |
| openstackgerrit | A change was merged to openstack/nova: Generalize console error handling during build. https://review.openstack.org/24255 | 16:29 |
| openstackgerrit | A change was merged to openstack/nova: Don't log traceback on expected console error. https://review.openstack.org/24353 | 16:29 |
| openstackgerrit | A change was merged to openstack/nova: Fix copyright - from LLC to Foundation https://review.openstack.org/24377 | 16:29 |
| openstackgerrit | A change was merged to openstack/nova: Read instance resource quota info from "quota" namespace. https://review.openstack.org/23524 | 16:30 |
| *** epim has joined #openstack-dev | 16:32 | |
| *** salgado-lunch is now known as salgado | 16:34 | |
| henrynash | dolphm: not sure I understand the havana comment in: https://review.openstack.org/#/c/24432/ | 16:37 |
| *** yidclare has joined #openstack-dev | 16:39 | |
| dolphm | henrynash: abandoned based on markmc's comment (whoops!) | 16:40 |
| henrynash | dolphm: ah, ok | 16:40 |
| dolphm | henrynash: so the issue is that non-keystone clients have hard coded approaches to traversing the keystone catalog | 16:40 |
| dolphm | henrynash: they pull the raw catalog from our client and try to interpret it | 16:40 |
| dolphm | henrynash: defaulting to v3 gives them a catalog in a different format | 16:41 |
| dolphm | henrynash: and they all break | 16:41 |
| henrynash | dolphm: so what's your view on what auth_token should do for Grizzly? Should we default to v2? | 16:41 |
| henrynash | (i.e. look for v2 first….) | 16:41 |
| dolphm | henrynash: yes, i think we need to default to v2, and when havana opens up, switch it back and cleanup the fallout | 16:41 |
| *** markmcclain has joined #openstack-dev | 16:41 | |
| henrynash | dolphm: OK, Dan's got a change pending that does exactly that.. | 16:42 |
| *** jaypipes has joined #openstack-dev | 16:42 | |
| dolphm | henrynash: yeah, i think that's the simplest solution | 16:42 |
| *** doude has joined #openstack-dev | 16:42 | |
| crazed | ayoung: woot i think i found an actual bug in the emulated enable stuff, if you call _add_enabled on something that's already enabled it will fail because the member attribute already exists | 16:42 |
| *** adjohn has joined #openstack-dev | 16:43 | |
| henrynash | dolphm: Ok. I'll push that on it's way - will need another to approve... | 16:43 |
| ayoung | crazed, good work. File it | 16:43 |
| topol | crazed, can you open a bug | 16:43 |
| topol | ayoung, can we assign it to YorikSar? | 16:43 |
| *** jgallard has quit IRC | 16:43 | |
| crazed | it's easy to add a _get_enabled check before attempting to add | 16:43 |
| crazed | which fixes the test | 16:44 |
| topol | crazed feel free to open it and fix it | 16:44 |
| ayoung | topol, depends on whether you think he will actually fix it. | 16:44 |
| crazed | but i should open a bug and skip the test for now? | 16:44 |
| crazed | want to make sure things are filed properly | 16:44 |
| *** garyk has quit IRC | 16:45 | |
| dolphm | henrynash: thanks | 16:45 |
| topol | crazed, Im OK with him opening the bug and skipping the test (we'll patch it up), ayoung you ok with this? | 16:45 |
| topol | s/him/you | 16:45 |
| ayoung | topol, skipping the test in live? Yes, that is OK, please just use the bug ID in the skip message | 16:46 |
| *** roampune has joined #openstack-dev | 16:46 | |
| *** zoresvit has quit IRC | 16:46 | |
| crazed | cool, sounds good to me | 16:46 |
| *** marun has joined #openstack-dev | 16:46 | |
| topol | crazed, can you open the bug, get the bug id and put it in the skip message. if you dont have time to fix the bug I'll take it. Im feeling guilty for you having to do the heavlifting on the liveldap | 16:47 |
| crazed | it's an easy fix, i can open the bbug report with the diff in it and if i have time i'll open a new review | 16:47 |
| topol | crazed, THANKS!! | 16:48 |
| *** xga has joined #openstack-dev | 16:49 | |
| *** esp1 has joined #openstack-dev | 16:49 | |
| dolphm | henrynash: did you do some work related to this? https://bugs.launchpad.net/keystone/+bug/1097995 | 16:50 |
| uvirtbot | Launchpad bug 1097995 in keystone "Delete domain -- doesn't do anything with groups/users/tenants" [Medium,Triaged] | 16:50 |
| dolphm | ayoung: henrynash: review when ya'll have a minute https://review.openstack.org/#/c/24290/ | 16:51 |
| henrynash | dolphm: so that looks like a duplicate of a bug I raised. Was about to decide if I attack that one or the one about migration if your downgrade and have non-default-domain entities that might have name clashes | 16:52 |
| *** esp1 has quit IRC | 16:52 | |
| *** esp1 has joined #openstack-dev | 16:53 | |
| ayoung | after lunch | 16:53 |
| dolphm | henrynash: can you link me the downgrade bug? it should be grizzly-rc-potential | 16:53 |
| *** trapni has quit IRC | 16:53 | |
| *** SergeyLukjanov has quit IRC | 16:54 | |
| dolphm | henrynash: and do you have a link to your dupe? | 16:54 |
| *** jog0 has joined #openstack-dev | 16:54 | |
| henrynash | dolphm: here's the downgrade bug: https://bugs.launchpad.net/keystone/+bug/1125046 | 16:54 |
| uvirtbot | Launchpad bug 1125046 in keystone "Downward migration from separate domain name spaces can cause name clashes" [Medium,Triaged] | 16:54 |
| *** john5223 has quit IRC | 16:54 | |
| dolphm | henrynash: thanks | 16:54 |
| henrynash | dolphm: fix is to only downgrade entities in the default domain and dump the rest on the floor | 16:54 |
| dolphm | henrynash: that sounds valid to me | 16:55 |
| henrynash | dolphm: …and here's the delete domain one I raised: https://bugs.launchpad.net/keystone/+bug/1153055 | 16:55 |
| uvirtbot | Launchpad bug 1153055 in keystone "Deleting a domain breaks referential integrity" [High,New] | 16:55 |
| *** lglenden has joined #openstack-dev | 16:55 | |
| *** kagan has joined #openstack-dev | 16:56 | |
| *** fire has quit IRC | 16:56 | |
| *** yidclare has quit IRC | 16:57 | |
| dolphm | henrynash: actually marking yours as a dupe since the other one was opened a couple months ago | 16:57 |
| *** terryg has joined #openstack-dev | 16:59 | |
| henrynash | dolphm: it's a fair cop, guv | 16:59 |
| *** garyk has joined #openstack-dev | 17:00 | |
| *** yidclare has joined #openstack-dev | 17:00 | |
| *** arbrandes has joined #openstack-dev | 17:00 | |
| *** markwash has quit IRC | 17:00 | |
| dolphm | henrynash: we need a bit of a framework for deleting entities and handling the cascading effects | 17:00 |
| *** fire has joined #openstack-dev | 17:00 | |
| *** otherwiseguy has quit IRC | 17:01 | |
| dolphm | henrynash: like delete_domain() calls delete_project() and delete_user(), both of which call revoke_tokens() ... etc | 17:01 |
| henrynash | dolphm: agreed…can e do all that in the controller? | 17:01 |
| dolphm | henrynash: yeah-- ayoung proposed moving that stuff to the v2 controller base class | 17:02 |
| *** gasbakid has joined #openstack-dev | 17:02 | |
| dolphm | henrynash: i think that makes a lot of sense as those functions are essentially common to the entire API | 17:02 |
| dolphm | henrynash: in this patch https://review.openstack.org/#/c/24010/ | 17:02 |
| henrynash | dophlm: agreed | 17:02 |
| *** branen has joined #openstack-dev | 17:02 | |
| *** gasbakid has quit IRC | 17:03 | |
| *** gasbakid has joined #openstack-dev | 17:03 | |
| henrynash | dolphm: highest priority out of the domain migration and delete domain? | 17:04 |
| *** terry7 has joined #openstack-dev | 17:04 | |
| *** zoresvit has joined #openstack-dev | 17:05 | |
| *** jbresnah has joined #openstack-dev | 17:05 | |
| *** terryg has quit IRC | 17:06 | |
| *** terry7 has quit IRC | 17:06 | |
| henrynash | dolphm: I think delete domain could screw up the database…while the migration will just fail…both probably need fixing | 17:06 |
| dolphm | henrynash: i'd vote for delete domain | 17:06 |
| henrynash | dolphm: Ok, I'm on it | 17:06 |
| dolphm | henrynash: awesome | 17:06 |
| *** thouveng has quit IRC | 17:07 | |
| *** terry7 has joined #openstack-dev | 17:07 | |
| *** kashyap has quit IRC | 17:07 | |
| *** cdub has quit IRC | 17:07 | |
| *** morganfainberg has joined #openstack-dev | 17:08 | |
| *** anniec has quit IRC | 17:08 | |
| *** gasbakid has quit IRC | 17:08 | |
| ayoung | dolphm, re https://review.openstack.org/#/c/24010/ and existing tokens, we've made the decision in the past to dump all tokens on migrate. Is that an acceptable approach now? | 17:08 |
| *** gasbakid has joined #openstack-dev | 17:08 | |
| *** kashyap has joined #openstack-dev | 17:09 | |
| *** cp16net is now known as cp16net|away | 17:11 | |
| crazed | topol: https://bugs.launchpad.net/keystone/+bug/1155234 | 17:11 |
| uvirtbot | Launchpad bug 1155234 in keystone "emulated ldap enabled improperly handles updates" [Undecided,New] | 17:11 |
| *** gasbakid_ has joined #openstack-dev | 17:12 | |
| *** rafaduran has left #openstack-dev | 17:13 | |
| *** gasbakid has quit IRC | 17:14 | |
| *** digitalsanctum has joined #openstack-dev | 17:15 | |
| *** doude has left #openstack-dev | 17:15 | |
| openstackgerrit | A change was merged to openstack/cinder: cinder-manage does not print any version information https://review.openstack.org/24420 | 17:16 |
| dolphm | ayoung: i think that's fine, as long as we're clear that that's the approach used by the migration -- we'll have to put that in release notes | 17:16 |
| *** andreaf has quit IRC | 17:17 | |
| *** andreaf has joined #openstack-dev | 17:18 | |
| *** jsavak has joined #openstack-dev | 17:18 | |
| *** gray-- has quit IRC | 17:19 | |
| *** nati_ueno has joined #openstack-dev | 17:21 | |
| *** joesavak has quit IRC | 17:22 | |
| *** SergeyLukjanov has joined #openstack-dev | 17:22 | |
| *** m4xmr has quit IRC | 17:24 | |
| *** Mandell has joined #openstack-dev | 17:25 | |
| *** bdpayne has quit IRC | 17:26 | |
| *** arbrandes has quit IRC | 17:27 | |
| *** glikson has quit IRC | 17:27 | |
| *** AlanClark has joined #openstack-dev | 17:28 | |
| *** yidclare has quit IRC | 17:28 | |
| *** bdpayne has joined #openstack-dev | 17:28 | |
| *** yidclare has joined #openstack-dev | 17:29 | |
| *** digitalsanctum has quit IRC | 17:30 | |
| *** optyx has joined #openstack-dev | 17:30 | |
| *** markwash has joined #openstack-dev | 17:31 | |
| *** rushiagr has quit IRC | 17:32 | |
| *** digitalsanctum has joined #openstack-dev | 17:35 | |
| *** egallen has quit IRC | 17:36 | |
| *** otherwiseguy has joined #openstack-dev | 17:37 | |
| *** egallen has joined #openstack-dev | 17:38 | |
| crazed | topol: Ran 136 tests in 292.289s OK (SKIP=44) | 17:41 |
| crazed | woo | 17:41 |
| crazed | finally | 17:41 |
| *** adjohn has quit IRC | 17:42 | |
| *** radez_g0n3 is now known as radez | 17:43 | |
| *** markmc has quit IRC | 17:44 | |
| *** mkollaro has quit IRC | 17:45 | |
| topol | crazed thats awesome THANKS | 17:45 |
| *** derekh has quit IRC | 17:45 | |
| crazed | just need to update the backend_liveldap.conf and run against devstack, but should be easy enough to get those done | 17:45 |
| *** zoresvit has quit IRC | 17:45 | |
| *** jpich has quit IRC | 17:46 | |
| topol | crazed, OK, let me know when you submit a version you want reviewed | 17:46 |
| crazed | sounds good | 17:46 |
| *** Ryan_Lane has quit IRC | 17:50 | |
| *** kaushikc has joined #openstack-dev | 17:51 | |
| *** eglynn has quit IRC | 17:51 | |
| *** matiu has joined #openstack-dev | 17:55 | |
| *** matiu has quit IRC | 17:55 | |
| *** matiu has joined #openstack-dev | 17:55 | |
| *** dsanders has joined #openstack-dev | 17:55 | |
| *** danpb has quit IRC | 17:58 | |
| *** gyee has quit IRC | 17:59 | |
| *** Brad_K has joined #openstack-dev | 17:59 | |
| *** Brad_K has joined #openstack-dev | 17:59 | |
| *** olaph has quit IRC | 18:00 | |
| *** romcheg has joined #openstack-dev | 18:00 | |
| *** romcheg has left #openstack-dev | 18:00 | |
| *** adjohn has joined #openstack-dev | 18:01 | |
| *** ayoung has quit IRC | 18:01 | |
| *** branen has quit IRC | 18:01 | |
| *** olaph has joined #openstack-dev | 18:02 | |
| *** melwitt has joined #openstack-dev | 18:02 | |
| *** gordc has quit IRC | 18:03 | |
| *** ayoung has joined #openstack-dev | 18:03 | |
| *** optyx1 has joined #openstack-dev | 18:04 | |
| *** optyx has quit IRC | 18:04 | |
| *** colinmcnamara has quit IRC | 18:04 | |
| comstud | dansmith: https://review.openstack.org/#/c/24460/ | 18:05 |
| *** john5223 has joined #openstack-dev | 18:05 | |
| dansmith | comstud: I was going to ask about retroactively optimizing it.. I'll look at that when I'm done with this call | 18:05 |
| comstud | sure | 18:06 |
| *** adjohn has quit IRC | 18:07 | |
| dolphm | ttx: how often is http://old-wiki.openstack.org/release/rc/ updated? | 18:07 |
| *** sulo_ has quit IRC | 18:07 | |
| *** johnthetubaguy has quit IRC | 18:08 | |
| *** yidclare has quit IRC | 18:13 | |
| *** novas0x2a|laptop has joined #openstack-dev | 18:13 | |
| *** novas0x2a|laptop has quit IRC | 18:13 | |
| *** reed has joined #openstack-dev | 18:16 | |
| *** cp16net|away is now known as cp16net | 18:17 | |
| *** corXi has quit IRC | 18:18 | |
| *** tryggvil_ has quit IRC | 18:19 | |
| *** yidclare has joined #openstack-dev | 18:19 | |
| *** Mandell has quit IRC | 18:19 | |
| *** novas0x2a|laptop has joined #openstack-dev | 18:19 | |
| *** Mandell has joined #openstack-dev | 18:20 | |
| topol | crazed, is patch set 5 the one where all test run properly? | 18:21 |
| *** lglenden has quit IRC | 18:22 | |
| *** Mandell has quit IRC | 18:24 | |
| *** WormMan has joined #openstack-dev | 18:26 | |
| *** Mandell has joined #openstack-dev | 18:27 | |
| *** otherwiseguy has quit IRC | 18:28 | |
| *** marun has quit IRC | 18:30 | |
| *** Ryan_Lane has joined #openstack-dev | 18:31 | |
| *** rushiagr has joined #openstack-dev | 18:33 | |
| *** spzala has quit IRC | 18:37 | |
| *** gasbakid_ has quit IRC | 18:40 | |
| *** reed has quit IRC | 18:43 | |
| *** bknudson has quit IRC | 18:43 | |
| *** optyx1 has quit IRC | 18:44 | |
| *** gordc has joined #openstack-dev | 18:47 | |
| *** xga has quit IRC | 18:48 | |
| *** ek6 has quit IRC | 18:48 | |
| dolphm | bdpayne: there's not an ossg-specific mailing list, correct? just openstack-dev [OSSG] ? | 18:49 |
| *** ek6 has joined #openstack-dev | 18:49 | |
| bdpayne | dolphm that is correct | 18:49 |
| dolphm | bdpayne: i'm going to go ahead and provide links to everything we've got atm | 18:50 |
| bdpayne | great, thanks | 18:50 |
| bdpayne | I think documenting what the expected states / transitions are here would be very useful | 18:50 |
| openstackgerrit | A change was merged to openstack/nova: Makes safe xml data calls raise 400 http error instead of 500 https://review.openstack.org/22926 | 18:52 |
| ttx | dolphm: every 2 hours | 18:53 |
| *** bdpayne has quit IRC | 18:53 | |
| *** markwash has quit IRC | 18:53 | |
| *** bdpayne has joined #openstack-dev | 18:54 | |
| *** rnirmal has quit IRC | 18:55 | |
| *** rushiagr has quit IRC | 18:56 | |
| *** obondarev has quit IRC | 18:58 | |
| *** egallen has quit IRC | 18:58 | |
| *** markwash has joined #openstack-dev | 19:00 | |
| *** obondarev has joined #openstack-dev | 19:00 | |
| *** datsun180b_ has joined #openstack-dev | 19:02 | |
| dolphm | ayoung: fyi, i pinged the OSSG about trusts on openstack-dev; cc'd you | 19:02 |
| *** stevebaker has joined #openstack-dev | 19:03 | |
| *** datsun180b has quit IRC | 19:04 | |
| *** datsun180b_ is now known as datsun180b | 19:04 | |
| *** boris-42 has joined #openstack-dev | 19:04 | |
| *** efoncubierta has joined #openstack-dev | 19:06 | |
| *** efoncubierta has left #openstack-dev | 19:07 | |
| *** Ash has joined #openstack-dev | 19:08 | |
| *** optyx has joined #openstack-dev | 19:09 | |
| *** darraghb has quit IRC | 19:09 | |
| *** jasdeepH has quit IRC | 19:09 | |
| *** bnemec_ has quit IRC | 19:09 | |
| *** ayoung has quit IRC | 19:09 | |
| *** markmcclain1 has joined #openstack-dev | 19:11 | |
| *** bnemec has joined #openstack-dev | 19:12 | |
| *** bknudson has joined #openstack-dev | 19:12 | |
| *** markmcclain has quit IRC | 19:14 | |
| enikanorov | any devstack code devs around? | 19:15 |
| *** adjohn has joined #openstack-dev | 19:16 | |
| *** optyx has quit IRC | 19:16 | |
| *** optyx1 has joined #openstack-dev | 19:16 | |
| *** davidha has joined #openstack-dev | 19:16 | |
| *** bknudson has joined #openstack-dev | 19:16 | |
| *** otherwiseguy has joined #openstack-dev | 19:23 | |
| *** markwash has quit IRC | 19:26 | |
| *** zzs has joined #openstack-dev | 19:32 | |
| *** gyee has joined #openstack-dev | 19:33 | |
| *** mscott has quit IRC | 19:35 | |
| *** jbresnah has quit IRC | 19:35 | |
| *** jbresnah has joined #openstack-dev | 19:36 | |
| *** terryh has quit IRC | 19:38 | |
| *** jbr_ has left #openstack-dev | 19:39 | |
| *** markmcclain1 has quit IRC | 19:39 | |
| matiu | russellb, when you get a mo, could you please remove -2 from https://review.openstack.org/#/c/21185 | 19:41 |
| matiu | thanks heaps :) | 19:41 |
| topol | crazed, your patch 5 failed some unit tests. Got a -1 from jenkins | 19:42 |
| *** ayoung has joined #openstack-dev | 19:43 | |
| russellb | matiu: haven't we discussed this multiple times? | 19:44 |
| *** hemna has quit IRC | 19:44 | |
| russellb | matiu: feature freeze | 19:44 |
| *** hemna has joined #openstack-dev | 19:44 | |
| matiu | I heard the feature freeze was over already | 19:44 |
| russellb | it is not, only for quantum | 19:45 |
| matiu | ah, sorry man | 19:45 |
| openstackgerrit | A change was merged to openstack/nova: Do not accept invalid keys in quota-update https://review.openstack.org/23913 | 19:45 |
| * matiu scurries back to his hole | 19:45 | |
| *** sdake_ has joined #openstack-dev | 19:45 | |
| *** sdake_ has quit IRC | 19:46 | |
| *** sdake_ has joined #openstack-dev | 19:47 | |
| *** ayoung has quit IRC | 19:48 | |
| *** heckj has joined #openstack-dev | 19:49 | |
| *** adjohn has quit IRC | 19:50 | |
| *** psedlak has quit IRC | 19:51 | |
| *** psedlak has joined #openstack-dev | 19:51 | |
| *** psedlak has quit IRC | 19:52 | |
| *** kaushikc has quit IRC | 19:55 | |
| *** jasdeepH has joined #openstack-dev | 19:57 | |
| *** markmcclain has joined #openstack-dev | 19:57 | |
| *** terryh has joined #openstack-dev | 19:59 | |
| *** zzs has quit IRC | 20:01 | |
| *** dosaboy has quit IRC | 20:02 | |
| *** yidclare has quit IRC | 20:02 | |
| *** kaushikc has joined #openstack-dev | 20:03 | |
| *** yidclare has joined #openstack-dev | 20:04 | |
| enikanorov | markmcclain: hi. are you here? | 20:05 |
| *** datsun180b has quit IRC | 20:05 | |
| *** datsun180b has joined #openstack-dev | 20:06 | |
| *** colinmcnamara has joined #openstack-dev | 20:06 | |
| *** eglynn has joined #openstack-dev | 20:06 | |
| *** dprince has quit IRC | 20:07 | |
| *** stevemar has quit IRC | 20:09 | |
| *** stevemar has joined #openstack-dev | 20:09 | |
| *** heckj has quit IRC | 20:10 | |
| *** topol has quit IRC | 20:11 | |
| *** markmcclain has quit IRC | 20:12 | |
| *** stevebaker has quit IRC | 20:12 | |
| *** enikanorov-w has quit IRC | 20:14 | |
| *** enikanorov-w has joined #openstack-dev | 20:15 | |
| *** vipul is now known as vipul|away | 20:17 | |
| *** eglynn has quit IRC | 20:19 | |
| openstackgerrit | A change was merged to openstack/python-keystoneclient: Use v2.0 api by default in auth_token middleware https://review.openstack.org/24186 | 20:20 |
| *** cp16net is now known as cp16net|away | 20:21 | |
| *** cp16net|away is now known as cp16net | 20:21 | |
| openstackgerrit | A change was merged to openstack-dev/devstack: Remove unused n-vol package lists https://review.openstack.org/23719 | 20:22 |
| dolphm | gyee: i have a question about TestAuthXML if you have a minute | 20:26 |
| *** boden has quit IRC | 20:26 | |
| *** vipul|away is now known as vipul | 20:26 | |
| *** boris-42 has quit IRC | 20:28 | |
| *** kaushikc has quit IRC | 20:28 | |
| *** olaph has quit IRC | 20:29 | |
| *** AlanClark has quit IRC | 20:30 | |
| *** olaph has joined #openstack-dev | 20:30 | |
| *** diogogmt has joined #openstack-dev | 20:30 | |
| *** SergeyLukjanov has quit IRC | 20:30 | |
| gyee | dolphm, sure | 20:31 |
| arosen | I have a keystone question. Currently when nova talks to quantum, nova uses the quantum_admin_password and quantum_admin_username (which are service users) specified in the nova.conf. I was wondering if instead of using these service users would it be possible to just tell quantum to use keystones admin_token? | 20:32 |
| arosen | In this case one wouldn't need this quantum service user? | 20:32 |
| dolphm | gyee: i'm just writing some tests here - https://review.openstack.org/#/c/24473/ | 20:32 |
| dolphm | gyee: but the xml variant is failing because it looks like self.patch() returns None when self.content_type is 'xml'... but i have no idea why | 20:33 |
| arosen | dolphm: do you know :) | 20:33 |
| dolphm | gyee: the tests work fine in json | 20:33 |
| dolphm | gyee: and actually the response when the test fails in TestAuthXML is actually in JSON, not xml... so i don't know what's up with that either | 20:34 |
| gyee | TestAuthXML should be using xml | 20:34 |
| dolphm | arosen: nothing should be using keystone.conf's admin_token except for the deployer, and only during setup | 20:35 |
| *** digitalsanctum has quit IRC | 20:35 | |
| arosen | dolphm: is there anyway to get rid of the quantum service users? | 20:35 |
| *** colinmcnamara has quit IRC | 20:35 | |
| dolphm | arosen: i'm not really clear on the use case for quantum_admin_username/password though -- when you say "talks to quantum", why would nova need to *be* quantum? why can't it use it's own service user account? | 20:35 |
| *** anniec has joined #openstack-dev | 20:36 | |
| *** digitalsanctum has joined #openstack-dev | 20:36 | |
| gyee | dolphm, let me add those test in my env to see what's going on | 20:36 |
| dolphm | arosen: you need more than one service user for quantum? | 20:36 |
| dolphm | gyee: thanks | 20:36 |
| arosen | dolphm: I suppose that it could use nova service user account. I'm trying to get rid of these service users. If we want to use keystone with ldap it seems we'll have to create ldap creds for these service users? | 20:37 |
| *** boris-42 has joined #openstack-dev | 20:37 | |
| dolphm | gyee: drop the skiptest overrides and then run $ ./run_tests.sh -N test_v3_auth:TestAuthXML.test_default_project_id_scoped_token_with_user_id | 20:37 |
| arosen | dolphm: i've seen this hybrid keystone driver that allows you to use ldap and the keystone database and the same time to get around this but i'm wondering if there is a better solution. | 20:37 |
| dolphm | arosen: yes, that's normal -- we're hoping to provide the ability to change that in havana, so that you can store some users in keystone sql, and the rest in ldap | 20:38 |
| *** optyx1 has quit IRC | 20:38 | |
| *** metral has quit IRC | 20:38 | |
| dolphm | arosen: i like that driver, but i don't think we should accept it, in favor of pluggable authentication (i can't remember who wrote the driver, but they were looking at refactoring it into grizzly auth plugins) | 20:38 |
| *** devoid has joined #openstack-dev | 20:39 | |
| dolphm | gyee might know who it was? ^ | 20:39 |
| gyee | dolphm, that's brant kudson and tapol I think | 20:40 |
| dolphm | gyee: oh okay, thanks | 20:40 |
| gyee | they wrote the hybrid SQL + LDAP for user lookup | 20:40 |
| arosen | dolphm: Is this the one you are talking about? https://github.com/SUSE-Cloud/keystone-hybrid-backend | 20:40 |
| *** markmcclain has joined #openstack-dev | 20:41 | |
| arosen | It seems like it's broken for grizzly | 20:41 |
| ttx | notmyname: ping | 20:44 |
| notmyname | ttx: just about to talk to you. finishing up the prereq conversation right now. can you wait a few minutes? :-) | 20:44 |
| *** topol has joined #openstack-dev | 20:44 | |
| ttx | notmyname: sure | 20:44 |
| ttx | ping me when ready | 20:45 |
| *** jsavak has quit IRC | 20:45 | |
| *** stevebaker has joined #openstack-dev | 20:45 | |
| notmyname | ttx: ping | 20:46 |
| ttx | notmyname: o/ | 20:46 |
| notmyname | ttx: tl;dr do the RC release on monday | 20:47 |
| arosen | dolphm: do you know if there was a different patch that landed on review.openstack.org that did this? | 20:47 |
| *** adjohn has joined #openstack-dev | 20:47 | |
| ttx | notmyname: ok -- anything specific you block on ? | 20:47 |
| notmyname | ttx: details, 'cause of pycon starting tonight and a few preliminary issue found, we didn't get the RC ready by yesterday | 20:47 |
| ttx | https://launchpad.net/swift/+milestone/1.8.0-rc1 shows 3 incomplete blueprints and no bug | 20:47 |
| dolphm | arosen: i don't think so | 20:47 |
| dolphm | arosen: nothing i've reviewed at least | 20:48 |
| ttx | notmyname: could you update the page so that it's clearer what we are waiting on ? | 20:48 |
| notmyname | ttx: now it's mostly me doing the AUTHORS/CHANGELOG/version update. QA is continuing | 20:48 |
| ttx | notmyname: oh ok | 20:48 |
| arosen | dolphm: yea i searched review for the keystone stuff and didn't see any with a title of hybrid | 20:48 |
| ttx | notmyname: should those 3 blueprints be marked implemented ? I can do that for you | 20:48 |
| notmyname | ttx: ya, I'll work on that tonight/this weekend at the hotel | 20:48 |
| ttx | notmyname: ok | 20:49 |
| notmyname | ttx: wait. not "ya" to the making BP | 20:49 |
| notmyname | ttx: I'll take care of BP status changes | 20:49 |
| *** Yada has joined #openstack-dev | 20:49 | |
| ttx | notmyname: great. Have a good pycon! | 20:49 |
| notmyname | ttx: "ya" to the "[I'll] update the page" | 20:49 |
| dolphm | gyee: i revised the patch to force certain requests to be made in json, and then made an assert only applicable to json... sort of hacky but they pass? | 20:50 |
| notmyname | ttx: thanks. I'll send an email with the date change | 20:50 |
| notmyname | to the mailing list | 20:50 |
| *** colinmcnamara has joined #openstack-dev | 20:50 | |
| dolphm | henrynash: [spam] reminder to review gyee's rc blocker :) https://review.openstack.org/#/c/24290/ | 20:51 |
| *** colinmcnamara has quit IRC | 20:52 | |
| gyee | dolphm, I think I know what the prolem is | 20:52 |
| dolphm | gyee: ? | 20:52 |
| gyee | we are actually getting xml back | 20:52 |
| gyee | problem is are assuming json object in our test code | 20:53 |
| dolphm | gyee: my logs only show json | 20:53 |
| gyee | dolphm, that's because Keystone operate on json internally, xml transformation happens at the middleware | 20:54 |
| gyee | log will always show json I think | 20:54 |
| dolphm | gyee: i guess that's true -- the logs i'm seeing are produced by keystone.common.wsgi | 20:55 |
| *** rcj has quit IRC | 20:56 | |
| gyee | test_v3_auth.py line 569 | 20:56 |
| gyee | we need to translate the dom object back to xml if content-type is xml | 20:56 |
| *** stevebaker has quit IRC | 20:56 | |
| *** eglynn has joined #openstack-dev | 20:56 | |
| gyee | dolphm, see test_v3.py line 267 | 20:57 |
| *** stevebaker has joined #openstack-dev | 20:57 | |
| dolphm | gyee: i saw that, but couldn't find that done anywhere else | 20:58 |
| gyee | sorry I meant translate the dom object back to json | 20:58 |
| gyee | line 367 | 20:58 |
| gyee | pretty much in all the assertValid* methods | 20:58 |
| dolphm | gyee: i'm pretty sure i wrote the test framework to convert from xml automatically based on content-type | 20:58 |
| gyee | dolphm, yes, you did that in test_content_types.py | 20:59 |
| dolphm | gyee: we inherit from that | 20:59 |
| dolphm | _to_content_type and _from_content_type | 20:59 |
| gyee | return a dom object if content-type is xml or json if content-type is json | 20:59 |
| gyee | right | 20:59 |
| gyee | but in the tests we only operating on json | 21:00 |
| dolphm | gyee: so response.body should be either a dict or dom object | 21:00 |
| dolphm | gyee: so in assertValidErrorResponse, you're converting a dom object to a string, and then deserializing *again* | 21:01 |
| gyee | right, we have to deserialize it so we don't have to write the tests two different ways | 21:02 |
| *** colinmcnamara has joined #openstack-dev | 21:02 | |
| dolphm | gyee: oooh, i think i understand your approach though... you were intended the tests to do json assertions <--> xml to dict in test framework <--> xml on the wire <--> xml deserializer middleware <--> keystone | 21:03 |
| dolphm | gyee: awesome, i like that | 21:03 |
| dolphm | gyee: so basically we should do that higher up, not just in assertValidErrorResponse | 21:03 |
| *** vipul is now known as vipul|away | 21:03 | |
| *** digitalsanctum has quit IRC | 21:04 | |
| *** pcm_ has quit IRC | 21:04 | |
| *** digitalsanctum has joined #openstack-dev | 21:04 | |
| *** vipul|away is now known as vipul | 21:04 | |
| gyee | dolphm, yeah, we should be doing that in test_content_types if possible | 21:05 |
| *** Yada has quit IRC | 21:06 | |
| *** metral has joined #openstack-dev | 21:06 | |
| *** PaulM has joined #openstack-dev | 21:06 | |
| *** boris-42 has quit IRC | 21:08 | |
| dolphm | gyee: testing a fix | 21:09 |
| gyee | dolphm, so you are moving the transformation to test_content_types? | 21:10 |
| *** optyx has joined #openstack-dev | 21:10 | |
| *** boris-42 has joined #openstack-dev | 21:10 | |
| *** utlemming has quit IRC | 21:10 | |
| dolphm | gyee: i agree we should do that, but i'm limiting impact for the moment to just test_v3 | 21:10 |
| dolphm | test_v3_* | 21:10 |
| gyee | k, sounds good | 21:11 |
| openstackgerrit | A change was merged to openstack-dev/devstack: Standardize repository locations https://review.openstack.org/23547 | 21:12 |
| openstackgerrit | A change was merged to openstack-dev/devstack: Simplify database_connection_url https://review.openstack.org/23364 | 21:12 |
| openstackgerrit | A change was merged to openstack-dev/devstack: Small Refactors https://review.openstack.org/23839 | 21:12 |
| openstackgerrit | A change was merged to openstack-dev/devstack: restart memcached for swift. https://review.openstack.org/24159 | 21:12 |
| *** utlemming has joined #openstack-dev | 21:12 | |
| *** koolhead17 has quit IRC | 21:12 | |
| *** gasbakid has joined #openstack-dev | 21:13 | |
| dolphm | gyee: awesome, seems to work -- posted a revision that uses the tests from patchset 1 https://review.openstack.org/#/c/24473/ | 21:13 |
| dolphm | minus the skiptests | 21:14 |
| dolphm | gyee: thanks for your help | 21:14 |
| openstackgerrit | A change was merged to openstack-dev/devstack: Make openSUSE port up-to-date https://review.openstack.org/24211 | 21:15 |
| openstackgerrit | A change was merged to openstack/nova: Fixes an iSCSI connector issue in the Hyper-V driver. https://review.openstack.org/24161 | 21:15 |
| *** rkukura has quit IRC | 21:15 | |
| openstackgerrit | A change was merged to openstack-dev/devstack: Add policy_file option to quantum.conf https://review.openstack.org/24178 | 21:15 |
| openstackgerrit | A change was merged to openstack-dev/devstack: XenAPI: run DomU on a virtual kernel https://review.openstack.org/24297 | 21:15 |
| *** henrynash has quit IRC | 21:16 | |
| *** zzs has joined #openstack-dev | 21:16 | |
| *** giulivo has quit IRC | 21:17 | |
| *** eglynn has quit IRC | 21:17 | |
| *** jruzicka has quit IRC | 21:19 | |
| *** Yada has joined #openstack-dev | 21:19 | |
| *** pabelanger has quit IRC | 21:19 | |
| *** pabelanger has joined #openstack-dev | 21:20 | |
| *** colinmcnamara has quit IRC | 21:20 | |
| *** openstackgerrit has quit IRC | 21:24 | |
| *** openstackgerrit has joined #openstack-dev | 21:25 | |
| *** colinmcnamara has joined #openstack-dev | 21:25 | |
| *** cdub has joined #openstack-dev | 21:26 | |
| *** colinmcnamara has quit IRC | 21:27 | |
| *** topol has quit IRC | 21:28 | |
| *** zzs has quit IRC | 21:30 | |
| *** markwash has joined #openstack-dev | 21:31 | |
| *** colinmcnamara has joined #openstack-dev | 21:31 | |
| *** marun has joined #openstack-dev | 21:31 | |
| *** dolphm has quit IRC | 21:32 | |
| *** colinmcnamara has quit IRC | 21:32 | |
| *** jbresnah has quit IRC | 21:34 | |
| *** egallen has joined #openstack-dev | 21:34 | |
| *** digitalsanctum has quit IRC | 21:36 | |
| *** stevemar has quit IRC | 21:37 | |
| *** jaybuff1 has joined #openstack-dev | 21:38 | |
| *** diogogmt has quit IRC | 21:39 | |
| *** diogogmt has joined #openstack-dev | 21:41 | |
| *** eharney has quit IRC | 21:42 | |
| *** gasbakid_ has joined #openstack-dev | 21:42 | |
| *** imsplitbit has quit IRC | 21:42 | |
| *** gasbakid has quit IRC | 21:43 | |
| *** koolhead17 has joined #openstack-dev | 21:43 | |
| *** colinmcnamara has joined #openstack-dev | 21:43 | |
| *** cp16net is now known as cp16net|away | 21:44 | |
| *** timello has quit IRC | 21:44 | |
| *** colinmcnamara has quit IRC | 21:45 | |
| *** colinmcnamara1 has joined #openstack-dev | 21:45 | |
| *** pabelanger has quit IRC | 21:47 | |
| *** koolhead17 has quit IRC | 21:49 | |
| *** john5223 has quit IRC | 21:52 | |
| *** heckj has joined #openstack-dev | 21:53 | |
| *** heckj has quit IRC | 21:53 | |
| *** reed has joined #openstack-dev | 21:53 | |
| *** flaper87 has joined #openstack-dev | 21:53 | |
| *** roampune has quit IRC | 21:54 | |
| *** egallen has left #openstack-dev | 21:59 | |
| *** jhesketh_ has joined #openstack-dev | 22:00 | |
| *** gasbakid_ has quit IRC | 22:00 | |
| *** Gordonz has quit IRC | 22:02 | |
| openstackgerrit | A change was merged to openstack-dev/devstack: Handle LSB data for openSUSE 12.3 https://review.openstack.org/24212 | 22:02 |
| openstackgerrit | A change was merged to openstack-dev/devstack: Support MultiStrOpt options in configuration file. https://review.openstack.org/23251 | 22:03 |
| openstackgerrit | A change was merged to openstack/quantum: Resolves ryu plugin unittest errors https://review.openstack.org/23794 | 22:03 |
| *** PaulM has left #openstack-dev | 22:03 | |
| *** optyx has quit IRC | 22:04 | |
| *** optyx1 has joined #openstack-dev | 22:04 | |
| openstackgerrit | A change was merged to openstack/glance: Segmented images not deleted cleanly from swift. https://review.openstack.org/23442 | 22:04 |
| openstackgerrit | A change was merged to openstack-dev/devstack: Configures horizon lbaas dashboard https://review.openstack.org/23808 | 22:04 |
| openstackgerrit | A change was merged to openstack-dev/devstack: Rename LOGNAME to LOGFILENAME. https://review.openstack.org/23698 | 22:05 |
| *** hemna has quit IRC | 22:06 | |
| *** hemna has joined #openstack-dev | 22:06 | |
| *** mrodden has quit IRC | 22:07 | |
| *** egallen has joined #openstack-dev | 22:08 | |
| *** egallen has quit IRC | 22:10 | |
| reed | is there a mpeg version of the dopenstack video somewhere to download? | 22:13 |
| *** diogogmt has quit IRC | 22:14 | |
| *** optyx1 has quit IRC | 22:16 | |
| *** optyx has joined #openstack-dev | 22:17 | |
| *** lloydde has joined #openstack-dev | 22:21 | |
| *** cp16net|away is now known as cp16net | 22:21 | |
| *** adalbas has quit IRC | 22:21 | |
| *** bswartz has quit IRC | 22:21 | |
| *** dosaboy has joined #openstack-dev | 22:22 | |
| *** pabelanger has joined #openstack-dev | 22:23 | |
| *** ayoung has joined #openstack-dev | 22:24 | |
| *** flaper87 has quit IRC | 22:24 | |
| *** kaushikc has joined #openstack-dev | 22:24 | |
| *** bknudson has quit IRC | 22:26 | |
| *** jhesketh_ is now known as jhesketh | 22:27 | |
| *** kagan has quit IRC | 22:29 | |
| *** READ10 has quit IRC | 22:29 | |
| *** mtreinish has quit IRC | 22:29 | |
| *** monst_ has joined #openstack-dev | 22:29 | |
| *** dolphm has joined #openstack-dev | 22:33 | |
| *** yidclare has quit IRC | 22:34 | |
| *** Brad_K has quit IRC | 22:34 | |
| *** adalbas has joined #openstack-dev | 22:34 | |
| *** locke105 has joined #openstack-dev | 22:35 | |
| *** datsun180b has quit IRC | 22:36 | |
| mordred | markwash: ping | 22:37 |
| markwash | mordred: pong | 22:37 |
| *** afazekas has quit IRC | 22:38 | |
| mordred | markwash: wanted to talk to you or set up a time when we can talk with some other people as well about the intersectoin about our diskimage-builder work and glance | 22:38 |
| *** markmcclain has quit IRC | 22:38 | |
| *** yidclare has joined #openstack-dev | 22:38 | |
| markwash | mordred: I need to run here in a little bit, but I'm generally pretty free and I'd be interested in a little background now | 22:39 |
| mordred | markwash: as part of the tripleo nova-baremetal+heat work, we've made a tool chain for making images to upload to glance... the more I think about it though, the more it seems like it's either an ancillary project to glance or an ancillary project to heat | 22:39 |
| mordred | markwash: stackforge/diskimage-builder | 22:39 |
| mordred | markwash: so, essentially local creation of images. then as part of our larger toolchain, we create images, upload them to glance, and then boot them | 22:40 |
| mordred | markwash: no rush. just seemed like something we should chat about eventually :) | 22:40 |
| markwash | sounds cool | 22:40 |
| markwash | mordred: I'm free tomorrow and monday after 2 PDT | 22:41 |
| markwash | mordred: I'll take a look at the project a bit too so maybe I'll hope to be up to speed | 22:41 |
| *** colinmcnamara1 has quit IRC | 22:42 | |
| mordred | cool! | 22:42 |
| mordred | thanks markwash | 22:42 |
| *** cloudchimp has quit IRC | 22:43 | |
| *** dolphm has quit IRC | 22:46 | |
| *** dolphm_ has joined #openstack-dev | 22:46 | |
| *** alexpilotti has joined #openstack-dev | 22:47 | |
| *** jasdeepH has quit IRC | 22:48 | |
| *** jimfehlig has quit IRC | 22:49 | |
| *** kaushikc has quit IRC | 22:51 | |
| *** topol has joined #openstack-dev | 22:52 | |
| *** woodspa has quit IRC | 22:54 | |
| *** edmund has quit IRC | 22:55 | |
| *** david-lyle has quit IRC | 22:56 | |
| *** markwash has quit IRC | 22:56 | |
| openstackgerrit | A change was merged to openstack/nova: Add the serial to connection info for boot volumes https://review.openstack.org/24363 | 22:58 |
| openstackgerrit | A change was merged to openstack/tempest: Tweak quotas in tempest to include new fixed ip quota. https://review.openstack.org/24457 | 22:58 |
| openstackgerrit | A change was merged to openstack/nova: Don't include traceback when wrapping exceptions https://review.openstack.org/24475 | 22:58 |
| *** kaushikc has joined #openstack-dev | 22:59 | |
| openstackgerrit | A change was merged to openstack/cinder: Count Snapshots towards volume/gigabyte quotas. https://review.openstack.org/24071 | 22:59 |
| openstackgerrit | A change was merged to openstack/cinder: Fix 3PAR driver hiding existing host error https://review.openstack.org/24369 | 22:59 |
| openstackgerrit | A change was merged to openstack-dev/devstack: Minor comment corrections https://review.openstack.org/24352 | 22:59 |
| *** monst_ has quit IRC | 23:00 | |
| *** jasdeepH has joined #openstack-dev | 23:00 | |
| *** sirushti has quit IRC | 23:02 | |
| *** kaushikc has quit IRC | 23:04 | |
| *** benner has quit IRC | 23:05 | |
| *** benner has joined #openstack-dev | 23:05 | |
| *** eglynn has joined #openstack-dev | 23:05 | |
| *** kagan has joined #openstack-dev | 23:05 | |
| *** sacharya has quit IRC | 23:06 | |
| openstackgerrit | A change was merged to openstack/nova: Fix system_metadata "None" and created_at values https://review.openstack.org/24391 | 23:07 |
| *** metral has quit IRC | 23:07 | |
| openstackgerrit | A change was merged to openstack-dev/devstack: Support for separate Keystone paste.deploy configuration https://review.openstack.org/24157 | 23:08 |
| *** adalbas has quit IRC | 23:08 | |
| *** kmartin has quit IRC | 23:08 | |
| *** kmartin has joined #openstack-dev | 23:09 | |
| *** eglynn has quit IRC | 23:10 | |
| *** imsplitbit has joined #openstack-dev | 23:11 | |
| *** dontalton has left #openstack-dev | 23:12 | |
| *** dolphm_ has quit IRC | 23:13 | |
| *** jamielennox has joined #openstack-dev | 23:13 | |
| *** metral has joined #openstack-dev | 23:17 | |
| *** jasdeepH has quit IRC | 23:17 | |
| *** lloydde has quit IRC | 23:20 | |
| *** adalbas has joined #openstack-dev | 23:20 | |
| *** jbresnah has joined #openstack-dev | 23:24 | |
| *** nati_ueno has quit IRC | 23:25 | |
| *** nati_ueno has joined #openstack-dev | 23:26 | |
| *** nati_ueno has quit IRC | 23:26 | |
| *** nati_ueno has joined #openstack-dev | 23:27 | |
| *** esp1 has left #openstack-dev | 23:27 | |
| *** otherwiseguy has quit IRC | 23:29 | |
| *** adalbas has quit IRC | 23:32 | |
| *** pabelanger has quit IRC | 23:34 | |
| *** lloydde has joined #openstack-dev | 23:35 | |
| *** edmund has joined #openstack-dev | 23:40 | |
| *** vkmc has quit IRC | 23:42 | |
| *** terryh has quit IRC | 23:42 | |
| *** radez is now known as radez_g0n3 | 23:46 | |
| *** harlowja has quit IRC | 23:50 | |
| *** jhesketh__ has joined #openstack-dev | 23:52 | |
| *** jhesketh has quit IRC | 23:52 | |
| openstackgerrit | A change was merged to openstack/nova: Do cleaning up resource before rescheduling. https://review.openstack.org/24282 | 23:54 |
| *** stevemar has joined #openstack-dev | 23:55 | |
| *** nati_ueno has quit IRC | 23:55 | |
| *** devoid has quit IRC | 23:55 | |
| *** markwash has joined #openstack-dev | 23:57 | |
| *** kaushikc has joined #openstack-dev | 23:57 | |
| *** nati_ueno has joined #openstack-dev | 23:59 | |
| openstackgerrit | A change was merged to openstack/cinder: Fix ISCSIDriver rescan. https://review.openstack.org/24416 | 23:59 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!