Wednesday, 2013-03-20

openstackgerritA change was merged to openstack/horizon: Bump version to 2013.2.  https://review.openstack.org/2484400:00
openstackgerritA change was merged to openstack/quantum: Add bulking support for Cisco plugin  https://review.openstack.org/2247000:00
openstackgerritA change was merged to openstack/nova: Fix missing argument to QemuImageInfo  https://review.openstack.org/2483900:00
*** jaybuff has quit IRC00:01
notmynamettx: still awake?00:02
sdaguedtroyer: am now00:03
*** hemna is now known as hemnafk00:04
*** metral_ has joined #openstack-dev00:04
*** digitalsanctum has joined #openstack-dev00:05
*** stevebaker has quit IRC00:05
*** stevebaker has joined #openstack-dev00:06
*** metral has quit IRC00:06
*** metral_ is now known as metral00:06
*** alop has joined #openstack-dev00:06
*** mestery has quit IRC00:07
*** yidclare has quit IRC00:07
*** ladquin has quit IRC00:08
*** jaybuff has joined #openstack-dev00:10
*** sulo_ has quit IRC00:12
*** jaybuff1 has joined #openstack-dev00:13
*** amerine has joined #openstack-dev00:14
*** jaybuff has quit IRC00:15
*** dolphm has joined #openstack-dev00:16
*** dolphm has quit IRC00:16
*** dolphm has joined #openstack-dev00:17
*** dolphm has quit IRC00:18
*** soody has joined #openstack-dev00:21
*** jaybuff has joined #openstack-dev00:21
*** colinmcnamara has joined #openstack-dev00:23
*** gyee has quit IRC00:24
*** jaybuff1 has quit IRC00:25
*** colinmcnamara has quit IRC00:26
*** digitalsanctum has quit IRC00:27
*** Ritz-Mobile has quit IRC00:28
*** dolphm has joined #openstack-dev00:28
*** Ritz-Mobile has joined #openstack-dev00:28
*** dolphm has quit IRC00:29
*** ijw has joined #openstack-dev00:30
*** afazekas has quit IRC00:31
*** ijw1 has quit IRC00:32
*** annegentle has joined #openstack-dev00:35
*** Tross has quit IRC00:35
*** ayoung-afk is now known as ayoung00:37
*** john5223 has quit IRC00:38
*** rcloran has quit IRC00:38
*** rcloran has joined #openstack-dev00:38
*** Ritz-Mobile has quit IRC00:39
*** soody has quit IRC00:40
*** markwash has quit IRC00:40
*** AlanClark has quit IRC00:40
*** AlanClark has joined #openstack-dev00:41
*** imsplitbit has quit IRC00:43
*** zaitcev has quit IRC00:44
*** Tross has joined #openstack-dev00:44
*** andrewbogott is now known as andrewbogott_afk00:49
*** markmcclain has joined #openstack-dev00:51
*** jaybuff has left #openstack-dev00:53
*** pabelanger has quit IRC00:54
*** BalleS__ has joined #openstack-dev00:54
*** annegentle has quit IRC00:55
*** alexxu has joined #openstack-dev00:56
*** andrewbogott_afk is now known as andrewbogott00:56
*** andrewbogott is now known as andrewbogott_afk00:56
*** john5223 has joined #openstack-dev00:58
*** BalleS_ has quit IRC00:58
*** pabelanger has joined #openstack-dev00:59
*** radez is now known as radez_g0n301:00
*** jamielennox has quit IRC01:00
*** BalleS__ has quit IRC01:02
*** mrodden has quit IRC01:02
*** vkmc has joined #openstack-dev01:04
*** reed has quit IRC01:05
*** aeperezt_ has joined #openstack-dev01:05
*** beagles has quit IRC01:05
*** aeperezt_ has quit IRC01:05
*** sacharya has joined #openstack-dev01:08
*** kpavel has quit IRC01:09
*** kpavel has joined #openstack-dev01:12
*** dsanders has quit IRC01:14
*** sacharya has quit IRC01:15
*** pabelanger has quit IRC01:15
*** pixelbeat has quit IRC01:19
*** pabelanger has joined #openstack-dev01:20
*** alop has quit IRC01:21
*** soody has joined #openstack-dev01:22
*** cp16net|away is now known as cp16net01:25
*** beagles has joined #openstack-dev01:26
*** nati_ueno has quit IRC01:27
*** READ10 has quit IRC01:28
*** lmatter has quit IRC01:33
*** jasdeepH has quit IRC01:34
openstackgerritA change was merged to openstack/tempest: Add bug number for skips in CLI tests.  https://review.openstack.org/2481401:37
*** terry7 has quit IRC01:37
*** john5223 has quit IRC01:39
*** Ryan_Lane has quit IRC01:42
*** dkehn has quit IRC01:43
*** mrodden has joined #openstack-dev01:44
*** yaguang has joined #openstack-dev01:47
*** jcmartin has quit IRC01:47
*** jcmartin has joined #openstack-dev01:48
*** Gordonz has joined #openstack-dev01:48
*** kpavel has quit IRC01:48
*** davidhadas has quit IRC01:49
*** jcmartin has quit IRC01:50
*** jcmartin has joined #openstack-dev01:50
*** xchu has joined #openstack-dev01:51
*** jbresnah_ has quit IRC01:52
*** nati_ueno has joined #openstack-dev01:53
*** kpavel has joined #openstack-dev01:54
*** yaguang has quit IRC01:54
*** dolphm has joined #openstack-dev01:56
*** davidha has joined #openstack-dev01:57
*** kpavel has quit IRC01:59
*** kpavel has joined #openstack-dev01:59
*** davidha has quit IRC01:59
*** jcmartin has quit IRC02:02
*** jcmartin has joined #openstack-dev02:02
*** jbresnah has joined #openstack-dev02:04
*** anniec has quit IRC02:05
*** dims has quit IRC02:05
*** davidha has joined #openstack-dev02:06
*** danwent has quit IRC02:06
*** adalbas has quit IRC02:09
*** jasdeepH has joined #openstack-dev02:16
*** burris has quit IRC02:19
*** adjohn_ has joined #openstack-dev02:20
*** dolphm has quit IRC02:21
*** adjohn has quit IRC02:22
*** dolphm has joined #openstack-dev02:22
*** lmatter has joined #openstack-dev02:22
*** burris has joined #openstack-dev02:23
openstackgerritA change was merged to openstack/nova: Imported Translations from Transifex  https://review.openstack.org/2461802:26
*** ladquin has joined #openstack-dev02:32
*** mohits has joined #openstack-dev02:32
*** mohits has joined #openstack-dev02:32
openstackgerritA change was merged to openstack/nova: fix add-fixed-ip with quantum  https://review.openstack.org/2485202:34
*** mohits has quit IRC02:37
*** vkmc has quit IRC02:37
*** ladquin has quit IRC02:41
*** Tross has quit IRC02:42
*** ladquin has joined #openstack-dev02:43
*** mestery has joined #openstack-dev02:45
*** nunosantos has quit IRC02:47
*** ladquin has quit IRC02:47
*** ladquin has joined #openstack-dev02:48
*** mestery has quit IRC02:48
*** melwitt1 has quit IRC02:48
*** mestery has joined #openstack-dev02:49
*** kaushikc has quit IRC02:49
*** zb has joined #openstack-dev02:55
zuljgriffith:  whats up02:57
*** AlanClark has quit IRC02:57
*** AlanClark has joined #openstack-dev02:57
*** zbitter has quit IRC02:57
*** ladquin has quit IRC02:59
*** iccha__ has quit IRC03:00
*** jamielennox has joined #openstack-dev03:00
*** iccha has joined #openstack-dev03:01
*** reed has joined #openstack-dev03:02
*** reed has quit IRC03:02
*** Ryan_Lane has joined #openstack-dev03:04
*** Tross has joined #openstack-dev03:04
*** yamahata_ has quit IRC03:05
openstackgerritA change was merged to openstack/keystone: Correct spacing in warning msg  https://review.openstack.org/2486803:05
*** manas has joined #openstack-dev03:06
*** woodspa has left #openstack-dev03:07
*** yamahata_ has joined #openstack-dev03:09
*** SergeyLukjanov has joined #openstack-dev03:10
*** adjohn_ has quit IRC03:11
*** tomh has quit IRC03:13
*** tomh has joined #openstack-dev03:13
*** tomh has quit IRC03:13
*** tomh has joined #openstack-dev03:13
*** anteaya has left #openstack-dev03:14
*** ijw has quit IRC03:15
*** pabelanger has quit IRC03:18
*** jamielennox has quit IRC03:18
*** jamielennox has joined #openstack-dev03:19
openstackgerritA change was merged to openstack/nova: Add missing tests for db.virtual_interface_* methods  https://review.openstack.org/2460603:22
*** kpavel has quit IRC03:24
*** davidha has quit IRC03:25
*** kpavel has joined #openstack-dev03:26
*** kpavel has quit IRC03:27
*** davidha has joined #openstack-dev03:27
*** kpavel has joined #openstack-dev03:27
*** sdake_ has quit IRC03:30
*** soody has quit IRC03:30
*** markmcclain has quit IRC03:30
*** AlanClark has quit IRC03:33
*** jamielennox has quit IRC03:35
*** NobodyCam has quit IRC03:39
*** NobodyCam_ has joined #openstack-dev03:39
*** zb has quit IRC03:39
*** zb has joined #openstack-dev03:40
*** sirushti has quit IRC03:40
*** adjohn has joined #openstack-dev03:41
*** manas has quit IRC03:41
*** mohits has joined #openstack-dev03:43
*** lmatter has quit IRC03:44
*** HenryG has quit IRC03:48
*** soody has joined #openstack-dev03:51
*** adjohn has quit IRC03:51
*** Tross has quit IRC03:52
jgriffithzul: still around?03:54
*** mestery_ has joined #openstack-dev03:56
*** kashyap` is now known as kashyap03:56
*** mestery_ has joined #openstack-dev03:57
*** danwent has joined #openstack-dev03:57
*** mestery has quit IRC03:57
*** davidhadas has joined #openstack-dev03:59
*** soody has quit IRC03:59
*** soody has joined #openstack-dev04:00
*** davidha has quit IRC04:01
*** danwent has quit IRC04:01
*** JStoker has quit IRC04:02
*** dolphm has quit IRC04:03
*** AlanClark has joined #openstack-dev04:06
*** soody has quit IRC04:08
*** pabelanger has joined #openstack-dev04:09
*** mohits has quit IRC04:11
*** aditirav has joined #openstack-dev04:12
*** sride has joined #openstack-dev04:13
*** adjohn has joined #openstack-dev04:17
*** adjohn has quit IRC04:20
*** stevemar has joined #openstack-dev04:21
*** mohits has joined #openstack-dev04:21
*** lloydde has quit IRC04:25
*** Gordonz has quit IRC04:26
*** JStoker has joined #openstack-dev04:27
openstackgerritA change was merged to openstack/cinder: remove cinder-rtstool because of rtslib dep  https://review.openstack.org/2481504:33
*** dolphm has joined #openstack-dev04:34
openstackgerritA change was merged to openstack/cinder: Allow snapshot_delete for NFS/GlusterFS drivers  https://review.openstack.org/2465104:34
openstackgerritA change was merged to openstack/cinder: Fix Storwize/SVC LUN allocation with holes.  https://review.openstack.org/2476104:35
*** danwent has joined #openstack-dev04:36
*** dolphm_ has joined #openstack-dev04:39
*** dolphm has quit IRC04:39
*** dolphm_ has quit IRC04:40
*** boris-42 has joined #openstack-dev04:42
*** adjohn has joined #openstack-dev04:44
*** adjohn has quit IRC04:45
*** mestery_ has quit IRC04:46
*** topol has quit IRC04:47
*** matiu has quit IRC04:51
*** rcloran has left #openstack-dev04:54
*** Mathnerd314 has quit IRC04:56
*** pabelanger has quit IRC04:59
*** SergeyLukjanov has quit IRC04:59
*** Tross has joined #openstack-dev05:03
*** yaguang has joined #openstack-dev05:04
*** adjohn has joined #openstack-dev05:05
*** adjohn has quit IRC05:06
*** navid_ has joined #openstack-dev05:08
*** matiu has joined #openstack-dev05:08
*** matiu has joined #openstack-dev05:08
*** morganfainberg has quit IRC05:09
*** hattwick has quit IRC05:12
*** stevemar has quit IRC05:35
*** colinmcnamara has joined #openstack-dev05:37
*** colinmcnamara has quit IRC05:40
*** koolhead17 has joined #openstack-dev05:46
*** boris-42 has quit IRC05:47
*** boris-42 has joined #openstack-dev05:47
*** morganfainberg has joined #openstack-dev05:54
*** rushiagr has joined #openstack-dev05:55
openstackgerritA change was merged to openstack/nova: Update the network info when using quantum.  https://review.openstack.org/2484506:00
*** garyk has quit IRC06:02
*** morganfainberg has left #openstack-dev06:03
*** tomoe_ has joined #openstack-dev06:06
*** SergeyLukjanov has joined #openstack-dev06:08
*** markwash has joined #openstack-dev06:08
*** markwash has quit IRC06:15
*** adjohn has joined #openstack-dev06:17
*** danwent has quit IRC06:19
*** adjohn has quit IRC06:22
*** AlanClark has quit IRC06:22
*** boris-42 has quit IRC06:22
*** AlanClark has joined #openstack-dev06:22
*** markwash has joined #openstack-dev06:27
*** morganfainberg has joined #openstack-dev06:28
*** TheSheep has joined #openstack-dev06:30
*** Ritz-Mobile has joined #openstack-dev06:30
*** adjohn has joined #openstack-dev06:32
*** noslzzp has quit IRC06:34
*** adjohn_ has joined #openstack-dev06:34
*** security has joined #openstack-dev06:36
*** megha has quit IRC06:36
*** adjohn has quit IRC06:36
*** garyk has joined #openstack-dev06:36
*** ewindisch has quit IRC06:38
*** manas has joined #openstack-dev06:38
*** sandeepr has joined #openstack-dev06:38
*** sthaha has quit IRC06:39
*** Ritz-Mobile has quit IRC06:40
*** Ritz-Mobile has joined #openstack-dev06:40
*** avishay has joined #openstack-dev06:46
openstackgerritA change was merged to openstack/quantum: Imported Translations from Transifex  https://review.openstack.org/2485906:48
openstackgerritA change was merged to openstack/nova: Refactor db.service_destroy and db.service_update methods  https://review.openstack.org/2484906:48
*** psedlak has quit IRC06:51
*** ewindisch has joined #openstack-dev06:51
*** jasdeepH has quit IRC06:54
*** adjohn_ has quit IRC06:56
*** avishay has quit IRC07:02
*** Mandell has joined #openstack-dev07:02
*** adjohn has joined #openstack-dev07:02
*** adjohn has quit IRC07:08
*** terryw has quit IRC07:11
*** tomoe_ has quit IRC07:14
*** tomoe_ has joined #openstack-dev07:15
*** epim has quit IRC07:18
*** avishay has joined #openstack-dev07:21
*** morganfainberg has quit IRC07:22
*** psedlak has joined #openstack-dev07:23
*** boris-42 has joined #openstack-dev07:27
*** AlanClark has quit IRC07:29
*** AlanClark has joined #openstack-dev07:29
*** adjohn has joined #openstack-dev07:30
*** pnavarro has joined #openstack-dev07:31
*** pnavarro has quit IRC07:33
*** alop has joined #openstack-dev07:37
*** enikanorov has quit IRC07:39
*** henrynash has joined #openstack-dev07:40
*** koolhead17 has quit IRC07:40
*** jbresnah has quit IRC07:42
*** alop has quit IRC07:42
*** flaper87 has joined #openstack-dev07:43
*** markwash has quit IRC07:43
*** henrynash has quit IRC07:47
*** Mandell has quit IRC07:49
*** jbresnah has joined #openstack-dev07:50
*** alunduil has quit IRC07:50
*** xga has joined #openstack-dev07:55
*** reidrac has joined #openstack-dev07:57
*** marun has quit IRC07:57
*** adjohn has quit IRC07:58
*** xga has quit IRC07:59
*** zeriouz has joined #openstack-dev08:00
*** boris-42 has quit IRC08:00
*** aditirav_ has joined #openstack-dev08:01
*** aditirav has quit IRC08:01
*** aditirav_ is now known as aditirav08:01
*** rafaduran has joined #openstack-dev08:02
*** zeriouz has quit IRC08:09
*** koert has joined #openstack-dev08:12
*** fbo has joined #openstack-dev08:13
*** mrunge has joined #openstack-dev08:14
*** giulivo has joined #openstack-dev08:15
sgranhi08:16
sgrancan someone take a look at https://review.openstack.org/#/c/23256/ ?08:16
sgranI'm not looking for a merge, I'm just confused about the failure08:16
sgranhttp://logs.openstack.org/23256/6/check/gate-nova-python26/1898808:17
sgranis this a known failure case?08:17
sgran(I'm waiting for the merge window to reopen, and periodically rebasing to keep the delta minimal)08:19
*** zeriouz has joined #openstack-dev08:22
*** zoresvit has joined #openstack-dev08:25
openstackgerritA change was merged to openstack/keystone: Validate domains unconditionally (bug 1130236)  https://review.openstack.org/2481308:26
uvirtbotLaunchpad bug 1130236 in keystone "Domains are not validated on authentication" [High,In progress] https://launchpad.net/bugs/113023608:26
*** aeperezt has quit IRC08:27
*** nati_ueno has quit IRC08:29
*** aditirav_ has joined #openstack-dev08:31
*** shardy has joined #openstack-dev08:32
*** aditirav has quit IRC08:33
*** ewindisch has quit IRC08:34
*** zyluo has joined #openstack-dev08:35
*** Ritz-Laptop has quit IRC08:35
*** aditirav_ has quit IRC08:35
*** egallen has joined #openstack-dev08:36
*** aditirav has joined #openstack-dev08:36
*** enikanorov has joined #openstack-dev08:37
*** egallen has quit IRC08:38
*** jgallard has joined #openstack-dev08:39
*** dosaboy has joined #openstack-dev08:40
*** mindpixel has joined #openstack-dev08:40
*** davidhadas has quit IRC08:40
*** egallen has joined #openstack-dev08:41
*** Ritz-Laptop has joined #openstack-dev08:42
*** zeriouz has quit IRC08:42
*** darjeeling has quit IRC08:43
*** dosaboy1 has joined #openstack-dev08:45
*** dosaboy has quit IRC08:47
*** Ritz-Mobile has quit IRC08:49
*** corXi has joined #openstack-dev08:49
*** koolhead17 has joined #openstack-dev08:49
*** boris-42 has joined #openstack-dev08:53
*** romcheg1 has joined #openstack-dev08:54
*** zeriouz has joined #openstack-dev08:55
*** sulo_ has joined #openstack-dev08:56
*** mohits_ has joined #openstack-dev08:57
*** mohits has quit IRC08:57
*** Ritz-Laptop has quit IRC08:59
*** ritzcarltn has joined #openstack-dev08:59
*** manas has quit IRC08:59
*** zeriouz has quit IRC09:00
*** Yada has joined #openstack-dev09:03
*** ritzcarltn has quit IRC09:03
*** zoresvit has quit IRC09:04
*** egallen_ has joined #openstack-dev09:04
*** dev_sa has joined #openstack-dev09:05
*** egallen has quit IRC09:05
*** egallen_ is now known as egallen09:05
*** pixelbeat has joined #openstack-dev09:06
*** darraghb has joined #openstack-dev09:07
*** afazekas has joined #openstack-dev09:09
*** romcheg1 has left #openstack-dev09:09
*** aditirav has quit IRC09:13
*** johnthetubaguy has joined #openstack-dev09:14
*** zeriouz has joined #openstack-dev09:14
*** henrynash has joined #openstack-dev09:15
*** manas has joined #openstack-dev09:15
*** derekh has joined #openstack-dev09:20
*** zb is now known as zaneb09:21
*** noslzzp has joined #openstack-dev09:22
*** jpich has joined #openstack-dev09:29
*** mohits has joined #openstack-dev09:31
*** mohits has joined #openstack-dev09:31
*** asalkeld has quit IRC09:32
*** mohits_ has quit IRC09:34
*** ijw has joined #openstack-dev09:34
*** ijw has quit IRC09:34
*** ijw has joined #openstack-dev09:35
*** hattwick has joined #openstack-dev09:35
*** davidha has joined #openstack-dev09:36
*** dosaboy1 has quit IRC09:36
*** zoresvit has joined #openstack-dev09:38
*** mohits has quit IRC09:38
*** asalkeld has joined #openstack-dev09:39
*** iartarisi has joined #openstack-dev09:41
*** AlanClark has quit IRC09:42
*** danpb has joined #openstack-dev09:42
*** alobbs has joined #openstack-dev09:45
*** AlanClark has joined #openstack-dev09:45
*** Ritz-Mobile has joined #openstack-dev09:48
*** afazekas has quit IRC09:48
*** zoresvit has quit IRC09:49
*** xchu has quit IRC09:55
*** davidhadas has joined #openstack-dev09:58
*** Ritz-Mobile has quit IRC09:58
*** Ritz-Mobile has joined #openstack-dev09:59
henrynashttx: you there?10:00
ttxhenrynash: I am10:00
henrynashmorning!  have we cut the keystone rc1 yet?10:00
*** davidha has quit IRC10:00
*** jgallard has quit IRC10:02
ttxhenrynash: no10:02
ttxlet me look10:02
ttxTwo bugs still in progress10:03
ttxhttps://launchpad.net/keystone/+milestone/grizzly-rc110:03
henrynashttx: ok, just checking since an approved change of mine was hung up last night, but merged this moring10:03
henrynashttx: so I just approved the first of those: Bug 115743010:04
uvirtbotLaunchpad bug 1157430 in keystone "V3 V2 token intermix should not allowed for non-default domain" [High,In progress] https://launchpad.net/bugs/115743010:04
ttxBlokcing on https://review.openstack.org/#/c/24701/ now10:04
ttxhenrynash: should be able to cut in ~ 5 hours10:04
*** zeriouz has quit IRC10:04
ttxwhen the US crew wakes up10:04
koolhead17ttx: sounds like busy day for you :)10:04
*** janisg has quit IRC10:05
henrynashttx: Ok, I just pushed in a minor doc update to the identity api as well (not sure if we included that api doc in "the cut")10:05
ttxkoolhead17: not that much. The process is getting quite streamlined those days10:05
ttxhenrynash: anything that hits master before the version bump will be in10:05
koolhead17sounds good :)10:05
henrynashttx:. ok, thx10:06
ttxhenrynash: though identity-api is a different repo10:06
henrynashttx: that's true10:06
*** zoresvit has joined #openstack-dev10:06
*** Ritz-Mobile has quit IRC10:09
*** markwash has joined #openstack-dev10:10
*** k4n0 has joined #openstack-dev10:14
*** koolhead17 has quit IRC10:15
*** jgallard has joined #openstack-dev10:17
*** zeriouz has joined #openstack-dev10:17
*** zeriouz has quit IRC10:22
*** romcheg1 has joined #openstack-dev10:22
openstackgerritA change was merged to openstack/keystone: Prohibit V3 V2 token intermix for resource in non-default domain (bug 1157430)  https://review.openstack.org/2486910:23
uvirtbotLaunchpad bug 1157430 in keystone "V3 V2 token intermix should not allowed for non-default domain" [High,In progress] https://launchpad.net/bugs/115743010:23
*** Ritz-Laptop has joined #openstack-dev10:24
*** romcheg1 has quit IRC10:25
*** romcheg1 has joined #openstack-dev10:25
*** janisg has joined #openstack-dev10:26
*** Ritz-Laptop has quit IRC10:26
*** romcheg1 has left #openstack-dev10:26
*** afazekas has joined #openstack-dev10:27
*** alunduil has joined #openstack-dev10:28
*** zoresvit has quit IRC10:28
*** darjeeling has joined #openstack-dev10:28
*** pcm__ has joined #openstack-dev10:30
*** pcm__ has quit IRC10:31
*** pcm_ has joined #openstack-dev10:31
*** xga has joined #openstack-dev10:32
*** AlanClark has quit IRC10:33
*** zeriouz has joined #openstack-dev10:34
*** kagan has joined #openstack-dev10:34
*** kagan has quit IRC10:36
*** kagan has joined #openstack-dev10:37
*** alunduil has quit IRC10:38
openstackgerritA change was merged to openstack/ceilometer: Switch to python-keystoneclient 0.2.3.  https://review.openstack.org/2475510:39
*** jpich has quit IRC10:40
*** afazekas has quit IRC10:42
*** sandeepr has quit IRC10:42
*** zoresvit has joined #openstack-dev10:42
*** jpich has joined #openstack-dev10:42
*** sandeepr has joined #openstack-dev10:42
*** kagan has quit IRC10:44
*** manas has quit IRC10:50
*** alobbs1 has joined #openstack-dev10:50
*** alobbs has quit IRC10:50
*** AnilV4 has quit IRC10:52
*** AlanClark has joined #openstack-dev10:54
*** pfreund has joined #openstack-dev10:55
openstackgerritA change was merged to openstack/ceilometer: Set the default_log_levels to include keystoneclient  https://review.openstack.org/2428510:58
*** zeriouz has quit IRC10:58
*** gabrielcw_ has joined #openstack-dev10:58
openstackgerritA change was merged to openstack/ceilometer: remove unused dependencies  https://review.openstack.org/2442410:58
gabrielcw_Hi, anobody here knows about regions from keystone?10:59
gabrielcw_In fact, i'm tinkering with keystone regions and having two endpoints for a service, I would like to choose one of them by its region. For example when running nova boot I want to choose regionX endpoint set in keystone10:59
*** davidhadas has quit IRC11:03
*** afazekas has joined #openstack-dev11:04
*** vkmc has joined #openstack-dev11:04
*** avishay has quit IRC11:05
*** davidha has joined #openstack-dev11:05
*** psedlak_ has joined #openstack-dev11:06
*** manas has joined #openstack-dev11:06
*** psedlak__ has joined #openstack-dev11:07
*** jruzicka has joined #openstack-dev11:07
*** psedlak has quit IRC11:09
*** psedlak_ has quit IRC11:10
zykes-ls11:11
zykes-clear11:11
*** afazekas has quit IRC11:12
*** psedlak__ has quit IRC11:13
*** avishay has joined #openstack-dev11:14
*** ijw has quit IRC11:19
*** HenryG has joined #openstack-dev11:20
*** ijw has joined #openstack-dev11:21
*** pcm___ has joined #openstack-dev11:21
*** dims has joined #openstack-dev11:22
*** pcm_ has quit IRC11:24
*** sandeepr has quit IRC11:24
*** egallen has quit IRC11:24
*** psedlak has joined #openstack-dev11:25
*** afazekas has joined #openstack-dev11:25
*** xga has quit IRC11:26
*** ijw has quit IRC11:26
*** kpavel has quit IRC11:28
garykmaroh: ping11:30
*** tomoe_ has quit IRC11:31
*** tomoe_ has joined #openstack-dev11:31
*** mkollaro has joined #openstack-dev11:34
*** mindpixel has quit IRC11:34
*** koert_ has joined #openstack-dev11:37
*** kpavel has joined #openstack-dev11:41
*** koert has quit IRC11:42
*** boris-42 has quit IRC11:43
*** yaguang has quit IRC11:44
*** avishay has quit IRC11:44
*** kagan has joined #openstack-dev11:49
*** rkukura has quit IRC11:50
*** avishay has joined #openstack-dev11:50
*** soody has joined #openstack-dev11:50
*** jbr_zzz is now known as jbr_11:51
*** adjohn has joined #openstack-dev11:57
*** soody has quit IRC12:01
*** darjeeling has quit IRC12:01
*** adjohn has quit IRC12:02
*** rkukura has joined #openstack-dev12:04
*** aeperezt has joined #openstack-dev12:09
*** almaisan-away has quit IRC12:10
*** almaisan-away has joined #openstack-dev12:11
*** almaisan-away is now known as al-maisan12:11
*** afazekas has quit IRC12:11
vkmcHi all, do somebody know which license applies when a software is double licensed? Both?12:14
*** zoresvit has quit IRC12:15
vkmcI'm trying to add a library and I'm not sure how to proceed... I know OpenStack uses ALv2, and read that it's compatible with MIT licences... but this library I want to add has both MIT and GPL licenses12:15
*** dolphm_ has joined #openstack-dev12:15
dimsvkmc, are you fixing an openstack bug or adding a feature for one of the openstack projects?12:17
vkmcdims, Fixing an OpenStack bug that requires adding an external lib12:18
dimsvkmc, then the first step is to ask on openstack-dev if a new dependency is acceptable. some of the distro folks don't like adding new dependencies. when you write the email you can ask both if the dependency is ok and ask for guidance on the licensing question12:20
dimsi am curious which library is this?12:20
*** boris-42 has joined #openstack-dev12:21
*** kagan has quit IRC12:23
*** alobbs has joined #openstack-dev12:25
vkmcdims, Sounds good to me :) I was following an already opened thread about licensing in openstack-dev list12:25
vkmcdims, It's for this bug https://bugs.launchpad.net/horizon/+bug/1102448, it's a JavaScript datepicker what I'm trying to add12:26
uvirtbotLaunchpad bug 1102448 in horizon "Query a range of time for Usage Summary" [Low,In progress]12:26
*** afazekas has joined #openstack-dev12:26
*** alobbs1 has quit IRC12:26
*** koert_ has quit IRC12:27
*** alobbs has quit IRC12:27
*** alobbs has joined #openstack-dev12:28
*** koert has joined #openstack-dev12:29
*** kaushikc has joined #openstack-dev12:31
*** kagan has joined #openstack-dev12:33
*** zoresvit has joined #openstack-dev12:35
*** martine has joined #openstack-dev12:35
*** gongysh has quit IRC12:36
*** alobbs1 has joined #openstack-dev12:40
dimsvkmc, y that case is a little different as they have just AGPLv3. with this there may be leeway to consider MIT12:40
*** ayoung has quit IRC12:40
*** gongysh has joined #openstack-dev12:40
*** alobbs has quit IRC12:40
*** digitalsanctum has joined #openstack-dev12:40
*** manas has quit IRC12:41
*** alobbs1 has quit IRC12:42
*** alobbs has joined #openstack-dev12:42
*** Yada has quit IRC12:43
vkmcdims, I see12:44
vkmcdims, Well, I will follow your pointers and ask about this dependency12:44
vkmcdims, Thanks a lot :)12:44
*** iartaris` has joined #openstack-dev12:45
*** jbresnah has quit IRC12:45
*** jbresnah has joined #openstack-dev12:48
*** iartarisi has quit IRC12:49
*** rnirmal has joined #openstack-dev12:49
*** iartaris` has quit IRC12:50
*** radez_g0n3 is now known as radez12:50
*** susanne-balle has joined #openstack-dev12:51
*** CaptTofu has quit IRC12:51
*** CaptTofu has joined #openstack-dev12:52
*** mestery has joined #openstack-dev12:52
*** dprince has joined #openstack-dev12:55
*** avishay has quit IRC12:55
*** dprince has quit IRC12:56
*** CaptTofu has quit IRC12:56
*** adjohn has joined #openstack-dev12:59
*** vkmc has quit IRC13:00
*** egallen has joined #openstack-dev13:01
*** romcheg1 has joined #openstack-dev13:03
*** adjohn has quit IRC13:03
*** alobbs has quit IRC13:03
*** egallen has quit IRC13:04
*** egallen has joined #openstack-dev13:04
*** sride has quit IRC13:05
*** SergeyLukjanov has quit IRC13:05
*** bswartz has quit IRC13:08
*** cloudchimp has joined #openstack-dev13:09
*** AlanClark has quit IRC13:09
*** AlanClark has joined #openstack-dev13:10
*** koolhead17 has joined #openstack-dev13:11
*** bswartz has joined #openstack-dev13:12
*** aditirav has joined #openstack-dev13:12
*** kbringard has joined #openstack-dev13:17
*** aditirav has quit IRC13:17
*** stevemar has joined #openstack-dev13:21
*** stevemar has quit IRC13:22
rushiagrdo anyone have any idea what is the difference between tempest and gate tests?13:22
*** bknudson has joined #openstack-dev13:22
*** sirushti has joined #openstack-dev13:23
*** kagan has quit IRC13:26
*** woodspa has joined #openstack-dev13:27
*** bknudson has quit IRC13:28
ttxrushiagr: gate tests include the tempest test suite13:30
jgallardrushiagr, from my knowledge tempest is for running the tests whereas gate tests are the infra for created the VM in which the tempest test will run13:30
rushiagrttx: jgallard: so if I'm adding a new feature, I should concentrate on writing the tempest tests only13:31
rushiagrand there is no such thing as writing gate tests13:32
rushiagrright?13:32
ttxrushiagr: yes13:32
jgallardyes13:32
*** bknudson has joined #openstack-dev13:33
rushiagrokay, cool13:33
rushiagrthanks13:34
*** READ10 has joined #openstack-dev13:34
*** rushiagr has left #openstack-dev13:35
*** mkollaro has quit IRC13:36
*** ayoung has joined #openstack-dev13:37
*** egallen has quit IRC13:38
*** egallen has joined #openstack-dev13:38
*** dolphm_ has quit IRC13:40
*** ladquin has joined #openstack-dev13:42
*** ladquin has quit IRC13:46
*** mtreinish has joined #openstack-dev13:47
*** Gordonz has joined #openstack-dev13:51
crazedLDAP add: dn=cn=default,ou=Domains,dc=openstack,dc=org, attrs=[('objectClass', ['groupOfNames']), ('enabled', ['TRUE']), ('description', ['Owns users and tenants (i.e. projects) available on Identity API v2.']), ('ou', ['Default']), ('member', ['cn=dumb,dc=nonexistent'])]13:51
crazeddamn it, back to that problem13:51
crazedseems we need that emulated stuff for domains13:52
crazedand probably groups13:52
crazedayoung: ^13:53
*** mkollaro has joined #openstack-dev13:54
*** pberis has quit IRC13:55
*** Ritz-Mobile has joined #openstack-dev13:55
*** ladquin has joined #openstack-dev13:55
*** pberis has joined #openstack-dev13:56
*** anteaya has joined #openstack-dev13:56
*** gongysh has quit IRC13:56
*** SergeyLukjanov has joined #openstack-dev13:57
*** jimfehlig has joined #openstack-dev13:57
*** jaypipes has joined #openstack-dev13:57
*** dolphm has joined #openstack-dev13:59
*** iartaris` has joined #openstack-dev13:59
crazedi filed a bug report for now https://bugs.launchpad.net/keystone/+bug/115772714:00
uvirtbotLaunchpad bug 1157727 in keystone "ldap backend fails to work with enabled attributes on domains and groups" [Undecided,New]14:00
*** pfreund has quit IRC14:00
henrynashttx: There are a couple of bugs on keystone that we have not fixed for Grizzly that have a potential security impact (not terrible, since otherwise we would have fixed them)…what is the process for making sure we include/issue them as a security notice?14:00
*** adjohn has joined #openstack-dev14:00
ttxhenrynash: you can subscribe "openstack-vuln-mgmt" to them and we'll assess what we should do with them.14:01
henrynashttx: Ok, thx14:01
ttxhenrynash: generally they are either recognized as an exploitable vulnerability and pushed through the process... or not.14:01
ttxno real middle ground14:02
*** markmcclain has joined #openstack-dev14:02
*** topol has joined #openstack-dev14:02
*** markwash has quit IRC14:03
*** colinmcnamara has joined #openstack-dev14:05
*** adjohn has quit IRC14:05
*** kaushikc has quit IRC14:05
*** aeperezt has quit IRC14:05
*** NobodyCam_ is now known as NobodyCam14:09
*** mestery has quit IRC14:09
ayoungcrazed, "emulated stuff"?14:09
*** dspano has joined #openstack-dev14:09
ayoungYou mean https://review.openstack.org/#/c/24555/  ?14:09
ayoungcrazed, can you write a unit test that shows this?14:11
*** pabelanger has joined #openstack-dev14:11
*** romcheg1 has left #openstack-dev14:11
*** rcj has joined #openstack-dev14:12
*** Yada has joined #openstack-dev14:14
*** colinmcnamara has quit IRC14:15
*** adepti37 has quit IRC14:15
*** maoy has joined #openstack-dev14:17
*** AlanClark has quit IRC14:17
*** eharney has joined #openstack-dev14:17
*** ladquin has quit IRC14:17
*** AlanClark has joined #openstack-dev14:17
*** terryw has joined #openstack-dev14:18
*** ladquin has joined #openstack-dev14:18
*** adepti37 has joined #openstack-dev14:18
*** markmcclain has quit IRC14:20
*** markmcclain has joined #openstack-dev14:23
*** sirushti has quit IRC14:24
*** dosaboy has joined #openstack-dev14:25
*** ladquin has quit IRC14:25
*** SergeyLukjanov has quit IRC14:26
*** sstent has quit IRC14:27
*** yidclare has joined #openstack-dev14:27
*** sstent has joined #openstack-dev14:27
*** lglenden has joined #openstack-dev14:28
*** adjohn has joined #openstack-dev14:31
*** gongysh has joined #openstack-dev14:31
*** sulo_ has left #openstack-dev14:32
crazedayoung: sorry, no when we added domains/groups they have the idea of being enabled, so they try to add an enabled: TRUE attribute to the domain/group OUs14:32
*** primeminsiterp has joined #openstack-dev14:32
*** devoid has joined #openstack-dev14:32
*** sulo_ has joined #openstack-dev14:33
crazedtenants and users worked around this since there is no real ldap standard for "enabled"14:33
*** Ritz-Mobile has quit IRC14:33
*** Ritz-Laptop has joined #openstack-dev14:34
*** stevemar has joined #openstack-dev14:35
*** adjohn has quit IRC14:36
*** security has quit IRC14:36
*** fire has joined #openstack-dev14:36
*** zoresvit has quit IRC14:36
*** ladquin has joined #openstack-dev14:37
dtroyersdague: hey, take 2…sorry I ran off last night…a non-maskable interrupt occurred14:37
sdaguedtroyer: no worries14:38
sdaguewhat's up?14:38
dtroyersdague: could you have a look at https://review.openstack.org/24831 for me?  it's what will finally let https://review.openstack.org/#/c/23148/ run under quantum14:38
sdaguesure, will do14:38
*** blamar has joined #openstack-dev14:39
*** CaptTofu has joined #openstack-dev14:39
dtroyerthanks14:39
*** mestery has joined #openstack-dev14:40
sdaguegive me about 15 and I'll get through it14:42
dtroyernp, thanks14:42
*** alobbs has joined #openstack-dev14:45
*** zoresvit has joined #openstack-dev14:46
*** markmc has joined #openstack-dev14:47
sdaguedtroyer: lgtm14:48
*** kaushikc has joined #openstack-dev14:48
*** datsun180b has joined #openstack-dev14:50
*** nunosantos has joined #openstack-dev14:50
*** dolphm has quit IRC14:51
*** dosaboy has quit IRC14:52
*** dolphm has joined #openstack-dev14:54
*** ladquin has quit IRC14:54
openstackgerritA change was merged to openstack/cinder: Use OpenStack common project requires.  https://review.openstack.org/2484114:55
*** ladquin has joined #openstack-dev14:56
*** imsplitbit has joined #openstack-dev14:59
*** ladquin has quit IRC15:01
*** dprince has joined #openstack-dev15:01
*** adjohn has joined #openstack-dev15:02
openstackgerritA change was merged to openstack/cinder: Rename cinder-rtstool to rtstool  https://review.openstack.org/2484015:02
*** digitalsanctum has quit IRC15:02
*** ladquin has joined #openstack-dev15:04
*** navid_ has quit IRC15:07
*** adjohn has quit IRC15:07
*** davidha has quit IRC15:07
*** andrewbogott_afk is now known as andrewbogott15:08
*** ladquin has quit IRC15:08
*** ladquin has joined #openstack-dev15:08
*** manas has joined #openstack-dev15:10
*** ladquin has quit IRC15:10
*** yaguang has joined #openstack-dev15:10
*** olaph has joined #openstack-dev15:11
*** ladquin has joined #openstack-dev15:11
*** lloydde has joined #openstack-dev15:12
*** mrodden has quit IRC15:13
*** lloydde_ has joined #openstack-dev15:13
*** jasdeepH has joined #openstack-dev15:13
openstackgerritA change was merged to openstack/oslo-incubator: clarify --log-file comments  https://review.openstack.org/2488915:14
*** edmund1 has joined #openstack-dev15:14
openstackgerritA change was merged to openstack/oslo-incubator: Removes unused imports in the tests module  https://review.openstack.org/2488115:15
*** pberis has quit IRC15:16
*** lloydde has quit IRC15:17
*** cp16net is now known as cp16net|away15:18
vishysome light reading if people get bored: http://vish.everyone.me/python-is-slow15:20
*** lglenden has quit IRC15:21
*** marun has joined #openstack-dev15:22
openstackgerritA change was merged to openstack-dev/devstack: Force Quantum processes to run in a subshell  https://review.openstack.org/2483115:24
*** bdpayne has quit IRC15:24
*** lloydde has joined #openstack-dev15:24
*** SergeyLukjanov has joined #openstack-dev15:25
*** lloydde__ has joined #openstack-dev15:25
dolphmmarkmc: totally reworked this patch this morning -- see commit message https://review.openstack.org/#/c/24701/15:25
*** bdpayne has joined #openstack-dev15:25
*** sandeepr has joined #openstack-dev15:26
*** salgado is now known as salgado-lunch15:28
*** dprince has quit IRC15:28
*** yidclare has quit IRC15:28
*** lloydde_ has quit IRC15:28
markmcdolphm, cool, will look - thanks15:28
dolphmmarkmc: appreciated!15:29
*** lloydde has quit IRC15:29
*** racedo` is now known as racedo15:29
*** lloydde__ has quit IRC15:29
*** boris-42 has quit IRC15:30
*** mrodden has joined #openstack-dev15:31
*** gyee has joined #openstack-dev15:32
*** ewindisch has joined #openstack-dev15:36
*** terryw is now known as otherwiseguy15:38
*** danwent has joined #openstack-dev15:44
*** arbrandes has joined #openstack-dev15:44
*** mestery has quit IRC15:45
*** markmcclain has quit IRC15:47
*** dev_sa has quit IRC15:48
dolphmgyee: henrynash: ayoung: this is our last release blocker; it works in devstack w/ nova and i included a test to reproduce which needs to be run in isolation; i'd like markmc's upvote before we merge it though https://review.openstack.org/#/c/24701/15:50
*** stevemar has quit IRC15:50
*** john5223 has joined #openstack-dev15:50
*** stevemar has joined #openstack-dev15:50
gyeedolphm, looking ...15:51
*** jsindy has joined #openstack-dev15:51
*** lmatter has joined #openstack-dev15:52
*** bdpayne has quit IRC15:53
*** s1rp has quit IRC15:53
*** adepti37 has quit IRC15:53
*** torandu has quit IRC15:54
*** alobbs1 has joined #openstack-dev15:54
*** alobbs has quit IRC15:55
*** zoresvit has quit IRC15:55
*** annegentle has joined #openstack-dev15:56
*** sirushti has joined #openstack-dev15:56
*** markmcclain has joined #openstack-dev15:57
*** torandu has joined #openstack-dev15:58
*** diogogmt has joined #openstack-dev15:59
openstackgerritA change was merged to openstack/nova: Set version to 2013.2  https://review.openstack.org/2490816:00
*** cp16net|away is now known as cp16net16:00
*** dolphm has quit IRC16:01
*** egallen has quit IRC16:01
*** egallen has joined #openstack-dev16:02
gyeedolphm, option registration doesn't happen till keystone/config is import right?16:03
gyeeimported16:04
*** darjeeling has joined #openstack-dev16:05
henrynashdolphm: …and the change to exceptions for AuthPlugins….could you just explain why that is needed?16:05
*** hemnafk is now known as hemna16:06
*** koolhead17 has quit IRC16:06
*** k4n0 has left #openstack-dev16:06
*** adepti37 has joined #openstack-dev16:07
*** lloydde has joined #openstack-dev16:08
gyeehenrynash, see his comments on patch 216:08
henrynashgyee: ok. looking16:08
*** vkmc has joined #openstack-dev16:09
*** SergeyLukjanov has quit IRC16:09
henrynashgyee: ah, ok, thx16:09
henrynashdolphm: ok, cancel that question16:10
*** markmc has quit IRC16:10
*** zoresvit has joined #openstack-dev16:10
*** jsindy has quit IRC16:10
*** jsindy has joined #openstack-dev16:11
*** zaitcev has joined #openstack-dev16:11
*** tomoe_ has quit IRC16:13
*** SergeyLukjanov has joined #openstack-dev16:13
*** tomoe_ has joined #openstack-dev16:13
termieayoung: how'd it go on project Trusts Extension?16:13
*** reidrac has quit IRC16:14
*** annegentle has quit IRC16:15
*** jsindy has quit IRC16:15
*** SergeyLukjanov has quit IRC16:18
*** SergeyLukjanov has joined #openstack-dev16:20
*** yidclare has joined #openstack-dev16:20
*** zoresvit has quit IRC16:20
*** alop has joined #openstack-dev16:20
*** otherwiseguy has quit IRC16:21
*** yaguang has quit IRC16:21
*** avishay has joined #openstack-dev16:21
*** bdpayne has joined #openstack-dev16:22
*** dolphm has joined #openstack-dev16:23
*** zoresvit has joined #openstack-dev16:24
*** sdake_ has joined #openstack-dev16:26
*** pabelanger has quit IRC16:27
*** huats has quit IRC16:27
*** iartaris` has quit IRC16:28
*** SergeyLukjanov has quit IRC16:30
*** huats has joined #openstack-dev16:31
*** huats has quit IRC16:31
*** huats has joined #openstack-dev16:31
*** dosaboy has joined #openstack-dev16:31
*** rcj has quit IRC16:32
*** AlanClark has quit IRC16:33
*** AlanClark has joined #openstack-dev16:33
*** nati_ueno has joined #openstack-dev16:33
*** mrodden has quit IRC16:34
*** koert has quit IRC16:34
gyeedolphm, need your input on https://review.openstack.org/#/c/24401/16:36
*** mrodden has joined #openstack-dev16:37
*** devoid has quit IRC16:38
*** egallen has quit IRC16:38
*** kpavel has quit IRC16:38
*** mestery has joined #openstack-dev16:39
*** egallen has joined #openstack-dev16:39
*** Ryan_Lane has quit IRC16:40
*** Ryan_Lane has joined #openstack-dev16:41
*** alexxu has quit IRC16:41
openstackgerritA change was merged to openstack/swift: fix stupid bug with bulk delete max items  https://review.openstack.org/2481016:42
*** alop has quit IRC16:42
sstentis there any recommended way of migrating from auto_assign_floating_ip to manual assignment?16:42
*** alop has joined #openstack-dev16:42
ttxdolphm: looks like you're getting very close to Keystone RC1 now16:43
*** mrodden has quit IRC16:44
ttxdolphm: When you're happy with the state of master (and before the end of your day) you can push a 2013.2 version bump (in setup.py) to master16:44
ttxdolphm: Will cut your grizzly release branch from the previous commit16:44
*** salgado-lunch is now known as salgado16:44
dolphmttx: just push a signed tag?16:44
*** mrodden has joined #openstack-dev16:44
*** cp16net is now known as cp16net|away16:44
ttxdolphm: no, s/2013.1/2013.2/ in setup.py16:45
dolphmgyee: will do16:45
dolphmttx: ah, that's easy16:45
*** jsindy has joined #openstack-dev16:45
ttxdolphm: that opens havana development on master, basically16:45
*** dontalton has joined #openstack-dev16:45
*** gabrielcw_ has quit IRC16:46
openstackgerritA change was merged to openstack-dev/devstack: Enable multi-agent support  https://review.openstack.org/2476316:46
*** dwt2 has joined #openstack-dev16:46
*** alop has quit IRC16:46
*** adjohn has joined #openstack-dev16:47
*** alop has joined #openstack-dev16:47
*** anniec has joined #openstack-dev16:48
*** dwt has joined #openstack-dev16:49
*** dwt is now known as dontalton216:49
*** dontalton has quit IRC16:50
*** aeperezt has joined #openstack-dev16:50
termieayoung: i suppose i can make up a change for the move myself16:51
*** dosaboy has quit IRC16:51
*** noslzzp has quit IRC16:52
*** dwt2 has quit IRC16:52
sgranI'm trying to profile nova-api in folsom.  It's taking about 8 seconds to do a metadata lookup, which seems like a lot to me16:53
sgranI can see by printf debugging that I can shave 2 seconds off of that by saving and reusing a quantum client in nova/network/quantumv2/api.py (a new client is created in each method)16:54
sgranwhy is it created fresh in each method right now, as opposed to having something like self.qclient = ... ?16:55
*** Ryan_Lane has quit IRC16:55
*** mestery has quit IRC16:55
sgranis it that 'context' will change between invocations?16:56
*** cdub_ has joined #openstack-dev16:56
*** dontalton2 is now known as dontalton16:56
*** boris-42 has joined #openstack-dev16:57
*** zaitcev has quit IRC17:01
*** esp1 has joined #openstack-dev17:02
*** koolhead17 has joined #openstack-dev17:03
*** kpavel has joined #openstack-dev17:03
*** terry7 has joined #openstack-dev17:04
*** yidclare has quit IRC17:05
*** jpich has quit IRC17:06
dolphmayoung: henrynash: topol: https://bugs.launchpad.net/keystone/+bug/115772717:06
uvirtbotLaunchpad bug 1157727 in keystone "ldap backend fails to work with enabled attributes on domains and groups" [Undecided,New]17:06
*** jcmartin has quit IRC17:08
*** jcmartin has joined #openstack-dev17:08
*** mestery has joined #openstack-dev17:09
*** blamar has quit IRC17:11
*** zaitcev has joined #openstack-dev17:13
sdaguettx: in the summit track for qa, we seem to be getting the "doesn't fit anywhere else" set of submissions17:14
dolphmhenrynash: was this fixed in your domain validation patch? https://bugs.launchpad.net/keystone/+bug/115473717:14
uvirtbotLaunchpad bug 1154737 in keystone "credentials are not loading domain_id from token_data (loaded from token table)" [Undecided,New]17:14
sdagueis there any ability to open up a related projects or cross project track or something?17:14
ttxsdague: there is an unconference room. You should reject them and point them to that17:15
henrynashdolphm: loooking17:15
openstackgerritA change was merged to openstack/python-keystoneclient: Config value for revocation list timeout  https://review.openstack.org/2479617:15
sdaguettx: ok, that's fine :)17:15
ttxsdague: it's running all 4 days. it will be scheduled on-site.17:15
sdaguecool17:15
ttxsdague: you can also try to send them my way to the Process track17:15
ttxand I can reject them from there :)17:15
dolphmhenrynash: i'm a little confused on if this is an actual bug or just a concern that the code looks funky (and maybe just needs comments to explain what's going on)17:16
ttxrelated projects -> unconference, definitely17:16
*** avishay has quit IRC17:16
ttxsdague: cross-project -> Process, QA, Docs, Oslo or unconference17:16
henrynashdolphm: thinking through it…but initial reaction is that this isn't a bug17:16
* ttx disappears for the next hours17:16
topoldolphm, we are looking at 1157727 now17:16
dolphmtopol: thank you, let me know if it should block release17:17
henrynashdolphm: I think your comment is correct on the bug, I think the reportsr is confused by the different use of domain under the user auth component and domain in the scope component17:17
topoldolphm, K. Will let you know17:17
*** zoresvit has quit IRC17:18
henrynashdolphm: not sure why there are two user entries in the token, however17:18
dolphmhenrynash: alright, will mark as incomplete and close if we don't hear back17:18
sdaguettx: Process == Infrastructure? for the purposes of tracks17:20
*** yidclare has joined #openstack-dev17:21
*** sirushti has quit IRC17:21
*** Mandell has joined #openstack-dev17:21
*** dolphm has quit IRC17:22
*** manas has quit IRC17:24
*** davidha has joined #openstack-dev17:24
*** mestery has quit IRC17:25
*** JonnyNomad has joined #openstack-dev17:26
*** alobbs1 has quit IRC17:26
*** derekh has quit IRC17:28
*** bdpayne has quit IRC17:28
*** cloudchimp has quit IRC17:29
ayoungtermie, I think Trusts are more fundamental than an Extension.17:29
*** egallen has quit IRC17:29
ayoungtermie, I've been thinking long and hard about this....what trusts are that makes them different, is they are a base level abstraction17:29
*** bdpayne has joined #openstack-dev17:30
ayoungSo, I would see other extensions being able to use the same concept, perhapes with different mechanisms.17:30
*** roampune has joined #openstack-dev17:30
ayoungBut trusts are a way of doing delegation, and nothing else in Keystone already supports that.17:30
ayoungSo it isn't just that Trusts needs access to core.17:30
ayoungIts that Trusts need to be a core concept.17:30
harlowjaso a question for some keystone folks, i was seeing that users can actually be in tenants without any roles (at least in folsom), is this something we want to encourage, seems a little odd17:31
*** spzala has joined #openstack-dev17:31
ayoungtermie, lets assume for a moment that we were not talking about Keystone at all, but rather Kerberos.17:31
ayoungKerberos is also a solution to single sign on.17:32
*** cloudchimp has joined #openstack-dev17:32
ayoungKerberos does not allow multiple mechanisms, just the Kerberos mechanisms17:32
*** otherwiseguy has joined #openstack-dev17:33
*** mestery has joined #openstack-dev17:33
*** markwash has joined #openstack-dev17:34
ayoungKerberos found that, for many operations and use cases, the existing abstractions/mechanisms were not sufficient.  Those were delegation cases, where one service had to do something on behalf of another service, which was in turn operating on behalf of a user.  The solution is Service For User To Proxy.  Or S4U2Proxy.  If you look at OAuth2, its whole reason for existance is to try and implement delegation.   So Trusts, while they do h17:34
ayoungave a mechanism implicit in them, is much more than a mechanism.17:34
*** blamar has joined #openstack-dev17:36
*** jgallard has quit IRC17:37
*** fbo has quit IRC17:37
*** cp16net|away is now known as cp16net17:40
*** Ryan_Lane has joined #openstack-dev17:40
ayoungRyan_Lane, can you chime in on https://bugs.launchpad.net/keystone/+bug/115772717:41
uvirtbotLaunchpad bug 1157727 in keystone "ldap backend fails to work with enabled attributes on domains and groups" [Undecided,New]17:41
*** AlanClark has quit IRC17:41
*** romcheg1 has joined #openstack-dev17:41
*** AlanClark has joined #openstack-dev17:41
*** romcheg1 has left #openstack-dev17:41
termieayoung: how does that change its extension status?17:42
*** lmatter has quit IRC17:42
termieayoung: (not implying agreement with your statement, but i also don't see how that affects whether it should be an extension)17:42
*** arbrandes has quit IRC17:47
*** jsindy has quit IRC17:48
*** AlanClark has quit IRC17:49
spzalacrazed: Hi!17:50
*** lloydde has quit IRC17:54
termieayoung: (also, never talk about oauth2 when people talk about oauth, they are unrelated)17:55
*** jsindy has joined #openstack-dev17:55
*** kagan has joined #openstack-dev17:56
*** afazekas has quit IRC17:56
*** SergeyLukjanov has joined #openstack-dev17:58
*** lloydde has joined #openstack-dev17:59
*** morganfainberg has joined #openstack-dev18:00
*** david-lyle has joined #openstack-dev18:01
*** al-maisan is now known as almaisan-away18:02
*** pfreund has joined #openstack-dev18:04
*** cp16net is now known as cp16net|away18:04
*** lmatter has joined #openstack-dev18:05
*** koert has joined #openstack-dev18:05
*** mrodden has quit IRC18:05
*** rnirmal has quit IRC18:07
*** garyk has quit IRC18:08
*** alunduil has joined #openstack-dev18:08
*** cp16net|away is now known as cp16net18:08
*** dsanders1 has joined #openstack-dev18:09
openstackgerritA change was merged to openstack-dev/devstack: Add run_process() to start services without screen  https://review.openstack.org/2314818:10
*** dolphm has joined #openstack-dev18:10
*** corXi has quit IRC18:10
*** Mathnerd314 has joined #openstack-dev18:12
*** Mandell has quit IRC18:13
ayoungtermie, quite simple.  A core concept should not be an extension.18:14
termieayoung: it is not the way to implement the concept18:15
*** sulo_ has quit IRC18:19
*** rnirmal has joined #openstack-dev18:20
*** Mandell has joined #openstack-dev18:21
*** melwitt has joined #openstack-dev18:21
openstackgerritA change was merged to openstack/cinder: Add snapshots to the volume usage audit report  https://review.openstack.org/2480618:23
termieayoung: alright, from another perspective: you are adding a new feature, one specifically for third-party auth delegation that doesn't _need_ to share any code with the core18:23
termieayoung: separation of concerns would argue nicely for not messing with the existing api18:24
termieayoung: and, while you are at it, it should be using signed requests to get the new tokens, since it is a new feature anyway18:25
termieayoung: and if you are doing that, we have an existing spec defined that should be implemented instead of something newly defined18:27
sgran18:28
*** alobbs has joined #openstack-dev18:29
*** alobbs has quit IRC18:31
*** krtaylor has quit IRC18:32
*** s1rp has joined #openstack-dev18:32
*** garyk has joined #openstack-dev18:33
*** blamar has quit IRC18:33
*** roampune_ has joined #openstack-dev18:34
*** kagan has quit IRC18:34
*** networkstatic has joined #openstack-dev18:35
*** dolphm has quit IRC18:35
*** annegentle has joined #openstack-dev18:35
*** pfreund has quit IRC18:36
*** roampune has quit IRC18:36
*** mrodden has joined #openstack-dev18:38
openstackgerritA change was merged to openstack/swift: increase unit test coverage on account server  https://review.openstack.org/2473318:39
*** koert has quit IRC18:40
ayoungtermie, "Existing spec?"18:40
termieayoung: oauth18:40
termieayoung: specifically exists to provide an authenticated third-party rights to access something on behalf of a user, they'll make a signed request to our api to get a scoped token18:41
termieayoung: they request an api token from the user for the roles they need, user says sure and hands em the token18:42
termieayoung: they later can use that token to get a standard keystone token scoped to the proper roles18:42
termieayoung: you get signed requests, a bunch of existing knowledge, libraries, gui design guidelines18:44
topoldolphm,  regarding 1157727.  So here is what is happening,  ideally you should be able to use enabled_emulation for Group and Domains but those classes did not include the emulation mixin class so right now you can use enabled for Group and Domains.  the work around is to use the ignore attribute for these and then the test will work.  Hmm not sure this is worth blocking a release since...18:45
topol...there is a work around18:45
topolerr cannot use enabled emulation for Group and domains18:46
*** devoid has joined #openstack-dev18:46
openstackgerritA change was merged to openstack/quantum: Fix DB query returning ready devices in LoadBalancerCallbacks  https://review.openstack.org/2476818:46
*** Gordonz has quit IRC18:47
*** alobbs has joined #openstack-dev18:48
*** salv-orlando has joined #openstack-dev18:49
*** danpb has quit IRC18:49
topoldolphm, so sahdev knows how to fix this by adding the mixin to those classes and adding some corresponding values in the conf file.  He will do this now and submit a patch. Up to you if you want to merge it in to RC or not18:49
spzalaI think we, brad and I,  have got it .. I am going submit a patch18:49
*** bdpayne has quit IRC18:50
*** bdpayne has joined #openstack-dev18:51
mjforkis there any way to search *implemented* blueprints?18:51
mjforkeverytime I search, it appears to only search non-implemented on18:51
*** darraghb has quit IRC18:53
*** metral has quit IRC18:54
*** reed has joined #openstack-dev18:55
*** bknudson has quit IRC18:55
*** mestery has quit IRC18:55
*** mlavalle has joined #openstack-dev18:56
*** jruzicka has quit IRC18:56
*** Gordonz has joined #openstack-dev18:56
*** Gordonz has quit IRC18:56
*** dolphm has joined #openstack-dev18:57
*** Gordonz has joined #openstack-dev18:57
*** rnirmal has quit IRC18:58
*** devananda has quit IRC18:59
*** ijw has joined #openstack-dev18:59
*** devoid has quit IRC19:00
*** devoid has joined #openstack-dev19:00
*** dolphm has quit IRC19:00
jgriffithannegentle: just noticed your comments on my docs patch, I'll have a look19:00
*** mestery has joined #openstack-dev19:01
annegentlejgriffith: ok, good, git should sort it all out but wanted to ensure the doc bugs get fixed too19:01
*** ijw has quit IRC19:01
*** ijw has joined #openstack-dev19:01
*** cloudchimp has quit IRC19:02
*** lmatter has quit IRC19:03
koolhead17mjfork, i think launchpad does gives you option of advance search not sure if its their 4 blueprints19:03
*** lmatter has joined #openstack-dev19:06
*** oubiwann has joined #openstack-dev19:06
*** adrian17od has joined #openstack-dev19:08
jgriffithannegentle: not too bad, just the troubleshooting doc19:08
jgriffithannegentle: I removed all refs to nova-volume19:08
jgriffithannegentle: since it's gone in G19:08
jgriffithperhaps that was wrong?19:08
*** alobbs has quit IRC19:09
*** vipul is now known as vipul|away19:09
jgriffithannegentle: ohhh... hrmmmm19:09
annegentlejgriffith: heh19:10
annegentlejgriffith: yeah I did all that19:10
annegentlejgriffith: and hoped to get it in first19:10
jgriffith:)19:10
annegentlejgriffith: so you could take it (timing should've been about right?) :)19:10
annegentlejgriffith: but didn't want to clobber your efforts19:11
jgriffithannegentle: yeah, worked out pretty good19:11
jgriffithannegentle: so the only conflicts are block-storage-admin/troubleshoot-cinder.xml19:11
annegentlejgriffith: ah ok19:11
jgriffithannegentle: head still refs compute-admin, I'll change that and resub19:12
jgriffithannegentle: should be ezpz19:12
annegentlejgriffith: ohh right19:12
annegentlejgriffith: you'll need a separate pom.xml too19:12
*** reed has quit IRC19:13
jgriffithannegentle: ummm... yeah, sure :)19:13
*** lmatter has quit IRC19:13
*** cp16net is now known as cp16net|away19:13
annegentlejgriffith: the compute admin one will work with a few file name changes19:13
*** ayoung has quit IRC19:14
*** devananda has joined #openstack-dev19:16
*** jsindy has quit IRC19:16
*** alobbs has joined #openstack-dev19:18
*** dolphm has joined #openstack-dev19:19
jgriffithannegentle: k... https://review.openstack.org/#/c/24662/19:20
jgriffithannegentle: no idea if that pom is right :)19:20
jgriffithannegentle: I'll be back in a bit to see if it's completely hosed or not :)19:20
annegentlejgriffith: cool I'll test and review :)19:20
jgriffithannegentle: thank you much!19:21
*** markwash has quit IRC19:21
*** digitalsanctum has joined #openstack-dev19:22
*** johnthetubaguy has quit IRC19:22
*** adjohn has quit IRC19:22
*** anniec has quit IRC19:28
*** networkstatic has quit IRC19:29
*** mrodden1 has joined #openstack-dev19:29
sandeepri installed keystone rc1 on raring and keystone-all does not do anything19:30
sandeeprany hint?19:30
*** mrodden has quit IRC19:30
*** cp16net|away is now known as cp16net19:31
*** dolphm has quit IRC19:31
*** metral has joined #openstack-dev19:31
*** jd80104 has joined #openstack-dev19:32
*** alop has quit IRC19:34
*** mrodden has joined #openstack-dev19:36
*** mrodden1 has quit IRC19:37
*** colinmcnamara has joined #openstack-dev19:37
*** adrian17od has quit IRC19:37
*** bknudson has joined #openstack-dev19:39
*** dolphm has joined #openstack-dev19:42
*** mestery has quit IRC19:42
*** alobbs has quit IRC19:42
*** alop has joined #openstack-dev19:44
*** dspano has quit IRC19:44
*** ladquin has quit IRC19:45
*** vernier has quit IRC19:45
*** dolphm has quit IRC19:46
eglynnttx: is there any way to re-assign a proposed summit session from one track to another?19:46
eglynn(the topic field doesn't appear to be editable ...)19:47
*** kagan has joined #openstack-dev19:47
*** diogogmt has quit IRC19:51
*** SergeyLukjanov has quit IRC19:53
*** roampune_ has quit IRC19:54
*** roampune has joined #openstack-dev19:54
*** colinmcnamara has quit IRC19:55
*** Ritz-Laptop has quit IRC19:56
*** s1rp has left #openstack-dev19:56
*** AlanClark has joined #openstack-dev19:57
*** otherwiseguy has quit IRC19:58
*** jaybuff has joined #openstack-dev19:59
*** alobbs has joined #openstack-dev19:59
*** gasbakid has joined #openstack-dev19:59
*** kagan has quit IRC20:01
*** markwash has joined #openstack-dev20:06
dtroyersdague: me again…can you look at https://review.openstack.org/24615 for me?  it's the first of a set of grenade-related changes, mostly just moving code around.20:07
*** Yada has quit IRC20:08
*** sulo_ has joined #openstack-dev20:08
*** voliveirajr has joined #openstack-dev20:10
*** woodspa has quit IRC20:10
*** stevemar has quit IRC20:10
*** woodspa has joined #openstack-dev20:12
*** vipul|away is now known as vipul20:13
*** ayoung has joined #openstack-dev20:13
voliveirajrGuys, someone can help me to understand some concepts? Im trying to setup a multinode environment but using only one keystone instance20:13
ayoungtermie, Sorry, day job got in the way there:  had a meeting, and then had to drive back to the house....20:14
sandeeprhey ayoung - i'm still stuck with the keystone pki thing. could you please help?20:16
ayoungSo...the way that I see it, oauth is one mechanism, and certainly a popular one, for doing delegation. But it still needs server support.  I wasn't aware that Keystone was built with an eye to oauth20:16
ayoungsandeepr, sure, what are you seeing?20:17
sandeeprayoung, keystone token-get errors as Authorization Failed: HTTPConnectionPool(host='10.1.0.65', port=5000): Request timed out. (timeout=600.0)20:18
sandeeprayoung, for that matter all of the keystone commands20:18
ayoungsandeepr, running from the CLI?20:18
sandeeprayoung, yes20:18
ayoungAnd firewall is open on port 5000?20:18
sandeeprthis is a fresh install grizzly rc1 on raring20:18
sandeepryes open20:19
sandeeprif i switch to token_format - UUID20:19
sandeeprthings start to work20:19
*** henrynash has quit IRC20:19
ayoungsandeepr, and there is nothing telling in the Keystone log?20:21
ayoungIs this devstack?20:21
sandeeprayoung, nothing in the log, its blank. no this is manual install20:21
sandeeprfrom the ppa trunk repo20:21
ayoungsandeepr, are you sure Keystone is even running?20:22
sandeeprayoung, yes keystone is running, check http://paste.openstack.org/show/34173/ for the ssl and signing portion in keystone conf20:24
sandeepri guess i did not miss anything20:24
ayoungsandeepr, request timed out means that Keystone is not responding.20:25
sandeeprthis is what i have done so far, install raring, add ppa repo, install mysql, install keystone, create mysql db for keystone20:25
*** arbrandes has joined #openstack-dev20:25
sandeeprmodify keystone.conf20:25
sandeeprand problem is seen20:25
sdaguedtroyer: sure, looking now20:26
sandeeprayoung, did i missi anything in between?20:26
ayoungsandeepr, this is a development set up issue.  You need a method to develope and debug yourself.  I suggest running Keystone in a debugger, or carnking up the logging20:26
ayoungsandeepr, no idea, I don;t run that way20:26
sdaguedtroyer: when are you thinking about cutting devstack stable?20:27
ayoungYou should be getting a log from the initial request20:27
sandeeprayoung, how do you run it?20:27
*** primeminsiterp has quit IRC20:27
*** cp16net is now known as cp16net|away20:27
sandeeprdevstack?20:28
*** cp16net|away is now known as cp16net20:28
ayoungsandeepr, aside from devstack, I tend to use Eclipse PyDev for integrated debugging, but iron python is a pretty good tool for basic dev20:28
*** psedlak has quit IRC20:28
*** cp16net is now known as cp16net|away20:28
*** cp16net|away is now known as cp16net20:28
topolayoung, will you have a fix merged for 1155234? sahdev is trying to do a patch for 1157727 but I think he needs 1155234 to make progress20:29
kpavelHi, can anybody review change i made? https://review.openstack.org/#/c/24600/20:29
sandeeprayoung, is this supposed to work the way i'm doing?20:29
*** stackKick has quit IRC20:29
ayoungtopol, links would speed up this conversation...let me check20:29
*** adjohn has joined #openstack-dev20:29
* ayoung has not memorized bug numbers20:29
topolhttps://bugs.launchpad.net/keystone/+bug/115523420:30
uvirtbotLaunchpad bug 1155234 in keystone "emulated ldap enabled improperly handles updates" [Undecided,In progress]20:30
dtroyersdague: we usually do stable a few days after the releases occur.20:32
ayoungtopol, I uploaded a variation of the original that just had the two skipped tests removed.20:33
ayoungtopol, give it a code review20:33
ayoungI am ok with the patch as is20:34
*** romcheg2 has joined #openstack-dev20:34
*** otherwiseguy has joined #openstack-dev20:36
*** devoid has quit IRC20:37
*** devoid has joined #openstack-dev20:37
*** harlowja has quit IRC20:38
*** anniec has joined #openstack-dev20:39
topolayoung, code looks good. gave it a +120:39
ayoungtopol, cool.  gyee care to put the coup de grace on https://review.openstack.org/#/c/24555/  ?20:40
gyeeayoung, pulled the trigger20:41
topoldtroyer, any chance you could look at https://review.openstack.org/#/c/24764/  Its an easy one20:42
dtroyertopol: I didn't see a response to sdague's question re licensing20:43
topolfixed that, found a way to do with out shipping the schemas20:44
dtroyertopol: gotcha…+220:45
*** mkollaro has quit IRC20:48
jbresnahcan any glance folks tell me if the list of valid options to an a give REST API call are well defined anywhere?20:49
*** boris-42 has quit IRC20:51
eglynnjbresnah: this any use to you? http://api.openstack.org/api-ref.html20:51
eglynnjbresnah: (scroll down to the Image section and click on details)20:51
*** radez is now known as radez_g0n320:51
jbresnaheglynn, yeah that seems great20:52
eglynncool20:52
topoldtroyer, thanks20:52
*** harlowja has joined #openstack-dev20:53
*** markmcclain has quit IRC20:53
*** bdpayne has quit IRC20:54
jbresnaheglynn, I think one of the tests is making an invalid call based on that20:55
jbresnaheglynn: https://github.com/openstack/glance/blob/master/glance/tests/functional/v2/test_images.py#L48720:55
jbresnahit sends in ping=pong20:55
* eglynn looking ...20:55
*** lmatter has joined #openstack-dev20:55
*** bdpayne has joined #openstack-dev20:56
jbresnahbut ping is not a listed option20:56
*** henrynash has joined #openstack-dev20:56
*** fsargent has joined #openstack-dev20:56
*** martine has quit IRC20:56
topolayoung, so sahdev's patch now works after applying https://bugs.launchpad.net/keystone/+bug/1155234  how does he submit his patch and state that it depends on yours?20:57
uvirtbotLaunchpad bug 1155234 in keystone "emulated ldap enabled improperly handles updates" [Undecided,In progress]20:57
*** martine has joined #openstack-dev20:57
annegentlejgriffith: ok, reviewed and patched https://review.openstack.org/24662 let's see what others think too20:57
eglynnjbresnah: hmmm, that's a v2 test, but the api docco was v1 only IIRC ...20:57
eglynnjbresnah: but yeah, it does look wrong ...20:58
ayoungtopol, if he rebases on top of my patch in his local git repo and does a git review, Gerrit will accept it as a dependency.  Just don't modify my patch in any way, or it will delay the merger20:58
jgriffithannegentle: ahh... cool, Thanks!20:58
ayoungtopol, so he should do20:58
jbresnaheglynn, oh yes i see that is v120:58
jbresnaheglynn, is there v2 doc around?20:58
ayounggit fetch https://sahdev@review.openstack.org/openstack/keystone refs/changes/55/24555/2 && git checkout FETCH_HEAD20:58
ayoungand name that branch20:59
ayoungthen git cherry-pick his commit on top of it20:59
*** colinmcnamara has joined #openstack-dev20:59
*** esp1 has quit IRC20:59
openstackgerritA change was merged to openstack/nova: Enable tox use of site-packages for libvirt.  https://review.openstack.org/2149120:59
openstackgerritA change was merged to openstack/python-novaclient: Make os-services API extensions consistent with Nova  https://review.openstack.org/2415821:00
*** esp1 has joined #openstack-dev21:00
voliveirajrHi, someone knows how to configure a single keystone instance for a multiple regions? each region with your kvm host with nova21:00
topolayoung,  so can he do a git fetch https://review.openstack.org/openstack/keystone refs/changes/55/24555/2 && git checkout FETCH_HEAD && git checkout -b hisbranch  and then just put his stuff in on that or will that not work?21:02
eglynnjbresnah: well the closest I can find off-hand is this draft of the v2 API design doc ... https://docs.google.com/document/d/1jPdgmQUzTuSt9iqcgPy74fbkzafCvqfQpvzRhwf2Kic/edit21:02
ayoungtopol, I think that is what I just said.21:02
ayoungand by "put his stuff on top"  I would do git cherry-pick his-old-commit21:03
topolayoung, he never has committed this yet21:03
ayoungtopol, he should have commited it into his local git repo21:03
ayoungdon't fear the git21:04
*** davidhadas has joined #openstack-dev21:04
*** markmcclain has joined #openstack-dev21:04
*** AlanClark has quit IRC21:05
*** jaypipes has quit IRC21:05
*** AlanClark has joined #openstack-dev21:05
*** davidha has quit IRC21:06
*** mkollaro has joined #openstack-dev21:06
jbresnaheglynn, that does not seem to have the list as well defined21:06
termieayoung: doh, now i missed all yoru comments because i didn't get the notification ding :p reading now21:06
*** roampune_ has joined #openstack-dev21:06
jbresnaheglynn, perhaps i will open up a bug and allow people to comment there21:06
termieayoung: okay, only seems like one comment21:07
ayoungtermie, no problem21:07
ayoungyeah, I was waiting for you21:07
eglynnjbresnah: yes that's fair enough, users shouldn't be reduced to reading the code to find that kind of thing out21:07
termieayoung: server support, yes, happily enough as an extension for now21:07
ayoungtermie, so, lets split out oatuh, which is a mechanism for delegation, from Trusts, which is a contract for delegation21:07
*** Ryan_Lane has quit IRC21:07
*** Ryan_Lane has joined #openstack-dev21:08
jbresnaheglynn: I became interested because I passed in 'is_public=True' to v2 and it changed the behavior of the service21:08
ayoungYou keep using that word.  I do not think it means what you think it means.21:08
jbresnahi later found out that was not a valid parameter21:08
jbresnahso i wanted to throw an error when invalid parameters appeared21:08
*** jd80104 has quit IRC21:09
termieayoung: it is still an extension, if you would like to call the contract for access to scoped tokens "trusts" that can be negotiable, but it can still easily be supported by the extensions framework21:09
*** alobbs has quit IRC21:09
*** jd80104 has joined #openstack-dev21:09
*** roampune has quit IRC21:10
termieayoung: the scope of the feature becomes very obvious when using oauth, and since there isn't much of a point in continuing along the lines of the existing implementation21:10
termieayoung: it should be pulled out and turned into one based on oauth21:10
termieayoung: as an extension21:10
*** gasbakid has quit IRC21:11
*** mikor has joined #openstack-dev21:12
*** aeperezt has quit IRC21:13
*** mikor has quit IRC21:14
ayoungtermie, leave oauth out of it.  I see that as a potential approach, but not necessarily the right one.21:14
ayoungtermie, even the current tokens then should be an extension21:14
*** voliveirajr has quit IRC21:14
termieayoung: that is needless slippery sloping21:14
ayoungNo it is not21:15
termieayoung: this is new code, it is additive21:15
ayoungthe current token mechanism is something we want to eventually deprecate.  Bearer tokens are not the long term solution21:15
*** voliveirajr has joined #openstack-dev21:15
ayoungBut what they represent now is core behavior:21:15
termieayoung: they represent the existing api21:15
ayoungsingle sign on, and verification of authN and Z21:15
ayoungtermie, they are a single snapshot in time.21:16
ttxeglynn: yes there is21:16
ayoungnothing about tokens is any more core than trusts21:16
ayoungwould you be happier if I called them delegations?21:16
ttxeglynn: you can ask the topic lead to switch it for you. Or i can do it for you21:16
ttxsdague: yes21:16
ayoungForget the mechanism for a moment21:17
ttxsdague: "Help" at he bottom of hte screen for details21:17
ayoungto create a trusts has a separate set of URLs from tokens etc.21:17
termieayoung: i owuld be happier if you added new features as extensions21:17
ayoungThey are not meant to be extensions to the existing behavior.  They are a new contract, one that would be usable regardless of the auth mechanism used in the future.21:18
termieayoung: we aren't turning the whole thing into extensions21:18
*** mestery has joined #openstack-dev21:18
*** sulo__ has joined #openstack-dev21:18
*** topol has quit IRC21:20
*** sulo_ has quit IRC21:21
*** sulo__ is now known as sulo_21:21
zykes-anyone care to help out a poor sole with a change in moniker ?21:23
zykes-ayoung: you think the auth impl will change during havana ?21:23
ayoungtermie, I can see the argument for the V2 token API.21:23
*** alobbs has joined #openstack-dev21:24
termieayoung: it is not the correct implementation adam21:24
ayoungtermie, I think that is the part you are saying should be an extension, right?  Where you actually get a token?21:24
zykes-https://review.openstack.org/#/c/23265/4/moniker/__init__.py < the rpc.set_defaults() on the bottom should be placed in a diff place because of a failing oslo.config, clues for this?21:24
ayoungtermie, or are you saying the CRUD operations for managing tokens should also be in extensions21:25
termieayoung: did you look at oauth before you wrote this?21:25
termieayoung: have you looked through it in-depth since?21:26
termieayoung: do you think your original approach is going to work in the long term?21:26
termieayoung: do you think it is going to work with oauth?21:26
termieayoung: you made something up, it isn't the right thing and if we move it to an extension we will not have the technical debt in core21:27
*** sdake_ has quit IRC21:27
termieayoung: then we can experiment on it and get it right21:27
*** sdake_ has joined #openstack-dev21:27
termieayoung: people can still use extensions21:27
termieayoung: they are still available to keystone21:27
*** salv-orlando_ has joined #openstack-dev21:28
termieayoung: everything that hits core is something we have to support forever21:28
termieayoung: there is already too much in it, yes21:28
termieayoung: and this is another thing that should not be init21:29
termieayoung: when possible we should add new features as extensions and see how they are used before making them something we have tos upport forever21:29
ayoungoauth is solving a different problem.  That is delegation between two distinct systems.  However...I think that is not your main concern.21:29
*** colinmcnamara has quit IRC21:29
termieayoung: you are wrong21:29
termieayoung: it is designed for exactly your use case21:29
termieayoung: the system you are authenticating to is keystone21:30
termieayoung: and you get another token afterwards21:30
termieayoung: of the legacy style21:30
*** voliveirajr has quit IRC21:30
*** salv-orlando has quit IRC21:31
*** salv-orlando_ is now known as salv-orlando21:31
*** jsindy has joined #openstack-dev21:32
*** woodspa has quit IRC21:33
ayoungtermie, Ok...I think you are wrong there, and I think that OAuth is a pretty bad idea in general.  I like the concept of extensions being separate from core being place, but I don't think that is actually how things will work out.  We need a central mechanism for specifying delegation policy that the end systems can build on, not that "hey maybe this thing will stick around."21:34
termieayoung: what will be the harm of it being an extension?21:35
ayoungI am not sure what you mean by "DOn't mention Oauth and Oauth2" togetehr, as it sounds like the 2 is an attempt to fix the mistakes of 121:36
openstackgerritA change was merged to openstack-dev/devstack: Mova nova configuration initialization  https://review.openstack.org/2461521:36
openstackgerritA change was merged to openstack/keystone: Properly handle emulated ldap enablement  https://review.openstack.org/2455521:36
termieayoung: that is certainly not the case, 2 is a bearer token system21:36
ayoungso I agree that is bad21:36
termieayoung: 1 is in extensive use across the internet21:36
*** jd80104 has quit IRC21:36
ayoungbut Oauth 1 has its own issues....and is not the paragon I would hold up for emulation21:36
termieayoung: what issues are those?21:37
*** ladquin has joined #openstack-dev21:37
ladquinmaurosr: ping?21:39
ayoungtermie, besides redirects?21:39
termieayoung: dude, a redirect is in a web browser, we aren't even talking about web interfaces21:40
*** CaptTofu has quit IRC21:40
ayoungunderstood, but it is the mechanism with which oauth is built on21:40
termieayoung: no it isn't21:40
*** networkstatic has joined #openstack-dev21:40
openstackgerritA change was merged to openstack/tempest: Remove skips from bugs marked as fixed.  https://review.openstack.org/2490921:41
ayoungtermie, I am trying to not recreate all of the arguments, and post a link, but I can't find it due to all the noise from people complaining about auth2....sorry for the delay21:41
termieayoung: an authenticated third party requests a request token and hands it to the user, the user tells the service yeah this is a good token, then tells the third party, alright you're cool to use my bits, the third-party then gets their access token, they will then use that access token in the future to get scoped tokens from keystone21:42
termieayoung: there is no web browser required in any of that process21:43
*** yidclare has quit IRC21:43
ayoungtermie, and when that user is not available to make that decision? What about when this needs to happen 2 months from now?  When there server is failing in the middle of the night?21:43
termieayoung: that interaction happens ONCE21:43
ayoungright, and gets stored somewhere21:43
ayoungthat is what the trusts are21:43
termieayoung: all further interactions are the service requesting normal tokens21:44
termieayoung: yes!21:44
*** woodspa has joined #openstack-dev21:44
termieayoung: i am telling you it solves your use case21:44
*** mrunge has quit IRC21:45
termieayoung: and is an existing, respected, widely used, widely supported format21:45
*** salv-orlando_ has joined #openstack-dev21:45
*** arbrandes has quit IRC21:45
*** annegentle has quit IRC21:46
*** zbitter has joined #openstack-dev21:46
ayoungtermie, just to be clear, you are saying we do oauth, 1 not 2,  for establishing the initial set up of delegation of privledges and also add an additional set of urls that support oauth for translating a token for a user plus oauth equivalent of a trust ID to get another token, and that all of this should be extensions.21:48
*** alop has quit IRC21:48
*** salv-orlando has quit IRC21:48
*** salv-orlando_ is now known as salv-orlando21:48
*** annegentle has joined #openstack-dev21:48
termieayoung: sure21:48
*** kaushikc has quit IRC21:49
termieayoung: (based on good faith interpretation of your grammatical choices)21:49
*** zaneb has quit IRC21:49
ladquinsdague, you around?21:49
ayoungheh21:49
*** zbitter is now known as zaneb21:50
termieayoung: first step being pull this thing out of core and make it an extension21:50
termieayoung: i can probably be convinced to write the oauth example of it and they can be compared21:50
*** john5223 has quit IRC21:50
*** romcheg2 has left #openstack-dev21:51
ayoungtermie, so the tokens in oauth 1 are not bearer tokens?21:51
ayoungthat was not my understanding21:52
spzalaayoung: thank you so much for the quick fix for 1155234. I have committed my changes, #link https://review.openstack.org/#/c/24936/  Please review as you get chance.21:53
ayoungtermie, so in real workflow,  it would be something like "simulate creating a virtual machine from an image"  and  the server would figure out what permissions you need to do that, and create a mock token, which the user would then send that token to the keystone server, and that is what would establish the guidlines for the token that the service user would get later?21:55
*** rmohan has quit IRC21:57
termieayoung: no they are not, there is a token and a secret, and it also supports RSA it turns out21:57
*** soody has joined #openstack-dev21:57
*** annegentle has quit IRC21:57
termieayoung: (well, i always knew it supported rsa, more like btw)21:58
*** arbrandes has joined #openstack-dev21:58
*** rmohan has joined #openstack-dev21:58
termieayoung: work flow, you have a third-party service, likely run by a company, but possibly just that you are running yourself, you give it a consumer key and consumer secret to identify it as whoever it is to your system21:59
termieayoung: then, you want to go set it up for your user21:59
*** bdpayne has quit IRC21:59
termieayoung: it calls up keystone to create a request token, authenticated with its consumer key/secret (signed, not passed over the wire)22:00
termieayoung: asking for whichever roles it needs22:00
*** bdpayne has joined #openstack-dev22:01
termieayoung: the user tells keystone, yup, i'm okay with that and either hands the token key and secret to the third party or just tells the third party that it completed the task22:01
termieayoung: s/task/authorization/22:01
*** harlowja has quit IRC22:02
termieayoung: from then on, the third-party will make a signed request to keystone.com/get_me_a_token_for_this and is given a new token22:02
*** rmohan has quit IRC22:02
*** koolhead17 has quit IRC22:03
*** harlowja has joined #openstack-dev22:03
ayoungtermie, so the major difference between this and Trusts, ignoring the actual protocol, is that the user is given a notification somehow "THis is what you need to delegate to my ervice in order for me to operate on your behalf" and the user then Oks it?22:03
*** rmohan has joined #openstack-dev22:04
termieayoung: i would have assumed you would have to do that in your Trusts model as well, how else does the user know what is happening?22:04
ayoungWhereas with trusts, all of that is on the user to generate the information based one out of band information22:05
ayoungsorry, that does n't parse, let me try again22:05
*** rmohan has quit IRC22:05
termieayoung: parsed to me22:05
ayoungWith trusts, we were not going that far22:05
*** rmohan has joined #openstack-dev22:05
ayoungwe were going for stage one, which was the ability to just create the delegation.22:06
*** maoy has quit IRC22:06
ayoungwithout the remote service having to participate22:07
termieayoung: you can build all the stuff on one side if you want, say "make an access token with these qualities for htis access token" but it obviously isn't as easy to use as the oauth model22:07
termiereplace second use of acess token with consumer key22:07
ayoungtermie, right22:07
ayoungSo, forget about the mechanism for communicating with the outside world for a moment. What you have at the core is an agreement for delegation.  That needs to be persisted, and it needs to be retrieved and ched.  Even if we use oauth, or any other delegation mechanism, we would still need to persist that data.22:09
ayoungRight?22:10
ayoungForget even it being consumed to start with22:10
termieayoung: we need to store authentication for a third-party, and we need to store authorization for that third-party to a specific mapping of user/rules/etc22:11
*** mestery has quit IRC22:11
ayoungso trusts are just that second piece "authorization for that third-party to a specific mapping of user/rules/etc"22:12
*** soleblaze has joined #openstack-dev22:13
termieayoung: i understnad what you are trying to do with trusts, that is why i suggested oauth22:13
termieayoung: yes your concept of trusts is largely similar to an access token / access secret in the oauth world22:13
*** s1rp has joined #openstack-dev22:13
termieayoung: (which is easier to explain because they are already widely understood terms)22:13
openstackgerritA change was merged to openstack/nova: Add placeholder migrations to allow backports.  https://review.openstack.org/2375922:14
ayoungtermie, right, I am not disagreeing with you in principal22:14
*** andrewbogott is now known as andrewbogott_afk22:14
*** spzala has quit IRC22:14
ayoungtermie, well, the term access token already has a meaning in Keystone.  As for secret,  that is part of the authentication world.  But what we are talking about here is the process of delegation, which has its own terminology22:15
*** ijw has quit IRC22:15
ayoungPersonally, I find trustor and trustee about as clear of terms as we can find in this realm22:15
termieayoung: that is why i added "in the oauth world" to the end of the sentence22:16
termieayoung: don't matter22:16
termieayoung: the names are baked into the spec so they will be oauth_access_token or whantot22:16
*** mtreinish has quit IRC22:17
ayoungOK,  so there are three issues here.  One,  should the token creation via trusts be moved to extension.  Two, should the crud for trusts be moved to extensions.  Three, should we adopt oauth as the dlegation mechanism22:17
termieyes on all counts22:18
termieSOLVED22:18
ayoungAnd the argument is that by being in Extensions, we avoid committing to supporting these mechanisms in the future22:18
ayoungAs they still need experimentation to check that we have them correct.22:19
termiewe avoid committing to accidental implicit assumptions22:19
termiebased on implementation22:19
*** ijw has joined #openstack-dev22:20
*** ijw has quit IRC22:21
*** jaypipes has joined #openstack-dev22:21
*** ijw has joined #openstack-dev22:21
*** esp1 has quit IRC22:21
*** roampune_ has quit IRC22:22
*** roampune has joined #openstack-dev22:22
*** bknudson has quit IRC22:22
ayoungtermie, I don't agree that we can avoid supporting trusts regardless of whether they are in extension or not:  it depends on whether people build on them or not.   But this isn't my decision now.    Regardless of what I say, you will have to convince dolphm who is the PTL, and convince ttx who is the release manager, that, at this point,  it would be in the projects best interest to make this change.22:22
*** esp has joined #openstack-dev22:23
*** ndipanov has joined #openstack-dev22:23
termieayoung: and what do _you_ think?22:23
*** imsplitbit has quit IRC22:24
*** metral has quit IRC22:24
*** alobbs has quit IRC22:28
*** kenperkins has joined #openstack-dev22:28
*** alop has joined #openstack-dev22:29
*** alobbs has joined #openstack-dev22:33
*** digitalsanctum has quit IRC22:35
*** eharney has quit IRC22:35
*** Gordonz has quit IRC22:35
*** digitalsanctum has joined #openstack-dev22:35
*** ndipanov has quit IRC22:36
*** baba has joined #openstack-dev22:36
*** fire has quit IRC22:37
termieayoung: (still thinking or missed the message/otehrwise occupied)22:38
ayoungtermie, actually, I am at  home and got dragged up to dinner....22:38
*** janisg has quit IRC22:39
termieayoung: kk, well i can wait22:39
termieayoung: i need to eat some late lunch anyway22:39
*** metral has joined #openstack-dev22:39
*** datsun180b has quit IRC22:39
ayoungI'm on kid duty at the moment.  I think that we need delegation.  extension or not is irrelevant. oauth is nice to have, not need to have....22:39
ayoungIdon;t think the trusts impl rules out oauth in the future, and I would probably record oauth info in the same table if we did integrate it22:40
*** giulivo has quit IRC22:40
*** vipul is now known as vipul|away22:40
ayounghave to head...22:41
*** huats has quit IRC22:41
*** otherwiseguy has quit IRC22:41
*** rmohan has quit IRC22:41
*** rmohan has joined #openstack-dev22:41
*** huats has joined #openstack-dev22:41
*** huats has quit IRC22:41
*** huats has joined #openstack-dev22:41
*** blamar has joined #openstack-dev22:42
*** jsindy has quit IRC22:42
*** alop has quit IRC22:42
*** darjeeling has quit IRC22:43
*** janisg has joined #openstack-dev22:43
*** alop has joined #openstack-dev22:43
*** mrodden has quit IRC22:43
*** soody has quit IRC22:44
*** huats has quit IRC22:44
*** jaybuff has quit IRC22:45
*** soody has joined #openstack-dev22:45
*** markmcclain1 has joined #openstack-dev22:46
*** markmcclain has quit IRC22:46
*** huats has joined #openstack-dev22:46
*** huats has quit IRC22:46
*** huats has joined #openstack-dev22:46
*** egallen has joined #openstack-dev22:48
*** spzala has joined #openstack-dev22:50
*** jimfehlig has quit IRC22:50
*** kpavel has quit IRC22:50
*** henrynash has quit IRC22:50
*** devoid has quit IRC22:53
*** mestery has joined #openstack-dev22:53
*** mestery has joined #openstack-dev22:53
*** spzala has quit IRC22:54
*** markmcclain1 has quit IRC22:58
*** mlavalle has left #openstack-dev22:58
*** jsindy has joined #openstack-dev22:58
*** colinmcnamara has joined #openstack-dev23:00
*** jaybuff has joined #openstack-dev23:00
*** colinmcnamara has quit IRC23:00
*** branen has joined #openstack-dev23:03
*** vipul|away is now known as vipul23:04
*** blamar has quit IRC23:06
*** matiu has quit IRC23:08
*** melwitt has quit IRC23:09
*** melwitt1 has joined #openstack-dev23:09
*** tomoe_ has quit IRC23:09
*** 16SAA5DSR has joined #openstack-dev23:09
*** edmund1 has quit IRC23:11
*** harlowja has quit IRC23:11
*** alobbs has quit IRC23:14
*** woodspa_ has joined #openstack-dev23:14
*** olaph has quit IRC23:14
*** mrodden has joined #openstack-dev23:14
*** olaph has joined #openstack-dev23:15
*** david-lyle has quit IRC23:16
*** jsindy has quit IRC23:17
*** kbringard has quit IRC23:17
*** woodspa has quit IRC23:18
*** olaph_ has joined #openstack-dev23:18
*** olaph has quit IRC23:20
16SAA5DSRsandeepr: did you figure out your keystone-all issue? i didn't have a chance to reply earlier23:20
*** olaph has joined #openstack-dev23:20
*** 16SAA5DSR is now known as dolphm23:21
*** jcmartin has quit IRC23:21
dolphmayoung: thoughts? https://review.openstack.org/#/c/24936/123:21
*** AlanClark has quit IRC23:21
*** davidhadas has quit IRC23:21
*** AlanClark has joined #openstack-dev23:21
*** reed has joined #openstack-dev23:23
*** jbresnah has quit IRC23:23
*** olaph_ has quit IRC23:23
*** olaph_ has joined #openstack-dev23:24
*** alop has quit IRC23:25
*** alop has joined #openstack-dev23:26
*** olaph has quit IRC23:27
*** lcheng has quit IRC23:28
*** reed has quit IRC23:29
*** janisg has quit IRC23:29
*** olaph has joined #openstack-dev23:30
*** janisg has joined #openstack-dev23:30
*** roampune_ has joined #openstack-dev23:31
*** reed has joined #openstack-dev23:31
*** digitalsanctum has quit IRC23:31
*** sulo_ has quit IRC23:31
*** olaph has quit IRC23:32
*** olaph_ has quit IRC23:32
*** rkukura has quit IRC23:33
*** woodspa_ has quit IRC23:33
*** olaph has joined #openstack-dev23:34
*** jcmartin has joined #openstack-dev23:34
*** roampune has quit IRC23:35
jgriffithewindisch: ping23:35
*** mkollaro has quit IRC23:35
ewindischhi23:35
jgriffithewindisch: hey23:35
jgriffithewindisch: just a quick question for my own benefit :)23:35
ewindischjgriffith: sure.23:35
jgriffithewindisch: so the pyzmq patch reminded me that I'm horribly out of touch with that whole effort23:36
jgriffithewindisch: is there anything documented via wiki etc that I can get caught up on?23:36
ewindischNot yet. I did start on a patch to the openstack docs / manual. I haven't pushed it yet. (It is in code review)23:36
jgriffithewindisch: ahh... ok, that works23:37
ewindischI'm also working on a blog post of "what is new in Oslo RPC for ZeroMQ in Grizzly"23:37
ewindischas well as a lightning talk for the summit23:37
jgriffithewindisch: oh, very cool23:37
ewindischfinally….I'm doing a talk on Friday. Perhaps I can send you the deck?23:38
jgriffithewindisch: that would be great23:38
jgriffithewindisch: also I'll be sure to make the lightning talk in Portland23:38
*** rafaduran has quit IRC23:38
*** pabelanger has joined #openstack-dev23:39
*** 31NAC0TEY has joined #openstack-dev23:40
* ewindisch is afraid the next month will be nothing but writing talks, blog posts, and blueprints23:40
*** dontalton has quit IRC23:41
*** olaph_ has joined #openstack-dev23:42
jgriffithewindisch: I feel for ya :)23:43
jgriffithewindisch: thanks for the info, drop me an email (I'll PM it even though evrybody probably has it)23:43
*** jcmartin has quit IRC23:44
*** jcmartin has joined #openstack-dev23:44
*** olaph has quit IRC23:45
*** flaper87 has quit IRC23:45
*** Gordonz has joined #openstack-dev23:46
*** 31NAC0TEY is now known as jhesketh23:47
*** harlowja has joined #openstack-dev23:47
*** rkukura has joined #openstack-dev23:47
*** pabelanger has quit IRC23:48
*** olaph has joined #openstack-dev23:48
*** olaph_ has quit IRC23:51
dolphmgyee: any last fixes for RC1?23:51
openstackgerritA change was merged to openstack/keystone: Wrap config module and require manual setup (bug 1143998)  https://review.openstack.org/2470123:52
uvirtbotLaunchpad bug 1143998 in keystone "nova-api crash - keystone.middleware.auth_token broken" [Medium,In progress] https://launchpad.net/bugs/114399823:52
dolphmgyee: ayoung: that's our last blocker ^23:52
gyeedolphm, I don't have any23:52
dolphmgyee: this seems useful and pretty safe https://review.openstack.org/#/c/24936/23:53
*** alop_ has joined #openstack-dev23:53
*** alop has quit IRC23:53
*** alop_ is now known as alop23:53
*** hemna is now known as hemnafk23:54
gyeedolphm, I agree23:54
*** andrewbogott_afk is now known as andrewbogott23:54
gyeeapproved it23:55
dolphmgyee: great, i'll make that the last patch23:55
*** lmatter has quit IRC23:55
gyeeRC1 ftw!23:55
*** amerine has quit IRC23:56
dolphmgyee: jenkins didn't like it lol23:56
gyeeah, rebase23:56
dolphmah, it touched config23:56
dolphmah.23:56
*** ladquin has quit IRC23:57
*** ladquin has joined #openstack-dev23:58
dolphmgyee: done, https://review.openstack.org/#/c/24936/23:59
dolphmgyee: just had to move two new config options to keystone.common.config23:59

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!