*** hattwick has quit IRC | 00:00 | |
*** yamahata_ has quit IRC | 00:01 | |
*** datsun180b has quit IRC | 00:03 | |
*** markmcclain has joined #openstack-dev | 00:03 | |
*** Nachi has joined #openstack-dev | 00:03 | |
*** beagles_backl8r is now known as beagles | 00:04 | |
*** sudorandom has joined #openstack-dev | 00:05 | |
*** nati_ueno has quit IRC | 00:06 | |
*** winston-d has joined #openstack-dev | 00:09 | |
*** Ryan_Lane has quit IRC | 00:10 | |
*** RajeshMohan has quit IRC | 00:12 | |
*** RajeshMohan has joined #openstack-dev | 00:12 | |
*** halj has quit IRC | 00:14 | |
*** garyTh has quit IRC | 00:15 | |
*** belmoreira has joined #openstack-dev | 00:21 | |
*** sudorandom has quit IRC | 00:23 | |
*** belmoreira has quit IRC | 00:26 | |
clarkb | keystone folks: https://review.openstack.org/#/c/28363/1 and a corresponding change to keystone should fix your python-memcached troubles | 00:26 |
---|---|---|
*** SumitNaiksatam has joined #openstack-dev | 00:27 | |
*** sarob has quit IRC | 00:29 | |
*** riskable has joined #openstack-dev | 00:30 | |
openstackgerrit | A change was merged to openstack/ceilometer: Imported Translations from Transifex https://review.openstack.org/28229 | 00:32 |
*** bdpayne has quit IRC | 00:36 | |
*** sudorandom has joined #openstack-dev | 00:41 | |
*** hartsocks has quit IRC | 00:43 | |
*** anniec has quit IRC | 00:43 | |
*** alop has quit IRC | 00:43 | |
*** jasdeepH has joined #openstack-dev | 00:45 | |
*** stevebaker_ has quit IRC | 00:46 | |
clarkb | and digging through the github issues for python-memcached I see that the problem should be fixed with a version recently pushed to pypi. I am rerunning the mirror jobs to pull in that version | 00:47 |
*** stevemar has joined #openstack-dev | 00:48 | |
*** stevebaker has joined #openstack-dev | 00:48 | |
*** digitalsanctum has quit IRC | 00:49 | |
*** bmclaughlin has quit IRC | 00:52 | |
*** zul has quit IRC | 00:56 | |
*** stevemar has quit IRC | 00:57 | |
*** freedomhui has joined #openstack-dev | 00:57 | |
*** redbeard2 has joined #openstack-dev | 00:59 | |
*** utlemming has joined #openstack-dev | 01:00 | |
*** stevebaker has quit IRC | 01:01 | |
*** lifeless has joined #openstack-dev | 01:02 | |
*** adjohn has joined #openstack-dev | 01:03 | |
*** jclift has quit IRC | 01:03 | |
*** winston-d has quit IRC | 01:05 | |
*** cp16net is now known as cp16net|away | 01:07 | |
*** pcm__ has quit IRC | 01:07 | |
*** cp16net|away is now known as cp16net | 01:07 | |
*** bdpayne has joined #openstack-dev | 01:07 | |
*** litong has quit IRC | 01:08 | |
*** stevebaker has joined #openstack-dev | 01:09 | |
*** freedomhui has quit IRC | 01:11 | |
*** utlemming has quit IRC | 01:12 | |
*** zb has joined #openstack-dev | 01:12 | |
*** bknudson has left #openstack-dev | 01:13 | |
*** freedomhui has joined #openstack-dev | 01:14 | |
*** jbresnah has quit IRC | 01:14 | |
*** zaneb has quit IRC | 01:16 | |
*** winston-d has joined #openstack-dev | 01:20 | |
*** belmoreira has joined #openstack-dev | 01:22 | |
*** markmcclain has quit IRC | 01:24 | |
*** belmoreira has quit IRC | 01:26 | |
*** stevebaker has quit IRC | 01:28 | |
*** brunnhilde has quit IRC | 01:30 | |
*** Mandell has quit IRC | 01:31 | |
*** jasdeepH has quit IRC | 01:33 | |
*** markwash has joined #openstack-dev | 01:33 | |
*** yamahata has quit IRC | 01:36 | |
*** yidclare has joined #openstack-dev | 01:36 | |
*** anniec has joined #openstack-dev | 01:37 | |
*** pixelbeat_ has quit IRC | 01:37 | |
*** jbresnah has joined #openstack-dev | 01:37 | |
*** yamahata has joined #openstack-dev | 01:38 | |
*** stevebaker has joined #openstack-dev | 01:39 | |
*** anniec_ has joined #openstack-dev | 01:40 | |
*** tomoe_ has joined #openstack-dev | 01:41 | |
*** anniec has quit IRC | 01:41 | |
*** anniec_ is now known as anniec | 01:41 | |
ayoung | jamielennox, were you able to figure out a way around the greenthread/testing setup? | 01:42 |
jamielennox | so at the moment i can isolate it to quite a small area | 01:43 |
jamielennox | actually re: testing or in general | 01:43 |
jamielennox | cause i'm trying to keep the patches seperate | 01:43 |
*** tzumainn has joined #openstack-dev | 01:43 | |
ayoung | jamielennox, so for the things like python-keystoneclient tests, how are you planning on running the server? | 01:44 |
jamielennox | i was hoping to use webtest.http.StopableWSGIServer | 01:44 |
jamielennox | it seems to be just a wrapper around a thread based wsgi server | 01:44 |
jamielennox | with better support for stopping and starting | 01:44 |
*** Nachi has quit IRC | 01:44 | |
jamielennox | running that with eventlet doesn't work at all | 01:45 |
ayoung | jamielennox, that might actually be fine. Python Threading issues should not come into play, now that I think about it | 01:45 |
jamielennox | the ones i'm not sure about how to go about are related to SSL and ipv6 | 01:45 |
ayoung | we don't care about performance, and the web server should never be blocking on a call back to the client, so dead lock isn't an issue. | 01:45 |
jamielennox | ipv6 all of a sudden less of a concern though | 01:45 |
ayoung | Don;t worry about Ipv6 for the first iteration, as we are commenting that out anyway | 01:46 |
ayoung | yep | 01:46 |
jamielennox | yes, but if eventlet patches threads globally then it screws up running the server | 01:46 |
jamielennox | haven't looked that far into it | 01:46 |
*** adjohn has quit IRC | 01:46 | |
jamielennox | my thought is to keep the patches seperate that i can more or less isolate eventlet in testing down into a strict few tests | 01:47 |
openstackgerrit | A change was merged to openstack/cinder: Remove setuptools-git as run time dependency https://review.openstack.org/27947 | 01:47 |
*** terry7 has quit IRC | 01:47 | |
jamielennox | i've actually done some rearranging, i'm not sure if i should keep it or not for now | 01:47 |
jamielennox | then when i go for a patch to move out eventlet completely i'll bring the changes through to the tests | 01:48 |
ayoung | jamielennox, so, on the server, all of the monkeypatching should be done in the starup code | 01:49 |
ayoung | but for the tests, it should be isoltated to the keystone/test.py file or something top level like that | 01:49 |
ayoung | sounds like you are tracking, I won't derail you then. | 01:49 |
jamielennox | i can post some stuff on github if you want to see what i'm looking at | 01:50 |
*** mrodden has joined #openstack-dev | 01:51 | |
ayoung | jamielennox, only if it will help you. I think you have it under control, so just drive on. | 01:51 |
jamielennox | yea, think it's fine. Particularly with this rearranging though it's going to be a fairly big patch | 01:52 |
ayoung | jamielennox, so we can chat tomorrow (night for me) once you have this well enough tackled. I think I know how I want to split up some other work, but it can wait until it gets your full attention | 01:53 |
jamielennox | ok, sounds good | 01:53 |
*** rcleere has joined #openstack-dev | 01:54 | |
*** aeperezt has joined #openstack-dev | 01:55 | |
jamielennox | ayoung: jenkins killed the ipv6 patch | 01:55 |
ayoung | looking | 01:55 |
*** yaguang has joined #openstack-dev | 01:56 | |
jamielennox | lol, there is a review to blacklist memcache-1.50 which i guess is for exactly this reason | 01:56 |
jamielennox | however unless you combine the patches, each will block the other from being commited | 01:56 |
*** shang_ has quit IRC | 01:57 | |
morganfainberg | oi! | 01:57 |
morganfainberg | that is terrible :P | 01:57 |
ayoung | jamielennox, nah, the ipv6 one is intermittant | 01:58 |
*** kenperkins has quit IRC | 01:58 | |
ayoung | so the memcach-1.5 one should go through eventually... | 01:58 |
*** Corren has joined #openstack-dev | 01:58 | |
*** shang has joined #openstack-dev | 01:58 | |
*** bing_bu has joined #openstack-dev | 01:59 | |
jamielennox | keep refreshing until you hit an older worker.. | 02:00 |
ayoung | jamielennox, nah, merging the patches and resubmiitting | 02:00 |
ayoung | jamielennox, morganfainberg https://review.openstack.org/#/c/28338/ | 02:01 |
openstackgerrit | A change was merged to openstack/oslo.config: Fixes OptGroup title set typo https://review.openstack.org/27899 | 02:02 |
clarkb | yeah I am about to rekick the mirror update scripts which will add 1.51 to the mirror | 02:02 |
clarkb | 1.51 fixes the problem with 1.50 | 02:03 |
openstackgerrit | A change was merged to openstack/oslo.config: Use builtin startswith and endswith methods in iniparser https://review.openstack.org/28012 | 02:03 |
*** READ10 has quit IRC | 02:06 | |
*** baba has quit IRC | 02:09 | |
*** megha has joined #openstack-dev | 02:09 | |
ayoung | clarkb, so if I do this is all good? https://review.openstack.org/#/c/28338/ | 02:12 |
jamielennox | ayoung: if you wait for the mirror you should be able to pass ipv6 then memcache. | 02:14 |
ayoung | jamielennox, ah...ok, I'll roll back to the earlier version of the IPv6 then | 02:14 |
*** freedomhui has quit IRC | 02:16 | |
*** danwent has quit IRC | 02:16 | |
clarkb | yeah no need for pinning in an hour or so | 02:20 |
*** Corren is now known as kenperkins | 02:21 | |
*** belmoreira has joined #openstack-dev | 02:22 | |
*** jasdeepH has joined #openstack-dev | 02:23 | |
*** freedomhui has joined #openstack-dev | 02:24 | |
*** jog0 has quit IRC | 02:25 | |
*** cmark_ has joined #openstack-dev | 02:27 | |
*** belmoreira has quit IRC | 02:27 | |
*** novas0x2a|laptop has quit IRC | 02:27 | |
*** cmark_ has quit IRC | 02:28 | |
*** cmark_ has joined #openstack-dev | 02:28 | |
*** cmark has quit IRC | 02:30 | |
*** comay has quit IRC | 02:30 | |
*** freedomhui has quit IRC | 02:34 | |
*** dtroyer has left #openstack-dev | 02:35 | |
*** prekarat has quit IRC | 02:42 | |
*** erfanian has quit IRC | 02:45 | |
*** nunosantos has quit IRC | 02:46 | |
openstackgerrit | A change was merged to openstack/ceilometer: Add the mongo implementation of alarms collection https://review.openstack.org/28008 | 02:47 |
*** jasdeepH has quit IRC | 02:48 | |
*** megha has quit IRC | 02:50 | |
*** HenryG has quit IRC | 02:53 | |
*** alunduil has quit IRC | 02:55 | |
*** megha has joined #openstack-dev | 02:56 | |
*** alunduil has joined #openstack-dev | 02:57 | |
*** vkmc has quit IRC | 02:57 | |
*** sudorandom has quit IRC | 02:57 | |
clarkb | ayoung: the mirror has updated. If you rerun your tests now things should work | 03:02 |
ayoung | clarkb, just kicked it off, thanks | 03:10 |
*** melwitt1 has quit IRC | 03:17 | |
openstackgerrit | A change was merged to openstack/ceilometer: Connect the Alarm API to the db https://review.openstack.org/28010 | 03:19 |
*** sacharya has left #openstack-dev | 03:20 | |
ayoung | clarkb, http://logs.openstack.org/28338/6/check/gate-keystone-pep8/4914/console.html | 03:21 |
clarkb | ayoung: http://pypi.openstack.org/openstack/python-memcached/ it should find 1.51 there. not sure why it is still grabbing 1.50 | 03:22 |
clarkb | mordred: fungi ^ any ideas? | 03:23 |
*** belmoreira has joined #openstack-dev | 03:23 | |
fungi | mmm | 03:24 |
mordred | clarkb: no. it does not make the senses to me | 03:24 |
fungi | did it run too soon? | 03:24 |
mordred | I agree with you that 1.51 is on the mirror | 03:25 |
fungi | guess not | 03:25 |
ayoung | can you remove 1.50 from the mirror fungi mordred ? | 03:25 |
fungi | local caching on the slave? | 03:25 |
mordred | it should not be local caching on the salve | 03:26 |
mordred | slave | 03:26 |
mordred | because pip will go do an index scan regardless of remote caches | 03:26 |
*** danwent has joined #openstack-dev | 03:26 | |
fungi | ...yeah, agreed | 03:27 |
*** jasdeepH has joined #openstack-dev | 03:27 | |
clarkb | I am trying to reproduce locally | 03:27 |
mordred | good | 03:27 |
mordred | I'd like to understand the problem before we remove stuffs | 03:27 |
*** belmoreira has quit IRC | 03:28 | |
* mordred is going to vote timing | 03:28 | |
mordred | gets 1.51 from the mirror locally | 03:29 |
ayoung | mordred, why is there a problem removing the broken package just to be sure? | 03:29 |
mordred | ayoung: not a problem per-se - but if we have a situation where things are pulling wrong versions of packages in general, I'd like to understand it in case it's showing a deeper systemic problem that we're only noticing because 1.50 is borked | 03:29 |
mordred | it shouldn't take too long to reproduce and make sure | 03:30 |
ayoung | mordred, ok, if you can do a reverify on https://review.openstack.org/#/c/28338/ once you are done, I'll check in the morning | 03:30 |
*** lauria has joined #openstack-dev | 03:30 | |
mordred | ayoung: totally | 03:30 |
fungi | the broken package isn't removed from pypi necessarily either. should still work | 03:30 |
mordred | god I hate link scanning in pip/pypi | 03:31 |
ayoung | mordred, should I kick off a reverify now, since you think it is timing? | 03:31 |
clarkb | ayoung: it won't hurt | 03:31 |
clarkb | so many missing C dependencies.. | 03:33 |
fungi | yeah, and python-memcached is one of the primary examples of pypi-indexed-not-hosted packages | 03:34 |
clarkb | ayoung: looks like it is working now | 03:37 |
ayoung | clarkb, I think that it is in the queue, just behind a tempest run that is taking a while | 03:39 |
clarkb | ayoung: it is | 03:39 |
ayoung | gnight | 03:39 |
clarkb | but a bunch of the tests have run and passed | 03:39 |
clarkb | works locally too. | 03:39 |
*** freedomhui has joined #openstack-dev | 03:39 | |
*** mgiles has joined #openstack-dev | 03:42 | |
fungi | off to the races, i guess | 03:42 |
mordred | w00t! | 03:43 |
*** RajeshMohan has quit IRC | 03:43 | |
*** RajeshMohan has joined #openstack-dev | 03:43 | |
*** PaulM has quit IRC | 03:43 | |
fungi | mordred was closest without going over | 03:44 |
fungi | or something | 03:44 |
mordred | definitely or | 03:44 |
openstackgerrit | A change was merged to openstack/tempest: Ignore .testrepository/ https://review.openstack.org/28272 | 03:44 |
*** boris-42 has joined #openstack-dev | 03:45 | |
*** boris-42 has quit IRC | 03:50 | |
*** boris-42 has joined #openstack-dev | 03:50 | |
openstackgerrit | A change was merged to openstack/keystone: Skip IPv6 tests for eventlet dns https://review.openstack.org/28338 | 03:52 |
*** katylava has quit IRC | 04:01 | |
*** Mandell has joined #openstack-dev | 04:05 | |
*** yuanz has quit IRC | 04:17 | |
*** lauria has quit IRC | 04:19 | |
*** sirushti_ has joined #openstack-dev | 04:19 | |
*** yolo has joined #openstack-dev | 04:19 | |
*** sirushti_ has quit IRC | 04:19 | |
*** yolo is now known as Guest46684 | 04:20 | |
*** ewindisch has joined #openstack-dev | 04:21 | |
*** Corren has joined #openstack-dev | 04:23 | |
*** shang has quit IRC | 04:23 | |
*** kenperkins has quit IRC | 04:24 | |
*** belmoreira has joined #openstack-dev | 04:24 | |
*** Corren is now known as kenperkins | 04:25 | |
*** martine has quit IRC | 04:28 | |
*** belmoreira has quit IRC | 04:29 | |
*** koolhead17 has quit IRC | 04:34 | |
*** anniec has quit IRC | 04:34 | |
*** zaitcev has quit IRC | 04:35 | |
*** Ryan_Lane has joined #openstack-dev | 04:39 | |
*** basha has joined #openstack-dev | 04:40 | |
*** glikson has joined #openstack-dev | 04:42 | |
*** ewindisch has quit IRC | 04:43 | |
*** freedomhui has quit IRC | 04:44 | |
*** danwent has quit IRC | 04:45 | |
*** nati_ueno has joined #openstack-dev | 04:45 | |
*** johnpur has quit IRC | 04:46 | |
*** koolhead17 has joined #openstack-dev | 04:48 | |
*** Yada has joined #openstack-dev | 04:48 | |
*** nati_ueno has quit IRC | 04:49 | |
*** Yada has quit IRC | 04:51 | |
*** ijw has quit IRC | 04:53 | |
*** ijw has joined #openstack-dev | 04:53 | |
*** dims has quit IRC | 04:54 | |
*** ewindisch has joined #openstack-dev | 04:57 | |
*** ewindisch has quit IRC | 05:00 | |
*** vartom1116 has joined #openstack-dev | 05:02 | |
*** basha has quit IRC | 05:07 | |
*** basha has joined #openstack-dev | 05:09 | |
*** aeperezt has quit IRC | 05:13 | |
*** mgiles has quit IRC | 05:15 | |
*** maoy has quit IRC | 05:16 | |
*** RajeshMohan has quit IRC | 05:16 | |
*** glikson has quit IRC | 05:16 | |
*** boris-42 has quit IRC | 05:16 | |
*** bdpayne has quit IRC | 05:16 | |
*** breed has quit IRC | 05:16 | |
*** sride has joined #openstack-dev | 05:16 | |
*** RajeshMohan has joined #openstack-dev | 05:17 | |
*** vartom1116 has quit IRC | 05:17 | |
*** ladquin has quit IRC | 05:18 | |
*** danwent has joined #openstack-dev | 05:19 | |
*** glikson has joined #openstack-dev | 05:24 | |
*** belmoreira has joined #openstack-dev | 05:25 | |
*** amerine has quit IRC | 05:27 | |
openstackgerrit | A change was merged to openstack/cinder: Update import of oslo's processutils. https://review.openstack.org/28371 | 05:27 |
*** freedomhui has joined #openstack-dev | 05:27 | |
*** openstackstatus has quit IRC | 05:29 | |
*** openstackstatus has joined #openstack-dev | 05:29 | |
*** Gman2 has joined #openstack-dev | 05:29 | |
*** bdpayne has joined #openstack-dev | 05:30 | |
*** belmoreira has quit IRC | 05:30 | |
*** amerine has joined #openstack-dev | 05:30 | |
*** megha has quit IRC | 05:38 | |
*** reed has quit IRC | 05:41 | |
*** SergeyLukjanov has joined #openstack-dev | 05:42 | |
*** mrunge has joined #openstack-dev | 05:47 | |
*** koolhead17 has quit IRC | 05:48 | |
*** PhilDay has joined #openstack-dev | 05:51 | |
*** navid_ has joined #openstack-dev | 05:51 | |
*** PhilDay has quit IRC | 05:51 | |
*** philday has joined #openstack-dev | 05:52 | |
*** philday has quit IRC | 05:53 | |
*** PhilDay has joined #openstack-dev | 05:54 | |
*** topol has joined #openstack-dev | 05:55 | |
*** Gman2 has quit IRC | 05:57 | |
*** Mandell_ has joined #openstack-dev | 05:57 | |
*** vartom1116 has joined #openstack-dev | 05:58 | |
*** rushiagr has joined #openstack-dev | 05:59 | |
*** topol has quit IRC | 06:00 | |
*** Mandell has quit IRC | 06:00 | |
*** freedomhui has quit IRC | 06:04 | |
*** freedomhui has joined #openstack-dev | 06:09 | |
*** Ruetobas has quit IRC | 06:09 | |
*** rerngvit has joined #openstack-dev | 06:12 | |
*** RajeshMohan has quit IRC | 06:12 | |
rerngvit | hello | 06:12 |
*** RajeshMohan has joined #openstack-dev | 06:13 | |
rerngvit | I am trying to recheck bug in Jerrit in order to submit code patch and have a question. | 06:13 |
*** vartom1117 has joined #openstack-dev | 06:13 | |
*** Ruetobas has joined #openstack-dev | 06:13 | |
*** vartom1116 has quit IRC | 06:13 | |
rerngvit | From the doc (https://wiki.openstack.org/wiki/GerritJenkinsGithub#Test_Failures), it suggests that I should "leave a comment with the form "recheck bug ####"" | 06:13 |
rerngvit | my question is how should I leave a comment? is it go together as an extra line in a commit message? | 06:14 |
clarkb | no submit the comment in gerrit | 06:16 |
clarkb | as a review comment | 06:16 |
rerngvit | ok thank you. | 06:17 |
*** Corren has joined #openstack-dev | 06:18 | |
*** vartom1118 has joined #openstack-dev | 06:18 | |
*** topol has joined #openstack-dev | 06:20 | |
*** vartom1117 has quit IRC | 06:20 | |
rerngvit | clarkb: if I don't make any change and try to "git review", I got "! [remote rejected] HEAD -> refs/for/master/bp/utilization-based-scheduling (no changes made)". | 06:22 |
*** kenperkins has quit IRC | 06:22 | |
*** vartom1118 has quit IRC | 06:22 | |
*** vartom1118 has joined #openstack-dev | 06:24 | |
*** topol has quit IRC | 06:25 | |
clarkb | thats normal | 06:26 |
clarkb | gerrit wont accept patches it already has | 06:26 |
*** cdub_ has quit IRC | 06:26 | |
clarkb | also that test fails because the sixty second timeout in https://github.com/openstack/nova/blob/master/.testr.conf was hit | 06:27 |
rerngvit | clarkb: hmm, what should I do then? should I add an extra line or space somewhere? | 06:28 |
*** tzumainn has quit IRC | 06:28 | |
*** bdpayne has quit IRC | 06:29 | |
*** boris-42 has joined #openstack-dev | 06:29 | |
*** prekarat has joined #openstack-dev | 06:29 | |
clarkb | rerngvit: what are you trying to accomplish? | 06:30 |
*** bdpayne has joined #openstack-dev | 06:31 | |
*** xga has joined #openstack-dev | 06:31 | |
rerngvit | I am implementing this blue print (https://blueprints.launchpad.net/openstack/?searchtext=utilization-based-scheduling) | 06:31 |
*** garyk has joined #openstack-dev | 06:31 | |
rerngvit | last patch, it was quite big so I separate it into manageable parts and submit each one. | 06:32 |
rerngvit | This is the first one. | 06:32 |
clarkb | the error from gerrit indicates nothing has changed. the commit sha is the same | 06:33 |
*** sarob has joined #openstack-dev | 06:33 | |
garyk | gongysh: ping | 06:33 |
*** michchap_ has joined #openstack-dev | 06:34 | |
rerngvit | I understand. My question is then how normally should this be done ( recheck submit ) | 06:34 |
rerngvit | ? | 06:34 |
gongysh | hi | 06:34 |
*** bdpayne has quit IRC | 06:35 | |
*** PhilDay has quit IRC | 06:35 | |
*** koolhead17 has joined #openstack-dev | 06:35 | |
*** michchap has quit IRC | 06:36 | |
clarkb | rerngvit: if you just want to resubmit you do that through gerrits web interface by leaving a review on the change with the magic string in the comment field | 06:36 |
clarkb | s/resubmit/recheck/ | 06:36 |
rerngvit | clarkb: ok thank you. I'll try that then | 06:37 |
*** flaper87 has joined #openstack-dev | 06:41 | |
*** danwent has quit IRC | 06:41 | |
*** belmoreira has joined #openstack-dev | 06:44 | |
*** jasdeepH has quit IRC | 06:46 | |
*** gongysh has quit IRC | 06:47 | |
*** jasondotstar has joined #openstack-dev | 06:47 | |
*** glikson has quit IRC | 06:47 | |
openstackgerrit | A change was merged to openstack/glance: Implement registry API v2 https://review.openstack.org/27267 | 06:49 |
*** vartom1119 has joined #openstack-dev | 06:50 | |
*** vartom1118 has quit IRC | 06:50 | |
*** gongysh has joined #openstack-dev | 06:54 | |
*** xga has quit IRC | 06:55 | |
*** xga has joined #openstack-dev | 06:55 | |
*** zoresvit has joined #openstack-dev | 07:00 | |
*** reidrac has joined #openstack-dev | 07:05 | |
openstackgerrit | A change was merged to openstack/nova: Delete InstanceSystemMetadata on instance deletion https://review.openstack.org/24387 | 07:09 |
openstackgerrit | A change was merged to openstack/nova: Sync oslo-incubator print statement changes https://review.openstack.org/28238 | 07:09 |
*** johndescs_ has joined #openstack-dev | 07:11 | |
*** johndescs_ is now known as johndescs | 07:12 | |
*** glikson has joined #openstack-dev | 07:13 | |
*** athomas has joined #openstack-dev | 07:15 | |
*** crazed has quit IRC | 07:15 | |
*** Hien has quit IRC | 07:15 | |
*** rerngvit has left #openstack-dev | 07:15 | |
*** shardy has joined #openstack-dev | 07:18 | |
*** psedlak has joined #openstack-dev | 07:18 | |
*** Mandell_ has quit IRC | 07:19 | |
*** ndipanov has joined #openstack-dev | 07:19 | |
*** m4xmr has joined #openstack-dev | 07:22 | |
*** m4xmr has left #openstack-dev | 07:22 | |
*** marun has quit IRC | 07:27 | |
*** dguitarbite has left #openstack-dev | 07:29 | |
*** thouveng has joined #openstack-dev | 07:30 | |
*** mhu has joined #openstack-dev | 07:30 | |
*** JordanP has joined #openstack-dev | 07:31 | |
*** jprovazn has joined #openstack-dev | 07:32 | |
*** megha has joined #openstack-dev | 07:32 | |
*** dev_sa has joined #openstack-dev | 07:36 | |
*** aloga has joined #openstack-dev | 07:37 | |
*** salv-orlando has joined #openstack-dev | 07:40 | |
*** Hien has joined #openstack-dev | 07:42 | |
*** crazed has joined #openstack-dev | 07:45 | |
*** gmurphy has joined #openstack-dev | 07:45 | |
*** fbo has joined #openstack-dev | 07:48 | |
*** halfie|bbl is now known as halfie | 07:50 | |
*** jpich has joined #openstack-dev | 07:53 | |
*** LiLin has joined #openstack-dev | 07:55 | |
*** basha has quit IRC | 07:55 | |
*** crazed has quit IRC | 07:55 | |
*** Hien has quit IRC | 07:56 | |
*** gmurphy has left #openstack-dev | 07:57 | |
*** jgallard has joined #openstack-dev | 07:58 | |
*** giulivo has joined #openstack-dev | 07:58 | |
*** johnthetubaguy has joined #openstack-dev | 08:01 | |
*** johnthetubaguy1 has joined #openstack-dev | 08:04 | |
*** johnthetubaguy has quit IRC | 08:06 | |
*** lucasagomes has joined #openstack-dev | 08:07 | |
*** alexpilotti has joined #openstack-dev | 08:08 | |
*** mikal has quit IRC | 08:09 | |
*** mikal has joined #openstack-dev | 08:11 | |
*** afazekas has joined #openstack-dev | 08:16 | |
*** Hien has joined #openstack-dev | 08:18 | |
*** crazed has joined #openstack-dev | 08:19 | |
*** pixelbeat_ has joined #openstack-dev | 08:24 | |
*** basha has joined #openstack-dev | 08:25 | |
*** derekh has joined #openstack-dev | 08:26 | |
*** Corren has quit IRC | 08:27 | |
*** kenperkins has joined #openstack-dev | 08:28 | |
*** boris-42 has quit IRC | 08:35 | |
*** boris-42 has joined #openstack-dev | 08:36 | |
*** eglynn has joined #openstack-dev | 08:37 | |
*** amerine has quit IRC | 08:41 | |
*** redbeard2 has quit IRC | 08:45 | |
*** jtomasek has joined #openstack-dev | 08:46 | |
*** megha has quit IRC | 08:46 | |
*** megha has joined #openstack-dev | 08:49 | |
*** jgallard has quit IRC | 08:49 | |
*** jgallard has joined #openstack-dev | 08:50 | |
*** sarob has quit IRC | 08:50 | |
*** jcoufal has joined #openstack-dev | 08:50 | |
*** sarob has joined #openstack-dev | 08:50 | |
*** mkerrin has joined #openstack-dev | 08:53 | |
*** sarob has quit IRC | 08:55 | |
*** winston-d has quit IRC | 08:56 | |
*** afazekas has quit IRC | 08:58 | |
*** redbeard2 has joined #openstack-dev | 08:58 | |
*** afazekas has joined #openstack-dev | 09:02 | |
*** LiLin has left #openstack-dev | 09:12 | |
*** danpb has joined #openstack-dev | 09:13 | |
*** johnthetubaguy1 is now known as johnthetubaguy | 09:15 | |
*** bing_bu has quit IRC | 09:22 | |
*** openstackstatus has quit IRC | 09:29 | |
*** belmoreira has left #openstack-dev | 09:30 | |
*** SergeyLukjanov has quit IRC | 09:39 | |
*** openstackstatus has joined #openstack-dev | 09:39 | |
openstackgerrit | A change was merged to openstack/nova: Imported Translations from Transifex https://review.openstack.org/27661 | 09:40 |
openstackgerrit | A change was merged to openstack/nova: Remove random print statements https://review.openstack.org/28388 | 09:40 |
*** afazekas has quit IRC | 09:46 | |
*** afazekas has joined #openstack-dev | 09:48 | |
*** vartom1119 has quit IRC | 09:49 | |
*** jcoufal has quit IRC | 09:51 | |
*** athomas has quit IRC | 09:51 | |
*** timello has quit IRC | 09:52 | |
*** mikal has quit IRC | 09:57 | |
*** mikal has joined #openstack-dev | 09:59 | |
*** alexpilotti has quit IRC | 10:02 | |
*** boris-42 has quit IRC | 10:05 | |
*** timello has joined #openstack-dev | 10:05 | |
*** alexpilotti has joined #openstack-dev | 10:11 | |
*** athomas has joined #openstack-dev | 10:12 | |
*** nati_ueno has joined #openstack-dev | 10:16 | |
*** tomoe_ has quit IRC | 10:21 | |
*** mmagr has joined #openstack-dev | 10:21 | |
*** vartom1119 has joined #openstack-dev | 10:23 | |
*** alexpilotti has quit IRC | 10:28 | |
*** prekarat has quit IRC | 10:28 | |
*** alexpilotti has joined #openstack-dev | 10:30 | |
*** prekarat has joined #openstack-dev | 10:30 | |
*** yaguang has quit IRC | 10:32 | |
basha | Hi. We have a question. Is it a convention that all the modules copied over from oslo-incubator (by running an update.py) should be put into the openstack/common folder? | 10:33 |
*** kiall has joined #openstack-dev | 10:38 | |
*** uaberme has joined #openstack-dev | 10:44 | |
*** rkukura has quit IRC | 10:48 | |
*** phschwartz has quit IRC | 10:49 | |
*** phschwartz_ is now known as phschwartz | 10:49 | |
*** phschwartz_ has joined #openstack-dev | 10:51 | |
*** sride has quit IRC | 10:51 | |
*** sride has joined #openstack-dev | 10:52 | |
*** boris-42 has joined #openstack-dev | 10:54 | |
*** megha has quit IRC | 10:56 | |
*** baba has joined #openstack-dev | 10:57 | |
*** jasondotstar has quit IRC | 11:06 | |
*** rnirmal has joined #openstack-dev | 11:08 | |
*** rmk has quit IRC | 11:10 | |
*** basha has quit IRC | 11:10 | |
*** basha has joined #openstack-dev | 11:10 | |
*** sandywalsh has quit IRC | 11:13 | |
*** wiliam_ has joined #openstack-dev | 11:14 | |
*** sandywalsh has joined #openstack-dev | 11:25 | |
*** mikal has quit IRC | 11:27 | |
*** mikal has joined #openstack-dev | 11:29 | |
*** digitalsanctum has joined #openstack-dev | 11:32 | |
*** sthaha has quit IRC | 11:33 | |
*** wiliam_ has quit IRC | 11:33 | |
*** wiliam_ has joined #openstack-dev | 11:34 | |
*** dguitarbite has joined #openstack-dev | 11:36 | |
*** markmc has joined #openstack-dev | 11:40 | |
*** freedomhui has quit IRC | 11:40 | |
*** wiliam_ has quit IRC | 11:40 | |
*** wiliam_ has joined #openstack-dev | 11:41 | |
*** pcm__ has joined #openstack-dev | 11:43 | |
*** jcoufal has joined #openstack-dev | 11:44 | |
*** SergeyLukjanov has joined #openstack-dev | 11:44 | |
*** uaberme has quit IRC | 11:46 | |
*** HenryG has joined #openstack-dev | 11:47 | |
*** vartom1119 has quit IRC | 11:47 | |
*** wiliam_ has quit IRC | 11:49 | |
*** wiliam_ has joined #openstack-dev | 11:52 | |
*** uaberme has joined #openstack-dev | 11:53 | |
*** arbrandes has joined #openstack-dev | 11:54 | |
*** tzumainn has joined #openstack-dev | 11:55 | |
*** glikson has quit IRC | 11:55 | |
*** glikson has joined #openstack-dev | 11:56 | |
*** jruzicka has joined #openstack-dev | 11:57 | |
*** trapni has joined #openstack-dev | 11:58 | |
*** radez_g0n3 is now known as radez | 12:03 | |
*** prekarat has quit IRC | 12:04 | |
*** prekarat1 has joined #openstack-dev | 12:04 | |
*** prekarat1 has quit IRC | 12:04 | |
*** JordanP has quit IRC | 12:04 | |
*** ijw has quit IRC | 12:06 | |
*** JordanP has joined #openstack-dev | 12:07 | |
*** basha has quit IRC | 12:07 | |
*** ijw has joined #openstack-dev | 12:08 | |
*** galstrom_zzz is now known as galstrom | 12:10 | |
*** eharney has joined #openstack-dev | 12:10 | |
*** ondergetekende has joined #openstack-dev | 12:12 | |
*** topol has joined #openstack-dev | 12:12 | |
*** wiliam_ has quit IRC | 12:15 | |
*** JordanP has quit IRC | 12:15 | |
*** martine has joined #openstack-dev | 12:16 | |
*** wiliam_ has joined #openstack-dev | 12:16 | |
*** ayoung has quit IRC | 12:19 | |
*** ijw has quit IRC | 12:19 | |
*** SergeyLukjanov has quit IRC | 12:19 | |
*** jang has joined #openstack-dev | 12:20 | |
*** dims has joined #openstack-dev | 12:20 | |
*** johndescs has quit IRC | 12:21 | |
*** johndescs has joined #openstack-dev | 12:21 | |
*** SergeyLukjanov has joined #openstack-dev | 12:21 | |
openstackgerrit | A change was merged to openstack/tempest: Adds Cinder Multi-Backend Test https://review.openstack.org/23923 | 12:22 |
*** thouveng has quit IRC | 12:24 | |
*** ijw has joined #openstack-dev | 12:25 | |
*** wiliam_ has quit IRC | 12:25 | |
*** wiliam_ has joined #openstack-dev | 12:26 | |
*** ijw1 has joined #openstack-dev | 12:26 | |
*** mhu has quit IRC | 12:26 | |
*** cmark has joined #openstack-dev | 12:28 | |
*** galstrom is now known as galstrom_zzz | 12:29 | |
*** ijw has quit IRC | 12:29 | |
*** JordanP has joined #openstack-dev | 12:30 | |
*** Guest46684 has quit IRC | 12:31 | |
*** cmark_ has quit IRC | 12:32 | |
*** mhu has joined #openstack-dev | 12:32 | |
*** dhellmann is now known as dhellmann-away | 12:36 | |
*** wiliam_ has quit IRC | 12:37 | |
*** wiliam_ has joined #openstack-dev | 12:37 | |
*** jasondotstar has joined #openstack-dev | 12:38 | |
*** bknudson has joined #openstack-dev | 12:40 | |
openstackgerrit | A change was merged to openstack/oslo.config: Made a couple minor textual documentation / typo fixes. https://review.openstack.org/28380 | 12:45 |
*** timello has quit IRC | 12:46 | |
openstackgerrit | A change was merged to openstack/oslo.config: Update build to use pbr. https://review.openstack.org/27632 | 12:46 |
openstackgerrit | A change was merged to openstack/oslo.config: Upgrade testing to use testr. https://review.openstack.org/26295 | 12:47 |
openstackgerrit | A change was merged to openstack/oslo.config: Re-work test_cli to use testscenarios. https://review.openstack.org/26296 | 12:47 |
*** timello has joined #openstack-dev | 12:47 | |
*** lauria has joined #openstack-dev | 12:48 | |
openstackgerrit | A change was merged to openstack/oslo-incubator: Convert unicode for python3 portability https://review.openstack.org/27933 | 12:50 |
*** wiliam_ has quit IRC | 12:51 | |
*** wiliam_ has joined #openstack-dev | 12:51 | |
*** wiliam_ is now known as wiliam | 12:53 | |
*** pfreund has joined #openstack-dev | 12:53 | |
*** networkstatic has quit IRC | 12:54 | |
*** kbringard has joined #openstack-dev | 12:56 | |
*** markmcclain has joined #openstack-dev | 12:57 | |
*** READ10 has joined #openstack-dev | 12:57 | |
*** markmcclain has quit IRC | 12:57 | |
*** alunduil has quit IRC | 12:58 | |
*** michchap_ has quit IRC | 12:58 | |
*** nati_ueno has quit IRC | 12:59 | |
*** michchap has joined #openstack-dev | 12:59 | |
*** pabelanger_ has joined #openstack-dev | 12:59 | |
*** michchap has quit IRC | 13:01 | |
*** matiu has quit IRC | 13:01 | |
*** dprince has joined #openstack-dev | 13:01 | |
*** michchap has joined #openstack-dev | 13:01 | |
*** pabelanger_ has quit IRC | 13:01 | |
*** pabelanger_ has joined #openstack-dev | 13:01 | |
*** pabelanger has quit IRC | 13:01 | |
*** pabelanger_ is now known as pabelanger | 13:01 | |
*** pabelanger_ has joined #openstack-dev | 13:02 | |
*** wiliam has quit IRC | 13:02 | |
*** BobBall has quit IRC | 13:04 | |
*** wiliam has joined #openstack-dev | 13:04 | |
openstackgerrit | A change was merged to openstack/ceilometer: Update oslo before bringing in exceptions https://review.openstack.org/27897 | 13:06 |
*** jecarey has joined #openstack-dev | 13:06 | |
*** psedlak has quit IRC | 13:07 | |
*** salv-orlando has quit IRC | 13:07 | |
*** pmyers has quit IRC | 13:09 | |
*** pmyers has joined #openstack-dev | 13:10 | |
*** wiliam has quit IRC | 13:13 | |
*** litong has joined #openstack-dev | 13:14 | |
*** uaberme has quit IRC | 13:14 | |
*** zb is now known as zaneb | 13:14 | |
*** wiliam has joined #openstack-dev | 13:14 | |
*** bmclaughlin has joined #openstack-dev | 13:15 | |
*** redbeard2 has quit IRC | 13:15 | |
*** ayoung has joined #openstack-dev | 13:15 | |
*** tomoe_ has joined #openstack-dev | 13:16 | |
*** tomoe_ has quit IRC | 13:16 | |
*** jayg|g0n3 is now known as jayg | 13:18 | |
*** stevemar has joined #openstack-dev | 13:21 | |
*** wiliam has quit IRC | 13:21 | |
openstackgerrit | A change was merged to openstack/ceilometer: Update WSME dependency https://review.openstack.org/28285 | 13:23 |
*** mhu has quit IRC | 13:25 | |
*** drewlander has joined #openstack-dev | 13:27 | |
*** uaberme has joined #openstack-dev | 13:28 | |
openstackgerrit | A change was merged to openstack/quantum: Fix 500 raised on disassociate_floatingips when out of sync https://review.openstack.org/28375 | 13:28 |
*** wiliam has joined #openstack-dev | 13:29 | |
*** nati_ueno has joined #openstack-dev | 13:31 | |
*** SergeyLukjanov has quit IRC | 13:32 | |
*** mhu has joined #openstack-dev | 13:35 | |
*** sride has quit IRC | 13:36 | |
*** SergeyLukjanov has joined #openstack-dev | 13:37 | |
*** SergeyLukjanov has quit IRC | 13:39 | |
*** rkukura has joined #openstack-dev | 13:39 | |
*** stevemar has quit IRC | 13:40 | |
*** stevemar has joined #openstack-dev | 13:41 | |
*** stevemar has quit IRC | 13:44 | |
*** stevemar has joined #openstack-dev | 13:44 | |
*** woodspa has joined #openstack-dev | 13:46 | |
*** lauria_ has joined #openstack-dev | 13:46 | |
*** PhilDay has joined #openstack-dev | 13:48 | |
*** woodspa has quit IRC | 13:49 | |
*** lauria has quit IRC | 13:49 | |
*** lauria_ is now known as lauria | 13:49 | |
*** nati_ueno has quit IRC | 13:52 | |
*** cloudchimp has joined #openstack-dev | 13:53 | |
*** wiliam has quit IRC | 13:55 | |
*** jimfehlig has joined #openstack-dev | 13:55 | |
*** gordc has quit IRC | 13:56 | |
*** digitalsanctum has quit IRC | 13:57 | |
*** galstrom_zzz is now known as galstrom | 13:57 | |
*** digitalsanctum has joined #openstack-dev | 14:00 | |
*** gongysh has quit IRC | 14:00 | |
*** lauria has quit IRC | 14:01 | |
*** lauria has joined #openstack-dev | 14:01 | |
*** halidaltuner has joined #openstack-dev | 14:02 | |
*** wiliam has joined #openstack-dev | 14:07 | |
*** markmcclain has joined #openstack-dev | 14:09 | |
*** sudorandom has joined #openstack-dev | 14:09 | |
*** cp16net is now known as cp16net|away | 14:11 | |
*** SergeyLukjanov has joined #openstack-dev | 14:11 | |
*** wiliam has quit IRC | 14:13 | |
*** markmcclain has quit IRC | 14:14 | |
openstackgerrit | A change was merged to openstack/nova: Remove security_group_handler https://review.openstack.org/28384 | 14:15 |
*** Guest22610 has quit IRC | 14:15 | |
*** jgallard has quit IRC | 14:16 | |
*** jamespage_ has joined #openstack-dev | 14:16 | |
*** jgallard has joined #openstack-dev | 14:16 | |
*** topol has quit IRC | 14:17 | |
*** maoy has joined #openstack-dev | 14:17 | |
*** uaberme has quit IRC | 14:18 | |
*** ashwini has joined #openstack-dev | 14:20 | |
*** dolphm has joined #openstack-dev | 14:24 | |
*** wiliam has joined #openstack-dev | 14:25 | |
*** jcoufal has quit IRC | 14:25 | |
*** arbrandes has quit IRC | 14:26 | |
*** spzala has joined #openstack-dev | 14:26 | |
*** rcleere has quit IRC | 14:27 | |
*** dtroyer has joined #openstack-dev | 14:28 | |
*** freedomhui has joined #openstack-dev | 14:30 | |
*** dtroyer has left #openstack-dev | 14:31 | |
*** dtroyer has joined #openstack-dev | 14:31 | |
*** gordc has joined #openstack-dev | 14:32 | |
*** armax has joined #openstack-dev | 14:32 | |
*** johnpur has joined #openstack-dev | 14:34 | |
*** wiliam has quit IRC | 14:34 | |
*** wiliam has joined #openstack-dev | 14:36 | |
*** dguitarbite has quit IRC | 14:36 | |
*** datsun180b has joined #openstack-dev | 14:38 | |
*** electrichead has joined #openstack-dev | 14:38 | |
*** esheffield has joined #openstack-dev | 14:38 | |
*** andrewbogott_afk is now known as andrewbogott | 14:38 | |
*** aeperezt has joined #openstack-dev | 14:38 | |
sandywalsh | markmc, re: https://blueprints.launchpad.net/oslo/+spec/consume-notifications-rpc ... havana-2 is fine. We have a workaround now (the current mechanism), it would just be nice to clean it up. | 14:39 |
markmc | sandywalsh, cool, thanks | 14:40 |
*** adjohn has joined #openstack-dev | 14:41 | |
*** FunnyLookinHat has joined #openstack-dev | 14:41 | |
*** katylava has joined #openstack-dev | 14:43 | |
*** wiliam has quit IRC | 14:45 | |
*** blamar has quit IRC | 14:46 | |
*** nunosantos has joined #openstack-dev | 14:46 | |
*** wiliam has joined #openstack-dev | 14:46 | |
*** ociuhandu has joined #openstack-dev | 14:47 | |
*** blamar has joined #openstack-dev | 14:48 | |
*** rcleere has joined #openstack-dev | 14:48 | |
*** colinmcnamara has joined #openstack-dev | 14:50 | |
*** koolhead17 has quit IRC | 14:51 | |
*** topol has joined #openstack-dev | 14:51 | |
*** aelkikhia has joined #openstack-dev | 14:51 | |
*** ondergetekende has quit IRC | 14:53 | |
*** wiliam has quit IRC | 14:56 | |
ayoung | dolphm, IPv6 merged last night. Your patch should go through now | 14:56 |
*** morazi has quit IRC | 14:56 | |
*** wiliam has joined #openstack-dev | 14:57 | |
*** jprovazn has quit IRC | 14:59 | |
*** lucasagomes_ has joined #openstack-dev | 14:59 | |
*** rerngvit has joined #openstack-dev | 14:59 | |
*** rerngvit has left #openstack-dev | 15:00 | |
*** glikson has quit IRC | 15:00 | |
*** glikson has joined #openstack-dev | 15:00 | |
*** lucasagomes has quit IRC | 15:00 | |
*** navid_ has quit IRC | 15:00 | |
*** Mandell has joined #openstack-dev | 15:01 | |
*** morazi has joined #openstack-dev | 15:03 | |
*** morazi has quit IRC | 15:03 | |
*** wiliam has quit IRC | 15:03 | |
*** morazi has joined #openstack-dev | 15:04 | |
*** ociuhandu is now known as ociuhandu_ | 15:04 | |
*** boris-42 has quit IRC | 15:05 | |
*** wiliam has joined #openstack-dev | 15:05 | |
*** reidrac has quit IRC | 15:05 | |
*** ociuhandu_ is now known as ociuhandu | 15:05 | |
*** lauria_ has joined #openstack-dev | 15:05 | |
*** lauria has quit IRC | 15:06 | |
*** lauria_ is now known as lauria | 15:06 | |
dolphm | ayoung: thank you! | 15:07 |
*** ociuhandu has quit IRC | 15:07 | |
*** ociuhandu has joined #openstack-dev | 15:07 | |
*** jab416171 has quit IRC | 15:09 | |
*** wiliam has quit IRC | 15:09 | |
*** winston-d has joined #openstack-dev | 15:10 | |
*** cp16net|away is now known as cp16net | 15:10 | |
*** wiliam has joined #openstack-dev | 15:10 | |
*** ijw1 has quit IRC | 15:10 | |
*** ijw has joined #openstack-dev | 15:10 | |
*** vartom1119 has joined #openstack-dev | 15:10 | |
*** kpavel has joined #openstack-dev | 15:12 | |
*** jamespage_ has quit IRC | 15:14 | |
*** zul has joined #openstack-dev | 15:14 | |
*** sacharya has joined #openstack-dev | 15:14 | |
*** jvrbanac has joined #openstack-dev | 15:16 | |
*** BobBall has joined #openstack-dev | 15:17 | |
*** jamespage_ has joined #openstack-dev | 15:17 | |
*** jab416171 has joined #openstack-dev | 15:17 | |
*** cp16net is now known as cp16net|away | 15:17 | |
*** cp16net|away is now known as cp16net | 15:17 | |
*** ianw has quit IRC | 15:19 | |
*** basha has joined #openstack-dev | 15:20 | |
jgriffith | adam_g_: thanks for the feedback on those backports | 15:22 |
openstackgerrit | A change was merged to openstack/tempest: Add setup failure logging in tearDown method. https://review.openstack.org/28406 | 15:23 |
*** danwent has joined #openstack-dev | 15:23 | |
*** wiliam has quit IRC | 15:23 | |
openstackgerrit | A change was merged to openstack/nova: Nova evacuate failed when VM is in SHUTOFF status https://review.openstack.org/28273 | 15:24 |
*** jamespage_ has quit IRC | 15:24 | |
openstackgerrit | A change was merged to openstack/quantum: Imported Translations from Transifex https://review.openstack.org/28411 | 15:24 |
*** zaitcev has joined #openstack-dev | 15:24 | |
openstackgerrit | A change was merged to openstack/quantum: update-port error if port does not exist in nvp https://review.openstack.org/27380 | 15:25 |
openstackgerrit | A change was merged to openstack/quantum: Update import of oslo's processutils. https://review.openstack.org/28373 | 15:25 |
openstackgerrit | A change was merged to openstack/quantum: Validate that netaddr does not receive a string with whitespace https://review.openstack.org/28401 | 15:25 |
openstackgerrit | A change was merged to openstack/quantum: blueprint cisco-plugin-exception-handling https://review.openstack.org/26695 | 15:25 |
openstackgerrit | A change was merged to openstack/quantum: Calculate nicira plugin NAT rules order according to CIDR prefix https://review.openstack.org/28314 | 15:25 |
*** reed has joined #openstack-dev | 15:25 | |
*** zaitcev_ has joined #openstack-dev | 15:25 | |
*** ron-slc has quit IRC | 15:25 | |
*** zaitcev_ has quit IRC | 15:25 | |
*** halidaltuner has quit IRC | 15:25 | |
*** terryh has joined #openstack-dev | 15:27 | |
openstackgerrit | A change was merged to openstack/quantum: Log msg for load policy file only if the file is actually loaded https://review.openstack.org/28250 | 15:29 |
*** vartom1119 has quit IRC | 15:29 | |
*** ron-slc has joined #openstack-dev | 15:29 | |
*** pfreund has quit IRC | 15:30 | |
*** colinmcnamara has quit IRC | 15:30 | |
*** jtomasek has quit IRC | 15:30 | |
*** jasdeepH has joined #openstack-dev | 15:31 | |
adam_g_ | jgriffith: np! | 15:31 |
*** bswartz has quit IRC | 15:34 | |
*** hartsocks has joined #openstack-dev | 15:35 | |
*** wiliam has joined #openstack-dev | 15:37 | |
*** utlemming has joined #openstack-dev | 15:39 | |
*** pfreund has joined #openstack-dev | 15:40 | |
*** mhu has quit IRC | 15:41 | |
*** rmk has joined #openstack-dev | 15:42 | |
*** salv-orlando has joined #openstack-dev | 15:45 | |
*** alexpilotti has quit IRC | 15:47 | |
*** trapni has quit IRC | 15:47 | |
ayoung | dolphm, with regard to "Filling up the token table." jamielennox wrote a patch last night that (when called from the CLI) migrates the data out of the token table and into an archival table. I would think that should be a good first step, but after that, we would want to ship them off the Keystone server. Would it make sense to have a stand alone executable that copies the token_archival table in a message and sent it via AMQP, and | 15:48 |
ayoung | then delete all rows? | 15:48 |
*** SergeyLukjanov has quit IRC | 15:48 | |
*** bdpayne has joined #openstack-dev | 15:48 | |
*** xga has quit IRC | 15:49 | |
ayoung | bdpayne, glad you are here. Do you have time for an auditing question? | 15:49 |
bdpayne | sure | 15:49 |
ayoung | bdpayne, I am working on the assumption that we need to hold on to the tokens for longer than their expiration time. Is that correct? | 15:50 |
*** dabo has quit IRC | 15:50 | |
bdpayne | I guess it depends on what you're putting in the logs | 15:50 |
bdpayne | what you want is a record of all access and access attempts | 15:51 |
ayoung | bdpayne, right now, if you use the SQL backend, there is no way to clean up expired tokens, and I was thinking that the right solution would be to periodically get the old tokens out of keystone, and send them via the message bus to an archival server. | 15:51 |
bdpayne | if you need the tokens for that, then you probably need to log them | 15:51 |
*** SergeyLukjanov has joined #openstack-dev | 15:51 | |
*** garyk has quit IRC | 15:51 | |
ayoung | bdpayne, well, that information comes out of the policy engine, I am not sure it needs the token, too | 15:51 |
bdpayne | tbh, I'd rather not see the tokens in the logs | 15:51 |
*** dabo has joined #openstack-dev | 15:51 | |
bdpayne | seems like you should just need user did xyz at time abc | 15:52 |
bdpayne | (roughly) :-) | 15:52 |
*** jcoufal has joined #openstack-dev | 15:52 | |
ayoung | bdpayne, ok...I think you are right there. Do you think that there will be a requirement to maintain a copy of the tokens at all? | 15:52 |
*** shang has joined #openstack-dev | 15:53 | |
bdpayne | I can't think of one off hand… they are really just an implementation detail and what you want to audit, it would seem to me, is the user-level access information | 15:53 |
*** basha has quit IRC | 15:54 | |
bdpayne | basically, I imagine users for auditing, tokens for debugging | 15:54 |
*** pabelanger has quit IRC | 15:54 | |
*** jvrbanac has quit IRC | 15:54 | |
bdpayne | but, I'm more of a security hat than a compliance hat, so it might be good to run this by a compliance expert to be sure | 15:54 |
*** networkstatic has joined #openstack-dev | 15:55 | |
dolphm | ayoung: topol: jenkins is passing this now https://review.openstack.org/#/c/28197/ | 15:56 |
ayoung | bdpayne, I think that we will need to hook auditing into the policy engine | 15:56 |
dolphm | backport is here, but master should merge first- https://review.openstack.org/#/c/28423/ | 15:56 |
ayoung | dolphm, excellent. | 15:56 |
*** PhilDay has quit IRC | 15:56 | |
*** koolhead17 has joined #openstack-dev | 15:56 | |
topol | dolphm, cool I will review today | 15:56 |
bdpayne | young I do agree with that (auditing in the policy engine) | 15:56 |
*** aloga has quit IRC | 15:56 | |
*** jvrbanac has joined #openstack-dev | 15:57 | |
*** lauria_ has joined #openstack-dev | 15:57 | |
*** winston-d has quit IRC | 15:57 | |
ayoung | bdpayne, we could use some sort of blueprint for auditing. | 15:58 |
bdpayne | always good to log where the decisions are made | 15:58 |
ayoung | I guess that would be under oslo | 15:58 |
*** winston-d has joined #openstack-dev | 15:58 | |
*** jk0 has quit IRC | 15:58 | |
*** digitalsanctum has quit IRC | 15:58 | |
bdpayne | probably under all of the projects, to be honest | 15:58 |
*** lauria has quit IRC | 15:58 | |
*** jgallard has quit IRC | 15:58 | |
bdpayne | oslo would be a good start | 15:58 |
ayoung | bdpayne, can you chime in on https://review.openstack.org/#/c/28133/ then? | 15:58 |
*** lauria_ is now known as lauria | 15:59 | |
* bdpayne is looking | 15:59 | |
ayoung | You don't need to +/- just provide feedback | 15:59 |
*** alexpilotti has joined #openstack-dev | 16:01 | |
*** jk0 has joined #openstack-dev | 16:02 | |
bdpayne | ayoung why not flush them from memcache? | 16:03 |
bdpayne | or is it already flushing itself? | 16:04 |
*** kpavel_ has joined #openstack-dev | 16:04 | |
ayoung | bdpayne, yes memcache can flush based on expiray | 16:05 |
ayoung | expiry | 16:05 |
ayoung | that is what most people are using, I think. | 16:05 |
ayoung | tokens and memcache are, for the most part, a good fit. If we could drop the requirement for revocation lists, it would be a perfect fit, I think. | 16:06 |
*** kpavel has quit IRC | 16:06 | |
*** kpavel_ is now known as kpavel | 16:06 | |
*** pasquier-s has quit IRC | 16:07 | |
*** rushiagr has quit IRC | 16:08 | |
bdpayne | looks ok | 16:08 |
*** digitalsanctum has joined #openstack-dev | 16:08 | |
openstackgerrit | A change was merged to openstack/tempest: change test_register_http_image to use explicit url https://review.openstack.org/28351 | 16:09 |
*** esp1 has joined #openstack-dev | 16:10 | |
*** zoresvit1 has joined #openstack-dev | 16:10 | |
*** zoresvit has quit IRC | 16:10 | |
*** mrodden has quit IRC | 16:10 | |
openstackgerrit | A change was merged to openstack/cinder: Fix ability to add custom volume_backend_name https://review.openstack.org/28208 | 16:13 |
ayoung | dolphm, we need to backport the IPv6 fix | 16:13 |
bknudson | Do the grizzly pip requires get locked down at some point? | 16:14 |
*** fbo has quit IRC | 16:14 | |
*** nati_ueno has joined #openstack-dev | 16:14 | |
dolphm | ayoung: https://review.openstack.org/#/c/28431/ | 16:14 |
bknudson | I mean the versions of the packages Openstack depends on | 16:14 |
dolphm | bknudson: ^ | 16:14 |
dolphm | bknudson: ayoung: what about folsom? | 16:14 |
*** devoid has joined #openstack-dev | 16:15 | |
*** esp1 has left #openstack-dev | 16:15 | |
*** Corren has joined #openstack-dev | 16:15 | |
ayoung | dolphm, let me check. If the IPv6 tests are being called there, then yes. | 16:15 |
*** Ryan_Lane has quit IRC | 16:16 | |
ayoung | dolphm, I think actually folsom is ok | 16:17 |
ayoung | https://github.com/openstack/keystone/blob/stable/folsom/keystone/test.py#L264 | 16:17 |
*** devoid has left #openstack-dev | 16:17 | |
ayoung | no IPv6 check in there | 16:17 |
*** kenperkins has quit IRC | 16:18 | |
*** Corren has quit IRC | 16:18 | |
*** nati_ueno has quit IRC | 16:19 | |
*** kenperkins has joined #openstack-dev | 16:19 | |
ayoung | no IPv6 in here either, https://github.com/openstack/keystone/blob/stable/folsom/tests/test_ssl.py and no test_ipv6.py | 16:19 |
*** redbeard2 has joined #openstack-dev | 16:19 | |
openstackgerrit | A change was merged to openstack/python-openstackclient: Rename all instances of 'metadata' to 'property'. https://review.openstack.org/28432 | 16:23 |
*** mrodden has joined #openstack-dev | 16:23 | |
*** pfreund has quit IRC | 16:24 | |
*** brunnhilde has joined #openstack-dev | 16:24 | |
*** ayoung has quit IRC | 16:25 | |
*** utlemming has quit IRC | 16:25 | |
dolphm | ayoung: thanks | 16:25 |
*** kenperkins is now known as ken | 16:25 | |
*** ken is now known as kenperkins | 16:25 | |
*** bswartz has joined #openstack-dev | 16:25 | |
*** JordanP has quit IRC | 16:26 | |
*** utlemming has joined #openstack-dev | 16:27 | |
*** Corren has joined #openstack-dev | 16:29 | |
*** sarob has joined #openstack-dev | 16:29 | |
BobBall | Can anyone help me? Git review for a tempest change claims that it can't rebase on remotes/gerrit/master - but I have tried rebasing on both that and origin/master but with the same error message. It claims it can't merge due to change 807aa73 - which is present in the history log before the rebase triggered by git review, but is not present in the log during the git review | 16:30 |
*** cp16net is now known as cp16net|away | 16:30 | |
*** davidhadas has quit IRC | 16:30 | |
*** alop has joined #openstack-dev | 16:30 | |
*** sarob has quit IRC | 16:30 | |
*** sarob has joined #openstack-dev | 16:30 | |
*** wiliam has quit IRC | 16:30 | |
*** kenperkins has quit IRC | 16:31 | |
*** jruzicka has quit IRC | 16:31 | |
*** marun has joined #openstack-dev | 16:32 | |
*** cmark has quit IRC | 16:32 | |
*** wiliam has joined #openstack-dev | 16:32 | |
*** cmark has joined #openstack-dev | 16:32 | |
*** hemnafk is now known as hemna | 16:33 | |
*** zoresvit1 has quit IRC | 16:35 | |
*** PeTe__ has joined #openstack-dev | 16:35 | |
*** davidhadas has joined #openstack-dev | 16:36 | |
*** yidclare has quit IRC | 16:37 | |
*** wiliam has quit IRC | 16:37 | |
*** zul has quit IRC | 16:38 | |
*** wiliam has joined #openstack-dev | 16:38 | |
*** derekh has quit IRC | 16:39 | |
*** dolphm has quit IRC | 16:39 | |
*** Ryan_Lane has joined #openstack-dev | 16:40 | |
*** glikson has quit IRC | 16:40 | |
adam_g_ | jgriffith: is https://bugs.launchpad.net/cinder/+bug/1160340 still critical for 2013.1.1? if so, i can throw up a leaner backport for review | 16:42 |
uvirtbot | Launchpad bug 1160340 in cinder/grizzly "Huawei driver: Failed to delete volume or snapshot if volume id or snapshot id is 0" [Undecided,In progress] | 16:42 |
*** SergeyLukjanov has quit IRC | 16:42 | |
*** jk0 has left #openstack-dev | 16:42 | |
*** sarob has quit IRC | 16:43 | |
*** openstackstatus has quit IRC | 16:43 | |
*** zul has joined #openstack-dev | 16:44 | |
*** ijw has quit IRC | 16:44 | |
*** e_steve has joined #openstack-dev | 16:45 | |
*** wiliam has quit IRC | 16:45 | |
*** ijw has joined #openstack-dev | 16:46 | |
*** sarob has joined #openstack-dev | 16:46 | |
*** ijw has quit IRC | 16:46 | |
*** ijw has joined #openstack-dev | 16:46 | |
*** wiliam has joined #openstack-dev | 16:47 | |
*** m4xmr has joined #openstack-dev | 16:49 | |
*** kpavel has quit IRC | 16:49 | |
*** sarob_ has joined #openstack-dev | 16:50 | |
*** athomas has quit IRC | 16:50 | |
*** openstackstatus has joined #openstack-dev | 16:51 | |
*** sarob has quit IRC | 16:53 | |
*** afazekas has quit IRC | 16:53 | |
*** Nachi has joined #openstack-dev | 16:53 | |
*** halj has joined #openstack-dev | 16:55 | |
openstackgerrit | A change was merged to openstack/keystone: LDAP list groups with missing member entry https://review.openstack.org/27787 | 16:55 |
*** danpb has quit IRC | 16:56 | |
*** rnirmal_ has joined #openstack-dev | 16:56 | |
*** dev_sa has quit IRC | 16:57 | |
*** m4xmr has quit IRC | 16:57 | |
*** gyee has joined #openstack-dev | 16:58 | |
*** pabelanger has joined #openstack-dev | 16:58 | |
*** rnirmal has quit IRC | 16:59 | |
*** rnirmal_ is now known as rnirmal | 16:59 | |
*** mrunge has quit IRC | 16:59 | |
*** basha has joined #openstack-dev | 16:59 | |
*** terry7 has joined #openstack-dev | 16:59 | |
*** garyk has joined #openstack-dev | 17:00 | |
*** athomas has joined #openstack-dev | 17:00 | |
*** SergeyLukjanov has joined #openstack-dev | 17:00 | |
*** adjohn has quit IRC | 17:03 | |
*** wiliam has quit IRC | 17:05 | |
*** wiliam has joined #openstack-dev | 17:06 | |
*** chuck_ has joined #openstack-dev | 17:07 | |
*** bdpayne has quit IRC | 17:07 | |
*** glikson has joined #openstack-dev | 17:08 | |
*** martine_ has joined #openstack-dev | 17:09 | |
*** aelkikhia has left #openstack-dev | 17:09 | |
*** zul has quit IRC | 17:10 | |
jgriffith | adam_g_: so I've dropped the more controversial patch, but was hoping to see https://review.openstack.org/#/c/28207/ land | 17:10 |
*** martine has quit IRC | 17:11 | |
*** bdpayne has joined #openstack-dev | 17:11 | |
*** wiliam has quit IRC | 17:13 | |
*** mmagr has quit IRC | 17:15 | |
*** wiliam has joined #openstack-dev | 17:16 | |
*** dolphm has joined #openstack-dev | 17:16 | |
*** mrunge has joined #openstack-dev | 17:19 | |
*** yidclare has joined #openstack-dev | 17:20 | |
*** sarob_ has quit IRC | 17:20 | |
*** jog0 has joined #openstack-dev | 17:22 | |
*** ayoung has joined #openstack-dev | 17:22 | |
*** llu_linux has joined #openstack-dev | 17:22 | |
*** wiliam has quit IRC | 17:23 | |
*** llu has quit IRC | 17:23 | |
*** wiliam has joined #openstack-dev | 17:24 | |
*** mkollaro has joined #openstack-dev | 17:26 | |
*** markmc has quit IRC | 17:26 | |
*** comay has joined #openstack-dev | 17:27 | |
*** HenryG has quit IRC | 17:28 | |
*** sarob has joined #openstack-dev | 17:33 | |
*** chuck_ has quit IRC | 17:34 | |
*** Corren is now known as kenperkins | 17:35 | |
*** lucasagomes_ has quit IRC | 17:36 | |
*** drewlander has quit IRC | 17:36 | |
adam_g_ | jgriffith: k. i assume there are no issues with potentially changing the backend_name in the stats reporting? | 17:36 |
jgriffith | adam_g_: on 28207? | 17:37 |
*** basha has quit IRC | 17:37 | |
jgriffith | adam_g_: so yeah, no problem there... that actually only allows an over-ride from the config flags | 17:38 |
*** amerine has joined #openstack-dev | 17:38 | |
jgriffith | adam_g_: which is needed to do multi-backend routing | 17:38 |
*** wiliam has quit IRC | 17:38 | |
jgriffith | adam_g_: the default naming will still be picked up by the class name as before | 17:38 |
jgriffith | adam_g_: 28840 is the same scenario | 17:39 |
*** wiliam has joined #openstack-dev | 17:39 | |
*** wiliam has quit IRC | 17:44 | |
*** sarob_ has joined #openstack-dev | 17:47 | |
*** jclift_ has joined #openstack-dev | 17:47 | |
*** wiliam has joined #openstack-dev | 17:48 | |
ayoung | dolphm, how do we nominate something as backport potential? | 17:48 |
ayoung | I'm thinking this one specficially https://bugs.launchpad.net/keystone/+bug/1174585 | 17:49 |
uvirtbot | Launchpad bug 1174585 in keystone "LDAP list group users should not fail if user entry deleted" [Undecided,Fix committed] | 17:49 |
*** Ryan_Lane has quit IRC | 17:49 | |
*** sarob has quit IRC | 17:50 | |
bknudson | ayoung: dolphm: I'd like that one to be backported, too. I thought there was a tag to apply... | 17:51 |
dolphm | ayoung: tag the bug with grizzly-backport-potential | 17:51 |
*** jergerber has joined #openstack-dev | 17:51 | |
dolphm | bknudson: ^ | 17:51 |
bknudson | dolphm: did it, thanks. | 17:51 |
*** dwaite has joined #openstack-dev | 17:51 | |
dwaite | gluten tag | 17:52 |
*** johnthetubaguy has quit IRC | 17:52 | |
bknudson | dolphm: Do I just cherry-pick it or wait for it to be approved? | 17:52 |
openstackgerrit | A change was merged to openstack/tempest: Update service test case - V3 https://review.openstack.org/22317 | 17:52 |
*** Nachi has quit IRC | 17:52 | |
dolphm | bknudson: why is the test specific to ldap?? | 17:52 |
dolphm | bknudson: cherry-pick | 17:53 |
bknudson | dolphm: In the case of LDAP, the users might be administered outside of Keystone. | 17:54 |
*** lauria_ has joined #openstack-dev | 17:54 | |
bknudson | as in, it's a read-only LDAP server | 17:54 |
bknudson | it would be weird using the sql backend to delete users with sql directly, but it's not with LDAP. | 17:54 |
*** nati_ueno has joined #openstack-dev | 17:54 | |
dolphm | bknudson: what is it testing that doesnt apply to other backends? | 17:54 |
dolphm | oh user.delete | 17:55 |
*** lauria has quit IRC | 17:56 | |
bknudson | dolphm: I'll do the cherry-pick and put it up for review | 17:56 |
*** lauria_ is now known as lauria | 17:56 | |
*** esp1 has joined #openstack-dev | 17:58 | |
*** nati_ueno has quit IRC | 17:58 | |
*** Nachi has joined #openstack-dev | 17:58 | |
*** boris-42 has joined #openstack-dev | 17:58 | |
*** digitalsanctum has quit IRC | 17:59 | |
*** mrunge has quit IRC | 17:59 | |
*** esheffield has quit IRC | 18:00 | |
dolphm | bknudson: #openstack-meeting | 18:01 |
*** alexpilotti_ has joined #openstack-dev | 18:02 | |
*** jog0_ has joined #openstack-dev | 18:02 | |
*** jog0 has quit IRC | 18:02 | |
*** alexpilotti has quit IRC | 18:02 | |
*** jog0_ is now known as jog0 | 18:02 | |
*** alexpilotti_ is now known as alexpilotti | 18:02 | |
*** dwaite has quit IRC | 18:03 | |
*** ijw has quit IRC | 18:04 | |
*** alexpilotti has quit IRC | 18:05 | |
*** ijw has joined #openstack-dev | 18:06 | |
*** alunduil has joined #openstack-dev | 18:07 | |
*** ijw has quit IRC | 18:08 | |
*** ijw has joined #openstack-dev | 18:08 | |
*** esp1 has quit IRC | 18:09 | |
*** alexpilotti has joined #openstack-dev | 18:09 | |
*** esp1 has joined #openstack-dev | 18:09 | |
*** kpavel has joined #openstack-dev | 18:11 | |
*** nachi_ has joined #openstack-dev | 18:11 | |
*** nachi__ has joined #openstack-dev | 18:11 | |
*** zul has joined #openstack-dev | 18:11 | |
*** lloydde has joined #openstack-dev | 18:13 | |
*** beraldo has joined #openstack-dev | 18:16 | |
*** wiliam has quit IRC | 18:17 | |
*** PeTe__ has quit IRC | 18:18 | |
*** alunduil has quit IRC | 18:18 | |
*** adjohn has joined #openstack-dev | 18:18 | |
*** wiliam has joined #openstack-dev | 18:19 | |
*** adjohn_ has joined #openstack-dev | 18:19 | |
*** utlemming has quit IRC | 18:21 | |
*** adjohn has quit IRC | 18:23 | |
*** melwitt has joined #openstack-dev | 18:26 | |
*** wiliam has quit IRC | 18:26 | |
*** wiliam has joined #openstack-dev | 18:27 | |
*** llu_linux has quit IRC | 18:30 | |
*** llu_linux has joined #openstack-dev | 18:31 | |
*** epende_ has quit IRC | 18:31 | |
*** anniec has joined #openstack-dev | 18:32 | |
*** zul has quit IRC | 18:32 | |
*** belmoreira has joined #openstack-dev | 18:33 | |
*** shang has quit IRC | 18:36 | |
*** shang has joined #openstack-dev | 18:37 | |
*** wiliam has quit IRC | 18:38 | |
*** digitalsanctum has joined #openstack-dev | 18:38 | |
*** Ryan_Lane has joined #openstack-dev | 18:39 | |
*** wiliam has joined #openstack-dev | 18:40 | |
*** freedomhui has quit IRC | 18:41 | |
*** ladquin has joined #openstack-dev | 18:43 | |
*** novas0x2a|laptop has joined #openstack-dev | 18:43 | |
*** wiliam has quit IRC | 18:48 | |
*** wiliam has joined #openstack-dev | 18:49 | |
*** sandywalsh has quit IRC | 18:49 | |
*** cp16net|away is now known as cp16net | 18:49 | |
*** koolhead17 has quit IRC | 18:54 | |
*** wiliam has quit IRC | 18:55 | |
*** nunosantos has quit IRC | 18:56 | |
*** megha has joined #openstack-dev | 18:57 | |
*** wiliam has joined #openstack-dev | 18:57 | |
*** baba has quit IRC | 18:57 | |
*** rkukura has quit IRC | 18:57 | |
ayoung | topol, spzala OK, let me explain....no, is too much, let me sum up | 18:59 |
*** aloga has joined #openstack-dev | 18:59 | |
spzala | ayoung: thanks. OK. | 18:59 |
ayoung | lets say someone with a read only LDAP wants to move to grizzly. | 19:00 |
ayoung | THey don't have any available attributes to map to domain id | 19:00 |
dolphm | simo: can you explain how "key management service" is "unrelated" to your need for a "key server"? | 19:00 |
ayoung | spzala, businessCat, if it exists, is being used | 19:00 |
simo | dolphm: barbican is about encryption keys for volumes | 19:00 |
*** lauria has quit IRC | 19:00 | |
dolphm | simo: that's just the first use case they're tackling | 19:01 |
simo | dolphm: a key server is about credentials for services | 19:01 |
dolphm | simo: for the purposes of achieving incubation/integration | 19:01 |
simo | right | 19:01 |
*** sandywalsh has joined #openstack-dev | 19:01 | |
*** lauria has joined #openstack-dev | 19:01 | |
*** malini_ has joined #openstack-dev | 19:01 | |
simo | MsessageSecurity is meant to land in Havana though | 19:01 |
simo | and keystone seem to be the identity/credentials handler here | 19:01 |
*** ijw has quit IRC | 19:01 | |
simo | the key manager is an optional long term thing | 19:01 |
topol | ayoung, no available attributed to map domain id is the ignore case I want sahdev to test | 19:01 |
spzala | ayoung: I remember, but vaguely, that if no domain_id specified it will be just ignored. | 19:02 |
ayoung | spzala, so we need to make sure that domainid is not mapping to any attributes in the underlying object, but still functions correctly when we do things like try to correlate users and projects | 19:02 |
dolphm | "optional long term" ? | 19:02 |
ayoung | topol, good, I think we all get it | 19:02 |
simo | well it's not clear to me that they have a commitment of being there and working since Havana | 19:02 |
simo | also key manager still will depend on keystone for identities | 19:02 |
simo | and the key server is more about managing service identity in my view | 19:03 |
simo | of course it does some crypto and stores shared keys too | 19:03 |
topol | so do I still need to review dolphms patch or is that now abandoned??? | 19:03 |
malini_ | simo -- key manager is just about serving keys (symmetric) and | 19:03 |
dolphm | topol: i have no idea | 19:03 |
malini_ | later public/private/certificates | 19:03 |
*** winston-d has quit IRC | 19:04 | |
simo | malini_: would you accept the code I am building ? | 19:04 |
ayoung | topol, make sure you undertand it, but I thik we will go with spzala 's approach if it works. | 19:04 |
simo | malini_: is barbican going to be a standard server available in Havana ? | 19:04 |
malini_ | if it is code that has to become part of cloud keep , the rackspace folks get to comment on it and accept/reject | 19:05 |
topol | ayoung, I think that is the only option. spzala's is the one approach small enough to be a candidate for backport | 19:05 |
malini_ | may be after a few more commits I will get that privilege in their | 19:05 |
malini_ | git master | 19:05 |
bknudson | dolphm did comment on spzala's earlier patch... about the conditional aspect | 19:05 |
malini_ | Simo: yes | 19:05 |
simo | I'd rather not play politics now though | 19:05 |
bknudson | which, I really did like dolphm's virtual default domain. | 19:05 |
malini_ | July 18 is target date for incubation for Havana and we want to meet that | 19:05 |
simo | I still see the key server as more of a keystone thing than key manager thing | 19:05 |
topol | if it works with full regression with no mapping of domain_id_attribute (ie put on ignore list) we should consider this. | 19:06 |
*** danwent has quit IRC | 19:06 | |
dolphm | topol: full regression all the things! | 19:06 |
topol | dolphm, you did look at spzala's pathc before. you hated it. | 19:06 |
*** AlanClark has joined #openstack-dev | 19:06 | |
malini_ | so for july 18, integrated with keystone for auth (i have some questions on that for ayoung and dolphm) and then get/put keys, and have JHU-APL folks use it for block encryption | 19:06 |
topol | so maybe thats a nonstarter in your mind as well :-( | 19:07 |
dolphm | topol: the conditional aspect would produce very weird behaviors at the api level | 19:07 |
*** sandywalsh has quit IRC | 19:07 | |
dolphm | topol: not to mention the complexity is pushing it for backportability | 19:07 |
malini_ | simo -- we had that discussion at portland design summit | 19:07 |
ayoung | malini_, July 18th is my birthday. Don't expect much out of me that day. | 19:07 |
topol | dolphm, so where do we go from here??? | 19:07 |
malini_ | it does make sense to have it as a separate service, it is providing | 19:08 |
simo | malini_: what discussion ? | 19:08 |
bknudson | so what problem was spzala's patch trying to solve? That the default domain could either exist or not exist? | 19:08 |
malini_ | different functionality, think of it a dictionary of key-ids and keys | 19:08 |
malini_ | i believe you were there, but if that was inadequate, we | 19:08 |
malini_ | can discuss some more | 19:08 |
spzala | bknudson: yes, if it exist then use it.. if not, then use virtual default domain | 19:09 |
dolphm | topol: i don't totally understand ayoung's concerns about "insufficiency" and whether his opinion of something "sufficient" would still be backportable; i'd also like to strip the domain_id from user and tenant objects before persisting them to ldap in my own patch | 19:09 |
simo | malini_: well my problem is that I would like to get something together soon | 19:09 |
malini_ | Don Dugger from Intel was also in favor of part of keystone, Adam and self and trhe rackspace folks as a se[arate service | 19:09 |
*** alunduil has joined #openstack-dev | 19:09 | |
simo | malini_: so that some testing can be done as we are still unsure what's the best approach | 19:09 |
*** wiliam has quit IRC | 19:09 | |
*** eglynn has quit IRC | 19:09 | |
simo | malini_: and barbican is not in devstack, and does not really deal with identities afaik | 19:09 |
topol | dolphm, ok, so how can we help? | 19:10 |
simo | while keystone is there and already deals with identities and credentials | 19:10 |
topol | spzala can do a fullr egression for you | 19:10 |
malini_ | Simo: i used the devstack guide and integrated keystone middleware | 19:10 |
malini_ | via paste-ini | 19:10 |
simo | and a key server just adds storing some data and some minor crypto I already have working | 19:10 |
malini_ | so it would be no differnet from glance etc | 19:10 |
dolphm | topol: want to ping the users mailing list while i go write another patch? | 19:10 |
dolphm | i assume spzala is testing a patch (or patches?) | 19:11 |
topol | spzala will stand down if you want to go fwd with your approach | 19:11 |
simo | malini_: it's just that I do not see as much commonality with the Key Manger except for th fact some keys are involved | 19:11 |
*** wiliam has joined #openstack-dev | 19:11 | |
topol | we dont need both | 19:11 |
topol | dolphm, is yours small enough to backport? | 19:11 |
bknudson | dolphm's patch essentially says that domains aren't supported in LDAP. | 19:12 |
spzala | dolphm: yes I am going to test. I tested your patch :) but now I am going to test mine with ignore attribute for domain_id | 19:12 |
spzala | topol: agreed | 19:12 |
malini_ | simo: commonality -- please explain | 19:12 |
simo | malini_: does the fact we have a key manager means *all* crypto must go through it ? | 19:12 |
malini_ | simo -- I have my own concerns, and they stem for barbican wanting to h ave its | 19:12 |
dolphm | topol: i think so | 19:13 |
malini_ | own layer for message passing, high availability etc | 19:13 |
dolphm | spzala: cool | 19:13 |
simo | malini_: point is I do not need the kind of key storage the Key Manager is envisioning | 19:13 |
simo | the needs are different | 19:13 |
simo | malini_: 'own layer for message passing' ? | 19:13 |
malini_ | simo: this was one of the reasons I was ready for it to be a simple sub-part of keystone, dolphm did not | 19:13 |
topol | dolphm, what do you want me to ask the mailing list??? | 19:14 |
malini_ | want that approach, said it gives more headache when we want to pull it out, after it gets | 19:14 |
simo | it seem to me separating identity and keys is just going to incrase traffic and decrease security | 19:14 |
malini_ | full fledged, like nova-networkwork versus quantum | 19:14 |
*** vipul is now known as vipul|away | 19:14 | |
*** vipul|away is now known as vipul | 19:14 | |
malini_ | simo -- separating identity/keys == PKI keys are definitely part of | 19:15 |
malini_ | identity | 19:15 |
ayoung | dolphm, I think your patch is superior, but it will break the few people that have already deployed using multiple domains in LDAP. Which means we should check to see if spzala 's appraoch works first | 19:15 |
malini_ | I agree, in that case they seem more keystone | 19:15 |
simo | malini_: right | 19:15 |
simo | but simmetric keys are the same | 19:15 |
dolphm | topol: (this should be in the release notes for grizzly as well) i was just planning on pinging the list concerning the broken use case, and ask if there were any early adopters on multi-domain support in grizzly | 19:15 |
simo | I have one 'password' per service | 19:15 |
malini_ | my original intention for just symmetric keys for object/volume encryption | 19:15 |
simo | malini_: exactly | 19:15 |
malini_ | could reside in a sep[arate place and these are many | 19:15 |
malini_ | typically one per object, volume etc | 19:16 |
bknudson | spzala: could your approach be changed to always use the virtual default domain rather than check if it exists? | 19:16 |
simo | whic is a completely different usage, with completely difference performance and storage profile | 19:16 |
topol | dolphm, multi-domain on ldap, correct? | 19:16 |
malini_ | simo -- the moment they want to put in pki keys and provisioning them and certificate request | 19:16 |
simo | malini_: for all intent and purposes most of what I need would share no infrastructure with what you need | 19:16 |
dolphm | topol: yes | 19:17 |
malini_ | it gets a lot busy | 19:17 |
topol | dolphm, K, I'll go throw the grenade | 19:17 |
malini_ | and there are more background tasks | 19:17 |
spzala | bknudson: I think then it's the same approach as what dolphm is proposing | 19:17 |
simo | malini_: the problem I see is splitting identiy management ( dolphm read this ) | 19:17 |
bknudson | spzala: what I saw in dolphm's is that it doesn't support domains at all. | 19:17 |
bknudson | only the default domain | 19:17 |
dolphm | topol: i'd also like to ask for feedback on the proposed solutions, but i'm totally lost on what *else* was proposed today | 19:17 |
*** stevemar has quit IRC | 19:18 | |
simo | what I am doing here is basically giving an identity to every service on the message queue | 19:18 |
simo | something I think people want to manage just like other dientities in keystone | 19:18 |
dolphm | bknudson: spzala: it supports a single read-only domain | 19:18 |
topol | dolphm, only games in town are yuour patch and spzala's patch. the rest were some config options | 19:18 |
bknudson | whereas spzala's approach kept multi-domain support. | 19:18 |
simo | but maybe I am wrong and people do want split identity management for internal vs external identities | 19:18 |
spzala | bknudson: agreed with dolphm | 19:19 |
*** alunduil has quit IRC | 19:19 | |
spzala | bknudson: yes | 19:19 |
simo | as these are more infrastructure identities than user facing ones | 19:19 |
*** markmcclain has joined #openstack-dev | 19:19 | |
simo | yet right now keystone handles infrastructure stuff like endpoints | 19:19 |
topol | you remove domains completely. spzala gets the default domain stuff to work but leaves domains still in there with a poor implementation | 19:19 |
malini_ | today we save each service identity in keystone, i personally think | 19:19 |
simo | I guess people are too busy with LDAP stuff | 19:19 |
malini_ | that service's public key and certificate are all part of that service id and should be accessible in keystone | 19:20 |
*** sandywalsh has joined #openstack-dev | 19:20 | |
simo | malini_: that's my view as well | 19:20 |
simo | but dolphm seem not although I have not understood his rationale | 19:20 |
malini_ | if anything the key manager could act as a registry of public keys and certificates, like verisign or microsoft to serve them | 19:21 |
bknudson | why wouldn't the service's public key and certificate be accessible in the service? | 19:21 |
malini_ | but that would be data duplication | 19:21 |
simo | bknudson: ? | 19:21 |
malini_ | for me keystone is also a central repository of all things service/user specific in terms of preference | 19:21 |
malini_ | such as encryption algorithm preference | 19:21 |
*** garyk has quit IRC | 19:22 | |
*** mkollaro has quit IRC | 19:22 | |
topol | dolphm, do I need to ask for feedback on openstack, openstack-dev or both? | 19:22 |
*** wiliam has quit IRC | 19:23 | |
*** Nachi has quit IRC | 19:23 | |
malini_ | Simo: when i came in proposing key manager it was to ease key management, then rackspace's solution came in from a silightkly different perspective vision, and JHU-APL comes with it's NSA push for KMIP support | 19:23 |
*** esheffield has joined #openstack-dev | 19:24 | |
malini_ | for quicker/broader encryption support/security in system just | 19:24 |
malini_ | saving key-id/key-strings is plenty | 19:24 |
simo | malini_: key manager is quite different though, it's not as strongly correlatyed with services or users identities | 19:24 |
*** bknudson has left #openstack-dev | 19:24 | |
malini_ | with certificates and public keys in keystone | 19:24 |
malini_ | and certs and public keys do not need additional encryption .. they are transparent/open | 19:25 |
malini_ | simo: exactly | 19:25 |
malini_ | simo: not as tightly correlated with services or user-ids | 19:25 |
simo | malini_: which is why I think key manager can well be a separate server/service/project | 19:25 |
simo | while I have trouble with pushing key server away from keystone | 19:25 |
dolphm | topol: just openstack | 19:26 |
simo | as keystone seem the natural place for that service/information | 19:26 |
simo | it *could* be a separate service, I am just not sure that we gain anything in maing it separate | 19:26 |
*** pixelbeat_ has quit IRC | 19:26 | |
simo | dolphm: would please provide some of your reasoning for pushing away ? | 19:27 |
*** wiliam has joined #openstack-dev | 19:27 | |
dolphm | simo: sorry, i'm not really following your conversation with malini_, what's the context of the question? | 19:28 |
malini_ | simo: for a load balancing perspective, even if part of keystone, it would make sense to give key manager its own port and | 19:28 |
malini_ | have it serve up keys etc | 19:28 |
*** bknudson has joined #openstack-dev | 19:28 | |
malini_ | the life cycle management stuff it does have nothing to do with | 19:28 |
*** bknudson has quit IRC | 19:28 | |
simo | dolphm: the point of the conversation is that keystone seem the natural place for a key server for message security as it is basically an identity system for services | 19:29 |
malini_ | keystone today such as "expiring" keys etc | 19:29 |
malini_ | but PKI keys pertaining to a service would have everythign to do with | 19:29 |
*** vipul is now known as vipul|away | 19:29 | |
simo | dolphm: you said -> barbican, but the problem space the ksy server address has not much overlap with barbican | 19:29 |
malini_ | identity and keystone, and its lifecycle, re-issue etc would be | 19:29 |
simo | and has a ton of ties with what keystone does | 19:29 |
malini_ | keystone relevant .. | 19:29 |
malini_ | may be it is just philosophical | 19:30 |
ayoung | simo, lets get it writtend as a contrib piece so people can try it out | 19:30 |
ayoung | it may not land in keystone, but I think it is not a bad place for a proof of concept | 19:30 |
simo | ayoung: I need buy in from dolphm, I do not want to spend weeks and have it turned down as a matter of principle | 19:31 |
simo | also there is the problem of oslo-incubator pieces I need to drag in | 19:31 |
* dolphm reading back | 19:31 | |
termie | simo: then code it faster ;) | 19:31 |
simo | termie: half ready already | 19:31 |
termie | simo: see, there you go | 19:31 |
*** katylava is now known as katylava|away | 19:31 | |
simo | termie: but would like to know it has a chance of getting in before I do more | 19:31 |
ayoung | simo, I am not sure that it needs to be in Keystone. Ideally, we should be able to split off different services from each other. | 19:31 |
malini_ | barbican code does pull in oslo common stuff for logging etc | 19:31 |
jgriffith | russellb: ping | 19:32 |
simo | malini_: I have additions to solo-incubator | 19:32 |
dolphm | malini_: it's really difficult to follow your messages when they're broken in the middle of sentences | 19:32 |
simo | malini_: 3 patchges that add crypto primitives | 19:32 |
*** wiliam has quit IRC | 19:32 | |
*** jcoufal has quit IRC | 19:32 | |
malini_ | sorry dolphm. my bad, i hit return on chat client when line full. will resist the urge | 19:32 |
dolphm | malini_: thanks :) | 19:33 |
malini_ | simo, your crypto stuff in oslo would be perfect. i see crypto being used in all the service, so it belong s there. | 19:33 |
*** soleblaze has quit IRC | 19:33 | |
simo | malini_: my client can split lines on its own, please do resist, I was quite confused too :) | 19:33 |
*** soleblaze has joined #openstack-dev | 19:33 | |
*** eglynn has joined #openstack-dev | 19:33 | |
simo | malini_: my crypto stuff *must* be in oslo because that's where messaging happens | 19:34 |
dolphm | malini_: oslo or in a client project? | 19:34 |
simo | I just want to reuse common code which is why I would drag new version of solo-incubator in keystone | 19:34 |
ayoung | dolphm, in the messaging layer | 19:34 |
russellb | jgriffith: pong | 19:34 |
malini_ | keep it in oslo, exactly like simo says. both servers and clients can use form oslo | 19:34 |
*** alop has quit IRC | 19:34 | |
simo | dolphm: from openstakck.common import xyz | 19:34 |
jgriffith | russellb: not sure if there's already discussions around this.... | 19:35 |
jgriffith | russellb: I spoke with Laura G about the encryption work | 19:35 |
jgriffith | russellb: I've recommended that live in Cinder | 19:35 |
ayoung | malini_, oslo incubator is not a libary, so we have to merge code down from it in order to be able to use it. Sub optimal | 19:35 |
jgriffith | russellb: wanted to make sure you didn't have some objection/plan there? | 19:35 |
simo | dolphm: it seem the version of oslo-incubator in keystone is quite old ? All the rpc stuff seem to be missing | 19:35 |
simo | are was the rpc stuff omitted on purpose ? | 19:35 |
dolphm | simo: we don't use rpc in keystone, so it's not in keystone | 19:36 |
simo | I do not need the rpc stuff I split crypto into openstack.common.cryptoutils in my last patchset | 19:36 |
jgriffith | russellb: this seems to solve some issues regarding native encryption support, compression etc | 19:36 |
malini_ | would be nice to have a library of all things useful (logging, crypto, config), i knowe it is sub-optimal today but would it stay that way? | 19:36 |
*** alop has joined #openstack-dev | 19:36 | |
russellb | jgriffith: i don't feel that strongly about it | 19:36 |
jgriffith | russellb: we'd basicly expose an "encrypted" voluem type | 19:36 |
simo | malini_: that's oslo-incubator | 19:36 |
jgriffith | russellb: ok | 19:36 |
simo | malini_: the only 'problem; is that we import snapshots into each other project code | 19:36 |
russellb | jgriffith: decryption happen in cinder? | 19:37 |
malini_ | simo :-) got it now | 19:37 |
malini_ | i know, would be nice if we could have version number like we do for python-keystoneclient | 19:37 |
simo | dolphm: so assuming I can import that single file once it hits oslo-incubator, how do I convince you that the key server belongs to keystone code base ? :) | 19:37 |
jgriffith | russellb: yeah | 19:37 |
russellb | jgriffith: so basically not really visibly outside at all, other than an attribute saying it's encrypted on the backend? | 19:37 |
russellb | ok. | 19:37 |
jgriffith | russellb: exactly | 19:37 |
jgriffith | russellb: and key management via some plugin model external | 19:38 |
*** danwent has joined #openstack-dev | 19:38 | |
simo | dolphm: or should I ask aylum to russellb and incubate in nova? :-P | 19:38 |
simo | *asylum | 19:38 |
malini_ | ayoung/dolph, I have a dummy 101 keystone question | 19:38 |
jgriffith | russellb: it seems *safest* to me | 19:38 |
ayoung | malini_, fire away | 19:38 |
russellb | jgriffith: probably worth a ML post to clarify intended direction for anyone interested | 19:38 |
simo | it does benefit nova more than keystone at least initially ... | 19:38 |
jgriffith | russellb: indeed, but wanted to synch with you first | 19:38 |
russellb | sure that's fine with me, i'm mostly deferring to others on this one | 19:39 |
jgriffith | russellb: yeah, I was hoping to do the same actually :) | 19:39 |
russellb | jgriffith: thanks for working with them to get this done | 19:39 |
dolphm | simo: i'm completely missing how your use case is not served by barbican's goals; a blueprint filed against either keystone or barbican that the barbican community can look at would be helpful | 19:39 |
jgriffith | russellb: sure, I'll synch back up with them and get something on the ML | 19:39 |
jgriffith | russellb: thanks | 19:39 |
*** matiu has joined #openstack-dev | 19:39 | |
*** matiu has quit IRC | 19:39 | |
*** matiu has joined #openstack-dev | 19:39 | |
simo | dolphm: https://wiki.openstack.org/wiki/MessageSecurity | 19:39 |
simo | dolphm: https://blueprints.launchpad.net/oslo/+spec/trusted-messaging | 19:39 |
simo | dolphm: the need arises from rpc messaging | 19:40 |
russellb | dolphm: totally jumping in out of nowhere on this, but we need this ASAP for messaging security | 19:40 |
*** markmcclain has left #openstack-dev | 19:40 | |
*** markmcclain has joined #openstack-dev | 19:40 | |
simo | dolphm: and as I said it has little or nothing to do with what barbican is about | 19:40 |
russellb | i really don't want to have to wait for another project if we can avoid that | 19:40 |
simo | russellb: I can put the server in nova if you are ok with it | 19:40 |
simo | I *think* keystone is a more natural place | 19:40 |
russellb | well if we do it in nova, it doesn't need to be in the REST API at all | 19:40 |
dolphm | simo: this is not a blueprint for a key server | 19:41 |
simo | but nova would be better than barbican I think | 19:41 |
simo | dolphm: because the key server is just an extension of having to manage a few keys and hading out a couple of tickets | 19:41 |
malini_ | i have barbican with a paste-ini for keystone client integration, which gives auth_host = localhost | 19:41 |
malini_ | #auth_port = 5000 | 19:41 |
malini_ | auth_port = 35357 | 19:41 |
malini_ | auth_protocol = http | 19:41 |
malini_ | admin_tenant_name = service | 19:41 |
malini_ | admin_user = barbican | 19:41 |
malini_ | admin_password = orange | 19:41 |
ayoung | russellb, Nova already has the pattern of spinning up new servers, and then splitting them off into separate projects. | 19:41 |
malini_ | auth_version = v2.0 and things work cutely from python command line http request if I pass in header {'X-Auth-Token: 'foo'} if foo happens to belong to the barbican service user. is that how it has to work, is it not more likely that we shall come here with in the course of normal use with a user auth-token? | 19:41 |
simo | dolphm: actually I should say key distribution service | 19:41 |
dolphm | simo: please file a blueprint | 19:42 |
ayoung | If we wait for full incubation for something minor like this, it means we either have to shoehorn something in where it doesn;t fit or punt | 19:42 |
*** mlavalle has joined #openstack-dev | 19:43 | |
*** markmc has joined #openstack-dev | 19:44 | |
ayoung | I could see the argument that policy and tokens could be a separate backend from the user configuration service. If we did top-down discovery of services we wouldn't have to bundle them all together under keystone. | 19:45 |
ayoung | So simo 's issue is kindof clarifying the issue for us | 19:45 |
dolphm | ayoung: they are seperate backends | 19:45 |
ayoung | dolphm, right | 19:45 |
ayoung | dolphm, and yet we assume they are on one server | 19:45 |
dolphm | ayoung: not really..? | 19:45 |
ayoung | dolphm, but there is no need for them to be on one server | 19:46 |
simo | dolphm: the idea was that kds would be one of those backends | 19:46 |
simo | dolphm: what do you need to see in a new blueprint ? | 19:46 |
ayoung | simo, Yep. as I said, we do it as a "contrib" thing first, and show that it can be used, and the figure out the deployment approach. | 19:46 |
dolphm | simo: the use case you're trying to solve | 19:46 |
simo | dolphm: providing services with an 'identity' in form of a shared secret and a ticketing service | 19:47 |
simo | so they can use this identity to securely communicate over RPC | 19:47 |
ayoung | dolphm, I think this points to the need for the enumeration of the extensions, I think that bug has been open for a while | 19:47 |
*** lauria_ has joined #openstack-dev | 19:47 | |
*** gyee has quit IRC | 19:47 | |
*** rkukura has joined #openstack-dev | 19:47 | |
*** lauria has quit IRC | 19:48 | |
*** lauria_ is now known as lauria | 19:48 | |
ayoung | hmmm, must just be a comment in the code | 19:48 |
*** vartom1119 has joined #openstack-dev | 19:50 | |
*** adjohn_ has quit IRC | 19:52 | |
malini_ | simo: trying to understand, 2 services, with their respective Public-private key pair negotiate a shared secret, some protocol like TLS, and save their shared key for further secure communications. is this as safe but lighter weight than TLS. Yes, the shared secret needs to be saved, indexed by the service-endpoint pair. how long lived? i can see this being separate from a key manager's keys, longer lived | 19:53 |
simo | dolphm: https://blueprints.launchpad.net/keystone/+spec/key-distribution-server | 19:56 |
malini_ | falling off for an hour. ayoung/dolphm, when you get a chance please answer my 101 question | 19:56 |
simo | dolphm: I can proceed to split the MessageSecurity document so that the Key Server parts are in another document if you want | 19:56 |
malini_ | thanks simo, will check out blueprint | 19:56 |
simo | but keeping all i one doc for now would be easier for me | 19:56 |
dolphm | simo: sure | 19:57 |
simo | malini_: I am not sure what public/private key thing is about, you need a CA/PKI infrastructure to use public-key crypto | 19:57 |
dolphm | simo: a document limited in scope to how you plan on approaching the problem with regard to keystone would be beneficial | 19:57 |
simo | dolphm: I will ask ayoung to help with that :-) | 19:57 |
simo | ayoung: ^^ | 19:58 |
dolphm | simo: i don't see anything in that document regarding how you plan on approaching the problem with regard to keystone | 19:58 |
ekarlso | what's the whole discussion on now ? | 19:59 |
ayoung | malini_, I don't understand the question | 20:00 |
*** pcm__ has quit IRC | 20:00 | |
*** gabrielhurley has joined #openstack-dev | 20:00 | |
ayoung | simo, file a keystone blueprint that points to the unified doc | 20:00 |
*** john5223 has left #openstack-dev | 20:00 | |
ayoung | then , in the unified doc, specify which is to be implemented in keystone, and where the other pieces reside | 20:01 |
simo | ayoung: I mentioned the doc there already | 20:02 |
ayoung | simo, I'll file... | 20:02 |
simo | ayoung: I will build a separate doc specific to keystone that references the current document | 20:02 |
*** armax has left #openstack-dev | 20:02 | |
ayoung | simo, no need, just ablueprint entry here... | 20:02 |
simo | ? | 20:02 |
ayoung | https://blueprints.launchpad.net/keystone | 20:02 |
simo | https://blueprints.launchpad.net/keystone/+spec/key-distribution-server | 20:03 |
ayoung | simo, and set the specification url to be your existing doc | 20:03 |
* simo slaps ayuong, pay attention! :-P | 20:03 | |
ayoung | Ah, right..I meant that the peices that are not underkeystone should also point to the same spec... | 20:03 |
*** utlemming has joined #openstack-dev | 20:03 | |
* ayoung just did a quick search and missed, osorry | 20:03 | |
simo | ayoung: can't set it as the specification url because that doc has already been set as an oslo specification doc | 20:03 |
ayoung | ugh! | 20:04 |
*** lglenden has joined #openstack-dev | 20:04 | |
*** mdenny has quit IRC | 20:04 | |
ayoung | simo, what a PITA | 20:04 |
simo | and blueprints apparently do not mind their business and complain if you try to add the same thing to 2 blue prints | 20:04 |
* ayoung goes back to sleep | 20:04 | |
*** mdenny has joined #openstack-dev | 20:05 | |
ayoung | simo, hadn't tripped over that particular nastiness before. | 20:05 |
*** utlemming has quit IRC | 20:05 | |
simo | ayoung: creating a new doc | 20:05 |
*** colinmcnamara has joined #openstack-dev | 20:05 | |
ayoung | simo, nah | 20:05 |
simo | I'll have a minimal draft now | 20:05 |
simo | and fill it up this week on conf calls instead of napping :-) | 20:06 |
ayoung | OK, I'll leave it to you,. this is more of a paperwork drill than is called for | 20:06 |
termie | simo: try adding a #foo to the end of it? | 20:06 |
simo | ayoung: dolphm asked for it, and it make sense to have at least some basic stuff | 20:06 |
simo | termie: ah wait | 20:06 |
simo | I guess I could try to link to a subsection ... | 20:06 |
ayoung | simo, yeah, and you can have one blueprint point to another one, too | 20:06 |
ayoung | termie, ftw! | 20:06 |
*** adjohn has joined #openstack-dev | 20:07 | |
dolphm | ayoung: it's hard to provide feedback on a design when there's neither relevant documentation or a relevant implementation to review; i'm fine with whichever is easier | 20:07 |
*** torandu_ has quit IRC | 20:07 | |
ayoung | dolphm, I think we have a solution, but the blueprint was written and speced, just problematic in that it spanned multiple services | 20:08 |
simo | termie: meh the system is stupid as you suspected :) | 20:08 |
simo | dolphm: I linked the doc | 20:08 |
*** edmund1 has joined #openstack-dev | 20:08 | |
simo | now will build a subsection of it that is keystone specific as soon as I have time, ok ? | 20:08 |
ayoung | simo, you should link the blueprints, too. See the "add dependncy" link at the bottom of the blueprint page | 20:09 |
dolphm | simo: ping the -dev list when you're ready | 20:09 |
*** dprince has quit IRC | 20:10 | |
ayoung | dolphm, https://wiki.openstack.org/wiki/MessageSecurity#Shared_Keys_and_Key_Server_Proposal | 20:10 |
ayoung | but that is a bit light | 20:10 |
ayoung | simo, didn't you have sketched out the new APIs? | 20:10 |
malini_ | ayoung, will try explaining better. barbican (key manager) will be a service that gets called for a key. when that call comes in a user token that authenticates the user will come in. by weaving in keystone client middleware the X-Auth-Token will be authenticated and cached -- right? so to test that I had the keystone auth middleware correct, I pretended to be an itermediate service making a url request to barbican, wit the X-Auth_Token set. It all | 20:10 |
malini_ | passed auth if token was for barbican service user, but not for a token for a random user | 20:10 |
*** pabelanger has quit IRC | 20:11 | |
*** torandu has joined #openstack-dev | 20:11 | |
ayoung | malini_, possibly an RBAC thing | 20:11 |
simo | ayoung: they are in the doc below | 20:11 |
simo | ayoung: it's basically just 1 call for starters | 20:11 |
simo | plus 1 another for group services at a later phase | 20:11 |
ayoung | simo, ah, It looked like just the subsection was keystone, yeah....that looks better. Probably should change the heading to be clear that from there until the "phases" part is all the keystone blueprint, but I think that content will work | 20:12 |
simo | ayoung: yeah need to reorganize it a little | 20:13 |
malini_ | ayoung, cool, so my understanding of how it should work is correct. RBAC -- please elaborate, may be some policy stuff, I did not touch that. | 20:13 |
*** colinmcnamara has quit IRC | 20:13 | |
simo | ayoung: I will actually add a section 7 expliclty about an implementation in KeyStone ano move the RESTful API section there | 20:13 |
*** edmund1 has quit IRC | 20:14 | |
ayoung | malini_, Role based access control is managed by the policy.json file. | 20:14 |
ayoung | malini_, look at the one in the keystone/etc dir for an example | 20:14 |
*** lloydde has quit IRC | 20:14 | |
*** edmund1 has joined #openstack-dev | 20:14 | |
malini_ | ayoung, much thanks! | 20:14 |
*** lloydde has joined #openstack-dev | 20:15 | |
*** READ10 has quit IRC | 20:15 | |
*** AlanClark has quit IRC | 20:15 | |
openstackgerrit | A change was merged to openstack/horizon: Updated translations from Transifex https://review.openstack.org/28409 | 20:16 |
*** AlanClark has joined #openstack-dev | 20:16 | |
*** aeperezt has quit IRC | 20:16 | |
*** colinmcnamara has joined #openstack-dev | 20:18 | |
openstackgerrit | A change was merged to openstack/horizon: Fix cosmetic bug when displaying unnamed volumes https://review.openstack.org/28188 | 20:18 |
*** lloydde has quit IRC | 20:19 | |
*** esp1 has left #openstack-dev | 20:21 | |
*** mkollaro has joined #openstack-dev | 20:21 | |
*** topol has quit IRC | 20:25 | |
*** colinmcnamara has quit IRC | 20:26 | |
*** SergeyLukjanov has quit IRC | 20:26 | |
*** FunnyLookinHat has quit IRC | 20:28 | |
*** vipul|away is now known as vipul | 20:30 | |
*** mlavalle has quit IRC | 20:30 | |
*** zul has joined #openstack-dev | 20:31 | |
*** yolanda has joined #openstack-dev | 20:32 | |
*** boris-42 has quit IRC | 20:33 | |
*** jvrbanac has quit IRC | 20:34 | |
*** zul has quit IRC | 20:35 | |
*** pmyers has quit IRC | 20:36 | |
*** pmyers has joined #openstack-dev | 20:37 | |
*** aloga has quit IRC | 20:37 | |
*** pmyers has quit IRC | 20:37 | |
*** pabelanger_ has quit IRC | 20:38 | |
*** pabelanger has joined #openstack-dev | 20:38 | |
*** kenperkins has quit IRC | 20:39 | |
*** kenperkins has joined #openstack-dev | 20:41 | |
*** nati_ueno has joined #openstack-dev | 20:41 | |
*** pmyers has joined #openstack-dev | 20:41 | |
*** cp16net is now known as cp16net|away | 20:43 | |
*** nati_ueno has quit IRC | 20:44 | |
*** lloydde has joined #openstack-dev | 20:45 | |
*** zul has joined #openstack-dev | 20:45 | |
openstackgerrit | A change was merged to openstack/swift: Fixed issue with use of delimiter in container queries. https://review.openstack.org/28069 | 20:47 |
*** gyee has joined #openstack-dev | 20:48 | |
*** jcoufal has joined #openstack-dev | 20:49 | |
*** nunosantos has joined #openstack-dev | 20:52 | |
*** lloydde has quit IRC | 20:55 | |
*** bknudson has joined #openstack-dev | 20:57 | |
*** beraldo has quit IRC | 20:57 | |
*** tzumainn has quit IRC | 21:01 | |
*** cp16net|away is now known as cp16net | 21:03 | |
*** kagan has joined #openstack-dev | 21:06 | |
jog0 | ayoung: ping | 21:07 |
jog0 | I am looking at https://review.openstack.org/#/c/23970 and not sure how to add a role to a user in the unit tests | 21:07 |
*** esp1 has joined #openstack-dev | 21:08 | |
*** esp1 has left #openstack-dev | 21:08 | |
*** Xigam is now known as xBytez | 21:10 | |
*** xBytez has quit IRC | 21:10 | |
*** xBytez has joined #openstack-dev | 21:10 | |
jog0 | never mind, just got it working | 21:10 |
sdague | mordred: any chance you can re-rev this on master? - https://review.openstack.org/#/c/28220/ | 21:11 |
sdague | the sooner we can extend flake8 in project trees, the better | 21:11 |
mordred | sdague: yeah. I'm working on new version - I discovered things about internals you would probably rather not know | 21:11 |
sdague | heh, no worries :) | 21:12 |
sdague | also, if you need more reviewers on hacking, let me know. I did a bunch of the custom rules in nova and tempest with jog0 | 21:12 |
markmc | mordred, actually, on that - are you still thinking of pbr and hacking coming under the oslo program ? | 21:12 |
markmc | mordred, that way we could add oslo-core as reviewers | 21:13 |
mordred | markmc: YES PLEASE | 21:13 |
mordred | markmc: I could REALLY use more eyes and stuff | 21:13 |
markmc | mordred, let's do it! :) | 21:13 |
*** litong has quit IRC | 21:13 | |
markmc | mordred, seen this btw? https://review.openstack.org/#/c/27379/1/MAINTAINERS | 21:13 |
sdague | markmc: I think fungi said oslo-core is areadly +2 on hacking yesterday | 21:13 |
markmc | mordred, you'd be the specialist maintainer, oslo-core the generalist reviewers | 21:13 |
markmc | sdague, ah, cool | 21:13 |
markmc | mordred, well, the specialist maintainer stuff is more about oslo-incubator, but you get the idea | 21:14 |
mordred | markmc: oh- that's great! | 21:15 |
ayoung | jog0 you want to add the role to the user for a project or a domain. There are examples in the other files, as well as how the keystone/tests.py loads the fixtures | 21:15 |
ayoung | jog0, that does self.identity_api.add_user_to_project(tenant_id, user['id']) | 21:15 |
ayoung | probably not what you want | 21:16 |
ayoung | jog0, you there still? | 21:16 |
ayoung | ah, see you got it working, cool | 21:16 |
mordred | sdague: you're hired as a hacking-core! | 21:16 |
*** Mandell has quit IRC | 21:16 | |
mordred | unless jog0 has objections... | 21:17 |
*** donaldh has joined #openstack-dev | 21:18 | |
jog0 | mordred: ++ to sdague | 21:18 |
jog0 | ayoung: I just got it working, posting the patch shortly | 21:19 |
*** bknudson has quit IRC | 21:19 | |
mordred | done | 21:19 |
jog0 | ayoung: its a little strange that the roles aren't assigned in the default fixtures but got around that one | 21:19 |
jog0 | sdague: welcome to hacking-core | 21:19 |
*** vartom1119 has quit IRC | 21:20 | |
*** anteaya has quit IRC | 21:20 | |
*** anteaya has joined #openstack-dev | 21:23 | |
devananda | dhellmann-away: around? | 21:24 |
sdague | mordred / jog0 danke | 21:25 |
*** anteaya has joined #openstack-dev | 21:25 | |
*** portante|afk is now known as portante | 21:26 | |
*** rnirmal has quit IRC | 21:29 | |
*** martine_ has quit IRC | 21:30 | |
*** dtroyer has left #openstack-dev | 21:32 | |
simo | markmc: with the new patch I added git review fails to update the current review | 21:32 |
simo | should I just kill the current review and start a new one ? | 21:32 |
*** michchap has quit IRC | 21:33 | |
simo | or is there a way to add a new patch in the patchset and let git review like it ? | 21:33 |
simo | the patch has been added *before* the patches I already had pushed | 21:33 |
*** alunduil has joined #openstack-dev | 21:33 | |
*** michchap has joined #openstack-dev | 21:33 | |
*** dtroyer has joined #openstack-dev | 21:34 | |
simo | oh nvm, master has changed | 21:34 |
spzala | ayoung: Hi Adam. I have updated the patch for default domain - https://review.openstack.org/#/c/27364/9 please take a look when you get chance. | 21:35 |
ayoung | spzala, looking | 21:35 |
spzala | ayoung: oh :) thanks! | 21:35 |
ayoung | spzala, di you test that it works if there is no domain attribute? | 21:36 |
*** bswartz has quit IRC | 21:36 | |
spzala | ayoung: I did earlier.. but not with this patch :( but let me quickly do it. | 21:36 |
ayoung | spzala, that is the important thing. I already know roughly what this patch is doing, and am OK with it, but I would like to know that we are actually going t o be able to support existing LDAP deploys. | 21:37 |
spzala | ayoung: so I will be removing domain_id from this and test - that good approach? for example, | 21:37 |
spzala | ayoung: group = {'id': uuid.uuid4().hex, 'domain_id': uuid.uuid4().hex, | 21:37 |
spzala | 'name': uuid.uuid4().hex, 'description': uuid.uuid4().hex} | 21:38 |
spzala | ayoung: yes, agree. | 21:38 |
ayoung | you need to test against a live server, and configure the ignore attributes for domain_id for all of the entities | 21:38 |
*** kenperkins has quit IRC | 21:41 | |
*** radez is now known as radez_g0n3 | 21:41 | |
ayoung | spzala, I think it doesn't matter if domain is specified on the command line or in the data that gets posted. If that is what the V3 api calls for, we can handle it. | 21:41 |
*** e_steve has quit IRC | 21:42 | |
*** lauria_ has joined #openstack-dev | 21:42 | |
*** jasondotstar has quit IRC | 21:42 | |
*** lauria has quit IRC | 21:43 | |
*** lauria_ is now known as lauria | 21:43 | |
*** ashwini has quit IRC | 21:43 | |
spzala | ayoung: I think that's how I tested it. I updated my backend_liveldap.conf with domain_attribute_ignore = user_domain_id_attribute, group_domain_id_attribute,tenant_domain_id_attribute | 21:43 |
spzala | ayoung: then run ldap_livetest | 21:44 |
*** cloudchimp has quit IRC | 21:44 | |
*** rerngvit has joined #openstack-dev | 21:44 | |
*** alop has quit IRC | 21:44 | |
spzala | ayoung: and I just tested without "domain_id" in the user and group crud tests.. which went well. | 21:45 |
*** alop has joined #openstack-dev | 21:45 | |
*** rerngvit has left #openstack-dev | 21:45 | |
*** lloydde has joined #openstack-dev | 21:46 | |
*** rerngvit_ has joined #openstack-dev | 21:48 | |
*** rerngvit_ has quit IRC | 21:48 | |
*** bradjones|away is now known as bradjones | 21:49 | |
*** lloydde has quit IRC | 21:50 | |
*** sacharya has quit IRC | 21:51 | |
spzala | ayoung: hope my testing makes sense. | 21:55 |
*** redbeard2 has quit IRC | 21:56 | |
*** eglynn has quit IRC | 21:58 | |
*** portante is now known as portante|afk | 21:58 | |
ayoung | spzala, domain_attribute_ignore = user_domain_id_attribute, group_domain_id_attribute,tenant_domain_id_attribute ? | 21:59 |
ayoung | it should be | 21:59 |
*** kenperkins has joined #openstack-dev | 21:59 | |
*** markmcclain has quit IRC | 21:59 | |
reed | russellb, regarding the Hong Kong design summit... | 21:59 |
ayoung | spzala, hte attribute_ignore is set on the individual objects, so, no. | 22:00 |
*** jecarey has quit IRC | 22:00 | |
russellb | reed: remote participation seems like it may be worth revisiting | 22:01 |
reed | russellb, do you have hard numbers/evidence of devs not able to go? | 22:01 |
ayoung | spzala, so, for example user has DEFAULT_ATTRIBUTE_IGNORE = ['tenant_id', 'tenants'] | 22:01 |
ayoung | we'd want to keep those, and add domain_id to them | 22:01 |
spzala | ayoung: ignore within user, project, like user_attribute_ignore=tenant_id,tenants,domain_id | 22:01 |
*** bknudson has joined #openstack-dev | 22:01 | |
reed | russellb, re: remote participation, yes, it's time to start talking about it and test solutions | 22:01 |
ayoung | spzala, yes | 22:01 |
reed | russellb, is that a conversation to have on TC or -dev list? | 22:01 |
ayoung | spzala, I think you might have had a false success in your earlier test | 22:02 |
russellb | reed: -dev list i think | 22:02 |
spzala | ayoung: ah.. OK. Thanks, good point. | 22:02 |
ayoung | spzala, in the LDAP backend, is there something populated in the businessCategory attribute? | 22:02 |
spzala | ayoung: let me retest now | 22:02 |
*** cdub_ has joined #openstack-dev | 22:03 | |
*** katylava|away is now known as katylava | 22:03 | |
spzala | ayoung: populated in the server? sorry, didn't get it. | 22:03 |
ayoung | spzala, if you do an ldapsearch, does a value get returned? | 22:04 |
spzala | ayoung: yes | 22:04 |
spzala | ayoung: like "sudo ldapsearch -x -LLL -H ldap:/// -b dc=openstack,dc=org dn" | 22:05 |
spzala | ayoung: any particular search ? | 22:05 |
*** electrichead has quit IRC | 22:06 | |
ayoung | spzala, ok, so I think that you would want to do user add or project add from the cli and see what ends up in the dirsrv | 22:08 |
spzala | ayoung: OK, sure. | 22:09 |
*** athomas has quit IRC | 22:09 | |
*** jcoufal has quit IRC | 22:10 | |
*** dolphm has quit IRC | 22:10 | |
*** cdub has quit IRC | 22:11 | |
spzala | ayoung: sorry but we don't have any cli option to user add to domain right? | 22:12 |
spzala | ayoung: I think you are saying to add user to domain? | 22:12 |
*** glikson has quit IRC | 22:12 | |
*** vkmc has joined #openstack-dev | 22:13 | |
*** vkmc has quit IRC | 22:13 | |
*** vkmc has joined #openstack-dev | 22:13 | |
ayoung | spzala, actually, you will have to use curl, as it is V3 API | 22:14 |
ayoung | user *or* project | 22:14 |
*** eharney has quit IRC | 22:15 | |
*** markmc has quit IRC | 22:15 | |
ayoung | spzala, gotta go, I'll check in later | 22:15 |
*** kbringard has quit IRC | 22:15 | |
*** zul has quit IRC | 22:16 | |
spzala | ayoung: OK, thanks a lot! have a nice evening. | 22:16 |
*** cdub has joined #openstack-dev | 22:18 | |
openstackgerrit | A change was merged to openstack/swift: have tempurl allow OPTIONS requests https://review.openstack.org/28458 | 22:19 |
*** sthaha has joined #openstack-dev | 22:23 | |
*** zul has joined #openstack-dev | 22:26 | |
*** dims has quit IRC | 22:31 | |
*** belmoreira has quit IRC | 22:32 | |
*** gnorth has joined #openstack-dev | 22:33 | |
*** shang has quit IRC | 22:34 | |
*** ianw has joined #openstack-dev | 22:35 | |
*** maoy has quit IRC | 22:35 | |
*** jayg is now known as jayg|g0n3 | 22:35 | |
*** yolanda has quit IRC | 22:37 | |
*** flaper87 has quit IRC | 22:40 | |
*** dolphm has joined #openstack-dev | 22:41 | |
*** AlanClark has quit IRC | 22:42 | |
*** giulivo has quit IRC | 22:42 | |
*** bradjones is now known as bradjones|away | 22:45 | |
*** dolphm has quit IRC | 22:46 | |
*** dims has joined #openstack-dev | 22:46 | |
*** lloydde has joined #openstack-dev | 22:46 | |
*** jpich has quit IRC | 22:47 | |
*** gabrielhurley has quit IRC | 22:48 | |
*** markwash has quit IRC | 22:48 | |
*** lglenden has quit IRC | 22:48 | |
*** vipul is now known as vipul|away | 22:49 | |
*** jimfehlig has quit IRC | 22:50 | |
*** lloydde has quit IRC | 22:51 | |
*** bmclaughlin has quit IRC | 22:51 | |
*** datsun180b has quit IRC | 22:52 | |
clarkb | keystone folks: I have rebased mordred's testr change for python-keystoneclient https://review.openstack.org/#/c/18637/ | 22:53 |
*** Mapleh has joined #openstack-dev | 22:55 | |
*** lauria has quit IRC | 22:55 | |
*** lauria has joined #openstack-dev | 22:56 | |
*** mikal has quit IRC | 22:56 | |
*** spzala has quit IRC | 22:57 | |
shardy | ayoung, dolphm: have been looking at using trusts in Heat, and looks like we're gated by the keystoneclient support | 22:58 |
*** mikal has joined #openstack-dev | 22:59 | |
*** yidclare has quit IRC | 22:59 | |
shardy | was wondering if you have folks planning to look at that, or if I should plan to look into it myself? | 22:59 |
*** zul has quit IRC | 22:59 | |
*** digitalsanctum has quit IRC | 22:59 | |
*** johnpur has quit IRC | 23:01 | |
*** vipul|away is now known as vipul | 23:01 | |
*** galstrom is now known as galstrom_zzz | 23:02 | |
*** yidclare has joined #openstack-dev | 23:03 | |
*** vipul is now known as vipul|away | 23:03 | |
*** ladquin is now known as ladquin_brb | 23:03 | |
*** donaldh has quit IRC | 23:06 | |
*** lloydde has joined #openstack-dev | 23:07 | |
*** vipul|away is now known as vipul | 23:07 | |
*** mkollaro has quit IRC | 23:07 | |
*** sudorandom has quit IRC | 23:10 | |
*** shardy is now known as shardy_afk | 23:10 | |
*** sacharya has joined #openstack-dev | 23:13 | |
*** mdenny has quit IRC | 23:14 | |
*** hemna is now known as hemnafk | 23:14 | |
*** alop has quit IRC | 23:14 | |
*** mdenny has joined #openstack-dev | 23:17 | |
*** mdenny has quit IRC | 23:17 | |
*** mdenny has joined #openstack-dev | 23:18 | |
*** gongysh has joined #openstack-dev | 23:22 | |
*** katylava has quit IRC | 23:24 | |
ayoung | shardy_afk, haven't had time to hit it. | 23:33 |
ayoung | feel free to look in to it | 23:34 |
*** lauria_ has joined #openstack-dev | 23:35 | |
*** lauria has quit IRC | 23:35 | |
*** lauria_ is now known as lauria | 23:35 | |
*** redbeard2 has joined #openstack-dev | 23:36 | |
openstackgerrit | A change was merged to openstack/ceilometer: alarm: fix MongoDB alarm id https://review.openstack.org/28410 | 23:37 |
*** topol has joined #openstack-dev | 23:43 | |
*** sudorandom has joined #openstack-dev | 23:48 | |
*** yidclare has quit IRC | 23:52 | |
*** yidclare has joined #openstack-dev | 23:54 | |
*** jamespage_ has joined #openstack-dev | 23:57 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!