| *** pmathews has joined #openstack-dev | 00:01 | |
| *** colinmcnamara has quit IRC | 00:01 | |
| *** ffio_ has quit IRC | 00:03 | |
| *** _ffio_ has joined #openstack-dev | 00:04 | |
| *** redbeard2 has quit IRC | 00:06 | |
| *** dhellmann has joined #openstack-dev | 00:11 | |
| *** Ruetobas has joined #openstack-dev | 00:19 | |
| *** redbeard2 has joined #openstack-dev | 00:20 | |
| *** jasper22 has quit IRC | 00:21 | |
| *** jamielennox|away is now known as jamielennox | 00:21 | |
| *** hemna has quit IRC | 00:22 | |
| *** stevebaker has quit IRC | 00:23 | |
| *** fifieldt has joined #openstack-dev | 00:27 | |
| *** yaguang has joined #openstack-dev | 00:27 | |
| *** gongysh has quit IRC | 00:31 | |
| *** ayoung has joined #openstack-dev | 00:31 | |
| ayoung | jamielennox, quick note about https://review.openstack.org/#/c/36839/ it is not the end all for REMOTE_USER, just fulfill the request for people to have the ability to write customer REMOTE_USER processing. IT was a feature request from Summit | 00:32 |
|---|---|---|
| jamielennox | ayoung: yea, i know but i don't think that's what people are really asking for | 00:33 |
| ayoung | actually, it is | 00:33 |
| jamielennox | i think they are looking for a way to customize which external auth they are using | 00:33 |
| jamielennox | not to replace the entire external auth mechanism | 00:33 |
| ayoung | jamielennox, specifically, they have custom code they want to run, and need a way to get it executed. Not the end state, just an iterim solution | 00:34 |
| jamielennox | this was mentioned in those emails with gyee, but i think that we still need the base call something that handles external and then to switch between various external providers | 00:34 |
| *** yuanz has quit IRC | 00:35 | |
| *** sarob has joined #openstack-dev | 00:35 | |
| jamielennox | did you see the more recent comment from haneeef though | 00:35 |
| *** stevebaker has joined #openstack-dev | 00:35 | |
| *** hemna has joined #openstack-dev | 00:35 | |
| jamielennox | i didn't realize we weren't still using the REMOTE_USER variable to do the lookup | 00:35 |
| ayoung | jamielennox, yeah, that looks pretty broken | 00:37 |
| jamielennox | also just looking back up through the logs here, just checking you realize you don't need to supply a commit id to git review -d, just git review -d XXXX where XXXX is review.openstack.org/XXXX | 00:37 |
| openstackgerrit | A change was merged to openstack/neutron: Imported Translations from Transifex https://review.openstack.org/36998 | 00:38 |
| ayoung | jamielennox, I think the logic should, for now, REMOTE_USER should assume that we are going against the deafult domain, and the userid is REMOTE_USER without REALM. | 00:38 |
| jamielennox | i think so | 00:38 |
| *** openstackgerrit has quit IRC | 00:39 | |
| jamielennox | i think that when we soon do a better pluggable external auth where we can distinguish basic auth from kerberos etc we will need to have some more configurability but for now just default | 00:39 |
| *** openstackgerrit has joined #openstack-dev | 00:39 | |
| jamielennox | we can strip @REALM or not, in all my setups i've been making apache do it | 00:40 |
| jamielennox | that's how it must have been intended to have worked for v2 auth anyway | 00:40 |
| *** sarob has quit IRC | 00:44 | |
| ayoung | jamielennox, yes it is. | 00:46 |
| jamielennox | ayoung: so i definetly agree we need to do some work there and it is on my very short list | 00:46 |
| ayoung | jamielennox, still, my patch doesn't change the current behavior. I think a stand along patch, either before or after mine makes more sense | 00:47 |
| jamielennox | but does it need to be part of h2? all we've added is the config point | 00:47 |
| ayoung | jamielennox, I think both should be part of H2 | 00:47 |
| jamielennox | and i think i could reuse that config point but it jsut makes it a bit more confusing later | 00:47 |
| jamielennox | h2 is thursday, what do you mean both? | 00:48 |
| ayoung | jamielennox, I mean my config value for switch the impl. and the fix to the brokeness of the V3 default impl. Both shoudl go in for H2. And your change as well, of course | 00:53 |
| *** Steely_Dan is now known as dansmith | 00:54 | |
| *** jrclouda has joined #openstack-dev | 00:55 | |
| jamielennox | alright, well make the config value a list rather than a str, and i guess we do something about REMOTE_USER but it's messy and if it's not freeze related i'm not sure why we put it in before the binding | 00:56 |
| *** yaguang has quit IRC | 00:59 | |
| *** yaguang has joined #openstack-dev | 01:00 | |
| *** electrichead has joined #openstack-dev | 01:00 | |
| *** jrclouda has quit IRC | 01:01 | |
| *** yaguang has quit IRC | 01:02 | |
| *** yaguang has joined #openstack-dev | 01:03 | |
| ayoung | jamielennox, Ok, list it is. Will implement tomorrow. | 01:03 |
| *** cp16net is now known as cp16net|away | 01:15 | |
| *** cp16net|away is now known as cp16net | 01:15 | |
| *** yaguang has quit IRC | 01:17 | |
| *** nati_ueno has joined #openstack-dev | 01:17 | |
| openstackgerrit | A change was merged to openstack/ceilometer: Sync SQLAlchemy models with migrations https://review.openstack.org/36610 | 01:18 |
| *** jamielennox has quit IRC | 01:21 | |
| *** jamielennox|away has joined #openstack-dev | 01:23 | |
| *** vkmc has quit IRC | 01:25 | |
| *** jamielennox|away is now known as jamielennox | 01:29 | |
| *** stevebaker has quit IRC | 01:31 | |
| *** sarob has joined #openstack-dev | 01:32 | |
| *** slong has joined #openstack-dev | 01:35 | |
| *** colinmcnamara has joined #openstack-dev | 01:40 | |
| *** sthaha has joined #openstack-dev | 01:40 | |
| *** sarob has quit IRC | 01:44 | |
| *** sarob has joined #openstack-dev | 01:44 | |
| *** stevebaker has joined #openstack-dev | 01:44 | |
| *** stevebaker has quit IRC | 01:45 | |
| *** jamielennox has quit IRC | 01:46 | |
| *** burris has quit IRC | 01:47 | |
| *** zyluo has joined #openstack-dev | 01:48 | |
| *** Guest63080 has joined #openstack-dev | 01:48 | |
| *** sarob has quit IRC | 01:49 | |
| *** Guest63080 has quit IRC | 01:53 | |
| *** erkules_ has joined #openstack-dev | 01:55 | |
| *** dguitarbite has joined #openstack-dev | 01:56 | |
| *** erkules has quit IRC | 01:58 | |
| *** bswartz has joined #openstack-dev | 01:59 | |
| *** _0x44 has joined #openstack-dev | 02:01 | |
| *** shang has joined #openstack-dev | 02:03 | |
| *** yaguang has joined #openstack-dev | 02:05 | |
| *** nati_ueno has quit IRC | 02:11 | |
| *** adjohn has joined #openstack-dev | 02:16 | |
| *** hk_peter has joined #openstack-dev | 02:19 | |
| *** hk_peter has quit IRC | 02:22 | |
| *** colinmcnamara has quit IRC | 02:23 | |
| *** yuanz has joined #openstack-dev | 02:29 | |
| *** slong has quit IRC | 02:29 | |
| *** sarob has joined #openstack-dev | 02:35 | |
| *** adjohn has quit IRC | 02:37 | |
| *** adjohn has joined #openstack-dev | 02:38 | |
| *** slong has joined #openstack-dev | 02:38 | |
| *** stevemar has joined #openstack-dev | 02:39 | |
| *** adjohn has quit IRC | 02:42 | |
| *** sarob has quit IRC | 02:44 | |
| *** asalkeld is now known as asalkeld_lunch | 02:45 | |
| *** gongysh has joined #openstack-dev | 02:47 | |
| *** slong has quit IRC | 02:48 | |
| *** rods1 has quit IRC | 02:57 | |
| *** electrichead has quit IRC | 02:58 | |
| *** vkmc has joined #openstack-dev | 03:01 | |
| *** rkukura has quit IRC | 03:01 | |
| *** freedomhui has joined #openstack-dev | 03:05 | |
| *** rkukura has joined #openstack-dev | 03:11 | |
| *** vkmc has quit IRC | 03:27 | |
| *** SergeyLukjanov has joined #openstack-dev | 03:28 | |
| *** yaguang has quit IRC | 03:28 | |
| *** sarob has joined #openstack-dev | 03:40 | |
| *** slong has joined #openstack-dev | 03:42 | |
| *** lloydde has joined #openstack-dev | 03:43 | |
| *** sarob has quit IRC | 03:45 | |
| *** burris has joined #openstack-dev | 03:45 | |
| *** yaguang has joined #openstack-dev | 03:46 | |
| *** tzumainn has joined #openstack-dev | 03:51 | |
| openstackgerrit | A change was merged to openstack/neutron: Modify the OVS agent to support multiple tunnel_types concurrently. https://review.openstack.org/33107 | 03:54 |
| *** stevemar2 has joined #openstack-dev | 03:57 | |
| *** adjohn has joined #openstack-dev | 03:58 | |
| *** adjohn has quit IRC | 03:59 | |
| *** stevemar has quit IRC | 03:59 | |
| *** comay has joined #openstack-dev | 04:02 | |
| *** nati_ueno has joined #openstack-dev | 04:03 | |
| *** galstrom_zzz is now known as galstrom | 04:04 | |
| *** galstrom is now known as galstrom_zzz | 04:05 | |
| *** stevemar2 has quit IRC | 04:07 | |
| *** lloydde has quit IRC | 04:08 | |
| *** lloydde has joined #openstack-dev | 04:10 | |
| *** cyeoh has joined #openstack-dev | 04:10 | |
| *** stevemar has joined #openstack-dev | 04:12 | |
| *** changbl has quit IRC | 04:17 | |
| *** asalkeld_lunch is now known as asalkeld | 04:17 | |
| *** blamar has quit IRC | 04:18 | |
| *** stevemar has quit IRC | 04:18 | |
| *** stevemar2 has joined #openstack-dev | 04:18 | |
| openstackgerrit | A change was merged to openstack/neutron: Prevent possible server list damage in BigSwitch plugin https://review.openstack.org/36581 | 04:20 |
| *** slong has quit IRC | 04:20 | |
| *** koolhead17 has joined #openstack-dev | 04:21 | |
| *** lloydde has quit IRC | 04:23 | |
| *** changbl has joined #openstack-dev | 04:23 | |
| *** blamar has joined #openstack-dev | 04:26 | |
| *** yaguang has quit IRC | 04:34 | |
| *** yaguang has joined #openstack-dev | 04:37 | |
| *** slong has joined #openstack-dev | 04:40 | |
| *** prekarat has joined #openstack-dev | 04:40 | |
| *** sarob has joined #openstack-dev | 04:41 | |
| *** basha has joined #openstack-dev | 04:42 | |
| *** freedomhui has quit IRC | 04:43 | |
| *** sride has joined #openstack-dev | 04:44 | |
| *** slong has quit IRC | 04:44 | |
| *** afazekas has quit IRC | 04:47 | |
| *** sarob has quit IRC | 04:50 | |
| *** afazekas has joined #openstack-dev | 04:53 | |
| *** Mandell has joined #openstack-dev | 04:53 | |
| *** _ffio_ has quit IRC | 04:56 | |
| *** erfanian has quit IRC | 05:00 | |
| *** ffio has joined #openstack-dev | 05:02 | |
| *** yaguang has quit IRC | 05:03 | |
| *** sungju has joined #openstack-dev | 05:06 | |
| *** yaguang has joined #openstack-dev | 05:09 | |
| *** kushal has joined #openstack-dev | 05:12 | |
| *** ffio has quit IRC | 05:15 | |
| *** boris-42 has joined #openstack-dev | 05:15 | |
| *** navid has joined #openstack-dev | 05:16 | |
| *** sride has quit IRC | 05:17 | |
| *** sride has joined #openstack-dev | 05:19 | |
| *** adjohn has joined #openstack-dev | 05:20 | |
| *** lloydde has joined #openstack-dev | 05:26 | |
| *** kenperkins has quit IRC | 05:28 | |
| *** rwsu has joined #openstack-dev | 05:29 | |
| *** rwsu is now known as rwsu-away | 05:29 | |
| *** tzumainn has quit IRC | 05:30 | |
| openstackgerrit | A change was merged to openstack/oslo.sphinx: Add an OpenStack-wide intersphinx mapping file https://review.openstack.org/35818 | 05:31 |
| *** rwsu-away has quit IRC | 05:38 | |
| *** gmurphy is now known as gmurphy_afk | 05:40 | |
| *** jamielennox has joined #openstack-dev | 05:41 | |
| *** rwsu has joined #openstack-dev | 05:41 | |
| *** rwsu is now known as rwsu-away | 05:42 | |
| *** Tross has joined #openstack-dev | 05:43 | |
| *** sarob has joined #openstack-dev | 05:46 | |
| *** SergeyLukjanov has quit IRC | 05:50 | |
| *** gmurphy_afk is now known as gmurphy | 05:51 | |
| *** sarob has quit IRC | 05:51 | |
| *** nati_ueno has quit IRC | 05:51 | |
| *** nati_ueno has joined #openstack-dev | 05:52 | |
| *** lloydde has quit IRC | 05:52 | |
| *** ffio has joined #openstack-dev | 05:58 | |
| *** slong has joined #openstack-dev | 06:00 | |
| *** akamyshnikova has joined #openstack-dev | 06:01 | |
| *** hemna has quit IRC | 06:04 | |
| *** yaguang has quit IRC | 06:05 | |
| *** Alexei_987 has joined #openstack-dev | 06:10 | |
| *** Alexei_987 has left #openstack-dev | 06:10 | |
| *** ffio has quit IRC | 06:16 | |
| *** yaguang has joined #openstack-dev | 06:18 | |
| *** xqueralt-afk is now known as xqueralt | 06:20 | |
| *** lloydde has joined #openstack-dev | 06:22 | |
| *** freedomhui has joined #openstack-dev | 06:25 | |
| *** yaguang has quit IRC | 06:28 | |
| *** yaguang has joined #openstack-dev | 06:29 | |
| *** ffio has joined #openstack-dev | 06:31 | |
| *** lloydde has quit IRC | 06:32 | |
| *** yaguang has quit IRC | 06:33 | |
| *** vartom has joined #openstack-dev | 06:34 | |
| *** sungju has quit IRC | 06:35 | |
| *** adjohn has quit IRC | 06:36 | |
| obondarev | gongysh: ping | 06:39 |
| *** nati_ueno_2 has joined #openstack-dev | 06:40 | |
| *** vartom has quit IRC | 06:41 | |
| *** nati_ueno_2 has quit IRC | 06:41 | |
| *** nati_ueno_2 has joined #openstack-dev | 06:42 | |
| *** eglynn has joined #openstack-dev | 06:43 | |
| *** nati_ueno has quit IRC | 06:43 | |
| *** sarob has joined #openstack-dev | 06:47 | |
| *** jcoufal has joined #openstack-dev | 06:50 | |
| *** kaushikc has joined #openstack-dev | 06:53 | |
| *** jprovazn has joined #openstack-dev | 06:54 | |
| *** Mandell has quit IRC | 06:55 | |
| *** sarob has quit IRC | 06:57 | |
| *** yaguang has joined #openstack-dev | 06:57 | |
| *** avishay has joined #openstack-dev | 06:57 | |
| *** yolanda has joined #openstack-dev | 06:57 | |
| *** amerine has joined #openstack-dev | 06:58 | |
| *** lloydde has joined #openstack-dev | 06:58 | |
| *** yolanda has quit IRC | 06:59 | |
| *** burris has quit IRC | 06:59 | |
| *** yolanda has joined #openstack-dev | 06:59 | |
| *** burris has joined #openstack-dev | 07:00 | |
| *** romcheg has joined #openstack-dev | 07:01 | |
| *** aeperezt has quit IRC | 07:02 | |
| *** stevemar2 has quit IRC | 07:02 | |
| *** lloydde has quit IRC | 07:03 | |
| *** nikhil has quit IRC | 07:03 | |
| *** keekz__ has quit IRC | 07:03 | |
| *** nikhil has joined #openstack-dev | 07:04 | |
| *** keekz__ has joined #openstack-dev | 07:04 | |
| *** sarob has joined #openstack-dev | 07:05 | |
| *** sushils has joined #openstack-dev | 07:05 | |
| *** kobier|away is now known as kobier | 07:06 | |
| openstackgerrit | A change was merged to openstack/nova: Handle ImageNotAuthorized exception https://review.openstack.org/34512 | 07:06 |
| *** sarob has quit IRC | 07:06 | |
| *** sarob has joined #openstack-dev | 07:07 | |
| *** yaguang has quit IRC | 07:07 | |
| ttx | sdague: you can just write a mission statement. There is no real need to "discuss" it, we'll complain if it's completely wrong anyway :) | 07:09 |
| *** arezmerita has joined #openstack-dev | 07:10 | |
| *** jgallard has joined #openstack-dev | 07:10 | |
| *** sarob has quit IRC | 07:11 | |
| *** reidrac has joined #openstack-dev | 07:13 | |
| *** yaguang has joined #openstack-dev | 07:18 | |
| *** corXi has joined #openstack-dev | 07:19 | |
| basha | Somebody there? | 07:19 |
| *** matrohon has joined #openstack-dev | 07:20 | |
| *** romcheg1 has joined #openstack-dev | 07:21 | |
| *** romcheg has quit IRC | 07:24 | |
| *** alexxu has joined #openstack-dev | 07:25 | |
| ttx | basha: 378 people with various degrees of attention | 07:27 |
| *** boris-42 has quit IRC | 07:28 | |
| basha | ttx: found something hacky on glance | 07:28 |
| basha | wanted to talk bat that | 07:28 |
| basha | *abt | 07:28 |
| ttx | basha: then you want some glance dev -- although at this hour I don't think that many are awake. Maybe a thread on the mailing-list is a better bet | 07:29 |
| basha | ok Thanx ttx : | 07:29 |
| basha | :) | 07:29 |
| *** nati_ueno has joined #openstack-dev | 07:30 | |
| *** basha has quit IRC | 07:31 | |
| *** nati_ueno_2 has quit IRC | 07:33 | |
| *** sarob has joined #openstack-dev | 07:37 | |
| *** mikal has quit IRC | 07:39 | |
| *** mikal has joined #openstack-dev | 07:40 | |
| *** romcheg1 is now known as romcheg | 07:42 | |
| *** martyntaylor has joined #openstack-dev | 07:42 | |
| *** kobier has quit IRC | 07:45 | |
| *** _crobertsrh has quit IRC | 07:45 | |
| *** safchain has joined #openstack-dev | 07:46 | |
| *** yaguang has quit IRC | 07:47 | |
| *** jpich has joined #openstack-dev | 07:48 | |
| *** JordanP has joined #openstack-dev | 07:50 | |
| *** sarob has quit IRC | 07:51 | |
| *** jasper22 has joined #openstack-dev | 07:51 | |
| *** slong has quit IRC | 07:51 | |
| *** Alexei_987 has joined #openstack-dev | 07:52 | |
| *** zb is now known as zaneb | 07:52 | |
| *** jaimegil has joined #openstack-dev | 07:54 | |
| *** mihgen has joined #openstack-dev | 07:54 | |
| *** bismigalis has joined #openstack-dev | 07:55 | |
| *** basha has joined #openstack-dev | 07:57 | |
| *** pschaef has joined #openstack-dev | 07:57 | |
| *** lloydde has joined #openstack-dev | 07:59 | |
| *** yaguang has joined #openstack-dev | 07:59 | |
| *** crobertsrh has joined #openstack-dev | 08:00 | |
| *** jgallard has quit IRC | 08:01 | |
| *** jgallard has joined #openstack-dev | 08:01 | |
| *** alexisT has joined #openstack-dev | 08:03 | |
| *** lloydde has quit IRC | 08:04 | |
| *** ffio has quit IRC | 08:04 | |
| *** boden has joined #openstack-dev | 08:05 | |
| *** BobBall_Away is now known as BobBall | 08:06 | |
| *** SergeyLukjanov has joined #openstack-dev | 08:06 | |
| *** ndipanov has joined #openstack-dev | 08:06 | |
| *** mmagr has joined #openstack-dev | 08:11 | |
| *** athomas has joined #openstack-dev | 08:14 | |
| *** lucasagomes has joined #openstack-dev | 08:14 | |
| *** sarob has joined #openstack-dev | 08:17 | |
| *** ffio has joined #openstack-dev | 08:17 | |
| *** prekarat has quit IRC | 08:18 | |
| *** prekarat has joined #openstack-dev | 08:18 | |
| *** ffio has quit IRC | 08:19 | |
| *** romcheg has quit IRC | 08:22 | |
| *** mihgen has quit IRC | 08:22 | |
| *** sarob has quit IRC | 08:23 | |
| *** ffio has joined #openstack-dev | 08:23 | |
| *** romcheg has joined #openstack-dev | 08:23 | |
| zyluo | basha, flaper87 is who you should talk to | 08:24 |
| *** derekh has joined #openstack-dev | 08:25 | |
| *** jtomasek has joined #openstack-dev | 08:27 | |
| *** AnilV4 has joined #openstack-dev | 08:31 | |
| *** freedomhui has quit IRC | 08:33 | |
| *** andrea_r1z has quit IRC | 08:41 | |
| *** martyntaylor has quit IRC | 08:42 | |
| *** martyntaylor has joined #openstack-dev | 08:42 | |
| *** iartarisi has joined #openstack-dev | 08:43 | |
| *** ogelbukh1 is now known as ogelbukh | 08:45 | |
| *** zyluo has quit IRC | 08:47 | |
| *** navid has left #openstack-dev | 08:51 | |
| *** jgallard has quit IRC | 08:52 | |
| *** jgallard has joined #openstack-dev | 08:52 | |
| *** prekarat has quit IRC | 08:55 | |
| *** prekarat has joined #openstack-dev | 08:55 | |
| *** lloydde has joined #openstack-dev | 08:59 | |
| *** kushal has quit IRC | 09:00 | |
| *** lloydde has quit IRC | 09:04 | |
| openstackgerrit | A change was merged to openstack/ceilometer: Rename README.md to README.rst https://review.openstack.org/36993 | 09:05 |
| *** vsergeyev has joined #openstack-dev | 09:06 | |
| *** basha has quit IRC | 09:06 | |
| *** boris-42 has joined #openstack-dev | 09:06 | |
| *** johnthetubaguy has joined #openstack-dev | 09:07 | |
| *** danpb has joined #openstack-dev | 09:09 | |
| *** alexxu has quit IRC | 09:15 | |
| *** basha has joined #openstack-dev | 09:16 | |
| *** Ryan_Lane has quit IRC | 09:16 | |
| *** kushal has joined #openstack-dev | 09:17 | |
| *** sarob has joined #openstack-dev | 09:20 | |
| *** dguitarbite has quit IRC | 09:21 | |
| *** JordanP has quit IRC | 09:26 | |
| *** bashok has joined #openstack-dev | 09:30 | |
| *** sarob has quit IRC | 09:33 | |
| *** JordanP has joined #openstack-dev | 09:38 | |
| *** zeriouz_ has joined #openstack-dev | 09:44 | |
| *** zeriouz has joined #openstack-dev | 09:44 | |
| *** bourke has quit IRC | 09:51 | |
| *** ffio has quit IRC | 09:51 | |
| *** bourke has joined #openstack-dev | 09:51 | |
| *** jgallard has quit IRC | 09:52 | |
| *** jgallard has joined #openstack-dev | 09:52 | |
| *** afazekas_ has joined #openstack-dev | 09:55 | |
| *** tkammer has joined #openstack-dev | 09:55 | |
| *** jcoufal has quit IRC | 09:56 | |
| *** lloydde has joined #openstack-dev | 10:00 | |
| *** jgallard has quit IRC | 10:02 | |
| *** jgallard has joined #openstack-dev | 10:03 | |
| *** mhu has joined #openstack-dev | 10:04 | |
| *** lloydde has quit IRC | 10:04 | |
| *** basha has quit IRC | 10:05 | |
| openstackgerrit | A change was merged to openstack/nova: Remove locals() from virt directory https://review.openstack.org/35657 | 10:07 |
| openstackgerrit | A change was merged to openstack/nova: Imported Translations from Transifex https://review.openstack.org/36996 | 10:07 |
| openstackgerrit | A change was merged to openstack/nova: Port service API to v3 Part 2 https://review.openstack.org/36174 | 10:08 |
| openstackgerrit | A change was merged to openstack/cinder: Add generic block device driver https://review.openstack.org/27051 | 10:08 |
| *** basha has joined #openstack-dev | 10:14 | |
| basha | flaper87: ping | 10:14 |
| *** ema has joined #openstack-dev | 10:15 | |
| *** ema has quit IRC | 10:15 | |
| *** ema has joined #openstack-dev | 10:15 | |
| flaper87 | basha: pong | 10:17 |
| basha | Hey had a question around glance | 10:18 |
| basha | flaper87: During an image-list call to glance via nova, there seems to be an append of 'is_public:none' filter | 10:18 |
| basha | Theres a piece of code in sqlalchemy/api.py that does an exists on is_public for image_property table | 10:19 |
| basha | There seems to be a hack in V1 for this.. Same has to be done in V2.. Not sure if the approach is ryt though | 10:19 |
| basha | flaper87:Thouhgts? | 10:20 |
| openstackgerrit | A change was merged to openstack/ceilometer: Provide CPU number as additional metadata. https://review.openstack.org/35773 | 10:23 |
| basha | flaper87: ping | 10:23 |
| flaper87 | basha: mmh, I don't think it is needed in v2 | 10:24 |
| flaper87 | in v2 we used visibility https://github.com/openstack/glance/blob/master/glance/api/v2/images.py#L494 | 10:25 |
| basha | flaper87: Ummm yes, but thats the actual filter ryt? Nova sends it as 'is_public:none' as part of params | 10:25 |
| flaper87 | basha: which is then "translated" by the database driver: https://github.com/openstack/glance/blob/master/glance/db/sqlalchemy/api.py#L584 | 10:25 |
| basha | and so if we don't handle it, it would return an empty image-list | 10:26 |
| flaper87 | basha: ah, right, you mean the nova driver. In that case, I'd say it should be changed in the nova driver: GheRivero is migrating that code into glanceclient https://review.openstack.org/#/c/33327/ | 10:27 |
| flaper87 | basha: do you mind pointing that out there ? | 10:27 |
| basha | Oh so does that mean we don't need to send an is_public filter at all from nova? | 10:27 |
| *** tkammer has quit IRC | 10:28 | |
| *** pcm_ has joined #openstack-dev | 10:29 | |
| basha | flaper87: Moreover why should we be doing an exists for is_public on image_properties at all, since this value is essentially part of images and handled as part of the visibility filter ryt? | 10:29 |
| flaper87 | basha: nope, the visibility filter is the one that should be sent | 10:29 |
| *** pcm_ has quit IRC | 10:29 | |
| *** SergeyLukjanov has quit IRC | 10:30 | |
| flaper87 | basha: is_public is needed for v1 though | 10:30 |
| *** sarob has joined #openstack-dev | 10:30 | |
| *** pcm_ has joined #openstack-dev | 10:30 | |
| basha | oh so that piece would remain in sqlalchemy.api.py? | 10:30 |
| *** jhesketh has quit IRC | 10:34 | |
| *** sarob has quit IRC | 10:34 | |
| *** SergeyLukjanov has joined #openstack-dev | 10:38 | |
| *** drewlander has joined #openstack-dev | 10:42 | |
| *** pschaef has quit IRC | 10:43 | |
| *** rods1 has joined #openstack-dev | 10:45 | |
| *** ffio has joined #openstack-dev | 10:48 | |
| *** drewlander has quit IRC | 10:49 | |
| basha | flaper87: Even in this new ImageService he seems to be setting is_public:none ? | 10:50 |
| *** jgallard has quit IRC | 10:52 | |
| *** vkmc has joined #openstack-dev | 10:56 | |
| *** vkmc has quit IRC | 10:56 | |
| *** vkmc has joined #openstack-dev | 10:56 | |
| GheRivero | basha: I'll take alook to it. So far, it is a copy of what is now in nova and cinder (and ironic), and didn't take a deep look to those kind of errors. Is there a bug open for that issue? | 10:58 |
| basha | GheRivero: yyup. I've filed it in glance. will share the link | 10:58 |
| basha | https://bugs.launchpad.net/glance/+bug/1201266 | 10:58 |
| uvirtbot | Launchpad bug 1201266 in glance "'is_public' filter should be handled when nova calls glance via V2" [Undecided,In progress] | 10:58 |
| *** yaguang has quit IRC | 10:59 | |
| GheRivero | thx basha | 10:59 |
| *** lloydde has joined #openstack-dev | 11:00 | |
| *** dkranz has quit IRC | 11:01 | |
| *** avishay has quit IRC | 11:03 | |
| *** afazekas_ has quit IRC | 11:03 | |
| *** lloydde has quit IRC | 11:05 | |
| *** drewlander has joined #openstack-dev | 11:05 | |
| *** sandywalsh has quit IRC | 11:07 | |
| basha | GheRivero: np:) | 11:09 |
| basha | GheRivero: ping | 11:11 |
| *** pschaef has joined #openstack-dev | 11:11 | |
| GheRivero | basha: pong | 11:12 |
| basha | GheRivero: any idea why nova send this filter in the first place? | 11:12 |
| *** kushal has quit IRC | 11:13 | |
| *** mjfork has joined #openstack-dev | 11:13 | |
| GheRivero | no idea. I guess the v2 filter is just a copy of the v1 code. Besides, there are a couple of unfinished calls in the v2 of the glanceclient, so I guess not so many people has tested it yet | 11:14 |
| basha | GheRivero: Somewhere along the same lines, Ive been working on adding a conf value to nova to configure it to use either V1 or V2 as the case may be | 11:15 |
| basha | I hope nothing of that sort is under implementation yet | 11:15 |
| *** afazekas_ has joined #openstack-dev | 11:17 | |
| GheRivero | the create method is not implemeted yet, and the download had an issue that was solved 3 days ago. https://bugs.launchpad.net/glance/+bug/1193310 | 11:19 |
| uvirtbot | Launchpad bug 1193310 in glance "glance v2 get image erro" [Undecided,Fix committed] | 11:19 |
| *** avishay has joined #openstack-dev | 11:19 | |
| *** zeriouz has quit IRC | 11:20 | |
| *** zeriouz_ has quit IRC | 11:20 | |
| *** basha has quit IRC | 11:20 | |
| openstackgerrit | A change was merged to openstack/nova: Port admin-actions API into v3 part2 https://review.openstack.org/34503 | 11:21 |
| *** jcoufal has joined #openstack-dev | 11:24 | |
| *** basha has joined #openstack-dev | 11:26 | |
| *** chuckieb has joined #openstack-dev | 11:28 | |
| *** sarob has joined #openstack-dev | 11:30 | |
| *** derekh has quit IRC | 11:31 | |
| *** jruzicka has joined #openstack-dev | 11:31 | |
| *** bashok has quit IRC | 11:32 | |
| *** ffio has quit IRC | 11:33 | |
| *** afazekas_ has quit IRC | 11:33 | |
| *** athomas has quit IRC | 11:34 | |
| *** ffio has joined #openstack-dev | 11:35 | |
| *** avishay has quit IRC | 11:38 | |
| *** erfanian has joined #openstack-dev | 11:41 | |
| *** sarob has quit IRC | 11:43 | |
| *** SergeyLukjanov has quit IRC | 11:47 | |
| openstackgerrit | A change was merged to openstack/nova: port AvailabilityZone API into v3 part1 https://review.openstack.org/32852 | 11:47 |
| openstackgerrit | A change was merged to openstack/nova: Port AvailabilityZone API to v3 Part 2 https://review.openstack.org/32887 | 11:47 |
| *** SergeyLukjanov has joined #openstack-dev | 11:49 | |
| *** avishay has joined #openstack-dev | 11:52 | |
| basha | 11:53 | |
| *** FunnyLookinHat has joined #openstack-dev | 11:55 | |
| *** gongysh has quit IRC | 11:55 | |
| *** olaph has quit IRC | 11:57 | |
| *** morazi has joined #openstack-dev | 11:58 | |
| *** lucasagomes is now known as lucas-hungry | 11:59 | |
| *** dkranz has joined #openstack-dev | 12:00 | |
| *** prekarat has quit IRC | 12:01 | |
| *** lloydde has joined #openstack-dev | 12:01 | |
| *** prad_ has joined #openstack-dev | 12:02 | |
| *** cyeoh has quit IRC | 12:05 | |
| *** cyeoh has joined #openstack-dev | 12:05 | |
| *** basha has quit IRC | 12:05 | |
| *** lloydde has quit IRC | 12:05 | |
| *** pmathews has quit IRC | 12:06 | |
| *** athomas has joined #openstack-dev | 12:09 | |
| *** avishay has quit IRC | 12:12 | |
| *** rfolco has joined #openstack-dev | 12:15 | |
| *** basha has joined #openstack-dev | 12:17 | |
| *** sandywalsh has joined #openstack-dev | 12:17 | |
| *** freedomhui has joined #openstack-dev | 12:18 | |
| *** jhesketh has joined #openstack-dev | 12:20 | |
| *** KA has joined #openstack-dev | 12:20 | |
| *** avishay has joined #openstack-dev | 12:26 | |
| *** jaimegil has quit IRC | 12:27 | |
| *** beagles has joined #openstack-dev | 12:28 | |
| *** kushal has joined #openstack-dev | 12:29 | |
| *** basha has quit IRC | 12:30 | |
| *** pixelbeat has joined #openstack-dev | 12:30 | |
| *** dprince has joined #openstack-dev | 12:30 | |
| *** Tross has quit IRC | 12:31 | |
| *** devvesa has joined #openstack-dev | 12:32 | |
| *** gmoro_ has quit IRC | 12:34 | |
| *** redbeard2 has quit IRC | 12:36 | |
| *** blamar has quit IRC | 12:44 | |
| *** blamar has joined #openstack-dev | 12:44 | |
| openstackgerrit | A change was merged to openstack/nova: port instance_actions API into v3 part1 https://review.openstack.org/34843 | 12:47 |
| *** gmoro_ has joined #openstack-dev | 12:47 | |
| openstackgerrit | A change was merged to openstack/nova: Port instance_actions API to v3 Part 2 https://review.openstack.org/34844 | 12:47 |
| *** lorin1 has joined #openstack-dev | 12:49 | |
| *** enikanorov_ has quit IRC | 12:49 | |
| *** jpeeler has joined #openstack-dev | 12:51 | |
| *** jpeeler has quit IRC | 12:51 | |
| *** jpeeler has joined #openstack-dev | 12:51 | |
| *** kaushikc has quit IRC | 12:52 | |
| *** jasondotstar has joined #openstack-dev | 12:56 | |
| *** lloydde has joined #openstack-dev | 13:01 | |
| *** mdomsch has joined #openstack-dev | 13:01 | |
| *** fifieldt has quit IRC | 13:01 | |
| *** kaushikc has joined #openstack-dev | 13:01 | |
| *** anteaya has joined #openstack-dev | 13:02 | |
| *** tzumainn has joined #openstack-dev | 13:04 | |
| *** kaushikc1 has joined #openstack-dev | 13:06 | |
| *** kaushikc has quit IRC | 13:06 | |
| *** lloydde has quit IRC | 13:06 | |
| openstackgerrit | A change was merged to openstack/python-openstackclient: Add authenticate method to oauth code https://review.openstack.org/35540 | 13:08 |
| *** radez_g0n3 is now known as radez | 13:08 | |
| *** sride has quit IRC | 13:08 | |
| *** markmcclain has joined #openstack-dev | 13:09 | |
| *** Chunfre has joined #openstack-dev | 13:09 | |
| *** sarob has joined #openstack-dev | 13:10 | |
| *** sballe has joined #openstack-dev | 13:11 | |
| *** jayg|g0n3 is now known as jayg | 13:11 | |
| *** woodspa has joined #openstack-dev | 13:12 | |
| *** Tross has joined #openstack-dev | 13:12 | |
| *** jergerber has joined #openstack-dev | 13:13 | |
| notmyname | is dirk mueller in here? | 13:14 |
| *** bswartz has quit IRC | 13:15 | |
| *** sarob has quit IRC | 13:15 | |
| *** cmagina-away is now known as cmagina | 13:17 | |
| *** lucas-hungry is now known as lucasagomes | 13:17 | |
| *** bknudson has joined #openstack-dev | 13:18 | |
| *** arezmerita has quit IRC | 13:19 | |
| *** bknudson has quit IRC | 13:19 | |
| *** bknudson has joined #openstack-dev | 13:19 | |
| *** zb has joined #openstack-dev | 13:21 | |
| *** dperaza has joined #openstack-dev | 13:22 | |
| *** gongysh has joined #openstack-dev | 13:23 | |
| *** zaneb has quit IRC | 13:24 | |
| *** zb is now known as zaneb | 13:25 | |
| *** eharney has joined #openstack-dev | 13:25 | |
| *** eharney has quit IRC | 13:25 | |
| *** eharney has joined #openstack-dev | 13:25 | |
| *** dperaza1 has joined #openstack-dev | 13:27 | |
| *** henrynash has joined #openstack-dev | 13:28 | |
| *** jecarey has joined #openstack-dev | 13:29 | |
| *** dperaza has quit IRC | 13:29 | |
| *** martine has joined #openstack-dev | 13:29 | |
| *** martine is now known as Guest62973 | 13:30 | |
| *** primeministerp has joined #openstack-dev | 13:30 | |
| *** avishay has quit IRC | 13:30 | |
| henrynash | dolphm, gyee, bknudson: thought we'd try and fix up the incorrect responses in the api spec for H2: https://review.openstack.org/#/c/37000/ | 13:30 |
| *** nati_ueno has quit IRC | 13:30 | |
| bknudson | henrynash: thanks! that's something I didn't get to in the previous cleanup | 13:31 |
| bknudson | I got bored. | 13:31 |
| henrynash | bknudson: :-) | 13:31 |
| *** Guest62973 is now known as martine_ | 13:32 | |
| *** sride has joined #openstack-dev | 13:33 | |
| *** rharwood has joined #openstack-dev | 13:34 | |
| *** JordanP has quit IRC | 13:34 | |
| henrynash | dolphm, gyee: also need to make a decision on whether the approach to os-inherit is acceptable: https://review.openstack.org/#/c/35986/ | 13:36 |
| *** Tross has quit IRC | 13:36 | |
| *** krtaylor_ has quit IRC | 13:37 | |
| *** afazekas has quit IRC | 13:38 | |
| *** burt has joined #openstack-dev | 13:38 | |
| henrynash | bknudson, young: feel free to weigh in too: https://review.openstack.org/#/c/35986/ | 13:39 |
| *** afazekas has joined #openstack-dev | 13:39 | |
| *** tmclaugh[work] has joined #openstack-dev | 13:39 | |
| *** ffio has quit IRC | 13:43 | |
| *** jhesketh has quit IRC | 13:43 | |
| *** READ10 has joined #openstack-dev | 13:43 | |
| *** alexpilotti has joined #openstack-dev | 13:43 | |
| *** Tross has joined #openstack-dev | 13:44 | |
| *** henrynash has quit IRC | 13:44 | |
| *** martyntaylor has quit IRC | 13:45 | |
| *** martyntaylor has joined #openstack-dev | 13:48 | |
| *** FunnyLookinHat has quit IRC | 13:48 | |
| *** neelashah has joined #openstack-dev | 13:48 | |
| *** dvarga has joined #openstack-dev | 13:50 | |
| *** mtreinish has joined #openstack-dev | 13:50 | |
| *** ffio has joined #openstack-dev | 13:51 | |
| *** garyTh has joined #openstack-dev | 13:51 | |
| *** Tross has quit IRC | 13:51 | |
| *** bswartz has joined #openstack-dev | 13:52 | |
| *** JordanP has joined #openstack-dev | 13:53 | |
| *** garyTh has quit IRC | 13:54 | |
| *** changbl has quit IRC | 13:55 | |
| *** jonesld has joined #openstack-dev | 13:57 | |
| *** devvesa has quit IRC | 13:58 | |
| *** egallen has joined #openstack-dev | 13:59 | |
| *** ffio has quit IRC | 14:03 | |
| *** zaitcev has joined #openstack-dev | 14:03 | |
| *** jonesld has quit IRC | 14:03 | |
| openstackgerrit | A change was merged to openstack-dev/devstack: xenapi: Exit immediately if zipball download fails https://review.openstack.org/36492 | 14:03 |
| *** NetworkStatic has quit IRC | 14:03 | |
| openstackgerrit | A change was merged to openstack-dev/devstack: Source linuxbridge_agent in linuxbridge plugin https://review.openstack.org/34996 | 14:03 |
| openstackgerrit | A change was merged to openstack-dev/devstack: Renaming NOS to Director Moving PLUMgrid Director parameters to the common configuration function https://review.openstack.org/35850 | 14:03 |
| openstackgerrit | A change was merged to openstack-dev/devstack: Add integration bridge to the nova.conf https://review.openstack.org/36848 | 14:03 |
| *** NetworkStatic has joined #openstack-dev | 14:03 | |
| openstackgerrit | A change was merged to openstack-dev/devstack: QPID default host https://review.openstack.org/36622 | 14:03 |
| *** kaushikc1 has quit IRC | 14:04 | |
| *** afazekas has quit IRC | 14:04 | |
| *** afazekas has joined #openstack-dev | 14:06 | |
| *** stevemar has joined #openstack-dev | 14:09 | |
| *** galstrom_zzz is now known as galstrom | 14:11 | |
| openstackgerrit | A change was merged to openstack-dev/devstack: clean logical volumes in init_cinder https://review.openstack.org/36096 | 14:11 |
| openstackgerrit | A change was merged to openstack-dev/devstack: Move swift stuff out of keystone-data.sh https://review.openstack.org/36529 | 14:11 |
| *** sarob has joined #openstack-dev | 14:11 | |
| *** ctracey|away is now known as ctracey | 14:12 | |
| *** topol has joined #openstack-dev | 14:12 | |
| *** sleepsonthefloor has quit IRC | 14:13 | |
| *** jrclouda has joined #openstack-dev | 14:13 | |
| *** sc68cal_ is now known as sc68cal | 14:13 | |
| *** sc68cal has quit IRC | 14:13 | |
| *** sc68cal has joined #openstack-dev | 14:13 | |
| *** jrclouda is now known as zackf | 14:14 | |
| *** dolphm has joined #openstack-dev | 14:14 | |
| *** anniec has joined #openstack-dev | 14:15 | |
| *** kenperkins has joined #openstack-dev | 14:15 | |
| *** gongysh has quit IRC | 14:15 | |
| *** krtaylor_ has joined #openstack-dev | 14:16 | |
| *** git-harry has left #openstack-dev | 14:16 | |
| *** tonyy has joined #openstack-dev | 14:20 | |
| *** spzala has joined #openstack-dev | 14:20 | |
| *** michchap has quit IRC | 14:20 | |
| *** sarob has quit IRC | 14:21 | |
| *** tonyy has quit IRC | 14:22 | |
| *** tonyfy has joined #openstack-dev | 14:23 | |
| *** lbragstad has quit IRC | 14:23 | |
| *** Tross has joined #openstack-dev | 14:23 | |
| *** enikanorov has joined #openstack-dev | 14:24 | |
| *** rustlebee is now known as russellb | 14:26 | |
| *** FunnyLookinHat has joined #openstack-dev | 14:27 | |
| *** tonyfy has quit IRC | 14:27 | |
| *** markwash has quit IRC | 14:27 | |
| *** galstrom is now known as galstrom_zzz | 14:27 | |
| *** jruzicka has quit IRC | 14:28 | |
| *** tonyfy has joined #openstack-dev | 14:28 | |
| *** dolphm has quit IRC | 14:29 | |
| *** dolphm has joined #openstack-dev | 14:31 | |
| *** ffio has joined #openstack-dev | 14:31 | |
| *** mmagr has quit IRC | 14:31 | |
| *** jruzicka has joined #openstack-dev | 14:32 | |
| *** derekh has joined #openstack-dev | 14:33 | |
| *** redbeard2 has joined #openstack-dev | 14:33 | |
| *** chuckieb|2 has joined #openstack-dev | 14:34 | |
| *** xqueralt is now known as xqueralt-afk | 14:36 | |
| *** enikanorov has quit IRC | 14:36 | |
| *** chuckieb has quit IRC | 14:37 | |
| *** xqueralt-afk is now known as xqueralt | 14:37 | |
| *** enikanorov has joined #openstack-dev | 14:39 | |
| *** tonyfy has quit IRC | 14:39 | |
| *** tonyfy has joined #openstack-dev | 14:39 | |
| *** markmcclain has quit IRC | 14:39 | |
| dansmith | jgriffith: around? | 14:39 |
| openstackgerrit | A change was merged to openstack/swift: Start using Hacking https://review.openstack.org/33861 | 14:39 |
| jgriffith | dansmith: hey, what's up? | 14:40 |
| dansmith | jgriffith: can you look at this real quick? https://bugs.launchpad.net/python-cinderclient/+bug/1201455 | 14:40 |
| uvirtbot | Launchpad bug 1201455 in python-cinderclient "API in exceptions has changed in an incompatible way" [Undecided,New] | 14:40 |
| dansmith | jgriffith: it means nova master doesn't work against cinderclient master | 14:40 |
| *** dolphm has quit IRC | 14:41 | |
| jgriffith | dansmith: we had some debates about this | 14:41 |
| *** mlavalle has joined #openstack-dev | 14:41 | |
| jgriffith | dansmith: so changing the exception responses here was borderline IMO | 14:41 |
| jgriffith | dansmith: I've debated reverting that due to some other issues that it raised as well | 14:41 |
| *** lcheng has quit IRC | 14:42 | |
| jgriffith | dansmith: or at the very least leave the old exceptions in as deprecated so this doesn't happen | 14:42 |
| dansmith | jgriffith: okay, yeah, sounds like that'd be good :) | 14:43 |
| *** Tross has quit IRC | 14:43 | |
| *** matiu has joined #openstack-dev | 14:43 | |
| *** navid has joined #openstack-dev | 14:44 | |
| *** _TheDodd_ has joined #openstack-dev | 14:45 | |
| *** boris-42 has quit IRC | 14:46 | |
| *** aeperezt has joined #openstack-dev | 14:46 | |
| *** dkranz has quit IRC | 14:46 | |
| *** dkranz has joined #openstack-dev | 14:47 | |
| *** mrodden has quit IRC | 14:47 | |
| *** mmagr has joined #openstack-dev | 14:47 | |
| *** sballe has quit IRC | 14:48 | |
| *** ffio has quit IRC | 14:48 | |
| *** alexxu has joined #openstack-dev | 14:48 | |
| *** datsun180b has joined #openstack-dev | 14:49 | |
| *** michchap has joined #openstack-dev | 14:50 | |
| *** krtaylor_ has quit IRC | 14:51 | |
| *** jtomasek has quit IRC | 14:53 | |
| *** terryh has joined #openstack-dev | 14:53 | |
| *** pmathews has joined #openstack-dev | 14:54 | |
| *** jruzicka_ has joined #openstack-dev | 14:54 | |
| jruzicka_ | FUUU | 14:54 |
| jruzicka_ | sry, wrong window | 14:54 |
| russellb | o.O | 14:54 |
| * jruzicka_ curses xchat | 14:55 | |
| *** navid has left #openstack-dev | 14:55 | |
| jruzicka_ | how can a chat client swap active window without being asked to do so is beyond me | 14:55 |
| *** jprovazn has quit IRC | 14:55 | |
| simo | jruzicka_: xchat doesn't | 14:55 |
| jruzicka_ | it just did | 14:55 |
| russellb | i don't believe that :-p | 14:56 |
| simo | jruzicka_: I would rather look at pebkac, ie you blindly pressed keys and one of them was the command to switch windows or something :) | 14:56 |
| jruzicka_ | after starting, I was in channel and then after this channel initialised a sec later it switched to it | 14:56 |
| *** electrichead has joined #openstack-dev | 14:56 | |
| *** mmagr has quit IRC | 14:56 | |
| *** electrichead has quit IRC | 14:57 | |
| simo | jruzicka_: well, blaming xchat is also fine :-) | 14:57 |
| *** electrichead has joined #openstack-dev | 14:57 | |
| *** ffio has joined #openstack-dev | 14:57 | |
| *** changbl has joined #openstack-dev | 14:57 | |
| jruzicka_ | simo: ikr ;) | 14:57 |
| *** lbragstad has joined #openstack-dev | 14:57 | |
| simo | jruzicka_: ah you just joined, I think it may switch upon join :) | 14:57 |
| *** tonyfy has quit IRC | 14:57 | |
| *** jruzicka has quit IRC | 14:58 | |
| *** jruzicka_ is now known as jruzicka | 14:58 | |
| *** jprovazn has joined #openstack-dev | 14:58 | |
| *** mrodden has joined #openstack-dev | 14:59 | |
| *** andrewbogott_afk is now known as andrewbogott | 14:59 | |
| *** kevinconway has joined #openstack-dev | 15:00 | |
| *** michchap has quit IRC | 15:01 | |
| openstackgerrit | A change was merged to openstack/tempest: Change path for "Run one test" example in README.rst https://review.openstack.org/36961 | 15:02 |
| *** dperaza1 has quit IRC | 15:02 | |
| *** tonyfy has joined #openstack-dev | 15:02 | |
| openstackgerrit | A change was merged to openstack-dev/devstack: xenapi: xe network-attach for OVS bridge creation https://review.openstack.org/35471 | 15:03 |
| *** tonyfy has quit IRC | 15:04 | |
| *** dperaza has joined #openstack-dev | 15:04 | |
| *** reidrac has quit IRC | 15:04 | |
| *** sarob_ has joined #openstack-dev | 15:05 | |
| *** esheffield has joined #openstack-dev | 15:07 | |
| *** Mandell has joined #openstack-dev | 15:07 | |
| *** xqueralt is now known as xqueralt-afk | 15:07 | |
| *** jtomasek has joined #openstack-dev | 15:08 | |
| *** yamahata_ has joined #openstack-dev | 15:08 | |
| *** litong has joined #openstack-dev | 15:09 | |
| *** mmagr has joined #openstack-dev | 15:09 | |
| *** kmartin has joined #openstack-dev | 15:10 | |
| *** eharney has quit IRC | 15:13 | |
| *** hemna_ is now known as hemna | 15:14 | |
| *** jonesld has joined #openstack-dev | 15:15 | |
| *** dolphm has joined #openstack-dev | 15:16 | |
| *** amscanne has joined #openstack-dev | 15:16 | |
| *** sarob has joined #openstack-dev | 15:17 | |
| openstackgerrit | A change was merged to openstack/ceilometer: Use a real MongoDB instance to run unit tests https://review.openstack.org/33290 | 15:17 |
| openstackgerrit | A change was merged to openstack/nova: Port user_data API to v3 Part 2 https://review.openstack.org/34223 | 15:18 |
| openstackgerrit | A change was merged to openstack-dev/devstack: replace left quantum string for enable_lb https://review.openstack.org/36614 | 15:18 |
| *** nealph has quit IRC | 15:19 | |
| *** sballe has joined #openstack-dev | 15:19 | |
| *** krtaylor_ has joined #openstack-dev | 15:19 | |
| *** arezmerita has joined #openstack-dev | 15:20 | |
| *** sarob has quit IRC | 15:21 | |
| *** sarob_ has quit IRC | 15:22 | |
| *** Mandell has quit IRC | 15:23 | |
| *** jruzicka has quit IRC | 15:23 | |
| *** lloydde has joined #openstack-dev | 15:24 | |
| *** mmagr has quit IRC | 15:26 | |
| *** kaushikc has joined #openstack-dev | 15:26 | |
| *** michchap has joined #openstack-dev | 15:27 | |
| *** kaushikc has quit IRC | 15:27 | |
| *** JordanP has quit IRC | 15:28 | |
| *** basha has joined #openstack-dev | 15:28 | |
| *** aelkikhia has joined #openstack-dev | 15:28 | |
| *** branen has joined #openstack-dev | 15:29 | |
| *** gmoro_ has quit IRC | 15:29 | |
| *** sarob_ has joined #openstack-dev | 15:30 | |
| *** henrynash has joined #openstack-dev | 15:30 | |
| *** carl_baldwin has joined #openstack-dev | 15:31 | |
| *** ffio has quit IRC | 15:32 | |
| *** rcleere has joined #openstack-dev | 15:33 | |
| *** freedomhui has quit IRC | 15:36 | |
| *** phschwartz has joined #openstack-dev | 15:36 | |
| *** rwsu-away is now known as rwsu | 15:37 | |
| *** ffio has joined #openstack-dev | 15:37 | |
| *** michchap has quit IRC | 15:39 | |
| *** kenperkins has quit IRC | 15:39 | |
| *** jecarey has quit IRC | 15:39 | |
| *** sarob_ has quit IRC | 15:40 | |
| *** basha_ has joined #openstack-dev | 15:40 | |
| *** jecarey has joined #openstack-dev | 15:40 | |
| *** kenperkins has joined #openstack-dev | 15:40 | |
| *** JordanP has joined #openstack-dev | 15:40 | |
| *** romcheg has quit IRC | 15:41 | |
| *** freedomhui has joined #openstack-dev | 15:42 | |
| *** basha has quit IRC | 15:43 | |
| *** basha_ is now known as basha | 15:43 | |
| *** terriyu has joined #openstack-dev | 15:43 | |
| *** gmoro_ has joined #openstack-dev | 15:43 | |
| *** pabelanger_ has joined #openstack-dev | 15:46 | |
| *** ffio has quit IRC | 15:46 | |
| *** jaypipes has quit IRC | 15:46 | |
| *** pabelanger_ has quit IRC | 15:46 | |
| *** pabelanger_ has joined #openstack-dev | 15:46 | |
| *** ffio has joined #openstack-dev | 15:47 | |
| *** pabelanger has quit IRC | 15:47 | |
| *** otherwiseguy has quit IRC | 15:47 | |
| *** cybertron_ has joined #openstack-dev | 15:47 | |
| *** pabelanger has joined #openstack-dev | 15:47 | |
| *** cybertron_ is now known as bnemec_alt | 15:47 | |
| *** jprovazn has quit IRC | 15:47 | |
| *** vsergeyev has quit IRC | 15:47 | |
| *** matrohon has quit IRC | 15:49 | |
| *** eharney has joined #openstack-dev | 15:49 | |
| *** eharney has quit IRC | 15:49 | |
| *** eharney has joined #openstack-dev | 15:49 | |
| *** jaypipes has joined #openstack-dev | 15:50 | |
| *** egallen has quit IRC | 15:51 | |
| *** ffio has quit IRC | 15:51 | |
| *** woodspa has quit IRC | 15:52 | |
| *** dvarga has quit IRC | 15:52 | |
| *** reed has joined #openstack-dev | 15:52 | |
| *** woodspa has joined #openstack-dev | 15:52 | |
| *** cp16net is now known as cp16net|away | 15:54 | |
| *** joshuamckenty has joined #openstack-dev | 15:54 | |
| *** prekarat has joined #openstack-dev | 15:54 | |
| *** gyee has joined #openstack-dev | 15:55 | |
| *** mlavalle has left #openstack-dev | 15:55 | |
| *** pabelanger has quit IRC | 15:55 | |
| *** boris-42 has joined #openstack-dev | 15:55 | |
| *** pabelanger_ is now known as pabelanger | 15:55 | |
| *** hk_peter has joined #openstack-dev | 15:55 | |
| *** pabelanger_ has joined #openstack-dev | 15:56 | |
| *** burris has quit IRC | 15:56 | |
| *** burris has joined #openstack-dev | 15:56 | |
| *** martyntaylor has quit IRC | 15:57 | |
| *** martyntaylor has joined #openstack-dev | 15:57 | |
| *** pabelanger has quit IRC | 15:57 | |
| *** yolanda_ has joined #openstack-dev | 15:58 | |
| *** pabelanger has joined #openstack-dev | 15:58 | |
| *** rnirmal has joined #openstack-dev | 15:58 | |
| *** ffio has joined #openstack-dev | 15:59 | |
| *** yolanda has quit IRC | 15:59 | |
| *** xqueralt-afk is now known as xqueralt | 15:59 | |
| *** devoid has joined #openstack-dev | 15:59 | |
| *** Chunfre has quit IRC | 16:00 | |
| *** basha has quit IRC | 16:00 | |
| *** jcoufal has quit IRC | 16:00 | |
| *** Alexei_987 has quit IRC | 16:01 | |
| *** martyntaylor has quit IRC | 16:01 | |
| *** devanand1 has quit IRC | 16:01 | |
| *** martyntaylor has joined #openstack-dev | 16:01 | |
| *** devananda has joined #openstack-dev | 16:01 | |
| *** martyntaylor has quit IRC | 16:01 | |
| *** martyntaylor1 has joined #openstack-dev | 16:01 | |
| *** sandywalsh has quit IRC | 16:02 | |
| *** Tross has joined #openstack-dev | 16:03 | |
| ayoung | gyee, does hitting the rebase button on ttps://review.openstack.org/#/c/34421/ work? | 16:03 |
| ayoung | gyee, I have something to resubmit, but it depends on both v2 and v3 | 16:04 |
| *** alop has joined #openstack-dev | 16:04 | |
| *** ffio_ has joined #openstack-dev | 16:04 | |
| gyee | ayoung, will take a look in 30 mins, I am in a meeting right now | 16:04 |
| ayoung | gyee, sounds good | 16:04 |
| *** michchap has joined #openstack-dev | 16:04 | |
| *** jasdeepH has joined #openstack-dev | 16:04 | |
| *** ffio has quit IRC | 16:05 | |
| *** pschaef has quit IRC | 16:05 | |
| morganfainberg | ayoung: regarding the user-token-list question that game across the list this morning, i think there is actually a bug. the list should only be the hashed ids, unless i am wrong? The use of the list is for determingin tokens that need to be revoked under the appropriate modifications of the user/role/project/group/etc. Am I wrong? | 16:06 |
| *** safchain has quit IRC | 16:06 | |
| *** mhu has quit IRC | 16:09 | |
| *** prad_ has quit IRC | 16:09 | |
| *** gmoro_ has quit IRC | 16:10 | |
| *** corXi has quit IRC | 16:11 | |
| *** martyntaylor1 has quit IRC | 16:11 | |
| *** kushal has quit IRC | 16:12 | |
| *** stevemar2 has joined #openstack-dev | 16:13 | |
| *** aelkikhia has quit IRC | 16:13 | |
| *** garyk has joined #openstack-dev | 16:13 | |
| *** xqueralt is now known as xqueralt-afk | 16:14 | |
| *** michchap_ has joined #openstack-dev | 16:14 | |
| *** andrewbogott is now known as andrewbogott_afk | 16:14 | |
| *** dvarga has joined #openstack-dev | 16:14 | |
| *** michchap has quit IRC | 16:15 | |
| *** zul has quit IRC | 16:16 | |
| *** stevemar has quit IRC | 16:16 | |
| *** michchap has joined #openstack-dev | 16:16 | |
| *** jaypipes has quit IRC | 16:16 | |
| openstackgerrit | A change was merged to openstack/python-cinderclient: Update to latest openstack/requirements. https://review.openstack.org/37006 | 16:17 |
| *** jaypipes has joined #openstack-dev | 16:17 | |
| *** sarob has joined #openstack-dev | 16:17 | |
| openstackgerrit | A change was merged to openstack/nova: Changes select_destinations to return dicts instead of objects https://review.openstack.org/36892 | 16:17 |
| *** sandywalsh has joined #openstack-dev | 16:17 | |
| *** michchap_ has quit IRC | 16:18 | |
| *** zb has joined #openstack-dev | 16:19 | |
| openstackgerrit | A change was merged to openstack-dev/devstack: xenapi: preinstall python netaddr https://review.openstack.org/36855 | 16:19 |
| openstackgerrit | A change was merged to openstack-dev/devstack: Add variable to specify additional parameters for the Neutron service. https://review.openstack.org/36232 | 16:19 |
| openstackgerrit | A change was merged to openstack-dev/devstack: Add Support for OpenStack Networking VPNaaS (IPSec) https://review.openstack.org/32174 | 16:19 |
| *** jpich has quit IRC | 16:19 | |
| *** sarob_ has joined #openstack-dev | 16:19 | |
| *** michchap_ has joined #openstack-dev | 16:20 | |
| *** iartarisi has quit IRC | 16:20 | |
| *** otherwiseguy has joined #openstack-dev | 16:20 | |
| *** ffio_ has quit IRC | 16:20 | |
| *** michchap has quit IRC | 16:20 | |
| *** drewlander has quit IRC | 16:21 | |
| *** zaneb has quit IRC | 16:22 | |
| *** Tross has quit IRC | 16:23 | |
| *** wcmarsha_ has quit IRC | 16:23 | |
| *** terry7 has joined #openstack-dev | 16:23 | |
| *** prekarat has quit IRC | 16:24 | |
| *** jog0-away is now known as jog0 | 16:24 | |
| *** michchap_ has quit IRC | 16:24 | |
| *** gmoro_ has joined #openstack-dev | 16:25 | |
| *** nachi has joined #openstack-dev | 16:25 | |
| *** nachi_ has joined #openstack-dev | 16:25 | |
| *** zb is now known as zaneb | 16:26 | |
| *** aelkikhia has joined #openstack-dev | 16:26 | |
| *** sarob has quit IRC | 16:26 | |
| *** prad_ has joined #openstack-dev | 16:28 | |
| *** sushils has quit IRC | 16:28 | |
| *** markwash has joined #openstack-dev | 16:29 | |
| *** cmark has quit IRC | 16:29 | |
| *** cmark has joined #openstack-dev | 16:30 | |
| *** romcheg has joined #openstack-dev | 16:30 | |
| *** terry7 has quit IRC | 16:31 | |
| *** SergeyLukjanov has quit IRC | 16:31 | |
| *** rscottcoyle has joined #openstack-dev | 16:31 | |
| *** bismigalis has quit IRC | 16:31 | |
| *** pcm_ has quit IRC | 16:32 | |
| *** dolphm has quit IRC | 16:33 | |
| henrynash | dolphm: you on? | 16:33 |
| *** jtomasek has quit IRC | 16:34 | |
| *** colinmcnamara has joined #openstack-dev | 16:34 | |
| *** yjiang5__ is now known as yjiang5 | 16:35 | |
| *** ffio has joined #openstack-dev | 16:35 | |
| *** jbresnah has joined #openstack-dev | 16:36 | |
| *** sarob has joined #openstack-dev | 16:37 | |
| *** dvarga has quit IRC | 16:38 | |
| *** dvarga has joined #openstack-dev | 16:38 | |
| *** ffio has quit IRC | 16:38 | |
| *** egallen has joined #openstack-dev | 16:39 | |
| *** wcmarsha_ has joined #openstack-dev | 16:39 | |
| *** sthaha has quit IRC | 16:40 | |
| *** sudorandom has joined #openstack-dev | 16:41 | |
| *** Mandell has joined #openstack-dev | 16:41 | |
| *** ema has quit IRC | 16:41 | |
| *** sarob has quit IRC | 16:42 | |
| *** sarob has joined #openstack-dev | 16:42 | |
| jgriffith | dansmith: actually... | 16:42 |
| jgriffith | dansmith: you should probably remove your hack :) | 16:43 |
| jgriffith | dansmith: https://review.openstack.org/#/c/37086/ | 16:43 |
| openstackgerrit | A change was merged to openstack/python-troveclient: Wildcards in User Host https://review.openstack.org/36333 | 16:43 |
| dansmith | jgriffith: I wasn't planning to merge it, yeah, I -2'd it this morniung | 16:43 |
| jgriffith | dansmith: we should've caught this initially | 16:43 |
| jgriffith | dansmith: but I this needs a good deal more thought and coordination I think | 16:44 |
| openstackgerrit | A change was merged to openstack/trove: Wildcards in User Host https://review.openstack.org/36331 | 16:44 |
| dansmith | jgriffith: cool | 16:44 |
| jgriffith | dansmith: thanks for pointing it out | 16:44 |
| jgriffith | sorry for the thrash | 16:44 |
| dansmith | jgriffith: no problem.. I found it by an interesting quirk about how devstack works, which I still haven't figured out, but it was kinda lucky :) | 16:45 |
| *** cmark has quit IRC | 16:45 | |
| jgriffith | dansmith: haha :) | 16:45 |
| *** bdpayne has joined #openstack-dev | 16:46 | |
| openstackgerrit | A change was merged to openstack/nova: Add legacy flag to get_instance_bdms https://review.openstack.org/33340 | 16:46 |
| *** sarob has quit IRC | 16:46 | |
| *** armax has joined #openstack-dev | 16:47 | |
| *** athomas has quit IRC | 16:48 | |
| *** zul has joined #openstack-dev | 16:48 | |
| *** romcheg has quit IRC | 16:49 | |
| *** romcheg has joined #openstack-dev | 16:49 | |
| *** nati_ueno has joined #openstack-dev | 16:49 | |
| *** jonesld has quit IRC | 16:51 | |
| *** ffio has joined #openstack-dev | 16:52 | |
| *** egallen has quit IRC | 16:52 | |
| *** egallen has joined #openstack-dev | 16:53 | |
| *** michchap has joined #openstack-dev | 16:53 | |
| *** andrewbogott_afk is now known as andrewbogott | 16:53 | |
| *** terry7 has joined #openstack-dev | 16:53 | |
| *** arezmerita has quit IRC | 16:55 | |
| *** sarob_ has quit IRC | 16:55 | |
| *** romcheg1 has joined #openstack-dev | 16:58 | |
| openstackgerrit | A change was merged to openstack/ceilometer: Unset OS_xx variable before generate configuration https://review.openstack.org/37080 | 16:59 |
| *** jonesld has joined #openstack-dev | 16:59 | |
| *** romcheg has quit IRC | 17:00 | |
| *** dvarga has quit IRC | 17:00 | |
| *** xqueralt-afk is now known as xqueralt | 17:01 | |
| *** joshuamckenty has quit IRC | 17:01 | |
| *** anniec has quit IRC | 17:01 | |
| *** jkordish_ is now known as jkordish | 17:02 | |
| *** dvarga has joined #openstack-dev | 17:03 | |
| openstackgerrit | A change was merged to openstack/keystone: Implements Pluggable V3 Token Provider https://review.openstack.org/33858 | 17:03 |
| *** michchap has quit IRC | 17:04 | |
| *** lucasagomes has quit IRC | 17:08 | |
| *** datsun180b has quit IRC | 17:08 | |
| *** datsun180b has joined #openstack-dev | 17:08 | |
| *** joshuamckenty has joined #openstack-dev | 17:08 | |
| *** alexpilotti has quit IRC | 17:10 | |
| *** eharney has quit IRC | 17:10 | |
| *** romcheg1 is now known as romcheg | 17:10 | |
| *** jcoufal has joined #openstack-dev | 17:10 | |
| *** alexpilotti has joined #openstack-dev | 17:11 | |
| henrynash | dolphm, ayoung, gyee, bknudson: sorry, gentle re-prodding on https://review.openstack.org/#/c/35986/, would appreciate any comments | 17:11 |
| *** jasond has joined #openstack-dev | 17:11 | |
| *** alexpilotti has quit IRC | 17:11 | |
| *** markmcclain has joined #openstack-dev | 17:11 | |
| *** colinmcnamara has quit IRC | 17:12 | |
| *** nati_uen_ has joined #openstack-dev | 17:12 | |
| *** jdurgin1 has joined #openstack-dev | 17:13 | |
| sdague | markwash: you got a chance to take a look at this - https://review.openstack.org/#/c/36903/ ? | 17:13 |
| sdague | or other glance core folks | 17:14 |
| *** derekh has quit IRC | 17:14 | |
| *** eharney has joined #openstack-dev | 17:14 | |
| markwash | sdague: sure, thanks for the heads up. . been stuck down in h2 blueprints for review focus lately | 17:15 |
| *** basha has joined #openstack-dev | 17:16 | |
| *** eharney has quit IRC | 17:17 | |
| *** Tross has joined #openstack-dev | 17:17 | |
| *** vipul is now known as vipul-away | 17:17 | |
| *** pcm__ has joined #openstack-dev | 17:18 | |
| *** vipul-away is now known as vipul | 17:18 | |
| *** colinmcnamara has joined #openstack-dev | 17:19 | |
| *** sballe has quit IRC | 17:21 | |
| sdague | markwash: no worries | 17:21 |
| *** JordanP has quit IRC | 17:22 | |
| *** pcm__ has quit IRC | 17:22 | |
| *** pcm_ has joined #openstack-dev | 17:23 | |
| *** wcmarsha_ has quit IRC | 17:24 | |
| ayoung | morganfainberg, what post was that> | 17:25 |
| morganfainberg | ayoung: you responded, it was the backport of token fix | 17:26 |
| *** Tross has quit IRC | 17:26 | |
| morganfainberg | in memcache | 17:26 |
| ayoung | morganfainberg, ah. Ok. Glad to be of service | 17:26 |
| morganfainberg | i meant you responded to the email :P I think the user-token-list should only be the hashed token ids | 17:27 |
| morganfainberg | not the full token-data | 17:27 |
| *** basha has quit IRC | 17:27 | |
| morganfainberg | the person who wrote the email seems to identified a bug, i'm verifying but i wasn't sure based upon your response. | 17:27 |
| *** hk_peter has quit IRC | 17:28 | |
| *** basha has joined #openstack-dev | 17:28 | |
| sdague | jd__: any idea what's up with these fails? - https://review.openstack.org/#/c/36905/ | 17:29 |
| sdague | I was really surprised to have sqlite fails pop up in raising the client requirements | 17:29 |
| *** tmclaugh[work] has quit IRC | 17:30 | |
| sdague | and I don't really understand enough ceilo internals to grok | 17:30 |
| jd__ | that's just stevedore unable to import | 17:30 |
| jd__ | the error is: | 17:30 |
| jd__ | 2013-07-15 14:46:43.560 | VersionConflict: (python-keystoneclient 0.3.1 (/home/jenkins/workspace/gate-ceilometer-python26/.tox/py26/lib/python2.6/site-packages), Requirement.parse('python-keystoneclient>=0.2,<0.3')) | 17:30 |
| *** michchap has joined #openstack-dev | 17:31 | |
| *** nachi has quit IRC | 17:31 | |
| *** nachi_ has quit IRC | 17:31 | |
| *** danpb has quit IRC | 17:32 | |
| *** freedomhui has quit IRC | 17:32 | |
| ayoung | morganfainberg, actually, we should not be storing tokens at all, and they should be short lived, and we shouldn't do revocations, but it will take a while to get there | 17:32 |
| morganfainberg | ayoung: yeah, i'm totally with you | 17:32 |
| morganfainberg | this is a stop-gap | 17:33 |
| *** JordanP has joined #openstack-dev | 17:34 | |
| *** eharney has joined #openstack-dev | 17:34 | |
| gyee | ayoung, rebased, https://review.openstack.org/#/c/34421/ | 17:35 |
| *** xqueralt is now known as xqueralt-afk | 17:35 | |
| gyee | henrynash, I am reviewing https://review.openstack.org/#/c/35986/ now, started last Friday but didn't get a chance to finish it | 17:36 |
| *** wcmarsha_ has joined #openstack-dev | 17:36 | |
| *** jasond has left #openstack-dev | 17:36 | |
| *** jasond has joined #openstack-dev | 17:36 | |
| henrynash | gyee: thx, appreciate it (made a few minor updates over weekemd/today, have posted them…but all minor nits) | 17:36 |
| *** sandeepr_ltp has joined #openstack-dev | 17:36 | |
| ayoung | gyee, thanks | 17:37 |
| ayoung | henrynash, need to repost somthing based on gyee's latest then will give yours a good drubbing | 17:38 |
| *** garyk has quit IRC | 17:38 | |
| *** basha has quit IRC | 17:39 | |
| henrynash | ayoung: ok, thx…I await with anticipation :-) | 17:39 |
| *** garyk has joined #openstack-dev | 17:39 | |
| sdague | jd__: is that because python-glanceclient needs to go first? | 17:39 |
| jd__ | sdague: likely | 17:40 |
| sdague | markwash: what other glance core can we ping to get the python-glanceclient requirements change to land? | 17:40 |
| *** diogogmt has joined #openstack-dev | 17:40 | |
| sdague | as that's at least partially blocking us from landing it in ceilometer | 17:40 |
| *** burt has quit IRC | 17:40 | |
| markwash | sdague: jbresnah, flaper87, iccha, ameade_ | 17:41 |
| markwash | or just pop into #openstack-glance | 17:41 |
| *** aelkikhia has quit IRC | 17:41 | |
| *** xmltok has quit IRC | 17:42 | |
| *** xmltok has joined #openstack-dev | 17:42 | |
| *** terry7 has quit IRC | 17:42 | |
| iccha | which patch sdague ? | 17:42 |
| *** michchap has quit IRC | 17:42 | |
| sdague | iccha: https://review.openstack.org/#/c/36903 | 17:43 |
| sdague | jd__: so that explains some of the unit test fails | 17:45 |
| sdague | jd__: I'm not sure about the doc fail though - http://logs.openstack.org/36905/2/check/gate-ceilometer-docs/2165/ | 17:45 |
| *** Ryan_Lane has joined #openstack-dev | 17:45 | |
| *** sarob has joined #openstack-dev | 17:46 | |
| *** sarob has quit IRC | 17:46 | |
| *** sarob has joined #openstack-dev | 17:46 | |
| iccha | sdague: done | 17:47 |
| *** avishay has joined #openstack-dev | 17:47 | |
| sdague | iccha: thanks! | 17:47 |
| *** egallen has quit IRC | 17:49 | |
| openstackgerrit | A change was merged to openstack/python-novaclient: CLI for disable service reason https://review.openstack.org/34964 | 17:50 |
| openstackgerrit | A change was merged to openstack/nova: remove python-glanceclient cap https://review.openstack.org/36907 | 17:53 |
| openstackgerrit | A change was merged to openstack/neutron: Add support for the extra route extension in the NVP plugin. https://review.openstack.org/33732 | 17:54 |
| cburgess | jgriffith: ping | 17:54 |
| *** Tross has joined #openstack-dev | 17:55 | |
| jgriffith | cburgess: pong | 17:55 |
| *** aelkikhia has joined #openstack-dev | 17:56 | |
| cburgess | jgriffith: I'm back from my semi-vacation now so I plan on working on the nova fix for the block size stuff this afternoon. Just wanted to let you know I'm back to a normal schedule and should be able to get that done fairly soon. | 17:56 |
| jgriffith | cburgess: awesome! Welcome home :) | 17:56 |
| cburgess | jgriffith: Thanks. | 17:56 |
| *** xmltok_ has joined #openstack-dev | 17:57 | |
| sdague | jgriffith: unrelated ping - https://bugs.launchpad.net/cinder/+bug/1189595 I think is our final race condition before enabling grenade in the gate. You have a chance to evaluate the bug? | 17:57 |
| uvirtbot | Launchpad bug 1189595 in grenade "euca exercise failing after upgrade" [Undecided,In progress] | 17:57 |
| *** johnthetubaguy has quit IRC | 17:57 | |
| *** JordanP has quit IRC | 17:58 | |
| *** lparth has joined #openstack-dev | 17:58 | |
| *** andrewbogott is now known as andrewbogott_afk | 17:59 | |
| jgriffith | sdague: saw you talking about that in inra | 17:59 |
| jgriffith | sdague: I *promise* to try and get to this this week | 17:59 |
| sdague | ok :) | 17:59 |
| jgriffith | I started looking at it last week, but couldn't get past some other issues that were popping up | 18:00 |
| jgriffith | sdague: it's definitely on the radar though (and has been for a while) | 18:00 |
| sdague | jgriffith: it might be nice to at least triage and raise the priority on it in the cinder queue, in case that makes it ripe for other cinder folks to jump on it | 18:00 |
| *** xmltok has quit IRC | 18:00 | |
| jgriffith | sdague: for sure | 18:00 |
| jgriffith | sdague: lemme do that today | 18:00 |
| sdague | cool, thanks | 18:00 |
| jgriffith | sdague: np | 18:01 |
| *** ffio has quit IRC | 18:01 | |
| *** eharney has quit IRC | 18:01 | |
| jgriffith | sdague: ohh... I remember now :) | 18:02 |
| jgriffith | sdague: there's a funny keystone client error in there regarding the cert file | 18:03 |
| jgriffith | sdague: anyway... I'll get on it later and see if I can get to the bottom of it | 18:03 |
| openstackgerrit | A change was merged to openstack/python-keystoneclient: Ec2Signer : Modify v4 signer to match latest boto https://review.openstack.org/35945 | 18:03 |
| *** joshuamckenty has left #openstack-dev | 18:03 | |
| *** Tross has quit IRC | 18:04 | |
| sdague | jgriffith: is that really the issue? I just assumed this was actually the fact that we start all the services much faster in grenade because we don't have to setup the other trees | 18:04 |
| *** Tross has joined #openstack-dev | 18:04 | |
| *** colinmcnamara has quit IRC | 18:04 | |
| sdague | and cinder didn't get it's first periodic poll on resources | 18:05 |
| *** MrDHat has joined #openstack-dev | 18:05 | |
| jgriffith | sdague: actually I believe you're correct | 18:05 |
| jgriffith | sdague: ahh... indeed! | 18:05 |
| jgriffith | sdague: Ok, I will deal with this later today, should be easy to fix | 18:06 |
| sdague | well credit goes to adalbas for figuring it out | 18:06 |
| sdague | but he's on vacation this week, so I was hoping to babysit this last fix through | 18:06 |
| openstackgerrit | A change was merged to openstack/nova: Don't attach to multiple Quantum networks by default https://review.openstack.org/33996 | 18:06 |
| jgriffith | sdague: yeah, so we can force an update at startup (whcih I've though of doing anyway) or control the order of cinder service startup | 18:06 |
| jgriffith | sdague: obviously the first option is probably the better choice | 18:07 |
| jgriffith | sdague: need to look, I think I already have a bug opened up against this | 18:07 |
| sdague | jgriffith: ok, cool | 18:08 |
| *** michchap has joined #openstack-dev | 18:09 | |
| *** JordanP has joined #openstack-dev | 18:09 | |
| jgriffith | sdague: k, updated if nobody picks it up I'll grab it later and fix it | 18:11 |
| sdague | jgriffith: thank you much | 18:11 |
| *** JordanP has quit IRC | 18:15 | |
| *** datsun180b_ has joined #openstack-dev | 18:15 | |
| *** datsun180b has quit IRC | 18:16 | |
| *** datsun180b_ is now known as datsun180b | 18:16 | |
| *** galstrom_zzz is now known as galstrom | 18:17 | |
| *** eharney has joined #openstack-dev | 18:18 | |
| *** eharney has quit IRC | 18:18 | |
| *** eharney has joined #openstack-dev | 18:18 | |
| *** markmcclain has quit IRC | 18:19 | |
| *** amotoki has joined #openstack-dev | 18:20 | |
| *** michchap has quit IRC | 18:20 | |
| *** SergeyLukjanov has joined #openstack-dev | 18:21 | |
| *** terriyu has quit IRC | 18:23 | |
| *** andrewbogott_afk is now known as andrewbogott | 18:24 | |
| *** afazekas_ has joined #openstack-dev | 18:24 | |
| *** sushils has joined #openstack-dev | 18:24 | |
| *** afazekas_ has quit IRC | 18:26 | |
| *** tmclaugh[work] has joined #openstack-dev | 18:29 | |
| *** colinmcnamara1 has joined #openstack-dev | 18:30 | |
| colinmcnamara1 | ls | 18:30 |
| *** basha has joined #openstack-dev | 18:30 | |
| *** colinmcnamara1 has quit IRC | 18:30 | |
| *** colinmcnamara has joined #openstack-dev | 18:31 | |
| *** basha has quit IRC | 18:31 | |
| *** Guest18452 is now known as crazed | 18:34 | |
| *** sballe has joined #openstack-dev | 18:34 | |
| *** crazed is now known as Guest4518 | 18:35 | |
| *** datsun180b has quit IRC | 18:35 | |
| *** datsun180b has joined #openstack-dev | 18:35 | |
| *** datsun180b has joined #openstack-dev | 18:35 | |
| *** xBytez has quit IRC | 18:36 | |
| *** Guest4518 is now known as crazed | 18:36 | |
| *** crazed has quit IRC | 18:36 | |
| *** crazed has joined #openstack-dev | 18:36 | |
| *** sandeepr_ltp has quit IRC | 18:37 | |
| openstackgerrit | A change was merged to openstack/glance: Deleting image that is uploading leaves data https://review.openstack.org/33986 | 18:38 |
| openstackgerrit | A change was merged to openstack/python-glanceclient: uncap python-keystoneclient version requirement https://review.openstack.org/36903 | 18:38 |
| *** xBytez has joined #openstack-dev | 18:43 | |
| *** jasdeepH has quit IRC | 18:44 | |
| *** terriyu has joined #openstack-dev | 18:44 | |
| *** cp16net|away is now known as cp16net | 18:46 | |
| *** vipul is now known as vipul-away | 18:47 | |
| *** vipul-away is now known as vipul | 18:47 | |
| *** michchap has joined #openstack-dev | 18:47 | |
| *** dolphm has joined #openstack-dev | 18:48 | |
| dolphm | boris-42: a few minutes == 2 hours :P what's up? | 18:48 |
| boris-42 | dolphm lol=) | 18:48 |
| boris-42 | dolphm it happens=) | 18:48 |
| boris-42 | dolphm I have some question about work around DB in Keystone | 18:48 |
| boris-42 | dolphm are you interested in some help from us (Mirantis) | 18:49 |
| dolphm | boris-42: ask away! and always :) | 18:50 |
| *** colinmcnamara has quit IRC | 18:50 | |
| boris-42 | dolphm ok there is a couple of work that we would like to do | 18:51 |
| *** lucasagomes has joined #openstack-dev | 18:51 | |
| *** ffio has joined #openstack-dev | 18:52 | |
| *** ndipanov is now known as ndipanov_gone | 18:52 | |
| dolphm | boris-42: specific bugs or bp's | 18:52 |
| dolphm | boris-42: ? | 18:52 |
| *** martine_ has quit IRC | 18:53 | |
| *** aelkikhia has quit IRC | 18:54 | |
| boris-42 | dolphm I think there will be a lot of bps | 18:54 |
| boris-42 | dolphm we would like to repeat our work in nova in other porjects | 18:55 |
| boris-42 | dolphm https://blueprints.launchpad.net/nova/+spec/db-cleanup | 18:55 |
| boris-42 | dolphm this is base bP | 18:55 |
| *** kobier has joined #openstack-dev | 18:56 | |
| *** kobier has quit IRC | 18:57 | |
| *** michchap has quit IRC | 18:58 | |
| *** burt has joined #openstack-dev | 19:00 | |
| *** Chaser has joined #openstack-dev | 19:00 | |
| boris-42 | dolphm I wrote in some more words in mailing list our plan for glance and cinder if it will be interesting take a look http://www.mail-archive.com/openstack-dev@lists.openstack.org/msg00809.html | 19:04 |
| *** sandywalsh has quit IRC | 19:04 | |
| *** pabelanger_ has quit IRC | 19:04 | |
| *** novas0x2a|laptop has joined #openstack-dev | 19:05 | |
| ayoung | dolphm, I know you liked my previous REMOTE_USER patch, but it seems like there were a couple problems. As I recall, one of the things we wanted at the summit was to have REMOTE_USER disabled by default. The other was the fact that it didn't handle domains at all. Update version deals with both of those. https://review.openstack.org/#/c/36839/ | 19:05 |
| dolphm | boris-42: reading through those child bp's now | 19:06 |
| boris-42 | dolphm I am not sure that all will be useful for keystone, we are investigating situation in keystone=) | 19:06 |
| dolphm | boris-42: they look good so far, but i'm not sure how applicable the individual points are to keystone (curious to see how similar bp's filed against keystone would look) | 19:06 |
| ayoung | henrynash, looking at your patch now. Since this is an extension, I think it would make sense to build on top of: https://review.openstack.org/#/c/36731/ | 19:06 |
| *** jjmb1 has quit IRC | 19:06 | |
| dolphm | boris-42: cool | 19:06 |
| openstackgerrit | A change was merged to openstack/oslo-incubator: Migrate sqlalchemy utils from Nova https://review.openstack.org/31621 | 19:07 |
| dolphm | boris-42: soft deletes is on my wishlist :) | 19:07 |
| *** aelkikhia has joined #openstack-dev | 19:07 | |
| boris-42 | dolphm roger =) | 19:07 |
| boris-42 | dolphm lol=) | 19:07 |
| dolphm | ayoung: is remote user "disable-able" today? | 19:07 |
| ayoung | dolphm, no. | 19:08 |
| boris-42 | dolphm ok thanks we will collect all data about DB in keystone | 19:08 |
| boris-42 | dolphm and share with you | 19:08 |
| *** lcheng has joined #openstack-dev | 19:10 | |
| *** mytest has joined #openstack-dev | 19:11 | |
| *** zul has quit IRC | 19:11 | |
| dolphm | ayoung: i don't remember it being discussed that it needs to be any more "disable-able" than it is today? | 19:12 |
| *** mytest has quit IRC | 19:13 | |
| dolphm | ayoung: if remote_user is provided by keystone, the plugin (if any is configured) should kick in; to maintain backwards compatibility with grizzly, i think we'd have to have a plugin by default (rather than raising 500 / 501 with a grizzly config + no default plugin) | 19:13 |
| dolphm | ayoung: reading my own statement, it reads as self-contradictory... ignore the "if any is configured" in parens | 19:14 |
| ayoung | dolphm, so I created a new default plugin that does that, as well as a disable_plugin | 19:14 |
| *** jasdeepH has joined #openstack-dev | 19:15 | |
| ayoung | dolphm, it was one of the points discussed. We had to go and confrim that REMOTE_USER was only settable by wsgi, but I was a little paranoid. I an make the current behavior the default and the disabled one just there for people that really want it gone | 19:15 |
| morganfainberg | ayoung: iirc we determined that REMOTE_USER was only settable by wsgi at the summit. | 19:16 |
| openstackgerrit | A change was merged to openstack/oslo.config: Raise an exception when _oparser is not initialized https://review.openstack.org/35326 | 19:16 |
| *** sandywalsh has joined #openstack-dev | 19:17 | |
| *** martine has joined #openstack-dev | 19:18 | |
| *** martine is now known as Guest58861 | 19:18 | |
| *** anniec has joined #openstack-dev | 19:18 | |
| *** nati_uen_ has quit IRC | 19:19 | |
| *** nati_uen_ has joined #openstack-dev | 19:20 | |
| *** pabelanger has quit IRC | 19:20 | |
| *** giulivo has joined #openstack-dev | 19:23 | |
| *** galstrom is now known as galstrom_zzz | 19:24 | |
| ayoung | morganfainberg, you can never be paranoid enough | 19:25 |
| *** michchap has joined #openstack-dev | 19:25 | |
| *** aelkikhia has quit IRC | 19:27 | |
| *** aelkikhia has joined #openstack-dev | 19:27 | |
| openstackgerrit | A change was merged to openstack/oslo-incubator: Adds sample config file generation script https://review.openstack.org/34318 | 19:28 |
| *** mmagr has joined #openstack-dev | 19:28 | |
| *** terryh has quit IRC | 19:28 | |
| *** cmagina is now known as cmagina-away | 19:28 | |
| *** Guest58861 is now known as martine_ | 19:30 | |
| stevemar2 | ayoung: got some time? | 19:30 |
| ayoung | stevemar2, for you, always | 19:31 |
| ayoung | stevemar1, on the other hand, is a total tosser | 19:31 |
| openstackgerrit | A change was merged to openstack/oslo-incubator: Avoid shadowing Exception 'message' attribute https://review.openstack.org/35111 | 19:31 |
| *** datsun180b has quit IRC | 19:31 | |
| *** chuckieb|2 has quit IRC | 19:33 | |
| *** neelashah1 has joined #openstack-dev | 19:34 | |
| *** dosaboy_ has joined #openstack-dev | 19:34 | |
| *** datsun180b has joined #openstack-dev | 19:35 | |
| *** neelashah has quit IRC | 19:35 | |
| *** dosaboy has quit IRC | 19:36 | |
| openstackgerrit | A change was merged to openstack/glance: Fix 'glance-cache-manage -h' default interpolation https://review.openstack.org/35511 | 19:36 |
| *** michchap has quit IRC | 19:36 | |
| openstackgerrit | A change was merged to openstack/nova: Porting limits core api to API v3 Part 1 https://review.openstack.org/29369 | 19:37 |
| *** jcoufal has quit IRC | 19:37 | |
| openstackgerrit | A change was merged to openstack/glance: Sync gettextutils from oslo https://review.openstack.org/36541 | 19:39 |
| openstackgerrit | A change was merged to openstack/swift: Add documentation about flake8+hacking. https://review.openstack.org/37071 | 19:39 |
| openstackgerrit | A change was merged to openstack/nova: Complete deletion when compute manager start-up. https://review.openstack.org/33265 | 19:39 |
| henrynash | ayoung: yes, that might useful….is that going to merge for H2? | 19:39 |
| stevemar2 | ayoung: thanks :) i was hoping to chat about https://review.openstack.org/#/c/29130/ my delegated auth piece | 19:40 |
| stevemar2 | ayoung: i want to know what I gotta do to get rid of the ugly red X | 19:40 |
| ayoung | henrynash, I'm trying to get it in. | 19:40 |
| openstackgerrit | A change was merged to openstack/oslo-incubator: Add exceptions for OpenStack clients https://review.openstack.org/29706 | 19:40 |
| ayoung | stevemar2, you need to convince me that you have covered all of the revocation issues that we had with Trust tokens. | 19:41 |
| *** sushils has quit IRC | 19:41 | |
| ayoung | stevemar2, how do you mark a token that has been created via OAuth? | 19:41 |
| stevemar2 | ayoung: right, so there is a delete authorization function that deletes the access token entry in that db, and also calls _delete_users_token | 19:42 |
| *** topol has quit IRC | 19:42 | |
| ayoung | stevemar2, is a token created via Oauth distinguishable from one created directly? | 19:43 |
| stevemar2 | ayoung: so the delegated user couldn't use the access token he had | 19:43 |
| stevemar2 | ayoung: nope | 19:43 |
| *** galstrom_zzz is now known as galstrom | 19:43 | |
| ayoung | stevemar2, then there is going to continue to be a big ugly red x | 19:43 |
| stevemar2 | ayoung: i don't really want to mess around with the token code | 19:43 |
| ayoung | stevemar2, that is the fundamental thing about delegation | 19:43 |
| ayoung | stevemar2, then reuse the Trust extension | 19:43 |
| stevemar2 | ayoung: that's complicating it even more | 19:44 |
| ayoung | But.... | 19:44 |
| *** sushils has joined #openstack-dev | 19:44 | |
| ayoung | stevemar2, if by "complicating" you mean "not opening up a big ugly security hole" then yes | 19:44 |
| stevemar2 | ayoung: what's the big ugly security hole? | 19:45 |
| ayoung | stevemar2, we worked through all of the implications when we did the Trust review back in January-March time frame. | 19:46 |
| ayoung | A delegated token has different rules than a non-delegated token | 19:46 |
| ayoung | we can use a token to get another token | 19:46 |
| stevemar2 | ayoung: i think i just got devstack working back in march, so recap :D | 19:46 |
| ayoung | but if a delegated token has a limited set of roles, it should not be able to get a token with a wider set of roles | 19:46 |
| ayoung | so we have a rule in truysts that you can;t use a trust token to get another token | 19:47 |
| stevemar2 | ayoung: but the delegated user could just use the access token to get another keystone token? | 19:47 |
| ayoung | stevemar2, not with trusts they can't, because we explicitly disallow that | 19:47 |
| ayoung | a trust token cannot get another token | 19:47 |
| ayoung | also, if user roles change, you need to invaldate a set of delegated tokens | 19:47 |
| stevemar2 | that would happen via _delete_users_tokens wouldn't it? | 19:48 |
| ayoung | figuring out what tokens to revoke is tricky | 19:48 |
| *** otherwiseguy has quit IRC | 19:48 | |
| stevemar2 | i thought i saw that that was called when roles are changed/added/removed | 19:48 |
| ayoung | stevemar2, also, as I recall, your Oauth impl was only doing impersonation | 19:48 |
| ayoung | stevemar2, that is correct | 19:48 |
| stevemar2 | back to token chaining for a minute | 19:49 |
| ayoung | we actually wantto get away from impersonation, though it seems to be required for some of the Swift use cases | 19:49 |
| stevemar2 | ayoung: what's the alternative to impersonation? | 19:49 |
| ayoung | stevemar2, again, look at trusts. Think of it this way. Trusts and Oauth are both delegation mechanisms. OAuth, in order to displace trusts, needs to implement the same functionality as Trusts. Thus, OAuth really should be the external interface, and then the trust implementation and the Oatuh implementation shopuld be merged. | 19:51 |
| ayoung | stevemar2, as far as the alternative to impoersonation | 19:51 |
| ayoung | a trust token indicates who the trustor and trustee is. | 19:51 |
| stevemar2 | ayoung: i dont have a vendetta against trusts, they can stay | 19:52 |
| ayoung | And only sets the user_id = to trustor if impersonation is explicitly set | 19:52 |
| ayoung | stevemar2, never said you did. Just trying to get us to have a single delegation policy, not two | 19:52 |
| *** SergeyLukjanov has quit IRC | 19:52 | |
| ayoung | stevemar2, I am Ok, and in fact very much in favor, of replacing the trust API with OAtuh, just want to make sure the semantics are maintained | 19:53 |
| *** salv-orlando has joined #openstack-dev | 19:53 | |
| ayoung | stevemar2, a lot of the facets of trusts came out of one of the most detailed code review series in Keystone history. I would hate to lose all that context | 19:54 |
| dolphm | ayoung: i don't know about "detailed" ... it was just a giant review | 19:54 |
| sdague | arosen, garyk: you guys have a chance to look at - https://review.openstack.org/#/c/36890/ ? nati_uen_'s patch which might fix the race bug for the gate | 19:54 |
| ayoung | and Oauth is a superset of Trust functionality, \ | 19:54 |
| *** jasdeepH has quit IRC | 19:55 | |
| ayoung | dolphm, well, all of the revocation, chaining, impersonation stuff.... | 19:55 |
| ayoung | there was a lot there, and I can't claim credit for it. | 19:55 |
| dolphm | ayoung: yeah, it was huge! | 19:55 |
| ayoung | dolphm, and a good bit of it was not obvious at first look | 19:55 |
| dolphm | ayoung: very true | 19:55 |
| arosen | nati_ueno: can you update the commit message on your patch. After that we can probably +2 it. | 19:56 |
| *** nati_ueno has quit IRC | 19:56 | |
| ayoung | dolphm, what I would like is for the trust code to be merged into the Oauth implementation, so that we have a single mechanism. THen, if we want to deprecate the Trust specific portions of it, we can do that deliberately | 19:56 |
| *** SergeyLukjanov has joined #openstack-dev | 19:57 | |
| ayoung | stevemar2, I think the trust table is analogous to the Consumer table. | 19:57 |
| *** mlavalle has joined #openstack-dev | 19:57 | |
| ayoung | Correction, the conserum table is really the user table | 19:57 |
| *** safchain has joined #openstack-dev | 19:58 | |
| *** radez is now known as radez_g0n3 | 19:58 | |
| ayoung | stevemar2, the trust table is probably the request_token table | 19:58 |
| *** erkules_ is now known as erkules | 19:58 | |
| ayoung | but the difference is that with trusts, we only allow consumers that are already part of the system, and Oauth expects a deliberate consumers entry | 19:59 |
| *** dosaboy_ has quit IRC | 20:00 | |
| ayoung | stevemar2, for example, we could extend the trust API to create a consumer entry when a trust is first created, and populate it with data from the user table. | 20:00 |
| *** lucasagomes is now known as lucas-hungry | 20:00 | |
| *** terryh has joined #openstack-dev | 20:00 | |
| *** bdpayne has quit IRC | 20:01 | |
| ayoung | stevemar2, not suggesting that we do that, just trying to show the relationship, as well as the differences between the two delegation mechanisms | 20:01 |
| *** neelashah1 has quit IRC | 20:01 | |
| *** bknudson has quit IRC | 20:02 | |
| *** bdpayne has joined #openstack-dev | 20:02 | |
| *** dosaboy has joined #openstack-dev | 20:02 | |
| *** colinmcnamara has joined #openstack-dev | 20:02 | |
| *** galstrom is now known as galstrom_zzz | 20:02 | |
| *** jdurgin1 has quit IRC | 20:02 | |
| stevemar2 | ayoung: anyone using trusts yet? | 20:03 |
| ayoung | stevemar2, the big thing is that when you create an actual Keystone token, you should be following the same rule as are used to create a trust tokens | 20:03 |
| ayoung | stevemar2, the Heat team is | 20:03 |
| devananda | ayoung: hi! so, we're starting to add some form of keystone integration to ironic | 20:03 |
| *** michchap has joined #openstack-dev | 20:04 | |
| *** jasdeepH has joined #openstack-dev | 20:04 | |
| ayoung | devananda, which, as we established, is not an Ubuntu release | 20:04 |
| devananda | indeed :) | 20:04 |
| ayoung | but rather is the bare metal provisioning. | 20:04 |
| devananda | ayoung: it's basically an admin-only (or very privileged user-only) service | 20:04 |
| devananda | because, yes, it does the bare metal provisioning. which, right now, is only for very-trusted-tenants | 20:05 |
| ayoung | devananda, so, for new code, I would recommend integrating with the V3 APIs, as you will be positioning things for the future | 20:05 |
| devananda | ayoung: any examples we can look at? | 20:05 |
| romcheg | We only use keystoneclient currently | 20:06 |
| romcheg | Does v3/v2 affect our code? | 20:06 |
| ayoung | devananda, https://github.com/openstack/identity-api/blob/master/openstack-identity-api/v3/src/markdown/identity-api-v3.md | 20:06 |
| ayoung | if you are using the client then just keep using the client | 20:07 |
| morganfainberg | ayoung: i wouldn't advocate being less paranoid :) | 20:07 |
| ayoung | do you need anything beyond auth_token middleware? | 20:07 |
| morganfainberg | ayoung: i appreciate it, personally. | 20:07 |
| devananda | ayoung: also, architecturally, ironic-api service should receive its calls from two sources: 1) cloud admins, 2) nova, acting on behalf of non-admin users | 20:07 |
| ayoung | morganfainberg, what makes you say that. Who is paying you to say that? | 20:07 |
| devananda | ayoung: do we need to go full RBAC, or is there a simpler approach that we can start with? | 20:07 |
| morganfainberg | enterprise customers…who are going to ask for that method of thought :P | 20:08 |
| ayoung | devananda, what are you trying to do? | 20:08 |
| ayoung | morganfainberg, oh, sure, that is just what you want me to think.... | 20:08 |
| devananda | ayoung: cloud admin manages the hardware (enroll, update, etc) | 20:08 |
| *** pabelanger has joined #openstack-dev | 20:08 | |
| morganfainberg | ayoung: hehe | 20:08 |
| devananda | ayoung: cloud user asks nova to boot an instance, and selects a specific flavor. the scheduler keys on that flavor, passes the request to ironic, and ironic puts the image down on the metal and boots it | 20:09 |
| ayoung | devananda, so far it sounds suspiciously like Heats use cases. I assume you are not creating new users or anything, right? | 20:09 |
| devananda | ayoung: not yet. and i'd like to avoid that :) | 20:10 |
| ayoung | devananda, so, are you doing thiungs on behalf of another user? | 20:10 |
| devananda | ayoung: or rather, i'd like to do this as simply as possible, and i dont yet see why we need that | 20:10 |
| devananda | ahh no! we're not | 20:10 |
| devananda | nova is :) | 20:10 |
| devananda | admin user -> ironic-api service | 20:10 |
| devananda | cloud user -> nova-api -> nova-scheduler -> nova-conductor -> ironic-api | 20:11 |
| devananda | (or something like that) | 20:11 |
| ayoung | devananda, then you should only need auth_token middleware anyway | 20:11 |
| romcheg | ayoung: sounds good | 20:11 |
| devananda | great | 20:11 |
| ayoung | romcheg, devananda, If you need more than that, come on back and we can talk | 20:11 |
| devananda | thanks much :) | 20:11 |
| romcheg | Thank you ayoung | 20:11 |
| *** neelashah has joined #openstack-dev | 20:11 | |
| *** markmcclain has joined #openstack-dev | 20:12 | |
| *** terry7 has joined #openstack-dev | 20:12 | |
| *** terry7 has quit IRC | 20:14 | |
| *** galstrom_zzz is now known as galstrom | 20:15 | |
| *** rscottcoyle has quit IRC | 20:15 | |
| *** michchap has quit IRC | 20:15 | |
| stevemar2 | ayoung, 2 DA mechanisms, bad, etc? | 20:15 |
| stevemar2 | ayoung: wrong channel! | 20:16 |
| stevemar2 | :) | 20:16 |
| stevemar2 | oops | 20:16 |
| ayoung | stevemar2, I am OK with 2 interfaces, so long as they have a common view of the rules for delegation | 20:16 |
| ayoung | And Oauth generated tokens are going to have to have the same restrictions as trust based tokens | 20:17 |
| ayoung | stevemar2, it was a boring meeting anyway | 20:17 |
| *** sballe has quit IRC | 20:17 | |
| stevemar2 | ayoung: rules meaning revocation, chaining and impersonation right? | 20:18 |
| ayoung | stevemar2, correct | 20:18 |
| stevemar2 | ayoung, let me try and sum this up | 20:19 |
| ayoung | stevemar2, also, we want to be able to specify at contract signing time what are the set of roles that a user gets when they execute the contract | 20:19 |
| ayoung | and trusts nails that down. | 20:19 |
| *** anniec_ has joined #openstack-dev | 20:19 | |
| ayoung | stevemar2, one thing that Oauth adds is that it lets the requestor (Consumer) tell the user "delegate to me these roles" | 20:19 |
| stevemar2 | ayoung: but it's not a guarantee it will get those roles | 20:20 |
| *** rnirmal has quit IRC | 20:20 | |
| *** anniec has quit IRC | 20:20 | |
| *** jdurgin has quit IRC | 20:20 | |
| *** gmoro_ has quit IRC | 20:20 | |
| *** galstrom has quit IRC | 20:20 | |
| *** changbl has quit IRC | 20:20 | |
| ayoung | stevemar2, correct. | 20:20 |
| *** anniec_ is now known as anniec | 20:20 | |
| stevemar2 | ayoung: it only gets roles that the user can authorize | 20:20 |
| stevemar2 | (and that are also requested, obv) | 20:20 |
| *** galstrom has joined #openstack-dev | 20:20 | |
| ayoung | stevemar2, and those should be a subset of the users own roles at the time that the token is requests | 20:20 |
| ayoung | requested | 20:20 |
| *** changbl has joined #openstack-dev | 20:20 | |
| *** morganfainberg has quit IRC | 20:21 | |
| *** gmoro_ has joined #openstack-dev | 20:21 | |
| *** morganfainberg has joined #openstack-dev | 20:21 | |
| ayoung | stevemar2, but when the consumer requests the token, it should be exactly those roles specified earlier. In theory, it is OK for it to be less, but it is never OK for it to be more | 20:21 |
| *** boden has quit IRC | 20:21 | |
| stevemar2 | ayoung: you want to prevent the consumer from requesting roles that an authorizing user wont have right? | 20:22 |
| ayoung | NOw, I assume that Oauth enforces this, but we should make it explicit that those are the rules | 20:22 |
| ayoung | stevemar2, more than that | 20:22 |
| *** melwitt has joined #openstack-dev | 20:22 | |
| *** jdurgin has joined #openstack-dev | 20:23 | |
| *** MIDENN_ has joined #openstack-dev | 20:23 | |
| ayoung | stevemar2, If I am the authorizing user, I might not be around when the consumer actually requests the token. I need to be able to state "I trust consumer X to get role X and only Role Y on project P and only on Project P" even though I have a much wider set of roles in a much larger set of projects | 20:23 |
| *** branen_ has joined #openstack-dev | 20:23 | |
| ayoung | constrained delegation | 20:23 |
| stevemar2 | ayoung: i don't see where that could fit in the oauth flow | 20:25 |
| *** branen has quit IRC | 20:26 | |
| ayoung | stevemar2, why not? | 20:26 |
| *** donaldh has joined #openstack-dev | 20:26 | |
| *** radix has left #openstack-dev | 20:26 | |
| *** mdenny has quit IRC | 20:27 | |
| *** neelashah has quit IRC | 20:27 | |
| ayoung | stevemar2, one problem with discussin this is that Oauth already uses the term tokens. I am explicitly talking about requesting a Keystone token | 20:27 |
| stevemar2 | ayoung: oh | 20:27 |
| stevemar2 | ayoung: then it does that already | 20:28 |
| *** bknudson has joined #openstack-dev | 20:28 | |
| ayoung | stevemar2, yeah, I figured it does. I was just trying to make that an explicit part of the overlap | 20:28 |
| ayoung | stevemar2, a big part of Keystone is trying to document all of this | 20:28 |
| *** spzala has quit IRC | 20:29 | |
| *** jdurgin1 has joined #openstack-dev | 20:30 | |
| *** romcheg has left #openstack-dev | 20:30 | |
| *** aelkikhia has quit IRC | 20:31 | |
| *** aelkikhia1 has joined #openstack-dev | 20:31 | |
| *** bdpayne has quit IRC | 20:32 | |
| *** bdpayne has joined #openstack-dev | 20:33 | |
| *** otherwiseguy has joined #openstack-dev | 20:33 | |
| *** neelashah has joined #openstack-dev | 20:33 | |
| *** mmagr has quit IRC | 20:37 | |
| *** cmagina-away is now known as cmagina | 20:38 | |
| stevemar2 | ayoung: long read... sry :) just to make sure you know, there are 2 other types of tokens in oauth... request and access; the request token is initially unauthorized and has the consumers id and roles that they want. The next step is for a keystone user to authorize it (the roles have to match up). Once it's authorized, the consumer can exchange the request token for an access token (the request token is d | 20:38 |
| stevemar2 | The access token can be exchanged at any time to get a keystone token (using the authorizing users credentials). The rules around revocation and chaining can be seen around the access token. Revocation: the authorizing user can revoke (delete) the access token; this would also delete any of the authorizing users tokens too (if the consumer has any keystone tokens, these are now uselss). Chaining: using th | 20:38 |
| stevemar2 | token to get another is a non-issue, since they consumer could just use the access token to get another. Lastly, impersonation... | 20:38 |
| ayoung | stevemar2, don't confuse Oauth revocation with the rest of Keystone revocation | 20:39 |
| stevemar2 | ayoung, did i? | 20:39 |
| *** nachi has joined #openstack-dev | 20:39 | |
| *** nachi_ has joined #openstack-dev | 20:39 | |
| ayoung | If I lose a role, any keystone tokens that a consumer has for me must be revoked as well | 20:39 |
| ayoung | it is more than just " the authorizing user can revoke (delete) the access token;" | 20:40 |
| *** radix has joined #openstack-dev | 20:40 | |
| ayoung | so non Oauth events have to be reflected in the tokens generated by Oauth | 20:40 |
| stevemar2 | the user can explicitly revoke (delete) the access token | 20:40 |
| openstackgerrit | A change was merged to openstack/cinder: Use base ISCSI driver to fulfill some driver requirements https://review.openstack.org/37078 | 20:40 |
| openstackgerrit | A change was merged to openstack/horizon: Adding the ability to set/use domain context https://review.openstack.org/32655 | 20:41 |
| openstackgerrit | A change was merged to openstack/glance: DB Driver for the Registry Service https://review.openstack.org/36847 | 20:41 |
| *** tmclaugh[work] has left #openstack-dev | 20:41 | |
| openstackgerrit | A change was merged to openstack/horizon: Fix a few visual issues on the network topology diagram. https://review.openstack.org/36116 | 20:41 |
| *** dhellmann is now known as dhellmann_ | 20:42 | |
| *** michchap has joined #openstack-dev | 20:42 | |
| *** rharwood has quit IRC | 20:43 | |
| *** aelkikhia1 has left #openstack-dev | 20:44 | |
| *** morganfainberg has left #openstack-dev | 20:45 | |
| *** morganfainberg has joined #openstack-dev | 20:45 | |
| *** colinmcnamara has quit IRC | 20:46 | |
| *** hemanth has joined #openstack-dev | 20:50 | |
| *** SumitNaiksatam has joined #openstack-dev | 20:51 | |
| sdague | arosen: how confident are you that nati_uen_'s patch solves the neutron race? would love to reenable the smoke tets | 20:52 |
| sdague | tests | 20:52 |
| *** alexpilotti has joined #openstack-dev | 20:53 | |
| nati_uen_ | sdague: This is current test status. 10 floating ip same time test = OK. It was OK 10 times in gating. | 20:53 |
| *** michchap has quit IRC | 20:55 | |
| *** amotoki has quit IRC | 20:56 | |
| *** amotoki has joined #openstack-dev | 20:58 | |
| *** rharwood has joined #openstack-dev | 20:59 | |
| *** READ10 has quit IRC | 21:00 | |
| *** dprince has quit IRC | 21:00 | |
| *** lorin1 has quit IRC | 21:01 | |
| *** egallen has joined #openstack-dev | 21:01 | |
| *** rfolco has quit IRC | 21:02 | |
| stevemar2 | ayoung: "I'm comfortable with trusts being a historical anecdote..." -Adam Young - https://etherpad.openstack.org/havana-external-auth | 21:02 |
| *** gongysh has joined #openstack-dev | 21:03 | |
| *** bswartz has quit IRC | 21:03 | |
| *** llu has quit IRC | 21:03 | |
| ayoung | stevemar2, note the ellipses | 21:03 |
| *** anniec has quit IRC | 21:03 | |
| *** llu has joined #openstack-dev | 21:03 | |
| *** mtreinis1 has joined #openstack-dev | 21:04 | |
| stevemar2 | so the sentence is not complete :P | 21:04 |
| *** crobertsrh is now known as _crobertsrh | 21:05 | |
| *** mtreinis2 has joined #openstack-dev | 21:05 | |
| *** bknudson1 has joined #openstack-dev | 21:05 | |
| *** egallen has quit IRC | 21:06 | |
| *** bknudson has quit IRC | 21:06 | |
| ayoung | stevemar2, yes, the complete quote included the concept of maintaining feature compatibility | 21:06 |
| *** pabelanger_ has joined #openstack-dev | 21:06 | |
| ayoung | stevemar2, but dolphm thought it was funny just to truncate the quote. | 21:07 |
| stevemar2 | dolphm would do something like that! | 21:07 |
| jog0 | dolphm: https://review.openstack.org/#/c/34650/ | 21:07 |
| *** emagana has joined #openstack-dev | 21:07 | |
| *** alexpilotti has quit IRC | 21:07 | |
| *** maurosr has quit IRC | 21:07 | |
| *** sushils has quit IRC | 21:07 | |
| *** mtreinish has quit IRC | 21:07 | |
| *** mtreinis1 has quit IRC | 21:08 | |
| *** dkranz has quit IRC | 21:08 | |
| *** maurosr has joined #openstack-dev | 21:08 | |
| *** mtreinis2 is now known as mtreinish | 21:09 | |
| *** sushils has joined #openstack-dev | 21:09 | |
| *** cmagina is now known as cmagina-away | 21:09 | |
| *** aelkikhia has joined #openstack-dev | 21:09 | |
| *** fbo is now known as fbo_away | 21:11 | |
| *** egallen has joined #openstack-dev | 21:11 | |
| *** rharwood has quit IRC | 21:11 | |
| *** mtreinis1 has joined #openstack-dev | 21:12 | |
| *** maurosr has quit IRC | 21:13 | |
| *** pabelanger has quit IRC | 21:13 | |
| *** bknudson has joined #openstack-dev | 21:13 | |
| *** nickbartos has quit IRC | 21:14 | |
| *** bknudson1 has quit IRC | 21:14 | |
| *** mtreinish has quit IRC | 21:15 | |
| *** aeperezt has quit IRC | 21:15 | |
| *** afazekas has quit IRC | 21:15 | |
| *** maurosr has joined #openstack-dev | 21:16 | |
| *** anniec has joined #openstack-dev | 21:16 | |
| *** cmagina-away is now known as cmagina | 21:18 | |
| *** otherwiseguy has quit IRC | 21:19 | |
| *** michchap has joined #openstack-dev | 21:21 | |
| *** dachary is now known as antoviaque | 21:22 | |
| *** antoviaque is now known as dachary | 21:22 | |
| *** sarob has quit IRC | 21:22 | |
| *** atiwari has joined #openstack-dev | 21:22 | |
| *** jayg is now known as jayg|g0n3 | 21:24 | |
| *** mtreinis1 has quit IRC | 21:24 | |
| *** mtreinish has joined #openstack-dev | 21:24 | |
| *** jecarey has quit IRC | 21:25 | |
| *** atiwari has quit IRC | 21:25 | |
| *** atiwari has joined #openstack-dev | 21:27 | |
| *** _TheDodd_ has quit IRC | 21:27 | |
| *** dvarga has quit IRC | 21:29 | |
| *** mlavalle has quit IRC | 21:29 | |
| *** mlavalle has joined #openstack-dev | 21:30 | |
| *** michchap has quit IRC | 21:32 | |
| *** neelashah has quit IRC | 21:32 | |
| *** cmark has joined #openstack-dev | 21:35 | |
| *** aelkikhia has left #openstack-dev | 21:36 | |
| *** cmark has quit IRC | 21:36 | |
| *** eharney has quit IRC | 21:39 | |
| *** martine_ has quit IRC | 21:41 | |
| *** pcm_ has quit IRC | 21:42 | |
| *** jasondotstar has quit IRC | 21:43 | |
| openstackgerrit | A change was merged to openstack/horizon: Sync pytz from requirements.txt https://review.openstack.org/36949 | 21:45 |
| openstackgerrit | A change was merged to openstack/horizon: Pinning minimum pbr and d2to1 versions https://review.openstack.org/36859 | 21:46 |
| openstackgerrit | A change was merged to openstack/horizon: Prompt for password on stack create. https://review.openstack.org/30382 | 21:46 |
| openstackgerrit | A change was merged to openstack/nova: Remove notify_on_any_change option https://review.openstack.org/35264 | 21:46 |
| openstackgerrit | A change was merged to openstack/horizon: Neutron Security Group native support https://review.openstack.org/36818 | 21:46 |
| openstackgerrit | A change was merged to openstack/cinder: Add unit tests for cinder/api/contrib/volume_actions. https://review.openstack.org/35766 | 21:46 |
| *** mrodden has quit IRC | 21:46 | |
| *** sarob has joined #openstack-dev | 21:46 | |
| *** MrDHat is now known as MrDHat|afk | 21:47 | |
| *** lbragstad has quit IRC | 21:47 | |
| *** jergerber has quit IRC | 21:49 | |
| *** dolphm has quit IRC | 21:51 | |
| *** nachi has quit IRC | 21:51 | |
| *** nachi_ has quit IRC | 21:51 | |
| openstackgerrit | A change was merged to openstack/cinder: Implement extend volume functionality in SolidFire https://review.openstack.org/36311 | 21:52 |
| openstackgerrit | A change was merged to openstack/neutron: Imported Translations from Transifex https://review.openstack.org/37116 | 21:52 |
| openstackgerrit | A change was merged to openstack/nova: Sync harmless changes from oslo-incubator https://review.openstack.org/36193 | 21:53 |
| *** colinmcnamara has joined #openstack-dev | 21:54 | |
| *** vipul is now known as vipul-away | 21:54 | |
| openstackgerrit | A change was merged to openstack/nova: Remove references to deprecated DnsMasqFilter https://review.openstack.org/35995 | 21:54 |
| openstackgerrit | A change was merged to openstack/tempest: Test Tokens - V3 https://review.openstack.org/34852 | 21:54 |
| openstackgerrit | A change was merged to openstack/tempest: Add large_ops scenario test https://review.openstack.org/36497 | 21:54 |
| *** sandywalsh has quit IRC | 21:54 | |
| *** vipul-away is now known as vipul | 21:54 | |
| *** dhellmann_ is now known as dhellmann | 21:55 | |
| *** eglynn has quit IRC | 21:55 | |
| *** mtreinish has quit IRC | 21:55 | |
| *** anniec has quit IRC | 21:56 | |
| *** sarob_ has joined #openstack-dev | 21:57 | |
| *** sarob has quit IRC | 21:58 | |
| *** comay has quit IRC | 21:58 | |
| *** sarob_ has quit IRC | 21:59 | |
| *** sarob has joined #openstack-dev | 21:59 | |
| *** michchap has joined #openstack-dev | 21:59 | |
| gongysh | dhellmann: hi | 22:00 |
| *** sungju has joined #openstack-dev | 22:00 | |
| *** mrodden has joined #openstack-dev | 22:00 | |
| *** lucas-hungry is now known as lucasagomes | 22:00 | |
| dhellmann | hi, gongysh | 22:00 |
| *** burt has quit IRC | 22:01 | |
| gongysh | dhellmann: https://review.openstack.org/#/c/35418/ | 22:01 |
| *** boris-42 has quit IRC | 22:01 | |
| *** anniec has joined #openstack-dev | 22:01 | |
| openstackgerrit | A change was merged to openstack/tempest: Using relative path for personality file in rebuild server test. https://review.openstack.org/35473 | 22:02 |
| openstackgerrit | A change was merged to openstack/tempest: Fix SSH host to floating IP from fixed IP https://review.openstack.org/36161 | 22:02 |
| openstackgerrit | A change was merged to openstack-infra/devstack-gate: Request for a pty in the ssh sessions https://review.openstack.org/36485 | 22:02 |
| *** salv-orlando has quit IRC | 22:02 | |
| gongysh | dhellmann: IMHO, the pyparsing is decided by cliff>=1.4 in requirement.txt | 22:02 |
| *** emagana has quit IRC | 22:02 | |
| dhellmann | gongysh: AFAICT, cmd2 0.6.4 does not require the right version of pyparsing | 22:02 |
| *** fifieldt has joined #openstack-dev | 22:03 | |
| *** jjmb has joined #openstack-dev | 22:03 | |
| dhellmann | looking at the commit log for cmd2, the change to pick up the right version of pyparsing came between 0.6.4 and 0.6.5, so you need 0.6.5 | 22:03 |
| dhellmann | now, it's possible that a newer cliff has a higher dependency on cmd2, but I haven't checked that | 22:04 |
| gongysh | by 0.6.5, you meam cmd2's version? | 22:04 |
| *** comay has joined #openstack-dev | 22:04 | |
| *** salv-orlando has joined #openstack-dev | 22:05 | |
| *** jjmb has quit IRC | 22:06 | |
| *** sarob_ has joined #openstack-dev | 22:06 | |
| dhellmann | gongysh: yes | 22:06 |
| *** roampune has joined #openstack-dev | 22:06 | |
| openstackgerrit | A change was merged to openstack/ceilometer: Allow to specify the endpoint type to use https://review.openstack.org/35490 | 22:06 |
| *** yamahata_ has quit IRC | 22:07 | |
| openstackgerrit | A change was merged to openstack/ceilometer: Use correct hostname to get instances. https://review.openstack.org/36635 | 22:07 |
| *** roampune has quit IRC | 22:07 | |
| dhellmann | gongysh: I'm looking at the cliff requirements list now, and it looks like I have an explicit rule for this, but I don't remember which version of cliff added that | 22:07 |
| gongysh | dhellmann: even cmd2 0.6.5.1, I can find pyparsing == 1.5.7 in its requries.txt | 22:08 |
| dhellmann | gongysh: that is, cliff explicitly looks at the python version and picks an appropriate version of pyparsing | 22:08 |
| gongysh | dhellmann: i have put it on my patch's commit msg. | 22:08 |
| gongysh | dhellmann: https://review.openstack.org/#/c/35418/ | 22:09 |
| dhellmann | gongysh: I'm just trying to be very very careful with this, because getting it wrong will break the gate | 22:09 |
| openstackgerrit | A change was merged to openstack/ceilometer: Use run-tests.sh for tox coverage tests https://review.openstack.org/36240 | 22:09 |
| gongysh | dhellmann: I understand | 22:10 |
| *** vipul is now known as vipul-away | 22:10 | |
| gongysh | dhellmann: so what is your opinion about my patch? | 22:11 |
| *** jasdeepH has quit IRC | 22:11 | |
| *** sandywalsh has joined #openstack-dev | 22:11 | |
| dhellmann | your commit message says that cmd>=0.6.4 requires pyparsing==1.5.7 and I cannot find any evidence of that | 22:11 |
| *** atiwari has quit IRC | 22:11 | |
| *** changbl has quit IRC | 22:11 | |
| *** michchap has quit IRC | 22:12 | |
| gongysh | dhellmann: first , liff requires pyparsing == 1.5.7 | 22:12 |
| dhellmann | well, yes, but the commit message is wrong so I had to track that down to verify it | 22:12 |
| dhellmann | so at the very least I think you need to change the commit message | 22:13 |
| gongysh | dhellmann: second cliff(>1.4) requires cmd2 >=0.6.4, which requires pyparsing == 1.5.7 too. | 22:13 |
| dhellmann | here is the setup.py for cmd2 0.6.4: https://bitbucket.org/catherinedevlin/cmd2/src/c4c35f002aef31d9e49b5306c5a1995eb690ab85/setup.py?at=0.6.4 | 22:13 |
| dhellmann | gongysh: no, that is not true. cmd2==0.6.4 requires pyparsing >= 1.5.6 but does not handle the fact that pyparsing 2.0.0 does not work with python 2, and will therefore allow pyparsing 2 to be installed and break things | 22:14 |
| *** galstrom is now known as galstrom_zzz | 22:14 | |
| *** sarob_ has quit IRC | 22:16 | |
| dhellmann | gongysh: see my comment on the review | 22:16 |
| *** mlavalle has quit IRC | 22:17 | |
| *** eharney has joined #openstack-dev | 22:18 | |
| *** gyee has quit IRC | 22:21 | |
| *** mestery_ has joined #openstack-dev | 22:21 | |
| *** prad_ has quit IRC | 22:22 | |
| *** lucasagomes has quit IRC | 22:22 | |
| *** mestery has quit IRC | 22:23 | |
| gongysh | dhellmann: i am trying to pip install cmd2 == 0.6.4 to see its requires.txt, yes, it is pyparsing >=1.5.6. | 22:24 |
| *** jhesketh has joined #openstack-dev | 22:24 | |
| *** cmark has joined #openstack-dev | 22:24 | |
| *** FunnyLookinHat has quit IRC | 22:24 | |
| zackf | if anyone has time could someone give my neutron patch a once over? https://review.openstack.org/#/c/37098/ :) | 22:24 |
| dhellmann | gongysh: yep. we changed cliff and cmd2 the week pyparsing 2 was released because the openstack gates started failing. | 22:25 |
| *** vipul-away is now known as vipul | 22:25 | |
| *** pabelanger_ has quit IRC | 22:27 | |
| *** dhellmann is now known as dhellmann_ | 22:27 | |
| *** pabelanger has joined #openstack-dev | 22:28 | |
| gongysh | dhellmann: I have removed the version about cmd2 on the patch commit msg just now. | 22:29 |
| gongysh | dhellmann_: can u have a look at the patch now? | 22:29 |
| *** cmark has quit IRC | 22:31 | |
| gongysh | salv-orlando: ping | 22:33 |
| *** henrynash has quit IRC | 22:34 | |
| *** markmcclain has quit IRC | 22:34 | |
| *** jasdeepH has joined #openstack-dev | 22:35 | |
| *** sarob has quit IRC | 22:35 | |
| *** sarob has joined #openstack-dev | 22:36 | |
| *** terryh has quit IRC | 22:36 | |
| *** yolanda_ has quit IRC | 22:36 | |
| *** SergeyLukjanov has quit IRC | 22:37 | |
| *** michchap has joined #openstack-dev | 22:38 | |
| *** sarob has quit IRC | 22:40 | |
| *** NetworkStatic has quit IRC | 22:41 | |
| *** sarob has joined #openstack-dev | 22:41 | |
| *** cmark has joined #openstack-dev | 22:42 | |
| *** bswartz has joined #openstack-dev | 22:42 | |
| *** woodspa has quit IRC | 22:42 | |
| dhellmann_ | gongysh: +1 | 22:42 |
| gongysh | dhellmann_: haha, I am expecting +2 | 22:43 |
| *** cmark has quit IRC | 22:43 | |
| dhellmann_ | gongysh: I don't have +2 on neutron client :-/ | 22:43 |
| *** cmark has joined #openstack-dev | 22:43 | |
| *** datsun180b has quit IRC | 22:44 | |
| gongysh | dhellmann_: ask markmcclain for it. :) | 22:44 |
| dhellmann_ | gongysh: if I did that he might give it to me! :-) | 22:44 |
| gongysh | dhellmann_: thanks for your professional comment. | 22:44 |
| dhellmann_ | gongysh: thank you for your patience | 22:45 |
| *** gyee has joined #openstack-dev | 22:48 | |
| *** rcleere has quit IRC | 22:48 | |
| *** michchap has quit IRC | 22:49 | |
| *** rfolco has joined #openstack-dev | 22:50 | |
| *** Tross has quit IRC | 22:51 | |
| *** cmark has quit IRC | 22:52 | |
| *** krtaylor_ has quit IRC | 22:53 | |
| *** tzumainn has quit IRC | 22:53 | |
| *** safchain has quit IRC | 22:54 | |
| *** sarob has quit IRC | 22:57 | |
| *** sarob has joined #openstack-dev | 22:58 | |
| *** pcm_ has joined #openstack-dev | 22:58 | |
| *** pcm_ has quit IRC | 22:58 | |
| *** wcmarsha_ has quit IRC | 22:59 | |
| *** pcm__ has joined #openstack-dev | 22:59 | |
| *** sudorandom has quit IRC | 23:00 | |
| openstackgerrit | A change was merged to openstack/nova: Hypervisor uptime fails if service is disabled https://review.openstack.org/34757 | 23:00 |
| morganfainberg | gyee: ping | 23:00 |
| openstackgerrit | A change was merged to openstack/nova: Fix compatibility with older confirm_resize() calls https://review.openstack.org/35186 | 23:01 |
| gyee | here | 23:01 |
| openstackgerrit | A change was merged to openstack/neutron: Fix random OverflowError exceptions in gate-neutron-python26 tests https://review.openstack.org/37107 | 23:01 |
| morganfainberg | gyee: hey, was looking over the changes for abstracting out the V3 token providers from the token drivers. | 23:01 |
| morganfainberg | gyee: it looks like somehow the memcache driver nolonger returns PKI tokens, only UUID | 23:02 |
| morganfainberg | gyee: was that an intentional change? or some side effect? (just at the early stages of digging) | 23:02 |
| *** sarob has quit IRC | 23:02 | |
| morganfainberg | If it wasn't intentional, I'll take that tack and figure out what is different, but if it was intentional … makes it less curious | 23:03 |
| gyee | morganfainberg, token provider should not affect persistence | 23:03 |
| morganfainberg | gyee: ok so a legitimate bug. cool. I know what i'm looking for now :) | 23:03 |
| morganfainberg | thanks :) | 23:03 |
| gyee | what was the problem? | 23:03 |
| gyee | related by my changes? | 23:04 |
| morganfainberg | well, with PKI tokens enabled, the memcache driver seems to only ever return the unique_id (cms.unique_id) form of the token id | 23:04 |
| *** redbeard2 has quit IRC | 23:04 | |
| morganfainberg | vs. how SQL returns the large-PKI looking string | 23:05 |
| gyee | ah, yes, I move the unique_id code to the manager | 23:05 |
| morganfainberg | right. | 23:05 |
| gyee | morganfainberg, it should be consistent across the board | 23:05 |
| morganfainberg | i'll 2x check. | 23:05 |
| gyee | should be unique_id | 23:05 |
| morganfainberg | hrm, so we're not using the middleware to deconstruct the pki tokens now? | 23:06 |
| gyee | deconstruct? | 23:07 |
| morganfainberg | or am i missing a fundamental change where we're only ever passing the unique_id (short-form) token id to the clients | 23:07 |
| morganfainberg | in folsom and grizzly pki tokens were very large. | 23:07 |
| morganfainberg | in the X-auth-token header passed | 23:07 |
| morganfainberg | since they contained all of the token data. | 23:08 |
| morganfainberg | hold on one sec. | 23:08 |
| *** gmurphy has quit IRC | 23:09 | |
| *** donaldh has quit IRC | 23:09 | |
| morganfainberg | gyee: ok, so with the V3 Auth Token Providers, the X-Auth-Token is always something like this: "8bca45c442ee4d9ef8dd5dc4e8171c32" | 23:11 |
| gyee | is provider set to pki provider? | 23:11 |
| morganfainberg | gyee: previously, PKI tokens would look something more like:MIIMUQYJKoZIhvcNAQcCoIIMQjCCDD4CAQExCTAHBgUrDgM<…TOKEN DATA REMOVED ...>Pw== | 23:12 |
| morganfainberg | yes it is | 23:12 |
| morganfainberg | verified. | 23:12 |
| morganfainberg | iirc: the reason there was so much data passed in grizzly and folsom, was so that a middleware could auth the token w/o needing to refer to keystone each time | 23:13 |
| *** MIDENN_ has quit IRC | 23:13 | |
| morganfainberg | i am wondering if it is intentional to only ever pass the short ID (whcih i think means all tokens are only validated by keystone) | 23:14 |
| morganfainberg | instead of being able to be validated by the middle-ware | 23:14 |
| gyee | morganfainberg, give me a min, I am trying locally | 23:15 |
| *** gmurphy has joined #openstack-dev | 23:15 | |
| morganfainberg | gyee: yeah i am trying in a recent devstack (stacked this morning) | 23:15 |
| *** wcmarsha_ has joined #openstack-dev | 23:15 | |
| morganfainberg | it | 23:15 |
| *** michchap has joined #openstack-dev | 23:15 | |
| morganfainberg | 's not a huge deal, just seems like we're not passing the same data. and if it is, in-fact unintentional, I'll get working on a fix for it :) | 23:16 |
| *** sarob has joined #openstack-dev | 23:16 | |
| *** hemna is now known as hemnafk | 23:22 | |
| *** pcm__ has quit IRC | 23:24 | |
| *** markwash has quit IRC | 23:25 | |
| morganfainberg | gyee: i think i see what happened. I can fix it really quickly. | 23:27 |
| *** michchap has quit IRC | 23:27 | |
| gyee | morganfainberg, what was the issue? | 23:28 |
| morganfainberg | when you do a "get_token" on a PKI token, it shouldn't return the short-cms_hash | 23:28 |
| morganfainberg | the cms_hash should only be used by the persistence driver | 23:29 |
| morganfainberg | so we can do efficient lookups (similar in length to UUID token ids) | 23:29 |
| gyee | ah | 23:29 |
| morganfainberg | i'll get this reported and a quick fix in tomorrow | 23:30 |
| morganfainberg | it'll also let me fix a minor bug in the memcache token driver. | 23:30 |
| morganfainberg | well, you already fixed it with the new provider code now that i look at ti. | 23:30 |
| *** salv-orlando has quit IRC | 23:31 | |
| *** lloydde has quit IRC | 23:31 | |
| gyee | morganfainberg, I do see the PKI token in the X-Auth-Token header | 23:31 |
| morganfainberg | hrm. the whole PKI token? | 23:31 |
| gyee | yes | 23:31 |
| morganfainberg | strange | 23:31 |
| morganfainberg | i'm getting something totally different | 23:32 |
| morganfainberg | but the SQL db shows PKI tokens | 23:32 |
| *** egallen has quit IRC | 23:32 | |
| *** amerine has quit IRC | 23:32 | |
| *** salv-orlando has joined #openstack-dev | 23:32 | |
| morganfainberg | ok, i'll poke at my setup and see if something strange is going on here. | 23:33 |
| gyee | http://paste.openstack.org/show/40484/ | 23:33 |
| *** armax has quit IRC | 23:33 | |
| gyee | are you using V2 or V3 API? | 23:33 |
| morganfainberg | oh, pheh, is this a v2 vs v3 issue? | 23:33 |
| morganfainberg | might be using v2. | 23:34 |
| *** cmark has joined #openstack-dev | 23:34 | |
| gyee | v2 patch hasn't merged yet | 23:34 |
| morganfainberg | ahhh | 23:34 |
| morganfainberg | well, wait. | 23:34 |
| morganfainberg | "id": "053be122cae7465f93a61ac310fe9d1c"= | 23:34 |
| morganfainberg | in your paste. | 23:34 |
| morganfainberg | i see X-Subject-Token | 23:34 |
| morganfainberg | are we extracting from the JSON token-id? | 23:35 |
| *** alexxu has quit IRC | 23:35 | |
| *** cmark has quit IRC | 23:35 | |
| gyee | no, for v3, token_id goes to X-Subject-Token header | 23:35 |
| morganfainberg | ah | 23:35 |
| morganfainberg | hrm. | 23:35 |
| morganfainberg | must be horizon and such using v2.0 | 23:36 |
| morganfainberg | then | 23:36 |
| *** tzumainn has joined #openstack-dev | 23:36 | |
| morganfainberg | ok, i think i see a bug in the memcache driver, but that explains what is going on here. | 23:36 |
| morganfainberg | sorry. | 23:36 |
| gyee | morganfainberg, we do not store the PKI token in backend afaik | 23:37 |
| morganfainberg | gyee: we do. since you need to be able to validate/revoke | 23:37 |
| gyee | we store the hash of it | 23:37 |
| morganfainberg | if you don't store them, you can't do a revocation. | 23:37 |
| morganfainberg | nope, we store the whole token. | 23:37 |
| *** armax has joined #openstack-dev | 23:38 | |
| morganfainberg | both in SQL and in memcache at least for now | 23:38 |
| gyee | really? what for? | 23:38 |
| gyee | you don't need to whole thing for revocation right? | 23:38 |
| *** armax has quit IRC | 23:38 | |
| morganfainberg | well, we shouldn't. but we do at the moment. | 23:39 |
| morganfainberg | that is a bigger conversation termie, ayoung, and I all had earlier on | 23:39 |
| gyee | morganfainberg, the good news is that token provider is now pluggable!!! | 23:40 |
| morganfainberg | gyee: Yep! | 23:40 |
| gyee | which means we can customize it anyway we want | 23:40 |
| morganfainberg | gyee: exactly, and actually should be easy to break the dependancy to need the whole PKI token. | 23:40 |
| *** terryh has joined #openstack-dev | 23:40 | |
| *** armax has joined #openstack-dev | 23:42 | |
| *** armax has quit IRC | 23:43 | |
| *** dosaboy has quit IRC | 23:43 | |
| morganfainberg | gyee: actually, not it wont be easy. Revocations require the knowledge (in some cases) of user->role/user-tenant/user-group relationships. And keystone holds the authoritative list of revoked tokens. Keystone needs the whole token data to know if it should be revoked when a modification of the user/user-relationship occurs | 23:44 |
| openstackgerrit | A change was merged to openstack/trove: Migrating the create/resize code to use flavor obj https://review.openstack.org/36715 | 23:45 |
| gyee | morganfainberg, token data still there | 23:45 |
| *** dosaboy has joined #openstack-dev | 23:45 | |
| morganfainberg | gyee: in the hash? | 23:45 |
| gyee | we just don't store the PKI token ID | 23:45 |
| morganfainberg | no. | 23:45 |
| morganfainberg | if you change a user's role in a project, you need to revoke all tokens currently active for that user/project combo | 23:45 |
| gyee | right | 23:46 |
| morganfainberg | oh, oh, the cms_hash you mean | 23:46 |
| openstackgerrit | A change was merged to openstack/trove: Add service_type to the instances table https://review.openstack.org/36959 | 23:46 |
| morganfainberg | yeah yeah. | 23:46 |
| gyee | right, we store the cms_hash and token data | 23:46 |
| morganfainberg | there is still a bug i found. | 23:46 |
| morganfainberg | it's minor | 23:46 |
| morganfainberg | i think | 23:47 |
| morganfainberg | right, but we're on the same page. | 23:47 |
| *** yjiang5 is now known as yjiang5_away | 23:48 | |
| gyee | morganfainberg, we don't create bugs, only "undocumented features" :) | 23:48 |
| morganfainberg | gyee: hehe. true that | 23:48 |
| *** amerine has joined #openstack-dev | 23:50 | |
| *** dosaboy has quit IRC | 23:50 | |
| *** emagana has joined #openstack-dev | 23:50 | |
| *** tzumainn has quit IRC | 23:50 | |
| gyee | morganfainberg, v2 looks fine too http://paste.openstack.org/show/40485/ | 23:51 |
| morganfainberg | gyee: yeah i looked at your pending review. | 23:51 |
| *** jasondotstar has joined #openstack-dev | 23:51 | |
| morganfainberg | gyee: no issues. | 23:51 |
| *** dosaboy_ has joined #openstack-dev | 23:51 | |
| morganfainberg | i was getting crossed information because horizon and the other tools i'm using seemed to lock to v2.0 | 23:52 |
| gyee | oh ok | 23:52 |
| morganfainberg | it was a v2.0 vs v3 between two patchsets issue ;) | 23:52 |
| gyee | uh ah | 23:53 |
| morganfainberg | and it looks like the other "feature" was just my not realizing i was missing 1/2 the changes ;) | 23:53 |
| morganfainberg | gyee: i get it now. and everytthing looks good. thanks | 23:54 |
| *** martine has joined #openstack-dev | 23:54 | |
| morganfainberg | I think i'm going to have stern words with my devstack… | 23:54 |
| gyee | morganfainberg, nice | 23:54 |
| *** martine is now known as Guest36791 | 23:54 | |
| *** terryh has quit IRC | 23:55 | |
| *** michchap has joined #openstack-dev | 23:55 | |
| *** diogogmt has quit IRC | 23:56 | |
| *** sarob_ has joined #openstack-dev | 23:59 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!