| *** datsun180b has quit IRC | 00:02 | |
| lcheng | jamielennox: thanks for taking care of that! | 00:03 |
|---|---|---|
| jamielennox | lcheng: I should have thought of it initially, thanks for catching it before a release | 00:03 |
| *** reed has quit IRC | 00:03 | |
| lcheng | jamielennox: no worries, glad we catch it before release. | 00:05 |
| jamielennox | lcheng: https://review.openstack.org/#/c/43020/ | 00:11 |
| *** alexb_ has quit IRC | 00:12 | |
| lcheng | jamielennox: thanks, will look at it. | 00:12 |
| *** anniec has quit IRC | 00:12 | |
| *** jimfehlig has quit IRC | 00:16 | |
| *** yjiang51 has left #openstack-dev | 00:17 | |
| *** asalkeld has quit IRC | 00:18 | |
| *** tjones has joined #openstack-dev | 00:19 | |
| *** lexinator has quit IRC | 00:22 | |
| *** alunch has quit IRC | 00:22 | |
| *** feleouet has quit IRC | 00:23 | |
| *** asalkeld has joined #openstack-dev | 00:23 | |
| stevemar | jamielennox: replied to your comment about oauth in keystoneclient! | 00:26 |
| *** feleouet has joined #openstack-dev | 00:27 | |
| jamielennox | stevemar: ok, that makes sense - i didn't do much looking through the actual code just went to check out the library and saw that | 00:27 |
| stevemar | jamielennox: cool, thanks for doing that, i appreciate the thoroughness! | 00:28 |
| *** otherwiseguy has joined #openstack-dev | 00:28 | |
| *** jog0-away is now known as jog0 | 00:28 | |
| *** devoid has quit IRC | 00:29 | |
| *** nati_ueno has quit IRC | 00:30 | |
| stevemar | jamielennox: nice job on trusts btw! | 00:31 |
| jamielennox | stevemar: that was all ayoung | 00:31 |
| stevemar | jamielennox: but you did the client work :O | 00:32 |
| *** mars has joined #openstack-dev | 00:32 | |
| *** mars has quit IRC | 00:32 | |
| jamielennox | stevemar: nope shardy_afk | 00:32 |
| jamielennox | i actually had a trusts patch for keystoneclient that was incomplete when he posted that but that's godo | 00:33 |
| stevemar | jamielennox: d'oh, you are right, was shardy! | 00:33 |
| stevemar | you've been doing so much for keystoneclient, i just figured it was you =\ | 00:34 |
| *** aeperezt has quit IRC | 00:36 | |
| *** aeperezt has joined #openstack-dev | 00:37 | |
| *** yuan has joined #openstack-dev | 00:39 | |
| *** fabio has joined #openstack-dev | 00:41 | |
| morganfainberg | annd oh joy | 00:41 |
| morganfainberg | hrmm | 00:41 |
| *** Ruetobas has quit IRC | 00:42 | |
| *** gordc has quit IRC | 00:42 | |
| fabio | stevemar: can you please review the OS-EP-FILTER? | 00:42 |
| stevemar | fabio: i did say that I would, didn't i? :) | 00:42 |
| fabio | stevemar: yes, it is in the meeting minutes :-) | 00:43 |
| stevemar | damn, now it's on record too! | 00:43 |
| fabio | stevemar: if you have time I would appreciate it | 00:43 |
| stevemar | np, i'll do it now | 00:43 |
| gyee | help the brother out :) | 00:44 |
| *** tjones has quit IRC | 00:45 | |
| *** woodspa has joined #openstack-dev | 00:45 | |
| *** eharney has quit IRC | 00:46 | |
| stevemar | fabio: https://review.openstack.org/#/c/33118/21/keystone/contrib/endpoint_filter/controllers.py | 00:47 |
| stevemar | fabio: my 2nd comment | 00:48 |
| stevemar | fabio: i think you can get rid of the None check, and the raise | 00:48 |
| *** gordc has joined #openstack-dev | 00:48 | |
| stevemar | fabio: it's in a few places, not just there, | 00:49 |
| stevemar | gyee might be able to say with more certainty :) | 00:49 |
| *** alexb_ has joined #openstack-dev | 00:49 | |
| fabio | stevemar: I didn't do it because my line of thinking that in general extensions may need to handle core exceptions | 00:49 |
| fabio | for instance if a project is not found it may go and delete all the ep associations with that project | 00:50 |
| *** lexinator has joined #openstack-dev | 00:50 | |
| stevemar | fabio: alright, i guess it doesn't hurt | 00:50 |
| fabio | stevemar: I haven't implemented, but I don't know if you see my point .. | 00:50 |
| fabio | stevemar: I am actually working on a new approach to better isolate extensions and get events to sync them with core changes | 00:51 |
| stevemar | fabio: 2 nits, really minor things. | 00:52 |
| *** otherwiseguy has quit IRC | 00:52 | |
| *** portante has quit IRC | 00:53 | |
| *** lon has quit IRC | 00:54 | |
| gyee | stevemar, y're right, backend will raise a NotFound exception | 00:54 |
| *** lon has joined #openstack-dev | 00:54 | |
| stevemar | fabio: just a heads up, i still think the extension shouldn't be in any of the pipelines by default | 00:54 |
| *** portante has joined #openstack-dev | 00:54 | |
| *** jayg|g0n3 has quit IRC | 00:54 | |
| *** bcrochet has quit IRC | 00:54 | |
| *** lbragstad has joined #openstack-dev | 00:54 | |
| stevemar | fabio: dolphm slammed me for that with the oauth extension :) | 00:54 |
| *** jayg|g0n3 has joined #openstack-dev | 00:54 | |
| jamielennox | stevemar: extensions in the pipeline? are they normally controlled that way? | 00:55 |
| *** bcrochet has joined #openstack-dev | 00:56 | |
| stevemar | jamielennox, i meant extensions in the pipeline for keystone.conf.sample | 00:56 |
| jamielennox | stevemar: i know, i didn't realize they were enabled that way - i just assumed there would have been a config enable or something | 00:57 |
| stevemar | jamielennox, i think if you want to make an extension available in your keystone you have to add it to the pipeline - right? | 00:57 |
| *** feleouet has quit IRC | 00:57 | |
| jamielennox | it's a bit ugly as extensions aren't really middleware - an issue for post havana though | 00:58 |
| stevemar | jamielennox, don't think so, when I didn't have the extension in the pipeline, i would get 404'd | 00:58 |
| *** zul has joined #openstack-dev | 00:59 | |
| jamielennox | yea, i don't think you're wrong i've just never really looked | 00:59 |
| *** tjones has joined #openstack-dev | 00:59 | |
| stevemar | jamielennox, i found that a bit cryptic when first looking at it... because s3 and ec2 are added to the pipeline by default | 00:59 |
| stevemar | while others aren't | 01:00 |
| * stevemar shrugs | 01:00 | |
| gyee | stevemar, jamielennox, because we don't have a standard for writing extensions | 01:01 |
| stevemar | gyee: i noticed that :) | 01:01 |
| *** feleouet has joined #openstack-dev | 01:02 | |
| jamielennox | and i thought that implementing that extensions discovery API was going to be simple :( | 01:02 |
| stevemar | jamielennox we'll back you up :) | 01:02 |
| gyee | jamielennox, yeah, its more scary then ya think | 01:02 |
| gyee | we really don't have a framework from extension code isolation | 01:03 |
| gyee | s/from/for/ | 01:03 |
| stevemar | gyee: ayoung sql migration change really helped a lot | 01:03 |
| gyee | stevemar, sql migration isolation is a good start | 01:03 |
| *** schwicht has quit IRC | 01:04 | |
| jamielennox | i'm not sure how much isolation we need to provide, but i do suddenly realize if they want to be registered at certain URLs it's going to be a PITA | 01:04 |
| jamielennox | there's a library that came out of ceilometer i think called stevedore for loading plugins that looks good, which i think means we could do discovery and loading via config file | 01:05 |
| jamielennox | cross that bridge when we come to it i guess | 01:06 |
| *** rfolco has quit IRC | 01:06 | |
| gyee | jamielennox, discover via API or file scanning? | 01:07 |
| jamielennox | you specify entry points into setup.py, then somehow reference them within the config file | 01:07 |
| jamielennox | so it means extensions could properly be loaded even if they exist outside the keystone package | 01:08 |
| jamielennox | gyee: which is to say discovering extensions from files rather than API | 01:08 |
| jamielennox | however the API itself is not complicated on top of that (fingers crossed) | 01:09 |
| gyee | jamielennox, don't even have to be setup.py, just desinate a special dir for the extensions | 01:10 |
| gyee | and have the extensions put a symlink there | 01:10 |
| jamielennox | gyee, sure but this lets you develop extensions out of tree and still have them play nice without having to link or anything | 01:11 |
| *** anteaya has quit IRC | 01:11 | |
| *** tjones has quit IRC | 01:12 | |
| morganfainberg | fabio: ping | 01:12 |
| gyee | jamielennox, is there a bp or etherpad I can take a look? | 01:14 |
| jamielennox | gyee: no, that's about as far as i had thought about it. i looked up stevedore as it's in this apiclient for getting auth plugins | 01:16 |
| jamielennox | gyee: docs are interesting and not that long: http://stevedore.readthedocs.org/en/latest/ | 01:16 |
| fabio | morganfainberg: yes | 01:16 |
| morganfainberg | fabio: with regards to the endpoint_filter, is the driver meant to raise exceptions, or is the controller (e.g. endpoint not found)? | 01:17 |
| morganfainberg | fabio: it seems like you have the docstrings indicating that the driver methods should | 01:17 |
| morganfainberg | fabio: but the raises are in the controller methods. | 01:17 |
| fabio | morganfainberg: the ProjectNotFound and EndpointNotFound are coming from core | 01:18 |
| *** IniMe has joined #openstack-dev | 01:19 | |
| morganfainberg | ok, so the backend driver is meant to do the raise (e.g. keystone.contrib.endpoint_filter.backens.sql | 01:19 |
| morganfainberg | in the implementation of say check_endpoint_in_project? | 01:19 |
| fabio | morganfainberg: right. These are under the extension control | 01:20 |
| fabio | morganfainberg: but it is not correct to do this from the controller so then I am abstracted from the backend? | 01:21 |
| fabio | morganfainberg: at least this is my understanding | 01:21 |
| morganfainberg | fabio: well, it's fine if the controller does the raising, but the driver shouldn't document that it raises the exception | 01:21 |
| fabio | ok, got it | 01:21 |
| morganfainberg | it also matters if associated code talks directly to the endpoint_filter_api or only through the controller | 01:22 |
| fabio | morganfainberg: ok, so I will remove it from the docs in the Manager | 01:23 |
| morganfainberg | i'll put some comments in regarding this. | 01:23 |
| *** Ruetobas has joined #openstack-dev | 01:24 | |
| morganfainberg | and you can update as needed. | 01:24 |
| fabio | morganfainberg: ok, thanks | 01:24 |
| morganfainberg | sure, i jsut wanted to make sure my comments were directed in the right way. | 01:24 |
| morganfainberg | because if you intended the driver to do the work, it changes the comment :) | 01:25 |
| *** eharney has joined #openstack-dev | 01:25 | |
| fabio | morganfainberg: well, I think the right place for the exceptions related to core is on the controller | 01:25 |
| fabio | otherwise you will need to replicate the code for every backend you implement | 01:26 |
| morganfainberg | fabio: you could also put that logic in the manager | 01:26 |
| morganfainberg | fabio: the methods on the manager are called if they exist, which in turn should call / return self.driver.<method> | 01:26 |
| *** freedomhui has joined #openstack-dev | 01:26 | |
| morganfainberg | fabio: i'll take a close look at how it all comes together and leave a recommendation if it's different than what we discussed here | 01:27 |
| *** topshare has joined #openstack-dev | 01:27 | |
| *** rods1 has quit IRC | 01:27 | |
| morganfainberg | fabio: this is a really nice feature add btw, i like the concept of associating endpoints to projects. | 01:28 |
| fabio | morganfainberg: thanks | 01:28 |
| *** noslzzp has joined #openstack-dev | 01:28 | |
| morganfainberg | erm vice versa :P but you know what i meant. | 01:28 |
| *** Ruetobas has quit IRC | 01:29 | |
| *** gyee has quit IRC | 01:30 | |
| *** Ruetobas has joined #openstack-dev | 01:34 | |
| *** feleouet has quit IRC | 01:34 | |
| *** briancurtin has joined #openstack-dev | 01:34 | |
| *** zul has quit IRC | 01:36 | |
| *** aeperezt has quit IRC | 01:36 | |
| *** gordc has quit IRC | 01:36 | |
| *** bknudson has quit IRC | 01:37 | |
| *** feleouet has joined #openstack-dev | 01:37 | |
| *** ayoung has joined #openstack-dev | 01:37 | |
| *** danwent has quit IRC | 01:37 | |
| *** xmltok has quit IRC | 01:38 | |
| *** jjmb has joined #openstack-dev | 01:38 | |
| *** tjones has joined #openstack-dev | 01:39 | |
| *** erkules_ has joined #openstack-dev | 01:41 | |
| *** vkmc has quit IRC | 01:41 | |
| *** Tross has quit IRC | 01:41 | |
| *** hailiang has joined #openstack-dev | 01:42 | |
| *** erkules has quit IRC | 01:43 | |
| *** otherwiseguy has joined #openstack-dev | 01:45 | |
| *** rwsu is now known as rwsu-away | 01:47 | |
| *** Ruetobas has quit IRC | 01:50 | |
| *** alexb_ has quit IRC | 01:50 | |
| *** gordc has joined #openstack-dev | 01:51 | |
| *** tjones has quit IRC | 01:51 | |
| *** Ruetobas has joined #openstack-dev | 01:53 | |
| *** ftcjeff has joined #openstack-dev | 01:53 | |
| *** benonsoftware has quit IRC | 01:54 | |
| *** sudorandom has joined #openstack-dev | 01:58 | |
| *** d34dh0r53 has joined #openstack-dev | 01:59 | |
| *** lbragstad has quit IRC | 02:00 | |
| *** d34dh0r53 has quit IRC | 02:01 | |
| *** stevemar has quit IRC | 02:01 | |
| *** gongysh has joined #openstack-dev | 02:02 | |
| *** martine has joined #openstack-dev | 02:03 | |
| *** martine is now known as Guest92149 | 02:03 | |
| *** markwash has joined #openstack-dev | 02:04 | |
| *** zul has joined #openstack-dev | 02:05 | |
| *** freedomhui has quit IRC | 02:05 | |
| *** markmcclain has quit IRC | 02:06 | |
| *** lexinator has quit IRC | 02:07 | |
| *** tjones has joined #openstack-dev | 02:09 | |
| *** Guest92149 has quit IRC | 02:09 | |
| *** feleouet has quit IRC | 02:09 | |
| *** sudorandom has left #openstack-dev | 02:11 | |
| *** hidepark has joined #openstack-dev | 02:12 | |
| *** armax has joined #openstack-dev | 02:13 | |
| *** feleouet has joined #openstack-dev | 02:13 | |
| *** armax has quit IRC | 02:16 | |
| *** jhesketh__ has quit IRC | 02:18 | |
| *** jhesketh_ has joined #openstack-dev | 02:19 | |
| *** jbresnah has joined #openstack-dev | 02:19 | |
| *** topshare has quit IRC | 02:22 | |
| dolphm_ | simo: ayoung: around? | 02:24 |
| *** eharney has quit IRC | 02:26 | |
| morganfainberg | dolphm_: have a good evening man. catch ya tomorrow . | 02:26 |
| dolphm_ | morganfainberg: o/ | 02:26 |
| dolphm_ | jamielennox: and to correct gyee above, we certainly do have a 'framework' for "extension isolation." that's exactly what the wsgi pipeline accomplishes! | 02:27 |
| *** basha has joined #openstack-dev | 02:27 | |
| dolphm_ | jamielennox: an extension should intercept calls to GET /extensions and append itself to the response | 02:28 |
| *** eharney has joined #openstack-dev | 02:28 | |
| *** sudorandom has joined #openstack-dev | 02:28 | |
| jamielennox | dolphm_: ok, i wasn't sure if that was intentional or just kind of grew out that way | 02:28 |
| dolphm_ | jamielennox: by design from day 1 | 02:28 |
| dolphm_ | jamielennox: trusts was a mistake to merge because it couldn't have set a worse precedent for extension implementations | 02:29 |
| *** otherwiseguy has quit IRC | 02:30 | |
| jamielennox | dolphm_: my definition of what is in the pipeline has always been middleware that passes the request along. But it can obviously just answer it | 02:30 |
| jamielennox | dolphm_: agreed, trusts should never have lived where it does | 02:30 |
| *** Ruetobas has quit IRC | 02:30 | |
| *** basha has quit IRC | 02:30 | |
| *** sudorandom_ has joined #openstack-dev | 02:30 | |
| jamielennox | or indeed worked as it does | 02:30 |
| *** sudorandom_ has quit IRC | 02:31 | |
| jamielennox | these things are always obvious in hindsight | 02:31 |
| *** yaguang has joined #openstack-dev | 02:34 | |
| *** Ruetobas has joined #openstack-dev | 02:35 | |
| *** shang has joined #openstack-dev | 02:35 | |
| *** morganfainberg is now known as morganfainberg|a | 02:36 | |
| *** Tross has joined #openstack-dev | 02:37 | |
| *** adalbas has quit IRC | 02:37 | |
| *** Mandell has quit IRC | 02:38 | |
| *** xchu has joined #openstack-dev | 02:39 | |
| *** rcleere has joined #openstack-dev | 02:40 | |
| *** tjones has quit IRC | 02:42 | |
| *** jasdeepH has quit IRC | 02:44 | |
| *** otherwiseguy has joined #openstack-dev | 02:45 | |
| *** feleouet has quit IRC | 02:45 | |
| *** markwash has quit IRC | 02:46 | |
| *** feleouet has joined #openstack-dev | 02:49 | |
| *** jasdeepH has joined #openstack-dev | 02:51 | |
| *** kushal has joined #openstack-dev | 02:51 | |
| *** Farooque has joined #openstack-dev | 02:51 | |
| *** jhesketh has quit IRC | 02:52 | |
| *** melwitt1 has quit IRC | 02:52 | |
| *** markwash has joined #openstack-dev | 02:53 | |
| *** jhesketh has joined #openstack-dev | 02:57 | |
| *** Farooque has quit IRC | 02:57 | |
| *** Farooque has joined #openstack-dev | 02:58 | |
| *** novas0x2a|laptop has quit IRC | 02:58 | |
| *** dims has quit IRC | 03:00 | |
| *** kushal has quit IRC | 03:03 | |
| *** jog0 is now known as jog0-away | 03:04 | |
| *** Tross has quit IRC | 03:05 | |
| *** woodspa has quit IRC | 03:06 | |
| *** basha has joined #openstack-dev | 03:10 | |
| *** Ruetobas has quit IRC | 03:10 | |
| *** Farooque has quit IRC | 03:11 | |
| *** Farooque has joined #openstack-dev | 03:12 | |
| *** Ruetobas has joined #openstack-dev | 03:12 | |
| *** basha has quit IRC | 03:15 | |
| *** jimjiang has joined #openstack-dev | 03:17 | |
| *** bdpayne has quit IRC | 03:17 | |
| *** feleouet has quit IRC | 03:22 | |
| *** Ruetobas has quit IRC | 03:23 | |
| *** Ruetobas has joined #openstack-dev | 03:24 | |
| *** feleouet has joined #openstack-dev | 03:25 | |
| *** spzala has quit IRC | 03:27 | |
| *** Farooque has quit IRC | 03:27 | |
| *** Farooque has joined #openstack-dev | 03:27 | |
| *** dolphm_ has quit IRC | 03:28 | |
| *** dolphm has joined #openstack-dev | 03:29 | |
| *** gordc has quit IRC | 03:29 | |
| *** benonsoftware has joined #openstack-dev | 03:31 | |
| *** Farooque has quit IRC | 03:31 | |
| *** Farooque has joined #openstack-dev | 03:32 | |
| *** blamar has quit IRC | 03:32 | |
| *** noslzzp has quit IRC | 03:33 | |
| *** mberwanger has joined #openstack-dev | 03:34 | |
| *** Farooque has quit IRC | 03:34 | |
| *** Tross has joined #openstack-dev | 03:34 | |
| *** jasdeepH has quit IRC | 03:34 | |
| *** freedomhui has joined #openstack-dev | 03:34 | |
| *** blamar has joined #openstack-dev | 03:34 | |
| *** basha has joined #openstack-dev | 03:44 | |
| *** freedomhu has joined #openstack-dev | 03:44 | |
| *** gordc has joined #openstack-dev | 03:46 | |
| *** freedomhui has quit IRC | 03:48 | |
| *** markwash has quit IRC | 03:50 | |
| *** avishay_zzz is now known as avishay | 03:52 | |
| *** kushal has joined #openstack-dev | 03:55 | |
| *** stevemar has joined #openstack-dev | 03:56 | |
| *** markwash has joined #openstack-dev | 03:57 | |
| *** jimjiang has quit IRC | 03:57 | |
| *** nayward has joined #openstack-dev | 03:57 | |
| *** feleouet has quit IRC | 03:58 | |
| *** jimjiang has joined #openstack-dev | 04:00 | |
| *** ftcjeff has quit IRC | 04:01 | |
| *** feleouet has joined #openstack-dev | 04:02 | |
| *** prekarat has joined #openstack-dev | 04:06 | |
| *** shang has quit IRC | 04:06 | |
| *** Ruetobas has quit IRC | 04:07 | |
| *** dolphm has quit IRC | 04:08 | |
| *** afazekas has joined #openstack-dev | 04:09 | |
| *** alexb_ has joined #openstack-dev | 04:10 | |
| *** jasdeepH has joined #openstack-dev | 04:12 | |
| *** markwash has quit IRC | 04:12 | |
| *** IniMe has quit IRC | 04:13 | |
| *** basha has quit IRC | 04:13 | |
| *** Ruetobas has joined #openstack-dev | 04:16 | |
| *** dsagsda has joined #openstack-dev | 04:18 | |
| *** shang has joined #openstack-dev | 04:19 | |
| *** dsagsda has quit IRC | 04:20 | |
| *** senk has quit IRC | 04:20 | |
| *** sridevi has joined #openstack-dev | 04:22 | |
| *** prekarat has quit IRC | 04:22 | |
| *** sridevi has left #openstack-dev | 04:22 | |
| *** Tross has quit IRC | 04:24 | |
| *** Ruetobas has quit IRC | 04:30 | |
| *** Tross has joined #openstack-dev | 04:32 | |
| *** KurtMartin has joined #openstack-dev | 04:32 | |
| *** stevemar has quit IRC | 04:33 | |
| *** mberwanger has quit IRC | 04:34 | |
| *** Ruetobas has joined #openstack-dev | 04:35 | |
| *** morganfainberg|a is now known as morganfainberg | 04:35 | |
| *** feleouet has quit IRC | 04:35 | |
| *** mberwanger has joined #openstack-dev | 04:38 | |
| *** feleouet has joined #openstack-dev | 04:39 | |
| *** nati_ueno has joined #openstack-dev | 04:42 | |
| *** nayward has quit IRC | 04:46 | |
| *** markwash has joined #openstack-dev | 04:51 | |
| *** bswartz has quit IRC | 04:56 | |
| *** bswartz has joined #openstack-dev | 04:56 | |
| *** mberwanger has quit IRC | 05:06 | |
| *** markwash has quit IRC | 05:07 | |
| *** avishay has quit IRC | 05:07 | |
| *** gordc has quit IRC | 05:08 | |
| *** dolphm has joined #openstack-dev | 05:08 | |
| *** enikanorov-w has quit IRC | 05:08 | |
| *** enikanorov-w has joined #openstack-dev | 05:10 | |
| *** matiu has quit IRC | 05:10 | |
| *** gordc has joined #openstack-dev | 05:12 | |
| *** dolphm has quit IRC | 05:12 | |
| *** feleouet has quit IRC | 05:13 | |
| *** gordc has quit IRC | 05:13 | |
| *** sridevi has joined #openstack-dev | 05:15 | |
| *** feleouet has joined #openstack-dev | 05:16 | |
| *** nshaikh has joined #openstack-dev | 05:16 | |
| *** briancurtin has quit IRC | 05:17 | |
| *** chandankumar has joined #openstack-dev | 05:17 | |
| *** danwent has joined #openstack-dev | 05:18 | |
| *** basha has joined #openstack-dev | 05:19 | |
| *** basha has quit IRC | 05:21 | |
| *** rcleere has quit IRC | 05:23 | |
| *** neoXsys has quit IRC | 05:31 | |
| *** networkstatic has quit IRC | 05:35 | |
| *** erkules_ is now known as erkules | 05:39 | |
| *** vartom4 has joined #openstack-dev | 05:43 | |
| *** markwash has joined #openstack-dev | 05:43 | |
| *** neoXsys has joined #openstack-dev | 05:45 | |
| *** vartom4 has quit IRC | 05:47 | |
| *** KurtMartin has quit IRC | 05:47 | |
| *** chandankumar has quit IRC | 05:50 | |
| *** chandankumar has joined #openstack-dev | 05:50 | |
| *** feleouet has quit IRC | 05:50 | |
| *** feleouet has joined #openstack-dev | 05:53 | |
| *** hemna_ has joined #openstack-dev | 05:53 | |
| gongysh | ayong: ping | 05:57 |
| *** sridevi has quit IRC | 05:57 | |
| gongysh | ayoung: ping | 05:58 |
| gongysh | ping henrynash | 05:59 |
| henrynash | gongysh: hi | 06:00 |
| *** markwash has quit IRC | 06:03 | |
| *** Mandell has joined #openstack-dev | 06:04 | |
| *** sushils has quit IRC | 06:07 | |
| *** sushils has joined #openstack-dev | 06:09 | |
| *** otherwiseguy has quit IRC | 06:10 | |
| *** ondergetekende__ has joined #openstack-dev | 06:14 | |
| *** ondergetekende__ has quit IRC | 06:16 | |
| *** vartom4 has joined #openstack-dev | 06:16 | |
| *** nayward has joined #openstack-dev | 06:17 | |
| *** Dr0id has joined #openstack-dev | 06:19 | |
| *** MaxV has joined #openstack-dev | 06:22 | |
| *** dmakogon_ has joined #openstack-dev | 06:24 | |
| *** vaml has joined #openstack-dev | 06:24 | |
| *** Dr0id has quit IRC | 06:25 | |
| *** annegentle has quit IRC | 06:25 | |
| *** feleouet has quit IRC | 06:25 | |
| *** odyssey4me4 has joined #openstack-dev | 06:25 | |
| morganfainberg | henrynash: got a sec? | 06:27 |
| *** MaxV has quit IRC | 06:28 | |
| henrynash | morganfainberg: sure | 06:28 |
| *** MaxV has joined #openstack-dev | 06:28 | |
| *** markwash has joined #openstack-dev | 06:29 | |
| *** galstrom has quit IRC | 06:29 | |
| *** psedlak has joined #openstack-dev | 06:30 | |
| *** annegentle has joined #openstack-dev | 06:30 | |
| *** feleouet has joined #openstack-dev | 06:31 | |
| *** galstrom has joined #openstack-dev | 06:31 | |
| *** phschwartz has quit IRC | 06:33 | |
| *** mrunge has joined #openstack-dev | 06:34 | |
| *** sridevi has joined #openstack-dev | 06:34 | |
| *** phschwartz has joined #openstack-dev | 06:36 | |
| *** MaxV has quit IRC | 06:36 | |
| *** doron_afk has joined #openstack-dev | 06:39 | |
| *** mmagr has joined #openstack-dev | 06:40 | |
| *** afazekas has quit IRC | 06:44 | |
| *** markwash has quit IRC | 06:44 | |
| *** sthaha has quit IRC | 06:47 | |
| *** phschwartz has quit IRC | 06:47 | |
| *** phschwartz has joined #openstack-dev | 06:50 | |
| *** loteriety has quit IRC | 06:52 | |
| *** ruhe has joined #openstack-dev | 06:52 | |
| *** jcoufal has joined #openstack-dev | 06:53 | |
| *** xga has joined #openstack-dev | 06:53 | |
| sridevi | Hi, can anyone help me debug the jenkins' failure in https://review.openstack.org/#/c/34801/ | 06:54 |
| sridevi | anyone? | 06:54 |
| sridevi | around? | 06:54 |
| *** bashok has joined #openstack-dev | 06:55 | |
| *** reidrac has joined #openstack-dev | 06:58 | |
| *** ndipanov has joined #openstack-dev | 06:59 | |
| *** mjfork has quit IRC | 06:59 | |
| *** phschwartz has quit IRC | 06:59 | |
| *** mjfork_ has joined #openstack-dev | 06:59 | |
| *** mjfork_ is now known as mjfork | 07:00 | |
| *** phschwartz has joined #openstack-dev | 07:01 | |
| *** networkstatic has joined #openstack-dev | 07:04 | |
| *** jprovazn has joined #openstack-dev | 07:04 | |
| *** xqueralt-afk is now known as xqueralt | 07:05 | |
| *** yolanda has joined #openstack-dev | 07:06 | |
| *** feleouet has quit IRC | 07:06 | |
| *** arezmerita has joined #openstack-dev | 07:07 | |
| *** avishay has joined #openstack-dev | 07:08 | |
| *** feleouet has joined #openstack-dev | 07:10 | |
| *** jtomasek has joined #openstack-dev | 07:11 | |
| *** ifarkas has joined #openstack-dev | 07:13 | |
| *** sandeepr_ltp has quit IRC | 07:13 | |
| *** bashok_ has joined #openstack-dev | 07:17 | |
| *** bashok has quit IRC | 07:17 | |
| *** tkammer has joined #openstack-dev | 07:17 | |
| avishay | dtroyer: can you please take a look at my grenade patch? it's holding up jenkins for some cinder patches (https://review.openstack.org/#/c/42971/) | 07:18 |
| avishay | dtroyer: thanks! | 07:18 |
| *** shang has quit IRC | 07:18 | |
| *** phschwartz has quit IRC | 07:19 | |
| *** jaimegil has joined #openstack-dev | 07:19 | |
| *** bashok has joined #openstack-dev | 07:20 | |
| *** gmurphy has quit IRC | 07:22 | |
| *** bashok_ has quit IRC | 07:22 | |
| *** romcheg has joined #openstack-dev | 07:22 | |
| *** phschwartz has joined #openstack-dev | 07:23 | |
| *** Mandell has quit IRC | 07:23 | |
| *** sridevi has quit IRC | 07:24 | |
| *** kspear has quit IRC | 07:25 | |
| *** sandeepr_ltp has joined #openstack-dev | 07:26 | |
| *** markwash has joined #openstack-dev | 07:27 | |
| *** xBsd has joined #openstack-dev | 07:27 | |
| *** dmakogon_ has quit IRC | 07:28 | |
| *** shardy_afk is now known as shardy | 07:29 | |
| *** michchap has quit IRC | 07:29 | |
| *** GheRivero has quit IRC | 07:30 | |
| *** kspear has joined #openstack-dev | 07:30 | |
| *** ffio has joined #openstack-dev | 07:35 | |
| *** GheRivero has joined #openstack-dev | 07:35 | |
| *** dmakogon_ has joined #openstack-dev | 07:37 | |
| *** markwash has quit IRC | 07:39 | |
| *** martyntaylor has joined #openstack-dev | 07:39 | |
| *** jtomasek has quit IRC | 07:39 | |
| *** kspear has quit IRC | 07:40 | |
| *** AGiardini has left #openstack-dev | 07:40 | |
| *** phschwartz has quit IRC | 07:40 | |
| *** jasdeepH has quit IRC | 07:41 | |
| *** JordanP has joined #openstack-dev | 07:41 | |
| *** jtomasek has joined #openstack-dev | 07:42 | |
| *** alexxu has joined #openstack-dev | 07:42 | |
| *** boris-42 has joined #openstack-dev | 07:42 | |
| *** avishay has quit IRC | 07:43 | |
| *** valgrind has joined #openstack-dev | 07:44 | |
| *** phschwartz has joined #openstack-dev | 07:44 | |
| *** feleouet has quit IRC | 07:45 | |
| *** jistr has joined #openstack-dev | 07:45 | |
| *** avishay has joined #openstack-dev | 07:45 | |
| *** feleouet has joined #openstack-dev | 07:48 | |
| *** troytoman-away is now known as troytoman | 07:50 | |
| *** jpich has joined #openstack-dev | 07:51 | |
| *** egallen has joined #openstack-dev | 07:51 | |
| *** basha has joined #openstack-dev | 07:52 | |
| *** nati_uen_ has joined #openstack-dev | 07:54 | |
| *** michchap has joined #openstack-dev | 07:54 | |
| *** michchap has quit IRC | 07:54 | |
| *** michchap has joined #openstack-dev | 07:55 | |
| *** fbo_away is now known as fbo | 07:55 | |
| *** MaxV has joined #openstack-dev | 07:57 | |
| *** nati_ueno has quit IRC | 07:57 | |
| *** safchain has joined #openstack-dev | 07:57 | |
| *** mikal has joined #openstack-dev | 07:59 | |
| *** giulivo has joined #openstack-dev | 08:02 | |
| *** GheRivero has quit IRC | 08:02 | |
| *** GheRivero has joined #openstack-dev | 08:02 | |
| *** boden has joined #openstack-dev | 08:03 | |
| *** michchap has quit IRC | 08:03 | |
| *** Alexei_987 has joined #openstack-dev | 08:03 | |
| *** GheRivero has quit IRC | 08:03 | |
| *** xga has quit IRC | 08:03 | |
| *** GheRivero has joined #openstack-dev | 08:04 | |
| *** xchu has quit IRC | 08:05 | |
| *** xga has joined #openstack-dev | 08:06 | |
| *** nayward has quit IRC | 08:10 | |
| *** nayward has joined #openstack-dev | 08:11 | |
| *** dmakogon_ has quit IRC | 08:11 | |
| *** moted has quit IRC | 08:11 | |
| *** n0ano has quit IRC | 08:11 | |
| *** jamey has quit IRC | 08:11 | |
| *** smoser has quit IRC | 08:11 | |
| *** jduhamel has quit IRC | 08:11 | |
| *** Samos123 has quit IRC | 08:11 | |
| *** jeevan_ullas has quit IRC | 08:11 | |
| *** EntropyWorks has quit IRC | 08:11 | |
| *** sungju has quit IRC | 08:11 | |
| *** openf|y has quit IRC | 08:11 | |
| *** soren has quit IRC | 08:11 | |
| *** ron-slc has quit IRC | 08:11 | |
| *** obondarev has quit IRC | 08:11 | |
| *** ameade has quit IRC | 08:11 | |
| *** dabo has quit IRC | 08:11 | |
| *** arosen has quit IRC | 08:11 | |
| *** rha has quit IRC | 08:11 | |
| *** clarkb has quit IRC | 08:11 | |
| *** jeblair has quit IRC | 08:11 | |
| *** cburgess has quit IRC | 08:11 | |
| *** ameade has joined #openstack-dev | 08:12 | |
| *** dabo has joined #openstack-dev | 08:12 | |
| *** jeevan_ullas has joined #openstack-dev | 08:12 | |
| *** jeevan_ullas has quit IRC | 08:12 | |
| *** jeevan_ullas has joined #openstack-dev | 08:12 | |
| *** obondarev has joined #openstack-dev | 08:12 | |
| *** smoser has joined #openstack-dev | 08:12 | |
| *** jeblair has joined #openstack-dev | 08:12 | |
| *** clarkb has joined #openstack-dev | 08:12 | |
| *** Samos123 has joined #openstack-dev | 08:12 | |
| *** EntropyWorks has joined #openstack-dev | 08:12 | |
| *** soren has joined #openstack-dev | 08:12 | |
| *** ron-slc has joined #openstack-dev | 08:12 | |
| *** cburgess has joined #openstack-dev | 08:12 | |
| *** soren has quit IRC | 08:12 | |
| *** soren has joined #openstack-dev | 08:12 | |
| *** jmeredit has joined #openstack-dev | 08:12 | |
| *** moted has joined #openstack-dev | 08:12 | |
| *** arosen has joined #openstack-dev | 08:12 | |
| *** openf|y has joined #openstack-dev | 08:12 | |
| *** Kiall has quit IRC | 08:13 | |
| *** sbisbee has quit IRC | 08:13 | |
| *** jduhamel has joined #openstack-dev | 08:14 | |
| *** kiall has joined #openstack-dev | 08:15 | |
| *** JordanP has quit IRC | 08:15 | |
| *** rha has joined #openstack-dev | 08:16 | |
| *** zbitter is now known as zaneb | 08:16 | |
| *** sbisbee has joined #openstack-dev | 08:19 | |
| *** GheRivero has quit IRC | 08:20 | |
| *** xchu has joined #openstack-dev | 08:21 | |
| *** GheRivero has joined #openstack-dev | 08:21 | |
| *** xBsd has quit IRC | 08:22 | |
| *** GheRivero has quit IRC | 08:22 | |
| *** markwash has joined #openstack-dev | 08:22 | |
| *** GheRivero has joined #openstack-dev | 08:22 | |
| *** lucasagomes has joined #openstack-dev | 08:26 | |
| *** basha has quit IRC | 08:26 | |
| *** JordanP has joined #openstack-dev | 08:27 | |
| *** GheRivero has quit IRC | 08:29 | |
| *** GheRivero has joined #openstack-dev | 08:29 | |
| *** johnthetubaguy has joined #openstack-dev | 08:30 | |
| * SpamapS plays with adding a new option type to oslo.config and is crushed by the overlapping test cases.. | 08:31 | |
| *** xBsd has joined #openstack-dev | 08:32 | |
| *** michchap has joined #openstack-dev | 08:34 | |
| *** feleouet has quit IRC | 08:34 | |
| *** markwash has quit IRC | 08:34 | |
| *** Max_ has joined #openstack-dev | 08:35 | |
| *** alexxu has quit IRC | 08:36 | |
| *** johnthetubaguy1 has joined #openstack-dev | 08:37 | |
| *** feleouet has joined #openstack-dev | 08:37 | |
| *** romcheg has quit IRC | 08:37 | |
| *** MaxV has quit IRC | 08:38 | |
| *** johnthetubaguy has quit IRC | 08:38 | |
| *** ema has joined #openstack-dev | 08:39 | |
| *** ema has joined #openstack-dev | 08:39 | |
| *** bashok has quit IRC | 08:39 | |
| *** danpb has joined #openstack-dev | 08:41 | |
| *** bashok has joined #openstack-dev | 08:41 | |
| *** michchap has quit IRC | 08:42 | |
| *** MaxV has joined #openstack-dev | 08:43 | |
| *** Max_ has quit IRC | 08:45 | |
| *** iartarisi has joined #openstack-dev | 08:46 | |
| *** markwash has joined #openstack-dev | 08:48 | |
| *** alexxu has joined #openstack-dev | 08:48 | |
| *** romcheg has joined #openstack-dev | 08:52 | |
| *** xga has quit IRC | 08:53 | |
| *** johnthetubaguy1 is now known as johnthetubaguy | 08:54 | |
| *** negronjl has quit IRC | 08:54 | |
| *** comay has quit IRC | 08:55 | |
| *** xBsd has quit IRC | 08:55 | |
| *** jpich has quit IRC | 08:57 | |
| *** ron-slc has quit IRC | 08:57 | |
| *** xga has joined #openstack-dev | 08:57 | |
| *** comay has joined #openstack-dev | 08:58 | |
| *** ron-slc has joined #openstack-dev | 08:58 | |
| *** jpich has joined #openstack-dev | 08:59 | |
| *** jcoufal has quit IRC | 08:59 | |
| *** topshare has joined #openstack-dev | 09:00 | |
| *** negronjl has joined #openstack-dev | 09:00 | |
| *** danwent has quit IRC | 09:01 | |
| *** sumanthns has joined #openstack-dev | 09:01 | |
| *** BobBall_Away is now known as BobBall | 09:06 | |
| *** yaguang has quit IRC | 09:07 | |
| *** xchu has quit IRC | 09:07 | |
| *** yaguang has joined #openstack-dev | 09:09 | |
| *** markwash has quit IRC | 09:09 | |
| *** iartarisi has quit IRC | 09:10 | |
| *** corXi has quit IRC | 09:11 | |
| *** shang has joined #openstack-dev | 09:13 | |
| *** yaguang has quit IRC | 09:14 | |
| *** sumansn_ has joined #openstack-dev | 09:14 | |
| *** neoXsys has quit IRC | 09:15 | |
| *** ruhe has quit IRC | 09:16 | |
| *** sumanthns has quit IRC | 09:17 | |
| *** shang has quit IRC | 09:18 | |
| *** shang has joined #openstack-dev | 09:18 | |
| *** ruhe has joined #openstack-dev | 09:18 | |
| *** alexxu has quit IRC | 09:19 | |
| *** shang has quit IRC | 09:19 | |
| *** xchu has joined #openstack-dev | 09:20 | |
| *** Max_ has joined #openstack-dev | 09:26 | |
| *** yaguang has joined #openstack-dev | 09:27 | |
| *** nayward has quit IRC | 09:28 | |
| *** MaxV has quit IRC | 09:29 | |
| *** neoXsys has joined #openstack-dev | 09:29 | |
| *** alexxu has joined #openstack-dev | 09:30 | |
| *** yaguang has quit IRC | 09:35 | |
| *** shang has joined #openstack-dev | 09:36 | |
| *** ruhe has quit IRC | 09:37 | |
| *** kspear has joined #openstack-dev | 09:37 | |
| *** xBsd has joined #openstack-dev | 09:39 | |
| *** sandeepr_ltp has quit IRC | 09:40 | |
| *** yaguang has joined #openstack-dev | 09:42 | |
| *** chandankumar_ has joined #openstack-dev | 09:43 | |
| *** vaml has quit IRC | 09:45 | |
| *** chandankumar has quit IRC | 09:45 | |
| *** sandeepr_ltp has joined #openstack-dev | 09:46 | |
| *** iartarisi has joined #openstack-dev | 09:48 | |
| *** freedomhui has joined #openstack-dev | 09:49 | |
| *** nayward has joined #openstack-dev | 09:52 | |
| *** freedomhu has quit IRC | 09:53 | |
| *** markmc has joined #openstack-dev | 09:54 | |
| *** hailiang has quit IRC | 09:55 | |
| *** mkollaro has joined #openstack-dev | 09:56 | |
| *** feleouet has quit IRC | 09:57 | |
| *** chandankumar_ has quit IRC | 09:57 | |
| *** alexxu has quit IRC | 09:58 | |
| *** feleouet has joined #openstack-dev | 10:00 | |
| *** chandankumar has joined #openstack-dev | 10:02 | |
| *** egallen has quit IRC | 10:02 | |
| *** pcm_ has joined #openstack-dev | 10:04 | |
| *** romcheg1 has joined #openstack-dev | 10:04 | |
| *** pcm_ has quit IRC | 10:06 | |
| *** jcoufal has joined #openstack-dev | 10:06 | |
| *** pcm_ has joined #openstack-dev | 10:06 | |
| *** romcheg has quit IRC | 10:09 | |
| *** boris-42 has quit IRC | 10:09 | |
| *** ruhe has joined #openstack-dev | 10:16 | |
| *** topshare has quit IRC | 10:16 | |
| *** shang_ has joined #openstack-dev | 10:19 | |
| *** xchu has quit IRC | 10:19 | |
| *** ffio has quit IRC | 10:20 | |
| *** ffio_ has joined #openstack-dev | 10:20 | |
| *** shang has quit IRC | 10:22 | |
| *** Shrews has quit IRC | 10:27 | |
| *** sushils has quit IRC | 10:30 | |
| *** sushils has joined #openstack-dev | 10:31 | |
| *** topshare has joined #openstack-dev | 10:36 | |
| *** Shrews has joined #openstack-dev | 10:36 | |
| *** Max_ has quit IRC | 10:38 | |
| *** nati_uen_ has quit IRC | 10:39 | |
| *** markmcclain has joined #openstack-dev | 10:39 | |
| *** xBsd has quit IRC | 10:39 | |
| *** garyk has joined #openstack-dev | 10:40 | |
| *** corXi has joined #openstack-dev | 10:40 | |
| *** xBsd has joined #openstack-dev | 10:40 | |
| *** topshare has quit IRC | 10:41 | |
| *** rods has joined #openstack-dev | 10:41 | |
| *** gordc has joined #openstack-dev | 10:43 | |
| *** chandankumar has quit IRC | 10:43 | |
| *** chandankumar has joined #openstack-dev | 10:46 | |
| *** sergmelikyan has joined #openstack-dev | 10:48 | |
| *** doron_afk is now known as doron | 10:49 | |
| *** SergeyLukjanov has joined #openstack-dev | 10:50 | |
| *** gongysh has quit IRC | 10:51 | |
| *** hidepark has quit IRC | 10:53 | |
| *** SergeyLukjanov has quit IRC | 10:54 | |
| *** gordc has quit IRC | 10:58 | |
| *** ruhe has quit IRC | 10:59 | |
| *** topshare has joined #openstack-dev | 10:59 | |
| *** yaguang has quit IRC | 11:00 | |
| *** ruhe has joined #openstack-dev | 11:01 | |
| *** SergeyLukjanov has joined #openstack-dev | 11:03 | |
| *** dina_belova has joined #openstack-dev | 11:05 | |
| *** MaxV has joined #openstack-dev | 11:09 | |
| *** topol has joined #openstack-dev | 11:10 | |
| *** topol_ has joined #openstack-dev | 11:12 | |
| *** topol has quit IRC | 11:12 | |
| *** topol_ is now known as topol | 11:12 | |
| *** egallen has joined #openstack-dev | 11:13 | |
| *** MaxV has quit IRC | 11:17 | |
| *** boris-42 has joined #openstack-dev | 11:19 | |
| *** MaxV has joined #openstack-dev | 11:23 | |
| *** feleouet has quit IRC | 11:25 | |
| *** xBsd has quit IRC | 11:26 | |
| *** ndipanov has quit IRC | 11:26 | |
| *** maheshp has joined #openstack-dev | 11:27 | |
| *** avishay has quit IRC | 11:27 | |
| *** feleouet has joined #openstack-dev | 11:30 | |
| *** xBsd has joined #openstack-dev | 11:31 | |
| *** lucasagomes has quit IRC | 11:34 | |
| *** martyntaylor has quit IRC | 11:34 | |
| *** doron is now known as doron_afk | 11:35 | |
| *** lucasagomes has joined #openstack-dev | 11:37 | |
| *** drewlander has joined #openstack-dev | 11:37 | |
| *** giulivo has quit IRC | 11:37 | |
| *** BobBall has quit IRC | 11:37 | |
| *** salv-orlando has joined #openstack-dev | 11:38 | |
| *** martine has joined #openstack-dev | 11:41 | |
| *** martine is now known as Guest1838 | 11:42 | |
| *** dosaboy_ is now known as dosaboy_afk | 11:43 | |
| *** nayward has quit IRC | 11:45 | |
| *** dina_belova has quit IRC | 11:45 | |
| *** xBsd has quit IRC | 11:45 | |
| *** Guest1838 is now known as martine_ | 11:46 | |
| *** zoresvit has quit IRC | 11:47 | |
| *** zoresvit has joined #openstack-dev | 11:48 | |
| *** xBsd has joined #openstack-dev | 11:49 | |
| *** dims has joined #openstack-dev | 11:52 | |
| *** lucasagomes is now known as lucas-hungry | 11:52 | |
| *** eharney has quit IRC | 11:56 | |
| *** ruhe has quit IRC | 12:00 | |
| *** sthaha has joined #openstack-dev | 12:00 | |
| *** doron_afk is now known as doron | 12:01 | |
| *** BobBall has joined #openstack-dev | 12:03 | |
| *** dprince has joined #openstack-dev | 12:03 | |
| *** sthaha has quit IRC | 12:03 | |
| *** sthaha has joined #openstack-dev | 12:03 | |
| *** sthaha has quit IRC | 12:03 | |
| *** sthaha has joined #openstack-dev | 12:03 | |
| *** psedlak has quit IRC | 12:04 | |
| *** noslzzp has joined #openstack-dev | 12:04 | |
| *** schwicht has joined #openstack-dev | 12:05 | |
| *** gordc has joined #openstack-dev | 12:05 | |
| *** jaimegil has quit IRC | 12:06 | |
| *** michchap has joined #openstack-dev | 12:06 | |
| *** michchap has quit IRC | 12:07 | |
| *** michchap has joined #openstack-dev | 12:07 | |
| *** vartom4 has quit IRC | 12:09 | |
| *** SergeyLukjanov has quit IRC | 12:11 | |
| *** shang_ has quit IRC | 12:11 | |
| *** hartsocks has joined #openstack-dev | 12:12 | |
| *** basha has joined #openstack-dev | 12:12 | |
| *** jhesketh_ has quit IRC | 12:13 | |
| *** hartsocks has left #openstack-dev | 12:14 | |
| *** negronjl has quit IRC | 12:14 | |
| *** basha has quit IRC | 12:17 | |
| *** giulivo has joined #openstack-dev | 12:17 | |
| *** edmund has joined #openstack-dev | 12:18 | |
| *** basha has joined #openstack-dev | 12:20 | |
| *** maheshp has quit IRC | 12:20 | |
| *** negronjl has joined #openstack-dev | 12:21 | |
| *** kms has joined #openstack-dev | 12:24 | |
| *** basha_ has joined #openstack-dev | 12:26 | |
| *** basha has quit IRC | 12:26 | |
| *** basha_ is now known as basha | 12:26 | |
| *** doron is now known as doron_afk | 12:26 | |
| *** basha has quit IRC | 12:29 | |
| *** eharney has joined #openstack-dev | 12:33 | |
| *** jjmb has quit IRC | 12:35 | |
| *** safchain_ has joined #openstack-dev | 12:35 | |
| *** safchain__ has joined #openstack-dev | 12:36 | |
| *** safchain_ has quit IRC | 12:36 | |
| *** dkranz has joined #openstack-dev | 12:36 | |
| *** safchain has quit IRC | 12:36 | |
| *** terryh has joined #openstack-dev | 12:38 | |
| *** dims has quit IRC | 12:40 | |
| *** dkranz has quit IRC | 12:41 | |
| *** valgrind has quit IRC | 12:41 | |
| *** dims has joined #openstack-dev | 12:43 | |
| *** jprovazn has quit IRC | 12:44 | |
| *** kbringard has joined #openstack-dev | 12:50 | |
| *** romcheg has joined #openstack-dev | 12:51 | |
| *** jruzicka has joined #openstack-dev | 12:51 | |
| *** dolphm has joined #openstack-dev | 12:51 | |
| enikanorov | markmcclain: salv-orlando: Hi folks. the discussion on providers is still pending. I've sent an email to ML shortly after neutron weekly meeting. Could you comment on it please? | 12:53 |
| *** dolphm has quit IRC | 12:53 | |
| salv-orlando | I am caught up with other work - I will reply as soon as possible, hopefully in the next few hours. | 12:53 |
| *** dolphm has joined #openstack-dev | 12:54 | |
| *** romcheg1 has quit IRC | 12:55 | |
| *** martine_ has quit IRC | 12:55 | |
| *** pabelanger has quit IRC | 12:55 | |
| *** dosaboy_afk has quit IRC | 12:55 | |
| *** alunduil has quit IRC | 12:57 | |
| *** cppcabrera has joined #openstack-dev | 12:57 | |
| *** adalbas has joined #openstack-dev | 12:57 | |
| *** corXi has quit IRC | 12:58 | |
| *** mkollaro has quit IRC | 12:59 | |
| *** mkollaro1 has joined #openstack-dev | 12:59 | |
| *** alexpilotti has joined #openstack-dev | 13:01 | |
| *** ruhe has joined #openstack-dev | 13:04 | |
| *** lucas-hungry is now known as lucasagomes | 13:05 | |
| *** BLZbubba_ has quit IRC | 13:05 | |
| *** BLZbubba has joined #openstack-dev | 13:05 | |
| *** BLZbubba has quit IRC | 13:05 | |
| *** BLZbubba has joined #openstack-dev | 13:05 | |
| *** jasondotstar has joined #openstack-dev | 13:06 | |
| *** jayg|g0n3 is now known as jayg | 13:08 | |
| *** jprovazn has joined #openstack-dev | 13:09 | |
| *** ema has quit IRC | 13:09 | |
| *** FunnyLookinHat has joined #openstack-dev | 13:09 | |
| *** cppcabrera has left #openstack-dev | 13:11 | |
| *** dina_belova has joined #openstack-dev | 13:11 | |
| *** dina_belova has quit IRC | 13:12 | |
| *** dina_belova has joined #openstack-dev | 13:12 | |
| *** jcoufal has quit IRC | 13:16 | |
| *** dina_belova has quit IRC | 13:17 | |
| *** acabrera has joined #openstack-dev | 13:17 | |
| *** edmund1 has joined #openstack-dev | 13:18 | |
| *** edmund has quit IRC | 13:18 | |
| *** acabrera has left #openstack-dev | 13:18 | |
| *** jecarey has joined #openstack-dev | 13:20 | |
| *** henrynash has quit IRC | 13:20 | |
| *** stevemar has joined #openstack-dev | 13:21 | |
| *** wolfdreamer has joined #openstack-dev | 13:24 | |
| *** briancurtin has joined #openstack-dev | 13:25 | |
| *** anteaya has joined #openstack-dev | 13:25 | |
| *** jjmb has joined #openstack-dev | 13:25 | |
| *** jcoufal has joined #openstack-dev | 13:26 | |
| *** sumansn_ has quit IRC | 13:27 | |
| *** bknudson has joined #openstack-dev | 13:28 | |
| *** afazekas has joined #openstack-dev | 13:30 | |
| *** afazekas has quit IRC | 13:31 | |
| *** lbragstad has joined #openstack-dev | 13:32 | |
| *** neelashah has joined #openstack-dev | 13:32 | |
| *** martyntaylor has joined #openstack-dev | 13:32 | |
| *** mmagr has quit IRC | 13:34 | |
| *** doron_afk has quit IRC | 13:35 | |
| *** doron_afk has joined #openstack-dev | 13:36 | |
| *** litong has joined #openstack-dev | 13:38 | |
| *** martyntaylor has quit IRC | 13:39 | |
| *** topol has quit IRC | 13:39 | |
| *** kenperkins has joined #openstack-dev | 13:40 | |
| *** sushils has quit IRC | 13:41 | |
| *** martyntaylor has joined #openstack-dev | 13:42 | |
| *** mkollaro has joined #openstack-dev | 13:43 | |
| *** sandywalsh has quit IRC | 13:43 | |
| *** mkollaro1 has quit IRC | 13:45 | |
| *** dvarga has joined #openstack-dev | 13:45 | |
| *** jjmb has quit IRC | 13:46 | |
| *** changbl has quit IRC | 13:46 | |
| *** ftcjeff has joined #openstack-dev | 13:48 | |
| *** mmagr has joined #openstack-dev | 13:49 | |
| *** jimfehlig has joined #openstack-dev | 13:52 | |
| *** jimfehlig has quit IRC | 13:52 | |
| *** doron_afk is now known as doron | 13:52 | |
| *** jimfehlig has joined #openstack-dev | 13:52 | |
| *** radez_g0n3 is now known as radez | 13:53 | |
| *** prad_ has joined #openstack-dev | 13:53 | |
| *** litong has quit IRC | 13:56 | |
| *** sushils has joined #openstack-dev | 13:56 | |
| *** doron is now known as doron_afk | 13:58 | |
| *** mmagr has quit IRC | 13:58 | |
| *** networkstatic has quit IRC | 14:01 | |
| *** networkstatic has joined #openstack-dev | 14:01 | |
| *** burt has joined #openstack-dev | 14:01 | |
| *** FunnyLookinHat has quit IRC | 14:02 | |
| *** otherwiseguy has joined #openstack-dev | 14:08 | |
| *** _TheDodd_ has joined #openstack-dev | 14:08 | |
| *** mmagr has joined #openstack-dev | 14:10 | |
| *** sushils has quit IRC | 14:11 | |
| *** michchap has quit IRC | 14:12 | |
| *** dina_belova has joined #openstack-dev | 14:13 | |
| shardy | keystone folks (dolphm, ayoung?), should it be possible to use a v3 token as the auth_token for requests to the v2 API, ie are the tokens supposed to be backwards compatible? | 14:15 |
| shardy | obviously I know it doesn't work in the other direction atm due to bug #1212778 | 14:16 |
| uvirtbot | Launchpad bug 1212778 in keystone "Authenticating v2 token against v3 api fails with error 500" [Critical,In progress] https://launchpad.net/bugs/1212778 | 14:16 |
| *** dina_belova has quit IRC | 14:17 | |
| *** ruhe has quit IRC | 14:17 | |
| *** sushils has joined #openstack-dev | 14:17 | |
| dolphm | shardy: they're cross compatible, mostly. a v3 token must be for a default-domain user/project to be validatable by v2 | 14:18 |
| *** edmund1 has quit IRC | 14:19 | |
| *** topol has joined #openstack-dev | 14:21 | |
| *** datsun180b has joined #openstack-dev | 14:22 | |
| shardy | dolphm: Ok, thanks, I'm trying to avoid authenticating twice, as we need both v2 and v3 clients (for ec2 and trusts respectively) | 14:23 |
| shardy | but I get "Authorization Failed: Request attribute token must be less than or equal to 8192" when using the v3 auth_token for the v2 client | 14:23 |
| dolphm | shardy: ouch. do you need a service catalog on that token? | 14:24 |
| shardy | dolphm: no, I just want to avoid requesting two tokens for the two client objects | 14:25 |
| *** networkstatic has quit IRC | 14:25 | |
| dolphm | shardy: you can radically reduce the token size on v3 by using ?nocatalog... e.g. POST /v3/auth/tokens?nocatalog | 14:25 |
| *** dguitarbite has joined #openstack-dev | 14:25 | |
| dolphm | shardy: it's a new API feature that i don't think is supported by the client yet | 14:26 |
| shardy | dolphm: doh! | 14:26 |
| *** shang has joined #openstack-dev | 14:26 | |
| shardy | dolphm: Ok, so it this something you'd like a bug report for, or is it just a know limitation of reusing the v3 tokens w/v2 API? | 14:26 |
| shardy | s/so it/so is/ | 14:27 |
| *** basha has joined #openstack-dev | 14:27 | |
| *** leif has joined #openstack-dev | 14:27 | |
| *** hartsocks has joined #openstack-dev | 14:27 | |
| *** leif is now known as Guest89150 | 14:28 | |
| dolphm | shardy: the error you're seeing is by design, and configurable | 14:30 |
| *** bashok_ has joined #openstack-dev | 14:30 | |
| dolphm | shardy: the fact that tokens grow to be ginormous is a known issue though | 14:30 |
| shardy | dolphm: Ok, thanks, maybe I'll take a look at adding nocatalog if that will solve the issue for us | 14:31 |
| *** hartsocks has quit IRC | 14:33 | |
| *** jvrbanac has joined #openstack-dev | 14:34 | |
| *** bashok has quit IRC | 14:34 | |
| *** tonix has joined #openstack-dev | 14:35 | |
| *** hartsocks has joined #openstack-dev | 14:35 | |
| *** rbrady has joined #openstack-dev | 14:35 | |
| *** aeperezt has joined #openstack-dev | 14:36 | |
| *** corXi has joined #openstack-dev | 14:36 | |
| *** corXi has quit IRC | 14:36 | |
| *** corXi has joined #openstack-dev | 14:36 | |
| *** corXi has quit IRC | 14:36 | |
| *** spzala has joined #openstack-dev | 14:37 | |
| *** corXi has joined #openstack-dev | 14:37 | |
| *** corXi has quit IRC | 14:37 | |
| *** corXi has joined #openstack-dev | 14:37 | |
| *** aeperezt has quit IRC | 14:37 | |
| *** Max_ has joined #openstack-dev | 14:38 | |
| *** alexb_ has quit IRC | 14:39 | |
| *** aeperezt has joined #openstack-dev | 14:40 | |
| *** rwsu-away is now known as rwsu | 14:41 | |
| rbrady | I'm looking for info on how roles are defined/added by the openstack components. Specifically, swift mentions "admin" and "swiftoperator" roles in it's config files / code. How do those get added to the database during install? | 14:41 |
| *** MaxV has quit IRC | 14:41 | |
| *** matiu has joined #openstack-dev | 14:42 | |
| *** xBsd has quit IRC | 14:42 | |
| *** michchap has joined #openstack-dev | 14:43 | |
| *** FunnyLookinHat has joined #openstack-dev | 14:43 | |
| *** sergmelikyan has quit IRC | 14:45 | |
| *** maheshp has joined #openstack-dev | 14:46 | |
| *** changbl has joined #openstack-dev | 14:46 | |
| *** pabelanger has joined #openstack-dev | 14:46 | |
| *** basha has quit IRC | 14:47 | |
| *** Mandell has joined #openstack-dev | 14:47 | |
| *** cfriesen has joined #openstack-dev | 14:48 | |
| *** pmathews has joined #openstack-dev | 14:48 | |
| *** michchap has quit IRC | 14:51 | |
| *** danwent has joined #openstack-dev | 14:52 | |
| *** basha has joined #openstack-dev | 14:52 | |
| cfriesen | hoping this is a simple answer for someone...in nova's BaseHostFilter, where does the "filter_properties" come from, and what are valid arguments to filter_properties.get() ? | 14:53 |
| *** rnirmal has joined #openstack-dev | 14:53 | |
| *** edmund has joined #openstack-dev | 14:53 | |
| *** kspear has quit IRC | 14:54 | |
| *** kspear has joined #openstack-dev | 14:54 | |
| *** litong has joined #openstack-dev | 14:54 | |
| *** ruhe has joined #openstack-dev | 14:57 | |
| *** hartsocks has left #openstack-dev | 14:58 | |
| *** lexinator has joined #openstack-dev | 14:58 | |
| *** _TheDodd_ has quit IRC | 14:59 | |
| *** reidrac has quit IRC | 15:00 | |
| *** _TheDodd_ has joined #openstack-dev | 15:01 | |
| *** networkstatic has joined #openstack-dev | 15:02 | |
| *** tmclaugh[work] has joined #openstack-dev | 15:03 | |
| *** bashok_ has quit IRC | 15:03 | |
| *** bashok has joined #openstack-dev | 15:03 | |
| *** neelashah1 has joined #openstack-dev | 15:04 | |
| *** jmontemayor has joined #openstack-dev | 15:04 | |
| *** neelashah has quit IRC | 15:04 | |
| *** danwent has quit IRC | 15:06 | |
| *** mrodden has quit IRC | 15:08 | |
| chmouel | dolphm: what do you think abotu comment #5 https://bugs.launchpad.net/keystone/+bug/1208675 is that worthwhile to still do that in the identity.controller? | 15:09 |
| uvirtbot | Launchpad bug 1208675 in keystone "user_project role assignement are not cleaned out when deleting a project/tenant" [Medium,In progress] | 15:09 |
| *** rnirmal has quit IRC | 15:10 | |
| *** lexinator has quit IRC | 15:13 | |
| *** dina_belova has joined #openstack-dev | 15:13 | |
| *** joesavak has joined #openstack-dev | 15:14 | |
| ayoung | shardy, the patch you need for Token validation was just approved, and should be through gate soonish | 15:14 |
| ayoung | shardy, https://review.openstack.org/#/c/42456/ | 15:14 |
| *** jtomasek has quit IRC | 15:15 | |
| ayoung | chmouel, no, that is not a controller task | 15:16 |
| ayoung | I think it is a manager task | 15:16 |
| *** jasdeepH has joined #openstack-dev | 15:16 | |
| chmouel | ayoung: well i guess the filename keystone/identity/controllers.py is a bit misleading then | 15:17 |
| *** tjones has joined #openstack-dev | 15:17 | |
| *** dina_belova has quit IRC | 15:18 | |
| ayoung | chmouel, nope. | 15:19 |
| *** jprovazn has quit IRC | 15:19 | |
| lbragstad | hey dolphm thanks for the review. I responded inline. Wanted to ask real quick on https://review.openstack.org/#/c/41970/9/keystone/catalog/core.py Would you be ok with me moving that outside the try/except? | 15:19 |
| ayoung | chmouel, controllers are for orchestrating business logic. If it spans multiple backends, then, yes, it needs to be in a controller | 15:19 |
| *** neelashah1 has quit IRC | 15:19 | |
| ayoung | but if something could potntially be done by an extension. it will bypass the controller | 15:19 |
| *** mrodden has joined #openstack-dev | 15:19 | |
| dolphm | lbragstad: yeah, that works | 15:20 |
| ayoung | chmouel, in this case, the assignment and the project will always be held in the same datasource | 15:20 |
| lbragstad | dolphm: cool, thanks... I'll respin | 15:20 |
| ayoung | even if it is LDAP | 15:20 |
| *** mkerrin has quit IRC | 15:20 | |
| *** mkerrin has joined #openstack-dev | 15:20 | |
| bknudson | lbragstad: add unit tests to verify it doesn't send a notification if it fails | 15:21 |
| lbragstad | bknudson: ok, I can do that | 15:21 |
| *** lexinator has joined #openstack-dev | 15:21 | |
| *** tjones has left #openstack-dev | 15:22 | |
| *** loteriety has joined #openstack-dev | 15:22 | |
| *** mkerrin has quit IRC | 15:23 | |
| ayoung | shardy, if you are passing tokens to keystone, you can do an md5 hash instead of using the whole token | 15:24 |
| *** otherwiseguy has quit IRC | 15:24 | |
| *** martine has joined #openstack-dev | 15:27 | |
| *** martine is now known as Guest14149 | 15:27 | |
| *** Guest14149 is now known as martine_ | 15:29 | |
| *** neelashah has joined #openstack-dev | 15:29 | |
| *** mkerrin has joined #openstack-dev | 15:30 | |
| *** tjones has joined #openstack-dev | 15:32 | |
| *** mmagr has quit IRC | 15:32 | |
| *** danwent has joined #openstack-dev | 15:33 | |
| *** kushal has quit IRC | 15:33 | |
| *** mlavalle has joined #openstack-dev | 15:37 | |
| *** nati_ueno has joined #openstack-dev | 15:37 | |
| *** sushils has quit IRC | 15:39 | |
| *** sushils has joined #openstack-dev | 15:40 | |
| *** reed has joined #openstack-dev | 15:41 | |
| chmouel | ayoung: ah ok understood | 15:41 |
| *** zoresvit has quit IRC | 15:41 | |
| chmouel | ayoung: well my question still stand should it be in the manager task or in the backend ? | 15:41 |
| shardy | ayoung: interesting, thanks! | 15:41 |
| shardy | ayoung, dolphm: FYI I've added nocatalog support to keystoneclient which also fixes my problem: | 15:42 |
| shardy | https://review.openstack.org/43150 | 15:42 |
| *** lexinator has quit IRC | 15:42 | |
| dolphm | shardy: awesome! | 15:42 |
| *** garyk has quit IRC | 15:42 | |
| *** basha has quit IRC | 15:42 | |
| *** zoresvit has joined #openstack-dev | 15:43 | |
| shardy | ayoung: any chance you can take another look at my trusts keystoneclient patch sometime? | 15:43 |
| shardy | still needs another +2&A : https://review.openstack.org/#/c/39899/ :) | 15:43 |
| *** Mandell has quit IRC | 15:43 | |
| *** feleouet has quit IRC | 15:44 | |
| *** avishay has joined #openstack-dev | 15:45 | |
| *** utlemming has quit IRC | 15:45 | |
| *** dkranz has joined #openstack-dev | 15:46 | |
| *** otherwiseguy has joined #openstack-dev | 15:46 | |
| *** feleouet has joined #openstack-dev | 15:47 | |
| *** JonnyNomad has joined #openstack-dev | 15:47 | |
| dolphm | shardy: looking at the nocatalog patch... a couple thoughts: i'm not a big fan of the default double negative (nocatalog=False), so i was trying to think of what to call the kwarg to avoid the double negative (catalog=True?)... | 15:48 |
| dolphm | shardy: long term however, i see ?nocatalog as being an option to lazily retrieve the catalog, rather than immediately when the token is fetched | 15:48 |
| *** utlemming has joined #openstack-dev | 15:49 | |
| dolphm | shardy: lazy_catalog=False ? when it's implemented on the service side, the client can then call GET /v3/catalog when someone tries to read an endpoint | 15:49 |
| *** nayward has joined #openstack-dev | 15:49 | |
| *** SergeyLukjanov has joined #openstack-dev | 15:49 | |
| *** fabio__ has joined #openstack-dev | 15:50 | |
| *** rbrady has quit IRC | 15:50 | |
| *** senk has joined #openstack-dev | 15:51 | |
| *** nati_ueno has quit IRC | 15:51 | |
| dolphm | simo: around? | 15:51 |
| simo | dolphm: yes | 15:52 |
| *** rfolco has joined #openstack-dev | 15:53 | |
| shardy | dolphm: Sure, I did wonder about the nocatalog/False thing, just changing it to catalog=True seems like the simplest approach, and should also be compatibile with the long-term plan? | 15:53 |
| shardy | ie pass catalog=False implies lazy_catalog=True internally | 15:54 |
| *** dina_belova has joined #openstack-dev | 15:54 | |
| *** mdenny has quit IRC | 15:54 | |
| dolphm | simo: ayoung: following up from the mailing list today/yesterday & release status meeting yesterday... given that secure messaging has been deferred til icehouse, i'd like to plan on keeping key distribution in review until RC1 is cut & merging it to master immediately thereafter. that way we can have it merged ahead of summit discussions, etc, but don't have to worry about the overhead of unnecessary security backport | 15:54 |
| dolphm | s | 15:54 |
| *** mdenny has joined #openstack-dev | 15:55 | |
| dolphm | shardy: setting catalog=False sounds like a hard requirement from the user though :( i'd rather the client be *able* to get a catalog when the user explicitly uses a feature that requires it | 15:55 |
| dolphm | shardy: does that make sense? | 15:56 |
| simo | dolphm: RC1 ? | 15:56 |
| *** pcm_ has quit IRC | 15:56 | |
| simo | you mean havana RC1 ? | 15:56 |
| dolphm | simo: yes | 15:56 |
| dolphm | simo: definitely not icehouse rc1 lol | 15:56 |
| simo | yeah just to make sure :) | 15:57 |
| simo | works for me | 15:57 |
| *** boris-42 has quit IRC | 15:57 | |
| dolphm | alright, thanks! | 15:57 |
| *** rbrady has joined #openstack-dev | 15:57 | |
| ayoung | dolphm, so I am going to make an extension for the 3 validation APIs: getting the revocation list, getting the CA cert, and getting the signing cert. | 15:59 |
| *** mkerrin has quit IRC | 15:59 | |
| *** mkerrin has joined #openstack-dev | 15:59 | |
| shardy | dolphm: I see what you mean, but catalog=False could just be documented to describe the lazy catalog functionality (when it exists) and still be compatible with the immediate requirement which is to pass nocatalog when authenticating? | 15:59 |
| shardy | dolphm: I can just change it to lazy_catalog if you think that's best | 16:00 |
| *** devoid has joined #openstack-dev | 16:00 | |
| *** mkerrin has quit IRC | 16:01 | |
| dolphm | shardy: i think 'catalog' is definitely better than 'nocatalog' ... 'lazy_catalog' is just me thinking out loud and i'm open to better suggestions :P | 16:01 |
| *** mkerrin has joined #openstack-dev | 16:01 | |
| *** jistr has quit IRC | 16:02 | |
| *** mkerrin has quit IRC | 16:02 | |
| *** mkollaro has quit IRC | 16:02 | |
| *** loteriety has quit IRC | 16:02 | |
| dolphm | ayoung: cool.. it's just going to be called OS-PKI, right? I was trying to figure out how to consume it with oauth if it's available | 16:02 |
| shardy | dolphm: another option is just have two options, add catalog now, defaulted to True, and later add lazy_catalog or whatever which flips catalog=False in the constructor and enables the lazy-load functionality | 16:03 |
| dolphm | ayoung: or even make oauth1 depend on pki | 16:03 |
| dolphm | stevemar: thoughts? ^ | 16:03 |
| dolphm | shardy: then we have to handle potentially conflicting arguments from the user? | 16:04 |
| stevemar | dolphm: reading.. | 16:04 |
| dolphm | shardy: catalog=True, lazy_catalog=True | 16:04 |
| dolphm | shardy: what about the opposite naming? eager_catalog=True by default | 16:04 |
| dolphm | shardy: that way it doesn't completely imply that eager_catalog=False might result in a catalog being lazily loaded | 16:05 |
| *** ruhe has quit IRC | 16:05 | |
| * shardy tries to think of a response which won't result in him having to implement lazy_catalog right now ;) | 16:05 | |
| *** sridevi has joined #openstack-dev | 16:05 | |
| dolphm | shardy: i don't want you to implement a lazy loading catalog right now :P | 16:05 |
| stevemar | dolphm: so adam, wants to create an extension for: getting the revocation list, getting the CA cert, and getting the signing cert | 16:06 |
| stevemar | dolphm: and you want oauth to depend on that? | 16:06 |
| stevemar | dolphm: i'm not super clear on how the two are related | 16:07 |
| dolphm | stevemar: my crazy idea is to encrypt the access secret into the access key, for starters | 16:08 |
| stevemar | right, i remember that idea | 16:08 |
| dolphm | stevemar: plus project scope and role list (authz) | 16:08 |
| *** zbitter has joined #openstack-dev | 16:09 | |
| shardy | dolphm: sure, eager_catalog sounds OK, although I will observe that in general the least confusing client APIs are those whose interfaces just look like the underlying API | 16:09 |
| dolphm | stevemar: so, you get offline validation of request integrity, auth verified by keystone's signature, and authorization data ready to go | 16:09 |
| stevemar | dolphm: as long as that's the only exposure, then that's okay | 16:09 |
| dolphm | stevemar: only exposure? | 16:10 |
| shardy | ie IMHO if the API option is nocatalog, it's least confusing to just pass an argument with the same name, and document any side-effects, e.g that some operations will lazily retrieve a catalog when needed | 16:10 |
| stevemar | dolphm: i just don't want the current flow to change | 16:10 |
| *** edmund has quit IRC | 16:10 | |
| *** mlavalle has quit IRC | 16:10 | |
| *** MaxV has joined #openstack-dev | 16:10 | |
| dolphm | shardy: i would generally agree, but ?nocatalog is intended to be used in combination with a (currently non-existant) explicit call for GET /v3/catalog anyway | 16:10 |
| avishay | dtroyer: hey, have a minute about the grenade upgrade-cinder patch? | 16:10 |
| dolphm | stevemar: the oauth flow wouldn't change from the client perspective, if that's what you mean | 16:11 |
| stevemar | dolphm: that's all i care about :D | 16:11 |
| dolphm | stevemar: i see it as a stepping stone for other services to be able to consume oauth signed requests | 16:11 |
| dolphm | stevemar: and then we can all run away from keystone tokens | 16:11 |
| dolphm | stevemar: and the problems that shardy is running into | 16:11 |
| stevemar | dolphm: ambitious! | 16:12 |
| dolphm | stevemar: agree! :( | 16:12 |
| *** kms has quit IRC | 16:12 | |
| *** neelashah1 has joined #openstack-dev | 16:13 | |
| dolphm | stevemar: the catch is that i want to propose this and implement it before our featureproposalfreeze | 16:13 |
| *** Max_ has quit IRC | 16:13 | |
| *** romcheg has quit IRC | 16:13 | |
| stevemar | dolphm: you crazy | 16:13 |
| dolphm | stevemar: so, < 7 days | 16:13 |
| *** zaneb has quit IRC | 16:13 | |
| *** nayward has quit IRC | 16:13 | |
| dolphm | stevemar: and right now it's just a hacked together demo in a gist | 16:13 |
| dolphm | and it uses AES instead of PKI | 16:13 |
| *** neelashah has quit IRC | 16:14 | |
| stevemar | olphm: link? | 16:14 |
| stevemar | dolphm: link? | 16:14 |
| dolphm | stevemar: https://gist.github.com/dolph/6198529 | 16:15 |
| *** doron_afk has quit IRC | 16:15 | |
| *** cdub_ has quit IRC | 16:15 | |
| dolphm | stevemar: see test_decrypt_access_key | 16:15 |
| *** JordanP has quit IRC | 16:15 | |
| *** networkstatic has quit IRC | 16:15 | |
| *** SergeyLukjanov has quit IRC | 16:16 | |
| stevemar | dolphm: you should add the oauth verifier too | 16:17 |
| stevemar | dolphm: also, it's not role_names any longer, role_ids | 16:17 |
| dolphm | stevemar: +1 on role_id's i realized that after i wrote it | 16:17 |
| dolphm | stevemar: but why aouth verifier? | 16:17 |
| stevemar | dolphm: i dont know yet, i just wanted to say it before I forget about it | 16:18 |
| *** tmclaugh[work] has quit IRC | 16:18 | |
| dolphm | you don't need the oauth verifier to verify a request, do you? | 16:18 |
| *** rnirmal has joined #openstack-dev | 16:18 | |
| stevemar | dolphm: no, but would you do this for the request tokens too? or just access? | 16:19 |
| dolphm | stevemar: just access tokens ... only keystone would need to handle request tokens, correct? | 16:20 |
| *** cdub_ has joined #openstack-dev | 16:20 | |
| stevemar | dolphm: yes, just keystone needs to handle request tokens | 16:21 |
| stevemar | dolphm: alright, i'm slowly getting a better idea of what you actually want done :) | 16:21 |
| *** ruhe has joined #openstack-dev | 16:21 | |
| *** comay_ has joined #openstack-dev | 16:22 | |
| *** comay_ has quit IRC | 16:22 | |
| *** martine_ has quit IRC | 16:23 | |
| dolphm | stevemar: basically the benefits of our existing pki tokens, but with request integrity and dumping both the catalog and (hopefully) the api user's identity | 16:23 |
| *** comay has quit IRC | 16:25 | |
| stevemar | dolphm: what is currently encrypted into a PKI token? | 16:26 |
| *** comay has joined #openstack-dev | 16:26 | |
| *** bashok has quit IRC | 16:26 | |
| dolphm | stevemar: everything and a lot of garbage | 16:26 |
| ayoung | dolphm, yep OS-PKI | 16:26 |
| *** shang has quit IRC | 16:26 | |
| *** alop has joined #openstack-dev | 16:27 | |
| *** matel has quit IRC | 16:27 | |
| dolphm | stevemar: the only other thing i've thought of adding to the access key is a link to the keystone endpoint that issued it | 16:27 |
| stevemar | dolphm: you actually want this in H3? | 16:28 |
| dolphm | stevemar: yep | 16:28 |
| *** iartarisi has quit IRC | 16:28 | |
| stevemar | dolphm: who do you plan on assigning it to :P | 16:28 |
| ayoung | dolphm, in the v3.5 or later version of the auth API I want PKI signed tokens to have a clear text identifier of format at the front. Right now we look for MII but I would like something cleaner. | 16:28 |
| *** SergeyLukjanov has joined #openstack-dev | 16:28 | |
| dolphm | stevemar: otherwise we have to deal with both encrypted access keys and not | 16:28 |
| dolphm | stevemar: me | 16:28 |
| stevemar | dolphm: then i'm fine with whatever you want | 16:28 |
| stevemar | hehee | 16:28 |
| ayoung | but that won't be in this extension. | 16:28 |
| dolphm | stevemar: realistically i probably only have a day to dedicate to this before feature proposal freeze | 16:29 |
| dolphm | and it'll be a saturday | 16:29 |
| stevemar | :( | 16:29 |
| ayoung | heh. | 16:29 |
| *** cthulhup has joined #openstack-dev | 16:29 | |
| ayoung | icehouse bab | 16:29 |
| ayoung | y | 16:29 |
| *** freedomhui has quit IRC | 16:29 | |
| dolphm | ayoung: i thought about doing the same for access tokens | 16:29 |
| dolphm | ayoung: even as simple as putting the version in plaintext | 16:30 |
| *** jmontemayor has quit IRC | 16:30 | |
| stevemar | dolphm: so would the access id be something ridiculously long? | 16:30 |
| dolphm | stevemar: no! | 16:30 |
| stevemar | dolphm: yay! | 16:30 |
| *** salv-orlando has quit IRC | 16:30 | |
| dolphm | stevemar: self.assertLessEqual(len(access_key), 255) | 16:31 |
| stevemar | 255 is still pretty long? | 16:31 |
| dolphm | stevemar: it is | 16:31 |
| *** markmc has quit IRC | 16:31 | |
| dolphm | stevemar: i think i'm at like half that now in the demo | 16:31 |
| *** loteriety has joined #openstack-dev | 16:32 | |
| *** loteriety has quit IRC | 16:32 | |
| *** loteriety has joined #openstack-dev | 16:32 | |
| stevemar | can you make it comparable to what's currently given as an id? (what uuid gives?) | 16:32 |
| openstackstatus | NOTICE: LOST jobs are due to a known bug; use "recheck no bug" | 16:32 |
| *** ChanServ changes topic to "LOST jobs are due to a known bug; use "recheck no bug"" | 16:32 | |
| *** dina_belova has quit IRC | 16:32 | |
| stevemar | dolphm: ^ | 16:32 |
| dolphm | stevemar: i'd want to jump on sha1/224 before we have issues like had with PKI | 16:33 |
| dolphm | stevemar: sha1 is about that length | 16:33 |
| dolphm | stevemar: sha224 if security of sha1 is a complaint | 16:33 |
| stevemar | dolphm: agreed, go with sha1 for now | 16:34 |
| *** jpich has quit IRC | 16:34 | |
| stevemar | dolphm: cool cool, getting some lunch | 16:34 |
| dolphm | stevemar: same! | 16:34 |
| dolphm | bbl | 16:34 |
| *** gyee has joined #openstack-dev | 16:34 | |
| *** sridevi has quit IRC | 16:35 | |
| dolphm | ayoung: when you have time https://review.openstack.org/#/c/39899/ | 16:35 |
| *** freedomhui has joined #openstack-dev | 16:35 | |
| *** Alexei_987 has quit IRC | 16:36 | |
| *** cdub has quit IRC | 16:37 | |
| *** dina_belova has joined #openstack-dev | 16:37 | |
| *** cdub has joined #openstack-dev | 16:37 | |
| *** basha has joined #openstack-dev | 16:40 | |
| *** drewlander has quit IRC | 16:41 | |
| *** dolphm has quit IRC | 16:41 | |
| *** basha has quit IRC | 16:41 | |
| *** drewlander has joined #openstack-dev | 16:42 | |
| *** alexb_ has joined #openstack-dev | 16:44 | |
| *** dkranz has quit IRC | 16:45 | |
| *** tonix has quit IRC | 16:45 | |
| *** garyk has joined #openstack-dev | 16:45 | |
| *** nshaikh has left #openstack-dev | 16:46 | |
| *** SumitNaiksatam has quit IRC | 16:46 | |
| *** zbitter is now known as zaneb | 16:47 | |
| *** xga has quit IRC | 16:48 | |
| *** networkstatic has joined #openstack-dev | 16:49 | |
| *** cthulhup has quit IRC | 16:49 | |
| *** danpb has quit IRC | 16:52 | |
| *** briancurtin has quit IRC | 16:52 | |
| *** sthaha has quit IRC | 16:53 | |
| *** sthaha has joined #openstack-dev | 16:54 | |
| *** sthaha has quit IRC | 16:56 | |
| *** tkammer has quit IRC | 16:56 | |
| *** tjones has left #openstack-dev | 16:57 | |
| *** jcoufal has quit IRC | 16:58 | |
| *** stanchan has joined #openstack-dev | 16:58 | |
| *** jcoufal has joined #openstack-dev | 16:58 | |
| *** drewlander has quit IRC | 16:59 | |
| *** nati_ueno has joined #openstack-dev | 16:59 | |
| *** SumitNaiksatam has joined #openstack-dev | 17:02 | |
| *** jsavak has joined #openstack-dev | 17:02 | |
| *** joesavak has quit IRC | 17:03 | |
| *** ruhe has quit IRC | 17:04 | |
| *** leif has joined #openstack-dev | 17:04 | |
| *** neelashah1 has quit IRC | 17:04 | |
| *** leif is now known as Guest37172 | 17:04 | |
| *** Guest89150 has quit IRC | 17:06 | |
| *** maheshp has quit IRC | 17:07 | |
| *** david-lyle has quit IRC | 17:08 | |
| *** ftcjeff_ has quit IRC | 17:08 | |
| *** ftcjeff has quit IRC | 17:08 | |
| *** DuncanT- has quit IRC | 17:08 | |
| *** vaml has joined #openstack-dev | 17:08 | |
| *** martyntaylor has quit IRC | 17:08 | |
| *** Guest37172 has quit IRC | 17:08 | |
| *** david-lyle has joined #openstack-dev | 17:08 | |
| *** ftcjeff has joined #openstack-dev | 17:08 | |
| *** ftcjeff_ has joined #openstack-dev | 17:09 | |
| *** SergeyLukjanov has quit IRC | 17:09 | |
| *** leif_ has joined #openstack-dev | 17:09 | |
| *** DuncanT- has joined #openstack-dev | 17:09 | |
| *** MaxV has quit IRC | 17:10 | |
| *** neelashah has joined #openstack-dev | 17:10 | |
| *** dina_belova has quit IRC | 17:10 | |
| *** dina_belova has joined #openstack-dev | 17:12 | |
| ayoung | jamielennox, when you wake up: https://review.openstack.org/#/c/39899/ | 17:12 |
| *** fbo is now known as fbo_away | 17:13 | |
| *** feleouet has quit IRC | 17:14 | |
| *** dina_belova has quit IRC | 17:15 | |
| *** lifeless has quit IRC | 17:16 | |
| *** lifeless has joined #openstack-dev | 17:17 | |
| *** feleouet has joined #openstack-dev | 17:17 | |
| *** loteriety has left #openstack-dev | 17:17 | |
| *** _anant has joined #openstack-dev | 17:19 | |
| *** jab416171 has quit IRC | 17:20 | |
| *** mordred has quit IRC | 17:22 | |
| *** amohn9 has joined #openstack-dev | 17:22 | |
| *** dmakogon_ has joined #openstack-dev | 17:22 | |
| *** rcleere has joined #openstack-dev | 17:23 | |
| *** lexinator has joined #openstack-dev | 17:23 | |
| *** lucasagomes has quit IRC | 17:24 | |
| *** yolanda has quit IRC | 17:25 | |
| *** jpeeler has quit IRC | 17:25 | |
| *** safchain__ has quit IRC | 17:25 | |
| *** ruhe has joined #openstack-dev | 17:26 | |
| *** markwash has joined #openstack-dev | 17:27 | |
| *** leif__ has joined #openstack-dev | 17:27 | |
| *** giulivo has quit IRC | 17:27 | |
| *** BobBall is now known as BobBallAway | 17:28 | |
| *** leif_ has quit IRC | 17:29 | |
| *** sushils has quit IRC | 17:30 | |
| *** mordred has joined #openstack-dev | 17:30 | |
| *** drewlander has joined #openstack-dev | 17:30 | |
| *** rharwood has joined #openstack-dev | 17:31 | |
| *** vaml has quit IRC | 17:31 | |
| *** jvrbanac has quit IRC | 17:31 | |
| *** sushils has joined #openstack-dev | 17:31 | |
| *** Tross has quit IRC | 17:32 | |
| *** vartom4 has joined #openstack-dev | 17:32 | |
| *** jpeeler has joined #openstack-dev | 17:33 | |
| *** vuil has joined #openstack-dev | 17:33 | |
| *** sc68cal has quit IRC | 17:33 | |
| *** sc68cal has joined #openstack-dev | 17:35 | |
| *** _anant has quit IRC | 17:35 | |
| *** leif_ has joined #openstack-dev | 17:35 | |
| *** drewlander has quit IRC | 17:35 | |
| *** arezadr has quit IRC | 17:35 | |
| *** drewlander has joined #openstack-dev | 17:36 | |
| *** briancurtin has joined #openstack-dev | 17:36 | |
| *** schwicht has quit IRC | 17:36 | |
| *** schwicht has joined #openstack-dev | 17:37 | |
| *** bashok has joined #openstack-dev | 17:37 | |
| *** Tross has joined #openstack-dev | 17:37 | |
| *** leif__ has quit IRC | 17:37 | |
| *** morganfainberg is now known as morganfainberg|a | 17:38 | |
| *** jcoufal has quit IRC | 17:38 | |
| *** venkatesh has joined #openstack-dev | 17:38 | |
| *** jcoufal has joined #openstack-dev | 17:39 | |
| *** alexb_ has quit IRC | 17:41 | |
| *** rharwood has quit IRC | 17:41 | |
| *** cthulhup has joined #openstack-dev | 17:42 | |
| *** rnirmal has quit IRC | 17:43 | |
| *** SergeyLukjanov has joined #openstack-dev | 17:43 | |
| *** alexb_ has joined #openstack-dev | 17:43 | |
| *** cthulhup has quit IRC | 17:47 | |
| *** afazekas has joined #openstack-dev | 17:48 | |
| *** fabio__ has quit IRC | 17:49 | |
| *** _anant has joined #openstack-dev | 17:50 | |
| *** mlavalle has joined #openstack-dev | 17:50 | |
| *** johnthetubaguy has quit IRC | 17:52 | |
| *** tmclaugh[work] has joined #openstack-dev | 17:53 | |
| *** _anant has quit IRC | 17:53 | |
| *** dina_belova has joined #openstack-dev | 17:54 | |
| *** lbragstad_ has quit IRC | 17:54 | |
| *** henrynash has joined #openstack-dev | 17:55 | |
| henrynash | ayoung, dolphm: have posted new version of https://review.openstack.org/#/c/38308 | 17:55 |
| *** lbragstad_ has joined #openstack-dev | 17:55 | |
| henrynash | ayoung: so you really think we should not be doing this at the controller level? | 17:56 |
| *** ruhe has quit IRC | 17:58 | |
| henrynash | dolphm: The only one of your issues I did not resolve was whether we needed the @prepareprotection wrapper…as per my comment, one issue is that finding a supported/recommended way of getting the method name of the method your in seems a lot harder than doing it in the wrapper | 17:58 |
| *** lexinator1 has joined #openstack-dev | 18:02 | |
| *** joesavak has joined #openstack-dev | 18:02 | |
| *** vkmc has joined #openstack-dev | 18:02 | |
| *** jsavak has quit IRC | 18:02 | |
| *** lexinator has quit IRC | 18:03 | |
| *** fbo_away is now known as fbo | 18:06 | |
| *** jsavak has joined #openstack-dev | 18:07 | |
| *** rnirmal has joined #openstack-dev | 18:08 | |
| *** avishay has quit IRC | 18:09 | |
| *** sushils has quit IRC | 18:10 | |
| *** avishay has joined #openstack-dev | 18:10 | |
| *** joesavak has quit IRC | 18:10 | |
| *** datsun180b has quit IRC | 18:11 | |
| *** xmltok has joined #openstack-dev | 18:12 | |
| *** cthulhup has joined #openstack-dev | 18:13 | |
| *** marun has quit IRC | 18:14 | |
| ayoung | henrynash, yeah, controller is the wrong level | 18:14 |
| ayoung | protection should be on the entity itself | 18:15 |
| ayoung | so read is one protection, write another | 18:15 |
| henrynash | ayoung: but it can't be "one the way out" as you said…what about delete? | 18:15 |
| ayoung | henrynash, or update for that matter.... | 18:16 |
| ayoung | hmmm | 18:16 |
| *** sushils has joined #openstack-dev | 18:16 | |
| henrynash | ayoung: your concern is the extra read? | 18:16 |
| *** xBsd has joined #openstack-dev | 18:17 | |
| *** joesavak has joined #openstack-dev | 18:17 | |
| ayoung | henrynash, yeah. This kind of protection should be enforced on the backend, though | 18:17 |
| ayoung | in LDAP it would be per object ACLs | 18:17 |
| ayoung | in the Database, though, you don't tend to have row level object ownership | 18:17 |
| ayoung | henrynash, the other issue, though, is that all workflows go through the manager, but not all go through the same controller | 18:17 |
| *** freedomhui has quit IRC | 18:18 | |
| henrynash | ayoung: but we don't expose per object protect at the policy file level | 18:18 |
| ayoung | tokens especially are accessed via multiple extensions | 18:18 |
| ayoung | henrynash, actually, we do. THere is nothing a bout the policy stuff that implies it has to be controller | 18:18 |
| *** fbo is now known as fbo_away | 18:18 | |
| ayoung | henrynash, this is SELinux for openstack | 18:18 |
| *** welldannit has joined #openstack-dev | 18:19 | |
| henrynash | ayoung: ahh, sorry, I see what you mean | 18:19 |
| simo | ayoung: call it MAC for openctack | 18:19 |
| *** marun has joined #openstack-dev | 18:19 | |
| ayoung | simo, MACstack! | 18:19 |
| simo | smack | 18:19 |
| *** boris-42 has joined #openstack-dev | 18:19 | |
| *** jsavak has quit IRC | 18:19 | |
| henrynash | ayoung: it just feels like this is a lot more complex to push down and be done at a lower label…and (aside saving a get() ) what's the REAL advantage? | 18:20 |
| simo | henrynash: if you are doing access control on the data you should do it at the driver level | 18:21 |
| henrynash | ayoung: one I can think of is that right now you define the permission you need by the entry point, rather than actually all the objects that get touched | 18:21 |
| *** _ffio_ has joined #openstack-dev | 18:21 | |
| *** ffio_ has quit IRC | 18:21 | |
| *** xBsd has quit IRC | 18:21 | |
| simo | henrynash: it's an easy way to create holes | 18:21 |
| *** rharwood has joined #openstack-dev | 18:21 | |
| ayoung | henrynash, you need to get it right everywhere. And you never get it right everywhere | 18:22 |
| henrynash | ayoung: and are you suggesting we do this at the Manager level or really really down in the driver itself | 18:22 |
| *** chandankumar has quit IRC | 18:22 | |
| ayoung | henrynash, so, for the modifiers, we need to put an access check into the manager | 18:22 |
| ayoung | henrynash, manager | 18:22 |
| ayoung | nothing should go direct to driver | 18:22 |
| simo | the best place is where all callers *have* to go through | 18:22 |
| simo | and where the code can know how to best use the native access control (if any) or fake it | 18:23 |
| ayoung | simo, yeah, and in this case that is the manager. The manager does not have to overload a call, but it can. We can even probably make the policy check implicit on every call through the manager | 18:23 |
| henrynash | young, simo: so, here's the rub | 18:23 |
| ayoung | Dreaming? | 18:23 |
| ayoung | perchance? | 18:24 |
| *** sandeepr_ltp has quit IRC | 18:24 | |
| henrynash | ayoung, simo: https://review.openstack.org/#/c/38308 implements this at the controller leve; | 18:24 |
| henrynash | and is pretty trivial now…(see the latest version) | 18:24 |
| henrynash | we get a lot of bang for our buck…and close the MASSIVE hole we have right now in that you can't protected the users/groups and projects in your domain | 18:25 |
| simo | henrynash: the problem is that is pretty trivial to add a new controller and not do access control | 18:25 |
| simo | and then you have a giant hole in your code | 18:25 |
| *** fbo_away is now known as fbo | 18:25 | |
| *** datsun180b has joined #openstack-dev | 18:25 | |
| henrynash | simo: that's always been true for api parameter checking | 18:25 |
| ayoung | henrynash, and always been broken | 18:26 |
| simo | see all these shoulds here: "More complex API | 18:26 |
| simo | 94 calls (for example that deal with several different entities) should be | 18:26 |
| simo | 95 protected by calling the V3controller check_protection() from within the | 18:26 |
| simo | 96 API method itself (which should be wrapped with @prepareprotection)." | 18:26 |
| simo | henrynash: this is almost cetainly not going to happen right | 18:26 |
| *** venkatesh has quit IRC | 18:26 | |
| henrynash | simo: ye of little faith :-) | 18:26 |
| simo | it's all hidden stuff that both a modifier and a reviewr can very easily miss | 18:26 |
| *** xBsd has joined #openstack-dev | 18:27 | |
| simo | henrynash: nah, "ye of the one that handles CVEs for a well know project" | 18:27 |
| ayoung | henrynash, so, on the mutators, we may not need to do a deliberate fetch. It it likely an ownership thing...and that may actually come from a separate object. | 18:27 |
| ayoung | true dat | 18:27 |
| ayoung | henrynash, let's see if we can make this a mechanism on the manager...we have a wrapper already | 18:28 |
| *** Mandell has joined #openstack-dev | 18:28 | |
| henrynash | ayoung, simo: my proposal is that a controller level protection is good start and at least gets us away from the real pain we have right now. Doing that in Havana and then pushing it down deeper in iceHouse seems like a sensible way forward | 18:28 |
| *** woodspa has joined #openstack-dev | 18:28 | |
| *** mlavalle has quit IRC | 18:28 | |
| *** SumitNaiksatam has quit IRC | 18:28 | |
| ayoung | henrynash, https://github.com/openstack/keystone/blob/master/keystone/common/manager.py | 18:28 |
| simo | henrynash: are you going to bind yourself to do the work in icehouse ? | 18:29 |
| ayoung | what if we do the wrapping at the get addr level | 18:29 |
| *** SumitNaiksatam has joined #openstack-dev | 18:29 | |
| henrynash | simo: if that is what is required (and the community agrees with that approach) then yes | 18:30 |
| ayoung | henrynash, the general rule is "you must be an admin to affect things in the assignment backend." | 18:30 |
| ayoung | changing user data...you need to be a domain admin | 18:30 |
| *** stevemar has quit IRC | 18:30 | |
| ayoung | so we have a chicken/egg problem | 18:30 |
| ayoung | we can't put the constraints at the driver level and then make driver calls in order to check the constraints | 18:31 |
| simo | henrynash: good enough for me | 18:31 |
| *** boden has quit IRC | 18:31 | |
| simo | henrynash: but if you can easily move it now to a lower level it would be even better | 18:31 |
| henrynash | ayoung: I agree with your general view of "put the protection as close to the object", but we'll have to really think it through | 18:32 |
| ayoung | henrynash, but the manager has the ability to do an end run around the policy when calling itself | 18:32 |
| henrynash | ayoung: it is true | 18:32 |
| *** briancurtin has quit IRC | 18:32 | |
| ayoung | henrynash, OK, if your current approach is a stop gap, we'll work through this for Icehouse | 18:32 |
| *** maheshp has joined #openstack-dev | 18:33 | |
| ayoung | But, still, I would prefer it if the mechanism were not assuming it is in a controller | 18:33 |
| ayoung | I think that still is not the right design | 18:33 |
| henrynash | ayoung: it feels a bit like filtering…ok we got it to work at that controller level…now we have to work it down | 18:33 |
| ayoung | so, first off, make the decorator into a class. I think that gives us more flexibility | 18:34 |
| *** SumitNaiksatam has quit IRC | 18:34 | |
| *** nachi has joined #openstack-dev | 18:34 | |
| henrynash | ayoung: so dolph has pushed me the other way…and I have removed my decorator and the simple support is down within the regular @proection wrapper | 18:35 |
| ayoung | the initializer can either pull the reference it needs out of the controller, or let them be passed in via parameters | 18:35 |
| ayoung | henrynash, OK...I'll look | 18:35 |
| *** jvrbanac has joined #openstack-dev | 18:35 | |
| henrynash | ayoung: the good news is that actually it wold be easy now to pull out later and push down | 18:35 |
| *** MaxV has joined #openstack-dev | 18:36 | |
| *** maheshp has quit IRC | 18:38 | |
| ayoung | henrynash, adding both a decorator and a line inside the function is strange. Why is that needed? | 18:38 |
| *** cdub has quit IRC | 18:39 | |
| *** cdub has joined #openstack-dev | 18:39 | |
| ayoung | henrynash, I think @user_and_group_protection would make more sense...\ | 18:40 |
| *** dolphm has joined #openstack-dev | 18:40 | |
| ayoung | henrynash, so, not due to this patch, but a general problem with our policy aopproach is that it is only checking the name of the function. We really need to know the classname, too. | 18:41 |
| *** danwent has quit IRC | 18:41 | |
| dolphm | ayoung: are the method names not unique? | 18:41 |
| ayoung | dolphm, "create" "list" ? | 18:41 |
| *** reed has quit IRC | 18:41 | |
| *** sushils has quit IRC | 18:41 | |
| dolphm | ayoung: create_noun, list_nouns | 18:41 |
| ayoung | dolphm, so far, they have been, but it has been artificial | 18:41 |
| dolphm | ayoung: the naming is intentional | 18:42 |
| ayoung | dolphm, yeah, but you could have the same method name on two extensions, and now they have to be unique | 18:42 |
| dolphm | ayoung: prefix the policy entry with the extension name | 18:42 |
| ayoung | dolphm, ? | 18:43 |
| dolphm | ayoung: i.e. namespace extensions | 18:43 |
| dolphm | ayoung: that's what the extension prefix is for | 18:43 |
| *** novas0x2a|laptop has joined #openstack-dev | 18:43 | |
| dolphm | os_pki:get_cert vs custom_ca:get_cert | 18:44 |
| *** feleouet has quit IRC | 18:45 | |
| *** sushils has joined #openstack-dev | 18:45 | |
| *** alop has quit IRC | 18:45 | |
| dolphm | ayoung: via OS-PKI extension, is the signing key API intended to be public or restricted to other openstack services? | 18:50 |
| *** feleouet has joined #openstack-dev | 18:50 | |
| *** troytoman is now known as troytoman-away | 18:51 | |
| *** Mandell has quit IRC | 18:51 | |
| *** cthulhup has quit IRC | 18:51 | |
| *** Mandell has joined #openstack-dev | 18:52 | |
| *** troytoman-away is now known as troytoman | 18:52 | |
| *** jasdeepH has quit IRC | 18:53 | |
| *** alop has joined #openstack-dev | 18:54 | |
| *** litong has quit IRC | 18:55 | |
| *** stanchan has quit IRC | 18:55 | |
| *** bknudson has quit IRC | 18:55 | |
| *** jecarey has quit IRC | 18:56 | |
| *** Mandell has quit IRC | 18:56 | |
| *** jecarey has joined #openstack-dev | 18:56 | |
| *** maheshp has joined #openstack-dev | 18:56 | |
| *** jsavak has joined #openstack-dev | 18:57 | |
| *** sarob has joined #openstack-dev | 18:59 | |
| *** joesavak has quit IRC | 19:00 | |
| *** shri has joined #openstack-dev | 19:01 | |
| *** Mandell has joined #openstack-dev | 19:01 | |
| *** jvrbanac has quit IRC | 19:02 | |
| *** networkstatic has quit IRC | 19:05 | |
| nachi | ayoung: hey | 19:07 |
| ayoung | dolphm, public | 19:09 |
| *** danwent has joined #openstack-dev | 19:09 | |
| ayoung | dolphm, a public key is, by its nature, safe to share. Anyone should be able to validate a token | 19:10 |
| *** gordc has quit IRC | 19:10 | |
| dolphm | ayoung: right, but not for oauth access keys if the secret key is included | 19:13 |
| *** safchain__ has joined #openstack-dev | 19:13 | |
| *** alexb_ has quit IRC | 19:13 | |
| *** salv-orlando has joined #openstack-dev | 19:14 | |
| *** vuil has quit IRC | 19:15 | |
| *** radez is now known as radez_g0n3 | 19:15 | |
| ayoung | dolphm, I think those fall into a very different category. This extension is mostly just a publishing place for public information | 19:16 |
| ayoung | I was paranoid when I made the revocation list admin only, but I think we can reverse that now | 19:17 |
| ayoung | it is more of a weakness than a benefit | 19:17 |
| *** jvrbanac has joined #openstack-dev | 19:17 | |
| ayoung | ideally, though, we would get rid of the revocation list altogether | 19:17 |
| dolphm | ayoung: interesting thought on the revocation list | 19:17 |
| ayoung | dolphm, however, I think that the use of signing certs would be useful for SAML as well as for Tokens. I'm just coming up to speed on SAML, though | 19:18 |
| dolphm | ayoung: i'm just sad i wouldn't be able to share existing infrastructure | 19:19 |
| *** mlavalle has joined #openstack-dev | 19:19 | |
| *** beagles has quit IRC | 19:20 | |
| *** sarob has quit IRC | 19:21 | |
| *** sarob has joined #openstack-dev | 19:21 | |
| *** wolfdreamer has quit IRC | 19:21 | |
| ayoung | dolphm, you mean tha oauth and tokens can't share their PKI implementations? | 19:22 |
| dolphm | ayoung: correct | 19:22 |
| ayoung | dolphm, if it needs to be secret, it is not a public key | 19:23 |
| ayoung | dolphm, I think that shared symmetric secrets are more akin to what simo is doing with KDS | 19:23 |
| dolphm | ayoung: the problem there is that there's no guarantee that an access key was created by keystone | 19:23 |
| dolphm | ayoung: any service with the shared secret could generate oauth access keys & secrets | 19:23 |
| ayoung | dolphm, well, with KDS, there is pretty much a guarantee that it wasn't | 19:23 |
| henrynash | ayoung: so the @prepareproetctio and inline function was really that I could'd find a really good and recommended way of getting the function name from within the fucntion | 19:24 |
| ayoung | henrynash, saw a stackoverflow about that | 19:24 |
| henrynash | ayoung: on user_and_group_proectection()….I agree, that's a better name for it | 19:24 |
| henrynash | ayoung: yeah, there were solutions..but none seems great | 19:24 |
| ayoung | http://stackoverflow.com/questions/666216/decorator-classes-in-python | 19:25 |
| *** beagles has joined #openstack-dev | 19:25 | |
| *** sarob has quit IRC | 19:25 | |
| ayoung | look at the bottom of the question, he does a modified solution that makes the decorators stack, and gets the right name | 19:26 |
| henrynash | ayoung: ok, let me look at that | 19:26 |
| ayoung | henrynash, if I understand it correctly, the __init__ gets called when the decorator is first processed upon read of the file. He extracts the name from the func object passed in there | 19:28 |
| *** mrunge has quit IRC | 19:28 | |
| *** drewlander has quit IRC | 19:28 | |
| ayoung | and does it in such a way that the same value would be passed up the chain to another decorator outside of the Null one | 19:28 |
| *** jasdeepH has joined #openstack-dev | 19:28 | |
| henrynash | ayoung: a bit sneaky…:-) | 19:28 |
| ayoung | henrynash, set(dir(func)) ... | 19:29 |
| *** vuil has joined #openstack-dev | 19:29 | |
| *** avishay has quit IRC | 19:29 | |
| *** jab416171 has joined #openstack-dev | 19:29 | |
| ayoung | and remove from that set(dir(self)) | 19:29 |
| ayoung | so all attributes of the passed in object that don't conflict with those of the decorator are set on the self object (I assume the decorator) | 19:30 |
| ayoung | Do I read that right? | 19:31 |
| *** neelashah has quit IRC | 19:31 | |
| ayoung | __repr__(self) I think comes in to play when the set(dir(self)) is called | 19:31 |
| ayoung | henrynash, also, notice the use case for that: @AccessCheck | 19:33 |
| ayoung | very similar to what we want | 19:33 |
| *** MaxV has quit IRC | 19:33 | |
| *** litong has joined #openstack-dev | 19:33 | |
| *** gordc has joined #openstack-dev | 19:34 | |
| *** wolfdreamer has joined #openstack-dev | 19:36 | |
| *** vipul is now known as vipul-away | 19:36 | |
| *** vipul-away is now known as vipul | 19:36 | |
| *** boris-42 has quit IRC | 19:37 | |
| *** cdub_ has quit IRC | 19:40 | |
| *** vuil has quit IRC | 19:40 | |
| *** cdub_ has joined #openstack-dev | 19:41 | |
| *** gordc1 has joined #openstack-dev | 19:42 | |
| *** jmontemayor has joined #openstack-dev | 19:42 | |
| *** melwitt has joined #openstack-dev | 19:43 | |
| *** gordc has quit IRC | 19:43 | |
| *** jvrbanac_1 has joined #openstack-dev | 19:44 | |
| *** xqueralt is now known as xqueralt-afk | 19:45 | |
| bashok | ayoung: hi | 19:45 |
| ayoung | nachi, you had something for me? | 19:45 |
| ayoung | bashok, ask away | 19:46 |
| *** gordc1 has quit IRC | 19:47 | |
| *** jvrbanac has quit IRC | 19:47 | |
| nachi | ayoung: Jenkins build failed for one of my reviews. When i checked the logs, it looks failure is not related to my changes. I was going to check if you would have an idea about the failure https://review.openstack.org/#/c/40036/ | 19:48 |
| *** stevemar has joined #openstack-dev | 19:48 | |
| *** apioli has joined #openstack-dev | 19:50 | |
| *** carl_baldwin has joined #openstack-dev | 19:50 | |
| *** vipul is now known as vipul-away | 19:51 | |
| ayoung | nachi, you want to do a recheck. Usually that means looking up the error from the link on the zuul page and putting in a comment "recheck bug Id" | 19:52 |
| ayoung | where the Id is the launchpad bug id, of course | 19:52 |
| ayoung | nachi, also, see the message line for this chat room | 19:53 |
| *** vipul-away is now known as vipul | 19:53 | |
| nachi | ayoung: ok. thanks | 19:54 |
| *** terryh has quit IRC | 19:55 | |
| nachi | ayoung: this bp change is related to the bug which you created https://bugs.launchpad.net/keystone/+bug/1178741. After i get jenkins building successfully i will add you for review | 19:56 |
| uvirtbot | Launchpad bug 1178741 in keystone "move remaining middleware to keystone client" [Medium,Confirmed] | 19:56 |
| *** jvrbanac_1 has quit IRC | 19:56 | |
| *** jvrbanac has joined #openstack-dev | 19:57 | |
| *** troytoman is now known as troytoman-away | 19:57 | |
| *** cyeoh has quit IRC | 19:57 | |
| *** chuckieb|2 has quit IRC | 19:58 | |
| *** cyeoh has joined #openstack-dev | 19:58 | |
| bashok | ayoung: I am troubleshooting keystone PKI with havana staging environment, while doing glance image-list I noticed that "Request returned failure status. | 19:58 |
| bashok | HTTPInternalServerError (HTTP 500)" I do have the .pem files in my signing directory, also SELINUX is in permissive mode, any tips to resolve the problem? | 19:58 |
| *** otherwiseguy has quit IRC | 19:59 | |
| *** tserong has quit IRC | 19:59 | |
| *** jhesketh has quit IRC | 19:59 | |
| *** networkstatic has joined #openstack-dev | 20:00 | |
| *** tserong has joined #openstack-dev | 20:00 | |
| *** jhesketh has joined #openstack-dev | 20:00 | |
| *** stanchan has joined #openstack-dev | 20:00 | |
| *** lexinator1 has quit IRC | 20:00 | |
| *** lexinator1 has joined #openstack-dev | 20:02 | |
| *** lexinator1 is now known as lexinator | 20:02 | |
| *** cthulhup has joined #openstack-dev | 20:02 | |
| *** terryh has joined #openstack-dev | 20:02 | |
| *** stanchan has quit IRC | 20:02 | |
| ayoung | bashok, you tried wiping out the pem files and they get refetched? | 20:03 |
| *** terryh has quit IRC | 20:03 | |
| *** mrodden has quit IRC | 20:05 | |
| bashok | ayoung: yes they get refetched | 20:05 |
| *** cthulhup has quit IRC | 20:06 | |
| bashok | ayoung: from keystone.log, I see this, but not sure where I have done mistake.. | 20:07 |
| bashok | WARNING [keystone.common.wsgi] Authorization failed. The request you have made requires authentication. from 127.0.0.1 | 20:07 |
| *** egallen has quit IRC | 20:07 | |
| ayoung | bashok, sounds like an invalid token then. run keystone token-get ? | 20:07 |
| bashok | ayoung: 'NoneType' object has no attribute 'has_service_catalog' | 20:08 |
| bashok | this is what I am getting | 20:08 |
| *** jbresnah has quit IRC | 20:08 | |
| *** networkstatic has quit IRC | 20:09 | |
| *** jsavak has quit IRC | 20:09 | |
| *** jbresnah has joined #openstack-dev | 20:09 | |
| *** vuil has joined #openstack-dev | 20:11 | |
| *** ChanServ changes topic to "OpenStack development || Support is in #openstack" | 20:11 | |
| *** joesavak has joined #openstack-dev | 20:13 | |
| *** afazekas has quit IRC | 20:13 | |
| *** danwent has quit IRC | 20:13 | |
| *** yolanda has joined #openstack-dev | 20:13 | |
| *** stanchan has joined #openstack-dev | 20:14 | |
| *** vuil has quit IRC | 20:15 | |
| *** rnirmal has quit IRC | 20:18 | |
| *** morganfainberg|a is now known as morganfainberg | 20:20 | |
| *** stanchan has quit IRC | 20:20 | |
| stevemar | dolphm: ping | 20:22 |
| *** stanchan has joined #openstack-dev | 20:22 | |
| *** joesavak has quit IRC | 20:23 | |
| *** danwent has joined #openstack-dev | 20:23 | |
| ayoung | bashok, what version are you running? | 20:24 |
| *** jcoufal has quit IRC | 20:24 | |
| bashok | ayoung:0.3.1 | 20:24 |
| ayoung | bashok, that is what you get back from keystone version? | 20:26 |
| ayoung | keystone --version | 20:26 |
| bashok | ayoung: yes | 20:26 |
| bashok | correct | 20:26 |
| *** rverchikov has left #openstack-dev | 20:28 | |
| *** Shaan7 has quit IRC | 20:29 | |
| *** amohn9 has quit IRC | 20:29 | |
| *** rfolco has quit IRC | 20:31 | |
| *** Shaan7 has joined #openstack-dev | 20:32 | |
| *** briancurtin has joined #openstack-dev | 20:32 | |
| *** donaldh has joined #openstack-dev | 20:32 | |
| *** cfriesen has quit IRC | 20:33 | |
| *** rbrady is now known as rbrady-afk | 20:34 | |
| *** cfriesen has joined #openstack-dev | 20:34 | |
| *** yolanda has quit IRC | 20:34 | |
| *** dvarga has quit IRC | 20:36 | |
| bashok | ayoung: there could be any issues with keystone-client? | 20:36 |
| *** rnirmal has joined #openstack-dev | 20:38 | |
| ayoung | bashok, could be. That sounds like a bug, but I haven't seen it myself | 20:38 |
| *** feleouet has quit IRC | 20:38 | |
| ayoung | bashok, there are lot of changes happening around the client. Please file that as a bug and provide as much information as you can, to include build for client, server, etc. And the steps you took to troubleshoot | 20:39 |
| *** bknudson has joined #openstack-dev | 20:39 | |
| *** herndon has joined #openstack-dev | 20:40 | |
| *** jecarey has quit IRC | 20:40 | |
| bashok | ayoung, I will open a bug , thanks :) | 20:40 |
| *** rbrady-afk has left #openstack-dev | 20:40 | |
| *** feleouet has joined #openstack-dev | 20:41 | |
| stevemar | morganfainberg: ping | 20:45 |
| morganfainberg | stevemar: hi | 20:45 |
| stevemar | morganfainberg: do you have a link for the work you did in moving keystone tests around? | 20:45 |
| morganfainberg | stevemar: hrm? you mean the commit that did that? | 20:46 |
| stevemar | yeah | 20:46 |
| *** odyssey4me4 has quit IRC | 20:46 | |
| morganfainberg | stevemar: wasn't my work (really, i can't take credit for it, it was a lot of work) | 20:46 |
| stevemar | i can't seem to find it | 20:46 |
| morganfainberg | stevemar: let me see. | 20:46 |
| morganfainberg | stevemar: https://review.openstack.org/#/c/36184/ | 20:47 |
| stevemar | morganfainberg: ah, you were not the owner | 20:48 |
| stevemar | that's why my query wasn't working | 20:48 |
| stevemar | cool, gonna see if i can update keystoneclient | 20:48 |
| morganfainberg | there is a review, i think for that already | 20:49 |
| morganfainberg | hrm | 20:49 |
| morganfainberg | i am wrong | 20:50 |
| morganfainberg | stevemar: go for it! :) | 20:50 |
| *** lbragstad has quit IRC | 20:55 | |
| *** tmclaugh[work] has quit IRC | 20:55 | |
| *** lexinator has quit IRC | 20:56 | |
| *** jruzicka has quit IRC | 20:58 | |
| bashok | ayoung, one more thing which i observed , not sure why keystone-manage pki_setup is expecting --keystone-user and --keystone-group as a mandatory fields, in the docs its no where mentioned to use those fileds | 21:00 |
| *** stevemar has quit IRC | 21:01 | |
| ayoung | bashok, it is mandatory if run as root, otherwise keystone won't be able to read the files it produces | 21:02 |
| ayoung | jamielennox, you awake yet? | 21:02 |
| *** fbo is now known as fbo_away | 21:02 | |
| *** lexinator has joined #openstack-dev | 21:05 | |
| dolphm | bashok: they were originally defined as optional, so the docs might be lagging a bit | 21:06 |
| bashok | dolphm, thanks for clarifying | 21:08 |
| *** dkranz has joined #openstack-dev | 21:08 | |
| *** dprince has quit IRC | 21:09 | |
| *** jbresnah has quit IRC | 21:10 | |
| openstackstatus | NOTICE: Restarting zuul, changes should be automatically re-enqueued | 21:10 |
| *** ChanServ changes topic to "Restarting zuul, changes should be automatically re-enqueued" | 21:11 | |
| *** jecarey has joined #openstack-dev | 21:11 | |
| *** jbresnah_ has joined #openstack-dev | 21:11 | |
| *** topol has quit IRC | 21:11 | |
| *** _ffio_ has quit IRC | 21:11 | |
| *** mrodden has joined #openstack-dev | 21:12 | |
| *** wolfdreamer has quit IRC | 21:15 | |
| *** dina_belova has quit IRC | 21:16 | |
| *** gordc has joined #openstack-dev | 21:18 | |
| *** AeroNotix has joined #openstack-dev | 21:20 | |
| AeroNotix | hi guys | 21:20 |
| AeroNotix | the objectstore implementation - where does it compare ETag hashes for file uploads? | 21:20 |
| AeroNotix | this: https://github.com/openstack/nova/blob/master/nova/objectstore/s3server.py#L332 | 21:20 |
| AeroNotix | seems to be the handler for it, but I can't see where it checks the ETag itself | 21:21 |
| *** jmontemayor has quit IRC | 21:21 | |
| ayoung | dolphm, so, the client has a function getid which trys to figure out if we are passing in an object or an identifier. Logic is here: https://github.com/openstack/python-keystoneclient/blob/master/keystoneclient/base.py#L36 | 21:21 |
| ayoung | dolphm, any reason we can't change to testing for a string instead of uuid? | 21:22 |
| ayoung | uuid is going to break on identifiers from LDAP | 21:22 |
| ayoung | surprised no one has reported that | 21:23 |
| bashok | ayoung, now I can do keystone token-get and keyston catalog, both works fine, I did unset some ENV variables which helped, however still glance auth issue persists, I am wondering whats wrong | 21:23 |
| ayoung | bashok, ok, so in glance you are using the same userid/password/projectid combination that you just tested with keystone token-get? | 21:23 |
| *** dkranz has quit IRC | 21:23 | |
| *** matiu has quit IRC | 21:24 | |
| *** pabelanger has quit IRC | 21:24 | |
| ayoung | ah, disregard. I don't think we have uuid on any of our objects, do we? | 21:25 |
| *** reed has joined #openstack-dev | 21:25 | |
| AeroNotix | anyone any idea where the hashes are being tested for PUT'ing new objects? | 21:26 |
| bashok | ayoung, yes the same user credentials I used and got a token | 21:26 |
| ayoung | bashok, is it possible that the user legitimately does not have access to the resource? | 21:27 |
| *** neelashah has joined #openstack-dev | 21:27 | |
| *** jasondotstar has quit IRC | 21:27 | |
| *** xBsd has quit IRC | 21:28 | |
| *** leif has joined #openstack-dev | 21:29 | |
| *** leif is now known as Guest22979 | 21:29 | |
| *** fbo_away is now known as fbo | 21:30 | |
| *** dkranz has joined #openstack-dev | 21:31 | |
| *** leif_ has quit IRC | 21:31 | |
| *** Guest22979 has quit IRC | 21:31 | |
| *** leif_ has joined #openstack-dev | 21:31 | |
| *** gkotton has joined #openstack-dev | 21:32 | |
| *** vipul is now known as vipul-away | 21:32 | |
| *** vuil has joined #openstack-dev | 21:33 | |
| *** wolfdreamer has joined #openstack-dev | 21:34 | |
| *** jecarey has quit IRC | 21:35 | |
| *** garyk has quit IRC | 21:35 | |
| *** gkotton is now known as garyk | 21:35 | |
| *** MaxV has joined #openstack-dev | 21:35 | |
| *** lbragstad has joined #openstack-dev | 21:35 | |
| *** vipul-away is now known as vipul | 21:35 | |
| *** matiu has joined #openstack-dev | 21:40 | |
| *** alop_ has joined #openstack-dev | 21:40 | |
| *** alop has quit IRC | 21:41 | |
| *** otherwiseguy has joined #openstack-dev | 21:41 | |
| *** alop_ is now known as alop | 21:41 | |
| bashok | ayoung, my glance-registry conf was having a mispelled value in the keystone auth section, I figured that out, thanks a lot for your time, have a good day! | 21:41 |
| *** bashok has quit IRC | 21:42 | |
| *** dkranz has quit IRC | 21:43 | |
| *** SergeyLukjanov has quit IRC | 21:45 | |
| *** litong has quit IRC | 21:45 | |
| *** AeroNotix has quit IRC | 21:49 | |
| *** kui has joined #openstack-dev | 21:49 | |
| *** changbl has quit IRC | 21:49 | |
| kui | A question abouth the jenkins gate job, some test result is taged with "LOST", which induce the jenkins failed. https://review.openstack.org/#/c/43035/ | 21:51 |
| *** fbo is now known as fbo_away | 21:52 | |
| kui | I leave a new comment "reverify bug ####" to reverify it, it that correctly ? | 21:52 |
| burt | kui: reverify no bug | 21:52 |
| burt | unless it's due to a specific bug in LP, then go ahead and do that | 21:52 |
| burt | (substitute the bug number for the ####) | 21:53 |
| kui | burt: Thanks :) | 21:54 |
| *** dkranz has joined #openstack-dev | 21:55 | |
| *** jasdeepH_ has joined #openstack-dev | 21:59 | |
| *** jasdeepH has quit IRC | 21:59 | |
| *** jasdeepH_ is now known as jasdeepH | 21:59 | |
| *** MaxV has quit IRC | 22:00 | |
| *** corXi has quit IRC | 22:02 | |
| *** kbringard has quit IRC | 22:03 | |
| *** burt has quit IRC | 22:04 | |
| *** mrodden has quit IRC | 22:04 | |
| *** jecarey has joined #openstack-dev | 22:05 | |
| dolphm | ayoung: regarding the uuid or not logic... it's garbage :( any improvement welcome | 22:06 |
| *** dkranz has quit IRC | 22:06 | |
| dolphm | ayoung: also, it *has* been reported | 22:06 |
| dolphm | ayoung: https://bugs.launchpad.net/python-keystoneclient/+bug/1189933 | 22:07 |
| uvirtbot | Launchpad bug 1189933 in python-keystoneclient "user-get fails when using IDs which are not UUIDs" [High,In progress] | 22:07 |
| morganfainberg | dolphm: oh ick. | 22:07 |
| *** alexb_ has joined #openstack-dev | 22:07 | |
| dolphm | openstackclient takes a *better* approach, at least at first glance | 22:08 |
| dolphm | i'd still prefer explicit --whatever-id= or --whatever-name= instead of positional arguments + having to guess | 22:08 |
| bknudson | deprecate keystone and use openstack | 22:10 |
| *** spzala has quit IRC | 22:11 | |
| dolphm | bknudson: ultimately, i agree... openstackclient probably works better for ldap users | 22:11 |
| *** _TheDodd_ has quit IRC | 22:11 | |
| dolphm | bknudson: but we shouldn't have a broken client, if possible, deprecated or not | 22:11 |
| *** jbresnah has joined #openstack-dev | 22:13 | |
| *** jbresnah_ has quit IRC | 22:13 | |
| *** dmakogon_ has left #openstack-dev | 22:15 | |
| *** dina_belova has joined #openstack-dev | 22:17 | |
| nachi | ayoung: hey | 22:19 |
| nachi | dolphm: Question, can keystone server setup to verify client certs? | 22:20 |
| *** dina_belova has quit IRC | 22:21 | |
| *** mrodden has joined #openstack-dev | 22:23 | |
| *** alop_ has joined #openstack-dev | 22:23 | |
| bknudson | nachi: keystone can be fronted by apache which can verify client certs. | 22:23 |
| bknudson | run as a wsgi app | 22:23 |
| bknudson | I haven't tried it myself. | 22:23 |
| *** alop has quit IRC | 22:24 | |
| *** alop_ is now known as alop | 22:24 | |
| nachi | bknudson: ok. thanks. | 22:25 |
| *** dina_belova has joined #openstack-dev | 22:27 | |
| *** maheshp has quit IRC | 22:31 | |
| *** dina_belova has quit IRC | 22:32 | |
| *** prad_ has quit IRC | 22:33 | |
| *** briancurtin has quit IRC | 22:37 | |
| *** rcleere has quit IRC | 22:37 | |
| *** sarob has joined #openstack-dev | 22:38 | |
| *** networkstatic has joined #openstack-dev | 22:38 | |
| *** gmurphy has joined #openstack-dev | 22:39 | |
| *** safchain__ has quit IRC | 22:41 | |
| *** jecarey has quit IRC | 22:43 | |
| *** alexb_ has quit IRC | 22:43 | |
| *** jayg is now known as jayg|g0n3 | 22:44 | |
| *** jimfehlig has quit IRC | 22:48 | |
| *** ftcjeff has quit IRC | 22:51 | |
| *** otherwiseguy has quit IRC | 22:51 | |
| *** alexb_ has joined #openstack-dev | 22:53 | |
| *** alop has quit IRC | 22:55 | |
| *** mlavalle has quit IRC | 22:56 | |
| *** welldannit has quit IRC | 22:57 | |
| *** feleouet has quit IRC | 22:57 | |
| *** dims has quit IRC | 22:58 | |
| *** feleouet has joined #openstack-dev | 23:00 | |
| *** herndon has quit IRC | 23:01 | |
| *** woodspa has quit IRC | 23:01 | |
| *** carl_baldwin has quit IRC | 23:02 | |
| *** alexb_ has quit IRC | 23:03 | |
| *** donaldh has quit IRC | 23:04 | |
| *** neelashah has quit IRC | 23:05 | |
| *** rnirmal has quit IRC | 23:05 | |
| *** alunduil has joined #openstack-dev | 23:07 | |
| *** senk has quit IRC | 23:08 | |
| *** rharwood has quit IRC | 23:11 | |
| *** dims has joined #openstack-dev | 23:12 | |
| *** Mandell has quit IRC | 23:12 | |
| jamielennox | ayoung: morning, what's up? | 23:13 |
| *** jbresnah has quit IRC | 23:13 | |
| *** mberwanger has joined #openstack-dev | 23:13 | |
| *** alexb_ has joined #openstack-dev | 23:13 | |
| *** Mandell has joined #openstack-dev | 23:15 | |
| *** jjmb has joined #openstack-dev | 23:18 | |
| *** devoid has quit IRC | 23:18 | |
| *** sambb has joined #openstack-dev | 23:18 | |
| *** jhesketh has quit IRC | 23:18 | |
| *** jvrbanac has quit IRC | 23:19 | |
| *** kui has quit IRC | 23:20 | |
| *** jhesketh has joined #openstack-dev | 23:20 | |
| *** spzala has joined #openstack-dev | 23:20 | |
| *** mberwanger has quit IRC | 23:21 | |
| *** spzala has quit IRC | 23:25 | |
| *** jbresnah has joined #openstack-dev | 23:25 | |
| *** gongysh has joined #openstack-dev | 23:27 | |
| *** vartom4 has quit IRC | 23:27 | |
| *** datsun180b has quit IRC | 23:27 | |
| *** dina_belova has joined #openstack-dev | 23:28 | |
| *** pabelanger has joined #openstack-dev | 23:28 | |
| *** jasdeepH_ has joined #openstack-dev | 23:28 | |
| *** FunnyLookinHat has quit IRC | 23:28 | |
| *** jasdeepH has quit IRC | 23:28 | |
| *** jasdeepH_ is now known as jasdeepH | 23:28 | |
| *** eharney has quit IRC | 23:30 | |
| *** egallen has joined #openstack-dev | 23:32 | |
| *** dina_belova has quit IRC | 23:32 | |
| *** gordc has quit IRC | 23:33 | |
| *** sambb has quit IRC | 23:33 | |
| *** jjmb has quit IRC | 23:38 | |
| *** jcooley has quit IRC | 23:41 | |
| *** herndon has joined #openstack-dev | 23:42 | |
| *** jcooley has joined #openstack-dev | 23:44 | |
| *** noslzzp has quit IRC | 23:44 | |
| *** lexinator has quit IRC | 23:47 | |
| *** zul has quit IRC | 23:47 | |
| *** stanchan has quit IRC | 23:49 | |
| bknudson | jamielennox: remember I asked about putting when the property was added in https://review.openstack.org/#/c/40176/7/keystoneclient/access.py ? | 23:50 |
| bknudson | dolphm pointed me at https://launchpad.net/python-keystoneclient/0.3.x/0.3.0 , which tracks what features were added when | 23:51 |
| jamielennox | bknudson: what do you mean by putting? | 23:51 |
| bknudson | adding to the docstring | 23:51 |
| jamielennox | o right | 23:51 |
| bknudson | I thought it would be an interesting experiment | 23:51 |
| jamielennox | that assumes that every new public api would be a blueprint? | 23:52 |
| bknudson | and I still think it's incredibly useful for users of the library to quickly find out when something was added | 23:52 |
| bknudson | jamielennox: yes, a blueprint or a bug | 23:52 |
| bknudson | problem is we don't know at the time what the next version # is going to be... might be 0.4.0 | 23:53 |
| jamielennox | i didn't know about that | 23:53 |
| jamielennox | the other way i was thinking was to run it like we currently do with identity-api | 23:53 |
| jamielennox | have a docs/api folder | 23:53 |
| jamielennox | anything that is going to be public must go through an api aproval before being added to the client | 23:53 |
| *** zul has joined #openstack-dev | 23:53 | |
| bknudson | the docstrings get pulled into the docs when they're built, I assume. | 23:54 |
| jamielennox | it somewhat breaks the pythonic inline docs though | 23:54 |
| bknudson | haven't looked for it myself. | 23:54 |
| jamielennox | i think our current docs are static | 23:54 |
| jamielennox | i'm not sure if they ever get generated anywher | 23:54 |
| jamielennox | e | 23:54 |
| bknudson | /opt/stack/python-keystoneclient/doc$ make html | 23:55 |
| *** nachi has left #openstack-dev | 23:55 | |
| jamielennox | i've never done that :p | 23:56 |
| bknudson | https://github.com/openstack/python-keystoneclient/blob/master/doc/source/releases.rst -- goes all the way to 0.1.3 | 23:57 |
| jamielennox | lol - so we definetly have some work to do | 23:57 |
| jamielennox | is it woth trying to figure that out in history or just go forward from next release | 23:58 |
| jamielennox | ? | 23:58 |
| bknudson | it's not worth it if it's been deprecated in favor of the launchpad tracking. | 23:59 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!