Thursday, 2013-09-12

jamielennoxthere is at least one tempest bug to fix - but wouldn't that indicate a behaviour we should be really careful about changing?00:00
*** jimfehlig has joined #openstack-dev00:00
bknudsonyes, we need to be very careful00:01
jamielennoxi'll file it as a bug for now that auth_uri is not used in the way it should, fix tempest, then put a warning in auth_token that auth_host etc are deprecated in favour of auth_uri00:02
jamielennoxwe'll need to keep the current auth_host takes priority over auth_uri for at least the next cycles00:02
*** hemna is now known as hemnafk00:02
*** Chaser has quit IRC00:02
bknudsonjamielennox: would you rather have a new option for the request_uri ?00:03
bknudsonrather than the separate options00:03
jamielennoxis there any need for auth_uri to be different to request_uri?00:03
bknudsonwe return auth_uri in the authenticate header, so should be public.00:04
jamielennoxis there a load balancing or some such reason you might want those to differ?00:04
*** colinmcnamara has joined #openstack-dev00:04
bknudsonbut I think we want auth_token to be able to talk to a private address (for revocation list)00:04
*** Ryan_Lane has quit IRC00:04
*** HenryG_ has joined #openstack-dev00:04
jamielennoxyea, so auth_host might reflect an internal host, where auth_url might need to be publically accessible00:05
ayoungjamielennox, I want to approve the HTTP PRetty patch just due to the amopunt of duplicated code you removed00:05
jamielennoxayoung: i'm on board, you might cop some flak from the others though00:05
*** noslzzp has joined #openstack-dev00:05
jamielennoxat least till they've reviewed00:06
ayoungjamielennox, nah...its good stuff00:06
*** Max__ has joined #openstack-dev00:06
ayoungI'ma +2 it00:06
*** matiu has quit IRC00:06
bknudsonI would prefer a single option so we don't have to mess with URL building ourselves.00:06
jamielennoxbknudson: so given that - request_uri is a pretty poor config name00:06
jamielennoxbknudson: right - and it would remove the need for the ipv6 stuff because you would specify a full url00:07
jamielennoxgiven that we use auth_uri for the public facing url what should we use for private url?00:07
jamielennox(which if not provided can default to auth_host etc, then to auth_uri)00:08
*** HenryG__ has joined #openstack-dev00:08
*** dkehn has quit IRC00:08
*** HenryG__ has quit IRC00:08
*** avishayb has quit IRC00:08
*** HenryG has quit IRC00:08
*** dkehn has joined #openstack-dev00:08
*** avishayb has joined #openstack-dev00:09
bknudsonjamielennox: internal_auth_uri ?00:09
bknudsonprivate_auth_uri00:09
gyeebknudson, not sure if I understand the use case00:10
jamielennoxbknudson: yea, i guess it isn't that important - i was thinking it would become the main auth config point, but it won't you can still specify auth_uri and have the internal one be an override00:10
bknudsonin v2 we have public and admin endpoints00:10
gyeeyou need an internal uri to download token revocation list?00:11
*** Max__ has quit IRC00:11
gyeein v3, there's no public and admin distinction00:11
jamielennoxbknudson: public/admin is not the issue - all validation and revocation stuff is done on the public api00:11
bknudsongyee: I hope so... the public one is pretty limited00:11
*** faramir has joined #openstack-dev00:11
bknudsonok, maybe it doesn't make a difference then. I was hoping that you couldn't do that stuff through the public api00:11
*** HenryG_ has quit IRC00:12
gyeeI would think the you want to expose both token validation and TRL download APIs00:12
bknudsonwhy would an end user need to get the token revocation list? don't you need admin token?00:12
jamielennoxpublic/admin is a bad naming scheme - the way i've come to think of it is the scoped and the unscoped api00:12
jamielennoxyou need to do validation stuff on the unscoped api00:12
*** jasondotstar has joined #openstack-dev00:12
gyeebknudson, to end users, they only care about the service URI as middleware is deployed by the services00:13
bknudsonI guess if we say that users can validate their own tokens then the revocation list and cert needs to be available to them00:14
*** gyee has quit IRC00:14
*** gyee has joined #openstack-dev00:15
jamielennoxbknudson: it's more an implementation detail, middleware requests an unscoped token to do authentication so it doesn't get a service catalog and doesn't know the location of the admin api00:15
bknudsonright, the service URI is returned in WWW-Authenticate header and middleware uses its own URI00:15
jamielennoxi assume it would work fine if you pointed it at the admin api, but it's not how we say to do it00:15
*** prad has joined #openstack-dev00:15
gyeejamielennox, in v3, there's only one uri00:16
bknudsonso why do we have auth_uri in addition to auth_protocol + auth_host + auth_port, and what tests does tempest have?00:16
bknudsonif they have to be the same thing00:16
jamielennoxgyee: but middleware only supports v2, and porting it is non-trivial00:16
jamielennoxthat was part of the reason for all those discovery patches00:17
jamielennoxso we could do auth_token with v3 properly00:17
gyeejamielennox, middleware support v3 token validation00:17
*** zul has quit IRC00:17
*** pmathews has quit IRC00:17
bknudsonit does v3 token validation using v2 api00:17
gyeeno00:17
jamielennoxit is also how we realized that the v3 api doesn't support fetching the PKI certificates00:17
jamielennoxno, it will use the v3 api - but the token and the communication that the client gets is all v200:18
gyeeno shit! really?00:18
jamielennoxahh, by client here i mean the admin token that auth_token gets00:18
gyeeyes, the admin token is still going through v200:19
*** atiwari has quit IRC00:19
gyeemoreover, the admin token request part should be optional00:19
jamielennoxso we need to wait till at least the v3.2 identity-api for fetching PKI certs and the revocation list via the v3 api before we can properly move the auth_token middleware over00:19
bknudsonthat didn't make havana? seems like an oversight00:20
gyeebknudson, unfortunately no00:20
jamielennoxthe 3.1 freeze was h200:20
gyeejamielennox, lets do this properly in IceHouse00:21
jamielennoxthe PKI api extensions are currently in ayoung's abandonded list i think00:21
jamielennoxgyee: right - i got to the point where it was simpler to rewrite auth_token than patch it00:21
gyeeI was toying with PKI token compression locally too00:21
gyeesee if we reduce the token size00:21
bknudsonyou can compress something that's encrypted?00:22
gyeeyes00:22
bknudsonor compress before encrypting?00:22
jamielennoxcompress before encrypting00:22
gyeeeither way, as long as the order is correct00:22
jamielennoxaka that new SSL attack00:22
bknudsonyou will gain a lot more compressing first00:22
gyeeright00:23
bknudsonthere's plenty of duplication in JSON00:23
gyeeand delta revocation list00:23
jamielennoxhmm no delta revocations - revocation notifications00:23
jamielennoxi'm not sure how that will work in middleware though00:23
*** prad has quit IRC00:24
jamielennoxso maybe delta revocations :)00:24
gyeedelta revocations yes00:24
gyeemiddleware will just store it locally00:24
bknudsonwe'll need comet00:24
jamielennoxcomet?00:24
gyeelike what its doing no00:24
gyeenow00:24
*** sthaha has joined #openstack-dev00:24
bknudsonlong-polling http connections00:25
bknudsonhttp://en.wikipedia.org/wiki/Comet_%28programming%2900:25
morganfainbergbknudson, you could have also meant http://cometcleanser.com/ in that we need to really scrub and clean it :P00:25
morganfainberg>.>00:25
morganfainbergsorry … i'll see myself out00:26
jamielennoxone of the advantages of going with sessions for this new client work is i want to put HTTP sessions on them, so not long polling but at least not renegotiating ssl00:26
*** zul has joined #openstack-dev00:26
bknudsonthen you've also got websockets.00:26
*** Chaser has joined #openstack-dev00:26
jamielennoxthen raw sockets00:26
*** noslzzp has quit IRC00:27
jamielennoxcan you be restful with websockets?00:27
bknudsonI'm not sure that REST covers notifications / push.00:28
gyeegotta run, otherwise, I'll have some sore eye sockets :)00:28
*** colinmcnamara has quit IRC00:28
*** gyee has quit IRC00:28
jamielennoxi don't think it does, i haven't done anything with websockets though00:29
ayoungbknudson, revocation lists can't be made public.  We would be publishing a list of token ids that are valid...as the services might not have fetched the revocation list yet00:29
bknudsonjamielennox: I looked at it once but apache forwarding didn't handle it well.00:29
jamielennoxbknudson: anyway, i assume it's still worth rebasing auth_token on top of the ipv6 patch?00:30
bknudsonjamielennox: yes, that would prevent breaking ipv600:30
*** boden has joined #openstack-dev00:30
bknudsonjamielennox: setting auth_host to IPv6 address like ::1 works today.00:30
jamielennoxbknudson: so what is the point of the patch?00:31
bknudsonayoung: that makes sense... so auth_token would need to get a private uri?00:31
jamielennoxoh00:31
jamielennoxsorry, it's setting auth_uri00:31
ayoungbknudson, nah, it is protected via the token permissions00:31
ayoungneed to hae a service role or admin role to get the list00:31
jamielennoxdoes setting auth_host to [::1] work today? (guessing not)00:32
bknudsonjamielennox: it doesn't work today because of the httpclient(self.auth_host, self.auth_port)00:32
ayoungnotifiations will be done using AMQP/0MQ, not websockets00:32
bknudsonjamielennox: doesn't build a url00:32
jamielennoxyep, that's what i thought00:32
bknudsonjamielennox: which your patch is getting rid of.00:33
*** colinmcnamara has joined #openstack-dev00:33
bknudsonayoung: so you can get the TRL through the public_port (5000), but it still requires admin (like admin_port stuff)00:35
ayoungbknudson, that is correct00:35
bknudsonayoung: so why does auth_token have both auth_uri and auth_host, etc, if it doesn't need 2 urls?00:36
*** noslzzp has joined #openstack-dev00:37
ayoungjamielennox, are the errors on https://review.openstack.org/#/c/43829/ legit?00:37
bknudsondefault auth_port is the admin port (35357) https://github.com/openstack/python-keystoneclient/blob/master/keystoneclient/middleware/auth_token.py#L20500:37
ayoungbknudson, legacy.  Probably should be only one.00:37
jamielennoxayoung: i can't tell yet00:38
bknudsondoc says to set auth_uri to public (5000)00:38
*** boden has quit IRC00:38
ayoungbknudson, I'm not certain why we even have multiple ports...it is no security, and it is the wrong way to split things up.  If you want internal/external, they should be listening on different interfaces.00:38
jamielennoxbknudson: ooo, i'm pretty sure that default is wrong00:38
bknudsonayoung: we don't support different interfaces (except through httpd)00:39
ayoungbknudson, I know...believe you me I know.00:39
jamielennoxayoung: i think the intention was to support different keystones for different projects etc00:39
jamielennoxso you call in and say i need a token for this project and it says so you need this keystone service00:40
*** freedomhui has joined #openstack-dev00:40
jamielennoxit's just never actually happened00:40
ayoungjamielennox, road to hell and all that....the fact of the matter is that Keystone is an HTTP app and should be listening on port 443.  The rest is a deviation made by people that should have known better00:40
*** SumitNaiksatam has joined #openstack-dev00:40
ayoungjamielennox, bknudson I want this https://wiki.openstack.org/wiki/URLs00:41
bknudsonjamielennox: from the help text, seems to indicate we could have a admin_uri to cover auth_host auth_port auth_protocol auth_admin_prefix00:41
*** noslzzp has quit IRC00:41
bknudsonayoung: I think we can do that today.00:41
ayoungbknudson, yep00:42
bknudsonjust need a chef script to make it easy00:42
ayoungbknudson, did you see the Puppet review for setting it up?00:42
*** jruzicka has quit IRC00:42
ayounghttps://review.openstack.org/#/c/29059/ bknudson00:42
*** noslzzp has joined #openstack-dev00:43
ayoungI would like that to have the option to run without using separate ports for Keystone internal and external00:43
bknudsonayoung: I reviewed that, it's just keystone though.00:43
ayoungbknudson, lead by example...other people on other projects are working on it, too00:43
ayoungswift is ahead of us, I think00:43
bknudsonayoung: does it put keystone under a identity path or something?00:43
*** egallen has quit IRC00:43
ayoungbknudson, it has the ability to do it, yes...00:44
*** prad has joined #openstack-dev00:44
ayoungbknudson, I'll find it in the review...1 sec00:44
jamielennoxbknudson: regardless of help text, if you don't set auth_host etc today then it won't work - it doesn't deconstruct auth_uri to fill those variables if not present00:44
ayounghttps://review.openstack.org/#/c/29059/15/spec/classes/keystone_endpoint_spec.rb00:44
bknudsonayoung: I'm not the greatest reviewer for that patch since I really don't know puppet. I just asked for the keystone.py update and ssl support00:45
bknudsonso they're calling it keystone.00:45
ayoungbknudson, I gave it a solid scrubbing today.  I can't even really test it.00:45
bknudsonayoung: seemed like every time we commented on this stuff he would say it was only for test00:45
bknudsonor maybe this was added later.00:45
ayoung'salright...we'll get there.00:46
*** bdpayne has quit IRC00:46
ayoungjamielennox, I think I've reviewed all of your patches that are not -1ed by jenkis or WIP...did I miss anything?00:46
jamielennoxayoung: have a look through the session one and such if you can - i don't know why they are failing jenkins yet00:47
*** herndon has joined #openstack-dev00:47
bknudsonayoung: I don't see why we need the ports if we've got keystone under its own path. also, should be identity/ and not keystone/00:47
jamielennoxalthough can i run some reasoning passed you (both) while we're here? i've been looking at this stuff for so long i don't know if i trust my judgement00:47
*** noslzzp has quit IRC00:48
jamielennoxthis stuff creates 3 sections out of what we have today. The session handles communication, the auth_plugin deals with getting tokens etc, the client does the regular client stuff (list-users etc)00:49
*** boden has joined #openstack-dev00:49
bknudsonjamielennox: what stuff?00:49
ayoungbknudson, yeah, should be identity..care to add that to the review?00:49
*** noslzzp has joined #openstack-dev00:49
bknudsonayoung: will do.00:49
jamielennoxsession and auth_plugin i want to make use of globally in openstack - session so that we can control kerberos and x50900:49
jamielennoxand auth_plugin because it is already somewhat supported by nova and is a good scheme00:50
ayoungjamielennox, link?00:50
jamielennoxand so that session and auth_plugin are reusable00:50
jamielennoxhttps://review.openstack.org/#/c/43829/ - the base session - doesn't have anything about kerb yet00:50
jamielennoxhttps://review.openstack.org/#/c/45997/ - basic auth plugins being used00:51
ayoungjamielennox, so "session" means what here?  bascially a token?00:51
jamielennoxsession is a bunch of headers, x509 client certs that you always use00:52
jamielennoxit would be were kerberos negotiation lived if configured00:52
jamielennoxthere is no real brains behind it00:52
ayounghm....00:52
*** prad has quit IRC00:52
jamielennoxin a later review i have auth_token live on session00:52
*** cdub has joined #openstack-dev00:52
jamielennoxbah, auth_plugin live on session00:52
jamielennoxso that you can say send this request and authenticate it from the auth_plugin00:53
*** martine has joined #openstack-dev00:53
*** martine is now known as Guest1899600:53
*** noslzzp has quit IRC00:53
ayoungjamielennox, so...if I fire up the client, I get one session object per server that I talk to, right?  Say we were to embed this in Nova client, I would get one session for Keystone to get tokens, and one session for nova?00:55
jamielennoxno00:55
jamielennoxsessions are shared00:55
ayoungjamielennox, doesn't that imply that I am doing identical things against all servers?00:55
jamielennoxyou create an auth_plugin for keystone v300:55
*** noslzzp has joined #openstack-dev00:55
ayoungwhat if heat were to pull in this code, and then keystone and swift were using Kerberos, but none of the other services had converted over to it?00:56
jamielennoxyou create a session object with the auth_plugin - the session object can consume the service catalog from auth plugin00:56
jamielennoxyou create a number of clients that all use the session and thus use the same token00:56
ayoungso headers are specific to the client, not the session00:56
ayoungthey get common headers like thetoken from the session, but then do their own things, too00:57
jamielennoxclient can specify headers additionally, anything on the session is transmitted every time00:57
ayounghmmm....is session the right name then....well, lets assume for now that it is...00:57
bknudsonbtw - is the client under the same feature freeze as keystone? and does it get released with havana?00:58
ayounggah killed firefox!00:58
jamielennoxi was working on the similarity to a http session - i'm not sure what else00:58
jamielennoxclient works on it's own schedule00:58
jamielennoxafaik there is no release intended specifically for havana00:58
*** eharney has quit IRC00:58
*** colinmcnamara has quit IRC01:01
*** colinmcnamara has joined #openstack-dev01:01
ayoungbknudson, we need to maintain backwards compat in the client...that is the rule driving development01:02
ayounglots of things depend on the client, so we can't afford to be too cavalier, but, the client needs some serious work.01:02
*** safchain has quit IRC01:03
bknudsonayoung: what if we start a new version?01:03
*** marun has quit IRC01:03
ayoungjamielennox, ugh, still that massive parameter list?01:03
ayoungbknudson, we'll do that when our back is against the wall01:03
bknudsonIf it's that bad.01:03
*** colinmcnamara has quit IRC01:04
ayoungbuilding a new client is tricky, in that nothing will use the new version at first, so it does not buy us much01:04
bknudsonI haven't seen a good document that says what is the keystoneclient api.01:04
jamielennoxayoung: there is a review that kills the param list01:04
*** llu has quit IRC01:04
*** boden has quit IRC01:04
*** cdub has quit IRC01:04
jamielennoxbknudson: unfortunately that is more the problem than a help, it means that most people using it just cracked open the code and might be using anything01:04
ayoungjamielennox, doing a recheck on that one01:04
jamielennoxayoung: https://review.openstack.org/#/c/4599601:05
*** Mandell has quit IRC01:05
bknudsonI'll have to write mess around with the client myself and figure out what an app needs to do.01:05
ayoungbknudson, +201:05
ayoungwe need that01:05
jamielennoxbknudson: in reality i think most everything on the HTTPClient is safe to change, most apps will just provide a big long parameter list and then start using client.users.list etc01:07
bknudsonjamielennox: it really doesn't seem that complicated01:07
ayoungjamielennox, 45996  still has the parameter list.  It just cleans up the member variables...which doesn't make sense to me01:07
jamielennoxi don't see anyone messing with connection variables or username/password after instantiating the client01:07
bknudsonbut then we've got the v2/v3 oddity01:07
jamielennoxbknudson: vote 1 keystoneclient summit design session01:07
jamielennoxthough i'm not sure 1 will cut it01:08
jamielennoxayoung: so what param list are you trying to cut?01:08
ayoungthe one in __init__ for example01:08
ayoungconvert the whole thing to kwargs01:09
*** cdub has joined #openstack-dev01:09
*** noslzzp has quit IRC01:09
jamielennoxi had one a while ago that took the session parameters out as well, i didn't think it was that important01:09
jamielennoxmy problem with that param list is not that it exists, it is that we reuse it01:10
jamielennoxso i left the session args in __init__ because that is the only place they are used01:10
*** shinylasers has quit IRC01:10
ayoungjamielennox, you turned local variables into a dict...that is the exact opposite of what I would have done.  I would have left all of the self. properties, but done the init as kwargs01:10
ayoungjamielennox, I showed you what I thought should happen in that review...01:11
ayounghttps://review.openstack.org/#/c/43979/01:11
*** pixelb has quit IRC01:11
jamielennoxright, because i don't think people every actually access those variables on keystoneclient01:11
jamielennoxthere is no need to once it has been instantiated01:12
jamielennoxthe authenticate function then had to take all those local variables, convert them into a dictionary and start passing them around01:12
ayoungjamielennox, so use them and throw them away, but that same param list was duplicated several times...01:12
jamielennoxi just moved the dict step up a level01:12
ayoungbut then you change a public method signature01:13
ayoungno?01:13
jamielennoxno i don't01:13
jamielennoxthe signatures are all the same with the list _identity_variables turned into kwargs01:15
*** gimps_ has joined #openstack-dev01:15
*** xarses has quit IRC01:15
*** ljjjustin has joined #openstack-dev01:20
*** shinylasers has joined #openstack-dev01:22
*** noslzzp has joined #openstack-dev01:22
*** lbragstad has joined #openstack-dev01:22
*** nosnos has joined #openstack-dev01:22
*** freedomhui has quit IRC01:23
*** chenxu has joined #openstack-dev01:26
*** gimps_ has quit IRC01:26
*** shinylasers has quit IRC01:27
*** Guest18996 has quit IRC01:27
*** networkstatic has quit IRC01:28
*** spzala has joined #openstack-dev01:28
ayoungjamielennox, so the __init__ list is in a different order?01:29
*** chenxu has quit IRC01:30
jamielennoxah, it's possible - i don't think we are enforcing order on a list like that01:30
*** reed has quit IRC01:31
*** comay has quit IRC01:31
ayoungjamielennox, yeah, that was why I did *args01:32
*** noslzzp has quit IRC01:32
ayoungjamielennox, you can't reorder them01:32
*** cdub has quit IRC01:33
ayoungjamielennox, that is the whole problem...we don't know what people have done with it....but since they are explicit parameters, someone might have called by order.  I'd count on it.01:34
jamielennoxwell that shoots the whole thing then because i'm pretty sure __init__ and authenticate are not ordered the same way01:35
ayounglovely01:36
*** dprince has joined #openstack-dev01:36
jamielennoxit would be nice to see python have some distinction between an optional positional argument and a keyword argument01:37
ayoungjamielennox, I think that large portions of them are01:37
jamielennoxlarge portions? there's still no point you loose all readability01:37
ayoungso we can get some commonality of lists...compose it from sublists, and make a documentation comment that says: only append new variables here...01:37
jamielennoxand unless the portions are at the end of each list (they're not) we still break the ordering of something01:38
*** fifieldt has joined #openstack-dev01:38
ayoungjamielennox, part of the goal is to consolidate this...we can chose one as the "right" ordering for the next version if we decide to, but the first thing should be to stop proliferating this pattern01:38
ayounglets see...01:38
*** xarses has joined #openstack-dev01:38
*** danwent has quit IRC01:39
*** freedomhui has joined #openstack-dev01:39
jamielennoxthis new client stuff deprecates the list on both01:39
jamielennoxyou don't pass arguments to authenticate and you don't init with them01:40
jamielennoxif it's going to be this much of a pain i'd be inclined to just leave it until we can clear out the whole thing01:40
*** vkmc has quit IRC01:41
*** noslzzp has joined #openstack-dev01:41
*** mars has quit IRC01:43
ayounghold on...just took an interrupt01:44
ayoungok, authenticate manages to switch the ordering of tenant_id and tenant_name...that is a mistake...01:45
ayounginit doesn't take password...01:45
ayoungoh, no, it does...just in a different location...01:46
ayoungjamielennox, ugh, what a mess...01:47
*** feleouet has quit IRC01:47
jamielennox:)01:47
ayoungits like someone went out of their way to be difficult01:48
*** melwitt has quit IRC01:51
*** erkules_ has joined #openstack-dev01:51
*** alexxu has joined #openstack-dev01:51
*** fandikurnia01 has joined #openstack-dev01:52
*** yaguang has joined #openstack-dev01:52
*** erkules has quit IRC01:53
*** schwicht has quit IRC01:55
*** insanida1e has joined #openstack-dev01:55
*** HenryG has joined #openstack-dev01:56
jamielennoxayoung: should i add an insecure option to this requests patch as well? otherwise i can say if cafile = 0 or something01:58
*** insanidade has quit IRC01:58
jamielennoxhmm, it's another option but insecure = True is more explicity01:58
ayoungjamielennox, I'm not there just yet...hold on, trying to get my head around the arg lists01:58
*** d34dh0r53 has joined #openstack-dev01:59
jamielennoxcompletely unrelated - back to the auth_token middleware with requests from earlier01:59
ayoungjamespage, ok, here are the two parameter lists in sorted order http://paste.fedoraproject.org/38906/1378951101:59
ayoungfirst is from __init__ the second is from authenticate01:59
*** mattmalesky has quit IRC02:00
ayoungso, first question...why do we have both of these lists?02:01
*** d34dh0r53 has quit IRC02:01
*** herndon has quit IRC02:01
*** herndon has joined #openstack-dev02:02
*** stevemar has joined #openstack-dev02:02
*** edmund has joined #openstack-dev02:04
*** angdraug has quit IRC02:04
*** radez is now known as radez_g0n302:05
*** edmund1 has joined #openstack-dev02:06
jamielennoxjamespag must get sick of this :)02:08
jamielennoxso i'm pretty sure that what i take as _identity_variables is fairly authoritive02:08
*** edmund has quit IRC02:09
*** xchu has joined #openstack-dev02:09
jamielennoxthe only thing is tenant_id and tenant_name which are deprecated and so are listed both times explicity as it needs to override kwargs02:09
jamielennoxhmm, the sessions review is still failing - it must be something i did02:11
ayounglets look...didn't seem obvious to me02:14
*** dprince has quit IRC02:15
*** gongysh has joined #openstack-dev02:16
*** llu has joined #openstack-dev02:19
ayoungjamielennox, on the auth_token patch, is setting insecure to false going to break things?02:19
ayoungit is the *right* thing to do I know02:20
jamielennoxummm, i've got no idea02:22
jamielennoxmaybe02:22
jamielennoxshit02:22
jamielennoxdo we have to default insecure to true?02:22
*** nati_ueno has quit IRC02:22
jamielennoxayoung: the review is https://review.openstack.org/#/c/34161 comment on it there02:23
jamielennoxit's got a SecurityImpact tag so hopefully we'll get some eyes on it and can discuss it because i really don't want to have insecure be default02:23
*** markwash has joined #openstack-dev02:24
*** markwash has quit IRC02:24
*** dims has quit IRC02:25
ayoungjamielennox, well, if someone currently has the client deployed, upgrades to your code, and they were not validating certificates before, they will be now...if they do self signed, they probably will have invalid certificates, no?02:26
*** xchu has quit IRC02:27
ayounggoing to leave it a 0...02:27
ayoungI had +2ed it, then -1ed it...people are going to think I am mad...02:28
*** jcoufal has quit IRC02:28
jamielennoxayoung: ype02:29
jamielennoxayoung: yep02:29
*** fifieldt has quit IRC02:29
jamielennox(regarding the invalid certs, rather than the madness)02:29
ayoungjamielennox, we might be OK with that breakage, though...lets check with dolph...can you email him?02:30
jamielennoxmaybe i'll just mailing list it02:30
ayoungjamielennox, as far as the session breakage..I was trying to diff between v2 and v3 of your patch, but they are just too radically different, due to the cleanup02:31
jamielennoxyea, i really shouldn't have bothered keeping the old change id02:31
jamielennoxi could have just added the people from the old review to the new one02:31
*** dubsquared has joined #openstack-dev02:32
ayoungjamielennox, hollee cow...do we spam the logs02:32
ayoung http://logs.openstack.org/29/43829/3/check/gate-tempest-devstack-vm-full/bda122c/logs/screen-key.txt.gz02:32
morganfainbergayoung, yes debug = omg deeeeebugggg02:33
jamielennoxhmm dogpile is new, we might need to do an explicit debug flag for that02:33
*** noslzzp has quit IRC02:34
ayoungjamielennox,  this seems to be the error in the log 2013-09-12 01:45:23.892 | BuildErrorException: Server bf9c8313-71ba-4885-ad4a-fad07156420f failed to build and is in ERROR status02:35
jamielennoxayoung: that one is going to be a pain to debug as it doesn't seem to be coming from anywhere02:35
jamielennoxyes, but why a session object in keystoneclient would cause that ....02:35
ayoungjamielennox, if it is an error that gets triggered from auth_token middleware, it could be in any server02:36
jamielennoxit won't be in middleware - it would have to be someone using keystoneclient for communiation02:37
jamielennox2013-09-12 01:12:41.019 21925 TRACE glance.api.v1.upload_utils NameError: global name 'requests' is not defined02:37
ayoungbingo02:38
jamielennoxalright, i'll fix that up02:38
ayoungjamielennox, is that from the session changes?02:38
jamielennoxi don't see how02:39
jamielennoxhttp://logs.openstack.org/29/43829/3/check/gate-tempest-devstack-vm-full/bda122c/logs/screen-g-api.txt.gz02:39
ayoungsession imports requests02:39
ayoungbut httpclient used to do that.02:39
*** xchu has joined #openstack-dev02:39
jamielennoxooh, i think i remove it02:40
ayoungfrom httpclient? yes02:40
jamielennoxbecause i move all the actual requests code over to session02:40
jamielennoxhow did that not get picked up in tests02:40
*** arnaudvm has quit IRC02:41
jamielennoxoh, that's right we don't run unit tests with debug on02:41
jamielennoxi've come across that before02:41
*** senk has joined #openstack-dev02:41
ayoungline 32502:41
ayoung247 in the new file02:41
*** jhesketh__ has quit IRC02:41
ayoungcool02:41
jamielennoxok, i'll fix that02:42
jamielennoxi'm going to grab some lunch first though - some days food wins02:42
ayoungjamielennox, good stuff.  I'll look for a functioning review in my morning....02:43
ayounggnight02:43
jamielennoxayoung: night02:43
morganfainbergjamielennox, if you think dogpile spews a bit much, we could do something dirty like logging.Manager.getLogger('dogpile.core.dogpile') and set that to not debug.02:43
morganfainbergbut it's going to be direct referencing of the loggers via the python core logging moduel (or some other clever stuff)02:43
jamielennoxmorganfainberg: i was thinking more like we do for requests debug like we do in httpclient02:44
ayoungmorganfainberg, looks at the log spew...its painful...we need to reduce it.02:44
jamielennoxanyway, back later02:44
morganfainbergayoung, i have seen it. unfortunately, dogpile (another limitation) has limited log controlling directly02:44
morganfainbergayoung, i could do some magic on it.  but focused on other stuff for RC1 right now.02:45
morganfainbergbest scenario - propose a fix to dogpile.core :) make it's logging easier to control02:45
morganfainbergayoung, once i'm done with the cleanup bugs i'm working on i'll see if i can get something done for it.02:46
morganfainbergactually hrm, betcha could do from dogpile.core import dogpile and set dogpile.log.setLevel in a nice way.02:47
*** otherwiseguy has quit IRC02:48
*** rackerjoe has left #openstack-dev02:51
*** HenryG has quit IRC02:53
*** markwash has joined #openstack-dev02:54
*** jhesketh__ has joined #openstack-dev02:54
*** hartsocks has joined #openstack-dev02:57
*** nosnos has quit IRC02:57
*** anteaya__ is now known as anteaya02:57
*** nosnos has joined #openstack-dev02:58
morganfainbergayoung, something like: https://review.openstack.org/#/c/46178/ ?02:58
*** markwash has quit IRC02:58
morganfainberganteaya, ping02:58
anteayahello morganfainberg02:59
morganfainberganteaya, so some feedback from product guy™02:59
*** morazi has quit IRC02:59
* anteaya listens02:59
morganfainberganteaya, everything was fantastic with one exception.02:59
morganfainberganteaya, virtualbox doesn't allow acess (e.g. forwarded ports) by default02:59
*** ayoung has quit IRC03:00
morganfainberganteaya, so if you want to access horizon… or an api… etc you need to enable the port forwarding03:00
*** angdraug has joined #openstack-dev03:00
morganfainberganteaya, it's how virtualbox does things. (vagrant ssh get around this with some default port forwarding iirc)03:00
anteayawhat port does horizon use?03:01
anteayado you know?03:01
morganfainberganteaya, 8003:01
morganfainbergi think thats default in devstack03:01
anteayaI think I have used horizon once03:01
anteayaokay03:01
morganfainbergthe other API ports would also likewise be blocked.03:01
morganfainbergthere might be some magic that allows everything, i'm not sure.03:02
anteayaI think that addressing port forwarding in this post would be too much for a complete n00b to digest, so I don't want to add any additional paths or options03:02
morganfainbergright, i meant like a copy/paste magic setting03:02
anteayabut I will be dealing with variations on how to run devstack in the next post I am planning03:02
morganfainbergjust so horizon is accessible or if there is something that lets everything through, that setting would be good.03:03
anteayahow to change your localrc to have different devstack configurations03:03
morganfainbergnice.03:03
anteayaso I can certainly add in vagrant port forwarding in that post03:03
anteayahttp://docs-v1.vagrantup.com/v1/docs/getting-started/ports.html03:03
anteayait is easy to do03:03
morganfainberghttp://docs.vagrantup.com/v2/getting-started/networking.html03:03
morganfainbergyep.03:04
anteayathe choice for me is how much is the minimum to get standing03:04
anteayaand then after they are standing - 1st post03:04
anteayawhat options are appealing? - 2nd post03:04
anteayaso please tell product guy thank you from me for his feedback03:04
morganfainbergsure thing03:04
anteayait was an option I hadn't considered in my own workflow but yes, others would need this03:05
morganfainberghttp://docs.vagrantup.com/v2/networking/public_network.html might be something good to do in a future post03:05
morganfainbergexpose everything via a known ip, rather than explicit port forwarding03:05
*** freedomhui has quit IRC03:05
lbragstadhey morganfainberg quick question on https://review.openstack.org/#/c/46178/1/keystone/common/cache/core.py when you have a minute03:05
*** hartsocks has left #openstack-dev03:06
morganfainberglbragstad sure03:06
morganfainberglbragstad shoot.03:06
*** ljjjustin has quit IRC03:06
lbragstadok, so on line 150 you're checking the config if you're suppose to log anything for dog pile and if not you don't log as much?03:07
lbragstadto reduce the spam?03:07
anteayamorganfainberg: let me think about this, I need to work with the idea that at a certain point, interested parties will consult the vagrant docs to configure their box to their liking - the question I ask myself is where is that line?03:07
morganfainberglbragstad basically it will cut out all the dogpile.core.dogpile lines from a log like: http://logs.openstack.org/29/43829/3/check/gate-tempest-devstack-vm-full/bda122c/logs/screen-key.txt.gz03:07
morganfainbergthere is a _log_ of extra lines there that are superfluous unless you're looking to get info on the way the cache library itself works03:08
morganfainbergit might be a sub-optimal approach, it was a 30 second "huh, this might be an ok way to handle this" after the conversation a few lines up03:09
morganfainbergany input would be good.03:09
morganfainbergs/_log_/_lot_/03:10
*** mattmalesky has joined #openstack-dev03:10
*** otherwiseguy has joined #openstack-dev03:10
lbragstadmorganfainberg: ok, the way the logic looks might have just thrown me off (since I might not understand the whole context) but it seems like we are logging even though the user hasn't set the config option?03:10
morganfainberglbragstad, the idea is that if you globally set the root logger to debug03:10
*** paragan has joined #openstack-dev03:10
morganfainbergand you don't want to log dogpile.core.dogpile logs, this will set that specific logger to INFO only level03:11
morganfainbergthe default behavior is to set that logger to INFO03:11
morganfainbergsetting that option to True will leave it to whatever the root logger's level is03:11
lbragstadthe default behavior for dogpile?03:11
morganfainbergdefault behavior for dogpile is to use the python logging module, which will use the root (e.g. logger.getLogger()) log level03:12
morganfainbergwe set that with the logging options in oslo03:12
morganfainbergthis just reduces the debug log from the dogpile library even if we set the root logger to debug (or higher) level03:12
*** xchu has quit IRC03:12
lbragstadahh03:12
lbragstadok03:12
lbragstadthat makes a little more sense03:12
morganfainbergthe logic has to be backwards because we want to override the default03:13
lbragstadright03:13
morganfainberglike i said, there might be a better approach03:13
lbragstadhmm, the thing that caught my eye was import logging03:13
morganfainbergthis was 30 second "maybe"03:13
morganfainbergright. and that is needed to get the log level03:13
morganfainberglogging.INFO (not exposed via oslo log)03:13
lbragstadand setting the log level... I was checking to see if there was a way we could do that with openstack/common/log.py instead of having to import logging independently03:14
lbragstadright03:14
lbragstad++ ^03:14
*** clayb has quit IRC03:14
morganfainbergi tossed a WIP on that so no one merged it. but it'll do a quick show if the logs are reduced say in tempest03:15
morganfainbergbut it also might spark someone to say "oh that isn't the right approach"03:15
morganfainberg:)03:15
lbragstadok, now it makes sense. If we do go with this approach it might be worth NOTE'ing that logical break at line 15003:15
lbragstador a FIXME :)03:16
morganfainberghehe03:16
morganfainbergFIXME: propose a change to the upstream library to make this easier to toggle03:16
morganfainberg:P03:16
lbragstadright, that might benefit other projects too... having something like that in Oslo03:16
morganfainbergright.03:16
morganfainbergactually the easiest way is to probably do a logging.getLogger('dogpile.core.dogpile') and set that03:17
morganfainberg*shrug*03:17
lbragstadthat's an option03:18
*** tserong has quit IRC03:18
*** Mandell has joined #openstack-dev03:20
lbragstadmorganfainberg: or approach it using a separate logging config?03:21
morganfainberglbragstad, perhaps.03:21
morganfainbergfeel free to take that and make it happen if you are so inclined :).  I don't knwo when i'll have time to really look at it beyond the simpleish fix.03:22
lbragstadmorganfainberg: I'll give it some thought. The fix you have will work, I was just curious. It makes sense now having it explained... If we do go this route for now it might just need to be documented/noted.03:27
morganfainberglbragstad, fair enough, but don't hesitate to let me know (or propose) a better solution if you come up with one.03:27
lbragstadmorganfainberg: will do!03:28
*** tserong has joined #openstack-dev03:28
*** novas0x2a|laptop has quit IRC03:28
*** neelashah has joined #openstack-dev03:28
morganfainbergooh i need to do code reviews...03:28
morganfainberglbragstad, maybe if i can swing it, i'll get the stuff from keystone.common.cache into oslo, (with some fixes) for icehouse, could allow for caching within any project03:29
morganfainbergs/fixes/cleanup or little more generic/03:30
*** xchu has joined #openstack-dev03:30
*** comay has joined #openstack-dev03:32
lbragstadmorganfainberg: that would be nice03:32
jamielennoxsetting logging.getLogger('dogpile.core.dogpile') is supposed to be a valid strategy with python logging03:32
lbragstadreal nice03:32
jamielennoxthe better approach is to use a logging.conf file so you can specify that keystone should be debugged dogplie should not03:32
*** anteaya has quit IRC03:33
morganfainbergjamielennox, likely so03:33
jamielennoxi haven't done much with logging confs but i know that it is the intended way03:33
lbragstadjamielennox: morganfainberg so possibly something along these lines https://github.com/openstack/nova/blob/master/etc/nova/logging_sample.conf ?03:33
morganfainbergjamielennox, i have avoided working with them (let one of the other guys here deal with it mostly)03:33
jamielennoxlbragstad: yep that looks like it03:34
lbragstadbreaks everything logging wise into a dedicated config file03:34
jamielennoxproblem is they aren't pretty and are complex to set up, but once in place it is a good idea03:35
*** noorul`` is now known as noorul03:35
*** shang has quit IRC03:37
*** edmund1 has quit IRC03:41
*** hemna has joined #openstack-dev03:44
*** reed has joined #openstack-dev03:53
*** fifieldt has joined #openstack-dev03:55
*** jhesketh__ has quit IRC04:07
*** colinmcnamara has joined #openstack-dev04:07
*** jhesketh has joined #openstack-dev04:07
*** davi67232 has joined #openstack-dev04:07
*** freedomhui has joined #openstack-dev04:08
*** senk has quit IRC04:11
*** SergeyLukjanov has joined #openstack-dev04:13
*** freedomhui has quit IRC04:13
*** SergeyLukjanov has quit IRC04:14
*** hemna has quit IRC04:15
*** prekarat has joined #openstack-dev04:16
*** freedomhui has joined #openstack-dev04:19
*** SergeyLukjanov has joined #openstack-dev04:20
*** prekarat has quit IRC04:20
*** kushal has joined #openstack-dev04:25
*** hemna has joined #openstack-dev04:25
*** freedomhui has quit IRC04:27
*** SergeyLukjanov has quit IRC04:30
*** spzala has quit IRC04:30
*** neelashah has quit IRC04:31
*** egallen has joined #openstack-dev04:31
*** SergeyLukjanov has joined #openstack-dev04:33
*** dguitarbite has quit IRC04:33
*** dguitarbite has joined #openstack-dev04:35
*** davi67232 has quit IRC04:36
*** herndon has quit IRC04:38
*** garyk has quit IRC04:38
*** prekarat has joined #openstack-dev04:40
*** jbresnah has quit IRC04:40
*** jbresnah_ has joined #openstack-dev04:40
*** senk has joined #openstack-dev04:42
*** Mandell has quit IRC04:44
*** jbresnah_ has quit IRC04:45
*** senk has quit IRC04:46
*** dubsquared has quit IRC04:46
*** dmakogon_ has joined #openstack-dev04:48
*** SergeyLukjanov has quit IRC04:48
*** zaitcev has quit IRC04:50
*** Ryan_Lane has joined #openstack-dev04:52
*** jimfehlig has quit IRC04:57
*** SergeyLukjanov has joined #openstack-dev04:57
*** SergeyLukjanov has quit IRC04:57
*** colinmcnamara has quit IRC04:59
*** alexxu has quit IRC05:01
*** coolsvap has joined #openstack-dev05:01
*** mrodden has joined #openstack-dev05:05
*** egallen has quit IRC05:10
*** reed has quit IRC05:11
*** dguitarbite has quit IRC05:13
*** senk has joined #openstack-dev05:14
*** alexxu has joined #openstack-dev05:14
*** aeperezt has quit IRC05:15
*** corXi has joined #openstack-dev05:15
*** dguitarbite has joined #openstack-dev05:16
*** shinylasers has joined #openstack-dev05:17
*** senk has quit IRC05:18
*** alexxu has quit IRC05:21
*** boris-42 has joined #openstack-dev05:22
*** dguitarbite has quit IRC05:22
*** dguitarbite has joined #openstack-dev05:23
*** sushils has joined #openstack-dev05:23
*** egallen has joined #openstack-dev05:24
*** imsurit has joined #openstack-dev05:24
*** dguitarbite has quit IRC05:30
*** jasondotstar has quit IRC05:31
*** jbresnah_ has joined #openstack-dev05:31
*** harlowja has quit IRC05:31
*** harlowja has joined #openstack-dev05:31
*** rushiagr has joined #openstack-dev05:32
*** alexxu has joined #openstack-dev05:34
*** comay has quit IRC05:35
*** sushils has quit IRC05:35
*** harlowja_ has joined #openstack-dev05:36
*** radsy has quit IRC05:38
*** harlowja has quit IRC05:38
*** harlowja has joined #openstack-dev05:39
*** harlowja_ has quit IRC05:42
*** SergeyLukjanov has joined #openstack-dev05:42
*** rdopieralski has joined #openstack-dev05:43
*** vartom10 has joined #openstack-dev05:44
*** doron_afk has quit IRC05:45
*** dubsquared has joined #openstack-dev05:49
*** jbresnah_ has quit IRC05:52
*** jbresnah has joined #openstack-dev05:52
*** dubsquared has quit IRC05:53
*** garyk has joined #openstack-dev05:54
*** imsurit has quit IRC05:54
*** egallen has quit IRC05:56
*** jbresnah has quit IRC05:58
*** nshaikh has joined #openstack-dev06:01
*** hemna has quit IRC06:02
*** jbresnah has joined #openstack-dev06:03
*** ifarkas has joined #openstack-dev06:07
*** marios has quit IRC06:07
*** marios has joined #openstack-dev06:07
*** rushiagr has quit IRC06:11
*** med_ has quit IRC06:12
*** sbisbee has quit IRC06:12
*** markwash has joined #openstack-dev06:13
*** coolsvap has quit IRC06:13
*** sbisbee has joined #openstack-dev06:13
*** xga_ has joined #openstack-dev06:14
*** thouveng has joined #openstack-dev06:15
*** otherwiseguy has quit IRC06:17
*** nosnos has quit IRC06:17
*** rushiagr has joined #openstack-dev06:19
*** markwash has quit IRC06:21
*** avishay has joined #openstack-dev06:22
*** mrunge has joined #openstack-dev06:22
*** markwash has joined #openstack-dev06:23
*** devvesa has joined #openstack-dev06:23
*** nosnos has joined #openstack-dev06:24
*** yolanda has joined #openstack-dev06:29
*** xga__ has joined #openstack-dev06:29
*** xga_ has quit IRC06:31
*** Max_ has joined #openstack-dev06:31
*** flaper87|afk is now known as flaper8706:33
fandikurnia01hi all06:33
fandikurnia01how to install ceilometer on centos ?06:33
fandikurnia01does any one have literary for this case06:33
*** markwash has quit IRC06:37
*** yolanda has quit IRC06:37
*** xga has joined #openstack-dev06:38
*** xga__ has quit IRC06:41
*** Max_ has quit IRC06:43
*** yongli_away has quit IRC06:43
*** SergeyLukjanov has quit IRC06:43
*** rushiagr has quit IRC06:44
*** jprovazn has joined #openstack-dev06:46
*** xga has quit IRC06:46
*** vartom10 has quit IRC06:47
*** vartom10 has joined #openstack-dev06:49
*** prekarat has quit IRC06:50
*** DeeJay1 has joined #openstack-dev06:52
*** amotoki has joined #openstack-dev06:52
*** xchu has quit IRC06:56
*** neoXsys has quit IRC06:56
*** afazekas has joined #openstack-dev06:57
*** reidrac has joined #openstack-dev06:59
*** prekarat has joined #openstack-dev06:59
*** schwicht has joined #openstack-dev07:00
*** _anant has joined #openstack-dev07:03
*** flaper87 is now known as flaper87|afk07:05
*** afazekas_ has joined #openstack-dev07:05
*** afazekas_ has quit IRC07:06
*** dachary has quit IRC07:06
*** iartarisi has joined #openstack-dev07:06
*** sumanthns has joined #openstack-dev07:06
*** dachary has joined #openstack-dev07:06
*** eglynn has quit IRC07:07
*** egallen has joined #openstack-dev07:08
*** shinylasers has quit IRC07:08
*** o_petit has joined #openstack-dev07:08
*** rushiagr has joined #openstack-dev07:09
*** erkules_ is now known as erkules07:09
*** flaper87|afk is now known as flaper8707:14
*** shardy_afk is now known as shardy07:15
*** xchu has joined #openstack-dev07:15
*** sridevi has joined #openstack-dev07:16
*** richardwoo has quit IRC07:16
*** sahid has joined #openstack-dev07:21
*** JordanP has joined #openstack-dev07:21
*** Ryan_Lane has quit IRC07:21
*** o_petit has quit IRC07:22
*** wfoster_away is now known as wfoster07:24
*** doron_afk has joined #openstack-dev07:25
*** xchu has quit IRC07:26
*** dmakogon_ has quit IRC07:28
*** o_petit has joined #openstack-dev07:28
*** AnilV4 has quit IRC07:31
*** Max_ has joined #openstack-dev07:33
*** athomas has joined #openstack-dev07:36
*** arnaud has quit IRC07:36
*** wfoster is now known as wfoster_away07:36
*** xqueralt-afk is now known as xqueralt07:37
*** feleouet has joined #openstack-dev07:37
*** AnilV4 has joined #openstack-dev07:39
*** jpich has joined #openstack-dev07:41
*** sridevi has quit IRC07:41
*** jimjiang has quit IRC07:42
*** jimjiang has joined #openstack-dev07:44
*** xchu has joined #openstack-dev07:44
*** rushiagr has quit IRC07:45
*** tonyfy has joined #openstack-dev07:45
*** flaper87 is now known as flaper87|afk07:47
*** rushiagr has joined #openstack-dev07:47
*** asavu has joined #openstack-dev07:49
*** afazekas has quit IRC07:55
*** romcheg has joined #openstack-dev07:55
*** schwicht has quit IRC07:55
*** boris-42 has quit IRC07:55
*** giulivo has joined #openstack-dev07:56
*** dcahill has joined #openstack-dev07:56
*** jistr has joined #openstack-dev07:57
*** flaper87|afk is now known as flaper8707:58
*** romcheg has left #openstack-dev08:00
*** yassine has joined #openstack-dev08:02
*** Ruetobas has quit IRC08:04
*** jimjiang_ has quit IRC08:04
*** jimjiang has quit IRC08:04
*** jimjiang has joined #openstack-dev08:04
*** boden has joined #openstack-dev08:04
*** rushiagr has quit IRC08:05
*** stevemar has quit IRC08:05
*** asavu has quit IRC08:07
*** yves has joined #openstack-dev08:07
*** networkstatic has joined #openstack-dev08:08
*** xchu has quit IRC08:08
*** o_petit has quit IRC08:08
*** xga has joined #openstack-dev08:09
*** SergeyLukjanov has joined #openstack-dev08:09
*** yolanda has joined #openstack-dev08:10
*** henrynash has joined #openstack-dev08:10
jd__jog0: pong08:13
*** jaimegil has joined #openstack-dev08:13
*** adjohn has quit IRC08:15
*** lucasagomes has joined #openstack-dev08:16
*** fbo_away is now known as fbo08:17
*** Alexei_987 has joined #openstack-dev08:17
*** tkammer has joined #openstack-dev08:17
*** o_petit has joined #openstack-dev08:17
*** shinylasers has joined #openstack-dev08:17
*** miziel_r has joined #openstack-dev08:21
*** DeeJay1 has quit IRC08:22
*** bashok has joined #openstack-dev08:22
*** locke105 has quit IRC08:23
*** vartom10 has quit IRC08:23
*** DeeJay1 has joined #openstack-dev08:24
*** vartom10 has joined #openstack-dev08:24
*** vartom11 has joined #openstack-dev08:27
*** johnthetubaguy has joined #openstack-dev08:28
*** vartom10 has quit IRC08:28
*** wfoster_away is now known as wfoster08:28
*** johnthetubaguy1 has joined #openstack-dev08:29
*** johnthetubaguy has quit IRC08:29
*** eglynn has joined #openstack-dev08:32
*** mmagr has joined #openstack-dev08:34
*** gmoro has quit IRC08:36
*** shinylasers has quit IRC08:39
*** mattmalesky has quit IRC08:40
*** mattmalesky has joined #openstack-dev08:41
*** ndipanov_gone is now known as ndipanov08:41
*** safchain has joined #openstack-dev08:42
*** adjohn has joined #openstack-dev08:46
*** iartarisi has quit IRC08:46
*** iartarisi has joined #openstack-dev08:46
*** o_petit has quit IRC08:46
*** iartarisi has quit IRC08:46
*** gmoro has joined #openstack-dev08:48
*** iartarisi has joined #openstack-dev08:51
*** zhikunliu has joined #openstack-dev08:51
*** neoXsys has joined #openstack-dev08:51
*** rushiagr has joined #openstack-dev08:52
*** athomas has quit IRC08:52
*** adjohn has quit IRC08:55
*** danpb has joined #openstack-dev08:56
*** prekarat has quit IRC08:58
*** henrynash has quit IRC09:01
*** xga_ has joined #openstack-dev09:03
*** kspear has quit IRC09:04
*** xga has quit IRC09:05
*** zhikunliu has quit IRC09:06
*** o_petit has joined #openstack-dev09:06
*** DeeJay1 has quit IRC09:07
*** DeeJay1 has joined #openstack-dev09:07
*** pixelb has joined #openstack-dev09:10
*** imsurit has joined #openstack-dev09:11
*** fifieldt has quit IRC09:13
*** ljjjustin has joined #openstack-dev09:14
*** zhikunliu has joined #openstack-dev09:19
*** salv-orlando has joined #openstack-dev09:20
*** o_petit has quit IRC09:21
*** adjohn has joined #openstack-dev09:21
*** boris-42 has joined #openstack-dev09:22
*** adjohn has quit IRC09:26
*** prekarat has joined #openstack-dev09:27
*** o_petit has joined #openstack-dev09:28
*** miziel_r has quit IRC09:32
*** johnthetubaguy1 has quit IRC09:34
*** johnthetubaguy has joined #openstack-dev09:34
*** Alexei_987 has quit IRC09:37
*** jprovazn has quit IRC09:38
*** vsergeyev has quit IRC09:38
yaguangrussellb, ping09:39
*** bauzas has quit IRC09:39
*** mkollaro has joined #openstack-dev09:39
*** alexxu has quit IRC09:48
*** freedomhui has joined #openstack-dev09:48
*** faramir has quit IRC09:48
*** ljjjustin has quit IRC09:50
*** vsergeyev has joined #openstack-dev09:50
*** xchu has joined #openstack-dev09:51
*** asavu has joined #openstack-dev09:52
*** sumansn_ has joined #openstack-dev09:55
*** rushiagr has quit IRC09:56
*** ifarkas has quit IRC09:57
*** odyssey4me has joined #openstack-dev09:57
*** sumanthns has quit IRC09:58
gongyshemilienM ping09:58
*** radsy has joined #openstack-dev09:59
*** neeti has joined #openstack-dev10:06
*** xchu has quit IRC10:08
*** kaushikc has joined #openstack-dev10:09
*** jprovazn has joined #openstack-dev10:13
*** martyntaylor has joined #openstack-dev10:13
*** kaushikc has quit IRC10:16
*** kaushikc has joined #openstack-dev10:16
*** AndreaRosa has quit IRC10:17
*** imsurit has quit IRC10:17
*** roz has joined #openstack-dev10:17
*** athomas has joined #openstack-dev10:20
*** o_petit has quit IRC10:21
*** branen_ has quit IRC10:21
*** egallen has quit IRC10:22
*** asavu has quit IRC10:24
*** egallen has joined #openstack-dev10:24
*** yaguang has quit IRC10:26
*** mdenny has quit IRC10:26
*** egallen has quit IRC10:28
*** rushiagr has joined #openstack-dev10:28
*** egallen has joined #openstack-dev10:28
*** apevec has joined #openstack-dev10:29
*** dims has joined #openstack-dev10:29
*** egallen has quit IRC10:29
*** Max_ has quit IRC10:30
*** ifarkas has joined #openstack-dev10:33
*** paragan has quit IRC10:33
*** apevec has left #openstack-dev10:34
*** SergeyLukjanov has quit IRC10:36
*** SergeyLukjanov has joined #openstack-dev10:38
*** gongysh has quit IRC10:40
*** tonyfy has quit IRC10:42
*** bauzas has joined #openstack-dev10:47
*** bauzas has quit IRC10:48
*** bauzas has joined #openstack-dev10:48
*** afazekas has joined #openstack-dev10:51
*** SergeyLukjanov has quit IRC10:54
*** rushiagr has quit IRC10:55
*** freedomhui has quit IRC10:57
*** zhikunliu has quit IRC10:58
*** waa_ has joined #openstack-dev10:59
*** kspear has joined #openstack-dev11:00
*** dolphm has joined #openstack-dev11:01
*** Max_ has joined #openstack-dev11:01
*** o_petit has joined #openstack-dev11:02
*** eglynn is now known as eglynn-lunch11:03
*** dprince has joined #openstack-dev11:05
*** SergeyLukjanov has joined #openstack-dev11:07
*** shang has joined #openstack-dev11:09
*** Max_ has quit IRC11:10
*** freedomhui has joined #openstack-dev11:11
*** kaushikc has quit IRC11:11
*** larsks has joined #openstack-dev11:18
*** READ10 has quit IRC11:20
*** Max_ has joined #openstack-dev11:20
*** dolphm has quit IRC11:21
*** sushils has joined #openstack-dev11:22
*** adjohn has joined #openstack-dev11:22
*** larsks has quit IRC11:25
*** bauzas has quit IRC11:25
*** bauzas has joined #openstack-dev11:25
*** fandikurnia01 has quit IRC11:28
*** networkstatic has quit IRC11:28
*** doron_afk is now known as doron11:30
*** pcm_ has joined #openstack-dev11:32
*** souvik has joined #openstack-dev11:34
*** samuelbercovici has joined #openstack-dev11:38
*** jhesketh has quit IRC11:40
*** HenryG has joined #openstack-dev11:40
*** rushiagr has joined #openstack-dev11:42
*** chuckieb has joined #openstack-dev11:44
*** rfolco has joined #openstack-dev11:45
*** kspear has quit IRC11:51
*** kspear has joined #openstack-dev11:52
*** egallen has joined #openstack-dev11:52
*** shang has quit IRC11:55
*** o_petit has quit IRC11:55
*** radsy has quit IRC11:56
*** asavu has joined #openstack-dev11:57
*** kushal has quit IRC11:58
*** martine has joined #openstack-dev11:58
*** martine is now known as Guest4660111:59
*** doron is now known as doron_afk11:59
*** o_petit has joined #openstack-dev12:00
*** o_petit has quit IRC12:01
*** xarses has quit IRC12:02
*** jcoufal has joined #openstack-dev12:03
*** jcoufal has quit IRC12:03
*** rushiagr has quit IRC12:03
*** jcoufal has joined #openstack-dev12:04
*** adjohn has quit IRC12:04
*** jcoufal has quit IRC12:04
*** arezmerita has quit IRC12:05
*** jcoufal has joined #openstack-dev12:06
*** xga has joined #openstack-dev12:07
*** rushiagr has joined #openstack-dev12:07
*** sld has quit IRC12:07
*** rushiagr has quit IRC12:08
*** annegentle has quit IRC12:08
*** xarses has joined #openstack-dev12:09
*** sld has joined #openstack-dev12:09
*** rushiagr has joined #openstack-dev12:09
*** dprince has quit IRC12:09
*** galstrom_zzz is now known as galstrom12:10
*** xga_ has quit IRC12:10
*** o_petit has joined #openstack-dev12:17
*** bswartz has quit IRC12:17
*** vartom11 has quit IRC12:17
*** alexpilotti has joined #openstack-dev12:18
*** dolphm_ has joined #openstack-dev12:21
*** flaper87 is now known as flaper87|afk12:23
*** doron_afk has quit IRC12:23
*** paragan has joined #openstack-dev12:25
*** boden has quit IRC12:25
*** asavu has quit IRC12:26
*** jruzicka has joined #openstack-dev12:26
*** slagle has joined #openstack-dev12:26
*** changbl has quit IRC12:27
*** galstrom is now known as galstrom_zzz12:29
*** morazi has joined #openstack-dev12:29
*** shang has joined #openstack-dev12:30
*** adjohn has joined #openstack-dev12:30
*** flaper87|afk is now known as flaper8712:31
*** sushils has quit IRC12:31
*** adjohn has quit IRC12:35
*** boden has joined #openstack-dev12:36
*** o_petit has quit IRC12:36
*** mrunge has quit IRC12:36
*** o_petit has joined #openstack-dev12:38
*** lbragstad has quit IRC12:39
*** rwsu has joined #openstack-dev12:39
*** afazekas_ has joined #openstack-dev12:39
*** fandikurnia01 has joined #openstack-dev12:40
*** _anant has quit IRC12:42
*** dolphm_ has quit IRC12:42
*** sridevi has joined #openstack-dev12:43
*** lbragstad has joined #openstack-dev12:43
*** dolphm has joined #openstack-dev12:44
*** souvik has quit IRC12:46
*** adalbas has joined #openstack-dev12:48
*** fandikurnia01 has quit IRC12:49
*** afazekas_ has quit IRC12:49
*** bswartz has joined #openstack-dev12:50
*** herndon has joined #openstack-dev12:53
*** freedomhui has quit IRC12:56
*** anteaya has joined #openstack-dev12:57
*** larsks has joined #openstack-dev12:57
*** annegentle has joined #openstack-dev12:57
*** freedomhui has joined #openstack-dev12:58
*** FunnyLookinHat has joined #openstack-dev12:59
*** souvik has joined #openstack-dev13:01
*** annegentle is now known as annegentle_away13:02
*** jayg|g0n3 is now known as jayg13:03
*** safchain has quit IRC13:07
*** lbragstad has quit IRC13:07
*** sandywalsh has quit IRC13:08
*** yassine has quit IRC13:08
*** yassine has joined #openstack-dev13:09
*** safchain has joined #openstack-dev13:09
*** alunduil has quit IRC13:10
*** tmclaugh[work] has joined #openstack-dev13:11
*** maheshp has joined #openstack-dev13:11
*** neeti has quit IRC13:11
*** Max_ has quit IRC13:11
*** gordc has joined #openstack-dev13:12
*** chenxu has joined #openstack-dev13:12
*** sheepdog80 has joined #openstack-dev13:13
*** gimps_ has joined #openstack-dev13:14
*** shang_ has joined #openstack-dev13:14
*** davi67232 has joined #openstack-dev13:15
*** neelashah has joined #openstack-dev13:15
*** o_petit_ has joined #openstack-dev13:17
*** o_petit has quit IRC13:17
*** zul has quit IRC13:18
*** zul has joined #openstack-dev13:18
*** Max_ has joined #openstack-dev13:18
*** noslzzp has joined #openstack-dev13:19
*** kbringard has joined #openstack-dev13:20
*** kushal has joined #openstack-dev13:20
*** sandywalsh has joined #openstack-dev13:20
*** Ruetobas has joined #openstack-dev13:21
*** henrynash has joined #openstack-dev13:22
*** edmund has joined #openstack-dev13:23
*** phschwartz has joined #openstack-dev13:24
*** sthaha has quit IRC13:24
*** jimjiang_ has joined #openstack-dev13:25
*** Ruetobas has quit IRC13:25
*** jimjiang_ has quit IRC13:25
*** nosnos has quit IRC13:26
*** dvarga has joined #openstack-dev13:27
*** dprince has joined #openstack-dev13:27
*** lnxnut has joined #openstack-dev13:28
*** alexxu has joined #openstack-dev13:30
*** larsks has quit IRC13:30
*** Ruetobas has joined #openstack-dev13:32
*** stevemar has joined #openstack-dev13:33
*** lbragstad has joined #openstack-dev13:34
*** eglynn-lunch is now known as eglynn13:35
*** larsks has joined #openstack-dev13:35
*** Ruetobas has quit IRC13:36
*** READ10 has joined #openstack-dev13:37
*** dolphm has quit IRC13:37
*** changbl has joined #openstack-dev13:38
*** dkranz has joined #openstack-dev13:39
*** Max_ has quit IRC13:40
*** dolphm has joined #openstack-dev13:40
*** larsks has quit IRC13:43
*** eharney has joined #openstack-dev13:43
*** Ruetobas has joined #openstack-dev13:44
*** markmcclain has quit IRC13:45
*** larsks has joined #openstack-dev13:47
*** Guest46601 has quit IRC13:47
srideviCan someone please review   https://review.openstack.org/4627913:48
*** shang_ has quit IRC13:48
*** avishay has quit IRC13:48
*** lnxnut has quit IRC13:50
*** neeti has joined #openstack-dev13:50
*** o_petit_ has quit IRC13:51
*** shang has quit IRC13:51
*** shang has joined #openstack-dev13:51
*** o_petit has joined #openstack-dev13:53
*** burt has joined #openstack-dev13:53
*** alexpilotti has quit IRC13:53
*** o_petit has quit IRC13:53
*** alexxu has quit IRC13:55
*** neeti has quit IRC13:56
*** alexpilotti has joined #openstack-dev13:56
*** nou1 has joined #openstack-dev13:56
*** sumansn_ has quit IRC13:57
*** larsks has quit IRC13:57
*** FunnyLookinHat has quit IRC13:58
*** larsks has joined #openstack-dev13:58
*** o_petit has joined #openstack-dev13:58
*** larsks has quit IRC13:59
*** ifarkas has quit IRC14:00
nou1can anybody explain what is the difference between a snapshot and an image? So far I had been thinking they both are different but i read somewhere today that they are same and its going to be fixed in havana. Is it so?14:00
*** jistr is now known as jistr|call14:00
*** larsks has joined #openstack-dev14:00
*** jistr|call is now known as jistr14:02
*** YorikSar has joined #openstack-dev14:02
*** jecarey has joined #openstack-dev14:03
*** colinmcnamara has joined #openstack-dev14:03
*** xga_ has joined #openstack-dev14:03
*** o_petit has quit IRC14:03
*** sridevi has quit IRC14:03
*** chenxu has quit IRC14:04
*** DeeJay1 has quit IRC14:04
*** gargya has joined #openstack-dev14:04
rushiagrnou1: both are different concepts altogether14:04
nou1rushiagr, So from where I read it, its wrong. Thanks.14:06
*** xga has quit IRC14:07
*** markmcclain has joined #openstack-dev14:07
*** xqueralt is now known as xqueralt-afk14:07
*** colinmcnamara has quit IRC14:07
*** alexpilotti has quit IRC14:07
*** alunduil has joined #openstack-dev14:07
*** galstrom_zzz is now known as galstrom14:08
*** garyk has quit IRC14:09
*** vlakarados has joined #openstack-dev14:09
*** vlakarados is now known as Guest9762314:09
*** athomas has quit IRC14:09
*** davi67232 has quit IRC14:09
*** vlakarados|2 has quit IRC14:10
*** johnthetubaguy has quit IRC14:10
*** herndon has quit IRC14:10
*** nou1 has left #openstack-dev14:10
*** rushiagr has quit IRC14:10
*** otherwiseguy has joined #openstack-dev14:11
*** johnthetubaguy has joined #openstack-dev14:12
*** edmund has quit IRC14:12
*** edmund has joined #openstack-dev14:13
*** spzala has joined #openstack-dev14:13
*** athomas has joined #openstack-dev14:14
*** kbrierly has joined #openstack-dev14:15
*** xga_ has quit IRC14:15
*** alexpilotti has joined #openstack-dev14:15
*** pabelanger_ has joined #openstack-dev14:16
*** pabelanger__ has joined #openstack-dev14:16
*** xqueralt-afk is now known as xqueralt14:17
*** pabelanger__ has quit IRC14:17
*** pabelanger__ has joined #openstack-dev14:17
*** pabelanger has quit IRC14:17
*** pabelanger__ is now known as pabelanger14:17
*** pabelanger_ has quit IRC14:17
*** pabelanger_ has joined #openstack-dev14:17
*** pabelanger has quit IRC14:17
*** pabelanger has joined #openstack-dev14:18
*** chenxu has joined #openstack-dev14:18
*** e1mer has quit IRC14:19
*** mrodden has quit IRC14:24
*** annegentle_away is now known as annegentle14:24
*** dolphm has quit IRC14:25
*** dolphm has joined #openstack-dev14:26
*** adalbas has quit IRC14:28
*** colinmcnamara has joined #openstack-dev14:29
*** afazekas has quit IRC14:30
henrynashdolphm: ping14:31
dolphmhenrynash: pong14:31
*** thouveng has quit IRC14:31
henrynashdolphm: so looking at the list_user_projects fix: https://review.openstack.org/#/c/45584/314:32
dolphmhenrynash: do we need to keep the list_*_ids() method around?14:33
*** topol has joined #openstack-dev14:33
*** senk1 has joined #openstack-dev14:33
*** colinmcnamara has quit IRC14:33
henrynashdolphm: well, we could also jus get the refs, and extract the ids from it where needed (kind of the opposite to what I was doing)14:33
dolphmhenrynash: right14:33
*** o_petit has joined #openstack-dev14:34
henrynashdolphm: further, I assume that no v2 api should ever get back a list of projects that are outside of the default domain?14:34
*** mrodden has joined #openstack-dev14:34
dolphmhenrynash: correct14:34
henrynashdolphm: which the existing code certainly doesn't check for in the case if ids14:35
henrynashdolphm: all the more reason to get the refs…since I'll need to look at the domain_id of the project14:35
*** atiwari has joined #openstack-dev14:36
henrynashdolphm: ok, let me work that14:36
*** FunnyLookinHat has joined #openstack-dev14:36
*** senk1 has quit IRC14:37
*** xga has joined #openstack-dev14:37
*** senk1 has joined #openstack-dev14:38
*** larsks has quit IRC14:38
*** ayoung has joined #openstack-dev14:39
*** nshaikh has left #openstack-dev14:42
*** SergeyLukjanov has quit IRC14:42
*** o_petit has quit IRC14:43
*** senk has joined #openstack-dev14:43
*** aeperezt has joined #openstack-dev14:44
*** adalbas has joined #openstack-dev14:44
*** davi67232 has joined #openstack-dev14:44
*** senk2 has joined #openstack-dev14:44
*** herndon has joined #openstack-dev14:46
*** larsks has joined #openstack-dev14:48
*** senk has quit IRC14:48
*** senk1 has quit IRC14:48
dolphmmorganfainberg: plz thx https://review.openstack.org/#/c/45320/14:49
*** Max_ has joined #openstack-dev14:50
*** carl_baldwin has joined #openstack-dev14:50
*** corXi has quit IRC14:50
*** CaptTofu has quit IRC14:50
*** prekarat has quit IRC14:51
*** senk2 has quit IRC14:51
*** davi67232 has quit IRC14:51
*** CaptTofu has joined #openstack-dev14:51
*** afazekas has joined #openstack-dev14:51
*** maheshp has quit IRC14:52
*** senk has joined #openstack-dev14:53
*** colinmcnamara has joined #openstack-dev14:53
*** rnirmal has joined #openstack-dev14:54
*** Max_ has quit IRC14:54
*** rushiagr has joined #openstack-dev14:54
*** gongysh has joined #openstack-dev14:56
*** senk1 has joined #openstack-dev14:56
*** sld is now known as sld-away14:56
*** radez_g0n3 is now known as radez14:56
*** rushiagr has left #openstack-dev14:56
*** chenxu has quit IRC14:57
*** rushiagr has joined #openstack-dev14:57
*** yassine has quit IRC14:58
*** Max_ has joined #openstack-dev14:58
*** yassine has joined #openstack-dev14:58
*** senk has quit IRC14:58
*** matiu has joined #openstack-dev14:59
*** matiu has quit IRC14:59
*** matiu has joined #openstack-dev14:59
*** rushiagr has left #openstack-dev15:00
*** dhellmann_ is now known as dhellmann15:00
*** johnthetubaguy1 has joined #openstack-dev15:00
*** johnthetubaguy has quit IRC15:00
*** mrodden1 has joined #openstack-dev15:02
*** thedodd has joined #openstack-dev15:02
*** mrodden has quit IRC15:02
*** senk1 has quit IRC15:03
*** mkollaro has quit IRC15:03
*** adjohn has joined #openstack-dev15:03
*** reidrac has quit IRC15:03
*** spzala_ has joined #openstack-dev15:03
*** spzala has quit IRC15:04
*** spzala_ is now known as spzala15:04
*** morazi has quit IRC15:04
*** chenxu has joined #openstack-dev15:05
*** dubsquared has joined #openstack-dev15:07
*** adjohn has quit IRC15:08
*** danwent has joined #openstack-dev15:09
*** davi67232 has joined #openstack-dev15:09
*** jimjiang has quit IRC15:10
*** jvrbanac has joined #openstack-dev15:14
*** colinmcnamara has quit IRC15:15
*** yves has quit IRC15:15
*** senk1 has joined #openstack-dev15:16
*** odyssey4me has quit IRC15:17
*** mrodden has joined #openstack-dev15:18
*** nunosantos has quit IRC15:19
*** senk has joined #openstack-dev15:19
*** morazi has joined #openstack-dev15:19
*** senk1 has quit IRC15:21
*** mlavalle has joined #openstack-dev15:21
*** SergeyLukjanov has joined #openstack-dev15:21
*** colinmcnamara has joined #openstack-dev15:21
*** bdpayne has joined #openstack-dev15:22
*** martyntaylor has quit IRC15:22
*** davi67232 has quit IRC15:22
*** mrodden1 has quit IRC15:23
*** martyntaylor has joined #openstack-dev15:23
*** iartarisi has quit IRC15:24
*** mrodden1 has joined #openstack-dev15:26
*** mrodden has quit IRC15:26
bswrchrdis there anyone on from the neutron team?15:27
bswrchrdi've got a question (or two) about the consumption of the policy.json file via the policy.py file for neutron-server15:28
*** yves has joined #openstack-dev15:28
*** martyntaylor has quit IRC15:28
*** prad has joined #openstack-dev15:28
*** imsurit has joined #openstack-dev15:28
*** cdub has joined #openstack-dev15:33
*** Mandell has joined #openstack-dev15:33
*** aloga has quit IRC15:33
*** Madkiss has quit IRC15:35
*** markmcclain has quit IRC15:35
*** jecarey has quit IRC15:35
*** imsurit has quit IRC15:36
*** bashok has quit IRC15:36
*** rnirmal_ has joined #openstack-dev15:39
*** jvrbanac has quit IRC15:39
*** jvrbanac has joined #openstack-dev15:40
*** branen has joined #openstack-dev15:40
*** colinmcnamara has quit IRC15:40
*** rnirmal has quit IRC15:40
*** rnirmal_ is now known as rnirmal15:40
*** tmclaugh[work] has quit IRC15:41
*** martine has joined #openstack-dev15:43
*** martine is now known as Guest9189715:43
*** Guest91897 is now known as martine_15:43
*** pabelanger has quit IRC15:44
*** jrwren has quit IRC15:45
*** jrwren has joined #openstack-dev15:46
*** jrwren has joined #openstack-dev15:46
*** morazi has quit IRC15:48
*** jimfehlig has joined #openstack-dev15:48
*** rnirmal has quit IRC15:50
*** martyntaylor has joined #openstack-dev15:50
*** xxiao has joined #openstack-dev15:50
*** rnirmal has joined #openstack-dev15:51
*** markwash has joined #openstack-dev15:51
*** xga has quit IRC15:52
*** hemna has joined #openstack-dev15:52
*** gimps_ has quit IRC15:52
*** o_petit has joined #openstack-dev15:53
*** Mandell has quit IRC15:54
*** spzala_ has joined #openstack-dev15:55
*** pabelanger_ has quit IRC15:55
*** pabelanger has joined #openstack-dev15:56
*** xga has joined #openstack-dev15:56
*** o_petit has quit IRC15:57
*** sahid_ has joined #openstack-dev15:58
*** tmclaugh[work] has joined #openstack-dev15:58
*** spzala has quit IRC15:58
*** spzala_ is now known as spzala15:59
*** paragan has quit IRC15:59
*** morazi has joined #openstack-dev16:00
*** lnxnut_ has joined #openstack-dev16:00
*** Ruetobas has quit IRC16:01
*** boris-42_ has joined #openstack-dev16:02
*** marun has joined #openstack-dev16:02
*** davi67232 has joined #openstack-dev16:02
*** pixelb has quit IRC16:04
*** Ruetobas has joined #openstack-dev16:04
*** boris-42_ has quit IRC16:04
*** yassine has quit IRC16:04
*** boris-42 has quit IRC16:06
*** mmagr has quit IRC16:06
*** lnxnut_ has quit IRC16:06
*** dvarga has quit IRC16:07
*** jrwren has quit IRC16:08
*** xqueralt is now known as xqueralt-afk16:08
*** senk has quit IRC16:08
*** Ruetobas has quit IRC16:08
*** jrwren has joined #openstack-dev16:09
*** jrwren has joined #openstack-dev16:09
*** jaimegil has quit IRC16:09
*** devvesa has quit IRC16:09
*** jistr has quit IRC16:09
*** xga_ has joined #openstack-dev16:10
*** thedodd has quit IRC16:10
*** chenxu has quit IRC16:10
*** arnaud has joined #openstack-dev16:11
*** fbo is now known as fbo_away16:11
*** davi67232 has quit IRC16:11
*** JonnyNomad has quit IRC16:11
*** xga has quit IRC16:12
*** Ruetobas has joined #openstack-dev16:14
*** isd has joined #openstack-dev16:14
*** changbl has quit IRC16:14
*** isd has quit IRC16:14
*** SumitNaiksatam has quit IRC16:16
*** alop has joined #openstack-dev16:19
*** JordanP has quit IRC16:19
*** dubsquar_ has joined #openstack-dev16:21
*** dubsquared has quit IRC16:21
*** fbo_away is now known as fbo16:24
*** xarses has quit IRC16:24
*** rnirmal has quit IRC16:25
*** rnirmal has joined #openstack-dev16:25
*** dims has quit IRC16:25
*** yves has quit IRC16:26
*** asavu has joined #openstack-dev16:26
*** dolphm has quit IRC16:26
*** alop has quit IRC16:27
*** zaitcev has joined #openstack-dev16:28
*** kbrierly has quit IRC16:29
*** alop has joined #openstack-dev16:29
*** sahid has quit IRC16:30
*** eglynn has quit IRC16:30
*** markmcclain has joined #openstack-dev16:30
*** chenxu has joined #openstack-dev16:31
*** moted has quit IRC16:31
*** moted has joined #openstack-dev16:32
*** adjohn has joined #openstack-dev16:35
*** bashok has joined #openstack-dev16:35
*** gargya has quit IRC16:35
*** fbo is now known as fbo_away16:36
*** dims has joined #openstack-dev16:37
*** SumitNaiksatam has joined #openstack-dev16:37
*** kbrierly has joined #openstack-dev16:38
*** adjohn has quit IRC16:40
*** reed has joined #openstack-dev16:40
*** chenxu has quit IRC16:41
*** DennyZhang has joined #openstack-dev16:41
*** athomas has quit IRC16:44
*** pixelb has joined #openstack-dev16:44
*** rdopieralski has quit IRC16:44
*** xga has joined #openstack-dev16:44
*** dubsquar_ has quit IRC16:47
*** xga_ has quit IRC16:47
*** xarses has joined #openstack-dev16:47
*** tmclaugh[work] has quit IRC16:48
*** arnaud has quit IRC16:48
*** Max_ has quit IRC16:49
*** cdub has quit IRC16:50
atiwariayoung, how to fix "tempest" issue I am getting in https://review.openstack.org/#/c/46123/?16:52
atiwariayoung, never mind16:55
*** waa_ has quit IRC16:56
*** samuelbercovici has quit IRC16:56
*** chenxu has joined #openstack-dev16:57
*** ruhe has joined #openstack-dev16:58
*** mdenny has joined #openstack-dev16:58
*** danpb has quit IRC16:58
*** Ryan_Lane has joined #openstack-dev17:00
*** galstrom is now known as galstrom_zzz17:00
*** senk has joined #openstack-dev17:01
*** bswartz has quit IRC17:01
*** safchain has quit IRC17:02
*** senk has quit IRC17:02
*** DennyZhang has quit IRC17:02
*** thedodd has joined #openstack-dev17:04
*** asavu has quit IRC17:05
*** jpich has quit IRC17:05
*** tmclaugh[work] has joined #openstack-dev17:06
*** gyee has joined #openstack-dev17:07
*** nati_ueno has joined #openstack-dev17:07
*** mkollaro has joined #openstack-dev17:09
*** nati_ueno has quit IRC17:12
*** gimps_ has joined #openstack-dev17:12
*** ruhe has quit IRC17:13
*** networkstatic has joined #openstack-dev17:13
*** dolphm has joined #openstack-dev17:13
*** jecarey has joined #openstack-dev17:13
*** dubsquared has joined #openstack-dev17:14
*** dolphm has quit IRC17:14
*** dolphm has joined #openstack-dev17:15
*** chenxu has quit IRC17:17
*** lucasagomes has quit IRC17:20
*** bauzas has quit IRC17:21
*** pasquier-s has quit IRC17:22
*** Ryan_Lane has quit IRC17:23
*** Ryan_Lane has joined #openstack-dev17:23
*** Ryan_Lane has quit IRC17:23
*** Ryan_Lane has joined #openstack-dev17:23
*** johnthetubaguy1 has quit IRC17:25
*** dvarga has joined #openstack-dev17:25
*** wfoster is now known as wfoster_away17:26
*** vartom11 has joined #openstack-dev17:26
*** markmcclain has quit IRC17:27
*** dolphm has quit IRC17:27
*** markmcclain has joined #openstack-dev17:28
*** vipul is now known as vipul-away17:30
*** vipul-away is now known as vipul17:31
*** pcm__ has joined #openstack-dev17:31
*** angdraug has quit IRC17:32
*** armax has joined #openstack-dev17:32
*** HenryG_ has joined #openstack-dev17:33
*** pasquier-s has joined #openstack-dev17:34
*** pcm_ has quit IRC17:34
*** bauzas has joined #openstack-dev17:35
*** freedomhui has quit IRC17:35
*** HenryG has quit IRC17:36
*** SergeyLukjanov has quit IRC17:42
*** markmcclain has quit IRC17:43
*** SergeyLukjanov has joined #openstack-dev17:44
*** comay has joined #openstack-dev17:47
*** jbresnah has quit IRC17:48
*** Mandell has joined #openstack-dev17:50
*** rfolco has quit IRC17:50
*** waa_ has joined #openstack-dev17:52
*** boris-42 has joined #openstack-dev17:53
*** radez is now known as radez_g0n317:54
*** Max_ has joined #openstack-dev17:55
*** angdraug has joined #openstack-dev17:56
*** networkstatic has quit IRC17:56
*** radez_g0n3 is now known as radez17:56
*** markmcclain1 has joined #openstack-dev17:57
*** otherwiseguy has quit IRC17:58
*** martines has quit IRC17:59
*** nati_ueno has joined #openstack-dev18:00
*** eglynn has joined #openstack-dev18:00
*** jecarey has quit IRC18:01
*** bswartz has joined #openstack-dev18:03
*** ctlaugh has quit IRC18:03
*** amohn9 has joined #openstack-dev18:04
*** martine_ has quit IRC18:04
*** adjohn has joined #openstack-dev18:05
*** BobBall is now known as BobBallAway18:06
*** salv-orlando has quit IRC18:06
*** adjohn has quit IRC18:07
*** networkstatic has joined #openstack-dev18:07
*** adjohn has joined #openstack-dev18:08
*** adjohn has quit IRC18:08
*** herndon has quit IRC18:08
*** ctlaugh has joined #openstack-dev18:09
*** adjohn has joined #openstack-dev18:09
*** tkammer has quit IRC18:11
morganfainbergbknudson, ping18:11
*** pmathews has joined #openstack-dev18:12
*** ruhe has joined #openstack-dev18:12
*** cdub has joined #openstack-dev18:13
*** DennyZhang has joined #openstack-dev18:14
*** utlemming has quit IRC18:15
bknudsonmorganfainberg: pong18:15
morganfainbergbknudson, you're a bit more familiar with SQLAlchemy than I am.18:16
morganfainbergbknudson, when it comes to dealing with the JsonBlob RowProxy stuff, what is the best way to just overwrite what was originally in that column>?18:16
morganfainberguse a direct update SQL construction w/ .execute()?18:16
morganfainbergor is there a more elegant (e.g. row.extra = value) example18:17
bknudsonmorganfainberg: is this in a migration?18:17
morganfainbergbknudson, yes18:17
*** xga has quit IRC18:17
morganfainbergbknudson, https://review.openstack.org/#/c/46207/5/keystone/common/sql/migrate_repo/versions/034_add_default_project_id_column_to_user.py18:17
bknudsonI don't have a problem with direct SQL update in a migration18:17
morganfainbergbknudson, i am thinking that is going to be the easiest mechanism18:17
morganfainbergdirect SQL that is18:17
bknudsonSQLAlchemy can generate the UPDATE SQL too18:18
morganfainbergbknudson, hrm.18:18
*** xmltok has joined #openstack-dev18:18
*** utlemming has joined #openstack-dev18:18
bknudsonmorganfainberg: http://docs.sqlalchemy.org/en/rel_0_7/core/tutorial.html#inserts-and-updates18:18
morganfainbergbknudson, ah ok, that probably will work better.18:19
bknudsonit's really not much different than the update string, but sqlalchemy can do the bind parameters easily18:19
morganfainbergright18:19
morganfainbergbknudson, i am assuming i'll need to do a json.dumps() to use the .update() right?18:19
*** jecarey has joined #openstack-dev18:20
bknudsonmorganfainberg: I would think so. wouldn't expect sqlalchemy to understand JSON.18:20
*** utlemming has quit IRC18:20
morganfainbergbknudson, makes sense.18:20
bknudsonsql-json-alchemy18:20
morganfainbergbknudson, LOL18:20
morganfainbergthanks :)18:20
morganfainbergit was a bit late when i was looking at that last night, just went crosseyed and said screw it, will od this tomorrow18:20
*** Ryan_Lane has quit IRC18:22
*** afazekas is now known as afazekas_zz18:23
*** maheshp has joined #openstack-dev18:26
*** dolphm has joined #openstack-dev18:28
*** Ryan_Lane has joined #openstack-dev18:28
*** kenperkins has joined #openstack-dev18:28
*** Mandell has quit IRC18:28
*** vipul is now known as vipul-away18:30
*** morazi has quit IRC18:30
*** melwitt has joined #openstack-dev18:31
*** clayb has joined #openstack-dev18:32
*** galstrom_zzz is now known as galstrom18:32
*** dolphm has quit IRC18:32
*** larsks has quit IRC18:32
*** larsks has joined #openstack-dev18:34
*** mlavalle has quit IRC18:34
*** yolanda has quit IRC18:35
*** utlemming has joined #openstack-dev18:36
atiwarimorganfainberg, can you please tell me how to fix the tempest issue occurring in https://review.openstack.org/#/c/46123/ due to my fix?18:36
atiwariit seems circular dependency18:36
morganfainbergatiwari, it might be something where the tempest test needs to be disabled/committed as disabled and then your fix, then re-enabled w/ fixes18:37
*** vipul-away is now known as vipul18:37
morganfainbergatiwari, i think #openstack-qa (checking on channel name) is likely a better place to ask, i haven't committed a change to tempest before18:38
*** carl_baldwin has quit IRC18:38
atiwariok18:38
atiwarilet me see18:38
*** mattmalesky has quit IRC18:38
ayoungbknudson, morganfainberg, https://review.openstack.org/46334  does that approach seem sane?18:38
ayoungstevemar, https://review.openstack.org/4633418:39
*** kenperkins has quit IRC18:39
*** atiwari has quit IRC18:39
morganfainbergayoung, make it so the Manager is only instatiated in the router when used?18:39
morganfainbergayoung, if i'm reading this right18:39
stevemarayoung: lookin18:39
*** cdub has quit IRC18:39
*** atiwari has joined #openstack-dev18:40
ayoungmorganfainberg, yep18:40
ayoungmorganfainberg, it is the change in service.py that I want to make sure I have right18:40
*** ndipanov has quit IRC18:41
morganfainbergayoung, oh oh, this isn't complete :P18:41
ayounghenrynash, ^^ the forward resolution is your work.  Does moving it as ^^ make sense?18:41
morganfainbergayoung, i was confused for a moment18:41
ayoungmorganfainberg, what is missing?18:41
morganfainbergayoung, the last file was empty.18:41
morganfainberg:P18:41
ayoung?18:42
morganfainbergkeystone/tests/keystone.db18:42
stevemarmorganfainberg i dont think gerrit can render the last file18:42
ayoungmorganfainberg, ah..that is garbage.  git error18:42
morganfainbergyep18:42
morganfainberglike i said, was very confused for a moment18:42
*** rfolco has joined #openstack-dev18:42
stevemarmorganfainberg, me too; ayoung it looks good, if jenkins comes back with +1, then i'll +1 it18:43
*** vartom11 has quit IRC18:43
ayoungmorganfainberg, to optimize running the unit tests, I mount a ramdisk over the keystone/tests/tmp dir.  But somehow, that db got in there anyway18:43
henrynashayoung: which bit is my work?18:43
ayounghenrynash, forward resolution18:43
stevemarayoung: i was surprised you didn't have to change any of the 'paste magic'18:43
ayounghenrynash, see https://review.openstack.org/#/c/46334/18:44
henrynashayoung: don't think I did that...18:44
ayounghenrynash, I moved that call to later in the file...once per app creation18:44
ayoungbknudson, it was you, not henrynash18:45
*** morazi has joined #openstack-dev18:45
morganfainbergayoung, I don't think that looks inherently wrong.  does mod_wsgi call the public app factory in service?  if so that is likely good.18:45
henrynashayoung: henrynash stops scratching head and looking at tea-leaves18:45
ayoungits forcing the packages to pull in oauth, which is not necessarily packaged.  Since that is an optional extension, the RPM/DEB should not depend on oauth18:47
morganfainbergayoung, i don't see anything really wrong with that approach if bknudson says forward resolution looks good (my concern of httpd is gone as i look at the code outside of gerrit)18:47
morganfainbergi am a fan of that :)18:47
*** carl_baldwin has joined #openstack-dev18:48
ayoungyeah, would like to test in httpd18:48
*** yolanda has joined #openstack-dev18:49
*** xxiao is now known as ausjke18:50
*** yolanda has quit IRC18:52
*** mkollaro has quit IRC18:53
*** novas0x2a|laptop has joined #openstack-dev18:54
*** carl_baldwin has quit IRC18:54
*** boden_ has joined #openstack-dev18:54
*** boden has quit IRC18:55
*** lnxnut_ has joined #openstack-dev18:56
*** dolphm has joined #openstack-dev18:56
*** bswrchrd_ has joined #openstack-dev18:56
*** egallen has quit IRC18:57
ayounggrr...something is messing up ENV passing to my client.18:58
ayoung$ nova list | grep ayoungERROR: You must provide a username via either --os-username or env[OS_USERNAME]18:58
ayoungbut18:58
*** asavu has joined #openstack-dev18:59
ayoung[ayoung@ayoung530 rsshexec (master)]$ nova  --os_password=$OS_PASSWORD  --os-username=$OS_USERNAME --os-auth-url=$OS_AUTH_URL  --os-tenant-name=IdM  list | grep ayoung18:59
*** bswrchrd has quit IRC18:59
*** dubsquared has quit IRC19:00
*** dubsquared has joined #openstack-dev19:01
*** davi67232 has joined #openstack-dev19:01
bknudsonayoung: changes in https://review.openstack.org/#/c/46334/2/keystone/service.py look ok to me. I assume endpoint_filter/routers.py add_routes gets called when paste stuff initializes it...19:02
bknudsonthen the manager gets built.19:02
*** bswrchrd has joined #openstack-dev19:03
*** egallen has joined #openstack-dev19:03
bknudsonI don't think you technically have to make the change to dependency.resolve_future_dependencies(), since there wouldn't be circular/future dependencies to handle at that point?19:03
ayoungbknudson, yeah.  that is called from either bin/keystone-all or the httpd/keystone.py19:03
ayoungbknudson, unit tests fail if I don'19:04
ayoungt19:04
dolphmwhat is resolve_future_dependencies() ?19:04
ayoungit tries to resolve them there, and that somehow trips on the oauth one19:04
*** kbrierly has quit IRC19:05
ayoungdolphm, it was a circular dependncy hack due to identity and assignments depending on each other19:05
bknudsondolphm: we have a circular dependency between assignment and identity19:05
*** changbl has joined #openstack-dev19:05
*** mlavalle has joined #openstack-dev19:05
* ayoung would like to get rid of that, too. but in icehouse19:05
dolphmayoung: why did you extend the factory method?19:05
dolphmdidn't*19:05
*** bswrchrd_ has quit IRC19:05
*** kbrierly has joined #openstack-dev19:05
bknudsondolphm: so when identity is created, it has a @depends on assignment, but assignment isn't there yet19:05
*** herndon has joined #openstack-dev19:06
ayoungoauth dependency still wrecking things19:06
bknudsonso I made a change to "queue up" the assignment dependency injection until later, and "later" is resolve_future_dependencies()19:06
ayounghttp://logs.openstack.org/34/46334/2/check/gate-tempest-devstack-vm-full/c535616/logs/screen-key.txt.gz19:06
*** Max_ has quit IRC19:06
bknudsonayoung: what's got the dependency on oauth_api?19:07
ayoungbknudson, that is what I am trying to figure out...19:07
*** egallen has quit IRC19:07
dolphmbknudson: token provider or something19:07
dolphmstevemar: ^19:07
bknudsonso as soon as that gets imported then it's going to have a dependency on the provider of oauth_api19:08
*** egallen has joined #openstack-dev19:08
*** ruhe has quit IRC19:08
stevemardolphm, ayoung: yeah, in the token provider, let me double check if else where19:08
bknudson./token/providers/uuid.py:@dependency.requires('token_api', 'identity_api', 'catalog_api', 'oauth_api')19:09
bknudson./auth/plugins/oauth1.py:@dependency.requires('oauth_api')19:09
ayoungstevemar, ugh!19:09
*** jvrbanac_1 has joined #openstack-dev19:09
*** jbresnah has joined #openstack-dev19:09
*** jvrbanac_1 has quit IRC19:09
bknudsoncan we have some kind of optional requirement?19:09
bknudsonyes, that totally makes sense.19:10
bknudsonoptional dependency19:10
*** jprovazn has quit IRC19:11
dolphm+1 for optional requirement19:11
bknudsonmaybe we need a new token provider that also has the oauth stuff.19:11
*** jvrbanac has quit IRC19:11
ayoungbknudson, that feels wrong.19:11
*** martine has joined #openstack-dev19:11
ayoungits more like a pipeline...the rest of the provider should be the same...19:11
dolphm@dependency.you_know_if_its_cool_with_you_thatd_be_nice_thanks('oauth_api')19:12
ayoungheh19:12
*** martine is now known as Guest7853419:12
dolphmtechnically provider is pluggable, right?19:12
*** fbo_away is now known as fbo19:12
dolphmso, a simple solution could be extending the provider with an implementation that requires oauth19:12
ayoungdolphm, yeah, but not to this degree of granularity19:13
ayoungit would pass the test, but then fail when it got to these code paths..but then, maybe that is ok19:13
atiwariayoung, do you know how to deal with situation where tempest test is broken due to your change?19:13
atiwarihttps://review.openstack.org/#/c/4612319:13
zuldolphm:  ping19:14
ayoungatiwari, submit a change to tempest disabling that test19:14
ayoungthen submit your change to keystone19:14
dolphmayoung: you're right, i'm poking around now... and it looks like a significant refactor19:14
dolphmzul: pong19:14
*** Mandell has joined #openstack-dev19:14
bknudsonor change our token provider to have optional requirement that can be fulfilled if it's actually there (when resolve_future_dependencies())19:15
atiwariok19:15
zuldolphm: we have some concerns about the usage of oauth2 in keystone19:15
ayoungand finally resubmit a change to tempest to add a new test19:15
ayoungzul, it is supposed to be disabled by default, but we have some code issues that pull it in as a package dependency19:15
atiwarithis what I got from QA folks "<dkranz> atiwari: If you want to do this you have to temporarily change tempest so that it will pass with either the old or new version"19:16
zulayoung:  yeah dpkg pulls it in as a dependency when it gets built unless you patch it out which is not great19:16
ayoungdolphm, the only place where self.oauth is referenced is if oauth is in the method names...I can add a if None check in there that will jjust fail...I might be able to make it work without too much refactoring19:16
ayoungzul, working on it19:17
zulayoung:  cool thanks19:17
zulayoung/dolphm: i opened up a bug with the issues we have with oauth2 being used in the first place19:18
zulhttps://bugs.launchpad.net/keystone/+bug/122463819:18
uvirtbotLaunchpad bug 1224638 in keystone "Consider not using oauth2" [Undecided,New]19:18
*** salv-orlando has joined #openstack-dev19:18
*** otherwiseguy has joined #openstack-dev19:18
dolphmzul: do you have an alternative suggestion, other than 'do not use' ?19:19
*** jprovazn has joined #openstack-dev19:19
zuldolphm:  i mentioned oauthlib in the bug report19:19
*** jprovazn has quit IRC19:19
dolphmzul: as ayoung said, it should be optional so if ubuntu doesn't want to support oauth in havana, that would be fine19:21
zulack19:21
*** davi67232 has quit IRC19:21
*** gimps_ has quit IRC19:21
dolphmstevemar: ^ what was the blocker with oauthlib?19:23
stevemardolphm: iirc it was poor server side support19:23
*** vipul is now known as vipul-away19:23
*** vipul-away is now known as vipul19:23
*** kbrierly has quit IRC19:24
*** jbresnah has quit IRC19:24
*** amohn9 has quit IRC19:25
*** kbrierly has joined #openstack-dev19:26
*** Max_ has joined #openstack-dev19:28
*** alop_ has joined #openstack-dev19:28
*** alop has quit IRC19:28
*** alop_ is now known as alop19:28
*** gyee has quit IRC19:29
prometheanfiredolphm: any chance we can get patches backported for stable/grizzly and stable/folsom for https://bugs.launchpad.net/ossn/+bug/1179955 CVE-2013-422219:29
uvirtbotprometheanfire: ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem.  When the candidate has been publicized, the details for this candidate will be provided. (http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4222)19:29
uvirtbotLaunchpad bug 1179955 in ossn "Disabling a tenant would not disable a user token" [High,Fix released]19:29
*** amohn9 has joined #openstack-dev19:29
*** alunduil has quit IRC19:30
*** Max__ has joined #openstack-dev19:30
*** kbrierly has quit IRC19:31
*** alexpilotti has quit IRC19:32
*** gordc has quit IRC19:32
*** Max_ has quit IRC19:32
*** dvarga has quit IRC19:33
*** morazi has quit IRC19:33
*** SumitNaiksatam has quit IRC19:34
*** kushal has quit IRC19:35
*** Ryan_Lane has quit IRC19:36
*** waa_ has quit IRC19:36
*** dolphm has quit IRC19:36
*** davi67232 has joined #openstack-dev19:37
*** vipul is now known as vipul-away19:38
*** SumitNaiksatam has joined #openstack-dev19:38
*** dolphm has joined #openstack-dev19:38
ayoungdolphm, I think I have it.  We'll need to document that, in order to get oauth1 working, you need to set the token provider value in the paste config19:39
ayoungtesting now19:39
*** slagle has quit IRC19:40
dolphmayoung: set it to what?19:40
dolphmayoung: OAuth1CapableProvider or something?19:40
*** shinylasers has joined #openstack-dev19:41
ayoungdolphm, I made two...token.providers.uuid.OAUTHPRovider and a PKI one19:41
*** davi67232 has quit IRC19:42
bknudsonwe're going to have an n*n explosion of providers19:42
dolphmwasn't there already a pki.Provider?19:42
*** kbrierly has joined #openstack-dev19:42
ayoungdolphm, I would not say this is a permanent solution, just one for Havana19:43
*** rwsu has quit IRC19:44
*** adalbas has quit IRC19:44
*** zul has quit IRC19:45
prometheanfiredolphm: can I at least get confirmation that that bug effects folsom/grizzly?19:45
*** dvarga has joined #openstack-dev19:45
ayoungbknudson, yeah, I would say that the right solution would be to do the optional thing you suggested...19:45
ayoungprometheanfire, doesn't affect folsom19:45
prometheanfirewell, that's good :D19:46
ayounguuid tokens are the default there19:46
bknudsonayoung: you want me to code up the optional support in dependency?19:46
*** adalbas has joined #openstack-dev19:46
ayoungand they are automatically disabled if the tenant is disabled19:46
bknudsonthere's unit tests so should not be a big effort19:46
ayoungprometheanfire, it is an issue in grizzly19:46
ayoungbknudson, maybe...not 100% certain that it is the right solution.19:47
prometheanfireok, I can update our bug with that at least19:47
*** jecarey has quit IRC19:49
*** dvarga has quit IRC19:49
*** morazi has joined #openstack-dev19:50
dolphmprometheanfire: which bug?19:53
prometheanfirehttps://bugs.launchpad.net/ossn/+bug/117995519:53
uvirtbotLaunchpad bug 1179955 in ossn "Disabling a tenant would not disable a user token" [High,Fix released]19:53
prometheanfirejust grizzly it looks like as well19:53
*** SergeyLukjanov has quit IRC19:54
*** DennyZhang has quit IRC19:55
dolphmprometheanfire: i'm actually not sure... the v2 tests can be backported to check19:56
ayoungbknudson, it seems backwards.  We should n't have to tell the token provider about the oauth extension....the way it is in my patch, it is disabled code.  That is wrong, too.  Ir should be a pipeline specified in paste, or something.  Thinking about building something like this out of tree.19:56
*** jvrbanac has joined #openstack-dev19:57
bknudsonthe OAuth stuff could insert itself into token when it gets loaded.19:57
*** romcheg has joined #openstack-dev19:57
*** romcheg has left #openstack-dev19:57
dolphmayoung: right, everything should be done in the pipeline, but oauth followed the lead of trusts, which also did this wrong19:57
*** pixelb has quit IRC19:57
prometheanfiredolphm: whatever the case, please comment in the bug so I know what to tell our security team19:57
dolphmprometheanfire: i'd like to test it myself before commenting further :)19:58
prometheanfiredolphm: thanks for looking into it :D19:58
*** zul has joined #openstack-dev19:59
*** neelashah has quit IRC19:59
dolphmprometheanfire: i'm surprised there's no discussion of folsom/grizzly in the bug19:59
prometheanfireya, kinda surprised me as well19:59
*** bswrchrd has quit IRC20:01
*** pcm__ has quit IRC20:01
*** neelashah has joined #openstack-dev20:02
*** jcoufal has quit IRC20:03
*** HenryG_ has quit IRC20:03
*** Max_ has joined #openstack-dev20:03
*** SumitNaiksatam has quit IRC20:03
*** jecarey has joined #openstack-dev20:04
*** ayoung has quit IRC20:05
*** epim has joined #openstack-dev20:05
*** Max__ has quit IRC20:06
*** afazekas_zz has quit IRC20:07
stevemarayoung: there is along an oauth_api dependency in auth/plugins, not sure if that matters20:10
sdaguehub_cap: hey, I have one question in the devstack review - https://review.openstack.org/#/c/38169/20:10
*** egallen has quit IRC20:11
*** jcoufal has joined #openstack-dev20:12
hub_capsdague: responded20:14
*** xmltok has quit IRC20:15
*** fbo is now known as fbo_away20:16
*** shinylasers has quit IRC20:17
sdaguehub_cap: ok, approved20:18
hub_cap<3<3<3<3<320:18
timelloheh20:18
sdagueyou should also realize that we aren't running exercises in gate runs at the moment, so you probably want to shore things up with a scenario test in tempest in the near future20:19
*** xmltok has joined #openstack-dev20:19
*** topol has quit IRC20:19
hub_capsdague: next on my list20:19
sdaguefor inspiration, this is what horizon did - https://github.com/openstack/tempest/blob/master/tempest/scenario/test_dashboard_basic_ops.py20:20
*** shinylasers has joined #openstack-dev20:20
hub_capthx20:20
sdaguehub_cap: cool20:20
*** sandywalsh has quit IRC20:20
*** jruzicka has quit IRC20:20
*** noslzzp has quit IRC20:21
*** maheshp has quit IRC20:21
*** Max_ has quit IRC20:24
*** Max_ has joined #openstack-dev20:25
*** dprince has quit IRC20:28
*** edmund1 has joined #openstack-dev20:29
*** edmund has quit IRC20:29
*** lnxnut_ has quit IRC20:30
*** networkstatic has quit IRC20:32
*** sheepdog80 has quit IRC20:37
*** shinylasers has quit IRC20:38
*** rizzpatel has joined #openstack-dev20:41
rizzpatelfHi20:41
rizzpatelAre there any mods/dev members here? Goit a question20:42
rizzpatelQuick one,v ery quick.20:42
*** shinylasers has joined #openstack-dev20:42
*** vipul-away is now known as vipul20:42
*** martines has joined #openstack-dev20:42
prometheanfirerizzpatel: don't ask to ask :p20:43
*** Ryan_Lane has joined #openstack-dev20:43
*** Ryan_Lane has quit IRC20:43
*** Ryan_Lane has joined #openstack-dev20:43
rizzpatelha ha20:44
rizzpatelSounds good, ring ring20:44
rizzpatelWell ok. Here it is20:44
rizzpatelI figured out a method to reverting back to previous snapshots in OpenStack20:44
rizzpatelI am going to make some mods to OpenStack so that it's part of the website and so we can do it all on the page20:45
rizzpatelBut, is there any reason that OpenStack would be against this?20:45
rizzpatelI don't want to post the mod and get banned or something for messing with their code. If that's the case I will keep it private20:45
*** networkstatic has joined #openstack-dev20:46
sdakerizzpatel only way to find out is submit a change : https://wiki.openstack.org/wiki/Gerrit_Workflow20:47
prometheanfireopenstack is apache licenced20:47
prometheanfireyou can change the code if you follow the licence, getting it upstreamed is another question :P20:47
rizzpatelAlright cool!20:48
rizzpatelI dont really care if it gets committed, but I mean at least the option will be out there for anyone to try20:48
rizzpatelGreat guys, sdake thanks for the link too, cheers20:48
rizzpatelIs nobody wondering HOW?!?!?!?20:48
rizzpatelLOL :-)20:48
*** rizzpatel has quit IRC20:49
prometheanfiretoo tired :P20:49
*** tmclaugh[work] has quit IRC20:50
*** maheshp has joined #openstack-dev20:52
*** radsy has joined #openstack-dev20:53
*** mlavalle_ has joined #openstack-dev20:55
*** mlavalle has quit IRC20:56
*** mlavalle_ is now known as mlavalle20:56
*** neelashah has quit IRC20:56
*** edmund1 has quit IRC20:58
*** radez is now known as radez_g0n320:58
*** alunduil has joined #openstack-dev21:01
*** davi67232 has joined #openstack-dev21:02
*** edmund has joined #openstack-dev21:03
*** rfolco has quit IRC21:04
*** neelashah has joined #openstack-dev21:05
*** bashok has quit IRC21:05
*** welldannit has joined #openstack-dev21:07
*** gyee has joined #openstack-dev21:08
*** dmakogon_ has joined #openstack-dev21:09
*** johnthetubaguy has joined #openstack-dev21:10
*** henrynash has quit IRC21:10
*** jayg is now known as jayg|g0n321:12
*** sheepdog80 has joined #openstack-dev21:13
*** gargya has joined #openstack-dev21:15
*** kenperkins has joined #openstack-dev21:17
*** davi67232 has quit IRC21:17
*** Max_ has quit IRC21:17
*** Max_ has joined #openstack-dev21:18
*** maheshp has quit IRC21:21
*** maheshp has joined #openstack-dev21:21
*** dkranz has quit IRC21:21
*** kenperkins has quit IRC21:22
*** spzala has quit IRC21:22
*** gargya has quit IRC21:24
*** vinayvenkat has joined #openstack-dev21:24
*** vinayvenkat has left #openstack-dev21:25
*** dubsquared has quit IRC21:26
*** senk has joined #openstack-dev21:26
*** egallen has joined #openstack-dev21:27
*** senk has quit IRC21:28
*** kbringard has quit IRC21:32
*** boden_ has quit IRC21:33
*** bswartz has quit IRC21:34
*** maheshp has quit IRC21:34
*** davi67232 has joined #openstack-dev21:35
*** donaldh has joined #openstack-dev21:36
*** pixelb has joined #openstack-dev21:37
*** johnthetubaguy has quit IRC21:37
*** asavu has quit IRC21:37
*** johnthetubaguy has joined #openstack-dev21:37
*** martyntaylor has quit IRC21:38
*** shang has quit IRC21:38
*** spzala has joined #openstack-dev21:41
*** Guest78534 has quit IRC21:42
*** markmcclain1 has quit IRC21:42
*** johnthetubaguy has quit IRC21:43
*** davi67232 has quit IRC21:44
*** FunnyLookinHat has quit IRC21:48
*** FunnyLookinHat has joined #openstack-dev21:48
*** eglynn has quit IRC21:49
*** Max_ has quit IRC21:49
*** d34dh0r53 has joined #openstack-dev21:49
*** Max_ has joined #openstack-dev21:49
prometheanfirehas anyone tested neutron 2013.1 (stable/grizzly branch) with pyparsing 2.0.1?21:49
prometheanfireand can anyone run tests, I don't have a system set up for it atm :(21:50
*** d34dh0r53 has quit IRC21:51
*** shinylasers has quit IRC21:52
*** henrynash has joined #openstack-dev21:52
*** shinylasers has joined #openstack-dev21:53
*** stevemar has quit IRC21:54
*** davi67232 has joined #openstack-dev21:56
*** dubsquared has joined #openstack-dev21:56
*** shanewang has quit IRC21:57
*** boris-42 has quit IRC21:57
*** changbl has quit IRC22:00
*** shanewang has joined #openstack-dev22:00
*** vuil has joined #openstack-dev22:02
*** spzala has quit IRC22:04
*** dubsquared has quit IRC22:04
dolphmprometheanfire: not finish but in case i have to run away before i'm done ... https://review.openstack.org/#/c/46371/22:05
*** vuil has quit IRC22:05
*** bill has joined #openstack-dev22:05
*** bill is now known as Guest4790422:05
dolphmprometheanfire: the fix is correct there, AFAIK, but the tests are broken due to some refactor between grizzly and master22:05
prometheanfireok, I'll probably pull that patch22:06
prometheanfiredolphm: thanks :D22:06
*** alunduil has quit IRC22:06
dolphmprometheanfire: tests are failing though, so don't pull them!22:06
*** neelashah has quit IRC22:07
*** alunduil has joined #openstack-dev22:07
prometheanfireoh, BOO22:08
*** armax has quit IRC22:09
*** kbrierly has quit IRC22:10
*** Guest47904 has quit IRC22:10
*** BStokes has joined #openstack-dev22:10
prometheanfiredolphm: well, let me know what to do :P22:12
*** mkollaro has joined #openstack-dev22:12
dolphmprometheanfire: i'm trying to figure out a solution22:12
prometheanfiredolphm: I was told that this bug did not effect folsom22:12
insanida1eanyone using eclipse for debugging ? I need a quick help on this.22:12
prometheanfire14:46 <          ayoung > prometheanfire, doesn't affect folsom22:12
prometheanfiredolphm: ij LD22:13
prometheanfireok :D22:13
*** lifeless_ has joined #openstack-dev22:13
dolphmprometheanfire: i haven't tested folsom yet22:13
dolphmprometheanfire: but i don't see why it *wouldn't* affect folsom22:13
*** jbresnah has joined #openstack-dev22:14
prometheanfireok, fair enough22:14
prometheanfireok, time to go home22:14
dolphmprometheanfire: o/22:14
*** lifeless has quit IRC22:15
*** jvrbanac has quit IRC22:15
*** amohn9 has quit IRC22:17
*** carl_baldwin has joined #openstack-dev22:17
*** lifeless_ is now known as lifeless22:18
*** networkstatic has quit IRC22:19
*** jbresnah has quit IRC22:20
bknudsondolphm: I've got some more cleanup for https://review.openstack.org/#/c/45937/22:20
*** jbresnah has joined #openstack-dev22:21
bknudsonwhat's better, upload new review or update the existing review? (or I could make a comment and you can do it...)22:21
bknudsonit just fixes the SQLAlchemy-migrate reference22:22
dolphmbknudson: up to you? i'm fine if you revise my review22:22
*** insanida1e has quit IRC22:22
*** insanidade has joined #openstack-dev22:22
*** pixelb has quit IRC22:23
*** jcoufal has quit IRC22:24
bknudsondolphm: updated. https://review.openstack.org/#/c/45937/ now I don't know if I can +2 it.22:24
dolphmbknudson: was it a significant change?22:24
bknudsondolphm: I don't think so. It's documentation to begin with.22:25
dolphmbknudson: did you mean to include the " to migrate" again?22:25
bknudsondolphm: no, I didn't. I didn't realize that was on the same line. I'll fix it.22:26
bknudsondolphm: ok, I tried it locally and the link works.22:27
*** flaper87 is now known as flaper87|afk22:28
*** atiwari has quit IRC22:29
*** jvrbanac has joined #openstack-dev22:29
*** zoresvit has joined #openstack-dev22:29
*** markmcclain has joined #openstack-dev22:30
zoresvitHello. Could anyone give a hint on how to set up GitHub to reject direct pushes and show message to use gerrit (like it's done in OpenStack). I need to set up similar thing for GitHub Enterprise.22:30
dolphmbknudson: so, this is where etiquette kicks in, IMO. I +1'd to ack your change, but you didn't change much, so i don't think anyone would take issue if you +2'd22:31
dolphmbknudson: it still needs a second +222:31
dolphmzoresvit: ask in #openstack-infra22:32
*** stevemar has joined #openstack-dev22:32
dolphmzoresvit: i would guess it's just a pull request hook + making a comment through the api22:33
*** dmakogon_ has quit IRC22:34
*** bdpayne has quit IRC22:36
*** jhesketh has joined #openstack-dev22:37
*** FunnyLookinHat has quit IRC22:38
*** thedodd has quit IRC22:38
*** mrodden1 has quit IRC22:39
zoresvitdolphm: You've made a discover for me (Repo Hooks API) :) I'm not a Jedi user of GitHub yet. Thanks a lot!22:39
zoresvitdlp22:40
dolphmzoresvit: they are quite useful :) but there's way more jedi to be found in -infra :P22:40
zoresvitdolphm: The API should be available in GitHub Enterprise as well, do you know?22:40
*** lbragstad has quit IRC22:41
*** davi67232 has quit IRC22:41
dolphmzoresvit: i don't know personally :/22:41
*** galstrom is now known as galstrom_zzz22:41
zoresvitdolphm: Thanks anyway! Will ping -infra for details as well.22:42
*** jhesketh__ has joined #openstack-dev22:42
*** egallen has quit IRC22:43
*** otherwiseguy has quit IRC22:46
*** armax has joined #openstack-dev22:48
*** adjohn has quit IRC22:48
*** stevemar has quit IRC22:49
dolphmzoresvit: anytime22:49
*** Max_ has quit IRC22:51
*** davi67232 has joined #openstack-dev22:54
*** bdpayne has joined #openstack-dev22:55
*** zoresvit has quit IRC22:55
*** wolfdreamer has quit IRC22:56
*** zoresvit has joined #openstack-dev22:56
*** eharney has quit IRC22:56
*** jbresnah_ has joined #openstack-dev22:56
*** jbresnah has quit IRC22:57
*** mrodden has joined #openstack-dev23:00
*** asavu has joined #openstack-dev23:01
*** wolfdreamer has joined #openstack-dev23:01
*** shang has joined #openstack-dev23:02
*** davi67232 has quit IRC23:02
*** locke105 has joined #openstack-dev23:03
*** networkstatic has joined #openstack-dev23:05
*** ayoung has joined #openstack-dev23:06
*** armax has quit IRC23:07
insanidadeany hints on how I could start neutron on eclipse ? I can start and debug horizon but not neutron.23:10
*** adalbas has quit IRC23:11
*** zaneb has joined #openstack-dev23:12
*** zbitter has quit IRC23:14
*** e1mer has joined #openstack-dev23:17
morganfainbergdolphm, https://review.openstack.org/#/c/46207/ looks like it's going to pass, i'm going to run a couple contrived tests locally to verify the upgrade/downgrade23:17
*** rcrit has quit IRC23:17
dolphmmorganfainberg: looking23:18
*** rnirmal has quit IRC23:18
dolphmmorganfainberg: doing this as one patch makes it difficult to backport23:18
*** mlavalle has quit IRC23:19
morganfainbergdolphm, you can't really backport this mechanism. you need to write a custom set of code that does the translation inline23:19
morganfainbergdolphm, i was going to do that next for grizzly23:19
dolphmhrm, alright23:19
morganfainbergdolphm, but the code really wont look anything the same.23:19
morganfainbergdolphm, since we can't change the schema =/23:20
morganfainbergdolphm, do i need to worry about folsom? or just grizzly?23:20
*** mrodden has quit IRC23:20
*** mrodden has joined #openstack-dev23:20
*** donaldh has quit IRC23:21
morganfainbergdolphm, if tyou want 2 patches, one that does it inline, then this as a second restructure for backporting, i can split it out23:21
*** mrodden has quit IRC23:21
morganfainbergdolphm, erm 2nd restructure for the DB work. i could do that as well.23:21
*** herndon has quit IRC23:22
*** otherwiseguy has joined #openstack-dev23:24
*** Mandell has quit IRC23:24
dolphmmorganfainberg: v3 didn't exist in folsom23:25
morganfainbergdolphm, ah, makes that easy then.23:25
dolphmmorganfainberg: what was the motivation behind get_project_users -> user_ids?23:26
*** jbresnah_ has quit IRC23:26
morganfainbergdolphm, so i could support the translation of the default_project_id at the controller/manager level.  There was a todo to move it ot the controller, was as easy to move it there as to the manager and cuts down on assignment talking directly to identity23:27
morganfainbergdolphm, but we still needed a way to know what user_ids were part of a project23:27
morganfainbergerm, had a role within that project? (more accurate description)23:27
henrynashdolphm, morganfainberg: not urgent, but when you have a moment, new version of https://review.openstack.org/#/c/45584/ posted23:28
dolphmhenrynash: sorry, i'm about to run :( will check in tomorrow23:28
morganfainberghenrynash, i'll look at it today :)23:29
*** networkstatic has quit IRC23:29
dolphmmorganfainberg: the only thing i don't like in your change is how you handled the version23:29
henrynashdolphm: np, that;s why I said not urgent (but morganfainberg get's beer from me :-) )23:29
dolphm:P23:29
morganfainbergdolphm, yeah, that felt a little kludgy.23:30
*** pmathews has quit IRC23:30
*** e1mer has quit IRC23:30
dolphmmorganfainberg: it shouldn't be an arg in the v3 controller methods, _normalize_default_project_id() should just be implemented in both the v2 and v3 base controllers differently23:30
*** rcrit has joined #openstack-dev23:30
dolphmmorganfainberg: and it looked like the manager was aware of versions too?23:30
morganfainbergdolphm yeah i pushed it down to the manager, but i'll move it up to the controller(s)23:31
morganfainbergwell i'll try to23:31
morganfainbergthe reason for the manager to be aware is because the manager constructed lists/user stuff behind the scenes23:31
dolphmmorganfainberg: i think the v3 controller should have to do very little work (if any), but the v2 controllers should have to do some translation23:31
morganfainbergthe only time this is an issue is if user is embeded in another object23:32
*** bswartz has joined #openstack-dev23:32
morganfainbergbut i guess it only matters at the presentation layer23:32
morganfainbergi think i ran into a case where somethine called the identity_api, and built a user ref into something else than went out via a defferent interface in the controller23:33
*** alop has quit IRC23:33
*** e1mer has joined #openstack-dev23:33
morganfainbergvs. the User controller.  i'll see if i can make the controller the only thing aware. :)  fair point23:34
prometheanfirepep8 :D23:35
*** dolphm has quit IRC23:36
*** colinmcnamara has joined #openstack-dev23:36
*** wolfdreamer has quit IRC23:36
*** READ10 has quit IRC23:37
*** edmund has quit IRC23:38
*** mrodden has joined #openstack-dev23:38
*** asavu has quit IRC23:40
*** jdennis1 has quit IRC23:40
*** networkstatic has joined #openstack-dev23:43
*** spzala has joined #openstack-dev23:46
*** larsks has quit IRC23:47
*** danwent has quit IRC23:48
*** wolfdreamer has joined #openstack-dev23:50
*** carl_baldwin has quit IRC23:51
*** dims has quit IRC23:52
*** henrynash has quit IRC23:53
*** stevemar has joined #openstack-dev23:53
*** jdennis has joined #openstack-dev23:55
*** matiu has quit IRC23:56
*** Ryan_Lane has quit IRC23:56
*** networkstatic has quit IRC23:56
*** xarses has quit IRC23:57
*** mkollaro has quit IRC23:58
*** shang has quit IRC23:58

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!