| jamielennox | also i don't think we want to use POST for creating a group - that should stay as a PUT | 00:00 |
|---|---|---|
| *** rfolco_ has quit IRC | 00:00 | |
| jamielennox | at least partially because we already use POST /group to retrieve a group key | 00:01 |
| nkinder | jamielennox: Yeah, I meant the PUT request for group creation. | 00:01 |
| jamielennox | damn, although i can see the argument that maybe the correct format is POST /group/name which would give us the POST /group/name/generation for retrieving a gen | 00:02 |
| nkinder | POST is used for getting tickets or group keys only | 00:02 |
| nkinder | Also, should 'PUT /v1/keys/{name}' return 201? | 00:02 |
| jamielennox | nkinder: no it won't work | 00:02 |
| *** rongze has quit IRC | 00:02 | |
| jamielennox | it's better in a restful theory kind of way - but all of this information has to be within the signed body of the request - if it's in the URI i have to ignore it anyway | 00:03 |
| *** xarses has quit IRC | 00:03 | |
| jamielennox | nkinder: sure | 00:03 |
| jamielennox | nkinder: should keys in that URI be hosts? PUT /v1/host/{name} ? | 00:03 |
| *** rcleere has quit IRC | 00:03 | |
| nkinder | jamielennox: yes | 00:04 |
| *** rnirmal has joined #openstack-dev | 00:04 | |
| *** xarses has joined #openstack-dev | 00:04 | |
| nkinder | jamielennox: sorry, i meant {name} refers to a host/service | 00:04 |
| *** jmontemayor has quit IRC | 00:04 | |
| nkinder | jamielennox: but PUT /v1/host/{name} does make sense | 00:05 |
| *** nelsnelson is now known as nelsnelson_away | 00:05 | |
| jamielennox | yea, the use of the 'key' resource makes sense for hosts because you are setting a key, not creating a host - but particularly when compared to the /group semantics /host looks better | 00:05 |
| nkinder | jamielennox: that creates a host, or updates it's key. | 00:05 |
| jamielennox | nkinder: yep, i'm ok with that | 00:05 |
| *** lbragstad1 has quit IRC | 00:06 | |
| *** noslzzp has quit IRC | 00:06 | |
| *** rfolco_ has joined #openstack-dev | 00:06 | |
| nkinder | jamielennox: we don't need to use a POST to create a host and PUT to update it's key? We can use PUT for both? | 00:06 |
| jamielennox | nkinder: we only need to create a group because the KDS is generating keys for us, i think it's ok that setting a key is the same as creating a host | 00:07 |
| jamielennox | because a host without a key doesn't make sense | 00:07 |
| *** lbragstad has joined #openstack-dev | 00:07 | |
| *** alexpilotti has joined #openstack-dev | 00:07 | |
| *** morazi has quit IRC | 00:07 | |
| nkinder | jamielennox: ok, makes sense to me. It's more simple too. | 00:07 |
| nkinder | otherwise PUT would have to fail if the host wasn't already defined, etc. | 00:08 |
| *** dubsquared has quit IRC | 00:08 | |
| nkinder | too much hassle for no benefit | 00:08 |
| *** herndon_ has quit IRC | 00:08 | |
| *** buzztroll has quit IRC | 00:08 | |
| *** thomasem has joined #openstack-dev | 00:08 | |
| *** loq_mac has quit IRC | 00:08 | |
| jamielennox | POST is supposed to assume that the server generates the ID for us as well, given that we are using name as ID that doesn't really work | 00:08 |
| nkinder | true | 00:09 |
| *** nelsnelson_away has quit IRC | 00:09 | |
| *** sarob has quit IRC | 00:11 | |
| *** nelsnelson has joined #openstack-dev | 00:11 | |
| *** sarob has joined #openstack-dev | 00:11 | |
| *** rfolco_ has quit IRC | 00:12 | |
| *** AZBob has quit IRC | 00:12 | |
| nkinder | jamielennox: I'm not so sure we should use /v1/host | 00:12 |
| nkinder | jamielennox: you might have multiple services on a single host, right? | 00:12 |
| nkinder | jamielennox: using /v1/keys keeps things generic, as a key could be assigned to anything (an application, a service, a person, etc.) | 00:13 |
| *** rfolco_ has joined #openstack-dev | 00:13 | |
| jamielennox | nkinder: mmm, i've no idea - but yea that makes sense | 00:14 |
| *** nelsnelson has quit IRC | 00:14 | |
| nkinder | jamielennox: I'll leave it as keys. It's less tied to the secure messaging case that way. | 00:14 |
| jamielennox | nkinder: i don't know enough about how messaging works because you subscribe to a bus, though i'm using host i don't know if that ties to an actual hostname | 00:15 |
| nkinder | jamielennox: and group creation will return 201, but the rest will stay as 200 | 00:15 |
| nkinder | jamielennox: yes, but the point is KDS might be useful for something other than messaging | 00:15 |
| *** rnirmal has quit IRC | 00:15 | |
| jamielennox | currently if you create a group that already exists it just passes it through | 00:15 |
| *** thomasem has quit IRC | 00:15 | |
| jamielennox | do you think that should be a conflict? or at least a 200 OK rather than 201 Created? | 00:16 |
| *** sarob has quit IRC | 00:16 | |
| jamielennox | same thing with deleting a group that doesn't exist - though i guess that should be a 404 | 00:16 |
| *** lbragstad has quit IRC | 00:16 | |
| *** lbragstad has joined #openstack-dev | 00:18 | |
| *** pete5 has quit IRC | 00:18 | |
| *** mriedem has joined #openstack-dev | 00:18 | |
| *** dstufft has quit IRC | 00:18 | |
| *** mlavalle has quit IRC | 00:19 | |
| *** rfolco_ has quit IRC | 00:20 | |
| *** CaptTofu has joined #openstack-dev | 00:20 | |
| nkinder | jamielennox: delete of a non-existent group should return 404 | 00:20 |
| *** dstufft has joined #openstack-dev | 00:21 | |
| *** matsuhashi has joined #openstack-dev | 00:21 | |
| *** mfer has joined #openstack-dev | 00:24 | |
| nkinder | jamielennox: if you try to create a group that already exists, what about 409 Conflict? | 00:24 |
| jamielennox | nkinder: i wasn't sure - it's not really a problem because the group create doesn't do anything really | 00:25 |
| nkinder | jamielennox: so maybe we just allow it | 00:25 |
| jamielennox | nkinder: but i guess it's a better way of showing that it already exists | 00:25 |
| *** shinylasers has joined #openstack-dev | 00:25 | |
| jamielennox | nkinder: that's why i had it as always a 200, but i guess it is better to say 409, the user just has to know that that doesn't mean a problem | 00:26 |
| *** epim has quit IRC | 00:26 | |
| *** jp_at_hp has quit IRC | 00:26 | |
| *** SumitNaiksatam has joined #openstack-dev | 00:27 | |
| *** lbragstad has quit IRC | 00:27 | |
| nkinder | jamielennox: what about getting a group? I guess there's no purpose since members are defined by the group name itself. | 00:27 |
| *** lbragstad has joined #openstack-dev | 00:27 | |
| nkinder | jamielennox: the thing with 201 and 409 is that you usually return a link to the created resource (or the conflict) in the Location header AFAIK. | 00:28 |
| jamielennox | nkinder: i see later on that there might be group membership controls in KDS | 00:28 |
| *** alexpilotti has quit IRC | 00:28 | |
| *** gordc has joined #openstack-dev | 00:29 | |
| jamielennox | so enrol a host and all that sort of thing - i've tried not to block the routes for that sort of thing but haven't done anything about it | 00:29 |
| *** tris has joined #openstack-dev | 00:29 | |
| jamielennox | nkinder: let's just go 409, i think that's what keystone does in this situation | 00:29 |
| nkinder | jamielennox: it seems a bit odd to require the member name to start with the group name | 00:29 |
| jamielennox | nkinder: yea - i think that should be an impl detail and not in the API | 00:29 |
| nkinder | jamielennox: ok, but we have no URL to use in the location header to get the group right now. | 00:29 |
| nkinder | If we want to add the ability to manage group membership, we'll need to be able to GET a group to see the members anyway. | 00:30 |
| *** Farooque has joined #openstack-dev | 00:30 | |
| *** andreaf has quit IRC | 00:30 | |
| nkinder | We can deal with that later. We'll just use 201 and 409 for now and leave the Location header empty | 00:30 |
| *** andreaf has joined #openstack-dev | 00:31 | |
| jamielennox | nkinder: right so /group/{group_name} is the obvious place but let's leave that out | 00:31 |
| *** rfolco_ has joined #openstack-dev | 00:31 | |
| *** buzztroll has joined #openstack-dev | 00:31 | |
| jamielennox | i don't even know what i could put into a GET /group/{name} route anyway | 00:31 |
| *** pmathews has quit IRC | 00:32 | |
| *** martyntaylor has quit IRC | 00:32 | |
| jamielennox | other than a check if it exists | 00:32 |
| nkinder | jamielennox: nothing until we can add members | 00:32 |
| nkinder | jamielennox: I need to step away for a while. If you figure anything out on the base64 side of things, send me an e-mail. | 00:34 |
| *** kbrierly has quit IRC | 00:34 | |
| jamielennox | nkinder: let's put it in as a straight json encoded string for now i guess - i can't think of anything it can hurt | 00:35 |
| *** Farooque has left #openstack-dev | 00:35 | |
| *** mohits has joined #openstack-dev | 00:35 | |
| nkinder | jamielennox: you mean just take out the base64? | 00:36 |
| *** buzztroll has quit IRC | 00:37 | |
| *** lbragstad1 has joined #openstack-dev | 00:37 | |
| nkinder | jamielennox: like this? http://ur1.ca/g59we | 00:37 |
| *** mfer has quit IRC | 00:38 | |
| *** fifieldt_ has joined #openstack-dev | 00:38 | |
| *** gordc has quit IRC | 00:38 | |
| *** mfer has joined #openstack-dev | 00:38 | |
| *** mfer has quit IRC | 00:39 | |
| *** lbragstad has quit IRC | 00:39 | |
| *** alop has quit IRC | 00:39 | |
| *** reed has quit IRC | 00:43 | |
| *** dims has joined #openstack-dev | 00:44 | |
| *** dripton has quit IRC | 00:44 | |
| *** dims has quit IRC | 00:45 | |
| *** reed has joined #openstack-dev | 00:45 | |
| *** reed has quit IRC | 00:45 | |
| *** reed has joined #openstack-dev | 00:45 | |
| jamielennox | nkinder: it will still need to be a JSON encoded string within the JSON document | 00:46 |
| *** danielbruno has quit IRC | 00:47 | |
| *** dripton has joined #openstack-dev | 00:47 | |
| *** lbragstad has joined #openstack-dev | 00:49 | |
| *** lbragstad1 has quit IRC | 00:49 | |
| nkinder | jamielennox: ok, got it. Just need to think of the best way to show that in the API doc. | 00:50 |
| *** angdraug has quit IRC | 00:50 | |
| jamielennox | nkinder: no idea how to make that obvious :) | 00:50 |
| *** shinylasers has quit IRC | 00:51 | |
| nkinder | jamielennox: I guess it's taking the metadata JSON, putting it all on one line, escaping the quotes, and adding quotes around it. | 00:51 |
| nkinder | jamielennox: sounds ugly :) | 00:51 |
| jamielennox | nkinder: what i tested out in python didn't seem to escape quotes | 00:52 |
| jamielennox | nkinder: oh, my bad | 00:52 |
| jamielennox | In [2]: json.dumps({'metadata': json.dumps({'a': 1, 'b': 2}), 'signature': 'xxxxx'}) | 00:52 |
| jamielennox | Out[2]: '{"signature": "xxxxx", "metadata": "{\\"a\\": 1, \\"b\\": 2}"}' | 00:52 |
| nkinder | jamielennox: yeah. I'll describe the metadata separate from the request in JSON I think, then show the request with an encoded string. | 00:53 |
| *** jgrimm has quit IRC | 00:55 | |
| *** lbragstad1 has joined #openstack-dev | 00:58 | |
| *** lbragstad has quit IRC | 00:59 | |
| *** shinylasers has joined #openstack-dev | 00:59 | |
| *** colinmcnamara has quit IRC | 01:00 | |
| *** colinmcn_ has quit IRC | 01:00 | |
| morganfainberg | evenin. | 01:02 |
| morganfainberg | dstanek, i expect to post another KVS changeset up tomorrow. i'm going to split out the memcache_crypto part into it's own patchset so we can get more security focus looking at that specifically...it should also make reading the real patchset easier. | 01:03 |
| *** markwash has quit IRC | 01:03 | |
| *** faramir1 has quit IRC | 01:03 | |
| *** faramir1 has joined #openstack-dev | 01:05 | |
| dstanek | morganfainberg: cool, looking forward to it | 01:05 |
| bknudson | is KVS like KDS? | 01:05 |
| morganfainberg | bknudson, key-value-store refactor | 01:05 |
| *** stevemar has quit IRC | 01:05 | |
| bknudson | this is going to get confusing | 01:05 |
| morganfainberg | bknudson, the 1200-some-line patchset i have up that is super dense initial implementation | 01:05 |
| morganfainberg | bknudson, talked with ayoung, we agreed, not calling it KVS is a good plan, KeyValueStore is the "right" name | 01:06 |
| morganfainberg | so, i'll start referencing it as such :) | 01:06 |
| morganfainberg | bknudson, but yes. it could get confusing. | 01:07 |
| *** Abhishe__ has quit IRC | 01:07 | |
| *** tmclaugh[work] has joined #openstack-dev | 01:08 | |
| *** willingc has joined #openstack-dev | 01:09 | |
| *** pablosan has quit IRC | 01:09 | |
| *** lbragstad1 has quit IRC | 01:10 | |
| *** lbragstad has joined #openstack-dev | 01:11 | |
| *** kbrierly has joined #openstack-dev | 01:12 | |
| *** pablosan has joined #openstack-dev | 01:13 | |
| *** singhs has quit IRC | 01:13 | |
| *** singhs has joined #openstack-dev | 01:13 | |
| *** pablosan has quit IRC | 01:14 | |
| *** hemna is now known as hemnafk | 01:18 | |
| *** singhs has quit IRC | 01:18 | |
| *** krotscheck has quit IRC | 01:21 | |
| *** lbragstad1 has joined #openstack-dev | 01:21 | |
| *** lbragstad has quit IRC | 01:21 | |
| *** flaper87 is now known as flaper87|afk | 01:22 | |
| jamielennox | morganfainberg: it's not too bad until we back the KDS onto the KVS | 01:23 |
| morganfainberg | jamielennox, can we then use the KDS to store the KVS keys for the KDS backed by KVS using the KVS encrypt semantics? | 01:24 |
| *** sballe has quit IRC | 01:24 | |
| jamielennox | morganfainberg: i've read it 3 times now - and i still can't tell if it's a real sentence | 01:24 |
| *** twoputt__ has quit IRC | 01:24 | |
| *** twoputt_ has quit IRC | 01:24 | |
| jamielennox | i'll go with no | 01:25 |
| morganfainberg | jamielennox, oh it's real! *challenge accepted* | 01:25 |
| *** mfer has joined #openstack-dev | 01:26 | |
| morganfainberg | jamielennox, interesting thought though, using a stable key-value-store for KDS backing instead of say SQL | 01:26 |
| morganfainberg | jamielennox, (e.g. Redis?) | 01:27 |
| morganfainberg | jamielennox, not sure if that would be too much of a hinderance, losing the relational overhead | 01:27 |
| jamielennox | morganfainberg: i wrote a KVS (the style we used for testing with to a dictionary) pretty simply | 01:27 |
| morganfainberg | jamielennox, i'll be replacing it w/ dogpile backed eventually this cycle then. | 01:27 |
| *** prad has quit IRC | 01:28 | |
| nkinder | jamielennox: should the ticket be an encoded JSON string too? Might as well be consistent, right? | 01:28 |
| jamielennox | it's a really simple 1:M, name -> keys | 01:28 |
| morganfainberg | jamielennox, provided i get this refactor in | 01:28 |
| morganfainberg | jamielennox, oh, nice. that really is easy, SQL relational is a bit over the top for something like that | 01:28 |
| *** rongze has joined #openstack-dev | 01:28 | |
| nkinder | jamielennox: esek too for that matter (before it's encrypted) | 01:29 |
| morganfainberg | jamielennox, when you have the code mostly stable, let me know (unless you want to take a crack at it) so I can layer the caching over the top of it (memoization) | 01:29 |
| *** amcrn has quit IRC | 01:29 | |
| jamielennox | nkinder: .... i dont know something feels wrong about it | 01:29 |
| jamielennox | but i can't say what | 01:29 |
| nkinder | jamielennox: I know... | 01:29 |
| * morganfainberg makes mental note to build a HMAC/encryption capable backend for dogpile and submit it upstream | 01:29 | |
| nkinder | jamielennox: I can leave those as is and we can argue it :) | 01:30 |
| morganfainberg | nkinder, huh, so encrypted envelop of json? | 01:30 |
| jamielennox | morganfainberg: it would be really interesting to see if KDS could be used to encrypt to backend storages | 01:30 |
| morganfainberg | jamielennox, if you look at my Key-value-store refactor, it could be. | 01:30 |
| jamielennox | morganfainberg: i'll fill you in as you might have a good opinino on it | 01:30 |
| *** rfolco_ has quit IRC | 01:31 | |
| nkinder | morganfainberg: we have a few JSON objects/maps in KDS that are base64 encoded to ensure ordering | 01:31 |
| morganfainberg | jamielennox, the memcache_crypt stuff in auth_token is fully supported at the top-layer of the KVS | 01:31 |
| morganfainberg | nkinder, Ah, that makes sense. | 01:31 |
| *** lbragstad1 has quit IRC | 01:31 | |
| jamielennox | the problem is that we take a signature over a payload, but we can't guarantee that the json->dict will be stable - which would affect the sig | 01:31 |
| nkinder | morganfainberg: talking about changing those to JSON encoded strings containing the maps | 01:31 |
| *** matsuhashi has quit IRC | 01:31 | |
| jamielennox | nkinder is way better at this stuff than me | 01:31 |
| morganfainberg | nkinder, that actually makes sense. | 01:31 |
| morganfainberg | jamielennox, we're lucky nkinder is working on this stuff then! cause... it's not like you're bad at it. | 01:32 |
| nkinder | jamielennox: I'm new to JSON... Still swimming a bit ;) | 01:32 |
| morganfainberg | nkinder, phsaw, json is easy. until you layer in schemas. | 01:32 |
| morganfainberg | nkinder, then its... still easier than XML | 01:32 |
| jamielennox | nkinder: ha, JSON will be fine | 01:32 |
| *** lbragstad has joined #openstack-dev | 01:32 | |
| *** rongze has quit IRC | 01:33 | |
| *** matsuhas_ has joined #openstack-dev | 01:33 | |
| morganfainberg | jamielennox, so yes, we could use KDS to encrypt backends easily... as long as the KDS store is stable. We might need a mechanism to support key-rotation though ... now that i think about it. | 01:33 |
| jamielennox | nkinder: can we leave the whole thing as base64 until we've at least had a chance to ask simo about it | 01:33 |
| jamielennox | nkinder: i know he'll say it's a bad idea - but i'd be interested to know if he has a real reason for it | 01:34 |
| jamielennox | morganfainberg: KDS gives source -> target encryption, not retrievable keys | 01:34 |
| nkinder | jamielennox: sure, I expect that to be his answer too :) | 01:34 |
| jamielennox | morganfainberg: at least not yet | 01:35 |
| nkinder | jamielennox, morganfainberg: I have this right now in my working copy - http://ur1.ca/g5a4p | 01:35 |
| *** tanisdl has quit IRC | 01:35 | |
| morganfainberg | jamielennox, oh wait what i'm looking for is more barbican's domain | 01:35 |
| morganfainberg | *facepalm* | 01:35 |
| jamielennox | morganfainberg: yea, barbican will give you that - they call it orders, and i've no idea why | 01:36 |
| morganfainberg | jamielennox, in theory you could make encryption a callback instead _i_ guess so kds could do the lifting, but i'm not sure if that is the right approach | 01:36 |
| *** nosnos has joined #openstack-dev | 01:36 | |
| morganfainberg | s/you/I | 01:36 |
| *** xarses has quit IRC | 01:37 | |
| simo | jamielennox: whatsup ? | 01:37 |
| jamielennox | simo: ok, so we are discussing the base64 encoding of the metadata and the ticket | 01:38 |
| simo | I did reply on the review :) | 01:38 |
| jamielennox | bknudson has suggested it should just be a json encoded string | 01:38 |
| jamielennox | simo: oh, haven't seen that yet | 01:38 |
| *** prad_ has joined #openstack-dev | 01:38 | |
| simo | no it contains a dict | 01:38 |
| nkinder | simo, jamielennox: My babysitter just showed up and it's date night with my wife, so I'll let you two hash it out. | 01:39 |
| simo | also different json libraries can produce slightly different results | 01:39 |
| jamielennox | simo: yea, JSON the dict into a string, then put the string into the response | 01:39 |
| simo | and you absolutely want to verify signatures before any code touches the packet | 01:39 |
| nkinder | simo: see these links for the proposal - http://ur1.ca/g5a4p http://ur1.ca/g5a5e | 01:39 |
| jamielennox | nkinder: yea, i'd pick that option too | 01:39 |
| *** dims has joined #openstack-dev | 01:39 | |
| simo | so by using base64 you force the right order of operations too | 01:39 |
| simo | I am against | 01:40 |
| *** bingbu has joined #openstack-dev | 01:40 | |
| morganfainberg | bknudson, does internal_api deprecation warrant a docimpact? | 01:40 |
| jamielennox | simo: so long as the signature is done before decoding the string it shouldn't matter - it's not pretty, but it hasn't ever been pretty | 01:40 |
| nkinder | yeah, technically it's fine I think, but it's ugly | 01:40 |
| simo | jamielennox: code will end up accessing that data before it is checked | 01:40 |
| morganfainberg | bknudson, realized i forgot to put that on the token_list review. before i resubmitted, was curious if it really was warranted | 01:40 |
| simo | it will just happen | 01:40 |
| jamielennox | simo: you would still need to json.loads() it, you could say the same about that as before but just json.loads(base64.b64decode(...)) | 01:41 |
| *** lbragstad has quit IRC | 01:41 | |
| *** herndon_ has joined #openstack-dev | 01:41 | |
| morganfainberg | dstanek, ^ question i proposed to bknudson | 01:42 |
| *** nkinder is now known as nkinder|away | 01:42 | |
| simo | jamielennox: you can swear it will not happen, then joe-brogrammer will come along, will se the data is just a json string and wiull json.load() on his own in some pipeline | 01:42 |
| jamielennox | simo: i don't really have a strong opinion here, i'm used to the base64 at this point | 01:42 |
| *** lbragstad has joined #openstack-dev | 01:43 | |
| morganfainberg | simo, i think that is the first legitimate use of 'brogrammer' i've seen. | 01:43 |
| simo | morganfainberg: :) | 01:43 |
| jamielennox | simo: right, but joe-brogrammer is probably going to ignore the signature as well | 01:43 |
| jamielennox | simo: we can't protect people from misusing apis | 01:44 |
| simo | jamielennox: perhaps | 01:44 |
| simo | jamielennox: but you can discourage bad behavior | 01:44 |
| simo | jamielennox: the thing is also that IIRC the code automatically parses json strings | 01:45 |
| jamielennox | simo: so for metadata i am fine either way - but the same argument holds for returning the ticket | 01:45 |
| *** prad_ has quit IRC | 01:45 | |
| simo | or at least I encountered something like that at some point | 01:45 |
| jamielennox | simo: i tried it earlier in python, json escapes quotes so it shouldn't | 01:45 |
| simo | not entirely sure the code in the final state suffered from it though | 01:45 |
| jamielennox | In [2]: json.dumps({'metadata': json.dumps({'a': 1, 'b': 2}), 'signature': 'xxxxx'}) | 01:45 |
| jamielennox | Out[2]: '{"signature": "xxxxx", "metadata": "{\\"a\\": 1, \\"b\\": 2}"}' | 01:45 |
| morganfainberg | oh oh i know and base64 encode it then ROT13 it! that way someone would need to ... do something extra to ignore the signature and not use our api /s | 01:46 |
| morganfainberg | sorry, i'm feeling a little snarky today | 01:46 |
| jamielennox | morganfainberg: lol | 01:46 |
| simo | morganfainberg: if you feel strongly about not doing base64, then go ahead | 01:46 |
| morganfainberg | simo, i don't | 01:46 |
| morganfainberg | simo, i was commenting on the discouraging mis-use and skipping the signature part | 01:47 |
| *** gmurphy has left #openstack-dev | 01:47 | |
| simo | it certainly has no security property per se | 01:47 |
| jamielennox | simo: it was bknudson initially and i'm not sure how strong the opinions were | 01:47 |
| simo | it was exclusively defensive coding on my part | 01:47 |
| morganfainberg | simo, i think either b64 or json opens different avenues. b ut likely, if the API si just easier to use, joe-brogrammer will use that (I hope) | 01:47 |
| simo | morganfainberg: I've seen things ... :) | 01:48 |
| jamielennox | morganfainberg: joe-brogrammer can use python-kdsclient | 01:48 |
| *** buzztroll has joined #openstack-dev | 01:48 | |
| jamielennox | ... god, i'm going to have to write that | 01:48 |
| morganfainberg | jamielennox, now you're asking too much | 01:48 |
| simo | jamielennox: joe-brogrammer should never use the KDS tbh | 01:48 |
| simo | he should not need to | 01:48 |
| morganfainberg | simo, ++ | 01:48 |
| simo | it is all deep infrastructure code well beneath the API level a novice should even think of touching | 01:49 |
| morganfainberg | simo, he is above it... i mean, it adds a dependancy that he doesn't actually need. | 01:49 |
| jamielennox | simo: ok, so there is nothing i missed that required base64-ing whether we do JSON or base64 is just style | 01:49 |
| morganfainberg | actually, after seeing the example ^ of json w/ json, i don't like it as much | 01:50 |
| *** willingc has quit IRC | 01:50 | |
| simo | jamielennox: so bottom line, I have a preference for leaving base64 there, but I can't say no to json strings as long as it all works | 01:50 |
| morganfainberg | jamielennox, i think it would be more clear w/ b64 | 01:50 |
| morganfainberg | that it's separate data that is | 01:50 |
| nkinder|away | morganfainberg: ++ | 01:50 |
| *** mikeoutland has quit IRC | 01:50 | |
| jamielennox | nkinder|away: go on your date | 01:50 |
| morganfainberg | jamielennox, ++ | 01:50 |
| jamielennox | ok, i agree - stick with the bas64 | 01:51 |
| simo | morganfainberg: yes, that was another consideration, as I said: defensive programming trained compelled me to do base64 | 01:51 |
| simo | *training | 01:51 |
| morganfainberg | simo, seeing the data convinced me it's the right approach, conceptually it doesn't matter a whole lot. | 01:51 |
| simo | no as I said it makes 0 difference from a security perspective | 01:51 |
| *** prad_ has joined #openstack-dev | 01:52 | |
| morganfainberg | simo, but makeing it _clearly_ separate data is a better approach. | 01:52 |
| *** lbragstad1 has joined #openstack-dev | 01:52 | |
| morganfainberg | is it base64.encode(json.dumps) ? | 01:53 |
| *** buzztroll has quit IRC | 01:53 | |
| *** lbragstad has quit IRC | 01:53 | |
| morganfainberg | i appologize, i haven't read up on the implementation yet. | 01:53 |
| morganfainberg | i... have been running errands all day =/ | 01:53 |
| *** reed has quit IRC | 01:53 | |
| jamielennox | morganfainberg: yes | 01:55 |
| morganfainberg | jamielennox, ok. | 01:55 |
| morganfainberg | cool | 01:55 |
| jamielennox | morganfainberg: it has to be a string to base64 encode something | 01:55 |
| morganfainberg | jamielennox, i don't know someone might have done something silly... like pickle | 01:55 |
| morganfainberg | or some such | 01:56 |
| *** fifieldt_ has quit IRC | 01:56 | |
| *** fifieldt_ has joined #openstack-dev | 01:56 | |
| morganfainberg | simo, i'm going to add you to a review tomorrow about the impl. of key-value-store encrypt/HMAC stuff. it's leveraging already written code, but i want some more eyes on this type of stuff on the code, if you don't mind | 01:57 |
| morganfainberg | make sure i'm not leaving a gaping hole in the security feature using the tried-and-tested code | 01:57 |
| *** netavenger-jr has joined #openstack-dev | 01:58 | |
| simo | morganfainberg: ack | 01:58 |
| morganfainberg | simo, cool thanks | 01:59 |
| *** rods has quit IRC | 01:59 | |
| *** carl_baldwin has quit IRC | 01:59 | |
| *** guohliu has joined #openstack-dev | 02:00 | |
| *** mohits has quit IRC | 02:01 | |
| *** boris-42 has quit IRC | 02:02 | |
| *** lbragstad has joined #openstack-dev | 02:03 | |
| *** lbragstad1 has quit IRC | 02:04 | |
| *** prad_ has quit IRC | 02:05 | |
| *** bdpayne has quit IRC | 02:05 | |
| *** melwitt has left #openstack-dev | 02:05 | |
| *** glenng has joined #openstack-dev | 02:05 | |
| *** mrodden has joined #openstack-dev | 02:06 | |
| *** renlt has joined #openstack-dev | 02:09 | |
| *** markwash has joined #openstack-dev | 02:10 | |
| *** MaxV has joined #openstack-dev | 02:11 | |
| *** tmclaugh[work] has quit IRC | 02:11 | |
| *** tmclaugh[work] has joined #openstack-dev | 02:11 | |
| *** xarg has quit IRC | 02:14 | |
| *** xarg_ is now known as xarg | 02:14 | |
| *** stevemar has joined #openstack-dev | 02:15 | |
| *** MaxV has quit IRC | 02:16 | |
| *** openstack has joined #openstack-dev | 02:17 | |
| -hobana.freenode.net- [freenode-info] channel trolls and no channel staff around to help? please check with freenode support: http://freenode.net/faq.shtml#gettinghelp | 02:17 | |
| *** tmclaugh[work] has quit IRC | 02:19 | |
| *** faramir1 has quit IRC | 02:20 | |
| *** xarg_ has joined #openstack-dev | 02:21 | |
| *** glenng1 has joined #openstack-dev | 02:21 | |
| *** herndon_ has quit IRC | 02:21 | |
| *** glenng has quit IRC | 02:23 | |
| *** jayg is now known as jayg|g0n3 | 02:30 | |
| *** isd has joined #openstack-dev | 02:30 | |
| *** isd has left #openstack-dev | 02:31 | |
| *** jasdeepH has joined #openstack-dev | 02:31 | |
| *** jasdeepH has left #openstack-dev | 02:31 | |
| *** mengxd has joined #openstack-dev | 02:33 | |
| *** xingchao has joined #openstack-dev | 02:33 | |
| *** bingbu has quit IRC | 02:34 | |
| *** jcooley_ has joined #openstack-dev | 02:35 | |
| *** matsuhas_ has quit IRC | 02:35 | |
| *** dims has quit IRC | 02:37 | |
| *** Mandell has quit IRC | 02:37 | |
| *** llu_linux is now known as llu | 02:41 | |
| *** neelashah has joined #openstack-dev | 02:41 | |
| *** sandy__ has quit IRC | 02:43 | |
| *** Ryan_Lane has joined #openstack-dev | 02:44 | |
| *** DennyZhang has joined #openstack-dev | 02:46 | |
| *** xdmeng has joined #openstack-dev | 02:47 | |
| *** erkules_ has joined #openstack-dev | 02:48 | |
| *** Ryan_Lane has quit IRC | 02:49 | |
| *** erkules has quit IRC | 02:49 | |
| *** mengxd has quit IRC | 02:49 | |
| *** haomaiwang has joined #openstack-dev | 02:50 | |
| *** mfer has quit IRC | 02:50 | |
| *** xingchao has quit IRC | 02:50 | |
| *** rongze has joined #openstack-dev | 02:53 | |
| *** mfer has joined #openstack-dev | 02:55 | |
| *** rongze_ has joined #openstack-dev | 02:55 | |
| *** claxton has joined #openstack-dev | 02:56 | |
| *** stevemar has quit IRC | 02:56 | |
| *** mrodden has quit IRC | 02:57 | |
| *** rongze has quit IRC | 02:58 | |
| *** sandy__ has joined #openstack-dev | 02:59 | |
| *** litong has quit IRC | 03:03 | |
| *** Braxton_ has joined #openstack-dev | 03:10 | |
| *** Chicago has quit IRC | 03:10 | |
| *** aveiga has joined #openstack-dev | 03:11 | |
| *** HenryG has quit IRC | 03:11 | |
| *** MaxV has joined #openstack-dev | 03:12 | |
| *** shinylasers has quit IRC | 03:14 | |
| *** mfer has quit IRC | 03:15 | |
| *** MaxV has quit IRC | 03:16 | |
| *** chandankumar has joined #openstack-dev | 03:17 | |
| *** jcooley_ has quit IRC | 03:17 | |
| *** mohits has joined #openstack-dev | 03:17 | |
| *** Chicago has joined #openstack-dev | 03:17 | |
| *** markwash has quit IRC | 03:18 | |
| *** mfer has joined #openstack-dev | 03:20 | |
| *** sdake_ has quit IRC | 03:21 | |
| *** dripton has quit IRC | 03:21 | |
| *** noorul has joined #openstack-dev | 03:21 | |
| *** CaptTofu has quit IRC | 03:24 | |
| *** paragan_ has joined #openstack-dev | 03:24 | |
| *** claxton has quit IRC | 03:27 | |
| *** shinylasers has joined #openstack-dev | 03:30 | |
| *** Braxton_ has quit IRC | 03:34 | |
| *** CaptTofu has joined #openstack-dev | 03:36 | |
| *** mfer has quit IRC | 03:38 | |
| *** mfer has joined #openstack-dev | 03:39 | |
| *** mfer has quit IRC | 03:41 | |
| *** DennyZhang has quit IRC | 03:42 | |
| *** DennyZha` has joined #openstack-dev | 03:42 | |
| *** sarob has joined #openstack-dev | 03:45 | |
| *** Ryan_Lane has joined #openstack-dev | 03:45 | |
| *** mriedem has quit IRC | 03:47 | |
| *** Ryan_Lane has quit IRC | 03:50 | |
| *** shinylasers has quit IRC | 03:52 | |
| *** sumanth has joined #openstack-dev | 03:54 | |
| *** shinylasers has joined #openstack-dev | 03:55 | |
| *** tzumainn has quit IRC | 03:59 | |
| *** matiu has joined #openstack-dev | 04:00 | |
| *** topol has joined #openstack-dev | 04:04 | |
| *** mohits has quit IRC | 04:05 | |
| *** mohits has joined #openstack-dev | 04:06 | |
| *** mohits has quit IRC | 04:06 | |
| *** aveiga has quit IRC | 04:07 | |
| *** matsuhashi has joined #openstack-dev | 04:14 | |
| *** Mandell has joined #openstack-dev | 04:20 | |
| *** ayoung has quit IRC | 04:20 | |
| *** epopt37 has quit IRC | 04:21 | |
| *** kushal has joined #openstack-dev | 04:22 | |
| *** michchap_ has joined #openstack-dev | 04:24 | |
| *** novas0x2a|laptop has quit IRC | 04:24 | |
| *** michchap has quit IRC | 04:26 | |
| *** sdake_ has joined #openstack-dev | 04:29 | |
| *** mikeoutland has joined #openstack-dev | 04:32 | |
| *** shinylasers has quit IRC | 04:33 | |
| *** epopt37 has joined #openstack-dev | 04:34 | |
| *** rongze_ has quit IRC | 04:35 | |
| *** michchap has joined #openstack-dev | 04:35 | |
| *** rraja has joined #openstack-dev | 04:36 | |
| *** CaptTofu has quit IRC | 04:36 | |
| *** CaptTofu has joined #openstack-dev | 04:36 | |
| *** michchap_ has quit IRC | 04:38 | |
| *** otherwiseguy has quit IRC | 04:40 | |
| *** aditirav has joined #openstack-dev | 04:41 | |
| *** mfer has joined #openstack-dev | 04:44 | |
| *** sumanthns has joined #openstack-dev | 04:44 | |
| *** markwash has joined #openstack-dev | 04:45 | |
| *** Ryan_Lane has joined #openstack-dev | 04:46 | |
| *** mfer has quit IRC | 04:48 | |
| *** aditirav has quit IRC | 04:48 | |
| *** mikeoutland has quit IRC | 04:49 | |
| *** aditirav has joined #openstack-dev | 04:49 | |
| *** Shaan7 has joined #openstack-dev | 04:50 | |
| *** Shaan7 has quit IRC | 04:50 | |
| *** Shaan7 has joined #openstack-dev | 04:50 | |
| *** Ryan_Lane has quit IRC | 04:51 | |
| *** rraja has quit IRC | 04:51 | |
| *** otherwiseguy has joined #openstack-dev | 04:52 | |
| *** aditirav_ has joined #openstack-dev | 04:53 | |
| *** amotoki has joined #openstack-dev | 04:53 | |
| *** willingc has joined #openstack-dev | 04:53 | |
| *** willingc has quit IRC | 04:55 | |
| *** nshaikh has joined #openstack-dev | 04:55 | |
| *** bauzas has quit IRC | 04:55 | |
| *** aditirav has quit IRC | 04:55 | |
| *** aditirav_ is now known as aditirav | 04:56 | |
| *** jrh2064 has joined #openstack-dev | 04:57 | |
| *** aeperezt has quit IRC | 04:59 | |
| *** sarob has quit IRC | 04:59 | |
| *** jrh2064 has left #openstack-dev | 04:59 | |
| *** jamespage has quit IRC | 05:00 | |
| *** nkinder|away is now known as nkinder | 05:01 | |
| *** basha has joined #openstack-dev | 05:02 | |
| *** marun has joined #openstack-dev | 05:03 | |
| nkinder | morganfainberg: I'd be happy to look over your key-value-store work tomorrow too. | 05:03 |
| *** noorul` has joined #openstack-dev | 05:05 | |
| *** noorul has quit IRC | 05:09 | |
| *** noorul`` has joined #openstack-dev | 05:09 | |
| *** noorul` has quit IRC | 05:12 | |
| *** mgagne1 has joined #openstack-dev | 05:15 | |
| *** mgagne1 has joined #openstack-dev | 05:15 | |
| *** mgagne has quit IRC | 05:17 | |
| *** noorul`` is now known as noorul | 05:19 | |
| *** noorul has joined #openstack-dev | 05:19 | |
| *** fifieldt_ has quit IRC | 05:21 | |
| *** stevemar has joined #openstack-dev | 05:21 | |
| *** xarses has joined #openstack-dev | 05:22 | |
| *** DennyZha` has quit IRC | 05:24 | |
| *** changbl has joined #openstack-dev | 05:25 | |
| *** shinylasers has joined #openstack-dev | 05:25 | |
| *** sarob has joined #openstack-dev | 05:27 | |
| *** rushiagr has joined #openstack-dev | 05:27 | |
| StevenK | lifeless: Is there a way to have python -m subunit.run discover print out the tests as they're being run? -v does not help -- and in fact, seems to have no effect. | 05:27 |
| lifeless | StevenK: subunit.run prints them out as subunit packets | 05:28 |
| *** sarob has quit IRC | 05:28 | |
| lifeless | StevenK: it's how it works :). Perhaps though you're talking about some UI layer ? | 05:28 |
| *** sarob has joined #openstack-dev | 05:28 | |
| StevenK | lifeless: Trying to think of some way to address the review comments in https://review.openstack.org/#/c/59699/3/.testr.conf | 05:29 |
| *** sarob has quit IRC | 05:30 | |
| lifeless | StevenK: replied there | 05:30 |
| *** netavenger-jr has quit IRC | 05:31 | |
| *** thelorax123 has joined #openstack-dev | 05:31 | |
| StevenK | lifeless: Thanks | 05:31 |
| *** sarob has joined #openstack-dev | 05:32 | |
| *** sarob has quit IRC | 05:33 | |
| *** matiu has quit IRC | 05:34 | |
| *** sarob has joined #openstack-dev | 05:34 | |
| *** sarob has quit IRC | 05:39 | |
| *** topol has quit IRC | 05:44 | |
| *** Ryan_Lane has joined #openstack-dev | 05:47 | |
| *** Shaan7 has quit IRC | 05:48 | |
| *** sdake_ has quit IRC | 05:49 | |
| *** xingchao has joined #openstack-dev | 05:49 | |
| *** matiu has joined #openstack-dev | 05:50 | |
| *** Ryan_Lane has quit IRC | 05:51 | |
| *** mrodden has joined #openstack-dev | 05:52 | |
| *** paragan_ has quit IRC | 05:52 | |
| *** paragan has joined #openstack-dev | 05:53 | |
| *** paragan has quit IRC | 05:53 | |
| *** paragan has joined #openstack-dev | 05:53 | |
| *** claxton has joined #openstack-dev | 05:54 | |
| *** mikeoutland has joined #openstack-dev | 05:54 | |
| *** xingchao has quit IRC | 05:55 | |
| *** yamahata_ has quit IRC | 05:55 | |
| *** xingchao has joined #openstack-dev | 05:57 | |
| *** DennyZha` has joined #openstack-dev | 05:57 | |
| *** toabctl has quit IRC | 05:57 | |
| *** toabctl has joined #openstack-dev | 05:58 | |
| *** e0ne has joined #openstack-dev | 06:01 | |
| *** DennyZha` has quit IRC | 06:01 | |
| *** toabctl has quit IRC | 06:01 | |
| *** toabctl has joined #openstack-dev | 06:02 | |
| *** toabctl has joined #openstack-dev | 06:02 | |
| *** e0ne has quit IRC | 06:02 | |
| *** xingchao has quit IRC | 06:02 | |
| *** toabctl has quit IRC | 06:02 | |
| *** toabctl has joined #openstack-dev | 06:02 | |
| *** toabctl has joined #openstack-dev | 06:02 | |
| *** rraja has joined #openstack-dev | 06:05 | |
| *** Chicago has quit IRC | 06:05 | |
| *** yeylon__ has joined #openstack-dev | 06:06 | |
| *** neeti has joined #openstack-dev | 06:09 | |
| *** noslzzp has joined #openstack-dev | 06:09 | |
| *** thelorax123 has quit IRC | 06:13 | |
| *** matsuhashi has quit IRC | 06:14 | |
| *** rushiagr2 has joined #openstack-dev | 06:14 | |
| *** matsuhashi has joined #openstack-dev | 06:14 | |
| *** thelorax123 has joined #openstack-dev | 06:14 | |
| *** rushiagr has quit IRC | 06:15 | |
| *** rohitk has joined #openstack-dev | 06:15 | |
| *** rcleere has joined #openstack-dev | 06:19 | |
| *** csaba|afk is now known as csaba | 06:20 | |
| *** rushiagr2 is now known as rushiagr | 06:24 | |
| *** bdpayne has joined #openstack-dev | 06:26 | |
| *** guohliu has quit IRC | 06:29 | |
| *** guohliu has joined #openstack-dev | 06:30 | |
| *** alex_klimov has joined #openstack-dev | 06:33 | |
| *** Abhishek has joined #openstack-dev | 06:34 | |
| *** guohliu has quit IRC | 06:35 | |
| *** rdas has joined #openstack-dev | 06:35 | |
| *** kbrierly has quit IRC | 06:36 | |
| *** guohliu has joined #openstack-dev | 06:36 | |
| *** e0ne has joined #openstack-dev | 06:36 | |
| *** jkyle has quit IRC | 06:37 | |
| *** e0ne has quit IRC | 06:37 | |
| *** Shaan7 has joined #openstack-dev | 06:38 | |
| *** basha has quit IRC | 06:40 | |
| *** rcleere has quit IRC | 06:41 | |
| *** alex_klimov has quit IRC | 06:41 | |
| *** Ryan_Lane has joined #openstack-dev | 06:44 | |
| *** jkyle has joined #openstack-dev | 06:44 | |
| *** sushils has quit IRC | 06:44 | |
| *** prekarat has joined #openstack-dev | 06:50 | |
| *** ArcTanSusan has joined #openstack-dev | 06:50 | |
| *** Ryan_Lane has quit IRC | 06:50 | |
| *** ngoracke has joined #openstack-dev | 06:51 | |
| *** noslzzp has quit IRC | 06:52 | |
| *** rongze has joined #openstack-dev | 06:54 | |
| *** Abhishek has quit IRC | 06:56 | |
| *** shinylasers has quit IRC | 06:57 | |
| *** kbrierly has joined #openstack-dev | 06:58 | |
| *** neelashah has quit IRC | 06:59 | |
| *** vartom11119 has joined #openstack-dev | 06:59 | |
| *** jpich has joined #openstack-dev | 07:00 | |
| *** bdpayne has quit IRC | 07:02 | |
| *** vuntz has quit IRC | 07:03 | |
| *** vartom111110 has joined #openstack-dev | 07:05 | |
| *** vartom11119 has quit IRC | 07:06 | |
| *** gyee has quit IRC | 07:06 | |
| *** alex_klimov has joined #openstack-dev | 07:06 | |
| *** alex_klimov has quit IRC | 07:08 | |
| *** alex_klimov has joined #openstack-dev | 07:08 | |
| *** jamespage has joined #openstack-dev | 07:09 | |
| *** Ryan_Lane has joined #openstack-dev | 07:09 | |
| *** alex_klimov has quit IRC | 07:09 | |
| *** alex_klimov1 has joined #openstack-dev | 07:10 | |
| *** SergeyLukjanov has joined #openstack-dev | 07:12 | |
| *** denis_makogon has joined #openstack-dev | 07:15 | |
| *** urulama has joined #openstack-dev | 07:17 | |
| *** ngoracke has quit IRC | 07:17 | |
| *** kmsWork_ has joined #openstack-dev | 07:17 | |
| *** matsuhashi has quit IRC | 07:17 | |
| *** sthaha has joined #openstack-dev | 07:17 | |
| *** Ryan_Lane has quit IRC | 07:19 | |
| *** kmsWork has quit IRC | 07:19 | |
| *** mrunge_ has joined #openstack-dev | 07:20 | |
| *** avishay has joined #openstack-dev | 07:20 | |
| *** vuntz has joined #openstack-dev | 07:21 | |
| *** nati_ueno has quit IRC | 07:24 | |
| *** irenab has joined #openstack-dev | 07:25 | |
| *** paragan has quit IRC | 07:25 | |
| *** jcoufal has joined #openstack-dev | 07:30 | |
| *** basha has joined #openstack-dev | 07:31 | |
| *** pierou has joined #openstack-dev | 07:32 | |
| *** stevemar has quit IRC | 07:32 | |
| *** pierou has quit IRC | 07:33 | |
| *** boris-42 has joined #openstack-dev | 07:35 | |
| *** basha has quit IRC | 07:35 | |
| *** rraja has quit IRC | 07:36 | |
| *** mikeoutland has quit IRC | 07:37 | |
| *** mikeoutland has joined #openstack-dev | 07:37 | |
| *** paragan has joined #openstack-dev | 07:37 | |
| *** paragan has quit IRC | 07:37 | |
| *** paragan has joined #openstack-dev | 07:37 | |
| *** SergeyLukjanov has quit IRC | 07:41 | |
| *** mikeoutland has quit IRC | 07:42 | |
| *** belmoreira has joined #openstack-dev | 07:44 | |
| *** belmoreira has quit IRC | 07:44 | |
| *** belmoreira has joined #openstack-dev | 07:44 | |
| *** SergeyLukjanov has joined #openstack-dev | 07:48 | |
| *** MaxV has joined #openstack-dev | 07:49 | |
| *** ifarkas has joined #openstack-dev | 07:50 | |
| *** shinylasers has joined #openstack-dev | 07:51 | |
| *** jpich has quit IRC | 07:56 | |
| *** xdmeng has quit IRC | 07:57 | |
| *** mengxd has joined #openstack-dev | 07:57 | |
| *** lsmola has joined #openstack-dev | 07:57 | |
| *** DeeJay1 has joined #openstack-dev | 07:58 | |
| *** e0ne has joined #openstack-dev | 07:58 | |
| *** mrunge has quit IRC | 07:58 | |
| *** mrunge_ is now known as mrunge | 07:59 | |
| *** sushils has joined #openstack-dev | 08:00 | |
| *** basha has joined #openstack-dev | 08:01 | |
| *** basha has quit IRC | 08:03 | |
| *** reidrac has joined #openstack-dev | 08:04 | |
| *** k4n0 has joined #openstack-dev | 08:07 | |
| *** e0ne_ has joined #openstack-dev | 08:08 | |
| *** harlowja has quit IRC | 08:08 | |
| *** mindpixel has joined #openstack-dev | 08:09 | |
| *** flaper87|afk is now known as flaper87 | 08:09 | |
| *** corXi has joined #openstack-dev | 08:09 | |
| *** ig has joined #openstack-dev | 08:09 | |
| *** DinaBelova has joined #openstack-dev | 08:10 | |
| *** e0ne has quit IRC | 08:11 | |
| *** che-arne has quit IRC | 08:12 | |
| *** basha has joined #openstack-dev | 08:15 | |
| *** nati_ueno has joined #openstack-dev | 08:15 | |
| *** jprovazn has joined #openstack-dev | 08:16 | |
| *** mohits has joined #openstack-dev | 08:16 | |
| *** jamielennox is now known as jamielennox|away | 08:17 | |
| *** dsantos_ has quit IRC | 08:20 | |
| *** ifarkas has quit IRC | 08:21 | |
| ekarlso | sandy__: around ? or Apsu | 08:21 |
| ekarlso | apl | 08:21 |
| ekarlso | dammit ! :) | 08:21 |
| *** ArcTanSusan has quit IRC | 08:22 | |
| *** xqueralt has joined #openstack-dev | 08:24 | |
| *** tkammer has joined #openstack-dev | 08:24 | |
| *** giulivo has joined #openstack-dev | 08:25 | |
| *** dsantos_ has joined #openstack-dev | 08:26 | |
| *** vipul is now known as vipul-away | 08:27 | |
| *** mdbooth has joined #openstack-dev | 08:27 | |
| *** ifarkas has joined #openstack-dev | 08:27 | |
| *** DinaBelova has quit IRC | 08:27 | |
| *** Ryan_Lane has joined #openstack-dev | 08:29 | |
| *** bauzas has joined #openstack-dev | 08:30 | |
| *** salv-orlando has joined #openstack-dev | 08:34 | |
| *** SergeyLukjanov has quit IRC | 08:36 | |
| *** Ryan_Lane has quit IRC | 08:37 | |
| *** vipul-away is now known as vipul | 08:37 | |
| k4n0 | Hey guys, i have odd situation here, for my review https://review.openstack.org/#/c/59860/, all python 2.6 unit tests are failing, but all python 2.7 pass. Seems to be some bug on the CI side | 08:39 |
| *** SlickNik has quit IRC | 08:39 | |
| *** SlickNik has joined #openstack-dev | 08:40 | |
| *** neeti has quit IRC | 08:40 | |
| *** akrivoka has joined #openstack-dev | 08:41 | |
| *** Ryan_Lane has joined #openstack-dev | 08:42 | |
| *** neeti has joined #openstack-dev | 08:44 | |
| *** jp_at_hp has joined #openstack-dev | 08:46 | |
| *** pixelb has joined #openstack-dev | 08:46 | |
| *** thelorax123 has quit IRC | 08:46 | |
| *** denis_makogon has quit IRC | 08:47 | |
| *** mancdaz_away is now known as mancdaz | 08:47 | |
| *** omachace has joined #openstack-dev | 08:47 | |
| *** thelorax123 has joined #openstack-dev | 08:47 | |
| *** Shaan7 has quit IRC | 08:48 | |
| *** shinylasers has quit IRC | 08:51 | |
| *** teran has quit IRC | 08:52 | |
| ndipanov | k4n0, https://wiki.openstack.org/wiki/GerritJenkinsGit#Test_Failures | 08:52 |
| ndipanov | k4n0, but in short - you need to "recheck" | 08:52 |
| *** shinylasers has joined #openstack-dev | 08:53 | |
| *** mmagr has joined #openstack-dev | 08:53 | |
| *** e0ne_ has quit IRC | 08:55 | |
| *** xga has joined #openstack-dev | 08:57 | |
| *** boris-42 has quit IRC | 08:57 | |
| *** nati_ueno has quit IRC | 08:57 | |
| *** jistr has joined #openstack-dev | 08:58 | |
| k4n0 | ndipanov: yes, "recheck" will help, but this issue has occured on 3 different patch sets | 09:00 |
| *** vuil has joined #openstack-dev | 09:00 | |
| k4n0 | ndipanov: I will try recheck no bug once | 09:00 |
| ndipanov | k4n0, in that case maybe report the bug? | 09:00 |
| *** vuil has quit IRC | 09:01 | |
| *** e0ne has joined #openstack-dev | 09:01 | |
| ndipanov | k4n0, it seems like a dependancy issue | 09:01 |
| ndipanov | it might be legit | 09:01 |
| k4n0 | ndipanov: Sure, i will try recheck once , if issue persists, i will report the bug | 09:01 |
| ndipanov | ImportError: cannot import name consoles | 09:01 |
| ndipanov | I'd report it immediately | 09:01 |
| ndipanov | hmmm | 09:02 |
| k4n0 | ndipanov: ok, i report the bug in openstack-infra? | 09:02 |
| *** boden has joined #openstack-dev | 09:02 | |
| ndipanov | k4n0, wait a sec | 09:02 |
| *** eglynn-afk has joined #openstack-dev | 09:03 | |
| ndipanov | k4n0, can you show me the other patches that had the same | 09:04 |
| ndipanov | this looks like a circular import problem | 09:04 |
| ndipanov | interesting | 09:05 |
| k4n0 | ndipanov: it has happened in the sam review for all the patch sets, no other review of mine has this issue | 09:06 |
| k4n0 | *same | 09:06 |
| ndipanov | k4n0, interesting that it only happens in 2.6 | 09:07 |
| k4n0 | ndipanov: yes, should i report bug in nova? | 09:07 |
| ndipanov | k4n0, not sure - it is very likely your patch - but it may have triggered the bug in nova | 09:08 |
| ndipanov | did you run 2.6 tests on your machine? | 09:08 |
| *** xga_ has joined #openstack-dev | 09:10 | |
| *** xga has quit IRC | 09:10 | |
| *** giulivo has quit IRC | 09:10 | |
| *** athomas has joined #openstack-dev | 09:10 | |
| BobBall | ekarlso: nope! | 09:13 |
| ekarlso | BobBall: any new packages out for XS? | 09:14 |
| BobBall | ekarlso: trying to get the auto-refreshing packages up | 09:14 |
| *** giulivo has joined #openstack-dev | 09:14 | |
| BobBall | ekarlso: maybe will have that next week - then it'll be always following trunk | 09:15 |
| *** boris-42 has joined #openstack-dev | 09:16 | |
| *** yamahata_ has joined #openstack-dev | 09:16 | |
| *** iartarisi has joined #openstack-dev | 09:17 | |
| ndipanov | k4n0, but that db call in the view builder in your patch is hacky anyway. you shouldn't do that there | 09:18 |
| ndipanov | try moving it in the actual controller | 09:18 |
| ndipanov | and remove the exceptions import | 09:18 |
| ndipanov | I'd personally -1 that patch... k4n0 actually... :) | 09:19 |
| *** rraja has joined #openstack-dev | 09:19 | |
| k4n0 | ndipanov: I havent ran the 2.6 tests, i will do that, Yes the patch is hacky, will try to refactor it :) | 09:21 |
| *** nati_ueno has joined #openstack-dev | 09:22 | |
| *** jpich has joined #openstack-dev | 09:24 | |
| *** xga_ has quit IRC | 09:24 | |
| *** xga has joined #openstack-dev | 09:24 | |
| *** mdbooth has quit IRC | 09:24 | |
| *** lucasagomes has joined #openstack-dev | 09:25 | |
| *** jtomasek has joined #openstack-dev | 09:27 | |
| *** renlt has quit IRC | 09:27 | |
| *** marekd|away is now known as marekd | 09:28 | |
| *** rraja has quit IRC | 09:29 | |
| *** jcoufal has quit IRC | 09:30 | |
| *** mdbooth has joined #openstack-dev | 09:31 | |
| *** Ryan_Lane has quit IRC | 09:32 | |
| *** fbo_away is now known as fbo | 09:33 | |
| *** avishayb has joined #openstack-dev | 09:35 | |
| *** yeylon__ has quit IRC | 09:35 | |
| *** e0ne_ has joined #openstack-dev | 09:36 | |
| *** claxton has quit IRC | 09:36 | |
| *** jtomasek has quit IRC | 09:36 | |
| *** claxton has joined #openstack-dev | 09:37 | |
| *** xdmeng has joined #openstack-dev | 09:38 | |
| *** mengxd has quit IRC | 09:39 | |
| *** xdmeng has quit IRC | 09:39 | |
| *** e0ne has quit IRC | 09:39 | |
| *** mengxd has joined #openstack-dev | 09:39 | |
| *** rossella_s has joined #openstack-dev | 09:40 | |
| *** mengxd has quit IRC | 09:41 | |
| *** danpb has joined #openstack-dev | 09:41 | |
| *** Alexei_987 has joined #openstack-dev | 09:43 | |
| *** max_lobur_afk is now known as max_lobur | 09:45 | |
| *** amuller has joined #openstack-dev | 09:45 | |
| *** rraja has joined #openstack-dev | 09:46 | |
| *** gongysh has joined #openstack-dev | 09:49 | |
| *** yeylon__ has joined #openstack-dev | 09:50 | |
| *** jtomasek has joined #openstack-dev | 09:50 | |
| *** irenab has quit IRC | 09:52 | |
| *** Ryan_Lane has joined #openstack-dev | 09:53 | |
| *** garyk has joined #openstack-dev | 09:54 | |
| *** teran has joined #openstack-dev | 09:54 | |
| *** markmcclain has joined #openstack-dev | 09:54 | |
| *** abk has joined #openstack-dev | 09:55 | |
| *** gongysh has quit IRC | 09:55 | |
| *** johnthetubaguy has joined #openstack-dev | 09:56 | |
| *** jcoufal has joined #openstack-dev | 09:58 | |
| *** yamahata_ has quit IRC | 09:58 | |
| *** markmcclain has quit IRC | 09:59 | |
| *** Ryan_Lane has quit IRC | 09:59 | |
| *** johnthetubaguy1 has joined #openstack-dev | 09:59 | |
| *** johnthetubaguy has quit IRC | 10:00 | |
| *** athomas has quit IRC | 10:00 | |
| *** mdbooth has quit IRC | 10:00 | |
| *** Ryan_Lane has joined #openstack-dev | 10:00 | |
| *** abk has quit IRC | 10:00 | |
| *** akrivoka has quit IRC | 10:01 | |
| *** Ryan_Lane has quit IRC | 10:01 | |
| *** xga_ has joined #openstack-dev | 10:01 | |
| *** xga has quit IRC | 10:02 | |
| *** akrivoka has joined #openstack-dev | 10:02 | |
| *** Ryan_Lane has joined #openstack-dev | 10:03 | |
| *** Ryan_Lane has quit IRC | 10:03 | |
| *** erkules_ is now known as erkules | 10:04 | |
| *** jtomasek has quit IRC | 10:04 | |
| *** neoXsys has joined #openstack-dev | 10:04 | |
| *** lsmola has quit IRC | 10:05 | |
| *** nati_ueno has quit IRC | 10:06 | |
| *** mancdaz is now known as mancdaz_away | 10:07 | |
| *** aloga has joined #openstack-dev | 10:07 | |
| *** martyntaylor has joined #openstack-dev | 10:09 | |
| *** jlabocki1 has joined #openstack-dev | 10:10 | |
| *** abk has joined #openstack-dev | 10:12 | |
| *** mancdaz_away is now known as mancdaz | 10:12 | |
| *** derekh has joined #openstack-dev | 10:13 | |
| *** jlabocki has quit IRC | 10:14 | |
| *** bvandenh has joined #openstack-dev | 10:14 | |
| *** omachace has quit IRC | 10:15 | |
| *** eglynn-afk is now known as eglynn | 10:16 | |
| garyk | lifeless: ping | 10:16 |
| *** lsmola has joined #openstack-dev | 10:18 | |
| *** omachace has joined #openstack-dev | 10:18 | |
| *** exed has joined #openstack-dev | 10:19 | |
| *** jtomasek has joined #openstack-dev | 10:20 | |
| *** thelorax123 has quit IRC | 10:24 | |
| *** che-arne has joined #openstack-dev | 10:25 | |
| *** thelorax123 has joined #openstack-dev | 10:25 | |
| *** paragan has quit IRC | 10:29 | |
| *** michchap has quit IRC | 10:30 | |
| *** fc__ has quit IRC | 10:31 | |
| *** michchap has joined #openstack-dev | 10:31 | |
| *** che-arne has quit IRC | 10:31 | |
| *** xga_ has quit IRC | 10:31 | |
| *** fc__ has joined #openstack-dev | 10:31 | |
| *** teran has quit IRC | 10:32 | |
| *** gszasz has joined #openstack-dev | 10:32 | |
| *** xga has joined #openstack-dev | 10:32 | |
| *** teran has joined #openstack-dev | 10:33 | |
| *** ig has quit IRC | 10:37 | |
| *** teran has quit IRC | 10:37 | |
| *** ig has joined #openstack-dev | 10:37 | |
| *** jprovazn has quit IRC | 10:41 | |
| *** sridevi has joined #openstack-dev | 10:43 | |
| *** ig has quit IRC | 10:43 | |
| *** ig has joined #openstack-dev | 10:43 | |
| *** rraja has quit IRC | 10:45 | |
| *** rfolco has joined #openstack-dev | 10:45 | |
| *** Ryan_Lane has joined #openstack-dev | 10:45 | |
| *** sumanth has quit IRC | 10:45 | |
| *** akrivoka has quit IRC | 10:46 | |
| *** akrivoka has joined #openstack-dev | 10:47 | |
| *** boris-42 has quit IRC | 10:47 | |
| *** lsmola has quit IRC | 10:49 | |
| *** romcheg has joined #openstack-dev | 10:50 | |
| *** mirrorbox has quit IRC | 10:55 | |
| *** athomas has joined #openstack-dev | 10:55 | |
| *** mirrorbox has joined #openstack-dev | 10:55 | |
| *** sudorandom has quit IRC | 10:55 | |
| *** markmc has joined #openstack-dev | 10:55 | |
| *** sudorandom has joined #openstack-dev | 10:56 | |
| *** rraja has joined #openstack-dev | 10:57 | |
| *** xga has quit IRC | 10:57 | |
| *** thelorax123 has quit IRC | 10:57 | |
| *** amuller has quit IRC | 10:58 | |
| *** thelorax123 has joined #openstack-dev | 10:58 | |
| *** tkammer has quit IRC | 10:59 | |
| ttx | jd__: tagging i1 for ceilometer now unless you scream | 10:59 |
| *** dsantos_ has quit IRC | 10:59 | |
| *** sumanth has joined #openstack-dev | 10:59 | |
| *** yamahata_ has joined #openstack-dev | 11:01 | |
| *** boris-42 has joined #openstack-dev | 11:02 | |
| *** lsmola has joined #openstack-dev | 11:02 | |
| *** neeti_ has joined #openstack-dev | 11:06 | |
| *** neeti has quit IRC | 11:07 | |
| tristanC | ttx: fyi there may be some latencies, jd__ is currently at openstack in action, in paris | 11:08 |
| *** Ryan_Lane has quit IRC | 11:09 | |
| ttx | tristanC: yeah, he is in the same room I am in | 11:09 |
| *** rongze has quit IRC | 11:12 | |
| *** jprovazn has joined #openstack-dev | 11:15 | |
| *** mdenny has quit IRC | 11:15 | |
| *** yamahata_ has quit IRC | 11:15 | |
| *** akrivoka has quit IRC | 11:18 | |
| ttx | markmc: hey! was transport-aliases completed ? | 11:20 |
| *** claxton has quit IRC | 11:21 | |
| *** tkammer has joined #openstack-dev | 11:21 | |
| *** guohliu has quit IRC | 11:22 | |
| *** tkammer has quit IRC | 11:22 | |
| markmc | ttx, yes! | 11:22 |
| *** tkammer has joined #openstack-dev | 11:22 | |
| markmc | ttx, but no-one approved it! | 11:23 |
| markmc | ttx, :-P | 11:23 |
| markmc | ttx, oh, did I not bump it to i-2? | 11:23 |
| markmc | ttx, oh, that's right - sorry, I thought I'd closed out the icehouse-1 milestone | 11:23 |
| ttx | no, it's still in i1 | 11:23 |
| ttx | should I move it to i2 ? | 11:24 |
| markmc | I just moved it | 11:24 |
| *** lbragstad has quit IRC | 11:24 | |
| markmc | you're going to make the milestone released? | 11:24 |
| *** lbragstad has joined #openstack-dev | 11:25 | |
| ttx | markmc: i can do that | 11:25 |
| markmc | ttx, thanks | 11:25 |
| ttx | markmc: will close bugs and all | 11:25 |
| markmc | ttx, super | 11:25 |
| markmc | ttx, you're not doing a live demo of release management on stage or something, are you? :) | 11:26 |
| markmc | ttx, how did your talk go? | 11:26 |
| *** urulama has quit IRC | 11:27 | |
| ttx | markmc: looks like it went well | 11:27 |
| EmilienM | markmc: ttx : i confirm :) | 11:28 |
| markmc | ttx, cool | 11:29 |
| *** teran has joined #openstack-dev | 11:29 | |
| *** thelorax123 has quit IRC | 11:30 | |
| *** Ryan_Lane has joined #openstack-dev | 11:31 | |
| *** thelorax123 has joined #openstack-dev | 11:32 | |
| *** HenryG has joined #openstack-dev | 11:32 | |
| *** VeggieMeat_ is now known as VeggieMeat | 11:32 | |
| *** akrivoka has joined #openstack-dev | 11:33 | |
| *** jcoufal has quit IRC | 11:36 | |
| *** pcm_ has joined #openstack-dev | 11:37 | |
| *** pcm_ has quit IRC | 11:38 | |
| *** pcm_ has joined #openstack-dev | 11:39 | |
| *** teran has quit IRC | 11:41 | |
| *** matiu has quit IRC | 11:41 | |
| *** amuller has joined #openstack-dev | 11:45 | |
| *** urulama has joined #openstack-dev | 11:47 | |
| *** morazi has joined #openstack-dev | 11:48 | |
| *** ArxCruz has joined #openstack-dev | 11:48 | |
| *** morazi has quit IRC | 11:53 | |
| *** fbo is now known as fbo_away | 11:54 | |
| *** matiu has joined #openstack-dev | 11:54 | |
| *** rongze has joined #openstack-dev | 11:57 | |
| *** aditirav has quit IRC | 11:57 | |
| *** aditirav has joined #openstack-dev | 11:58 | |
| *** rkukura has quit IRC | 11:58 | |
| *** sumanth has quit IRC | 12:01 | |
| *** amuller has quit IRC | 12:03 | |
| *** amuller_ has joined #openstack-dev | 12:03 | |
| *** Ryan_Lane has quit IRC | 12:04 | |
| *** aditirav_ has joined #openstack-dev | 12:05 | |
| *** paragan has joined #openstack-dev | 12:05 | |
| *** paragan has quit IRC | 12:05 | |
| *** paragan has joined #openstack-dev | 12:05 | |
| *** morazi has joined #openstack-dev | 12:06 | |
| *** tdruiva has joined #openstack-dev | 12:07 | |
| *** aditirav has quit IRC | 12:08 | |
| *** aditirav_ is now known as aditirav | 12:08 | |
| *** tdruiva has quit IRC | 12:08 | |
| *** tdruiva has joined #openstack-dev | 12:09 | |
| *** amuller_ has quit IRC | 12:09 | |
| *** sumanth has joined #openstack-dev | 12:13 | |
| *** basha has quit IRC | 12:14 | |
| *** teran has joined #openstack-dev | 12:17 | |
| *** irenab has joined #openstack-dev | 12:17 | |
| *** rongze has quit IRC | 12:17 | |
| *** dsantos_ has joined #openstack-dev | 12:18 | |
| *** irenab has quit IRC | 12:18 | |
| *** irenab has joined #openstack-dev | 12:19 | |
| irenab | #msg sadasu hi | 12:20 |
| *** mkollaro has joined #openstack-dev | 12:21 | |
| *** amuller_ has joined #openstack-dev | 12:25 | |
| *** sumanthns has quit IRC | 12:26 | |
| *** vkmc has joined #openstack-dev | 12:27 | |
| *** rods has joined #openstack-dev | 12:29 | |
| *** sridevi has quit IRC | 12:31 | |
| *** xingchao has joined #openstack-dev | 12:33 | |
| *** sadasu has joined #openstack-dev | 12:33 | |
| sadasu | Hello irenab | 12:34 |
| *** rongze has joined #openstack-dev | 12:35 | |
| *** dsantos_ has quit IRC | 12:36 | |
| *** tellesnobrega has quit IRC | 12:37 | |
| *** thomasem has joined #openstack-dev | 12:37 | |
| *** aditirav has quit IRC | 12:38 | |
| *** samuelqueiroz has quit IRC | 12:39 | |
| irenab | hi sadasu | 12:41 |
| *** rongze_ has joined #openstack-dev | 12:41 | |
| sadasu | irenab: Good morning! Lets get started! | 12:41 |
| *** rongze has quit IRC | 12:42 | |
| irenab | sadasu: there is an option to do one to one chat. Do you see my message? | 12:43 |
| *** samuelqueiroz has joined #openstack-dev | 12:44 | |
| *** nosnos has quit IRC | 12:45 | |
| *** dsantos_ has joined #openstack-dev | 12:45 | |
| *** tellesnobrega has joined #openstack-dev | 12:46 | |
| *** k4n0 has left #openstack-dev | 12:50 | |
| *** dims has joined #openstack-dev | 12:51 | |
| *** CaptTofu has quit IRC | 12:51 | |
| *** CaptTofu has joined #openstack-dev | 12:51 | |
| *** FunnyLookinHat has joined #openstack-dev | 12:55 | |
| *** athomas has quit IRC | 12:57 | |
| *** galstrom_zzz is now known as galstrom | 12:57 | |
| *** xchu has joined #openstack-dev | 12:59 | |
| *** galstrom is now known as galstrom_zzz | 13:00 | |
| *** xingchao has quit IRC | 13:00 | |
| *** avishay has quit IRC | 13:01 | |
| *** mdbooth has joined #openstack-dev | 13:02 | |
| *** dubsquared has joined #openstack-dev | 13:03 | |
| *** neeti_ has quit IRC | 13:05 | |
| *** gordc has joined #openstack-dev | 13:06 | |
| *** salv-orlando_ has joined #openstack-dev | 13:06 | |
| *** freyes has joined #openstack-dev | 13:06 | |
| *** avishayb has quit IRC | 13:07 | |
| *** bvandenh has quit IRC | 13:07 | |
| *** dkranz has quit IRC | 13:08 | |
| *** avishayb has joined #openstack-dev | 13:08 | |
| *** dolphm has joined #openstack-dev | 13:08 | |
| *** _crobertsrh is now known as crobertsrh | 13:09 | |
| *** salv-orlando has quit IRC | 13:09 | |
| *** salv-orlando_ is now known as salv-orlando | 13:09 | |
| *** thelorax123 has quit IRC | 13:09 | |
| *** amuller_ has quit IRC | 13:09 | |
| *** thelorax123 has joined #openstack-dev | 13:10 | |
| *** sgordon has joined #openstack-dev | 13:11 | |
| *** sgordon has joined #openstack-dev | 13:11 | |
| *** prad has joined #openstack-dev | 13:13 | |
| *** prekarat has quit IRC | 13:14 | |
| *** Ryan_Lane has joined #openstack-dev | 13:14 | |
| *** loq_mac has joined #openstack-dev | 13:14 | |
| *** e0ne_ has quit IRC | 13:15 | |
| *** e0ne has joined #openstack-dev | 13:15 | |
| *** DinaBelova has joined #openstack-dev | 13:15 | |
| *** dubsquared has quit IRC | 13:17 | |
| *** prad has quit IRC | 13:18 | |
| ttx | dolphm: I'll tag keystone icehouse-1 as soon as you get up and confirm | 13:18 |
| dolphm | ttx: ++ | 13:18 |
| ttx | dolphm: is that a yes ? | 13:18 |
| dolphm | ttx: yes! | 13:19 |
| ttx | ok, processing | 13:19 |
| dolphm | ttx: all my bug activity is you marking stuff fix released | 13:19 |
| *** e0ne has quit IRC | 13:20 | |
| *** lsmola has quit IRC | 13:22 | |
| *** CaptTofu has quit IRC | 13:25 | |
| *** yamahata_ has joined #openstack-dev | 13:25 | |
| *** glenng1 has quit IRC | 13:25 | |
| *** CaptTofu has joined #openstack-dev | 13:25 | |
| *** yamahata_ has quit IRC | 13:26 | |
| *** yamahata_ has joined #openstack-dev | 13:26 | |
| *** loq_mac has quit IRC | 13:26 | |
| *** SergeyLukjanov has joined #openstack-dev | 13:26 | |
| *** glenng has joined #openstack-dev | 13:26 | |
| *** gordc has quit IRC | 13:26 | |
| ttx | jgriffith: same for you, will tag icehouse-1 once you get up and give me your confirmation | 13:26 |
| *** rdas has quit IRC | 13:27 | |
| *** avishayb has quit IRC | 13:28 | |
| *** fbo_away is now known as fbo | 13:29 | |
| *** neelashah has joined #openstack-dev | 13:30 | |
| *** amuller_ has joined #openstack-dev | 13:30 | |
| *** amuller_ is now known as amuller | 13:31 | |
| *** KeithSharp has joined #openstack-dev | 13:31 | |
| *** matrohon has quit IRC | 13:33 | |
| *** vkmc has quit IRC | 13:34 | |
| *** CaptTofu has quit IRC | 13:35 | |
| *** jdob has joined #openstack-dev | 13:35 | |
| *** CaptTofu has joined #openstack-dev | 13:35 | |
| *** changbl has quit IRC | 13:35 | |
| *** rohitk has quit IRC | 13:36 | |
| *** rohitk has joined #openstack-dev | 13:36 | |
| *** stevemar has joined #openstack-dev | 13:37 | |
| *** pafuent has joined #openstack-dev | 13:37 | |
| *** pafuent has left #openstack-dev | 13:38 | |
| *** aron28 has joined #openstack-dev | 13:38 | |
| aron28 | hello | 13:38 |
| *** vladikr has joined #openstack-dev | 13:38 | |
| *** tkammer has quit IRC | 13:39 | |
| aron28 | Can anyone give me a hint how can i figure out the code for "nova hypervisor-stats" command | 13:39 |
| *** avishayb has joined #openstack-dev | 13:39 | |
| *** aburaschi has joined #openstack-dev | 13:40 | |
| *** noslzzp has joined #openstack-dev | 13:40 | |
| *** dkranz has joined #openstack-dev | 13:44 | |
| *** fbo is now known as fbo_away | 13:45 | |
| *** matrohon has joined #openstack-dev | 13:47 | |
| *** athomas has joined #openstack-dev | 13:48 | |
| *** dkranz has quit IRC | 13:50 | |
| *** thelorax123 has quit IRC | 13:52 | |
| *** thelorax123 has joined #openstack-dev | 13:54 | |
| *** fbo_away is now known as fbo | 13:54 | |
| *** dubsquared has joined #openstack-dev | 13:57 | |
| *** jistr has quit IRC | 13:57 | |
| *** jistr has joined #openstack-dev | 13:58 | |
| *** Ryan_Lane has quit IRC | 13:58 | |
| *** dprince has joined #openstack-dev | 13:59 | |
| *** kbringard has joined #openstack-dev | 13:59 | |
| *** jasondotstar has joined #openstack-dev | 13:59 | |
| *** jecarey has joined #openstack-dev | 14:00 | |
| *** buzztroll has joined #openstack-dev | 14:00 | |
| *** drewlander has joined #openstack-dev | 14:00 | |
| *** bswartz has quit IRC | 14:01 | |
| *** burt has joined #openstack-dev | 14:01 | |
| *** morazi has quit IRC | 14:01 | |
| *** alunduil has quit IRC | 14:03 | |
| *** e0ne has joined #openstack-dev | 14:03 | |
| *** thelorax123 has quit IRC | 14:03 | |
| *** evgeny_fedoruk_ has joined #openstack-dev | 14:03 | |
| *** jcoufal has joined #openstack-dev | 14:03 | |
| *** thelorax123 has joined #openstack-dev | 14:06 | |
| *** Ruetobas has quit IRC | 14:12 | |
| *** ondergetekende has quit IRC | 14:12 | |
| *** e0ne has quit IRC | 14:12 | |
| *** e0ne has joined #openstack-dev | 14:12 | |
| *** yamahata_ has quit IRC | 14:12 | |
| *** yamahata_ has joined #openstack-dev | 14:12 | |
| *** dims has quit IRC | 14:12 | |
| *** morazi has joined #openstack-dev | 14:12 | |
| *** fbo is now known as fbo_away | 14:12 | |
| *** aeperezt has joined #openstack-dev | 14:12 | |
| *** dbalog has joined #openstack-dev | 14:12 | |
| *** Ryan_Lane has joined #openstack-dev | 14:12 | |
| *** e0ne has quit IRC | 14:12 | |
| *** dims has joined #openstack-dev | 14:12 | |
| *** joesavak has joined #openstack-dev | 14:12 | |
| *** mohits has quit IRC | 14:12 | |
| *** mriedem has joined #openstack-dev | 14:12 | |
| *** heyongli has joined #openstack-dev | 14:12 | |
| *** carl_baldwin has joined #openstack-dev | 14:12 | |
| *** ruhe has joined #openstack-dev | 14:12 | |
| *** giroro_ has joined #openstack-dev | 14:12 | |
| *** ondergetekende has joined #openstack-dev | 14:12 | |
| *** samuelbercovici has joined #openstack-dev | 14:12 | |
| *** fbo_away is now known as fbo | 14:15 | |
| *** dolphm has quit IRC | 14:16 | |
| *** irenab has quit IRC | 14:16 | |
| *** vartom111110 has quit IRC | 14:17 | |
| *** basha has joined #openstack-dev | 14:17 | |
| *** rraja has quit IRC | 14:18 | |
| *** dubsquared has quit IRC | 14:18 | |
| *** afazekas has quit IRC | 14:20 | |
| *** eharney has quit IRC | 14:20 | |
| *** nermina has joined #openstack-dev | 14:21 | |
| *** peristeri has joined #openstack-dev | 14:21 | |
| *** loq_mac has joined #openstack-dev | 14:21 | |
| ttx | david-lyle: will tag horizon icehouse-1 when you get up and confirm | 14:21 |
| tellesnobrega | morganfainberg: ping | 14:22 |
| *** venkatesh has joined #openstack-dev | 14:22 | |
| *** prad has joined #openstack-dev | 14:23 | |
| *** dolphm has joined #openstack-dev | 14:25 | |
| *** litong has joined #openstack-dev | 14:25 | |
| *** lbragstad has quit IRC | 14:25 | |
| *** jayg|g0n3 is now known as jayg | 14:28 | |
| *** dvarga has joined #openstack-dev | 14:29 | |
| *** tkammer has joined #openstack-dev | 14:30 | |
| *** rraja has joined #openstack-dev | 14:31 | |
| *** otherwiseguy has quit IRC | 14:31 | |
| *** otherwiseguy has joined #openstack-dev | 14:31 | |
| *** byeager has joined #openstack-dev | 14:31 | |
| *** aditirav has joined #openstack-dev | 14:31 | |
| *** markmcclain has joined #openstack-dev | 14:32 | |
| *** pabelanger has quit IRC | 14:32 | |
| *** tmclaugh[work] has joined #openstack-dev | 14:33 | |
| *** loquacities has joined #openstack-dev | 14:33 | |
| *** loquacities has quit IRC | 14:34 | |
| *** loquacities has joined #openstack-dev | 14:34 | |
| *** carl_baldwin has quit IRC | 14:34 | |
| *** loq_mac has quit IRC | 14:35 | |
| *** mancdaz is now known as mancdaz_away | 14:35 | |
| *** gszasz has quit IRC | 14:35 | |
| *** rkukura has joined #openstack-dev | 14:35 | |
| *** johnthetubaguy1 is now known as johnthetubaguy | 14:35 | |
| *** jobewan has joined #openstack-dev | 14:35 | |
| *** dkranz has joined #openstack-dev | 14:36 | |
| *** ngoracke has joined #openstack-dev | 14:36 | |
| *** sumanth has quit IRC | 14:37 | |
| *** jdob has quit IRC | 14:38 | |
| *** stevemar has quit IRC | 14:42 | |
| *** radez_g0n3 is now known as radez | 14:43 | |
| *** mjbright_ has joined #openstack-dev | 14:43 | |
| *** stevemar has joined #openstack-dev | 14:44 | |
| *** amotoki_ has joined #openstack-dev | 14:44 | |
| *** carl_baldwin has joined #openstack-dev | 14:45 | |
| *** neeti has joined #openstack-dev | 14:47 | |
| *** jruzicka has joined #openstack-dev | 14:47 | |
| *** omachace has left #openstack-dev | 14:47 | |
| *** dolphm has quit IRC | 14:48 | |
| *** dolphm has joined #openstack-dev | 14:48 | |
| *** yaguang has joined #openstack-dev | 14:48 | |
| *** claytonc has joined #openstack-dev | 14:48 | |
| *** clayb has joined #openstack-dev | 14:48 | |
| *** loquacities has quit IRC | 14:49 | |
| *** sballe has joined #openstack-dev | 14:49 | |
| *** markmcclain has quit IRC | 14:49 | |
| *** mjbright_ has quit IRC | 14:49 | |
| *** loq_mac has joined #openstack-dev | 14:50 | |
| *** jruzicka is now known as jruzicka_wfh | 14:50 | |
| *** jdob has joined #openstack-dev | 14:51 | |
| *** basha has quit IRC | 14:52 | |
| *** dolphm has quit IRC | 14:53 | |
| *** mfer has joined #openstack-dev | 14:53 | |
| *** ayoung has joined #openstack-dev | 14:54 | |
| *** loq_mac has quit IRC | 14:56 | |
| *** fbo is now known as fbo_away | 14:56 | |
| *** jcoufal has quit IRC | 14:56 | |
| *** troytoman is now known as troytoman-away | 14:56 | |
| *** abramley has quit IRC | 14:56 | |
| *** aditirav has quit IRC | 14:57 | |
| *** lbragstad has joined #openstack-dev | 14:58 | |
| *** belmoreira has quit IRC | 14:58 | |
| *** basha has joined #openstack-dev | 14:58 | |
| *** nshaikh has left #openstack-dev | 14:59 | |
| *** loq_mac has joined #openstack-dev | 14:59 | |
| *** bswartz has joined #openstack-dev | 15:00 | |
| *** gargya has joined #openstack-dev | 15:00 | |
| *** dripton has joined #openstack-dev | 15:01 | |
| *** loq_mac has quit IRC | 15:02 | |
| *** sdake has quit IRC | 15:02 | |
| *** loq_mac has joined #openstack-dev | 15:03 | |
| *** sdake has joined #openstack-dev | 15:03 | |
| *** neeti has quit IRC | 15:04 | |
| *** e0ne has joined #openstack-dev | 15:04 | |
| *** dubsquared has joined #openstack-dev | 15:04 | |
| jpich | eglynn: Hello! We're chatting about https://bugs.launchpad.net/horizon/+bug/1249279 as a havana-backport-potential with amotoki_ | 15:05 |
| uvirtbot | Launchpad bug 1249279 in horizon "Resource Usage Page table views shows statistics in a wrong way" [Medium,Fix released] | 15:05 |
| *** samuelbercovici has quit IRC | 15:06 | |
| jpich | eglynn: It's about the removal of the misleading tables in the Horizon resource usage panel | 15:06 |
| *** rohitk has quit IRC | 15:06 | |
| *** aditirav has joined #openstack-dev | 15:06 | |
| jpich | eglynn: We believe it's a worthwhile backport, for reasons you're probably aware of (the data is wrong) however the patch is quite big | 15:07 |
| eglynn | jpich: yeah, l remember discussing with lsmola a while back | 15:07 |
| *** xqueralt has quit IRC | 15:07 | |
| jpich | eglynn: Do you foresee any issue with submitting it as backport it, with your stable-maint hat on? | 15:07 |
| *** loq_mac has quit IRC | 15:07 | |
| *** mjbright_ has joined #openstack-dev | 15:07 | |
| *** heyongli has quit IRC | 15:07 | |
| eglynn | jpich: looking at the patch now ... | 15:07 |
| *** e0ne has quit IRC | 15:09 | |
| eglynn | jpich: so it wouldn't be the largeness of the patch that's the potential issue here, as it's pretty much all deletions | 15:09 |
| *** Ryan_Lane has quit IRC | 15:09 | |
| eglynn | jpich: more the principal of removing a pre-existing "feature" on stable, right? | 15:09 |
| *** aron28 has quit IRC | 15:10 | |
| eglynn | jpich: that would be unconventional all right, but IIUC this "feature" is irretrievably broken | 15:10 |
| jpich | eglynn: The data is wrong, yeah... | 15:10 |
| eglynn | jpich: so in that sense, I would think removing something broken to that extent from stable would be valid | 15:11 |
| eglynn | jpich: ... as it does more damage that good in terms of confusing users, IIUC | 15:11 |
| jpich | eglynn: Ok! That makes sense. So we should submit it, and include this explanation in the comments | 15:12 |
| jpich | eglynn: That is my understanding | 15:12 |
| eglynn | jpich: cool, sounds like a plan :) | 15:12 |
| jpich | eglynn: Cheers! | 15:13 |
| *** alunduil has joined #openstack-dev | 15:13 | |
| *** afazekas has joined #openstack-dev | 15:13 | |
| *** diakunchikov_ has joined #openstack-dev | 15:13 | |
| *** Ryan_Lane has joined #openstack-dev | 15:14 | |
| *** Ryan_Lane has quit IRC | 15:15 | |
| *** yamahata_ has quit IRC | 15:17 | |
| *** yamahata_ has joined #openstack-dev | 15:17 | |
| *** topol has joined #openstack-dev | 15:17 | |
| *** xchu has quit IRC | 15:17 | |
| *** eharney has joined #openstack-dev | 15:18 | |
| *** FunnyLookinHat has quit IRC | 15:19 | |
| *** wwallnrr__ has quit IRC | 15:19 | |
| *** yolanda has quit IRC | 15:19 | |
| *** abramley has joined #openstack-dev | 15:20 | |
| *** avishayb has quit IRC | 15:20 | |
| *** Ryan_Lane has joined #openstack-dev | 15:21 | |
| *** xqueralt has joined #openstack-dev | 15:22 | |
| *** fbo_away is now known as fbo | 15:22 | |
| *** gargya has quit IRC | 15:22 | |
| *** carl_baldwin has quit IRC | 15:22 | |
| *** DeeJay1 has quit IRC | 15:23 | |
| *** sandy__ has quit IRC | 15:23 | |
| *** marun has quit IRC | 15:23 | |
| *** datsun180b has joined #openstack-dev | 15:23 | |
| *** aditirav_ has joined #openstack-dev | 15:24 | |
| *** aditirav has quit IRC | 15:25 | |
| *** aditirav_ is now known as aditirav | 15:25 | |
| *** devlaps has joined #openstack-dev | 15:26 | |
| *** tkammer has quit IRC | 15:26 | |
| *** e0ne has joined #openstack-dev | 15:27 | |
| *** jergerber has joined #openstack-dev | 15:27 | |
| *** avishayb has joined #openstack-dev | 15:27 | |
| *** shinylasers has quit IRC | 15:28 | |
| *** Ryan_Lane has quit IRC | 15:29 | |
| *** sridevi has joined #openstack-dev | 15:30 | |
| *** bvandenh has joined #openstack-dev | 15:30 | |
| *** mikeoutland has joined #openstack-dev | 15:30 | |
| *** xarg_ has quit IRC | 15:31 | |
| *** jgrimm has joined #openstack-dev | 15:31 | |
| *** xarg_ has joined #openstack-dev | 15:33 | |
| *** Shaan7 has joined #openstack-dev | 15:35 | |
| *** Shaan7 has quit IRC | 15:35 | |
| *** Shaan7 has joined #openstack-dev | 15:35 | |
| *** anniec has joined #openstack-dev | 15:35 | |
| *** sandy__ has joined #openstack-dev | 15:35 | |
| *** aditirav has quit IRC | 15:36 | |
| *** xqueralt has quit IRC | 15:37 | |
| *** anniec has quit IRC | 15:37 | |
| *** xqueralt has joined #openstack-dev | 15:38 | |
| *** rohitk has joined #openstack-dev | 15:38 | |
| *** sadasu has quit IRC | 15:38 | |
| *** yeylon__ has quit IRC | 15:39 | |
| *** carlp has joined #openstack-dev | 15:39 | |
| *** xarg_ has quit IRC | 15:39 | |
| *** haomaiwang has quit IRC | 15:43 | |
| *** sarob has joined #openstack-dev | 15:43 | |
| *** gordc has joined #openstack-dev | 15:44 | |
| *** KeithSharp has quit IRC | 15:47 | |
| *** nelsnelson has joined #openstack-dev | 15:47 | |
| *** samuelbercovici has joined #openstack-dev | 15:47 | |
| *** stevemar has quit IRC | 15:48 | |
| *** mancdaz_away is now known as mancdaz | 15:50 | |
| *** xarg_ has joined #openstack-dev | 15:51 | |
| *** jpomero has joined #openstack-dev | 15:51 | |
| *** KeithSharp has joined #openstack-dev | 15:51 | |
| *** stevemar has joined #openstack-dev | 15:53 | |
| *** yeylon__ has joined #openstack-dev | 15:53 | |
| *** SergeyLukjanov has quit IRC | 15:54 | |
| *** DinaBelova has quit IRC | 15:54 | |
| *** ctracey|away is now known as ctracey | 15:55 | |
| *** xarg__ has joined #openstack-dev | 15:57 | |
| *** xarg_ has quit IRC | 15:57 | |
| *** yaguang has quit IRC | 15:57 | |
| *** sridevi has quit IRC | 15:57 | |
| *** rcleere has joined #openstack-dev | 15:57 | |
| *** jcooley_ has joined #openstack-dev | 15:58 | |
| *** jprovazn has quit IRC | 15:58 | |
| *** willingc has joined #openstack-dev | 15:59 | |
| *** jcooley_ has quit IRC | 15:59 | |
| *** mikeoutland has quit IRC | 16:00 | |
| *** giroro_ has quit IRC | 16:01 | |
| *** rraja is now known as rraja|afk | 16:01 | |
| *** sthaha has quit IRC | 16:02 | |
| *** topol has quit IRC | 16:02 | |
| *** topol_ has joined #openstack-dev | 16:02 | |
| *** topol_ is now known as topol | 16:02 | |
| *** Ruetobas has joined #openstack-dev | 16:03 | |
| *** basha has quit IRC | 16:03 | |
| *** pabelanger has joined #openstack-dev | 16:03 | |
| *** amuller has quit IRC | 16:04 | |
| *** reidrac has quit IRC | 16:05 | |
| *** mlavalle has joined #openstack-dev | 16:05 | |
| *** mrodden has quit IRC | 16:05 | |
| *** AZBob has joined #openstack-dev | 16:05 | |
| *** jcooley_ has joined #openstack-dev | 16:06 | |
| sandy__ | markmc, any idea when oslo-incubator is cutting over to messaging? | 16:06 |
| *** rraja|afk has quit IRC | 16:06 | |
| markmc | sandy__, hmm, it won't | 16:06 |
| *** yamahata_ has quit IRC | 16:06 | |
| markmc | sandy__, it'll just be deleted from incubator | 16:06 |
| *** rnirmal has joined #openstack-dev | 16:06 | |
| sandy__ | markmc, but what about any notification calls that occur in incubator? | 16:07 |
| *** sergmelikyan has joined #openstack-dev | 16:07 | |
| *** carl_baldwin has joined #openstack-dev | 16:07 | |
| markmc | sandy__, like ? | 16:07 |
| sandy__ | markmc, I'm working on that request_id linkage branch we discussed at the summit. This will be a utility function in incubator. So incubator will need to call notifier. | 16:08 |
| *** Ruetobas has quit IRC | 16:08 | |
| sandy__ | markmc, arguably, I could pass in the notifier as a parameter | 16:08 |
| markmc | sandy__, ok, so something new then | 16:08 |
| markmc | sandy__, yeah, unclear how best to handle it ... but I suspect it's not a big deal | 16:09 |
| sandy__ | markmc, I'll have a look and see if any other code in incubator calls the notifier | 16:09 |
| markmc | sandy__, either support both methods or just oslo.messaging, maybe | 16:09 |
| *** rudrarugge has joined #openstack-dev | 16:09 | |
| *** FunnyLookinHat has joined #openstack-dev | 16:09 | |
| markmc | sandy__, the only other thing is the notifier middleware | 16:09 |
| sandy__ | markmc, middleware? | 16:09 |
| markmc | sandy__, openstack/common/middleware/notifier.py | 16:09 |
| markmc | sandy__, I don't know what it does, honestly, or whether anyone uses it | 16:10 |
| flaper87 | garyk: ping | 16:10 |
| jgriffith | ttx: for sure on tagging | 16:10 |
| *** AZBob has quit IRC | 16:10 | |
| flaper87 | sdague: ping | 16:11 |
| sandy__ | markmc, <looking> | 16:11 |
| *** boris-42 has quit IRC | 16:11 | |
| sandy__ | markmc, hmm, yeah, not sure about that one. Can't imagine wanting to turn it on in production. | 16:12 |
| *** jprovazn has joined #openstack-dev | 16:12 | |
| sandy__ | markmc, how about I pass in the notifier as a parameter? | 16:12 |
| *** herndon has joined #openstack-dev | 16:12 | |
| *** jcooley_ has quit IRC | 16:12 | |
| sandy__ | markmc, I think the notify() signature is the same across libraries | 16:13 |
| markmc | sandy__, there is no notify() in oslo.messaging | 16:13 |
| *** jcooley_ has joined #openstack-dev | 16:13 | |
| markmc | sandy__, there is a _notify() :) | 16:13 |
| *** Ruetobas has joined #openstack-dev | 16:13 | |
| *** ifarkas has quit IRC | 16:14 | |
| markmc | sandy__, i.e. it's warn(), info(), error(), etc. | 16:14 |
| *** paragan has quit IRC | 16:14 | |
| sandy__ | markmc, ah, crap ... right. | 16:14 |
| *** thelorax123 has quit IRC | 16:14 | |
| *** rossella_s has quit IRC | 16:15 | |
| *** max_lobur is now known as max_lobur_afk | 16:15 | |
| sandy__ | markmc, perhaps that's the change I should make to incubator to make the transition easier? | 16:15 |
| *** pabelanger has quit IRC | 16:15 | |
| sandy__ | markmc, add those helper methods to notifier.api | 16:15 |
| *** thelorax123 has joined #openstack-dev | 16:16 | |
| *** csaba is now known as csaba|afk | 16:16 | |
| *** basha has joined #openstack-dev | 16:16 | |
| *** e0ne_ has joined #openstack-dev | 16:17 | |
| *** e0ne has quit IRC | 16:17 | |
| *** mdenny has joined #openstack-dev | 16:17 | |
| markmc | sandy__, I did this for the RPC side: https://review.openstack.org/#/c/39929/69/nova/rpcclient.py | 16:17 |
| sdague | flaper87: pong | 16:17 |
| markmc | sandy__, i.e. added an oslo.messaging shim over the incubator code to Nova and ported everything to do that first | 16:17 |
| *** changbl has joined #openstack-dev | 16:17 | |
| markmc | sandy__, then the final port to oslo.messaging just removes that | 16:17 |
| markmc | sandy__, maybe worthwhile here, but I found the notifications call trivial to port so maybe not worth it | 16:18 |
| *** jcooley_ has quit IRC | 16:18 | |
| *** mgagne1 is now known as mgagne | 16:18 | |
| *** gordc has quit IRC | 16:18 | |
| flaper87 | sdague: hey, I hate to do this but, when you get a chance, could you take a look here? https://review.openstack.org/#/c/47999/ | 16:18 |
| flaper87 | sdague: Dean already blessed it | 16:18 |
| flaper87 | thing is we need it for marconi, tempest and gate | 16:18 |
| flaper87 | thanks in advance | 16:19 |
| sdague | flaper87: sure, lgtm | 16:19 |
| sdague | though 8888 seems like an odd port choice | 16:19 |
| flaper87 | sdague: awesome, thanks a lot! | 16:20 |
| shardy | ayoung: Hi | 16:20 |
| flaper87 | sdague: yeah, I was considering chaning it | 16:20 |
| flaper87 | sdague: I'll update devstack as soon as we do that | 16:20 |
| flaper87 | sdague: thanks again! | 16:20 |
| *** mrodden has joined #openstack-dev | 16:20 | |
| giulivo | flaper87, I noticed this in the rpms deps "selinux-policy-targeted" ? | 16:21 |
| sandy__ | markmc, I could pass in the notifier and be clever about calling .error/.info()/etc vs .notify() with getattr() check? Seems clunky though. | 16:21 |
| sandy__ | markmc, once we have messaging adoption we can remove that check. | 16:22 |
| *** galstrom_zzz is now known as galstrom | 16:22 | |
| sandy__ | markmc, I'm assuming the plan is that there is no messaging library usage in incubator at all? | 16:22 |
| markmc | sandy__, if code in incubator needs to do messaging, it should use oslo.messaging | 16:23 |
| *** akrivoka has quit IRC | 16:23 | |
| *** samuelqueiroz has quit IRC | 16:23 | |
| markmc | sandy__, how about this ... provide a base API which takes a notify callable | 16:23 |
| *** alex_klimov1 has quit IRC | 16:23 | |
| markmc | sandy__, and provide an implementation which supplies a callable that uses oslo.messaging | 16:23 |
| markmc | sandy__, if projects need to use the base API with the incubator notifier code, they can pass an alternative callable | 16:24 |
| markmc | sandy__, or do it the other way around, I don't really mind | 16:24 |
| *** ndipanov has quit IRC | 16:24 | |
| markmc | sandy__, later, we just refactor away the old stuff and just have the oslo.messaging version | 16:24 |
| sandy__ | markmc, yeah, essentially the same thing. K ... will do. Thanks for the feedback. | 16:25 |
| markmc | sandy__, np | 16:25 |
| *** AZBob has joined #openstack-dev | 16:25 | |
| *** stevemar has quit IRC | 16:26 | |
| *** xarg__ has quit IRC | 16:27 | |
| sdague | bnemec: https://review.openstack.org/#/c/60274/1 - I'm sure there are plenty of problems there, but it's at least a start of talking about this in code instead of ML english | 16:27 |
| *** matiu has quit IRC | 16:27 | |
| *** pabelanger has joined #openstack-dev | 16:28 | |
| *** xarg_ has joined #openstack-dev | 16:29 | |
| *** yeylon__ has quit IRC | 16:30 | |
| *** che-arne has joined #openstack-dev | 16:30 | |
| *** SergeyLukjanov has joined #openstack-dev | 16:30 | |
| *** tdruiva has quit IRC | 16:31 | |
| *** colinmcnamara has joined #openstack-dev | 16:31 | |
| *** colinmcn_ has joined #openstack-dev | 16:31 | |
| *** SergeyLukjanov is now known as _SergeyLukjanov | 16:31 | |
| *** _SergeyLukjanov is now known as SergeyLukjanov | 16:31 | |
| *** basha has quit IRC | 16:31 | |
| *** mdbooth has quit IRC | 16:31 | |
| *** tdruiva has joined #openstack-dev | 16:31 | |
| *** bdpayne has joined #openstack-dev | 16:32 | |
| *** basha has joined #openstack-dev | 16:32 | |
| *** SergeyLukjanov is now known as _SergeyLukjanov | 16:32 | |
| *** _SergeyLukjanov is now known as SergeyLukjanov | 16:33 | |
| *** gordc has joined #openstack-dev | 16:33 | |
| *** dolphm has joined #openstack-dev | 16:34 | |
| *** basha has quit IRC | 16:34 | |
| *** colinmcn_ is now known as colinmcnamara_ | 16:35 | |
| bnemec | sdague: Cool. I think we have some logging test cases elsewhere in Oslo that could be modified for this. | 16:35 |
| *** tdruiva has quit IRC | 16:35 | |
| *** bswartz has quit IRC | 16:35 | |
| *** rohitk has quit IRC | 16:35 | |
| *** mindpixeler has joined #openstack-dev | 16:36 | |
| *** basha has joined #openstack-dev | 16:36 | |
| sdague | bnemec: cool | 16:37 |
| *** basha has quit IRC | 16:37 | |
| *** rongze_ has quit IRC | 16:37 | |
| *** mindpixel has quit IRC | 16:38 | |
| sdague | ok, my pep8 screw up is fixed as well. so review comments / flames appreciated | 16:39 |
| *** alunduil has quit IRC | 16:41 | |
| *** pete5 has joined #openstack-dev | 16:43 | |
| *** SumitNaiksatam has quit IRC | 16:43 | |
| *** litong has quit IRC | 16:44 | |
| garyk | dims: ping | 16:44 |
| *** venkatesh has quit IRC | 16:44 | |
| *** litong has joined #openstack-dev | 16:44 | |
| *** bauzas has quit IRC | 16:45 | |
| AZBob | Hi, question... I have a need to add attributes to hosts in nova for linking to some other stuff (basically, can be thought of as a foreign key) for the purpose of displaying some extra information in horizon... I was wondering what's the best way to add the attribute to the host... add a column to compute_nodes in the nova database, possibly add a key/value pair to the compute_node_stats table (less intrusive), or something else poss | 16:45 |
| AZBob | ibly? | 16:45 |
| *** litong has quit IRC | 16:46 | |
| *** litong has joined #openstack-dev | 16:46 | |
| *** JonnyNomad has quit IRC | 16:47 | |
| *** Alexei_987 has quit IRC | 16:47 | |
| sdague | SpamapS: actually - https://review.openstack.org/#/c/60274/ would be good for your feedback as well (not sure if you usually watch olso patches) as you had some of the most concrete commentary on the ML thread | 16:48 |
| *** ndipanov has joined #openstack-dev | 16:49 | |
| *** rohitk has joined #openstack-dev | 16:49 | |
| *** corXi has quit IRC | 16:51 | |
| *** Shaan7 has quit IRC | 16:51 | |
| *** jcooley_ has joined #openstack-dev | 16:51 | |
| SpamapS | sdague: I dont' watch them so will take a peek now, thanks for the heads up. | 16:51 |
| *** rossella_s has joined #openstack-dev | 16:52 | |
| *** Shaan7 has joined #openstack-dev | 16:52 | |
| *** xqueralt has quit IRC | 16:52 | |
| *** devoid has joined #openstack-dev | 16:52 | |
| *** nelsnelson has quit IRC | 16:53 | |
| *** abk has quit IRC | 16:53 | |
| *** jcooley_ has quit IRC | 16:54 | |
| *** jcooley_ has joined #openstack-dev | 16:55 | |
| dims | garyk, pong | 16:55 |
| *** devoid has left #openstack-dev | 16:55 | |
| *** dolphm has quit IRC | 16:55 | |
| *** mjbright_ has quit IRC | 16:56 | |
| *** jcooley_ has quit IRC | 16:57 | |
| *** athomas has quit IRC | 16:57 | |
| *** jcooley_ has joined #openstack-dev | 16:57 | |
| *** avishayb has quit IRC | 16:58 | |
| *** marekd-mobile has joined #openstack-dev | 16:58 | |
| *** iartarisi has quit IRC | 16:59 | |
| *** samuelbercovici has quit IRC | 17:00 | |
| *** andreaf has quit IRC | 17:00 | |
| *** stevemar has joined #openstack-dev | 17:00 | |
| *** andreaf has joined #openstack-dev | 17:01 | |
| *** fbo is now known as fbo_away | 17:01 | |
| *** jcooley_ has quit IRC | 17:02 | |
| *** gyee has joined #openstack-dev | 17:03 | |
| *** evgeny_fedoruk_ has quit IRC | 17:03 | |
| *** SumitNaiksatam has joined #openstack-dev | 17:04 | |
| *** athomas has joined #openstack-dev | 17:04 | |
| *** rnirmal has quit IRC | 17:05 | |
| *** marekd-mobile has quit IRC | 17:05 | |
| *** rnirmal has joined #openstack-dev | 17:05 | |
| *** jcooley_ has joined #openstack-dev | 17:06 | |
| *** markmc has quit IRC | 17:06 | |
| *** ngoracke has quit IRC | 17:07 | |
| ayoung | shardy, hey... | 17:07 |
| ayoung | Beebn in design discussions all morning, just sat down | 17:07 |
| shardy | ayoung: Hi, wanted to ask some questions re bug 1245590 | 17:08 |
| uvirtbot | Launchpad bug 1245590 in keystone "List Trusts generates HTTP Error 500 " [Medium,Confirmed] https://launchpad.net/bugs/1245590 | 17:08 |
| *** rraja|afk has joined #openstack-dev | 17:08 | |
| *** dolphm has joined #openstack-dev | 17:08 | |
| ayoung | shardy, on my short list....let me pull it up | 17:08 |
| shardy | ayoung: Been digging a little while trying to revive the trusts tempest tests | 17:08 |
| *** rudrarugge has quit IRC | 17:08 | |
| shardy | ayoung: I have a patch which just removes the roles from the list_trusts reponse, which makes it align with the docs | 17:09 |
| ayoung | shardy, that is probably sufficient | 17:09 |
| shardy | ayoung: But I then noticed we return expires_at in all GET's, but not the docs | 17:09 |
| *** krtaylor has quit IRC | 17:09 | |
| ayoung | expires_at was added later, IIRC | 17:09 |
| ayoung | so that should be a doc bug | 17:09 |
| ayoung | shardy, post your patch. | 17:10 |
| *** CaptTofu has quit IRC | 17:10 | |
| shardy | Ok, so remove roles from the summary list to align with docs, then align docs with expires elsewhere | 17:10 |
| ayoung | shardy, I'm going to have to fix some Heat bugs in a quid-pro-quo, aren't I? | 17:10 |
| ayoung | thansk for yo7ur work | 17:10 |
| *** CaptTofu has joined #openstack-dev | 17:10 | |
| shardy | ayoung: Haha, yeah! :D | 17:10 |
| ayoung | shardy, +1 | 17:10 |
| *** jswarren has joined #openstack-dev | 17:10 | |
| *** mindpixeler has quit IRC | 17:10 | |
| *** jswarren has quit IRC | 17:11 | |
| *** jmontemayor has joined #openstack-dev | 17:11 | |
| *** angdraug has joined #openstack-dev | 17:11 | |
| *** dolphm has quit IRC | 17:11 | |
| *** CaptTofu has quit IRC | 17:12 | |
| *** CaptTofu has joined #openstack-dev | 17:12 | |
| *** jswarren has joined #openstack-dev | 17:12 | |
| *** danpb has quit IRC | 17:14 | |
| *** rohitk has quit IRC | 17:14 | |
| *** shinylasers has joined #openstack-dev | 17:15 | |
| *** pmcg has quit IRC | 17:15 | |
| *** shinylasers has quit IRC | 17:15 | |
| *** pmcg has joined #openstack-dev | 17:16 | |
| *** bswartz has joined #openstack-dev | 17:18 | |
| *** martyntaylor has quit IRC | 17:18 | |
| *** ndipanov has quit IRC | 17:18 | |
| *** dolphm has joined #openstack-dev | 17:19 | |
| *** zaitcev has joined #openstack-dev | 17:20 | |
| *** exed has quit IRC | 17:20 | |
| *** mrunge has quit IRC | 17:20 | |
| *** mikeoutland has joined #openstack-dev | 17:21 | |
| *** teran has quit IRC | 17:22 | |
| *** ngoracke has joined #openstack-dev | 17:23 | |
| *** gradFuss has joined #openstack-dev | 17:24 | |
| *** armax has joined #openstack-dev | 17:24 | |
| *** armax has quit IRC | 17:25 | |
| *** johnthetubaguy has quit IRC | 17:26 | |
| *** garyk has quit IRC | 17:26 | |
| *** e0ne_ has quit IRC | 17:26 | |
| *** chandankumar has quit IRC | 17:26 | |
| *** rohitk has joined #openstack-dev | 17:27 | |
| *** armax has joined #openstack-dev | 17:27 | |
| *** neelashah has quit IRC | 17:27 | |
| *** twoputt_ has joined #openstack-dev | 17:27 | |
| *** twoputt__ has joined #openstack-dev | 17:27 | |
| *** armax has quit IRC | 17:28 | |
| *** armax has joined #openstack-dev | 17:28 | |
| *** Mandell has quit IRC | 17:28 | |
| *** Mandell has joined #openstack-dev | 17:29 | |
| *** aburaschi has left #openstack-dev | 17:29 | |
| *** nelsnelson has joined #openstack-dev | 17:30 | |
| SpamapS | sdague: I shared my bah-humbug on https://review.openstack.org/#/c/60274/ .. I hope my position isn't too scroogey. ;) | 17:30 |
| *** e0ne_ has joined #openstack-dev | 17:31 | |
| *** jtomasek has quit IRC | 17:31 | |
| *** armax has quit IRC | 17:32 | |
| *** jmontemayor has quit IRC | 17:32 | |
| *** jruzicka_wfh has quit IRC | 17:32 | |
| *** rcleere has quit IRC | 17:32 | |
| *** neelashah has joined #openstack-dev | 17:33 | |
| *** rcleere has joined #openstack-dev | 17:33 | |
| *** Mandell has quit IRC | 17:33 | |
| *** xarses has quit IRC | 17:33 | |
| *** armax has joined #openstack-dev | 17:34 | |
| *** dolphm has quit IRC | 17:34 | |
| *** armax has quit IRC | 17:34 | |
| *** armax has joined #openstack-dev | 17:34 | |
| sdague | SpamapS: appreciated | 17:34 |
| sdague | it seems like there are lots of other DOS problems | 17:34 |
| *** gradFuss has left #openstack-dev | 17:35 | |
| sdague | if there are malicious users on your box | 17:35 |
| morganfainberg | tellesnobrega, pong | 17:35 |
| *** mikeoutland has quit IRC | 17:35 | |
| morganfainberg | nkinder, i'll add you as well :) | 17:35 |
| *** mancdaz is now known as mancdaz_away | 17:35 | |
| tellesnobrega | morganfainberg: hi, i was talking yesterday with ayoung and dolphm about domain-specific-backend using ldap | 17:36 |
| morganfainberg | tellesnobrega, yes | 17:36 |
| ayoung | morganfainberg, I told him he needed to help you | 17:36 |
| morganfainberg | tellesnobrega, sorry for the delay in response, US West Coast here so it's just now 0930. | 17:36 |
| ayoung | your dom specific backend fix would need to be rebased, and it should be done after your KVS swork | 17:36 |
| ayoung | rework | 17:36 |
| morganfainberg | ayoung, tellesnobrega, awesome. i am sure i can use the help. the patchset has been languishing. | 17:36 |
| morganfainberg | ayoung, yeah. it needs a lot of work to be rebased now i think. | 17:37 |
| *** raildo has joined #openstack-dev | 17:37 | |
| tellesnobrega | morganfainberg: i need now to write a document to state the status of this, can you help me out on this? | 17:38 |
| *** exed has joined #openstack-dev | 17:38 | |
| morganfainberg | tellesnobrega, sure what information do you need? | 17:38 |
| *** markwash has quit IRC | 17:38 | |
| SpamapS | sdague: totally agree! However, we should not make them trivial. | 17:38 |
| sdague | while(fork()) | 17:39 |
| sdague | :) | 17:39 |
| SpamapS | sdague: look at how both apparmor and SELinux have to treat /tmp .. its like "f that, its the wild west". :-( | 17:39 |
| SpamapS | sdague: strict ulimits handle that nicely | 17:39 |
| *** sarob has quit IRC | 17:39 | |
| tellesnobrega | morganfainberg: i hope that i can help with implementation, but for now i need to write this down. I would like to know, how much is left to implement, how complicated it is, how long would it take to get this working | 17:39 |
| sdague | SpamapS: io attacks? | 17:40 |
| SpamapS | don't even need a KSM for forkbomb prevention | 17:40 |
| *** sarob has joined #openstack-dev | 17:40 | |
| morganfainberg | tellesnobrega, https://review.openstack.org/#/c/45649/ this is the review I was working on | 17:40 |
| *** marekd is now known as marekd|away | 17:41 | |
| SpamapS | sdague: anything that shows up as high load is less of a problem because systems will be out of tolerances. | 17:41 |
| tellesnobrega | morganfainberg: thanks | 17:41 |
| morganfainberg | tellesnobrega, basically, there are a lot of cases that don't take into account the multiple-domain backends. Basically, we need to make it all 100% aware | 17:41 |
| morganfainberg | there are some edge cases still to address even with that patchset, notably issues with non-unique user_ids. | 17:41 |
| *** jistr has quit IRC | 17:41 | |
| sdague | SpamapS: ok, fair. We could also reduce the exposure if we did a lock file check on permissions, that would still be a race, but a little one | 17:42 |
| SpamapS | sdague: also the idea is to isolate users and processes so that automation and/or operations can react efficiently, not necessarily to prevent all problems. | 17:42 |
| *** armax has quit IRC | 17:42 | |
| morganfainberg | basically, we have no way to 100% guarantee that we know what domain a user_id comes from by looking up the user (in all cases) | 17:42 |
| SpamapS | sdague: If these locks are never meant to be used by two different _users_ then ownership checks would be 100% sufficient. | 17:42 |
| morganfainberg | tellesnobrega, it is _mostly_ solved with that patchset, but it still doesn't allow for assignment to cross domains cleanly outside of the default domain | 17:42 |
| tellesnobrega | morganfainberg: i see | 17:43 |
| *** armax has joined #openstack-dev | 17:43 | |
| SpamapS | sdague: heck, if this is single user, just use semaphore locking. | 17:43 |
| sdague | SpamapS: yeh, I don't know | 17:43 |
| morganfainberg | tellesnobrega, likely that patchset needs to be split up into a couple distinct fixes: 1) consistent use of domain lookup for user reference, 2) implement mechanism to always know domain from user info (usernames are not globally unique, and user_ids should be, but it isn't enforced in that patchset) | 17:43 |
| morganfainberg | tellesnobrega, 3) general cleanup to make the multiple domain stuff easier to understand from a code perspective | 17:44 |
| *** sarob has quit IRC | 17:44 | |
| morganfainberg | tellesnobrega, also that patchset was prior to identity / assignment proxy cleanup. | 17:45 |
| SpamapS | sdague: http://docs.python.org/2/library/multiprocessing.html would work as a default no-filesystem-necessary method for single user locks. | 17:45 |
| tellesnobrega | morganfainberg: looks like there is quite a bit of work to get it working | 17:45 |
| sdague | SpamapS: I wonder why that wasn't pursued before | 17:46 |
| sdague | honestly, it was the reason for the ML thread, because I didn't have all the context | 17:46 |
| *** devoid has joined #openstack-dev | 17:46 | |
| morganfainberg | tellesnobrega, yes, and it needs much more testing. the testing has some gaps at the moment. | 17:46 |
| SpamapS | sdague: perhaps there are multi-user concerns | 17:47 |
| *** jcooley_ has quit IRC | 17:47 | |
| sdague | SpamapS: yeh, there might be | 17:47 |
| *** anniec has joined #openstack-dev | 17:47 | |
| *** pmathews has joined #openstack-dev | 17:48 | |
| *** jcooley_ has joined #openstack-dev | 17:48 | |
| SpamapS | sdague: the library should just expose all the methods. "Filesystem allows multi-user. Semaphore is single-user. Windows is f***ed anyway so why would you even care?...." and let users choose | 17:48 |
| SpamapS | oh whoops did I forget the filter again? | 17:48 |
| sdague | heh | 17:49 |
| *** armax has quit IRC | 17:49 | |
| *** sarob has joined #openstack-dev | 17:49 | |
| *** armax has joined #openstack-dev | 17:49 | |
| *** holms has joined #openstack-dev | 17:50 | |
| *** krtaylor has joined #openstack-dev | 17:50 | |
| holms | guys and ladies, is there's a page for openstack images like this? http://www.vagrantbox.es/ | 17:50 |
| *** galstrom is now known as galstrom_zzz | 17:50 | |
| holms | because I'll probably gonna start one.. every instruction ive found for debian or centos just doesn't work out of th ebox | 17:51 |
| *** jcooley_ has quit IRC | 17:52 | |
| *** abk has joined #openstack-dev | 17:53 | |
| *** garyk has joined #openstack-dev | 17:54 | |
| *** isd has joined #openstack-dev | 17:54 | |
| *** rudrarugge has joined #openstack-dev | 17:55 | |
| *** pmathews has quit IRC | 17:56 | |
| morganfainberg | tellesnobrega, let me know if you need any more detailed information | 17:56 |
| *** jcooley_ has joined #openstack-dev | 17:56 | |
| tellesnobrega | morganfainberg: i will, im just writing some of this conversation down | 17:56 |
| morganfainberg | tellesnobrega, sure thing | 17:56 |
| SpamapS | sdague: I left some feedback there. I think users should be allowed to weigh in. | 17:57 |
| sdague | yep | 17:57 |
| *** sarob has quit IRC | 17:57 | |
| *** sarob has joined #openstack-dev | 17:58 | |
| *** ArxCruz has quit IRC | 17:59 | |
| *** xarses has joined #openstack-dev | 18:00 | |
| *** hemnafk is now known as hemna | 18:00 | |
| *** pablosan has joined #openstack-dev | 18:00 | |
| *** teran has joined #openstack-dev | 18:00 | |
| *** pmathews has joined #openstack-dev | 18:01 | |
| *** mlavalle has quit IRC | 18:02 | |
| *** nati_ueno has joined #openstack-dev | 18:02 | |
| *** sarob has quit IRC | 18:02 | |
| shardy | ayoung: https://review.openstack.org/#/c/60301/ | 18:02 |
| *** rossella_s has quit IRC | 18:03 | |
| *** reed has joined #openstack-dev | 18:03 | |
| *** mlavalle has joined #openstack-dev | 18:04 | |
| *** basha has joined #openstack-dev | 18:05 | |
| *** byeager has quit IRC | 18:06 | |
| *** lbragstad has quit IRC | 18:06 | |
| dsantos_ | hi I'm trying to run glance with ssl but I'm getting an error. I found this bug https://bugs.launchpad.net/python-glanceclient/+bug/1160520 but it doesn't seems to be fixed. The error that I got is "not all arguments converted during string formatting". Does someone know how can I fix this? | 18:07 |
| uvirtbot | Launchpad bug 1160520 in python-glanceclient "Misleading error message when OS_CACERT is set incorrectly" [Undecided,In progress] | 18:07 |
| *** basha has quit IRC | 18:08 | |
| *** jobewan has quit IRC | 18:09 | |
| *** colinmcnamara has quit IRC | 18:10 | |
| *** colinmcnamara_ has quit IRC | 18:10 | |
| morganfainberg | ayoung, posting an update to the keyvaluestore refactor shortly, split out the security-strategy stuff into it's own patchset since we can then get more security minded folks to look at that specifically (and it reduces line count by a couple hundred making the review a little easier to swallow) | 18:10 |
| ayoung | morganfainberg, ++ | 18:10 |
| morganfainberg | ayoung, hopefully i'll have the example token backend stuff up today as well | 18:10 |
| *** derekh has quit IRC | 18:10 | |
| ayoung | good | 18:11 |
| *** ArxCruz has joined #openstack-dev | 18:11 | |
| *** mmagr has quit IRC | 18:11 | |
| *** markwash has joined #openstack-dev | 18:12 | |
| *** bashok has joined #openstack-dev | 18:12 | |
| *** harlowja has joined #openstack-dev | 18:14 | |
| *** sushils has quit IRC | 18:15 | |
| arosen | nati_ueno: can you checkout https://review.openstack.org/#/c/57670/ again. I had replied to your comments. | 18:15 |
| nati_ueno | arosen: sure | 18:15 |
| tellesnobrega | morganfainberg: about domain management using LDAP, how will it work, the idea is to have one ldap server for each domain right? | 18:16 |
| morganfainberg | tellesnobrega, that is acceptable to do. though you still will need a "default domain" | 18:16 |
| *** colinmcnamara has joined #openstack-dev | 18:16 | |
| *** rraja|afk has quit IRC | 18:17 | |
| *** colinmcn_ has joined #openstack-dev | 18:17 | |
| tellesnobrega | morganfainberg: i see | 18:17 |
| *** lbragstad has joined #openstack-dev | 18:17 | |
| morganfainberg | tellesnobrega, in the current implementation that is. perhaps the pre-step is to remove the "Default domain" concept [except the V2-isms that need it] but use it as a compatibility not a core feature of V3 (this might break API compat though, so it might be a non-starter) | 18:18 |
| morganfainberg | ayoung, ^ | 18:18 |
| ayoung | tellesnobrega, morganfainberg Henrynash explained it like this: | 18:18 |
| ayoung | you will install Keystone, and put all of the service users in SQL | 18:18 |
| ayoung | then you will mount each of the LDAP domain explicitly on top of that | 18:19 |
| *** shardy is now known as shardy_afk | 18:19 | |
| ayoung | do default should likely be SQL | 18:19 |
| *** pablosan has quit IRC | 18:19 | |
| ayoung | and LDAP is used read only on explicitly named domains | 18:19 |
| *** rohitk has quit IRC | 18:20 | |
| morganfainberg | ayoung, that has always been my plan. ideally i'd like multiple SQL stores (strictly internal usecase) but same net effect | 18:21 |
| morganfainberg | ayoung, but if it is possible to be rid (in v3) of the 'default domain', that could make it easier to enforce the user/domain link everywhere | 18:22 |
| *** yolanda has joined #openstack-dev | 18:22 | |
| *** galstrom_zzz is now known as galstrom | 18:22 | |
| morganfainberg | ayoung, but i get the feeling that default domain removal would break api compat and require a V4, which i _really_ don't want. | 18:22 |
| ayoung | morganfainberg, lets just get to multiple LDAPs working with explicit domains, asnd keep default for a while | 18:23 |
| morganfainberg | ayoung, fair enough. | 18:23 |
| ayoung | I think unuique userids is possible with a little magic in the ID backend | 18:23 |
| *** rdas has joined #openstack-dev | 18:23 | |
| ayoung | we make it possible to prepend a namespace on the userid | 18:24 |
| morganfainberg | ayoung, so we need to enforce the unique id separately. yes, some magic would be good on that front | 18:24 |
| ayoung | so dom1:ayoung vs dom2:ayoung | 18:24 |
| ayoung | then LDAP just uses the part after the : | 18:24 |
| morganfainberg | ayoung, uuids all the way down! /s | 18:24 |
| morganfainberg | i mean turtles | 18:24 |
| *** neelashah has quit IRC | 18:24 | |
| morganfainberg | yeah i think that is fine, we will need to increase the SQL column sizes in assignment, but that is no big deal | 18:25 |
| ayoung | morganfainberg, well, uids in LDAP might be smaller than uuids | 18:25 |
| ayoung | morganfainberg, say uid is the users numeric posix id, it could be d1:5600 | 18:26 |
| morganfainberg | ayoung, right now, i _think_ we have an artificially small user_id column in assignment... i might be wrong | 18:26 |
| ayoung | morganfainberg, the question is not "what domain is this in" but rather "what store do I look for this in ... minor difference | 18:26 |
| morganfainberg | just to support <dom>:<uid> we might need to increase that | 18:26 |
| ayoung | but it means that everything without a prefex can assume to be in SQL | 18:27 |
| morganfainberg | ayoung, yep. | 18:27 |
| *** bashok has quit IRC | 18:27 | |
| morganfainberg | ayoung, sounds good | 18:28 |
| *** bswartz has quit IRC | 18:28 | |
| morganfainberg | ayoung, so that means user_id would need to be domain pre-pended if used to auth | 18:28 |
| morganfainberg | ? | 18:28 |
| morganfainberg | or would we go with the user_id@domain mechanism | 18:28 |
| ayoung | morganfainberg, howabout we don't call it domain...IdP | 18:28 |
| *** sarob has joined #openstack-dev | 18:28 | |
| morganfainberg | ayoung, haha, fine. | 18:28 |
| ayoung | idpid:uid | 18:28 |
| ayoung | morganfainberg, well, keystone is an IdP | 18:28 |
| morganfainberg | ayoung, same issue with usernames | 18:28 |
| ayoung | so the default IdP is SQL | 18:29 |
| ayoung | and then we say: no : in userids | 18:29 |
| morganfainberg | ayoung, since usernames are not globally unique | 18:29 |
| *** devoid has left #openstack-dev | 18:29 | |
| ayoung | username with no domain name or id implies it is in the default domain. | 18:30 |
| *** nelsnels_ has joined #openstack-dev | 18:30 | |
| morganfainberg | and which mechanism for specifying idp do you think is right? idpid:username? idpname:username username@idpid, username@idpname? | 18:30 |
| ayoung | so for authenticate, I think we are good. We might need to explicitly clarify some cases in the identity docs | 18:30 |
| morganfainberg | ayoung, just rely on passing the domain field in? | 18:31 |
| ayoung | morganfainberg, for authenticate etc, yes | 18:31 |
| morganfainberg | ayoung, ok | 18:31 |
| morganfainberg | ayoung, i am on board with that. | 18:31 |
| ayoung | get user_id from user_name type uses | 18:31 |
| morganfainberg | makes it easy, and we already have prior art for that. | 18:31 |
| morganfainberg | tellesnobrega, ^ (if you weren't tracking this conversation) | 18:32 |
| *** sarob has quit IRC | 18:33 | |
| *** nelsnelson has quit IRC | 18:33 | |
| isd | Is there a way to get devstack to launch multiple instances of the same service? (e.g. two cinders) | 18:33 |
| morganfainberg | ok, so simple: username -> user_id requires domain specification (unless default domain), user_id non-prefixed with IdPid is a default idp/domain user, otherwise use the correct idp to lookup the user. | 18:33 |
| morganfainberg | ayoung, i think that will make things a lot easier to chase down/fix. | 18:33 |
| ayoung | morganfainberg, ++ | 18:33 |
| ayoung | morganfainberg, and we add an addtional configt option: idp_prefix | 18:34 |
| ayoung | it will go in the domain specific file | 18:34 |
| tellesnobrega | morganfainberg: im following, | 18:34 |
| *** melwitt has joined #openstack-dev | 18:34 | |
| morganfainberg | ayoung, actually, i am thinking we should move away from the specific on-disk configs | 18:34 |
| morganfainberg | ayoung, move it into something that can be configured via API | 18:35 |
| *** dkranz has quit IRC | 18:35 | |
| ayoung | morganfainberg, well, we have them into a half-assed state. Lets get them to work first | 18:35 |
| morganfainberg | since we're already making some sizable changes. | 18:35 |
| *** willingc has quit IRC | 18:35 | |
| ayoung | I think we are going to want to keep them for LDAP, but not necessarily for Federation | 18:35 |
| *** belmoreira has joined #openstack-dev | 18:35 | |
| morganfainberg | ayoung, i meant once we have it working, make that step 4? | 18:35 |
| *** e0ne has joined #openstack-dev | 18:35 | |
| ayoung | right after profit. | 18:35 |
| *** belmoreira has left #openstack-dev | 18:35 | |
| morganfainberg | ayoung, hm. reasoning for using on-disk for LDAP vs something internally stored with keystone? security? | 18:36 |
| ayoung | yeah..plus the complexity of the configuration information compared with SAML type stuff | 18:36 |
| *** dkranz has joined #openstack-dev | 18:36 | |
| morganfainberg | ah. true | 18:36 |
| ayoung | with SAML, you get the attributes as a fait-accompli, but with LDAP we need to provide guidance "here is how you find what you need" | 18:36 |
| *** e0ne has quit IRC | 18:37 | |
| morganfainberg | also, thinking about it, there are some alligators/landmines with consistent ids if you run multiple keystones (not httpd, truely multiple ones say on separate hosts) | 18:37 |
| morganfainberg | and portability. | 18:37 |
| *** e0ne has joined #openstack-dev | 18:37 | |
| *** byeager has joined #openstack-dev | 18:37 | |
| ayoung | yep. | 18:37 |
| *** athomas has quit IRC | 18:38 | |
| morganfainberg | ayoung, i was thinking that it might-be doable with some schema magic, but ... it gets a bit ugly | 18:38 |
| morganfainberg | s/schema/json schema or similar | 18:38 |
| morganfainberg | xml <shudder> | 18:38 |
| ayoung | um...lets talk about that at the next design summit. I'm not there yet | 18:38 |
| *** e0ne__ has joined #openstack-dev | 18:38 | |
| *** byeager has quit IRC | 18:38 | |
| *** byeager has joined #openstack-dev | 18:38 | |
| morganfainberg | ayoung, lol no no, i'm convinced on-disk configuration. | 18:38 |
| *** e0ne has quit IRC | 18:39 | |
| morganfainberg | ayoung, i am going to try and hard-break the need to pre-configure the domain in assignment to load it in identity though. | 18:39 |
| *** krotscheck has joined #openstack-dev | 18:39 | |
| morganfainberg | something a bit more friendly to the deployer | 18:39 |
| *** e0ne_ has quit IRC | 18:39 | |
| ayoung | morganfainberg, just keep the critical path clear on the multidomain stuff. We don't have a lot of time. | 18:40 |
| ayoung | I2 will be here fast. | 18:40 |
| morganfainberg | ayoung, i was thinking a config option that says "load these configs" | 18:40 |
| *** pmathews1 has joined #openstack-dev | 18:40 | |
| morganfainberg | ayoung, super easy/trivial | 18:40 |
| morganfainberg | and way friendlier to the deployer than go make an assignment domain just to load a config for users. | 18:41 |
| morganfainberg | nothing complex. | 18:42 |
| ayoung | we might need that for the IdP blueprint anyway | 18:42 |
| *** che-arne has quit IRC | 18:42 | |
| *** pmathews has quit IRC | 18:43 | |
| *** rudrarugge has quit IRC | 18:43 | |
| *** sdake has quit IRC | 18:44 | |
| *** pmathews1 has quit IRC | 18:44 | |
| *** sdake has joined #openstack-dev | 18:45 | |
| *** rudra has joined #openstack-dev | 18:45 | |
| *** amcrn has joined #openstack-dev | 18:46 | |
| *** dkranz has quit IRC | 18:48 | |
| *** willingc has joined #openstack-dev | 18:49 | |
| *** Shaan7 has quit IRC | 18:49 | |
| *** Shaan7 has joined #openstack-dev | 18:49 | |
| *** pmathews has joined #openstack-dev | 18:50 | |
| zul | is there an icehouse-1 version of heat? | 18:50 |
| *** Abhishe__ has joined #openstack-dev | 18:51 | |
| *** lucasagomes has quit IRC | 18:51 | |
| *** exed has quit IRC | 18:53 | |
| *** jmontemayor has joined #openstack-dev | 18:54 | |
| *** asselin has joined #openstack-dev | 18:55 | |
| *** pmathews has quit IRC | 18:55 | |
| *** comay has quit IRC | 18:55 | |
| *** mlavalle has quit IRC | 18:55 | |
| *** comay has joined #openstack-dev | 18:55 | |
| *** comay has quit IRC | 18:55 | |
| *** ihrachyska has joined #openstack-dev | 18:56 | |
| *** sarob has joined #openstack-dev | 18:58 | |
| *** yolanda has quit IRC | 18:58 | |
| *** Loquacity has quit IRC | 18:59 | |
| *** tdruiva has joined #openstack-dev | 18:59 | |
| *** gimpswork has joined #openstack-dev | 18:59 | |
| *** e0ne__ has quit IRC | 19:00 | |
| *** Loquacity has joined #openstack-dev | 19:00 | |
| *** joesavak has quit IRC | 19:00 | |
| *** e0ne has joined #openstack-dev | 19:00 | |
| *** dkranz has joined #openstack-dev | 19:02 | |
| morganfainberg | ayoung, is there any reason why we'd create a token with no user_id? | 19:02 |
| *** byeager_ has joined #openstack-dev | 19:02 | |
| morganfainberg | because... it seems like we have an explcit if-clause in the memcache (token) backend to support that scenario: https://github.com/openstack/keystone/blob/master/keystone/token/backends/memcache.py#L85 | 19:03 |
| ayoung | morganfainberg, this sounds like a loaded question. I would say, no, as we want to maintain audit trail, but I could see a potential use with trust tokens to have no user_id so long as there was a trustor specified | 19:03 |
| *** sarob has quit IRC | 19:03 | |
| *** sarob has joined #openstack-dev | 19:03 | |
| ayoung | I think that we can safely say that is not something we need to cover | 19:03 |
| morganfainberg | ayoung, nah, just making sure i'm not crazy... it might be something i introduced with the cas stuff. | 19:03 |
| morganfainberg | *checks* | 19:04 |
| morganfainberg | nope, it's been around for longer. huh. | 19:04 |
| morganfainberg | i'm going to not worry about that case in this refactor...it seems incorrect to have a token w/o a user_id | 19:05 |
| *** e0ne has quit IRC | 19:05 | |
| *** byeager has quit IRC | 19:06 | |
| ayoung | yes, it is incorrect, and see if removing that breaks a unit test. | 19:07 |
| morganfainberg | ayoung, always. :) | 19:07 |
| *** sdake_ has joined #openstack-dev | 19:07 | |
| *** exed has joined #openstack-dev | 19:07 | |
| morganfainberg | and i'll then have at least an idea of the scenario (if it breaks a unit test) we were expecting | 19:07 |
| *** derekh has joined #openstack-dev | 19:08 | |
| *** noslzzp has quit IRC | 19:08 | |
| *** sarob has quit IRC | 19:08 | |
| *** noslzzp has joined #openstack-dev | 19:09 | |
| *** armax has quit IRC | 19:11 | |
| lifeless | russellb: did you have thoughts on my q in https://review.openstack.org/#/c/60115/ ? | 19:12 |
| *** rushiagr has quit IRC | 19:13 | |
| russellb | lifeless: that's a fair request, i'll do it | 19:13 |
| lifeless | ok | 19:13 |
| *** armax has joined #openstack-dev | 19:13 | |
| *** thomasm_ has joined #openstack-dev | 19:13 | |
| *** armax has quit IRC | 19:14 | |
| *** noslzzp has quit IRC | 19:14 | |
| *** thomasem has quit IRC | 19:14 | |
| *** neelashah has joined #openstack-dev | 19:14 | |
| *** neelashah has joined #openstack-dev | 19:14 | |
| *** neelashah has quit IRC | 19:16 | |
| *** yolanda has joined #openstack-dev | 19:16 | |
| *** armax has joined #openstack-dev | 19:16 | |
| *** neelashah has joined #openstack-dev | 19:17 | |
| *** tdruiva has quit IRC | 19:17 | |
| stevemar | ayoung: ping | 19:17 |
| *** tdruiva has joined #openstack-dev | 19:17 | |
| *** pmathews has joined #openstack-dev | 19:18 | |
| *** jtomasek has joined #openstack-dev | 19:18 | |
| *** ywu has quit IRC | 19:19 | |
| *** pmathews has quit IRC | 19:19 | |
| *** armax has quit IRC | 19:19 | |
| *** armax has joined #openstack-dev | 19:20 | |
| *** armax has quit IRC | 19:20 | |
| *** armax has joined #openstack-dev | 19:21 | |
| *** urulama has quit IRC | 19:21 | |
| *** devoid has joined #openstack-dev | 19:24 | |
| devoid | any glance devs in the house? | 19:24 |
| *** pabelanger has quit IRC | 19:25 | |
| *** derekh has quit IRC | 19:25 | |
| *** mindpixel has joined #openstack-dev | 19:26 | |
| *** pabelanger has joined #openstack-dev | 19:26 | |
| *** yolanda has quit IRC | 19:28 | |
| *** galstrom is now known as galstrom_zzz | 19:29 | |
| *** rm_work|away is now known as rm_work | 19:29 | |
| *** pmathews has joined #openstack-dev | 19:30 | |
| *** comay has joined #openstack-dev | 19:31 | |
| simo | morganfainberg: hey I discover memchache_crypt in keystone client | 19:34 |
| simo | from your review | 19:34 |
| morganfainberg | simo, hehe :) | 19:34 |
| simo | when was that added? | 19:34 |
| holms | maybe anybody have clue why virt-manager shows vm's and virsh list --all is not? | 19:34 |
| morganfainberg | simo, not sure. i'd need to look at the git log | 19:34 |
| simo | morganfainberg: I am asking becaiuse I added a comprehensive crypto faciloity in oslo-incubator | 19:35 |
| simo | morganfainberg: and we should really not duplicate this kind of stuff of all things | 19:35 |
| morganfainberg | simo, agreed. I was planning on pulling memcache_crypt and the KVS stuff into oslo once it's accepted into keystone | 19:36 |
| lifeless | jog0: is there a way to whitelist non-module imports for all of testtools.matchers? | 19:36 |
| morganfainberg | simo, if we have a better alternative, i'm totally game | 19:36 |
| *** bauzas has joined #openstack-dev | 19:36 | |
| lifeless | jog0: e.g. in hacking itself? | 19:36 |
| morganfainberg | simo: https://github.com/openstack/python-keystoneclient/commit/3dfb8437fc9135465f2b66b2c420bf20899fcf10 looks like when it went in | 19:36 |
| simo | morganfainberg: please make it use oslo-incubator crypto engine then | 19:36 |
| ayoung | stevemar, heh..internal bug triage meeting...I'm free now. What's up | 19:37 |
| *** nermina has quit IRC | 19:37 | |
| stevemar | ayoung, np, wanted to chat about mapping | 19:37 |
| ayoung | stevemar, fire away | 19:37 |
| morganfainberg | simo, sounds good. please comment that there so i can come back to it once i have the base token backend working. | 19:37 |
| stevemar | ayoung: on the last patch, you mentioned being able to tie in userid? | 19:37 |
| dstanek | lifeless: i'd like to see that apply for all matchers if possible | 19:38 |
| simo | morganfainberg: espcially for key derivation | 19:38 |
| stevemar | was wondering how that would work, don't we normally assign our own? | 19:38 |
| simo | morganfainberg: (which means you'll have to keep around but deprecate current derive_keys() | 19:38 |
| devoid | glance: Where do things stand with this review: https://review.openstack.org/#/c/46555/ | 19:38 |
| morganfainberg | simo, in keystoneclient we'll worry about that. but thats separate from this review :) | 19:38 |
| simo | morganfainberg: the stuff I contirbuted to oslo uses HKDF as definied in the RFC | 19:39 |
| *** yolanda has joined #openstack-dev | 19:39 | |
| morganfainberg | simo, nice! i'll check it out shortly. | 19:39 |
| simo | morganfainberg: what I am saying is that you should probbaly not make your code depend on derive_keys() as implemented in memcache_crypto | 19:39 |
| morganfainberg | simo, i'll leverage your mechanism to do so. | 19:40 |
| SpamapS | wow.. I am reading https://blueprints.launchpad.net/keystone/+spec/revocation-events and .. I'm really confused | 19:40 |
| *** jpich has quit IRC | 19:40 | |
| morganfainberg | simo, memcache_crypto in keystoneclient will likely be removed as a dep. for this patchset if i'm using stuff from oslo-incubator | 19:40 |
| simo | morganfainberg: still reading memcache_crypto | 19:40 |
| morganfainberg | simo, since eventually i want memcache_crypto to not be in keystoneclient... and if possible replace the memcache stuff in keystoneclient w/ this keyvaluestore (to-be-submitted-to-oslo) | 19:41 |
| *** yolanda has quit IRC | 19:41 | |
| *** eglynn has quit IRC | 19:41 | |
| ayoung | stevemar, heh, I clicked on the link above thinking it was from you, and trying to figure out what mapping had to do with image-create | 19:41 |
| SpamapS | OCSP like, solves this.. token presenters can present a signed "I checked with the authority and they gave me this signed note that says my token is still valid until Y".. | 19:41 |
| ayoung | stevemar, "asign our own" no, in the case of Federation | 19:42 |
| ayoung | any IdP needs to manage its own user ids, we just need a way to make sure they are not in conflict | 19:42 |
| *** tanisdl has joined #openstack-dev | 19:43 | |
| simo | morganfainberg: ok, also I find it odd that protect_data base64 encrypts the data before applying authentication, but that's a matter of taste | 19:43 |
| *** Shaan7 has quit IRC | 19:43 | |
| stevemar | haha, no link; okay so userid would be valid eh | 19:43 |
| *** Shaan7 has joined #openstack-dev | 19:43 | |
| *** jtomasek has quit IRC | 19:43 | |
| stevemar | you neglected to add email too ;) i imagine that if we're doing name, email would be a gimmie | 19:44 |
| stevemar | ayoung ^ | 19:44 |
| *** jcooley_ has quit IRC | 19:44 | |
| simo | morganfainberg: any reason why you may want to ever authenticate but not encrypt the data ? IE is there value in allowinf the flexibility there ? | 19:45 |
| ayoung | stevemar, nope. email is probably not going to be something we can assume is available... | 19:45 |
| morganfainberg | simo, I think it's simply to allow flexability, e.g. data integrity vs. full heavy encryption (at least that is how i read the implemnetation) | 19:45 |
| morganfainberg | simo, might be for better debugging or easier sideband access to the data itself, but preventing mucking with the data w/o invalidating it | 19:46 |
| *** jcoufal has joined #openstack-dev | 19:46 | |
| simo | morganfainberg: I would at least use a default and not force the user to choose :) | 19:46 |
| simo | btw is there a way to tell python to securely get rid of a variable ? | 19:47 |
| stevemar | ayoung: but availability wouldn't matter? if it's not there, when we go through the mapping rules, if it's not a match, it'll just go on to the next rule? | 19:47 |
| simo | that is one thing that keeps bothering me with python | 19:47 |
| morganfainberg | simo, don't think so. | 19:47 |
| morganfainberg | simo, well... you could use ctypes and muck with the underlying datastructure | 19:48 |
| ayoung | stevemar, I'm not sure how to use email address. It shows up in the user-show api, but that is about it. Assuming that someone comes in with a SAML assertion, there is going to be no record of email address. Unless something other than use-show needs it, I think it has to be out. Another way to think of it is "is this something that would be recorded in the current request" | 19:48 |
| simo | we get these keys in a python variable and we have no way to make sure they are erased from memory once they are out of scope :( | 19:48 |
| ayoung | email is a vialbe incoming env var, yes | 19:48 |
| ayoung | viable | 19:48 |
| stevemar | ayoung: it's about what we can put into the token? | 19:48 |
| stevemar | or scope the token to | 19:48 |
| ayoung | stevemar, so, yes, people should be able to map email address to username or userid. | 19:49 |
| morganfainberg | simo, i worked with using ctypes to in-place change values (so even rebound to another var they'd be corrupt) but there are a lot of potentials to segfault...and it's not always portable | 19:49 |
| stevemar | i agree that email is probably useless, i'm taking a step back and trying to figure out what we should/can work with | 19:49 |
| morganfainberg | simo, i think it would make sense to build a c module in python to do that, make the datatype non-deepcopy-able and a .secure_erase() method | 19:49 |
| simo | morganfainberg: yeah this is something I just wanted to ask, but I have no time to dig in now | 19:50 |
| simo | morganfainberg: yes I think that would make a lot of sense | 19:50 |
| morganfainberg | simo, i'll think about it, shouldn't be hard to implement. :) | 19:50 |
| simo | last famous words :) | 19:51 |
| morganfainberg | simo, and i could totally see a use-case for it in a number of places in python... maybe it already exists *will do research this weekend* | 19:51 |
| simo | morganfainberg: sounds like the ability to have a "key" type that can be securely erased would be a great value | 19:52 |
| morganfainberg | simo, ++ | 19:52 |
| simo | of course it would also require to be able to sue it with the functions that generate it | 19:52 |
| simo | so it is not that easy to do it in a way that can be retrofitted to something like python crypto I am afraid | 19:52 |
| jog0 | lifeless: sure, we don't havea mechanism for that right now but it should be easy and straight forward to add | 19:54 |
| *** armax has quit IRC | 19:55 | |
| morganfainberg | simo, true. but if it exists, maaaybe a patch to pycrypto will occur/can occur | 19:55 |
| *** armax has joined #openstack-dev | 19:55 | |
| *** byeager has joined #openstack-dev | 19:56 | |
| *** byeager_ has quit IRC | 19:56 | |
| *** dubsquared has quit IRC | 19:57 | |
| simo | morganfainberg: I am all for trying, for sure | 19:58 |
| *** neelashah has quit IRC | 19:59 | |
| *** ihrachyska has quit IRC | 19:59 | |
| *** jcooley_ has joined #openstack-dev | 20:01 | |
| *** e0ne has joined #openstack-dev | 20:01 | |
| *** neelashah has joined #openstack-dev | 20:03 | |
| *** zz_ewindisch is now known as ewindisch | 20:03 | |
| devoid | can someone here help me understand this glance database query: | 20:06 |
| devoid | http://paste.openstack.org/show/54544/ | 20:06 |
| *** galstrom_zzz is now known as galstrom | 20:07 | |
| *** xqueralt has joined #openstack-dev | 20:08 | |
| *** melwitt has quit IRC | 20:08 | |
| *** melwitt1 has joined #openstack-dev | 20:08 | |
| *** bvandenh has quit IRC | 20:09 | |
| *** adalbas has quit IRC | 20:09 | |
| *** rfolco has quit IRC | 20:09 | |
| *** atiwari has joined #openstack-dev | 20:10 | |
| *** dolphm has joined #openstack-dev | 20:10 | |
| *** mindpixel has quit IRC | 20:10 | |
| *** dstanek_afk has joined #openstack-dev | 20:10 | |
| *** dstanek_afk has quit IRC | 20:10 | |
| *** jcannava has left #openstack-dev | 20:11 | |
| *** sarob has joined #openstack-dev | 20:14 | |
| *** stevemar has quit IRC | 20:14 | |
| *** denis_makogon has joined #openstack-dev | 20:16 | |
| *** buzztroll has quit IRC | 20:16 | |
| *** kushal has left #openstack-dev | 20:17 | |
| *** rkukura has quit IRC | 20:17 | |
| *** anniec has quit IRC | 20:18 | |
| *** sarob has quit IRC | 20:19 | |
| *** gyee has quit IRC | 20:19 | |
| *** eglynn has joined #openstack-dev | 20:20 | |
| tellesnobrega | morganfainberg: im reading the whole conversation again to make sure i get what was decided, so i get that you are going to use something like IdPid:user_id to authenticate and this tells me where to look for the user and if there is no IdPid we can assume that the user belongs in default domain right? | 20:22 |
| morganfainberg | tellesnobrega, yes, that is correct | 20:22 |
| morganfainberg | well, no | 20:22 |
| morganfainberg | tellesnobrega, for authentication we will demand the 'domain' field in the authentication json blob | 20:23 |
| morganfainberg | tellesnobrega, if that doesn't exist, we will assume default domain | 20:23 |
| *** adalbas has joined #openstack-dev | 20:23 | |
| morganfainberg | tellesnobrega, since that can/is already accepted for auth, we'll just leverage it (and stay api compatible) | 20:23 |
| *** dvarga has quit IRC | 20:25 | |
| *** Abhishe__ has quit IRC | 20:25 | |
| tellesnobrega | morganfainberg: ok | 20:27 |
| tellesnobrega | morganfainberg: is there something else there that you find worth mentioning on a document about the status and future of domain specific backend? | 20:28 |
| *** Alexei_987 has joined #openstack-dev | 20:29 | |
| devoid | ayoung, dolphm, can either of you explain why keystone-manage pki_setup and ssl_setup leaves so many files in the ssl/certs directory? | 20:31 |
| ayoung | devoid, they are necessary | 20:31 |
| ayoung | devoid, specifically, you need a private key, and public certificates for SSL and for token signing. These are and should be separate keys | 20:31 |
| devoid | ayoung: yes, but what about index.txt, index.txt.attr.old, serial.old, 01.pem, 02.pem, etc. | 20:32 |
| *** armax has left #openstack-dev | 20:32 | |
| ayoung | devoid, however, I want to replace the custom code that generates the certs with a call to certmonger | 20:32 |
| morganfainberg | tellesnobrega, not that i can think of at the moment. | 20:32 |
| morganfainberg | tellesnobrega, i think the convo covered most everything. | 20:32 |
| ayoung | devoid, ah,yeah, serial number management | 20:32 |
| devoid | ? | 20:33 |
| ayoung | devoid, you cannot reissue a certificate with the same serial number that was used in the past | 20:33 |
| ayoung | devoid, however, I suspect that most of those files are interim files that should be cleaned up. I hadn;'t looked at them in a while.... | 20:33 |
| devoid | does it default to using /etc/ssl/openssl.cnf ? | 20:34 |
| *** jmontemayor has quit IRC | 20:34 | |
| devoid | and / or is there a way of changing that? | 20:34 |
| *** jcooley_ has quit IRC | 20:35 | |
| ayoung | devoid, I'd have to look at the code to confirm, it has been that long. It grew out of the code used for setting up the tests. I never thought it should be part of the base product, but without Certmonger, we didn't really have a better default | 20:35 |
| ayoung | devoid, use a real CA, and don't rely on those calls. | 20:35 |
| *** e0ne_ has joined #openstack-dev | 20:36 | |
| devoid | ayoung, the docs for setting up pki are pretty confusing. I haven't been able to get any other services working with keystone with pki. | 20:36 |
| *** anniec has joined #openstack-dev | 20:36 | |
| devoid | specifically, how to do it when each service is behind a load-balancer, so it's hostname is not as-advertised. | 20:37 |
| ayoung | devoid, are you asking about pki tokens, or SSL? | 20:37 |
| devoid | well, 1. it sounds like you cant do pki without ssl. | 20:37 |
| *** e0ne has quit IRC | 20:38 | |
| ayoung | devoid, that is not correct | 20:38 |
| ayoung | they are two separate certificates | 20:38 |
| ayoung | PKI is a CMS signed document, encryption at the application level, not at transport | 20:38 |
| *** n0ano has quit IRC | 20:38 | |
| ayoung | that would be cleared as "PKI tokens are...." | 20:38 |
| *** jcooley_ has joined #openstack-dev | 20:41 | |
| tellesnobrega | morganfainberg: i get from that the most important change that is needed now is to make the system Ip aware (give it a way to find where the user is) is this right or i missed something? | 20:41 |
| devoid | ayoung. so clearly I have no idea what I'm doing. :) When I tried pki tokens, I could talk to keystone with the glance user and a normal user, but whenever I tried talking to glance with a normal user I got openssl errors. | 20:41 |
| *** dprince has quit IRC | 20:41 | |
| ayoung | openssl errors are not PKI token errors. | 20:41 |
| devoid | Specifically CalledProcessError: Command 'openssl' returned non-zero exit status 4. | 20:41 |
| ayoung | ah... | 20:41 |
| ayoung | that is a PKI token error | 20:41 |
| ayoung | devoid one sec, I have a link for you | 20:41 |
| ayoung | http://adam.younglogic.com/2013/07/troubleshooting-pki-middleware/ | 20:42 |
| morganfainberg | tellesnobrega, correct. it's partially IdP aware, but not everything that did user lookups was | 20:42 |
| sdague | bnemec: so the approach in log tests wasn't going to work, but I just added the stubs fixture and that's fine now | 20:44 |
| devoid | ayoung: yea I was reading that last night. :) I added the signing_dir directive and restarted glance. the cacert and signing_cert are in my cache, but not a revoked.pem file | 20:45 |
| *** eglynn has quit IRC | 20:45 | |
| ayoung | devoid, revoked might be empty... | 20:46 |
| *** tmclaugh[work] has quit IRC | 20:46 | |
| ayoung | devoid, openssl errors may be permissions | 20:47 |
| devoid | permissions to what files? | 20:47 |
| ayoung | devoid, openssl reading the cert files | 20:48 |
| ayoung | revoked.pem is not processed by openssl, | 20:48 |
| ayoung | so the question is why is openssl failing | 20:48 |
| *** drewlander has quit IRC | 20:48 | |
| *** willingc has quit IRC | 20:48 | |
| *** adalbas has quit IRC | 20:49 | |
| devoid | my only thought is that the CN doesn't match keystone's host | 20:49 |
| devoid | (because it's autogenerated by the pki_setup) | 20:49 |
| ayoung | devoid, shouldn't matter | 20:49 |
| *** vuil has joined #openstack-dev | 20:49 | |
| *** jprovazn has quit IRC | 20:50 | |
| *** mlavalle has joined #openstack-dev | 20:50 | |
| devoid | as an aside, it would be nice if the DEBUG logging in keystoneclient spat out what command-line things were being called. | 20:50 |
| *** buzztroll has joined #openstack-dev | 20:51 | |
| *** ywu has joined #openstack-dev | 20:51 | |
| ayoung | devoid, I wonder if the problem is header truncation | 20:51 |
| dolphm | devoid: on the aside -- i don't understand... you mean simply echoing the command line input back? | 20:52 |
| ayoung | devoid, look at the error report here https://bugs.launchpad.net/keystone/+bug/1176190 | 20:52 |
| uvirtbot | Launchpad bug 1176190 in keystone "'openssl' returned non-zero exit status 4 w/ SSL enabled" [Medium,Expired] | 20:52 |
| ayoung | dolphm, I purposly avoided answering that question to stay on target. | 20:52 |
| dolphm | ayoung: i haven't been following the rest of the conversation so i'm butting in :) | 20:52 |
| *** pberis has quit IRC | 20:52 | |
| ayoung | dolphm, I think he is hitting the same problem as https://bugs.launchpad.net/keystone/+bug/1176190 | 20:53 |
| *** JonnyNomad has joined #openstack-dev | 20:53 | |
| devoid | in my case ssl is disabled. | 20:53 |
| devoid | at least for now. | 20:53 |
| pcm_ | Anyone: Is there an alternate repo that can be used for devstack? For me, right now, I'm seeing errors accessing git.openstack.org | 20:54 |
| ayoung | devoid, the token in that bug report does not look truncated, as it ends in ==\ | 20:54 |
| bnemec | sdague: Okay, that looks good to me. I guess I'd still like to hear from a security expert though... | 20:56 |
| devoid | ayoung, dolphm, what's funny is that the keystone.conf there has uuid as the signing format. | 20:56 |
| devoid | *token_format | 20:56 |
| ayoung | devoid, that does not matter | 20:56 |
| ayoung | keystone.conf on the glance machine is ignored | 20:57 |
| *** mikeoutland has joined #openstack-dev | 20:57 | |
| devoid | oh I see, thats what "fixes" the issue. | 20:57 |
| *** dubsquared has joined #openstack-dev | 20:57 | |
| ayoung | only optins in the glance config file are honored | 20:57 |
| ayoung | Keystone server is probably still doing PKI, right? | 20:57 |
| *** Abhishek_ has joined #openstack-dev | 20:57 | |
| *** willingc has joined #openstack-dev | 20:58 | |
| dolphm | pcm_: https://github.com/openstack-dev/devstack | 20:58 |
| *** joesavak has joined #openstack-dev | 20:58 | |
| *** noslzzp has joined #openstack-dev | 20:59 | |
| *** pixelb has quit IRC | 20:59 | |
| *** n0ano has joined #openstack-dev | 20:59 | |
| *** jcooley_ has quit IRC | 20:59 | |
| devoid | ayoung: flipping keystone's provider back to pki now. | 21:00 |
| ayoung | devoid, from the cli run keystone token-get and confirm that the token is the big long one, and not a uuid | 21:00 |
| pcm_ | dolphm: thanks! | 21:00 |
| *** kenperkins has joined #openstack-dev | 21:01 | |
| *** datsun180b has quit IRC | 21:01 | |
| pcm_ | dolphm: Acutally, I was looking for how to get devstack to use a different repo as git.openstack.org is timing out. I found GIT_BASE and am trying that in mylocalrc. | 21:01 |
| devoid | ayoung: confirmed | 21:02 |
| ayoung | devoid, now try the glance command | 21:02 |
| *** cpallares has joined #openstack-dev | 21:02 | |
| *** f13o has joined #openstack-dev | 21:02 | |
| *** tmclaugh[work] has joined #openstack-dev | 21:02 | |
| *** pcm_ has quit IRC | 21:03 | |
| *** melwitt1 is now known as melwitt | 21:03 | |
| *** belmoreira has joined #openstack-dev | 21:04 | |
| *** anniec has quit IRC | 21:04 | |
| devoid | yea still openssl error | 21:05 |
| devoid | I'll create a paste. | 21:05 |
| *** belmoreira has quit IRC | 21:06 | |
| devoid | http://paste.openstack.org/show/54548/ these are the glance logs | 21:06 |
| *** samuelbercovici has joined #openstack-dev | 21:07 | |
| *** samuelbercovici has quit IRC | 21:07 | |
| *** stevemar has joined #openstack-dev | 21:07 | |
| *** dkranz has quit IRC | 21:08 | |
| *** tdruiva has quit IRC | 21:08 | |
| *** topol has quit IRC | 21:09 | |
| ayoung | devoid, it looks like the token might be corrupted | 21:09 |
| devoid | perhaps | 21:10 |
| devoid | when I run the command that cms_verify does, it hangs | 21:11 |
| devoid | openssl cms -verify -certfile /var/cache/glance/api/signing_cert.pem -CAfile /var/cache/glance/api/cacert.pem -inform PEM -nosmimecap -nodetach -nocerts -noattr | 21:11 |
| *** krtaylor has quit IRC | 21:11 | |
| nkinder | bknudson: ping - re: KDS | 21:11 |
| bknudson | nkinder: what's up? | 21:12 |
| *** negronjl_ is now known as negronjl | 21:12 | |
| nkinder | bknudson: I've got all of your comments addressed aside from the base64 vs. encoded JSON issue. | 21:12 |
| nkinder | bknudson: I just removed the term "service" and used "party" to be consistent. | 21:12 |
| nkinder | bknudson: we need to come to a consensus on the base64 issue | 21:13 |
| bknudson | nkinder: party seems like an appropriate term | 21:13 |
| nkinder | bknudson: yes, a party might be a service, a person, an application, etc. It's more generic and applicable to different use-cases this way. | 21:13 |
| *** eglynn has joined #openstack-dev | 21:14 | |
| bknudson | nkinder: I'm fine with it being base-64 encoded. Just wanted to discuss whether it was appropriate. | 21:14 |
| nkinder | bknudson: Ok, I wanted to get a sense of how stong your feelings are on the matter. | 21:14 |
| bknudson | I mean you base-64 encode binary data when it's going to be put into something that only supports text | 21:14 |
| devoid | ayoung: what's the process for fixing the token? | 21:14 |
| bknudson | why base64 when it's not binary? | 21:14 |
| nkinder | bknudson: simo and jamielennox|away were discussing this yesterday. | 21:15 |
| bknudson | unless we could say that it could potentially be binary, so might as well base64 it. | 21:15 |
| *** garyk has quit IRC | 21:15 | |
| nkinder | bknudson: It is really just an attempt to encourage one to check the signature. | 21:15 |
| nkinder | bknudson: If a programmer sees encoded JSON, they might be tempted to start looking into the object. | 21:16 |
| ayoung | devoid, just checked the token, it is valid | 21:16 |
| ayoung | make that "well formed" | 21:16 |
| nkinder | bknudson: the signature really should be verified before you even look into the object though. | 21:16 |
| ayoung | nkinder, he needs to conver - to / firrst | 21:17 |
| ayoung | first | 21:17 |
| nkinder | bknudson: base64 or encoded JSON could be accessed without checking the signature either way, but this was an attempt to discourage that. | 21:17 |
| ayoung | nkinder, I was a bad engineer and didn;t do my homework. The cms to token algorithm is a bit of a one-off.... | 21:17 |
| bknudson | nkinder: and there's no concern about extra overhead? | 21:18 |
| bknudson | now you have to base64-decode/json-unencode, etc. | 21:18 |
| ayoung | devoid, look at the code here: https://github.com/openstack/keystone/blob/master/keystone/common/cms.py#L48 | 21:18 |
| *** asselin_ has joined #openstack-dev | 21:19 | |
| nkinder | bknudson: we HMAC over the object on the server side and the client side. We need to ensure that it doesn't change (order of keys, etc.) | 21:19 |
| *** dkranz has joined #openstack-dev | 21:19 | |
| ayoung | devoid, so I'm guessing the the openssl cms command on your machine failed due to not being able to read the certificate files | 21:19 |
| nkinder | bknudson: if anything is different, the signature check will fail. | 21:19 |
| *** kenperkins has quit IRC | 21:20 | |
| nkinder | bknudson: so it needs to be a format that will not change at all | 21:20 |
| bknudson | nkinder: this was just the difference between a string that's a JSON string and one that's a base-64 string. the JSON string isn't going to change either. | 21:20 |
| simo | bknudson: we are doing crypto over these fields, any performance issue base64 may add there would be lost in the noise | 21:20 |
| devoid | that glance directory is owned by glance:glance | 21:20 |
| devoid | /var/cache/glance | 21:20 |
| bknudson | it didn't look like they were very big strings being base64. | 21:21 |
| ayoung | bknudson, this is for key exchange, it is going to happen once in a while, In contrast with actually consuming the keys for symmetric encryption. I wouldn't worry too much about the overhead of this process in general. | 21:21 |
| bknudson | so if you're not concerned with the performance. | 21:21 |
| bknudson | i'm ok with it | 21:21 |
| nkinder | ayoung: actually, I believe it's with each message (right simo?) | 21:21 |
| *** asselin__ has joined #openstack-dev | 21:21 | |
| *** dolphm has quit IRC | 21:22 | |
| bknudson | I hope you don't have to talk to keystone with every message. | 21:22 |
| simo | nkinder: define what "it" is in this case ? | 21:22 |
| nkinder | simo: sending of the keys from source->dest | 21:22 |
| *** asselin has quit IRC | 21:22 | |
| ayoung | devoid, from the cms man page | 21:22 |
| *** xqueralt has quit IRC | 21:22 | |
| *** kenperkins has joined #openstack-dev | 21:22 | |
| ayoung | exit status 4 an error occurred decrypting or verifying the message. | 21:23 |
| nkinder | simo: ayoung was saying key exchange happens once in a while. It happens with every message. | 21:23 |
| ayoung | nkinder, no way | 21:23 |
| simo | nkinder: key excahnge with the KDS happns only once in a while | 21:23 |
| nkinder | simo: yes, with the KDS. | 21:23 |
| *** gyee has joined #openstack-dev | 21:23 | |
| simo | with the defaults I set at most once every 15 minutes for each client/targt pair | 21:23 |
| *** anniec has joined #openstack-dev | 21:23 | |
| nkinder | simo: but we're sending esek to the destination with every message, aren't we? | 21:23 |
| *** asselin_ has quit IRC | 21:24 | |
| ayoung | nkinder, key exchange is to facilitate geting symmetric keys between message producesr and message consumers. It is explicitly a performance optimization, as we could do asymmetric crypto without all this overhead. | 21:24 |
| simo | nkinder: then if messages re signed yes each message will carry the esek, and the metadata will be signed | 21:24 |
| *** nermina has joined #openstack-dev | 21:24 | |
| bknudson | how does the receiver tell the sender that it needs to do key exchange? | 21:25 |
| simo | ayoung: we still would not be able to do group encryption | 21:25 |
| nkinder | I know that KDS is only used when we get a ticket (keys), and when a group member needs to fetch a group key. | 21:25 |
| ayoung | simo, yep, yep...I know | 21:25 |
| simo | bknudson: the receiver doen't need to | 21:25 |
| ayoung | just trying to focus the conversation, *not* derail... | 21:25 |
| bknudson | I guess it would just get the message and then use the key | 21:25 |
| simo | bknudson: you guess right | 21:25 |
| bknudson | unless their clocks were way off. | 21:25 |
| nkinder | bknudson: IF it hasn't expired | 21:25 |
| bknudson | or it took a long time for the message to arrive | 21:26 |
| simo | if the keys are expired the message is discarded | 21:26 |
| devoid | ayoung: I don't think I have any selinux settings that are interfering, per your blog. Running in ubuntu. | 21:26 |
| ayoung | devoid, app armor? | 21:26 |
| devoid | ayoung: I don't think so, checking... | 21:28 |
| ayoung | devoid, probably not. | 21:28 |
| ayoung | devoid, try wiping out the cert files | 21:28 |
| nkinder | bknudson: so the "metadata" when requesting/receiving a ticket doesn't happen often. Base64 shouldn't be a concern there. | 21:29 |
| bknudson | nkinder: ok, I'm fine with base64. It looks better anyways. | 21:29 |
| *** exed has quit IRC | 21:29 | |
| nkinder | bknudson: yes, escapes are ugly :) | 21:29 |
| devoid | ayoung: keystone's or glance's? | 21:29 |
| ayoung | devoid, on the glance server | 21:29 |
| nkinder | bknudson: ok, I'll post up a new review. | 21:29 |
| devoid | wiped out /var/cache/glance/api and restarted the services | 21:30 |
| *** colinmcn_ has quit IRC | 21:30 | |
| *** colinmcnamara has quit IRC | 21:30 | |
| devoid | still getting the openssl error | 21:30 |
| *** ssurana has quit IRC | 21:30 | |
| *** ssurana has joined #openstack-dev | 21:31 | |
| *** pabelanger has quit IRC | 21:34 | |
| *** dkranz has quit IRC | 21:35 | |
| *** exed has joined #openstack-dev | 21:35 | |
| ayoung | are the certificate in /var/cache/glance/api | 21:36 |
| ayoung | devoid, ^^? | 21:37 |
| *** galstrom is now known as galstrom_zzz | 21:37 | |
| *** yamahata_ has joined #openstack-dev | 21:37 | |
| *** jswarren has quit IRC | 21:38 | |
| *** e0ne_ has quit IRC | 21:38 | |
| *** e0ne has joined #openstack-dev | 21:39 | |
| *** sdake has quit IRC | 21:40 | |
| devoid | yea, here's the error from openssl: | 21:40 |
| *** e0ne has quit IRC | 21:40 | |
| devoid | 140161979975328:error:2E099064:CMS routines:CMS_SIGNERINFO_VERIFY_CERT:certificate verify error:cms_smime.c:304:Verify error:unable to get local issuer certificate | 21:40 |
| *** sdake has joined #openstack-dev | 21:40 | |
| *** sdake has quit IRC | 21:40 | |
| *** sdake has joined #openstack-dev | 21:40 | |
| *** e0ne has joined #openstack-dev | 21:41 | |
| *** twoputt_ has quit IRC | 21:43 | |
| *** arosen has quit IRC | 21:43 | |
| *** twoputt__ has quit IRC | 21:43 | |
| *** vuil has quit IRC | 21:43 | |
| *** twoputt_ has joined #openstack-dev | 21:43 | |
| *** twoputt__ has joined #openstack-dev | 21:43 | |
| *** vuil has joined #openstack-dev | 21:43 | |
| *** arosen has joined #openstack-dev | 21:44 | |
| *** buzztroll has quit IRC | 21:46 | |
| *** dkranz has joined #openstack-dev | 21:47 | |
| *** buzztroll has joined #openstack-dev | 21:47 | |
| *** nkinder has quit IRC | 21:47 | |
| *** nkinder has joined #openstack-dev | 21:47 | |
| *** mikeoutland has quit IRC | 21:48 | |
| devoid | ayoung: ^^ | 21:49 |
| *** copeland has quit IRC | 21:49 | |
| ayoung | devoid, I see...was researching that error | 21:49 |
| devoid | cool :) | 21:49 |
| *** dubsquared has quit IRC | 21:51 | |
| ayoung | devoid, if I understand the error correctly, it is a problem reading the CA cert | 21:52 |
| ayoung | "local issuer" | 21:52 |
| *** ngoracke has quit IRC | 21:52 | |
| *** gyee has quit IRC | 21:52 | |
| *** sushils has joined #openstack-dev | 21:53 | |
| ayoung | devoid, the command line to run openssl in auth_token middleware should have access to the ca cert | 21:54 |
| devoid | ayoung: ran strace -etrace=open,close and no open calls are failing. | 21:54 |
| devoid | including the cacert.pem file. | 21:54 |
| ayoung | I'm assuming that cert showed up in the var/cache subdir | 21:54 |
| devoid | yes | 21:54 |
| *** rdas has quit IRC | 21:54 | |
| *** epim has joined #openstack-dev | 21:54 | |
| devoid | I'm guessing this is an ssl key issue. | 21:54 |
| *** gimpswork has quit IRC | 21:55 | |
| *** amcrn_ has joined #openstack-dev | 21:55 | |
| ayoung | devoid not so sure | 21:55 |
| *** amcrn has quit IRC | 21:55 | |
| *** gyee has joined #openstack-dev | 21:55 | |
| *** isd has quit IRC | 21:55 | |
| ayoung | devoid, you only see this problem when the glance server is behind SSL? | 21:55 |
| devoid | ayoung: let me sit down with the guys here who understand our ssl and see if we can't cook up a working cafile. | 21:55 |
| devoid | ayoung: there's no ssl for keystone or glance | 21:55 |
| ayoung | devoid, ok | 21:55 |
| ayoung | so just PKI tokens | 21:55 |
| devoid | yup | 21:56 |
| *** pabelanger has joined #openstack-dev | 21:56 | |
| ayoung | and you generated the signing cert on the keystone server using pki_setup | 21:56 |
| *** atiwari has quit IRC | 21:56 | |
| devoid | yea | 21:56 |
| *** mfer has quit IRC | 21:56 | |
| *** galstrom_zzz is now known as galstrom | 21:56 | |
| ayoung | and the ca cert on the glance server is a valid cert? | 21:56 |
| *** amcrn_ is now known as amcrn | 21:57 | |
| devoid | how can I verify the cacert? | 21:57 |
| ayoung | devoid, just cat it to start | 21:57 |
| *** anniec has quit IRC | 21:58 | |
| *** ssurana has quit IRC | 21:58 | |
| ayoung | cacert.pem is a pem file, so | 21:58 |
| *** SergeyLukjanov has quit IRC | 21:58 | |
| *** ssurana has joined #openstack-dev | 21:59 | |
| *** SergeyLukjanov has joined #openstack-dev | 21:59 | |
| ayoung | devoid, http://www.madboa.com/geek/openssl/#verify-standard | 21:59 |
| *** nermina has quit IRC | 22:00 | |
| *** willingc has quit IRC | 22:00 | |
| devoid | ayoung: here's what I get for openssl verify cacert.pem: | 22:00 |
| devoid | /var/cache/glance/api/cacert.pem: C = US, ST = Unset, L = Unset, O = Unset, CN = www.example.com | 22:00 |
| devoid | error 18 at 0 depth lookup:self signed certificate | 22:00 |
| devoid | OK | 22:00 |
| ayoung | devoid, read that section on the link | 22:00 |
| devoid | reading! ;) | 22:01 |
| ayoung | devoid, here is the code that does the verify. From there you should be able to figure out the parameters. I am wondering if the Ubuntu version of OpenSSL does not honor the -CAfile flag https://github.com/openstack/python-keystoneclient/blob/master/keystoneclient/common/cms.py#L108 | 22:02 |
| devoid | I think it's rejecting the cert because it's self-signed | 22:02 |
| *** kenperkins has quit IRC | 22:03 | |
| ayoung | if that is the case, you could try the modification that he suggests | 22:03 |
| ayoung | try verifying the signing cert, but with the -CAFile flag | 22:03 |
| *** melwitt has quit IRC | 22:04 | |
| *** melwitt1 has joined #openstack-dev | 22:04 | |
| ayoung | openssl verify -CAfile /var/cache.... /ca.pem /var/cache.../signing.pem | 22:04 |
| *** jasondotstar has quit IRC | 22:04 | |
| *** melwitt has joined #openstack-dev | 22:05 | |
| *** melwitt1 has quit IRC | 22:05 | |
| *** geekinutah has joined #openstack-dev | 22:06 | |
| ayoung | devoid, I need to run. Please update the bug with what you find | 22:06 |
| devoid | thanks for your help: :) | 22:06 |
| geekinutah | how do you express a cross-project dependency to gerrit? | 22:06 |
| geekinutah | For examples, https://review.openstack.org/#/c/59875/ depends on https://review.openstack.org/#/c/59868/ | 22:06 |
| *** abramley has quit IRC | 22:07 | |
| *** boden has quit IRC | 22:07 | |
| geekinutah | is there a way cross-tree like that or should you just keep the patch that has dependency as WIP until the other merges or something? | 22:08 |
| ayoung | devoid, https://bugs.launchpad.net/keystone/+bug/1176190 I reopened and grabbed the bug. If there is something we can do in keystoneclient to fix we'll address there | 22:08 |
| uvirtbot | Launchpad bug 1176190 in keystone "'openssl' returned non-zero exit status 4 w/ SSL enabled" [Medium,Confirmed] | 22:08 |
| *** DennyZhang has joined #openstack-dev | 22:10 | |
| *** denis_makogon has quit IRC | 22:10 | |
| lbragstad | morganfainberg: ping? | 22:10 |
| *** denis_makogon has joined #openstack-dev | 22:10 | |
| *** ngoracke has joined #openstack-dev | 22:11 | |
| *** jcooley_ has joined #openstack-dev | 22:12 | |
| *** vuil has quit IRC | 22:12 | |
| *** ayoung has quit IRC | 22:13 | |
| *** pablosan has joined #openstack-dev | 22:14 | |
| *** mikeoutland has joined #openstack-dev | 22:14 | |
| *** jdob has quit IRC | 22:14 | |
| Abhishek_ | hey guys, I'm trying to figure out if it'd make sense to move print_list and print_dict in novaclient.utils to a standalone library | 22:15 |
| Abhishek_ | say oslo.print_utils | 22:16 |
| Abhishek_ | a lot of clients use similar code to print resulting in duplication | 22:16 |
| *** kenperkins has joined #openstack-dev | 22:16 | |
| Abhishek_ | any feedback? | 22:16 |
| *** litong has quit IRC | 22:17 | |
| *** ruhe has quit IRC | 22:17 | |
| *** jcoufal has quit IRC | 22:17 | |
| *** jgrimm has quit IRC | 22:18 | |
| *** Chicago has joined #openstack-dev | 22:18 | |
| *** vladikr has quit IRC | 22:18 | |
| *** kenperkins has quit IRC | 22:19 | |
| *** nermina has joined #openstack-dev | 22:19 | |
| *** ssurana has quit IRC | 22:22 | |
| *** ssurana has joined #openstack-dev | 22:23 | |
| *** tmclaugh[work] has quit IRC | 22:25 | |
| stevemar | ayoung: ping? | 22:26 |
| stevemar | lbragstad, i like our questionable pings | 22:26 |
| lbragstad | :) | 22:26 |
| *** DennyZhang has quit IRC | 22:27 | |
| *** buzztroll has quit IRC | 22:28 | |
| *** byeager has quit IRC | 22:28 | |
| *** thomasm_ has quit IRC | 22:29 | |
| *** byeager has joined #openstack-dev | 22:30 | |
| *** sarob has joined #openstack-dev | 22:31 | |
| *** byeager has joined #openstack-dev | 22:31 | |
| *** arosen has quit IRC | 22:32 | |
| *** twoputt_ has quit IRC | 22:32 | |
| *** twoputt__ has quit IRC | 22:32 | |
| *** twoputt_ has joined #openstack-dev | 22:32 | |
| *** twoputt__ has joined #openstack-dev | 22:32 | |
| *** arosen has joined #openstack-dev | 22:32 | |
| *** changbl has quit IRC | 22:32 | |
| *** anniec has joined #openstack-dev | 22:35 | |
| *** nermina has quit IRC | 22:35 | |
| *** byeager has quit IRC | 22:36 | |
| *** e0ne has quit IRC | 22:36 | |
| *** buzztroll has joined #openstack-dev | 22:37 | |
| *** SergeyLukjanov has quit IRC | 22:37 | |
| *** nermina has joined #openstack-dev | 22:38 | |
| *** mriedem has quit IRC | 22:38 | |
| *** SergeyLukjanov has joined #openstack-dev | 22:38 | |
| *** rnirmal has quit IRC | 22:38 | |
| *** Anticimex has quit IRC | 22:38 | |
| *** adalbas has joined #openstack-dev | 22:39 | |
| *** ewindisch is now known as zz_ewindisch | 22:41 | |
| *** noslzzp has quit IRC | 22:41 | |
| *** SergeyLukjanov has quit IRC | 22:42 | |
| *** zz_ewindisch is now known as ewindisch | 22:43 | |
| *** kenperkins has joined #openstack-dev | 22:43 | |
| *** adalbas has quit IRC | 22:44 | |
| *** radez is now known as radez_g0n3 | 22:44 | |
| *** joesavak has quit IRC | 22:45 | |
| *** yamahata_ has quit IRC | 22:45 | |
| *** rkukura has joined #openstack-dev | 22:46 | |
| *** abk has quit IRC | 22:46 | |
| *** lbragstad has quit IRC | 22:47 | |
| *** utlemming has quit IRC | 22:47 | |
| *** utlemming has joined #openstack-dev | 22:49 | |
| *** asselin_ has joined #openstack-dev | 22:50 | |
| *** epim has quit IRC | 22:51 | |
| *** asselin__ has quit IRC | 22:52 | |
| *** anniec has quit IRC | 22:53 | |
| *** novas0x2a|laptop has joined #openstack-dev | 22:54 | |
| *** eglynn has quit IRC | 22:54 | |
| *** susheel has joined #openstack-dev | 22:55 | |
| claytonc | is there an easy way to link a gerrit change (via the git commit) to another in another repository, as a "related to / spawned by" relation? the other change is going to be abandoned, this is moving a commit from one project into oslo-incubator with some context as to the history | 22:56 |
| claytonc | a "gerrit" way vs. simply embedding a link to the review | 22:56 |
| *** kenperkins has quit IRC | 22:56 | |
| *** adalbas has joined #openstack-dev | 22:56 | |
| *** Mandell has joined #openstack-dev | 22:57 | |
| *** sarob has quit IRC | 22:57 | |
| *** epim has joined #openstack-dev | 22:58 | |
| *** sarob has joined #openstack-dev | 22:58 | |
| *** sandy__ has quit IRC | 22:59 | |
| *** thelorax123 has quit IRC | 22:59 | |
| *** thelorax123 has joined #openstack-dev | 23:00 | |
| *** ayoung has joined #openstack-dev | 23:01 | |
| *** buzztrol_ has joined #openstack-dev | 23:01 | |
| *** sarob_ has joined #openstack-dev | 23:01 | |
| *** sarob has quit IRC | 23:01 | |
| *** nermina has quit IRC | 23:01 | |
| *** gmurphy_ has joined #openstack-dev | 23:02 | |
| *** buzztroll has quit IRC | 23:02 | |
| *** gmurphy_ has quit IRC | 23:02 | |
| clarkb | claytonc: just drop a link to the other change or put the other change's change id in the comments soewhere | 23:03 |
| clarkb | claytonc: there is no formal way of doing that though | 23:03 |
| *** rkukura has quit IRC | 23:04 | |
| *** nati_uen_ has joined #openstack-dev | 23:04 | |
| claytonc | clarkb: thanks | 23:05 |
| *** buzztrol_ has quit IRC | 23:05 | |
| *** nati_ueno has quit IRC | 23:07 | |
| *** anniec has joined #openstack-dev | 23:07 | |
| *** e0ne has joined #openstack-dev | 23:07 | |
| *** rcleere has quit IRC | 23:07 | |
| *** burt has quit IRC | 23:08 | |
| *** termie_ is now known as termie | 23:08 | |
| *** termie has quit IRC | 23:08 | |
| *** termie has joined #openstack-dev | 23:08 | |
| *** e0ne has quit IRC | 23:08 | |
| *** e0ne has joined #openstack-dev | 23:09 | |
| *** e0ne has quit IRC | 23:10 | |
| *** SergeyLukjanov has joined #openstack-dev | 23:11 | |
| *** e0ne has joined #openstack-dev | 23:11 | |
| *** kbringard has quit IRC | 23:12 | |
| *** sandy__ has joined #openstack-dev | 23:12 | |
| *** jamielennox|away is now known as jamielennox | 23:12 | |
| *** utlemming has quit IRC | 23:13 | |
| SpamapS | Hrm, I was trying to add py33 to os-apply-config and I got this: | 23:13 |
| SpamapS | http://paste.openstack.org/show/54556 | 23:13 |
| SpamapS | anybody know what the problem is? | 23:13 |
| *** mriedem has joined #openstack-dev | 23:13 | |
| *** jcooley_ has quit IRC | 23:14 | |
| *** e0ne has quit IRC | 23:15 | |
| *** buzztroll has joined #openstack-dev | 23:16 | |
| *** jcoufal-mob has joined #openstack-dev | 23:16 | |
| clarkb | SpamapS: source the .tox venv then do `python setup.py egg_info` and see if you get a better stacktrace | 23:16 |
| *** susheel has left #openstack-dev | 23:16 | |
| *** utlemming has joined #openstack-dev | 23:16 | |
| *** bauzas has quit IRC | 23:17 | |
| SpamapS | clarkb: I get a successful run | 23:17 |
| clarkb | SpamapS: does the py33-4.log file have any better info in it? | 23:18 |
| SpamapS | http://paste.openstack.org/show/54557 | 23:18 |
| *** SergeyLukjanov has quit IRC | 23:18 | |
| SpamapS | clarkb: http://paste.openstack.org/show/54558 <-- py33-4.log | 23:19 |
| *** mattymo has quit IRC | 23:19 | |
| SpamapS | clarkb: looks identical | 23:19 |
| clarkb | SpamapS: about a pip install? | 23:20 |
| clarkb | does that work too? | 23:20 |
| SpamapS | clarkb: no | 23:20 |
| *** dolphm has joined #openstack-dev | 23:20 | |
| SpamapS | http://paste.openstack.org/show/54559 | 23:20 |
| SpamapS | there's pip install . | 23:20 |
| *** mattymo has joined #openstack-dev | 23:20 | |
| clarkb | pip install . not working is a known problem iirc. what if you change your cwd and pip install path_to_repo | 23:21 |
| SpamapS | doh ok | 23:21 |
| *** utlemming has quit IRC | 23:21 | |
| clarkb | pip bug iirc | 23:21 |
| SpamapS | identical bug | 23:22 |
| *** jecarey has quit IRC | 23:22 | |
| SpamapS | clarkb: let me upgrade tox/virtualenv | 23:22 |
| SpamapS | currently on tox 1.6.1 and venv 1.10.1 | 23:22 |
| *** neelashah has quit IRC | 23:23 | |
| *** melwitt has quit IRC | 23:23 | |
| *** jcooley_ has joined #openstack-dev | 23:23 | |
| clarkb | SpamapS: I am stumped, maybe you have old pbr? | 23:24 |
| *** melwitt has joined #openstack-dev | 23:24 | |
| *** jcoufal-mob has quit IRC | 23:24 | |
| SpamapS | clarkb: the venv has pbr 0.5.23 | 23:25 |
| *** prad has quit IRC | 23:25 | |
| *** dolphm has quit IRC | 23:25 | |
| *** dkranz has quit IRC | 23:25 | |
| *** exed has quit IRC | 23:25 | |
| *** buzztroll has quit IRC | 23:26 | |
| *** utlemming has joined #openstack-dev | 23:28 | |
| amcrn | can someone provide me the link that shows the code-review statistics for each project? (it lists reviewers, percentages, etc.) | 23:28 |
| amcrn | it was a site that served up a flat-file for each project, and it had ascii tables of all reviewers, percentage of reviews to code submissions, plus statistics about -1's, etc. | 23:28 |
| *** dolphm has joined #openstack-dev | 23:29 | |
| SpamapS | pbr is all 0.5.23 ... | 23:29 |
| SpamapS | clarkb: got newest tox, latest pbr.. no love :-P | 23:29 |
| clarkb | SpamapS: we should hunt down mordred | 23:29 |
| clarkb | hmm I wonder if zul has seen that | 23:29 |
| clarkb | zul: ^ | 23:29 |
| *** sgordon has quit IRC | 23:30 | |
| clarkb | amcrn: http://russellbryant.net/openstack-stats/ | 23:30 |
| amcrn | thanks clarkb | 23:30 |
| *** sarob_ has quit IRC | 23:31 | |
| *** sarob has joined #openstack-dev | 23:31 | |
| *** krtaylor has joined #openstack-dev | 23:31 | |
| *** anniec has quit IRC | 23:33 | |
| *** nati_uen_ has quit IRC | 23:34 | |
| *** nati_ueno has joined #openstack-dev | 23:34 | |
| *** sarob_ has joined #openstack-dev | 23:34 | |
| *** sarob_ has quit IRC | 23:34 | |
| *** sarob_ has joined #openstack-dev | 23:35 | |
| *** sarob has quit IRC | 23:35 | |
| *** denis_makogon has quit IRC | 23:38 | |
| *** eharney has quit IRC | 23:40 | |
| *** geekinutah has left #openstack-dev | 23:40 | |
| *** dbalog has left #openstack-dev | 23:40 | |
| pmathews | How do I make two reviews in Gerit inter-dependent that span two projects? | 23:41 |
| jamielennox | dolphm: ping? | 23:42 |
| *** jcooley_ has quit IRC | 23:42 | |
| dolphm | jamielennox: pong | 23:42 |
| jamielennox | dolphm: do you still have any objections to the extension discovery API? | 23:42 |
| dolphm | jamielennox: all of it :) | 23:43 |
| jamielennox | dolphm: yea, i didn't expect a change of opinion | 23:43 |
| clarkb | pmathews: you can't | 23:43 |
| *** jcooley_ has joined #openstack-dev | 23:43 | |
| jamielennox | dolphm: do you have any idea what we can do immediate term to replace it | 23:43 |
| clarkb | pmathews: usually document the dependency in the comments or git commit message | 23:43 |
| dolphm | jamielennox: provide {"links": {"users": "/v3/users", etc} from GET /v3/ | 23:44 |
| *** nermina has joined #openstack-dev | 23:44 | |
| *** anniec has joined #openstack-dev | 23:44 | |
| *** cpallares has quit IRC | 23:45 | |
| jamielennox | dolphm: so essentially we don't provide any differential between what is extension vs core resource | 23:45 |
| dolphm | jamielennox: well you do, but it can all be presented from relevant link objects | 23:45 |
| dolphm | jamielennox: for example, an extension might inject things like {"links": {"OS-TRUSTS:trusts": "/v3/OS-TRUSTS/trusts"}} | 23:45 |
| jamielennox | dolphm: unrelated - also have a look at my comment to https://review.openstack.org/#/c/55405/ and see if i'm off base | 23:46 |
| pmathews | clarkb: Something to the effect of "this is dependant upon [review] in [project]" | 23:46 |
| dolphm | (just like all other extended attributes, they need to be namespaced to avoid collisions) | 23:46 |
| dolphm | jamielennox: looking | 23:46 |
| clarkb | pmathews: right | 23:47 |
| clarkb | pmathews: so that reviewers are aware of it | 23:47 |
| dolphm | jamielennox: i have the same fuzzy feeling as you, i just neglected to comment on it because i hadn't made up my mind | 23:47 |
| *** alunduil has joined #openstack-dev | 23:47 | |
| jamielennox | dolphm: ok, so we need to revert the change to identity-api before m2 and have something to replace it | 23:47 |
| dolphm | jamielennox: there's also mark nottingham's RFC on the topic, which at least one other project is already using (there's a recent discussion about it on list) | 23:48 |
| *** peristeri has quit IRC | 23:49 | |
| jamielennox | dolphm: i'm looking at you as dictator here for some reason rather than waiting for the next meeting cause i have a couple of people who are looking to do extension stuff in keystoneclient | 23:49 |
| dolphm | jamielennox: it does links like v3 does, but with much more verbose metadata about them | 23:49 |
| jamielennox | dolphm: yea i saw that, i didn't see if they were able to co-exist | 23:49 |
| hemna | Is there a reason why we changed devstack stackrc's GIT_BASE from https:// to git:// ? | 23:49 |
| jamielennox | dolphm: but it's seriously stupid that nova and keystone somehow ended up with a different format | 23:49 |
| dolphm | jamielennox: ha. what kind of extension stuff? | 23:49 |
| jamielennox | dolphm: registering extension code into keystoneclient | 23:50 |
| dolphm | jamielennox: they used to be the same :( i don't think ours has changed | 23:50 |
| jamielennox | ours somehow got a "values" namespace | 23:50 |
| jamielennox | i think that might be all | 23:50 |
| dolphm | jamielennox: hmm... that actually sounds familiar (as a bug against keystone) | 23:51 |
| *** f13o has quit IRC | 23:51 | |
| jamielennox | dolphm: they were looking at doing the same sort of version discovery and i asked them to hold off until mine landed in keystoneclient and then re-use that | 23:51 |
| *** herndon has quit IRC | 23:52 | |
| *** mlavalle has quit IRC | 23:54 | |
| dolphm | jamielennox: okay, so doing this requires ZERO structural changes to the existing GET /v3/ API response. it's just adding more elements to the list of "links" https://gist.github.com/dolph/7816308 | 23:54 |
| *** jcooley_ has quit IRC | 23:55 | |
| dolphm | jamielennox: so, it's conceptually identical to how links are done in the rest of keystone, there's just room for metadata here | 23:55 |
| jamielennox | is that json-home or whatever compatible? | 23:55 |
| dolphm | jamielennox: i don't know for sure -- I suspect it might be but didn't dig in | 23:55 |
| dolphm | jamielennox: that's literally our current response though | 23:56 |
| jamielennox | dolphm: it doesn't really matter for now anyway i guess | 23:56 |
| dolphm | jamielennox: i have to run at the moment, i'll try and propose something to make this "official" in identity-api tomorrow (there's actually a placeholder for this call already) | 23:56 |
| jamielennox | dolphm: so it works for extensions that add a new controller - do we still need to load a user to find that they have an oauth extension | 23:56 |
| dolphm | jamielennox: yes | 23:57 |
| dolphm | jamielennox: well, oauth also adds root attributes that would appear here, like access_keys | 23:57 |
| dolphm | unless those are on a user | 23:57 |
| dolphm | which now i think they are | 23:57 |
| jamielennox | dolphm: i swear i knew the outcome of this conversation before i came in | 23:57 |
| jamielennox | still had to check | 23:57 |
| dolphm | jamielennox: lol any concerns? | 23:57 |
| jamielennox | dolphm: not really, just glad i hadn't done much on this impl | 23:58 |
| dolphm | jamielennox: =) comment on the gist or point people to it in the mean time | 23:58 |
| dolphm | jamielennox: i'm out! ttyl | 23:59 |
| *** carl_baldwin has quit IRC | 23:59 | |
| jamielennox | dolphm: cya | 23:59 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!