Monday, 2013-12-16

*** sthaha has joined #openstack-dev00:00
*** sarob has joined #openstack-dev00:02
*** akrivoka has quit IRC00:20
*** otherwiseguy has quit IRC00:21
*** jimjiang has quit IRC00:23
*** jimjiang has joined #openstack-dev00:25
*** Ruetobas has quit IRC00:27
*** forestelf has joined #openstack-dev00:29
*** dave_tucker has quit IRC00:30
*** markmcclain has quit IRC00:31
*** markmcclain1 has joined #openstack-dev00:31
*** rongze has joined #openstack-dev00:31
*** markmcclain1 has quit IRC00:32
*** markmcclain has joined #openstack-dev00:32
*** Ruetobas has joined #openstack-dev00:33
*** sarob has quit IRC00:35
*** rongze has quit IRC00:37
*** jimjiang has quit IRC00:40
*** jimjiang has joined #openstack-dev00:41
*** Zmax has joined #openstack-dev00:52
*** Zmax has left #openstack-dev00:52
*** jasonamyers has joined #openstack-dev00:57
*** jasonamyers has left #openstack-dev01:00
*** sarob has joined #openstack-dev01:02
*** nosnos has joined #openstack-dev01:05
*** faramir has joined #openstack-dev01:06
*** sarob has quit IRC01:07
*** DennyZhang has joined #openstack-dev01:09
*** jimjiang has quit IRC01:11
*** jimjiang has joined #openstack-dev01:12
*** pdevine has quit IRC01:14
*** yongli has joined #openstack-dev01:21
*** ewindisch has joined #openstack-dev01:31
*** jimjiang has quit IRC01:31
*** involt has joined #openstack-dev01:32
*** jimjiang has joined #openstack-dev01:33
*** buzztroll has joined #openstack-dev01:33
*** FunnyLookinHat has quit IRC01:33
*** DennyZhang has quit IRC01:34
*** involt has quit IRC01:35
*** ayoung has joined #openstack-dev01:37
*** pdevine has joined #openstack-dev01:37
ayoungjamielennox, the discoverability patch merged a while ago, right?01:38
jamielennoxayoung: yea01:38
ayoungjamielennox, is there any reason that wouldn't be triggered in the unified cli?01:38
jamielennoxayoung: i don't know if there has been a release since then01:39
jamielennoxand it's still pretty raw, but yea i'd like to see that01:39
ayoungjamielennox, Oh, it might not be in the RDO reelased RPMs01:39
jamielennoxi don't think it has been adopted into openstack-client yet though01:40
ayoungI can never keep the versions straight01:40
ayoungpython-keystoneclient-0.4.1.7.gdca1d42-0.1.627.dca1d42_4742f53.noarch01:40
ayoungjamielennox, I was using ^^ with git python-openstackclient01:40
jamielennoxayoung: i don't think we've done a version release of keystoneclient for a while01:40
morganfainbergayoung, it's sunday, aren't you supposed to be relaxing? /says the guy writing code from a coffee shop01:41
*** freyes has joined #openstack-dev01:41
ayoungit was mid november01:41
ayoungmorganfainberg, jamielennox 's week ais a half day ahead of mine01:41
jamielennoxyou're both hopeless01:41
ayoungI don;'t like to leave my team members completely OTF....01:41
morganfainbergayoung, hehe fair enough01:41
morganfainbergjamielennox, seriously, do you expect anything else?01:41
jamielennoxthat - or monday is the day when i can get stuff done :)01:41
ayoungjamielennox, I've been sitting by the fire drinking wine...I am only self-induced helpless01:42
*** jimjiang has quit IRC01:42
ayoungJoys of New England winters....sore back from shoveling snow the weight of wet concrete01:42
ayoungrequired some liquid painkilling of course01:42
*** jimjiang has joined #openstack-dev01:43
ayoungjamielennox, I found this on Friday, thought you might want to track it https://bugs.launchpad.net/python-openstackclient/+bug/126091601:43
jamielennoxheh, not really something i can relate to -  even in winter01:43
uvirtbotLaunchpad bug 1260916 in python-openstackclient "Setting --os-identity-api-version=3  still uses v2" [Undecided,New]01:43
jamielennoxayoung: oh, that's openstackclient01:44
jamielennoxhmm01:44
ayoungjamielennox,  I wanted to do some sample code using the python-keystoneclient, and the venv thing from last week kindof got int my way, so I tried this   http://adam.younglogic.com/2013/12/common-cli-keystone/01:44
jamielennoxi plan on getting into osc for keystone , but i just haven't had time01:45
jamielennoxhmm ouch, editing the db01:45
*** ozialien_ has joined #openstack-dev01:47
*** bingbu has joined #openstack-dev01:48
ayoungjamielennox, yeah...I don;t think we have an interop v2 v3 story right now01:48
*** jimjiang has quit IRC01:48
*** jimjiang has joined #openstack-dev01:49
jamielennoxayoung: i know, i'm doing what i can but even then i don't know if there is an endgame for how we're going to transition people01:49
ayoungjamielennox, I think it is a case of knocking dowbn tge barriers one at a time:  auth_token middles ware has to be first, then CLI, then WebUI01:51
ayoungwell...python API had to predate all of that, of course...well done there01:52
jamielennoxayoung: i had a look at auth_token for that the other day - it's still ugly with discovery01:52
jamielennoxstill too much that relies on v201:52
ayoungyup01:52
*** yamahata_ has quit IRC01:52
ayounguntil the other services can consume both v2 and v3, we are stuck on the lowest common denominator01:53
*** jimjiang has quit IRC01:53
*** jimjiang has joined #openstack-dev01:54
*** buzztroll has quit IRC01:55
ayoungjamielennox, seems like the discoverability thing might work there, if I had a recent enough version01:57
jamielennoxayoung: work where?01:58
ayoungpython-openstackclient01:58
jamielennoxayoung: does it use discovery?01:58
ayoungI don't know....does it need to be a deliberate choice>01:58
jamielennoxayoung: the problem so far with discovery is that there are two parts to a client (or soon will be)01:58
ayoungor would it work if I specified the auth_url correctly01:59
jamielennoxthere is discovering the auth_plugin and there is discovering the client01:59
jamielennoxbecause v2 and v3 clients work with v2 and v3 auth01:59
jamielennoxi think in regards to the API we just ignore that01:59
*** sarob has joined #openstack-dev01:59
ayoungIf I specify  --os-identity-api-version=3  should that force everything to be v3?01:59
ayoungI realize you don;t know the code yet, either02:00
jamielennoxbut it's something i came up against the other day and i'm not sure yet how thats going to work with auth plugins02:00
ayoungjust mean in the abstract...02:00
jamielennoxayoung: it has to02:00
jamielennoxahh02:00
jamielennoxyea, it has to02:00
ayoungI suspect I should build my own python-keystoneclient RPM and hack on the CLI then02:00
jamielennoxthe currect v3 client only does v3 auth, ditto v2 unless you start passing tokens around on your own02:00
jamielennoxayoung: or just checkout the git?02:00
*** pdevine has quit IRC02:01
jamielennoxvenvs are easy02:01
ayoungjamielennox, but the python-openstack client doesn't pull the python-keystoneclient from git into its venv02:01
jamielennoxayoung: no, but you can easily override that02:01
*** dstanek has joined #openstack-dev02:01
ayoung?02:01
jamielennoxinstall the venv, run python setup.py develop in both02:02
ayoungjamielennox, to be clear, you mean activate the python-openstackclient venv, then run python set.py for python-keystoneclient?02:03
*** yaguang has joined #openstack-dev02:03
*** rongze has joined #openstack-dev02:04
jamielennoxayoung: i use the wrapper02:05
jamielennoxmkvirtualenv osc02:05
jamielennoxcd python-openstackclient02:05
jamielennoxpip install -r requirements.txt -r test-requirements.txt02:05
*** radsy has quit IRC02:05
jamielennoxcd ../python-keystoneclient02:05
jamielennoxpip install -r requirements.txt -r test-requirements.txt02:06
ayoungyeah that is the same thing02:06
jamielennoxpython setup.py develop02:06
ayoungI used the venv creted by tox02:06
ayoungit is in python-openstackclient/tox/py2702:06
jamielennoxok, so after doing that i can see:02:07
jamielennox>>> keystoneclient.__file__02:07
jamielennox'/home/jlennox/work/python-keystoneclient/keystoneclient/__init__.pyc'02:07
jamielennoxso osc will use the development keystoneclient from git02:08
*** rongze has quit IRC02:08
ayoungcan you try using it to do something?02:08
ayounglike02:08
ayoung openstack user list02:08
*** xingchao has joined #openstack-dev02:08
*** jimjiang has quit IRC02:09
*** gongysh has joined #openstack-dev02:10
*** jimjiang has joined #openstack-dev02:10
ayoungI'm getting "POST http://127.0.0.1:5000/v3/tokens HTTP/1.0" 404 9302:10
*** fandikurnia01 has joined #openstack-dev02:10
fandikurnia01hello mate02:10
ayoungshould be auth02:10
ayoungfandikurnia01, I didn't even know I was in check.02:11
*** dstanek has quit IRC02:11
jamielennoxayoung: yea, me too02:12
ayoungjamielennox, I'll update the bug report02:12
*** mriedem has quit IRC02:12
jamielennoxayoung: discovery isn't done by default02:12
ayoungjamielennox, it seems to be...my auth_url is 5000:/v2.002:13
*** guohliu has joined #openstack-dev02:13
jamielennoxoh, i had set to v302:13
ayoungso it is loking at v3, but it is trying to call the v2 suburl of tokens02:13
jamielennoxhmm, i've no idea what user/pass i've got set up here02:13
*** buzztroll has joined #openstack-dev02:14
jamielennoxayoung: with a /v2.0 endpoint it's posting to /v2.0/tokesn02:14
*** mikeoutland has joined #openstack-dev02:15
*** jimjiang has quit IRC02:15
ayounglet me confirm02:16
jamielennoxhmm, i'm getting could not find project02:17
jamielennoxbut my local keystone install is pretty messed up02:17
ayoungthat is a different problem...02:17
jamielennoxbut it's hitting the endpoint02:17
ayoungtry setting projectId, not projectname02:17
*** mikeoutland has quit IRC02:17
ayoungactually, I have export OS_TENANT_NAME=admin02:17
ayoungoh, wait...I have the auth_url specified in my rc02:18
ayoungOS_AUTH_URL=http://127.0.0.1:5000/v302:18
jamielennoxyea02:18
ayoungOK...so I bet I can change that back to v2.0 and it will get my through that step...then fail on the project lookup...let me see02:19
*** sarob has quit IRC02:19
ayoungnow, that worked....02:19
*** erkules has quit IRC02:19
*** erkules_ has joined #openstack-dev02:19
ayoungeverything was v2.002:19
ayoungok, let me now try it with the v3 api...02:19
jamielennoxso it's not doing any discovery02:19
jamielennoxif i set OS_AUTH_URL=http://127.0.0.1:5000 then it fails02:20
*** sarob has joined #openstack-dev02:20
jamielennox"POST http://127.0.0.1:5000/tokens HTTP/1.0"02:20
ayoungopenstack  --os-identity-api-version=3  user list02:20
ayoung"POST /v2.0/auth/tokens HTTP/1.1" 404 228 0.00225102:20
ayoungwith02:20
ayoungexport OS_AUTH_URL=http://127.0.0.1:5000/02:21
jamielennoxinteresting02:21
ayoungI think it is getting it from the service catalog02:21
*** rushiagr has joined #openstack-dev02:21
*** jimjiang has joined #openstack-dev02:21
ayoungPOST /v2.0/auth/tokens02:22
jamielennoxayoung: it can't get an auth_url from the service catalog02:22
*** rongze has joined #openstack-dev02:23
ayoungwhere is it getting it from. then?  I've dropped v2.0 everwhere02:23
jamielennoxi don't know but it doesn't have a service catalog until after it's got that token02:23
ayoungah,nevermind02:23
ayoungdidn;t resource the rc after chagning, now I get02:23
ayoungPOST /auth/tokens02:23
ayoungIs this an error in python-keystoneclient or on python-openstackclient02:24
jamielennoxwhat?02:24
*** sarob has quit IRC02:24
*** bingbu has quit IRC02:24
jamielennoxthat you need to provide a versioned endpoint to a client? thats a client issue02:25
jamielennoxayoung: and not something i have a lot of scope to change02:25
ayoungso something in openstack client, then02:25
jamielennoxayoung: OSC should use the discoverabiilty when it comes out02:25
ayoungok, something to keep an eye on, then02:25
*** jimjiang has quit IRC02:26
*** stevemar has joined #openstack-dev02:26
*** hxgqh1987 has joined #openstack-dev02:26
jamielennoxayoung: yea, unfortunately there isn't much we can do for now - the clients expect a versioned endpoint so we are stuck with that pattern02:26
ayoungwe need to fix the osc first...I know dolphm was looking in to it.  I'll talk with him tomorrow.02:26
jamielennoxfrom now on though you don't instantiate a v2_0.client.Client you do client.Client(version=2..)02:26
ayoungjamielennox, have you looked at the osc code yet?02:27
jamielennoxayoung: briefly - there isn't much to it02:27
jamielennoxayoung: well, there isn't much to it's client handling code02:27
jamielennoxthere is a bunch to do with CLI02:27
*** jimjiang has joined #openstack-dev02:27
*** rongze_ has joined #openstack-dev02:31
*** ArcTanSusan has joined #openstack-dev02:33
*** rongze has quit IRC02:33
*** beagles has quit IRC02:33
*** colinmcnamara has quit IRC02:35
*** jimjiang has quit IRC02:35
*** jimjiang has joined #openstack-dev02:36
*** buzztroll has quit IRC02:36
*** bingbu has joined #openstack-dev02:37
*** yamahata has quit IRC02:38
*** jimjiang has quit IRC02:42
*** jimjiang has joined #openstack-dev02:43
*** hxgqh1987 has quit IRC02:50
*** hxgqh1987 has joined #openstack-dev02:53
*** pdevine has joined #openstack-dev02:55
*** yamahata_ has joined #openstack-dev02:55
*** tdruiva has quit IRC02:56
*** tdruiva has joined #openstack-dev02:56
*** yamahata has joined #openstack-dev02:57
*** hxgqh1987 has quit IRC02:59
*** jimjiang has quit IRC02:59
*** faramir has quit IRC03:00
*** jimjiang has joined #openstack-dev03:01
*** tdruiva has quit IRC03:01
*** hxgqh1987 has joined #openstack-dev03:02
*** pmathews has joined #openstack-dev03:03
*** rushiagr has quit IRC03:04
*** sarob has joined #openstack-dev03:05
*** jimjiang has quit IRC03:09
*** tdruiva has joined #openstack-dev03:09
*** jimjiang has joined #openstack-dev03:10
*** rushiagr has joined #openstack-dev03:14
*** ArcTanSusan has quit IRC03:15
*** hajay has joined #openstack-dev03:15
*** pmathews has quit IRC03:15
*** jimjiang has quit IRC03:17
*** bknudson has quit IRC03:17
*** jimjiang has joined #openstack-dev03:18
*** pmathews has joined #openstack-dev03:18
*** bknudson has joined #openstack-dev03:19
*** dkranz has quit IRC03:21
*** coasterz has quit IRC03:23
*** che-arne has quit IRC03:24
*** paragan has joined #openstack-dev03:25
*** jecarey has joined #openstack-dev03:25
*** che-arne has joined #openstack-dev03:26
*** bingbu has quit IRC03:26
*** jimjiang has quit IRC03:27
*** jimjiang has joined #openstack-dev03:28
*** paragan has quit IRC03:30
*** jimjiang has quit IRC03:33
*** jimjiang has joined #openstack-dev03:34
*** CaptTofu has joined #openstack-dev03:34
*** vkozhukalov has joined #openstack-dev03:35
*** hxgqh1987 has quit IRC03:36
*** CaptTofu has quit IRC03:37
*** CaptTofu has joined #openstack-dev03:37
*** fandikurnia01 has quit IRC03:37
*** bingbu has joined #openstack-dev03:38
*** jimjiang has quit IRC03:39
*** sarob has quit IRC03:41
*** dstanek has joined #openstack-dev03:41
*** jimjiang has joined #openstack-dev03:41
*** sarob has joined #openstack-dev03:41
*** freyes has quit IRC03:41
*** sarob has quit IRC03:42
*** sarob has joined #openstack-dev03:42
*** jhesketh__ has quit IRC03:46
*** jhesketh has quit IRC03:47
*** buzztroll has joined #openstack-dev03:47
*** kenperkins has quit IRC03:48
*** rushiagr has quit IRC03:48
*** kenperkins has joined #openstack-dev03:49
*** Ruetobas has quit IRC03:51
*** jimjiang has quit IRC03:51
*** jergerber has joined #openstack-dev03:51
*** jcooley_ has quit IRC03:51
*** buzztroll has quit IRC03:52
*** jimjiang has joined #openstack-dev03:52
*** buzztroll has joined #openstack-dev03:53
*** Ruetobas has joined #openstack-dev03:53
*** jecarey has quit IRC03:54
*** jimjiang has quit IRC03:56
*** chandankumar has joined #openstack-dev03:56
*** matiu has joined #openstack-dev03:56
*** buzztroll has quit IRC03:57
*** jergerber has quit IRC03:57
*** jimjiang has joined #openstack-dev03:58
*** Ruetobas has quit IRC03:58
*** jhesketh__ has joined #openstack-dev03:59
*** jhesketh has joined #openstack-dev04:00
*** paragan has joined #openstack-dev04:00
*** CaptTofu has quit IRC04:01
*** jimjiang has quit IRC04:04
*** Ruetobas has joined #openstack-dev04:04
*** CaptTofu has joined #openstack-dev04:04
*** CaptTofu has quit IRC04:05
*** jimjiang has joined #openstack-dev04:08
*** Ruetobas has quit IRC04:08
*** Ruetobas has joined #openstack-dev04:09
*** vartom11111119 has joined #openstack-dev04:12
*** hxgqh1987 has joined #openstack-dev04:15
*** jimjiang has quit IRC04:15
*** jimjiang has joined #openstack-dev04:16
*** spiteball has joined #openstack-dev04:17
*** aditirav has joined #openstack-dev04:18
*** spiteball has quit IRC04:19
*** jimjiang has quit IRC04:21
*** jimjiang has joined #openstack-dev04:21
*** hajay has quit IRC04:24
*** hajay has joined #openstack-dev04:24
*** jimjiang has quit IRC04:26
*** prekarat has joined #openstack-dev04:26
*** jimjiang has joined #openstack-dev04:26
*** sdake has quit IRC04:29
*** prekarat has quit IRC04:31
*** rushiagr has joined #openstack-dev04:32
*** jimjiang has quit IRC04:33
*** buzztroll has joined #openstack-dev04:33
*** prekarat has joined #openstack-dev04:33
*** rdas has joined #openstack-dev04:33
*** stevemar has quit IRC04:33
*** epopt37 has quit IRC04:34
*** kushal has joined #openstack-dev04:35
*** jimjiang has joined #openstack-dev04:39
*** aditirav has quit IRC04:39
*** aditirav has joined #openstack-dev04:40
*** tdruiva has quit IRC04:43
*** tdruiva has joined #openstack-dev04:43
*** buzztroll has quit IRC04:43
*** rongze_ has quit IRC04:44
*** jimjiang has quit IRC04:45
*** jcooley_ has joined #openstack-dev04:46
*** jimjiang has joined #openstack-dev04:46
*** epopt37 has joined #openstack-dev04:46
*** tdruiva has quit IRC04:48
*** DinaBelova has joined #openstack-dev04:48
*** aditirav_ has joined #openstack-dev04:50
*** sarob has quit IRC04:51
*** sarob has joined #openstack-dev04:51
*** aditirav has quit IRC04:54
*** aditirav_ is now known as aditirav04:54
*** aditirav_ has joined #openstack-dev04:55
*** aditirav has quit IRC04:55
*** aditirav_ is now known as aditirav04:55
*** sarob has quit IRC04:56
*** jimjiang has quit IRC04:56
*** spzala has quit IRC04:56
*** jimjiang has joined #openstack-dev04:57
*** urulama has joined #openstack-dev04:58
*** ArxCruz has quit IRC04:58
*** faramir has joined #openstack-dev04:59
*** hajay has left #openstack-dev04:59
*** buzztroll has joined #openstack-dev05:00
*** Ryan_Lane has quit IRC05:06
*** Nikolay_St has joined #openstack-dev05:07
*** haomaiwang has joined #openstack-dev05:09
*** SergeyLukjanov has joined #openstack-dev05:11
*** kenperkins has quit IRC05:12
*** haomaiwang has quit IRC05:14
*** paragan has quit IRC05:15
*** haomaiwang has joined #openstack-dev05:18
*** jcooley_ has quit IRC05:19
*** hxgqh1987 has quit IRC05:19
*** Anju has joined #openstack-dev05:20
jamielennoxwho's pinning versions of WSME? http://logs.openstack.org/01/59601/10/check/check-grenade-dsvm/1718e5a/logs/new/screen-s-proxy.txt.gz05:21
*** haomaiwang has quit IRC05:23
*** prekarat has quit IRC05:25
*** Ruetobas has quit IRC05:25
*** flor3n has quit IRC05:25
*** fandikurnia01 has joined #openstack-dev05:26
*** markmcclain has quit IRC05:27
*** markmcclain1 has joined #openstack-dev05:27
*** mikeoutland has joined #openstack-dev05:27
*** stevemar has joined #openstack-dev05:29
*** faramir has quit IRC05:29
*** noslzzp has quit IRC05:31
*** faramir has joined #openstack-dev05:32
*** jimjiang has quit IRC05:33
*** nosnos_ has joined #openstack-dev05:34
*** jimjiang has joined #openstack-dev05:34
*** rongze has joined #openstack-dev05:35
*** nosnos_ has quit IRC05:35
*** nosnos_ has joined #openstack-dev05:36
*** Ryan_Lane has joined #openstack-dev05:36
*** nosnos has quit IRC05:37
jamielennoxappears that an old version of something (probably ceilometer) has pinned WSME>=0.5b5,<0.5b6  then when grenade tries to do an upgrade to the current global-requirements which has incompatible WSME>=0.5b605:38
jamielennoxwhy does this get triggered by the additional dependency to keystone?05:38
*** rongze has quit IRC05:41
*** erkules_ is now known as erkules05:41
*** Ryan_Lane has quit IRC05:41
*** jimjiang has quit IRC05:42
*** jimjiang has joined #openstack-dev05:43
*** DinaBelova has quit IRC05:43
*** sarob has joined #openstack-dev05:45
*** Adri2000 has quit IRC05:47
*** jimjiang has quit IRC05:48
*** Ruetobas has joined #openstack-dev05:48
*** haomaiwang has joined #openstack-dev05:49
*** jimjiang has joined #openstack-dev05:49
*** DinaBelova has joined #openstack-dev05:50
*** sarob has quit IRC05:51
*** sarob has joined #openstack-dev05:52
*** pmathews has quit IRC05:52
*** neoXsys has joined #openstack-dev05:53
*** sarob has quit IRC05:56
*** buzztroll has joined #openstack-dev05:56
*** sarob has joined #openstack-dev05:59
*** jcooley_ has joined #openstack-dev06:01
*** mikeoutland has quit IRC06:01
*** jhesketh__ has quit IRC06:02
*** amotoki has joined #openstack-dev06:05
*** vkozhukalov has quit IRC06:06
*** sarob has quit IRC06:06
*** skraynev has joined #openstack-dev06:06
*** sarob has joined #openstack-dev06:07
*** irenab has joined #openstack-dev06:07
*** rongze has joined #openstack-dev06:08
*** sarob has quit IRC06:09
*** sarob has joined #openstack-dev06:09
*** SergeyLukjanov is now known as _SergeyLukjanov06:11
*** jhesketh__ has joined #openstack-dev06:17
*** sumanthns has joined #openstack-dev06:18
*** neeti has joined #openstack-dev06:18
*** jcooley_ has quit IRC06:20
*** _SergeyLukjanov is now known as SergeyLukjanov06:20
*** pdevine has quit IRC06:21
*** fandikurnia01 has quit IRC06:22
*** vartom11111119 has quit IRC06:24
*** paragan has joined #openstack-dev06:28
*** nelsnelson has joined #openstack-dev06:30
*** jimjiang has quit IRC06:32
*** jimjiang has joined #openstack-dev06:33
*** buzztroll has quit IRC06:34
*** kushal has quit IRC06:35
*** jcooley_ has joined #openstack-dev06:36
*** Ryan_Lane has joined #openstack-dev06:37
*** DennyZhang has joined #openstack-dev06:38
*** jcooley_ has quit IRC06:39
*** Ryan_Lane has quit IRC06:42
*** alex_klimov has joined #openstack-dev06:42
*** hajay__ has joined #openstack-dev06:43
*** mrunge has joined #openstack-dev06:44
*** sushils has quit IRC06:44
*** rushiagr has quit IRC06:44
*** hajay__ has quit IRC06:48
*** jimjiang has quit IRC06:50
*** jimjiang has joined #openstack-dev06:50
*** aditirav has quit IRC06:51
*** aditirav has joined #openstack-dev06:52
*** jimjiang has quit IRC06:55
*** jimjiang has joined #openstack-dev06:56
*** nosnos has joined #openstack-dev06:59
*** nosnos_ has quit IRC06:59
*** garyk has joined #openstack-dev07:01
*** jimjiang has quit IRC07:03
*** aditirav_ has joined #openstack-dev07:04
*** jimjiang has joined #openstack-dev07:05
*** gongysh has quit IRC07:06
*** yolanda has joined #openstack-dev07:06
*** aditirav has quit IRC07:08
*** aditirav_ is now known as aditirav07:08
*** jimjiang has quit IRC07:10
*** sarob has quit IRC07:10
*** sarob has joined #openstack-dev07:10
*** jimjiang has joined #openstack-dev07:11
*** evgenyf has joined #openstack-dev07:11
*** sarob has quit IRC07:15
*** rushiagr has joined #openstack-dev07:16
*** DennyZhang has quit IRC07:16
*** jimjiang has quit IRC07:21
*** jimjiang has joined #openstack-dev07:22
*** vartom11111119 has joined #openstack-dev07:22
*** lsmola has quit IRC07:26
*** jamielennox is now known as jamielennox|away07:29
*** Ruetobas has quit IRC07:31
*** Ruetobas has joined #openstack-dev07:31
*** ig3 has joined #openstack-dev07:33
*** ig2 has quit IRC07:33
*** amuller has joined #openstack-dev07:33
*** Ruetobas has quit IRC07:36
*** doron_afk has joined #openstack-dev07:37
*** alex_xu has joined #openstack-dev07:38
*** Ryan_Lane has joined #openstack-dev07:38
*** ArcTanSusan has joined #openstack-dev07:40
*** fatguylittlecoat has quit IRC07:41
*** Ryan_Lane has quit IRC07:43
*** jistr has joined #openstack-dev07:43
*** Ruetobas has joined #openstack-dev07:43
*** buzztroll has joined #openstack-dev07:45
*** ohadlevy has quit IRC07:45
*** ljjjustin has joined #openstack-dev07:45
*** ohadlevy has joined #openstack-dev07:46
*** ohadlevy is now known as Guest403107:46
*** steven-weston has joined #openstack-dev07:47
*** buzztroll has quit IRC07:49
*** prekarat has joined #openstack-dev07:50
*** vkozhukalov has joined #openstack-dev07:53
*** jcoufal has joined #openstack-dev07:53
*** Drankis has joined #openstack-dev07:55
*** tkammer has joined #openstack-dev07:57
*** ig3 is now known as ig07:58
*** DennyZhang has joined #openstack-dev07:59
*** neoXsys has quit IRC07:59
*** Guest4031 has quit IRC07:59
*** kushal has joined #openstack-dev08:00
*** ArcTanSusan has quit IRC08:01
*** ArcTanSusan has joined #openstack-dev08:01
*** boris-42 has joined #openstack-dev08:03
*** DennyZhang has quit IRC08:03
*** ohadlevy_ has joined #openstack-dev08:05
*** Ghe_HPDi1cover is now known as GheRivero08:07
ttxnotmyname: I seem to remeber mordred saying it now happens automatically. Still, will wait for his confirmation before deleting MP for swift08:07
ttxmordred: context: <notmyname> 19:50:48> ttx: mordred: we need to merge milestone-proposed back into master in swift to get the tag-based versioning to work08:07
*** jimjiang has quit IRC08:08
*** jimjiang has joined #openstack-dev08:09
*** sarob has joined #openstack-dev08:10
*** neoXsys has joined #openstack-dev08:11
*** flaper87|afk is now known as flaper8708:12
*** jimjiang has quit IRC08:13
*** ArcTanSusan has quit IRC08:14
*** jimjiang has joined #openstack-dev08:15
*** che-arne has quit IRC08:16
*** jamespage has quit IRC08:17
*** yolanda has quit IRC08:17
*** yolanda has joined #openstack-dev08:18
*** stevemar has quit IRC08:19
*** dstanek has quit IRC08:20
*** jamespage has joined #openstack-dev08:20
*** jamespage has joined #openstack-dev08:20
*** bauzas has joined #openstack-dev08:20
*** sahid has joined #openstack-dev08:21
*** colinmcnamara has joined #openstack-dev08:21
*** ljjjustin has quit IRC08:22
*** colinmcnamara has quit IRC08:23
*** jhesketh__ has quit IRC08:23
*** jhesketh__ has joined #openstack-dev08:24
*** guohliu has quit IRC08:26
*** DinaBelova has quit IRC08:26
*** yeylon__ has joined #openstack-dev08:27
*** matrohon has joined #openstack-dev08:27
*** ifarkas has joined #openstack-dev08:30
*** lsmola has joined #openstack-dev08:31
*** rdas has quit IRC08:33
*** jimjiang has quit IRC08:33
*** xqueralt has joined #openstack-dev08:34
*** Abhishek_ has joined #openstack-dev08:34
*** che-arne has joined #openstack-dev08:34
*** jimjiang has joined #openstack-dev08:35
*** sushils has joined #openstack-dev08:36
*** jtomasek has joined #openstack-dev08:36
*** markmc has joined #openstack-dev08:36
*** rdas has joined #openstack-dev08:38
*** kushal has quit IRC08:38
*** jhesketh has quit IRC08:38
*** jhesketh has joined #openstack-dev08:41
*** prekarat has quit IRC08:41
*** sarob has quit IRC08:42
*** matrohon has quit IRC08:43
*** jimjiang has quit IRC08:44
*** e0ne has joined #openstack-dev08:44
*** DinaBelova has joined #openstack-dev08:44
*** jimjiang has joined #openstack-dev08:45
*** kushal has joined #openstack-dev08:46
*** SergeyLukjanov has quit IRC08:46
*** JordanP has joined #openstack-dev08:46
*** aditirav has quit IRC08:49
*** aditirav has joined #openstack-dev08:49
*** aditirav_ has joined #openstack-dev08:50
*** aditirav has quit IRC08:54
*** aditirav_ is now known as aditirav08:54
*** faramir has quit IRC08:59
*** mkerrin has quit IRC09:00
*** DennyZhang has joined #openstack-dev09:00
*** rdas has quit IRC09:00
*** ndipanov has joined #openstack-dev09:00
*** rdas has joined #openstack-dev09:01
*** eglynn has joined #openstack-dev09:01
*** sunjunkie has joined #openstack-dev09:02
*** boden has joined #openstack-dev09:02
*** sunjunkie has quit IRC09:03
*** DennyZhang has quit IRC09:04
*** arezmerita has joined #openstack-dev09:05
*** yassine has joined #openstack-dev09:06
*** ygbo has joined #openstack-dev09:07
*** jog0 has quit IRC09:08
*** DinaBelova has quit IRC09:08
*** jog0 has joined #openstack-dev09:08
*** safchain has joined #openstack-dev09:08
*** johnthetubaguy has joined #openstack-dev09:08
*** johnthetubaguy has quit IRC09:08
*** johnthetubaguy has joined #openstack-dev09:09
*** sarob has joined #openstack-dev09:09
*** sarob has quit IRC09:10
*** sarob has joined #openstack-dev09:11
*** jhesketh has quit IRC09:12
*** ig has quit IRC09:12
*** jhesketh has joined #openstack-dev09:12
*** ig has joined #openstack-dev09:13
*** sarob has quit IRC09:15
*** Abhishek_ has quit IRC09:15
*** xga__ has quit IRC09:16
*** derekh has joined #openstack-dev09:17
*** teran has quit IRC09:17
*** jimjiang has quit IRC09:17
*** teran has joined #openstack-dev09:18
*** jimjiang has joined #openstack-dev09:19
*** teran has quit IRC09:20
*** aditirav has quit IRC09:21
*** aditirav has joined #openstack-dev09:21
*** faramir has joined #openstack-dev09:22
*** Abhishek_ has joined #openstack-dev09:24
*** bingbu has quit IRC09:25
*** e0ne_ has joined #openstack-dev09:25
*** e0ne has quit IRC09:29
*** ruhe has joined #openstack-dev09:29
*** aditirav_ has joined #openstack-dev09:30
*** dave_tucker has joined #openstack-dev09:31
*** DinaBelova has joined #openstack-dev09:32
*** giulivo has joined #openstack-dev09:32
*** lucasagomes has joined #openstack-dev09:33
*** aditirav has quit IRC09:33
*** aditirav_ is now known as aditirav09:33
*** romcheg has joined #openstack-dev09:34
*** mancdaz_away is now known as mancdaz09:35
*** yolanda has quit IRC09:35
*** romcheg has quit IRC09:35
*** michchap_ has quit IRC09:37
*** HenryG_ has joined #openstack-dev09:37
*** johnthetubaguy1 has joined #openstack-dev09:37
*** michchap has joined #openstack-dev09:37
*** ohadlevy_ has quit IRC09:38
*** che-arne has quit IRC09:39
*** mrunge has quit IRC09:39
*** johnthetubaguy has quit IRC09:40
*** HenryG has quit IRC09:40
*** jistr has quit IRC09:40
*** gszasz has joined #openstack-dev09:40
*** mrunge has joined #openstack-dev09:42
*** corXi has joined #openstack-dev09:42
*** marekd|away is now known as marekd09:43
*** che-arne has joined #openstack-dev09:45
*** yamahata_ has quit IRC09:47
*** alex_xu has quit IRC09:48
*** arozumenko has joined #openstack-dev09:49
*** Ruetobas has quit IRC09:49
*** jp_at_hp has joined #openstack-dev09:50
*** jaimegil has joined #openstack-dev09:52
*** johnthetubaguy1 has quit IRC09:52
*** giulivo has quit IRC09:52
*** jimjiang has quit IRC09:52
*** jtomasek has quit IRC09:52
*** yeylon__ has quit IRC09:52
*** jamespage has quit IRC09:52
*** haomaiwang has quit IRC09:52
*** bknudson has quit IRC09:52
*** sthaha has quit IRC09:52
*** decede has quit IRC09:52
*** cyeoh has quit IRC09:52
*** CrackerJackMack has quit IRC09:52
*** persia has quit IRC09:52
*** rm_work|away has quit IRC09:52
*** Samos123 has quit IRC09:52
*** jyhc has quit IRC09:52
*** jcannava has quit IRC09:52
*** galstrom has quit IRC09:52
*** briancline has quit IRC09:52
*** morganfainberg has quit IRC09:52
*** iartarisi has joined #openstack-dev09:54
*** johnthetubaguy1 has joined #openstack-dev09:54
*** giulivo has joined #openstack-dev09:54
*** jimjiang has joined #openstack-dev09:54
*** jtomasek has joined #openstack-dev09:54
*** yeylon__ has joined #openstack-dev09:54
*** jamespage has joined #openstack-dev09:54
*** haomaiwang has joined #openstack-dev09:54
*** bknudson has joined #openstack-dev09:54
*** sthaha has joined #openstack-dev09:54
*** decede has joined #openstack-dev09:54
*** cyeoh has joined #openstack-dev09:54
*** CrackerJackMack has joined #openstack-dev09:54
*** persia has joined #openstack-dev09:54
*** rm_work|away has joined #openstack-dev09:54
*** Samos123 has joined #openstack-dev09:54
*** jyhc has joined #openstack-dev09:54
*** galstrom has joined #openstack-dev09:54
*** jcannava has joined #openstack-dev09:54
*** morganfainberg has joined #openstack-dev09:54
*** briancline has joined #openstack-dev09:54
*** kushal has quit IRC09:54
*** swaT30 has quit IRC09:54
*** kushal has joined #openstack-dev09:56
*** basha has joined #openstack-dev09:56
bashabnemec: ping09:56
*** mindpixel has joined #openstack-dev09:56
*** swaT30 has joined #openstack-dev09:57
*** Ruetobas has joined #openstack-dev09:58
*** Abhishek_ has quit IRC09:58
*** doron_afk is now known as doron09:58
*** jistr has joined #openstack-dev09:59
*** devvesa has joined #openstack-dev10:00
*** Ruetobas has quit IRC10:02
*** e0ne has joined #openstack-dev10:03
*** e0ne_ has quit IRC10:03
*** e0ne has quit IRC10:07
*** Ruetobas has joined #openstack-dev10:07
*** teran has joined #openstack-dev10:08
*** basha has quit IRC10:09
*** rongze has quit IRC10:09
*** exed has joined #openstack-dev10:09
*** sarob has joined #openstack-dev10:10
*** avishay has joined #openstack-dev10:11
*** basha has joined #openstack-dev10:12
*** max_lobur_afk is now known as max_lobur10:12
*** ArxCruz has joined #openstack-dev10:12
*** e0ne has joined #openstack-dev10:13
*** sarob has quit IRC10:15
*** faramir has quit IRC10:19
*** DinaBelova has quit IRC10:19
*** ruhe is now known as ruhe_10:19
*** mosulica has joined #openstack-dev10:23
*** athomas has joined #openstack-dev10:24
*** SergeyLukjanov has joined #openstack-dev10:24
*** evgenyf has quit IRC10:24
*** ruhe_ is now known as ruhe10:25
*** paragan has quit IRC10:28
*** martyntaylor has joined #openstack-dev10:29
*** markmcclain has joined #openstack-dev10:30
*** markmcclain1 has quit IRC10:30
*** basha has quit IRC10:32
*** markmcclain has quit IRC10:32
*** markmcclain has joined #openstack-dev10:32
*** Alexei_987 has quit IRC10:32
*** faramir has joined #openstack-dev10:32
*** andreaf has quit IRC10:37
*** reidrac has joined #openstack-dev10:38
*** yassine has quit IRC10:38
*** dave_tucker_ has joined #openstack-dev10:38
*** dave_tucker has quit IRC10:40
*** dave_tucker_ is now known as dave_tucker10:40
*** rongze has joined #openstack-dev10:40
*** che-arne has quit IRC10:40
*** Ryan_Lane has joined #openstack-dev10:40
*** Ryan_Lane has quit IRC10:45
*** martyntaylor has quit IRC10:45
*** rongze has quit IRC10:45
*** martyntaylor has joined #openstack-dev10:46
*** rushiagr has quit IRC10:46
flaper87ttx: ping10:47
*** sandywalsh has quit IRC10:47
*** xingchao has quit IRC10:47
*** avishayb has joined #openstack-dev10:47
*** ifarkas has quit IRC10:50
*** evgenyf has joined #openstack-dev10:51
*** martyntaylor has quit IRC10:53
*** e0ne has quit IRC10:53
*** e0ne_ has joined #openstack-dev10:53
*** martyntaylor has joined #openstack-dev10:55
*** tdruiva has joined #openstack-dev10:56
ttxflaper87: ola10:56
flaper87ttx: yo yo! Quick question, I hope. Am I missing something here? http://lists.openstack.org/pipermail/openstack-dev/2013-December/022221.html10:57
flaper87ttx: there hasn't been an answer and I do care about that thread :)10:57
flaper87and rustlebee is still sleeping10:57
* flaper87 will go through the last TC meeting logs10:58
ttxflaper87: The real benefits of the proposal is that we would now have a way to assert that a project is promising but it lacks a bit of maturity and team diversity/size10:58
ttxbecause without that assertion it's lost in the noise of "openstack-related" projects and never gets critical mass10:59
*** viktors has joined #openstack-dev11:00
ttxFor example, the TC agreed that Designate was a good diea, it just needed a bit wider support before we could consider it a part of the integrated release11:00
ttxidea*11:00
*** exed has quit IRC11:00
ttxBut despite us saying "it's good you should look into it and help" nobody really did11:01
*** johnthetubaguy1 has quit IRC11:01
flaper87ttx: yeah, true that.11:01
ttxWhile if we established it as an OpenStack program it would have had a bit of summit time, and some "officialness"11:01
ttxwhich would probably have solved the chicken/egg issue11:01
*** johnthetubaguy has joined #openstack-dev11:01
ttxthe two options out of this issue were;11:02
*** rossella_s has joined #openstack-dev11:02
ttx1- create a new label "awesome but young"11:02
*** sandywalsh has joined #openstack-dev11:02
flaper87What don't like much is letting projects that don't have an integrated team to have a program. What if instead we have a program called "Emerging Technology' and let those project fall into that program until their mature enough to have their own?11:02
ttx2- reuse programs11:02
ttxflaper87: What are you calling "integrated team" exactly ?11:02
ttx"integrated" means part of the integrated release.11:03
flaper87By integrated team I mean people working on an integrated Program / project. TBH, I'm not sure what the right term is for that. Thing is that there are programs that don't have projects.11:03
flaper87ttx: that's what I mean.11:04
ttxflaper87: we established "programs" especially to recognize that some teams efforts, which were not "integrated projects", were essential. Like Infra, Docs or QA11:04
*** akrivoka has joined #openstack-dev11:05
*** exed has joined #openstack-dev11:05
ttxso "programs" are distinct from "integrated"11:05
*** yamahata_ has joined #openstack-dev11:05
*** avishayb has quit IRC11:06
ttxflaper87: IIUC you're arguing that non-integrated vertical projects, like TripleO or incubated stuff, should not have a program. Right ?11:06
ttxIt's OK for integrated vertical, and purely horizontal stuff like "QA"11:06
flaper87ttx: exactly! That's clear to me! I guess I'm just using the wrong terms11:07
flaper87ttx: yeah, that's what I'm arguing11:07
ttxok, I see your point11:07
ttxA- Programs are only integrated verticals + horizontals11:08
ttxB- Programs are integrated verticals + horizontals + some diagonals (Deployment) + incubated stuff11:08
ttxC - B + "promising" stuff11:08
*** doron is now known as doron_afk11:09
ttxflaper87: We are currently at B, proposing to go C while you'd prefer A11:09
*** danpb has joined #openstack-dev11:10
flaper87ttx: I'd be happy to move 'some diagonals (Deployment)' to A.11:10
*** sarob has joined #openstack-dev11:10
ttxsure, you could consider tripleO to be horizontal enough. But what about incubated projects ? Would you accept they are a program ?11:11
flaper87I just think that something that doesn't make part of OpenStack's release cycles should be called official and have votes and all that11:11
flaper87ttx: I think incubated projects shouldn't worry about programs until they graduate. I do think the mission has to be stated and made clear before entering to incubation11:12
flaper87ttx: erm /should be called/shouldn't be called/11:12
*** tdruiva has quit IRC11:13
*** tdruiva has joined #openstack-dev11:14
*** andreaf has joined #openstack-dev11:14
*** sarob has quit IRC11:15
ttxflaper87: OK, that's a respectable argument11:15
*** prekarat has joined #openstack-dev11:16
ttxflaper87: You should probably follow up on your email to explain what programs should be in your opinion11:16
flaper87ttx: Yeah, I'll do that! Thanks for the clarification! :)11:16
ttxin summary: for "vertical" projects, not a program until graduation to integrated.11:16
*** rfolco has joined #openstack-dev11:17
*** WhiteAnthrax has quit IRC11:17
*** WhiteAnthrax has joined #openstack-dev11:18
*** tdruiva has quit IRC11:18
*** avishayb has joined #openstack-dev11:18
ttxflaper87: one thing to take into account is that programs are tied to ATC status and, in return, TC oversight. incubated projects are very much under the supervision of the TC, so it's only fair that they get to vote... Although I guess you could argue that they can gain voting rights when integrated.11:19
flaper87ttx: yeah, and I'd apply the same to emerging technology, which is why I think that maybe an 'Emerging Technology' program where 'promising projects' - even incubated projectcs - would fall in could make sense after all.11:21
flaper87projects under this program would fall under TCs supervision but won't get all the rights that integrated projects have11:21
ttxflaper87: I don't have strong feelings either way. Would you be around tomorrow for the TC meeting to defend that option ?11:22
*** prekarat has quit IRC11:23
flaper87ttx: I'm not sure I'll make it - hosting the local Python Meetup - but I'll definitely try. :/11:24
flaper87ttx: it's 20 UTC, isn't it?11:24
*** ruhe is now known as ruhe_11:24
ttxflaper87: yes11:25
*** ruhe_ has quit IRC11:25
*** Alexei_987 has joined #openstack-dev11:25
ttxflaper87: we may push back after vacation if too many TC members can't make it.11:25
* flaper87 calls all TC members and ask them not to be there!11:26
flaper87:D11:26
*** pixelb has joined #openstack-dev11:27
flaper87ttx: I'll send the email anyway, If there'll be a meeting tomorrow, I'll try to make it. Otherwise, I'll read the logs and bring the discussion back to the m-l if needed11:27
*** jaimegil has quit IRC11:30
*** jaimegil has joined #openstack-dev11:33
*** michchap has quit IRC11:34
*** michchap has joined #openstack-dev11:35
*** dave_tucker has quit IRC11:35
*** dave_tucker has joined #openstack-dev11:35
*** yolanda has joined #openstack-dev11:36
*** pcm_ has joined #openstack-dev11:36
*** jhesketh has quit IRC11:37
*** pcm_ has quit IRC11:37
*** pcm_ has joined #openstack-dev11:38
*** mancdaz is now known as mancdaz_away11:39
*** xqueralt is now known as xqueralt|lunch11:39
*** xqueralt|lunch is now known as xqueralt11:39
*** dave_tucker has quit IRC11:40
*** dave_tucker has joined #openstack-dev11:40
*** Ryan_Lane has joined #openstack-dev11:41
*** ifarkas has joined #openstack-dev11:42
*** Ryan_Lane has quit IRC11:46
*** zaneb has quit IRC11:49
*** SergeyLukjanov has quit IRC11:51
*** SergeyLukjanov has joined #openstack-dev11:52
*** urulama_ has joined #openstack-dev11:54
*** urulama has quit IRC11:55
*** evgenyf has quit IRC11:55
*** sarob has joined #openstack-dev11:56
*** mancdaz_away is now known as mancdaz11:56
*** evgenyf has joined #openstack-dev11:57
*** Adri2000 has joined #openstack-dev11:58
*** doron_afk is now known as doron12:01
*** zaneb has joined #openstack-dev12:01
*** e0ne has joined #openstack-dev12:01
*** eglynn has quit IRC12:02
*** yassine has joined #openstack-dev12:05
*** doron is now known as doron_afk12:05
*** e0ne_ has quit IRC12:05
*** eglynn has joined #openstack-dev12:09
*** rdas has quit IRC12:12
*** ilyashakhat has joined #openstack-dev12:13
*** jhesketh__ has quit IRC12:17
*** tdruiva has joined #openstack-dev12:18
*** faramir has quit IRC12:18
*** tdruiva has quit IRC12:20
*** tdruiva has joined #openstack-dev12:20
*** andreaf has quit IRC12:21
*** rushiagr has joined #openstack-dev12:22
*** sarob has quit IRC12:22
*** yolanda has quit IRC12:22
*** dave_tucker has quit IRC12:22
*** Abhishek_ has joined #openstack-dev12:24
*** yamahata_ has quit IRC12:24
*** HenryG_ has quit IRC12:24
*** tdruiva has quit IRC12:24
koolhead17ttx: around?12:25
*** doron_afk is now known as doron12:25
*** dave_tucker has joined #openstack-dev12:27
*** urulama_ has quit IRC12:27
*** yamahata_ has joined #openstack-dev12:29
*** yaguang has quit IRC12:29
*** reidrac has quit IRC12:30
*** FunnyLookinHat has joined #openstack-dev12:30
*** lucasagomes is now known as lucas-hungry12:31
*** jhesketh__ has joined #openstack-dev12:31
*** tdruiva has joined #openstack-dev12:33
*** HenryG has joined #openstack-dev12:35
*** sumanthns has quit IRC12:35
*** paragan has joined #openstack-dev12:35
*** paragan has quit IRC12:35
*** paragan has joined #openstack-dev12:35
ttxkoolhead17: yes?12:36
*** yolanda has joined #openstack-dev12:38
*** tonix has joined #openstack-dev12:39
*** HenryG has quit IRC12:40
*** Abhishek_ has quit IRC12:41
*** rongze has joined #openstack-dev12:41
*** Ryan_Lane has joined #openstack-dev12:42
*** armax has joined #openstack-dev12:42
*** Hg_ has joined #openstack-dev12:42
*** thomasem has joined #openstack-dev12:43
*** ruhe has joined #openstack-dev12:45
*** paragan has quit IRC12:46
*** Ryan_Lane has quit IRC12:46
*** rongze has quit IRC12:46
*** paragan has joined #openstack-dev12:46
*** paragan has quit IRC12:46
*** paragan has joined #openstack-dev12:46
*** nosnos has quit IRC12:47
*** vartom11111119 has quit IRC12:48
*** fbo_away is now known as fbo12:48
*** amotoki has quit IRC12:51
*** Drankis has quit IRC12:52
*** jamespage has quit IRC12:52
*** jamespage has joined #openstack-dev12:52
*** jamespage has joined #openstack-dev12:52
*** tdruiva has quit IRC12:53
*** tdruiva has joined #openstack-dev12:53
*** xchu has joined #openstack-dev12:53
*** omachace has joined #openstack-dev12:53
*** jamespage has quit IRC12:54
*** jamespage has joined #openstack-dev12:55
*** jamespage has joined #openstack-dev12:55
*** Drankis has joined #openstack-dev12:56
*** aditirav has quit IRC12:58
*** aditirav has joined #openstack-dev12:58
*** julienvey_ has joined #openstack-dev13:00
*** Sumeniac has joined #openstack-dev13:01
*** avishay has quit IRC13:01
*** irenab has quit IRC13:02
*** sandywalsh has quit IRC13:04
*** aditirav has quit IRC13:05
*** Hg_ has quit IRC13:06
*** amuller has quit IRC13:10
*** Hg_ has joined #openstack-dev13:10
*** amuller has joined #openstack-dev13:10
*** sarob has joined #openstack-dev13:10
*** markvoelker has joined #openstack-dev13:11
*** mkollaro has joined #openstack-dev13:11
*** Hg_ has quit IRC13:12
*** Abhishek has joined #openstack-dev13:15
*** dkranz has joined #openstack-dev13:16
*** sandywalsh has joined #openstack-dev13:18
*** julienvey_ has quit IRC13:18
*** bswartz has quit IRC13:21
*** xingchao has joined #openstack-dev13:23
*** jtomasek has quit IRC13:26
*** mrunge has quit IRC13:26
*** dims has quit IRC13:26
*** jtomasek has joined #openstack-dev13:26
*** garyk has quit IRC13:27
*** xga has joined #openstack-dev13:28
*** jaimegil has quit IRC13:28
*** alex_klimov has quit IRC13:28
*** alex_klimov has joined #openstack-dev13:29
*** rushiagr has quit IRC13:30
*** jdob has joined #openstack-dev13:30
*** radez_g0n3 is now known as radez13:32
*** colinmcnamara has joined #openstack-dev13:32
*** mdomsch has joined #openstack-dev13:32
*** dstanek has joined #openstack-dev13:32
*** HenryG has joined #openstack-dev13:32
*** dolphm has joined #openstack-dev13:32
*** MaxV has joined #openstack-dev13:33
*** colinmcnamara has quit IRC13:33
*** dims has joined #openstack-dev13:34
*** avishayb has quit IRC13:37
*** jobewan has joined #openstack-dev13:37
*** b3nt_pin has joined #openstack-dev13:37
*** b3nt_pin is now known as beagles13:38
*** avishayb has joined #openstack-dev13:40
*** spredzy_ is now known as spredzy13:41
*** jdob has quit IRC13:41
*** jdob has joined #openstack-dev13:41
*** Ryan_Lane has joined #openstack-dev13:42
*** xingchao_ has joined #openstack-dev13:43
*** sarob has quit IRC13:43
*** Abhishek has quit IRC13:44
*** xingchao has quit IRC13:46
*** jcoufal has quit IRC13:46
*** andreaf has joined #openstack-dev13:46
*** jcoufal has joined #openstack-dev13:46
*** Ryan_Lane has quit IRC13:46
*** bswartz has joined #openstack-dev13:47
*** glenng has joined #openstack-dev13:49
*** litong has joined #openstack-dev13:50
chmoueldhellmann: hey doug, let me know what do you think about this https://bugs.launchpad.net/oslo/+bug/126139513:50
uvirtbotLaunchpad bug 1261395 in oslo "generte_sample.sh is using an inconsistent /usr/bin/getopt" [Undecided,New]13:50
zulare any of the taskflow developers around?13:50
*** bswartz has quit IRC13:53
*** DinaBelova has joined #openstack-dev13:54
*** zigo has quit IRC13:55
*** doron is now known as doron_afk13:55
*** bpokorny has joined #openstack-dev13:57
*** doron_afk is now known as doron13:58
*** cpallares has joined #openstack-dev13:58
*** primemin1sterp has quit IRC13:59
*** gordc has joined #openstack-dev13:59
*** zigo has joined #openstack-dev14:00
*** vladikr has joined #openstack-dev14:00
*** dprince has joined #openstack-dev14:00
*** yeylon__ has quit IRC14:00
dhellmannchmouel: is it failing on a supported OS?14:01
*** mosulica_ has joined #openstack-dev14:01
*** garyk has joined #openstack-dev14:02
chmoueldhellmann: I am not sure what is a supported OS for dev box ?14:02
*** mosulica has quit IRC14:03
dhellmannchmouel: precise? I'm sure some version of RHEL/CentOS -- where does it actually fail?14:05
*** jdob has quit IRC14:05
chmoueldhellmann: it's reported failing on 12.04 for this guy https://review.openstack.org/#/c/57717/14:06
chmouel(last comment)14:06
chmouelit fails on /usr/bin/getopt14:06
*** jdob has joined #openstack-dev14:07
*** xchu has quit IRC14:07
*** xga has quit IRC14:07
*** xga_ has joined #openstack-dev14:07
dhellmannchmouel: and you were able to reproduce it? I haven't run that script in a while myself14:08
dhellmannchmouel: I think jd__ set up a gate test to verify that the ceilometer config doesn't change without being updated, and that would run on precise14:08
dhellmannchmouel: (12.04)14:08
*** terrylhowe has joined #openstack-dev14:09
*** che-arne has joined #openstack-dev14:09
*** johnthetubaguy has quit IRC14:09
chmoueldhellmann: i have just had a comment that the guy has another issue than mine on 12.04 which got fix using latest ubuntu but not sure what exactly14:09
chmoueldhellmann: i can see a problem but only on macosx but i guess this is not supported dev os14:10
*** morazi has joined #openstack-dev14:10
dhellmannchmouel: yeah, mac os x isn't supported for this14:10
*** johnthetubaguy has joined #openstack-dev14:10
*** sarob has joined #openstack-dev14:10
dhellmannchmouel: https://blueprints.launchpad.net/oslo/+spec/improve-config-discovery-for-docs will involve rewriting this tool14:10
*** DinaBelova has quit IRC14:11
chmoueldhellmann: ah ok nice14:11
*** rongze has joined #openstack-dev14:12
*** aeperezt has joined #openstack-dev14:13
*** e0ne_ has joined #openstack-dev14:14
*** thomasm_ has joined #openstack-dev14:15
*** jasondotstar has joined #openstack-dev14:15
*** sarob has quit IRC14:15
*** lbragstad1 has joined #openstack-dev14:16
*** afrittoli has joined #openstack-dev14:16
*** thomasm_ has left #openstack-dev14:17
*** gimps_ has joined #openstack-dev14:17
*** yamahata__ has joined #openstack-dev14:17
*** Shrews_ has joined #openstack-dev14:17
*** Sumeniac2 has joined #openstack-dev14:17
*** amuller_ has joined #openstack-dev14:17
*** eglynn_ has joined #openstack-dev14:17
*** exed_ has joined #openstack-dev14:17
*** spzala has joined #openstack-dev14:18
*** Shrews has quit IRC14:18
*** Shrews_ is now known as Shrews14:18
*** dstanek_afk has joined #openstack-dev14:18
*** glenng1 has joined #openstack-dev14:18
*** pcm__ has joined #openstack-dev14:18
*** mriedem has joined #openstack-dev14:19
*** ruhe_ has joined #openstack-dev14:19
*** blentz_ has joined #openstack-dev14:19
*** thomasm has joined #openstack-dev14:19
*** danjared_ has joined #openstack-dev14:19
*** unicell_ has joined #openstack-dev14:19
*** devananda has joined #openstack-dev14:20
*** thomasm is now known as Guest838514:20
*** mosulica has joined #openstack-dev14:20
*** alex_klimov has quit IRC14:20
*** mosulica_ has quit IRC14:20
*** zakiev has joined #openstack-dev14:20
*** alex_klimov has joined #openstack-dev14:21
*** saschpe has joined #openstack-dev14:21
*** tdruiva has quit IRC14:22
*** rustlebee is now known as russellb14:22
*** notmyname_ has joined #openstack-dev14:22
*** jp_at_hp1 has joined #openstack-dev14:22
*** tdruiva has joined #openstack-dev14:22
*** fbo- has joined #openstack-dev14:22
*** mestery_ is now known as mestery14:22
*** lbragstad1 has quit IRC14:23
*** portante_ has joined #openstack-dev14:23
*** cpallares has quit IRC14:23
*** glenng has quit IRC14:23
*** jcoufal has quit IRC14:23
*** andreaf has quit IRC14:23
*** jobewan has quit IRC14:23
*** HenryG has quit IRC14:23
*** dstanek has quit IRC14:23
*** amuller has quit IRC14:23
*** Sumeniac has quit IRC14:23
*** paragan has quit IRC14:23
*** ruhe has quit IRC14:23
*** thomasem has quit IRC14:23
*** eglynn has quit IRC14:23
*** e0ne has quit IRC14:23
*** pcm_ has quit IRC14:23
*** exed has quit IRC14:23
*** athomas has quit IRC14:23
*** kushal has quit IRC14:23
*** jp_at_hp has quit IRC14:23
*** gszasz has quit IRC14:23
*** arezmerita has quit IRC14:23
*** vkozhukalov has quit IRC14:23
*** yamahata has quit IRC14:23
*** gimps has quit IRC14:23
*** devanand1 has quit IRC14:23
*** saschpe_ has quit IRC14:23
*** rcrit has quit IRC14:23
*** portante has quit IRC14:23
*** lbragstad has quit IRC14:23
*** blentz has quit IRC14:23
*** Guest53164 has quit IRC14:23
*** sheeprine has quit IRC14:23
*** pasquier-s has quit IRC14:23
*** danjared has quit IRC14:23
*** openfly has quit IRC14:23
*** notmyname has quit IRC14:23
*** asalkeld has quit IRC14:23
*** sdake_ has quit IRC14:23
*** tellesnobrega has quit IRC14:23
*** fbo has quit IRC14:23
*** unicell has quit IRC14:23
*** fbo- is now known as fbo14:23
*** notmyname_ is now known as notmyname14:23
*** primeministerp has joined #openstack-dev14:23
*** SergeyLukjanov is now known as _SergeyLukjanov14:24
*** dstanek_afk is now known as dstanek14:24
*** giulivo has quit IRC14:24
*** Abhishek_ has joined #openstack-dev14:24
*** exed_ is now known as exed14:24
*** _SergeyLukjanov has quit IRC14:24
*** giulivo has joined #openstack-dev14:25
*** mfer has joined #openstack-dev14:26
*** jayg|g0n3 is now known as jayg14:26
*** fc__ has quit IRC14:27
*** reidrac has joined #openstack-dev14:27
*** unicell_ has quit IRC14:28
*** unicell_ has joined #openstack-dev14:28
*** propil has joined #openstack-dev14:28
*** jaypipes has joined #openstack-dev14:28
*** dolphm has quit IRC14:29
*** paragan has joined #openstack-dev14:29
*** kushal has joined #openstack-dev14:30
*** exed has quit IRC14:30
*** pasquier-s has joined #openstack-dev14:30
*** sdake_ has joined #openstack-dev14:30
*** gszasz has joined #openstack-dev14:30
*** arezmerita has joined #openstack-dev14:30
*** vkozhukalov has joined #openstack-dev14:30
*** asalkeld has joined #openstack-dev14:30
*** dsirrine has joined #openstack-dev14:30
*** athomas has joined #openstack-dev14:30
*** jcoufal has joined #openstack-dev14:31
*** jobewan has joined #openstack-dev14:32
*** tellesnobrega has joined #openstack-dev14:32
*** Guest53164 has joined #openstack-dev14:32
*** exed has joined #openstack-dev14:32
*** rcrit has joined #openstack-dev14:32
*** jruzicka has joined #openstack-dev14:32
*** matrohon has joined #openstack-dev14:32
*** cpallares has joined #openstack-dev14:33
*** READ10 has joined #openstack-dev14:33
*** jamespage has quit IRC14:34
*** sdake_ has quit IRC14:35
*** decede has quit IRC14:35
*** kbringard has joined #openstack-dev14:35
*** sdake_ has joined #openstack-dev14:35
*** carl_baldwin has joined #openstack-dev14:36
*** xingchao_ has quit IRC14:36
*** jimjiang has quit IRC14:36
*** Guest53164 has quit IRC14:37
*** zakiev has quit IRC14:37
*** Sumeniac2 has quit IRC14:37
*** propil has quit IRC14:37
*** Sumeniac has joined #openstack-dev14:37
*** dolphm has joined #openstack-dev14:37
*** rushiagr has joined #openstack-dev14:38
*** jimjiang has joined #openstack-dev14:38
*** dolphm_ has joined #openstack-dev14:38
*** decede has joined #openstack-dev14:38
*** cfriesen_ has joined #openstack-dev14:39
*** achampion has quit IRC14:40
*** achampion has joined #openstack-dev14:40
*** dolphm has quit IRC14:42
*** dave_tucker has quit IRC14:42
*** devoid has joined #openstack-dev14:43
*** Ryan_Lane has joined #openstack-dev14:43
*** devoid has quit IRC14:43
*** Abhishek_ has quit IRC14:43
*** devoid has joined #openstack-dev14:44
*** arozumenko1 has joined #openstack-dev14:44
*** abramley has joined #openstack-dev14:44
*** buzztroll has joined #openstack-dev14:44
*** amuller_ is now known as amuller14:44
*** lbragstad has joined #openstack-dev14:44
*** arozumenko has quit IRC14:44
marekddolphm_: ping.14:46
*** rnirmal has joined #openstack-dev14:46
*** dkranz has quit IRC14:46
*** peristeri has joined #openstack-dev14:47
*** sheeprine has joined #openstack-dev14:47
*** noslzzp has joined #openstack-dev14:47
*** devoid has left #openstack-dev14:47
dolphm_marekd: i'll be back in a couple minutes14:47
marekddolphm_: no problem.14:47
*** Ryan_Lane has quit IRC14:48
*** dave_tucker has joined #openstack-dev14:48
*** amuller has quit IRC14:50
*** burt has joined #openstack-dev14:51
*** dolphm_ has quit IRC14:51
*** dolphm has joined #openstack-dev14:51
*** kenperkins has joined #openstack-dev14:52
dolphmmarekd: o/14:52
*** alunduil has quit IRC14:53
marekd\o <-- hehe love that! :)14:53
*** kevinconway has joined #openstack-dev14:53
marekddolphm: a quick question: shall i eventualle remove domains from virtual IdPs or not?14:53
*** yamahata_ has quit IRC14:53
*** kevinconway has quit IRC14:53
*** yamahata_ has joined #openstack-dev14:53
*** yamahata_ has quit IRC14:53
dolphmmarekd: grr always with the tough questions14:53
marekdups.14:54
dolphmmarekd: let me check out the review14:54
*** yamahata has joined #openstack-dev14:54
*** Guest53164 has joined #openstack-dev14:54
*** _dbalog has joined #openstack-dev14:54
marekddolphm: specs or the code?14:54
*** doron is now known as doron_afk14:54
*** joesavak has joined #openstack-dev14:54
dolphmmarekd: i'm looking at the spec now to see if there's any new arguments being made14:54
marekddolphm: ok.14:55
*** arozumenko1 has quit IRC14:55
*** FunnyLookinHat has quit IRC14:56
*** damnsmith is now known as dansmith14:56
dolphmmarekd: A) i don't think gyee's suggestion of making domain ownership "optional" is even remotely sensible -- there either needs to be a relationship or not (and starting from the "not" position, you can always add them later)14:56
* dolphm still reading14:56
*** DinaBelova has joined #openstack-dev14:57
*** danielbruno has joined #openstack-dev14:58
*** pfreund has joined #openstack-dev15:00
*** xga_ has quit IRC15:00
*** xga has joined #openstack-dev15:00
*** dkranz has joined #openstack-dev15:02
*** gordc has quit IRC15:04
*** jcooley_ has joined #openstack-dev15:04
ayoungdolphm, I think I need at least "issued_at_or_before" in the revocation to deal with change password/removed_roles type events.  If all we have is expired_at it would have to be calculated for those, and there is an edge condition where the sysadmin changed the default expiry time15:05
ayoungmarekd, yes, we should remove domains from IdPs15:05
dolphmayoung: expiry time of what?15:05
ayoungdolphm, the token15:05
dolphmayoung: if the sys admin shoots them self in the foot, that's not our problem15:06
ayoungdolphm, talking revocationes, I like using expire to match "all tokens issued from one token"15:06
ayoungdolphm, it isn't shooting in the foot, it is a  legitimate change15:06
*** glucas has joined #openstack-dev15:06
ayounglets say default expiry is set to 8 hours15:06
ayoungthen you realize you need to make it 415:06
*** che-arne has quit IRC15:07
ayoungyou revoked a token under the old rule15:07
ayoungafter the change, the token is valid again15:07
dolphmayoung: wtf15:07
ayoungcalculated value is no good15:07
dolphmayoung: your implementation is broken then15:07
ayoungdolphm, that is why we need to us issued_at, not expires_at15:07
*** HenryG has joined #openstack-dev15:08
ayoungactually, I think my example is wrong...it would be "false positives" but there is something wierd with revokin based on a calculated value15:08
*** aditirav has joined #openstack-dev15:08
ayoungdolphm, my point is that when a user changes their password, we need to revoke all tokens issued before that change15:09
ayoungthat is based on issued_at, which is why I added it to the revocation API15:09
dolphmayoung: both issued_at and expires_at are in the blueprint to solve different use cases15:09
ayoungdolphm, you had me yank issued_at from the API...you are OK with me putting it back in?15:09
*** joesavak has quit IRC15:09
*** jcoufal has quit IRC15:10
dolphmayoung: oh YOU put that in there -- that explains why the definition of the field contradicts with the example provided ;)15:10
ayoungI put it in the API15:10
ayoungnot in the blueprint, I think15:10
dolphmayoung: i'm talking about the blueprint15:10
*** eharney has joined #openstack-dev15:10
*** sarob has joined #openstack-dev15:10
dolphmayoung: expires_at should NOT be calculated -- it should be read from the token being revoked15:11
*** boris-42_ has joined #openstack-dev15:11
*** ngoracke has joined #openstack-dev15:11
*** gimps has joined #openstack-dev15:12
ayoungdolphm, right...that is not the case I am talking about.  I am sorry to jump into the middle.  THe case I am discussing is password change."   I was pointing out that for password change we need to base the rvocation off of issued time, not expiry time.  We don't have an explicit token we are revoking, we are revocaing a whole class of them.  TO do so on expiry time would be a mistake.15:12
*** exed_ has joined #openstack-dev15:12
*** corrigac has joined #openstack-dev15:12
*** tdruiva_ has joined #openstack-dev15:13
dolphmayoung: revoked_at == moment of password change # problem solved?15:13
*** Sumeniac2 has joined #openstack-dev15:13
*** NobodyCa1 is now known as NobodyCam15:13
*** davidlenwell has joined #openstack-dev15:13
*** LinuxJedi_ has joined #openstack-dev15:13
*** diakunchikov_ has joined #openstack-dev15:13
*** mestery_ has joined #openstack-dev15:14
*** aspiers_ has joined #openstack-dev15:14
*** vishy has quit IRC15:14
*** LinuxJedi has quit IRC15:14
*** hashfail has quit IRC15:14
*** gimps_ has quit IRC15:14
*** sheeprine has quit IRC15:14
*** Sumeniac has quit IRC15:14
*** reidrac has quit IRC15:14
*** jdurgin has quit IRC15:14
*** davidlenwell_ has quit IRC15:14
*** tdruiva has quit IRC15:14
*** doron_afk has quit IRC15:14
*** aspiers has quit IRC15:14
*** sirushti has quit IRC15:14
*** noorul has quit IRC15:14
*** boris-42 has quit IRC15:14
*** exed has quit IRC15:14
*** asalkeld has quit IRC15:14
*** akrivoka has quit IRC15:14
*** safchain has quit IRC15:14
*** diakunchikov has quit IRC15:14
*** ccorrigan has quit IRC15:14
*** exed_ is now known as exed15:14
*** aditirav_ has joined #openstack-dev15:14
ayoungdolphm, well, I don't think so....I mean, we need to tell auth_token "treat tokens as revoked that match this criteria" and if we just have the revoked_at value in the token, there is no indicator of the rule to apply.15:14
*** gimps_ has joined #openstack-dev15:14
*** safchain has joined #openstack-dev15:15
*** akrivoka has joined #openstack-dev15:15
*** cdub has quit IRC15:15
ayoungdolphm, I think we just need "issued_at_or_before"15:15
*** asalkeld has joined #openstack-dev15:15
*** sheeprine has joined #openstack-dev15:15
*** vishy has joined #openstack-dev15:15
ayoungissued_at_or_after would be superfluous15:15
*** sheeprine has quit IRC15:15
*** sheeprine has joined #openstack-dev15:15
*** swaT30 has quit IRC15:15
ayoungbut yes, the value there would match the revoked_at value, so we could optimize15:15
ayoungdolphm, maybe make it a boolean or enumerated value?15:16
*** jamespag` has joined #openstack-dev15:16
dolphmayoung: you're trying to solve a client side check in the API -- you're providing all the information to the client they need15:16
dolphmayoung: (with the timestamp of the revocation event)15:16
*** jdurgin has joined #openstack-dev15:16
*** aditirav has quit IRC15:16
*** aditirav_ is now known as aditirav15:16
*** bvandenh has quit IRC15:17
*** sirushti has joined #openstack-dev15:17
ayoungdolphm, right, so while the revoke_at time is the value we need, we need a little more info to say what rule to apply...but this might be true for expires_at_or_before as well...15:17
ayoungmaybe uinstead of sending dates, we just have the revoked_at time and a series of rules15:17
*** SergeyLukjanov has joined #openstack-dev15:17
*** mestery has quit IRC15:17
*** swaT30 has joined #openstack-dev15:18
*** jamespag` has quit IRC15:18
*** jamespag` has joined #openstack-dev15:18
*** terriyu has joined #openstack-dev15:18
ayounga subset of rules=["issued_at_or_before","expires_at","expires_at_or_before"....]15:18
ayoungall compared to the revoke_at time15:19
dolphmayoung: you're making this waaay complicated -- the use cases are expressed in the blueprint. which use case is not solved by it's provided example?15:19
*** annegentle_ has joined #openstack-dev15:19
ayoungdolphm, no, I am now simplifying it...I don't think we need more than one date...the time of the revocation event15:19
* ayoung needs to think about that..but it feels right15:20
*** che-arne has joined #openstack-dev15:20
dolphmayoung: that's what revoked_at represents15:20
dolphmayoung: maybe it needs to be more clearly named?15:20
ayoungzactly.15:20
dolphmevent_at ?15:20
dolphmrevocation_event_at ?15:20
ayoungrevocation_event_time15:20
ayoungevent_datetime15:21
dolphmayoung: all the other timestamps in the api are _at15:21
ayoungsomething along those lines15:21
*** jamespage has joined #openstack-dev15:21
*** jamespage has joined #openstack-dev15:21
*** neelashah has joined #openstack-dev15:21
ayoungdolphm, those are to indicate that they were inclusive15:21
ayoungat_or_before15:21
dolphmayoung: the event didn't occur in a range15:21
*** noorul has joined #openstack-dev15:21
*** aditirav has quit IRC15:22
*** cdub has joined #openstack-dev15:23
*** aditirav has joined #openstack-dev15:23
*** jamespag` is now known as jamespage_realme15:23
*** neelashah has quit IRC15:23
*** sarob has quit IRC15:23
*** vkozhukalov has quit IRC15:23
*** aditirav_ has joined #openstack-dev15:24
*** kevinconway has joined #openstack-dev15:24
*** ngoracke has quit IRC15:26
*** ngoracke1 has joined #openstack-dev15:26
*** fc__ has joined #openstack-dev15:26
*** xqueralt has quit IRC15:26
*** terriyu has quit IRC15:26
*** sudorandom_ has joined #openstack-dev15:26
dolphmayoung: if token.issued_at <= revocation_event.revocation_event_at: reject()  # in auth_token15:27
ayoungdolphm, I was being a little cautious due to date-time conversions15:27
*** vladikr_ has joined #openstack-dev15:27
*** vishy has quit IRC15:27
*** negronjl has quit IRC15:27
*** Apsu has quit IRC15:27
*** vipul has quit IRC15:27
*** ArxCruz has quit IRC15:27
*** jdurgin has quit IRC15:27
*** vladikr has quit IRC15:27
*** sudorandom has quit IRC15:27
*** sudorandom_ is now known as sudorandom15:27
dolphmayoung: date time conversion between what and what?15:27
*** ArxCruz has joined #openstack-dev15:27
ayoungstring and actual times...I was concerned that some languages might estimate15:27
*** Apsu has joined #openstack-dev15:27
*** aditirav has quit IRC15:27
*** aditirav_ is now known as aditirav15:27
*** vipul has joined #openstack-dev15:28
ayoungand we would end up with things doing exact comparisions that should match but dont15:28
*** kevinconway_ has joined #openstack-dev15:28
*** jdurgin has joined #openstack-dev15:28
dolphmayoung: that's why we use timezone-aware ISO 8601 UTC datetimes *everywhere*15:28
*** jamespage has quit IRC15:29
ayoungdolphm, yeah...I'm just paranoid15:29
*** kevinconway has quit IRC15:29
*** kevinconway_ is now known as kevinconway15:29
ayoungbut...I think we are in agreement.  I like the rule you poste above as the way to document it15:29
dolphmayoung: you're more likely to introduce a bug by deviating from the established convention ;)15:29
ayoung token.issued_at <= revocation_event.revocation_event_at: reject()15:30
*** bvandenh has joined #openstack-dev15:30
*** neeti has quit IRC15:30
ayoungdolphm, so the rules can all be stated in terms of  revocation_event.revocation_event_at:15:30
*** Guest8385 is now known as thomasem15:31
ayoungexpires_at_matches  means   token.issued_at ==  revocation_event.revocation_event_at: reject()15:31
ayoungexpires_at_or_before  means   token.expires_at <=  revocation_event.revocation_event_at: reject()15:31
ayoungcorrection expires_at_matches  means   token.expires _at ==  revocation_event.revocation_event_at: reject()15:31
*** gordc has joined #openstack-dev15:32
*** doron_afk has joined #openstack-dev15:33
*** mdomsch has quit IRC15:33
*** aditirav_ has joined #openstack-dev15:34
*** carl_baldwin has quit IRC15:34
*** aditirav has quit IRC15:34
*** blamar has joined #openstack-dev15:35
*** datsun180b has joined #openstack-dev15:35
*** joesavak has joined #openstack-dev15:35
*** tdruiva_ is now known as tdruiva15:35
*** aditirav has joined #openstack-dev15:36
*** jergerber has joined #openstack-dev15:37
*** jergerber has quit IRC15:37
*** jergerber has joined #openstack-dev15:37
*** jamespage has joined #openstack-dev15:37
*** jamespage has quit IRC15:37
*** jamespage has joined #openstack-dev15:37
*** litong has quit IRC15:38
*** lxsli has quit IRC15:38
*** alunduil has joined #openstack-dev15:38
*** aditirav_ has quit IRC15:38
*** dolphm has quit IRC15:38
*** neelashah has joined #openstack-dev15:38
*** dolphm_ has joined #openstack-dev15:38
*** rcleere has joined #openstack-dev15:38
*** jergerber has quit IRC15:39
*** jamespage has quit IRC15:39
*** jimjiang has quit IRC15:39
*** jobewan has quit IRC15:39
*** zigo has quit IRC15:39
*** bpokorny has quit IRC15:39
*** omachace has quit IRC15:39
*** zaneb has quit IRC15:39
*** Adri2000 has quit IRC15:39
*** haomaiwang has quit IRC15:39
*** bknudson has quit IRC15:39
*** sthaha has quit IRC15:39
*** cyeoh has quit IRC15:39
*** CrackerJackMack has quit IRC15:39
*** persia has quit IRC15:39
*** rm_work|away has quit IRC15:39
*** Samos123 has quit IRC15:39
*** jyhc has quit IRC15:39
*** jcannava has quit IRC15:39
*** galstrom has quit IRC15:39
*** briancline has quit IRC15:39
*** morganfainberg has quit IRC15:39
*** haomaiwang has joined #openstack-dev15:39
*** mosulica has quit IRC15:40
*** jobewan has joined #openstack-dev15:42
*** negronjl has joined #openstack-dev15:42
*** dolphm_ has quit IRC15:42
*** i159 has joined #openstack-dev15:43
*** portante_ is now known as portante15:44
*** jimjiang has joined #openstack-dev15:44
*** dolphm has joined #openstack-dev15:44
*** zaneb has joined #openstack-dev15:44
*** lxsli has joined #openstack-dev15:44
*** vishy has joined #openstack-dev15:44
*** Abhishek has joined #openstack-dev15:44
*** FunnyLookinHat_ has joined #openstack-dev15:44
*** otherwiseguy has joined #openstack-dev15:44
*** zigo has joined #openstack-dev15:44
*** bpokorny has joined #openstack-dev15:44
*** omachace has joined #openstack-dev15:44
*** Adri2000 has joined #openstack-dev15:44
*** bknudson has joined #openstack-dev15:44
*** sthaha has joined #openstack-dev15:44
*** cyeoh has joined #openstack-dev15:44
*** CrackerJackMack has joined #openstack-dev15:44
*** persia has joined #openstack-dev15:44
*** rm_work|away has joined #openstack-dev15:44
*** Samos123 has joined #openstack-dev15:44
*** jyhc has joined #openstack-dev15:44
*** galstrom has joined #openstack-dev15:44
*** jcannava has joined #openstack-dev15:44
*** morganfainberg has joined #openstack-dev15:44
*** briancline has joined #openstack-dev15:44
*** armax_ has joined #openstack-dev15:44
*** topol has joined #openstack-dev15:45
*** bcrochet has quit IRC15:45
*** mriedem1 has joined #openstack-dev15:45
*** colinmcnamara has joined #openstack-dev15:45
*** jasondot_ has joined #openstack-dev15:45
*** dstanek is now known as 36DABYI5415:45
*** dstanek has joined #openstack-dev15:45
*** mikeoutland has joined #openstack-dev15:46
*** holms_ has joined #openstack-dev15:46
*** doude_ has joined #openstack-dev15:46
*** spzala_ has joined #openstack-dev15:46
*** bcrochet has joined #openstack-dev15:46
*** haomaiwa_ has joined #openstack-dev15:46
*** neelashah1 has joined #openstack-dev15:46
*** diakunchikov__ has joined #openstack-dev15:47
*** iartarisi has quit IRC15:48
*** cp16net_ has joined #openstack-dev15:48
*** omachace has quit IRC15:48
*** Nikolay_1t has joined #openstack-dev15:48
*** metabro_ has joined #openstack-dev15:49
*** omachace has joined #openstack-dev15:49
*** rdo_ has joined #openstack-dev15:49
*** xarg__ has joined #openstack-dev15:49
*** dprince_ has joined #openstack-dev15:49
*** xarg__ has quit IRC15:49
*** xarg__ has joined #openstack-dev15:49
*** bpokorny has quit IRC15:50
*** ruhe has joined #openstack-dev15:50
*** tanisdl has joined #openstack-dev15:50
*** _cerberu` has joined #openstack-dev15:50
*** datsun_F40PH has joined #openstack-dev15:50
*** ctracey|` has joined #openstack-dev15:51
*** jimjiang has quit IRC15:51
*** py-yp has joined #openstack-dev15:51
*** phschwartz has joined #openstack-dev15:51
*** READ6 has joined #openstack-dev15:51
*** SlickN1k has joined #openstack-dev15:51
*** jpipes has joined #openstack-dev15:51
*** terry_howe has joined #openstack-dev15:51
*** mtaylor has joined #openstack-dev15:51
*** iartarisi has joined #openstack-dev15:51
*** alex_klimov1 has joined #openstack-dev15:51
*** jdbarry_ has joined #openstack-dev15:51
*** torgomatic_ has joined #openstack-dev15:52
*** cpallares1 has joined #openstack-dev15:52
*** mrodden has quit IRC15:52
*** keekz_ has joined #openstack-dev15:52
*** gszasz_ has joined #openstack-dev15:52
*** lsmola_ has joined #openstack-dev15:52
*** ig1 has joined #openstack-dev15:52
*** mohits has joined #openstack-dev15:52
*** sdake_ has quit IRC15:53
*** xqueralt has joined #openstack-dev15:53
*** Abhishek_ has joined #openstack-dev15:53
*** alex_klimov1 has quit IRC15:54
*** mnaser_ has joined #openstack-dev15:54
*** jimjiang has joined #openstack-dev15:54
*** dhellmann_ has joined #openstack-dev15:54
*** mriedem has quit IRC15:54
*** armax has quit IRC15:54
*** armax_ is now known as armax15:54
*** Artpicre has quit IRC15:54
*** keekz has quit IRC15:54
*** SlickNik has quit IRC15:54
*** rnirmal has quit IRC15:54
*** cpallares has quit IRC15:54
*** ianw has quit IRC15:54
*** jdbarry has quit IRC15:54
*** ctracey|away has quit IRC15:54
*** torgomatic has quit IRC15:54
*** _cerberus_ has quit IRC15:54
*** neelashah has quit IRC15:54
*** datsun180b has quit IRC15:54
*** diakunchikov_ has quit IRC15:54
*** READ10 has quit IRC15:54
*** alex_klimov has quit IRC15:54
*** 36DABYI54 has quit IRC15:54
*** jasondotstar has quit IRC15:54
*** terrylhowe has quit IRC15:54
*** ig has quit IRC15:54
*** Nikolay_St has quit IRC15:54
*** rdo has quit IRC15:54
*** holms has quit IRC15:54
*** offenflieg has quit IRC15:54
*** mnaser has quit IRC15:54
*** metabro has quit IRC15:54
*** mordred has quit IRC15:55
*** doude has quit IRC15:55
*** jdbarry_ is now known as jdbarry15:55
*** torgomatic_ is now known as torgomatic15:55
*** mnaser_ is now known as mnaser15:55
*** keekz_ is now known as keekz15:55
*** SlickN1k is now known as SlickNik15:55
*** datsun_F40PH is now known as datsun180b15:55
ayoungdolphm, last week (or so) you said you were working on v3-by-default in OSC.  Are you heads down hacking on the client?  I was trying to figure out what we need to put in the endpoints.   One reason I've been using Curl is to avoid endpoint conversion issues, but I got stuck on them last week:  http://adam.younglogic.com/2013/12/common-cli-keystone/15:55
ayoungWithout that hack I came across https://bugs.launchpad.net/python-openstackclient/+bug/126091615:55
uvirtbotLaunchpad bug 1260916 in python-openstackclient "Setting --os-identity-api-version=3  still uses v2" [Undecided,New]15:55
*** bpokorny has joined #openstack-dev15:55
*** lxsli has quit IRC15:55
*** Abhishek has quit IRC15:56
*** haomaiwang has quit IRC15:56
*** vladikr_ has quit IRC15:56
*** jamespage_realme has quit IRC15:56
*** dkranz has quit IRC15:56
*** peristeri has quit IRC15:56
*** gszasz has quit IRC15:56
*** pasquier-s has quit IRC15:56
*** jaypipes has quit IRC15:56
*** ruhe_ has quit IRC15:56
*** spzala has quit IRC15:56
*** dprince has quit IRC15:56
*** lsmola has quit IRC15:56
*** epopt37 has quit IRC15:56
*** tkammer has quit IRC15:56
*** datsun180b has quit IRC15:57
*** datsun180b has joined #openstack-dev15:57
*** phschwartz_aw has quit IRC15:57
*** Underbyte has quit IRC15:57
*** xarg_ has quit IRC15:57
*** dhellmann has quit IRC15:57
*** cp16net has quit IRC15:57
*** Artpicre has joined #openstack-dev15:57
*** dhellmann_ is now known as dhellmann15:57
*** cp16net_ is now known as cp16net15:57
*** dspano has joined #openstack-dev15:57
*** vladikr has joined #openstack-dev15:58
*** ig1 has quit IRC15:58
*** aelkikhia has joined #openstack-dev15:58
*** epopt37 has joined #openstack-dev15:58
*** dkranz has joined #openstack-dev15:58
*** ig has joined #openstack-dev15:58
*** ig has joined #openstack-dev15:58
*** Drankis has quit IRC15:58
dolphmayoung: ++ i use the same hack15:59
dolphmayoung: and no, i'm not heads down unfortunately15:59
dolphmayoung: ya'll drag me in too many different directions for me to ever be heads down :P15:59
ayoungdolphm, I drag you there...because I was dragged there first.  I'm all over the place myself....but I hear ya.15:59
*** pasquier-s has joined #openstack-dev15:59
*** jamespage_realme has joined #openstack-dev15:59
*** jamespage_realme has joined #openstack-dev15:59
*** gimpswork has joined #openstack-dev16:00
*** rods has joined #openstack-dev16:00
*** jimjiang has quit IRC16:00
*** lbragstad1 has joined #openstack-dev16:00
*** boris-42_ has quit IRC16:00
*** aditirav_ has joined #openstack-dev16:01
*** Ruetobas has quit IRC16:01
*** jsavak has joined #openstack-dev16:01
*** Qu310 has joined #openstack-dev16:02
*** jimjiang has joined #openstack-dev16:02
*** rdo_ is now known as rdo16:02
*** sn0wb1rd has quit IRC16:02
*** Oneiroi has quit IRC16:02
*** dsantos_ has quit IRC16:02
*** lbragstad has quit IRC16:02
*** paragan has quit IRC16:02
*** Q310 has quit IRC16:02
*** aditirav has quit IRC16:02
*** aditirav_ is now known as aditirav16:02
*** flaper87 is now known as flaper87|call16:02
*** dsantos_ has joined #openstack-dev16:03
*** Shrews has quit IRC16:03
*** Ruetobas has joined #openstack-dev16:03
*** paragan has joined #openstack-dev16:03
*** paragan has quit IRC16:03
*** paragan has joined #openstack-dev16:03
*** Shrews has joined #openstack-dev16:03
*** mmoya has quit IRC16:03
*** mmoya has joined #openstack-dev16:03
*** carl_baldwin has joined #openstack-dev16:03
*** joesavak has quit IRC16:03
*** kenperkins has quit IRC16:03
*** dsirrine has quit IRC16:03
*** derekh has quit IRC16:03
*** sdake has joined #openstack-dev16:03
*** sdake has quit IRC16:03
*** sdake has joined #openstack-dev16:03
*** Oneiroi has joined #openstack-dev16:04
*** yongli has quit IRC16:04
*** jaimegil has joined #openstack-dev16:04
*** derekh has joined #openstack-dev16:04
*** sn0wb1rd has joined #openstack-dev16:04
*** yongli has joined #openstack-dev16:04
*** pfreund has quit IRC16:04
*** jhesketh__ has quit IRC16:04
*** aelkikhia has left #openstack-dev16:05
*** mestery_ is now known as mestery16:05
*** kenperkins has joined #openstack-dev16:05
*** dsirrine has joined #openstack-dev16:05
*** pfreund has joined #openstack-dev16:05
*** jamespage has joined #openstack-dev16:06
*** giroro_ has joined #openstack-dev16:07
*** dkranz has quit IRC16:07
*** datsun180b has quit IRC16:07
*** tmclaugh[work] has joined #openstack-dev16:07
*** mikeoutland has quit IRC16:07
*** Q310 has joined #openstack-dev16:08
*** haomaiwang has joined #openstack-dev16:08
*** Ruetobas has quit IRC16:08
*** joesavak has joined #openstack-dev16:08
*** litong has joined #openstack-dev16:08
*** bswartz has joined #openstack-dev16:08
*** corXi has quit IRC16:09
*** jamespage has quit IRC16:09
*** jcooley_ has quit IRC16:09
*** hashfail_ has joined #openstack-dev16:09
*** kenperkins_ has joined #openstack-dev16:10
*** jamey has joined #openstack-dev16:10
*** arozumenko has joined #openstack-dev16:10
*** sarob has joined #openstack-dev16:10
*** stevemar has joined #openstack-dev16:11
*** mkerrin has joined #openstack-dev16:11
*** jcooley_ has joined #openstack-dev16:11
*** pberis has joined #openstack-dev16:12
*** sn0wb1rdz has joined #openstack-dev16:13
*** jamespage has joined #openstack-dev16:13
*** ctracey|away has joined #openstack-dev16:14
*** litong has quit IRC16:14
*** rha- has joined #openstack-dev16:14
*** psedlak_clone has joined #openstack-dev16:14
*** sarob has quit IRC16:15
*** tan_ has joined #openstack-dev16:15
*** anfrolov_ has joined #openstack-dev16:15
*** jamespage has quit IRC16:15
*** CaptTofu has joined #openstack-dev16:15
*** jkyle_ has joined #openstack-dev16:16
*** lucas-hungry is now known as lucasagomes16:16
thervebknudson, Did you mean to approve https://review.openstack.org/#/c/60859/ ?16:16
*** rdo_ has joined #openstack-dev16:17
*** DinaBelova has quit IRC16:17
*** aditirav has quit IRC16:17
*** ruhe is now known as ruhe_16:17
*** FunnyLookinHat__ has joined #openstack-dev16:17
*** Vivek_ has quit IRC16:17
*** chandankumar has quit IRC16:17
*** doron_afk is now known as doron16:18
*** arozumenko has quit IRC16:18
*** ffio has joined #openstack-dev16:18
*** kenperkins has quit IRC16:18
*** sn0wb1rd has quit IRC16:18
*** sdake has quit IRC16:18
*** Shrews has quit IRC16:18
*** paragan has quit IRC16:18
*** Qu310 has quit IRC16:18
*** jsavak has quit IRC16:18
*** gimpswork has quit IRC16:18
*** mohits has quit IRC16:18
*** mtaylor has quit IRC16:18
*** jpipes has quit IRC16:18
*** READ6 has quit IRC16:18
*** mnaser has quit IRC16:18
*** ctracey|` has quit IRC16:18
*** rdo has quit IRC16:18
*** metabro_ has quit IRC16:18
*** cp16net has quit IRC16:18
*** haomaiwa_ has quit IRC16:18
*** shardy has quit IRC16:18
*** tan has quit IRC16:18
*** mtreinish has quit IRC16:18
*** jkyle has quit IRC16:18
*** Daviey has quit IRC16:18
*** rahmu has quit IRC16:18
*** psedlak has quit IRC16:18
*** Vek has quit IRC16:18
*** muehsi has quit IRC16:18
*** hugokuo has quit IRC16:18
*** rha has quit IRC16:18
*** anfrolov has quit IRC16:18
*** marekd has quit IRC16:18
*** dansmith has quit IRC16:18
*** chmouel has quit IRC16:18
*** jmeredit has quit IRC16:18
*** noslzzp has quit IRC16:18
*** markmcclain has quit IRC16:18
*** boden has quit IRC16:18
*** radix has quit IRC16:18
*** med_ has quit IRC16:18
*** samalba has quit IRC16:18
*** jeblair has quit IRC16:18
*** creiht has quit IRC16:18
*** Slidey has quit IRC16:18
*** jcooley has quit IRC16:18
*** amandap has quit IRC16:18
*** mburned has quit IRC16:18
*** joearnold has quit IRC16:18
*** dragondm has quit IRC16:18
*** jimjiang has quit IRC16:18
*** jamespage_realme has quit IRC16:18
*** ig has quit IRC16:18
*** dstanek has quit IRC16:18
*** dolphm has quit IRC16:18
*** zaneb has quit IRC16:18
*** vishy has quit IRC16:18
*** FunnyLookinHat_ has quit IRC16:18
*** otherwiseguy has quit IRC16:18
*** zigo has quit IRC16:18
*** Adri2000 has quit IRC16:18
*** bknudson has quit IRC16:18
*** sthaha has quit IRC16:18
*** cyeoh has quit IRC16:18
*** CrackerJackMack has quit IRC16:18
*** persia has quit IRC16:18
*** rm_work|away has quit IRC16:18
*** Samos123 has quit IRC16:18
*** jyhc has quit IRC16:18
*** jcannava has quit IRC16:18
*** galstrom has quit IRC16:18
*** briancline has quit IRC16:18
*** morganfainberg has quit IRC16:18
*** bcrochet has quit IRC16:18
*** jpeeler has quit IRC16:18
*** BillStokes has quit IRC16:18
*** julienvey has quit IRC16:18
*** thingee has quit IRC16:18
*** AndreyGrebenniko has quit IRC16:18
*** jf-jenni has quit IRC16:18
*** lexano has quit IRC16:18
*** ameade has quit IRC16:18
*** lon has quit IRC16:18
*** pleia2 has quit IRC16:18
*** ahale has quit IRC16:18
*** al-maisan has quit IRC16:18
*** SpamapS has quit IRC16:18
*** zz_ewindisch has quit IRC16:18
*** nplanel has quit IRC16:18
*** apmelton1 has quit IRC16:18
*** hub_cap has quit IRC16:18
*** russell_h has quit IRC16:18
*** gilliard has quit IRC16:18
*** koolhead17 has quit IRC16:18
*** jstraw has quit IRC16:18
*** hemanth_ has quit IRC16:18
*** kiall has quit IRC16:18
*** rosmaita has quit IRC16:18
*** BobBall has quit IRC16:18
*** akscram has quit IRC16:18
*** annashen has quit IRC16:18
*** dsirrine has quit IRC16:18
*** derekh has quit IRC16:18
*** dsantos_ has quit IRC16:18
*** Oneiroi has quit IRC16:18
*** vladikr has quit IRC16:18
*** bpokorny has quit IRC16:18
*** SlickNik has quit IRC16:18
*** _cerberu` has quit IRC16:18
*** xarg__ has quit IRC16:18
*** Nikolay_1t has quit IRC16:18
*** negronjl has quit IRC16:18
*** blamar has quit IRC16:18
*** ArxCruz has quit IRC16:18
*** SergeyLukjanov has quit IRC16:18
*** Guest53164 has quit IRC16:18
*** buzztroll has quit IRC16:18
*** achampion has quit IRC16:18
*** sdague has quit IRC16:18
*** hemnafk has quit IRC16:18
*** jab416171 has quit IRC16:18
*** shathan has quit IRC16:18
*** clayg has quit IRC16:18
*** ladquin has quit IRC16:18
*** toanster has quit IRC16:18
*** EntropyWorks has quit IRC16:18
*** jgriffith has quit IRC16:18
*** leif has quit IRC16:18
*** rainya has quit IRC16:18
*** esmute has quit IRC16:18
*** xarg has quit IRC16:18
*** ivoks has quit IRC16:18
*** jkoelker has quit IRC16:18
*** shanturoy has quit IRC16:18
*** adam_g has quit IRC16:18
*** metral has quit IRC16:18
*** rgoodwin has quit IRC16:18
*** stevebaker has quit IRC16:18
*** dcmorton has quit IRC16:18
*** ttx has quit IRC16:18
*** troytoman-away has quit IRC16:18
*** jvrbanac has quit IRC16:18
*** kpepple has quit IRC16:18
*** mikemar10 has quit IRC16:18
*** bigmstone has quit IRC16:18
*** anfrolov_ is now known as anfrolov16:18
*** ffio has quit IRC16:18
*** sn0wb1rdz is now known as sn0wb1rd16:18
*** ruhe_ has quit IRC16:18
*** arozumenko has joined #openstack-dev16:19
*** rdo_ is now known as rdo16:19
*** ffio has joined #openstack-dev16:19
*** Mandell has quit IRC16:20
*** safchain has quit IRC16:20
*** dansmith_ has joined #openstack-dev16:21
*** rahmu has joined #openstack-dev16:21
*** mnaser has joined #openstack-dev16:21
*** metabro_ has joined #openstack-dev16:21
*** chmouel has joined #openstack-dev16:21
*** litong has joined #openstack-dev16:21
*** jamespag` has joined #openstack-dev16:21
*** aditirav_ has joined #openstack-dev16:21
*** mtreinish_ has joined #openstack-dev16:21
*** hugokuo_ has joined #openstack-dev16:21
*** diogogmt has joined #openstack-dev16:21
*** cp16net has joined #openstack-dev16:21
*** jimjiang has joined #openstack-dev16:21
*** aelkikhia has joined #openstack-dev16:21
*** mrodden has joined #openstack-dev16:21
*** dsirrine has joined #openstack-dev16:21
*** derekh has joined #openstack-dev16:21
*** Oneiroi has joined #openstack-dev16:21
*** dsantos_ has joined #openstack-dev16:21
*** ig has joined #openstack-dev16:21
*** vladikr has joined #openstack-dev16:21
*** bpokorny has joined #openstack-dev16:21
*** SlickNik has joined #openstack-dev16:21
*** _cerberu` has joined #openstack-dev16:21
*** xarg__ has joined #openstack-dev16:21
*** Nikolay_1t has joined #openstack-dev16:21
*** bcrochet has joined #openstack-dev16:21
*** briancline has joined #openstack-dev16:21
*** morganfainberg has joined #openstack-dev16:21
*** jcannava has joined #openstack-dev16:21
*** galstrom has joined #openstack-dev16:21
*** jyhc has joined #openstack-dev16:21
*** Samos123 has joined #openstack-dev16:21
*** rm_work|away has joined #openstack-dev16:21
*** persia has joined #openstack-dev16:21
*** CrackerJackMack has joined #openstack-dev16:21
*** cyeoh has joined #openstack-dev16:21
*** Adri2000 has joined #openstack-dev16:21
*** zigo has joined #openstack-dev16:21
*** otherwiseguy has joined #openstack-dev16:21
*** vishy has joined #openstack-dev16:21
*** zaneb has joined #openstack-dev16:21
*** dolphm has joined #openstack-dev16:21
*** negronjl has joined #openstack-dev16:21
*** blamar has joined #openstack-dev16:21
*** ArxCruz has joined #openstack-dev16:21
*** Guest53164 has joined #openstack-dev16:21
*** noslzzp has joined #openstack-dev16:21
*** buzztroll has joined #openstack-dev16:21
*** achampion has joined #openstack-dev16:21
*** markmcclain has joined #openstack-dev16:21
*** boden has joined #openstack-dev16:21
*** sdague has joined #openstack-dev16:21
*** jpeeler has joined #openstack-dev16:21
*** hemnafk has joined #openstack-dev16:21
*** jab416171 has joined #openstack-dev16:21
*** shathan has joined #openstack-dev16:21
*** clayg has joined #openstack-dev16:21
*** ladquin has joined #openstack-dev16:21
*** BillStokes has joined #openstack-dev16:21
*** julienvey has joined #openstack-dev16:21
*** thingee has joined #openstack-dev16:21
*** AndreyGrebenniko has joined #openstack-dev16:21
*** jf-jenni has joined #openstack-dev16:21
*** toanster has joined #openstack-dev16:21
*** shanturoy has joined #openstack-dev16:21
*** lexano has joined #openstack-dev16:21
*** ameade has joined #openstack-dev16:21
*** lon has joined #openstack-dev16:21
*** pleia2 has joined #openstack-dev16:21
*** ahale has joined #openstack-dev16:21
*** al-maisan has joined #openstack-dev16:21
*** SpamapS has joined #openstack-dev16:21
*** zz_ewindisch has joined #openstack-dev16:21
*** EntropyWorks has joined #openstack-dev16:21
*** nplanel has joined #openstack-dev16:21
*** jgriffith has joined #openstack-dev16:21
*** leif has joined #openstack-dev16:21
*** rainya has joined #openstack-dev16:21
*** apmelton1 has joined #openstack-dev16:21
*** esmute has joined #openstack-dev16:21
*** hub_cap has joined #openstack-dev16:21
*** xarg has joined #openstack-dev16:21
*** ivoks has joined #openstack-dev16:21
*** jkoelker has joined #openstack-dev16:21
*** adam_g has joined #openstack-dev16:21
*** metral has joined #openstack-dev16:21
*** rgoodwin has joined #openstack-dev16:21
*** stevebaker has joined #openstack-dev16:21
*** dcmorton has joined #openstack-dev16:21
*** bigmstone has joined #openstack-dev16:21
*** jvrbanac has joined #openstack-dev16:21
*** mikemar10 has joined #openstack-dev16:21
*** ttx has joined #openstack-dev16:21
*** troytoman-away has joined #openstack-dev16:21
*** kpepple has joined #openstack-dev16:21
*** russell_h has joined #openstack-dev16:21
*** radix has joined #openstack-dev16:21
*** med_ has joined #openstack-dev16:21
*** gilliard has joined #openstack-dev16:21
*** koolhead17 has joined #openstack-dev16:21
*** samalba has joined #openstack-dev16:21
*** mburned has joined #openstack-dev16:21
*** Slidey has joined #openstack-dev16:21
*** 23LAAJGMD has joined #openstack-dev16:21
*** jeblair has joined #openstack-dev16:21
*** amandap has joined #openstack-dev16:21
*** hemanth_ has joined #openstack-dev16:21
*** creiht has joined #openstack-dev16:21
*** kiall has joined #openstack-dev16:21
*** jcooley has joined #openstack-dev16:21
*** rosmaita has joined #openstack-dev16:21
*** BobBall has joined #openstack-dev16:21
*** akscram has joined #openstack-dev16:21
*** annashen has joined #openstack-dev16:21
*** joearnold has joined #openstack-dev16:21
*** dragondm has joined #openstack-dev16:21
*** sergmelikyan has quit IRC16:22
*** safchain has joined #openstack-dev16:23
*** jpipes has joined #openstack-dev16:23
*** dkranz has joined #openstack-dev16:23
*** dkranz has joined #openstack-dev16:23
*** bknudson has joined #openstack-dev16:23
*** ig has quit IRC16:23
*** dansmith_ is now known as dansmith16:23
*** hugokuo_ is now known as hugokuo16:23
*** aditirav_ is now known as aditirav16:23
*** sdake has joined #openstack-dev16:23
*** arozumenko1 has joined #openstack-dev16:23
*** mohits has joined #openstack-dev16:23
*** marekd has joined #openstack-dev16:23
*** dansmith has joined #openstack-dev16:23
*** mnaser has quit IRC16:23
*** mnaser has joined #openstack-dev16:23
*** lsmola_ has quit IRC16:24
*** jimjiang has quit IRC16:24
*** otherwiseguy has quit IRC16:24
*** Daviey has joined #openstack-dev16:24
*** READ6 has joined #openstack-dev16:24
*** 1JTABHC3X has joined #openstack-dev16:24
*** READ6 has quit IRC16:24
*** READ6 has joined #openstack-dev16:24
*** mtreinish_ has quit IRC16:24
*** jamespag` is now known as jamespage16:24
*** openfly has joined #openstack-dev16:24
*** jamespage has quit IRC16:24
*** jamespage has joined #openstack-dev16:24
*** mtaylor has joined #openstack-dev16:25
*** jimjiang has joined #openstack-dev16:25
*** jdurgin1 has joined #openstack-dev16:25
*** anfrolov_ has joined #openstack-dev16:25
*** portante_ has joined #openstack-dev16:25
*** jpipes is now known as jaypipes16:26
*** jergerber has joined #openstack-dev16:26
*** rushiagr has quit IRC16:26
*** rwsu_ has joined #openstack-dev16:26
*** sandywalsh_ has joined #openstack-dev16:26
*** cdub has quit IRC16:26
*** blentz has joined #openstack-dev16:26
*** BLZbubba_ has joined #openstack-dev16:27
*** Ryan_Lane has joined #openstack-dev16:27
*** alop has joined #openstack-dev16:27
*** jdurgin has quit IRC16:27
*** dims has quit IRC16:27
*** anfrolov has quit IRC16:27
*** portante has quit IRC16:27
*** blentz_ has quit IRC16:27
*** rwsu has quit IRC16:27
*** BLZbubba has quit IRC16:27
*** arozumenko has quit IRC16:27
*** sandywalsh has quit IRC16:27
*** rektide_ has quit IRC16:27
*** iamben_tw has quit IRC16:27
*** Hien has quit IRC16:27
*** CaptTofu has quit IRC16:27
*** SumitNaiksatam has quit IRC16:27
*** anfrolov_ is now known as anfrolov16:27
*** _cerberu` is now known as _cerberus_16:27
*** iamben_tw has joined #openstack-dev16:27
*** rushiagr has joined #openstack-dev16:27
*** Hien has joined #openstack-dev16:27
*** rektide has joined #openstack-dev16:27
*** rha- is now known as rha16:28
*** cdub has joined #openstack-dev16:28
*** tmclaugh[work] has quit IRC16:28
*** evgenyf has quit IRC16:28
*** wfoster has quit IRC16:28
*** rha has quit IRC16:28
*** rha has joined #openstack-dev16:28
*** SumitNaiksatam_ has joined #openstack-dev16:29
*** tan_ is now known as tan16:29
*** SumitNaiksatam_ is now known as SumitNaiksatam16:29
*** pberis has quit IRC16:29
*** johnthetubaguy has quit IRC16:30
*** johnthetubaguy has joined #openstack-dev16:30
*** CaptTofu has joined #openstack-dev16:30
*** markmc has quit IRC16:30
*** giulivo has quit IRC16:30
tellesnobregaayoung: ping16:30
*** giulivo has joined #openstack-dev16:31
ayoungtellesnobrega, please don't send ping messages, just ask what you want.16:31
*** max_lobur is now known as max_lobur_afk16:31
*** hugokuo has quit IRC16:31
*** devoid has joined #openstack-dev16:31
*** alop_ has joined #openstack-dev16:31
*** alop has quit IRC16:31
*** alop_ is now known as alop16:31
*** devoid has left #openstack-dev16:31
*** terriyu has joined #openstack-dev16:31
*** devoid has joined #openstack-dev16:31
*** devoid has left #openstack-dev16:31
*** terriyu has quit IRC16:32
*** jimjiang has quit IRC16:32
*** romcheg has joined #openstack-dev16:32
*** pberis has joined #openstack-dev16:32
*** mtreinish has joined #openstack-dev16:32
*** jimjiang has joined #openstack-dev16:32
bknudsonAs admin, I can get an unscoped token or a project-scoped token but not a domain-scoped token?16:32
tellesnobregaayoung: sorry, im trying to create a restriction on policy.json, where to list_user the user should have a domain_admin role and have something like this domain_id:%(domain_id)s, is this possible for domain as it is for projects and users?16:32
ayoungtellesnobrega, it should be OK16:33
*** openfly_ has joined #openstack-dev16:33
*** cdub_ has joined #openstack-dev16:33
*** bcrochet_ has joined #openstack-dev16:33
tellesnobregaayoung: i tried and it said i didnt have permission, this id comes from the context?16:33
*** omachace has quit IRC16:34
*** ifarkas has quit IRC16:34
*** dims has joined #openstack-dev16:34
ayoungtellesnobrega, the list_user function doesn't have domain_id specified in it16:35
ayoungyou'd have to "find it"16:35
tellesnobregaayoung: i see16:35
*** xqueralt has quit IRC16:36
*** safchain_ has joined #openstack-dev16:36
ayoungtellesnobrega, https://github.com/openstack/keystone/blob/master/keystone/identity/controllers.py#L73716:36
*** jimjiang has quit IRC16:37
*** pmathews has joined #openstack-dev16:37
*** thomasem has quit IRC16:37
*** ctracey|away is now known as ctracey16:37
ayoungtellesnobrega, it is domain filtered, so you have that to work with16:37
*** hugokuo has joined #openstack-dev16:37
*** jimjiang has joined #openstack-dev16:37
ayoungtellesnobrega, implemented here https://github.com/openstack/keystone/blob/master/keystone/common/controller.py#L16816:38
dolphmtellesnobrega: sounds like your rule is working as intended -- it's requiring a domain scoped token to retrieve a filtered list of users by domain16:38
*** aelkikhia has quit IRC16:38
*** cdub has quit IRC16:38
*** openfly has quit IRC16:38
*** bcrochet has quit IRC16:38
*** sandywalsh_ has quit IRC16:38
*** jaypipes has quit IRC16:38
*** safchain has quit IRC16:38
*** aelkikhia has joined #openstack-dev16:38
*** bcrochet_ is now known as bcrochet16:38
*** dstanek has joined #openstack-dev16:38
*** xqueralt has joined #openstack-dev16:39
*** jaypipes has joined #openstack-dev16:39
ayoungfilters are applied here https://github.com/openstack/keystone/blob/master/keystone/common/controller.py#L18816:39
bknudsoncan I get a domain-scoped token with "scope": { "domain": { "id": "default" } } ?16:39
bknudsonhttps://github.com/openstack/identity-api/blob/master/openstack-identity-api/v3/src/markdown/identity-api-v3.md#scope-scope16:39
*** sandywalsh_ has joined #openstack-dev16:39
*** tanisdl has quit IRC16:39
bknudsonhas project-scoped token requests but not domain-scoped.16:39
ayoungtellesnobrega, but that would be against an explicit domain_id in the query string16:39
ayoungbknudson, this sounds like a trick question16:39
*** raildo has joined #openstack-dev16:40
*** pfreund has quit IRC16:40
*** tanisdl has joined #openstack-dev16:40
*** dflye has joined #openstack-dev16:41
tellesnobregadolphm: how can i get a domain scoped token?16:41
*** xingchao has joined #openstack-dev16:41
*** utlemming has joined #openstack-dev16:42
*** jimjiang has quit IRC16:42
dsantos_bknudson: I've tried to get a domai-scoped token like you asked and it didn't work16:42
bknudsonayoung: I tried it and it is looking at the domain I provide in scope... so it's just that there's no explicit example like there are for project.16:42
*** rfolco has quit IRC16:42
dsantos_bknudson: I tried some ways bot nothing worked fine16:42
*** jimjiang has joined #openstack-dev16:43
bknudsondsantos_: I'm going to try granting admin a role on the domain.16:44
bknudsonPUT /domains/{domain_id}/users/{user_id}/roles/{role_id}16:44
dsantos_bknudson: did you get a domain-scoped token? I didn't understand16:45
*** rektide has quit IRC16:45
bknudsondsantos_: I haven't been able to get a domain-scoped token, but maybe it's because the user doesn't have a role16:45
*** rektide has joined #openstack-dev16:46
dsantos_bknudson: I tried with the admin user created with my devstack installation, but didn't work16:46
*** pberis has quit IRC16:47
*** topol_ has joined #openstack-dev16:48
*** litong has quit IRC16:49
bknudsondsantos_: it worked for me.16:49
tellesnobregabknudson: i tried just now to get a domain-scoped token, but i got Authorization failed. User 2313d3645fa24972be8821f2706c73d1 has no access to domain 0c52efa1fe614cbea3c450f535002d75 from 127.0.0.1 but when i created the user i put the domain_id and project_id, but for some reason it doesn't give authorization to get the token16:49
*** pberis has joined #openstack-dev16:49
*** jimjiang has quit IRC16:49
*** johnthetubaguy1 has joined #openstack-dev16:49
*** mgagne has joined #openstack-dev16:49
*** i159 has quit IRC16:49
*** diogogmt has quit IRC16:49
*** topol has quit IRC16:50
*** topol_ is now known as topol16:50
dsantos_bknudson: I'm trying with this json: { "auth": { "identity": { "methods": [ "password" ], "password": { "user": { "name": "admin", "password": "admin" } } }, "scope": { "domain": { "id": "default" } } } }16:50
bknudsontellesnobrega: I granted the 'admin' user 'admin' role to domain 'default' and it worked for me.16:50
*** CaptTofu has quit IRC16:50
*** jimjiang has joined #openstack-dev16:50
bknudsondsantos_: now I know your password!16:50
*** diogogmt has joined #openstack-dev16:51
dsantos_bknudson: hahaha16:51
*** johnthetubaguy has quit IRC16:51
ApsuAll I saw was "password": "******"16:51
bknudsondsantos_: tellesnobrega: here's how I created the role: http://paste.openstack.org/show/55068/16:51
Apsuhttp://bash.org/?24432116:52
*** gmoro_ has quit IRC16:52
*** aelkikhia has left #openstack-dev16:53
*** stevemar has quit IRC16:53
*** cfriesen_ has quit IRC16:53
*** e0ne_ has quit IRC16:54
*** flaper87|call is now known as flaper8716:56
*** jimjiang has quit IRC16:56
*** e0ne has joined #openstack-dev16:56
*** sarob has joined #openstack-dev16:57
*** mlavalle has joined #openstack-dev16:57
dolphmmarekd: ayoung: joesavak: split the /public_keys resource from the IdP extension and put it into it's own review (as i don't think it will be useful in icehouse), and +2'd the base API https://review.openstack.org/#/c/59846/16:57
*** jimjiang has joined #openstack-dev16:57
*** cpallares1 is now known as cpallares16:57
*** thomasem has joined #openstack-dev16:58
*** ruhe has joined #openstack-dev16:58
dolphmas described in my comment there ^ i'd like to merge the mapping piece back into the same extension as /identity_providers16:58
*** sarob_ has joined #openstack-dev16:59
*** haomaiwang has quit IRC17:01
tellesnobregabknudson: how did you grant a role to a domain?17:01
*** Shrews has joined #openstack-dev17:01
*** beagles is now known as beagles_brb17:01
*** sarob has quit IRC17:01
tellesnobregabknudson: i got it now17:01
*** martyntaylor has quit IRC17:01
marekddolphm: roger that. but i thought you wanted to get rid of managing pub-keys from keystone permanently.17:02
bknudsontellesnobrega: https://github.com/openstack/identity-api/blob/master/openstack-identity-api/v3/src/markdown/identity-api-v3.md#grant-role-to-user-on-domain-put-domainsdomain_idusersuser_idrolesrole_id17:02
tellesnobregabknudson: thanks17:02
*** glenng1 has quit IRC17:03
*** glenng has joined #openstack-dev17:03
*** gmoro_ has joined #openstack-dev17:04
dolphmmarekd: i see the use case of managing pub_keys in keystone, but i think we'd have a LOT of extra work to do to make that useable (either providing config management for mod_mellon, which is crazy talk, or re-implementing mod_mellon in python, which is crazy talk for icehouse)17:04
*** ruhe is now known as ruhe_17:05
dsantos_bknudson: I created the role but I couldn't get the token17:06
*** rfolco has joined #openstack-dev17:06
bknudsondsantos_: same error?17:07
bknudsonuser doesn't have access to domain?17:07
marekddolphm: well, that was my initial thought - config auto-generator basing on data stored in the Keystone backend.17:07
marekddolphm: but i agree that reimplmeneting that now is crazy.17:07
*** jcooley_ has quit IRC17:07
dsantos_bknudson: sorry, it was just a missing comma in my json17:08
*** dolphm has quit IRC17:08
dsantos_XD17:08
*** e0ne has quit IRC17:08
marekddolphm: anyways, for now i have removed pubkeys handling from vIdPs but will keep the code on my own repos. might be useful one day.17:08
bknudsonyou should get a 400 error for that.17:09
*** dolphm has joined #openstack-dev17:09
*** DinaBelova has joined #openstack-dev17:10
dolphmmarekd: (just looking at your commit message) need to cut /public_keys from your impl as well17:10
viktorsdhellmann: hello.17:10
dhellmannviktors: hi17:10
*** yassine has quit IRC17:11
*** FunnyLookinHat__ has quit IRC17:11
*** FunnyLookinHat__ has joined #openstack-dev17:11
marekddolphm: will do!17:11
*** FunnyLookinHat__ is now known as FunnyLookinHat17:11
*** tongli has joined #openstack-dev17:11
tellesnobregadolphm: i got a domain-scoped token now, but i still doesn't work with this rule (role:tammie and domain_id:%(domain_id)s) maybe there is another way to get the domain_id17:11
*** exed has quit IRC17:11
*** mindpixel has quit IRC17:11
viktorsdhellmann:  I’m sorry for bothering you, but can you please look at patches, related to oslo.db?17:12
dolphmtellesnobrega: look at the admin_on_domain_filter rule17:12
*** pfreund has joined #openstack-dev17:12
bknudsonwhen I get a domain-scoped token the catalog has None for the tenant-ids...17:12
dhellmannviktors: I have them on my review list, but have some internal dreamhost stuff I need to finish today17:12
bknudson"url": "http://192.168.122.176:8774/v2/None"17:13
*** jimjiang has quit IRC17:13
*** exed has joined #openstack-dev17:14
*** iartarisi has quit IRC17:14
*** MaxV has quit IRC17:14
*** jimjiang has joined #openstack-dev17:14
*** MaxV has joined #openstack-dev17:14
viktorsdhellmann:  thanks. Sorry for my importunity )17:14
dhellmannviktors: sorry for the delay :-(17:15
*** exed has quit IRC17:15
*** radix_ has joined #openstack-dev17:15
*** sarob_ has quit IRC17:16
*** otherwiseguy has joined #openstack-dev17:17
*** kenperkins_ is now known as kenperkins17:18
*** pdevine has joined #openstack-dev17:18
*** MaxV has quit IRC17:19
*** jimjiang has quit IRC17:19
*** ruhe has joined #openstack-dev17:19
*** jimjiang has joined #openstack-dev17:19
*** bashok has joined #openstack-dev17:20
*** SumitNaiksatam has quit IRC17:20
*** exed has joined #openstack-dev17:21
*** fbo is now known as fbo_away17:21
*** evgenyf has joined #openstack-dev17:21
*** kalugin has joined #openstack-dev17:22
*** marekd is now known as marekd|away17:23
*** p4tux has quit IRC17:23
*** Drankis has joined #openstack-dev17:26
*** kalugin has quit IRC17:26
*** drankis_ has joined #openstack-dev17:26
*** jmontemayor has joined #openstack-dev17:26
tellesnobregadolphm: where can i find this rule?17:27
*** stevemar has joined #openstack-dev17:27
*** mikeoutland has joined #openstack-dev17:28
*** vijendar has joined #openstack-dev17:29
*** shinylasers has joined #openstack-dev17:29
*** bvandenh has quit IRC17:29
*** pablosan has joined #openstack-dev17:30
*** shinylasers has quit IRC17:30
*** p4tux has joined #openstack-dev17:30
*** gyee has joined #openstack-dev17:30
*** jimjiang has quit IRC17:30
*** shardy has joined #openstack-dev17:30
*** shinylasers has joined #openstack-dev17:30
*** viktors has left #openstack-dev17:31
*** bdpayne has joined #openstack-dev17:33
*** exed has quit IRC17:33
*** jaimegil has quit IRC17:33
*** Drankis has quit IRC17:35
*** derekh has quit IRC17:35
*** hashfail_ has quit IRC17:35
*** JordanP has quit IRC17:36
*** jimjiang has joined #openstack-dev17:36
*** exed has joined #openstack-dev17:38
*** xqueralt has quit IRC17:38
*** avishayb has quit IRC17:38
*** angdraug has joined #openstack-dev17:38
*** mkollaro has quit IRC17:40
*** jimjiang has quit IRC17:40
*** stevemar has quit IRC17:40
*** pfreund has quit IRC17:41
*** flaper87 is now known as flaper87|afk17:41
*** stevemar has joined #openstack-dev17:41
*** hartsocks has joined #openstack-dev17:41
*** ygbo has quit IRC17:41
*** diakunchikov__ has quit IRC17:42
*** bogdando has quit IRC17:42
*** Alexei_987 has quit IRC17:42
*** romcheg has quit IRC17:42
*** vkozhukalov has joined #openstack-dev17:42
*** jsavak has joined #openstack-dev17:42
*** diakunchikov__ has joined #openstack-dev17:42
*** Shaan7 has joined #openstack-dev17:43
*** Shaan7 has quit IRC17:43
*** Shaan7 has joined #openstack-dev17:43
*** offenflieg has joined #openstack-dev17:43
*** Alexei_987 has joined #openstack-dev17:43
*** romcheg has joined #openstack-dev17:44
*** arnaud has joined #openstack-dev17:45
*** arnaud__ has joined #openstack-dev17:45
tellesnobregaayoung: is there any way that i can print out a value that is being passed to the policy.json like user_id or domain_id?17:45
ayoungtellesnobrega, run in a debugger.17:45
*** joesavak has quit IRC17:46
*** doron is now known as doron_afk17:46
*** jimjiang has joined #openstack-dev17:46
*** offenflieg has quit IRC17:48
*** dolphm has quit IRC17:50
*** nermina has joined #openstack-dev17:51
*** hajay_ has joined #openstack-dev17:51
*** doron_afk has quit IRC17:51
*** akrivoka has quit IRC17:51
*** tdruiva has quit IRC17:51
*** ruhe has quit IRC17:52
*** tdruiva has joined #openstack-dev17:52
*** ruhe has joined #openstack-dev17:52
*** ilyashakhat has quit IRC17:52
*** ilyashakhat_ has joined #openstack-dev17:52
*** novel1 has quit IRC17:53
*** jimjiang has quit IRC17:53
*** novel1 has joined #openstack-dev17:53
*** dolphm_ has joined #openstack-dev17:53
*** harlowja_away is now known as harlowja17:53
*** asselin has joined #openstack-dev17:54
*** SergeyLukjanov has joined #openstack-dev17:54
*** jimjiang has joined #openstack-dev17:54
*** jcooley_ has joined #openstack-dev17:54
*** boris-42 has joined #openstack-dev17:54
*** beagles_brb is now known as beagles17:55
*** branen has quit IRC17:56
*** tdruiva has quit IRC17:57
*** jistr has quit IRC17:57
*** _dbalog has quit IRC17:57
*** pdevine has quit IRC17:58
*** xarses has quit IRC17:59
*** jimjiang has quit IRC18:00
*** jimjiang has joined #openstack-dev18:01
*** DinaBelova has quit IRC18:02
*** bearhands is now known as comstud18:03
*** branen has joined #openstack-dev18:03
*** devvesa has quit IRC18:03
*** bdpayne has quit IRC18:03
*** eglynn_ has quit IRC18:04
*** novel1 has quit IRC18:04
*** bdpayne has joined #openstack-dev18:04
*** novel1 has joined #openstack-dev18:04
*** bashok_ has joined #openstack-dev18:05
*** Vek has joined #openstack-dev18:05
*** xqueralt has joined #openstack-dev18:05
*** xingchao has quit IRC18:06
*** mancdaz is now known as mancdaz_away18:06
*** muehsi has joined #openstack-dev18:06
*** jimjiang has quit IRC18:07
*** bashok has quit IRC18:08
*** amcrn has joined #openstack-dev18:09
*** melwitt has joined #openstack-dev18:10
*** SergeyLukjanov has quit IRC18:10
*** s0mik has joined #openstack-dev18:11
*** SergeyLukjanov has joined #openstack-dev18:12
*** jecarey has joined #openstack-dev18:12
*** _dbalog has joined #openstack-dev18:13
*** jimjiang has joined #openstack-dev18:13
*** 1JTABHC3X has quit IRC18:13
*** wfoster has joined #openstack-dev18:14
*** sarob has joined #openstack-dev18:14
*** Mandell has joined #openstack-dev18:15
*** rfolco has quit IRC18:15
*** evgenyf has quit IRC18:15
*** rfolco has joined #openstack-dev18:16
*** rfolco has quit IRC18:16
*** rfolco has joined #openstack-dev18:18
*** pschaef_t has joined #openstack-dev18:19
*** jimjiang has quit IRC18:20
*** jimjiang has joined #openstack-dev18:21
*** buzztroll has quit IRC18:21
*** zaitcev has joined #openstack-dev18:23
*** exed has quit IRC18:23
*** fungi has quit IRC18:24
*** tdruiva has joined #openstack-dev18:25
*** jdob has quit IRC18:25
*** jimjiang has quit IRC18:26
*** tdruiva has quit IRC18:26
*** buzztroll has joined #openstack-dev18:26
*** tdruiva has joined #openstack-dev18:26
*** jdob has joined #openstack-dev18:26
*** romcheg1 has joined #openstack-dev18:27
*** jimjiang has joined #openstack-dev18:27
*** sarob has quit IRC18:27
*** exed has joined #openstack-dev18:28
*** athomas has quit IRC18:28
*** sarob has joined #openstack-dev18:28
*** jdurgin1 has quit IRC18:28
*** Farooque has joined #openstack-dev18:29
*** safchain_ has quit IRC18:29
*** jasondot_ has quit IRC18:30
*** jasondotstar has joined #openstack-dev18:31
*** mikeoutland has quit IRC18:32
*** sarob has quit IRC18:33
*** jimjiang has quit IRC18:33
*** comay has joined #openstack-dev18:34
*** mrunge has joined #openstack-dev18:34
*** jimjiang has joined #openstack-dev18:34
*** sarob has joined #openstack-dev18:34
*** marun has joined #openstack-dev18:35
*** jdurgin has joined #openstack-dev18:36
*** yeylon__ has joined #openstack-dev18:36
*** nelsnelson is now known as nelsnelson_away18:36
*** afrittoli has quit IRC18:36
ayoungdolphm_, is it OK to say "auth_url will always end in the API version?"  If so, it makes calculating the AUTH_URL much easier:  if you want v3, and it ends in /v2.0, chop off the old and add the new.18:36
ayoungand if it doesn't...do discovery18:36
dolphm_ayoung: auth_url should support "/" "/v2.0/" and "/v3/"18:37
*** ruhe is now known as ruhe_18:37
*** eglynn_ has joined #openstack-dev18:37
*** rm_work|away is now known as rm_work18:37
*** teran has quit IRC18:37
*** julienvey_ has joined #openstack-dev18:37
dolphm_ayoung: and all of those should be handled by discovery18:38
*** luis_ is now known as luisg18:38
*** fungi has joined #openstack-dev18:38
*** ruhe_ has quit IRC18:38
ayoungdolphm_, we shouldn't force unnecessary round trips.  So,  "/" to me means "something other than v2.0 or v3.18:38
ayoungAnd yes, in that case, do discovery18:38
dolphm_stevemar: marekd|away did some great work on the federation controllers... we need to pull some of that back into the base v3 controller and use it elsewhere after this18:39
dolphm_ayoung: call it once and cache it18:39
ayoungdolphm_, if the endpoint ends in /v2.0 (after stripping the "/")  but I want the v3 api, do I need to do discovery for that?18:39
dolphm_ayoung: don't try to parse the URL client side and make predictions about the deployment18:39
*** sarob has quit IRC18:39
dolphm_ayoung: if the endpoint ends in /v2.0 and you want the v3 API then your configuration is wrong and you should get an error18:40
*** lucasagomes is now known as lucas-afk18:40
stevemardolphm_ - i agree about the work, but you mean that it shouldn't be an extension?18:40
ayoungdolphm_, and we break everyone's deployment18:40
dolphm_ayoung: something along the lines of "hey, I can't find v3 at this endpont"18:40
*** ndipanov is now known as ndipanov_gone18:40
ayoungdolphm_, lets assume we will be stuck with endpoints ending in v2.0 for the time being18:40
dolphm_stevemar: i'm just talking about the validation he's doing18:40
*** ruhe has joined #openstack-dev18:41
dolphm_stevemar: mutable params, public params, etc. he's solving problems we've had in keystone for a while :(18:41
*** nelsnelson_away has quit IRC18:41
stevemardolphm_: Ohh that stuff18:41
stevemaryeah, i really liked it!18:41
dolphm_nicely generic18:41
*** rongze has quit IRC18:41
stevemarrefactor for the near future18:41
stevemardump it in v3 base controller, it'll be easy to override18:42
morganfainbergstevemar, you say that now...18:42
stevemarmorganfainberg: c'mon be optimistic18:43
morganfainbergstevemar, not that i imminently see some reason why it wouldn't be...just ... you know hwo it goes18:43
*** rnirmal has joined #openstack-dev18:43
*** arozumenko1 has quit IRC18:43
*** hajay_ has left #openstack-dev18:44
ayoungdtroyer_zz, wake up!  I need to talk common client and caching of auth_urls with you!18:44
*** pdevine has joined #openstack-dev18:45
*** ruhe has quit IRC18:45
ayoungdolphm_, for caching...do we have an approach?  python-keyring?  Seperate cache file in $HOME?18:45
*** willingc has joined #openstack-dev18:45
ayoungI mean, I can understand expanding the number of envvars we accept, but that is not really a cache18:45
*** markwash has joined #openstack-dev18:46
*** rods1 has joined #openstack-dev18:46
*** rods has quit IRC18:46
*** rm_work is now known as rm_work|away18:47
*** johnthetubaguy1 has quit IRC18:47
*** fredkruger has joined #openstack-dev18:47
*** buzztroll has quit IRC18:47
*** rushiagr has quit IRC18:47
*** xarses has joined #openstack-dev18:48
*** mikeoutland has joined #openstack-dev18:48
*** jasondotstar has quit IRC18:48
dolphm_ayoung: we're using keyring to cache tokens, right? caching discovery stuff isn't credential-specific so keyring isn't ideal...18:48
ayoungdolphm_, I suspect we need to talk with dtroyer_zz to work it out. My guess is the other services are going to have the same issues18:49
*** gimpswork has joined #openstack-dev18:49
dolphm_ayoung: i don't know what it can back to, but i'd check out something like https://pypi.python.org/pypi/requests-cache18:49
*** gimpswork has quit IRC18:49
*** gimpswork has joined #openstack-dev18:49
ayoungdolphm_, morganfainberg can get it to back to anything with dogpile, I know he can!18:49
*** fredkruger has quit IRC18:49
*** kbrierly has joined #openstack-dev18:50
*** kdbrierly has joined #openstack-dev18:50
morganfainbergayoung, nooooooooooooo18:50
dolphm_i haven't considered dogpile.cache client side .. ?18:50
ayoungmorganfainberg, any input?18:50
morganfainbergdolphm_, i think it would be doable w/ the filebackend18:50
ayoungdolphm_, dogpile is just the mechanism, question remains: where?18:50
morganfainbergi wouldn't use anything heavier than that for the most part though18:50
ayoungdolphm_, the requests_cache " demo_cache.sqlite database"18:50
morganfainbergbut yes, dogpile.cache could be made to do all of that18:50
morganfainbergand it probably wouldn't be too hard to put it all together.18:51
dolphm_ayoung: http://httpcache.readthedocs.org/en/latest/18:51
morganfainbergdolphm_, oh i think i read about httpcache...that might be the better option for client18:52
*** jcoufal has joined #openstack-dev18:52
dolphm_ayoung: definitely cache to disk though, for the CLI use case18:52
ayoungmorganfainberg, question is how to configure it.  Would it be a CLI only option?18:52
dolphm_morganfainberg: it brags that you can't configure it ... so i assume it's only an in-memory cache18:52
*** jasondotstar has joined #openstack-dev18:53
morganfainbergdolphm_, doh!18:53
*** rods1 has quit IRC18:54
*** bashok_ has quit IRC18:54
*** rods has joined #openstack-dev18:54
*** bashok_ has joined #openstack-dev18:54
morganfainbergayoung, likely it would be some "sane defaults" and take some env vars to change the target(s) for the cache18:54
morganfainbergayoung, if using dogpile that is18:54
*** exed has quit IRC18:55
*** exed has joined #openstack-dev18:55
*** mtitov has joined #openstack-dev18:58
*** epim has joined #openstack-dev18:58
FunnyLookinHatIs there a test build of Grizzly available with the DNSaaS stuff built in ( I think using Moniker? )18:58
*** JordanRinke_afk has quit IRC18:59
*** buzztroll has joined #openstack-dev18:59
*** MaxV has joined #openstack-dev18:59
*** mrodden has quit IRC18:59
ayoungmorganfainberg, dolphm_ I think discovery should be a backup.  If I know I want v3 and I am given v2.0...let me try it, and deal with the 40419:00
*** lucas-afk is now known as lucasagomes19:00
*** colinmcnamara has quit IRC19:01
*** arnaud__ has quit IRC19:01
*** arnaud has quit IRC19:01
*** Alexei_987 has quit IRC19:01
*** sahid has quit IRC19:01
*** pschaef_t has quit IRC19:02
*** gimpswork has quit IRC19:02
*** aditirav has quit IRC19:02
*** salv-orlando has joined #openstack-dev19:03
*** mtitov has quit IRC19:03
dtroyer_zzayoung: /me is awake19:03
ayoungdtroyer_zz, we have a question about endpoint versions19:04
*** Farooque has left #openstack-dev19:04
ayoungdtroyer_zz, I tried using the OSC for a demo last week, but the Keystone setup from devstack puts v2.0 at the end of the url19:04
*** glucas has quit IRC19:05
*** danpb has quit IRC19:05
*** salv-orlando has quit IRC19:05
ayoungdtroyer_zz, I had to hack the URLs in the database to get the OSC to work19:05
*** nelsnelson has joined #openstack-dev19:05
*** MaxV has quit IRC19:05
*** aveiga has joined #openstack-dev19:05
dtroyer_zzayoung: yup.  does keystoneclient have working auto-discovery yet?19:05
*** mrodden has joined #openstack-dev19:05
ayoungdtroyer_zz, sort of19:05
ayoungfd0a176a49b5ead812567018a00fc3db4b7f531a  has it in there...19:06
*** salv-orlando has joined #openstack-dev19:06
ayounghttps://github.com/openstack/python-keystoneclient/commit/fd0a176a49b5ead812567018a00fc3db4b7f531a19:06
dtroyer_zzayoung: I was about to say that you could override that from localrc to remove the version, but it isn't going to work…that might be the first thing to straighten out in devstack...19:07
*** sushils has quit IRC19:08
ayoungdtroyer_zz, so...I should drop the v2.0 off the auth_url, as well as in the database/endpoints, and let OSC run the discover path to find out what is supported....that probably should not happen every time, though, as it adds t alot of round trips19:08
dtroyer_zzof course, it's still going to be a problem until _all_ of the clients use keystoneclient for auth19:08
*** glucas has joined #openstack-dev19:08
ayoungdtroyer_zz, heh...lets get it working for at least keystone itself19:08
dtroyer_zzayoung: thats anouther one of the things that needs to be cached19:08
*** sarob has joined #openstack-dev19:09
ayoungdtroyer_zz, "another" implies that you have other requests for caching?19:09
*** MaxV has joined #openstack-dev19:09
*** MaxV has quit IRC19:10
*** rossella_s has quit IRC19:10
dtroyer_zzayoung: oh yeah, lots. besides auth credentials,  name -> id lookups for a bunch of objects19:10
*** sdake_ has joined #openstack-dev19:10
ayoungdtroyer_zz, do you have a caching approach in mind?19:10
*** MaxV has joined #openstack-dev19:11
*** branen_ has joined #openstack-dev19:11
*** branen_ has quit IRC19:11
dtroyer_zzayoung: I was going to steal what Termie was doing in OCL as that was pretty generic but it doesn't fit well with the current base/client/manager classes19:12
angdraugthingee: can you have another look at https://review.openstack.org/#/c/58870/ (cinder rbd fix for non-raw images)? thanks!19:12
ayoungdtroyer_zz, link?19:12
dtroyer_zzayoung: lemme se if he's made it public yet...19:12
dtroyer_zzhttps://github.com/termie/ocl   looks like he's done more work since I last looked at it19:14
*** MaxV has quit IRC19:14
*** jasondotstar has quit IRC19:15
*** MaxV has joined #openstack-dev19:15
*** sdake_ has quit IRC19:15
*** sdake has quit IRC19:15
*** Ryan_Lane has quit IRC19:16
*** jasondotstar has joined #openstack-dev19:16
*** Ryan_Lane has joined #openstack-dev19:16
*** muehsi has quit IRC19:17
*** muehsi has joined #openstack-dev19:17
*** mrunge has quit IRC19:18
*** jmontemayor has quit IRC19:22
*** glucas has quit IRC19:22
*** glucas has joined #openstack-dev19:23
*** teran has joined #openstack-dev19:23
*** sdake has joined #openstack-dev19:23
*** sdake has quit IRC19:23
*** sdake has joined #openstack-dev19:23
*** kushal has quit IRC19:23
*** sdake_ has joined #openstack-dev19:26
*** jasondotstar has quit IRC19:28
*** arnaud has joined #openstack-dev19:28
*** jmontemayor has joined #openstack-dev19:28
*** gabrielhurley has joined #openstack-dev19:30
*** mohits has quit IRC19:31
dstanekmorganfainberg: hi19:31
morganfainbergdstanek, allo19:31
*** bashok_ has quit IRC19:32
*** mikeoutland has quit IRC19:32
morganfainbergdstanek, what can i do for you sir?19:32
dstanekmorganfainberg: i saw your note this morning from Friday night, did you still have a question?19:32
morganfainbergdstanek, well... i added you to a review :P19:32
morganfainbergdstanek, but i think i solved my initial question19:33
*** arnaud__ has joined #openstack-dev19:33
morganfainbergdoesn't mean i came up with a good answer19:33
ayounghttps://github.com/termie/ocl/blob/master/ocl/cache.py19:33
dstanekmorganfainberg: which review is it - you have lots :_)19:33
morganfainbergdstanek, https://review.openstack.org/#/c/62198/ specifically https://review.openstack.org/#/c/62198/6/keystone/identity/controllers.py19:34
morganfainbergdstanek, its... uhm... evil-python-hacks?19:34
*** arnaud has quit IRC19:34
morganfainbergdstanek, working around MRO issues with subclassing and marking everything deprecated19:34
*** vartom11111119 has joined #openstack-dev19:35
*** arnaud has joined #openstack-dev19:35
*** JordanRinke_afk has joined #openstack-dev19:35
*** Abhishek_ has quit IRC19:36
*** sarob has quit IRC19:37
*** jasondotstar has joined #openstack-dev19:38
*** mlavalle has quit IRC19:38
*** rraja has joined #openstack-dev19:38
*** ruhe has joined #openstack-dev19:40
*** JordanRinke_afk has quit IRC19:40
*** nplanel has quit IRC19:40
*** mlavalle has joined #openstack-dev19:42
*** gszasz_ has quit IRC19:42
*** JordanRinke_afk has joined #openstack-dev19:42
*** novas0x2a|laptop has joined #openstack-dev19:43
ayoungdtroyer_zz, so he hasn't done much on the cache strategy: "JsonCache:  store to a file"19:44
*** bogdando has joined #openstack-dev19:44
dtroyer_zzayoung: it wasn't the actual back-end so much as the hooks into the stack that I'm coveting19:46
*** rnirmal has quit IRC19:46
*** mikeoutland has joined #openstack-dev19:46
ayoungdtroyer_zz, he's got some good ideas there....just wondering what we need to do cache wise.  For the token we've said is probably going to be python-keyring. I wonder if we should use the same approach across the board.19:47
*** bnemec_ has joined #openstack-dev19:48
dtroyer_zzayoung: across all clients?19:49
*** s0mik has quit IRC19:49
*** bnemec has quit IRC19:49
ayoungdtroyer_zz, yeah.19:49
*** offenflieg has joined #openstack-dev19:49
ayoungdtroyer_zz, I mean, I don't know the API well enough to say if it was the right thing19:49
ayoungjust that it solves the tough problem, and it is worth looking into whether it could be made "lighter" for things that need a lighter touch with caching19:50
*** JordanRinke_afk has quit IRC19:50
*** gothicmindfood has joined #openstack-dev19:50
*** nelsnelson is now known as nelsnelson_away19:50
dtroyer_zzayoung: I'm not convinced of anything yet, that was just where I planned to start…but the more we can converge generic stuff like this the better off we'll be in the long run19:51
*** jasondotstar has quit IRC19:51
*** nelsnelson_away is now known as nelsnelson19:51
*** CaptTofu has joined #openstack-dev19:52
dstanekmorganfainberg: is there any reason you don't just use the metaclass to add the deprecated decorator when the class is being created?19:52
dstanekmorganfainberg: that would be less runtime cost and no need to use __getattribute__19:53
morganfainbergdstanek, inheritance doesn't work like that, you don't actually get the methods in the namespace unless they are defined on the class itself19:53
morganfainbergdstanek, since the inherited class already had __new__ called19:54
ayoungdtroyer_zz, so you are implying that I am pre-maturely optimizing and just need to get the dang thing to work first?19:54
morganfainbergremember __new__ is called at class definition, not at object instantiation time19:54
*** jasondot_ has joined #openstack-dev19:54
*** bpokorny has quit IRC19:55
morganfainbergdstanek, the things you learn when delving into metaclass programming :P19:55
dtroyer_zzayoung: :)  I'm implying that you are ahead of me in actually putting bits in place and that good ideas are welcome as always19:55
dstanekmorganfainberg: trying something19:56
morganfainbergdstanek, sure thing.19:56
harlowjadhellmann u got a sec?19:56
ayoungdtroyer_zz, here is what I was origianlly thinking.  http://paste.openstack.org/show/55081/19:56
harlowjafor a question about stevedore19:56
morganfainbergdstanek, like i said, this isn't guaranteed to be a "good" idea ;)19:56
dhellmannharlowja: sure, what's up?19:56
ayoungdtroyer_zz, I'm willing to make this work...I just need to figure out how19:57
morganfainbergdstanek, but it's definitely an "idea" on how to solve this problem i've backed myself into19:57
ayoungdtroyer_zz, I am guessing that I need to make it work today, with endpoints specified as v2.019:57
harlowjadhellmann so in stevedore driver.py it raises runtimeerrors, i was wondering if there was a reason for using runtimeerror over say a custom one (DriveNotFound, or something)19:57
ayoungif that is the case...what should the client do?19:57
harlowja*drivernotfound19:57
*** gabrielhurley has quit IRC19:57
*** MaxV has quit IRC19:58
morganfainbergdstanek, actually now that i think of it...maybe i did cross the streams in my logic in my head.19:58
*** exed has quit IRC19:58
harlowjadhellmann can submit a patch if u are ok with that, just wasn't sure if there was some reason that i might be unaware of19:58
*** MaxV has joined #openstack-dev19:58
dstanekmorganfainberg: when your metaclass is creating the class object it should be able to wrap the methods in a decorator19:59
dhellmannharlowja: no, I just didn't want to create a custom exception. if you do make one, subclass it from runtimeerror19:59
*** dolphm has joined #openstack-dev19:59
dstanekmorganfainberg: this was it only happens when the class object it created (at import time)19:59
dstanekmorganfainberg: i've done this in the past for other things19:59
*** MaxV has quit IRC20:00
*** mgagne has quit IRC20:00
morganfainbergdstanek, the issue is inheritance -- if the methods were defined on the class it would work like that.  sec have an example20:00
*** MaxV has joined #openstack-dev20:00
harlowjadhellmann k, just useful to say know exactly that the driver loading/init failed, instead of something else blowing up (maybe nothign else can, and then i guess its fine)20:01
dtroyer_zzayoung: our second-to-last paragraph is pretty nuch what I would do.   I had a simpler set of steps for dealing with creating a default URL though…close to what you have as steps 1, 2 and 4.20:01
harlowjadhellmann  with i guess https://github.com/dreamhost/stevedore/blob/master/stevedore/extension.py#L140  (maybe that should raise something?)20:01
dtroyer_zzs/our/your/20:01
harlowjadhellmann *same with i guess20:01
dhellmannharlowja: no, that specifically doesn't raise because that would make one bad plugin bring an entire app down20:02
harlowjak20:02
morganfainbergdstanek, example code: http://paste.openstack.org/show/55082/ (module is called cache_test in the next paste)20:02
harlowjadhellmann could that at least be optional, maybe in some cases i don't want my app to start with bad plugins?20:02
ayoungdtroyer_zz, I think the auth_url is kindof like a bookmark.  If there is enough info to auth from there, use it.20:03
ayoungif not, do discover20:03
ayoungy20:03
*** dolphm has quit IRC20:03
dhellmannharlowja: a bad plugin would be ignored20:03
*** dolphm_ has quit IRC20:03
ayoungbut I'm the kind of person that hacks the url in the brower for bugzilla etc20:03
morganfainbergdstanek, http://paste.openstack.org/show/55083/ if you look, you see that "ohai" method is not visible in the namespace20:03
harlowjadhellmann sure, it could be, but not in all cases is it desireable to do that right?20:03
morganfainbergdstanek, i guess i could inspect bases __dict__ and build from there?20:04
ayoungI don't want to *have* to do discovery until it is really necessary20:04
morganfainbergeach object in bases that is20:04
dhellmannharlowja: when is it better to have the entire app fail when discovery of a single plugin fails?20:04
morganfainbergdstanek, i do agree that wrapping each time is sub-optimal/less performant20:04
dtroyer_zzayoung:  I just don't like the idea of parsing it.  look for the grand-fathered version strings if necessary but otherwise use what is passed.20:05
*** JordanRinke_afk has joined #openstack-dev20:05
harlowjadhellmann in an app thats sole purpose is to only run when every plugin has loaded ok ;)20:05
*** sarob has joined #openstack-dev20:05
harlowja*not all apps of course are like this20:06
dhellmannharlowja: ok, that's not the main use case I was considering20:06
dstanekmorganfainberg: in your example the thing class isn't using a metaclass so it will already be created before the test class20:06
ayoungdtroyer_zz, the problem is that we are telling people that v3 is deprecated, and at the same time, we are saying we are maintaining support for older versions of keystone client.  The older clients don't do discovery.  They will need the old auth_urls and, more importantly the old endpoints with v2.0 in them.20:06
*** Alexei_987 has joined #openstack-dev20:06
dhellmannharlowja: I could see saving the exception info so an app could ask after the loop is done20:06
harlowjadhellmann sure, that'd be ok to20:06
dhellmannharlowja: or even having an "on_error_callback" passed to the constructor20:06
harlowjadhellmann exactly :)20:07
*** lucasagomes has quit IRC20:07
dhellmannharlowja: but as a user, I'd be annoyed if my app wouldn't start at all just because of a bad plugin20:07
morganfainbergdstanek, which is the case for the code.  the assignment.controllers.ProjectV3 controller isn't deprecated but Identity.controllers.ProjectV3 would be20:07
dhellmannharlowja: and as an app author, I don't want to give that much control to plugin authors20:07
morganfainbergdstanek, we don't want to mark the "new namspace location" as deprecated, just the old20:07
morganfainbergdstanek, i was trying to avoid the need to write a tone of duplicated methods that needed testing to support compat for the dev cycle20:08
*** nelsnelson is now known as nelsnelson_away20:08
*** markmc has joined #openstack-dev20:08
*** mrodden has quit IRC20:09
dtroyer_zzayoung: something seems backwards in there…support for old clients isn't as important as support for old servers with a discovery-enabled client.  old clients will always need an old-style URL.20:09
ayoungdtroyer_zz, so I think we need at least a subset of the parsing rules.  If they are using v2.0, we can assume they are going against a legacy system.  If they want v3...we could make them work through discovery.  But seems wasteful if we have enough infomration20:09
morganfainbergdstanek, another option would be just to assign a reference to the new class-location in identity, but it wont log deprecation messages in that case.20:09
dstanekmorganfainberg: i see, you only want to wrap it if it's called through a certain class20:09
morganfainbergdstanek, yep20:09
ayoungdtroyer_zz, says you20:09
ayoungdtroyer_zz, my guess is that there are people that get angry about *any* non backwards compat change20:10
ayoungserver or client20:10
harlowjadhellmann sure, i understand why, but as app author that say wants to recieve notifications of loading failures, that'd be nice, on_error_callback would seem useful to do this (defaulting to nothing)20:10
morganfainbergdstanek, that patchset converts all keystone-internal code to using the new class definitions.  this is only to support out-of-tree developed code.20:10
dtroyer_zzayoung: I agree we will need to do enough checking in the URL (I don't want to call it parsing for some reason) but I really don't want to change it beyond appending a legacy version maybe20:10
morganfainbergsame as any of the internal-api deprecation work20:11
ayoungdtroyer_zz, I think I want to assume that it is set up for legacy20:11
ayoungI don;t think we can get people to use it today if it is not20:11
dtroyer_zzayoung: old client will always need a versioned URL.  I dont' see any way around that since it already is out in the wild20:11
dtroyer_zzso the case of old client and discoverable server is covered20:12
dstanekmorganfainberg: i guess if our code is fine that any slow down would make third parties more likely to change their code20:12
ayoungdtroyer_zz, and new client will have to deal with old versioned URL.  hence the ugly parsing....20:12
dhellmannharlowja: sure, an on_error_callback makes sense20:12
harlowjadhellmann thx boss!20:13
*** sarob has quit IRC20:13
*** nelsnelson_away has quit IRC20:13
harlowjareview requests soon20:13
dtroyer_zzayoung: I'd handle that starting with a GET on the URL and if that fails it's a bad url (I'm ignoring caching for now)20:13
*** markwash has quit IRC20:13
dtroyer_zzayoung: then run the discovery on the return.  If a version is present you should be able to just use that as it is (presumably) what the user asked for.20:13
*** nplanel has joined #openstack-dev20:14
dstanekmorganfainberg: so in other cases like this i have made functions that have the same name as the class20:14
*** hemnafk is now known as hemna20:14
dstanekmorganfainberg: they would log the deprecation warning and return an instance20:14
morganfainbergdstanek, sure, the issue here is we have @classmethods which get called without instantiation20:14
morganfainbergdstanek, i tried that first ;)20:14
dtroyer_zzayoung: handling the version options is all that is left then20:14
*** sushils has joined #openstack-dev20:15
morganfainbergdstanek, maybe could use some setattr magic to lift those up20:15
*** eglynn_ has quit IRC20:15
dtroyer_zzayoung: and that's where I'd check for the presence of the legacy version strings and if they're not present then append a version to the URL20:15
*** JordanRinke_afk has quit IRC20:15
morganfainbergnot sure if it would be cleaner or about the same as this.  i am open to changing out the metaclass if there is a better approach20:16
dstanekmorganfainberg: either way it's magical :-(20:16
*** AlanClark has joined #openstack-dev20:16
dstanekmorganfainberg: i don't know of a better one off the top of my head20:16
morganfainbergdstanek, if anyone i knew would, you'd be the person.20:16
*** JordanRinke_afk has joined #openstack-dev20:16
morganfainbergdstanek, it's why i wanted you to look at it20:16
ayoungdtroyer_zz, ther are two pieces, remember.  auth_url is handed in by the end user.  We can assume that they know what they are doing, and tell them to leave off the version, or that we will deduce the version form what they give us...whatever we want.  Then there is the endpoint that comes back from the keystone catalog.  This is where the user is going to have no power, as they may be trying to use the v3 api, but all of the en20:20
ayoungdpoints have /v2.0 at the end.  This is where, I think, we need to do the parsing.20:20
*** yolanda has quit IRC20:21
*** mrodden has joined #openstack-dev20:22
dtroyer_zzayoung: I've always thought the idea was to get rid of versions in the service catalog.  however, doing that is where your comment about old clients comes in to play…that would break them.20:22
*** reed has joined #openstack-dev20:23
*** JordanRinke_afk has quit IRC20:23
ayoungdtroyer_zz, those pesky users requiring we not break their precious apps20:23
dtroyer_zzayoung: yeah, rats.20:26
ayoungdtroyer_zz, OK, I'm going to run with this.  I think the changes will be restricted to python-keystoneclient20:26
dtroyer_zzayoung: I'm still not convinced that blindly changing the version in the SC is a good idea, but I'm getting closer…if the requested version is not supported it'll fail anyway though20:27
*** JordanRinke_afk has joined #openstack-dev20:27
ayoungdtroyer_zz, "and we could fail to fail, it was the easiest thing to do"  Stephen Stills.20:27
ayoungcouldn't20:27
dtroyer_zzayoung: this will set a precedent for versions in the other APIs.  and for example, nova is much worse as the version isn't last...20:28
*** julienvey_ has quit IRC20:28
*** joesavak has joined #openstack-dev20:28
*** jcooley_ has quit IRC20:28
*** dims has quit IRC20:28
dtroyer_zzayoung: ok, I'll buy it for now.  and it's on me to prove why I don't like it when the time comes ;)20:29
*** eglynn_ has joined #openstack-dev20:29
ayoungdtroyer_zz, nah, it has to make it through jamielennox first, and dolph20:29
*** bdpayne has quit IRC20:29
*** bdpayne has joined #openstack-dev20:30
*** jsavak has quit IRC20:31
*** dims has joined #openstack-dev20:32
*** gimpswork has joined #openstack-dev20:32
*** JordanRinke_afk has quit IRC20:33
ayoungterry_howe, how do I plan on working on it?  I think I can fix inside python-keystoneclient for now.20:33
*** mohits has joined #openstack-dev20:33
*** JordanRinke_afk has joined #openstack-dev20:33
terry_howeI was just asking if you *were* going to work on it20:33
*** arnaud__ has quit IRC20:33
ayoungterry_howe, I think the main problem is that the endpoints that come back in the service catalog  are set assuming the user wants v220:34
terry_howesounds like yes is the answer to that20:34
ayoungand I don't think we can change it20:34
*** arnaud has quit IRC20:34
ayoungterry_howe, yeah, I think I can...I think I can...20:34
terry_howeokay, I saw the ticket come in and it seemed like an important issue, but I have plenty of neutron busy to keep me busy20:35
ayoungterry_howe, I'll move it to the keystone client20:35
*** freyes has joined #openstack-dev20:36
*** nelsnelson has joined #openstack-dev20:36
*** buzztroll has quit IRC20:36
*** uaberme has joined #openstack-dev20:36
terry_howecool, I was wondering if the work would be there20:36
*** clayb has joined #openstack-dev20:37
dtroyer_zzayoung: here's a quick hack that gets rid of the version in DevStack's auth urls: https://review.openstack.org/62468   I think that's what you were trying to do with the database edit?20:37
*** ctracey is now known as ctracey|away20:37
ayoungdtroyer_zz, suspect it will not pass gate, and if it does, it will break keystone, as we gate on unit tests for multiple client versions...actually, that is a very dangerous patch20:38
dtroyer_zzayoung: it's WIP for now…not intended for general use...20:39
ayoungnah...won't break keystone today...but it will break old client versions, I *think*20:39
dstanekbknudson: having fun with those keystone client tests :-)20:40
ayoungdstanek, zactly20:40
*** sandywalsh_ has quit IRC20:40
dstanekbknudson: i added tests for a bunch of versions, but if i run them all at the same time my vm runs out of memory :-)20:41
*** ruhe has quit IRC20:41
dtroyer_zzayoung: and it should actually pass all tests…no changes without the config in localrc20:41
*** buzztroll has joined #openstack-dev20:42
ayoungdtroyer_zz, IIUC we did this to ourselves when we told people to put v2.0 in the URLs in the first place....programming is one of those things where you make one mistake and support it for the rest of your life.20:43
bknudsondstanek: keystone client tests where?20:43
bknudsonin tempest?20:43
*** s0mik has joined #openstack-dev20:44
dstanekbknudson: no the ones that are in keystone20:44
ayoungbknudson, so what do you think would happen to the tests if we drop v2.0 off the url, and ran it against an old client20:44
*** portante_ is now known as portante20:44
bknudsondstanek: in keystone, to drop the essex-1 and 0.1.1 versions?20:44
dstaneki added the ability to test other versions like 0.4.x20:45
bknudsondstanek: we've had complaints that the tests take a lot of memory before... then we said we'd move the tests to tempest20:45
ayoungbknudson, so the v3 api calls in the python-keystoneclient do not handle the v2.0 coming back from the endpoints in the catalog...20:45
bknudsondstanek: and then it turns out that tempest doesn't want them.20:45
dstanekbknudson: i found the leak :-) or at least i thing i did20:45
dstanekworking on fixing it now20:46
dstanekit looks like it's routes that consumes a fair amount or memory20:46
bknudsondstanek: I think I tried to fix a leak in there once... but I hoped that the switch to testr helped.20:46
bknudsonayoung: I thought we would have identity endpoint not have v2.0 or v3.20:46
*** jsavak has joined #openstack-dev20:47
ayoungbknudson, and what about all of the code out there that sets the endpoints with v2.0 in it?20:47
bknudsonayoung: or we have a new endpoint for either "v3" or for "no version"20:47
*** yolanda has joined #openstack-dev20:47
ayoungpackstack, puppet,  crowbar, fuel...20:47
*** buzztroll has quit IRC20:47
ayoungbknudson, now you see the scope of the problem20:47
ayoungbknudson, I'm thinking along these lines http://paste.openstack.org/show/55081/20:48
*** buzztroll has joined #openstack-dev20:48
*** jecarey has quit IRC20:48
*** jecarey has joined #openstack-dev20:49
bknudsonayoung: how about if they set --os-identity-api-version then don't do discovery and require that the endpoint supports tha version.20:49
ayoungbknudson, nope...cuz of legacy20:49
ayoungbknudson, we have to assume v2.0 and v3 sit side by side20:50
ayoungand v2 is the current standard setter20:50
*** vartom11111119 has quit IRC20:50
ayoungbknudson, assume that the end user can't affect change on the server20:50
bknudsonand if they don't say --os-identity-api-version then do discovery20:50
dstanekayoung: why would you need to assume that for the case where a user is specifying the version they want?20:50
ayoungdstanek, because we lie to them20:50
*** joesavak has quit IRC20:50
ayoungwe tell them in the service catalog that the endpoint needs to end with v2.020:50
dtroyer_zzayoung: I think we have to make sure that the vNN in SC is stopped with v2.0.  Never suggst putting another version in there...20:51
ayoungdtroyer_zz, I like that20:51
ayoungdeath to the version string!20:51
bknudsona client can't use service catalog to connect to keystone for auth, though?20:51
*** gothicmindfood has quit IRC20:51
dstanekayoung: what tells them that?20:51
ayoungdstanek, service catalog comes back on a token request20:51
dstanekayoung: ah i see20:51
*** nati_ueno has joined #openstack-dev20:52
*** mdenny has joined #openstack-dev20:52
*** yolanda has quit IRC20:52
* ayoung now going to pull up the Rollins Band "Liar" 20:52
bknudsonI'm going to listen to 3 dog night20:53
ayoungJerimiah was a good friend of mine20:53
*** rraja has quit IRC20:53
*** sandywalsh_ has joined #openstack-dev20:54
*** safchain has joined #openstack-dev20:54
bknudsonayoung: how does keystone lie to clients?20:55
*** dprince_ has quit IRC20:55
bknudsonmaybe the catalog should indicate the version if it's known20:55
ayoungbknudson, not Keystone, the configurationators that put the endpoints into the service catalog20:55
bknudsonayoung: what I configure HTTPD to serve identity API out of /identity/v3 ?20:56
*** jcooley_ has joined #openstack-dev20:56
dtroyer_zzbknudson: that should still work...20:56
bknudsonwould be an odd configuration, then you'd have identity/v3/v2.0 and identity/v3/v320:57
dtroyer_zzat least I'm trying to make sure it does20:57
*** MaxV has quit IRC20:57
*** MaxV has joined #openstack-dev20:57
*** alop has quit IRC20:58
dtroyer_zzbknudson: that's the reason for ayoung's step 5.x's, to edit known versions.  or why I suggested the version never be published that way so we only have to edit 'v2.0'20:58
*** mikeoutland has quit IRC20:58
dstanekayoung: should they be putting the base endpoint with no version and letting the client figure it out?20:58
dtroyer_zzbknudson: in your httpd example, you's set up /identity rather than /identity/v320:58
*** SumitNaiksatam has joined #openstack-dev20:59
bknudsonok, so it looks like ayoung is trying to work with an endpoint defined like http://localhost:5000/v2.020:59
bknudsonby parsing the url20:59
bknudsonbut for some reason also wants to work with /v3?21:00
*** mikeoutland has joined #openstack-dev21:00
bknudsonare identity endpoints being set up like http://localhost:5000/v3?21:00
dtroyer_zzThat is what I want to avoid or we'll be in this loop forever21:00
*** alop has joined #openstack-dev21:00
*** gimpswork has quit IRC21:00
bknudsonayoung: I don't see how step 5.x works with step 1? It's already assuming v3 API?21:01
*** rossella_s has joined #openstack-dev21:01
*** willingc has quit IRC21:01
*** MaxV has quit IRC21:01
bknudsonI'm wondering if ayoung's algorithm needs to work with http://localhost:5000/v3 or only http://localhost:5000/v2.0 ...21:02
bknudsonif v3 endpoints don't exist out there then I don't see why21:02
*** sushils has quit IRC21:02
dtroyer_zzI think he wrote it for both, and it needs to because a user might set OS_AUTH_URL=https://localhost:5000/v3 even if it isn't in the service catalog21:03
*** crank has quit IRC21:03
bknudsonright, we can't use the service catalog for auth since you get catalog during auth21:03
bknudsonbut why then not also set OS_AUTH_VERSION=3 ?21:04
*** radez is now known as radez_g0n321:04
bknudsonand if OS_AUTH_VERSION isn't set then do discovery21:04
*** sushils has joined #openstack-dev21:05
*** fbo_away is now known as fbo21:05
*** willingc has joined #openstack-dev21:05
dtroyer_zzThat sould be the documented way to do it.  But user's being users will eith cut-n-paste from a service catalog and/or just change 'v2.0' to 'v3' in their configs.21:05
*** freyes has quit IRC21:05
*** otherwiseguy has quit IRC21:05
ayoungdtroyer_zz, I think that we can leave v2.0 in the docs for now, handle it automagically, and, once the v2 api is gone, document it with no version string21:06
*** colinmcnamara has joined #openstack-dev21:06
bknudsonif we do discovery users won't notice... it'll work with either v2.0 or v3.21:06
*** markwash has joined #openstack-dev21:07
*** ctracey|away is now known as ctracey21:07
ayoungI'm less worried about the initial auth_url, as the user can modify that themselves.  We'll start telling them to drop the version number and assume 321:07
*** crank has joined #openstack-dev21:08
*** jcoufal has quit IRC21:08
bknudsonayoung: dtroyer_zz - have you used this yet? https://github.com/openstack/python-keystoneclient/blob/master/keystoneclient/discover.py21:08
ayoungbknudson, "used" no, just reviewed21:08
bknudsonok, so if we're past the initial auth_url ... then they get a catalog and want to do some identity op21:09
dtroyer_zzbknudson: its on my list once I get the next OSC released (tomorrow maybe)21:09
*** denis_makogon_ has joined #openstack-dev21:09
bknudsonand the catalog they got back had v2.0 ... so v3 ops don't work21:09
*** denis_makogon_ is now known as denis_makogon21:09
ayoungbknudson, yep21:10
bknudsonayoung: so is this something that you'd expect OSC to do something about or python-keystoneclient?21:10
ayoungp-kc21:10
bknudsonpython-keystoneclient could do something in its catalog...21:10
ayoungbknudson, I was thinking it was a OSC thing, but it really is keystone logic21:10
bknudsonhttps://github.com/openstack/python-keystoneclient/blob/master/keystoneclient/service_catalog.py21:10
*** gothicmindfood has joined #openstack-dev21:11
*** jtomasek has quit IRC21:11
mriedem1bknudson: fyi https://etherpad.openstack.org/p/vmware_security_strategy21:11
bknudsonayoung: if keystoneclient knew that v3 was used during auth then could use that info to update the catalog?21:11
*** pdevine is now known as agntdrake21:12
ayoungbknudson, that is the idea21:12
ayoungbknudson, assume v3 unless told otherwise would be my approach...and always keep that at the latest21:12
ayoungtis the restful way21:12
*** colinmcnamara has quit IRC21:12
bknudsonmriedem1: looks like they're duplicating or could use what's being done in keystone for identity providers. (SAML support)21:13
*** jcooley_ has quit IRC21:13
dstanekayoung: now if we can have the API driven by hypermedia it would make upgrades easier21:14
bknudsonayoung: looks like we also know if the service catalog is v3 or v2... https://github.com/openstack/python-keystoneclient/blob/master/keystoneclient/service_catalog.py#L3321:15
ayoungbknudson, problem is, what if you want to do v3, but the service catalog is v2?21:15
dstanekayoung: could it be possible to specify the preferred version when doing auth?21:16
dstanekconneg or something similar...21:16
ayoungdstanek, I'm not rewriting the endpoints, if that is what you are implying21:16
dstanekthat's exactly what i'm implying :-)21:17
*** markmc has quit IRC21:17
bknudsonayoung: I thought your proposal was to rewrite the endpoints? http://paste.openstack.org/show/55081/21:17
ayoungbknudson, on the client side21:18
*** boden has quit IRC21:18
*** buzztrol_ has joined #openstack-dev21:18
dstanekayoung: how do you lead a client through a restful api if all of the links are wrong?21:18
ayoungbknudson, I am looking for a client fix I can deploy this release21:18
bknudsonwe could add something to the service catalog, like get_endpoints(service_type='identity', version='v2')21:18
bknudsonand it could do whatever.21:18
dstanekayoung: is this more of a short term fix?21:19
ayoungyeah21:19
ayoungand we don't need a long term one if we do the rest of it correctly21:19
*** jcooley_ has joined #openstack-dev21:19
ayoungversion strings in the API are dumb21:19
dstanekayoung: ++21:19
ayoungthe more I think about it, the more I just want tod o https://keystone/auth/token21:19
*** abramley has quit IRC21:19
ayoungno version, no port21:19
bknudsonmaybe it's get_urls??21:19
ayoungnothing but net21:20
*** radez_g0n3 is now known as radez21:20
ayoungactually https://hostname/keystone/auth/token21:20
*** glucas has quit IRC21:20
ayoungif you want v2, send it as a content type21:20
ayoungsomething like this http://stackoverflow.com/questions/12037476/versioning-a-restful-api-with-both-xml-and-json-content-type21:21
*** buzztroll has quit IRC21:21
*** ladquin has quit IRC21:21
bknudsonayoung: but the v2 api might have different resources not just the representation21:23
ayoungbknudson, that is fine21:23
dstanekbknudson: if the client were coded correctly that would be fine21:23
ayoungbknudson, you only need the explicit representation for two different  resources that use the same URL21:23
*** amotoki has joined #openstack-dev21:23
*** buzztroll has joined #openstack-dev21:23
dstanekthings should be based on the rel21:24
*** akrivoka has joined #openstack-dev21:24
*** buzztrol_ has quit IRC21:24
*** colinmcnamara has joined #openstack-dev21:25
*** akrivoka has quit IRC21:26
*** epim has quit IRC21:27
*** alop has quit IRC21:27
*** alop has joined #openstack-dev21:27
bknudsonayoung: Seems like something we could implement already21:28
bknudsonwould be nice if we had a more REST-based framework than the routes stuff21:29
ayoungbknudson, https://blueprints.launchpad.net/python-keystoneclient/+spec/endpoint-versioning21:29
*** epim has joined #openstack-dev21:30
*** arnaud has joined #openstack-dev21:31
*** jcooley_ has quit IRC21:32
*** arnaud__ has joined #openstack-dev21:32
*** SergeyLukjanov has quit IRC21:35
*** akrivoka has joined #openstack-dev21:35
*** vkozhukalov has quit IRC21:35
*** yamahata has quit IRC21:36
*** buzztrol_ has joined #openstack-dev21:36
*** Shrews has left #openstack-dev21:36
*** kbringard has quit IRC21:36
*** romcheg1 has left #openstack-dev21:36
*** buzztroll has quit IRC21:36
*** arnaud__ has quit IRC21:37
*** SergeyLukjanov has joined #openstack-dev21:38
*** arnaud__ has joined #openstack-dev21:38
*** ianw has joined #openstack-dev21:38
bknudsonayoung: next you're going to want to change from JSON by default to XML.21:38
*** jdob has quit IRC21:38
ayoungbknudson, HTML21:39
*** Alexei_987 has quit IRC21:39
*** jdob has joined #openstack-dev21:39
*** yamahata has joined #openstack-dev21:39
*** e0ne has joined #openstack-dev21:40
*** Alexei_987 has joined #openstack-dev21:40
*** jamielennox|away is now known as jamielennox21:40
*** SergeyLukjanov_ has joined #openstack-dev21:42
*** Alexei_987 has quit IRC21:42
*** SergeyLukjanov is now known as SergeyLukjanov_a21:42
*** colinmcnamara has quit IRC21:42
*** SergeyLukjanov_a has quit IRC21:43
*** akrivoka has quit IRC21:43
*** drankis_ has quit IRC21:43
*** Alexei_987 has joined #openstack-dev21:44
*** buzztroll has joined #openstack-dev21:44
*** willingc has quit IRC21:45
*** kbringard has joined #openstack-dev21:46
*** buzztrol_ has quit IRC21:46
*** abramley has joined #openstack-dev21:47
*** buzztrol_ has joined #openstack-dev21:48
*** radez is now known as radez_g0n321:48
*** spandhe has joined #openstack-dev21:48
*** buzztroll has quit IRC21:50
*** otherwiseguy has joined #openstack-dev21:50
*** dprince has joined #openstack-dev21:50
*** willingc has joined #openstack-dev21:52
*** kbringard has quit IRC21:53
*** willingc has quit IRC21:54
*** boris-42 has quit IRC21:54
*** kbringard has joined #openstack-dev21:54
jamielennoxayoung: what is that trying to do ^21:55
jamielennox?21:55
jamielennoxand why?21:55
jamielennoxi don't think we should consider /v2.0 and /v3 a stable part of the API, they are just mount points21:56
ayoungjamielennox, good morning!21:56
jamielennoxthough dolphm disagrees21:56
*** hartsocks has quit IRC21:56
ayoungI'm being pragmatic here....there is too much code out there right now that assumes the v2.0 will be there in the endpoint, but I want people using v321:56
*** sarob has joined #openstack-dev21:56
ayoungwe need to work around that21:56
jamielennoxso use discovery21:56
*** buzztroll has joined #openstack-dev21:57
jamielennoxif you pass the --os-identity-api-version=XXX as version=XXX it will just work21:57
*** SergeyLukjanov_ has quit IRC21:57
jamielennoxbut you need to point to the root URL21:57
*** SergeyLukjanov has joined #openstack-dev21:57
jamielennoxthis is fine for at least new CLI21:57
*** devoid has joined #openstack-dev21:58
ayoungjamielennox, but what if the service catalog returns endpoints with /v2.0 on them?21:58
bknudsonjust be glad keystone doesn't put the tenant id in the endpoint21:58
*** buzztro__ has joined #openstack-dev21:58
*** dolphm has joined #openstack-dev21:59
*** bswartz has quit IRC21:59
ayoungand if people have code for intergration that uses that v2.0 endpoint21:59
jamielennoxayoung: i don't think that we can get to override that21:59
ayoungwe can't force people to break their systems21:59
*** kevinconway has quit IRC21:59
jamielennoxwhat if you want to make people use /v2.0?21:59
*** buzztrol_ has quit IRC21:59
ayoungso..if you want the v3 api and they are specifying v2.0...rewrite the url21:59
ayoungI can't really see a way a round it21:59
jamielennoxneither21:59
jamielennoxthis is where i've always stumbled22:00
*** drankis_ has joined #openstack-dev22:00
*** jcooley_ has joined #openstack-dev22:00
*** jsavak has quit IRC22:00
jamielennoxbut i don't want to maintain that as long term behaviour22:00
ayoungjamielennox, now...if you were to say "if it is v2.0, chop that off and do discovery" you would probably be right.  Strictly speaking22:00
*** yeylon__ has quit IRC22:01
ayoungbut it would be a performanice hit, and an unnecssary one22:01
jamielennoxwhy?22:01
*** sarob_ has joined #openstack-dev22:01
*** buzztroll has quit IRC22:01
ayoungso long as discover works, we can tell people, in the future to specify endpoing without the version in them22:01
*** armax has quit IRC22:01
ayoungjamielennox, performance hit for multiple round trips22:01
jamielennoxtrips for discovery?22:01
*** sarob has quit IRC22:01
jamielennoxyou do that once and then keep the client - it's not much of a hit22:01
*** sandywalsh_ has quit IRC22:02
lifelessjamielennox: it isn't?22:02
jamielennoxlifeless: it's +1 http request22:02
lifelessjamielennox: I say this sitting on 300ms latency to most cloud endpoints I use.22:02
lifelessjamielennox: exactly22:03
jamielennoxlifeless: it dpeends on how you use the client i guess, on CLI there's a hit i guess unless we look at caching the discovery22:03
sdaguedolphm / ayoung: so we've got this interesting race that just happened which hints at something very weird going on in keystone client22:03
*** mfer has quit IRC22:03
sdaguehttp://logs.openstack.org/61/60961/9/check/check-dg-tempest-dsvm-full-reexec/9206afd/logs/screen-n-api.txt.gz?level=INFO#_2013-12-16_17_10_42_98622:03
ayoungjamielennox, we don't have a caching mechanism yet22:04
dolphmjamielennox: ^22:04
*** buzztroll has joined #openstack-dev22:04
*** SergeyLukjanov has quit IRC22:04
ayoungrace in keystone client?22:04
lifelessjamielennox: so nova does this:22:05
sdagueayoung: that's my guess22:05
lifelessexport COMPUTE_API_VERSION=1.122:05
*** jasondot_ has quit IRC22:05
*** pcm__ has quit IRC22:05
lifelessjamielennox: to avoid this, AIUI.22:05
sdagueayoung: keystoneclient's token caches all multi process safe?22:05
*** rossella_s has quit IRC22:05
*** jdob has quit IRC22:06
*** buzztro__ has quit IRC22:06
ayoungsdague, you mean the memcached for the tokens in middleware/auth_token?22:06
ayoungsdague, what am I looking at?22:06
jamielennoxsdague: the _cache_get is a memcache so that should be ok22:06
sdaguethe fact that it's exploding in trying to load the revocation list because it's not valid json makes me wonder22:06
jamielennoxdon't know much about memcache but it should be race safe22:06
jamielennoxthere is some saving /writing to disk that could be a race problem22:07
sdagueayoung: it's a devstack-gate change that's completely unrelated22:07
dolphmthat could just be keystone puking a 500 or something...22:07
sdaguehttps://review.openstack.org/#/c/60961/22:08
sdaguethe keystone server logs look clean22:08
jamielennoxif you were to launch multiple auth_tokens then they could try to fetch the revocation list and before writing it out and syncing it the other sees the file exists tries to read it and dies22:08
sdaguejamielennox: so it's a tempest run, which means 4 simultaneous processes hitting openstack services22:08
sdagueso possibly 4 keystoneclients acting simultaneously22:09
jamielennoxthe _cache_get failures are then that the token has been marked as failed in the cache, so it's not actually a cache failure22:09
*** jecarey has quit IRC22:09
dolphmi don't actually see a corresponding call to get a revocation list in keystone's logs22:09
*** jhesketh_ has joined #openstack-dev22:09
*** buzztroll has quit IRC22:10
*** devoid has left #openstack-dev22:10
jamielennoxlifeless: sorry, what does epxorting API_VERSION give?22:10
lifelessjamielennox: AIUI it locks the nova api client to a version, avoids discovery22:11
lifelessjamielennox: I may be entirely wrong ;)22:11
jamielennoxlifeless: that doesn't give us the endpoint for such a version though22:11
*** sarob_ has quit IRC22:12
jamielennoxdolphm: so we need a file lock around the read/write then?22:12
lifelessjamielennox: or use atomic rename-into-place22:12
*** drankis_ has quit IRC22:12
dolphmjamielennox: oh this is 4 auth_tokens trying to cache to disk?22:12
*** mgagne has joined #openstack-dev22:12
jamielennoxdolphm: not cache, just store the revocation list22:13
jamielennox... so kinda cache22:13
jamielennoxlifeless: oh? don't know it22:13
lifelessjamielennox: on POSIX file systems the rename call is atomic22:14
lifelessjamielennox: so if you write a file to a temporary file name, then rename it to the real file name, other readers see either the old file, or the new file.22:14
dolphmayoung: i know i've asked you this before - why is it not caching that list in memory?22:14
jeblairhttp://git.openstack.org/cgit/openstack/python-keystoneclient/tree/keystoneclient/middleware/auth_token.py#n122022:14
*** vladikr has quit IRC22:15
jeblairjamielennox, lifeless, dolphm: ^ i think that's the code in question22:15
lifelessas long as you close the file before renaming it that also means they either see the old content or the new content, never an empty file.22:15
*** eglynn_ has quit IRC22:15
jamielennoxlifeless: oh, ok - has a somewhat similar performance issue in that we can still have multiple middleware trying to download the list but at least the result would be stable22:15
lifelessthis is true22:15
lifelessyeah line 1244 is unsafe22:16
jamielennoxdolphm: no idea why it's not just using memcache22:16
dolphmjamielennox: come to think of it, auth_token may not have depended on memcache when that was written22:16
dolphmmorganfainberg: apply more dogpile plz ^22:16
jeblairyeas, so the atomic rename from a tempfile would at least make it safe inasmuch as a reader would be guaranteed to get valid data.22:17
*** buzztroll has joined #openstack-dev22:17
jeblairit may not be up-to-date and you'd have race conditions with multiple writers possibly writing different data, but maybe that's okay for a cache.22:17
*** sandywalsh_ has joined #openstack-dev22:18
ayoungshould be OK22:18
ayoungproblem is that really only one process needs to fetch the file, and the next need to wait for that22:18
jamielennoxdolphm: agree, dogpile it - drop the file22:18
*** e0ne has quit IRC22:18
*** tonix has quit IRC22:18
*** akrivoka has joined #openstack-dev22:18
ayoungthere is not reason to have multiple processes fetch the revocationlist22:18
*** arnaud has quit IRC22:19
*** tonix has joined #openstack-dev22:19
ayoungproblem isn't the file, it is multiple processes fetching it22:19
*** jergerber has quit IRC22:19
*** arnaud has joined #openstack-dev22:20
jamielennoxthe only advantage i can see to having the file is if you want to sync revocations around using some other process, but the way we handle it in the middleware won't allow that any way22:20
ayoungkeeping it in memory would probably be fine22:20
ayoungdoesn't even need to be in memcache22:20
jamielennoxayoung: it would be useful to share it amongst processes22:20
ayoungfile/memcache works for HTTPD though22:20
ayoungand file is problematic from SELinux perspective22:21
*** e0ne has joined #openstack-dev22:21
ayoungmemcache is probably right solution22:21
jeblairayoung, jamielennox, sdague: i'll start writing up a bug for this22:21
ayoungbut would be nice to get rid of the multiple fetch thing22:21
jeblairayoung: does multiple-fetch only happen on a cold cache?22:21
ayoungnope22:21
ayoungcold cache?22:21
ayoungyou mean expired cache?  yea22:22
ayoungif there is nothing in the cache, of if it is expired, fetch a new one22:22
ayoungthat really should be one worker doing that, and the rest blocking22:22
*** py-yp has quit IRC22:22
jeblairyeah, just wondering how often you'd expect it to happen; and if it's worth the tradeoff for locking22:23
*** lbragstad1 has quit IRC22:23
*** bswartz has joined #openstack-dev22:25
*** lbragstad has joined #openstack-dev22:25
*** alunduil has quit IRC22:26
*** eglynn_ has joined #openstack-dev22:26
*** ArxCruz has quit IRC22:26
*** DennyZhang has joined #openstack-dev22:27
jeblairayoung, jamielennox, lifeless, sdague, dolphm: bug 126155422:27
uvirtbotLaunchpad bug 1261554 in python-keystoneclient "Keystoneclient revocation list is not multi-thread/process safe" [Undecided,New] https://launchpad.net/bugs/126155422:27
*** lbragstad has quit IRC22:29
*** pablosan has quit IRC22:30
*** jruzicka has quit IRC22:33
*** julienvey_ has joined #openstack-dev22:33
*** akrivoka has quit IRC22:35
*** msmedved has quit IRC22:35
*** thomasem has quit IRC22:36
*** rnirmal has joined #openstack-dev22:36
*** akrivoka has joined #openstack-dev22:36
*** DennyZhang has quit IRC22:37
*** mriedem1 has quit IRC22:37
*** rnirmal has quit IRC22:38
*** dkranz has quit IRC22:38
*** dspano has quit IRC22:38
*** msmedved has joined #openstack-dev22:39
*** uaberme has quit IRC22:40
*** akrivoka has quit IRC22:40
*** lxsli has joined #openstack-dev22:40
*** akrivoka has joined #openstack-dev22:42
*** jergerber has joined #openstack-dev22:43
*** colinmcnamara has joined #openstack-dev22:44
*** che-arne has quit IRC22:45
*** kenperkins has quit IRC22:46
*** flaper87|afk is now known as flaper8722:50
*** amotoki has quit IRC22:50
*** MaxV has joined #openstack-dev22:50
*** gordc has quit IRC22:52
*** dave_tucker has left #openstack-dev22:52
*** MaxV_ has joined #openstack-dev22:53
*** MaxV has quit IRC22:54
*** e0ne has quit IRC22:54
*** MaxV_ has quit IRC22:54
*** e0ne has joined #openstack-dev22:55
*** jimjiang has quit IRC22:55
*** danielbruno has quit IRC22:56
*** jimjiang has joined #openstack-dev22:56
*** dave_tucker has joined #openstack-dev22:56
*** burt has quit IRC22:59
*** shinylasers has quit IRC22:59
*** jobewan has quit IRC23:00
*** gothicmindfood has quit IRC23:01
*** dims has quit IRC23:02
*** rnirmal has joined #openstack-dev23:02
*** kbringard has quit IRC23:02
*** jcooley_ has quit IRC23:04
*** vijendar has quit IRC23:04
*** denis_makogon has quit IRC23:04
*** lxsli has quit IRC23:05
*** jcooley_ has joined #openstack-dev23:06
*** topol has quit IRC23:06
*** dprince has quit IRC23:07
*** yamahata has quit IRC23:07
*** carl_baldwin has quit IRC23:09
*** galstrom is now known as galstrom_zzz23:10
*** joesavak has joined #openstack-dev23:11
*** buzztroll has quit IRC23:12
*** jsavak has joined #openstack-dev23:13
*** gothicmindfood has joined #openstack-dev23:14
*** xmltok_ has joined #openstack-dev23:14
*** jcooley_ has quit IRC23:14
*** marun has quit IRC23:14
*** andreaf has joined #openstack-dev23:14
*** teran_ has joined #openstack-dev23:15
*** clayb has quit IRC23:15
*** sgordon has joined #openstack-dev23:16
*** sgordon has joined #openstack-dev23:16
*** joesavak has quit IRC23:16
*** dims has joined #openstack-dev23:17
*** teran has quit IRC23:19
nkinderbknudson: thanks for your review on the KDS API!23:19
bknudsonnkinder: no problem.23:19
nkinderbknudson: I just pushed a new review that corrects the one typo you pointed out.23:19
bknudsondon't know if it's going to be in keystone or barbican.23:19
nkinderbknudson: I'd love it if you could +1 it when you get a chance.23:19
*** tdruiva has quit IRC23:20
*** tdruiva has joined #openstack-dev23:20
dolphmbknudson: i think it's back to keystone's repo lol23:21
dolphmbknudson: but as a completely standalone service that we can copy/paste out23:21
morganfainbergbknudson, the idea is that it'll be in Keystone until we find a permanent home for it (e.g. barbican... or 100% standalone) mostly so it can land sooner and be consumable in icehouse.23:21
morganfainbergdolphm, correct me if i'm wrong in my remembering of the whole convo23:21
dolphmmorganfainberg: ++23:22
bknudsonalthough maybe barbican will end up in keystone somehow.23:22
morganfainbergbknudson, we shall see where incubation lands it.  so - still means KDS should be in keystone (for now)23:22
morganfainbergafaict23:22
*** sarob has joined #openstack-dev23:23
*** shinylasers has joined #openstack-dev23:25
bknudsonthe spec looks good so it will be interesting seeing it in action.23:25
*** shinylasers has quit IRC23:25
*** dsirrine has quit IRC23:25
bknudsonis any actual code out there yet?23:25
*** dolphm has quit IRC23:25
*** tdruiva has quit IRC23:26
*** jcooley_ has joined #openstack-dev23:26
*** lbragstad has joined #openstack-dev23:27
*** sarob has quit IRC23:27
*** teran has joined #openstack-dev23:28
*** safchain has quit IRC23:28
*** jcooley_ has quit IRC23:30
thingeeangdraug: I'll take another look at the review today. Sorry had a long meeting. I also wanted to review the one from dosaboy.23:30
*** teran_ has quit IRC23:31
*** FunnyLookinHat has quit IRC23:31
*** tongli has quit IRC23:32
*** stevemar has quit IRC23:32
*** mikeoutland has quit IRC23:32
*** mikeoutland has joined #openstack-dev23:33
*** gyee has quit IRC23:34
*** gothicmindfood has quit IRC23:34
angdraugthanks!23:34
*** mikeoutland has quit IRC23:35
*** markwash has quit IRC23:36
*** fbo is now known as fbo_away23:36
*** alunduil has joined #openstack-dev23:38
*** jcooley_ has joined #openstack-dev23:39
*** mikeoutland has joined #openstack-dev23:40
*** dolphm has joined #openstack-dev23:42
*** jcooley_ has quit IRC23:42
*** AlanClark has quit IRC23:42
nkinderbknudson: there is KDS code out there that jamielennox is working on23:43
*** buzztroll has joined #openstack-dev23:43
*** julienvey_ has quit IRC23:45
*** jimjiang has quit IRC23:45
*** jimjiang has joined #openstack-dev23:46
*** jcooley_ has joined #openstack-dev23:47
*** buzztroll has quit IRC23:47
*** dolphm has quit IRC23:48
*** hemna has quit IRC23:48
*** mikeoutland has quit IRC23:49
*** hemna has joined #openstack-dev23:51
*** rcleere has quit IRC23:52
*** hemna has quit IRC23:53
*** dolphm has joined #openstack-dev23:53
*** pixelb has quit IRC23:53
*** marekd|away has quit IRC23:55
*** nplanel has quit IRC23:55
*** nermina has quit IRC23:57
*** flaper87 is now known as flaper87|afk23:58
*** jmontemayor has quit IRC23:58
*** _dbalog has quit IRC23:58
*** hemna has joined #openstack-dev23:59

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!