*** herndon_ has quit IRC | 00:00 | |
*** nelsnels_ has quit IRC | 00:01 | |
*** herndon has joined #openstack-dev | 00:03 | |
*** herndon has quit IRC | 00:03 | |
*** rushiagr has joined #openstack-dev | 00:04 | |
bknudson | morganfainberg: got a minute? | 00:05 |
---|---|---|
morganfainberg | bknudson, of course | 00:05 |
*** ArxCruz has quit IRC | 00:05 | |
morganfainberg | bknudson, ugh, i keep mis reading your comment on the credential_api. | 00:07 |
morganfainberg | i think the conversion to the lambda has not made it more clear. | 00:07 |
morganfainberg | since i endlessly mis-read it | 00:07 |
bknudson | morganfainberg: http://git.openstack.org/cgit/openstack/keystone/tree/keystone/assignment/core.py#n263 | 00:07 |
morganfainberg | =/ | 00:07 |
morganfainberg | bknudson, ok looking at that link now. | 00:07 |
bknudson | expiration_time=CONF.assignment.cache_time | 00:07 |
bknudson | that actually happens at import time. | 00:08 |
morganfainberg | oh. | 00:08 |
bknudson | so the default expiration time is going to be whatever CONF.assignment.cache_time is set to before CONF() is called | 00:08 |
morganfainberg | should probably make it a method call. | 00:08 |
morganfainberg | then. | 00:08 |
*** carlp has quit IRC | 00:08 | |
*** mriedem has quit IRC | 00:08 | |
*** buzztroll has quit IRC | 00:09 | |
bknudson | morganfainberg: so you want it to be whatever the user configured it to? | 00:09 |
morganfainberg | yeah. | 00:09 |
morganfainberg | rather than the default. | 00:09 |
bknudson | because right now it'll just be whatever the default is. | 00:09 |
morganfainberg | that was the intention | 00:09 |
bknudson | morganfainberg: I'll look into how we could do that. | 00:09 |
morganfainberg | bknudson, probably similar to how the SHOULD_CACHE_FN works | 00:10 |
*** michchap has quit IRC | 00:10 | |
morganfainberg | oh. huh | 00:10 |
morganfainberg | actually... that might be challenging. | 00:10 |
bknudson | morganfainberg: EXPIRATION_TIME_FN ? | 00:10 |
morganfainberg | would have the same problems | 00:10 |
*** michchap has joined #openstack-dev | 00:10 | |
morganfainberg | it would be called at import time | 00:11 |
*** teran has joined #openstack-dev | 00:11 | |
morganfainberg | and value would be stored. | 00:11 |
*** buzztroll has joined #openstack-dev | 00:11 | |
bknudson | morganfainberg: mind if I just change it for now to the default, since that's how it works. | 00:12 |
morganfainberg | sure go for it | 00:12 |
morganfainberg | make sure to hit any/all @cache.on_arguments | 00:12 |
*** mkoderer_ has quit IRC | 00:12 | |
bknudson | I'm going to get rid of the config.configure() call... http://git.openstack.org/cgit/openstack/keystone/tree/keystone/config.py#n25 | 00:12 |
morganfainberg | ok | 00:12 |
bknudson | -- """Wrapper for keystone.common.config that configures itself on import.""" | 00:13 |
morganfainberg | also, configuration.rst has some references to those conf values | 00:13 |
morganfainberg | i'll work on proposing a change to upstream dogpile to offer an expiration_time_fn option (or similar) | 00:13 |
openstackstatus | NOTICE: see: https://etherpad.openstack.org/p/pip1.5Upgrade | 00:13 |
*** ChanServ changes topic to "OpenStack development || Support is in #openstack" | 00:13 | |
bknudson | we shouldn't have parts trying to configure themselves or do anything on import. | 00:13 |
morganfainberg | bknudson, agreed. unfortunately, decorators work at import time :P | 00:14 |
*** rongze has joined #openstack-dev | 00:14 | |
*** erkrnt has quit IRC | 00:14 | |
*** erkrnt1 has joined #openstack-dev | 00:14 | |
*** mkoderer_ has joined #openstack-dev | 00:15 | |
morganfainberg | i'll see if I can figure out the best way to make this work in-line with the current dogpile impl though, might be doable | 00:15 |
morganfainberg | w/o new version that is | 00:15 |
bknudson | morganfainberg: when I removed config.configure() I get "oslo.config.cfg.NoSuchOptError: no such option: assignment" ... so it's pretty obvious that doing something wrong | 00:15 |
morganfainberg | hm.. yeah | 00:16 |
*** Mandell_ has joined #openstack-dev | 00:17 | |
morganfainberg | bknudson, according to the docs... we can make it a callable | 00:17 |
morganfainberg | expiration_time that is | 00:17 |
morganfainberg | checking to make sure the min version we require has that support | 00:17 |
*** rushiagr has quit IRC | 00:17 | |
*** terrylhowe has left #openstack-dev | 00:18 | |
*** rongze has quit IRC | 00:18 | |
*** terrylhowe has joined #openstack-dev | 00:18 | |
morganfainberg | bknudson, https://bitbucket.org/zzzeek/dogpile.cache/src/91e6658b2e86a6fc6cf58166af0015861279d1ba/dogpile/cache/region.py?at=rel_0_5_0#cl-886 | 00:19 |
morganfainberg | bknudson, looks like we can pass it as a callable that takes no arguments, so expiration_time_fn that pulls the correct config option | 00:19 |
bknudson | morganfainberg: I opened a bug: https://bugs.launchpad.net/keystone/+bug/1265670 | 00:19 |
*** Mandell has quit IRC | 00:20 | |
uvirtbot | Launchpad bug 1265670 in keystone "Changing cache_time doesn't work" [Undecided,New] | 00:20 |
morganfainberg | bknudson, cool. | 00:20 |
morganfainberg | bknudson, i can put together a patch for that in about 15 minutes. | 00:20 |
morganfainberg | or 20 if you don't want to tackle irt | 00:20 |
bknudson | I'll work on it since I'm looking at it. | 00:20 |
morganfainberg | bknudson, cool. | 00:20 |
bknudson | I don't trust you with functions or lambdas anymore. | 00:21 |
morganfainberg | bknudson, LOL | 00:21 |
morganfainberg | bknudson, like i said, i think making it a lambda has made it harder for me to read :( | 00:21 |
morganfainberg | i keep mis-reading your comment...over and over | 00:21 |
*** CaptTofu has quit IRC | 00:21 | |
morganfainberg | either that... or syntax highlighting is needed | 00:21 |
bknudson | morganfainberg: should just be like "DEFAULT_EXPIRATION_TIME = lambda: CONF.assignment.cache_time" | 00:21 |
morganfainberg | bknudson, sure. you said DEFAULT_CONFIGURATION_TIME = lambda: print 'hi i'm a lambda function' right? | 00:22 |
morganfainberg | >.> | 00:22 |
morganfainberg | (see what i did there) | 00:22 |
morganfainberg | bknudson, but in seriousness, yes, that looks correct. | 00:23 |
morganfainberg | i'd probably call it EXPIRATION_TIME though not "default_..." | 00:23 |
morganfainberg | since it's configurable | 00:23 |
bknudson | morganfainberg: but it's the default value for the function argument... "expiration_time=DEFAULT_EXPIRATION_TIME)" | 00:24 |
morganfainberg | i.. i can't argue | 00:24 |
bknudson | I'll call it EXPIRATION_TIME | 00:24 |
morganfainberg | the logic is sound. | 00:24 |
bknudson | because it's shorter | 00:25 |
morganfainberg | bknudson, i don't think it really matters what you call it. call it bunny_foo_foo for the lulz | 00:25 |
morganfainberg | bknudson, but yeah, that was a mistake because we did that wonky configure() thing. | 00:25 |
morganfainberg | bknudson, thanks for catching/cleaning that up | 00:26 |
*** Mandell has joined #openstack-dev | 00:26 | |
bknudson | morganfainberg: I'll get rid of the config.configure() oddity and hopefully will not have this problem again. | 00:26 |
morganfainberg | bknudson, ++++++ | 00:26 |
morganfainberg | ayoung, https://review.openstack.org/#/c/60742/ this seems to pass w/o the non-expiry keys. | 00:27 |
morganfainberg | ayoung, so, rebased it as the top of the chain for parallel work | 00:27 |
bknudson | looks like the same problem with CONF.token.cache_time | 00:27 |
morganfainberg | bknudson, all of the caches will have the same issu | 00:27 |
morganfainberg | e | 00:27 |
morganfainberg | bknudson, identity likely has it as well | 00:27 |
morganfainberg | bknudson, oh nope. identity has no caching as far as i can tell | 00:28 |
*** Mandell_ has quit IRC | 00:29 | |
*** jergerber has quit IRC | 00:29 | |
*** Mandell_ has joined #openstack-dev | 00:30 | |
*** Mandell has quit IRC | 00:32 | |
bknudson | morganfainberg: http://git.openstack.org/cgit/openstack/keystone/tree/keystone/common/cache/core.py#n84 -- why is that happening on import? | 00:33 |
morganfainberg | bknudson, service.py is doing the cache configuration | 00:34 |
morganfainberg | that can ... likely be moved into load_backends | 00:35 |
bknudson | morganfainberg: I'm guessing that doesn't have to happen at import-time? | 00:35 |
morganfainberg | http://git.openstack.org/cgit/openstack/keystone/tree/keystone/service.py#n43 can be moved to line 50 or so | 00:35 |
morganfainberg | is my guess | 00:35 |
bknudson | morganfainberg: do you want that called in all the tests that do load_backends? | 00:35 |
bknudson | or does it have to happen once for all the tests? | 00:35 |
*** erlon has quit IRC | 00:36 | |
morganfainberg | it needs to happen for all tests before a method with caching is called | 00:36 |
morganfainberg | but calling it more than once with the same config should be idempotent | 00:36 |
*** mehdi has quit IRC | 00:37 | |
*** Mandell_ has quit IRC | 00:37 | |
morganfainberg | bknudson, it needs to be configured for every test (and before anything calls a method that is decorated w/ @cache.on_arguments), but it doesn't need to occur at import in service.py | 00:38 |
morganfainberg | s/and before/before | 00:38 |
bknudson | morganfainberg: alright, that was it. server starts. | 00:38 |
morganfainberg | cool. | 00:38 |
morganfainberg | good to solve that issue so no one else makes a bad assumption about configuration state | 00:39 |
*** mehdi has joined #openstack-dev | 00:39 | |
*** kgriffs is now known as kgriffs_afk | 00:39 | |
*** Mandell has joined #openstack-dev | 00:41 | |
*** kgriffs_afk is now known as kgriffs | 00:46 | |
*** carlp has joined #openstack-dev | 00:51 | |
morganfainberg | bknudson, ok https://review.openstack.org/#/c/63564/9/keystone/credential/core.py i _think_ i finally got it right. | 00:51 |
bknudson | morganfainberg: yep, that's it. | 00:53 |
morganfainberg | bknudson, trust me again w/ functions and lambdas :P | 00:54 |
morganfainberg | >.> | 00:54 |
*** carl_baldwin has quit IRC | 00:54 | |
* morganfainberg hangs head in shame | 00:54 | |
bknudson | morganfainberg: ok, I'll do that. | 00:54 |
bknudson | morganfainberg: I would have been more impressed if some fancy itertools had been used. | 00:56 |
bknudson | maybe http://docs.python.org/2/library/itertools.html#itertools.ifilter ? | 00:56 |
morganfainberg | bknudson, LOL | 00:56 |
morganfainberg | bknudson, next time! | 00:56 |
morganfainberg | keystone needs more instances of using yield | 00:57 |
morganfainberg | just to confuse people. | 00:57 |
morganfainberg | actually, i could have used straight filter as well. | 00:57 |
bknudson | ugh, filter. | 00:58 |
morganfainberg | lol | 00:58 |
morganfainberg | hopefully that code is _never_ actually used. | 00:58 |
*** xarses has quit IRC | 00:59 | |
morganfainberg | since the only credential impl we have is SQL... and we've made some _very_ SQL-specific choices in the credential api uses | 00:59 |
*** giulivo has quit IRC | 01:00 | |
*** pmathews has quit IRC | 01:00 | |
bknudson | I'd be ok if you used reduce() | 01:00 |
morganfainberg | bknudson, hehe | 01:01 |
morganfainberg | was looking at that actually | 01:01 |
*** xarses has joined #openstack-dev | 01:01 | |
*** xarses_ has joined #openstack-dev | 01:01 | |
*** jaypipes has quit IRC | 01:02 | |
*** stevemar has joined #openstack-dev | 01:02 | |
*** pcm has quit IRC | 01:04 | |
*** xarses_ has quit IRC | 01:05 | |
*** jay-lau-513 has quit IRC | 01:07 | |
*** amcrn has joined #openstack-dev | 01:09 | |
*** terriyu has joined #openstack-dev | 01:10 | |
*** terriyu has quit IRC | 01:11 | |
*** rongze has joined #openstack-dev | 01:15 | |
*** epopt37 has quit IRC | 01:15 | |
*** colinmcnamara has quit IRC | 01:16 | |
*** melwitt has joined #openstack-dev | 01:17 | |
*** rongze has quit IRC | 01:20 | |
*** xarses has quit IRC | 01:21 | |
*** galstrom_zzz is now known as galstrom | 01:22 | |
*** kgriffs is now known as kgriffs_afk | 01:23 | |
*** buzztroll has quit IRC | 01:23 | |
*** romcheg has quit IRC | 01:23 | |
*** cpallares has quit IRC | 01:24 | |
*** galstrom is now known as galstrom_zzz | 01:26 | |
*** epopt37 has joined #openstack-dev | 01:27 | |
*** dave_tucker has left #openstack-dev | 01:28 | |
*** pberis has quit IRC | 01:28 | |
*** alex_xu has joined #openstack-dev | 01:30 | |
*** pberis has joined #openstack-dev | 01:31 | |
*** angdraug has quit IRC | 01:32 | |
*** anniec has quit IRC | 01:33 | |
*** slagle has joined #openstack-dev | 01:35 | |
*** rods has joined #openstack-dev | 01:38 | |
*** rongze has joined #openstack-dev | 01:38 | |
*** CaptTofu has joined #openstack-dev | 01:39 | |
ayoung | morganfainberg, something is not right with that patch. You are making Trust API calls from inside the driver. That should be in the manager layer, not the driver. | 01:43 |
morganfainberg | ayoung, this is resolving that issue where trust scoped tokens are in the wrong list. should i instead pass in the trust data into create_token? | 01:44 |
morganfainberg | this is a kvs-speciifc issue | 01:44 |
morganfainberg | kvs/memcache | 01:44 |
ayoung | nah...something is wrong | 01:44 |
morganfainberg | you need the trustee user_id. | 01:44 |
morganfainberg | is that in the token data? | 01:44 |
ayoung | do that resolution at the Manager level, and pass it in if needs be, but no driver to API dependencies | 01:45 |
ayoung | if it isn't, put it in there... | 01:45 |
ayoung | SQL must have it already...lets see | 01:45 |
morganfainberg | SQL doesn't need user-lists | 01:45 |
morganfainberg | it can do a filter and inspect the data directly | 01:45 |
morganfainberg | old kvs did the same thing. | 01:46 |
*** anniec has joined #openstack-dev | 01:46 | |
morganfainberg | it had access to the in-mem dict and just looked for matching trusts | 01:46 |
morganfainberg | once you move out of memory (not guaranteed with dogpile to be in process mem) you can't inspect the whole store | 01:46 |
ayoung | hmmmm | 01:46 |
*** sushils has quit IRC | 01:47 | |
*** StevenK has quit IRC | 01:47 | |
morganfainberg | this _likely_ becomes a non-issue with revocation events | 01:47 |
*** russell_h has quit IRC | 01:47 | |
morganfainberg | and definitely becomes a non-issue with ephemeral tokens | 01:47 |
ayoung | Ugh...OK, I don't like it, but I guess it is the right thing | 01:48 |
*** StevenK has joined #openstack-dev | 01:48 | |
ayoung | wait | 01:48 |
morganfainberg | ayoung, i went circles around that one, if there is a better way please :) make it suck less | 01:48 |
ayoung | trustee_id needs to be in the token | 01:48 |
ayoung | it is in the token_data,,, | 01:49 |
morganfainberg | the token data is ... a bit hard to remember all the fields, i should create that validator that documents expected token data | 01:49 |
morganfainberg | if it's there, we can remove a couple lines and not need to lookuip the trust | 01:49 |
*** Ryan_Lane has joined #openstack-dev | 01:49 | |
ayoung | morganfainberg, https://github.com/openstack/keystone/blob/master/keystone/token/providers/common.py#L78 | 01:50 |
morganfainberg | ok so it's in the data, thanks | 01:50 |
ayoung | https://github.com/openstack/keystone/blob/master/keystone/token/providers/common.py#L186 | 01:50 |
morganfainberg | that doesn't change much logic, but don't need to lookup the trust then | 01:50 |
ayoung | RIGHT | 01:50 |
morganfainberg | oh ick | 01:51 |
morganfainberg | v2 vs v3 again :( | 01:51 |
ayoung | hee hee hee | 01:51 |
* morganfainberg cries in the corner | 01:51 | |
ayoung | I think you can assume v3, though, no? | 01:51 |
morganfainberg | nope. | 01:51 |
morganfainberg | needs to support both | 01:51 |
morganfainberg | or it's a security issue | 01:51 |
ayoung | Don't we only record V3 now...? I thought gyee fixed that | 01:51 |
ayoung | and convert v3 to v2 | 01:51 |
ayoung | upon demand | 01:51 |
morganfainberg | did he? | 01:51 |
morganfainberg | no. | 01:52 |
morganfainberg | it looks like we still have v2 and v3 specific tokens | 01:52 |
ayoung | blergh! | 01:52 |
morganfainberg | infact... we explicitly set a version in the token data | 01:52 |
morganfainberg | at least i can use that to pick the right place to look | 01:52 |
morganfainberg | https://github.com/openstack/keystone/blob/master/keystone/token/providers/common.py#L365 | 01:52 |
morganfainberg | actually.. | 01:53 |
*** sushils has joined #openstack-dev | 01:53 | |
*** sarob has joined #openstack-dev | 01:53 | |
morganfainberg | yep | 01:53 |
*** bdpayne has quit IRC | 01:54 | |
morganfainberg | ayoung, it's hard to tell. actually. | 01:55 |
morganfainberg | minor differences perhaps | 01:55 |
morganfainberg | might be able to pull the token version out of the stored data | 01:55 |
*** thedodd has joined #openstack-dev | 01:55 | |
morganfainberg | the raw token data is different... and it is stored in the token. | 01:55 |
*** russell_h has joined #openstack-dev | 01:56 | |
*** russell_h has joined #openstack-dev | 01:56 | |
morganfainberg | though it would be good to only store a single format token. | 01:56 |
*** sarob_ has quit IRC | 01:57 | |
*** sarob has quit IRC | 01:58 | |
*** thedodd has quit IRC | 01:58 | |
*** xarses has joined #openstack-dev | 02:00 | |
*** krotscheck has quit IRC | 02:02 | |
*** carlp has quit IRC | 02:02 | |
*** nati_ueno has joined #openstack-dev | 02:03 | |
*** AnilV4 has quit IRC | 02:05 | |
morganfainberg | ayoung, ok checking to see if that change works. if so i'll get another patchup later tonight (in case you have other feedback) | 02:06 |
ayoung | morganfainberg, cool beans | 02:06 |
*** CaptTofu_ has joined #openstack-dev | 02:06 | |
ayoung | morganfainberg, my nightmare scenario involves hypervisor compromises: http://arstechnica.com/security/2014/01/openssl-site-defacement-involving-hypervisor-hack-rattles-nerves/ | 02:06 |
*** AnilV4 has joined #openstack-dev | 02:07 | |
morganfainberg | ayoung, oh geeze | 02:08 |
ayoung | Yep | 02:08 |
*** CaptTofu has quit IRC | 02:08 | |
ayoung | http://zone-h.org/mirror/id/21425720 | 02:09 |
*** CaptTofu has joined #openstack-dev | 02:09 | |
morganfainberg | lol. at least the defacement was simple =/ | 02:10 |
morganfainberg | and ... didn't touch code. | 02:10 |
*** CaptTofu_ has quit IRC | 02:11 | |
ayoung | GIT saves the day on that | 02:12 |
*** kgriffs_afk is now known as kgriffs | 02:14 | |
ayoung | morganfainberg, ok, I think I am suffering from writers block. I have the revocation code this far... https://review.openstack.org/#/c/55908/ but ...I really want to just be done with the damn thing | 02:15 |
ayoung | I need to do "create a token, delete it, and see the revocation..." | 02:15 |
*** terrylhowe has quit IRC | 02:15 | |
ayoung | crud...I fixed the wrong patch... | 02:16 |
thingee | morganfainberg or ayoung: is there any doc to tell me as a keystone plugin dev about what the manager means to me compared to the identity core class itself? I started following how an assignment api get related to an identity driver and then got lost. | 02:16 |
*** dguitarbite has joined #openstack-dev | 02:16 | |
ayoung | thingee, I sense this is more of a vent than a question...what is the real problem? | 02:17 |
*** dguitarbite__ has joined #openstack-dev | 02:17 | |
morganfainberg | ayoung, ouch :( hate it when i muck in the wrong tree/fix the wrong patchset | 02:17 |
morganfainberg | ayoung, and that sounds right, create, delete, revocation should be there/exist/notify/watever | 02:18 |
*** rongze has quit IRC | 02:18 | |
thingee | ayoung: nope wasn't a vent. I really can't figure out how to get my identity core plugin to know it has an assignment api linked with it. | 02:19 |
*** yuan has quit IRC | 02:19 | |
*** slagle has quit IRC | 02:19 | |
thingee | identit plugin* | 02:19 |
thingee | identity** | 02:19 |
morganfainberg | thingee, your identity driver? | 02:19 |
ayoung | morganfainberg, it is the whole kit and kaboodle...right through to checking revocating internally, which needs to be comparable code that is in auth_token middleware.... | 02:19 |
*** rongze has joined #openstack-dev | 02:19 | |
ayoung | thingee, ok, so we had this thing with LDAP | 02:19 |
ayoung | are you using LDAP? | 02:19 |
*** rongze has quit IRC | 02:19 | |
morganfainberg | oh the automatic assignment driver magic? | 02:20 |
*** nermina has quit IRC | 02:20 | |
*** rongze has joined #openstack-dev | 02:20 | |
ayoung | morganfainberg, shh..he isn't cleared for magic | 02:20 |
morganfainberg | ayoung, are you a wizard? | 02:20 |
ayoung | thingee, here is the deal | 02:20 |
ayoung | we split id and assignements, but the LDAP backend didn't split cleanly | 02:20 |
*** nermina has joined #openstack-dev | 02:21 | |
ayoung | so if someone was uing LDAP for identity, and did not splecifically state they had an assignment back end, they still get LDAP...but otherwise, the assignment backend is SQL | 02:21 |
ayoung | morganfainberg, fairly certain that by now I am considered a Necromancer | 02:22 |
ayoung | keeping code alive that should have long since shuffled off its mortal coil | 02:22 |
thingee | ayoung: I have my class that inherits identity.core. It has its own logic on translating a legacy auth system. | 02:22 |
ayoung | thingee, where do you want to store assignments? | 02:22 |
thingee | so nothing that keystone comes with. But I want to have that custom class to know it has an assignment api | 02:22 |
ayoung | thingee, @depends | 02:22 |
morganfainberg | thingee, @dependancy.requires('assignment_api) | 02:23 |
morganfainberg | thingee, dependency | 02:23 |
morganfainberg | thingee, from keystone.common import dependency | 02:23 |
*** erkules has quit IRC | 02:23 | |
ayoung | thingee, wait, you want identity to know aboiut assignments or assignements to know about identity? | 02:23 |
*** buzztroll has joined #openstack-dev | 02:23 | |
*** kgriffs is now known as kgriffs_afk | 02:23 | |
thingee | ayoung: I want it to know about my own assignment class. I have defined in my own identity core class default_assignment_driver() | 02:24 |
thingee | and the appropriate dot path is returned. | 02:24 |
morganfainberg | thingee, that should only be used if the config hasn't specified an assignment driver | 02:25 |
ayoung | thingee, these are tightly coupled? | 02:25 |
ayoung | morganfainberg, they have a custom backend...I screwed these guys when I split things | 02:25 |
ayoung | and thingee was nice enough to not kneecap me at the summit | 02:25 |
morganfainberg | ayoung, i've talked to thingee about it some. but i'm not 100% familiar with their setup still | 02:25 |
morganfainberg | in fact... *something something whiskey in pasadena soon* | 02:26 |
thingee | ah I totally missed the assignment driver config | 02:26 |
ayoung | thingee, OK, so there is some ugliness with circular dependencies...the identity backend needs assignemtns and vice aversa...which is why there is that future_dependency thing. | 02:27 |
*** CaptTofu has quit IRC | 02:27 | |
ayoung | thingee, yeah, if you are explicitly specifying the assingment driver, that will win. | 02:27 |
thingee | morganfainberg: yes sir ;) | 02:27 |
*** CaptTofu has joined #openstack-dev | 02:27 | |
ayoung | thingee, both assignments and identity are in your custom back ned, right? | 02:27 |
ayoung | end | 02:27 |
*** sushils has quit IRC | 02:28 | |
thingee | ayoung: yeah | 02:28 |
thingee | I'm sure this config opt will do the trick though | 02:28 |
ayoung | good luck. as a customer, I am counting on you | 02:28 |
thingee | :) | 02:29 |
thingee | thanks guys | 02:29 |
*** zhikunliu has joined #openstack-dev | 02:29 | |
morganfainberg | thingee, sure thing | 02:29 |
morganfainberg | ayoung, we do shady things creating tokens not through the providers in unit tests :( | 02:29 |
morganfainberg | it looks like. | 02:30 |
ayoung | morganfainberg, that predated the providers | 02:30 |
morganfainberg | i know :( | 02:30 |
morganfainberg | time to retrofit a bunch of tests | 02:30 |
ayoung | morganfainberg, Necromancy | 02:30 |
morganfainberg | on the plus side i almost have a patchset ready to go to pull out the per-domain-idenitity backends. | 02:30 |
morganfainberg | it does cleanup code a bit. | 02:31 |
morganfainberg | on the downside it's deep in a patchset chain of cleanup. | 02:31 |
*** rongze has quit IRC | 02:32 | |
*** rongze has joined #openstack-dev | 02:33 | |
morganfainberg | ayoung, it feels like the token_providers need more love and get merged back down into token.core | 02:33 |
ayoung | morganfainberg, you really want to do that, don't you | 02:33 |
ayoung | morganfainberg, oh yes | 02:34 |
ayoung | the token provider needs to be broken into a pipeline | 02:34 |
morganfainberg | ayoung, no i don't want to do it :(. but i'm on a cleanup binge it looks like | 02:34 |
ayoung | I'd rather not remove that code. I think we will want it eventually | 02:34 |
ayoung | don't yank it without clearing with henrynash | 02:35 |
morganfainberg | it'll be a patchset that nothing else depends on. | 02:35 |
morganfainberg | i'll mark it WIP for good measure | 02:36 |
morganfainberg | but basically, i am going to push hard to make the extra IDP stuff leverage the federation work. i firmly believe that code isn't really in any state to be resuscitated without some significant internal refactoring of ... well domains at their core | 02:37 |
morganfainberg | if we can get the federation work to supply the multi-ldap backend stuff (one way or another), it would be far better. | 02:37 |
morganfainberg | and we still haven't figured out the unique id issues . | 02:38 |
morganfainberg | when makeing ids from dns that is. | 02:38 |
ayoung | morganfainberg, so...LDAP is already an extra RPC. We go to a remote Keystone, and to get a token, its client->keystone1->LDAP->keystone->client->keystone2.... | 02:38 |
morganfainberg | s/dns/DNs | 02:38 |
ayoung | yeah, IDs from DNs has issues | 02:39 |
ayoung | but we need to figure out unique IDs no matter what | 02:39 |
*** erkules has joined #openstack-dev | 02:39 | |
ayoung | actually, Federation is going to require it just as much as the existing multi backend stuff...same problem | 02:39 |
morganfainberg | if we have one internal idp, we can make the federation stuff be "smart" from square one | 02:39 |
morganfainberg | since federation is new, we don't have the same issues as the earlier discussion held | 02:40 |
morganfainberg | or at least we can be a bit more flexible | 02:41 |
*** kgriffs_afk is now known as kgriffs | 02:41 | |
*** AnilV4 has quit IRC | 02:42 | |
ayoung | morganfainberg, nope | 02:42 |
morganfainberg | ayoung, yes. we can be smart about encoding IDs and have no migration issues. | 02:42 |
morganfainberg | or similar concepts | 02:42 |
*** AnilV4 has joined #openstack-dev | 02:42 | |
ayoung | we need a persistant ID. The only alternatives are to calculate one from the Identity document (assertion) or to calculate one on the fly | 02:43 |
ayoung | anything we do with Federation would work for multi LDAP | 02:43 |
morganfainberg | ayoung, only if we re-write the LDAP identity backend significantly | 02:43 |
ayoung | morganfainberg, you are missing the point | 02:44 |
morganfainberg | which, it might as well conform to the federation work then | 02:44 |
ayoung | we can do what we want with LDAP | 02:44 |
ayoung | we need a unique ID that works when we can't write to the backend | 02:44 |
ayoung | LDAP ,shmeldap | 02:44 |
morganfainberg | ayoung, again, this is an issue where having multiple "domain" drivers to reference is an ugly hack. | 02:45 |
ayoung | If we want to ghost the identity values in the Keystone server, we don't have a problem....I don't want to do that | 02:45 |
*** dguitarbite__ has quit IRC | 02:45 | |
*** dguitarbite has quit IRC | 02:45 | |
morganfainberg | the architecture poorly supports that concept | 02:45 |
morganfainberg | and part of the poor support is the way domains are constructed | 02:45 |
morganfainberg | not the concept, the implementation | 02:45 |
morganfainberg | and fixing that implementation is no small task. | 02:46 |
ayoung | morganfainberg, it is going to come down to recording the domain ID for the user separately. | 02:47 |
ayoung | Accept this now my young apprentice | 02:47 |
ayoung | and your journy to t...gah, too much star wars in this household | 02:47 |
morganfainberg | ayoung, heh, | 02:48 |
ayoung | morganfainberg, seriously, though, that is the only real solution | 02:48 |
lifeless | ITYM don't fear domains, because fear leads to... | 02:48 |
morganfainberg | ayoung, we will just need to disagree on this, but the domain implementation is bad when it comes to mixing projects and users. | 02:48 |
morganfainberg | ayoung, we have the same issue if we had multiple SQL backends. | 02:49 |
morganfainberg | or actually...worse | 02:49 |
ayoung | morganfainberg, you can disagree with me right yup to the point where you realize I am right | 02:49 |
ayoung | I've already been through the stages...anger, denial | 02:49 |
ayoung | depression | 02:49 |
ayoung | skip right to acceptance | 02:49 |
morganfainberg | ayoung, except for one bit, i firmly believe you are wrong in the need for this in the implementation that is partially there | 02:50 |
morganfainberg | i think it is the wrong approach, it does not work. | 02:50 |
morganfainberg | and it needs some serious re-thinking. | 02:50 |
ayoung | morganfainberg, assignments will need to know where the user identity comes from. | 02:50 |
ayoung | or, more correctly | 02:50 |
morganfainberg | starting on the multiple backend approach from scratch (or not implementing it internally) is the correct approach | 02:51 |
ayoung | tokens will need to be able to deduce | 02:51 |
*** kgriffs is now known as kgriffs_afk | 02:51 | |
ayoung | doesn't matter...we need to be able to calculate the IdP from the assignement | 02:51 |
morganfainberg | if we pull this out, and hook into the same "new" mechanisms federation will provide, i think we can not have the same edgecases and issues | 02:51 |
morganfainberg | federation cannot hook into what we have. | 02:52 |
morganfainberg | and if we keep federation, this, and internal SQLisms, we now have 3 bits of (in some cases fragile) code that all do the same thing | 02:52 |
ayoung | view it from the assignments side, irregardless of Federation | 02:52 |
morganfainberg | identity should be flat | 02:52 |
morganfainberg | no domains | 02:52 |
morganfainberg | from that side | 02:52 |
ayoung | we need to be able to deconflict user ids | 02:53 |
*** stevemar has quit IRC | 02:53 | |
morganfainberg | well not the "same" domain constructs assignment is using | 02:53 |
*** stevemar has joined #openstack-dev | 02:53 | |
morganfainberg | all user ids should be available from an assignment standpoint, and not be tightly coupled to the same construct. | 02:53 |
*** alop has quit IRC | 02:54 | |
morganfainberg | especially since we have users from identity domain X with grants in assignment domain Y | 02:54 |
*** ffio has quit IRC | 02:54 | |
morganfainberg | so putting projects in identity domain X adds all sorts of bad edge cases to resolve. | 02:54 |
ayoung | we need to be able to deconflict user ids....that is the problem to solve. The rest is commentary. Go and study | 02:54 |
morganfainberg | which, is fine. | 02:55 |
morganfainberg | ayoung, and we can work on that. but having 3 different ways to deconflict ids is a bad idea | 02:56 |
morganfainberg | and you're advocating just that | 02:56 |
ayoung | morganfainberg, agreed. We need to have one and only one. Right now we have none | 02:56 |
morganfainberg | right now we have 1 | 02:56 |
morganfainberg | and it involves use a single internal idp | 02:56 |
morganfainberg | that should be expanded | 02:56 |
morganfainberg | not have things bolted on haphazardly | 02:57 |
morganfainberg | ayoung, anyway, i think this might need to be shelved until San antonio | 02:57 |
morganfainberg | ayoung, i'll still stick the patch up, marked WIP | 02:57 |
*** SumitNaiksatam has joined #openstack-dev | 02:58 | |
morganfainberg | but, after diggign around in the edge cases and trying to fix this in havana, it needs to be redone or we need to restructure domains imo | 02:58 |
ayoung | morganfainberg, seriosly, I've been over this groun. I am not just being flippant. We need to use the domain id (or an analogue) to deconflict assignments. It will either mean al onger user id, that iw then parsable, or it means we split the key into two pieces, but the end result is the same: assignemtns will be for user/domain | 02:59 |
*** cyeoh has quit IRC | 03:01 | |
morganfainberg | ayoung, and my argument is to make sure we are not wedging things on top of a very rough implementation that has a massive amount of edge cases that do not resolve well | 03:01 |
morganfainberg | ayoung, i'm saying we should undo the multi-LDAP stuff because it really is not working, and start on that clean and make sure it uses the same (and a clean) mechanism that is re-usable to de-conflict ids | 03:02 |
ayoung | morganfainberg, I suspect the code can be cleaned up, but I think the long term solution will require multiple internal LDAP servers. | 03:02 |
*** cyeoh has joined #openstack-dev | 03:02 | |
morganfainberg | ayoung, lets come back to this in person in SA. Neither you nor I are going to budge on this over IRC i think. | 03:03 |
ayoung | lets figure out that deconfliction first.. I think the reason that the multi ldap is broken is because we have piece missing in our abstraction, not due to any fundamental flaw in the approach. But I think we are close ienough in agreement for now | 03:03 |
morganfainberg | like i said before, feel free to -2 the code, i will mark it as WIP so it wont be merged regardless. | 03:04 |
morganfainberg | but i'm going to post it up so it isn't lost. | 03:04 |
Ryan_Lane | multiple internal ldap servers? | 03:04 |
morganfainberg | Ryan_Lane, internal-to-keystone | 03:05 |
Ryan_Lane | that makes me throw up a little in my mouth | 03:05 |
morganfainberg | e.g. multiple ldap servers that provide different users/groups information | 03:05 |
morganfainberg | Ryan_Lane, i don't think it's a far departure from having federated ID sources (openid, ldap, sql, facebook auth [don't laugh], oauth) | 03:06 |
Ryan_Lane | so, you'd somehow cache the remote ldap server info locally? | 03:06 |
morganfainberg | Ryan_Lane, it would work the same as the current ldap driver works, just not be restricted to a single LDAP store | 03:06 |
Ryan_Lane | oh, so you don't mean you'd run a number of ldap servers | 03:07 |
morganfainberg | Ryan_Lane, lets assume you have 2 business units in your org | 03:07 |
morganfainberg | and each need to use the cloud, but each have their own LDAP server for their users | 03:08 |
morganfainberg | and that LDAP server is SSO for each busniess unit already | 03:08 |
morganfainberg | so, keystone would need to be able to use both ldap systems to provide identity for each set of users | 03:08 |
Ryan_Lane | you mean the ldap servers have overlapping sets of users? | 03:09 |
Ryan_Lane | or that each ldap server has a completely different set of users? | 03:09 |
morganfainberg | Ryan_Lane, second option | 03:09 |
Ryan_Lane | why not just make each use keystone, and federate the keystones? | 03:09 |
morganfainberg | Ryan_Lane, the way assignment currently works doesn't really account for that | 03:10 |
morganfainberg | it's assuming that you _really_ have one source of identity | 03:10 |
morganfainberg | which is keystone itself. (backed by LDAP or SQL) | 03:11 |
Ryan_Lane | having keystone merge a user's LDAPs is simply insane | 03:11 |
morganfainberg | Ryan_Lane, it is really no different that using SQL and supporting OpenID as an identity source as well | 03:11 |
morganfainberg | or ... using 3 different OID sources | 03:11 |
morganfainberg | Google, Launchpad, something else | 03:11 |
morganfainberg | if we support that, we should _in theory_ support multiple of other sources (is the current argument) | 03:12 |
Ryan_Lane | so you're saying you set each of them up as a separate provider, and allow them to specify multiple providers? | 03:12 |
morganfainberg | correct, each is a provider that provides identity information | 03:12 |
Ryan_Lane | ah. ok, right. that makes sense | 03:13 |
morganfainberg | keystone maps that identity information into roles for the shared resource of the cloud | 03:13 |
Ryan_Lane | and for this you'll simply make them provide that info and it'll talk to different ldap servers | 03:13 |
*** melwitt has quit IRC | 03:13 | |
morganfainberg | the current implementation has large gaps. | 03:13 |
morganfainberg | and doesn't work | 03:13 |
morganfainberg | (actually can't work) | 03:13 |
morganfainberg | the two conversations today were about that. | 03:13 |
Ryan_Lane | when you say use ldap internally, I hear "we're going to run ldap servers with keystone, and we're going to use it as our own data store" | 03:13 |
Ryan_Lane | rather than "use multiple LDAP provider objects" | 03:14 |
*** doug_shelley66 has quit IRC | 03:14 | |
morganfainberg | Ryan_Lane, that is one option, use a read-write ldap store that keystone managed | 03:14 |
morganfainberg | but it doesn't stop you from also wanting an enterprise ldap store that keystone doesn't manage | 03:14 |
morganfainberg | at the same time | 03:14 |
Ryan_Lane | right. I was thinking you were going to do some weird caching thing :) | 03:15 |
morganfainberg | nah | 03:15 |
morganfainberg | thats on the ldap deployer's shoulders | 03:15 |
*** Daviey has quit IRC | 03:15 | |
Ryan_Lane | that approach sounds good | 03:15 |
morganfainberg | i have no interest in do that kind of systems work | 03:15 |
morganfainberg | Ryan_Lane, so the issue at hand is that we have a partial implementation and some new initiatives, i was proposing 2 solutions to help with this. | 03:16 |
morganfainberg | one was strike the current partial impl and start over | 03:16 |
morganfainberg | the other was to refactor how the namespaces work for identity information internal to keystone | 03:16 |
morganfainberg | the latter is a bad idea short of a new API major version | 03:16 |
morganfainberg | the former is what i was just arguing for. but we'll see where it goes when we all meetup in a couple weeks | 03:17 |
morganfainberg | we = keystone developers | 03:17 |
morganfainberg | Ryan_Lane, clear as mud huh? | 03:17 |
*** erkrnt1 has quit IRC | 03:19 | |
Ryan_Lane | :D | 03:19 |
*** Daviey has joined #openstack-dev | 03:23 | |
*** ykhodork has quit IRC | 03:25 | |
*** loq_mac has quit IRC | 03:25 | |
ayoung | morganfainberg, is giving you his overly optimisitic view Ryan_Lane | 03:28 |
ayoung | the trusth is, there is no "starting over" | 03:28 |
morganfainberg | ayoung, i think i gave a fair assessment of the specific code in question | 03:29 |
ayoung | we need to basically say that an assignment is from a user, | 03:29 |
morganfainberg | not the more global assignment issues | 03:29 |
ayoung | and that user must be differentiated from another user that might have the same userid | 03:29 |
ayoung | the differentiation is going to be based on where the user ID comes from...call it Domain or IdP | 03:29 |
morganfainberg | ayoung, and i stopped arguing on renaming based on earlier convo. | 03:30 |
morganfainberg | or restructuring | 03:30 |
morganfainberg | the domain construct that is. | 03:31 |
* morganfainberg goes back to code. | 03:31 | |
* morganfainberg stops looking at irc atm...it's not going to change things tonight :P | 03:31 | |
Ryan_Lane | keystone light v2 it is! | 03:34 |
*** kgriffs_afk is now known as kgriffs | 03:34 | |
morganfainberg | Ryan_Lane, be careful, you might attract the attention of someone you don't intend to ;) | 03:35 |
Ryan_Lane | heh | 03:35 |
morganfainberg | Ryan_Lane, hehe | 03:36 |
morganfainberg | argh... i should stop looking at IRC i'm _trying_ to write code! | 03:36 |
*** boris-42 has quit IRC | 03:37 | |
Ryan_Lane | :) | 03:38 |
Ryan_Lane | I'm trying to fix an LDAP problem | 03:38 |
Ryan_Lane | funny enough | 03:38 |
*** ykhodork has joined #openstack-dev | 03:39 | |
*** rods has quit IRC | 03:40 | |
*** CaptTofu has quit IRC | 03:41 | |
*** CaptTofu has joined #openstack-dev | 03:41 | |
*** prekarat has quit IRC | 03:42 | |
*** prekarat has joined #openstack-dev | 03:42 | |
*** anniec has quit IRC | 03:44 | |
*** ffio has joined #openstack-dev | 03:45 | |
*** stevemar has quit IRC | 03:46 | |
*** spzala has quit IRC | 03:49 | |
*** harlowja is now known as harlowja_away | 03:51 | |
*** stevemar has joined #openstack-dev | 03:53 | |
*** aditirav has joined #openstack-dev | 03:53 | |
*** bdpayne has joined #openstack-dev | 03:55 | |
*** aditirav has quit IRC | 03:55 | |
*** david-lyle_ has joined #openstack-dev | 03:56 | |
*** aditirav has joined #openstack-dev | 03:56 | |
*** pberis has quit IRC | 03:57 | |
*** pberis has joined #openstack-dev | 03:58 | |
*** ykhodork has quit IRC | 04:03 | |
*** rongze has quit IRC | 04:04 | |
*** buzztroll has quit IRC | 04:06 | |
*** buzztroll has joined #openstack-dev | 04:06 | |
*** paragan has joined #openstack-dev | 04:10 | |
*** buzztroll has quit IRC | 04:11 | |
*** RuiChen has quit IRC | 04:13 | |
*** bdpayne has quit IRC | 04:15 | |
*** david_lyle has joined #openstack-dev | 04:18 | |
*** carl_baldwin has joined #openstack-dev | 04:19 | |
*** erkrnt has joined #openstack-dev | 04:20 | |
*** bdpayne has joined #openstack-dev | 04:20 | |
*** david-lyle_ has quit IRC | 04:21 | |
*** Joel-S has joined #openstack-dev | 04:25 | |
*** gyee_ has quit IRC | 04:33 | |
*** jab416171 has joined #openstack-dev | 04:33 | |
*** prekarat has quit IRC | 04:36 | |
*** CaptTofu has quit IRC | 04:38 | |
*** xjiujiu has joined #openstack-dev | 04:38 | |
*** CaptTofu has joined #openstack-dev | 04:39 | |
*** kushal has joined #openstack-dev | 04:45 | |
*** noslzzp has quit IRC | 04:52 | |
*** zaitcev has quit IRC | 04:53 | |
*** kushal has quit IRC | 04:53 | |
*** buzztroll has joined #openstack-dev | 04:54 | |
*** zaitcev has joined #openstack-dev | 04:58 | |
*** melwitt1 has joined #openstack-dev | 04:58 | |
*** melwitt2 has joined #openstack-dev | 05:00 | |
*** blamar has quit IRC | 05:00 | |
*** aditirav has quit IRC | 05:00 | |
*** ffio has quit IRC | 05:02 | |
*** melwitt1 has quit IRC | 05:03 | |
*** Ryan_Lane has quit IRC | 05:03 | |
*** kushal has joined #openstack-dev | 05:05 | |
*** ffio has joined #openstack-dev | 05:08 | |
*** doug_shelley66 has joined #openstack-dev | 05:10 | |
*** HenryG has quit IRC | 05:11 | |
*** buzztroll has quit IRC | 05:12 | |
*** nermina has quit IRC | 05:14 | |
*** doug_shelley66 has quit IRC | 05:15 | |
*** Ryan_Lane has joined #openstack-dev | 05:15 | |
*** kgriffs is now known as kgriffs_afk | 05:16 | |
*** uvirtbot has quit IRC | 05:20 | |
*** sungju has joined #openstack-dev | 05:22 | |
*** sungju has quit IRC | 05:29 | |
*** vartom11111110 has joined #openstack-dev | 05:29 | |
*** zaitcev has quit IRC | 05:32 | |
*** david_lyle has quit IRC | 05:33 | |
*** stevemar has quit IRC | 05:35 | |
*** neeti has joined #openstack-dev | 05:36 | |
*** dstanek has quit IRC | 05:37 | |
*** chandankumar has joined #openstack-dev | 05:37 | |
*** gilliard has quit IRC | 05:38 | |
*** dstanek has joined #openstack-dev | 05:39 | |
*** Ryan_Lane has quit IRC | 05:40 | |
*** DennyZhang has joined #openstack-dev | 05:41 | |
*** beisner has quit IRC | 05:42 | |
*** bdpayne has quit IRC | 05:43 | |
*** chandankumar has quit IRC | 05:44 | |
*** chandankumar has joined #openstack-dev | 05:45 | |
*** sgordon has quit IRC | 05:45 | |
*** erkrnt1 has joined #openstack-dev | 05:46 | |
*** erkrnt has quit IRC | 05:46 | |
*** kgriffs_afk is now known as kgriffs | 05:46 | |
*** prekarat has joined #openstack-dev | 05:50 | |
*** chandankumar has quit IRC | 05:50 | |
*** factor has joined #openstack-dev | 05:51 | |
*** chandankumar has joined #openstack-dev | 05:51 | |
*** rushiagr has joined #openstack-dev | 05:53 | |
*** prekarat has quit IRC | 05:54 | |
*** danjared has quit IRC | 05:55 | |
*** xingchao has joined #openstack-dev | 05:56 | |
*** kgriffs is now known as kgriffs_afk | 05:58 | |
*** Joel-S has quit IRC | 05:59 | |
*** jecarey has quit IRC | 06:01 | |
*** StevenK has quit IRC | 06:01 | |
*** StevenK has joined #openstack-dev | 06:02 | |
*** mrunge has joined #openstack-dev | 06:08 | |
*** DennyZhang has quit IRC | 06:08 | |
*** reed has quit IRC | 06:10 | |
*** rdas has joined #openstack-dev | 06:10 | |
*** xjiujiu has quit IRC | 06:11 | |
*** jpeeler has quit IRC | 06:11 | |
*** prekarat has joined #openstack-dev | 06:13 | |
*** danjared has joined #openstack-dev | 06:18 | |
*** vartom11111110 has quit IRC | 06:20 | |
*** factor has quit IRC | 06:23 | |
*** markwash has quit IRC | 06:24 | |
*** factor__ has joined #openstack-dev | 06:25 | |
*** dguitarbite has joined #openstack-dev | 06:27 | |
*** carl_baldwin has quit IRC | 06:31 | |
*** carl_baldwin has joined #openstack-dev | 06:35 | |
*** factor__ has quit IRC | 06:36 | |
*** chandankumar is now known as ciypro | 06:36 | |
*** aeperezt has quit IRC | 06:38 | |
*** Mandell has quit IRC | 06:38 | |
*** pberis has quit IRC | 06:47 | |
*** pberis has joined #openstack-dev | 06:48 | |
*** kgriffs_afk is now known as kgriffs | 06:49 | |
*** amcrn has quit IRC | 06:51 | |
*** pberis has quit IRC | 06:54 | |
*** dstanek has quit IRC | 06:55 | |
*** dstanek has joined #openstack-dev | 06:56 | |
*** pberis has joined #openstack-dev | 06:57 | |
*** kgriffs is now known as kgriffs_afk | 06:58 | |
*** bdpayne has joined #openstack-dev | 07:00 | |
*** bashok has joined #openstack-dev | 07:04 | |
*** ngoracke has quit IRC | 07:04 | |
*** dguitarbite has quit IRC | 07:06 | |
*** dguitarbite has joined #openstack-dev | 07:09 | |
*** tzumainn has quit IRC | 07:11 | |
*** rongze has joined #openstack-dev | 07:12 | |
*** Drankis has joined #openstack-dev | 07:14 | |
*** ykhodork has joined #openstack-dev | 07:15 | |
*** Drankis has quit IRC | 07:15 | |
*** drankis_ has joined #openstack-dev | 07:15 | |
*** drankis_ has joined #openstack-dev | 07:15 | |
*** drankis_ has quit IRC | 07:16 | |
*** Drankis has joined #openstack-dev | 07:16 | |
*** carl_baldwin has quit IRC | 07:17 | |
*** vartom11111110 has joined #openstack-dev | 07:18 | |
*** Drankis has quit IRC | 07:20 | |
*** vartom11111111 has joined #openstack-dev | 07:24 | |
*** vartom11111110 has quit IRC | 07:24 | |
*** Drankis has joined #openstack-dev | 07:29 | |
*** teran has quit IRC | 07:30 | |
*** teran has joined #openstack-dev | 07:30 | |
*** yaguang has joined #openstack-dev | 07:31 | |
*** teran has quit IRC | 07:35 | |
*** kushal has quit IRC | 07:36 | |
*** alex_klimov has joined #openstack-dev | 07:40 | |
*** alex_klimov has left #openstack-dev | 07:41 | |
*** erkrnt1 has quit IRC | 07:46 | |
*** kgriffs_afk is now known as kgriffs | 07:49 | |
*** sthaha has quit IRC | 07:50 | |
*** ifarkas has joined #openstack-dev | 07:50 | |
*** rushiagr has quit IRC | 07:56 | |
*** xga has joined #openstack-dev | 07:57 | |
*** bdpayne has quit IRC | 07:57 | |
*** kgriffs is now known as kgriffs_afk | 07:59 | |
*** sahid has joined #openstack-dev | 07:59 | |
*** flaper87|afk is now known as flaper87 | 08:00 | |
*** jprovazn has joined #openstack-dev | 08:02 | |
*** melwitt2 has quit IRC | 08:02 | |
*** pberis has quit IRC | 08:06 | |
*** kpavel has joined #openstack-dev | 08:09 | |
*** pberis has joined #openstack-dev | 08:10 | |
*** yolanda has joined #openstack-dev | 08:11 | |
*** sthaha has joined #openstack-dev | 08:14 | |
*** sthaha has quit IRC | 08:14 | |
*** sthaha has joined #openstack-dev | 08:14 | |
*** sthaha has quit IRC | 08:18 | |
*** asalkeld_ has quit IRC | 08:22 | |
*** asalkeld_ has joined #openstack-dev | 08:22 | |
*** kpavel has quit IRC | 08:23 | |
*** kpavel has joined #openstack-dev | 08:24 | |
*** vipul is now known as vipul-away | 08:27 | |
*** vipul-away is now known as vipul | 08:29 | |
*** xgsa has joined #openstack-dev | 08:30 | |
*** teran has joined #openstack-dev | 08:31 | |
*** teran has quit IRC | 08:35 | |
*** evgenyf has joined #openstack-dev | 08:37 | |
*** xga_ has joined #openstack-dev | 08:43 | |
*** lsmola_ has joined #openstack-dev | 08:43 | |
*** fire has joined #openstack-dev | 08:43 | |
*** fire is now known as ffio_ | 08:43 | |
*** xga has quit IRC | 08:44 | |
*** vipul is now known as vipul-away | 08:44 | |
*** cyeoh has quit IRC | 08:45 | |
*** ffio has quit IRC | 08:46 | |
*** jtomasek has joined #openstack-dev | 08:47 | |
*** kgriffs_afk is now known as kgriffs | 08:50 | |
*** fbo_away is now known as fbo | 08:51 | |
*** xga has joined #openstack-dev | 08:52 | |
*** factor__ has joined #openstack-dev | 08:58 | |
*** jpich has joined #openstack-dev | 08:59 | |
*** rossella_s has joined #openstack-dev | 09:00 | |
*** vipul-away is now known as vipul | 09:00 | |
*** kgriffs is now known as kgriffs_afk | 09:00 | |
*** MaxV has joined #openstack-dev | 09:00 | |
*** arosen has quit IRC | 09:00 | |
*** ygbo has joined #openstack-dev | 09:01 | |
*** jistr has joined #openstack-dev | 09:02 | |
*** rongze has quit IRC | 09:10 | |
*** amotoki has joined #openstack-dev | 09:11 | |
*** corrigac has quit IRC | 09:12 | |
*** dguitarbite has quit IRC | 09:12 | |
*** buzztroll has joined #openstack-dev | 09:13 | |
*** arezmerita has joined #openstack-dev | 09:14 | |
*** rushiagr has joined #openstack-dev | 09:14 | |
*** buzztrol_ has joined #openstack-dev | 09:15 | |
*** zqfan has joined #openstack-dev | 09:16 | |
*** buzztroll has quit IRC | 09:17 | |
*** mkollaro has joined #openstack-dev | 09:17 | |
*** derekh has joined #openstack-dev | 09:18 | |
*** buzztrol_ has quit IRC | 09:19 | |
*** ndipanov_gone is now known as ndipanov | 09:20 | |
*** boris-42 has joined #openstack-dev | 09:21 | |
*** rushiagr has quit IRC | 09:22 | |
*** rushiagr has joined #openstack-dev | 09:23 | |
*** zhikunliu has quit IRC | 09:25 | |
*** aditirav_ has joined #openstack-dev | 09:25 | |
*** armax has joined #openstack-dev | 09:28 | |
*** rushiagr2 has joined #openstack-dev | 09:28 | |
*** rushiagr has quit IRC | 09:31 | |
*** zqfan has quit IRC | 09:32 | |
*** prekarat has quit IRC | 09:32 | |
*** rossella_s has quit IRC | 09:36 | |
*** aditirav_ has quit IRC | 09:37 | |
*** aditirav has joined #openstack-dev | 09:37 | |
*** rossella_s has joined #openstack-dev | 09:38 | |
*** amotoki has quit IRC | 09:42 | |
*** sdake has quit IRC | 09:43 | |
*** sdake has joined #openstack-dev | 09:46 | |
flaper87 | sdague: ping re: https://review.openstack.org/#/c/63754/ | 09:48 |
*** sushils has joined #openstack-dev | 09:49 | |
*** kgriffs_afk is now known as kgriffs | 09:51 | |
*** johnthetubaguy has joined #openstack-dev | 09:53 | |
*** giulivo has joined #openstack-dev | 09:53 | |
*** gongysh has joined #openstack-dev | 09:56 | |
*** dirk has joined #openstack-dev | 09:59 | |
*** eglynn has joined #openstack-dev | 10:01 | |
*** kgriffs is now known as kgriffs_afk | 10:02 | |
*** rongze has joined #openstack-dev | 10:04 | |
*** aditirav_ has joined #openstack-dev | 10:06 | |
*** lcheng has quit IRC | 10:07 | |
*** aditirav has quit IRC | 10:08 | |
*** aditirav_ is now known as aditirav | 10:08 | |
*** omachace has joined #openstack-dev | 10:08 | |
*** sushils has quit IRC | 10:08 | |
*** aditirav has quit IRC | 10:10 | |
*** aditirav has joined #openstack-dev | 10:11 | |
*** aditirav_ has joined #openstack-dev | 10:12 | |
*** sushils has joined #openstack-dev | 10:12 | |
*** martyntaylor has joined #openstack-dev | 10:14 | |
*** bvandenh has joined #openstack-dev | 10:14 | |
*** buzztroll has joined #openstack-dev | 10:14 | |
*** dguitarbite has joined #openstack-dev | 10:14 | |
*** martyntaylor has left #openstack-dev | 10:14 | |
*** aditirav has quit IRC | 10:15 | |
*** aditirav_ is now known as aditirav | 10:15 | |
tristanC | bugsduggan: ping (about swift client ssl verification) | 10:16 |
*** neoXsys has quit IRC | 10:17 | |
*** ykhodork has quit IRC | 10:18 | |
*** gongysh has quit IRC | 10:18 | |
*** archon__ has joined #openstack-dev | 10:21 | |
*** dguitarbite has quit IRC | 10:26 | |
*** neoXsys has joined #openstack-dev | 10:29 | |
*** factor__ has quit IRC | 10:30 | |
*** dguitarbite has joined #openstack-dev | 10:35 | |
*** johnthetubaguy1 has joined #openstack-dev | 10:40 | |
*** dguitarbite has quit IRC | 10:42 | |
*** teran has joined #openstack-dev | 10:42 | |
*** johnthetubaguy has quit IRC | 10:42 | |
*** xingchao has quit IRC | 10:46 | |
*** rossella_s_ has joined #openstack-dev | 10:47 | |
*** lcheng has joined #openstack-dev | 10:47 | |
*** buzztroll has quit IRC | 10:48 | |
*** rossella_s has quit IRC | 10:49 | |
*** rossella_s_ is now known as rossella_s | 10:49 | |
*** pixelb has joined #openstack-dev | 10:49 | |
*** nmagnezi has joined #openstack-dev | 10:50 | |
*** kgriffs_afk is now known as kgriffs | 10:53 | |
*** noorul has quit IRC | 10:54 | |
*** yaguang has quit IRC | 10:56 | |
*** mkollaro has quit IRC | 10:58 | |
*** kgriffs is now known as kgriffs_afk | 11:03 | |
*** lucasagomes has joined #openstack-dev | 11:06 | |
*** lucasagomes has quit IRC | 11:08 | |
*** lucasagomes has joined #openstack-dev | 11:10 | |
*** mkollaro has joined #openstack-dev | 11:10 | |
*** omachace has left #openstack-dev | 11:11 | |
*** lcheng has quit IRC | 11:13 | |
*** pcm_ has joined #openstack-dev | 11:13 | |
*** doug_shelley66 has joined #openstack-dev | 11:15 | |
*** pcm_ has quit IRC | 11:16 | |
*** pcm_ has joined #openstack-dev | 11:16 | |
*** ihrachys has joined #openstack-dev | 11:19 | |
*** akrivoka has joined #openstack-dev | 11:21 | |
*** archon__ has quit IRC | 11:22 | |
*** paragan has quit IRC | 11:23 | |
*** evgenyf has quit IRC | 11:24 | |
*** yolanda has quit IRC | 11:25 | |
*** yolanda has joined #openstack-dev | 11:26 | |
*** lucasagomes has quit IRC | 11:26 | |
*** lucasagomes has joined #openstack-dev | 11:27 | |
*** xga has quit IRC | 11:28 | |
*** xga_ has quit IRC | 11:28 | |
*** dguitarbite_ has joined #openstack-dev | 11:30 | |
*** yolanda has quit IRC | 11:31 | |
*** devvesa has joined #openstack-dev | 11:31 | |
*** MaxV has quit IRC | 11:31 | |
*** yolanda has joined #openstack-dev | 11:31 | |
*** lucasagomes has quit IRC | 11:32 | |
*** AnilV4 has quit IRC | 11:33 | |
*** dguitarbite_ has quit IRC | 11:36 | |
*** akrivoka has quit IRC | 11:37 | |
*** rods has joined #openstack-dev | 11:37 | |
*** pberis has quit IRC | 11:39 | |
*** pberis has joined #openstack-dev | 11:39 | |
*** akrivoka has joined #openstack-dev | 11:39 | |
*** yolanda has quit IRC | 11:39 | |
*** yolanda has joined #openstack-dev | 11:41 | |
*** yeylon_ has quit IRC | 11:42 | |
*** yolanda has quit IRC | 11:44 | |
*** buzztroll has joined #openstack-dev | 11:44 | |
*** sgordon has joined #openstack-dev | 11:45 | |
*** yolanda has joined #openstack-dev | 11:45 | |
*** AnilV4 has joined #openstack-dev | 11:46 | |
*** cyeoh_ has joined #openstack-dev | 11:48 | |
*** cyeoh_ is now known as cyeoh | 11:48 | |
*** buzztroll has quit IRC | 11:48 | |
*** lucasagomes has joined #openstack-dev | 11:50 | |
*** dguitarbite has joined #openstack-dev | 11:50 | |
*** yolanda has quit IRC | 11:51 | |
*** yolanda has joined #openstack-dev | 11:52 | |
*** XxLocutusxX has joined #openstack-dev | 11:53 | |
*** yolanda has joined #openstack-dev | 11:53 | |
*** lucasagomes has quit IRC | 11:53 | |
*** Rissmann has joined #openstack-dev | 11:53 | |
*** lucasagomes has joined #openstack-dev | 11:54 | |
*** kgriffs_afk is now known as kgriffs | 11:54 | |
*** yolanda has quit IRC | 11:56 | |
*** yolanda has joined #openstack-dev | 11:57 | |
*** yeylon_ has joined #openstack-dev | 11:58 | |
*** MaxV has joined #openstack-dev | 11:58 | |
*** lucasagomes has quit IRC | 11:59 | |
*** AnilV4 has quit IRC | 11:59 | |
*** MaxV has quit IRC | 12:00 | |
*** MaxV has joined #openstack-dev | 12:01 | |
*** lucasagomes has joined #openstack-dev | 12:04 | |
*** kgriffs is now known as kgriffs_afk | 12:04 | |
*** lucasagomes has quit IRC | 12:05 | |
*** AnilV4 has joined #openstack-dev | 12:07 | |
*** yolanda has quit IRC | 12:07 | |
*** sgordon has quit IRC | 12:09 | |
*** yolanda has joined #openstack-dev | 12:09 | |
*** dguitarbite has quit IRC | 12:12 | |
*** mindpixel has joined #openstack-dev | 12:15 | |
*** lucasagomes has joined #openstack-dev | 12:15 | |
*** armax has left #openstack-dev | 12:17 | |
*** CaptTofu has quit IRC | 12:17 | |
*** CaptTofu has joined #openstack-dev | 12:17 | |
*** dguitarbite_ has joined #openstack-dev | 12:23 | |
*** yolanda has quit IRC | 12:23 | |
*** ArxCruz has joined #openstack-dev | 12:24 | |
*** yolanda has joined #openstack-dev | 12:24 | |
*** devvesa has quit IRC | 12:27 | |
*** bashok has quit IRC | 12:28 | |
*** pberis has quit IRC | 12:29 | |
*** pberis has joined #openstack-dev | 12:30 | |
*** AnilV4 has quit IRC | 12:31 | |
*** XxLocutusxX has quit IRC | 12:36 | |
*** yeylon_ has quit IRC | 12:36 | |
*** AnilV4 has joined #openstack-dev | 12:36 | |
*** dguitarbite_ has quit IRC | 12:37 | |
*** jingwang has quit IRC | 12:42 | |
*** yolanda has quit IRC | 12:44 | |
*** yolanda has joined #openstack-dev | 12:44 | |
*** buzztroll has joined #openstack-dev | 12:45 | |
*** yolanda has joined #openstack-dev | 12:46 | |
*** CaptTofu has quit IRC | 12:46 | |
*** CaptTofu has joined #openstack-dev | 12:46 | |
*** tdruiva has joined #openstack-dev | 12:46 | |
*** rushiagr2 is now known as rushiagr_away | 12:47 | |
*** CaptTofu has quit IRC | 12:47 | |
*** CaptTofu_ has joined #openstack-dev | 12:47 | |
*** aditirav_ has joined #openstack-dev | 12:49 | |
*** tdruiva has quit IRC | 12:50 | |
*** yolanda has quit IRC | 12:51 | |
*** Mandell has joined #openstack-dev | 12:51 | |
*** yolanda has joined #openstack-dev | 12:51 | |
*** aditirav has quit IRC | 12:52 | |
*** danielbruno has joined #openstack-dev | 12:52 | |
*** aditirav_ has quit IRC | 12:52 | |
*** aditirav has joined #openstack-dev | 12:53 | |
*** CaptTofu_ has quit IRC | 12:53 | |
*** CaptTofu has joined #openstack-dev | 12:54 | |
*** dguitarbite has joined #openstack-dev | 12:54 | |
*** aditirav_ has joined #openstack-dev | 12:54 | |
*** mrunge has quit IRC | 12:55 | |
*** kgriffs_afk is now known as kgriffs | 12:55 | |
*** AnilV4 has quit IRC | 12:56 | |
*** aditirav has quit IRC | 12:57 | |
*** aditirav_ is now known as aditirav | 12:57 | |
*** aditirav has quit IRC | 12:58 | |
*** aditirav has joined #openstack-dev | 12:58 | |
*** CaptTofu has quit IRC | 12:59 | |
*** dguitarbite has quit IRC | 13:00 | |
*** stevemar has joined #openstack-dev | 13:02 | |
*** teran has quit IRC | 13:02 | |
*** teran has joined #openstack-dev | 13:03 | |
*** kgriffs is now known as kgriffs_afk | 13:05 | |
*** teran has quit IRC | 13:06 | |
*** galstrom_zzz is now known as galstrom | 13:07 | |
*** galstrom is now known as galstrom_zzz | 13:08 | |
*** colinmcnamara has joined #openstack-dev | 13:08 | |
*** rushiagr_away is now known as rushiagr2 | 13:08 | |
*** pberis has quit IRC | 13:08 | |
*** pberis has joined #openstack-dev | 13:09 | |
*** xga has joined #openstack-dev | 13:09 | |
*** xga_ has joined #openstack-dev | 13:09 | |
*** rongze has quit IRC | 13:10 | |
*** Mandell has quit IRC | 13:11 | |
*** danielbruno has quit IRC | 13:13 | |
*** xga_ has quit IRC | 13:14 | |
*** xga has quit IRC | 13:14 | |
*** xga has joined #openstack-dev | 13:15 | |
*** xga__ has joined #openstack-dev | 13:15 | |
*** buzztroll has quit IRC | 13:18 | |
*** dguitarbite has joined #openstack-dev | 13:22 | |
*** dguitarbite has left #openstack-dev | 13:23 | |
*** dguitarbite_ has joined #openstack-dev | 13:23 | |
*** evgenyf has joined #openstack-dev | 13:26 | |
*** danielbruno has joined #openstack-dev | 13:26 | |
*** dguitarbite_ has quit IRC | 13:27 | |
*** pberis has quit IRC | 13:28 | |
*** pberis has joined #openstack-dev | 13:28 | |
*** xga__ has quit IRC | 13:31 | |
*** eglynn is now known as eglynn-lunch | 13:32 | |
*** b3nt_pin has joined #openstack-dev | 13:33 | |
*** markvoelker1 has joined #openstack-dev | 13:34 | |
*** b3nt_pin is now known as beagles | 13:34 | |
*** pmathews has joined #openstack-dev | 13:34 | |
*** pberis has quit IRC | 13:35 | |
*** pberis has joined #openstack-dev | 13:37 | |
*** jpeeler has joined #openstack-dev | 13:40 | |
*** rongze has joined #openstack-dev | 13:41 | |
*** zzelle has joined #openstack-dev | 13:42 | |
*** zzelle has joined #openstack-dev | 13:42 | |
*** pberis has quit IRC | 13:43 | |
*** radez_g0n3 is now known as radez | 13:44 | |
*** jruzicka has joined #openstack-dev | 13:44 | |
*** Rissmann has quit IRC | 13:45 | |
*** dprince has joined #openstack-dev | 13:46 | |
*** dvarga has joined #openstack-dev | 13:46 | |
*** rods has quit IRC | 13:48 | |
*** dguitarbite has joined #openstack-dev | 13:49 | |
*** ekarlso has quit IRC | 13:50 | |
*** ciypro has quit IRC | 13:51 | |
*** rongze has quit IRC | 13:52 | |
*** ekarlso has joined #openstack-dev | 13:52 | |
*** pberis has joined #openstack-dev | 13:52 | |
*** rods has joined #openstack-dev | 13:53 | |
*** rdas has quit IRC | 13:53 | |
*** kgriffs_afk is now known as kgriffs | 13:56 | |
*** neeti has quit IRC | 13:56 | |
*** cpallares has joined #openstack-dev | 13:57 | |
*** factor__ has joined #openstack-dev | 13:58 | |
*** buzztroll has joined #openstack-dev | 13:59 | |
*** HenryG has joined #openstack-dev | 14:00 | |
*** jpeeler has quit IRC | 14:00 | |
*** jpeeler has joined #openstack-dev | 14:01 | |
*** vartom11111111 has quit IRC | 14:01 | |
*** dguitarbite has quit IRC | 14:01 | |
*** neeti has joined #openstack-dev | 14:02 | |
*** sgordon has joined #openstack-dev | 14:04 | |
*** tzumainn has joined #openstack-dev | 14:04 | |
*** kgriffs is now known as kgriffs_afk | 14:05 | |
*** jasondotstar has joined #openstack-dev | 14:06 | |
*** anniec has joined #openstack-dev | 14:06 | |
*** anniec_ has joined #openstack-dev | 14:09 | |
*** anniec has quit IRC | 14:11 | |
*** anniec_ is now known as anniec | 14:11 | |
*** mriedem has joined #openstack-dev | 14:16 | |
*** kblin_ is now known as kblin | 14:16 | |
*** kblin has joined #openstack-dev | 14:16 | |
*** aeperezt has joined #openstack-dev | 14:19 | |
*** aditirav has quit IRC | 14:19 | |
*** jswarren has joined #openstack-dev | 14:21 | |
*** nermina has joined #openstack-dev | 14:21 | |
*** neelashah has quit IRC | 14:22 | |
*** mriedem has quit IRC | 14:25 | |
*** neeti has quit IRC | 14:26 | |
*** rtheis has joined #openstack-dev | 14:26 | |
*** arezmerita has quit IRC | 14:27 | |
*** mriedem has joined #openstack-dev | 14:27 | |
*** vijendar has joined #openstack-dev | 14:29 | |
*** arezmerita has joined #openstack-dev | 14:29 | |
*** joesavak has joined #openstack-dev | 14:30 | |
*** vladikr has joined #openstack-dev | 14:30 | |
*** stevemar has quit IRC | 14:30 | |
*** alex_xu has quit IRC | 14:31 | |
*** kgriffs_afk is now known as kgriffs | 14:33 | |
*** neelashah has joined #openstack-dev | 14:34 | |
*** neelashah has left #openstack-dev | 14:34 | |
*** pmathews has quit IRC | 14:38 | |
*** evgenyf has quit IRC | 14:38 | |
*** pmathews has joined #openstack-dev | 14:38 | |
*** dbalog has joined #openstack-dev | 14:38 | |
*** peristeri has joined #openstack-dev | 14:39 | |
*** pberis has quit IRC | 14:41 | |
*** dbalog has left #openstack-dev | 14:41 | |
*** eharney has joined #openstack-dev | 14:41 | |
*** pberis has joined #openstack-dev | 14:42 | |
*** pmathews has quit IRC | 14:43 | |
*** pmathews1 has joined #openstack-dev | 14:43 | |
*** dbalog has joined #openstack-dev | 14:44 | |
*** rongze has joined #openstack-dev | 14:45 | |
*** mfer has joined #openstack-dev | 14:45 | |
*** mfer has quit IRC | 14:46 | |
*** anniec has quit IRC | 14:46 | |
*** pmathews1 has quit IRC | 14:47 | |
*** neelashah has joined #openstack-dev | 14:48 | |
*** jobewan has joined #openstack-dev | 14:49 | |
*** terriyu has joined #openstack-dev | 14:49 | |
*** kbringard has joined #openstack-dev | 14:49 | |
*** rongze has quit IRC | 14:50 | |
*** kgriffs is now known as kgriffs_afk | 14:50 | |
*** mfer has joined #openstack-dev | 14:51 | |
*** portante is now known as portante|afk | 14:51 | |
*** armax has joined #openstack-dev | 14:51 | |
*** markvoelker1 has quit IRC | 14:52 | |
*** yolanda has joined #openstack-dev | 14:53 | |
*** rongze has joined #openstack-dev | 14:56 | |
*** chmouel has quit IRC | 14:59 | |
*** evgenyf has joined #openstack-dev | 15:05 | |
*** carlp has joined #openstack-dev | 15:06 | |
*** xga has quit IRC | 15:06 | |
*** xga has joined #openstack-dev | 15:09 | |
*** radez is now known as radez_g0n3 | 15:09 | |
*** nermina has quit IRC | 15:09 | |
*** ngoracke has joined #openstack-dev | 15:12 | |
*** ruhe has joined #openstack-dev | 15:12 | |
*** kevinconway has joined #openstack-dev | 15:13 | |
*** dvarga has quit IRC | 15:14 | |
*** rushiagr2 has quit IRC | 15:15 | |
*** giroro_ has joined #openstack-dev | 15:18 | |
*** jmontemayor has joined #openstack-dev | 15:18 | |
*** yolanda has quit IRC | 15:18 | |
*** kgriffs_afk is now known as kgriffs | 15:18 | |
*** yolanda has joined #openstack-dev | 15:19 | |
*** Ruetobas has quit IRC | 15:19 | |
*** dvarga has joined #openstack-dev | 15:19 | |
*** otherwiseguy has quit IRC | 15:21 | |
*** thedodd has joined #openstack-dev | 15:22 | |
*** giroro_ has quit IRC | 15:22 | |
*** russellb is now known as rustlebee | 15:23 | |
*** Ruetobas has joined #openstack-dev | 15:23 | |
*** chandankumar has joined #openstack-dev | 15:24 | |
*** hartsocks is now known as hartbot | 15:24 | |
*** dansmith is now known as damnsmith | 15:26 | |
*** evgenyf has quit IRC | 15:27 | |
*** Ruetobas has quit IRC | 15:27 | |
*** giroro_ has joined #openstack-dev | 15:27 | |
*** rossella_s has quit IRC | 15:28 | |
*** blamar has joined #openstack-dev | 15:29 | |
*** dims has quit IRC | 15:30 | |
*** noorul has joined #openstack-dev | 15:31 | |
*** herndon has joined #openstack-dev | 15:31 | |
*** yolanda has quit IRC | 15:31 | |
*** yolanda has joined #openstack-dev | 15:32 | |
*** giroro_ has quit IRC | 15:32 | |
*** yolanda has quit IRC | 15:33 | |
*** dims has joined #openstack-dev | 15:33 | |
*** radez_g0n3 is now known as radez | 15:33 | |
*** yolanda has joined #openstack-dev | 15:34 | |
*** dims is now known as dimsum | 15:34 | |
*** yolanda has quit IRC | 15:34 | |
*** chandankumar has quit IRC | 15:35 | |
*** yolanda has joined #openstack-dev | 15:36 | |
*** carlp has quit IRC | 15:37 | |
*** spzala has joined #openstack-dev | 15:38 | |
*** carlp has joined #openstack-dev | 15:38 | |
*** mikeoutland has joined #openstack-dev | 15:38 | |
*** factor__ has quit IRC | 15:38 | |
*** lucasagomes is now known as lucas-hungry | 15:38 | |
*** Ruetobas has joined #openstack-dev | 15:39 | |
*** pmathews has joined #openstack-dev | 15:42 | |
*** yolanda has quit IRC | 15:43 | |
*** factor__ has joined #openstack-dev | 15:44 | |
*** yolanda has joined #openstack-dev | 15:44 | |
*** rtheis has quit IRC | 15:45 | |
*** rnirmal has joined #openstack-dev | 15:47 | |
*** armax has left #openstack-dev | 15:47 | |
*** terriyu has quit IRC | 15:53 | |
*** yolanda has quit IRC | 15:55 | |
*** changbl has quit IRC | 15:57 | |
*** changbl has joined #openstack-dev | 15:57 | |
*** xga has quit IRC | 15:57 | |
*** xga has joined #openstack-dev | 15:57 | |
*** Drankis has quit IRC | 15:59 | |
*** chmouel has joined #openstack-dev | 16:00 | |
*** pasquier-s has quit IRC | 16:00 | |
*** tdruiva has joined #openstack-dev | 16:00 | |
*** Ruetobas has quit IRC | 16:01 | |
*** mikeoutl_ has joined #openstack-dev | 16:01 | |
*** mikeoutland has quit IRC | 16:02 | |
*** markmcclain has joined #openstack-dev | 16:02 | |
*** Ruetobas has joined #openstack-dev | 16:03 | |
*** ifarkas has quit IRC | 16:05 | |
*** otherwiseguy has joined #openstack-dev | 16:06 | |
*** jprovazn is now known as jprovazn_afk | 16:07 | |
*** aditirav has joined #openstack-dev | 16:08 | |
*** Ruetobas has quit IRC | 16:08 | |
*** Ruetobas has joined #openstack-dev | 16:08 | |
*** yolanda has joined #openstack-dev | 16:13 | |
*** yolanda has quit IRC | 16:13 | |
*** lxsli0 is now known as lxsli | 16:14 | |
*** yolanda has joined #openstack-dev | 16:14 | |
*** yolanda has quit IRC | 16:15 | |
*** david-lyle_ has joined #openstack-dev | 16:15 | |
*** yolanda has joined #openstack-dev | 16:16 | |
*** yolanda has quit IRC | 16:18 | |
*** sahid has quit IRC | 16:18 | |
*** carl_baldwin has joined #openstack-dev | 16:19 | |
*** xgsa has quit IRC | 16:19 | |
*** yolanda has joined #openstack-dev | 16:19 | |
*** DennyZhang has joined #openstack-dev | 16:20 | |
*** buzztroll has quit IRC | 16:21 | |
*** yolanda has quit IRC | 16:22 | |
*** buzztroll has joined #openstack-dev | 16:22 | |
*** yolanda has joined #openstack-dev | 16:23 | |
*** alop has joined #openstack-dev | 16:25 | |
*** lucas-hungry is now known as lucasagomes | 16:26 | |
*** tdruiva has quit IRC | 16:27 | |
*** tdruiva has joined #openstack-dev | 16:28 | |
*** factor__ has quit IRC | 16:31 | |
*** nelsnelson has joined #openstack-dev | 16:32 | |
*** yolanda has quit IRC | 16:33 | |
*** dvarga is now known as dvarga|away | 16:33 | |
*** dvarga|away is now known as dvarga | 16:33 | |
*** ruhe has quit IRC | 16:35 | |
*** chandankumar has joined #openstack-dev | 16:36 | |
*** yolanda has joined #openstack-dev | 16:36 | |
*** DennyZhang has quit IRC | 16:37 | |
*** pballand has joined #openstack-dev | 16:37 | |
*** yolanda has quit IRC | 16:38 | |
*** xga has quit IRC | 16:38 | |
*** yolanda has joined #openstack-dev | 16:40 | |
*** otherwiseguy has quit IRC | 16:40 | |
*** bvandenh has quit IRC | 16:40 | |
*** xga has joined #openstack-dev | 16:41 | |
*** yolanda has quit IRC | 16:42 | |
*** hemna has joined #openstack-dev | 16:43 | |
*** markwash has joined #openstack-dev | 16:43 | |
*** yolanda has joined #openstack-dev | 16:43 | |
*** yolanda has quit IRC | 16:44 | |
*** pberis has quit IRC | 16:45 | |
*** yolanda has joined #openstack-dev | 16:45 | |
*** rossella_s has joined #openstack-dev | 16:47 | |
*** vartom11111111 has joined #openstack-dev | 16:49 | |
*** reed has joined #openstack-dev | 16:50 | |
*** yolanda has quit IRC | 16:53 | |
*** comstud is now known as bearhands | 16:56 | |
*** zzelle has quit IRC | 16:56 | |
*** bdpayne has joined #openstack-dev | 16:57 | |
*** yolanda has joined #openstack-dev | 16:57 | |
*** lcheng has joined #openstack-dev | 16:58 | |
*** yolanda has quit IRC | 16:58 | |
*** yolanda has joined #openstack-dev | 16:59 | |
*** noslzzp has joined #openstack-dev | 17:00 | |
*** jnoller has joined #openstack-dev | 17:01 | |
*** gyee_ has joined #openstack-dev | 17:02 | |
*** radez is now known as radez_g0n3 | 17:04 | |
*** aditirav has quit IRC | 17:04 | |
*** yolanda has quit IRC | 17:05 | |
*** herndon has quit IRC | 17:05 | |
*** otherwiseguy has joined #openstack-dev | 17:05 | |
*** yolanda has joined #openstack-dev | 17:07 | |
*** orion195 has quit IRC | 17:08 | |
*** herndon has joined #openstack-dev | 17:08 | |
*** bnemec is now known as beekneemech | 17:09 | |
*** ffio_ has quit IRC | 17:10 | |
*** nmagnezi has quit IRC | 17:12 | |
*** yolanda has quit IRC | 17:12 | |
*** evgenyf has joined #openstack-dev | 17:13 | |
*** mlavalle has joined #openstack-dev | 17:13 | |
*** yolanda has joined #openstack-dev | 17:13 | |
*** yolanda has quit IRC | 17:14 | |
*** mindpixel has quit IRC | 17:14 | |
*** rcleere has joined #openstack-dev | 17:16 | |
*** jecarey has joined #openstack-dev | 17:16 | |
*** MaxV has quit IRC | 17:17 | |
*** MaxV has joined #openstack-dev | 17:17 | |
*** SumitNaiksatam has quit IRC | 17:18 | |
*** ygbo has quit IRC | 17:20 | |
*** MaxV has quit IRC | 17:22 | |
*** eglynn-lunch is now known as eglynn | 17:23 | |
*** gyee_ has quit IRC | 17:23 | |
*** flaper87 is now known as flaper87|afk | 17:24 | |
*** vartom11111111 has quit IRC | 17:25 | |
*** mikeoutl_ has quit IRC | 17:25 | |
*** terrylhowe has joined #openstack-dev | 17:28 | |
*** derekh has quit IRC | 17:29 | |
*** moted has quit IRC | 17:29 | |
*** moted has joined #openstack-dev | 17:30 | |
*** gyee_ has joined #openstack-dev | 17:30 | |
*** yolanda has joined #openstack-dev | 17:32 | |
*** Drankis has joined #openstack-dev | 17:32 | |
*** yolanda has quit IRC | 17:33 | |
*** jpich has quit IRC | 17:34 | |
*** krotscheck has joined #openstack-dev | 17:34 | |
*** CaptTofu has joined #openstack-dev | 17:34 | |
*** xga has quit IRC | 17:34 | |
*** SumitNaiksatam has joined #openstack-dev | 17:34 | |
*** xga_ has joined #openstack-dev | 17:35 | |
*** CaptTofu_ has joined #openstack-dev | 17:35 | |
*** xarses has quit IRC | 17:36 | |
*** kgriffs is now known as kgriffs_afk | 17:38 | |
*** harlowja_away is now known as harlowja | 17:38 | |
*** CaptTofu has quit IRC | 17:39 | |
*** jnoller has quit IRC | 17:41 | |
*** fbo is now known as fbo_away | 17:42 | |
*** Underbyte has quit IRC | 17:42 | |
*** ruhe has joined #openstack-dev | 17:46 | |
*** rtheis has joined #openstack-dev | 17:46 | |
*** xga_ has quit IRC | 17:47 | |
*** angdraug has joined #openstack-dev | 17:47 | |
*** jdurgin1 has joined #openstack-dev | 17:48 | |
*** carlp has quit IRC | 17:50 | |
*** mkollaro has quit IRC | 17:51 | |
*** akrivoka has quit IRC | 17:53 | |
*** dave_tucker_zzz has joined #openstack-dev | 17:53 | |
*** dave_tucker_zzz is now known as dave_tucker | 17:53 | |
*** dave_tucker is now known as dave_tucker_zzz | 17:54 | |
*** jistr has quit IRC | 17:55 | |
*** ruhe is now known as _ruhe | 17:57 | |
*** hemna has quit IRC | 17:57 | |
*** ndipanov has quit IRC | 17:57 | |
*** amcrn has joined #openstack-dev | 17:58 | |
*** markmcclain has quit IRC | 17:59 | |
*** pballand has quit IRC | 18:02 | |
*** Andrewsd has joined #openstack-dev | 18:03 | |
Andrewsd | Helloo | 18:03 |
Andrewsd | I need some help...I have deployed openstack havana with devstack | 18:03 |
Andrewsd | I want to ping an Instance from host machine | 18:04 |
Andrewsd | I only get : Destination host unreachable | 18:04 |
*** hemna has joined #openstack-dev | 18:04 | |
*** bknudson has quit IRC | 18:05 | |
Andrewsd | any ideea what I should u? | 18:06 |
Andrewsd | do | 18:06 |
*** bknudson has joined #openstack-dev | 18:06 | |
*** yolanda has joined #openstack-dev | 18:06 | |
*** novel1 has quit IRC | 18:08 | |
*** yolanda has quit IRC | 18:08 | |
*** yolanda has joined #openstack-dev | 18:09 | |
*** yolanda has quit IRC | 18:10 | |
*** yolanda has joined #openstack-dev | 18:10 | |
*** yolanda has quit IRC | 18:11 | |
*** yolanda has joined #openstack-dev | 18:12 | |
*** yolanda has quit IRC | 18:12 | |
*** _ruhe is now known as ruhe | 18:13 | |
*** yolanda has joined #openstack-dev | 18:13 | |
*** xarses has joined #openstack-dev | 18:14 | |
*** prad has joined #openstack-dev | 18:14 | |
*** yolanda has joined #openstack-dev | 18:15 | |
*** yolanda has quit IRC | 18:16 | |
*** yolanda has joined #openstack-dev | 18:17 | |
*** thedodd has quit IRC | 18:20 | |
*** negronjl_ has joined #openstack-dev | 18:20 | |
thingee | ayoung: ping | 18:21 |
*** eglynn has quit IRC | 18:21 | |
*** negronjl_ has quit IRC | 18:22 | |
*** rushiagr has joined #openstack-dev | 18:22 | |
ayoung | thingee, whats up? | 18:22 |
*** negronjl_ has joined #openstack-dev | 18:23 | |
*** negronjl has quit IRC | 18:23 | |
thingee | ayoung: I'm trying to call add_user_to_project. I was kind of assuming I could call this method directly from an assignment backend like kvs, but it seems it only comes from the manager class. I'm not sure how the two work together. | 18:24 |
ayoung | you should always call the manager, | 18:24 |
ayoung | the maanger is the abstract base class, so to speak | 18:24 |
thingee | ok, and the manager just knows based on the assignment driver? | 18:24 |
thingee | opt | 18:24 |
ayoung | yeah | 18:25 |
ayoung | see keystone/common/manager.py | 18:25 |
thingee | ok, thanks! | 18:25 |
*** kbringard has quit IRC | 18:25 | |
*** dvarga is now known as dvarga|away | 18:26 | |
*** dvarga|away is now known as dvarga | 18:26 | |
*** negronjl_ has quit IRC | 18:26 | |
*** rwsu has quit IRC | 18:28 | |
*** ruhe is now known as _ruhe | 18:28 | |
*** chandankumar has quit IRC | 18:28 | |
*** evgenyf has quit IRC | 18:28 | |
*** negronjl has joined #openstack-dev | 18:28 | |
ayoung | http://www.openssl.org/news/secadv_hack.txt | 18:28 |
*** ykhodork has joined #openstack-dev | 18:29 | |
*** johnthetubaguy1 has quit IRC | 18:30 | |
bknudson | ayoung: sneaky! | 18:30 |
*** mlavalle has quit IRC | 18:31 | |
*** buzztroll has quit IRC | 18:32 | |
*** _ruhe is now known as ruhe | 18:33 | |
*** Rissmann has joined #openstack-dev | 18:37 | |
*** yolanda has joined #openstack-dev | 18:37 | |
*** kevinconway has quit IRC | 18:38 | |
*** jruzicka has quit IRC | 18:40 | |
*** yolanda has quit IRC | 18:40 | |
*** yolanda has joined #openstack-dev | 18:40 | |
*** Rissmann has quit IRC | 18:42 | |
Andrewsd | can someone help me out...i can't understand why I can't ping an instance | 18:42 |
*** jruzicka has joined #openstack-dev | 18:42 | |
*** yolanda has quit IRC | 18:42 | |
*** yolanda has joined #openstack-dev | 18:43 | |
*** markmcclain has joined #openstack-dev | 18:43 | |
*** yolanda has quit IRC | 18:43 | |
*** jasdeepH has joined #openstack-dev | 18:43 | |
*** yolanda has joined #openstack-dev | 18:44 | |
*** rossella_s has quit IRC | 18:44 | |
*** garyk has quit IRC | 18:45 | |
*** kevinconway has joined #openstack-dev | 18:45 | |
*** yolanda has quit IRC | 18:51 | |
*** yolanda has joined #openstack-dev | 18:51 | |
*** yolanda has quit IRC | 18:52 | |
*** zzelle has joined #openstack-dev | 18:54 | |
*** thedodd has joined #openstack-dev | 18:55 | |
*** dstanek has quit IRC | 18:58 | |
*** herndon has quit IRC | 19:00 | |
*** MaxV has joined #openstack-dev | 19:00 | |
*** evgenyf has joined #openstack-dev | 19:00 | |
*** JonnyNomad has quit IRC | 19:01 | |
*** gyee_ has quit IRC | 19:02 | |
*** dstanek has joined #openstack-dev | 19:02 | |
*** herndon has joined #openstack-dev | 19:03 | |
*** rushiagr has quit IRC | 19:05 | |
*** Andrewsd has quit IRC | 19:07 | |
*** MaxV has quit IRC | 19:09 | |
*** ykhodork has quit IRC | 19:13 | |
*** galstrom_zzz is now known as galstrom | 19:14 | |
*** xarses has quit IRC | 19:14 | |
*** sushils has quit IRC | 19:15 | |
*** rongze has quit IRC | 19:15 | |
*** arosen has joined #openstack-dev | 19:15 | |
*** rongze has joined #openstack-dev | 19:16 | |
*** negronjl has quit IRC | 19:16 | |
*** xarses has joined #openstack-dev | 19:16 | |
*** galstrom is now known as galstrom_zzz | 19:17 | |
*** JonnyNomad has joined #openstack-dev | 19:18 | |
*** negronjl has joined #openstack-dev | 19:18 | |
*** jruzicka has quit IRC | 19:18 | |
*** galstrom_zzz is now known as galstrom | 19:18 | |
*** jruzicka has joined #openstack-dev | 19:19 | |
*** rongze has quit IRC | 19:20 | |
*** negronjl has quit IRC | 19:21 | |
*** negronjl has joined #openstack-dev | 19:22 | |
*** evgenyf has quit IRC | 19:22 | |
*** giulivo has quit IRC | 19:24 | |
*** jgrimm has joined #openstack-dev | 19:25 | |
*** jtomasek has quit IRC | 19:27 | |
*** mlavalle has joined #openstack-dev | 19:28 | |
*** xarses has quit IRC | 19:29 | |
*** beisner has joined #openstack-dev | 19:29 | |
terrylhowe | Andrewsd security group rules maybe? | 19:29 |
*** xarses has joined #openstack-dev | 19:29 | |
*** salv-orlando_ has joined #openstack-dev | 19:30 | |
*** jasdeepH has quit IRC | 19:31 | |
*** buzztroll has joined #openstack-dev | 19:33 | |
*** salv-orlando has quit IRC | 19:34 | |
*** salv-orlando_ is now known as salv-orlando | 19:34 | |
*** Drankis has quit IRC | 19:34 | |
*** chandankumar has joined #openstack-dev | 19:35 | |
*** CaptTofu_ has quit IRC | 19:35 | |
*** galstrom is now known as galstrom_zzz | 19:36 | |
*** dstanek has quit IRC | 19:38 | |
*** spzala has quit IRC | 19:39 | |
*** marios has quit IRC | 19:41 | |
*** devoid has joined #openstack-dev | 19:41 | |
*** marios has joined #openstack-dev | 19:41 | |
*** devoid has left #openstack-dev | 19:41 | |
*** rwsu has joined #openstack-dev | 19:41 | |
*** dstanek has joined #openstack-dev | 19:41 | |
*** evgenyf has joined #openstack-dev | 19:42 | |
*** xga has joined #openstack-dev | 19:43 | |
*** doug_shelley66 has quit IRC | 19:45 | |
*** colinmcnamara has quit IRC | 19:45 | |
*** doug_shelley66 has joined #openstack-dev | 19:46 | |
morganfainberg | bknudson, massive rebase in. | 19:46 |
*** colinmcnamara has joined #openstack-dev | 19:47 | |
*** dstanek has quit IRC | 19:47 | |
*** xga has quit IRC | 19:47 | |
*** noslzzp has quit IRC | 19:48 | |
*** buzztroll has quit IRC | 19:55 | |
*** buzztroll has joined #openstack-dev | 19:55 | |
thingee | ayoung: my assignment driver is a union of assignment drivers. so CONF.assignment_driver is multiple drivers (kvs, sql). With the keystone.assignment.Manager looking at CONF.assignment_driver I end up with a really bad recursion. Besides cfg.set_override for loading each manager for each assignment driver, what would you recommend? | 19:58 |
ayoung | Whiskey | 19:58 |
thingee | that was last night | 19:58 |
thingee | although willet will be opened tonight | 19:58 |
ayoung | CONF.assignment_driver should be your union driver. | 19:59 |
thingee | yup | 19:59 |
ayoung | where is the recursion? | 19:59 |
*** vipul is now known as vipul-away | 20:00 | |
ayoung | you need to load the unionized drivers directly...and I am guessing that id->union_driver->[dirvers]->identity is the problem? | 20:00 |
thingee | so for example add_user_to_project is going to call the first backend manager, and if that fails try the second backend manager. I need to load those managers ahead of time. But I can't just ask for the keystone.assignment.Manager() because that's the union assignment driver. | 20:01 |
ayoung | ah...no...and you want the logic from the manager...ugh | 20:01 |
ayoung | add_user_to_project is a wrpaaer around opther calls | 20:01 |
ayoung | assign_role_to_user_in project | 20:01 |
ayoung | that is what you really need to have call each other, not the semantic sugar call | 20:02 |
morganfainberg | thingee does it really need the logic from the manager or could you use a proxy driver that calls in sequence to the actual backend - e.g. raise a known error then make the same call to the other driver if needed? | 20:02 |
morganfainberg | so it works like manager -> proxy driver -> [driver1, if error, driver2] | 20:03 |
thingee | I was just having the union assignment driver talk to each backends assignment manager because I thought that's where things should be called instead of directly from the assignment driver, from earlier question with ayoung. | 20:04 |
morganfainberg | the manager logic typically doesn't care what the backend does. my thought was that since you don't care about the backend logic at the manager level, it would be a "smart-ish" driver. | 20:05 |
ayoung | thingee, yeah, I didn't realize that you had the union thing going on...so add_user_to_project should remain unchanged, but the fallback logic should be in the driver specific function | 20:05 |
ayoung | https://github.com/openstack/keystone/blob/master/keystone/assignment/core.py#L219 | 20:06 |
*** vipul-away is now known as vipul | 20:07 | |
thingee | ayoung: got it | 20:07 |
*** novel1 has joined #openstack-dev | 20:08 | |
*** lucasagomes has quit IRC | 20:08 | |
*** flaper87|afk is now known as flaper87 | 20:08 | |
ayoung | morganfainberg, all your patches depend on each other...is that intentional, or are you just getting sick of rebasing? | 20:12 |
*** ArxCruz has quit IRC | 20:14 | |
*** spzala has joined #openstack-dev | 20:15 | |
*** rongze has joined #openstack-dev | 20:16 | |
*** agntdrake has joined #openstack-dev | 20:17 | |
*** evgenyf has quit IRC | 20:19 | |
*** radez_g0n3 is now known as radez | 20:20 | |
thingee | morganfainberg, ayoung: I wrote this up real quick, but this is the hack I'm hitting with not being able to get instances of each backend manager http://paste.openstack.org/show/59978 | 20:20 |
thingee | I know there has to be a better way :) | 20:20 |
thingee | *catches up* | 20:20 |
*** vipul is now known as vipul-away | 20:23 | |
*** rongze has quit IRC | 20:23 | |
*** hartbot has quit IRC | 20:25 | |
thingee | morganfainberg: right, it falls back onto the second driver. | 20:25 |
*** chandankumar has quit IRC | 20:26 | |
asadoughi | dhellmann: looks like new pypi version of cliff broke python-neutronclient UT, currently debugging.. | 20:28 |
*** jsavak has joined #openstack-dev | 20:29 | |
thingee | morganfainberg: oh you were suggesting that. The example I gave was kind of along those lines. I'm just not sure how I can get an instance of a manager with the correct backend driver loaded. overriding conf settings seems to be a way since assignment.Manager__init__() is checking CONF.assignment_driver..but it's hacky. | 20:31 |
thingee | bb lunch | 20:31 |
*** joesavak has quit IRC | 20:31 | |
*** joesavak has joined #openstack-dev | 20:35 | |
dhellmann | asadoughi: ack, have a link to a failing test? | 20:35 |
asadoughi | dhellmann: http://logs.openstack.org/30/62130/4/check/gate-python-neutronclient-python27/6b6fc56/console.html | 20:35 |
*** rods has quit IRC | 20:35 | |
asadoughi | dhellmann: from Jenkins on my review https://review.openstack.org/#/c/62130/ | 20:35 |
*** hartsocks has joined #openstack-dev | 20:36 | |
*** zaitcev has joined #openstack-dev | 20:36 | |
*** dvarga is now known as dvarga|away | 20:38 | |
*** dvarga|away is now known as dvarga | 20:38 | |
*** jsavak has quit IRC | 20:38 | |
ayoung | thingee, makes sense. I mean, do it as an array and iterate through each pone...and not on the add_user_top_orject call but rather the one we discussed, and I think you have the right general idea. You planing on submitting that? | 20:39 |
*** radix_ has joined #openstack-dev | 20:39 | |
*** kbringard has joined #openstack-dev | 20:41 | |
*** kbringard has quit IRC | 20:41 | |
*** vipul-away is now known as vipul | 20:42 | |
*** otherwiseguy has quit IRC | 20:42 | |
*** sushils has joined #openstack-dev | 20:44 | |
dhellmann | asadoughi: what is the client trying to do there? why is it trying to load its own formatters? | 20:45 |
asadoughi | dhellmann: my guess is as good as yours | 20:47 |
*** carl_baldwin has quit IRC | 20:47 | |
asadoughi | (was just trying to make my jenkins job green for the review) | 20:47 |
*** sarob has joined #openstack-dev | 20:49 | |
*** tdruiva has quit IRC | 20:50 | |
dhellmann | asadoughi: ok :-) | 20:50 |
terrylhowe | seems like should just make prettytable 0.7 required and dump that | 20:50 |
*** nermina has joined #openstack-dev | 20:50 | |
asadoughi | dhellmann: git-blame points to e901c5f Add custom TableFormater for keep same empty list behavior as prettytable 0.6 | 20:50 |
dhellmann | asadoughi: yeah, found https://bugs.launchpad.net/python-neutronclient/+bug/1165962 | 20:53 |
*** yolanda has joined #openstack-dev | 20:53 | |
*** buzztroll has quit IRC | 20:56 | |
*** ozialien_ has joined #openstack-dev | 20:57 | |
*** melwitt has joined #openstack-dev | 20:58 | |
*** vipul is now known as vipul-away | 20:59 | |
asadoughi | dhellmann: ok, well looks like python-neutronclient doesn't depend on prettytable anymore, just cliff, so if i just revert the code from the commit i mentioned, it looks green | 21:00 |
*** melwitt1 has joined #openstack-dev | 21:00 | |
*** jprovazn_afk has quit IRC | 21:02 | |
*** vipul-away is now known as vipul | 21:02 | |
dhellmann | asadoughi: yeah, that looks like it would fix it, but I don't understand the rationale for the change in the first place -- the output format changed, but I'm not sure what the compatibility requirements are for that part of the client | 21:03 |
*** melwitt has quit IRC | 21:03 | |
*** xarses has quit IRC | 21:05 | |
*** vipul is now known as vipul-away | 21:08 | |
*** vipul-away is now known as vipul | 21:08 | |
dhellmann | asadoughi: https://review.openstack.org/#/c/64909/ | 21:09 |
*** yolanda has quit IRC | 21:09 | |
*** jasondotstar has quit IRC | 21:09 | |
*** yolanda has joined #openstack-dev | 21:10 | |
morganfainberg | ayoung, mostly intentional | 21:10 |
*** yolanda has quit IRC | 21:10 | |
ayoung | morganfainberg, I'll try to stay on that thread....need those in | 21:10 |
morganfainberg | the re-worked business logic ones? | 21:11 |
morganfainberg | those shouldn't affect KVS | 21:11 |
*** yolanda has joined #openstack-dev | 21:11 | |
morganfainberg | wow jenkins hates me today | 21:11 |
thingee | ayoung: oh, you would be interested in a union driver idea in core? | 21:11 |
ayoung | thingee, no idea...sure, why not? | 21:12 |
morganfainberg | ayoung, the reworked business logic patches really would be one change if it wasn't a PITA to review | 21:12 |
morganfainberg | i split them up as logically as possible. | 21:12 |
ayoung | morganfainberg, I'm just afraid of hte length of our review queue | 21:12 |
ayoung | 75+ in Keystone alone | 21:12 |
morganfainberg | ayoung, yeah i know. | 21:12 |
thingee | ayoung: Oh was just not sure what you meant by planning to submit that. That's just kind of the general thing I've been doing internally | 21:12 |
ayoung | not counting client, etc...and I am supposed to start looking at Barbican | 21:12 |
morganfainberg | ayoung, i'll be doing reviews instead of new code this weekend methinks. | 21:12 |
ayoung | I need to knock out revocations...but keep getting sucked into reviews | 21:13 |
ayoung | morganfainberg, ++ | 21:13 |
*** krotscheck_ has joined #openstack-dev | 21:14 | |
bknudson | morganfainberg: got a minute? | 21:14 |
*** krotscheck_ has quit IRC | 21:14 | |
*** yolanda has quit IRC | 21:16 | |
morganfainberg | bknudson, sure | 21:16 |
morganfainberg | bknudson, always have some time for ya | 21:16 |
bknudson | morganfainberg: you've worked on next-review a bit... | 21:17 |
morganfainberg | bknudson, yes, i have. i need to use it more. | 21:17 |
morganfainberg | ;) | 21:17 |
bknudson | morganfainberg: you think it could be integrated with reviewday -- https://review.openstack.org/#/c/64471/ | 21:17 |
bknudson | ? | 21:17 |
morganfainberg | not familiar with reviewday | 21:17 |
* morganfainberg looks | 21:17 | |
*** yolanda has joined #openstack-dev | 21:17 | |
bknudson | morganfainberg: it's this page http://status.openstack.org/reviews/ | 21:18 |
morganfainberg | ooh | 21:18 |
morganfainberg | oh thats cool | 21:18 |
bknudson | the change I submitted makes it so that there'll be a JSON version of that data. | 21:18 |
bknudson | reviewday calculates a score for all the reviews | 21:18 |
bknudson | so could automatically prioritize | 21:18 |
morganfainberg | dude, thats awesome | 21:19 |
morganfainberg | i... dig that | 21:19 |
*** rongze has joined #openstack-dev | 21:19 | |
bknudson | so that your important changes related to blueprint would be prioritized above my test cleanups. | 21:19 |
*** xarses has joined #openstack-dev | 21:19 | |
morganfainberg | so your thought would be to make nextreview pull from reviewday data? | 21:19 |
bknudson | morganfainberg: anyways, I would have to talk to lawyers before I could change next-review | 21:19 |
morganfainberg | or optionally at least? | 21:19 |
ayoung | "Your branch is behind 'origin/master' by 74 commits, and can be fast-forwarded." Dang | 21:20 |
bknudson | morganfainberg: yes, I was thinking next-review could use the score to suggest that next. | 21:20 |
*** jruzicka has quit IRC | 21:20 | |
morganfainberg | bknudson, there should be no reason why it couldn't easily pull from a difference source of data. | 21:20 |
bknudson | morganfainberg: if you know next-review well enough to determine if the json there works then that would be helpful. | 21:21 |
morganfainberg | bknudson, let me take a look, i think it would be a different code path though, since my _guess_ is the gerrit data is a bit divergent (which is what is currently used) | 21:21 |
morganfainberg | divergent from the reviewday json that is | 21:21 |
ayoung | "talk to the lawyers" Bah! | 21:21 |
thingee | ayoung: would it make sense to have keystone.assignment.core.Manager.__init__(self, assignment_driver=None) and if None continue normal behavior? I might also just be totally missing the correct way to do this. | 21:21 |
thingee | https://github.com/openstack/keystone/blob/stable/havana/keystone/assignment/core.py#L55 | 21:22 |
asadoughi | asadoughi: cool, reviewed it. pushed https://review.openstack.org/#/c/64910 | 21:22 |
asadoughi | oops dhellman: ^ | 21:22 |
ayoung | thingee, I dpn't think so...relucatnat to say for certainty one way or the other without thinking deeply | 21:22 |
morganfainberg | bknudson, but my guess is it wouldn't be hard to make some minor changes to support either bit of data. | 21:22 |
ayoung | but really don't want to break things for the LDAP folks out there | 21:22 |
thingee | ayoung: the proposed idea would continue normal behavior for those not passing anything to Manager. I think ldap folks would be fine? | 21:23 |
ayoung | But really, you just want to explicitly define the assignment driver in config, and then let the existing mechanism resolve it. Your problem, I am guessing, is that you need to then config the other two drivers? | 21:23 |
dhellmann | asadoughi: updated, thanks | 21:23 |
*** rongze has quit IRC | 21:23 | |
thingee | it just introduces the interface you get from keystone.common.manager.Manager | 21:23 |
morganfainberg | ayoung, i think we need to make a change that forces a configuration choice in an up-coming release rather than a side effect, but that would be what, K if we changed that now? | 21:23 |
*** rfolco has quit IRC | 21:24 | |
ayoung | thingee, it feels wrong. You should not be explcitly calling that function | 21:24 |
ayoung | morganfainberg, Juno could have it. We just need to warn people it is coming | 21:24 |
morganfainberg | ayoung, hm. *scribbles not for a log.warning patch sometime after I-2* | 21:24 |
morganfainberg | bknudson, i'll let you know monday what i find about next-review? if it's silly easy i might write it or an example of it to leverage reviewday | 21:25 |
bknudson | morganfainberg: awesome! | 21:25 |
*** yolanda has quit IRC | 21:25 | |
bknudson | morganfainberg: having a +1 on there saying that the JSON is what you want might help. | 21:26 |
thingee | ayoung: ok, so the problem I'm hitting through is if set assignment_driver to be the union driver. Once it hits anything with self.driver.some_method...it's just going to go back to the union_driver, then back to the manager, then back the union_driver | 21:26 |
bknudson | https://review.openstack.org/#/c/64471/ | 21:26 |
thingee | https://github.com/openstack/keystone/blob/stable/havana/keystone/assignment/core.py#L216 | 21:26 |
morganfainberg | bknudson, will mark that and look at is as well. | 21:26 |
thingee | I was suggesting the interace change to avoid have to override conf to load each instance. It just seemed wrong too. | 21:26 |
bknudson | morganfainberg: maybe it would be better to have "project-name": { "--url--": { "score": "35" } } | 21:26 |
morganfainberg | since i'm going to circle back for reviews bit later on | 21:26 |
morganfainberg | bknudson, that would probably be better | 21:27 |
morganfainberg | hm. no | 21:27 |
bknudson | morganfainberg: also, seems like score should be a number. | 21:27 |
morganfainberg | score should be an int (or float) | 21:27 |
morganfainberg | but url can be an element of the dictionary w/o too much headache i think | 21:27 |
ayoung | thingee, the union driver needs to short circuit those calls. Never have the union driver forward on, except to safe underlying calls | 21:28 |
morganfainberg | let me look at gerrit's json | 21:28 |
ayoung | so add_role_to_userand project.... | 21:28 |
morganfainberg | bknudson, i think we should mirror that implementation if it make url the key or just as part of the object as an element | 21:28 |
ayoung | ah...you need to work from tip of tree | 21:28 |
ayoung | we broke the dependency that is messing you up | 21:28 |
*** herndon has quit IRC | 21:28 | |
bknudson | morganfainberg: reviewday also gets the gerrit JSON data and enhances it... maybe there's a better way to generate the JSON rather than trying to make it like the HTML | 21:29 |
morganfainberg | bknudson, ++ | 21:29 |
ayoung | damit, no we didn't | 21:29 |
ayoung | https://github.com/openstack/keystone/blob/master/keystone/assignment/backends/sql.py#L298 is going away in some review... | 21:30 |
bknudson | I'm just not familiar with the template engine they use... Cheetah | 21:30 |
morganfainberg | ayoung, https://review.openstack.org/#/c/54647/ | 21:30 |
morganfainberg | bknudson, yeah also cheetah iirc is pretty dead. | 21:30 |
morganfainberg | as in not maintained | 21:30 |
ayoung | thingee, bknudson ^^ | 21:30 |
bknudson | ayoung: sorry, that one's hung up on me getting the tempest change in. | 21:31 |
ayoung | bknudson, no need to apologize..you arecleaning up my mess. I appreciate that. | 21:31 |
bknudson | I'm easily distracted. | 21:31 |
ayoung | thingee, try rebasing on top of ^^ | 21:31 |
ayoung | or just commenting out that check: there is no reason to go to the identity driver. | 21:31 |
*** rods has joined #openstack-dev | 21:32 | |
morganfainberg | ayoung, thingee, yeah just for testing it, comment that check out. | 21:33 |
morganfainberg | thingee, or even in your tree. we will def. have that fix in for Icehouse. | 21:33 |
*** buzztroll has joined #openstack-dev | 21:33 | |
*** herndon has joined #openstack-dev | 21:33 | |
morganfainberg | ayoung, is the HMAC/encrypt code relevant for your revocations stuff (in KVS)? | 21:34 |
morganfainberg | ayoung, I want to know so I can prioritise the memcache token backend stuff or the new encrypt kvs stuff. | 21:34 |
morganfainberg | i think they'll be about the same amount of work. | 21:35 |
ayoung | morganfainberg, I don't think it is....why would revocations depend on HMAC? | 21:36 |
*** mikeoutland has joined #openstack-dev | 21:36 | |
morganfainberg | ayoung, i wasn't sure if you were planning on imlpementing/using that in the KVS backend | 21:36 |
morganfainberg | ayoung, it's why I was asking. | 21:36 |
ayoung | Nope...should not need it | 21:36 |
morganfainberg | ayoung, i'll therefore work on finishing up the memcache conversion and the non-expiry keys stuff once i get the in-mem kvs patch working w/ the trust change | 21:37 |
ayoung | ++ | 21:37 |
morganfainberg | ayoung, trying to make sure i don't block ya somehow. | 21:37 |
*** otherwiseguy has joined #openstack-dev | 21:37 | |
morganfainberg | fwiw, i think icehouse is getting a ton of needed cleanup in keystone :) | 21:38 |
*** cpallares has quit IRC | 21:39 | |
morganfainberg | erm. swap keystone and icehouse in that sentence | 21:39 |
*** dprince has quit IRC | 21:41 | |
*** dvarga has quit IRC | 21:41 | |
*** giulivo has joined #openstack-dev | 21:44 | |
*** rods has quit IRC | 21:46 | |
*** factor has joined #openstack-dev | 21:50 | |
*** kgriffs_afk is now known as kgriffs | 21:53 | |
*** jsavak has joined #openstack-dev | 21:53 | |
*** lsmola_ has quit IRC | 21:55 | |
*** akrivoka has joined #openstack-dev | 21:55 | |
*** vipul is now known as vipul-away | 21:56 | |
*** vipul-away is now known as vipul | 21:56 | |
*** joesavak has quit IRC | 21:57 | |
*** danielbruno has quit IRC | 22:03 | |
*** rods has joined #openstack-dev | 22:04 | |
*** comay has quit IRC | 22:04 | |
*** beagles has quit IRC | 22:04 | |
*** ozialien_ has quit IRC | 22:04 | |
*** ozialien has joined #openstack-dev | 22:05 | |
*** nati_ueno has quit IRC | 22:05 | |
*** vartom11111111 has joined #openstack-dev | 22:07 | |
*** nati_ueno has joined #openstack-dev | 22:08 | |
*** xarses has quit IRC | 22:09 | |
*** xarses_ has joined #openstack-dev | 22:09 | |
*** SergeyLukjanov has joined #openstack-dev | 22:10 | |
*** mikeoutl_ has joined #openstack-dev | 22:10 | |
*** mikeoutland has quit IRC | 22:10 | |
*** sgordon has quit IRC | 22:12 | |
*** ozialien has quit IRC | 22:12 | |
*** sarob has quit IRC | 22:15 | |
*** sarob has joined #openstack-dev | 22:16 | |
*** mikeoutl_ has quit IRC | 22:17 | |
*** prad has quit IRC | 22:17 | |
*** neelashah has quit IRC | 22:17 | |
*** mikeoutland has joined #openstack-dev | 22:18 | |
*** erkrnt has joined #openstack-dev | 22:18 | |
*** pcm_ has quit IRC | 22:19 | |
*** vladikr has quit IRC | 22:19 | |
*** rongze has joined #openstack-dev | 22:20 | |
*** sarob has quit IRC | 22:20 | |
*** jergerber has joined #openstack-dev | 22:20 | |
*** vartom11111112 has joined #openstack-dev | 22:21 | |
*** vartom11111111 has quit IRC | 22:22 | |
*** nati_ueno has quit IRC | 22:22 | |
*** SumitNaiksatam has quit IRC | 22:24 | |
*** rtheis has quit IRC | 22:25 | |
*** rongze has quit IRC | 22:25 | |
*** mikeoutland has quit IRC | 22:26 | |
*** mikeoutland has joined #openstack-dev | 22:26 | |
sdague | ttx: https://review.openstack.org/#/c/64891/ this is proposed because of oslo.rootwrap, but I'm not clear how oslo.rootwrap would trigger that | 22:27 |
*** dave_tucker_zzz is now known as dave_tucker | 22:30 | |
*** jergerber has quit IRC | 22:34 | |
*** eharney has quit IRC | 22:35 | |
*** mriedem has quit IRC | 22:35 | |
*** vipul is now known as vipul-away | 22:35 | |
*** vipul-away is now known as vipul | 22:36 | |
*** jobewan has quit IRC | 22:37 | |
*** factor has quit IRC | 22:40 | |
*** factor has joined #openstack-dev | 22:45 | |
*** sarob has joined #openstack-dev | 22:46 | |
*** burt has quit IRC | 22:46 | |
*** mfer has quit IRC | 22:47 | |
*** buzztroll has quit IRC | 22:49 | |
*** Makdaam is now known as MMMM | 22:52 | |
*** MMMM is now known as Makdaam | 22:52 | |
*** Makdaam has quit IRC | 22:52 | |
*** Makdaam has joined #openstack-dev | 22:52 | |
*** Makdaam has joined #openstack-dev | 22:52 | |
*** buzztrol_ has joined #openstack-dev | 22:54 | |
*** dirk has quit IRC | 22:54 | |
*** sarob has quit IRC | 22:57 | |
*** kevinconway has quit IRC | 22:59 | |
*** dvarga has joined #openstack-dev | 23:02 | |
*** dvarga has quit IRC | 23:02 | |
jgriffith | dhellmann: ping | 23:06 |
*** nati_ueno has joined #openstack-dev | 23:07 | |
*** dbalog has left #openstack-dev | 23:08 | |
*** mikeoutland has quit IRC | 23:11 | |
*** salv-orlando has quit IRC | 23:14 | |
*** salv-orlando has joined #openstack-dev | 23:14 | |
*** flaper87 is now known as flaper87|afk | 23:15 | |
*** thedodd has quit IRC | 23:16 | |
*** peristeri has quit IRC | 23:16 | |
*** hartsocks has quit IRC | 23:18 | |
*** galstrom_zzz is now known as galstrom | 23:19 | |
*** rongze has joined #openstack-dev | 23:20 | |
*** jsavak has quit IRC | 23:20 | |
*** thedodd has joined #openstack-dev | 23:21 | |
*** vijendar has quit IRC | 23:22 | |
*** galstrom is now known as galstrom_zzz | 23:23 | |
*** giulivo has quit IRC | 23:24 | |
*** rongze has quit IRC | 23:25 | |
*** SergeyLukjanov has quit IRC | 23:26 | |
*** vartom11111113 has joined #openstack-dev | 23:26 | |
*** sushils has quit IRC | 23:28 | |
*** vartom11111112 has quit IRC | 23:28 | |
*** vartom11111114 has joined #openstack-dev | 23:29 | |
*** arosen has quit IRC | 23:29 | |
*** vipul is now known as vipul-away | 23:30 | |
*** vipul-away is now known as vipul | 23:30 | |
*** vartom11111113 has quit IRC | 23:31 | |
*** devoid has joined #openstack-dev | 23:32 | |
*** mkollaro has joined #openstack-dev | 23:32 | |
*** rcleere has quit IRC | 23:33 | |
*** erkrnt has quit IRC | 23:33 | |
*** erkrnt has joined #openstack-dev | 23:33 | |
*** thedodd has quit IRC | 23:35 | |
*** devoid has quit IRC | 23:35 | |
*** devoid has joined #openstack-dev | 23:35 | |
*** jmontemayor has quit IRC | 23:36 | |
*** dstanek has joined #openstack-dev | 23:37 | |
*** zz_ewindisch is now known as ewindisch | 23:40 | |
*** nermina has quit IRC | 23:43 | |
*** ruhe is now known as _ruhe | 23:44 | |
*** ewindisch is now known as zz_ewindisch | 23:45 | |
*** factor has quit IRC | 23:46 | |
*** vipul is now known as vipul-away | 23:46 | |
*** zz_ewindisch is now known as ewindisch | 23:49 | |
*** ewindisch is now known as zz_ewindisch | 23:53 | |
*** rnirmal has quit IRC | 23:54 | |
*** nelsnelson has quit IRC | 23:56 | |
*** dimsum has quit IRC | 23:57 | |
*** jecarey has quit IRC | 23:57 | |
*** buzztrol_ has quit IRC | 23:58 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!