Thursday, 2014-01-23

*** sarob has quit IRC00:00
morganfainbergbknudson, but i need to "fix" ldap storing the config values, config file hell, and then make load_backends not get called multiple times.00:00
bknudsonmorganfainberg: what a mess!00:00
bknudsonhow did it get this way?00:00
*** sarob has joined #openstack-dev00:00
morganfainbergbknudson, eh. because we inherited some ick.. and now we're paying for it00:00
*** flaper87 is now known as flaper87|afk00:01
*** buzztroll has joined #openstack-dev00:01
morganfainbergbknudson, the biggest blocker is that BaseLDAP stores the config values and tests expect to do load_backends or reload_backends00:01
morganfainbergbknudson, and "fixing" BaseLDAP will break henry-nash's incomplete per-domain thing that we're having to keep it00:01
bknudsonmorganfainberg: just get rid of that stuff it doesn't work.00:02
*** xmltok has joined #openstack-dev00:02
morganfainbergbknudson, i keep trying to, ayoung, and others keep saying "no we should fix it" instead00:02
*** networkstatic is now known as networkstatic_zZ00:02
bknudsonare they proposing patches to fix it?00:02
morganfainbergi tried to make the case at the hackathon00:02
morganfainbergi tried to make the case before00:02
morganfainbergkeep being told "nope"00:02
bknudsonI wish I could have been there.00:03
morganfainbergbknudson, we did miss ya there00:03
bknudsonI'll have enough ammunition for an argument that they need to send me to these things.00:03
morganfainbergphone brant is not as good as in-person brant00:03
morganfainberg:)00:03
bknudsonI really couldn't hear most of the time, so was easily distracted.00:03
*** BStokes999 has quit IRC00:03
morganfainbergbknudson, yeah, hard when we have 2-3 convos going on at once00:03
morganfainbergnot friendly to conf-call people00:04
*** tanisdl has quit IRC00:04
bknudsonmorganfainberg: it never works when there's only 1-2 people outside the room. need everyone on the phone00:04
morganfainbergbknudson, aye00:04
*** sarob has quit IRC00:05
morganfainbergbknudson, i think i have a way to make it "limp" along (mostly revolving around storing a ref to a config object) in BaseLDAP and we can argue the other points as we go00:05
morganfainbergbknudson, also, i need to "fix" the auth plugin stuff, dynamically created config options are bad.00:05
morganfainbergbknudson, so, i have my work cut out for me here ;)00:05
bknudsonmorganfainberg: well, if you can get it done and cut testing time in half you will be a hero in my book00:06
bknudson(in half only because my vm only has 2 cpus)00:06
morganfainbergbknudson, even w/ 4CPUs it will help a lot00:06
morganfainbergbknudson, i think this weekend is my timeline to sit down and try and get something proposed up for some eyes00:07
bknudsonclarkb: https://bugs.launchpad.net/keystone/+bug/1271775 -- I suppose you could add other projects if you don't like their log format.00:08
clarkbbknudson: swift is the only other remaining project and they aren't switching :(00:08
bknudsonclarkb: what's their excuse?00:09
*** epopt37 has quit IRC00:09
clarkbbknudson: they don't use oslo anything iirc00:09
bknudson(maybe I can use the same one)00:09
*** networkstatic_zZ has quit IRC00:09
*** epopt37 has joined #openstack-dev00:09
*** ykhodork has quit IRC00:10
*** Makdaam_ has joined #openstack-dev00:10
*** fbo is now known as fbo_away00:11
morganfainbergclarkb, :(00:11
*** Makdaam has quit IRC00:12
*** ifarkas has quit IRC00:12
*** pmathews has quit IRC00:16
*** RabidCicada has joined #openstack-dev00:20
*** CaptTofu has joined #openstack-dev00:21
*** sweston has joined #openstack-dev00:23
*** epopt37 has quit IRC00:24
*** rnirmal has quit IRC00:24
*** kbrierly has quit IRC00:24
*** epopt37 has joined #openstack-dev00:25
*** achampion has joined #openstack-dev00:26
*** cagrev__ has quit IRC00:26
*** nkinder has quit IRC00:28
*** sushils has quit IRC00:29
*** matsuhashi has joined #openstack-dev00:34
*** pablosan has quit IRC00:34
bknudsonclarkb: morganfainberg: looks like it's devstack sets up nova -- http://git.openstack.org/cgit/openstack-dev/devstack/tree/lib/nova#n43600:35
*** sushils has joined #openstack-dev00:36
*** stevemar has quit IRC00:37
ayoungmorganfainberg, and now we have a plan to fix it.00:37
clarkbbknudson: http://git.openstack.org/cgit/openstack-dev/devstack/tree/lib/heat#n86 it doesn't do it for heat though, I think the devstack line may not be necessary00:37
bknudsonclarkb: line 91: "setup_colorized_logging $HEAT_CONF DEFAULT tenant user"00:38
clarkbbknudson: we don't do colorized anymore in the gate though00:38
clarkbthat is a noop00:38
*** hemna is now known as hemnafk00:39
*** edmund has quit IRC00:39
*** mrodden has quit IRC00:39
*** praneshp has joined #openstack-dev00:39
bknudsonclarkb: ah, I'll disable that on my system then00:40
*** aeperezt has quit IRC00:41
dstanekmorganfainberg, bknudson, ayoung: is it wrong to want to use 'from six.moves import urllib' instead or 'from six import moves'?00:42
bknudsondstanek: pep8 checks that00:42
dstanekmorganfainberg, bknudson, ayoung: technically speaking urllib is a class that when accessed returns module objects00:42
bknudsonif it passes pep8 then it's ok00:43
dstanekbknudson: giving it a try now00:43
dstanekbknudson: well it doesn't complain00:48
*** asalkeld has quit IRC00:48
clarkbdstanek: make sure you run it as tox -epep8 and not pep8 directly00:49
clarkbas it is actually hacking checkign that00:49
*** melwitt has quit IRC00:49
dstanekclarkb: yeah, that's what i was doing00:49
*** mikeoutland has quit IRC00:49
bknudsonclarkb: looks like when I run without --log-config /etc/keystone/logging.conf it uses the common log format00:51
dstanekclarkb: actually that reminds me that i need to get that pbr change working00:51
*** clayb has quit IRC00:52
*** topol has quit IRC00:52
*** mkollaro has quit IRC00:54
*** buzztroll has quit IRC00:54
*** buzztroll has joined #openstack-dev00:54
clarkbbknudson: interesting, so maybe it is built in?00:54
*** mrodden has joined #openstack-dev00:54
bknudsonclarkb: y, it seems like none of the other exes set up by devstack use --log-config. Trying to see if there's a reason keystone has it...00:55
bknudsonmaybe just legacy00:55
bknudsonhere's nova-api: screen_it n-api "cd $NOVA_DIR && $NOVA_BIN_DIR/nova-api"00:56
bknudsonthey don't have any options00:56
*** aeperezt has joined #openstack-dev00:56
*** mrodden has quit IRC00:57
*** _cjones_ has joined #openstack-dev00:57
zulvishy:  because we have a lorotate file for keystone00:58
*** buzztroll has quit IRC00:58
*** asalkeld has joined #openstack-dev01:00
*** CaptTofu has quit IRC01:01
*** morazi has quit IRC01:01
*** willingc has joined #openstack-dev01:01
*** tan has quit IRC01:02
*** tan has joined #openstack-dev01:02
*** CaptTofu has joined #openstack-dev01:06
*** dkranz has quit IRC01:06
vishyzul: i understand that it is in the logrotate the question is why was it added01:08
vishynone of the other services restart after rotation01:08
*** praneshp has quit IRC01:09
*** henrynash_ has joined #openstack-dev01:09
zulvishy:  i dont remember01:09
markwashstevebaker: I have a few questions for you if you happen to be around01:10
*** praneshp has joined #openstack-dev01:10
stevebakermarkwash: sure01:10
markwashstevebaker: cool, first one01:11
*** henrynash has quit IRC01:11
*** henrynash_ is now known as henrynash01:11
*** thuc has joined #openstack-dev01:11
markwashat the glance summit, I wanna make sure every body is familiar enough with heat to talk about it as it relates to the images program, so I was looking to just steal somebody's slides and present them01:11
markwashany recommendations?01:11
stevebakerheh01:12
vishyzul: yeah it seems really nasty so i would like to know01:12
stevebakermarkwash: zaneb did an intro talk reasonably recently, with slides plus an infosheet01:12
*** thuc_ has quit IRC01:13
markwashis that one of the sets of slides linked on the heat openstack wiki?01:14
stevebakermarkwash: https://github.com/zaneb/presentations/tree/heat-introduction01:14
stevebakerpossibly, yes01:14
markwashokay cool01:14
*** vipul is now known as vipul-away01:14
markwashstevebaker: another question, I'm curious what you and heat-core in general thinks about the idea of saving / publishing templates?01:14
bknudsonclarkb: morganfainberg: there you go: https://review.openstack.org/#/c/68530/01:15
zanebmarkwash: it's good as long as they are version-controlled01:15
*** thuc has quit IRC01:15
stevebakermarkwash: we support it, but not in a way that sits behind the heat-api01:15
*** tdruiva has quit IRC01:15
bknudsonkeystone gets colorized logs01:15
markwashzaneb: version controlled? I can think of a few senses in which you might mean that01:16
*** prad_ has joined #openstack-dev01:16
*** ianw has quit IRC01:16
*** prad_ has quit IRC01:16
markwashversioning the template format? or versioning the template objects themselves01:16
stevebakermarkwash: we're happy to add any features required to support an external repository, like storing template hash with the template01:16
*** ianw has joined #openstack-dev01:16
zanebmarkwash: the template objects themselves. As in, if we encourage people not to store their templates in Git, we had better give them something just as good01:17
markwashzaneb: ah good comparison01:17
clarkbbknudson: neat that is simple01:17
*** prad has quit IRC01:17
bknudsonclarkb: it's great when you can make it better by removing complexity01:17
markwashstevebaker, zaneb: how do you think it would be most natural for heat to consume templates like that? client downloads template and sends it to heat? or client sends some reference/pointer to the template to heat?01:18
stevebakermarkwash: my personal desire is to use git as the template storage, and have hooks which keep the glance index up to date for discoverability and read-only fetching01:18
*** xingchao has joined #openstack-dev01:19
zanebmarkwash: templates can and do change over the life of a stack, and in fact that is kind of the point of Heat. So encouraging users to use workflows that take advantage of that, e.g. by allowing auditing, diffs, &c. is critical01:19
markwashthe one major advantage I could see for something like glance over git is, glance can actually *know* what types of resources are permissible01:19
markwashfor example, it could raise early warnings if you are creating a template that makes a reference to a flavor that doesn't exist (well kind of anyway)01:20
stevebakermarkwash: heat normallly just consumes APIs, so I think passing a ref/name to heat and getting heat to fetch from glance would be acceptable01:20
*** buzztroll has joined #openstack-dev01:21
zanebthe advantage of glance over git is that it is (a) inside the cloud's firewall and (b) is a trusted thing that heat-api could actually safely grab data from01:21
asalkeldgit as-a-service (gitlab template) https://review.openstack.org/#/c/65457/01:22
jaypipesSpamapS: thx. now I have a boat-load of reading for this weekend about McCabe complexity and Halstead volume. :)01:22
zanebmarkwash: the thing about knowing in advance what resource types are available is actually not that interesting imo01:23
stevebakergetting glance to call heat template-validate on template upload would probably be a useful feature, rather than having its own validate logic01:23
*** browne has quit IRC01:23
asalkeldI think that (glance validation) is out of scope for glance01:24
asalkeldglance should just store01:24
markwashso, glance's scope is a weird thing01:24
markwashbut glance doesn't even want to store stuff :-)01:24
markwashbecause its not very nice for large data which comes up pretty frequently01:24
asalkeld?01:24
markwashwhen glance was created, many people argued against it, and I think their points are valid if you view it as an image store01:25
*** browne has joined #openstack-dev01:25
markwashthe reason why big public clouds want something like glance is because for support reasons they don't want customers booting whatever bytes they want01:25
markwashso there needs to be a gate keeper01:26
markwashglance could do a similar thing for flavors01:26
markwashfor block device arrangements01:26
markwashfor nics01:26
markwashfor groupings of servers01:26
*** browne has quit IRC01:26
asalkeldso it's more of a sharing/not sharing service01:26
markwashwell, its lots of things, but imo that's what it makes sense to be01:27
markwashwell, sharing and hooks for ensuring the internal structure is approved01:27
markwashby the owner of the cloud01:27
stevebakerthat seems to match the original template repo use cases quite well01:28
asalkeldwell you can still add any image you want to glance right (for your own use)01:28
markwashbasically things that make it easier to boot something that works, or potentially prevent you from booting something that doesn't work01:28
stevebakerasalkeld: if your cloud lets you01:28
markwashasalkeld: not generally, public clouds don't allow direct upload01:28
clarkbthey should >_>01:28
markwashprivate clouds often restrict the upload to admins as well01:29
*** thuc has joined #openstack-dev01:29
*** sushils has quit IRC01:29
markwashclarkb: yes, but some of them want some opportunity to validate them01:29
markwashwhich is gross for various reasons01:29
markwashbut still perhaps practical01:29
asalkeldcould go the more social route01:29
stevebakerso much for our glorious image-based uploads future01:29
asalkeldand have +1s01:29
*** vipul-away is now known as vipul01:29
*** thuc_ has joined #openstack-dev01:29
stevebakerimage-based updates rather01:29
asalkeld(like app store systems)01:30
markwashclarkb: ugh. . first them -> clouds second them -> images01:30
markwashasalkeld: that's probably in the cards too01:30
clarkbI just want to be able to do less crazy things around images. today we snapshot stuff to have all of the gate data cached01:31
asalkeldand cloud admin has a big <approved> button too01:31
markwashmy angle is this, I'd like for people to be able to show up with relatively complex OVAs and have a path in openstack to convert them to openstack resources and HOT templates01:31
*** sthaha has joined #openstack-dev01:31
stevebakerI bet git hooks could be written to upload every commit to glance <-- the best of both worlds01:32
asalkeldstevebaker, that is what solum is for01:32
stevebakerright01:32
asalkeldyou git push your app, it triggers an image build01:32
asalkeldthen zuul test01:33
asalkeldthen heat deploy01:33
asalkeld(uploads to glance once the image build is done)01:33
*** thuc_ has quit IRC01:33
*** amcrn has quit IRC01:33
*** thuc has quit IRC01:33
*** nosnos has joined #openstack-dev01:34
markwashwell, thanks for your time, I think I've got a bit to go on at least01:35
*** epim has quit IRC01:36
ayoungbknudson, BTW, I was heads down redoing the token stuff IAW the notfications, I have not yet addressed your comments from review 24.  SAome of them may no longer be relevant, but the 2 I looked at are.  There will be another revision that incorporates them01:39
bknudsonayoung: ok, thanks for looking at it again.01:40
bknudsonsounds like it's getting better all the time.01:40
bknudson"plan to throw one away"01:40
*** asalkeld has quit IRC01:41
ayoungbknudson, thansk for the review.   I might  break this patch up again, but it is a little more cohesive now than it was when I split it before01:41
ayoungSplitting it would be more tricky to get right now, and I am not certain it would make it that much easier to review01:41
*** willingc has quit IRC01:41
bknudsonayoung: if I review it and see something that could be split out then I'll mention it.01:42
ayoungbknudson, probably the notifications stuff should be broken out.01:42
bknudsonayoung: sometimes I think it's easier to break it out so that you can think about it as more of a library01:42
ayoungI need to rebase it on top of a patch that morgan submitted01:42
ayoungcan you look at that patch?01:42
bknudsonayoung: morgan's or yours?01:42
ayounghttps://review.openstack.org/#/c/68470/01:43
ayoungmorgans01:43
morganfainbergbknudson, hm?01:43
*** cdub has quit IRC01:43
morganfainbergooh jenkins liked my patch >.<01:43
bknudsonayoung: I was expecting a 1000 line review.01:43
morganfainbergbknudson, phsaw.01:43
ayoungIt would be really easy on that patch to say "needs more testing"01:43
morganfainbergbknudson, i'll rebase it into something longer for you01:43
*** rtheis_ has quit IRC01:43
*** kushal has quit IRC01:43
ayoungmostly due to adding a new notification type, and maybe that should be split into a separate patch, along with the place I added those notifications in my patch01:44
*** ViswaV has quit IRC01:44
bknudsonmorganfainberg: this could be split up... what does new disabled action have to do with what's in the commit message?01:44
*** nelsnelson has quit IRC01:44
ayoungdoesn't01:44
ayoungit was from my patch01:45
morganfainbergbknudson, *points at ayoung*01:45
ayoungI need both changes, and he was working on the other part01:45
*** pcm_ has joined #openstack-dev01:45
*** xmltok has quit IRC01:45
morganfainbergbknudson, he asked me to join them...01:45
morganfainbergbknudson, it could be split though01:45
*** pcm_ has quit IRC01:45
ayoungmorganfainberg, I was more concerned about the behavior01:45
morganfainbergbknudson, and i wont complain if you ask it to be done01:45
ayoungyours dropped the exception ,but mine actually registers the callback01:45
morganfainbergayoung, yeah i was actually running into a meeting when you asked ;) wanted to get ya something "usable"01:45
*** pcm_ has joined #openstack-dev01:46
ayoungmorganfainberg, I can take it and run with it from here01:46
morganfainbergayoung, sure.  if ya want i'm about elbow deep in some auth plugin loading fixes, but i can split it up easily if you want.01:46
ayoungnah, I'll take it and run with it01:47
morganfainbergayoung, cool.01:47
*** yaguang has joined #openstack-dev01:47
morganfainbergbknudson, sorry I didn't split it up in advance01:47
bknudsonmorganfainberg: does python have something like http://dojotoolkit.org/reference-guide/1.9/dojo/aspect.html#id3 ?01:47
bknudsonessentially you can register a function to be called whenever another function is called.01:47
*** _cjones_ has quit IRC01:47
morganfainbergbknudson, try/finally?01:47
morganfainbergbknudson, actually... more like decorator01:48
bknudsonI guess it's kind of like a mock?01:48
ayoungbknudson, you mean that can be layerd on afterwards?01:48
morganfainbergbknudson, yeah, you could use a decorator and monkey patching.01:48
morganfainbergbut it'd be ugly01:48
ayoungdecorator is a-priori01:48
bknudsonayoung: yes, it would be layered afterwards.01:48
ayounghe means posteri01:48
ayounghttps://pypi.python.org/pypi/python-aspects/01:48
bknudsonessentially like call_after(orig_function, new_function)01:48
morganfainbergayoung, bknudson, if you changed the metaclass you could do it01:48
ayoungmorganfainberg, that is backewards01:49
ayoungthis is where you don't change the original code01:49
morganfainbergayoung, no, metaclass checks the after registration01:49
ayoungyou inject the aspect into cutpoint01:49
bknudsonayoung: that aspects library looks like the concept.01:49
ayoungbknudson, I workedwith aspects some in the Java world01:50
*** xarses has quit IRC01:50
bknudsonjava kind of requires a different jvm or compiler?01:50
ayoungNot 100% I like the idea of them, as them make it somewhat more difficult to se what is going on01:50
bknudsonit's easier with dynamic languages01:50
bknudsonyes, it's easy to be surprised.01:50
ayounghttp://en.wikipedia.org/wiki/AspectJ01:50
morganfainbergbknudson, it essentially monkey patches the code to reference a try'/finally method01:51
morganfainbergbknudson, aspects.py ayoung linked that is01:51
*** taps has quit IRC01:51
bknudsonit's probably better to make the places to listen in on explicit.01:51
ayoung++01:51
dstanekaspects are a neat idea, but when i've worked with them in practice too many people got confused01:51
ayoung++01:51
bknudsonbut for keystone we could define that as the manager class interface or something.01:51
morganfainbergbknudson, ++ aspects would make things worse than a metaclass change01:51
ayoungI say that we should let our notification code grown organically01:52
*** cdub has joined #openstack-dev01:52
ayoungI suspect that we are going to have to be careful01:52
morganfainbergayoung, for Juno we need to take a hard look at that stuff.01:52
*** xjiujiu has joined #openstack-dev01:52
ayoungthe question is how much data to put into the notification, and whether notified classes need to do a fetch from the DB to access more01:52
morganfainbergit might need some cleanup.01:52
*** sn6i23a has quit IRC01:52
morganfainbergayoung, yeah :(01:53
ayoungtypically, you put an object pointer into an event, and then have an implicit rule that the notification can only be used in the same thread, syncronously, or you put an object reference into the event, and it can pass thread boundaries01:54
*** nkinder has joined #openstack-dev01:54
ayoungwe are doing the latter01:54
dstanekhave you guys seen blinker signals?01:54
morganfainbergdstanek, people don't use those when changing lanes in LA01:54
ayoungI saw an old lady drive with one on for 3 miles01:54
morganfainbergayoung, ++01:54
*** alexpilotti has quit IRC01:54
*** mrodden has joined #openstack-dev01:54
dstanekmorganfainberg: :-)01:55
dstanekhttps://pypi.python.org/pypi/blinker01:55
ayoungI suspect it was on when she bought the car01:55
*** SumitNaiksatam has quit IRC01:55
ayounghttp://qt-project.org/doc/qt-4.8/signalsandslots.html01:55
bknudsonhttp://www.boost.org/doc/libs/1_55_0/doc/html/signals.html01:56
ayoungand http://www.mpich.org/ if you like scientific computing (massively parallel stuff)01:56
*** Tross has joined #openstack-dev01:56
*** vladikr has joined #openstack-dev01:56
bknudsonthe dojo js library used a connect() method but have since switched to the aspect library.01:57
ayoungdstanek, have you used the blinker stuff before?  Pretty straightforward?01:57
dstanekayoung: yes i've used it quite a bit01:57
ayoungI don;t hold Javascript up as the shining example to the world01:57
ayoungdstanek, is it what we should be using here>01:57
bknudsonayoung: you should try using it with dojo. It can be very pretty01:57
dstanekayoung: i wasn't following the entire conversation01:58
ayoungbknudson, I should have used Dojo on my last project.  I think they';ve switched over to it since I left01:58
ayoungdstanek, keystone/notifications.py01:58
*** sweston has quit IRC01:59
bknudsonhttps://repo.anl-external.org/viewvc/bgq-driver/V1R1M1/navigator/script/bluegene/navigator/Navigator.js?revision=1&view=markup&sortdir=down&pathrev=102:00
dstanekayoung: who is listening for notifications? just classed defined in the config?02:01
ayoungdstanek, they need to register02:01
bknudsondstanek: we sent notifications over rpc02:01
ayoungthat too02:01
bknudsondstanek: and now will also have notifications internally?02:01
dstanekayoung: it seems like maybe a similar design to blinker02:03
ayoungNIH02:03
ayoungWe really need to stop doing that02:04
morganfainbergayoung, sorry :( - i should have done more research.02:04
ayoungs'alright02:04
morganfainbergwell.02:04
morganfainbergwe all should have02:04
ayoungI suspect we needed a Keystone specific layer on top of blinker02:04
morganfainbergayoung, likely, we might be able to retrofit blinker in either case02:04
ayoungat least we have not rolled our own crypto02:04
morganfainbergayoung, oslo.crypto?02:04
dstanekayoung: yes, most projects i've used with blinker write a little shim to tailor the message format02:05
ayoungjust a wrapper02:05
ayoungdstanek, keep it in the back of your head for an idle day02:05
ayoungwe would need blinker in global requirements and all that02:05
*** stevemar has joined #openstack-dev02:05
morganfainbergnod.02:05
morganfainbergit's really hard to keep track of everything python library wise when reviewing code.02:06
morganfainberg=/02:06
ayoungWe have dstanek to do that for us now02:06
dstanekhere is a real life impl of blinker signals http://docs.mongoengine.org/guide/signals.html02:06
dstanekayoung: yay!02:06
morganfainberghehe02:06
*** teran has quit IRC02:07
*** gokrokve has quit IRC02:07
ayoungseriosuly, knowing when to use an existing lib and when to roll your own requires a lot of language specific experience.  We need more serious Pythonistas , glad to have you aboard for that reason and more.02:07
*** gokrokve has joined #openstack-dev02:07
bknudsonpython has a library for everything02:08
bknudsonor 2 libraries for everything02:08
*** csd has quit IRC02:08
dstanekpython suffers from not-invented-here02:08
ayoungbknudson, https://review.openstack.org/#/c/68470/3/keystone/notifications.py  better?02:09
ayoungpython also suffers from "I have a small problem with your impl so I am going to do my own."02:09
ayoungrequests vs httplib anyone?02:10
bknudsonayoung:  https://review.openstack.org/#/c/68470/3/keystone/notifications.py still has the extra "disabled" stuff. --- and I don't have a problem with leaing RESOURCE_TYPES around if it's for debug... although a log might be easier to analyze.02:10
ayoungI thikn that the keys in the map will be there to debug with which will be less surprising, and also less redundant02:11
ayoungas for the disabled...though I scrapped that02:11
*** xjiujiu has quit IRC02:12
morganfainbergayoung, https://review.openstack.org/#/c/68470/3/keystone/notifications.py still has "disabled" in the frozenset02:12
*** gokrokve has quit IRC02:12
ayoungah...missed that02:12
*** xjiujiu has joined #openstack-dev02:12
*** Tross has quit IRC02:13
ayounghttps://review.openstack.org/#/c/68470/4/keystone/notifications.py02:13
ayoungdstanek, care to look as well02:14
dstanekayoung: sure02:14
*** rraja has quit IRC02:15
*** aveiga has quit IRC02:15
*** david-lyle_ has joined #openstack-dev02:15
*** smurugesan1 has joined #openstack-dev02:16
*** smurugesan has quit IRC02:16
morganfainbergwtf.02:17
morganfainbergdid we change how tox works?02:17
morganfainbergbecause i'm getting strange fail-fast behavior now even w/o runtests02:17
morganfainberg*blink* what did I break02:18
morganfainberg... something isn't making any sense02:18
dstanekmorganfainberg: i added fast fail to runtests, but not to vanilla tox02:19
morganfainbergdstanek, i somehow broke tox.02:19
morganfainbergdstanek, and i'm not getting anything useful out of it either.02:19
morganfainbergweird.02:20
*** coolsvap has quit IRC02:21
*** alex_xu has joined #openstack-dev02:22
morganfainbergoh02:22
morganfainberg... broken addCleanup02:22
morganfainbergwow, that produces no useful output02:22
morganfainbergstill broken02:23
morganfainberghow did ... i break this02:23
*** vkozhukalov has joined #openstack-dev02:23
*** rods has quit IRC02:23
*** coolsvap has joined #openstack-dev02:24
*** xjiujiu has quit IRC02:25
*** xjiujiu has joined #openstack-dev02:25
*** krotscheck has quit IRC02:26
*** bswartz has quit IRC02:27
ayoungbknudson, can you just clean up the commit message https://review.openstack.org/#/c/66596/202:27
*** angdraug has quit IRC02:28
ayoungshardy is long asleep in England on this Saint Crispians day02:28
*** galstrom_zzz is now known as galstrom02:29
*** Mandell has quit IRC02:30
*** buzztroll has quit IRC02:31
*** xjiujiu has quit IRC02:31
*** buzztroll has joined #openstack-dev02:31
*** xjiujiu has joined #openstack-dev02:31
*** HT_Sergio has quit IRC02:32
bknudsonayoung: do you agree the commit message should be changed?02:33
ayoungbknudson, yep02:33
bknudsonayoung: ok02:33
*** Tross has joined #openstack-dev02:33
morganfainbergdstanek, ever seen this?02:34
morganfainbergTraceback (most recent call last):02:34
morganfainberg_StringException02:34
dstanekthat's all you get?  just those two lines?02:35
morganfainbergyep02:35
morganfainbergthats it02:35
morganfainbergerll02:35
morganfainbergwell, i get a fail on the test too02:35
dstanekno that's strange - are you just running 'tox -epy27'?02:35
*** buzztroll has quit IRC02:35
morganfainbergthat's run tests02:36
morganfainbergdstanek, tox gives no indication either02:36
*** buzztroll has joined #openstack-dev02:36
morganfainbergi tried a clean git repo, tried new venv02:36
morganfainbergetc02:36
morganfainbergnothing02:36
bknudsonayoung: https://review.openstack.org/#/c/66596/2 done02:36
morganfainbergdstanek, ok i found the code issue but.... i am not gettign anything useful... *goes to ponder on what the heck is going on*02:37
*** aveiga has joined #openstack-dev02:37
*** coolsvap has quit IRC02:37
morganfainbergoh02:37
morganfainbergno.02:37
morganfainberghm02:37
bknudsonmorganfainberg: old venv?02:38
morganfainbergbknudson, nope02:38
bknudsonmorganfainberg: tox isn't running?02:39
morganfainbergbknudson, it is, just fails right off the bat, no output02:39
*** xjiujiu has quit IRC02:39
morganfainbergsays 3 tests run.02:39
morganfainbergbut nothing useful02:39
morganfainbergi'm digging into what is going on now, at least i know it's my new code.02:40
*** xjiujiu has joined #openstack-dev02:40
*** cdub has quit IRC02:41
*** asalkeld has joined #openstack-dev02:42
*** bswartz has joined #openstack-dev02:43
*** fpatwa has joined #openstack-dev02:44
*** fpatwa has quit IRC02:45
*** fpatwa_ has joined #openstack-dev02:45
*** rockyg has quit IRC02:46
ayoungmorganfainberg, could be a syntax error02:47
*** xjiujiu has quit IRC02:48
*** xjiujiu has joined #openstack-dev02:48
ayoungI find things like that don't always produce output.  I end up seeing the stack trace in eclipse02:48
morganfainbergayoung, no, if i don't call my new method, it continues02:49
morganfainbergso not syntax02:49
morganfainbergsomething ... odd02:49
ayoungrun in the debugger02:49
morganfainbergayoung, can't atm,02:49
*** mrodden has quit IRC02:49
morganfainbergayoung, need to rebuild some stuff to make that happen02:49
*** erkules_ has joined #openstack-dev02:49
ayoungdoes it happen if you run the whole test suite and also when you run the individual test02:49
*** galstrom is now known as galstrom_zzz02:50
morganfainbergit fails the tests after 3s02:50
*** fpatwa_ has quit IRC02:50
morganfainbergdoesn't even run the whole suite02:50
ayoungwhat happens when you run just that test?02:50
morganfainbergayoung, aha.02:51
*** gokrokve has joined #openstack-dev02:51
morganfainbergayoung, it was trying to use a list instead of a {}02:51
morganfainbergtypo on my part02:51
*** tan has quit IRC02:51
*** _cjones_ has joined #openstack-dev02:51
morganfainbergbut that is the first time i've seen 0 output02:51
morganfainbergrather than a stack-trace02:52
*** ramishra has joined #openstack-dev02:52
*** erkules has quit IRC02:52
*** glenng has joined #openstack-dev02:52
*** tan has joined #openstack-dev02:53
*** galstrom_zzz is now known as galstrom02:54
*** xjiujiu has quit IRC02:55
*** glenng1 has joined #openstack-dev02:56
*** glenng1 has quit IRC02:56
*** xjiujiu has joined #openstack-dev02:56
*** tan has quit IRC02:56
*** glenng1 has joined #openstack-dev02:56
*** tan has joined #openstack-dev02:56
*** glenng1 has quit IRC02:57
*** xjiujiu has joined #openstack-dev02:57
*** glenng1 has joined #openstack-dev02:57
*** glenng has quit IRC02:58
morganfainbergdstanek, wow, something we merged recently is making tox fail with no output in some cases.02:58
*** mriedem has quit IRC02:59
morganfainbergi think02:59
*** jasdeepH has quit IRC02:59
*** sballe_ has quit IRC02:59
dstanekmorganfainberg: i haven't seen that yet02:59
*** sballe_ has joined #openstack-dev03:00
morganfainbergdstanek, it's really odd.03:00
dstaneki'll try in a new env and see if i can reproduce03:00
morganfainbergdstanek, it has to do w/ my new code.  but .03:00
morganfainbergdstanek, this seems insane03:00
*** rraja has joined #openstack-dev03:00
morganfainbergoh of course.03:01
*** sthaha has quit IRC03:01
dstanekmorganfainberg: can you put your patch somewhere?03:02
morganfainbergdstanek, yeah but i'll need to do it once i figure out how to change the code.  can't even run it like it is because it makes the assumption that the auth controller will be instantiated once03:03
morganfainbergwell... that just isn't true03:03
*** sthaha has joined #openstack-dev03:03
*** sthaha has quit IRC03:03
*** spzala has quit IRC03:03
morganfainbergdstanek, trying to unwind the auth_plugin options.03:03
*** buzztroll has quit IRC03:04
morganfainbergdstanek, we were lazy loading them before, so i tried to make them load up front, running into strange issues03:04
morganfainbergdstanek, well.. not so strange.03:04
*** buzztroll has joined #openstack-dev03:04
*** sthaha has joined #openstack-dev03:04
*** sthaha has quit IRC03:04
*** sthaha has joined #openstack-dev03:04
*** SumitNaiksatam has joined #openstack-dev03:07
ayoungmorganfainberg, did you try run_tests.sh?03:07
morganfainbergayoung, yeah it works better if i skip some of the first tests03:08
ayoungcool03:08
morganfainbergayoung, but if i don't skip, it does the same thing03:08
*** sballe_ has quit IRC03:08
morganfainbergit's... kinda ugly03:08
*** buzztroll has quit IRC03:09
ayoungI hate it when I do git commit --amend and I what I really want is a new commit.03:09
*** emagana has quit IRC03:10
*** nati_ueno has quit IRC03:10
*** xjiujiu has quit IRC03:10
*** jhesketh has quit IRC03:10
*** xjiujiu has joined #openstack-dev03:11
*** jhesketh has joined #openstack-dev03:11
dstanekayoung: you can get your original un-amended commmit from the reflog03:11
bknudsonayoung: I clear out the commit message03:11
bknudsonthere's probably a better way03:11
ayoungbknudson, yeah..I tried to do that and messed it up, too.  I ended up just checking out the origian HEAD and cherry-picking my patch on top03:12
*** sdake-ooo is now known as sdake03:13
*** tan has quit IRC03:13
*** tan has joined #openstack-dev03:13
*** xjiujiu has quit IRC03:16
*** xjiujiu has joined #openstack-dev03:16
*** gokrokve has quit IRC03:17
*** ykhodork has joined #openstack-dev03:18
*** ramishra has quit IRC03:19
*** ramishra has joined #openstack-dev03:20
*** Tross has quit IRC03:20
*** terrylhowe has quit IRC03:22
*** rraja has quit IRC03:23
ayoungbknudson, morganfainberg https://review.openstack.org/#/c/68548/ is the rest of the notifications changes03:24
*** ramishra has quit IRC03:24
*** xjiujiu has quit IRC03:25
*** xjiujiu has joined #openstack-dev03:26
*** fpatwa has joined #openstack-dev03:26
*** paragan has joined #openstack-dev03:27
*** doug_shelley66 has quit IRC03:29
*** xarses has joined #openstack-dev03:30
*** xjiujiu has quit IRC03:31
*** xjiujiu has joined #openstack-dev03:32
*** smurugesan1 has quit IRC03:36
*** fpatwa has quit IRC03:37
*** aeperezt has quit IRC03:41
*** ramishra has joined #openstack-dev03:44
*** asalkeld has quit IRC03:44
*** arnaud__ has quit IRC03:44
*** arnaud has quit IRC03:45
*** pcm_ has quit IRC03:45
*** xjiujiu has quit IRC03:48
*** aveiga has quit IRC03:48
*** xjiujiu has joined #openstack-dev03:48
*** gokrokve has joined #openstack-dev03:49
*** bswartz1 has joined #openstack-dev03:51
*** bswartz has quit IRC03:51
*** cdub has joined #openstack-dev03:51
*** faramir has joined #openstack-dev03:52
*** bswartz1 is now known as bswartz03:53
*** galstrom is now known as galstrom_zzz03:54
*** jckasper_ has joined #openstack-dev03:55
*** jckasper has quit IRC03:55
*** RabidCicada has quit IRC03:55
*** ArxCruz has quit IRC03:55
*** aditirav has joined #openstack-dev03:57
*** aditirav has quit IRC03:58
*** aditirav has joined #openstack-dev03:58
*** _cjones_ has quit IRC04:01
*** jasdeepH has joined #openstack-dev04:01
*** xjiujiu has quit IRC04:01
*** xjiujiu has joined #openstack-dev04:01
*** aswadrangnekar has joined #openstack-dev04:04
*** thuc_ has joined #openstack-dev04:06
*** david_lyle has joined #openstack-dev04:07
*** xjiujiu has quit IRC04:07
*** yamahata has joined #openstack-dev04:08
*** xjiujiu has joined #openstack-dev04:08
*** david-lyle_ has quit IRC04:09
*** zaitcev_ has quit IRC04:09
*** carl_baldwin has joined #openstack-dev04:10
*** carl_baldwin has quit IRC04:11
*** ayoung has quit IRC04:12
*** CaptTofu has quit IRC04:14
*** browne has joined #openstack-dev04:14
morganfainbergstevemar, https://review.openstack.org/#/c/68551 1 of... a bunch...04:14
*** rcleere has joined #openstack-dev04:15
*** sthaha has quit IRC04:15
morganfainbergannnnd with that.04:15
morganfainbergi'm out.04:15
*** buzztroll has joined #openstack-dev04:15
stevemarhaha, morganfainberg, and with that i'm out too04:16
*** xjiujiu has quit IRC04:17
*** xjiujiu has joined #openstack-dev04:17
*** carl_baldwin has joined #openstack-dev04:17
*** mikeoutland has joined #openstack-dev04:18
*** carl_baldwin has quit IRC04:21
*** harlowja is now known as harlowja_away04:23
*** carl_baldwin has joined #openstack-dev04:25
*** sthaha has joined #openstack-dev04:25
*** mikeoutland has quit IRC04:26
*** stevemar has quit IRC04:27
*** novas0x2a|laptop has quit IRC04:27
*** carl_baldwin has quit IRC04:29
*** glenng1 has quit IRC04:29
*** Mandell has joined #openstack-dev04:31
*** paragan has quit IRC04:31
*** markmcclain has joined #openstack-dev04:32
*** buzztrol_ has joined #openstack-dev04:33
*** xjiujiu has quit IRC04:33
*** buzztroll has quit IRC04:33
*** xjiujiu has joined #openstack-dev04:34
*** morganfainberg is now known as morganfainberg|z04:35
*** buzztrol_ has quit IRC04:37
*** buzztroll has joined #openstack-dev04:38
*** Tross has joined #openstack-dev04:38
*** giulivo has quit IRC04:38
*** praneshp has quit IRC04:41
*** xjiujiu has quit IRC04:42
*** markmcclain has quit IRC04:42
*** buzztroll has quit IRC04:42
*** markwash_ has joined #openstack-dev04:43
*** markmcclain has joined #openstack-dev04:43
*** markwash has quit IRC04:43
*** markwash_ is now known as markwash04:43
*** xjiujiu has joined #openstack-dev04:43
*** praneshp has joined #openstack-dev04:43
*** thuc_ has quit IRC04:43
*** thuc has joined #openstack-dev04:44
*** praneshp has quit IRC04:44
*** colinmcnamara has joined #openstack-dev04:45
*** thuc has quit IRC04:48
*** xjiujiu has quit IRC04:50
*** xjiujiu has joined #openstack-dev04:51
*** smurugesan has joined #openstack-dev04:52
*** colinmcnamara has quit IRC04:52
SpamapSjaypipes: hah, you're welcome! Fascinating stuff!04:53
*** yamahata has quit IRC04:57
*** asalkeld has joined #openstack-dev04:57
*** xjiujiu has quit IRC04:59
*** _cjones_ has joined #openstack-dev05:00
*** neelashah has left #openstack-dev05:01
*** nati_ueno has joined #openstack-dev05:03
*** paragan has joined #openstack-dev05:03
*** nati_uen_ has joined #openstack-dev05:05
*** jamespage has quit IRC05:05
*** buzztroll has joined #openstack-dev05:05
*** jamespage has joined #openstack-dev05:06
*** _cjones_ has quit IRC05:06
*** nati_ueno has quit IRC05:08
*** harlowja_away is now known as harlowja05:10
*** alex_klimov has joined #openstack-dev05:12
*** willingc has joined #openstack-dev05:13
*** gokrokve has quit IRC05:14
*** cmyster has joined #openstack-dev05:14
*** mikeoutland has joined #openstack-dev05:15
*** buzztroll has quit IRC05:18
*** buzztroll has joined #openstack-dev05:18
*** cdub has quit IRC05:20
*** yamahata has joined #openstack-dev05:20
*** browne has quit IRC05:21
*** buzztroll has quit IRC05:23
*** nshaikh has joined #openstack-dev05:23
*** dave_tucker is now known as dave_tucker_zzz05:26
*** ytwu has quit IRC05:29
*** ytwu has joined #openstack-dev05:29
*** willingc has quit IRC05:30
*** praneshp has joined #openstack-dev05:30
*** neeti has joined #openstack-dev05:31
*** neelashah has joined #openstack-dev05:31
*** _cjones_ has joined #openstack-dev05:32
*** redhat has quit IRC05:34
*** rohitk has joined #openstack-dev05:34
*** willingc has joined #openstack-dev05:36
*** _cjones_ has quit IRC05:38
*** afazekas has quit IRC05:40
*** ykhodork has quit IRC05:41
*** coolsvap has joined #openstack-dev05:41
*** ig has quit IRC05:41
*** ig1 has joined #openstack-dev05:42
*** ig1 has quit IRC05:43
*** ig has joined #openstack-dev05:43
*** buzztroll has joined #openstack-dev05:44
*** teran has joined #openstack-dev05:44
*** gokrokve has joined #openstack-dev05:45
*** SergeyLukjanov_ is now known as SergeyLukjanov05:46
*** paragan has quit IRC05:48
*** faramir has quit IRC05:49
*** SergeyLukjanov is now known as SergeyLukjanov_05:49
*** nati_ueno has joined #openstack-dev05:53
*** nati_ueno has quit IRC05:53
*** nati_ueno has joined #openstack-dev05:54
*** dave_tucker_zzz is now known as dave_tucker05:54
*** faramir has joined #openstack-dev05:56
*** nati_uen_ has quit IRC05:56
*** buzztroll has quit IRC05:59
*** aditirav_ has joined #openstack-dev05:59
*** buzztroll has joined #openstack-dev05:59
*** tan has quit IRC06:00
*** willingc has quit IRC06:01
*** yeylon_ has joined #openstack-dev06:01
*** tan has joined #openstack-dev06:01
*** Mandell_ has joined #openstack-dev06:02
*** _cjones_ has joined #openstack-dev06:02
*** markmcclain has quit IRC06:02
*** aditirav has quit IRC06:03
*** aditirav_ is now known as aditirav06:03
*** avishay has quit IRC06:03
*** paragan has joined #openstack-dev06:04
*** paragan has quit IRC06:04
*** paragan has joined #openstack-dev06:04
*** buzztroll has quit IRC06:04
*** dave_tucker is now known as dave_tucker_zzz06:04
*** dave_tucker_zzz is now known as dave_tucker06:04
*** Mandell has quit IRC06:05
*** rcleere has quit IRC06:06
*** _cjones_ has quit IRC06:08
*** hartsocks has left #openstack-dev06:08
*** renlt has joined #openstack-dev06:11
*** buzztroll has joined #openstack-dev06:11
*** praneshp_ has joined #openstack-dev06:13
*** Ryan_Lane has quit IRC06:14
*** Ryan_Lane has joined #openstack-dev06:14
*** teran has quit IRC06:14
*** carlp has quit IRC06:14
*** CaptTofu has joined #openstack-dev06:14
*** paragan_ has joined #openstack-dev06:15
*** praneshp has quit IRC06:16
*** praneshp_ is now known as praneshp06:16
*** paragan has quit IRC06:16
*** CaptTofu has quit IRC06:19
*** irenab has joined #openstack-dev06:19
*** mikeoutland has quit IRC06:20
*** mikeoutland has joined #openstack-dev06:21
*** mikeoutland has quit IRC06:21
*** afazekas has joined #openstack-dev06:22
*** afazekas has quit IRC06:22
*** uvg has joined #openstack-dev06:24
*** arborism has joined #openstack-dev06:31
*** csd has joined #openstack-dev06:35
*** aditirav has quit IRC06:35
*** aditirav has joined #openstack-dev06:36
*** aditirav has quit IRC06:37
*** aditirav has joined #openstack-dev06:37
*** gyee has quit IRC06:38
*** neoXsys has quit IRC06:41
*** buzztroll has quit IRC06:43
*** buzztroll has joined #openstack-dev06:43
*** arborism is now known as amcrn06:44
*** harlowja is now known as harlowja_away06:45
*** irenab has quit IRC06:45
*** buzztrol_ has joined #openstack-dev06:46
*** buzztroll has quit IRC06:47
*** garyk has joined #openstack-dev06:47
*** rdas has joined #openstack-dev06:48
*** nati_uen_ has joined #openstack-dev06:48
*** matsuhashi has quit IRC06:50
*** nati_ueno has quit IRC06:51
*** neeti has quit IRC06:52
*** odyssey4me has joined #openstack-dev06:53
*** matsuhashi has joined #openstack-dev06:54
*** neeti has joined #openstack-dev06:54
*** faramir has quit IRC06:59
*** dave_tucker is now known as dave_tucker_zzz07:00
*** CaptTofu has joined #openstack-dev07:00
*** vartom1111111111 has joined #openstack-dev07:02
*** buzztrol_ has quit IRC07:04
*** neeti has quit IRC07:04
*** neeti has joined #openstack-dev07:04
*** buzztroll has joined #openstack-dev07:04
*** dave_tucker_zzz is now known as dave_tucker07:05
*** CaptTofu has quit IRC07:05
*** buzztroll has quit IRC07:08
*** asalkeld has quit IRC07:09
*** ig has quit IRC07:10
*** buzztroll has joined #openstack-dev07:10
*** buzztroll has joined #openstack-dev07:10
*** ig has joined #openstack-dev07:10
*** gokrokve has quit IRC07:11
*** yolanda_ has joined #openstack-dev07:15
*** amcrn has quit IRC07:15
*** tkammer has joined #openstack-dev07:16
*** mrda is now known as mrda_away07:16
*** belmoreira has joined #openstack-dev07:16
*** Drankis has joined #openstack-dev07:17
*** belmoreira has quit IRC07:18
*** belmoreira has joined #openstack-dev07:18
*** avishayb has joined #openstack-dev07:18
*** gokrokve has joined #openstack-dev07:18
*** belmoreira has quit IRC07:19
*** yolanda_ has quit IRC07:21
*** emagana has joined #openstack-dev07:22
*** asalkeld has joined #openstack-dev07:22
*** dstanek has quit IRC07:22
*** belmoreira has joined #openstack-dev07:22
*** gokrokve has quit IRC07:22
*** romcheg has joined #openstack-dev07:25
*** cnesa has quit IRC07:28
*** buzztroll has quit IRC07:28
*** buzztroll has joined #openstack-dev07:29
*** jprovazn has joined #openstack-dev07:30
*** amotoki has joined #openstack-dev07:30
*** buzztroll has quit IRC07:31
*** erkrnt has quit IRC07:31
*** buzztroll has joined #openstack-dev07:32
*** redhat has joined #openstack-dev07:32
*** mrunge has joined #openstack-dev07:34
*** buzztroll has quit IRC07:36
*** mindpixel has joined #openstack-dev07:37
*** amcrn has joined #openstack-dev07:37
*** vartom1111111112 has joined #openstack-dev07:37
*** vartom1111111111 has quit IRC07:37
*** csd has quit IRC07:38
*** odyssey4me has quit IRC07:39
*** mkollaro has joined #openstack-dev07:40
*** odyssey4me has joined #openstack-dev07:40
*** boris-42 has quit IRC07:41
*** gokrokve has joined #openstack-dev07:41
*** paragan_ has quit IRC07:42
*** nati_ueno has joined #openstack-dev07:42
*** krast has quit IRC07:44
*** che-arne has joined #openstack-dev07:45
*** emagana has quit IRC07:45
*** nati_uen_ has quit IRC07:46
*** yamahata has quit IRC07:46
*** gokrokve has quit IRC07:46
*** gokrokve has joined #openstack-dev07:47
*** odyssey4me has quit IRC07:49
*** redhat has quit IRC07:49
*** djoreilly has joined #openstack-dev07:49
*** ramishra_ has joined #openstack-dev07:51
*** ramishra has quit IRC07:52
*** evgenyf has joined #openstack-dev07:53
*** paragan_ has joined #openstack-dev07:53
*** paragan_ has quit IRC07:53
*** paragan_ has joined #openstack-dev07:53
*** djoreilly has left #openstack-dev07:54
*** garyk has quit IRC07:54
*** ifarkas has joined #openstack-dev07:54
*** henrynash has quit IRC07:55
*** yolanda_ has joined #openstack-dev07:55
*** gszasz has joined #openstack-dev07:56
*** odyssey4me has joined #openstack-dev07:57
*** buzztroll has joined #openstack-dev07:59
*** corXi has joined #openstack-dev07:59
*** teran has joined #openstack-dev08:01
*** xga has joined #openstack-dev08:02
*** yamahata has joined #openstack-dev08:02
*** bauzas has joined #openstack-dev08:03
*** buzztroll has quit IRC08:03
*** _cjones_ has joined #openstack-dev08:04
*** omachace has joined #openstack-dev08:06
*** oro has joined #openstack-dev08:07
*** jcoufal has joined #openstack-dev08:08
*** _cjones_ has quit IRC08:08
*** xingchao has quit IRC08:09
*** xgsa has joined #openstack-dev08:10
*** julienvey_ has joined #openstack-dev08:10
*** flaper87|afk is now known as flaper8708:12
*** s2r2_ has joined #openstack-dev08:12
*** akrivoka has quit IRC08:12
*** dkuffner has joined #openstack-dev08:12
*** sushil_ has joined #openstack-dev08:15
*** avishay has joined #openstack-dev08:16
*** thouveng has joined #openstack-dev08:16
*** mkollaro has quit IRC08:18
*** xqueralt has joined #openstack-dev08:20
*** morganfainberg|z has quit IRC08:22
*** statik has quit IRC08:22
*** shane-wang_away has quit IRC08:23
*** shane-wang_away has joined #openstack-dev08:23
*** florentflament has joined #openstack-dev08:23
*** jdurgin1 has quit IRC08:25
*** morganfainberg|z has joined #openstack-dev08:25
*** morganfainberg|z is now known as morganfainberg08:25
*** andreaf has joined #openstack-dev08:25
*** statik has joined #openstack-dev08:25
*** krast has joined #openstack-dev08:27
*** uvg has quit IRC08:27
*** JordanP has joined #openstack-dev08:27
*** unmeshg_ has joined #openstack-dev08:28
*** markwash has quit IRC08:29
*** markwash has joined #openstack-dev08:30
*** markwash has quit IRC08:31
*** jistr has joined #openstack-dev08:32
*** sergmelikyan has joined #openstack-dev08:33
*** gsamfira has joined #openstack-dev08:33
*** jcoufal has quit IRC08:34
*** jcoufal has joined #openstack-dev08:35
*** yaguang has quit IRC08:36
*** neeti_ has joined #openstack-dev08:37
*** vartom1111111113 has joined #openstack-dev08:39
*** vartom1111111112 has quit IRC08:39
*** neeti has quit IRC08:39
*** vartom1111111114 has joined #openstack-dev08:40
*** praneshp has quit IRC08:40
*** Nikolay_St has quit IRC08:41
*** nacim has joined #openstack-dev08:41
*** sumanthns has joined #openstack-dev08:42
*** sahid has joined #openstack-dev08:42
*** renlt has quit IRC08:42
*** Nikolay_St has joined #openstack-dev08:43
*** vartom1111111113 has quit IRC08:43
*** amuller has joined #openstack-dev08:46
*** I159 has joined #openstack-dev08:46
*** jyhc has quit IRC08:46
*** mancdaz_away is now known as mancdaz08:47
*** jyhc has joined #openstack-dev08:48
*** yamahata has quit IRC08:53
*** MaxV has joined #openstack-dev08:54
*** mindpixel has quit IRC08:55
*** che-arne has quit IRC08:56
*** marekd|away is now known as marekd08:56
*** mmagr has joined #openstack-dev08:57
*** mindpixel has joined #openstack-dev08:58
*** pixelb has joined #openstack-dev08:59
*** henrynash has joined #openstack-dev09:00
*** buzztroll has joined #openstack-dev09:00
*** CaptTofu has joined #openstack-dev09:01
*** buzztroll has quit IRC09:05
*** oubiwann has quit IRC09:05
*** fbo_away is now known as fbo09:06
*** teran has quit IRC09:06
*** ramishra_ has quit IRC09:06
*** smurugesan has quit IRC09:06
*** vkozhukalov has quit IRC09:06
*** jdennis has quit IRC09:06
*** bknudson has quit IRC09:06
*** CaptTofu has quit IRC09:06
*** oubiwann has joined #openstack-dev09:06
*** Alexei_987 has joined #openstack-dev09:07
*** akrivoka has joined #openstack-dev09:09
*** jasdeepH has quit IRC09:09
*** claxton has joined #openstack-dev09:09
*** d0ugal has quit IRC09:10
*** yassine has joined #openstack-dev09:10
*** d0ugal has joined #openstack-dev09:10
*** irenab has joined #openstack-dev09:10
*** jpich has joined #openstack-dev09:10
*** Mandell_ has quit IRC09:11
*** teran has joined #openstack-dev09:11
*** ramishra_ has joined #openstack-dev09:11
*** smurugesan has joined #openstack-dev09:11
*** vkozhukalov has joined #openstack-dev09:11
*** jdennis has joined #openstack-dev09:11
*** bknudson has joined #openstack-dev09:11
*** yamahata has joined #openstack-dev09:11
*** NikitaKonovalov_ is now known as NikitaKonovalov09:12
*** markmc has joined #openstack-dev09:13
*** teran has quit IRC09:13
*** ramishra_ has quit IRC09:13
*** smurugesan has quit IRC09:13
*** vkozhukalov has quit IRC09:13
*** jdennis has quit IRC09:13
*** bknudson has quit IRC09:13
*** vkozhukalov has joined #openstack-dev09:14
*** smurugesan has joined #openstack-dev09:14
*** derekh has joined #openstack-dev09:14
*** safchain has joined #openstack-dev09:14
*** jdennis has joined #openstack-dev09:14
*** teran has joined #openstack-dev09:14
*** ramishra has joined #openstack-dev09:14
*** Ryan_Lane has quit IRC09:16
*** salv-orlando has quit IRC09:17
*** smurugesan has quit IRC09:19
*** nmagnezi has joined #openstack-dev09:20
*** ramishra_ has joined #openstack-dev09:21
*** ramishra has quit IRC09:22
*** johnthetubaguy has joined #openstack-dev09:22
*** mancdaz is now known as mancdaz_away09:22
*** mancdaz_away is now known as mancdaz09:23
*** henrynash has quit IRC09:24
*** garyk has joined #openstack-dev09:26
*** athomas has joined #openstack-dev09:27
*** dshulyak has joined #openstack-dev09:28
*** iartarisi has joined #openstack-dev09:29
*** ramishra_ has quit IRC09:30
*** beagles has quit IRC09:30
*** b3nt_pin has joined #openstack-dev09:35
*** xga has quit IRC09:36
*** jtomasek has joined #openstack-dev09:36
*** xga has joined #openstack-dev09:36
*** danpb has joined #openstack-dev09:37
*** Hritcu has joined #openstack-dev09:40
*** aditirav has quit IRC09:41
*** mindpixel has quit IRC09:42
*** claxton has quit IRC09:43
*** aswadrangnekar has quit IRC09:43
*** sumanthns has quit IRC09:43
*** coolsvap has quit IRC09:43
*** claxton has joined #openstack-dev09:45
*** coolsvap has joined #openstack-dev09:45
*** sumanthns has joined #openstack-dev09:45
*** johnthetubaguy1 has joined #openstack-dev09:45
*** boris-42 has joined #openstack-dev09:46
*** amuller has quit IRC09:47
*** johnthetubaguy has quit IRC09:47
*** claxton has left #openstack-dev09:48
*** bknudson has joined #openstack-dev09:48
*** mindpixel has joined #openstack-dev09:48
*** DinaBelova_ is now known as DinaBelova09:49
*** ArxCruz has joined #openstack-dev09:50
*** aditirav has joined #openstack-dev09:50
*** SergeyLukjanov_ is now known as SergeyLukjanov09:51
*** buzztroll has joined #openstack-dev10:00
*** amcrn has quit IRC10:01
*** ramishra has joined #openstack-dev10:01
*** amuller has joined #openstack-dev10:02
*** exed_ has joined #openstack-dev10:03
*** buzztroll has quit IRC10:05
*** alex_xu has quit IRC10:06
*** teran has quit IRC10:07
*** dosaboy has quit IRC10:07
*** max_lobur_afk is now known as max_lobur10:07
*** YorikSar has joined #openstack-dev10:08
*** e0ne has joined #openstack-dev10:08
*** e0ne_ has quit IRC10:09
*** athomas has quit IRC10:12
*** athomas has joined #openstack-dev10:12
*** henrynash has joined #openstack-dev10:13
*** henrynash has quit IRC10:16
*** kolesovdv has joined #openstack-dev10:16
*** eglynn has joined #openstack-dev10:17
*** avishayb has quit IRC10:17
*** e0ne has quit IRC10:18
*** e0ne has joined #openstack-dev10:18
*** martyntaylor has joined #openstack-dev10:20
*** ramishra has quit IRC10:20
*** ramishra has joined #openstack-dev10:21
*** evgenyf has quit IRC10:22
*** unmeshg_ has left #openstack-dev10:28
*** vrovachev has joined #openstack-dev10:34
*** DinaBelova is now known as DinaBelova_10:36
*** jp_at_hp has joined #openstack-dev10:38
*** evgenyf has joined #openstack-dev10:38
*** odyssey4me has quit IRC10:38
*** ramishra_ has joined #openstack-dev10:41
*** henrynash has joined #openstack-dev10:42
*** xga has quit IRC10:45
*** xga has joined #openstack-dev10:45
*** DinaBelova_ is now known as DinaBelova10:45
*** ramishra has quit IRC10:45
*** teran has joined #openstack-dev10:46
*** henrynash has quit IRC10:46
*** odyssey4me has joined #openstack-dev10:47
*** afazekas has joined #openstack-dev10:50
*** che-arne has joined #openstack-dev10:51
*** neeti has joined #openstack-dev10:54
*** neeti has quit IRC10:55
*** neeti has joined #openstack-dev10:56
*** neeti_ has quit IRC10:57
*** lucasagomes has joined #openstack-dev10:57
*** d0ugal has quit IRC10:58
*** d0ugal has joined #openstack-dev10:58
*** d0ugal has quit IRC10:59
*** d0ugal has joined #openstack-dev10:59
*** d0ugal has quit IRC10:59
*** d0ugal has joined #openstack-dev10:59
*** buzztroll has joined #openstack-dev11:00
*** colinmcnamara has joined #openstack-dev11:02
*** CaptTofu has joined #openstack-dev11:02
*** buzztroll has quit IRC11:04
*** navid__ has joined #openstack-dev11:05
*** matsuhashi has quit IRC11:05
*** navid__ has quit IRC11:06
*** nshaikh has quit IRC11:06
*** salv-orlando has joined #openstack-dev11:06
*** colinmcnamara has quit IRC11:06
*** CaptTofu has quit IRC11:06
*** xga has quit IRC11:07
*** ndipanov_ has joined #openstack-dev11:09
*** neeti has quit IRC11:09
*** neeti has joined #openstack-dev11:12
*** neoXsys has joined #openstack-dev11:13
*** matsuhashi has joined #openstack-dev11:14
*** doug_shelley66 has joined #openstack-dev11:16
*** avishayb has joined #openstack-dev11:19
*** jprovazn_ has joined #openstack-dev11:20
*** Nikolay_St has quit IRC11:20
*** dkuffner has quit IRC11:21
*** ramishra has joined #openstack-dev11:24
*** ndipanov has quit IRC11:24
*** ramishra_ has quit IRC11:24
*** rossella_s has joined #openstack-dev11:28
*** e0ne has quit IRC11:28
*** JordanP has quit IRC11:31
*** rfolco has joined #openstack-dev11:32
*** d0ugal has quit IRC11:32
*** sahid has quit IRC11:32
*** lxsli has joined #openstack-dev11:34
*** amuller_ has joined #openstack-dev11:36
*** amuller has quit IRC11:36
*** michchap_ has joined #openstack-dev11:39
*** michchap has quit IRC11:40
*** salv-orlando has quit IRC11:41
*** odyssey4me has quit IRC11:42
*** pcm_ has joined #openstack-dev11:43
*** che-arne has quit IRC11:44
*** pcm_ has quit IRC11:45
*** pcm_ has joined #openstack-dev11:46
*** garyk has quit IRC11:48
*** garyk has joined #openstack-dev11:49
*** ramishra_ has joined #openstack-dev11:50
*** yassine has quit IRC11:52
*** ramishra_ has quit IRC11:52
*** odyssey4me has joined #openstack-dev11:53
*** ramishra has quit IRC11:53
*** ramishra_ has joined #openstack-dev11:53
*** salv-orlando has joined #openstack-dev11:55
*** markmc has quit IRC11:55
*** salv-orlando has quit IRC11:56
*** noorul has quit IRC11:56
*** e0ne has joined #openstack-dev11:59
*** ramishra_ has quit IRC11:59
*** buzztroll has joined #openstack-dev12:00
*** morazi has joined #openstack-dev12:01
*** amuller__ has joined #openstack-dev12:01
*** erkules_ is now known as erkules12:02
*** amuller_ has quit IRC12:02
*** e0ne has quit IRC12:04
*** buzztroll has quit IRC12:04
*** irenab_ has joined #openstack-dev12:05
*** irenab has quit IRC12:05
*** ramishra has joined #openstack-dev12:05
*** dave_tucker is now known as dave_tucker_zzz12:05
*** irenab_ is now known as irenab12:05
*** rtheis has joined #openstack-dev12:06
*** pberis has quit IRC12:08
*** vladikr has quit IRC12:09
*** ramishra has quit IRC12:11
*** ramishra has joined #openstack-dev12:11
*** salv-orlando has joined #openstack-dev12:13
*** henrynash has joined #openstack-dev12:14
*** ramishra has quit IRC12:15
*** ramishra has joined #openstack-dev12:16
*** henrynash has quit IRC12:16
*** aditirav has quit IRC12:22
*** fpatwa has joined #openstack-dev12:23
*** FunnyLookinHat has joined #openstack-dev12:23
*** drewlander has joined #openstack-dev12:24
*** e0ne has joined #openstack-dev12:24
*** alexpilotti has joined #openstack-dev12:25
*** salv-orlando has quit IRC12:25
*** xchu has joined #openstack-dev12:25
*** e0ne has quit IRC12:26
*** fpatwa has quit IRC12:26
*** e0ne has joined #openstack-dev12:26
*** fpatwa has joined #openstack-dev12:26
*** b3nt_pin has quit IRC12:27
*** glenng has joined #openstack-dev12:27
*** b3nt_pin has joined #openstack-dev12:27
*** b3nt_pin is now known as beagles12:28
*** glenng1 has joined #openstack-dev12:29
*** asalkeld has quit IRC12:29
*** alexpilotti has quit IRC12:30
*** kgriffs_afk is now known as kgriffs12:30
*** fpatwa has quit IRC12:31
*** e0ne has quit IRC12:31
*** [1]evgenyf has joined #openstack-dev12:31
*** [1]avishayb has joined #openstack-dev12:31
*** glenng has quit IRC12:32
*** glenng1 has quit IRC12:32
*** avishayb has quit IRC12:33
*** [1]avishayb is now known as avishayb12:33
*** evgenyf has quit IRC12:33
*** [1]evgenyf is now known as evgenyf12:33
*** xchu has quit IRC12:34
*** ramishra has quit IRC12:34
*** tmclaugh[work] has joined #openstack-dev12:34
*** nosnos has quit IRC12:36
*** artom has joined #openstack-dev12:36
*** ndipanov_ has quit IRC12:36
*** ndipanov has joined #openstack-dev12:37
*** michchap_ has quit IRC12:38
*** kolesovdv has quit IRC12:38
*** michchap has joined #openstack-dev12:38
*** dkuffner has joined #openstack-dev12:38
*** markmc has joined #openstack-dev12:38
*** matsuhashi has quit IRC12:39
*** henrynash has joined #openstack-dev12:42
*** michchap has quit IRC12:42
*** doug_shelley66 has quit IRC12:42
*** READ10 has quit IRC12:43
*** neeti has quit IRC12:45
*** anniec has joined #openstack-dev12:48
*** ramishra has joined #openstack-dev12:48
*** anniec_ has joined #openstack-dev12:51
*** artom has quit IRC12:51
*** anniec has quit IRC12:53
*** anniec_ is now known as anniec12:53
*** cnesa has joined #openstack-dev12:56
*** david_paterson has joined #openstack-dev12:56
*** tdruiva has joined #openstack-dev12:57
*** ramishra has quit IRC12:58
*** sgordon has joined #openstack-dev12:58
*** sgordon has joined #openstack-dev12:58
*** tdruiva has quit IRC12:58
*** coolsvap has quit IRC12:58
*** ramishra has joined #openstack-dev12:58
*** alexpilotti has joined #openstack-dev12:59
*** danielbruno has joined #openstack-dev12:59
*** danielbruno has quit IRC12:59
*** danielbruno has joined #openstack-dev12:59
*** jdob has joined #openstack-dev13:00
*** buzztroll has joined #openstack-dev13:00
*** _ruhe is now known as ruhe13:01
*** bswartz has quit IRC13:01
*** CaptTofu has joined #openstack-dev13:03
*** david_lyle has quit IRC13:03
*** heyongli has joined #openstack-dev13:03
*** danielbruno has quit IRC13:03
*** yassine has joined #openstack-dev13:03
*** buzztroll has quit IRC13:05
*** ramishra_ has joined #openstack-dev13:05
*** ramishra has quit IRC13:05
*** sahid has joined #openstack-dev13:05
*** eharney has joined #openstack-dev13:05
*** theanalyst has joined #openstack-dev13:06
*** glenng has joined #openstack-dev13:06
*** glenng1 has joined #openstack-dev13:08
*** CaptTofu has quit IRC13:08
*** glenng has quit IRC13:10
*** polfilm has joined #openstack-dev13:11
*** SergeyLukjanov is now known as SergeyLukjanov_13:13
*** willingc has joined #openstack-dev13:15
*** vartom1111111114 has quit IRC13:15
*** tdruiva has joined #openstack-dev13:15
*** CaptTofu has joined #openstack-dev13:17
*** ramishra_ has quit IRC13:18
*** ramishra has joined #openstack-dev13:18
*** aveiga has joined #openstack-dev13:19
*** galstrom_zzz is now known as galstrom13:19
*** avishayb has quit IRC13:20
*** galstrom is now known as galstrom_zzz13:20
*** jcoufal has quit IRC13:21
*** ruhe is now known as _ruhe13:22
*** jcoufal has joined #openstack-dev13:22
*** SergeyLukjanov_ is now known as SergeyLukjanov13:22
*** rods has joined #openstack-dev13:24
*** dosaboy has joined #openstack-dev13:24
tellesnobregahenrynash: hi, in this new policy.json, can i still use the rule project_id:%(project_id) to list users for example? I'm trying to define a project_admin rule but It doesn't seem to work13:25
tellesnobregahenrynash: im using this command curl -si -H"X-Auth-Token:$TOKEN_ADMIN_PROJECT2" -H "Content-type: application/json" http://localhost:35357/v3/users?project_id=306df202af134d0483c9c85f0a3ad6ca13:26
*** jpomero has quit IRC13:26
*** jruzicka has joined #openstack-dev13:26
*** e0ne has joined #openstack-dev13:26
*** avishay has quit IRC13:27
*** xga has joined #openstack-dev13:27
*** asalkeld has joined #openstack-dev13:28
*** polfilm has quit IRC13:30
*** ramishra has quit IRC13:30
*** e0ne has quit IRC13:30
*** Lexis has joined #openstack-dev13:31
*** ramishra has joined #openstack-dev13:31
*** xga has quit IRC13:31
*** hartsocks has joined #openstack-dev13:33
*** pschaef has joined #openstack-dev13:34
*** doug_shelley66 has joined #openstack-dev13:35
*** JordanP has joined #openstack-dev13:36
*** tdruiva has quit IRC13:37
*** rahmu has left #openstack-dev13:37
*** tdruiva has joined #openstack-dev13:37
*** kbrierly has joined #openstack-dev13:38
*** doug-fish has quit IRC13:39
*** thomasem has joined #openstack-dev13:40
*** HT_Sergio has joined #openstack-dev13:40
*** dosaboy has quit IRC13:41
*** lbragstad has quit IRC13:41
*** rahmu has joined #openstack-dev13:41
*** glenng1 is now known as glenng13:42
*** dosaboy has joined #openstack-dev13:42
*** doug_shelley66 has quit IRC13:42
*** doug_shelley66 has joined #openstack-dev13:42
*** bfschott has quit IRC13:43
*** sumansn_ has joined #openstack-dev13:43
*** bfschott has joined #openstack-dev13:44
*** dstufft is now known as caremad13:44
*** CaptTofu has quit IRC13:44
*** caremad is now known as dstufft13:45
*** sumanthns has quit IRC13:46
*** kgriffs is now known as kgriffs_afk13:46
*** wpward has joined #openstack-dev13:48
*** s2r2_ has quit IRC13:49
*** achampion has quit IRC13:50
*** SergeyLukjanov is now known as SergeyLukjanov_a13:50
*** dvarga has joined #openstack-dev13:50
*** s2r2_ has joined #openstack-dev13:50
*** tongli has joined #openstack-dev13:50
*** wpward has quit IRC13:51
*** SergeyLukjanov_a is now known as SergeyLukjanov_13:51
*** hartsocks has left #openstack-dev13:51
*** sumansn_ has quit IRC13:51
*** sahid has quit IRC13:52
*** bfschott has quit IRC13:53
*** sahid has joined #openstack-dev13:53
*** wpward has joined #openstack-dev13:53
*** ramishra has quit IRC13:54
*** ramishra has joined #openstack-dev13:54
*** d0ugal has joined #openstack-dev13:57
*** jecarey has quit IRC13:57
*** thuc has joined #openstack-dev13:57
*** vladikr has joined #openstack-dev13:57
*** thuc_ has joined #openstack-dev13:58
*** yamahata has quit IRC13:58
*** johnthetubaguy1 is now known as johnthetubaguy13:59
*** buzztroll has joined #openstack-dev14:00
*** henrynash has quit IRC14:01
*** wpward has left #openstack-dev14:01
*** redhat has joined #openstack-dev14:01
irenabbaoli: ping14:01
*** samuelbercovici has joined #openstack-dev14:02
*** thuc has quit IRC14:02
*** markmcclain has joined #openstack-dev14:03
*** jayg|g0n3 is now known as jayg14:04
*** ramishra has quit IRC14:04
*** buzztroll has quit IRC14:05
*** sballe has joined #openstack-dev14:06
*** YorikSar has quit IRC14:06
*** CaptTofu has joined #openstack-dev14:08
*** henrynash has joined #openstack-dev14:09
*** willingc has quit IRC14:09
*** heyongli has quit IRC14:10
*** pmathews has joined #openstack-dev14:10
*** cagrev has joined #openstack-dev14:11
*** henrynash has quit IRC14:11
*** bfschott has joined #openstack-dev14:11
*** lbragstad has joined #openstack-dev14:12
*** doug-fish has joined #openstack-dev14:12
*** ramishra has joined #openstack-dev14:12
*** SergeyLukjanov_ is now known as SergeyLukjanov14:12
*** teran has quit IRC14:13
*** teran has joined #openstack-dev14:13
*** ramishra_ has joined #openstack-dev14:14
*** ramishra has quit IRC14:14
*** boris-42_ has joined #openstack-dev14:14
*** yamahata has joined #openstack-dev14:15
*** pmathews has quit IRC14:15
*** boris-42 has quit IRC14:15
*** baoli has joined #openstack-dev14:15
*** ramishra_ has quit IRC14:15
*** ramishra has joined #openstack-dev14:16
*** benrodrigue has joined #openstack-dev14:17
*** _ruhe is now known as ruhe14:17
*** mriedem has joined #openstack-dev14:18
*** coolsvap has joined #openstack-dev14:18
*** changbl has quit IRC14:19
*** dhellmann_ is now known as dhellmann14:19
*** baoli has quit IRC14:19
*** sahid has quit IRC14:19
*** ramishra_ has joined #openstack-dev14:21
*** rraja has joined #openstack-dev14:21
*** dbalog has joined #openstack-dev14:21
tellesnobregahi, can anyone help me find how the policy is checked when calling a list_users in keystone?14:21
*** READ10 has joined #openstack-dev14:22
*** vijendar has joined #openstack-dev14:22
*** ramishra_ has quit IRC14:24
*** ramishra_ has joined #openstack-dev14:24
*** willingc has joined #openstack-dev14:24
*** ramishra has quit IRC14:24
*** e0ne has joined #openstack-dev14:25
*** dvarga is now known as dvarga|away14:26
*** dvarga|away is now known as dvarga14:26
*** dims has quit IRC14:26
*** CaptTofu has quit IRC14:27
*** pmathews has joined #openstack-dev14:27
*** gszasz has quit IRC14:28
*** dims has joined #openstack-dev14:28
*** dave_tucker_zzz is now known as dave_tucker14:29
*** thuc_ has quit IRC14:30
*** garyk has quit IRC14:30
*** thuc has joined #openstack-dev14:30
*** d0ugal has quit IRC14:32
*** ramishra has joined #openstack-dev14:33
*** jecarey has joined #openstack-dev14:33
*** cmyster has quit IRC14:34
*** thuc has quit IRC14:34
*** rfolco has quit IRC14:35
*** s2r2_ has quit IRC14:36
*** ramishra_ has quit IRC14:37
*** henrynash has joined #openstack-dev14:37
*** mkollaro has joined #openstack-dev14:37
*** browne has joined #openstack-dev14:38
*** michchap has joined #openstack-dev14:38
*** ramishra has quit IRC14:38
*** nkinder has quit IRC14:39
*** irenab has quit IRC14:39
*** s2r2_ has joined #openstack-dev14:40
*** michchap has quit IRC14:43
*** aditirav has joined #openstack-dev14:45
*** max_lobur has quit IRC14:45
*** mfer has joined #openstack-dev14:46
*** max_lobur has joined #openstack-dev14:46
*** gsamfira has quit IRC14:46
*** FunnyLookinHat has quit IRC14:46
*** willingc has quit IRC14:46
*** achampion has joined #openstack-dev14:47
*** s2r2_ has quit IRC14:47
*** s2r2_ has joined #openstack-dev14:48
*** radez_g0n3 is now known as radez14:48
*** peristeri has joined #openstack-dev14:48
*** flwang has joined #openstack-dev14:49
*** burt1 has joined #openstack-dev14:50
*** mfer has quit IRC14:50
tellesnobregacan anyone explain what the project_id:%(project_id)s rule in keystone policy.json especifies? does it only get the project_id in context? from the user token? from the filter?14:51
*** david_paterson has left #openstack-dev14:52
*** bswartz has joined #openstack-dev14:52
*** stevemar has joined #openstack-dev14:54
*** bvandenh has joined #openstack-dev14:54
*** d0ugal has joined #openstack-dev14:55
*** d0ugal has joined #openstack-dev14:55
*** willingc has joined #openstack-dev14:56
*** ramishra has joined #openstack-dev14:56
*** flwang has left #openstack-dev14:57
*** nshaikh has joined #openstack-dev14:57
*** mrunge has quit IRC14:58
*** ayoung has joined #openstack-dev14:59
*** buzztroll has joined #openstack-dev15:00
*** rcleere has joined #openstack-dev15:00
*** Mandell has joined #openstack-dev15:00
*** ramishra has quit IRC15:01
*** pmathews has quit IRC15:02
*** alex_klimov has quit IRC15:03
*** neeti has joined #openstack-dev15:04
*** aeperezt has joined #openstack-dev15:04
*** csaba|afk is now known as csaba15:04
*** buzztroll has quit IRC15:05
*** joesavak has joined #openstack-dev15:05
*** mfink has joined #openstack-dev15:09
*** dstanek has joined #openstack-dev15:09
*** jasondotstar has joined #openstack-dev15:10
*** hartsocks has joined #openstack-dev15:11
*** gordc has joined #openstack-dev15:12
*** e0ne_ has joined #openstack-dev15:14
*** krotscheck has joined #openstack-dev15:15
*** jergerber has joined #openstack-dev15:15
*** changbl has joined #openstack-dev15:16
*** paragan_ has quit IRC15:17
*** e0ne has quit IRC15:17
*** carlp has joined #openstack-dev15:18
*** lbragstad has quit IRC15:18
*** lbragstad has joined #openstack-dev15:18
ttxkgriffs, flaper87: let me know if I can tag icehouse-2 for Marconi (based on the current milestone-proposed branch)15:19
*** lbragstad has quit IRC15:19
ttxdevananda: same question for Ironic15:19
*** garyk has joined #openstack-dev15:19
*** lbragstad has joined #openstack-dev15:19
flaper87ttx: the branch looks good. It has everything we wanted to have there!15:20
ttxok, tagging then15:20
flaper87ttx: thanks a lot!15:20
*** cagrev has quit IRC15:21
*** kevinconway has joined #openstack-dev15:21
*** jobewan has joined #openstack-dev15:22
*** sahid has joined #openstack-dev15:22
*** dvarga is now known as dvarga|away15:22
*** dvarga|away is now known as dvarga15:22
*** ramishra has joined #openstack-dev15:22
ttxflaper87: done15:23
*** odyssey4me has quit IRC15:23
flaper87ttx: thnx! :D15:23
ttxhttps://launchpad.net/marconi/+milestone/icehouse-215:23
* flaper87 is so exited, first Marconi's cut!15:23
*** afazekas has quit IRC15:23
*** jsavak has joined #openstack-dev15:23
ttxSergeyLukjanov: https://launchpad.net/savanna/+milestone/icehouse-215:23
ttxflaper87, kgriffs: I'll let you announce it directly15:24
*** nkinder has joined #openstack-dev15:24
*** mikeburns is now known as mburned15:25
*** evgenyf has quit IRC15:25
morganfainbergdolphm, ping15:26
*** jgrimm has joined #openstack-dev15:26
*** sandywalsh has joined #openstack-dev15:26
*** joesavak has quit IRC15:27
*** jruzicka has quit IRC15:27
SergeyLukjanovttx, awesome, thank you!15:28
*** jmontemayor has joined #openstack-dev15:28
*** dkranz has joined #openstack-dev15:29
dolphmmorganfainberg: pong15:30
*** ramishra has quit IRC15:30
morganfainbergdolphm, the oauth plugin change was based upon keystone.conf.sample having it explicitly configured15:30
morganfainbergvs. in test overrides.conf15:30
dolphmmorganfainberg: yeah, but in keystone.config it wasn't included by default15:31
*** ramishra has joined #openstack-dev15:31
morganfainbergdolphm, correct.  i'll move it to test_overrides.conf then15:31
*** evgenyf has joined #openstack-dev15:31
morganfainbergdolphm, we just had a discrepancy and i corrected it the opposite way you wanted ;)15:31
morganfainbergdolphm, nbd, next patchset will have it flipped15:31
dolphmmorganfainberg: understood15:31
*** prad_ has joined #openstack-dev15:32
bknudsonmorganfainberg: that's already done in https://review.openstack.org/#/c/66247/15:32
*** markmc has quit IRC15:32
dolphmmorganfainberg: i also assigned you some other bp yesterday... let me know if you don't want it15:32
morganfainbergdolphm, will check it out15:32
*** jruzicka has joined #openstack-dev15:32
morganfainbergbknudson, that cleanup patch may not be needed.15:32
dolphmmorganfainberg: also, how achievable is parallel testing in icehouse?15:33
morganfainbergdolphm, the biggest hurdle is the BaseLDAP thing.15:33
dolphmmorganfainberg: ?15:33
morganfainbergdolphm, it requires making it so you don't need to store the config value on the LDAP object.15:34
morganfainbergdolphm, right now when you instantiate an LDAP object it grabs config values and stores them locally.  means we need to "reload backends" in some tests15:34
morganfainbergdolphm, and that is a blocker for getting load_backends to be called exactly 1 time per test.15:34
bknudsonis this a known problem?15:34
bknudson2014-01-23 15:12:49.175 29543 ERROR heat.common.keystoneclient [-] Failed to add user heat-tempest-519805708-CfnUser-zlyjf7cyikx3 to role heat_stack_user, check role exists!15:34
dolphmmorganfainberg: locally on the ldap driver instance?15:34
morganfainbergdolphm, on the driver instance.15:35
morganfainbergdolphm, correct.15:35
*** krtaylor has quit IRC15:35
*** DennyZhang has joined #openstack-dev15:35
morganfainbergdolphm, http://git.openstack.org/cgit/openstack/keystone/tree/keystone/common/ldap/core.py#n13715:35
dolphmmorganfainberg: how do you want to reference config then, look it up from CONF at runtime?15:35
*** lucasagomes is now known as lucas-hungry15:36
*** changbl has quit IRC15:36
morganfainbergdolphm, yes, like everything else does.  unfortunately, that breaks henrynash's per-domain backend things further.15:36
dolphmmorganfainberg: shortest path == start turning those into @property's?15:36
*** spzala has joined #openstack-dev15:36
*** nkinder has quit IRC15:36
morganfainbergdolphm, yep.15:36
*** nkinder has joined #openstack-dev15:36
morganfainbergdolphm, the solution i was going to aim for was to hold onto the conf ref on the object and make it @property's15:37
morganfainbergdolphm, work on further cleanup once we're past that15:37
*** beav has quit IRC15:37
dolphmmorganfainberg: wouldn't setting self.CONF on __init__() workaround that?15:37
dolphmmorganfainberg: which it kinda does but it copies values out rather than holding a ref to the CONF object15:38
morganfainbergdolphm, yep, and as long as we make it @property to grab the info.15:38
morganfainbergdolphm, oh wait no15:38
*** ramishra has quit IRC15:38
morganfainbergdolphm, actually, just realized that can be worked around w/o changing that object15:38
*** boris-42_ has quit IRC15:39
morganfainbergjust need to change the order of test spin up and split some tests into new objects so setUp does config changes not the test itself.15:39
morganfainbergdolphm, nvm, not as big a hurdle15:39
*** michchap has joined #openstack-dev15:39
dolphmmorganfainberg: that sounds like a bigger headache from here lol15:39
morganfainbergdolphm, nah, it's making a new subclass with setUp doing the right thing.15:40
*** jnoller has joined #openstack-dev15:40
*** s2r2_ has quit IRC15:40
morganfainbergdolphm, so instead of a ldap test itself setting the config and then calling "load_backends" again or "reload_backends", setUp() would make the change.  i think it's 3 or so new test classes.15:40
morganfainbergit doesn't happen a whole lot (nor with much variation)15:41
*** jdob has quit IRC15:41
morganfainbergdolphm, i think it's totally doable.  ephemeral tokens, was that the one you assigned me?15:42
dolphmmorganfainberg: yes15:43
morganfainbergdolphm, sure i'll take that one.15:43
dolphmmorganfainberg: you have 5 bp's for icehouse-3 though :-/15:43
morganfainbergdolphm, the keystone caching expansion might not happen15:43
*** doug_shelley66 has quit IRC15:43
dolphmmorganfainberg: let's cut that now then15:43
morganfainbergdolphm, that requires the cleanup on grant tables15:43
morganfainbergdolphm, and afaict that hasn't been started15:43
dolphmmorganfainberg: or make it ongoin15:43
dolphmg15:43
*** michchap has quit IRC15:43
morganfainbergdolphm, ++ ongoing is good15:43
dolphmmorganfainberg: i'll set the dep then15:44
morganfainbergdolphm, that one can just linger until we are happy with it.  i expect it will not be complete until juno or even K because it's a huge scope15:44
morganfainbergthis weekend should be lots of code.  kvs is just cleaning up comments at this point and posting revisions,15:45
*** mfer has joined #openstack-dev15:45
dolphmmorganfainberg: i was going to say... alternatively break it down into identity-caching, assignment-caching, etc15:45
morganfainbergephemeral tokens should be straight forward(ish)15:45
*** markmcclain has quit IRC15:45
morganfainbergdolphm, ooh, thats probably even better.15:45
*** doug_shelley66 has joined #openstack-dev15:46
morganfainbergdolphm, still likely will be J before it'll be close enough to 100% to be done. so yes, either case (split it up or "ongoing") lets punt it from I-315:47
*** henrynash has quit IRC15:48
morganfainbergdolphm, https://blueprints.launchpad.net/keystone/+spec/no-tokens-in-db that might be a duplicate now15:48
*** ViswaV has joined #openstack-dev15:49
*** artom has joined #openstack-dev15:49
dolphmoops, that's reduce-token-duration + ephemeral-pki-tokens15:50
morganfainbergyep15:50
*** dvarga is now known as dvarga|away15:52
*** dvarga|away is now known as dvarga15:52
*** djoreilly has joined #openstack-dev15:52
*** FunnyLookinHat has joined #openstack-dev15:52
morganfainbergdolphm, i'm marking the "reuse token" bug as invalid since we're moving towards ephemeral tokens.15:52
dolphmmorganfainberg: cool15:53
morganfainbergdolphm, i also marked the associated BP as superceeded15:53
*** ramishra has joined #openstack-dev15:53
dolphmmorganfainberg: that word is impossible to spell btw15:53
morganfainbergdolphm, lol yah15:53
*** dhellmann is now known as dhellmann_15:53
*** oro has quit IRC15:53
*** galstrom_zzz is now known as galstrom15:53
*** ViswaV has quit IRC15:54
*** DennyZha` has joined #openstack-dev15:54
*** jcoufal has quit IRC15:55
*** DennyZhang has quit IRC15:55
*** jdob has joined #openstack-dev15:55
*** gordc has quit IRC15:56
*** gokrokve has quit IRC15:56
*** gordc has joined #openstack-dev15:57
morganfainbergdolphm, ok i'm headed into the office here.  talk in a bit (or have code to be reviewed)15:57
morganfainberg:)15:57
*** jcooley_ has joined #openstack-dev15:57
morganfainbergdolphm, oh also external was by default enabled as a plugin auth module15:57
morganfainbergdolphm, so i'm going to leave that one in.15:57
*** Drankis has quit IRC15:57
morganfainbergdolphm, unless we want to explicitly disable it.15:57
dolphmmorganfainberg: ++ we talked about removing it, but there wasn't a strong argument either way15:57
*** nshaikh has left #openstack-dev15:57
*** ramishra has quit IRC15:57
morganfainbergbknudson, https://review.openstack.org/#/c/68551/ based upon talks at the hackathon15:58
*** Gordonz has joined #openstack-dev15:58
morganfainbergbknudson, might supersede the "Cleanup" sample config15:58
ayoungSo  is Zuul stuck again?15:58
morganfainbergayoung, i hope not15:58
bknudsonmorganfainberg: these changes are not backwards compatible15:58
morganfainbergbknudson, how are they not?15:59
morganfainbergbknudson, it supports the "old" style explicitly15:59
bknudsonmorganfainberg: we keep the old style?15:59
ayoungthere are some patches approved awhile ago that are just sitting there...15:59
morganfainbergbknudson, yep, if the methods are specified, i use that instead of plugins option15:59
bknudsonmorganfainberg: ok. I'll abandon my patches15:59
dolphmayoung: links?15:59
ayoungcoming up15:59
*** DennyZha` has quit IRC15:59
ayounghttps://review.openstack.org/#/c/68233/15:59
ayounghttps://review.openstack.org/#/c/68234/16:00
morganfainbergbknudson, https://review.openstack.org/#/c/68551/1/keystone/auth/controllers.py line 4316:00
morganfainberg(new file)16:00
*** jmontemayor has quit IRC16:00
dolphmayoung: that's gating16:00
morganfainbergbknudson, it would have been much easier to make it incompatible ;)16:00
ayoungI was hoping to have them in otherwise I have to redo a handful of review requests to depend on them16:00
*** buzztroll has joined #openstack-dev16:00
ayoungIts been a couple of days16:00
dolphmayoung: that's just load16:00
morganfainbergayoung, we're back up to 19h for things to gate.16:00
*** Ruetobas has quit IRC16:01
morganfainbergayoung, so, it's slow getting things through16:01
ayoungthey were approved more than that ago, I thought16:01
dolphmmorganfainberg: that's because the gate was reset -- i don't think we've established a new queue time yet16:01
morganfainbergdolphm, ah.16:01
*** nelsnelson has joined #openstack-dev16:01
*** ramishra has joined #openstack-dev16:01
dolphmayoung: gate was reset ^ hence the time-in-gate is innaccurate16:01
*** jmontemayor has joined #openstack-dev16:01
bknudsonmorganfainberg: https://review.openstack.org/#/c/66247/ has some other changes in it, so I'll rebase on  https://review.openstack.org/#/c/6855116:01
*** mmoya has quit IRC16:01
ayoungOK, so long as things are moving.16:01
bknudsonmorganfainberg: should I also abandon https://review.openstack.org/#/c/66477/2 ?16:02
dolphmmorganfainberg: it appeared to be 16 hours, as of 3 hours ago ;)16:02
bknudsonor rebase it?16:02
*** jmontemayor has quit IRC16:02
ayoungSince gyee had some comments on the notfications, I'm going to rebase on top of that one anyway...16:02
morganfainbergbknudson, hm.  your call, i think we can safely abandon it.16:02
bknudsonmorganfainberg: we don't want to document config options?16:02
*** jmontemayor has joined #openstack-dev16:02
morganfainbergbknudson, shouldn't we document in configuration.rst instead (i know my caching options have tons of comments)16:03
*** pberis has joined #openstack-dev16:03
*** Ruetobas has joined #openstack-dev16:03
morganfainbergbknudson, i wont say we shouldn't comment in sample.conf though, so ...16:03
bknudsonmorganfainberg: deployers aren't reading configuration.rst.16:03
morganfainbergbknudson, ok lets keep that one then16:03
*** redhat has quit IRC16:03
morganfainbergbknudson, or i can add it to mine and co-author you?16:03
dolphmwe have 25 changes in the gate by my count, eek16:04
bknudsonmorganfainberg: either way works for me... if you add docs to yours then I'll just abandon mine.16:04
morganfainbergbknudson, i'll add docs to mine, i have a new patchset comming16:05
morganfainbergbknudson, coming*16:05
*** mmoya has joined #openstack-dev16:05
morganfainbergbknudson, (as soon as i hit the office today)16:05
*** buzztroll has quit IRC16:05
dolphmso 23% of gate's load is currently keystone-related16:05
morganfainbergdolphm, don't know if i'm proud of us...or horrified :P16:05
*** rraja has quit IRC16:05
dolphmmorganfainberg: same16:05
*** ramishra has quit IRC16:06
*** pschaef has quit IRC16:06
*** giulivo has joined #openstack-dev16:06
*** ifarkas has quit IRC16:07
*** csaba is now known as csaba|afk16:07
*** terrylhowe has joined #openstack-dev16:07
*** Ruetobas has quit IRC16:07
*** rohitk has left #openstack-dev16:08
morganfainbergdolphm, and what, 75% of those changes are bknudson's? ;)16:08
*** cdub has joined #openstack-dev16:08
*** omachace has left #openstack-dev16:09
*** redhat has joined #openstack-dev16:10
*** s2r2_ has joined #openstack-dev16:10
dolphmmorganfainberg: 9 are authored by bknudson, so 39%16:10
dolphmbknudson: you're personally responsible for 8.4% of the current gate load16:11
bknudsondolphm: I actually approved those on Sun hoping that they'd be through the gate by Mon morning16:11
dolphmbknudson: ha16:11
*** ramishra has joined #openstack-dev16:11
*** rnirmal has joined #openstack-dev16:12
*** tanisdl has joined #openstack-dev16:12
*** emagana has joined #openstack-dev16:12
*** vartom1111111114 has joined #openstack-dev16:12
*** anniec has quit IRC16:12
*** e0ne_ has quit IRC16:13
*** jnoller has quit IRC16:13
*** Ruetobas has joined #openstack-dev16:13
devanandattx: yep! go for it16:13
ttxwoohoo16:14
*** corXi has quit IRC16:14
*** rfolco has joined #openstack-dev16:14
*** jnoller has joined #openstack-dev16:16
*** csd has joined #openstack-dev16:17
ayoungand now I can't rebase without dumping the Keystone gating jobs16:17
ayoungdolphm, that 23% is latent16:17
*** browne has quit IRC16:17
ayoungwe had a lot of work done recently16:18
*** ramishra has quit IRC16:18
*** ramishra_ has joined #openstack-dev16:18
dolphmayoung: please don't rebase gating changes!16:18
ayoungI'm not16:18
dolphmayoung: git-review --no-rebase16:18
*** prad_ has quit IRC16:18
ayoungI did better than that16:18
ayoung git push gerrit HEAD:refs/for/master16:18
ayoung*only* pushes the head of the current tree16:18
ayoungit was rebased on top of a change that is gating...16:19
*** prad has joined #openstack-dev16:19
ayounghmmm16:19
dolphmayoung: i finally stopped using that recently in favor of --no-rebase ... haven't had a hiccup since16:19
ayoungI did last week16:19
ayounghmmm16:19
*** kushal has joined #openstack-dev16:19
*** browne has joined #openstack-dev16:19
*** branen has quit IRC16:19
ttxdevananda: all set at https://launchpad.net/ironic/+milestone/icehouse-216:19
*** kgriffs_afk is now known as kgriffs16:19
ttxdevananda: will let you announce it16:19
devanandattx: awesome!16:20
*** martines has quit IRC16:20
*** xgsa has quit IRC16:20
*** thuc has joined #openstack-dev16:22
*** SumitNaiksatam has quit IRC16:22
*** bvandenh has quit IRC16:23
*** jtomasek has quit IRC16:23
*** mikeoutland has joined #openstack-dev16:25
*** dkuffner has quit IRC16:26
*** ramishra_ has quit IRC16:27
ayoungdolphm, if things stay as crowded in Gate as we are seeing now, I am going to propose that we introduce an interim branch.  Call it the PTL branch.  Instead of gating one patch at a time, the PTL decides when to push merge their branch to master, and merges a chunk of patches at once.   Doesn';t have to always be like this, but it is something we can do when the load gets high, near milestones and the like.16:27
*** vartom1111111114 has quit IRC16:28
*** tanisdl has quit IRC16:28
*** nati_ueno has quit IRC16:28
ayoungso a patch goes submited->  check runs  -> approvale -> merge to PTL.....then PTL merges on your schedule.  Could be automated once a day or more often, but also could be done less frequently16:29
*** iartarisi has quit IRC16:29
*** lucas-hungry is now known as lucasagomes16:29
*** gyee has joined #openstack-dev16:30
dolphmayoung: in other words, squash brants patchsets post-review before submitting to the gate16:31
*** morganfainberg is now known as morganfainberg|z16:31
ayoungyep16:32
*** carl_baldwin has joined #openstack-dev16:32
ayoungdolphm, that is the Git model that the Linux Kernel work flow uses, IIUC16:33
ayoungyou don't have to actually squash the patchs, just merge more than one patch at a time16:33
*** coolsvap is now known as coolsvap_away16:33
dolphmayoung: that makes the master git history impossible to unwind16:34
*** taps has joined #openstack-dev16:34
ayoungNo...the PTL branch is only ever branched off of Master, and merges back in to  master16:34
*** henrynash has joined #openstack-dev16:34
*** hemna has joined #openstack-dev16:35
ayoungyou have a serioes of merges from PTL to master, but no other paths in, except maybe a revoke if something goes pear shaped16:35
*** coolsvap_away is now known as coolsvap16:35
*** samuelbercovici has quit IRC16:36
*** mindpixel has quit IRC16:36
bknudsonanother approach is to try to get our keystone changes submitted and merged well before the milestone16:36
ayoungwe basically have that no, just with one "real"  commit per merge commit.  With PTL it would be a series of commits per merge16:36
ayoungbknudson, there is no such thing16:36
*** jasdeepH has joined #openstack-dev16:37
ayoungwe are already handicapping ourselves with the API freeze at M2.  Do you really want to reduce further the amount of time we have to innovate?16:37
bknudsonand to help out the infra team and other teams when there's gate problems.16:37
*** coolsvap is now known as coolsvap_away16:37
ayoungthis would do that16:37
ayoungwe would run fewer gate jobs16:37
bknudsongate jobs aren't a problem16:38
bknudsonit's failures16:38
ayoungbecause they cascade16:38
*** galstrom is now known as galstrom_zzz16:39
ayounggyee, I need to make progress on https://review.openstack.org/#/c/68548/  Are you going to hold fast on your position?16:40
*** michchap has joined #openstack-dev16:40
dolphmayoung: you have the same amount of time either way16:41
gyeeayoung, I am not sure keep adding sub events is a good idea16:42
ayounggyee, I can see where you are coming from, but I think disable is different from update16:43
gyeecan we put the resource ref onto the payload? that would give us more flexibility16:43
ayoungI was thinking that.  Slippery slope16:43
*** morganfainberg|z is now known as morganfainberg16:43
ayoungfor update, maybe put the changed fields, but then the remote services need to know the semantics of "disable"16:43
*** xqueralt has quit IRC16:44
*** rdas has quit IRC16:44
*** galstrom_zzz is now known as galstrom16:44
*** michchap has quit IRC16:44
*** drewlander has quit IRC16:44
gyeeayoung, but if we put the resource ref onto the payload, callbacks can just exam the ref to figure out what has changed right?16:44
ayounggyee, I don't like how we are currently doing disable via update.  In the past, I advocated for using the DELETE HTTP verb to disable something if you did not want to immediately remove it.  But regardless, disable should be a first class notification16:45
dolphmgyee: then you're exposing a second, very large, "stable" API16:45
ayoungshudder16:45
gyeedolphm, not sure if I understand16:45
*** galstrom is now known as galstrom_zzz16:45
gyeethe payload of the notification16:45
*** pmathews has joined #openstack-dev16:45
dolphmgyee: is an API16:46
ayounggyee, yes, that now can't change16:46
*** amotoki is now known as amotoki_zzz16:46
dolphmgyee: i'd rather not tie it directly to the v3 API16:46
*** evgenyf has quit IRC16:46
gyeedolphm, I see what you mean now16:46
*** buzztroll has joined #openstack-dev16:47
*** jmontemayor has quit IRC16:47
ayoungDolph do you agree with the basica approach on  https://review.openstack.org/#/c/68548/  ?16:47
*** galstrom_zzz is now known as galstrom16:47
gyeeayoung, what I am afraid of is later we have to keep adding stuff like assignment, group membership, etc16:48
bknudsonto not tie it to the v3 API, you'd need a way to extract the fields that were changed.16:49
*** redhat has quit IRC16:49
*** xarses has quit IRC16:49
bknudsonfrom the ref16:49
ayounggyee, I'd arguethat it is better to add a new notification type that includes only a single value than to increase the scope of what has to be done either producing or consuming a notification16:49
gyeebknudson, yeah, one alternative would be to do a resource lookup using the id from the payload16:49
*** jmontemayor has joined #openstack-dev16:49
ayoungso if group memebership could be done with a single ID, ...well it probably would be a create or delete16:49
*** csd has quit IRC16:49
ayounggyee, that is expensive.  You are talking Database calls16:50
gyeeayoung, I am aware of that16:50
*** samalba has quit IRC16:50
bknudsongyee: extract it from the ref before notifying, rather than pass the ref itself16:50
*** csd has joined #openstack-dev16:50
bknudsonthen when v4 comes along it'll extract the field from its ref representation16:50
*** safchain has quit IRC16:50
gyeeI would think create and update are low volume API calls16:50
dolphmbknudson: and the attribute name will change with v4 and those depending on v3 semantics will be broken16:51
ayoungrole assignment can be done as create delete16:51
*** tkammer has quit IRC16:51
*** devoid has joined #openstack-dev16:51
*** polfilm has joined #openstack-dev16:51
ayoungdisable is semantically like "DELETE light"16:51
ayoungand enable is like "CREATE light"16:51
bknudsonthe v4 notification handler will translate the attribute name to whatever notification expects.16:51
dolphmayoung: that's why they're both handled as updates... they're changes of state rather than terminal events16:52
*** henrynash has quit IRC16:52
*** martines has joined #openstack-dev16:53
ayoungYes, but they are crosscutting concerns.  The revocation code doesn't care about the structure of the objects involved.  It shouldn't know the layout of a Domain object to be able to revoke domain based tokens16:53
dolphmayoung: disable notifications + disable required prior to deletion would be a useful combination16:53
dolphmAPI-wide16:53
ayoung++16:53
*** mlavalle has joined #openstack-dev16:53
*** pablosan has joined #openstack-dev16:54
*** csd has quit IRC16:55
*** csd has joined #openstack-dev16:55
*** henrynash has joined #openstack-dev16:56
ayoungDELETE could return a 202  the first time to disable.16:57
*** krotscheck has quit IRC16:58
*** Mandell has quit IRC16:58
*** sthaha has quit IRC16:58
*** dvarga is now known as dvarga|away16:58
gyeedolphm, ayoung, sure require disable prior to deletion sound reasonable16:58
*** dvarga|away is now known as dvarga16:58
*** MaxV has quit IRC16:58
*** NikitaKonovalov is now known as NikitaKonovalov_16:58
dolphmayoung: that's not very idempotent16:58
ayounggyee, we already do that for domains, which is why I needed this.  It is the disable event that revokes token16:58
ayoungdolphm, I know16:58
ayoungdolphm, maybe the second DELETE needs an additional value to say "yes I mean it"16:59
*** SumitNaiksatam has joined #openstack-dev16:59
dolphmayoung: still not idempotent16:59
gyeeheh, and 24hr waiting period16:59
*** coolsvap_away is now known as coolsvap16:59
*** samalba has joined #openstack-dev16:59
*** angdraug has joined #openstack-dev16:59
*** drewlander has joined #openstack-dev17:00
*** kevinconway_ has joined #openstack-dev17:00
ayoungdolphm, DELETE could return an URL to use to really delete17:00
*** mrodden has joined #openstack-dev17:00
*** mikeoutland has quit IRC17:00
*** kevinconway has quit IRC17:00
*** kevinconway_ is now known as kevinconway17:00
ayoungDELETE http://host/v4/users/abc123  returns http://host/v4/disabled/users/abc12317:01
ayoungto clean up then you do DELETE http://host/v4/disabled/users/abc12317:01
gyeeayoung, nah, that's too much17:02
ayoungif you do a get on http://host/v4/users/abc123  once it is disabled it has an additional link in it17:02
*** boris-42 has joined #openstack-dev17:02
gyeejust return a 403 for deleting an enabled resource17:02
*** alop has joined #openstack-dev17:02
ayounggyee, its not much different than the "trash" icon on the desktop17:02
gyeeayoung, but that's UI magic17:03
ayounggyee, anyway,  are you OK with the current approach?17:03
*** SergeyLukjanov is now known as SergeyLukjanov_17:03
*** martyntaylor has left #openstack-dev17:04
gyeesure, if we insist on disable prior to deletion, that would essentially make disable a first class citizen17:04
ayoung++17:04
*** amuller has joined #openstack-dev17:04
*** nmagnezi has quit IRC17:04
*** I159 has quit IRC17:04
morganfainbergayoung, gyee, just caught up17:05
*** dave_tucker is now known as dave_tucker_zzz17:05
*** amuller__ has quit IRC17:05
morganfainbergyes. 403 on non-disabled resource = good imo17:05
gyeemorganfainberg, ++17:05
*** BobBall is now known as BobBallAway17:05
morganfainbergit might take some adoption time17:05
morganfainbergbut i do like it.  we already do that on domaisn17:05
ayoungmorganfainberg, we already do that for domains17:05
morganfainbergdomains*17:05
ayoungheh17:05
morganfainbergayoung, lol yeah ;)17:06
morganfainbergconsistency is good in approach17:06
*** marun has joined #openstack-dev17:06
*** dbalog has quit IRC17:06
*** ifarkas has joined #openstack-dev17:06
ayoungmorganfainberg, you ok with https://review.openstack.org/#/c/68548/  ?17:06
gyeemorganfainberg, I am a bit agonizing over this as well. I would think disable prior to deletion is a deployment decision17:06
*** yamahata has quit IRC17:07
morganfainbergayoung looking now17:07
ayounggyee, can you remove the -1 on it if you are OK with the approach.17:07
gyeehow are getting close to mandating deployment policies17:07
gyeeayoung, sure17:07
*** marios is now known as marios|gone17:07
morganfainberggyee, eh, personally no. i think it should be a project driven approach.  if we want to make it a deployment decision, we should make it toggle-able, but having different behaviors between resources (domain, project, user, etc) is painful17:08
morganfainbergheck, i think that we nuke the row in the DB is bad.17:08
ayounggyee, the thought was that on domain, deleting the domain deleted all the users, and that was a big deal.  Disable was what most people wanted:  don't allow anyone in that domain to login etc.  But you don't want to dump the user list.  Deleting was costly17:08
morganfainbergif we want audit trails, we shouldn't do that17:08
*** marekd is now known as marekd|away17:08
*** pixelb has quit IRC17:08
*** DinaBelova is now known as DinaBelova_17:08
ayoungaudit is going to need the notifications, and they are going to look somewhat different, aren't they?  Roles based operations are going to have to specify  userid, roleid, and project/domainid17:09
gyeeayoung, yeah, we sort of let the cat out for the domain deletion policy17:09
morganfainbergayoung, i'd say disable is what most people want in all cases (esp. if usernames are domain scope)17:09
*** alop has quit IRC17:09
morganfainbergdomain scope constrained17:10
ayoungmorganfainberg, hence my digression about the DELETE verb being used17:10
ayoungDELETE ->  move to the disabled list17:10
*** YorikSar has joined #openstack-dev17:10
morganfainbergayoung, yeah17:10
*** _cjones_ has joined #openstack-dev17:10
ayoungBut that is a 4.0 decision now.17:10
gyeemorganfainberg, yeah, deployment-wise, nobody just going to delete stuff17:10
morganfainbergok, i'm looking at that review now, then i have a ton of code to write.17:10
ayoung++17:11
*** markwash has joined #openstack-dev17:11
gyeeusually done as part of workflow17:11
*** dstanek has quit IRC17:11
*** dstanek has joined #openstack-dev17:11
*** neelashah has quit IRC17:11
morganfainbergayoung, we aren't notifying on update for domains?17:11
*** hartsocks has left #openstack-dev17:12
*** neelashah has joined #openstack-dev17:12
*** tong_ has joined #openstack-dev17:12
*** Shrews has joined #openstack-dev17:13
ayoungmorganfainberg, we are, but we don't have enough data to know that it is a disable.  We would need to duplicate the disable check in the notified object, and it does not belong there17:13
*** lsmola_ has quit IRC17:13
*** dprince has joined #openstack-dev17:13
ayoungthe revoke code would then be responsible for looking up the object in the back end and checking the state17:13
morganfainbergwe have update on project and in some cases you'll see project -> updated, project -> disabled17:13
*** JordanP has quit IRC17:13
morganfainbergdue to one call with your logic17:13
gyeemorganfainberg, the only thing in the payload is the resource ID17:14
morganfainberggyee, you still see action-type17:14
ayoungmorganfainberg, yes, they are both triggered by the same call, and it is possible that the same sink would request both notifications17:14
*** Drankis has joined #openstack-dev17:14
*** tongli has quit IRC17:14
ayoungwonder how useful update will be in practice17:14
morganfainbergayoung, yesh, my point was that domain doens't behave like project does in this case17:14
*** eglynn has quit IRC17:14
morganfainbergs/doens't/doesn't17:15
ayoungmorganfainberg, I would think that a client would decide whether to request notifications on update or on disable17:15
ayoungnot both17:15
*** colinmcnamara has joined #openstack-dev17:15
morganfainbergayoung, correct, so are we going to notify on domain update?17:15
*** neelashah has quit IRC17:16
ayoungmorganfainberg, that notifications already exists, I think,  just that revoke doesn't care about it yet17:16
ayoungprobably won't17:16
gyeeayoung is advocating adding the D to CRUD :)17:16
gyeecreate, read, update, delete, and disable17:16
morganfainbergayoung, https://review.openstack.org/#/c/68548/2/keystone/assignment/core.py line 301, U is missing from the notifications on domain17:17
morganfainberggyee, ^ U from CRUD17:17
ayoungmorganfainberg, add it when needed.17:17
morganfainbergayoung, ok17:17
morganfainbergayoung, -1 only for the same reasons stevemar pointed out (gating change that would conflict)17:18
dolphmbknudson: left a comment on https://review.openstack.org/#/c/66137/ ... i'm happy to revise the tests if you agree17:18
morganfainbergayoung, otherwise no issues.17:18
*** krtaylor has joined #openstack-dev17:18
*** mancdaz is now known as mancdaz_away17:18
bknudsondolphm: I figured the tests were that way because of something RAX did.17:19
tellesnobregahenrynash: can i still use project_id to filter user actions in this new policy.json? i would like to get a user, but it would only allow if the user is in the project that the requester is admin17:19
bknudsondolphm: so if the keystoneclient should only support strings for ids then I'd be fine with changing the tests17:19
dolphmbknudson: i find it odd that the client is expected to handle something other than strings as input... all id's are spec'd as strings, even if they're implemented as auto-incrementing ints or whatever17:20
bknudsondolphm: seems like it would be non-backwards compatible, though.17:20
dolphmbknudson: agree, for the corner case that you're running against an implementation exposing ints to the JSON api?17:20
*** nkinder has quit IRC17:20
dolphmbknudson: or you're running against a deployment that uses ints in the backend, and the client mistakenly thinks it can convert strings to ints itself17:21
morganfainbergso i commented dolphm, making str() the type we expect is fine imo17:21
*** dbalog has joined #openstack-dev17:21
bknudsondolphm: right, that's what I was thinking... my application using the keystoneclient thinks it can pass ints ... or maybe even some type of object that can turn into a string.17:21
morganfainbergdolphm, but for compat reasons i'll defer to your judgement...the pitchfork wielding angry mob will be coming to talk to you first.17:21
dolphmbknudson: the burden should be on your code to cast to strings, IMO17:22
*** KurtMartin has joined #openstack-dev17:22
dolphmmorganfainberg: lol17:22
dolphmmorganfainberg: bknudson: what about logging a warning if not isinstance(s, basestring) ?17:23
bknudsonmorganfainberg: you don't get pitchfork-wielding mobs coming at you when keystone doesn't work?17:23
dolphmbefore trying to convert to a string17:23
morganfainbergbknudson, nah, my company is small.17:23
morganfainbergbknudson, we can't afford pitchforks... or a mob yet17:23
dolphm(there's only one pitchfork, and morganfainberg keeps it locked up)17:23
bknudsonmorganfainberg: ok... well, now you know why I review things so closely17:23
morganfainbergbknudson, :)17:23
morganfainbergbknudson, and i rarely disagree with your reasoning17:24
morganfainbergdolphm, warning would be a good middleground17:24
*** dave_tucker_zzz is now known as dave_tucker17:24
*** comay has quit IRC17:24
morganfainbergdolphm, also @deprecated is really only functional as a decorator afaict17:25
*** comay has joined #openstack-dev17:25
morganfainbergthe __call__ method on it is strictly for functools stuff.17:25
dolphmmorganfainberg: hmm... maybe that got dropped in the move to oslo17:25
dolphmmorganfainberg: you *should* be able to call it for exactly this situation17:25
morganfainbergdolphm, i don't disagree17:25
morganfainbergdstanek, ^17:25
*** mmagr has quit IRC17:26
morganfainbergdolphm, but we don't have that yet, so. going to keep it as is? want me to put "K" release in the message?17:26
*** BillStokes has joined #openstack-dev17:26
*** bdpayne has joined #openstack-dev17:27
dolphmmorganfainberg: up to you17:27
dolphmmorganfainberg: i don't think that was the reason for my -1 on whatever patch that was lol17:27
morganfainbergdolphm, adding "and will be removed in K" just for clarity17:27
morganfainbergdolphm, nah, was oauth plugin.17:27
morganfainbergi am fixing that might as well make message better17:27
dstanekmorganfainberg: reading back...how far?17:27
morganfainbergdstanek, @deprecated like 5 lines?17:28
*** jistr has quit IRC17:28
dstanekmorganfainberg, dolphm: how would you want to use it?17:29
morganfainbergdstanek, deprecated.log_deprecated(<args>)17:29
morganfainbergdstanek, or similar17:29
morganfainbergdstanek, https://review.openstack.org/#/c/68551/1/keystone/auth/controllers.py line 45 (new file)17:29
morganfainbergis an example of what would be good to provide it for17:29
*** afazekas has joined #openstack-dev17:30
*** yassine has quit IRC17:30
morganfainbergdstanek, dolphm , i guess i could leave this on the config.setup_authentication bit17:31
*** neelashah has joined #openstack-dev17:31
morganfainbergthe @deprecated decorator instead of where the message is now17:31
*** bauzas has quit IRC17:31
*** martyntaylor has joined #openstack-dev17:32
*** drewlander has quit IRC17:32
*** alop has joined #openstack-dev17:32
*** drewlander has joined #openstack-dev17:33
dstanekmorganfainberg: you 'could' reuse the decorator, but i don't think it would be pretty17:33
*** nkinder has joined #openstack-dev17:33
ayoungstevemar, lbragstad so...I see the trusts notifications are going in without the extension name on them.  I wonder if that is a mistake?17:35
*** mikeoutland has joined #openstack-dev17:36
* lbragstad checking17:36
ayoungI can drop that from my patch17:36
ayounglbragstad, 'trust' as opposed to 'OS-TRUST:trust:17:36
*** afazekas has quit IRC17:36
ayounglbragstad, https://review.openstack.org/#/c/68548/2/keystone/trust/core.py17:37
garykttx: ping17:37
*** drewlander has quit IRC17:37
*** jruzicka has quit IRC17:37
lbragstadhttps://review.openstack.org/#/c/66719/10/keystone/trust/core.py17:37
ayounglbragstad, yeah, I saw17:37
lbragstadyeah, if you're ok with 'trust' then you can drop that from your patch ayoung17:38
*** changbl has joined #openstack-dev17:38
*** belmoreira has quit IRC17:39
ayounglbragstad, I think we need the namespace for extensions. With OAUTH we have consumer and access_token17:40
ayoungconsumer is a pretty generic term17:40
*** csd_ has joined #openstack-dev17:40
ayounglbragstad, https://review.openstack.org/#/c/68548/2/keystone/contrib/oauth1/core.py17:40
*** csd_ has quit IRC17:40
lbragstadayoung:  you want the same with trusts, the extension added17:41
ayoungtrust could also be Kerberos Cross domain trusts in the future17:41
*** csd_ has joined #openstack-dev17:41
*** michchap has joined #openstack-dev17:41
*** michchap has quit IRC17:41
ayounglbragstad, I think so.  We can wait until your patch gates, then rebase.  I assume it is shardy that needs the notifications from yours?17:41
*** michchap has joined #openstack-dev17:41
lbragstadI can push something up to, it is only a couple lines17:42
tellesnobregawhats is the command for listing users for a project? the one on the documentation gives me not found17:42
ayounglbragstad, I can commit mine on top of yours to  avoid resetting the gate17:43
ayoungso long as you and the other interested parties are aware17:43
*** xarses has joined #openstack-dev17:43
*** jpich has quit IRC17:43
lbragstadayoung: ok, as long as you're ok with it. Yeah that makes sense to me17:43
*** nacim has quit IRC17:44
annegentletellesnobrega: do you have admin privs in your environment? are you using http://docs.openstack.org/user-guide-admin/content/admin_cli_manage_projects_users.html17:44
*** tanisdl has joined #openstack-dev17:44
*** ygbo has quit IRC17:44
*** max_lobur is now known as max_lobur_afk17:45
*** sushil_ has quit IRC17:46
tellesnobregaannegentle: i do, im using the rest api, i get response up to get_project, but when i try to list the user it gives me not found. the URL is v3/project/${project_id}/users17:46
*** michchap has quit IRC17:46
*** exed_ has quit IRC17:46
lbragstadayoung: wondering if something should be added to the docs for this? Just to avoid confusion between https://github.com/openstack/keystone/blob/master/keystone/identity/core.py#L322 and using extension namespace in the resource type?17:47
morganfainbergdstanek, ok so i'm hitting that baffling tox issue again17:47
morganfainbergdstanek, but i think this is all related to the re-emergence of run_tests.17:47
lbragstadayoung: resources from an extension perspective have to use the extension name17:48
*** Alexei_987 has quit IRC17:48
*** csd has quit IRC17:48
dstanekmorganfainberg: are you using run_tests.sh?17:48
morganfainbergdstanek, run_tests shows that we have an error and it's that baffling _StringException again17:49
morganfainbergno context17:49
morganfainbergdstanek, tox just ...17:49
morganfainbergdstanek, fails silently17:49
dstanekmorganfainberg: do you have a patch that i can download and try?17:49
*** johnthetubaguy has quit IRC17:49
morganfainbergdstanek, let me push it to github.17:49
*** amcrn has joined #openstack-dev17:50
morganfainbergdstanek, https://github.com/morganfainberg/keystone/commit/0118a778bad9ce03d894ed691e3129ed8c716b0e17:51
*** xqueralt has joined #openstack-dev17:51
*** danpb has quit IRC17:51
morganfainbergdstanek, it's failing on keystone.tests.test_catalog.V2CatalogTestCase.test_endpoint_create17:51
stevemarayoung, lbragstad, yeah, i guess we missed the OS-TRUST part not being there initially,17:51
*** markmcclain has joined #openstack-dev17:51
morganfainbergdstanek, Traceback (most recent call last):17:51
morganfainberg_StringException17:51
stevemarayoung, you can change that part up in your patch17:52
morganfainbergdstanek, i'm sure i'm doing something dumb.17:52
morganfainbergoh17:52
morganfainbergi know what it is.17:52
dstanekmorganfainberg: ?17:52
morganfainbergi think17:52
morganfainbergoh nope17:52
morganfainbergnvm,17:52
morganfainbergit's not in my new test17:52
stevemarayoung, update the doc too then :) https://review.openstack.org/#/c/66719/10/doc/source/event_notifications.rst17:52
morganfainbergdstanek, so yeah, i'm kindof baffled.17:52
*** yamahata has joined #openstack-dev17:53
*** florentflament has quit IRC17:53
*** ndipanov is now known as ndipanov_gone17:53
*** redhat has joined #openstack-dev17:54
*** s2r2_ has quit IRC17:54
morganfainbergdstanek, whopse17:54
dstanekmorganfainberg: how long does it take to fail?17:54
morganfainbergmissing a file17:54
*** mikeoutland has quit IRC17:54
morganfainbergbut my test run has it i think17:54
morganfainbergsec17:54
lbragstadstevemar: ayoung I think so too,17:54
lbragstadayoung:  if you want I can push up a patch for the docs.17:55
morganfainbergdstanek, it does almost a full test run17:55
morganfainbergdstanek, and all files claim to be there, so nvm on missing file17:55
*** mikeoutland has joined #openstack-dev17:56
dstanekmorganfainberg: it's running...17:56
dstanekmorganfainberg: worst idea ever ;-) http://paste.openstack.org/raw/61775/17:57
morganfainbergdstanek, oh god17:57
morganfainbergdstanek, noooooooooooooooo17:57
*** csd_ is now known as csd17:58
kgriffsttx: is openstack-announce only for integrated projects?17:58
*** tong_ has quit IRC17:58
*** markmcclain has quit IRC17:58
*** ViswaV has joined #openstack-dev17:59
sdakekgriffs we did incubated announcements there as well17:59
kgriffsttx: just wondering if I need/should put out a marconi i-2 announcement to one of the lists17:59
kgriffssdake: mmm, I didn't see it here: http://lists.openstack.org/pipermail/openstack-announce/2014-January/000187.html18:00
kgriffsor here18:00
kgriffshttp://lists.openstack.org/pipermail/openstack-announce/2014-January/date.html18:00
kgriffsam I looking in the wrong place?18:00
sdakekgriffs this was about a year ago, maybe ttx has changed the policy18:00
*** derekh has quit IRC18:00
*** exed_ has joined #openstack-dev18:00
*** nati_ueno has joined #openstack-dev18:00
*** teran has quit IRC18:00
*** henrynash has quit IRC18:02
*** mkollaro has quit IRC18:02
*** s2r2_ has joined #openstack-dev18:02
*** SumitNaiksatam has quit IRC18:02
*** neeti has quit IRC18:03
*** MarkAtwood has joined #openstack-dev18:03
*** tongli has joined #openstack-dev18:03
kgriffssdake: kk18:03
*** ayoung is now known as ayoung-mtg18:04
*** viktors has left #openstack-dev18:05
*** galstrom is now known as galstrom_zzz18:06
*** SergeyLukjanov_ is now known as SergeyLukjanov18:06
*** buzztroll has quit IRC18:07
*** DinaBelova_ is now known as DinaBelova18:07
*** praneshp has joined #openstack-dev18:08
*** MarkAtwood has quit IRC18:08
*** MarkAtwood has joined #openstack-dev18:09
*** dkuffner has joined #openstack-dev18:09
*** ayoung-mtg has quit IRC18:10
*** harlowja_away is now known as harlowja18:10
*** jmontemayor has quit IRC18:10
*** jruzicka has joined #openstack-dev18:10
*** jmontemayor has joined #openstack-dev18:10
*** SumitNaiksatam has joined #openstack-dev18:12
*** MarkAtwood has quit IRC18:12
*** drewlander has joined #openstack-dev18:12
*** dkuffner has quit IRC18:14
sgranany glance devs about?18:15
*** dkuffner has joined #openstack-dev18:15
sgranI'd appreciate it if someone could look at https://review.openstack.org/#/c/67025/ (simple bugfix backport to havana)18:15
dstanekmorganfainberg: i get crazy results under nose too18:15
sgranI know the gate is sad, I just want to make sure that I don't need to do more there18:15
*** krotscheck has joined #openstack-dev18:16
morganfainbergdstanek, something _very_ strange is going on18:17
morganfainbergdstanek, it is absolutely somthing to do with my code, but this is very very very odd18:17
dstanekmorganfainberg: does this look familiar to you? http://paste.openstack.org/show/61778/18:21
morganfainbergloading....18:21
morganfainbergloading....18:21
morganfainbergdstanek, yeah that looks "sane"18:22
morganfainbergdstanek, that is a correct error if it's being loaded more than once (external that is)18:22
dstanekmorganfainberg: but i wouldn't expect that from running: .tox/py27/bin/nosetests keystone/tests/test_[a]*.py18:22
morganfainbergdstanek, nor would i18:22
morganfainbergdstanek, it should be impossible to load it more than once barring a baaaadly configured something18:23
morganfainbergi use a global to gate running load_plugins more than once.18:23
*** coolsvap has quit IRC18:23
*** coolsvap has joined #openstack-dev18:24
*** clayb has joined #openstack-dev18:25
dstanekmorganfainberg: what about if auth methods are loaded in a test and later auth plugins are loaded?18:25
*** ayoung-mtg has joined #openstack-dev18:26
*** gyee has quit IRC18:27
dstanekmorganfainberg: like maybe in test_auth_plugin.py18:27
morganfainbergdstanek, the old lazy-loading auth-plugins was bad18:27
*** praneshp has quit IRC18:27
morganfainbergdstanek, it shouldn't be possible though.18:27
morganfainbergdstanek, i have an explicit "IF PLUGINS_LOADED" check so that whole logic is skipped18:27
morganfainbergdstanek, and test_auth_plugin explicitkly clears the registry, so it should be fine18:29
*** armax has joined #openstack-dev18:30
*** jcooley_ has quit IRC18:31
*** praneshp has joined #openstack-dev18:31
*** colinmcnamara has quit IRC18:31
*** polfilm has quit IRC18:32
*** NikitaKonovalov_ is now known as NikitaKonovalov18:33
*** DinaBelova is now known as DinaBelova_18:33
*** amuller has quit IRC18:34
*** andreaf has quit IRC18:34
*** branen has joined #openstack-dev18:34
*** alex_klimov has joined #openstack-dev18:34
*** shardy is now known as shardy_afk18:35
tellesnobregamorganfainberg: hey, can you help me out with some questions about keystone v3 api and policy.json?18:35
*** zaitcev has joined #openstack-dev18:35
*** vuil has joined #openstack-dev18:36
*** SumitNaiksatam_ has joined #openstack-dev18:37
morganfainbergtellesnobrega, i can try18:37
morganfainbergtellesnobrega, no guatantees though18:37
*** xmltok has joined #openstack-dev18:37
*** smurugesan has joined #openstack-dev18:38
morganfainbergdstanek, i can't tell you why it's broken... this test shouldn't fail :(18:38
tellesnobregamorganfainberg: sure, the thing is, I'm using the new policy, policy.v3cloudsample.json, but most of the rules involve only domain restriction, I'm trying to verify if using project_id restrictions still work in some cases, for example, i want to create a user in a project, and for that i'm using a admin user on this same project, and set the policy with this rule "identity:create_user": "rule:admin_required and project_id:%(user.project_id)s18:39
*** SumitNaiksatam has quit IRC18:40
*** SumitNaiksatam_ is now known as SumitNaiksatam18:40
*** tqtran has joined #openstack-dev18:40
tellesnobregamorganfainberg: but when i try to create the user i get the output that i dont have authorization to create the user18:40
*** henrynash has joined #openstack-dev18:41
*** NikitaKonovalov is now known as NikitaKonovalov_18:41
*** michchap has joined #openstack-dev18:41
*** michchap has quit IRC18:42
*** michchap has joined #openstack-dev18:42
*** terrylhowe has quit IRC18:43
*** xarses has quit IRC18:43
*** galstrom_zzz is now known as galstrom18:44
*** arnaud has joined #openstack-dev18:44
*** arnaud__ has joined #openstack-dev18:44
*** matiu has quit IRC18:44
*** jcooley_ has joined #openstack-dev18:45
*** NikitaKonovalov_ is now known as NikitaKonovalov18:46
*** michchap has quit IRC18:47
*** henrynash has quit IRC18:47
morganfainbergtellesnobrega, i, unfortunately, don't know off the top of my head henrynash knows a lot more about that18:48
*** dkuffner has quit IRC18:48
morganfainbergtellesnobrega, i don't see why project restrictions wouldn't work18:49
*** mgagne has quit IRC18:49
morganfainbergbut remember users are domain scoped, not project scoped18:49
morganfainbergcreating a user isn't a project task18:49
tellesnobregamorganfainberg: i see, thanks, all actions with user now are domain scoped?18:50
*** henrynash has joined #openstack-dev18:51
morganfainbergtellesnobrega, no18:51
morganfainbergtellesnobrega, users exist within a domain18:51
morganfainbergtellesnobrega, so "creating a user" is doing so for the domain18:51
tellesnobregamorganfainberg: how about update, delete? also for the domain?18:52
morganfainbergtellesnobrega, ok, so domain is a container for things18:53
morganfainbergtellesnobrega, updating a user is updating a specific user.18:53
*** mgagne has joined #openstack-dev18:53
morganfainbergtellesnobrega, deleting a user is deleting a specific user (user just happens to be in a domain container)18:53
morganfainbergtellesnobrega, when you create a user you are creating a user "in a domain"18:53
tellesnobregamorganfainberg: huum, makes sense18:54
morganfainbergusers (at least as far back as essex) never were created "in a project"18:54
*** mgagne1 has joined #openstack-dev18:55
*** sahid has quit IRC18:55
morganfainbergtellesnobrega, it's hard to explain :P.  domains are about as clear as mud imo when describing it18:55
*** spzala has quit IRC18:55
tellesnobregamorganfainberg: i understood the big picture18:55
morganfainbergtellesnobrega, so i don't know what you're trying to accomplish by creating a user "in a project"18:56
*** sandywalsh has quit IRC18:56
morganfainbergif it's assigning a role to a user, that is a different call than create_user.18:56
morganfainbergtellesnobrega, hope that helps set you on the right path :)18:56
tellesnobregamorganfainberg: im working on creating some roles, like project_admin and domain_admin , and I'm trying to figure out who should be responsible for what18:57
*** tkay has joined #openstack-dev18:57
tellesnobregamorganfainberg: it does for sure18:57
*** Mandell has joined #openstack-dev18:57
*** dvarga has quit IRC18:57
*** mgagne has quit IRC18:57
*** vartom1111111114 has joined #openstack-dev18:59
*** mgagne1 is now known as mgagne19:00
*** mikeoutland has quit IRC19:00
*** mikeoutland has joined #openstack-dev19:00
*** jcooley_ has quit IRC19:01
*** martyntaylor has left #openstack-dev19:01
*** teran has joined #openstack-dev19:01
*** xarses has joined #openstack-dev19:02
*** tqtran1 has joined #openstack-dev19:02
*** teran_ has joined #openstack-dev19:03
*** jprovazn_ has quit IRC19:03
*** ViswaV has left #openstack-dev19:03
*** tqtran has quit IRC19:04
*** teran has quit IRC19:06
*** anande has joined #openstack-dev19:06
*** dvarga has joined #openstack-dev19:07
*** mikeoutland has quit IRC19:07
*** DinaBelova_ is now known as DinaBelova19:07
*** anande has left #openstack-dev19:07
dstanekmorganfainberg: another question...simple-challenge-response or simple_challenge_response?19:07
morganfainbergdstanek, simple-challenge-response seems to break things.19:07
morganfainbergdstanek, like oslo.config doesn't handle it right when you pass it through the actual loader19:08
dstanekmorganfainberg: it looks like in your patch you have both19:08
morganfainbergvs. just injecting it like we did before19:08
morganfainbergdstanek, do I?19:08
morganfainbergugh.19:08
morganfainbergi thought i fixed that19:08
*** sweston has joined #openstack-dev19:08
dstanektest_auth_plugin.py uss _ and the config uses -19:09
morganfainbergdstanek, not seeing it in grep19:09
morganfainbergdstanek, whcih config?19:09
*** henrynash has quit IRC19:10
dstanekmorganfainberg: oh, wait that may be me19:10
morganfainbergdstanek, i pushed the changeset https://review.openstack.org/#/c/68551/ rather than just using github.19:10
*** sweston has quit IRC19:10
morganfainbergdstanek, might make it easier.19:10
morganfainberg(even if it fails)19:11
tellesnobregahenrynash: hi, how can i get the project_id when deleting a user, using the v3 api. I want to create a rule in policy using the project_id instead of domain_id19:11
*** sweston has joined #openstack-dev19:11
dstanekmorganfainberg: yeah, it was me19:11
*** networkstatic has joined #openstack-dev19:11
xmltokim gathering stats on the kvm instances on my compute nodes, i'd like to resolve the uuid from the qemu parameters to the vm name in openstack. does anyone know if that information is stored anywhere on the compute node -- it looks like not. i'd like to avoid having to make API calls to resolve the uuids19:11
morganfainbergdstanek, ok phew ;)19:11
morganfainbergdstanek, i was suddenly very concerned.19:11
*** mikeoutland has joined #openstack-dev19:13
*** colinmcnamara has joined #openstack-dev19:13
*** sweston has quit IRC19:15
*** aditirav has quit IRC19:18
dstanekmorganfainberg: depending on how i run the tests i get http://paste.openstack.org/show/61781/19:18
*** ruhe is now known as _ruhe19:19
morganfainbergdstanek, test isolation issues.  but i'm not even getting that info back out19:19
morganfainbergdstanek, what are you using to run the tests?19:19
morganfainbergi'm getting _StringError19:19
morganfainbergno context no traceback19:19
morganfainbergerm no stack in the traceback19:19
dstanekmorganfainberg: nose19:19
morganfainbergdstanek, run_tests is just eating it then?19:20
dstanekmorganfainberg: had to bail on testr and go back to the tried and true nose19:20
morganfainbergdstanek, if you're loading simple_challenge_response and not passing the extra info, thats fine19:21
morganfainbergi'm getting an error in what seems to be a completely unrelated test19:21
*** buzztroll has joined #openstack-dev19:21
*** vkozhukalov has quit IRC19:22
*** e0ne has joined #openstack-dev19:22
*** sandywalsh has joined #openstack-dev19:23
*** galstrom is now known as galstrom_zzz19:23
*** salv-orlando has joined #openstack-dev19:24
*** DGlennH has joined #openstack-dev19:26
*** mikeoutland has quit IRC19:29
*** markwash_ has joined #openstack-dev19:30
*** harlowja is now known as harlowja_away19:31
*** kgriffs is now known as kgriffs_afk19:31
*** markwash has quit IRC19:32
*** markwash_ is now known as markwash19:32
morganfainbergdstanek, ok so... maybe the auth_plugin loading can't be done in the controller19:33
morganfainbergdstanek, maybe it needs to be part of the backend loading code?19:33
*** ytwu has quit IRC19:34
*** ayoung-mtg has quit IRC19:36
*** sahid has joined #openstack-dev19:38
*** jtomasek has joined #openstack-dev19:38
*** kenperkins_ has quit IRC19:38
*** vartom1111111115 has joined #openstack-dev19:38
*** NikitaKonovalov is now known as NikitaKonovalov_19:39
*** colinmcnamara has quit IRC19:40
*** sweston has joined #openstack-dev19:41
*** vartom1111111114 has quit IRC19:42
*** dvarga has quit IRC19:42
*** sarob has joined #openstack-dev19:42
*** michchap has joined #openstack-dev19:43
*** tqtran has joined #openstack-dev19:44
*** novas0x2a|laptop has joined #openstack-dev19:44
*** NikitaKonovalov_ is now known as NikitaKonovalov19:44
*** redhat has quit IRC19:44
*** willingc has quit IRC19:44
*** praneshp has quit IRC19:45
*** akrivoka has quit IRC19:46
*** markmcclain has joined #openstack-dev19:46
*** exed_ has quit IRC19:47
*** exed_ has joined #openstack-dev19:47
*** michchap has quit IRC19:47
*** ytwu has joined #openstack-dev19:47
*** tqtran1 has quit IRC19:48
*** mszilagyi has joined #openstack-dev19:49
*** exed_ has quit IRC19:49
*** sarob has quit IRC19:49
*** NikitaKonovalov is now known as NikitaKonovalov_19:49
*** jtomasek has quit IRC19:49
*** sarob has joined #openstack-dev19:50
*** notel has quit IRC19:50
*** ayoung-mtg has joined #openstack-dev19:50
*** gokrokve has joined #openstack-dev19:52
*** devoid has quit IRC19:52
*** devoid1 has joined #openstack-dev19:52
*** devoid1 is now known as devoid19:53
*** markmcclain has quit IRC19:53
*** vartom1111111115 has quit IRC19:54
*** ytwu has quit IRC19:54
*** markmcclain has joined #openstack-dev19:54
*** sarob has quit IRC19:54
*** ytwu has joined #openstack-dev19:54
*** bdpayne has quit IRC19:54
*** NikitaKonovalov_ is now known as NikitaKonovalov19:54
*** markmcclain has quit IRC19:55
*** markmcclain has joined #openstack-dev19:55
*** sarob has joined #openstack-dev19:56
*** bdpayne has joined #openstack-dev19:56
*** zzelle has joined #openstack-dev19:58
*** sarob has quit IRC19:58
*** gokrokve has quit IRC19:58
*** sarob has joined #openstack-dev19:58
*** harlowja_away is now known as harlowja19:59
*** NikitaKonovalov is now known as NikitaKonovalov_19:59
*** terrylhowe has joined #openstack-dev20:00
*** ayoung-mtg has quit IRC20:01
*** praneshp has joined #openstack-dev20:03
morganfainbergdstanek, ok i resolved it, changed how the plugins are loaded.20:03
*** sarob has quit IRC20:04
*** mrodden has quit IRC20:04
*** NikitaKonovalov_ is now known as NikitaKonovalov20:04
*** rfolco has quit IRC20:04
*** jcoufal has joined #openstack-dev20:04
*** dhellmann_ is now known as dhellmann20:04
*** rnirmal has quit IRC20:05
*** Gordonz has quit IRC20:05
zzelledhellmann, ping20:05
dstanekmorganfainberg: nice20:05
*** dvarga has joined #openstack-dev20:06
morganfainbergdstanek, hooking it into load_backends in service.py20:06
*** sn6i23a has joined #openstack-dev20:06
morganfainbergdstanek, waaaaay cleaner20:06
*** tongli has quit IRC20:06
*** rnirmal has joined #openstack-dev20:07
*** mrodden has joined #openstack-dev20:08
*** dvarga is now known as dvarga|away20:11
*** dvarga|away is now known as dvarga20:11
*** rnirmal has quit IRC20:12
*** dave_tucker is now known as dave_tucker_zzz20:13
*** gokrokve has joined #openstack-dev20:14
*** epende has joined #openstack-dev20:15
*** redhat has joined #openstack-dev20:16
*** henrynash has joined #openstack-dev20:16
*** sweston_ has joined #openstack-dev20:17
*** alex_klimov has quit IRC20:17
morganfainbergbknudson, sorry was working on test fixes shouldn't have marked that as "WIP"20:17
morganfainbergbknudson, addressing your comments now.20:17
*** sweston has quit IRC20:18
*** ytwu1 has joined #openstack-dev20:18
*** DynamiteXXL has joined #openstack-dev20:19
*** ytwu has quit IRC20:20
*** epende has quit IRC20:20
*** buzztroll has quit IRC20:20
*** s2r2__ has joined #openstack-dev20:20
*** vuil has quit IRC20:20
*** sweston_ has quit IRC20:22
*** doug-fish has quit IRC20:22
*** morazi has quit IRC20:22
*** vuil has joined #openstack-dev20:22
marunrussellb: ping20:23
*** NikitaKonovalov is now known as NikitaKonovalov_20:23
*** s2r2_ has quit IRC20:23
*** vipul is now known as vipul-away20:24
*** vuil has quit IRC20:25
*** kragniz has joined #openstack-dev20:26
*** morazi has joined #openstack-dev20:26
*** gyee has joined #openstack-dev20:27
*** Drankis has quit IRC20:28
*** SergeyLukjanov is now known as SergeyLukjanov_20:28
*** KurtMartin has quit IRC20:28
*** NikitaKonovalov_ is now known as NikitaKonovalov20:28
*** ifarkas has quit IRC20:28
*** aveiga has quit IRC20:29
*** yolanda_ has quit IRC20:29
*** markmcclain has quit IRC20:29
*** NikitaKonovalov is now known as NikitaKonovalov_20:31
*** raildo has quit IRC20:31
russellbmarun: pong20:32
*** jgrimm has quit IRC20:32
*** buzztroll has joined #openstack-dev20:33
*** kevinconway_ has joined #openstack-dev20:33
*** kevinconway has quit IRC20:34
*** kevinconway_ is now known as kevinconway20:34
marunrussellb: With the addition of docker to nova, do you see potential for testing with containers instead of vm's where possible?20:35
marunrussellb: I'm assuming that the docker support uses nova network at present, and am wondering what it would take for neutron to be supportable as well.20:35
russellbyou mean in the current devstack jobs?20:36
*** ytwu has joined #openstack-dev20:36
russellbusing docker as the backend?20:36
russellbtechnically we've had libvirt+LXC for much longer20:36
marunrussellb: Right.  And I was wondering why lxc support was removed.20:36
russellbit wasn't20:36
*** ytwu1 has quit IRC20:36
*** vipul-away is now known as vipul20:36
russellbstill there20:36
russellband we can't use either in place of what we run now, because neither support nearly as much of the API as libvirt/qemu20:37
marunrussellb: I know it wouldn't be possible to replace vm testing.20:37
*** sweston has joined #openstack-dev20:37
marunrussellb: but for things like stress testing or functional testing of neutron where the additional functionality was unnecessary (resizing, etc), containers would seem like a win.20:37
russellbmarun: for that we have a fake backend20:38
russellbyou can use that for stressing nova+neutron20:38
russellbthat's what the large-ops jobs use20:39
marunrussellb: That might stress nova+neutron, but iirc that doesn't allow properly stress testing neutron because network connectivity isn't actually achieved.20:39
marunrussellb: am I missing something?20:39
russellbshould still hit the neutron APIs all the same though i believe20:39
russellbbut no network traffic of course20:39
marunrussellb: Right, no connectivity20:39
russellbdepends on your goal i guess20:39
russellbstressing the control plane20:40
marunrussellb: we need to do that too, yes.20:40
*** vipul is now known as vipul-away20:40
marunrussellb: right now we're limited in how many vm's we can boot and how fast.  containers would seem to win on both counts20:40
marunrussellb: so in my mind, containers > fakevirt for stress testing20:40
*** mikeoutland has joined #openstack-dev20:40
russellbsure20:40
russellbno idea if it works though heh20:40
marunrussellb: the question is whether it would work now or how much work it would be to get it working20:41
marunrussellb: ah, ok20:41
*** rnirmal has joined #openstack-dev20:41
russellbsupposed to work, but we just have no CI for it20:41
russellbyet20:41
marunrussellb: who would you suggest I talk to?20:41
bknudsonmorganfainberg: having trouble merging.20:41
*** sweston has quit IRC20:42
*** mrda_away is now known as mrda20:42
russellbmarun: if you want to try docker, talk to ewindisch20:42
*** alop has quit IRC20:42
morganfainbergbknudson, yeah i am not sure why.  is your patchset going to not merge?20:42
bknudsonmorganfainberg: must be an issue with the servers20:42
*** KurtMartin has joined #openstack-dev20:42
morganfainbergbknudson, bleh.20:42
marunrussellb: cool, thank you for the info and the pointer.  :)20:42
marunewindisch: ping20:42
russellbnp20:42
morganfainbergbknudson, actually20:43
ewindischmarun: I"m here. I was reading the scrollback :)20:43
morganfainbergbknudson, i get a conflict when i rebase that chain to master20:43
*** alop has joined #openstack-dev20:43
ewindischmarun: well, first - awesome: but we're not there yet.20:43
*** michchap has joined #openstack-dev20:43
morganfainbergbknudson, but only mine.20:43
*** michchap has quit IRC20:43
morganfainbergwtf.20:43
*** michchap has joined #openstack-dev20:44
morganfainbergi think i need to wait until yours merges down - this isn't resolvable w/o rebasing your changes.20:44
marunewindisch: is there a plan to get there, where there is neutron-provided connectivity?20:44
morganfainbergand i don't want to yank them from the queue20:44
morganfainbergbknudson, ^20:44
ewindischmarun: I'm working on a gate for docker in Nova. I hope to finish that before the nova mid-session meetup20:44
morganfainbergbknudson, since they are already gating20:44
*** coolsvap is now known as coolsvap_away20:44
bknudsonmorganfainberg: ah, thanks... can still review it.20:44
*** buzztroll has quit IRC20:45
ewindischmarun: neutron support isn't integrated yet -- and I won't personally have cycles to spend on that until I get the gate finished20:45
marunewindisch: does the current docker driver have networking provisioned by nova network?20:45
morganfainbergbknudson, 2 things, deprecated code from oslo doesn't work except in a decorator format atm. and i think it isn't worth making it super hacky20:45
*** willingc has joined #openstack-dev20:45
ewindischmarun: yes20:45
*** colinmcnamara has joined #openstack-dev20:45
morganfainbergbknudson, 2, i can put a helper on test.core.testcase for resetting auth plugins, but don't want to put it in auth.controllers directly (test only)20:45
bknudsonmorganfainberg: what's super-hacky about moving related code into a function?20:45
morganfainbergbknudson, oh i see what you want.20:46
morganfainbergbknudson, eh. ok20:46
bknudsonmorganfainberg: I'm fine with a helper on test.core.testcase.20:46
bknudsonWould prefer it was a separate function in test.core.20:46
morganfainbergbknudson, last bit, order of plugins matters in some cases.20:46
morganfainbergbknudson, yeah i'll move it into a helper func on patchset 520:46
zzellemarun, russelb: perharps you could also mix fakevirt with real computes ?20:47
bknudsonmorganfainberg: if the order of plugins matters then will need to document that so that deployers know what to do.20:47
*** sweston has joined #openstack-dev20:47
morganfainbergbknudson, added that into the sample.conf20:47
bknudsonwhy would the order matter?20:47
morganfainbergbknudson, hm, good question, but i was told it did.20:47
zzellefakes are "unlimited", real ones "stress everything"20:47
morganfainbergbknudson, perhaps it's something to do with a method handling everything ?20:48
bknudsonmorganfainberg: gross and confusing20:48
morganfainbergbknudson, yeah.  i don't want to change that, but order was preserved and external was always first.20:48
*** michchap has quit IRC20:48
bknudsonmorganfainberg: so external has to be first if it's there?20:49
morganfainbergbknudson, external, password, token, oauth20:49
morganfainbergbknudson, i am guessing so.20:49
morganfainbergbknudson, but... honestly, i'm playing some catchup with the auth plugins.20:49
morganfainbergbknudson, it's unwinding some ick.20:49
morganfainbergbknudson, anyway, i'll let you review and catch the couple things we just discussed in patchset 520:50
bknudsonit worked fine before.20:50
morganfainbergbknudson, magic configuration option generation makes the test changes i am trying to get done for parallel testing very hard20:50
bknudsonmorganfainberg: does oslo.config support a different way to do it?20:51
morganfainbergbknudson, and i very much dislike conf options that appear out of thin-air20:51
bknudson(or should it?)20:51
*** nkinder has quit IRC20:51
*** SumitNaiksatam has quit IRC20:51
*** marun has quit IRC20:51
morganfainbergbknudson, i think we shouldn't be generating config options based upon another config option20:51
*** SumitNaiksatam has joined #openstack-dev20:51
morganfainbergbknudson, i don't think oslo is doing anything wrong20:51
morganfainbergbknudson, but because we define "foo" as a method we suddenly get a "foo" option we need to specify?20:52
*** galstrom_zzz is now known as galstrom20:52
morganfainbergbknudson, it feels like it was a hack to allow lazy loading of plugins rather than load them upfront20:52
bknudsonmorganfainberg: seems pretty common... see python logging.conf20:52
*** marun has joined #openstack-dev20:52
*** sweston has quit IRC20:52
morganfainbergbknudson, i think that is a terrible approach in logging too :P20:52
*** jruzicka has quit IRC20:53
marunewindisch: I'm afraid I lost my connection after you said that you were working on a gate for docker20:53
marunewindisch: what did I miss?20:53
bknudsonmorganfainberg: ok, and because of this all our customers have to update their config files?20:53
devoid ping ayoung20:53
bknudsonhere come the pitchforks20:53
*** jruzicka has joined #openstack-dev20:53
morganfainbergbknudson, i am supporting both ways.20:53
morganfainbergbknudson, for now.20:53
bknudsonwhen they're deprecated messages that's forcing them to change something that was working fine.20:53
*** ifarkas has joined #openstack-dev20:54
devoidis there a way to validate a keystone policy.json file?20:54
*** ytwu1 has joined #openstack-dev20:54
morganfainbergbknudson, i'm fine with writing a whole bunch of stuff to work around magic options.20:54
bknudsonthis is what drives customers away from openstack and to competitors20:54
*** markmcclain has joined #openstack-dev20:54
*** drewlander has quit IRC20:55
*** sweston has joined #openstack-dev20:55
morganfainbergbknudson, we did it for token providers...and anothe rchange will come there too20:55
*** ytwu has quit IRC20:55
ewindischmarun: neutron support isn't integrated yet and I don't have time for that until we get the gate online.20:55
morganfainbergbknudson, because we'll move to a pipeline.20:55
*** yeylon_ has quit IRC20:55
marunewindisch: that's fine, we need nova network support first for sure20:56
morganfainbergbknudson, you can -2 that changeset and i'll figure some other way around it.20:56
*** sahid has quit IRC20:56
ewindischmarun: I think what is there counts as nova-network support20:56
*** jruzicka has quit IRC20:56
*** coolsvap_away has quit IRC20:56
ewindischat least, technically, once the patches in teh queue land20:56
ewindisch;-)20:56
*** jruzicka has joined #openstack-dev20:56
bknudsonmorganfainberg: there are parts of it that I like...20:56
marunewindisch: do you have a sense of how much work is involved in getting neutron support added?  And is it an effort that could use assistance?20:56
morganfainbergbknudson, i wont complain. i'm just aiming for making things in keystone much easier to work w/ both deployment and development.  and "methods" and then each method needs another config options i say blech on both sides20:56
bknudsonmorganfainberg: and maybe just not deprecating the old options would be fine?20:57
morganfainbergbknudson, i could pull the log line out.20:57
bknudsonwe just support 2 ways of doing the config20:57
bknudsonand we also now validate that the name matches20:57
morganfainbergbknudson, is there a timeline you'd collapse that down?20:57
ewindischmarun: we can always use assistance... and effort: I'm not sure.20:58
marunewindisch: ok.  what are the patches for nova network?  That's probably a good starting point?20:58
morganfainbergbknudson, i don't think we should have many ways to accomplish the same thing in purpituity. but i don't mind initially leaving it undeprecated20:58
morganfainbergbknudson, config file wise, especially "magic" ways.20:59
marunewindisch: I don't have a lot of time for this, to be honest, but I think the benefits of being able to test without vm's will be very useful for neutron since we care more about connectivity than hypervisor-specific features.20:59
bknudsonmorganfainberg: I'm ok with deprecating one method or the other in the future... it just seems too soon now.20:59
*** jgrimm has joined #openstack-dev20:59
*** nkinder has joined #openstack-dev20:59
marunewindisch: so I'm hoping to give what help I can.20:59
morganfainbergbknudson, sure. i'll pull the deprecation warning out.20:59
*** jmontemayor has quit IRC21:00
ewindischmarun: awesome.21:00
ewindischmarun: lets sync again in a bit - I have a phone call at the moment21:00
marunewindisch: ok, sounds good.  please ping me when you're free.21:00
morganfainbergbknudson, i also made sure we don't error if method isn't defined using the "methods" option, since out-of-tree plugins may not define it.  but it does warn because it should be changed to have the method attribute21:00
*** jecarey has quit IRC21:00
ekarlsousing docker for what ?21:01
bknudsonmorganfainberg: it's going to have to error if using the plugins method?21:01
morganfainbergbknudson, yes, because we can't know using the "plugins" method what you're registering for21:02
*** jmontemayor has joined #openstack-dev21:02
*** dvarga is now known as dvarga|away21:03
*** jmontemayor has quit IRC21:03
*** dvarga|away is now known as dvarga21:03
morganfainbergbknudson, i think the plugin should claim it's method.21:03
*** jmontemayor has joined #openstack-dev21:03
*** xarses has quit IRC21:03
bknudsonmorganfainberg: it used to be you could use the same plugin for 2 different method names.21:04
bknudsonnot sure why you would want to do that.21:04
morganfainbergbknudson, yeah, i don't really see a usecase?21:04
morganfainbergbknudson, but that is why i'm discussing it.  if there is a good use case we can come up with something else21:04
*** dsantos_ has quit IRC21:05
bknudsonmorganfainberg: you could still do it but would just have to use a different class... could just derive from the original one and return a different name21:05
*** ytwu has joined #openstack-dev21:06
*** tellesnobrega has quit IRC21:07
*** sweston has quit IRC21:07
devoidkeystone folks: how can I validate a policy.json file? how can I debug an issue where keystone seems to ignore my policy.json file?21:07
lbragstaddevoid: what are you trying to verify?21:08
*** ytwu1 has quit IRC21:08
*** DinaBelova is now known as DinaBelova_21:09
marunrussellb: ah, that's why I was confused.  according to the wiki libvirt+lxc is scheduled for deprecation in icehouse, and I somehow misread that.21:09
*** sweston has joined #openstack-dev21:09
russellbit is?21:09
russellboh ... because of the CI requirement21:09
*** jgrimm has quit IRC21:09
*** jnoller has quit IRC21:09
marunrussellb: I guess there is nobody willing to do 3rd party testing?21:10
russellbright21:10
russellbwe could run it in the current infra though21:10
*** xarses has joined #openstack-dev21:10
russellbjust nobody has put the time into it21:10
marunrussellb: right.  so many other fires burning brighter21:11
russellbyep21:11
russellbi've never used it21:11
russellbwouldn't be surprised if it's broken in all kinds of ways21:11
russellb(the whole point of the CI requirement)21:11
devoidlbragstad: well i can't change keystone's behavior21:12
*** galstrom is now known as galstrom_zzz21:12
*** afazekas has joined #openstack-dev21:12
*** turul_ has joined #openstack-dev21:12
*** turul_ has quit IRC21:12
devoide.g. setting "identity:list_users" : "@" in https://github.com/openstack/keystone/blob/master/etc/policy.json doesn't let me list users as a normal user21:13
*** sahid has joined #openstack-dev21:13
devoid(e.g. role == "_member_"21:13
*** willingc has quit IRC21:13
morganfainbergbknudson, aye21:13
*** willingc has joined #openstack-dev21:13
russellbsdague: http://logs.openstack.org/03/68703/2/check/gate-tempest-dsvm-large-ops/069a8d5/logs/pidstat.dat.gz21:14
russellberr21:14
*** ytwu1 has joined #openstack-dev21:14
*** mrodden has quit IRC21:15
*** dave_tucker_zzz is now known as dave_tucker21:15
*** mrodden has joined #openstack-dev21:16
*** ytwu has quit IRC21:17
*** markmcclain has quit IRC21:17
*** ytwu has joined #openstack-dev21:17
*** jruzicka has quit IRC21:17
*** ifarkas has quit IRC21:18
*** vipul-away is now known as vipul21:18
*** ytwu1 has quit IRC21:19
*** djoreilly has quit IRC21:19
*** ytwu1 has joined #openstack-dev21:19
*** dkranz has quit IRC21:20
*** salv-orlando has quit IRC21:20
lbragstaddevoid: by default 'user list' is an admin action.21:21
lbragstaddevoid: https://github.com/openstack/keystone/blob/master/keystone/identity/controllers.py#L112 what version of the identity api are you using?21:21
devoidibragstad, v221:22
*** s2r2__ has quit IRC21:22
*** ytwu has quit IRC21:22
*** marun has quit IRC21:24
devoidbased on this, it looks like keystone asserts admin context for everything?21:24
morganfainbergdevoid, v2 is very different than v321:24
devoidin other words, policy.json is useless?21:24
lbragstadfor v221:24
lbragstaddevoid: https://github.com/openstack/identity-api/blob/master/openstack-identity-api/v3/src/markdown/identity-api-v3.md#list-users-get-users21:25
morganfainbergdevoid, use v3 if you want policy.json21:25
lbragstadgive that a shot21:25
devoidhow do I switch to v3?21:25
*** sarob has joined #openstack-dev21:25
lbragstadin your request, you can specify the version of the api you want to use21:25
*** alexpilotti has quit IRC21:25
* lbragstad digs for curl examples doc21:26
devoidso switch out the catalog?21:26
*** joesavak has joined #openstack-dev21:26
*** alexpilotti has joined #openstack-dev21:26
*** samuelbercovici has joined #openstack-dev21:26
lbragstaddevoid: http://adam.younglogic.com/2013/09/keystone-v3-api-examples/21:26
zzelle:q21:27
lbragstaddevoid: http://docs.openstack.org/developer/keystone/api_curl_examples.html21:27
*** e0ne has quit IRC21:27
devoidwhat isn't supported by v3?21:27
*** marun has joined #openstack-dev21:27
devoidhow do I alter the endpoint on a non-production setup with out borking everything?21:29
*** jsavak has quit IRC21:29
*** jsavak has joined #openstack-dev21:30
*** mlavalle has quit IRC21:30
*** alexpilotti has quit IRC21:30
devoid$ keystone endpoint-list : The resource could not be found. (HTTP 404)21:31
*** vijendar has quit IRC21:31
lbragstaddevoid: well, doens't look like you have any endpoints :)21:31
devoidlbragstad I did before swapping the v2 endpoint out for v321:32
*** spzala has joined #openstack-dev21:32
devoid(endpoints for glance, nova, etc.)21:32
*** MarkAtwood has joined #openstack-dev21:32
*** markmcclain has joined #openstack-dev21:33
*** giulivo has quit IRC21:33
*** joesavak has quit IRC21:34
*** teran has joined #openstack-dev21:35
lbragstaddevoid: https://github.com/openstack/keystone/blob/master/keystone/catalog/core.py#L27721:35
lbragstaddevoid: https://github.com/openstack/keystone/blob/master/keystone/catalog/core.py#L30221:35
lbragstaddevoid: you *might* have to readd them21:36
*** cnesa has quit IRC21:36
devoidlbragstad, oh lol endpoint table doesn't maintain deleted entries21:38
*** bswartz has quit IRC21:38
*** erkrnt has joined #openstack-dev21:38
*** cnesa has joined #openstack-dev21:38
*** teran_ has quit IRC21:38
*** galstrom_zzz is now known as galstrom21:38
*** ytwu1 has quit IRC21:39
*** jhesketh_ has quit IRC21:39
*** ytwu has joined #openstack-dev21:39
devoidhttps://bugs.launchpad.net/keystone/+bug/127208621:40
*** dsantos_ has joined #openstack-dev21:42
*** ytwu1 has joined #openstack-dev21:42
*** vartom1111111115 has joined #openstack-dev21:42
*** tellesnobrega has joined #openstack-dev21:43
devoidok, recovered the v2 endpoints correctly. do I need to do anything to enable the v3 endpoint in the config?21:43
*** dprince has quit IRC21:43
*** praneshp has quit IRC21:44
devoidalternatively, is there a way with v2 to enable non-admin users to do obvious stuff like list-users, get-user, list-tenants and get-tenants?21:44
*** ytwu2 has joined #openstack-dev21:44
*** michchap has joined #openstack-dev21:44
devoidsince getting these UUIDs is required for several API commands that users might want to call.21:45
*** ytwu2 has joined #openstack-dev21:45
*** ytwu has quit IRC21:45
lbragstaddevoid: I don't think so with V2, like morganfainberg said, v2 is much different than v321:45
*** READ10 has quit IRC21:46
devoidok, so v3 is probably needed. can all clients use v3 at this point?21:46
*** sarob has quit IRC21:47
*** bhargav has joined #openstack-dev21:47
*** tellesnobrega has quit IRC21:47
*** sarob has joined #openstack-dev21:47
*** sarob_ has joined #openstack-dev21:48
*** ytwu1 has quit IRC21:48
*** terrylhowe has quit IRC21:49
*** michchap has quit IRC21:49
*** praneshp has joined #openstack-dev21:49
bhargavi am installing devstack21:50
bhargavand get this error for compute "Service n-cpu is not running"21:50
bhargavAny help would be appreciated21:50
*** ytwu has joined #openstack-dev21:50
*** asalkeld has quit IRC21:50
sdaguebhargav: was does the n-cpu log say?21:51
sdagueor tab in screen?21:51
*** sarob has quit IRC21:51
*** ytwu2 has quit IRC21:52
bhargavsdague: is this log location, /opt/stack/status/stack/n-cpu.failure21:52
*** melwitt has joined #openstack-dev21:52
sdagueno21:52
sdagueattached to the screen21:52
sdaguescreen -rd21:53
*** tmclaugh[work] has quit IRC21:54
*** rm_work is now known as rm_work|away21:54
*** cnesa has quit IRC21:54
*** ytwu has quit IRC21:55
devoidlbragstad 2014-01-23 15:54:50.166 7473 DEBUG routes.middleware [-] No route matched for POST /v3.0/tokens __call__ /usr/lib/python2.7/dist-packages/routes/middleware.py:9721:55
bhargavsdauge: I am new to devstack, this is what i see stack@Compute-1:/opt/stack/nova$ cd /opt/stack/nova && /usr/local/bin/nova-novncproxy --config-file /etc/nova/nova.conf --web /opt/stack/noVNC & echo $! >/opt/stack/status/stack/n-novnc.pid; fg || echo "n-novnc failed to start" | tee "/opt/stack/status/stack/n-novnc.failure" [1] 26919 cd /opt/stack/nova && /usr/local/bin/nova-novncproxy --config-file /etc/nova/nova.conf --web /21:55
devoidubuntu package : keystone                         1:2013.2~rc4-0ubuntu1~cloud021:55
*** mfer has quit IRC21:55
*** tellesnobrega has joined #openstack-dev21:56
*** jdob has quit IRC21:56
lbragstads/v3.0/v3/21:57
lbragstaddevoid: ^21:57
*** ytwu has joined #openstack-dev21:57
*** sarob_ has quit IRC21:57
*** mlavalle has joined #openstack-dev21:58
*** asalkeld has joined #openstack-dev21:58
*** edmund1 has joined #openstack-dev21:58
*** sweston has quit IRC21:58
*** angdraug has quit IRC21:59
*** mjfork has joined #openstack-dev22:00
*** dkranz has joined #openstack-dev22:00
*** angdraug has joined #openstack-dev22:01
*** DGlennH has left #openstack-dev22:01
devoidlbragstad oh nice, now endpoint-list shows blank columns for the urls22:01
devoidknown bug?22:01
*** doug_shelley66 has quit IRC22:02
*** praneshp has quit IRC22:02
*** bswartz has joined #openstack-dev22:02
lbragstaddevoid:  and you added the endpoints to keystone?22:02
lbragstadurls are required according to the api spec https://github.com/openstack/identity-api/blob/master/openstack-identity-api/v3/src/markdown/identity-api-v3.md#endpoints-v3endpoints22:03
devoidlbragstad yea, endpoint works and shows up in catalog… http://paste.openstack.org/show/61789/22:03
*** sarob has joined #openstack-dev22:03
*** kenperkins has joined #openstack-dev22:03
*** praneshp has joined #openstack-dev22:03
*** dvarga has quit IRC22:04
*** sweston has joined #openstack-dev22:04
*** ytwu1 has joined #openstack-dev22:04
*** mfink has quit IRC22:04
*** thomasem has quit IRC22:05
*** sahid has quit IRC22:05
*** ytwu has quit IRC22:05
*** kenperkins has quit IRC22:06
devoidlbragstad, looks like it's also leaking out links : [ "self" : "http://localhost:5000/v3/endpoints/" ] on each endpoint22:06
lbragstaddevoid: but... https://github.com/openstack/identity-api/blob/master/openstack-identity-api/v3/src/markdown/identity-api-v3.md#endpoints-v3endpoints22:06
lbragstaddevoid:  sorry wrong link22:06
lbragstaddevoid: https://github.com/openstack/keystone/blob/master/keystone/catalog/controllers.py#L238-L23922:06
devoidlbragstad, I was able to create the endpoint, and now things work with the /v3 URL22:07
*** sweston_ has joined #openstack-dev22:07
devoidthe first issue I see, though is that the endpoint table has empty urls (things like user-list work correctly for my admin user though)22:07
devoidthe second issue is I need to switch the link rel-self urls to point at my loadbalancer22:08
*** sweston has quit IRC22:08
*** krtaylor has quit IRC22:09
*** jecarey has joined #openstack-dev22:10
*** jhesketh__ has joined #openstack-dev22:10
*** teran_ has joined #openstack-dev22:10
*** rods1 has joined #openstack-dev22:12
*** teran has quit IRC22:14
*** sweston_ has quit IRC22:14
*** rods has quit IRC22:14
*** jmontemayor has quit IRC22:15
*** stevemar has quit IRC22:16
*** radez is now known as radez_g0n322:16
*** vladikr has quit IRC22:16
*** sgordon has quit IRC22:17
*** sweston has joined #openstack-dev22:17
*** marun has quit IRC22:20
*** rtheis has quit IRC22:21
*** pcm_ has quit IRC22:21
devoidpresumably these link "self" entries should be relative URLs22:21
*** DennyZhang has joined #openstack-dev22:21
*** nati_ueno has quit IRC22:21
*** morganfainberg is now known as morganfainberg|z22:21
bhargavi am new to devstack, getting this error 'Error: Service n-cpu is not running' for compute22:21
*** rowleyaj has joined #openstack-dev22:21
bhargavAny help would be great22:22
*** salv-orlando has joined #openstack-dev22:22
*** joesavak has joined #openstack-dev22:27
bhargavTeam, any help on this issue "Error: Service n-cpu is not running' for compute"22:27
*** kevinconway has quit IRC22:28
*** henrynash has quit IRC22:28
*** Gordonz has joined #openstack-dev22:30
*** jsavak has quit IRC22:30
*** networkstatic has quit IRC22:30
*** michchap has joined #openstack-dev22:31
*** michchap has quit IRC22:31
*** Gordonz has quit IRC22:31
*** michchap has joined #openstack-dev22:31
*** Gordonz has joined #openstack-dev22:32
*** buzztroll has joined #openstack-dev22:35
*** mfink has joined #openstack-dev22:35
*** doug_shelley66 has joined #openstack-dev22:35
*** amcrn has quit IRC22:35
*** sn6i23a has quit IRC22:36
*** michchap has quit IRC22:36
devoidkeystone: https://bugs.launchpad.net/keystone/+bug/127210322:37
*** peristeri has quit IRC22:37
*** colinmcnamara has quit IRC22:38
*** mriedem has quit IRC22:39
*** samuelbercovici has quit IRC22:39
*** vartom1111111115 has quit IRC22:39
*** jayg is now known as jayg|g0n322:41
*** colinmcnamara has joined #openstack-dev22:41
*** michchap has joined #openstack-dev22:42
*** artom has quit IRC22:43
*** rods1 has quit IRC22:43
*** rods has joined #openstack-dev22:44
*** ayoung_ has joined #openstack-dev22:44
*** sweston_ has joined #openstack-dev22:44
*** ayoung_ is now known as ayoung22:44
*** willingc has quit IRC22:45
*** sandywalsh has quit IRC22:45
*** sweston has quit IRC22:47
*** gordc has quit IRC22:47
*** lbragstad has quit IRC22:47
*** mlavalle has quit IRC22:48
*** lucasagomes has quit IRC22:49
*** DennyZhang has quit IRC22:50
*** jasondotstar has quit IRC22:55
*** epim has joined #openstack-dev22:55
*** sarob has quit IRC22:55
*** sweston_ has quit IRC22:57
*** markmcclain has quit IRC22:57
bhargavhello: n-cpu & n-novnc is not running when devstack is installed for first time22:58
bhargavis there anyt help woul di get22:58
bhargav*any*22:59
devoidbhargav, service nova-compute restart?22:59
*** salv-orlando_ has joined #openstack-dev23:00
bhargavdevoid: where should i provide this CLI ?23:01
devoidbhargav, that's if you're using upstart, I'm not sure how devstack handles services within screen23:01
*** sarob has joined #openstack-dev23:02
*** sarob has quit IRC23:03
*** Underbyte has joined #openstack-dev23:03
*** dbalog has left #openstack-dev23:03
*** salv-orlando has quit IRC23:03
*** salv-orlando_ is now known as salv-orlando23:03
*** bfschott has quit IRC23:03
*** thuc has quit IRC23:04
*** bfschott has joined #openstack-dev23:04
*** tqtran1 has joined #openstack-dev23:04
*** thuc has joined #openstack-dev23:04
bknudsondevoid: bhargav: devstack just starts the executable. You can CTRL-C in the tab to kill it.23:05
*** changbl has quit IRC23:05
*** julienvey_ has quit IRC23:05
devoidah ok, so in bhargav's case, find the tab named n-cpu and try restarting23:06
*** tqtran has quit IRC23:06
devoidkeystone folks, why does " $ keystone tenant-list " send a GET /v3/tenants ? Shouldn't it be GET /v3/projects ?23:07
bknudsondevoid: keystone CLI doesn't support the Identity API V323:08
devoidlol wtf23:08
*** tdruiva has quit IRC23:08
bknudsondevoid: the unified CLI has identity V3 support23:08
*** bfschott has quit IRC23:09
*** thuc has quit IRC23:09
*** nkinder has quit IRC23:09
devoidbknudson, sorry still trying to wrap my head around the wat level of that comment http://cdn.shopify.com/s/files/1/0070/7032/files/wat_grande.jpg%3F11312323:09
devoidwhy make a v3 api if keystoneclient won't support it?23:10
bknudsondevoid: why put support for v3 identity api in 2 CLIs?23:10
*** achampion has quit IRC23:11
devoidbknudson, because there's a huge install base for the keystoneclient, including scripts that use the libraries?23:11
bknudsondevoid: the python library does support it.23:11
bhargavdevoid: bknudson: I did unstack.sh and re-ran stack.sh, get the same error23:11
bknudsondevoid: they can continue to use the v2 api.23:11
devoidbknudson, not if the v2 api can't support pain users doing user-get23:11
devoid*plain23:12
*** burt1 has quit IRC23:12
*** sarob has joined #openstack-dev23:12
devoidthe point is I don't see why v3 API got the go-ahead if keystoneclient won't support it.23:13
devoid(as in, add support in keystoneclient for the new API)23:13
*** afazekas has quit IRC23:13
*** galstrom is now known as galstrom_zzz23:14
*** galstrom_zzz is now known as galstrom23:14
*** sweston has joined #openstack-dev23:14
*** dims has quit IRC23:15
*** henrynash has joined #openstack-dev23:16
*** galstrom is now known as galstrom_zzz23:16
*** jobewan has quit IRC23:16
*** jhesketh__ has quit IRC23:17
*** sarob has quit IRC23:17
*** anniec has joined #openstack-dev23:17
*** glenng has quit IRC23:18
*** sweston has quit IRC23:18
*** jcoufal has quit IRC23:19
devoidbknudson, well i've submitted to openstackreactions23:20
*** DennyZhang has joined #openstack-dev23:20
*** FunnyLookinHat has quit IRC23:20
devoidbknudson, so presumably keystoneclient also has no knowledge of what URL corresponds to what API version23:22
devoideven though we presumably went through all of this for the v2.0 API23:23
bknudsondevoid: the CLI only uses the v2 python api, so only uses v2 identity api23:23
*** zzelle has quit IRC23:24
*** DennyZhang has quit IRC23:26
*** neelashah1 has joined #openstack-dev23:26
devoidhttps://github.com/openstack/python-keystoneclient/blob/master/keystoneclient/shell.py#L1823:26
devoidbknudson, and of course there's no ubuntu package for it http://paste.openstack.org/show/61796/23:27
*** dstanek has quit IRC23:29
*** neelashah has quit IRC23:29
*** DennyZhang has joined #openstack-dev23:29
*** dims has joined #openstack-dev23:30
*** neelashah1 has quit IRC23:31
*** browne has quit IRC23:32
*** glenng has joined #openstack-dev23:33
*** dave_tucker is now known as dave_tucker_zzz23:33
*** dave_tucker_zzz is now known as dave_tucker23:34
*** jasondotstar has joined #openstack-dev23:35
ttxkgriffs: yeah, announce is only for "integrated" projects so far, to reduce confusion23:36
ttxgaryk: pong?23:36
*** krtaylor has joined #openstack-dev23:36
*** KurtMartin has quit IRC23:36
*** KurtMartin has joined #openstack-dev23:37
ttxdhellmann: I've been tagging oslo-incubator and marking bugs released there23:37
*** KurtMartin has quit IRC23:37
*** tanisdl has quit IRC23:38
*** erkules has quit IRC23:39
*** erkules has joined #openstack-dev23:40
ayoungmorganfainberg|z, wake up!23:40
ayoungdolphm, we can only invalidate the cache for individual tokens, right?23:43
*** amcrn has joined #openstack-dev23:46
devoidso if the keystone endpoint is pointed at the v3 API, do I need a second endpoint to enable the V2 api?23:47
devoid(and do they need to be in separate regions?)23:47
*** morganfainberg|z is now known as morganfainberg23:48
morganfainbergayoung, hi23:48
morganfainbergayoung, sorry was in a meeting23:48
morganfainbergayoung, and yes.23:48
ayoungNP23:48
ayoungcould a swore I heard you snore.23:48
morganfainbergayoung, invalidation of tokens is only able to be done at a per-token basis23:48
ayoungmorganfainberg, we can only invalidate the cache for an individual token right now, right?23:49
*** prad has quit IRC23:49
ayoungso....I'ma break dat23:49
morganfainbergayoung, correct, but i can make that not a going concern if you need it23:49
ayoungmorganfainberg, I am going to bypass the cached for now23:49
ayoungif not CONF.token.revoke_by_id23:49
devoidor should I not deploy v3 since it doesn't look to be supported yet.23:49
morganfainbergayoung, easiest way is to make a better SHOULD_CACHE function for tokens that also takes that into account23:50
*** romcheg has quit IRC23:50
*** cnesa has joined #openstack-dev23:50
*** mriedem has joined #openstack-dev23:50
morganfainbergayoung, that way rather than bypassing cache, you tell dogpile you shouldn't cache23:51
ayoungyeah....I can't think how to do that right now23:51
openstackstatusNOTICE: Zuul is being restarted for an upgrade23:51
*** stevemar has joined #openstack-dev23:51
*** ChanServ changes topic to "Zuul is being restarted for an upgrade"23:51
morganfainbergayoung, sec have code example in ... 2 minutes max23:51
ayoungif the revocation event comes in, I need to invalidate the cache for all tokens that would match that event23:51
*** jckasper_ has quit IRC23:51
ayoungright now, the validity check is in the provider23:52
ayoungbut the caching is in the manager23:52
*** markmcclain has joined #openstack-dev23:52
ayoungif the caching were in the provider, I could validate the token against the cache there23:53
morganfainbergayoung, something like this: http://paste.openstack.org/show/61799/23:53
ayoungmorganfainberg, not quite23:53
morganfainbergayoung, no? you don't want to cache if you're revoking by id, right?23:54
ayoungother way around23:54
morganfainbergerm, ok23:54
ayoungrevoke_by_id is the existing mechanism23:54
ayoungbut...23:54
morganfainbergso i inverted the ifcheck ;)23:54
ayoungI want to use the provider to fetch the token23:54
ayoungnot the driver23:54
*** henrynash has quit IRC23:54
ayoungmanager calls the driver with  self.driver.get_token23:54
morganfainbergright....23:55
ayoungand then that gets cached.  I want that call on the provider23:55
ayoungbut23:55
morganfainbergok.23:55
ayoungI also need to invalidate the cache23:55
ayoungbasd on a revocation event though23:55
ayoungnot an id23:55
*** jhesketh_ has joined #openstack-dev23:55
morganfainbergayoung, hm.23:55
ayoungyeah...23:55
*** amerine has joined #openstack-dev23:56
morganfainbergayoung, eh. why do you need to invalidate the cache again?23:56
*** xarses has quit IRC23:56
morganfainbergayoung, vs. just making the validator check your event list?23:57
ayoungwait a sec...I think something is backwards here23:57
ayoungOK...problem is get_policy_check_credential bypasses the provider23:57
ayoungmioght be OK23:57
*** rowleyaj has quit IRC23:57
morganfainbergayoung, ahhhh23:57
ayoungprovider calls into manager23:58
*** dstanek has joined #openstack-dev23:58
stevemarzuul is being restarted :O23:59

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!