Tuesday, 2014-01-28

roaethello.00:00
jamielennoxbknudson: i was approaching it as a means of subclassing a database error00:00
*** Gordonz has quit IRC00:00
bknudsonjamielennox: can't your database store binary values?00:00
*** byeager has joined #openstack-dev00:00
jamielennoxIntegrityError is generally that something is wrong in the database consistency, then subclass the Can't change a group status00:00
bknudsonwe don't always store in a database.00:01
jamielennoxbknudson: honestly it's been so long since i wrote this that i can't remember why i went with base64. There was a reason but i've lost it00:01
jamielennoxi tried it out with a blob store and it's fine00:01
*** terrylhowe has left #openstack-dev00:01
bknudsonjamielennox: seems like a waste of space00:01
*** openstack has joined #openstack-dev00:02
*** mdenny has quit IRC00:02
emaganaanyone could help me to add the dependency back in my gerrit, not sure why it is gone?00:03
*** byeager has quit IRC00:03
*** clayb has quit IRC00:04
*** ijw has joined #openstack-dev00:04
*** dbalog has left #openstack-dev00:04
jamielennoxbknudson: are you looking at gyee's linked patch above - if not i'll approve it00:04
jamielennoxemagana: you mean your review is no longer dependant on another review?00:04
bknudsonjamielennox: I'm not looking at it... I'd taken a quick look earlier and didn't have any opinion on it.00:05
emaganajamielennox: My review https://review.openstack.org/#/c/67312/ should depend on this one https://review.openstack.org/#/c/67210/00:05
emaganajamielennox: The dependency was there before but now it is gone..00:05
*** nkinder has joined #openstack-dev00:06
*** IanGovett has quit IRC00:07
jamielennoxemagana: so this isn't something that you fix via gerrit00:07
jamielennoxwhat that means is that when you've done a git review you haven't had the patch dependant on the other one00:07
*** jcooley_ has quit IRC00:08
*** sahid has quit IRC00:08
jamielennoxthe easiest way to fix it in this case is to checkout the first patch, cherry-pick the dependant one on top and then do git review again so that the patch sequence is correct on your local machine before you push it for review00:08
*** ijw has quit IRC00:09
emaganajamielennox: let's try that  :-)00:09
*** jcooley_ has joined #openstack-dev00:09
*** dvarga has quit IRC00:09
*** thuc_ has quit IRC00:10
*** xarses_ has quit IRC00:11
*** dvarga has joined #openstack-dev00:11
*** CaptTofu has joined #openstack-dev00:12
*** jmontemayor has quit IRC00:12
*** zzelle_ has quit IRC00:12
*** achampion has quit IRC00:12
*** dvarga has quit IRC00:13
*** yamahata__ has quit IRC00:13
*** carl_baldwin has quit IRC00:13
*** achampion has joined #openstack-dev00:14
*** sweston has joined #openstack-dev00:15
*** vkmc has quit IRC00:15
*** markmcclain has quit IRC00:16
*** jcooley_ has quit IRC00:16
*** hartsocks has joined #openstack-dev00:17
*** IanGovett has joined #openstack-dev00:18
gyeejamielennox, thanks!00:19
jamielennoxgyee: i've wanted that one passed for a while too00:19
roaetAre there special rules for registering lightning sessions if they still exist?00:19
*** rods has quit IRC00:19
*** rods1 has joined #openstack-dev00:19
roaet(to speak)?00:19
*** SumitNaiksatam has joined #openstack-dev00:19
*** eglynn-afk has quit IRC00:21
*** thuc has joined #openstack-dev00:22
*** matsuhashi has joined #openstack-dev00:27
*** morganfainberg is now known as morganfainberg|z00:27
*** NearlyFunctional has joined #openstack-dev00:31
*** dims has quit IRC00:34
*** sjmc7 has joined #openstack-dev00:35
*** godara has joined #openstack-dev00:35
*** MaxV has quit IRC00:36
*** dims has joined #openstack-dev00:37
*** hemna_ is now known as hemnafk00:37
*** zz_ewindisch is now known as ewindisch00:45
*** faramir1 has joined #openstack-dev00:46
*** pablosan has quit IRC00:47
*** jcooley_ has joined #openstack-dev00:48
*** mfer has quit IRC00:51
*** rraja has joined #openstack-dev00:52
*** davidh has quit IRC00:52
*** sjmc7 has quit IRC00:53
*** jcooley_ has quit IRC00:54
*** davidh has joined #openstack-dev00:55
*** browne has quit IRC00:55
*** xmltok has quit IRC00:56
*** hartsocks has quit IRC00:59
*** IanGovett has quit IRC00:59
*** romcheg has left #openstack-dev01:02
*** mrodden has quit IRC01:03
*** thuc has quit IRC01:06
*** sushils has quit IRC01:07
*** alexpilotti_ has quit IRC01:08
*** yamahata has joined #openstack-dev01:10
*** galstrom_zzz is now known as galstrom01:12
*** CaptTofu has quit IRC01:13
*** CaptTofu has joined #openstack-dev01:13
*** _ruhe is now known as ruhe01:16
*** abhi09 has joined #openstack-dev01:17
*** CaptTofu has quit IRC01:18
*** rraja has quit IRC01:21
*** csd has quit IRC01:24
*** bdpayne has quit IRC01:25
*** ekis_isa has joined #openstack-dev01:28
*** ekis_isa has left #openstack-dev01:28
*** gordc has quit IRC01:31
jog0harlowja: scripts ... gah01:32
harlowja??01:32
*** godara has quit IRC01:32
jog0I want a full fledged binary style solution01:33
harlowjajog0 written in assembly of course :-P01:33
jog0I associate script with ugly hack01:33
jog0harlowja: caml would be even better ;)01:33
jog0harlowja: who uses variables anyway01:33
harlowjabreak that association, script to me is just some code, lol01:33
jog0harlowja: yeah just some unpolished code01:33
harlowjacould be, could be not, never really know :-P01:34
harlowjaones man view of unpolished is another mans view of polished01:34
jog0anyway the goal is a binary not a script that you need to call python script_name.py01:34
*** CaptTofu has joined #openstack-dev01:34
harlowjaright, thats what exists in that review, console_scripts (also named scripts, ha)01:35
*** jhesketh has joined #openstack-dev01:35
*** nosnos has joined #openstack-dev01:36
harlowjadamn scripts all over the place, especially in openstack projects, ha01:36
*** jokke__ has joined #openstack-dev01:41
*** jcooley_ has joined #openstack-dev01:42
*** jokke_ has quit IRC01:43
*** mikeoutland has quit IRC01:44
*** jcooley_ has quit IRC01:48
*** dave_tucker is now known as dave_tucker_zzz01:49
*** dave_tucker_zzz is now known as dave_tucker01:51
*** gokrokve has joined #openstack-dev01:57
*** abhi09 has quit IRC01:58
*** neoXsys has quit IRC01:58
*** Mandell has quit IRC01:58
*** ianw has quit IRC01:59
*** ianw has joined #openstack-dev02:00
*** pmathews has joined #openstack-dev02:00
*** amcrn has quit IRC02:01
*** ruhe is now known as _ruhe02:03
*** ijw has joined #openstack-dev02:05
*** gyee has quit IRC02:07
*** gokrokve has quit IRC02:08
*** ijw has quit IRC02:09
*** sn6i23a_ has joined #openstack-dev02:10
*** sn6i23a has quit IRC02:10
*** sn6i23a_ is now known as sn6i23a02:10
*** neoXsys has joined #openstack-dev02:10
*** pmathews has quit IRC02:11
*** csaba is now known as csaba|afk02:11
*** yaguang has joined #openstack-dev02:12
*** tkay has quit IRC02:14
*** galstrom is now known as galstrom_zzz02:14
*** dave_tucker is now known as dave_tucker_zzz02:14
*** sweston has quit IRC02:14
*** vkozhukalov has joined #openstack-dev02:15
*** rods has joined #openstack-dev02:16
*** rods1 has quit IRC02:16
*** sarob has joined #openstack-dev02:16
*** dave_tucker_zzz is now known as dave_tucker02:23
*** dave_tucker is now known as dave_tucker_zzz02:24
*** artom has joined #openstack-dev02:24
*** galstrom_zzz is now known as galstrom02:26
*** stevemar has joined #openstack-dev02:27
*** chandankumar_ has joined #openstack-dev02:29
*** chuck__ has joined #openstack-dev02:29
*** chuck__ has quit IRC02:29
*** chandankumar_ has quit IRC02:31
*** _cjones_ has quit IRC02:31
*** claxton has joined #openstack-dev02:33
*** jcooley_ has joined #openstack-dev02:36
*** willingc has joined #openstack-dev02:37
*** networkstatic has joined #openstack-dev02:41
*** jcooley_ has quit IRC02:42
*** sumanth has quit IRC02:43
*** ewindisch is now known as zz_ewindisch02:43
*** hartsocks has joined #openstack-dev02:44
*** erkules_ has joined #openstack-dev02:45
*** alop has quit IRC02:45
ayoungjamielennox, so I have a fairly effecient implementation for checking revocations, but I am not certain about how to cache it.  I bascially build a tree of all the revoked token values,  and traverse the tree based on the values in the token.02:46
ayounghttps://review.openstack.org/#/c/69531/1/keystone/contrib/revoke/model.py02:46
*** erkules has quit IRC02:46
ayoungbuilding the tree is trivial,  traversing it somewhat less so due to the need to check multiple token values against the same revoke values.02:46
*** angdraug has quit IRC02:47
jamielennoxi wasn't aware we had contrib/revoke :(02:47
jamielennoxoh, that's probably a dep02:47
jamielennoxayoung: what's the need for a tree?02:48
*** hartsocks has quit IRC02:48
ayoungjamielennox, otherwise we need to check a token against every revokcation event02:48
jamielennoxyea, but what are your branches02:49
jamielennoxi'm thinking you just have the different revoked options02:49
ayoungeach of the attribute names.02:49
ayoungtop level is the userids02:49
jamielennoxdomain, project, user etc02:49
ayoungkeys are user_id=aefd123402:49
ayoungits pretty elegant, and very LISPish02:50
jamielennoxthat doesn't help me02:50
ayoungah...ok...lets see02:51
jamielennoxthe LISP part i mean02:51
ayoungheh02:51
ayoungits recursive02:51
*** hartsocks has joined #openstack-dev02:51
*** rnirmal has quit IRC02:51
*** hartsocks has quit IRC02:51
jamielennoxwhat are you trying to cache to? memcache?02:51
ayoungI think I need to, if only for the Apache use cases02:51
jamielennoxor just store in mem/02:51
*** sarob has quit IRC02:51
ayoungfor eventlet, the tree could be built once and stored in memory02:52
ayoungrebuild upon reboot02:52
*** sarob has joined #openstack-dev02:52
ayoungso a given revocation event is a path down the tree from root to leaf02:52
*** sarob_ has joined #openstack-dev02:53
jamielennoxbut your '%s=%s' syntax looks very geared towards a flat store02:53
ayoungadding a new event will add a new path.  The root node contains a map where all of the keys are of the form user_id=%s02:53
ayoungnext level down is domain id and so on02:53
ayoungline 25 has the order02:53
ayoungat the leaf node, we have the issued_before02:53
jamielennoxhow does that deal with a before?02:54
ayoungevery event will have an issued_before time now.  I realize that is a change, but it simplifies the logic02:54
jamielennoxoh, k02:54
ayoungline 13402:54
jamielennoxi'll admit it's not how i pictured it02:54
jamielennoxi was thinking flatter02:55
ayoungMe neither...it is a technique I remeber reading about for parsing..I think it was morse code02:55
jamielennoxso we have a certain number of conditions that can be revoked user_id, domain_id, trust_id etc02:55
*** rcleere has joined #openstack-dev02:55
jamielennoxand an event can have as many of those as required02:56
*** krotscheck has quit IRC02:56
ayoungit does mean that if we added a new attribute we;d have to redo the tree, but yes02:56
jamielennoxwhy not just build a big dictionary of those conditions02:56
jamielennoxbut flat02:56
jamielennoxsuch that a revoke event with {trust_id: 't', domain_id: 'd'} can be accessed via02:56
*** sarob has quit IRC02:56
ayoungthere are too many "don't cares" to do that02:57
jamielennoxassert revocations['trust_id']['t'] is revocations['domain_id']['d']02:57
ayoungfor example, if the event is based on userid and expires time, you need to ignore all of the other attributes in the token02:58
jamielennoxrevoked_before isn't hard as you will need to keep the ordered revocated list anyway02:58
*** pmathews has joined #openstack-dev02:58
ayoungSo those get put into the tree with ='None'02:58
*** sarob_ has quit IRC02:58
ayoungWhich, now that I think of it, is abad name...but instraff od None, it should be"DoNotCare'02:58
jamielennoxor don't exist - you would build the tree from the list retrieved from the server02:59
*** pixelb has quit IRC02:59
ayoungAlso, I can easily add a new event by adding a new path.   I am pretty sure I can clean up events based on time, too.02:59
*** buzztroll has quit IRC02:59
ayoungNeed to think how to do that without adding an upward path in the tree03:00
*** CaptTofu has quit IRC03:00
*** dstanek has quit IRC03:01
ayounghttp://en.wikipedia.org/wiki/Huffman_coding03:01
ayoungTHat is it03:01
*** davidh has quit IRC03:01
*** gokrokve has joined #openstack-dev03:01
*** nati_ueno has quit IRC03:02
ayoungIts not a pure Huffman, in that frequency is ignored, but the concept is the same03:02
*** networkstatic has quit IRC03:02
jamielennoxhmm, ok i see why my basic way won't wor03:03
jamielennoxk03:03
ayounghttp://en.wikipedia.org/wiki/Dichotomic_search03:03
ayoungcloser to that  ^03:03
ayoungBut instead of Yes or no, it is "look up the value from this map"03:04
ayoungSo, assuming a token doesn't have any trust data in it, and only one role  a token revocation would take 8 == comparisons and one date >  comparison03:06
ayoungroles are put near the base of the tree since any one of them can match, so the first match is sufficient03:07
ayounguser_id, trustor_id, and trustee_id are all run through as user_id03:07
ayoungI also check the domain_id for both the user and the project against the 'domain_id' field in the event.03:07
jamielennoxi was more thinking that you build a very large tree though right?03:08
ayoungso a trust token will take 6 passes through the list, or 48 comparisons.  Most others will take 2 passes03:08
ayoungIt will never be more than 8 levels deep.  Certain branches will get wide03:08
ayoungthe root node will probably be the largest, due to password change events.  I'm assuming those are going to be the most common03:09
ayoungfor a project disable event, you are going to get  user_id=None -> domain_id=None -> project_id=<revoked_Proj_id>  ->  and then None all the way down.03:10
*** morganfainberg|z is now known as morganfainberg03:11
ayoungIf there are a lot of those, then the third node in the list will be big03:12
ayoungjamielennox, I hope that is enough to explain what I'm trying to do03:12
*** mikeoutland has joined #openstack-dev03:13
*** matsuhashi has quit IRC03:13
jamielennoxayoung: i think i  follow03:14
ayoungIf you were to revoke a role, it would be none->none->  all the way down to the role_id03:14
*** matsuhashi has joined #openstack-dev03:14
jamielennoxi'm just trying to figure out if it's the best way - but i'm stumped otherwise03:15
ayoungassuming that is going to be fairly rare, too, this should be pretty efficient.  As soon as there is no match the algorithm should short circuit03:15
ayoungit doens't have to be "the best" but it should be efficient, and I think it is03:15
*** rods has quit IRC03:16
ayoungthe code I posted builds the tree every time, but that is just proof-of-concept.  As I said, it needs to be cached for apache, but can go in memory for eventlet03:16
*** mikeoutland has quit IRC03:16
ayoungjamielennox, also, it should be extractable, and so it really needs to live in auth_token middleware03:16
*** zz_ewindisch is now known as ewindisch03:16
jamielennoxyea auth_token is where i've been thinking about03:17
*** willingc has quit IRC03:17
*** emagana has quit IRC03:17
*** ewindisch is now known as zz_ewindisch03:17
jamielennoxayoung: if you build this tree do you need to step down through it?03:18
*** emagana has joined #openstack-dev03:18
*** rwsu has quit IRC03:18
jamielennoxor can you just index it?03:18
*** mikeoutland has joined #openstack-dev03:18
*** mrodden has joined #openstack-dev03:20
*** doug_shelley66 has quit IRC03:20
*** networkstatic has joined #openstack-dev03:22
ayoungyou need to step down through it.  You can't get it to a single comparison03:22
*** sarob has joined #openstack-dev03:22
*** emagana has quit IRC03:25
ayoungOK...thought experiement.  What if there is a revocation event for a domain id,  and also one for a specific  token+expiration03:25
*** artom has quit IRC03:25
ayoungthen that user comes in with a different token....03:25
ayoungits going to progress down the tree where user_id=<blah>  and exit out when the expiration doesn't match03:26
*** paragan has joined #openstack-dev03:26
*** paragan has quit IRC03:26
*** paragan has joined #openstack-dev03:26
ayoungbut...it should go on to check the domain revocation03:27
ayounghmmm03:27
*** yamahata has quit IRC03:27
ayoungI wonder if I need user at the bottom of the tree03:27
*** sarob has quit IRC03:28
ayoungjamielennox, OK...I think this might be easy to mess up.  I want to add a few unit tests, such as making sure the user doesn't get a false negative.  I think we need to check the most general cases before the most specific.03:30
*** sn6i23a has quit IRC03:30
jamielennoxayoung: yea, i'm just playing with essentially the same impl now and i can see it getting big03:31
ayoungFor now I want to run the tests both with the tree version and the "iterate through the whole list" version and make sure they always get the same answer03:31
ayoungjamielennox, there are never going to be more nodes at a given point in the tree than there are revocation events03:32
ayoungI'm guessing that means we want to put the "fat" nodes near the leaf nodes03:32
jamielennoxayoung: well there can be width * depth03:32
*** galstrom is now known as galstrom_zzz03:32
jamielennoxso given the current impl if i have a lot of per user revocations then i end up with revocations * 8 nodes03:33
ayoungjamielennox, I'm going to change the name order to: ['domain_id',          'project_id',          'trust_id',          'consumer_id',          'access_token_id',          'expires_at',          'user_id',          'role_id']03:33
jamielennoxayoung: i think the problem is not so much the ordering but the dont care nodes and can you compress them out03:33
ayoungthe majority of the nodes will be don't care that way03:34
ayoungassuming no domain revocations, the first level of the tree will have on node,  the second level will be the number of project revocations + 1  and so on03:34
jamielennoxi'm trying to see - where is your don't care?03:35
ayounghmmm, but project + role + user is a common combination03:35
ayoungas is  domain + role + user03:35
jamielennoxhave you got empty dicts for the don't care case or have you compressed them away/03:35
*** morganfainberg is now known as morganfainberg|z03:36
ayoungsay you have one revocation event:  disable a user, it would be don'tcare at each level all the way down to the user node03:36
ayoungdon't cares are dicts, but not empty....eventuall the leaf node is going to be Role=dontcare  with the "issued_before" value03:37
jamielennoxso if we maintain the ordering can we remove the don't cares?03:37
jamielennoxflatten it?03:37
*** mikeoutland has quit IRC03:37
ayoungI don't thinks so.  I don't think they will add that much, but there is a different between a present value of don'tcare and a missing node03:38
ayounga don't care matches all values, a missing node says "don03:38
ayoung't match"03:38
*** alop has joined #openstack-dev03:39
ayoungI think the rules is "check for a specific match.  If that doesn't trigger a revocation, check for a don't care"03:40
*** thuc has joined #openstack-dev03:40
*** mikeoutland has joined #openstack-dev03:40
*** emagana has joined #openstack-dev03:40
*** thuc_ has joined #openstack-dev03:41
*** hub_cap has joined #openstack-dev03:42
ayoungOK, my algorithm is wrong....need to make sure I always check the don't care case03:43
*** hub_cap has left #openstack-dev03:43
*** thuc has quit IRC03:45
*** tkay has joined #openstack-dev03:45
*** matsuhashi has quit IRC03:49
*** buzztroll has joined #openstack-dev03:50
*** willingc has joined #openstack-dev03:50
*** matiu has joined #openstack-dev03:51
*** mikeoutland has quit IRC03:51
*** buzztroll has quit IRC03:51
*** buzztroll has joined #openstack-dev03:52
*** carl_baldwin has joined #openstack-dev03:53
*** dstanek has joined #openstack-dev03:54
*** praneshp has quit IRC03:54
*** tkay has quit IRC03:54
*** mriedem has quit IRC03:55
*** CaptTofu has joined #openstack-dev03:55
*** emagana has quit IRC03:56
*** buzztroll has quit IRC03:56
*** sumanth has joined #openstack-dev03:56
*** jcooley_ has joined #openstack-dev03:57
*** bdpayne has joined #openstack-dev03:58
*** CaptTofu has quit IRC04:00
*** harlowja is now known as harlowja_away04:01
*** jcooley_ has quit IRC04:02
*** Mandell has joined #openstack-dev04:02
*** markwash has joined #openstack-dev04:06
*** harlowja_away is now known as harlowja04:06
*** kushal has quit IRC04:06
*** pmathews has quit IRC04:08
*** tdruiva has joined #openstack-dev04:10
jamielennoxayoung: http://paste.openstack.org/show/61979/04:12
jamielennoxayoung: it requires a full 8 lookups for every revoked but it's much simpler04:12
jamielennoxand it should always be at most one additional dictionary per event04:12
jamielennox(well two as the default dict contains a dict)04:12
*** aditirav has joined #openstack-dev04:13
ayoungHow does it check for either userid+expiry or just userid?04:14
ayoungjamielennox, ^^?04:14
jamielennoxso i didn't do before but that's an easy addition04:14
jamielennoxit just goes down through the dict in order of names04:14
jamielennoxayoung: so it will go through and say if it's got a user_id then look in the 'val' dictionary for values of user_id that we should match04:16
*** gokrokve has quit IRC04:16
jamielennoxif there is one then it moves the r pointer down to that dictionary otherwise it stays where it is04:16
ayoungval = event[name]  looks wrong04:16
jamielennoxthen it moves on to the next name04:16
jamielennoxdomain_id04:16
ayoungor am I reading tha backwards04:17
*** gokrokve_ has joined #openstack-dev04:17
jamielennoxif there was a user_id val then it will check fo domain_id in the revocations['user_id']['vals']['xxx']['domain_id']['vals'] dict04:17
jamielennoxotherwise it's going to still look in revocations['domain_id']['vals']04:17
ayoungSo if there is a match at user_id,  continue oin that patch,  otherwise, go to the one that starts with No-op for userid anderstj an explicit domainid?04:19
ayoungI think that is the same algorithm04:20
jamielennoxi really badly labelled some variables04:20
jamielennoxit's essentially the same algorithm04:20
*** carl_baldwin has quit IRC04:20
jamielennoxbut it doesn' have don't cares in it04:20
ayoungthere are a few devils, like you need to iterate through all of the roles, and multiple domainid etc, but it might be a simpler implementation04:21
*** willingc has quit IRC04:21
jamielennox(and IMHO it's a bit easier to read)04:21
ayounga little too tired to fully grok it right now, especially when there is an error in my origianl impl04:21
*** willingc has joined #openstack-dev04:21
*** gokrokve_ has quit IRC04:22
*** thuc has joined #openstack-dev04:22
*** sarob has joined #openstack-dev04:23
*** willingc_ has joined #openstack-dev04:23
*** willingc has quit IRC04:24
*** jpomero_ has joined #openstack-dev04:25
ayoungjamielennox, My implementation is going to change, as I think that we need to always check the don't care case, and I am not certain that yours does.  But thanks...keep a hold of that paste,  and we can refer to it tomorrow night04:25
*** thuc_ has quit IRC04:25
*** thuc has quit IRC04:26
*** shri has joined #openstack-dev04:27
jamielennoxayoung: slight change for bad var names: http://paste.openstack.org/show/61981/04:27
*** jpomero has quit IRC04:27
jamielennoxayoung: i think the pprint is the most informative04:28
ayoungline?04:28
jamielennoxayoung: oh, it does a pprint04:28
ayoungah04:28
*** sarob has quit IRC04:28
*** jcooley_ has joined #openstack-dev04:28
jamielennoxayoung: http://paste.openstack.org/show/61982/04:29
jamielennoxayoung: bah - i can already see at least one flaw04:29
ayoungso If a user has a bunch of tokens, and they revoke, say, two, so that userid+expiry1  and userid+expiry2 are both revoked?04:29
jamielennoxyea, forget it04:30
ayoungbut not userid + expiry304:30
*** jcooley_ has quit IRC04:30
jamielennoxit would work04:30
jamielennoxbecause you would end up with seperate 'val' entries for expiry1 and 204:31
jamielennoxbut yea, no i'm completely off04:31
jamielennoxi think i'm going to go back to what i was doing - leave you the computer science problems04:31
*** tdruiva_ has joined #openstack-dev04:32
*** buzztroll has joined #openstack-dev04:32
*** parstac_pete has quit IRC04:33
ayoungheh...review for this will be coming up soon, just want to have others who understand it04:33
*** tdruiva has quit IRC04:34
*** david-lyle has joined #openstack-dev04:34
*** parstac_pete has joined #openstack-dev04:35
*** pmathews has joined #openstack-dev04:37
*** aeperezt has quit IRC04:37
*** pmathews1 has joined #openstack-dev04:39
*** alop has quit IRC04:39
*** buzztroll has quit IRC04:40
*** aditirav has quit IRC04:41
*** aditirav has joined #openstack-dev04:41
*** noorul has joined #openstack-dev04:42
*** pmathews has quit IRC04:42
*** haomaiwang has quit IRC04:43
*** pmathews1 has quit IRC04:44
*** haomaiwang has joined #openstack-dev04:44
*** markwash has quit IRC04:44
*** buzztroll has joined #openstack-dev04:44
*** matsuhashi has joined #openstack-dev04:45
*** thuc has joined #openstack-dev04:45
*** bdpayne has quit IRC04:46
*** gokrokve has joined #openstack-dev04:47
*** praneshp has joined #openstack-dev04:48
*** gokrokve_ has joined #openstack-dev04:49
*** stevemar has quit IRC04:51
*** tdruiva_ has quit IRC04:51
*** gokrokve has quit IRC04:51
*** gokrokve_ has quit IRC04:53
*** markwash has joined #openstack-dev04:56
*** buzztroll has quit IRC04:56
*** haomaiwa_ has joined #openstack-dev04:56
*** buzztroll has joined #openstack-dev04:57
*** buzztroll has quit IRC04:58
*** haomaiwang has quit IRC05:00
*** AlexF_ has joined #openstack-dev05:01
*** buzztroll has joined #openstack-dev05:01
*** gokrokve has joined #openstack-dev05:02
*** thuc has quit IRC05:03
*** thuc has joined #openstack-dev05:04
*** carl_baldwin has joined #openstack-dev05:04
*** kenperkins has quit IRC05:05
*** jp_at_hp has quit IRC05:05
*** willingc_ has quit IRC05:06
*** willingc has joined #openstack-dev05:06
*** jcooley_ has joined #openstack-dev05:06
*** jcooley_ has quit IRC05:07
*** emagana has joined #openstack-dev05:07
*** willingc has quit IRC05:07
*** thuc has quit IRC05:08
*** kushal has joined #openstack-dev05:09
*** gokrokve has quit IRC05:09
*** emagana has quit IRC05:12
*** cmyster has joined #openstack-dev05:14
*** cmyster has joined #openstack-dev05:14
*** kushal has quit IRC05:15
*** thuc has joined #openstack-dev05:16
*** doug_shelley66 has joined #openstack-dev05:16
*** willingc has joined #openstack-dev05:19
*** irenab has joined #openstack-dev05:19
*** doug_shelley66 has quit IRC05:20
*** shri has quit IRC05:21
*** markwash has quit IRC05:22
*** sarob has joined #openstack-dev05:23
*** willingc has quit IRC05:24
*** AlexF_ has quit IRC05:25
*** garyk has joined #openstack-dev05:28
*** garyk has quit IRC05:28
*** sarob has quit IRC05:28
*** buzztroll has quit IRC05:31
*** AlexF_ has joined #openstack-dev05:32
*** mikeoutland has joined #openstack-dev05:33
*** mikeoutland has quit IRC05:34
*** AlexF_ has quit IRC05:35
*** buzztroll has joined #openstack-dev05:36
*** sumanth has quit IRC05:37
*** willingc has joined #openstack-dev05:38
*** achampion has quit IRC05:39
*** Ryan_Lane has joined #openstack-dev05:40
*** buzztroll has quit IRC05:40
*** tkay has joined #openstack-dev05:42
*** buzztroll has joined #openstack-dev05:42
*** AlexF_ has joined #openstack-dev05:48
*** shri has joined #openstack-dev05:48
*** sarob has joined #openstack-dev05:48
*** shri has quit IRC05:48
*** alop has joined #openstack-dev05:50
*** sumanth has joined #openstack-dev05:51
*** AlexF_ has quit IRC05:51
*** rohitk has joined #openstack-dev05:53
*** sarob has quit IRC05:53
*** willingc has quit IRC05:53
*** alop_ has joined #openstack-dev05:55
*** alop has quit IRC05:55
*** alop_ is now known as alop05:55
*** neoXsys has quit IRC05:56
*** CaptTofu has joined #openstack-dev05:56
*** nshaikh has joined #openstack-dev05:59
*** CaptTofu has quit IRC06:00
*** carl_baldwin has quit IRC06:02
*** gokrokve has joined #openstack-dev06:02
*** thuc has quit IRC06:05
*** thuc has joined #openstack-dev06:06
*** buzztroll has quit IRC06:07
*** gokrokve has quit IRC06:07
*** markvoelker1 has quit IRC06:08
*** thuc has quit IRC06:10
*** harlowja is now known as harlowja_away06:10
*** jcoufal has joined #openstack-dev06:12
*** reed has quit IRC06:13
*** AlexF_ has joined #openstack-dev06:20
*** csaba|afk is now known as csaba06:22
*** yeylon_ has joined #openstack-dev06:22
*** alop has quit IRC06:23
*** aditirav_ has joined #openstack-dev06:25
*** buzztroll has joined #openstack-dev06:26
*** aditirav has quit IRC06:28
*** aditirav_ is now known as aditirav06:28
marunis anyone else experiencing failures in restacking?06:34
*** mrda is now known as mrda_away06:34
*** neeti has joined #openstack-dev06:37
*** kushal has joined #openstack-dev06:40
*** NikitaKonovalov_ is now known as NikitaKonovalov06:43
*** sumanth has quit IRC06:44
*** gsamfira has quit IRC06:46
*** rcleere has quit IRC06:47
*** sumanthns has joined #openstack-dev06:47
*** gokrokve has joined #openstack-dev06:47
*** emagana has joined #openstack-dev06:50
*** garyk has joined #openstack-dev06:51
*** vkozhukalov has quit IRC06:51
*** gokrokve has quit IRC06:52
*** nati_ueno has joined #openstack-dev06:54
*** sumanth has joined #openstack-dev06:56
*** rcleere has joined #openstack-dev06:56
*** eglynn-afk has joined #openstack-dev06:57
*** sarob has joined #openstack-dev06:58
*** sarob has quit IRC07:03
*** sahid has joined #openstack-dev07:03
*** vartom1111111117 has joined #openstack-dev07:05
*** hashfail has quit IRC07:05
*** nati_ueno has quit IRC07:07
enykeevHey. Is it ok to reassign a bug to myself if it is still "Confirmed" and i already solved it?07:07
*** nati_ueno has joined #openstack-dev07:08
*** gimps has quit IRC07:09
*** MaxV has joined #openstack-dev07:09
*** arborism has joined #openstack-dev07:10
*** zzelle has quit IRC07:10
*** arborism is now known as amcrn07:10
*** yolanda_ has joined #openstack-dev07:13
*** Drankis has joined #openstack-dev07:14
*** aditirav_ has joined #openstack-dev07:15
*** tkay has quit IRC07:15
*** avishay has joined #openstack-dev07:16
*** tkay has joined #openstack-dev07:16
rushiagrenykeev: what do you mean by 'solved'?07:17
*** coolsvap has joined #openstack-dev07:17
*** afazekas has joined #openstack-dev07:17
*** aditirav has quit IRC07:18
*** aditirav_ is now known as aditirav07:18
enykeevi found a solution, tested it and ready to commit07:18
*** MaxV has quit IRC07:19
*** xqueralt has joined #openstack-dev07:20
*** sahid has quit IRC07:21
*** kushal has quit IRC07:22
*** Nikolay_St has joined #openstack-dev07:25
*** neoXsys has joined #openstack-dev07:26
*** ndipanov_gone is now known as ndipanov07:27
*** MaxV has joined #openstack-dev07:28
*** mrunge has joined #openstack-dev07:31
*** vkozhukalov has joined #openstack-dev07:33
*** erkules_ is now known as erkules07:34
*** jprovazn has joined #openstack-dev07:35
*** dkuffner has joined #openstack-dev07:39
*** achampion has joined #openstack-dev07:40
*** buzztroll has quit IRC07:40
*** flaper87|afk is now known as flaper8707:44
garykyaguang: ping07:45
yaguanggaryk, pong07:46
*** Drankis has quit IRC07:46
kashyapenykeev, I don't see why not07:46
*** gokrokve has joined #openstack-dev07:47
*** toabctl has quit IRC07:48
garykyaguang: how are you?07:48
*** Drankis has joined #openstack-dev07:48
*** toabctl has joined #openstack-dev07:48
*** toabctl has joined #openstack-dev07:48
garykyaguang: regarding https://review.openstack.org/#/c/51793/ (sorry that the review has taken so long) - is there any chance that we can rebase this on https://review.openstack.org/#/c/66523/07:48
garykif you want i can do that for you07:49
garykit makes the whole controller and key management a lot simpler07:49
yaguanggaryk, I see that patch,07:50
*** AlexF_ has quit IRC07:50
garykwould you like me to do the rebase?07:50
*** amuller has joined #openstack-dev07:51
*** rcleere has quit IRC07:51
yaguanggaryk,  no problem07:52
*** stephan__ has joined #openstack-dev07:52
*** stephan__ is now known as srenatus07:52
*** gokrokve has quit IRC07:52
garykok, thanks, i'll do it a little later (unless I misundersttod). i am stepping out for a meeting now. thanks for all of the help. much appreciated07:52
yaguanggaryk, send you a mail about this patch07:53
*** aditirav has quit IRC07:54
*** aditirav has joined #openstack-dev07:54
*** achampion has quit IRC07:54
*** markmc has joined #openstack-dev07:56
*** francois1 has quit IRC07:56
*** CaptTofu has joined #openstack-dev07:57
*** MaxV has quit IRC07:58
*** mbernacc has quit IRC07:59
*** omachace has joined #openstack-dev07:59
*** CaptTofu has quit IRC08:01
*** nati_uen_ has joined #openstack-dev08:02
*** claxton has quit IRC08:02
*** sumanth_ has joined #openstack-dev08:03
*** marekd|away is now known as marekd08:04
*** nati_ueno has quit IRC08:05
*** asalkeld_ has quit IRC08:05
*** sumanth has quit IRC08:07
marunttx: ping08:10
*** praneshp has quit IRC08:12
*** yamahata has joined #openstack-dev08:13
*** xga__ has joined #openstack-dev08:13
*** sdake has quit IRC08:14
*** sdake has joined #openstack-dev08:15
*** nati_uen_ has quit IRC08:15
*** nati_ueno has joined #openstack-dev08:16
*** Tross has quit IRC08:16
*** Tross has joined #openstack-dev08:16
*** lexano has quit IRC08:17
*** eglynn-afk has quit IRC08:17
*** garyk1 has joined #openstack-dev08:18
*** EugeneFrolov has quit IRC08:18
*** EugeneFrolov has joined #openstack-dev08:18
*** WhiteAnthrax has quit IRC08:18
*** garyk has quit IRC08:18
*** jistr has joined #openstack-dev08:19
*** utlemming has quit IRC08:19
*** zaneb has quit IRC08:19
*** mrodden has quit IRC08:19
*** pingveno has quit IRC08:19
*** pingveno has joined #openstack-dev08:19
*** mrodden has joined #openstack-dev08:19
*** WhiteAnthrax has joined #openstack-dev08:19
*** rha has quit IRC08:19
*** rha has joined #openstack-dev08:20
*** rha has quit IRC08:20
*** rha has joined #openstack-dev08:20
*** eglynn-afk has joined #openstack-dev08:20
*** Ruetobas has quit IRC08:20
*** jamespage has quit IRC08:20
*** utlemming has joined #openstack-dev08:20
*** s2r2 has quit IRC08:20
*** jamespage has joined #openstack-dev08:21
*** jamespage has joined #openstack-dev08:21
*** Ruetobas has joined #openstack-dev08:21
*** cdub has quit IRC08:21
*** cdub has joined #openstack-dev08:21
*** zaneb has joined #openstack-dev08:22
*** lexano has joined #openstack-dev08:22
*** yassine has joined #openstack-dev08:23
*** xgsa has joined #openstack-dev08:24
*** s2r2 has joined #openstack-dev08:25
*** david-lyle has quit IRC08:27
*** e0ne has joined #openstack-dev08:27
*** MaxV has joined #openstack-dev08:28
*** sahid has joined #openstack-dev08:29
*** tkammer has joined #openstack-dev08:31
*** lari_ has quit IRC08:34
*** lari_ has joined #openstack-dev08:35
*** achampion has joined #openstack-dev08:36
*** ygbo has joined #openstack-dev08:36
*** claxton has joined #openstack-dev08:37
*** achampion has quit IRC08:41
*** pasquier-s has quit IRC08:41
*** nmagnezi has joined #openstack-dev08:42
*** mmagr has joined #openstack-dev08:43
*** pasquier-s has joined #openstack-dev08:44
ttxmarun: pong08:44
marunttx: https://bugs.launchpad.net/oslo/+bug/127358108:44
*** e0ne has quit IRC08:44
*** e0ne has joined #openstack-dev08:45
*** samuelbercovici has joined #openstack-dev08:45
marunttx: I think the patch that switched nova to depending on oslo.rootwrap is the cause, but I'm having a hard time believing I'm the first person to see the result 6 days after merge.08:45
*** JordanP has joined #openstack-dev08:46
*** nacim has joined #openstack-dev08:46
marunttx: or was the merge more recent because of the gate issues last week?08:47
ttxmarun: that might have been solved already with http://git.openstack.org/cgit/openstack/oslo.rootwrap/commit/?id=4c499d366429f68ff29c7a2f93553b06f369740508:47
ttxand those using from git master would not be affected08:47
marunttx: how to configure from git master?08:47
ttxwanted to wait for the doc fix to merge before cutting another version08:48
ttxmarun: I shall have a new version for you today once that doc fix merges08:48
*** samuelbercovici has left #openstack-dev08:48
*** samuelbercovici has joined #openstack-dev08:48
*** pasquier-s has quit IRC08:49
ttxyou're not the first one to raise the issue... but it's been a bit sporadic so far08:49
marunttx: ah, you're right08:49
maruntouching the init file fixes the problem08:49
*** e0ne has quit IRC08:49
ttxok, will push 1.1 later today to fix that08:49
*** samuelbercovici has quit IRC08:49
marunttx: cool.  should I update the bug to mark as invalid or as a duplicate of something else?08:50
*** pasquier-s has joined #openstack-dev08:50
*** safchain has joined #openstack-dev08:51
*** _ruhe is now known as ruhe08:51
*** vkozhukalov has quit IRC08:51
ttxmarun: will handle the bug08:51
*** buzztroll has joined #openstack-dev08:51
ttxthx!08:51
*** Ryan_Lane has quit IRC08:51
marunttx: thank you!08:51
*** amuller has quit IRC08:52
*** amuller has joined #openstack-dev08:52
*** Ryan_Lane has joined #openstack-dev08:52
*** Ryan_Lane has quit IRC08:52
*** ni291187 has joined #openstack-dev08:53
*** DinaBelova_ is now known as DinaBelova08:53
*** tkay has quit IRC08:54
*** neoXsys has quit IRC08:55
*** buzztroll has quit IRC08:56
*** romcheg has joined #openstack-dev08:57
*** jpich has joined #openstack-dev08:59
*** mindpixel has joined #openstack-dev08:59
*** eglynn-afk is now known as eglynn08:59
*** nacim has quit IRC09:00
*** nacim has joined #openstack-dev09:00
*** djoreilly has joined #openstack-dev09:05
*** derekh has joined #openstack-dev09:05
*** ala_ has joined #openstack-dev09:06
*** ni291187 has quit IRC09:06
*** enykeev has quit IRC09:06
*** giulivo has joined #openstack-dev09:08
*** networkstatic has quit IRC09:08
*** lsmola_ has joined #openstack-dev09:08
*** SergeyLukjanov_ is now known as SergeyLukjanov09:08
*** nati_uen_ has joined #openstack-dev09:09
*** nati_uen_ has quit IRC09:09
*** matsuhashi has quit IRC09:09
*** nati_uen_ has joined #openstack-dev09:09
*** alex_klimov has joined #openstack-dev09:10
*** aditirav_ has joined #openstack-dev09:12
*** athomas has joined #openstack-dev09:12
*** nati_ueno has quit IRC09:12
*** matsuhas_ has joined #openstack-dev09:14
*** aditirav has quit IRC09:14
*** aditirav_ is now known as aditirav09:14
*** NikitaKonovalov is now known as NikitaKonovalov_09:15
*** samuelbercovici has joined #openstack-dev09:16
*** samuelbercovici has left #openstack-dev09:16
*** iartarisi has joined #openstack-dev09:17
*** samuelbercovici has joined #openstack-dev09:18
*** rossella_s has joined #openstack-dev09:18
*** comay has quit IRC09:18
*** marun has quit IRC09:19
*** lari_ has quit IRC09:19
*** lari_ has joined #openstack-dev09:20
*** ruhe is now known as _ruhe09:20
*** sushil_ has joined #openstack-dev09:22
*** samuelbercovici has quit IRC09:22
*** jtomasek has joined #openstack-dev09:26
*** samuelbercovici has joined #openstack-dev09:26
*** samuelbercovici has left #openstack-dev09:27
*** samuelbercovici has joined #openstack-dev09:27
*** samuelbercovici has left #openstack-dev09:27
*** e0ne has joined #openstack-dev09:28
*** sushil_ has quit IRC09:29
*** sushil_ has joined #openstack-dev09:30
*** nkinder has quit IRC09:31
*** neoXsys has joined #openstack-dev09:31
*** Alexei_987 has joined #openstack-dev09:31
*** avishayb has joined #openstack-dev09:33
*** amotoki has joined #openstack-dev09:33
*** johnthetubaguy has joined #openstack-dev09:34
*** claxton has quit IRC09:35
*** danpb has joined #openstack-dev09:35
*** florentflament has joined #openstack-dev09:36
*** nkinder has joined #openstack-dev09:36
*** achampion has joined #openstack-dev09:37
*** athomas has quit IRC09:38
*** aditirav has quit IRC09:40
*** aditirav has joined #openstack-dev09:40
*** achampion has quit IRC09:41
*** aditirav_ has joined #openstack-dev09:42
*** xga__ has quit IRC09:42
*** csaba is now known as csaba|afk09:42
*** JelleB has quit IRC09:43
*** JelleB has joined #openstack-dev09:43
*** xga__ has joined #openstack-dev09:43
*** nshaikh has left #openstack-dev09:44
*** nshaikh has quit IRC09:44
*** markvoelker has quit IRC09:44
*** aditirav has quit IRC09:44
*** aditirav_ is now known as aditirav09:44
*** kgriffs_afk is now known as kgriffs09:45
*** gokrokve has joined #openstack-dev09:47
*** claxton has joined #openstack-dev09:48
*** athomas has joined #openstack-dev09:49
*** nati_ueno has joined #openstack-dev09:51
*** gokrokve has quit IRC09:52
*** adepti37 has quit IRC09:52
*** nati_uen_ has quit IRC09:53
*** gszasz has joined #openstack-dev09:55
*** sweston has joined #openstack-dev09:55
*** mindpixel has quit IRC09:55
*** pixelb has joined #openstack-dev09:56
*** nati_ueno has quit IRC09:57
*** CaptTofu has joined #openstack-dev09:57
*** lsmola_ has quit IRC09:58
*** NikitaKonovalov_ is now known as NikitaKonovalov09:58
*** safchain has quit IRC10:00
*** adepti37 has joined #openstack-dev10:00
*** safchain has joined #openstack-dev10:01
*** martyntaylor has joined #openstack-dev10:02
*** CaptTofu has quit IRC10:02
*** kgriffs is now known as kgriffs_afk10:02
*** gilliard has quit IRC10:03
*** gilliard has joined #openstack-dev10:03
*** xga__ has quit IRC10:04
gilliardIs there a specific IRC channel for oslo?10:06
*** e0ne_ has joined #openstack-dev10:06
*** ijw has joined #openstack-dev10:06
*** avishayb has quit IRC10:07
*** asalkeld has joined #openstack-dev10:07
*** xga__ has joined #openstack-dev10:08
*** syedarmani has joined #openstack-dev10:09
*** e0ne has quit IRC10:10
*** enykeev has joined #openstack-dev10:10
*** lsmola_ has joined #openstack-dev10:13
*** martyntaylor has quit IRC10:15
*** kbrierly has quit IRC10:16
*** kbrierly has joined #openstack-dev10:16
*** jhesketh has quit IRC10:20
*** sumanth__ has joined #openstack-dev10:20
*** jhesketh__ has quit IRC10:20
*** matsuhas_ has quit IRC10:22
*** sumanth_ has quit IRC10:23
*** mmagr has quit IRC10:23
*** xga__ has quit IRC10:23
*** max_lobur_afk is now known as max_lobur10:29
*** jp_at_hp has joined #openstack-dev10:29
*** martyntaylor has joined #openstack-dev10:31
*** matsuhashi has joined #openstack-dev10:31
*** xga__ has joined #openstack-dev10:31
*** ijw has quit IRC10:31
*** ijw has joined #openstack-dev10:32
*** jhesketh has joined #openstack-dev10:32
*** mflobo_ is now known as mflobo10:32
*** jhesketh__ has joined #openstack-dev10:32
*** paragan has quit IRC10:33
*** mflobo has quit IRC10:33
sn0wb1rdgilliard: From the project's page (https://launchpad.net/oslo), it says this is the channel for oslo.10:33
*** mflobo has joined #openstack-dev10:34
gilliardThanks sn0wb1rd - I'll ask here then: When I run ./run_tests.sh in oslo-incubator I get "ImportError: No module named openstack.common.db"10:34
gilliardAll dependencies seem to have installed correctly.10:35
gilliardopenstack/common/db exists.10:36
mflobogilliard, I don't find any IRC chat related to OSLO lib10:36
*** vkozhukalov has joined #openstack-dev10:37
*** achampion has joined #openstack-dev10:37
*** ala_ has quit IRC10:39
*** ijw has quit IRC10:39
*** achampion has quit IRC10:42
*** lsmola_ has quit IRC10:43
*** andreaf has joined #openstack-dev10:46
*** avishayb has joined #openstack-dev10:46
*** coolsvap has quit IRC10:47
*** gokrokve has joined #openstack-dev10:47
*** amcrn has quit IRC10:52
*** gokrokve has quit IRC10:52
*** ArxCruz has joined #openstack-dev10:53
*** ala_ has joined #openstack-dev10:54
*** lsmola_ has joined #openstack-dev10:56
*** DinaBelova is now known as DinaBelova_10:58
*** coolsvap has joined #openstack-dev11:00
*** matsuhashi has quit IRC11:00
*** xga__ has quit IRC11:03
*** yamahata has quit IRC11:03
*** NikitaKonovalov is now known as NikitaKonovalov_11:04
*** NikitaKonovalov_ is now known as NikitaKonovalov11:06
*** xga has joined #openstack-dev11:07
*** xga_ has joined #openstack-dev11:10
*** boris-42 has quit IRC11:11
*** xga has quit IRC11:12
*** galstrom_zzz is now known as galstrom11:13
*** JordanP has quit IRC11:13
*** galstrom is now known as galstrom_zzz11:14
*** matsuhashi has joined #openstack-dev11:14
*** matsuhashi has quit IRC11:17
*** mdenny has joined #openstack-dev11:18
*** pcm_ has joined #openstack-dev11:18
*** DinaBelova_ is now known as DinaBelova11:18
*** gokrokve has joined #openstack-dev11:19
*** SergeyLukjanov is now known as SergeyLukjanov_a11:19
*** SergeyLukjanov_a is now known as SergeyLukjanov11:19
*** pcm_ has quit IRC11:20
*** pcm_ has joined #openstack-dev11:20
*** gokrokve_ has joined #openstack-dev11:20
*** lucasagomes has joined #openstack-dev11:22
*** gokrokve has quit IRC11:23
*** gokrokve_ has quit IRC11:25
*** aditirav has quit IRC11:27
*** coolsvap has quit IRC11:30
*** jprovazn has quit IRC11:30
*** akrivoka has joined #openstack-dev11:36
*** mrunge has quit IRC11:36
*** rfolco has joined #openstack-dev11:36
*** pschaef has joined #openstack-dev11:37
*** achampion has joined #openstack-dev11:38
*** achampion has quit IRC11:43
*** jprovazn has joined #openstack-dev11:44
*** gokrokve has joined #openstack-dev11:47
Alexei_987jd__: Hi can we discuss oslo db here?11:49
Alexei_987jd__:  I mean that create_engine function has defaults for most of the values and we don't need a separate function to call it11:49
jd__Alexei_987: you do, since they are meant to be configurable via config otions11:50
jd__*options11:50
*** dhouck_ has joined #openstack-dev11:50
Alexei_987jd__: but we can call it directly from our project11:50
Alexei_987jd__: so what's the point in adding another one in options?11:51
jd__Alexei_987: factorizing the code from all projects11:51
jd__so every project does not have to wrap the call to create_session11:51
Alexei_987jd__: but it have to wrap this call anyway.. cause it will store engine object internall11:52
Alexei_987internally*11:52
*** gokrokve has quit IRC11:52
*** MaxV has quit IRC11:52
jd__I don't get what you mean11:52
*** NikitaKonovalov is now known as NikitaKonovalov_11:53
Alexei_987jd__: I mean that we don't store engine inside the library. Every project will have some small piece of code that will create an engine and populate sessions somehow11:53
jd__ok, I think you don't understand at all11:54
jd__let me write an example11:54
Alexei_987jd__: please do it11:54
*** CaptTofu has joined #openstack-dev11:58
*** faramir1 has quit IRC12:02
*** NikitaKonovalov_ is now known as NikitaKonovalov12:02
Alexei_987jd__: ok now I see what you mean :)12:02
Alexei_987jd__: however I think that in such case config should be a parameter to this function12:03
Alexei_987and not a global variable12:03
*** zzelle has joined #openstack-dev12:03
*** mrunge has joined #openstack-dev12:03
*** yamahata has joined #openstack-dev12:03
*** zzelle has quit IRC12:03
*** rkukura has quit IRC12:03
*** CaptTofu has quit IRC12:04
*** zzelle has joined #openstack-dev12:04
Alexei_987jd__: we can simply create a function "create_engine_from_config(cfg)"12:04
*** rods has joined #openstack-dev12:06
*** drewlander has joined #openstack-dev12:06
*** viktors has joined #openstack-dev12:06
*** samuelqueiroz has joined #openstack-dev12:06
samuelqueirozHi, I've a doubt about Keystone groups. I'd like to confirm that groups are created at domain level and they can have both domain and project roles.12:07
samuelqueiroz(:12:08
*** vipul has quit IRC12:10
*** tdruiva has joined #openstack-dev12:10
*** vipul has joined #openstack-dev12:11
*** alexpilotti has joined #openstack-dev12:12
*** csaba|afk is now known as csaba12:12
*** MaxV has joined #openstack-dev12:13
jd__Alexei_987: if you put this function in options.cfg adding _from_config is probably useless12:14
jd__Alexei_987: I mean options.py12:14
*** beagles has quit IRC12:15
Alexei_987jd__:  well just to avoid any confusion with original create_engine12:15
jd__Alexei_987: ever heard of namespaces? :)12:16
Alexei_987jd__: I've heard many times of incorrect imports aliasing12:16
*** alexpilotti has quit IRC12:17
jd__in OpenStack I'd be surprised12:17
*** doug_shelley66 has joined #openstack-dev12:17
Alexei_987jd__:  ok I get your idea and I'll update this patch12:17
*** emagana has quit IRC12:19
Alexei_987jd__: ok another stupid question is what we decide to do with slave_engine options?12:20
Alexei_987jd__: should we just drop them from config?12:20
jd__Alexei_987: is every project going to have to redeclare it itself?12:20
*** b3nt_pin has joined #openstack-dev12:20
*** alexpilotti has joined #openstack-dev12:21
Alexei_987jd__: every project that will actually support it12:21
Alexei_987jd__: cause initially it was done for nova. but even in nova it's never actually used12:21
*** I159 has joined #openstack-dev12:21
Alexei_987since we don't have reads marked as "slave_reads" in db.api12:22
jd__Alexei_987: if it's not used, just drop it12:22
Alexei_987jd__: cool12:22
*** jhesketh__ has quit IRC12:22
*** changbl has quit IRC12:22
*** alexpilotti has quit IRC12:25
*** markvoelker has joined #openstack-dev12:26
*** iartarisi has quit IRC12:27
*** jasondotstar has joined #openstack-dev12:28
*** sumanthns has quit IRC12:29
*** b3nt_pin is now known as beagles12:29
*** boris-42 has joined #openstack-dev12:31
*** FunnyLookinHat has joined #openstack-dev12:32
*** mmagr has joined #openstack-dev12:32
*** evgenyf has quit IRC12:32
*** neoXsys has quit IRC12:38
*** achampion has joined #openstack-dev12:39
*** max_lobur is now known as max_lobur_afk12:41
*** jhesketh has quit IRC12:43
*** glenng has joined #openstack-dev12:43
*** yeylon__ has joined #openstack-dev12:43
*** achampion has quit IRC12:44
*** sweston has quit IRC12:44
*** asalkeld has quit IRC12:44
*** dkranz has joined #openstack-dev12:45
*** ala_ has quit IRC12:45
*** clayb has joined #openstack-dev12:45
*** CaptTofu has joined #openstack-dev12:46
*** yeylon_ has quit IRC12:46
*** JCxMLnblFl has joined #openstack-dev12:46
*** JCxMLnblFl has left #openstack-dev12:46
*** yaguang has quit IRC12:47
*** gokrokve has joined #openstack-dev12:47
*** glenng1 has joined #openstack-dev12:48
*** tserong has quit IRC12:49
*** glenng has quit IRC12:49
*** dave_tucker_zzz is now known as dave_tucker12:50
*** tserong has joined #openstack-dev12:50
*** tserong has quit IRC12:50
*** tserong has joined #openstack-dev12:50
*** gszasz has quit IRC12:50
*** amotoki has quit IRC12:51
*** IanGovett has joined #openstack-dev12:51
*** _ruhe is now known as ruhe12:51
*** gokrokve has quit IRC12:52
*** rtheis has joined #openstack-dev12:54
samuelqueirozHey guys, does anyone may help me with Keystone groups? :)12:54
*** cagrev has joined #openstack-dev12:54
*** drewlander has quit IRC12:55
*** asalkeld has joined #openstack-dev12:56
*** bauzas has joined #openstack-dev12:57
*** JuanManuelOlle has joined #openstack-dev12:57
*** rkukura has joined #openstack-dev12:59
*** neeti has quit IRC12:59
*** dprince has joined #openstack-dev12:59
*** ala_ has joined #openstack-dev12:59
*** markwash has joined #openstack-dev13:00
*** markmcclain has joined #openstack-dev13:00
*** heyongli has joined #openstack-dev13:00
*** neeti has joined #openstack-dev13:01
*** nmagnezi_ has joined #openstack-dev13:02
*** xga has joined #openstack-dev13:02
*** xga_ has quit IRC13:02
*** nmagnezi has quit IRC13:02
*** afazekas has quit IRC13:02
*** ayoung has quit IRC13:02
*** aveiga has joined #openstack-dev13:04
*** sahid has quit IRC13:04
*** max_lobur_afk is now known as max_lobur13:04
*** jdob has joined #openstack-dev13:04
*** yeylon__ has quit IRC13:04
*** gszasz has joined #openstack-dev13:05
*** haomaiwa_ has quit IRC13:06
*** haomaiwang has joined #openstack-dev13:07
*** claxton has quit IRC13:07
*** nosnos has quit IRC13:08
*** gokrokve has joined #openstack-dev13:12
*** gokrokve has quit IRC13:14
*** jruzicka has joined #openstack-dev13:14
*** iartarisi has joined #openstack-dev13:15
*** morazi has joined #openstack-dev13:15
*** afazekas has joined #openstack-dev13:15
*** claxton has joined #openstack-dev13:16
*** dhellmann_ is now known as dhellmann13:16
*** chandankumar has joined #openstack-dev13:16
*** jruzicka has quit IRC13:17
*** jruzicka has joined #openstack-dev13:17
*** IanGovett has quit IRC13:17
*** jecarey has quit IRC13:17
*** sandywalsh has joined #openstack-dev13:18
*** yeylon__ has joined #openstack-dev13:19
*** IanGovett has joined #openstack-dev13:19
*** emagana has joined #openstack-dev13:19
*** alexpilotti has joined #openstack-dev13:19
*** xga_ has joined #openstack-dev13:21
*** xga has quit IRC13:22
JuanManuelOllehello13:22
*** markwash has quit IRC13:23
*** avishayb has quit IRC13:23
*** haomaiwang has quit IRC13:24
*** haomaiwang has joined #openstack-dev13:24
*** alexpilotti has quit IRC13:24
*** ala_ has quit IRC13:29
*** michchap has quit IRC13:31
*** afazekas is now known as afazekas|mtg13:31
*** michchap has joined #openstack-dev13:31
*** tdruiva has quit IRC13:32
*** eharney has joined #openstack-dev13:33
*** beagles has quit IRC13:33
*** NithyaG has joined #openstack-dev13:35
*** chandankumar has quit IRC13:36
*** michchap has quit IRC13:36
*** rohitk has quit IRC13:36
*** dhellmann is now known as dhellmann_13:36
*** dhellmann_ is now known as dhellmann13:37
*** noslzzp has joined #openstack-dev13:38
*** neeti has quit IRC13:38
*** b3nt_pin has joined #openstack-dev13:39
*** erecio has joined #openstack-dev13:40
*** achampion has joined #openstack-dev13:40
*** JordanP has joined #openstack-dev13:40
*** pberis has quit IRC13:44
*** pberis has joined #openstack-dev13:44
*** achampion has quit IRC13:45
*** fghaas has joined #openstack-dev13:45
*** prad has joined #openstack-dev13:45
fghaasbnemec: if you happen to be around, I have a quick question about your suggestions on oslo MySQL SQL mode unit tests13:46
*** ala_ has joined #openstack-dev13:46
*** RemyS has joined #openstack-dev13:47
*** b3nt_pin has quit IRC13:48
*** rohitk has joined #openstack-dev13:49
*** markwash has joined #openstack-dev13:49
*** RemyS has quit IRC13:50
*** tdruiva has joined #openstack-dev13:50
*** dims has quit IRC13:50
*** emagana has quit IRC13:51
*** dims has joined #openstack-dev13:52
*** doug_shelley66 has quit IRC13:52
*** thuc has joined #openstack-dev13:53
*** thuc_ has joined #openstack-dev13:54
*** b3nt_pin has joined #openstack-dev13:55
*** vladikr has joined #openstack-dev13:55
*** markmcclain has quit IRC13:57
*** markmcclain has joined #openstack-dev13:57
*** claxton has quit IRC13:58
*** thuc has quit IRC13:58
*** achampion has joined #openstack-dev13:58
*** gordc has joined #openstack-dev13:59
*** claxton has joined #openstack-dev14:01
*** redhat has quit IRC14:02
*** eglynn is now known as eglynn-lunch14:03
*** arnaud___ has joined #openstack-dev14:03
*** arnaud__1 has joined #openstack-dev14:03
*** dims has quit IRC14:03
*** chandankumar has joined #openstack-dev14:03
*** heyongli has quit IRC14:03
*** mestery has quit IRC14:03
*** cmyster has quit IRC14:04
*** dims has joined #openstack-dev14:04
*** jckasper has quit IRC14:05
*** gokrokve has joined #openstack-dev14:05
*** yaguang has joined #openstack-dev14:06
*** jpomero_ has quit IRC14:06
*** radez_g0n3 is now known as radez14:07
*** nermina has joined #openstack-dev14:08
*** gokrokve_ has joined #openstack-dev14:08
*** dkranz has quit IRC14:09
*** chandankumar has quit IRC14:09
*** gokrokve has quit IRC14:11
*** afazekas|mtg has quit IRC14:11
*** lbragstad has joined #openstack-dev14:11
*** prad has quit IRC14:12
*** gszasz has quit IRC14:13
*** pschaef has quit IRC14:13
*** dkehn_ has joined #openstack-dev14:13
*** vartom1111111117 has quit IRC14:14
*** joesavak has joined #openstack-dev14:14
*** ozialien has quit IRC14:14
*** gimps has joined #openstack-dev14:15
*** mestery has joined #openstack-dev14:15
*** ecarlin has joined #openstack-dev14:17
*** emagana has joined #openstack-dev14:17
*** afazekas has joined #openstack-dev14:18
*** tmclaugh[work] has joined #openstack-dev14:19
*** glenng1 is now known as glenng14:19
*** mdenny has quit IRC14:20
*** tdruiva has quit IRC14:20
*** tdruiva has joined #openstack-dev14:21
*** chandankumar has joined #openstack-dev14:22
*** nmagnezi has joined #openstack-dev14:22
*** mriedem has joined #openstack-dev14:23
*** emagana has quit IRC14:23
*** zz_ewindisch is now known as ewindisch14:23
*** rcj has quit IRC14:25
*** yamahata has quit IRC14:25
*** dvarga has joined #openstack-dev14:25
*** NikitaKonovalov is now known as NikitaKonovalov_14:25
*** tmclaugh[work] has quit IRC14:25
*** bswartz has joined #openstack-dev14:25
*** b3nt_pin is now known as beagles14:26
*** DinaBelova is now known as DinaBelova_14:26
*** nmagnezi_ has quit IRC14:26
*** jayg|g0n3 is now known as jayg14:27
*** redhat has joined #openstack-dev14:28
*** yamahata has joined #openstack-dev14:29
*** spzala has joined #openstack-dev14:30
*** claxton has quit IRC14:30
*** doug-fish has quit IRC14:30
*** thuc has joined #openstack-dev14:31
*** michchap has joined #openstack-dev14:32
*** rcj has joined #openstack-dev14:32
*** IanGovett has quit IRC14:32
*** kenperkins has joined #openstack-dev14:33
*** nkinder has quit IRC14:33
*** doug_shelley66 has joined #openstack-dev14:33
*** peristeri has joined #openstack-dev14:34
*** thuc_ has quit IRC14:35
*** florentflament has quit IRC14:35
*** chandankumar has quit IRC14:35
*** thuc has quit IRC14:36
*** michchap has quit IRC14:36
*** doug-fish has joined #openstack-dev14:36
*** DinaBelova_ is now known as DinaBelova14:37
*** gszasz has joined #openstack-dev14:37
*** nermina has quit IRC14:38
*** achampio1 has joined #openstack-dev14:38
*** michchap has joined #openstack-dev14:39
*** avishay has quit IRC14:39
*** amuller_ has joined #openstack-dev14:39
*** byeager has joined #openstack-dev14:39
*** gokrokve_ has quit IRC14:39
*** amuller has quit IRC14:39
*** irenab has quit IRC14:39
*** xga_ has quit IRC14:40
*** achampion has quit IRC14:40
*** nacim has quit IRC14:40
*** mestery_ has joined #openstack-dev14:40
*** neeti has joined #openstack-dev14:41
jamespagesalv-orlando, hey - have you got a good reproducer for that kernel bug you are hitting?  I can poke that at our kernel team who are looking at this now14:41
*** READ10 has joined #openstack-dev14:42
*** mestery__ has joined #openstack-dev14:42
*** JordanP has quit IRC14:42
*** gokrokve_ has joined #openstack-dev14:43
*** michchap has quit IRC14:43
*** meste____ has joined #openstack-dev14:43
*** FunnyLookinHat has quit IRC14:43
*** mestery has quit IRC14:43
*** ygbo has quit IRC14:44
*** mestery_ has quit IRC14:46
*** mestery__ has quit IRC14:46
*** NikitaKonovalov_ is now known as NikitaKonovalov14:46
*** vijendar has joined #openstack-dev14:46
*** n0ano has joined #openstack-dev14:47
*** francois_eleouet has joined #openstack-dev14:47
*** tkammer has quit IRC14:47
*** nermina has joined #openstack-dev14:47
*** feleouet has quit IRC14:48
*** jobewan has joined #openstack-dev14:48
*** vijendar has quit IRC14:48
*** vijendar has joined #openstack-dev14:48
*** kolesovdv has quit IRC14:48
*** flaper87 is now known as flaper87|afk14:50
*** dvarga is now known as dvarga|away14:50
*** dvarga|away is now known as dvarga14:50
*** aeperezt has joined #openstack-dev14:53
*** jcoufal has quit IRC14:53
*** nacim has joined #openstack-dev14:54
*** amuller_ is now known as amuller14:54
*** jcoufal has joined #openstack-dev14:54
*** avishayb has joined #openstack-dev14:54
*** prad has joined #openstack-dev14:55
*** ygbo has joined #openstack-dev14:55
*** mrunge has quit IRC14:55
*** ruhe is now known as _ruhe14:56
*** martyntaylor1 has joined #openstack-dev14:56
*** mestery has joined #openstack-dev14:57
*** sahid has joined #openstack-dev14:57
*** JordanP has joined #openstack-dev14:57
*** martyntaylor has quit IRC14:58
*** mestery_ has joined #openstack-dev14:58
*** chandankumar has joined #openstack-dev14:59
*** kbrierly has quit IRC14:59
*** adepti37 has quit IRC14:59
*** meste____ has quit IRC15:00
*** evgenyf has joined #openstack-dev15:00
*** tkammer has joined #openstack-dev15:01
*** mfisch has quit IRC15:01
*** mestery__ has joined #openstack-dev15:01
*** ewindisch is now known as zz_ewindisch15:01
*** mestery has quit IRC15:02
*** tzabal has joined #openstack-dev15:02
*** mfisch has joined #openstack-dev15:02
*** mfisch has joined #openstack-dev15:02
*** mrodden has quit IRC15:02
*** willingc has joined #openstack-dev15:02
*** NithyaG has quit IRC15:02
*** jnoller has joined #openstack-dev15:03
*** NithyaG has joined #openstack-dev15:03
*** kgriffs_afk is now known as kgriffs15:03
*** mestery_ has quit IRC15:03
*** jnoller has quit IRC15:04
salv-orlandojamespage: do you need access to a machine where the bug is manifesting? Because so far we've isolated that happens with 3.2.0-58 and did not happen with 3.2.0-57 but have nothing else than kernel crash dumps15:04
*** jnoller_ has joined #openstack-dev15:04
jamespagesalv-orlando, thats a great helpful bisect to start off with15:04
jamespagesalv-orlando, we've seen something that might be related deleting network namespaces but I don't think its exactly the same thing15:05
*** jecarey has joined #openstack-dev15:05
*** jmckind has joined #openstack-dev15:05
*** mestery has joined #openstack-dev15:05
*** jobewan has quit IRC15:05
salv-orlandojamespage: if you want to have a look at the crash dump I can point you to a kernel log file from our gate testing, but if you need apport reports or other logs, I'll need to setup a reproenvironment for you15:05
*** neeti has quit IRC15:05
*** chandankumar has quit IRC15:06
*** kevinconway has joined #openstack-dev15:06
jamespagesalv-orlando, I think there is enough - I've just asked one of the ubuntu kernel team to join here so he can ask the questions directly15:06
* jamespage is probably the go-between right now15:06
*** tkammer has quit IRC15:06
*** nmagnezi has quit IRC15:06
salv-orlandook thanks you've already been a lot helpful in pointing us to the right person. If I'm not around as I have a dentist appointment markmcclain will be here15:07
*** browne has joined #openstack-dev15:07
jamespagesalv-orlando, ack15:07
*** willingc has quit IRC15:07
*** eglynn-lunch is now known as eglynn-call15:07
*** ftcjeff has joined #openstack-dev15:07
*** achampion has joined #openstack-dev15:08
*** kenperkins has quit IRC15:09
*** jpomero has joined #openstack-dev15:09
*** stevemar has joined #openstack-dev15:09
*** mestery__ has quit IRC15:09
*** stevemar has quit IRC15:09
*** jtomasek has quit IRC15:09
*** stevemar has joined #openstack-dev15:09
*** achampio1 has quit IRC15:10
*** willingc has joined #openstack-dev15:11
*** rwsu has joined #openstack-dev15:12
*** willingc has quit IRC15:13
*** willingc has joined #openstack-dev15:13
*** kenperkins has joined #openstack-dev15:13
*** venkatesh has joined #openstack-dev15:14
*** haomaiwang has quit IRC15:16
*** smb has joined #openstack-dev15:16
*** mrodden has joined #openstack-dev15:16
jamespagesalv-orlando, markmcclain - meet smb (kernel team)15:16
*** coolsvap has joined #openstack-dev15:16
salv-orlandohi smb15:17
smbhi15:17
*** adepti37 has joined #openstack-dev15:17
*** tanisdl has joined #openstack-dev15:17
*** willingc has quit IRC15:18
*** topol has joined #openstack-dev15:18
markmcclainsmb: hi15:18
salv-orlandosmb: we are trying to understand what we're doing that it crashes the kernel since we rolled out 3.2.0-58 in our gate tests15:18
*** FunnyLookinHat has joined #openstack-dev15:18
salv-orlandoit might be a kernel bug, but it might also be us not using namespaces correctly15:18
smbSo still looking through thing. Seems unmount causes some buffer to get submitted that has no bufferhead mapped. But with the additional info about the previous kernel working it reducing the things I will ave to ook trhough15:18
smbAs I understand the comments there is that meta-data proxy being shut down and that uses fs namespace somehow15:19
*** zz_ewindisch is now known as ewindisch15:19
*** jgrimm has joined #openstack-dev15:20
markmcclaincorrect15:20
*** nmagnezi has joined #openstack-dev15:21
smbsalv-orlando, Just to get the picture, did the newer kernel potentially come with any changes to the user-space proxy?15:21
salv-orlandothat happens mostly with the namespace proxy, but also with dnsmasq. there is a pattern: kill a process running in the namspace and immediately after kill the namespace15:21
salv-orlandothe user-space proxy is part of neutron and was last modified in may15:21
*** devoid has joined #openstack-dev15:21
garyk1salv-orlando: do the problems reproduce with devstack? the patch for the kernel upgrade was approved today in devstack15:22
*** rcleere has joined #openstack-dev15:22
*** troytoman is now known as troytoman-away15:22
*** morganfainberg|z is now known as morganfainberg15:22
garyk1https://review.openstack.org/#/c/69464/15:22
salv-orlandogaryk1: For the gate we have to wait until it gets into nodepool15:22
*** willingc has joined #openstack-dev15:22
garyk1salv-orlando: ok, thanks15:22
*** tkammer has joined #openstack-dev15:22
salv-orlandoas for devstack I had about 7 machines, none of them with that kernel, and did not see the issue. I shall try to install it.15:22
salv-orlandosmb: https://github.com/openstack/neutron/blob/master/neutron/agent/linux/dhcp.py#L18315:23
*** aeperezt has quit IRC15:23
smbsalv-orlando, Ah ok, so on a machine with the new kernel, going back to the previous one would also make the problem go away15:23
*** dkranz has joined #openstack-dev15:24
salv-orlandoThis is what I need to verify. I think so, but I can't yet prove it.15:24
*** nkinder has joined #openstack-dev15:24
salv-orlandoSo far I'm just basing on the fact that we did not find any occurrence of the kernel bug in gate tests logs running with kernel 3.2.0-5715:24
smbsalv-orlando, Ok, so that direction would be good to know and otherwise I see some newer version of the kernel in git15:24
*** jtomasek has joined #openstack-dev15:25
*** sumanth__ has quit IRC15:25
salv-orlandook, I shall be able to report on this test in a few hours. Unfortunately I have another commitment blocking me for about 3 hours now.15:25
salv-orlandoAnother thing to note is that we're doing this pattern (kill process and delete namespace) concurrently15:25
*** thedodd has joined #openstack-dev15:26
salv-orlandoThere are several green threads all doing the same operation at the same time15:26
*** thouveng has quit IRC15:26
salv-orlandonot sure if this might be another possible source of problem.15:26
salv-orlandosmb: which IRC room do you usually lurk in?15:26
salv-orlandoI'd like to report the findings on 3.2.0-57 vs 3.2.0-58 as soon as I have them15:27
*** venkatesh has quit IRC15:28
smbOk, but it is not being pushed out, yet15:28
smbsalv-orlando, On #ubuntu-kernel or #ubuntu-server15:28
*** pschaef has joined #openstack-dev15:29
*** _ruhe is now known as ruhe15:30
*** yaguang has quit IRC15:30
*** yamahata has quit IRC15:30
salv-orlandosmb: what is not yet being pushed out?15:30
*** achampio1 has joined #openstack-dev15:31
smbsalv-orlando, Was held up by freeze for the point release and end-of-year vacation15:32
*** achampion has quit IRC15:33
bnemecfghaas: Okay, I'm available.15:34
*** ayoung has joined #openstack-dev15:34
*** alex_klimov has quit IRC15:35
fghaashey bnemec -- can you point me to documentation explaining how to run the oslo common.db.sqlalchemy unit tests against a locally available mysql database?15:35
*** arges has joined #openstack-dev15:36
fghaasI've fixed up the unit tests for the sql mode updates in the interim, but I'd prefer to be able to actually run them locally, rather that via zuul only15:36
bnemecfghaas: Check out the bottom of this page: https://github.com/openstack/oslo-incubator15:37
bnemecAlso, if you just create a database named openstack_citest and a db user named openstack_citest with a password of openstack_citest (seeing a pattern here? :-) the opportunistic test cases will automatically use it.15:37
fghaasargh, how the hell did I miss that -- thanks for the pointer!15:38
*** avishayb has quit IRC15:38
*** avishayb has joined #openstack-dev15:38
bnemecHeh, I think it's a relatively recent addition.  There's been a lot of work going on with the db code this cycle.15:38
*** aeperezt has joined #openstack-dev15:38
*** mrunge has joined #openstack-dev15:38
*** michchap has joined #openstack-dev15:39
*** kbrierly has joined #openstack-dev15:39
*** ecarlin has quit IRC15:39
*** nermina has quit IRC15:40
*** eharney has quit IRC15:41
*** david-lyle has joined #openstack-dev15:41
*** ala_ has quit IRC15:42
*** byeager has quit IRC15:43
*** beisner has joined #openstack-dev15:43
*** byeager has joined #openstack-dev15:43
*** michchap has quit IRC15:44
*** lucasagomes is now known as lucas-hungry15:44
*** amotoki has joined #openstack-dev15:47
*** NikitaKonovalov is now known as NikitaKonovalov_15:48
*** dvarga is now known as dvarga|away15:49
*** dvarga|away is now known as dvarga15:49
*** nmagnezi has quit IRC15:50
*** jcoufal has quit IRC15:50
*** jcoufal-mobile has joined #openstack-dev15:51
*** jistr has quit IRC15:51
*** andreaf has quit IRC15:52
*** dbalog has joined #openstack-dev15:52
*** ecarlin has joined #openstack-dev15:54
*** jtomasek has quit IRC15:54
*** rcleere has quit IRC15:54
*** reed has joined #openstack-dev15:55
*** ecarlin has quit IRC15:56
*** rcleere has joined #openstack-dev15:57
*** pmathews has joined #openstack-dev15:58
*** ecarlin has joined #openstack-dev15:58
*** samuelbercovici has joined #openstack-dev15:58
*** garyk1 has quit IRC16:00
*** ala_ has joined #openstack-dev16:00
*** achampion has joined #openstack-dev16:00
*** Ruetobas has quit IRC16:01
*** AlexF_ has joined #openstack-dev16:01
*** nmagnezi has joined #openstack-dev16:01
*** byeager has quit IRC16:01
*** achampio1 has quit IRC16:02
*** byeager has joined #openstack-dev16:02
*** Drankis has quit IRC16:02
*** nermina has joined #openstack-dev16:02
*** Ruetobas has joined #openstack-dev16:03
*** haomaiwang has joined #openstack-dev16:03
*** samuelbercovici has quit IRC16:04
*** caleb_ has joined #openstack-dev16:04
*** tkammer has quit IRC16:04
*** zaneb has quit IRC16:06
*** jtomasek has joined #openstack-dev16:06
*** byeager has quit IRC16:07
*** boris-42 has quit IRC16:07
*** carl_baldwin has joined #openstack-dev16:07
*** Ruetobas has quit IRC16:08
*** samuelbercovici has joined #openstack-dev16:09
*** jcooley_ has joined #openstack-dev16:09
*** mfer has joined #openstack-dev16:09
*** SergeyLukjanov is now known as SergeyLukjanov_16:09
*** eharney has joined #openstack-dev16:09
fghaasokay bnemec, I believe I've addressed all your comments in https://review.openstack.org/#/q/status:open+project:openstack/oslo-incubator+branch:master+topic:bug-1271706,n,z -- whenever convenient, let me know if you have anything to add16:10
*** zaneb has joined #openstack-dev16:10
*** kenperkins has quit IRC16:11
bnemecfghaas: Cool, I'll take a look.16:11
*** raildo has quit IRC16:11
*** miguitas has joined #openstack-dev16:11
*** miguitas has left #openstack-dev16:12
*** flaper87|afk is now known as flaper8716:12
*** lcheng has joined #openstack-dev16:12
*** eglynn-call is now known as eglynn16:12
*** kenperkins has joined #openstack-dev16:12
*** ecarlin has quit IRC16:13
*** Ruetobas has joined #openstack-dev16:13
*** emagana has joined #openstack-dev16:14
*** DinaBelova is now known as DinaBelova_16:14
*** kgriffs is now known as kgriffs_afk16:14
*** jcoufal-mobile has quit IRC16:15
*** jcoufal-mobile has joined #openstack-dev16:15
*** ecarlin has joined #openstack-dev16:16
*** tkammer has joined #openstack-dev16:16
*** emagana has quit IRC16:16
*** schwicke has joined #openstack-dev16:16
*** ecarlin has quit IRC16:16
*** atiwari has joined #openstack-dev16:18
*** SumitNaiksatam has quit IRC16:18
*** vkozhukalov has quit IRC16:19
*** Guest57205 has joined #openstack-dev16:20
*** mdenny has joined #openstack-dev16:20
morganfainbergflaper87, i think i can discuss some cache impl w/ you today if you'll have time16:20
Guest57205Hi my name is Vinod currently working in CERN16:20
Guest57205I have few doubts16:20
*** nmagnezi has quit IRC16:21
*** kgriffs_afk is now known as kgriffs16:21
Guest57205The questions are mainly related to quotas16:21
*** tkammer has quit IRC16:21
flaper87morganfainberg: tomorrow would be better for me16:21
flaper87morganfainberg: now, you tell me. What's the best way to verify if a tenant exists ?16:21
Guest57205I  have tested the Domain Quota Driver and so now i want to add API to the quota sets16:22
Guest57205for example, this is the existing api v2/{tenant_id}/os-quota-sets for setting quotas for a tenant16:23
*** kushal has joined #openstack-dev16:23
Guest57205now, the domain also comes into picture16:23
morganfainbergflaper87, sure. i'll probably be more available tomorrow (recovering from a nasty ick atm)16:23
*** otherwiseguy has quit IRC16:23
*** jcoufal has joined #openstack-dev16:23
morganfainbergflaper87, i think you do a get on the tenant/project (version 2 or 3 respectively)16:23
Guest57205so, can i rewrite that API as "v2/{domain_id}/os-quota-sets" for displaying the quotas for a domain16:23
morganfainbergflaper87, if you get a 404, the project doesn't exist16:24
Guest57205then v2/{domain_id}/{tenant_id}/os-quota-sets for a tenant in a domain16:24
Guest57205so, is there any current development going on in the openstack to implement the quota at domain level as well16:25
*** jprovazn has quit IRC16:25
Guest57205Also, i was going through the code to understand how an URL actually gets mapped to a function of a python module16:25
*** willingc has quit IRC16:25
flaper87morganfainberg: kk, thanks16:26
*** kgriffs is now known as kgriffs_afk16:26
*** jcoufal-mobile has quit IRC16:26
Guest57205could any body help me in this and explain how it happens? I could find some mapper.connect commands, but i could see all the connect for all the URLs16:26
*** kgriffs_afk is now known as kgriffs16:26
*** hemna has quit IRC16:26
*** hemna has joined #openstack-dev16:26
*** willingc has joined #openstack-dev16:26
*** thuc has joined #openstack-dev16:27
*** Guest57205 has quit IRC16:27
*** thuc has quit IRC16:28
*** Administrator___ has joined #openstack-dev16:28
*** thuc has joined #openstack-dev16:28
*** thuc has quit IRC16:28
Administrator___hi16:28
*** gyee has joined #openstack-dev16:29
*** Administrator___ is now known as Guest5720516:29
*** mikemar10 has joined #openstack-dev16:29
*** Guest57205 is now known as Administrator___16:29
*** thuc has joined #openstack-dev16:29
*** kgriffs is now known as kgriffs_afk16:29
*** martyntaylor1 has quit IRC16:29
*** aditirav has joined #openstack-dev16:29
*** thuc has quit IRC16:29
*** comay has joined #openstack-dev16:30
*** garyk has joined #openstack-dev16:30
*** thuc has joined #openstack-dev16:30
*** rods has quit IRC16:30
*** Administrator___ has left #openstack-dev16:30
*** rods has joined #openstack-dev16:30
*** thuc has quit IRC16:30
*** ruhe is now known as _ruhe16:31
*** willingc has quit IRC16:31
*** thuc has joined #openstack-dev16:31
*** xqueralt has quit IRC16:32
*** VINOD_ has joined #openstack-dev16:32
*** michchap has joined #openstack-dev16:32
*** SumitNaiksatam has joined #openstack-dev16:33
VINOD_do anybody have any idea about any work currently going to add APIs for domain quotas16:33
VINOD_because we at CERN thinking of adding these APIs16:33
devoidGuest5720516:33
devoidhttps://github.com/openstack/nova/blob/master/nova/api/openstack/compute/contrib/quotas.py16:33
*** smb has left #openstack-dev16:34
devoidhttps://github.com/openstack/nova/blob/master/nova/api/openstack/compute/plugins/v3/quota_sets.py16:34
devoidfor v2 and v3 apis respectively16:34
VINOD_the quotas.py is only for tenant and user quotas16:34
*** otherwiseguy has joined #openstack-dev16:34
VINOD_but there is a domain quota driver available as well.16:35
devoidhttps://github.com/openstack/nova/blob/master/nova/quota.py for the database or file-backed driver details.16:35
*** mikeoutland has joined #openstack-dev16:35
devoidVINOD_, I thought the /contrib/ section was all for v2 APIs?16:35
VINOD_I am talking only about v2 apis16:36
VINOD_but i have a domain quota driver, through which i can add one more hierarchy in the quota16:36
*** michchap has quit IRC16:37
*** lucas-hungry is now known as lucasagomes16:37
VINOD_This driver will help me implement the quotas at domain, then quotas at the tenant/project level (which means the quotas for all the projects has to be with in the domain quota) and finally the user quotas as well16:38
devoidVINOD_ I'm guessing Guest57205 is running with Grizzly or Havana builds, was your domain quota driver released in time for those?16:38
VINOD_i am running with havana16:38
*** martyntaylor has joined #openstack-dev16:38
devoidoh, VINOD_ == Guest57205?16:38
VINOD_and i got the domain quota driver from github (through Mr. Tiago)16:38
VINOD_yes...i had changed the name (because it was coming as guest)...my real name is vinod16:38
VINOD_sorry for that16:39
VINOD_what i was saying is that, i had tested the domain quota driver by tweaking the code (which was using DbQuotaDriver) and can check that a tenant quota cannot cross the limits imposed on domain16:39
VINOD_but what was missing is the API's for doing all this16:39
VINOD_like setting the domain quotas, changing them...getting the tenant quotas of a domain etc16:40
*** michchap has joined #openstack-dev16:40
VINOD_for example, this is the existing v2 API available "v2/{tenant_id}/os-quota-sets" for displaying the quota sets of a tenant16:41
morganfainbergdstanek, today i am hoping to be vertical enough to get some code written.16:41
morganfainbergdstanek, so hopefully that patchset you asked about yesterday i'll have respun w/ fixes16:41
morganfainberg:)16:41
VINOD_can we change this to "v2/{domain_id}/{tenant_id}/os-quota-sets" to display the quotas for a tenant in a domain16:42
*** JuanManuelOlle1 has joined #openstack-dev16:42
*** dvarga is now known as dvarga|away16:42
*** dvarga|away is now known as dvarga16:42
*** JuanManuelOlle has quit IRC16:42
*** evgenyf has quit IRC16:42
VINOD_and if you want to just see the quotas of a domain, then we can have something like "v2/{domain_id}/os-quota-sets"16:42
*** syedarmani has quit IRC16:43
*** pablosan has joined #openstack-dev16:43
*** nkinder has quit IRC16:44
*** michchap has quit IRC16:45
*** sumanth__ has joined #openstack-dev16:45
*** chandankumar has joined #openstack-dev16:45
dstanekmorganfainberg: np, just ping me if you have something to review16:46
morganfainbergdstanek, nod16:46
*** stevencollins has joined #openstack-dev16:47
*** lcheng_ has joined #openstack-dev16:47
*** pablosan has quit IRC16:49
*** JordanP has quit IRC16:49
VINOD_Is there any document available for V3 API URLs for nova16:49
*** nacim has quit IRC16:49
*** lcheng has quit IRC16:50
*** JordanP has joined #openstack-dev16:50
*** ecarlin has joined #openstack-dev16:56
*** byeager has joined #openstack-dev16:56
*** byeager has quit IRC16:56
*** emagana has joined #openstack-dev16:56
*** byeager has joined #openstack-dev16:56
*** nkinder has joined #openstack-dev16:57
*** adreznec has joined #openstack-dev16:59
*** arunkant has joined #openstack-dev16:59
*** alop has joined #openstack-dev16:59
*** caleb_ has quit IRC16:59
*** DinaBelova_ is now known as DinaBelova17:00
*** dkuffner has quit IRC17:00
*** afazekas has quit IRC17:00
*** nermina has quit IRC17:01
*** sps has joined #openstack-dev17:01
*** sps has left #openstack-dev17:02
*** nacim has joined #openstack-dev17:02
*** NikitaKonovalov_ is now known as NikitaKonovalov17:02
*** dvarga is now known as dvarga|away17:02
*** dvarga|away is now known as dvarga17:02
*** nkinder has quit IRC17:03
*** e0ne_ has quit IRC17:03
*** marun has joined #openstack-dev17:03
*** e0ne has joined #openstack-dev17:04
*** mikeoutland has quit IRC17:04
*** buzztroll has joined #openstack-dev17:04
*** marun has quit IRC17:05
*** willingc has joined #openstack-dev17:06
rohitkmarkmc: Hi17:07
*** mlavalle has joined #openstack-dev17:07
*** jtomasek has quit IRC17:07
*** noslzzp has quit IRC17:07
*** boris-42 has joined #openstack-dev17:07
*** marun has joined #openstack-dev17:08
*** e0ne has quit IRC17:09
*** chandankumar has quit IRC17:09
*** noslzzp has joined #openstack-dev17:10
*** adepti37 has quit IRC17:10
ayoungmorganfainberg, dstanek, want to see the coolest code I've written for Keystone yet?17:10
morganfainbergayoung, always17:10
ayounghttps://review.openstack.org/#/c/69531/3/keystone/contrib/revoke/model.py  morganfainberg17:10
ayoungDivide-and-Conquer token revocation checking17:11
ayoungit turns the revocation events into a tree.17:11
morganfainbergzigo, if you are still struggling with the unit tests, i am attempting to fix the configs for tests by the end of icehouse to make them not rely on the external config files as much17:11
ayoungto see if a token is revoked,  you look for a match  at each level.  Each level represents one attribute name.17:11
*** NikitaKonovalov is now known as NikitaKonovalov_17:11
morganfainbergayoung, looking now.17:12
ayoungI ordered the attributes from "least likely to match"  to "most likeley to match"  to keep the tree as skinny as possible17:12
ayoungmorganfainberg, ordering is at line 2717:12
morganfainbergi see17:12
morganfainbergayoung, nice.17:12
zigomorganfainberg: The only issue I have with the default test_overrides.conf, is that I always have to add the [sql] connection = sqlite:////%CUR_DIR%/debian/tests/testing.db in it, otherwise I'd be using the default...17:12
ayoungevery event now has "issued_before" on it, to, to give a viable end state17:12
ayoungmakes the whole thing cleaner17:13
ayoungeven if it has expires_at....minor API tweak needed for that17:13
*** xqueralt has joined #openstack-dev17:13
ayoungNeed to rename RevokeMap to RevokeTree17:13
ayoungread the code from the bottom up morganfainberg17:13
ayoungin order to see how revocation checking is done.17:14
zigomorganfainberg: If you find it fun, you can have a look at the "override_dh_auto_test:" target of this: http://anonscm.debian.org/gitweb/?p=openstack/keystone.git;a=blob;f=debian/rules;h=f6d18f60efdb682027efe66e39c66c10b3556aa0;hb=f87d2755654641240a05cfadfe503a635ca119f817:14
*** omachace has left #openstack-dev17:14
ayoungBTW, the token_data is assumed to be a copy, and is going to be modified by the search code.17:14
*** doug_shelley66 has quit IRC17:14
morganfainbergzigo, that might not get fixed in my refactor.  i'll look at it to see if i can make it more friendly though17:14
*** mrunge has quit IRC17:14
zigomorganfainberg: I find it a bit complicated to do all that, just to run the unit tests of Keystone. :)17:14
zigomorganfainberg: If I could just do ./run_tests.sh like with other projects, that'd help! :)17:15
ayoungspecifically to allow for checking trustoruid and trustee_id against user id, as well as 2 different domain ids : user and project17:15
*** _ruhe is now known as ruhe17:15
*** doug_shelley66 has joined #openstack-dev17:15
morganfainbergzigo, ah actually, with my refactor it should be much easier, you'd just need to add your new SQL line rather than sed.17:15
morganfainbergzigo, but i _think_ my refactor will help17:15
*** tdruiva has quit IRC17:15
ayoungzigo, ./run_projects.sh works like a champ17:15
*** sheeprine has quit IRC17:15
*** chandankumar has joined #openstack-dev17:15
morganfainbergayoung, s/run_projects.sh/run_tests.sh17:15
morganfainbergzigo, i'll point you at the review when i get it posted.17:16
zigomorganfainberg: Cheers! :)17:16
ayoungheh17:16
*** gokrokve_ has quit IRC17:16
*** pablosan has joined #openstack-dev17:17
*** ecarlin has quit IRC17:17
ayoungmorganfainberg, one thing I need to figure out is how to cache the tree.17:17
morganfainbergayoung, hm.17:19
*** IanGovett has joined #openstack-dev17:19
*** jruzicka has quit IRC17:19
morganfainbergayoung, the whole tree? or the search within the tree?17:19
ayoungmorganfainberg, for eventlet, caching won't be necesary, but it will provide a lock17:19
ayoungthe whole tree17:19
*** ifarkas has quit IRC17:19
*** vijendar has quit IRC17:20
*** evgenyf has joined #openstack-dev17:20
*** IanGovett1 has joined #openstack-dev17:20
*** sheeprine has joined #openstack-dev17:20
*** vijendar has joined #openstack-dev17:21
*** moted has joined #openstack-dev17:21
*** VINOD_ has left #openstack-dev17:21
morganfainbergayoung, in theory... you could use dogpile17:22
*** jtomasek has joined #openstack-dev17:22
*** xga has joined #openstack-dev17:22
*** srenatus has quit IRC17:22
morganfainbergayoung, i'll need to read a bit deeper into the whole review so i can speak more directly to the caching.17:22
*** nkinder has joined #openstack-dev17:23
*** iartarisi has quit IRC17:23
*** AlanClark has joined #openstack-dev17:23
ayoungmorganfainberg, yeah, Dogpile/Memcached is  the right way, I just need to get some smarts from you on how to implement17:23
*** IanGovett has quit IRC17:23
*** arnaud__1 has quit IRC17:24
*** arnaud___ has quit IRC17:24
morganfainbergayoung, i'll def get through reading the review today so i can discuss more directly :)17:24
ayoungI need to split the review somewhat, as a part of it is going to get merged up to the parent review.  I am currrently checking the revocations two different ways, to make sure that they both agree.17:24
Alexei_987sdague: Hi. Can I ask your opinion about this patch - https://review.openstack.org/#/c/65863/ ? How I can continue my work on this topic?17:25
*** artom has joined #openstack-dev17:25
morganfainbergayoung, ah. ok17:27
*** martyntaylor has quit IRC17:27
*** ruhe is now known as _ruhe17:28
*** flaper87 is now known as flaper87|afk17:28
*** rm_work|away is now known as rm_work17:28
morganfainbergdstanek, ooh python33 test for keystone17:29
morganfainbergthat should fail spectacularly for the first bits17:29
*** BobBall is now known as BobBallAway17:31
marunttx: Wait, so devstack in the gate isn't pulling the package from pypi (if only to mirror)?  That seems most unwise.17:33
marunttx: The gate is as much to ensure merge quality as to avoid breaking developers.17:33
*** alop has quit IRC17:33
*** sushil_ has quit IRC17:33
*** chandankumar has quit IRC17:34
*** yassine has quit IRC17:34
*** godara has joined #openstack-dev17:35
dstanekmorganfainberg: that's OK - it'll give me motivation to fix17:36
morganfainbergdstanek, ++17:36
*** SergeyLukjanov_ is now known as SergeyLukjanov17:36
*** sweston has joined #openstack-dev17:36
*** angdraug has joined #openstack-dev17:37
*** viktors has left #openstack-dev17:38
*** Alexei_987 has quit IRC17:38
*** rudrarugge has joined #openstack-dev17:38
clarkbmarun: the gate talks to pypi.openstack.org which is updated at least daily from pypi.python.org17:39
clarkbmarun: because pypi.python.org is down a lot17:40
*** xga_ has joined #openstack-dev17:40
*** alop has joined #openstack-dev17:40
*** rudrarugge has quit IRC17:40
*** Drankis has joined #openstack-dev17:40
*** jobewan has joined #openstack-dev17:41
*** michchap has joined #openstack-dev17:41
marunclarkb: I understand.  But the bug I'm talking about managed to pass the gate because the package for oslo.rootwrap was generated from git instead of being pulled from pypi (where it was broken).17:41
marunclarkb: https://bugs.launchpad.net/oslo/+bug/127358117:41
*** michchap has quit IRC17:41
*** xga has quit IRC17:41
marunclarkb: at least that's my understanding of the issue.17:41
clarkboh right, for openstack projects everything is installed from source17:41
marunclarkb: which is a hole17:42
*** michchap has joined #openstack-dev17:42
clarkbmarun: yes, but if you did it the other way you have a different hole17:42
marunclarkb: the gate can pass, and devstack can still be effectively broken17:42
marunclarkb: why so?17:42
clarkbmarun: because then when oslo pushes a new version the entire world breaks17:42
*** rudrarugge has joined #openstack-dev17:42
marunclarkb: *sigh*17:42
clarkbif you have incrementally tested every oslo change in theory that does not happen17:42
clarkbits all part of mutual gating in the integrated gate. changes to X are tested against changes to Y17:43
clarkbnot package release versions of X and Y17:43
*** jtomasek has quit IRC17:44
clarkbmarun: all that said, I would expect developer run devstack to install oslo in the same way17:45
*** csaba is now known as csaba|afk17:45
*** gokrokve has joined #openstack-dev17:45
*** athomas has quit IRC17:45
*** amuller has quit IRC17:45
marunclarkb: uh17:46
*** _cjones_ has joined #openstack-dev17:46
*** michchap has quit IRC17:46
*** tdruiva has joined #openstack-dev17:46
*** hartsocks has joined #openstack-dev17:46
clarkbmarun: https://git.openstack.org/cgit/openstack-dev/devstack/tree/lib/oslo17:47
*** sandywalsh has quit IRC17:47
*** gokrokve has quit IRC17:47
*** msmedved has joined #openstack-dev17:48
*** avishayb has quit IRC17:49
roaetdid anyone receive their promo code for the summit yet?17:50
*** cagrev has quit IRC17:51
*** nmagnezi has joined #openstack-dev17:51
*** Drankis has quit IRC17:51
roaeti think reed was the person I had to ping last time ^^17:53
*** eglynn has quit IRC17:54
reedroaet, they're coming17:54
* roaet hugs reed17:54
*** artom has quit IRC17:54
reedroaet, working on them now17:54
reedroaet, will tweet from @openstack and send an email to mailing list once I send them17:54
*** mikeoutland has joined #openstack-dev17:54
roaetthanks reed! sorry to bother you about it so often.17:55
*** tdruiva has quit IRC17:55
*** gokrokve has joined #openstack-dev17:56
*** gszasz has quit IRC17:56
*** MaxV has quit IRC17:56
*** otherwiseguy has quit IRC17:57
*** rohitk has quit IRC17:57
*** ecarlin has joined #openstack-dev17:57
*** ewindisch is now known as zz_ewindisch17:57
*** willingc has quit IRC17:57
*** tdruiva has joined #openstack-dev17:58
*** zz_ewindisch is now known as ewindisch17:58
*** mikeoutland has quit IRC17:58
*** amcrn has joined #openstack-dev17:58
dolphmbknudson: stevemar: fyi, i unwound the dependency chain up to the first change i -1'd in the sequence against bp identity-providers -- at least the first few had zero need for the underlying changes17:59
dolphmbknudson: stevemar: no need to cause unnecessary gating headaches -- merge in parallel!17:59
*** e0ne has joined #openstack-dev17:59
*** rods has quit IRC17:59
dolphmbknudson: also, that bp was marked as Implemented, and several of those changes didn't really need to be tracked against the bp, but i re-opened it for now18:00
*** rods has joined #openstack-dev18:00
*** gokrokve has quit IRC18:00
*** ecarlin has quit IRC18:01
*** willingc has joined #openstack-dev18:01
*** samuelbercovici has quit IRC18:02
*** tkammer has joined #openstack-dev18:02
*** sandywalsh has joined #openstack-dev18:03
*** mikeoutland has joined #openstack-dev18:04
*** ecarlin has joined #openstack-dev18:04
*** mjfork has joined #openstack-dev18:04
marunclarkb: sorry for the delay, how does one enable using oslo from source then?18:04
*** DinaBelova is now known as DinaBelova_18:05
*** Drankis has joined #openstack-dev18:05
clarkbmarun: I think it is enabled by default, or that is the intention at least. See lib/oslo18:06
marunclarkb: but since nova started specifying oslo.rootwrap from source, it's coming from pypi outside of the gate.18:06
marunclarkb: gah18:06
marunclarkb: from source -> in the requirements file18:06
*** tkay has joined #openstack-dev18:06
clarkbit may be an order of operations thing since pips dependency resolver is simple18:07
marunclarkb: I think that's probably the case.18:07
clarkbpossible that oslo source installs must happen before anything else18:07
*** srenatus has joined #openstack-dev18:07
*** nacim has quit IRC18:07
*** shri has joined #openstack-dev18:07
*** Gordonz has joined #openstack-dev18:07
*** I159 has quit IRC18:08
*** colinmcnamara has joined #openstack-dev18:09
*** sahid has quit IRC18:09
*** ifarkas has joined #openstack-dev18:11
*** xmltok has joined #openstack-dev18:11
*** mmagr has quit IRC18:14
*** xga_ has quit IRC18:14
*** martyntaylor has joined #openstack-dev18:15
*** praneshp has joined #openstack-dev18:15
*** mkerrin has quit IRC18:16
*** harlowja_away is now known as harlowja18:17
*** mat-lowery has joined #openstack-dev18:18
*** gokrokve has joined #openstack-dev18:18
*** gokrokve_ has joined #openstack-dev18:20
*** gokrokv__ has joined #openstack-dev18:22
*** vkozhukalov has joined #openstack-dev18:22
*** dhouck_ has quit IRC18:23
*** alexpilotti has joined #openstack-dev18:23
mat-loweryOpenStack newbie here. Question regarding oslo.config.cfg.ConfigOpts: I see set_override being called in unit tests and it seems that, in the face of parallel test execution, that is not a safe thing to do. What am I missing? I guess the general question is: How do I safely test code that is conditional on some conf option?18:23
*** gokrokve has quit IRC18:23
*** gokrokve_ has quit IRC18:24
*** colinmcnamara has quit IRC18:24
*** nati_ueno has joined #openstack-dev18:25
*** jp_at_hp has quit IRC18:25
*** gokrokv__ has quit IRC18:26
*** JordanP has quit IRC18:26
mat-loweryObviously, I can refactor such that the code under test doesn't directly access conf but is that the only way?18:27
*** willingc has quit IRC18:27
*** colinmcnamara has joined #openstack-dev18:27
*** lcheng_ has quit IRC18:28
clarkbmat-lowery: parllel test execution happens with multiple proceses, each with its own memory space18:28
clarkbyou should be able to override options in each test without affecting those in other processes18:29
mat-loweryclarkb: That clears it up. Thanks!18:29
*** jpich has quit IRC18:30
*** networkstatic has joined #openstack-dev18:31
*** DinaBelova_ is now known as DinaBelova18:33
*** alexpilotti has quit IRC18:33
*** Alexei_987 has joined #openstack-dev18:33
*** alexpilotti has joined #openstack-dev18:34
*** evgenyf has quit IRC18:35
*** zzelle_ has joined #openstack-dev18:36
*** alexpilotti has quit IRC18:37
*** martyntaylor has quit IRC18:38
*** dvarga is now known as dvarga|away18:38
*** dvarga|away is now known as dvarga18:38
shrikeystone experts…. could someone please answer a question I had about the values returned by keystone when a user is authenticated?18:40
*** edmund1 has joined #openstack-dev18:40
shrihttp://www.gossamer-threads.com/lists/openstack/dev/3538618:40
*** krotscheck has joined #openstack-dev18:40
*** rossella_s has quit IRC18:41
*** srenatus has quit IRC18:42
*** jmontemayor has joined #openstack-dev18:42
*** michchap has joined #openstack-dev18:42
shriFWIW, I have a devstack installation and that does not seem to return a "versionId" when I authenticate. It returns an "id". what gives?18:44
*** ewindisch is now known as zz_ewindisch18:46
*** rowleyaj has joined #openstack-dev18:46
*** Apsu is now known as SenorSnottyTits18:46
*** sushils has joined #openstack-dev18:46
*** xqueralt has quit IRC18:46
*** jcoufal-mobile has joined #openstack-dev18:47
*** michchap has quit IRC18:47
*** e0ne has quit IRC18:47
*** jmontemayor has quit IRC18:47
*** jmontemayor has joined #openstack-dev18:48
*** jmontemayor has quit IRC18:49
*** jmontemayor has joined #openstack-dev18:49
*** MaxV has joined #openstack-dev18:50
*** safchain has quit IRC18:50
*** ecarlin has quit IRC18:50
*** jmontemayor_ has joined #openstack-dev18:51
*** jmontemayor_ has quit IRC18:51
*** lubyou has quit IRC18:51
*** sdague has quit IRC18:51
*** galstrom_zzz has quit IRC18:52
samuelqueirozHi, is there any keystoner? I've a doubt about keystone groups18:52
*** kgriffs_afk is now known as kgriffs18:52
*** jmontemayor has quit IRC18:52
*** mrda_away has quit IRC18:52
*** jmeridth has quit IRC18:53
stevemarsamuelqueiroz, we're in #openstack-meeting for the next 6 minutes :)18:54
*** stevenco` has joined #openstack-dev18:54
*** alexpilotti has joined #openstack-dev18:54
stevemarsamuelqueiroz, we'll all be coming back to chat here in 518:54
*** stevencollins has quit IRC18:54
samuelqueirozstevemar, I'm sorry. I'm gonna wait for you all18:55
*** e0ne has joined #openstack-dev18:55
*** dkuffner has joined #openstack-dev18:55
*** alex_klimov has joined #openstack-dev18:56
*** sdague has joined #openstack-dev18:56
*** jmontemayor has joined #openstack-dev18:56
*** mikemar10 has quit IRC18:57
*** willingc has joined #openstack-dev18:57
*** galstrom has joined #openstack-dev18:57
*** lubyou has joined #openstack-dev18:57
*** mrda_away has joined #openstack-dev18:58
*** rowleyaj has quit IRC18:58
*** jckasper has joined #openstack-dev18:58
*** srenatus has joined #openstack-dev18:58
*** danpb has quit IRC18:59
*** jmontemayor has quit IRC18:59
*** rkukura has quit IRC18:59
*** rods has quit IRC18:59
*** rods1 has joined #openstack-dev19:00
*** dperaza has joined #openstack-dev19:00
*** jpomero_ has joined #openstack-dev19:00
*** jmontemayor has joined #openstack-dev19:00
*** byeager has quit IRC19:00
*** jistr has joined #openstack-dev19:00
*** doug_shelley66 has quit IRC19:00
*** byeager has joined #openstack-dev19:01
*** SenorSnottyTits is now known as Apsu19:01
*** marekd is now known as marekd|away19:01
morganfainbergayoung, and my argument was make inherit always there.19:01
morganfainbergayoung, and let the other projects do stuff w/ inherited roles19:01
*** shadower_ is now known as shadower19:01
*** adreznec has quit IRC19:01
*** doug_shelley66 has joined #openstack-dev19:01
ayoungWe can add it in for Juno19:01
*** cagrev has joined #openstack-dev19:01
dolphmshri: keystone doesn't support the versionId, versionStatus, etc extension19:01
ayoungEr, Icehouse19:01
jamielennoxgyee: before this kicks of have a look at my responses to auth_plugins: https://review.openstack.org/#/c/60751/19:01
topoldolphm, were you able to look at the code in https://review.openstack.org/#/c/69632/ as well as the commit message?  Am I on the right track?19:01
ayoungit was optional in Havana cuz it was new19:01
dolphmshri: and the fact that an "id" is returned is a bug19:02
jamielennoxgyee: i'm not convinced that get_token is better that do_authenticate but it will work so i don't care at the moment19:02
dolphmtopol: you didn't update the commit message19:02
morganfainbergayoung, it would solve the immidiate need for them, but i think dolphm's comment about multi-tenant tokens is the long-term right approach19:02
dolphmtopol: didn't get as far as code19:02
shri@dolphm: I see. But the keystone v2.0 documenation says that it will return a "versionId". no?19:02
ayoungmorganfainberg, oh no no no19:02
dolphmshri: which documentation?19:02
topoldolphm, K I will update the commit message19:02
ayoung multi-tenant tokens scare me.19:02
*** jckasper_ has joined #openstack-dev19:03
jamielennoxmorganfainberg: he also said v4 from memory19:03
morganfainbergayoung, we have other things to worry about before we get there anyway19:03
*** jpomero has quit IRC19:03
*** artom has joined #openstack-dev19:03
morganfainbergjamielennox, and i argue v4 would be a token version not a api version... juno topic though19:03
dolphmayoung: they scare everyone19:03
*** jcoufal-mobile has quit IRC19:03
*** mat-lowery has left #openstack-dev19:03
*** pschaef has quit IRC19:03
morganfainbergand i don't even want to have that convo before juno, dolphm, jamielennox, ayoung19:04
*** jckasper has quit IRC19:04
*** xgsa has quit IRC19:04
jamielennoxworks for me19:04
morganfainbergso, let me nail down the explicit use cases w/ nova.19:04
morganfainbergand lets see if OS-INHERIT would be sufficient for their needs or if multiple tokens is the only answer once we know the "Real" use cases19:05
morganfainbergand go from there.19:05
gyeejamielennox, sure I'll take a look later, I have an internal meeting I need to attend right now19:05
jamielennoxgyee: np19:05
*** byeager has quit IRC19:05
*** rcleere has quit IRC19:05
morganfainbergand if os-inherit isn't the right approach, we should make it clear domains are keystone only not to be leveraged really externally19:05
morganfainbergif that is our stance19:05
ayoungsamuelqueiroz, ask in here19:06
ayoungI'd be happy to help19:06
shri@dolphm: http://docs.openstack.org/api/openstack-identity-service/2.0/content/POST_authenticate_v2.0_tokens_.html#POST_authenticate_v2.0_tokens_-Response19:06
*** mrodden has quit IRC19:07
*** kgriffs is now known as kgriffs_afk19:07
samuelqueirozayoung, I'd like to confirm that keystone groups belong to domains and they can have roles in both a domain and a project19:08
*** csd has joined #openstack-dev19:08
*** ndipanov has quit IRC19:09
ayoungsamuelqueiroz, that is correct19:09
ayoungboth users and groups belong to a domain19:09
ayounga role can be assigned to either a user or a group19:10
ayoungor both19:10
*** nermina has joined #openstack-dev19:10
ayoungand that role can be a role in a project or a role in a domain.  samuelqueiroz make sense?19:10
samuelqueirozayoung, looking at the v3 api (projects section http://api.openstack.org/api-ref-identity.html), we have 'Lists roles for a project group.'19:10
samuelqueirozDoes it mean that we also have project level groups?19:10
samuelqueirozayoung, yes this makes sense19:11
ayoungsamuelqueiroz, no, it means list the roles that a given group has assigned to it for a given project19:11
ayoungthat should read19:12
ayoung"Lists roles for a group in a project. "19:12
*** mrodden has joined #openstack-dev19:12
*** nermina has quit IRC19:12
samuelqueirozayoung, Perfect! Everything is clear now :D19:13
*** adreznec has joined #openstack-dev19:13
samuelqueirozayoung, thank you for helping me out19:13
ayoungsamuelqueiroz, glad to help.  Always better to ask in here, as the other Keystone devs keep me honest.  Also, other people have the same questions as you do, and are just too shy to ask.19:13
*** alexpilotti has quit IRC19:13
*** rcleere has joined #openstack-dev19:13
*** thedodd has quit IRC19:14
*** rkukura has joined #openstack-dev19:14
samuelqueirozayoung, ok, I'll always be back here when I'm in trouble with keystone. thanks :DD19:15
*** alexpilotti has joined #openstack-dev19:16
*** jobewan has quit IRC19:16
ayoungDe nada19:17
shridolphm: my previous message probably got lost among other conversations here. This is the doc that shows the "versionId": http://docs.openstack.org/api/openstack-identity-service/2.0/content/POST_authenticate_v2.0_tokens_.html#POST_authenticate_v2.0_tokens_-Response19:17
*** max_lobur is now known as max_lobur_afk19:17
*** jprovazn has joined #openstack-dev19:18
morganfainbergdolphm, ayoung, henrynash, https://wiki.openstack.org/wiki/HierarchicalMultitenancy#Hierarchical_Multitenancy here is the outline of what is being requested19:18
morganfainbergjamielennox, ^19:18
*** armax has joined #openstack-dev19:18
*** dolphm is now known as dolphm_afk19:18
ayoungmorganfainberg, you weren't here back when I suggested that we make tenants nestable19:19
*** willingc has quit IRC19:19
morganfainbergayoung, nope i wasn't19:19
*** willingc has joined #openstack-dev19:19
morganfainbergactually that is what nova _really_ wants19:19
ayoungThis is Juno stuff19:19
ayoungOr Kilo19:20
ayoungMaybe Quebec19:20
morganfainbergayoung, xray?19:20
ayoungZulu19:20
morganfainberglol19:20
*** gokrokve has joined #openstack-dev19:20
ayoungmorganfainberg, with two Alpha num based releases a year, Openstack is only going to be around for 13 years anyway19:21
*** henrynash has quit IRC19:21
*** alexpilotti has quit IRC19:21
topolayoung, like companies in the yellow pages we can double then triple the first letter:   AA Car Repair becomes AAlberta???19:22
ayoungtopol, doesn't sort19:23
ayoungWe'll have to go Unicode19:23
*** gokrokve has quit IRC19:24
morganfainbergayoung, i think we should revisit the nesting option then in juno19:26
ayoungmorganfainberg, yes and no.  I think what they need is groups19:27
ayoungbut Keystone doesn't specify ownership19:27
morganfainbergayoung, they are looking for a way of conveying ownership19:28
ayoungIf Nova wanted to implement an ownership model that allowed for multi owner ship, they could do so today19:28
morganfainbergayoung, sure, but i think the complaint is that ownership shouldn't be a nova-specific thing19:28
ayoungmorganfainberg, owning_project vs VM-is-visible-to-project abstraction would work, too19:28
morganfainbergayoung, it should be ownership of all things withing project19:28
morganfainbergacross nova, cinder, glance, etc19:29
ayoungpoint is, hierarchical ios nice, but expensive19:29
*** alexpilotti has joined #openstack-dev19:29
*** sandywalsh has quit IRC19:29
morganfainbergif we do heirchy, i'd ask for a config to limit the depth so we can help limit the cost19:29
morganfainbergdefault 119:29
ayoungpremature optimization...19:29
morganfainbergnah.19:29
morganfainbergor at least make it an option19:30
morganfainbergtrust me19:30
*** neelashah has quit IRC19:30
ayoungproblem is not just depth, it is also how you specify a project uniquely.19:30
*** jobewan has joined #openstack-dev19:30
*** neelashah has joined #openstack-dev19:30
morganfainbergayoung, it's worth discussing i think in juno19:30
ayoungmorganfainberg, I can't trust you.  You are out of arm's reach19:31
morganfainbergit def. wont hit Icehouse even as an extension19:31
ayoung++19:31
*** romcheg has left #openstack-dev19:31
*** mikemar10 has joined #openstack-dev19:32
*** djoreilly has quit IRC19:32
*** mikemar10 has quit IRC19:32
*** ndipanov has joined #openstack-dev19:32
*** jruzicka has joined #openstack-dev19:32
*** henrynash has joined #openstack-dev19:33
*** willingc has quit IRC19:34
*** _ruhe is now known as ruhe19:34
*** willingc has joined #openstack-dev19:34
*** redhat has quit IRC19:35
*** rwsu has quit IRC19:36
*** erecio has quit IRC19:37
*** alexpilotti has quit IRC19:37
*** colinmcnamara has quit IRC19:37
*** jokke__ is now known as jokke_19:39
*** willingc has quit IRC19:39
*** willingc has joined #openstack-dev19:40
*** rwsu has joined #openstack-dev19:40
*** alexpilotti has joined #openstack-dev19:40
*** sandywalsh has joined #openstack-dev19:41
*** jpomero_ has quit IRC19:41
*** jokke_ has quit IRC19:41
*** david-lyle has quit IRC19:42
*** jpomero has joined #openstack-dev19:42
*** jobewan has quit IRC19:42
*** beagles is now known as beagles_brb19:42
*** michchap has joined #openstack-dev19:43
*** zaneb has quit IRC19:43
*** michchap has quit IRC19:43
*** lcheng has joined #openstack-dev19:43
*** michchap has joined #openstack-dev19:43
*** jokke_ has joined #openstack-dev19:43
*** novas0x2a|laptop has joined #openstack-dev19:44
*** jpomero has quit IRC19:44
*** zaneb has joined #openstack-dev19:44
*** jckasper_ has quit IRC19:45
*** jpomero has joined #openstack-dev19:45
*** alexpilotti has quit IRC19:45
*** jckasper_ has joined #openstack-dev19:45
*** dvarga is now known as dvarga|away19:46
*** dvarga|away is now known as dvarga19:46
*** cagrev_ has joined #openstack-dev19:46
*** cagrev has quit IRC19:47
*** denis_makogon has joined #openstack-dev19:47
*** rods1 has quit IRC19:47
ayoungjaypipes, how many token revocation events should we expect to see?  Assuming they come from "remove role from user"  "change password" and all of the disable events (user, project, domain)19:48
ayoungany way we could get numbers?19:48
*** redhat has joined #openstack-dev19:48
*** rods has joined #openstack-dev19:48
*** michchap has quit IRC19:49
*** AlexF_ has quit IRC19:50
*** sandywalsh has quit IRC19:50
*** caleb_ has joined #openstack-dev19:51
*** dvarga has quit IRC19:53
*** lcheng has quit IRC19:54
*** dave_tucker is now known as dave_tucker_zzz19:56
*** dave_tucker_zzz is now known as dave_tucker19:58
*** jobewan has joined #openstack-dev19:58
*** irenab has joined #openstack-dev20:00
*** jpomero has quit IRC20:01
*** rods1 has joined #openstack-dev20:01
*** rods has quit IRC20:01
*** byeager has joined #openstack-dev20:01
*** jcoufal has quit IRC20:01
*** melwitt has joined #openstack-dev20:01
*** Sukhdev has joined #openstack-dev20:02
*** zzelle_ has quit IRC20:03
*** jistr has quit IRC20:03
*** zzelle_ has joined #openstack-dev20:03
*** vkozhukalov has quit IRC20:03
*** lucasagomes has quit IRC20:04
*** rfolco has quit IRC20:05
*** mikemar10 has joined #openstack-dev20:05
*** tanisdl has quit IRC20:05
*** mikemar10 has joined #openstack-dev20:06
*** mikemar10 has joined #openstack-dev20:06
*** nacim has joined #openstack-dev20:07
*** aditirav has quit IRC20:07
*** mikemar10 has left #openstack-dev20:07
*** tanisdl has joined #openstack-dev20:07
*** byeager has quit IRC20:08
*** rcleere has quit IRC20:09
*** sandywalsh has joined #openstack-dev20:09
*** xga has joined #openstack-dev20:10
*** nmagnezi has quit IRC20:11
*** yolanda_ has quit IRC20:11
*** ArxCruz has quit IRC20:12
*** mrodden1 has joined #openstack-dev20:12
*** alex_klimov has quit IRC20:13
*** mrodden has quit IRC20:13
*** xga has quit IRC20:15
*** Drankis has quit IRC20:16
*** kenperkins_ has joined #openstack-dev20:17
*** tongli has joined #openstack-dev20:17
*** byeager has joined #openstack-dev20:18
*** nermina has joined #openstack-dev20:18
*** sahid has joined #openstack-dev20:19
*** tzabal has quit IRC20:20
*** gokrokve has joined #openstack-dev20:20
*** kenperkins has quit IRC20:21
*** mfer has quit IRC20:23
*** mikeoutland has quit IRC20:23
*** bashok has joined #openstack-dev20:23
*** nacim has quit IRC20:23
*** bashok has quit IRC20:23
*** sweston has quit IRC20:24
*** beagles_brb is now known as beagles20:25
*** gokrokve has quit IRC20:25
*** nkinder has quit IRC20:26
*** sahid has quit IRC20:27
*** schwicht has joined #openstack-dev20:27
jaypipesayoung: great question... I have no idea man :(20:28
*** mrodden1 is now known as mrodden20:29
ayoungjaypipes, I need Data!  Can't make an omlet without eggs20:29
ayoungjaypipes, gonna have to ask operators list...20:29
*** csd has quit IRC20:30
bknudsondhellmann: is the new patch set on https://review.openstack.org/#/c/67664/ what you were asking for?20:30
dhellmannbknudson: looking20:30
*** sweston has joined #openstack-dev20:30
bknudsondhellmann: I switch to mock20:31
dhellmannbknudson: yes, that looks good20:31
jaypipesayoung: yeah, ops list is a good idea.20:31
*** e0ne has quit IRC20:34
*** fghaas has left #openstack-dev20:35
*** artom has left #openstack-dev20:36
*** NikitaKonovalov_ is now known as NikitaKonovalov20:37
*** safchain has joined #openstack-dev20:37
*** gokrokve has joined #openstack-dev20:38
*** akrivoka has quit IRC20:38
*** thuc has quit IRC20:40
*** dvarga has joined #openstack-dev20:41
*** thuc has joined #openstack-dev20:41
*** gokrokve has quit IRC20:43
*** michchap has joined #openstack-dev20:43
*** michchap has quit IRC20:44
*** nermina has left #openstack-dev20:44
*** michchap has joined #openstack-dev20:44
*** johnthetubaguy has quit IRC20:44
*** vkmc has joined #openstack-dev20:45
*** thuc has quit IRC20:45
*** DinaBelova is now known as DinaBelova_20:47
*** michchap has quit IRC20:48
*** ndipanov has quit IRC20:49
*** ruhe is now known as _ruhe20:54
*** markmc has quit IRC20:54
*** huats_ is now known as huats20:55
*** e0ne has joined #openstack-dev20:55
*** tkammer has quit IRC20:57
*** asalkeld has quit IRC20:57
*** asalkeld has joined #openstack-dev20:58
*** pixelb has quit IRC20:58
*** gyee has quit IRC20:58
*** sweston has quit IRC20:58
*** redhat has quit IRC20:59
*** sweston has joined #openstack-dev21:00
*** _ruhe is now known as ruhe21:00
*** jamespage_ has joined #openstack-dev21:01
*** markwash has quit IRC21:02
*** florentflament has joined #openstack-dev21:02
*** devoid has quit IRC21:04
*** devoid has joined #openstack-dev21:05
*** safchain has quit IRC21:05
*** godara has quit IRC21:05
*** shri has quit IRC21:05
*** godara has joined #openstack-dev21:06
*** srenatus has quit IRC21:09
*** JuanManuelOlle1 has quit IRC21:10
*** csd has joined #openstack-dev21:10
*** MaxV has quit IRC21:11
*** yassine has joined #openstack-dev21:12
*** devoid has quit IRC21:12
*** devoid has joined #openstack-dev21:12
*** nermina has joined #openstack-dev21:13
*** willingc has quit IRC21:14
*** MaxV has joined #openstack-dev21:14
*** kgriffs_afk is now known as kgriffs21:15
*** nplanel_ has joined #openstack-dev21:15
*** nplanel_ has quit IRC21:15
*** NewInformator has joined #openstack-dev21:16
*** NewInformator has left #openstack-dev21:16
ayoungtopol, I assume you saw the Logging standards thread on the list.  It would tie in with your audit efforts.21:16
*** rkukura has quit IRC21:16
*** noslzzp has quit IRC21:16
*** willingc has joined #openstack-dev21:16
topolayoung, didnt read that closely. I thought that was just a trouble shooting level that was antiquated in the projects?21:18
ayoungtopol, yeah, me either, but there is def references to Audit21:18
topolayoung you think I should hijack it for my own purposes?21:18
*** AlexF_ has joined #openstack-dev21:18
ayoungyou might want to go back and spelunk that particular cavern21:18
topolayoung,  Let me get the basic functionality coded (Dont want to come in anywhere near Feb 18.  dolphm left me for dead at the mexican restaurant :-) ) so he means business with his deadlines :-)21:19
*** e0ne has quit IRC21:20
ayoungtopol, you might want to stop blaming dolphm_afk for your own shortcomings.21:20
*** jasdeepH has joined #openstack-dev21:20
ayoungtopol, I think you should be awaare of what is going on there.  Audit and logging are like peas and carrots21:20
topol(sorry dolphm, I know that's not entirely true)21:20
*** ArxCruz has joined #openstack-dev21:21
topolayoung agreed.21:21
*** willingc has quit IRC21:21
*** mikeoutland has joined #openstack-dev21:22
*** devoid has quit IRC21:23
*** AlexF_ has quit IRC21:23
*** EugeneFrolov has quit IRC21:23
*** devoid has joined #openstack-dev21:24
*** NikitaKonovalov is now known as NikitaKonovalov_21:24
*** dprince has quit IRC21:25
topolayoung, I just sent a note requesting to participate21:25
*** vartom1111111117 has joined #openstack-dev21:26
topoland fyi its 4:25 and still no snow. Kids who are off from cancelled  school are in the house driving me nuts cause there is no snow to play in21:26
jaypipessdague: lol, so true... "INFO messages shouldn't need a secret decoder ring"21:27
*** AlanClark has quit IRC21:28
*** shri has joined #openstack-dev21:28
*** dolphm_afk is now known as dolphm21:28
*** rcleere has joined #openstack-dev21:28
*** sweston has quit IRC21:31
*** jruzicka has quit IRC21:33
*** dbalog has left #openstack-dev21:34
*** coolsvap has quit IRC21:35
*** willingc has joined #openstack-dev21:37
dolphmIanGovett1: https://blueprints.launchpad.net/nova/+spec/cross-service-request-id21:37
sdagueIanGovett1: yeh, I was going to point you at that as well21:38
sdaguealso within something like nova a request id is shuffled around21:38
*** eharney has quit IRC21:42
*** tongli has quit IRC21:44
*** michchap has joined #openstack-dev21:44
*** michchap has quit IRC21:44
*** michchap has joined #openstack-dev21:45
jgriffithvishy: can you keep me looped in on the hierarchical multi-tenant stuff21:45
jgriffithvishy: there's work in progress in cinder for ACL's21:45
jgriffithvishy: I'd rather tackle this as a broader effort as described in your email21:46
*** READ10 has quit IRC21:47
*** AlanClark has joined #openstack-dev21:47
*** jamespage_ has quit IRC21:48
*** michchap has quit IRC21:49
*** shakayumi has joined #openstack-dev21:49
*** dperaza has quit IRC21:50
*** vijendar1 has joined #openstack-dev21:51
*** vijendar1 has quit IRC21:51
*** vijendar1 has joined #openstack-dev21:52
*** ifarkas has quit IRC21:52
*** jprovazn has quit IRC21:52
*** vijendar has quit IRC21:52
*** hartsocks has quit IRC21:53
IanGovett1thanks for the pointers to cross-service-request-id21:53
*** rm_work has left #openstack-dev21:54
*** rollerj has joined #openstack-dev21:56
*** adreznec has quit IRC21:56
*** packet has joined #openstack-dev21:57
*** dvarga has quit IRC21:57
*** rcleere has quit IRC21:58
*** kushal has quit IRC21:59
*** zz_ewindisch is now known as ewindisch21:59
*** nermina has quit IRC21:59
*** SergeyLukjanov is now known as SergeyLukjanov_21:59
*** Sukhdev has quit IRC22:01
*** nermina has joined #openstack-dev22:02
*** IanGovett1 has quit IRC22:03
*** doug_shelley66 has quit IRC22:03
*** zzelle has quit IRC22:04
*** irenab has quit IRC22:07
*** wasmum has joined #openstack-dev22:07
*** AlanClark has quit IRC22:08
*** adreznec has joined #openstack-dev22:09
*** harlowja is now known as harlowja_away22:10
*** sarob has joined #openstack-dev22:11
*** eharney has joined #openstack-dev22:12
*** kolesovdv has joined #openstack-dev22:12
*** peristeri has quit IRC22:13
*** AlanClark has joined #openstack-dev22:13
*** amotoki has quit IRC22:14
*** gyee has joined #openstack-dev22:14
*** rkukura has joined #openstack-dev22:15
*** roeroe has joined #openstack-dev22:17
*** harlowja_away is now known as harlowja22:18
dstanekayoung: yo22:19
ayoungdstanek, Oy22:19
*** jcoufal has joined #openstack-dev22:19
*** thuc has joined #openstack-dev22:19
dstanekayoung: i just sent you an email about the apache discussion from this morning - take a look when you have a sec and let me know if i'm solving the right problem22:19
*** thuc has quit IRC22:20
*** achampion has quit IRC22:20
*** thuc has joined #openstack-dev22:20
*** kgriffs is now known as kgriffs_afk22:21
*** SumitNaiksatam_ has joined #openstack-dev22:22
*** SumitNaiksatam has quit IRC22:22
*** SumitNaiksatam_ is now known as SumitNaiksatam22:22
ayoungdstanek, what is the wsgi app looking for?22:23
ayoungPATH-INFO?22:23
dstanekayoung: i'm pretty sure the routes lib uses PATH_INFO22:23
*** belmoreira has joined #openstack-dev22:23
dstanekayoung: that would be a good thing to check though22:24
ayoungShould be OK22:24
*** shri has left #openstack-dev22:24
marekd|awaydstanek: i am also pretty sure it's  PATH_INFO22:25
dstanekmarekd|away: hi22:25
*** marekd|away is now known as marekd22:25
*** dkuffner has quit IRC22:25
marekddstanek: hey22:25
dstanekayoung: marekd: yes, looks like it - https://github.com/bbangert/routes/blob/master/routes/middleware.py#L12222:26
dstanekmarekd: did you see that email?22:26
marekdoh, not yet.22:26
marekdreading.22:26
*** jcoufal has quit IRC22:28
*** nermina has quit IRC22:29
*** AlexF_ has joined #openstack-dev22:29
*** godara has quit IRC22:29
bknudsonkeystone assignment controller has "get_project_users(self, context, tenant_id, **kw):" which returns user refs... it gets user ref from identity_api22:30
bknudsonwhat to do if the user_id doesn't exist?22:30
bknudsonjust ignore the user?22:30
bknudsonor build a "fake" user and return that?22:31
*** e0ne has joined #openstack-dev22:31
ayoungbknudson, yep, ignore it22:31
*** godara has joined #openstack-dev22:31
ayoungwhy do you need a user...ah for the groups22:31
bknudsonayoung: it's returning the users that have a role on the project22:32
marekddstanek: this is basically what i need, but hm...i cannot really understand how does your solution work...22:32
bknudsonso you'll get back an array of user objects ... this is v2 controller.22:32
*** jdob has quit IRC22:33
*** AlexF_ has quit IRC22:33
bknudsonayoung: I could have it generate a fake user like { 'id': user_id, 'name': 'Federated user %s', 'enabled': True } ??22:34
*** wasmum has quit IRC22:34
*** nermina has joined #openstack-dev22:34
*** e0ne has quit IRC22:36
*** jckasper_ has quit IRC22:36
*** mriedem has quit IRC22:36
*** doug_shelley66 has joined #openstack-dev22:36
*** dkranz has quit IRC22:36
dstanekmarekd: to be honest i'm not entirely sure how the magic works; i just remember that's how i did fastcgi stuff back in the day22:36
bknudsonmarekd: so we're not going to use POST /v3/auth/tokens to get a token? There's another way to get a token?22:38
*** ykhodork has joined #openstack-dev22:38
*** CaptTofu has quit IRC22:41
*** CaptTofu has joined #openstack-dev22:41
gyeeayoung, for https://review.openstack.org/#/c/40036/, you want to see the ec2 changes in the same patch or different patch22:42
marekddstanek: bknudson if we are going to use apache to do the federation work for us we cannot use /v3/auth/tokens.22:42
bknudsonmarekd: why not?22:43
*** joesavak has quit IRC22:43
*** buzztroll has quit IRC22:43
marekdbknudson: erm, just a clarification: /v3/auth/tokens is also used for other authn methods (password etc), right?22:43
bknudsonmarekd: yes, you POST /v3/auth/tokens to get a token using password or other methods.22:44
bknudsonfor example, REMOTE_USER22:44
*** epim has joined #openstack-dev22:44
*** epim has quit IRC22:44
marekdbknudson: ok, i was not sure whether it's that URL....22:44
*** nermina has quit IRC22:44
gyeebknudson, you have a patch to move the ec2 and s3 middleware to keystoneclient right?22:45
*** pixelb has joined #openstack-dev22:45
*** michchap has joined #openstack-dev22:45
bknudsongyee: https://review.openstack.org/#/c/52702/22:45
*** jnoller_ has quit IRC22:45
bknudsons3_token, not ec222:45
*** michchap has quit IRC22:45
marekdbknudson: ok, so we are going to use apache and it's modules for SAML related work. Some people here, including myself claim that it's better, at least for now to use established code rather than implement Service Provider for SAML in Keystone.22:45
gyeebknudson, got it22:45
*** michchap has joined #openstack-dev22:46
gyeebknudson, why not ec2?22:46
*** CaptTofu has quit IRC22:46
bknudsongyee: s3_token was causing a problem... I haven't heard any complaints about ec2.22:46
marekdbknudson: so, apache as a frontend. Now, as per mod_shib configuration, you must configure and set certain URL as a protected - this means nobody without a valid session can access that 'resource'. You get a session when you authn yourself agains an IdP.22:46
marekdbknudson: so if we wanted to use /v3/auth/tokens this URL would always require valid federated session.22:47
bknudsonmarekd: you can use apache as a frontend for /v3/auth/tokens to set REMOTE_USER and do external authentication (supposedly)22:47
ayounggyee, I think it should be in that patch, but separate would be OK.  We need to avoid adding new, broken HMAC impls, and without the EC2 S3 fixes I can't see a reason to put this patch in22:48
bknudsonmarekd: you can't configure httpd or whatever the plugin is to be optional?22:48
marekdbknudson: optional...what?22:48
gyeeayoung, I can update ec2 to use the v3 generic signatuer auth plugin, that'll effective deprecate the v2 ec2token API22:48
ayounggyee, and that would be enough22:48
bknudsonmarekd: optionally require SAML auth... if the saml stuff is there then do that and if saml isn't there then pass it on to keystone.22:48
gyeeayoung, I am on it22:49
ayoungI want to make sure that this patch supports ec2 and s322:49
ayoungcan you do both?22:49
gyeeayoung, sure, I love coding! :)22:49
marekdbknudson: ahh, i don't think so cause this would require apache to understand the request body...22:49
marekdand in mod_shib you only configure: "this url is protected, client must authenticate himself via saml"22:49
ayoung++22:50
gyeeayoung, can you review and approve bknudson's patch https://review.openstack.org/#/c/52702/22:50
gyeeless moving part to deal with22:50
*** yamahata has joined #openstack-dev22:50
*** michchap has quit IRC22:50
bknudsonsomething I posted on oct 18 might finally get looked at?22:51
gyeethe s3 changes will be a separate patch as it will be in keystoneclient22:51
marekdin order to choose the authn method we would need to implement SAML/SP in the Keystone...so it can parse that JSON, check the methods and all that standard stuff..22:51
gyeebknudson, that's how we usually roll :)22:51
marekdbknudson: this is proposition by kent people.22:52
*** ndipanov has joined #openstack-dev22:52
bknudsonmarekd: http://httpd.apache.org/docs/2.2/howto/auth.html -- "The Satisfy directive can be used to specify that several criteria may be considered when trying to decide if a particular user will be granted admission."22:53
*** rtheis has quit IRC22:54
*** thuc has quit IRC22:55
*** prad has quit IRC22:55
*** thuc has joined #openstack-dev22:56
marekdbknudson: ok, i didn't know that. but in a standard WebSSO, a client is doing just a normal HTTP GET / and  suppose that resource is 'SAML protected'. If the apache doesn't find a vvalid session in a cookie it will redirect that client to the IdP. Client doesn't need to initiate anything.22:56
*** MaxV has quit IRC22:56
bknudsonmarekd: I don't have a problem with using a new resource for getting a token for this22:57
marekdresoure - url?22:57
marekdresource*22:57
jamielennoxgyee, bknudson: i may as well just approve that s3 patch right? there's nothing that we are going to do to improve it or anything22:57
bknudsonmarekd: yes, a resource is identified by uri22:57
bknudsonjamielennox: I haven't heard any complaints.22:58
stevemarbknudson, marekd i think we can go with a new url/resource for now, if we find a workarond, even better22:58
ayoungbknudson, gyee approved.  I'm headed home.  Back online in a couple...22:58
marekdbknudson: no, it's totally cool you are trying to dig it and find a perfect solution. I don't say I know everything about saml, apache, and mod_shib.22:58
jamielennoxbknudson: well it's still using httplib and such but it's right to get it out of keysotne22:58
bknudsonjamielennox: yes, you mentioned that I need to reopen a bug.22:58
jamielennoxoh, right ayoung just beat me to it22:59
marekdbknudson: i would not even call it resource - rather another way to enter keystone, this time via the uri that is somehow protected by mod_shib and need some extra authn.22:59
*** jayg is now known as jayg|g0n322:59
*** thuc has quit IRC23:00
*** godara has quit IRC23:00
termieayoung, morganfainberg: hey guys, these two sections would seem to be conflicting: https://github.com/openstack/keystone/commit/8fcc18c42bde2db34e4b29236dc2e971d40f146b#diff-b72345d1924474747d780689dab2df7cR321 and https://github.com/openstack/keystone/blob/master/keystone/contrib/ec2/controllers.py#L14023:01
*** melwitt1 has joined #openstack-dev23:01
termieayoung, morganfainberg: the create credential always adds a trust id, the check credential always fails if there is a trust id23:01
*** rollerj has quit IRC23:01
termiei'll just toss out there, as an aside, that this trust idea is _still_ terrible23:02
ayoungtermie, I'll take a look when I get home....east coast time.23:02
*** vartom1111111117 has quit IRC23:02
*** ndipanov has quit IRC23:03
*** melwitt has quit IRC23:03
marekddstanek: in your apache config is test2 is a file, right?23:03
*** openstack has joined #openstack-dev23:04
dstanekmarekd: yes23:04
*** obondarev has quit IRC23:04
*** willingc has quit IRC23:04
*** jecarey has quit IRC23:04
*** colinmcnamara has joined #openstack-dev23:04
*** obondarev has joined #openstack-dev23:05
*** godara has joined #openstack-dev23:05
ihrachysI've implemented a patch that depends on another review from another person that is in progress. To make sure my patch works, I've cherry-picked the review from gerrit, but now I'd like to send my own patch, and it seems that git-review is going to send both patches - mine and the one melded from gerrit. How can I upload my patch only, with the other patch marked as a dependency?23:06
*** ayoung has quit IRC23:07
clarkbihrachys: git review gives you that warning. It will only update changes wheer the sha has changed23:07
clarkbihrachys: if the dependencies sha1 has not changed it will not be updated in gerrit23:07
*** willingc has joined #openstack-dev23:07
*** nermina has joined #openstack-dev23:07
*** wasmum has joined #openstack-dev23:08
marekddstanek: because it works for your example script, but when i try to put a normal keystone wsgi script it doesn't really help.23:08
marekddstanek: with this line:  WSGIScriptAliasMatch ^(/v3/tokens/OS-FEDERATION/identity_provider/.*?/protocol/.*?)$ /var/www/keystone/main/$23:08
marekddstanek: and main is a softlink pointing to keystone/httpd/keystone.py23:09
marekddstanek: i am looking at the keystone.common.environment23:09
*** adreznec has quit IRC23:09
*** colinmcnamara has quit IRC23:10
ihrachysclarkb: ok, let's try then... :) great, it has really uploaded only mine patch, though I don't see the patch I've melded from gerrit in dependency list. So I guess Jenkins will fail on it.23:10
*** ruhe is now known as _ruhe23:10
*** mrda_away is now known as mrda23:11
*** Gordonz has quit IRC23:12
*** aeperezt has quit IRC23:12
ihrachys[that said, it would be great if oslo.messaging core devs check the patch I depend on - this is a simple UnboundLocalError bugfix in RabbitMQ implementation: https://review.openstack.org/#/c/68888/]23:13
*** buzztroll has joined #openstack-dev23:14
sdaguejaypipes: that blueprint project looks kind of awesome23:15
*** buzztroll has quit IRC23:15
*** FunnyLookinHat has quit IRC23:16
*** buzztroll has joined #openstack-dev23:16
ihrachysanother question: let's say there is a blueprint, and the feature it requests is already present in the project. The blueprint is assigned to the creator who is not responding to messages. How can I close the blueprint?23:18
clarkbsdague: my udnerstanding is it doesn't work very well :/23:18
sdagueclarkb: interesting23:18
clarkbsdague: it basically overdoes it and interfers with distro level stuff23:18
sdagueclarkb: you should get on the thread then :)23:19
clarkbit is a hard problem23:19
sdagueagreed23:19
*** bauzas has quit IRC23:19
clarkbI would just sound cranky :)23:19
sdagueheh23:19
sdaguewell, it might be useful anyway, because if it's that hard of a problem, probably better to join forces in it than go it alone23:19
clarkbya23:20
*** buzztroll has quit IRC23:21
*** wasmum has quit IRC23:22
*** tdruiva has quit IRC23:22
*** alexpilotti has joined #openstack-dev23:23
jamielennoxis there a standard way to drop the database or manage reseting migrations for live db tests?23:23
jamielennoxkeystone does a migrate(0)23:23
*** dims has quit IRC23:24
*** jobewan has quit IRC23:25
*** noslzzp has joined #openstack-dev23:27
*** mat-lowery has joined #openstack-dev23:27
*** thuc has joined #openstack-dev23:30
*** thuc has quit IRC23:30
*** caleb_ has quit IRC23:30
*** ijw has joined #openstack-dev23:31
*** shakayumi has quit IRC23:31
*** thuc has joined #openstack-dev23:31
*** kevinconway has quit IRC23:32
*** thuc has quit IRC23:32
*** thuc has joined #openstack-dev23:32
*** denis_makogon has quit IRC23:32
*** melwitt1 is now known as melwitt23:32
*** nkinder has joined #openstack-dev23:33
*** wasmum has joined #openstack-dev23:33
*** tdruiva has joined #openstack-dev23:33
*** michchap has joined #openstack-dev23:33
*** browne has quit IRC23:34
*** willingc has quit IRC23:36
*** giulivo has quit IRC23:36
*** byeager has quit IRC23:36
*** byeager has joined #openstack-dev23:36
marekddstanek: OK, your solution worked eventually :-)23:36
marekddstanek: with keystone too :-)23:37
marekddstanek: many thanks!23:37
*** devoid has quit IRC23:37
*** dims has joined #openstack-dev23:39
*** stevemar has quit IRC23:40
*** byeager has quit IRC23:41
*** Gordonz has joined #openstack-dev23:43
*** radez is now known as radez_g0n323:43
*** marekd is now known as marekd|away23:43
*** achampion has joined #openstack-dev23:44
*** willingc has joined #openstack-dev23:45
JoeHazzersdhellmann: i added another comment ;)23:47
*** sarob has quit IRC23:48
dhellmannJoeHazzers: ?23:48
*** sarob has joined #openstack-dev23:49
JoeHazzersdhellmann: the auth method can be an arbitrary string defined or added by a plugin (re login_method on oslo messaging)23:49
*** buzztroll has joined #openstack-dev23:49
dhellmannJoeHazzers: so there's no list provided by rabbit, the valid values can be changed based on how the system is configured?23:49
dhellmannJoeHazzers: I was worried this might be something the user wouldn't know how to figure out the right value for23:50
JoeHazzersdhellmann: By default it will always be AMQPLAIN on rabbitmq, but it's not only server specific (see: any AMQP server), but rabbitmq plugins can also define their own authentication methods23:50
JoeHazzersso you could have company-proprietary-login as an auth method23:51
JoeHazzersand not being able to define this really stung me when trying to use SSL certificate auth23:51
*** mat-lowery has left #openstack-dev23:52
JoeHazzershowever, i do believe you can get the list from the server at runtime, but not config time.23:52
dhellmannJoeHazzers: ok, let's flag it as DocImpact then and keep going23:53
*** byeager has joined #openstack-dev23:53
dhellmannI'm not sure runtime does much for us23:53
*** IanGovett has joined #openstack-dev23:53
*** sarob has quit IRC23:53
JoeHazzersdhellmann: okay, thanks. I wasn't aware of such commit notes!23:54
dhellmannJoeHazzers: no problem, thanks for the patch and patience23:54
dhellmann:-)23:54
*** kenperkins_ has quit IRC23:55
*** dperaza has joined #openstack-dev23:56
*** mlavalle has quit IRC23:57
*** tdruiva has quit IRC23:59
*** novas0x2a|laptop has quit IRC23:59

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!