| *** sarob has quit IRC | 00:00 | |
| *** bhuvan has joined #openstack-dev | 00:00 | |
| clarkb | zzelle_: sounds good | 00:01 |
|---|---|---|
| *** exed_ has joined #openstack-dev | 00:01 | |
| *** kragniz has quit IRC | 00:02 | |
| zzelle_ | clarkb, IMHO, it will give a "correct" support for http(s) | 00:02 |
| *** kamalic has quit IRC | 00:02 | |
| *** AlanClark has quit IRC | 00:02 | |
| *** kragniz has joined #openstack-dev | 00:03 | |
| *** arnaud___ has quit IRC | 00:04 | |
| *** arnaud__ has quit IRC | 00:04 | |
| *** doug-fish has quit IRC | 00:04 | |
| *** promulo has joined #openstack-dev | 00:06 | |
| *** exed_ has quit IRC | 00:07 | |
| *** flaper87 is now known as flaper87|afk | 00:07 | |
| *** sarob_ has quit IRC | 00:08 | |
| *** gnorth has quit IRC | 00:08 | |
| *** jasdeepH has quit IRC | 00:11 | |
| *** alagalah has quit IRC | 00:11 | |
| *** alagalah has joined #openstack-dev | 00:11 | |
| *** pmathews has quit IRC | 00:13 | |
| *** mkollaro has joined #openstack-dev | 00:14 | |
| *** e0ne has joined #openstack-dev | 00:14 | |
| *** praneshp has quit IRC | 00:15 | |
| *** praneshp has joined #openstack-dev | 00:17 | |
| *** bhuvan has quit IRC | 00:17 | |
| *** bhuvan has joined #openstack-dev | 00:18 | |
| *** e0ne has quit IRC | 00:19 | |
| *** david-lyle has quit IRC | 00:19 | |
| *** aeperezt has quit IRC | 00:21 | |
| *** coasterz has quit IRC | 00:23 | |
| *** coasterz has joined #openstack-dev | 00:24 | |
| *** gokrokve has quit IRC | 00:24 | |
| *** cadenzajon has quit IRC | 00:24 | |
| *** gokrokve has joined #openstack-dev | 00:24 | |
| *** pablosan has quit IRC | 00:25 | |
| *** vartom1111111115 has quit IRC | 00:25 | |
| *** abhirc has quit IRC | 00:26 | |
| *** Gordonz_ has joined #openstack-dev | 00:27 | |
| *** ykhodork has quit IRC | 00:27 | |
| jog0 | dtroyer: ping | 00:28 |
| *** mlavalle has quit IRC | 00:28 | |
| dtroyer | yo | 00:28 |
| *** alagalah has quit IRC | 00:29 | |
| *** anniec has quit IRC | 00:29 | |
| jog0 | have two grenade patches up for review when you have time | 00:29 |
| *** gokrokve has quit IRC | 00:29 | |
| jog0 | dtroyer: https://review.openstack.org/#/q/status:open+project:openstack-dev/grenade+branch:master+topic:nova-compute,n,z | 00:29 |
| *** yamahata has quit IRC | 00:29 | |
| *** vkmc has quit IRC | 00:29 | |
| jog0 | want to get that test running sooner then later since we just cought another bug in nova withit | 00:29 |
| *** Gordonz has quit IRC | 00:30 | |
| *** praneshp has quit IRC | 00:31 | |
| *** Gordonz_ has quit IRC | 00:31 | |
| dtroyer | ok, I'll give then a look after dinner tonight… IIRC last time I looked at them they were basically sound | 00:31 |
| *** praneshp has joined #openstack-dev | 00:32 | |
| *** ramishra has joined #openstack-dev | 00:32 | |
| *** aeperezt has joined #openstack-dev | 00:33 | |
| *** anniec has joined #openstack-dev | 00:33 | |
| *** chris_johnson has joined #openstack-dev | 00:34 | |
| jog0 | dtroyer: thanks much appreciated | 00:34 |
| *** tsekiyama has quit IRC | 00:35 | |
| *** rodrigods has quit IRC | 00:35 | |
| *** chris_johnson has quit IRC | 00:35 | |
| *** Gordonz has joined #openstack-dev | 00:35 | |
| *** tsekiyama has joined #openstack-dev | 00:36 | |
| *** tdruiva has quit IRC | 00:36 | |
| *** tsekiyama has quit IRC | 00:36 | |
| *** tdruiva has joined #openstack-dev | 00:36 | |
| *** tsekiyama has joined #openstack-dev | 00:37 | |
| *** ramishra has quit IRC | 00:37 | |
| *** faramir1 has joined #openstack-dev | 00:37 | |
| *** tsekiyama has quit IRC | 00:37 | |
| *** tdruiva has quit IRC | 00:37 | |
| *** tdruiva has joined #openstack-dev | 00:38 | |
| *** RabidCicada has joined #openstack-dev | 00:38 | |
| *** tsekiyama has joined #openstack-dev | 00:38 | |
| *** Gordonz has quit IRC | 00:39 | |
| *** Gordonz has joined #openstack-dev | 00:39 | |
| *** tsekiyama has quit IRC | 00:39 | |
| ayoung | dolphm, can you explain your comment on https://review.openstack.org/#/c/69084/10/keystone/notifications.py | 00:39 |
| *** tsekiyama has joined #openstack-dev | 00:40 | |
| *** zzelle_ has quit IRC | 00:40 | |
| *** tsekiyama has quit IRC | 00:40 | |
| dolphm | ayoung: yeah... the method signature for wrapper() needs to be more explicit, not just *args, **kwargs | 00:40 |
| *** tsekiyama has joined #openstack-dev | 00:40 | |
| dolphm | ayoung: so you shouldn't have to index into args randomly | 00:41 |
| *** tanisdl has quit IRC | 00:41 | |
| *** tsekiyama has quit IRC | 00:41 | |
| dolphm | ayoung: especially with something named 'arg_index' ... the intent isn't self-documenting at all | 00:41 |
| *** tsekiyama has joined #openstack-dev | 00:41 | |
| ayoung | dolphm, but isn't this generic code? Meant to be run with many different signature? | 00:41 |
| *** tsekiyama has quit IRC | 00:42 | |
| *** tdruiva has quit IRC | 00:42 | |
| *** tsekiyama has joined #openstack-dev | 00:42 | |
| ayoung | Unless you mean that the notifications shouldn't use the generic wrapper | 00:42 |
| *** crobertsrh has left #openstack-dev | 00:42 | |
| *** tsekiyama has quit IRC | 00:43 | |
| ayoung | the original code assumed that the payload would be args[1] from the wrapped function. I made it flexible enough to be any arg from the wrapped function. | 00:43 |
| *** CaptTofu has quit IRC | 00:43 | |
| ayoung | But short of writing a new wrapper, I don't think I can use this approach from the new notifications | 00:44 |
| *** tsekiyama has joined #openstack-dev | 00:44 | |
| *** tsekiyama has quit IRC | 00:44 | |
| *** tsekiyama has joined #openstack-dev | 00:45 | |
| ayoung | dolph it is called from def delete_access_token(self, user_id, access_token_id): where the important field is the access_token_id that is being deleted. I almost think that the userId is superfluous there ( Stevemar can speak to that) | 00:45 |
| *** tsekiyama has quit IRC | 00:45 | |
| dolphm | ayoung: it's part of the resource (the user owns the access_token) | 00:45 |
| ayoung | dolphm, but is the userid necessary to index the access token? | 00:45 |
| bknudson | ayoung: can the order of the arguments of delete_access_token be changed? | 00:45 |
| *** tsekiyama has joined #openstack-dev | 00:45 | |
| *** tsekiyama has quit IRC | 00:46 | |
| ayoung | bknudson, not without breaking an established contract | 00:46 |
| dolphm | bknudson: they're based on the URL | 00:46 |
| dolphm | hmm | 00:46 |
| ayoung | but...it seems wrong to change them just because of notifications | 00:46 |
| bknudson | it could be a wrapper | 00:46 |
| *** tsekiyama has joined #openstack-dev | 00:46 | |
| *** tsekiyama has quit IRC | 00:47 | |
| dolphm | bknudson: ? | 00:47 |
| ayoung | delete_access_tokens doesn't need userid in the sql backedn | 00:47 |
| *** prad has quit IRC | 00:47 | |
| *** tsekiyama has joined #openstack-dev | 00:47 | |
| bknudson | delete_access_token(self, user_id, access_token_id) calls _delete_access_token(self, access_token_id, user_id) | 00:48 |
| *** tsekiyama has quit IRC | 00:48 | |
| ayoung | https://github.com/openstack/keystone/blob/master/keystone/contrib/oauth1/backends/sql.py#L132 | 00:48 |
| *** dzimine has joined #openstack-dev | 00:48 | |
| ayoung | https://github.com/openstack/keystone/blob/master/keystone/contrib/oauth1/backends/sql.py#L276 rather | 00:48 |
| dolphm | ayoung: resource_id_arg_index is crazy verbose, but at least describes what you're after | 00:48 |
| *** tsekiyama has joined #openstack-dev | 00:48 | |
| ayoung | if token_dict['authorizing_user_id'] != user_id: | 00:48 |
| ayoung | raise exception.Unauthorized(_('User IDs do not match')) | 00:48 |
| dolphm | ayoung: i can't think of an easy refactor to avoid the problem :-/ | 00:49 |
| *** tsekiyama has quit IRC | 00:49 | |
| * morganfainberg facepalms hard | 00:49 | |
| ayoung | seems to me that is enforcing policy at the wrong level | 00:49 |
| * morganfainberg lost all work done trying to setup debugging | 00:49 | |
| morganfainberg | i blame ayoung | 00:49 |
| ayoung | morganfainberg, no you didn't | 00:49 |
| morganfainberg | :P | 00:49 |
| ayoung | its in your head | 00:49 |
| ayoung | it will be very fast to reproduce | 00:49 |
| *** tsekiyama has joined #openstack-dev | 00:49 | |
| *** Gordonz has quit IRC | 00:49 | |
| morganfainberg | ayoung, ... sortof. | 00:49 |
| ayoung | BTW, this is why you check everything into GIT | 00:49 |
| morganfainberg | ayoung, it's taken me 2hrs to reproduce so far | 00:49 |
| *** tsekiyama has quit IRC | 00:50 | |
| ayoung | EV REE THING | 00:50 |
| dolphm | morganfainberg: git pull morgan brain | 00:50 |
| ayoung | twill be fsater this time | 00:50 |
| ayoung | faster | 00:50 |
| morganfainberg | ayoung, workflow dictates i hadn't gotten to git commit ;) | 00:50 |
| *** dbalog has left #openstack-dev | 00:50 | |
| *** tsekiyama has joined #openstack-dev | 00:50 | |
| morganfainberg | ayoung, your debugging thing sent me on off outside my workflow :P | 00:50 |
| ayoung | morganfainberg, what happend? | 00:50 |
| morganfainberg | ayoung, dunno, git reset to the head of your branch | 00:50 |
| *** tsekiyama has quit IRC | 00:50 | |
| *** tdruiva has joined #openstack-dev | 00:51 | |
| morganfainberg | ayoung, seriously no idea what happened here. if i could tell you i'd feel less annoyed at myself :P | 00:51 |
| ayoung | Um...git reflog | 00:51 |
| morganfainberg | dolphm, ++ | 00:51 |
| morganfainberg | ayoung, no commit had occured yet | 00:51 |
| *** tsekiyama has joined #openstack-dev | 00:51 | |
| morganfainberg | ayoung, no reflog | 00:51 |
| morganfainberg | ayoung, i checked | 00:51 |
| ayoung | morganfainberg, you were editing on your laptop and pushing to the remote system to test? | 00:51 |
| dolphm | morganfainberg: git stash pop | 00:52 |
| ayoung | is it still on the remote system? | 00:52 |
| morganfainberg | ayoung, yep. and the remote system was a vagrant vm, so vagrant destroy | 00:52 |
| morganfainberg | ayoung, nope. | 00:52 |
| morganfainberg | ayoung, it's all good, 2hrs to reconstruct (or is it 1.5) | 00:52 |
| *** tdruiva has quit IRC | 00:52 | |
| ayoung | bash history? | 00:52 |
| morganfainberg | ayoung, it is faster ... i'm just annoyed with myself because usually i have a git commit in there to prevent this | 00:52 |
| morganfainberg | ayoung, ;) | 00:52 |
| morganfainberg | ayoung, i just got off on a tanget setting up the debugging | 00:53 |
| ayoung | you are running a mac, don't you have that time travel thingy? | 00:53 |
| * morganfainberg doesn't really blame ayoung... | 00:53 | |
| ayoung | neither do I | 00:53 |
| morganfainberg | ayoung, lol | 00:53 |
| *** promulo has quit IRC | 00:53 | |
| morganfainberg | dolphm, i think i got unlucky :( | 00:53 |
| morganfainberg | ah well, almost back to where i was | 00:53 |
| morganfainberg | ayoung, and yes, it def is quicker round 2 | 00:54 |
| ayoung | OK, back to oauth and notifications....lets assume that the user_id needs to stay in there. Is there really anything wrong with my approach? And, if not, what should arg_index be called? | 00:54 |
| morganfainberg | ayoung, i don't think there is an issue with your approach | 00:54 |
| morganfainberg | ayoung, arg_index rename to uhm.... | 00:55 |
| *** sgordon has quit IRC | 00:55 | |
| ayoung | morganfainberg, nah, I was asking dolphm who made a comment about changing the method signature | 00:55 |
| ayoung | not sure I have that option | 00:55 |
| dolphm | ayoung: i meant the method signature of the wrapper, not of the wrapped method | 00:56 |
| dolphm | (not the controller method) | 00:56 |
| ayoung | dolphm, I know, but unless I make them match, I can't see how that could work | 00:56 |
| *** tsekiyama has quit IRC | 00:56 | |
| *** lcheng_ has quit IRC | 00:56 | |
| *** prad has joined #openstack-dev | 00:56 | |
| ayoung | and then the wrapper would be specific for the function it was wrapping , and the is not right | 00:56 |
| dolphm | ayoung: it already *sort* of is | 00:57 |
| dolphm | ayoung: but i agree | 00:57 |
| morganfainberg | dolphm, typically wrappers take *args, **kwargs. | 00:58 |
| dolphm | morganfainberg: yeah, but it's trying to use one of them | 00:58 |
| morganfainberg | ayoung, actually arg_index is bad. | 00:58 |
| morganfainberg | ayoung, actually sec. | 00:58 |
| ayoung | its saying "which" arg to make the payload | 00:58 |
| *** mrodden1 has quit IRC | 00:59 | |
| ayoung | payload_arg_index? | 00:59 |
| dolphm | ayoung: that implies you can set it to the dict, which would be a messy bug | 00:59 |
| morganfainberg | ayoung i think that the arg_index breaks if they pass the argument as a kwarg. | 01:00 |
| *** mkollaro has quit IRC | 01:00 | |
| *** edmund has quit IRC | 01:00 | |
| ayoung | morganfainberg, true. | 01:01 |
| *** Chaser_ has quit IRC | 01:01 | |
| morganfainberg | you'd get a tuple index out of range | 01:01 |
| ayoung | but that was true before my change as we;; | 01:01 |
| ayoung | well | 01:01 |
| *** Chaser has joined #openstack-dev | 01:01 | |
| morganfainberg | ayoung, this is a case where... i dislike it, but locals is the right choice | 01:01 |
| ayoung | should it be payload_arg_name and get it via kwargs? | 01:01 |
| *** adreznec has joined #openstack-dev | 01:01 | |
| morganfainberg | ayoung, payload_arg_name and locals().get(payload_arg_name) | 01:01 |
| morganfainberg | or similar | 01:01 |
| morganfainberg | well locals().copy() | 01:02 |
| ayoung | and the default? | 01:02 |
| *** devlaps has quit IRC | 01:02 | |
| morganfainberg | well, if you always expect that arg to exist, then no default and do a normal dict [] lookup | 01:02 |
| ayoung | which is the origianal broken Yak that I am shaving here? | 01:02 |
| *** Gordonz has joined #openstack-dev | 01:02 | |
| ayoung | arg[1] is the old code | 01:02 |
| ayoung | and I am not fixing that everywhere | 01:03 |
| *** nelsnelson has quit IRC | 01:03 | |
| morganfainberg | ayoung, ok, arg[1] unless payload_arg_name, then locals().copy()['payload_arg_name'] | 01:03 |
| ayoung | Oh that is much better... | 01:03 |
| morganfainberg | i know, that is more perl syntax, but you get it | 01:03 |
| *** carl_baldwin has quit IRC | 01:03 | |
| morganfainberg | actually, you should fix it everywhere :P | 01:04 |
| morganfainberg | but... | 01:04 |
| morganfainberg | arg_index and arg[1] are prone to breakage because args and kwargs | 01:04 |
| *** anniec has quit IRC | 01:06 | |
| morganfainberg | ayoung, least bad would be a well named index (obtusely verbose) variable name | 01:06 |
| morganfainberg | like dolphm suggested way back up in the scrollback | 01:06 |
| ayoung | morganfainberg, git_stash_pop? | 01:07 |
| morganfainberg | ayoung, resource_id_arg_index | 01:07 |
| morganfainberg | ayoung, if you're not fixing the issue everywehre | 01:07 |
| *** xingchao has joined #openstack-dev | 01:07 | |
| *** stevemar has joined #openstack-dev | 01:09 | |
| *** sarob has joined #openstack-dev | 01:09 | |
| dolphm | ayoung: have you ever tried using pycrypto to verify PKI tokens? | 01:10 |
| *** tjones has quit IRC | 01:10 | |
| *** godara has quit IRC | 01:10 | |
| ayoung | dolphm, nope | 01:10 |
| ayoung | dolphm, probably wouldn't be too hard, though | 01:10 |
| ayoung | lemme see | 01:10 |
| *** epim has quit IRC | 01:10 | |
| morganfainberg | dolphm, you and dstanek were talking about https://review.openstack.org/#/c/58766/14 needing to get in, right? | 01:11 |
| ayoung | Um..hmm | 01:11 |
| dolphm | morganfainberg: yes! | 01:11 |
| morganfainberg | dolphm, wonder why he has it chained against the six.iteritems one | 01:11 |
| *** atiwari has quit IRC | 01:12 | |
| dolphm | morganfainberg: maybe avoiding a merge conflict with himself? | 01:12 |
| dolphm | on imports | 01:12 |
| *** buzztroll has joined #openstack-dev | 01:12 | |
| morganfainberg | dolphm, ahh | 01:12 |
| morganfainberg | sure | 01:12 |
| ayoung | dolphm, doesn't look like it is supported | 01:12 |
| *** xingchao has quit IRC | 01:13 | |
| morganfainberg | dolphm, looks like there are oslo-incubator files that could suffer a direct import of it as well. | 01:13 |
| dolphm | morganfainberg: suffer? lol | 01:13 |
| *** tkay has quit IRC | 01:13 | |
| *** taps has quit IRC | 01:13 | |
| *** e0ne has joined #openstack-dev | 01:13 | |
| morganfainberg | huh. wtf, nope, just wonkyness on my end nvm | 01:13 |
| dolphm | ayoung: what's not supported exactly? i was looking at the API trying to figure that out | 01:14 |
| ayoung | dolphm, so CMS is also known as PKCS7 | 01:14 |
| ayoung | so it might be possible to do, but I'd have to pick out the individual steps | 01:14 |
| dolphm | ayoung: good to know | 01:15 |
| *** sarob has quit IRC | 01:15 | |
| *** yamahata has joined #openstack-dev | 01:15 | |
| ayoung | basically, take the ASN1 encoded doc, get the Hash, and then check the signature of the hash. It might be supported, just haven't seen it | 01:15 |
| ayoung | still looking, though | 01:15 |
| dolphm | ayoung: it's got PKCS#1 v1.5 | 01:15 |
| ayoung | dolphm, and that is, I think, a building block | 01:15 |
| *** devoid has quit IRC | 01:15 | |
| ayoung | I think that is used to check the signature, necessary but not sufficient | 01:16 |
| *** nkinder has joined #openstack-dev | 01:16 | |
| ayoung | https://tools.ietf.org/html/rfc5652 is the RFC for CMS | 01:16 |
| ayoung | but I think PKCS 1 is not even used...it is an older stnadard for signing, but I think RSA has somehow replaced it. I don't know this stuff super well | 01:18 |
| *** SumitNaiksatam has quit IRC | 01:18 | |
| *** yaguang has joined #openstack-dev | 01:18 | |
| *** e0ne has quit IRC | 01:18 | |
| dolphm | ayoung: i'm specifically interested in validation -- not worried about signing | 01:18 |
| *** achampion has joined #openstack-dev | 01:18 | |
| morganfainberg | dolphm, you mean replace cms_verify w/ pycrypto | 01:18 |
| ayoung | dolphm, right, signature validation. I think it uses a different cryptographic algorithm | 01:18 |
| *** melwitt has quit IRC | 01:19 | |
| ayoung | morganfainberg, I think it is worth while to see if we can get a decent in place library | 01:19 |
| ayoung | guessing pycrypto is on the short list | 01:19 |
| morganfainberg | ayoung, sure | 01:19 |
| dolphm | m2crypto is the next i was going to poke at | 01:19 |
| dolphm | morganfainberg: yeah, or at least have an alternative to compare against | 01:19 |
| ayoung | PKCS 1 sure sounds like what we want... | 01:19 |
| *** sarob has joined #openstack-dev | 01:19 | |
| dolphm | morganfainberg: one that doesn't require openssl on the client side | 01:19 |
| *** anniec has joined #openstack-dev | 01:20 | |
| morganfainberg | dolphm, sure that makes sense to not need openssl | 01:20 |
| ayoung | dolphm, this explains the difference http://stackoverflow.com/questions/12796545/how-can-we-convert-pkcs1-to-pkcs-7-if-i-have-the-certificate | 01:20 |
| *** tjones has joined #openstack-dev | 01:22 | |
| ayoung | dolphm, m2crypto has an SMIME module, which is kindof another name for CMS | 01:22 |
| *** tjones has quit IRC | 01:23 | |
| *** tsekiyama has joined #openstack-dev | 01:23 | |
| *** tsekiyama has quit IRC | 01:23 | |
| stevemar | marekd|away, ping | 01:23 |
| dolphm | ayoung: the downside to m2crypto is that's its not already in openstack/requirements (which is surprising because i found a patch where heat switched from pycrypto -> m2crypto 5 months ago) | 01:23 |
| ayoung | interesting | 01:24 |
| ayoung | dolphm, let me ask the experts | 01:24 |
| dolphm | pyopenssl is in openstack/requirements | 01:24 |
| *** sarob has quit IRC | 01:24 | |
| *** morazi has joined #openstack-dev | 01:24 | |
| ayoung | nkinder, ^^ that is more your realm than mine? | 01:25 |
| *** mrodden has joined #openstack-dev | 01:25 | |
| ayoung | we need to validate a signature (CMS, SMIME) and are using openssl cms via popen, but we want to validate a library based approach | 01:25 |
| *** tjones has joined #openstack-dev | 01:26 | |
| ayoung | how many crypto libraries do we really need? | 01:27 |
| stevemar | ayoung, exactly 4 | 01:27 |
| dolphm | stevemar: bonus points if you can name 4 | 01:27 |
| ayoung | http://packages.python.org/pyOpenSSL/openssl-pkcs7.html this looks a little thin | 01:28 |
| stevemar | dolphm, pyopenssl, m2crypto and ... asn1, and ... | 01:28 |
| ayoung | verify(certificate, signature, data, digest) | 01:28 |
| ayoung | Verify the signature for a data string. | 01:28 |
| ayoung | so we don't have a _signature_ attribute on the pkcs7 object | 01:29 |
| ayoung | stevemar, python-nss | 01:29 |
| stevemar | and the assist goes to ayoung | 01:30 |
| dolphm | lol | 01:30 |
| *** ramishra has joined #openstack-dev | 01:33 | |
| stevemar | dolphm, can you review the SAML stuff: https://review.openstack.org/#/c/71353/ i'm wondering about some of the assignment stuff | 01:34 |
| stevemar | dolphm, if there is a better way or not | 01:34 |
| *** gokrokve has joined #openstack-dev | 01:35 | |
| dolphm | ayoung: why do i have to take a regular PKI token and append an extra '=' before base64 will decode it? | 01:36 |
| dolphm | ayoung: i.e. this works: base64.b64decode(token + '=') # but not without the + '=' | 01:36 |
| ayoung | dolphm, I had another, ahem, discussion with out QA team about focusing on upstream contributions. After we got over the pleasantries, they mentioned the fact that they do a lot of written teast plans, but upstream Open Stack doesn't really have a tool to support that. I realize that upstream has Automated tests, but...should they just go in an Etherpad? | 01:36 |
| *** jckasper has joined #openstack-dev | 01:36 | |
| ayoung | dolphm, the = is padding | 01:37 |
| ayoung | but... | 01:37 |
| dolphm | ayoung: right, why is it missing padding? | 01:37 |
| ayoung | did you do the - to / replacement stage? | 01:37 |
| dolphm | ayoung: no? | 01:37 |
| ayoung | ok, so I did a bad bad thing | 01:37 |
| ayoung | I made up my own way to make base64 "url safe" for lack of a better term | 01:37 |
| dolphm | stevemar: will look at some point, btw | 01:37 |
| ayoung | didn';t realize there was a standard, and...well, I would do things differently now | 01:37 |
| *** ramishra has quit IRC | 01:37 | |
| ayoung | the code is in the cms file...link | 01:38 |
| dolphm | oh. i thought that line was new | 01:38 |
| ayoung | https://github.com/openstack/keystone/blob/master/keystone/common/cms.py#L147 | 01:38 |
| ayoung | and to reverse it, do | 01:38 |
| ayoung | https://github.com/openstack/keystone/blob/master/keystone/common/cms.py#L46 | 01:39 |
| *** colinmcnamara has quit IRC | 01:39 | |
| ayoung | dolphm, you can use those functions if you want to test out M2 crypto or pyopenssl | 01:39 |
| *** gokrokve has quit IRC | 01:39 | |
| dolphm | yeah, that's no fun | 01:39 |
| *** gokrokve has joined #openstack-dev | 01:39 | |
| *** nosnos has joined #openstack-dev | 01:39 | |
| stevemar | dolphm, cool | 01:40 |
| ayoung | dolphm, so...what I would do today instead is: | 01:40 |
| *** gokrokve has quit IRC | 01:40 | |
| ayoung | sign the tokens to DER format, not PEM | 01:40 |
| *** doug-fish has joined #openstack-dev | 01:40 | |
| ayoung | and then just run base64.urlsafe_b64encode on them | 01:40 |
| *** gokrokve has joined #openstack-dev | 01:40 | |
| ayoung | we'll do that regardless of the library we use to sign, I think | 01:40 |
| dolphm | ayoung: since we're changing the token format anyway, why not make all these changes at once? | 01:41 |
| *** gokrokve_ has joined #openstack-dev | 01:41 | |
| *** doug-fish has quit IRC | 01:41 | |
| *** lbragstad has joined #openstack-dev | 01:41 | |
| *** doug-fish has joined #openstack-dev | 01:42 | |
| ayoung | dolphm, because we need to be able to support the old format and the new format at once. I was going to do more in that last review, but asn1 isn't in the requirments, but once It is, I will use it. | 01:42 |
| ayoung | I wasn't yet changing anything on the signing side except compression | 01:42 |
| *** jergerber has quit IRC | 01:42 | |
| morganfainberg | dolphm, stevemar, ayoung, oslo sync, do you see value in git log --oneline from oslo or just the head commit things were synced from? | 01:42 |
| ayoung | I though that would be a seamless drop in, but looks like it will not be | 01:43 |
| *** xarses has quit IRC | 01:43 | |
| dolphm | ayoung: yeah, but that's already backwards incompatible with existing auth_token | 01:43 |
| ayoung | right | 01:43 |
| dolphm | morganfainberg: i would read --oneline | 01:43 |
| ayoung | so the next step is to do custom compression using zlib. I am hoping that i can look at the underlying data with zlib and say "is it comporessed" and if so decomporess" | 01:44 |
| morganfainberg | dolphm, so https://review.openstack.org/#/c/71558/ commit message (even though it isn't clear how much of those apply) | 01:44 |
| morganfainberg | ? | 01:44 |
| ayoung | if not...I'll probably need ASN1 | 01:44 |
| *** devoid has joined #openstack-dev | 01:44 | |
| dolphm | holy crap | 01:44 |
| morganfainberg | dolphm, not mine, i just don't see a huge value in that | 01:44 |
| dolphm | morganfainberg: okay --oneline would be more useful if it was a single module sync | 01:44 |
| morganfainberg | but if others did, i'm happy to oblige | 01:44 |
| morganfainberg | dolphm, yeah doing a mass sync | 01:45 |
| *** gokrokve has quit IRC | 01:45 | |
| *** xingchao has joined #openstack-dev | 01:45 | |
| morganfainberg | dolphm, unless we want to sync each module as a commit | 01:45 |
| dolphm | morganfainberg: interdependencies make that hard, no? | 01:45 |
| morganfainberg | dolphm, yesh | 01:45 |
| dolphm | works sometimes, but.. | 01:45 |
| morganfainberg | dolphm, it does | 01:45 |
| dolphm | morganfainberg: can i -2 the one you linked? it's not even passing jenkins, relative to yours | 01:46 |
| morganfainberg | yes, he said he'd abandon in either case | 01:46 |
| morganfainberg | once i fixed my commit msg and got a more recent sync | 01:47 |
| ayoung | I should probably get pyasn1 into global reqs | 01:47 |
| dolphm | morganfainberg: is a more recent sync going to break jenkins? | 01:47 |
| morganfainberg | dolphm, unlikely | 01:47 |
| morganfainberg | dolphm, i'm being picky about how far "more recent" just to the py3k removal stuff | 01:47 |
| *** mikeoutland has quit IRC | 01:47 | |
| *** bdpayne_ has quit IRC | 01:48 | |
| dolphm | ayoung: maybe we should hold on token compression until after icehouse so we don't have to support 4 token formats | 01:48 |
| ayoung | dolphm, I think we'll need it sooner, or no Keystone in Apache | 01:48 |
| ayoung | it will deal with large catalogs, too | 01:48 |
| *** xingchao has quit IRC | 01:49 | |
| *** MaxV has joined #openstack-dev | 01:50 | |
| *** doug-fish has quit IRC | 01:51 | |
| ayoung | oh, wait, it is in global reqs | 01:51 |
| ayoung | https://github.com/openstack/requirements/blob/master/global-requirements.txt#L62 | 01:52 |
| *** tjones has quit IRC | 01:52 | |
| *** marcoemorais has quit IRC | 01:52 | |
| *** amrith has joined #openstack-dev | 01:53 | |
| *** mrodden1 has joined #openstack-dev | 01:54 | |
| amrith | I'm attempting to push a change for review with git review (my first) and I get an error: fatal: ICLA contributor agreement requires current contact information. | 01:54 |
| amrith | my openstack.org profile has valid contact inforamtion | 01:54 |
| amrith | what should I be looking at/changing to address this? | 01:54 |
| *** mrodden has quit IRC | 01:55 | |
| *** MaxV has quit IRC | 01:55 | |
| mgagne | amrith: Contact info needs to be populated here: https://review.openstack.org/#/settings/contact | 01:55 |
| mgagne | amrith: afaik, openstack.org and review.o.o aren't linked. | 01:56 |
| amrith | mgagne, I get that in the error and I have contact information there | 01:56 |
| amrith | when I visit that page it says "Contact information last updated on Feb 13, 2014 at 7:40 PM." | 01:57 |
| amrith | I just updated | 01:57 |
| amrith | I just updated it | 01:57 |
| amrith | earlier it said Feb 5th ... | 01:57 |
| amrith | how does one get review.o.o to figure out that I have contact information? | 01:57 |
| amrith | is there a way to unsign the ICLA and resign it? | 01:58 |
| *** sn6i23a has quit IRC | 01:58 | |
| amrith | I believe that I did not submit contact information with my ICLA | 01:58 |
| mgagne | amrith: afaik, no | 01:58 |
| *** xingchao has joined #openstack-dev | 01:58 | |
| mgagne | amrith: are you contributing under the right account? | 01:58 |
| amrith | yes I am | 01:58 |
| amrith | I have only one account | 01:59 |
| mgagne | amrith: sometimes, account get duplicated if email is updated at launchpad | 01:59 |
| amrith | and I'm logged in (browser) with that account and the same email address is associated with my git config | 01:59 |
| *** alagalah has joined #openstack-dev | 01:59 | |
| dolphm | AMike: hmm, i think i've seen this before, one sec | 01:59 |
| dolphm | amrith: ^ | 01:59 |
| *** david-lyle has joined #openstack-dev | 01:59 | |
| amrith | I also saw this before at eavesdrop.openstack.org/irclogs/%23openstack-dev/%23openstack-dev.2013-03-04.log | 02:00 |
| amrith | I IRC'ed clarkb on this ... | 02:00 |
| dolphm | do you sign the ICLA through gerrit now? it's been awhile for me... | 02:00 |
| morganfainberg | dolphm, uhm... keystone.middleware.ec2_token will no longer import after https://github.com/openstack/keystone/commit/03b60340e8e977a4b41367fd14844e735e2cd3f8 should i just remove that module? | 02:01 |
| dolphm | amrith: you might try adding more identities into gerrit if you've used more than one email address somewhere | 02:01 |
| *** alex_xu has joined #openstack-dev | 02:01 | |
| dolphm | morganfainberg: stevemar had a fix | 02:01 |
| *** prad has quit IRC | 02:02 | |
| stevemar | dolphm, morganfainberg, true, i did | 02:02 |
| morganfainberg | ah | 02:02 |
| dolphm | stevemar: did it merge? | 02:02 |
| dolphm | this merged.. https://review.openstack.org/#/c/73370/ | 02:02 |
| stevemar | is this an inquisition | 02:02 |
| stevemar | dolphm, not yet | 02:03 |
| stevemar | https://review.openstack.org/#/c/73341/ | 02:03 |
| dolphm | stevemar: does the order of those need to be swapped? | 02:03 |
| *** markvoelker1 has quit IRC | 02:03 | |
| stevemar | its piled on with the other doc related fixes | 02:03 |
| stevemar | not really | 02:03 |
| morganfainberg | that blocks the auto-gen config change | 02:04 |
| morganfainberg | well.. i guess i could not enable the pep8 check | 02:04 |
| stevemar | dolphm, the sphinx depends on both, but the other 2 are not dependent on each other | 02:04 |
| morganfainberg | dolphm, getting the auto-gen config stuff in is going to be challenging because there is a lot of movement that affects the config file. | 02:05 |
| stevemar | morganfainberg, that's such a cool patch | 02:05 |
| morganfainberg | anyway.. i need to go. running late as is. | 02:05 |
| stevemar | morganfainberg, have fun | 02:05 |
| morganfainberg | stevemar, stop breaking things! | 02:05 |
| stevemar | i didn't break anything | 02:05 |
| morganfainberg | stevemar, webob! | 02:06 |
| stevemar | i | 02:06 |
| *** csd has quit IRC | 02:06 | |
| stevemar | i'm trying to fix it | 02:06 |
| *** derekh has quit IRC | 02:06 | |
| morganfainberg | stevemar you broke ec2_token :P | 02:06 |
| stevemar | opposite | 02:06 |
| *** browne1 has quit IRC | 02:06 | |
| morganfainberg | anyway... | 02:07 |
| *** sarob has joined #openstack-dev | 02:07 | |
| *** thomasem has joined #openstack-dev | 02:08 | |
| morganfainberg | dolphm, i expect it to break, but just so i don't lose it again... >.< i'm posting the 1st patch for ephemeral ^_^ | 02:08 |
| dolphm | what is "check experimental" ? | 02:09 |
| *** jhesketh has quit IRC | 02:09 | |
| dolphm | morganfainberg: woo! | 02:09 |
| *** novas0x2a|laptop has quit IRC | 02:11 | |
| *** zul has quit IRC | 02:12 | |
| morganfainberg | dolphm, https://review.openstack.org/#/c/73477/ | 02:13 |
| *** e0ne has joined #openstack-dev | 02:13 | |
| morganfainberg | i expect it to fail tests, but i plan to continue on it tonight/tomorrow and when i'm off the plane on saturday | 02:13 |
| morganfainberg | ephemeral tokens will be more test restructuring than anything but should be easy layered on top of that. | 02:14 |
| *** devoid has quit IRC | 02:14 | |
| morganfainberg | annnnnd i'm not 15 mins late | 02:14 |
| morganfainberg | eeeeek | 02:14 |
| *** devoid has joined #openstack-dev | 02:14 | |
| dolphm | morganfainberg: not? | 02:14 |
| morganfainberg | now | 02:14 |
| *** devoid has quit IRC | 02:14 | |
| dolphm | morganfainberg: unlate yourself /salute! | 02:15 |
| morganfainberg | lol | 02:15 |
| *** tqtran has quit IRC | 02:15 | |
| *** _cjones_ has quit IRC | 02:15 | |
| *** dprince has quit IRC | 02:15 | |
| *** dprince has joined #openstack-dev | 02:17 | |
| *** e0ne has quit IRC | 02:18 | |
| *** CaptTofu has joined #openstack-dev | 02:20 | |
| *** aditirav has joined #openstack-dev | 02:21 | |
| *** alop has quit IRC | 02:22 | |
| *** ijw has quit IRC | 02:22 | |
| *** thomasem has quit IRC | 02:22 | |
| *** erkules_ has joined #openstack-dev | 02:23 | |
| *** sarob has quit IRC | 02:23 | |
| *** sarob has joined #openstack-dev | 02:23 | |
| *** xarses has joined #openstack-dev | 02:24 | |
| *** morganfainberg is now known as morganfainberg_Z | 02:24 | |
| *** crandquist has quit IRC | 02:26 | |
| *** erkules has quit IRC | 02:26 | |
| *** mrodden has joined #openstack-dev | 02:28 | |
| *** sushils has quit IRC | 02:28 | |
| *** sarob has quit IRC | 02:28 | |
| *** aditirav has quit IRC | 02:28 | |
| *** mrodden1 has quit IRC | 02:29 | |
| *** dzimine has quit IRC | 02:29 | |
| *** ramishra has joined #openstack-dev | 02:30 | |
| *** dprince has quit IRC | 02:32 | |
| *** anniec has quit IRC | 02:32 | |
| *** alagalah has quit IRC | 02:34 | |
| *** anniec has joined #openstack-dev | 02:37 | |
| *** sarob has joined #openstack-dev | 02:39 | |
| *** dstanek has joined #openstack-dev | 02:39 | |
| *** SumitNaiksatam has joined #openstack-dev | 02:43 | |
| *** dstanek has quit IRC | 02:45 | |
| *** arnaud__1 has quit IRC | 02:46 | |
| *** arnaud__ has joined #openstack-dev | 02:46 | |
| *** sarob has quit IRC | 02:47 | |
| *** carlp has quit IRC | 02:47 | |
| *** sarob has joined #openstack-dev | 02:47 | |
| *** arnaud___ has joined #openstack-dev | 02:49 | |
| *** sarob has quit IRC | 02:52 | |
| *** pablosan has joined #openstack-dev | 02:53 | |
| *** arnaud___ has quit IRC | 02:54 | |
| *** jhesketh_ has joined #openstack-dev | 02:55 | |
| *** crandquist has joined #openstack-dev | 02:56 | |
| *** xchu has joined #openstack-dev | 02:57 | |
| *** anniec has quit IRC | 02:57 | |
| *** godara has joined #openstack-dev | 02:59 | |
| *** newell has quit IRC | 03:01 | |
| *** jckasper has quit IRC | 03:01 | |
| *** jckasper has joined #openstack-dev | 03:01 | |
| *** mgagne has quit IRC | 03:02 | |
| *** godara_ has joined #openstack-dev | 03:02 | |
| *** godara has quit IRC | 03:04 | |
| *** kushal has joined #openstack-dev | 03:06 | |
| *** csd has joined #openstack-dev | 03:06 | |
| *** godara has joined #openstack-dev | 03:06 | |
| *** godara_ has quit IRC | 03:07 | |
| *** arnaud__ has quit IRC | 03:08 | |
| *** zhiyan_ is now known as zhiyan | 03:10 | |
| *** godara has quit IRC | 03:11 | |
| *** anniec has joined #openstack-dev | 03:11 | |
| *** e0ne has joined #openstack-dev | 03:13 | |
| *** vkdrao has joined #openstack-dev | 03:17 | |
| *** csd has quit IRC | 03:17 | |
| *** e0ne has quit IRC | 03:18 | |
| *** bdpayne has joined #openstack-dev | 03:21 | |
| harlowja_ | kashyap: pushed git stuff to master of gerrit_view, also switched to using gitpython library | 03:23 |
| *** jkyle has quit IRC | 03:23 | |
| *** baoli has quit IRC | 03:23 | |
| harlowja_ | much nicer than executing git commands locally | 03:23 |
| harlowja_ | zuul uses it, so i took inspiration from it, lol | 03:24 |
| *** baoli has joined #openstack-dev | 03:25 | |
| *** baoli has quit IRC | 03:25 | |
| *** baoli has joined #openstack-dev | 03:25 | |
| *** jcooley_ has joined #openstack-dev | 03:26 | |
| *** gyee has quit IRC | 03:26 | |
| *** jkyle has joined #openstack-dev | 03:31 | |
| *** mlegault has joined #openstack-dev | 03:32 | |
| *** bdpayne has quit IRC | 03:35 | |
| *** paragan has joined #openstack-dev | 03:37 | |
| *** paragan has quit IRC | 03:37 | |
| *** paragan has joined #openstack-dev | 03:37 | |
| *** jkyle has quit IRC | 03:38 | |
| *** ramishra has quit IRC | 03:39 | |
| *** pcm_ has quit IRC | 03:39 | |
| *** ykhodork has joined #openstack-dev | 03:39 | |
| *** csd has joined #openstack-dev | 03:42 | |
| *** praneshp has quit IRC | 03:44 | |
| *** mulcahey has joined #openstack-dev | 03:44 | |
| *** alagalah has joined #openstack-dev | 03:44 | |
| *** carl_baldwin has joined #openstack-dev | 03:45 | |
| *** mulcahey has quit IRC | 03:45 | |
| *** jhesketh_ has quit IRC | 03:45 | |
| *** aswadrangnekar has left #openstack-dev | 03:46 | |
| *** thomasem has joined #openstack-dev | 03:47 | |
| *** ramishra has joined #openstack-dev | 03:47 | |
| *** mriedem has quit IRC | 03:48 | |
| *** sulrich has quit IRC | 03:48 | |
| *** flaper87|afk has quit IRC | 03:48 | |
| *** armax has left #openstack-dev | 03:48 | |
| *** aditirav has joined #openstack-dev | 03:48 | |
| *** sarob has joined #openstack-dev | 03:48 | |
| *** mriedem has joined #openstack-dev | 03:48 | |
| *** sulrich has joined #openstack-dev | 03:48 | |
| *** alagalah has quit IRC | 03:49 | |
| *** adreznec has quit IRC | 03:49 | |
| *** adreznec has joined #openstack-dev | 03:49 | |
| *** baoli has quit IRC | 03:49 | |
| *** otherwiseguy has quit IRC | 03:49 | |
| *** CrackerJackMack has quit IRC | 03:49 | |
| *** otherwiseguy has joined #openstack-dev | 03:50 | |
| *** anniec has quit IRC | 03:50 | |
| *** CrackerJackMack has joined #openstack-dev | 03:50 | |
| *** flaper87|afk has joined #openstack-dev | 03:50 | |
| *** thomasem has quit IRC | 03:51 | |
| *** flaper87|afk is now known as flaper87 | 03:51 | |
| *** vkdrao has quit IRC | 03:51 | |
| *** mlegault_ has joined #openstack-dev | 03:53 | |
| *** sarob has quit IRC | 03:53 | |
| *** xmltok has quit IRC | 03:53 | |
| *** mlegault_ has quit IRC | 03:55 | |
| *** mlegault_ has joined #openstack-dev | 03:56 | |
| *** mmoya has quit IRC | 03:56 | |
| *** mmoya has joined #openstack-dev | 03:56 | |
| *** jkyle has joined #openstack-dev | 03:56 | |
| *** mlegault has quit IRC | 03:56 | |
| *** crandquist has quit IRC | 03:58 | |
| *** edmund has joined #openstack-dev | 03:59 | |
| *** _cjones_ has joined #openstack-dev | 03:59 | |
| *** mlegault__ has joined #openstack-dev | 04:01 | |
| *** crandquist has joined #openstack-dev | 04:01 | |
| stevemar | dtroyer, ping | 04:02 |
| *** mlegault_ has quit IRC | 04:04 | |
| *** galstrom_zzz is now known as galstrom | 04:08 | |
| *** amcrn_ has quit IRC | 04:08 | |
| dtroyer | stevemar: hey | 04:09 |
| *** mriedem has quit IRC | 04:10 | |
| stevemar | dtroyer, added a comment to the patch instead | 04:11 |
| *** chandan_kumar has joined #openstack-dev | 04:11 | |
| stevemar | dtroyer, what's going on w/ jenkins and the gate, it's on the floor | 04:11 |
| dtroyer | I don't know, haven't looked closely yet | 04:11 |
| *** amcrn has joined #openstack-dev | 04:12 | |
| *** baoli has joined #openstack-dev | 04:12 | |
| *** ramishra has quit IRC | 04:12 | |
| *** ramishra has joined #openstack-dev | 04:12 | |
| *** baoli has quit IRC | 04:13 | |
| *** e0ne has joined #openstack-dev | 04:13 | |
| dtroyer | ok, so WTF with openstackkeyring? it isn't in oslo-incubator but it was in our openstack-common.conf | 04:14 |
| *** mlegault__ has quit IRC | 04:15 | |
| *** mlegault__ has joined #openstack-dev | 04:16 | |
| *** CaptTofu has quit IRC | 04:16 | |
| *** Anju has left #openstack-dev | 04:16 | |
| *** e0ne has quit IRC | 04:18 | |
| *** tkay has joined #openstack-dev | 04:21 | |
| *** kamalic has joined #openstack-dev | 04:22 | |
| *** jcooley_ has quit IRC | 04:24 | |
| *** jp_at_hp has quit IRC | 04:25 | |
| stevemar | dtroyer, i'm as surprised as you are with that one... | 04:26 |
| *** bdpayne has joined #openstack-dev | 04:26 | |
| *** ijw has joined #openstack-dev | 04:28 | |
| *** carl_baldwin has quit IRC | 04:28 | |
| ramishra | Hi All.. need some help...I have my patch build failed with TypeError: Given attr is not a Class. Use StubOutWithMock ... "File "heat/tests/test_auth_password.py", line 133, in test_multi_cloud" | 04:29 |
| ramishra | is that problem with my code? | 04:29 |
| ramishra | or some other issue... | 04:30 |
| *** harlowja_ is now known as harlowja_away | 04:31 | |
| *** mlegault_ has joined #openstack-dev | 04:36 | |
| *** carl_baldwin has joined #openstack-dev | 04:36 | |
| *** lcheng_ has joined #openstack-dev | 04:36 | |
| *** amcrn has quit IRC | 04:37 | |
| *** relaxdiego has quit IRC | 04:37 | |
| *** david_lyle_ has joined #openstack-dev | 04:38 | |
| *** amcrn has joined #openstack-dev | 04:38 | |
| *** saju_m has joined #openstack-dev | 04:39 | |
| *** sergmelikyan has quit IRC | 04:39 | |
| *** mlegault__ has quit IRC | 04:39 | |
| *** pablosan has quit IRC | 04:39 | |
| *** david-lyle has quit IRC | 04:39 | |
| *** sergmelikyan has joined #openstack-dev | 04:39 | |
| *** Sukhdev has joined #openstack-dev | 04:42 | |
| *** tkay has quit IRC | 04:42 | |
| *** fandi has joined #openstack-dev | 04:43 | |
| fandi | join #openstack-image | 04:43 |
| fandi | ups typo | 04:43 |
| *** sumanthns has joined #openstack-dev | 04:44 | |
| *** sweston has quit IRC | 04:45 | |
| *** jeckersb is now known as jeckersb_gone | 04:46 | |
| *** sweston has joined #openstack-dev | 04:46 | |
| *** sweston has quit IRC | 04:47 | |
| *** radez is now known as radez_g0n3 | 04:48 | |
| *** sarob has joined #openstack-dev | 04:48 | |
| *** mlegault_ has quit IRC | 04:49 | |
| *** Nikolay_St has quit IRC | 04:50 | |
| *** mlegault_ has joined #openstack-dev | 04:50 | |
| *** chandan_kumar has quit IRC | 04:52 | |
| *** alop has joined #openstack-dev | 04:52 | |
| *** sarob has quit IRC | 04:53 | |
| *** sarob has joined #openstack-dev | 04:53 | |
| *** galstrom is now known as galstrom_zzz | 04:54 | |
| *** praneshp has joined #openstack-dev | 04:55 | |
| *** epim has joined #openstack-dev | 04:55 | |
| *** mlegault has joined #openstack-dev | 04:56 | |
| *** ijw_ has joined #openstack-dev | 04:56 | |
| *** mlegault has quit IRC | 04:57 | |
| *** mlegault has joined #openstack-dev | 04:58 | |
| *** ijw has quit IRC | 04:58 | |
| *** mlegault_ has quit IRC | 05:00 | |
| *** galstrom_zzz is now known as galstrom | 05:01 | |
| *** gordc1 has quit IRC | 05:03 | |
| *** mlegault_ has joined #openstack-dev | 05:10 | |
| *** ramishra has quit IRC | 05:11 | |
| *** bdpayne has quit IRC | 05:12 | |
| *** ramishra has joined #openstack-dev | 05:12 | |
| *** jcooley_ has joined #openstack-dev | 05:13 | |
| *** e0ne has joined #openstack-dev | 05:13 | |
| *** _cjones_ has quit IRC | 05:13 | |
| *** mlegault has quit IRC | 05:13 | |
| *** chandan_kumar has joined #openstack-dev | 05:14 | |
| *** mlegault_ has quit IRC | 05:14 | |
| *** mlegault_ has joined #openstack-dev | 05:15 | |
| *** alop has quit IRC | 05:15 | |
| *** _cjones_ has joined #openstack-dev | 05:15 | |
| *** _cjones_ has quit IRC | 05:15 | |
| kashyap | harlowja_away, Many thanks, just git pulled it. Really helps on low latency networks not to open a browser. | 05:16 |
| *** yuan has joined #openstack-dev | 05:16 | |
| *** _cjones_ has joined #openstack-dev | 05:16 | |
| *** _cjones_ has quit IRC | 05:16 | |
| *** _cjones_ has joined #openstack-dev | 05:18 | |
| *** e0ne has quit IRC | 05:18 | |
| *** alop has joined #openstack-dev | 05:19 | |
| *** galstrom is now known as galstrom_zzz | 05:20 | |
| *** mlegault_ has quit IRC | 05:21 | |
| *** csd has quit IRC | 05:23 | |
| *** bdpayne has joined #openstack-dev | 05:23 | |
| *** csd has joined #openstack-dev | 05:24 | |
| *** csd_ has joined #openstack-dev | 05:25 | |
| *** kamalic has quit IRC | 05:25 | |
| *** kamalic has joined #openstack-dev | 05:27 | |
| *** nshaikh has joined #openstack-dev | 05:28 | |
| *** csd_ has quit IRC | 05:29 | |
| *** alop has quit IRC | 05:29 | |
| *** csd has quit IRC | 05:29 | |
| *** csd_ has joined #openstack-dev | 05:29 | |
| *** hdd has quit IRC | 05:30 | |
| *** anniec has joined #openstack-dev | 05:31 | |
| *** chris_johnson has joined #openstack-dev | 05:32 | |
| *** Nikolay_St has joined #openstack-dev | 05:34 | |
| *** praneshp_ has joined #openstack-dev | 05:35 | |
| *** rraja has joined #openstack-dev | 05:36 | |
| *** csd_ has quit IRC | 05:36 | |
| *** anniec_ has joined #openstack-dev | 05:36 | |
| *** praneshp has quit IRC | 05:37 | |
| *** praneshp_ is now known as praneshp | 05:37 | |
| *** alop has joined #openstack-dev | 05:38 | |
| *** anniec has quit IRC | 05:38 | |
| *** anniec_ is now known as anniec | 05:38 | |
| *** RabidCicada has quit IRC | 05:39 | |
| *** sarob has quit IRC | 05:41 | |
| *** tkay has joined #openstack-dev | 05:41 | |
| *** sarob has joined #openstack-dev | 05:41 | |
| *** sarob has quit IRC | 05:41 | |
| *** sarob has joined #openstack-dev | 05:41 | |
| *** garyk1 has joined #openstack-dev | 05:42 | |
| *** sarob has quit IRC | 05:42 | |
| *** chris_johnson has quit IRC | 05:43 | |
| *** bdpayne has quit IRC | 05:43 | |
| *** aditirav has quit IRC | 05:44 | |
| *** garyk has quit IRC | 05:44 | |
| *** AlexF has joined #openstack-dev | 05:44 | |
| *** aditirav has joined #openstack-dev | 05:44 | |
| *** rohitk has joined #openstack-dev | 05:44 | |
| *** _cjones_ has quit IRC | 05:45 | |
| *** tjones has joined #openstack-dev | 05:46 | |
| *** bdpayne has joined #openstack-dev | 05:46 | |
| *** tjones has quit IRC | 05:46 | |
| *** matiu has quit IRC | 05:47 | |
| *** HenryG has quit IRC | 05:48 | |
| *** _cjones_ has joined #openstack-dev | 05:49 | |
| *** _cjones_ has quit IRC | 05:51 | |
| *** carl_baldwin has quit IRC | 05:51 | |
| *** Sukhdev has quit IRC | 05:53 | |
| *** aditirav_ has joined #openstack-dev | 05:53 | |
| *** epim_ has joined #openstack-dev | 05:53 | |
| *** dstanek has joined #openstack-dev | 05:54 | |
| *** epim has quit IRC | 05:54 | |
| *** epim_ is now known as epim | 05:54 | |
| *** chandankumar_ has joined #openstack-dev | 05:54 | |
| *** aeperezt has quit IRC | 05:54 | |
| *** dzimine has joined #openstack-dev | 05:54 | |
| *** rdas has joined #openstack-dev | 05:55 | |
| *** rohitk has quit IRC | 05:56 | |
| *** aditirav has quit IRC | 05:56 | |
| *** aditirav_ is now known as aditirav | 05:56 | |
| *** saju_m has quit IRC | 05:58 | |
| *** sweston has joined #openstack-dev | 05:58 | |
| *** HenryG has joined #openstack-dev | 05:59 | |
| *** chandankumar_ has quit IRC | 06:00 | |
| *** bdpayne has quit IRC | 06:01 | |
| *** buzztroll has quit IRC | 06:02 | |
| *** dstanek has quit IRC | 06:03 | |
| *** mikeoutland has joined #openstack-dev | 06:08 | |
| *** mikeoutland has joined #openstack-dev | 06:09 | |
| *** dstanek has joined #openstack-dev | 06:09 | |
| *** neeti has joined #openstack-dev | 06:10 | |
| *** AlexF has quit IRC | 06:11 | |
| *** sballe has quit IRC | 06:11 | |
| *** rohitk has joined #openstack-dev | 06:12 | |
| *** AlexF has joined #openstack-dev | 06:13 | |
| *** bdpayne has joined #openstack-dev | 06:13 | |
| *** e0ne has joined #openstack-dev | 06:13 | |
| *** buzztroll has joined #openstack-dev | 06:15 | |
| *** chandan_kumar has quit IRC | 06:15 | |
| *** CaptTofu has joined #openstack-dev | 06:17 | |
| *** alop has quit IRC | 06:17 | |
| *** e0ne has quit IRC | 06:18 | |
| *** vkozhukalov has joined #openstack-dev | 06:21 | |
| *** CaptTofu has quit IRC | 06:21 | |
| *** AlexF has quit IRC | 06:23 | |
| *** jcooley_ has quit IRC | 06:23 | |
| *** AlexF has joined #openstack-dev | 06:24 | |
| *** ijw_ has quit IRC | 06:24 | |
| *** kenperkins has joined #openstack-dev | 06:26 | |
| *** mrunge has joined #openstack-dev | 06:28 | |
| *** buzztroll has quit IRC | 06:32 | |
| *** buzztroll has joined #openstack-dev | 06:32 | |
| *** chandan_kumar has joined #openstack-dev | 06:32 | |
| *** buzztroll has quit IRC | 06:33 | |
| *** cfriesen has quit IRC | 06:33 | |
| *** buzztroll has joined #openstack-dev | 06:33 | |
| *** faramir2 has joined #openstack-dev | 06:33 | |
| *** mikeoutland has quit IRC | 06:33 | |
| *** mikeoutland has joined #openstack-dev | 06:34 | |
| *** faramir1 has quit IRC | 06:36 | |
| *** mikeoutland has quit IRC | 06:39 | |
| *** eglynn has joined #openstack-dev | 06:40 | |
| *** rraja has quit IRC | 06:41 | |
| *** kushal has quit IRC | 06:41 | |
| *** kushal has joined #openstack-dev | 06:42 | |
| *** sarob has joined #openstack-dev | 06:43 | |
| *** bdpayne has quit IRC | 06:44 | |
| *** yolanda has joined #openstack-dev | 06:44 | |
| *** tdruiva has joined #openstack-dev | 06:45 | |
| *** eglynn has quit IRC | 06:46 | |
| *** AlexF has quit IRC | 06:47 | |
| *** sarob has quit IRC | 06:48 | |
| *** kushal has quit IRC | 06:49 | |
| *** cnesa has quit IRC | 06:54 | |
| *** AlexF has joined #openstack-dev | 06:54 | |
| *** ijw has joined #openstack-dev | 06:55 | |
| *** csaba|afk is now known as csaba | 06:57 | |
| *** rraja has joined #openstack-dev | 06:59 | |
| *** kamalic has quit IRC | 06:59 | |
| *** kushal has joined #openstack-dev | 07:00 | |
| *** kushal has quit IRC | 07:00 | |
| *** kushal has joined #openstack-dev | 07:00 | |
| *** lazy_prince has joined #openstack-dev | 07:01 | |
| samuelqueiroz | Hi, I'm working with a Keystone customized policy.json. I'd like to know how could we get access to the domain_id if the user has a project scoped token. | 07:03 |
| samuelqueiroz | If he has a domain scoped token I know I can just do something like domain_id:%(domain_id)s | 07:04 |
| samuelqueiroz | But what about if he has a project scoped ... | 07:04 |
| *** maurosr has joined #openstack-dev | 07:04 | |
| *** vartom1111111115 has joined #openstack-dev | 07:05 | |
| *** dstanek has quit IRC | 07:08 | |
| *** stevemar has quit IRC | 07:08 | |
| *** Gordonz has quit IRC | 07:14 | |
| *** zyluo has joined #openstack-dev | 07:15 | |
| zyluo | yaguang, ping | 07:15 |
| yaguang | zyluo, pong | 07:16 |
| *** Drankis has joined #openstack-dev | 07:16 | |
| samuelqueiroz | zyluo, yaguang, Hey guys, could you help me with the question I just asked ?? :) | 07:16 |
| zyluo | samuelqueiroz, what's the question? | 07:17 |
| zyluo | samuelqueiroz, just logged in | 07:17 |
| samuelqueiroz | I'm working with a Keystone customized policy.json. I'd like to know how could we get access to the domain_id if the user has a project scoped token. | 07:17 |
| samuelqueiroz | If he has a domain scoped token I know I can just do something like domain_id:%(domain_id)s | 07:17 |
| samuelqueiroz | But what about if he has a project scoped ... | 07:17 |
| *** chandan_kumar has quit IRC | 07:18 | |
| zyluo | can you direct me to some source code? | 07:19 |
| samuelqueiroz | My problem is.. | 07:19 |
| samuelqueiroz | I have a project admin and I'd like to allow him to list all user, but filtered by his domain | 07:20 |
| samuelqueiroz | users* | 07:20 |
| *** chandan_kumar has joined #openstack-dev | 07:21 | |
| samuelqueiroz | If this project admin gets a domain scoped token , if I put "identity:list_users": "rule:admin_required and domain_id:%(domain_id)s" it works | 07:21 |
| *** afazekas has quit IRC | 07:21 | |
| *** gongysh has joined #openstack-dev | 07:22 | |
| samuelqueiroz | But if he has a project scoped token, I dont know how I can access his token's domain_id | 07:22 |
| samuelqueiroz | did u understand? | 07:22 |
| zyluo | yes. I'm looking up the db api part now. | 07:23 |
| samuelqueiroz | :) | 07:23 |
| *** sballe has joined #openstack-dev | 07:24 | |
| *** ijw has quit IRC | 07:25 | |
| *** saju_m has joined #openstack-dev | 07:25 | |
| *** tserong has quit IRC | 07:29 | |
| *** cnesa has joined #openstack-dev | 07:30 | |
| *** gokrokve_ has quit IRC | 07:31 | |
| *** gokrokve has joined #openstack-dev | 07:31 | |
| *** ykhodork has quit IRC | 07:31 | |
| *** denis_makogon has joined #openstack-dev | 07:33 | |
| *** vkozhukalov has quit IRC | 07:33 | |
| *** harlowja_at_home has joined #openstack-dev | 07:33 | |
| *** vartom1111111115 has quit IRC | 07:34 | |
| *** dstanek has joined #openstack-dev | 07:34 | |
| *** MaxV has joined #openstack-dev | 07:34 | |
| *** vartom1111111115 has joined #openstack-dev | 07:35 | |
| *** gokrokve has quit IRC | 07:36 | |
| *** ykhodork has joined #openstack-dev | 07:37 | |
| *** gongysh has quit IRC | 07:37 | |
| *** AlexF has quit IRC | 07:38 | |
| *** yolanda has quit IRC | 07:38 | |
| *** narmitag has quit IRC | 07:38 | |
| *** dstanek has quit IRC | 07:38 | |
| zyluo | samuelqueiroz, if you look at identity/backends/sql.py | 07:40 |
| zyluo | there is a User model defined there | 07:40 |
| zyluo | and list_user has a hint passed to him which is what you defined in your policy.json file | 07:41 |
| *** yolanda has joined #openstack-dev | 07:41 | |
| *** jprovazn has joined #openstack-dev | 07:41 | |
| zyluo | and the User model has "default_project_id" defined in it. | 07:42 |
| *** markwash has joined #openstack-dev | 07:42 | |
| zyluo | therefore maybe passing "default_project_id" in your policy.json file might solve your problem? | 07:42 |
| zyluo | samuelqueiroz, hope this helps | 07:43 |
| samuelqueiroz | zyluo, I tried it out and .. no :/ | 07:43 |
| *** sarob has joined #openstack-dev | 07:43 | |
| *** marcoemorais has joined #openstack-dev | 07:45 | |
| samuelqueiroz | zyluo, do you know the part of the code where the policy is read and the restrictions are verified? | 07:45 |
| samuelqueiroz | It should be before this db part | 07:45 |
| zyluo | hmm it's located somewhere in the wsgi server loading process | 07:46 |
| zyluo | if I remember correctly | 07:46 |
| zyluo | samuelqueiroz, keystone/openstack/common/policy.py | 07:47 |
| *** relaxdiego has joined #openstack-dev | 07:47 | |
| zyluo | But that's common code so look for the part where keystone imports this module. | 07:47 |
| *** afazekas has joined #openstack-dev | 07:48 | |
| *** rraja has quit IRC | 07:48 | |
| *** lcheng_ has quit IRC | 07:49 | |
| *** sarob has quit IRC | 07:49 | |
| zyluo | samuelqueiroz, I think it's keystone/policy/backends/rules.py | 07:49 |
| samuelqueiroz | zyluo, thanks.. I'm gonna take a look at this :) | 07:50 |
| zyluo | samuelqueiroz, k happy hacking! | 07:50 |
| *** epim has quit IRC | 07:51 | |
| *** buzztroll has quit IRC | 07:52 | |
| *** buzztroll has joined #openstack-dev | 07:52 | |
| *** kenperkins has quit IRC | 07:53 | |
| *** ala has joined #openstack-dev | 07:53 | |
| *** csaba is now known as csaba|afk | 07:55 | |
| *** ala has joined #openstack-dev | 07:56 | |
| *** buzztroll has quit IRC | 07:56 | |
| *** gongysh has joined #openstack-dev | 07:59 | |
| *** kamalic has joined #openstack-dev | 07:59 | |
| *** MaxV has quit IRC | 08:03 | |
| *** bhuvan has quit IRC | 08:03 | |
| *** kamalic has quit IRC | 08:04 | |
| *** mkollaro has joined #openstack-dev | 08:04 | |
| *** MaxV has joined #openstack-dev | 08:04 | |
| *** bhuvan has joined #openstack-dev | 08:04 | |
| *** buzztroll has joined #openstack-dev | 08:05 | |
| *** jistr has joined #openstack-dev | 08:06 | |
| *** buzztroll has quit IRC | 08:06 | |
| *** buzztroll has joined #openstack-dev | 08:06 | |
| *** buzztroll has quit IRC | 08:07 | |
| *** buzztroll has joined #openstack-dev | 08:07 | |
| *** dzimine has left #openstack-dev | 08:07 | |
| *** marcoemorais has quit IRC | 08:07 | |
| *** MaxV has quit IRC | 08:09 | |
| *** xingchao has quit IRC | 08:11 | |
| *** bhuvan_ has joined #openstack-dev | 08:12 | |
| *** bhuvan has quit IRC | 08:12 | |
| *** xgsa has joined #openstack-dev | 08:13 | |
| *** kushal has quit IRC | 08:14 | |
| *** nelsnelson has joined #openstack-dev | 08:15 | |
| *** kbrierly has quit IRC | 08:15 | |
| *** CaptTofu has joined #openstack-dev | 08:17 | |
| *** flaper87 has quit IRC | 08:18 | |
| *** flaper87 has joined #openstack-dev | 08:18 | |
| *** florentflament has joined #openstack-dev | 08:18 | |
| *** romcheg1 has joined #openstack-dev | 08:18 | |
| *** kaliningrad1 has joined #openstack-dev | 08:21 | |
| *** shardy_afk is now known as shardy | 08:21 | |
| *** bauzas has joined #openstack-dev | 08:21 | |
| *** bvandenh has joined #openstack-dev | 08:22 | |
| *** CaptTofu has quit IRC | 08:22 | |
| *** xga has joined #openstack-dev | 08:23 | |
| *** viktors has joined #openstack-dev | 08:24 | |
| *** kbrierly has joined #openstack-dev | 08:24 | |
| *** skraynev_afk is now known as skraynev | 08:25 | |
| *** ndipanov has joined #openstack-dev | 08:25 | |
| *** tkay has quit IRC | 08:27 | |
| *** markwash has quit IRC | 08:27 | |
| *** yamahata has quit IRC | 08:27 | |
| *** sahid has joined #openstack-dev | 08:28 | |
| *** kamalic has joined #openstack-dev | 08:28 | |
| *** mdurnosvistov_ has joined #openstack-dev | 08:29 | |
| *** 16WAAPEK8 has joined #openstack-dev | 08:30 | |
| *** 77CABGSAF has joined #openstack-dev | 08:30 | |
| *** sahid has quit IRC | 08:31 | |
| *** kushal has joined #openstack-dev | 08:32 | |
| *** jtomasek has joined #openstack-dev | 08:32 | |
| *** kamalic has quit IRC | 08:33 | |
| *** MaxV has joined #openstack-dev | 08:33 | |
| *** MaxV has quit IRC | 08:34 | |
| *** MaxV has joined #openstack-dev | 08:34 | |
| *** kushal has quit IRC | 08:36 | |
| *** dstanek has joined #openstack-dev | 08:37 | |
| *** gcha has joined #openstack-dev | 08:37 | |
| *** sahid has joined #openstack-dev | 08:38 | |
| *** eglynn has joined #openstack-dev | 08:39 | |
| *** dtantsur has joined #openstack-dev | 08:39 | |
| *** jordanP has joined #openstack-dev | 08:40 | |
| *** loquacities has quit IRC | 08:40 | |
| *** morganfainberg_Z has quit IRC | 08:42 | |
| *** gokrokve has joined #openstack-dev | 08:42 | |
| *** loquacities has joined #openstack-dev | 08:42 | |
| *** rraja has joined #openstack-dev | 08:44 | |
| *** sarob has joined #openstack-dev | 08:44 | |
| *** gokrokve has quit IRC | 08:46 | |
| *** tserong has joined #openstack-dev | 08:47 | |
| *** morganfainberg_Z has joined #openstack-dev | 08:47 | |
| *** morganfainberg_Z is now known as morganfainberg | 08:47 | |
| *** sarob has quit IRC | 08:49 | |
| *** ndipanov has quit IRC | 08:49 | |
| *** dshulyak has joined #openstack-dev | 08:49 | |
| *** gnorth has joined #openstack-dev | 08:52 | |
| *** ygbo has joined #openstack-dev | 08:52 | |
| *** zyluo has quit IRC | 08:53 | |
| *** mkoderer has quit IRC | 08:54 | |
| *** dtantsur has quit IRC | 08:54 | |
| *** dtantsur has joined #openstack-dev | 08:54 | |
| *** mkoderer has joined #openstack-dev | 08:55 | |
| *** gongysh has quit IRC | 08:55 | |
| *** harlowja_at_home has quit IRC | 08:56 | |
| *** markmc has joined #openstack-dev | 08:56 | |
| *** mmagr has joined #openstack-dev | 08:57 | |
| *** mindpixel has joined #openstack-dev | 08:57 | |
| *** paragan has quit IRC | 08:57 | |
| *** dstanek has quit IRC | 08:57 | |
| *** marekd|away is now known as marekd | 08:57 | |
| *** nacim has joined #openstack-dev | 08:57 | |
| *** doude has quit IRC | 08:58 | |
| *** doude has joined #openstack-dev | 08:59 | |
| *** hemna has quit IRC | 08:59 | |
| *** jgallard has joined #openstack-dev | 09:00 | |
| *** ifarkas has joined #openstack-dev | 09:01 | |
| *** praneshp has quit IRC | 09:01 | |
| *** dave-mcnally has joined #openstack-dev | 09:02 | |
| *** mattymo1 has joined #openstack-dev | 09:02 | |
| *** paragan has joined #openstack-dev | 09:03 | |
| *** kaliningrad1 has quit IRC | 09:03 | |
| *** doude has quit IRC | 09:05 | |
| *** vkozhukalov has joined #openstack-dev | 09:05 | |
| *** doude has joined #openstack-dev | 09:05 | |
| *** xga_ has joined #openstack-dev | 09:07 | |
| *** xga has quit IRC | 09:07 | |
| *** jkyle has quit IRC | 09:08 | |
| *** e0ne has joined #openstack-dev | 09:09 | |
| *** doude has quit IRC | 09:10 | |
| *** doude has joined #openstack-dev | 09:10 | |
| *** bhuvan_ has quit IRC | 09:11 | |
| *** jkyle has joined #openstack-dev | 09:12 | |
| *** doude has quit IRC | 09:12 | |
| *** bhuvan has joined #openstack-dev | 09:12 | |
| *** derekh has joined #openstack-dev | 09:13 | |
| *** yassine has joined #openstack-dev | 09:13 | |
| *** jp_at_hp has joined #openstack-dev | 09:13 | |
| *** hemna has joined #openstack-dev | 09:14 | |
| *** mdurnosvistov_ has quit IRC | 09:14 | |
| *** doude has joined #openstack-dev | 09:15 | |
| *** marun has joined #openstack-dev | 09:16 | |
| *** iartarisi has joined #openstack-dev | 09:18 | |
| *** corXi has joined #openstack-dev | 09:20 | |
| *** marun has quit IRC | 09:21 | |
| *** rraja has quit IRC | 09:22 | |
| *** ramishra has quit IRC | 09:22 | |
| gilliard | Is there any Oslo core who could look at https://review.openstack.org/#/c/71559/ please? | 09:24 |
| *** bhuvan has quit IRC | 09:27 | |
| *** macdomat has joined #openstack-dev | 09:27 | |
| *** neeti has quit IRC | 09:27 | |
| *** NikitaKonovalov_ is now known as NikitaKonovalov | 09:27 | |
| *** bhuvan has joined #openstack-dev | 09:28 | |
| *** lucasagomes has joined #openstack-dev | 09:28 | |
| *** ramishra has joined #openstack-dev | 09:28 | |
| *** faramir2 has quit IRC | 09:28 | |
| *** kamalic has joined #openstack-dev | 09:29 | |
| *** dtantsur has quit IRC | 09:32 | |
| *** xchu has quit IRC | 09:32 | |
| *** dtantsur has joined #openstack-dev | 09:32 | |
| *** kamalic has quit IRC | 09:33 | |
| *** xqueralt has joined #openstack-dev | 09:33 | |
| *** amcrn has quit IRC | 09:34 | |
| *** athomas has joined #openstack-dev | 09:35 | |
| *** DinaBelova_ is now known as DinaBelova | 09:35 | |
| *** buzztroll has quit IRC | 09:36 | |
| *** buzztroll has joined #openstack-dev | 09:36 | |
| *** buzztroll has quit IRC | 09:37 | |
| *** nshaikh has quit IRC | 09:38 | |
| *** buzztroll has joined #openstack-dev | 09:39 | |
| *** Amresh_ has joined #openstack-dev | 09:39 | |
| *** buzztroll has quit IRC | 09:39 | |
| *** Amresh_ has left #openstack-dev | 09:40 | |
| *** rraja has joined #openstack-dev | 09:41 | |
| *** doude has quit IRC | 09:42 | |
| *** doude has joined #openstack-dev | 09:42 | |
| *** kris_ha has joined #openstack-dev | 09:43 | |
| *** uaberme has joined #openstack-dev | 09:44 | |
| *** xga_ has quit IRC | 09:44 | |
| *** sarob has joined #openstack-dev | 09:44 | |
| *** xga has joined #openstack-dev | 09:44 | |
| *** iv_m has joined #openstack-dev | 09:45 | |
| *** sarob_ has joined #openstack-dev | 09:46 | |
| *** exed_ has joined #openstack-dev | 09:48 | |
| *** sarob has quit IRC | 09:49 | |
| *** sarob_ has quit IRC | 09:51 | |
| *** rossella_s has joined #openstack-dev | 09:51 | |
| *** saju_m has quit IRC | 09:51 | |
| *** kris_ha is now known as kris_h | 09:52 | |
| *** vkozhukalov has quit IRC | 09:53 | |
| *** gnorth has quit IRC | 09:55 | |
| *** macdomat has quit IRC | 09:56 | |
| *** doude has quit IRC | 09:58 | |
| *** doude has joined #openstack-dev | 09:59 | |
| *** zhiyan is now known as zhiyan_ | 09:59 | |
| *** corXi has quit IRC | 10:01 | |
| *** denis_makogon has quit IRC | 10:03 | |
| *** nshaikh has joined #openstack-dev | 10:04 | |
| *** vkozhukalov has joined #openstack-dev | 10:05 | |
| *** Qu310 has quit IRC | 10:06 | |
| *** danpb has joined #openstack-dev | 10:07 | |
| *** nacim has quit IRC | 10:07 | |
| *** hemna has quit IRC | 10:08 | |
| *** irimi has joined #openstack-dev | 10:09 | |
| *** Qu310 has joined #openstack-dev | 10:10 | |
| *** sahid has quit IRC | 10:12 | |
| *** b3nt_pin has joined #openstack-dev | 10:16 | |
| *** buzztroll has joined #openstack-dev | 10:16 | |
| *** max_lobur_afk is now known as max_lobur | 10:17 | |
| *** CaptTofu has joined #openstack-dev | 10:18 | |
| *** buzztroll has quit IRC | 10:21 | |
| *** nosnos has quit IRC | 10:21 | |
| *** hemna has joined #openstack-dev | 10:21 | |
| *** nacim has joined #openstack-dev | 10:22 | |
| *** CaptTofu has quit IRC | 10:23 | |
| *** romcheg1 has quit IRC | 10:23 | |
| *** BillStokes has quit IRC | 10:24 | |
| *** BillStokes has joined #openstack-dev | 10:24 | |
| *** ccorrigan has joined #openstack-dev | 10:26 | |
| *** alex_xu has quit IRC | 10:28 | |
| *** kamalic has joined #openstack-dev | 10:30 | |
| *** relaxdiego has quit IRC | 10:30 | |
| *** bhuvan has quit IRC | 10:31 | |
| *** bhuvan has joined #openstack-dev | 10:31 | |
| *** asalkeld_ has quit IRC | 10:33 | |
| *** david_lyle_ has quit IRC | 10:33 | |
| *** kamalic has quit IRC | 10:33 | |
| *** kragniz has quit IRC | 10:33 | |
| *** dshulyak has quit IRC | 10:34 | |
| *** dstanek has joined #openstack-dev | 10:34 | |
| *** rraja has quit IRC | 10:35 | |
| *** dstanek has quit IRC | 10:39 | |
| *** kragniz has joined #openstack-dev | 10:40 | |
| *** boris-42_ has quit IRC | 10:43 | |
| *** yamahata has joined #openstack-dev | 10:43 | |
| *** leseb has joined #openstack-dev | 10:44 | |
| *** sarob has joined #openstack-dev | 10:44 | |
| *** dshulyak has joined #openstack-dev | 10:45 | |
| *** mohits has joined #openstack-dev | 10:47 | |
| *** sarob has quit IRC | 10:48 | |
| *** gszasz has joined #openstack-dev | 10:51 | |
| *** tdruiva has quit IRC | 10:52 | |
| *** yaguang has quit IRC | 10:52 | |
| *** ramishra has quit IRC | 10:55 | |
| *** sumanthns has quit IRC | 10:55 | |
| *** romcheg1 has joined #openstack-dev | 10:56 | |
| *** kushal has joined #openstack-dev | 10:58 | |
| *** neeti has joined #openstack-dev | 10:59 | |
| marekd | Jenkins is having some problems today? | 11:03 |
| *** ramishra has joined #openstack-dev | 11:05 | |
| *** sushil_ has joined #openstack-dev | 11:06 | |
| *** gcha has quit IRC | 11:06 | |
| *** sushil_ has quit IRC | 11:11 | |
| *** codee has joined #openstack-dev | 11:11 | |
| *** jgallard has quit IRC | 11:13 | |
| gilliard | gate jobs broken - some discussion in #openstack-infra | 11:13 |
| *** xga has quit IRC | 11:13 | |
| *** rdas has quit IRC | 11:13 | |
| gilliard | I think this is it: https://bugs.launchpad.net/openstack-ci/+bug/1280072 | 11:14 |
| gilliard | sorry - not just gate jobs, is it? | 11:16 |
| *** CaptTofu has joined #openstack-dev | 11:17 | |
| *** buzztroll has joined #openstack-dev | 11:17 | |
| *** vkmc has joined #openstack-dev | 11:18 | |
| *** kushal has quit IRC | 11:18 | |
| *** CaptTofu has quit IRC | 11:18 | |
| *** CaptTofu has joined #openstack-dev | 11:19 | |
| *** CaptTofu has quit IRC | 11:20 | |
| *** kaliningrad1 has joined #openstack-dev | 11:20 | |
| *** CaptTofu has joined #openstack-dev | 11:20 | |
| *** kolesovdv has joined #openstack-dev | 11:21 | |
| *** CaptTofu has quit IRC | 11:21 | |
| *** CaptTofu has joined #openstack-dev | 11:21 | |
| *** buzztroll has quit IRC | 11:21 | |
| *** xga has joined #openstack-dev | 11:22 | |
| *** sushil_ has joined #openstack-dev | 11:23 | |
| *** CaptTofu has quit IRC | 11:24 | |
| *** nacim has quit IRC | 11:24 | |
| marekd | gilliard: recheck no bug 1280072 would help? | 11:25 |
| *** corXi has joined #openstack-dev | 11:25 | |
| tristanC | it seems swift download add extra data to the image stored | 11:26 |
| gilliard | marekd: don't think it would - my understanding is that *dsvm* jobs will still fail. | 11:27 |
| *** romcheg1 has left #openstack-dev | 11:27 | |
| *** jhesketh__ has quit IRC | 11:27 | |
| marekd | gilliard: ok, so we can only wait for infra to fix it. thanks. | 11:27 |
| *** CaptTofu has joined #openstack-dev | 11:27 | |
| *** Nikolay_St has quit IRC | 11:29 | |
| *** kamalic has joined #openstack-dev | 11:30 | |
| *** mkollaro has quit IRC | 11:31 | |
| *** CaptTofu has quit IRC | 11:32 | |
| *** rfolco has joined #openstack-dev | 11:32 | |
| *** CaptTofu has joined #openstack-dev | 11:32 | |
| *** ArxCruz has joined #openstack-dev | 11:34 | |
| *** kamalic has quit IRC | 11:35 | |
| *** pcm_ has joined #openstack-dev | 11:35 | |
| *** lazy_prince has left #openstack-dev | 11:35 | |
| *** yamahata has quit IRC | 11:37 | |
| *** pcm_ has quit IRC | 11:37 | |
| *** mgoddard has quit IRC | 11:38 | |
| *** mgoddard_ has joined #openstack-dev | 11:38 | |
| *** pcm_ has joined #openstack-dev | 11:38 | |
| *** alagalah has joined #openstack-dev | 11:39 | |
| *** d0ugal has quit IRC | 11:41 | |
| *** d0ugal has joined #openstack-dev | 11:41 | |
| *** fandi has quit IRC | 11:41 | |
| *** alexpilotti has joined #openstack-dev | 11:41 | |
| *** dims_ has quit IRC | 11:42 | |
| *** nshaikh has quit IRC | 11:43 | |
| *** sarob has joined #openstack-dev | 11:44 | |
| *** jruzicka has joined #openstack-dev | 11:47 | |
| *** sarob has quit IRC | 11:49 | |
| *** dims_ has joined #openstack-dev | 11:54 | |
| *** sahid has joined #openstack-dev | 11:55 | |
| *** boris-42_ has joined #openstack-dev | 11:56 | |
| *** paragan has quit IRC | 11:56 | |
| *** chandan_kumar has quit IRC | 11:58 | |
| *** codee has quit IRC | 12:02 | |
| *** comay has quit IRC | 12:02 | |
| *** a1|away is now known as JelleB | 12:02 | |
| *** vkmc_ has joined #openstack-dev | 12:04 | |
| *** vkmc has quit IRC | 12:07 | |
| *** vkmc_ is now known as vkmc | 12:08 | |
| *** vkmc has joined #openstack-dev | 12:08 | |
| *** fc__ has quit IRC | 12:10 | |
| *** markvoelker has quit IRC | 12:12 | |
| *** fc__ has joined #openstack-dev | 12:13 | |
| *** vkmc has quit IRC | 12:13 | |
| *** neeti has quit IRC | 12:15 | |
| *** buzztroll has joined #openstack-dev | 12:17 | |
| *** ifarkas has quit IRC | 12:18 | |
| *** leseb has quit IRC | 12:20 | |
| *** ifarkas has joined #openstack-dev | 12:20 | |
| *** buzztroll has quit IRC | 12:21 | |
| *** FunnyLookinHat has joined #openstack-dev | 12:23 | |
| *** corXi has quit IRC | 12:26 | |
| *** mindpixel has quit IRC | 12:26 | |
| *** vkmc has joined #openstack-dev | 12:30 | |
| *** kamalic has joined #openstack-dev | 12:31 | |
| *** corXi has joined #openstack-dev | 12:33 | |
| *** corXi has quit IRC | 12:33 | |
| tellesnobrega | dolphm: hi, can you give me a hand with a token question | 12:33 |
| *** corXi has joined #openstack-dev | 12:33 | |
| *** nmagnezi has joined #openstack-dev | 12:33 | |
| *** mrunge has quit IRC | 12:35 | |
| *** yamahata has joined #openstack-dev | 12:35 | |
| *** dstanek has joined #openstack-dev | 12:35 | |
| *** kamalic has quit IRC | 12:36 | |
| *** leseb has joined #openstack-dev | 12:36 | |
| *** nacim has joined #openstack-dev | 12:39 | |
| *** dstanek has quit IRC | 12:40 | |
| *** yamahata has quit IRC | 12:40 | |
| *** sgordon has joined #openstack-dev | 12:41 | |
| *** radez_g0n3 is now known as radez | 12:41 | |
| *** gcha has joined #openstack-dev | 12:42 | |
| alex-foo | SergeyLukjanov: mind reviewing https://review.openstack.org/#/c/72751/ again please? thanks | 12:44 |
| alex-foo | the tests all ran for a change, woohoo! | 12:44 |
| *** sarob has joined #openstack-dev | 12:44 | |
| SergeyLukjanov | alex-foo, sure, I'll take a look on it | 12:47 |
| *** raildo_ has joined #openstack-dev | 12:48 | |
| *** capri has quit IRC | 12:49 | |
| *** sarob has quit IRC | 12:49 | |
| *** tellesnobrega_ has joined #openstack-dev | 12:50 | |
| *** capri has joined #openstack-dev | 12:50 | |
| *** corXi has quit IRC | 12:50 | |
| *** mohits has quit IRC | 12:51 | |
| *** tnobrega has joined #openstack-dev | 12:52 | |
| *** promulo has joined #openstack-dev | 12:52 | |
| alex-foo | SergeyLukjanov: thanks | 12:53 |
| *** tellesnobrega_ has quit IRC | 12:54 | |
| *** tnobrega has quit IRC | 12:54 | |
| *** aditirav has quit IRC | 12:54 | |
| *** yamahata has joined #openstack-dev | 12:56 | |
| *** alagalah has quit IRC | 12:56 | |
| *** AMike has quit IRC | 12:58 | |
| *** dkranz has quit IRC | 12:59 | |
| *** eglynn is now known as eglynn-lunch | 13:02 | |
| *** mwagner_lap has joined #openstack-dev | 13:03 | |
| *** markvoelker has joined #openstack-dev | 13:03 | |
| *** yeylon__ has joined #openstack-dev | 13:05 | |
| *** lucasagomes is now known as lucas-hungry | 13:06 | |
| *** balar has quit IRC | 13:06 | |
| *** balar has joined #openstack-dev | 13:06 | |
| *** b3nt_pin is now known as beagles | 13:06 | |
| *** Birk has joined #openstack-dev | 13:07 | |
| *** yamahata has quit IRC | 13:07 | |
| *** kalin has joined #openstack-dev | 13:07 | |
| *** kaliningrad1 has quit IRC | 13:08 | |
| *** mkollaro has joined #openstack-dev | 13:08 | |
| Birk | Someone having problems with visualising special characters in subnets name on horizon? If you edit a subnet the page shows correctly the special characters, but when listing the subnets on the network overview page the subnet name with special characters get strange. | 13:11 |
| *** kalin has quit IRC | 13:11 | |
| *** kaliningrad1 has joined #openstack-dev | 13:11 | |
| *** kaliningrad1 is now known as kaliningrad2 | 13:12 | |
| *** kaliningrad2 has joined #openstack-dev | 13:12 | |
| *** kaliningrad2 is now known as pot | 13:12 | |
| *** pot is now known as t112 | 13:13 | |
| *** tmclaugh[work] has joined #openstack-dev | 13:14 | |
| *** dkranz has joined #openstack-dev | 13:15 | |
| *** buzztroll has joined #openstack-dev | 13:17 | |
| *** IanGovett has joined #openstack-dev | 13:18 | |
| *** dhellmann_ is now known as dhellmann | 13:18 | |
| *** dhellmann is now known as dhellmann_ | 13:18 | |
| *** dhellmann_ is now known as dhellmann | 13:18 | |
| *** jgallard has joined #openstack-dev | 13:19 | |
| *** jdob has joined #openstack-dev | 13:21 | |
| *** buzztroll has quit IRC | 13:21 | |
| *** dims_ has quit IRC | 13:24 | |
| *** e0ne has quit IRC | 13:24 | |
| *** e0ne has joined #openstack-dev | 13:25 | |
| *** markmcclain has quit IRC | 13:25 | |
| *** dims_ has joined #openstack-dev | 13:26 | |
| *** thomasem has joined #openstack-dev | 13:27 | |
| *** corXi has joined #openstack-dev | 13:29 | |
| *** mgoddard_ has quit IRC | 13:29 | |
| *** Birk has quit IRC | 13:30 | |
| *** corXi has quit IRC | 13:31 | |
| *** kamalic has joined #openstack-dev | 13:32 | |
| *** annegentle has quit IRC | 13:32 | |
| *** vkozhukalov has quit IRC | 13:34 | |
| *** nmarchenko has quit IRC | 13:35 | |
| *** radez is now known as radez_g0n3 | 13:36 | |
| *** kamalic has quit IRC | 13:37 | |
| *** yamahata has joined #openstack-dev | 13:38 | |
| *** e0ne has quit IRC | 13:38 | |
| *** dstanek has joined #openstack-dev | 13:38 | |
| *** tdruiva has joined #openstack-dev | 13:38 | |
| *** galstrom_zzz is now known as galstrom | 13:40 | |
| *** kamalic has joined #openstack-dev | 13:40 | |
| *** galstrom is now known as galstrom_zzz | 13:40 | |
| *** browne has joined #openstack-dev | 13:41 | |
| *** danielbruno has joined #openstack-dev | 13:43 | |
| *** sarob has joined #openstack-dev | 13:44 | |
| *** kamalic has quit IRC | 13:45 | |
| *** iv_m has quit IRC | 13:45 | |
| *** jecarey has quit IRC | 13:46 | |
| *** dbalog has joined #openstack-dev | 13:46 | |
| *** YorikSar has quit IRC | 13:46 | |
| *** rohitk has quit IRC | 13:46 | |
| mflobo | what happend when you try to execute a nonexisting test file using TOX tool? | 13:47 |
| *** vkozhukalov has joined #openstack-dev | 13:47 | |
| mflobo | I think I have a problem with it https://bugs.launchpad.net/python-neutronclient/+bug/1280290 | 13:48 |
| *** vladikr has joined #openstack-dev | 13:48 | |
| *** paragan has joined #openstack-dev | 13:48 | |
| *** vladikr has quit IRC | 13:49 | |
| *** dstanek has quit IRC | 13:50 | |
| thomasem | dhellmann, ping | 13:52 |
| *** tdruiva has quit IRC | 13:52 | |
| dhellmann | thomasem: pong | 13:52 |
| thomasem | dhellmann, Hey man! | 13:53 |
| thomasem | dhellmann, I wanted to pick your brain really quick if you have a moment. | 13:53 |
| dhellmann | I have the oslo team meeting in about 5 minutes | 13:53 |
| *** doug-fish has joined #openstack-dev | 13:53 | |
| dhellmann | so if it's quick, go for it, otherwise in about an hour? | 13:53 |
| thomasem | dhellmann, Ahhh, okay - when would be a good time? It's actually regarding oslo.messaging. Yeah, in an hour sounds great. | 13:54 |
| dhellmann | thomasem: ok | 13:54 |
| thomasem | :) cheers | 13:54 |
| markmc | thomasem, can I help re: oslo.messaging ? | 13:54 |
| tellesnobrega | ayoung: hi, im trying to insert a new field to the token, can you give me a hand? | 13:55 |
| thomasem | markmc, Oh yeah, maybe! We're in the process of moving some hypervisor configuration stores outside of the hypervisor to add flexibility. So, a few options have been rolling around and I wanted to be sure whatever it was we contributed to upstream so everyone could benefit. | 13:56 |
| *** dvarga has joined #openstack-dev | 13:56 | |
| markmc | thomasem, you mean moving configuration from nova.conf to something else ? | 13:57 |
| thomasem | markmc, nope. So, currently in some hypervisors, like XenStore, the instances' network configurations live there. | 13:57 |
| *** tsekiyama has joined #openstack-dev | 13:58 | |
| *** gordc has joined #openstack-dev | 13:58 | |
| markmc | thomasem, there? | 13:58 |
| *** achampion has quit IRC | 13:58 | |
| markmc | thomasem, maybe nevermind - what's the question? | 13:58 |
| *** smcavoy has joined #openstack-dev | 13:58 | |
| markmc | thomasem, then I can figure out how much context I need :) | 13:58 |
| *** tsekiyama has quit IRC | 13:59 | |
| thomasem | markmc, hehe yeah. So, I'm curious about the current abilities of oslo.messaging and whether it can multicast notifications to multiple sources, not just the message queue. | 13:59 |
| *** dstanek has joined #openstack-dev | 13:59 | |
| *** lbragstad has quit IRC | 13:59 | |
| markmc | thomasem, yes it can, you'd just need to add a notifications driver for whatever extra source you need | 13:59 |
| thomasem | markmc, And I can essentially mirror the notifications via the same Transport? | 14:00 |
| *** bvandenh has quit IRC | 14:00 | |
| smcavoy | Hello. My nova metadata api is not returning anything but 404's even for 'http://169.254.169.254/openstack' I am wondering where it queries for this data so I can do some further troubleshooting. Anyone know what needs to be working for the meta data service to return proper data? So far I see just the conductor | 14:00 |
| thomasem | So one copy would go to the original AMQP service, and the other copy would go somewhere else? | 14:00 |
| markmc | ok, if you want it to go to multiple messaging transports | 14:01 |
| markmc | e.g. multiple brokers, or e.g. rabbit+zmq | 14:01 |
| thomasem | markmc, yeah, that was my concern. | 14:01 |
| markmc | then we don't have support for that right now | 14:01 |
| markmc | but shouldn't be a big deal to add | 14:01 |
| thomasem | Sure, that'd be one example. In this case it could be etcd/redis. | 14:01 |
| markmc | well, that's easier | 14:01 |
| markmc | just add an etcd/redis notifications driver | 14:01 |
| *** stevemar has joined #openstack-dev | 14:01 | |
| *** irimi has quit IRC | 14:01 | |
| markmc | not a message transport | 14:01 |
| thomasem | markmc, Okay, so the Transport is specifically for messaging? | 14:02 |
| thomasem | markmc, hehe sorry I just started looking at it yesterday morning after walking the nova notification calls. :P | 14:02 |
| markmc | yes, which you don't need unless you want e.g. nova RPC calls to go over etcd/redis too | 14:02 |
| *** paragan has quit IRC | 14:02 | |
| thomasem | markmc, nope, I wouldn't make any use of that | 14:02 |
| markmc | then it's easy | 14:02 |
| thomasem | markmc, awesome? so then I suppose the routing notifier stuff would be what I'd use? | 14:03 |
| markmc | not unless you want to conditionally route them | 14:03 |
| markmc | notification_drivers = messaging, redis | 14:03 |
| markmc | that works fine | 14:03 |
| thomasem | Ohhh, neat. | 14:03 |
| thomasem | Well then, that makes life much easier. :) | 14:03 |
| *** afazekas has quit IRC | 14:04 | |
| thomasem | At a cursory glance I wasn't seeing it looping through drivers in the code, so that's why I was curious and figured I ought to ask the ones who've been working on it. | 14:04 |
| *** andreykurilin has left #openstack-dev | 14:04 | |
| *** tdruiva has joined #openstack-dev | 14:04 | |
| *** ala has quit IRC | 14:05 | |
| thomasem | markmc, and yeah, we'd probably want to apply some filters to the routing, hehe. | 14:05 |
| *** xga has quit IRC | 14:05 | |
| thomasem | markmc, anyway, thanks for the help - I'll dig in further. :) | 14:06 |
| markmc | thomasem, np | 14:06 |
| *** lucas-hungry is now known as lucasagomes | 14:10 | |
| *** kamalic has joined #openstack-dev | 14:10 | |
| *** mfer has joined #openstack-dev | 14:10 | |
| *** yamahata has quit IRC | 14:12 | |
| *** dstanek has quit IRC | 14:13 | |
| *** alagalah has joined #openstack-dev | 14:14 | |
| *** mriedem has joined #openstack-dev | 14:14 | |
| *** otherwiseguy has quit IRC | 14:14 | |
| *** gszasz has quit IRC | 14:14 | |
| *** neelashah has joined #openstack-dev | 14:14 | |
| *** kamalic has quit IRC | 14:14 | |
| *** annegentle has joined #openstack-dev | 14:14 | |
| *** yamahata has joined #openstack-dev | 14:15 | |
| stevemar | marekd, ping | 14:16 |
| *** vartom1111111115 has quit IRC | 14:16 | |
| *** afazekas has joined #openstack-dev | 14:16 | |
| *** vladikr has joined #openstack-dev | 14:16 | |
| *** prad has joined #openstack-dev | 14:17 | |
| *** buzztroll has joined #openstack-dev | 14:17 | |
| *** sarob has quit IRC | 14:17 | |
| *** joesavak has joined #openstack-dev | 14:19 | |
| *** dstanek has joined #openstack-dev | 14:19 | |
| *** kevinconway has joined #openstack-dev | 14:20 | |
| *** radez_g0n3 is now known as radez | 14:20 | |
| *** zhiyan_ is now known as zhiyan | 14:21 | |
| *** wchrisj has joined #openstack-dev | 14:21 | |
| dave-mcnally | anyone available to give a final approval to https://review.openstack.org/#/c/63170/ ? | 14:22 |
| *** buzztroll has quit IRC | 14:22 | |
| *** jruzicka_ has joined #openstack-dev | 14:22 | |
| *** jruzicka has quit IRC | 14:23 | |
| *** 77CABGSAF is now known as I159 | 14:23 | |
| *** jecarey has joined #openstack-dev | 14:24 | |
| *** lbragstad has joined #openstack-dev | 14:24 | |
| *** mmagr has quit IRC | 14:24 | |
| *** alagalah has quit IRC | 14:25 | |
| *** bswartz has quit IRC | 14:26 | |
| *** baoli has joined #openstack-dev | 14:27 | |
| marekd | stevemar: pong. | 14:27 |
| *** jkyle has quit IRC | 14:27 | |
| *** baoli has quit IRC | 14:27 | |
| *** xga has joined #openstack-dev | 14:28 | |
| *** baoli has joined #openstack-dev | 14:28 | |
| stevemar | marekd, was going to tell you why jenkins is failing, but you seem to have figure it out :) | 14:29 |
| marekd | i do :/ | 14:29 |
| marekd | i did* | 14:29 |
| *** MaxV has quit IRC | 14:30 | |
| marekd | stevemar: you meant https://bugs.launchpad.net/openstack-ci/+bug/1280072 ? | 14:30 |
| *** MaxV has joined #openstack-dev | 14:30 | |
| *** caleb_ has joined #openstack-dev | 14:31 | |
| *** corXi has joined #openstack-dev | 14:32 | |
| *** READ10 has joined #openstack-dev | 14:32 | |
| *** topol has joined #openstack-dev | 14:32 | |
| *** tdruiva has quit IRC | 14:33 | |
| *** jkyle has joined #openstack-dev | 14:33 | |
| *** DinaBelova is now known as DinaBelova_ | 14:34 | |
| *** tdruiva has joined #openstack-dev | 14:34 | |
| stevemar | marekd, yep, that one | 14:34 |
| *** jeckersb_gone is now known as jeckersb | 14:34 | |
| *** dprince has joined #openstack-dev | 14:35 | |
| *** DinaBelova_ is now known as DinaBelova | 14:35 | |
| *** xga has quit IRC | 14:36 | |
| *** crandquist has quit IRC | 14:37 | |
| *** e0ne has joined #openstack-dev | 14:38 | |
| *** jkyle has quit IRC | 14:39 | |
| *** vijendar has joined #openstack-dev | 14:41 | |
| *** yamahata has quit IRC | 14:41 | |
| marekd | stevemar: my py26,py27 tests are passing, so go ahead and feel free to do a deep code-review :-) | 14:41 |
| *** yamahata has joined #openstack-dev | 14:43 | |
| *** sarob has joined #openstack-dev | 14:44 | |
| *** dtantsur has quit IRC | 14:45 | |
| *** xga has joined #openstack-dev | 14:45 | |
| *** kbrierly has quit IRC | 14:45 | |
| *** kbrierly has joined #openstack-dev | 14:45 | |
| *** otherwiseguy has joined #openstack-dev | 14:46 | |
| dstanek | marekd: were you able to resubmit the review that we were talking about yesterday? | 14:46 |
| marekd | dstanek: auth method failing? Yes, stevemar helped with that. | 14:46 |
| *** ala has joined #openstack-dev | 14:47 | |
| marekd | dstanek: stevemar: I will really have to switch to your timezone...saves a lot of time when having problems....:/ | 14:47 |
| dstanek | marekd: excellent. did you end up patching the config object or did you do something else? | 14:47 |
| dstanek | marekd: what timezone are you in? | 14:47 |
| *** sumanthns has joined #openstack-dev | 14:48 | |
| *** kamalic has joined #openstack-dev | 14:48 | |
| *** cagrev has joined #openstack-dev | 14:48 | |
| marekd | dstanek: Change keystone/tests/test_overrides.conf and adjust the list of auth modules | 14:48 |
| marekd | dstanek: (add 'federation') | 14:48 |
| *** cfriesen has joined #openstack-dev | 14:48 | |
| *** achampion has joined #openstack-dev | 14:48 | |
| *** byeager has joined #openstack-dev | 14:49 | |
| marekd | dstanek: i am in GMT+1 - France/Switzerland. | 14:49 |
| *** sarob has quit IRC | 14:49 | |
| samuelqueiroz | Hey, I'm working with a Keystone customized policy and I need some help. Is there any Keystoner here ? :) | 14:49 |
| *** kamalic has quit IRC | 14:49 | |
| *** jnoller has joined #openstack-dev | 14:50 | |
| *** zaneb has quit IRC | 14:51 | |
| *** crandquist has joined #openstack-dev | 14:52 | |
| *** zaneb has joined #openstack-dev | 14:52 | |
| samuelqueiroz | stevemar, marekd, ping | 14:53 |
| stevemar | samuelqueiroz, pong | 14:53 |
| marekd | samuelqueiroz: elo | 14:53 |
| samuelqueiroz | hey :) r u keystoners? | 14:53 |
| marekd | samuelqueiroz: stevemar is :-) | 14:54 |
| *** aeperezt has joined #openstack-dev | 14:54 | |
| samuelqueiroz | hey stevemar, I'm working with a Keystone customized policy and I need some help : ) | 14:54 |
| stevemar | samuelqueiroz, whats up, i'll see if i can help | 14:54 |
| samuelqueiroz | stevemar, in my installation I have project admin and I want to allow him to list all users bu filtered by his domain | 14:54 |
| samuelqueiroz | stevemar, if he has a domain scoped token I just have to write: "identity:list_users": "rule:admin_required and domain_id:%(domain_id)s" | 14:55 |
| samuelqueiroz | stevemar, but what about if he has a project scoped token? How can I retrieve his token's domain_id information ? | 14:56 |
| *** jckasper has quit IRC | 14:56 | |
| *** FunnyLookinHat has quit IRC | 14:57 | |
| *** peristeri has joined #openstack-dev | 14:58 | |
| *** edmund has quit IRC | 14:58 | |
| *** jkyle has joined #openstack-dev | 14:58 | |
| *** tsekiyama has joined #openstack-dev | 14:58 | |
| *** hdd has joined #openstack-dev | 15:00 | |
| stevemar | samuelqueiroz, hmm, tricky, so project admin can only list users in his domain | 15:00 |
| *** mlegault_ has joined #openstack-dev | 15:00 | |
| stevemar | rule:admin_required has to be there, but if you get a project scoped token, then what | 15:00 |
| stevemar | samuelqueiroz, that's a good one, dolphm, bknudson have any ideas? | 15:02 |
| *** xga has quit IRC | 15:02 | |
| stevemar | samuelqueiroz, what's the policy for listing projects? | 15:02 |
| *** mlegault__ has joined #openstack-dev | 15:03 | |
| samuelqueiroz | stevemar, a project admin (as a project member) can only list his own projects | 15:03 |
| *** mmagr has joined #openstack-dev | 15:04 | |
| samuelqueiroz | stevemar, we think he manages that project and he shouldn't have access to other project's ids | 15:04 |
| *** VINOD_ has joined #openstack-dev | 15:04 | |
| *** mgagne has joined #openstack-dev | 15:04 | |
| samuelqueiroz | stevemar, because of the fact he cant do anything with other projects than the ones he manages :) | 15:04 |
| *** nmagnezi has quit IRC | 15:06 | |
| *** mlegault_ has quit IRC | 15:06 | |
| *** jprovazn is now known as jprovazn_afk | 15:07 | |
| *** avishay_ has quit IRC | 15:07 | |
| *** parkerr_ has joined #openstack-dev | 15:07 | |
| stevemar | samuelqueiroz, let me poke around for a bit, maybe there is an easy way | 15:08 |
| *** bhuvan has quit IRC | 15:08 | |
| stevemar | samuelqueiroz, do you have any paste/logs steps that you've done? | 15:09 |
| *** bhuvan has joined #openstack-dev | 15:10 | |
| *** bhuvan has quit IRC | 15:10 | |
| *** bhuvan has joined #openstack-dev | 15:10 | |
| samuelqueiroz | stevemar, no atm :/ but I can describe it briefly on a pastebin.com file or even here if u want | 15:10 |
| viktors | bnemec: hi | 15:11 |
| *** andreykurilin has joined #openstack-dev | 15:11 | |
| *** Gordonz has joined #openstack-dev | 15:12 | |
| bnemec | viktors: hi | 15:12 |
| stevemar | samuelqueiroz, whatever is easier | 15:12 |
| viktors | bnemec: you removed dependencies between oslo test recently, yes? | 15:12 |
| bnemec | viktors: Yeah, there were some issues that came up as part of the parallel testing effort. | 15:13 |
| *** erkules_ is now known as erkules | 15:14 | |
| *** zyluo has joined #openstack-dev | 15:14 | |
| *** kbringard has joined #openstack-dev | 15:15 | |
| *** krtaylor has quit IRC | 15:16 | |
| *** ifarkas has quit IRC | 15:17 | |
| samuelqueiroz | Briefly, it's here http://pastebin.com/jNgKDQzA | 15:17 |
| *** boris-42_ has quit IRC | 15:17 | |
| samuelqueiroz | stevemar, ^ | 15:17 |
| *** buzztroll has joined #openstack-dev | 15:17 | |
| *** krtaylor has joined #openstack-dev | 15:17 | |
| stevemar | samuelqueiroz, thanks dude | 15:17 |
| marekd | stevemar: "recheck bug 1280072" is a remedy for my failing tests? | 15:18 |
| *** ifarkas has joined #openstack-dev | 15:19 | |
| stevemar | marekd, not yet, theres no fix for it | 15:19 |
| stevemar | marekd, hopefully soon, no one is getting anything in atm | 15:19 |
| stevemar | samuelqueiroz, silly question, is the reason you want the admin to only see users on his domain because he shouldn't see others? because you can always use a query filter for filtering by domain_id | 15:20 |
| *** zyluo has left #openstack-dev | 15:20 | |
| *** nshaikh has joined #openstack-dev | 15:21 | |
| samuelqueiroz | stevemar, in fact ,we use this function when we have the following situation: a project admin wants to add a new user to his project, but this user is already registered on his domain (in other project) | 15:21 |
| *** buzztroll has quit IRC | 15:21 | |
| marekd | ok, i will later recheck the tests... | 15:22 |
| marekd | stevemar: ^^ | 15:22 |
| samuelqueiroz | stevemar, so he can look for the user he wants without 'disturbing' the domain admin | 15:22 |
| *** kenperkins has joined #openstack-dev | 15:23 | |
| *** jdob has quit IRC | 15:23 | |
| *** jdob has joined #openstack-dev | 15:23 | |
| samuelqueiroz | stevemar, we think giving the possibility to list all the cloud users can give him too much information in whose he'll not use and shouldn't have access to | 15:24 |
| *** neelashah has quit IRC | 15:24 | |
| *** iartarisi has quit IRC | 15:24 | |
| *** jmontemayor has joined #openstack-dev | 15:24 | |
| *** dave_tucker_zzz is now known as dave_tucker | 15:25 | |
| *** jckasper has joined #openstack-dev | 15:25 | |
| jdennis | ayoung: having trouble running tox in keystone to generate the doc, doc/README.rst says to run "tox -e docs' from the root direcotry | 15:25 |
| *** jmontemayor has quit IRC | 15:25 | |
| *** lazy has joined #openstack-dev | 15:26 | |
| jdennis | ayoung: but it fails with an unsatisfed tox version due to minversion = 1.6 in tox.ini | 15:26 |
| *** jmontemayor has joined #openstack-dev | 15:26 | |
| *** lazy is now known as Guest17996 | 15:26 | |
| *** sumanthns has quit IRC | 15:26 | |
| jdennis | ayoung: there is no requirement for a tox version in either requirements nor test_requirements. why? | 15:26 |
| *** bswartz has joined #openstack-dev | 15:27 | |
| jdennis | ayoung: if I add tox>=1.6 in test_requirements and rebuild my venv then tox fails because it can't find the definition of '{posargs]' in the tox.ini file, which indeed does not seem to be defined anywhere | 15:28 |
| *** neelashah has joined #openstack-dev | 15:28 | |
| *** FunnyLookinHat has joined #openstack-dev | 15:30 | |
| samuelqueiroz | stevemar, I'm at lunch time now... and I'm gonna have a meeting just after my lunch.. I think I'll be back in 3 hours and I'll call you again :) | 15:30 |
| samuelqueiroz | stevemar, does it work for u ? | 15:30 |
| *** jruzicka_ has quit IRC | 15:31 | |
| *** jkyle has quit IRC | 15:31 | |
| *** yeylon__ has quit IRC | 15:31 | |
| *** corXi has quit IRC | 15:32 | |
| *** dtantsur has joined #openstack-dev | 15:33 | |
| *** david-lyle has joined #openstack-dev | 15:33 | |
| *** carlp has joined #openstack-dev | 15:34 | |
| *** samuelqueiroz is now known as samuelqueiroz-af | 15:35 | |
| stevemar | samuelqueiroz-af, cool, hopefully i have better news | 15:35 |
| *** jdob has quit IRC | 15:36 | |
| samuelqueiroz-af | stevemar, thx.. see u :-) | 15:36 |
| *** mjfork has joined #openstack-dev | 15:36 | |
| *** jdob has joined #openstack-dev | 15:36 | |
| *** carl_baldwin has joined #openstack-dev | 15:39 | |
| *** NikitaKonovalov is now known as NikitaKonovalov_ | 15:43 | |
| *** tellesnobrega_ has joined #openstack-dev | 15:43 | |
| *** kbrierly has quit IRC | 15:43 | |
| *** kbrierly has joined #openstack-dev | 15:44 | |
| *** matrohon has quit IRC | 15:44 | |
| *** sarob has joined #openstack-dev | 15:44 | |
| *** kevinconway has quit IRC | 15:45 | |
| *** kbringard1 has joined #openstack-dev | 15:45 | |
| *** kbringard has quit IRC | 15:46 | |
| *** kbringard1 is now known as kbringard | 15:46 | |
| *** tellesnobrega_ has quit IRC | 15:46 | |
| *** 16WAAPEK8 is now known as I159_ | 15:47 | |
| ayoung | jdennis, hmmmm | 15:47 |
| *** NikitaKonovalov_ is now known as NikitaKonovalov | 15:48 | |
| ayoung | let me try and see | 15:48 |
| jdennis | ayoung: fwiw I got the doc built by using the command in tox.ini directly "python setup.py build_sphinx" but that doesn't seem the right way to do, just a workaround | 15:49 |
| *** sarob has quit IRC | 15:49 | |
| ayoung | jdennis, I wonder if this is due to the base system....something Ubuntu specific? I have to admit, I have not tried building docs | 15:49 |
| *** ikhan has joined #openstack-dev | 15:50 | |
| *** schwicke has joined #openstack-dev | 15:50 | |
| kbringard | ikhan: glad to see you made it ;-) | 15:50 |
| ayoung | I got a success with lots of warnings | 15:50 |
| ikhan | :D | 15:50 |
| ayoung | but let me try on a clean branch and sandbox | 15:50 |
| *** jkyle has joined #openstack-dev | 15:50 | |
| *** pasquier-s has quit IRC | 15:51 | |
| *** rascasoft has joined #openstack-dev | 15:51 | |
| *** bdpayne has joined #openstack-dev | 15:51 | |
| *** markwash has joined #openstack-dev | 15:52 | |
| ayoung | jdennis, you on F20? | 15:52 |
| *** KurtMartin has joined #openstack-dev | 15:52 | |
| *** comay has joined #openstack-dev | 15:52 | |
| *** gcha has quit IRC | 15:53 | |
| jdennis | f19, I did force tox>=1.6 to be installed in my .venv by adding it to test_requirments | 15:53 |
| jdennis | at which point I got the unknown {posargs} error, posargs is used in tox.ini | 15:54 |
| *** gokrokve has joined #openstack-dev | 15:54 | |
| *** markmcclain has joined #openstack-dev | 15:54 | |
| *** markmcclain has quit IRC | 15:54 | |
| *** markmcclain has joined #openstack-dev | 15:54 | |
| *** tjones has joined #openstack-dev | 15:55 | |
| ayoung | tox should be picked up from the base os, as that is what you run from the command line, unless you are doing tox from inside a venv? | 15:55 |
| ikhan | can I get openstack/cinder running on centos 5.8? considering it has python 2.4.3 | 15:55 |
| jdennis | ayoung: then how can tox.ini require a specific version? | 15:56 |
| ayoung | No idea | 15:56 |
| *** tiamar has joined #openstack-dev | 15:56 | |
| ayoung | its all magic to me. I still run run_tests.sh | 15:56 |
| *** comstud is now known as bearhands | 15:56 | |
| *** mflobo has quit IRC | 15:56 | |
| *** thedodd has joined #openstack-dev | 15:56 | |
| *** sumanthns has joined #openstack-dev | 15:57 | |
| *** xarses has quit IRC | 15:57 | |
| jdennis | ayoung: it's magic to me too, I still use run_tests.sh, are we supposed to be doing something else now? I'm uncomforatable I don't understand things get invoked and loaded | 15:57 |
| *** vladikr has quit IRC | 15:59 | |
| *** tiamar has left #openstack-dev | 15:59 | |
| *** tiamar has joined #openstack-dev | 16:00 | |
| *** mikeoutland has joined #openstack-dev | 16:00 | |
| *** edmund has joined #openstack-dev | 16:00 | |
| lbragstad | jdennis: I think there was a bug open for the tox issue... | 16:01 |
| lbragstad | did you happen to see it? | 16:01 |
| *** Ruetobas has quit IRC | 16:01 | |
| jdennis | lbragstad: no, haven't searched bugs yet, just assumed it was cockpit error on my part :-) | 16:01 |
| *** kolesovdv has quit IRC | 16:02 | |
| lbragstad | jdennis: I'll have to read back a bit, https://bugs.launchpad.net/openstack-ci/+bug/1274135 | 16:02 |
| bknudson | jdennis: I've got tox 1.6.1 imported from /usr/local/lib/python2.7/dist-packages/tox/__init__.pyc | 16:02 |
| bknudson | and virtualenv==1.11 | 16:02 |
| *** e0ne_ has joined #openstack-dev | 16:02 | |
| lbragstad | jdennis: what bknudson has is what fixed my problems too, ran into that a couple weeks ago | 16:02 |
| *** thouveng has quit IRC | 16:03 | |
| *** Ruetobas has joined #openstack-dev | 16:03 | |
| *** wchrisj is now known as wchrisj|away | 16:03 | |
| *** kevinconway has joined #openstack-dev | 16:03 | |
| *** markwash has quit IRC | 16:03 | |
| rascasoft | Hi everybody, I don't know if this is the right place to ask, please let me know if I'm doing wrong. I'm trying to inject my keys into the instance via default method, but I receive an error. The main problems seems to be with guestfs, since when I lunch this command: guestfish --ro -a /var/lib/nova/instances/8bfb118a-ac1c-4634-9ec6-a6388693b4ba/disk -i it ends with febootstrap-supermin-helper: ext2: parent directory not found: /lib: File not found by | 16:04 |
| *** tellesnobrega_ has joined #openstack-dev | 16:04 | |
| *** wchrisj|away is now known as wchrisj | 16:05 | |
| *** parkerr_ is now known as robsparker | 16:05 | |
| *** markwash has joined #openstack-dev | 16:06 | |
| *** AlexF has joined #openstack-dev | 16:06 | |
| *** e0ne has quit IRC | 16:06 | |
| *** tellesnobrega_ has left #openstack-dev | 16:06 | |
| *** galstrom_zzz is now known as galstrom | 16:07 | |
| *** tjones has quit IRC | 16:07 | |
| *** beagles is now known as seagulls | 16:07 | |
| *** Drankis has quit IRC | 16:07 | |
| *** Ruetobas has quit IRC | 16:07 | |
| *** morazi has quit IRC | 16:07 | |
| *** danielbruno has quit IRC | 16:08 | |
| *** tjones has joined #openstack-dev | 16:08 | |
| *** jgrimm has joined #openstack-dev | 16:08 | |
| *** pablosan has joined #openstack-dev | 16:08 | |
| *** pmathews has joined #openstack-dev | 16:10 | |
| *** morazi has joined #openstack-dev | 16:10 | |
| *** pablosan has quit IRC | 16:11 | |
| *** pablosan has joined #openstack-dev | 16:11 | |
| *** Ruetobas has joined #openstack-dev | 16:14 | |
| *** gokrokve has quit IRC | 16:14 | |
| *** gokrokve has joined #openstack-dev | 16:15 | |
| *** tjones has quit IRC | 16:15 | |
| *** tjones has joined #openstack-dev | 16:15 | |
| *** xga has joined #openstack-dev | 16:16 | |
| *** buzztroll has joined #openstack-dev | 16:16 | |
| *** russellb is now known as rustlebee | 16:16 | |
| *** alaski is now known as lascii | 16:17 | |
| *** mlegault has joined #openstack-dev | 16:17 | |
| timello | bknudson: hey, I filed a bp (cross-service-request-id) some weeks/week ago to track the request-id change on Keystone. I'm wondering if we can get it approved for icehouse-3 since other projects are doing the same and the blueprint has narrowed the scope. Btw, thanks for the review on that. | 16:18 |
| *** doug-fish has quit IRC | 16:18 | |
| *** francois_eleouet has quit IRC | 16:18 | |
| *** doug-fish has joined #openstack-dev | 16:19 | |
| ayoung | timello, link? | 16:19 |
| ayoung | to the code, I mean | 16:19 |
| *** gokrokve has quit IRC | 16:19 | |
| timello | ayoung: https://review.openstack.org/#/c/70823 | 16:19 |
| bknudson | ayoung: it's a sync from oslo and put in the pipeline | 16:20 |
| *** mlegault__ has quit IRC | 16:20 | |
| ayoung | bknudson, probably OK. In the future, should something like that go into the client? | 16:20 |
| *** afazekas has quit IRC | 16:21 | |
| dstanek | jdennis: are you still having tox issues? | 16:21 |
| timello | ayoung: I'm working on that too... changing the client middleware | 16:21 |
| *** danielbruno has joined #openstack-dev | 16:21 | |
| *** danielbruno has quit IRC | 16:21 | |
| *** danielbruno has joined #openstack-dev | 16:21 | |
| ayoung | dolphm, I think we should do another client release before I attempt any compressed token fixes | 16:21 |
| timello | ayoung: https://review.openstack.org/#/c/71337/ | 16:21 |
| bknudson | ayoung: into keystonelcient? | 16:21 |
| *** dave-mcnally has quit IRC | 16:22 | |
| *** doug-fish2 has joined #openstack-dev | 16:22 | |
| *** kgriffs_afk is now known as kgriffs | 16:22 | |
| *** e0ne_ has quit IRC | 16:22 | |
| timello | btw, feedbacks are appreciated | 16:22 |
| bknudson | ayoung: I don't think we have any keystone server middleware in keystoneclient now | 16:22 |
| bknudson | timello: so how is it supposed to work? | 16:23 |
| bknudson | timello: does nova tell keystone what the request ID was? | 16:23 |
| timello | bknudson: nova uses that middleware | 16:23 |
| *** doug-fish has quit IRC | 16:23 | |
| *** AlexF has quit IRC | 16:24 | |
| timello | bknudson: the middleware put the keystone request id in the env and nova gets it in the auth middleware | 16:24 |
| timello | just like the other headers | 16:24 |
| bknudson | timello: the auth_token middleware? | 16:24 |
| *** mmagr has quit IRC | 16:24 | |
| timello | bknudson: yes | 16:24 |
| *** dtantsur has quit IRC | 16:25 | |
| *** e0ne has joined #openstack-dev | 16:25 | |
| bknudson | timello: did you submit the change to the auth_token middleware too? | 16:25 |
| *** xga_ has joined #openstack-dev | 16:25 | |
| *** xga has quit IRC | 16:25 | |
| bknudson | timello: there's no blueprint for python-keystoneclient (the auth_token middleware) | 16:25 |
| *** danielbruno has quit IRC | 16:25 | |
| timello | bknudson: yeah, need a bp for that too, right? I was not sure about python clients process | 16:25 |
| *** terrylhowe has quit IRC | 16:26 | |
| bknudson | timello: found it... https://review.openstack.org/#/c/71337/ | 16:26 |
| timello | bknudson: that one, btw, working on unit tests as you suggested | 16:26 |
| bknudson | timello: I think you'll need to have a blueprint in python-keystoneclient, too | 16:26 |
| *** doug-fish2 has quit IRC | 16:26 | |
| *** vkozhukalov has quit IRC | 16:26 | |
| timello | bknudson: that's fine, I'll file it | 16:27 |
| dstanek | timello: so keystone is always the system that creates the ids? | 16:27 |
| ayoung | bknudson, that is correct, and I think we need to rectify that. We might not use Auth token exactly as is. | 16:27 |
| *** AlexF has joined #openstack-dev | 16:27 | |
| timello | dstanek: there isn't an unique id, but we need ids from every service to be logged in nova | 16:27 |
| *** bauzas has quit IRC | 16:27 | |
| *** rcleere has joined #openstack-dev | 16:28 | |
| *** mdurnosvistov has joined #openstack-dev | 16:28 | |
| timello | btw, keystone does not have request id yet | 16:29 |
| timello | that oslo sync adds the feature | 16:29 |
| ayoung | timello, no, and not certain that we need it...yet | 16:29 |
| dstanek | timello: i thought the request id was something that got carried between the services | 16:29 |
| bknudson | timello: is there a security issue if we don't validate the request ID header? | 16:29 |
| timello | dstanek: that was the first idea, but there was another approach which was decied to be the one to be used. | 16:29 |
| dstanek | timello: so no everyone has their own? | 16:30 |
| *** xga_ has quit IRC | 16:30 | |
| timello | dstanek: yes, and we log Nova-req-id, OtherServices-req-id | 16:30 |
| bknudson | timello: is the request ID in the token? | 16:30 |
| timello | bknudson: no, in the response header | 16:30 |
| *** morazi_ has joined #openstack-dev | 16:30 | |
| *** xga has joined #openstack-dev | 16:31 | |
| bknudson | timello: so then the application is supposed to forward it on? | 16:31 |
| bknudson | I'm not going to put the request ID in there when I use curl. | 16:31 |
| timello | bknudson: yes, forward it to nova actually | 16:31 |
| *** tjones has quit IRC | 16:31 | |
| *** morazi has quit IRC | 16:31 | |
| bknudson | timello: so this only works with the python clients? | 16:32 |
| *** AlexF has quit IRC | 16:32 | |
| *** bnemec is now known as beekneemech | 16:32 | |
| bknudson | or whoever chooses to voluntarily include the request ID? | 16:32 |
| timello | bknudson: yes, we are changing the clients that nova uses to return the request id | 16:32 |
| dstanek | timello: how do the ids get correlated? | 16:32 |
| dstanek | bknudson: i don't think the client generates them | 16:32 |
| timello | dstanek: through the logging | 16:32 |
| *** galstrom is now known as galstrom_zzz | 16:32 | |
| bknudson | dstanek: I can generate one myself and just stick it in the header | 16:33 |
| timello | the service generates it, but they (clients) don't return them | 16:33 |
| timello | bknudson: it gets overwritten by the middlewrae | 16:33 |
| dstanek | timello: does keystone (and other services) need a patch to log any service calls they make? | 16:33 |
| timello | see the oslo sync pach | 16:34 |
| timello | patch | 16:34 |
| timello | dstanek: no, that will be done in nova | 16:34 |
| timello | they just need to return the request-id | 16:34 |
| dstanek | timello: doesn't that break down is nova calls a service that calls another serice? | 16:34 |
| *** rascasoft has left #openstack-dev | 16:34 | |
| *** dspano has joined #openstack-dev | 16:35 | |
| *** NikitaKonovalov is now known as NikitaKonovalov_ | 16:35 | |
| *** tjones has joined #openstack-dev | 16:35 | |
| timello | dstanek: not sure I got the question. | 16:35 |
| *** nshaikh has quit IRC | 16:35 | |
| bknudson | timello: looks like https://review.openstack.org/#/c/71337/4/keystoneclient/middleware/auth_token.py is setting the request_id_header if the auth_token middleware happens to talk to keystone? | 16:35 |
| *** csd has joined #openstack-dev | 16:36 | |
| bknudson | but what if auth_token middleware doesn't have to talk to keystone? | 16:36 |
| dstanek | timello: this is a fake scenario but what if nova calls keystone and i the course of validating the user keystone calls another service - no way to correlate that | 16:36 |
| bknudson | for example, it wouldn't talk to keystone if a PKI token was provided | 16:36 |
| *** tanisdl has joined #openstack-dev | 16:36 | |
| timello | bknudson: we want to log Nova-Keystone interaction | 16:36 |
| timello | bknudson: mainly for debug purpose | 16:37 |
| *** mrodden has quit IRC | 16:37 | |
| *** kris_h has quit IRC | 16:37 | |
| *** danielbruno has joined #openstack-dev | 16:37 | |
| *** danielbruno has quit IRC | 16:37 | |
| *** danielbruno has joined #openstack-dev | 16:37 | |
| bknudson | timello: ok, so auth_token isn't extracting the request ID? | 16:37 |
| *** sweston has quit IRC | 16:38 | |
| bknudson | looks like _json_request is extracting the request ID? | 16:38 |
| timello | yes, from keystone response | 16:38 |
| timello | and that is forwared along with the pipeline env to nova | 16:38 |
| bknudson | timello: ok, but what I'm wondering is -- what if the auth_token middleware doesn't have to talk to keystone? | 16:38 |
| bknudson | then keystone wouldn't provide a request ID. | 16:39 |
| *** tanisdl has quit IRC | 16:39 | |
| *** troytoman-away is now known as troytoman | 16:39 | |
| *** AlexF has joined #openstack-dev | 16:39 | |
| timello | bknudson: right... something to consider... what are the cases? | 16:39 |
| bknudson | timello: the auth_token middleware either needs to communicate with keystone during a request or it doesn't | 16:40 |
| *** doug-fish has joined #openstack-dev | 16:40 | |
| *** dperaza has joined #openstack-dev | 16:40 | |
| timello | bknudson: since we want to log Nova-Keystone relation... not sure if we should care about that... | 16:40 |
| bknudson | auth_token might make several requests to keystone on a single authentication | 16:40 |
| *** comay has quit IRC | 16:40 | |
| *** nmarchenko has joined #openstack-dev | 16:40 | |
| timello | bknudson: hmm, good point | 16:40 |
| *** I159_ has quit IRC | 16:40 | |
| *** I159 has quit IRC | 16:40 | |
| *** tanisdl has joined #openstack-dev | 16:41 | |
| *** mriedem is now known as mcriedemannoid | 16:41 | |
| bknudson | for example, it might fetch the revocation list and the certificates | 16:41 |
| bknudson | that would be 3 separate requests | 16:41 |
| timello | bknudson: so the request should probably be generated in auth_token middleware? | 16:41 |
| *** xarses has joined #openstack-dev | 16:41 | |
| *** zzelle has joined #openstack-dev | 16:41 | |
| *** relaxdiego has joined #openstack-dev | 16:41 | |
| timello | request id | 16:42 |
| *** tjones has quit IRC | 16:42 | |
| bknudson | timello: yes, if you want to have a single request ID for the 3 requests then auth_token middleware would generate the request ID. | 16:42 |
| *** e0ne has quit IRC | 16:42 | |
| timello | bknudson: it makes sense | 16:42 |
| *** KurtMartin has quit IRC | 16:43 | |
| ayoung | timello, I think I need to ponder this.....something is making my spider sense tingle | 16:43 |
| ayoung | need caffeine | 16:43 |
| *** atiwari has joined #openstack-dev | 16:43 | |
| timello | ayoung: heh | 16:44 |
| *** e0ne has joined #openstack-dev | 16:44 | |
| *** AlexF has quit IRC | 16:44 | |
| dstanek | based on the blueprint i think you'd be ok having different keystone request ids in the log because they would have the same nova request id | 16:44 |
| *** sarob has joined #openstack-dev | 16:44 | |
| timello | dstanek: the problem is that it only returns 1 request-id to nova | 16:45 |
| timello | dstanek: only the last one | 16:45 |
| ayoung | what is request id supposed to track? I don't think it would need to be in AT-middle | 16:45 |
| *** xgsa has quit IRC | 16:45 | |
| bknudson | ayoung: I thought it was ATM? | 16:45 |
| ayoung | I would think the request Id would...not involve Keystone at all | 16:45 |
| ayoung | AuToMi | 16:45 |
| bknudson | ayoung: that hurts my fingers just thinking about it. | 16:45 |
| *** gokrokve has joined #openstack-dev | 16:46 | |
| timello | ayoung: yeah, probably we won't need keystone change, but get the request-id generated in the keystone client auth_token middleware, since we can have multiples calls to keystone in one nova request | 16:46 |
| ayoung | I don't think the requie middleware belongs in keystone | 16:46 |
| bknudson | timello: do want the nova request ID in the keystone log? | 16:46 |
| ayoung | those calls are not part of the "request" | 16:47 |
| ayoung | they are side effects | 16:47 |
| timello | bknudson: no | 16:47 |
| ayoung | validating a token is not going to require a call to keystone | 16:47 |
| ayoung | and even if it did, so what | 16:47 |
| dstanek | timello: i would expect that logging to happen in auth_token middleware once implemented | 16:47 |
| ayoung | fetching the revocation list or certs neither | 16:47 |
| ayoung | no... timello you have something wrong conceptually....a single token could be associated with multiple requests | 16:48 |
| *** markmcclain has quit IRC | 16:48 | |
| ayoung | getting a token from Keystone is not part of the "request" workflow | 16:48 |
| bknudson | ayoung: I think we're trying to match a single nova request to the "requests" that are generated from it. | 16:48 |
| ayoung | it would be no different than if I went to Neutron today, set up a bunch of stuff, and then used it tomorrw | 16:48 |
| bknudson | so somebody does a nova boot and it talks to keystone, glance, neutron, etc. | 16:49 |
| ayoung | bknudson, it is a means to track a long, complex workflow across multiple components | 16:49 |
| timello | ayoung: we want to log requests... and track every request that originated in nova and called other services for a particular task | 16:49 |
| ayoung | but the Keystone part doesn;t belonw there | 16:49 |
| *** sarob has quit IRC | 16:49 | |
| ayoung | nova should not be contacting Keystone | 16:49 |
| bknudson | ayoung: nova will contact keystone if you use a PKI token | 16:49 |
| ayoung | timello, I assure, you I get the concept... | 16:49 |
| *** devoid has joined #openstack-dev | 16:49 | |
| ayoung | bknudson, not it will not | 16:49 |
| ayoung | not as "part of that request" | 16:50 |
| *** mrodden has joined #openstack-dev | 16:50 | |
| ayoung | it might as a side effect, like if it needs the revokcation info | 16:50 |
| ayoung | but that is not part of the users workflow | 16:50 |
| *** IanGovett1 has joined #openstack-dev | 16:51 | |
| ayoung | bknudson, personally, I think request ID needs to become "request workflow" to include "what services to hit" and also "here are the sets of tokens and or trusts you need to execute this | 16:51 |
| bknudson | timello: why does nova want to log the keystone request ID? Is keystone going to also log the request ID? | 16:51 |
| *** IanGovett has quit IRC | 16:51 | |
| timello | bknudson: no, only nova will log, as nova will log nova and glance request ids, same for cinder, etc | 16:52 |
| timello | bknudson: https://blueprints.launchpad.net/nova/+spec/cross-service-request-id | 16:52 |
| ayoung | timello, OK, so the one place keystone *might* need to play along with this scheme is if the long run task needs to execute a trust in order to get a token | 16:53 |
| ayoung | that would be part of the "request" | 16:53 |
| *** stevemar has quit IRC | 16:53 | |
| ayoung | but even there, we don't really need it | 16:53 |
| *** dave_tucker is now known as dave_tucker_zzz | 16:53 | |
| ayoung | and could just as easily be audited from Nova or the calling service | 16:53 |
| *** danielbruno has joined #openstack-dev | 16:54 | |
| *** danielbruno has quit IRC | 16:54 | |
| *** danielbruno has joined #openstack-dev | 16:54 | |
| bknudson | timello: I guess I'm not seeing what's the point of logging some random number that keystone generated? | 16:54 |
| *** saju_m has joined #openstack-dev | 16:54 | |
| dstanek | timello: it keystone doesn't log the id why couldn't nova just make up it's own request id for keystone? | 16:54 |
| dstanek | seems like keystone would have to do something with it to be useful | 16:54 |
| luisbg | is Jenkins having issues and failing to build clean commits? | 16:54 |
| *** DinaBelova is now known as DinaBelova_ | 16:54 | |
| *** Guest17996 has quit IRC | 16:54 | |
| *** stevemar has joined #openstack-dev | 16:54 | |
| dstanek | luisbg: possibly..link? | 16:55 |
| bknudson | timello: there's no way to correlate it with anything | 16:55 |
| luisbg | dstanek, https://review.openstack.org/#/c/73425/ <--- I am pretty confident this should not fail to build, plus the first time it built (yesterday) it passed | 16:56 |
| *** vkozhukalov has joined #openstack-dev | 16:56 | |
| *** alagalah has joined #openstack-dev | 16:57 | |
| *** viktors has quit IRC | 16:57 | |
| dstanek | luisbg: did you read through the link in the comment? i think it would be helpful | 16:58 |
| ayoung | timello, I'm really sorry to do this, but I just -2ed your patch | 16:58 |
| dstanek | luisbg: also looking an the jenkins output it looks like it was caused by a known bug | 16:58 |
| timello | bknudson: the idea is have the standard format to log and nova calls another service for a single nova request id | 16:58 |
| timello | when nova* | 16:58 |
| ayoung | Keystone is not the instigator of a "request" and should not be generating the request ID | 16:58 |
| ayoung | Nova should...or Heat | 16:58 |
| dstanek | timello: will keystone ever log the id anywhere? | 16:58 |
| ayoung | dstanek, so...in the future, if we go with the "workplans" approach I laid out, then it might make sense | 16:59 |
| *** ifarkas has quit IRC | 16:59 | |
| timello | dstanek: no | 16:59 |
| ayoung | but not for every operation, only for the operations specifically making use of workplans | 16:59 |
| bknudson | timello: it makes sense to me to have some kind of correlation of the requests... but then I think that you'd send the same request ID on every request that nova makes for a single request. | 17:00 |
| dstanek | timello: then i'm not sure why keystone would need to create it; nova could easily spin a uuid | 17:00 |
| *** jordanP has quit IRC | 17:00 | |
| *** e0ne has quit IRC | 17:00 | |
| ayoung | dstanek, ++ | 17:00 |
| bknudson | so nova would generate a request ID and stick it in a context for a request and include that in the logs. | 17:00 |
| *** anniec has quit IRC | 17:00 | |
| *** _cjones_ has joined #openstack-dev | 17:00 | |
| bknudson | and if it wanted other services to include that same request ID in their logs then stick it in a header for the new request. | 17:01 |
| timello | dstanek: yeah, that's the point after realizing that there are multiples request to keystone from auth token middleware | 17:01 |
| dstanek | bknudson: that's what i thought was going to happen; the nova request XXXX had a failure and you could find XXXX in the logs of the other services | 17:01 |
| ayoung | timello, make sure you schedule a talk for this at the summit. It is bigger than you think, but there are some fundamental concepts missing | 17:01 |
| *** Ursinha is now known as Ursinha-afk | 17:02 | |
| dstanek | timello: even with one there is not reason for keystone to spin it if it doesn't do anything | 17:02 |
| *** schwicke has quit IRC | 17:02 | |
| dstanek | timello: i think we're missing something from this puzzl | 17:02 |
| dstanek | e | 17:02 |
| timello | ayoung: yeah, that has been discussed a lot in the ml, but I don't recall any consideration regarding keystone. | 17:02 |
| *** Ursinha-afk is now known as Ursinha | 17:02 | |
| ayoung | timello, let me get you some reading material... | 17:03 |
| dstanek | timello: does glance log the request id it creates? | 17:03 |
| *** ygbo has quit IRC | 17:03 | |
| luisbg | dstanek, I read the link and then read through http://status.openstack.org/rechecks/ | 17:03 |
| ayoung | timello, http://adam.younglogic.com/2013/07/a-vision-for-keystone/ I realize I wrote a novel there | 17:03 |
| timello | dstanek: not sure it logs it, but it gets generated | 17:03 |
| luisbg | dstanek, didn't saw this review id there | 17:03 |
| ayoung | the place where request ties in is with workplans | 17:03 |
| *** jgallard has quit IRC | 17:03 | |
| *** MaxV has quit IRC | 17:04 | |
| ayoung | timello, until that is implemented, Keystone is out of the "request" pipeline | 17:04 |
| ayoung | https://blueprints.launchpad.net/keystone/+spec/delegation-workplans | 17:04 |
| timello | 'that' is the link above? | 17:05 |
| timello | ayoung: ^ | 17:05 |
| ayoung | timello, yeah | 17:05 |
| timello | ayoung: I see | 17:05 |
| bknudson | luisbg: I think https://bugs.launchpad.net/openstack-ci/+bug/1280072 is affecting gate and check jobs currently | 17:05 |
| *** alop has joined #openstack-dev | 17:05 | |
| *** _cjones_ has quit IRC | 17:05 | |
| dstanek | luisbg: you won't until you identify which bug you hit and leave a comment 'reverify bug XXX' | 17:05 |
| dstanek | luisbg: it's reverify instead of recheck because your change is gating | 17:06 |
| *** yjiang5 has quit IRC | 17:06 | |
| dstanek | luisbg: i think your bug is 1252618, but you probably what to compare tracebacks | 17:06 |
| *** bauzas has joined #openstack-dev | 17:06 | |
| *** Mandell has quit IRC | 17:06 | |
| *** rpodolyaka has left #openstack-dev | 17:06 | |
| ayoung | timello, one epiphany I had this week was in talking to some folks in #moc: we might want to pre-create a bunch of tokens, and attach them to a long flowing task. Say one token is "novaX can only talk to cinderY and hars Role R on ProjectP" We can do that with trusts, but we might want to be able to do all the work in Bulk, up front, and then submit it to Nova or Heat for the subset of operations to be perforemd withing toke | 17:07 |
| ayoung | n timeout | 17:07 |
| dstanek | timello: "All services would ideally share a facility for generating new request ids and for securely accepting request ids from other services." | 17:07 |
| bknudson | luisbg: also, looks like the fix for https://bugs.launchpad.net/openstack-ci/+bug/1280072 is at the front of the queue. | 17:07 |
| luisbg | dshulyak, and bknudson, am I right to assume that since this bug 1280072 is affecting more jobs, that I should just wait for it to be closed before I reverify my commit? | 17:07 |
| luisbg | bknudson, nice! | 17:07 |
| bknudson | luisbg: since the fix is in the queue you could reverify it or wait... I'd probably wait. | 17:07 |
| ayoung | ah...so you are concerned about one service hijacking the requestid of another service...which is why you were saying "lets ask keystone" | 17:08 |
| luisbg | bknudson, confirm it passes before I do anything :) | 17:08 |
| luisbg | bknudson, and dstanek, thanks for the help! | 17:08 |
| timello | dstanek: exactly from where did you get this chunk? :) | 17:08 |
| timello | dstanek: just to follow you | 17:08 |
| ayoung | timello, sounds a lot like what KDS is supposed to provide. But I think we need an async request signature to really make it secure | 17:08 |
| *** boris-42_ has joined #openstack-dev | 17:08 | |
| ayoung | that can be part of the discussion | 17:08 |
| bknudson | dstanek: timello: how are we going to securely accept request IDs? SSL and a client certificate? | 17:09 |
| bknudson | we'd have to have some sort of key that protects the request ID. | 17:10 |
| *** yamahata has quit IRC | 17:10 | |
| ayoung | bknudson, CMS signing, just like tokens, is really the only secure solution | 17:10 |
| timello | bknudson: not sure we will accept request ids, they just exist we are going to reuse them for logging purpose. That's what is being implemented in other components, like glance and cinder. | 17:10 |
| dstanek | timello: that was on a ML post that the bp linked to | 17:10 |
| *** madhami has joined #openstack-dev | 17:11 | |
| *** danielbruno has joined #openstack-dev | 17:11 | |
| timello | dstanek: ok | 17:11 |
| dstanek | timello: actually i think that was the post it linked to and not just the thread | 17:11 |
| *** madhami has left #openstack-dev | 17:11 | |
| bknudson | ayoung: yes, we could reuse the technique that tokens use... these would be pretty short documents to sign. | 17:11 |
| dstanek | timello: if i look at https://etherpad.openstack.org/p/icehouse-summit-nova-cross-project-request-ids i get the impression that keystone or other services will be logging the request id probably as a part of the log context | 17:12 |
| ayoung | bknudson, this is too big for IRC right now...this is a design summit topic | 17:12 |
| *** mikeoutland has quit IRC | 17:12 | |
| *** garyk1 has quit IRC | 17:12 | |
| *** danpb has quit IRC | 17:12 | |
| bknudson | I would attend that session. | 17:12 |
| *** mandeep has joined #openstack-dev | 17:12 | |
| bknudson | and ayoung's session on workflows | 17:13 |
| ayoung | bknudson, lets get them schedueld together | 17:13 |
| *** zzelle has quit IRC | 17:13 | |
| bknudson | ayoung: does workflow require request ID? | 17:13 |
| *** relaxdiego has quit IRC | 17:14 | |
| nkinder | ayoung: are the _ldap_livetest tests in a working state? | 17:14 |
| timello | dstanek: yeah, I was misunderstanding what you said, see the oslo implementation: | 17:14 |
| nkinder | ayoung: I can't get them to actually run. | 17:14 |
| ayoung | nkinder, um...can I take the fifth? | 17:14 |
| bknudson | nkinder: I think dstanek might have had a patch to make it so you could run them (easily) again? | 17:14 |
| ayoung | and by "the fifth" I mean the fifth of run I have here jus so I can fortify myself for this ordeal | 17:14 |
| ayoung | nkinder, I'm sure they have bit rotted | 17:15 |
| timello | dstanek: https://github.com/openstack/oslo-incubator/blob/master/openstack/common/middleware/request_id.py | 17:15 |
| ayoung | but they have been run in recently history | 17:15 |
| *** markmc has quit IRC | 17:15 | |
| ayoung | um...what error are you seeing? | 17:15 |
| dstanek | timello: what should i be looking for? | 17:15 |
| *** danielbruno has quit IRC | 17:15 | |
| *** yamahata has joined #openstack-dev | 17:16 | |
| timello | dstanek: heh, the request id is generated in the middleware, not sent by the request | 17:16 |
| dstanek | bknudson, nkinder: i had ideas, but i don't think i put them in code | 17:16 |
| dstanek | timello: right, but doesn't that ML post say that it should accept one? | 17:17 |
| bknudson | nkinder: you might have to rename the file to get it to be recognized by testr... I haven't tried running them lately. | 17:17 |
| *** marcoemorais has joined #openstack-dev | 17:17 | |
| timello | dstanek: yeah, it (ML post) does not seem to be totally accurated | 17:17 |
| *** vkozhukalov has quit IRC | 17:17 | |
| timello | dstanek: this is inserted first in the pipeline, so the request id exists since the beginning of the request | 17:18 |
| nkinder | bknudson: remove the leading underscore? | 17:18 |
| bknudson | nkinder: that would be my guess. I haven't tried it though. | 17:19 |
| nkinder | ayoung: no errors. It just says "Ran O tests in ..." | 17:19 |
| nkinder | bknudson: Ok, I'll give it a shot. | 17:19 |
| ayoung | nkinder, ah, that is probably just how you are running it...lemme try | 17:19 |
| ayoung | alias suod sudo | 17:20 |
| *** lcheng has quit IRC | 17:20 | |
| ayoung | nkinder, something wrong with test discovery | 17:21 |
| nkinder | yep, that's what it looked like to me too. Trying the rename now... | 17:21 |
| *** yolanda has quit IRC | 17:21 | |
| dstanek | timello: :( - is there a design doc for this or is it just the pb? reading throught ML to try and find consesus doesn't sound like fun | 17:22 |
| ayoung | nkinder, I got them to run like this | 17:22 |
| ayoung | . .venv/bin/activate | 17:22 |
| timello | ayoung, bknudson, dstanek, thanks for the conversation. I'll think more about it. It seems we can't do it for keystone right now... | 17:22 |
| ayoung | nosetests keystone.tests._ldap_livetest | 17:22 |
| ayoung | timello, nope, not yet | 17:22 |
| *** mandeep has left #openstack-dev | 17:22 | |
| timello | dstanek: and yes, it lacks a document to sumarize the final consesus | 17:22 |
| ayoung | nkinder, mind you, all my tests are failing right now | 17:22 |
| ayoung | I hadn't startedslapd since upgrading to 20, though | 17:23 |
| ayoung | SERVER_DOWN: {'desc': "Can't contact LDAP server"} | 17:23 |
| *** galstrom_zzz is now known as galstrom | 17:23 | |
| *** yjiang5 has joined #openstack-dev | 17:24 | |
| *** yolanda has joined #openstack-dev | 17:25 | |
| *** athomas has quit IRC | 17:25 | |
| *** reed has joined #openstack-dev | 17:25 | |
| *** reed has quit IRC | 17:25 | |
| *** reed has joined #openstack-dev | 17:25 | |
| *** godara has joined #openstack-dev | 17:25 | |
| *** dshulyak has quit IRC | 17:26 | |
| nkinder | ayoung: I have all of the normal tests working, and manual live LDAP testing is good. I just want to run the automated live tests before submitting my review. | 17:26 |
| dstanek | ayoung: i've been wanting to try running LDAP to test out one of the reviews, but i haven't yet | 17:26 |
| ayoung | nkinder, appreciate that | 17:26 |
| *** raildo_ has quit IRC | 17:26 | |
| ayoung | dstanek, have you set up LDAP before? | 17:26 |
| *** wchrisj has quit IRC | 17:27 | |
| ayoung | I'm not certain what happens if you run devstack and tell it the only service to run is LDAP. In theory, it should not mess with your system | 17:27 |
| *** danielbruno has joined #openstack-dev | 17:27 | |
| *** danielbruno has joined #openstack-dev | 17:27 | |
| dstanek | ayoung: i followed some devstack instructions a few days ago, but haven't tried it out yet | 17:27 |
| *** marcoemorais has quit IRC | 17:27 | |
| ayoung | dstanek, to get devstack to set up LDAP... | 17:28 |
| ayoung | ENABLED_SERVICES=ldap | 17:28 |
| dstanek | ayoung: there were just 2 or 3 lines i had to add to my localrc (assuming that it works when i test it) | 17:28 |
| ayoung | LDAP_PASSWORD=test | 17:28 |
| ayoung | that alone will get you an ldap server. | 17:28 |
| ayoung | to go so far as to set up Keystone | 17:28 |
| ayoung | KEYSTONE_IDENTITY_BACKEND=ldap | 17:29 |
| ayoung | as well as | 17:29 |
| ayoung | ENABLED_SERVICES=key,mysql,ldap | 17:29 |
| dstanek | this is what i did: http://paste.openstack.org/show/65504/ | 17:30 |
| ayoung | dstanek, or you could run FreeIPA and get a really good LDAP setup | 17:30 |
| dstanek | ayoung: did you see that failing test i wrote for the cms patch? | 17:30 |
| ayoung | dstanek, no, still catching up...I was 1100 emails behind when Istarted this morning | 17:30 |
| ayoung | dstanek did you add it to my review for dedupe CMS? | 17:31 |
| ayoung | yes you did...nice | 17:31 |
| *** _cjones_ has joined #openstack-dev | 17:31 | |
| *** byeager has quit IRC | 17:31 | |
| ayoung | dstanek, but...I want to see the exisitng tests fail with the PIP version of keystone client | 17:32 |
| ayoung | and then we'll fix the review and resubmit | 17:32 |
| ayoung | I think we need to release a new Keystone client | 17:32 |
| ayoung | version of | 17:32 |
| *** shardy is now known as shardy_afk | 17:32 | |
| dstanek | ayoung: how will you force the existing tests to fail? | 17:32 |
| *** raildo has quit IRC | 17:33 | |
| dstanek | mess up your path? | 17:33 |
| ayoung | dstanek, they should do so naturally once the keystone client is in, and throws an exception when doing the PKI token stuff | 17:33 |
| *** florentflament has quit IRC | 17:33 | |
| *** raildo has joined #openstack-dev | 17:33 | |
| ayoung | https://review.openstack.org/#/c/71455/2/keystone/token/providers/pki.py should trigger a failure | 17:33 |
| ayoung | but your test is a good addition, don't get me wrong | 17:33 |
| *** tqtran has joined #openstack-dev | 17:34 | |
| dstanek | ayoung: i just don't understand how it will trigger a failure - we don't have any tests that force errors from subprocess | 17:34 |
| ayoung | but line 41 on that page of that patch should not catch the actual exception out of cms from the popen that is monkeypatched | 17:34 |
| *** kamalic has joined #openstack-dev | 17:35 | |
| *** sushil_ has quit IRC | 17:35 | |
| ayoung | dstanek, I think we do, but... | 17:35 |
| *** tiamar has quit IRC | 17:35 | |
| *** VINOD_ has quit IRC | 17:35 | |
| dstanek | ayoung: what will force that exception to be thrown? i only see happy path tess | 17:35 |
| ayoung | I am also OK with triggereing it by hand | 17:35 |
| dstanek | s/tess/tests/ | 17:35 |
| ayoung | dstanek, missing certs | 17:35 |
| ayoung | but that is in the cms test...you may be right | 17:35 |
| *** SumitNaiksatam has quit IRC | 17:35 | |
| *** sushil_ has joined #openstack-dev | 17:36 | |
| ayoung | dstanek, when you ran with that test, it used the pip version of the client, right? | 17:36 |
| dstanek | ayoung: i think so | 17:36 |
| ayoung | so it got the old code, that did not properly address subprocess? | 17:36 |
| *** caleb_ has quit IRC | 17:36 | |
| dstanek | ayoung: i have one env with master and one with the released version - i'm pretty sure i was on the released version | 17:36 |
| dstanek | ayoung: no, because the problem is in pki not in the client | 17:37 |
| ayoung | dstanek, OK...so your test should apss now, and then fail once we sync to the client, and then pass again once we have the right version of the client? | 17:37 |
| dstanek | it's catching the wrong exception | 17:37 |
| dstanek | ayoung: the tests only pass if the pki change to use the stdlib subprocess module is reverted | 17:38 |
| *** danielbruno has quit IRC | 17:38 | |
| ayoung | dstanek, I'd like to merge your test into my patch | 17:38 |
| dstanek | ayoung: it's all yours. | 17:38 |
| ayoung | dstanek, I might extend it to make sure that it catches the right exception from CMS, so we see a failure until the new client comes in...ok...good stuff | 17:39 |
| *** relaxdiego has joined #openstack-dev | 17:39 | |
| *** xga_ has joined #openstack-dev | 17:39 | |
| *** xga has quit IRC | 17:39 | |
| *** praneshp has joined #openstack-dev | 17:40 | |
| dstanek | ayoung: those tests should pass on either client once that change is reverted | 17:40 |
| *** markmcclain has joined #openstack-dev | 17:40 | |
| *** exed_ has quit IRC | 17:40 | |
| *** armax has joined #openstack-dev | 17:40 | |
| dstanek | the client change was to make if notice eventlet in the same way that the server does, but in my test i force both sides into using eventlet for one test and stdlib for another | 17:40 |
| *** rossella_s has quit IRC | 17:41 | |
| *** eglynn-lunch has quit IRC | 17:42 | |
| *** afazekas has joined #openstack-dev | 17:43 | |
| *** afazekas has quit IRC | 17:43 | |
| *** praneshp has quit IRC | 17:44 | |
| *** sarob has joined #openstack-dev | 17:44 | |
| *** ramishra has quit IRC | 17:45 | |
| *** stevemar has quit IRC | 17:46 | |
| *** stevemar2 has joined #openstack-dev | 17:46 | |
| *** tjones has joined #openstack-dev | 17:46 | |
| *** stevemar2 is now known as stevemar | 17:46 | |
| *** comay has joined #openstack-dev | 17:47 | |
| stevemar | ayoung, bknudson samuelqueiroz-af was having some trouble with policy today... problem is here: http://pastebin.com/jNgKDQzA | 17:47 |
| stevemar | ayoung, bknudson basically trying to use domain attribute domain_id:%(domain_id)s in his policy file, but when he uses a project scoped token, it won't work. | 17:48 |
| *** troytoman is now known as troytoman-away | 17:48 | |
| *** _cjones_ has quit IRC | 17:49 | |
| *** sarob has quit IRC | 17:49 | |
| *** danielbruno has joined #openstack-dev | 17:50 | |
| *** danielbruno has joined #openstack-dev | 17:50 | |
| *** tkay has joined #openstack-dev | 17:51 | |
| *** jistr has quit IRC | 17:51 | |
| *** bearhands has quit IRC | 17:51 | |
| *** _cjones_ has joined #openstack-dev | 17:52 | |
| *** xqueralt has quit IRC | 17:52 | |
| *** bearhands has joined #openstack-dev | 17:52 | |
| *** yolanda has quit IRC | 17:52 | |
| *** xga_ has quit IRC | 17:52 | |
| *** afazekas has joined #openstack-dev | 17:53 | |
| *** mikeoutland has joined #openstack-dev | 17:54 | |
| *** alagalah has quit IRC | 17:54 | |
| *** _cjones__ has joined #openstack-dev | 17:54 | |
| *** ijw has joined #openstack-dev | 17:55 | |
| *** schwicke has joined #openstack-dev | 17:55 | |
| *** alagalah has joined #openstack-dev | 17:55 | |
| *** epim has joined #openstack-dev | 17:55 | |
| *** yolanda has joined #openstack-dev | 17:56 | |
| dstanek | ayoung: this is the patch i wanted LDAP for https://review.openstack.org/#/c/71887; i don't think it's been tested against a real server | 17:56 |
| *** _cjones_ has quit IRC | 17:57 | |
| *** kamalic has quit IRC | 17:57 | |
| *** DinaBelova_ is now known as DinaBelova | 17:57 | |
| *** DinaBelova is now known as DinaBelova_ | 17:58 | |
| dstanek | lbragstad: howdy | 17:59 |
| *** AlexF has joined #openstack-dev | 17:59 | |
| lbragstad | dstanek: hey! | 17:59 |
| *** caleb_ has joined #openstack-dev | 17:59 | |
| dstanek | lbragstad: i just started working on rebasing the 'explicit _' review onto master | 17:59 |
| *** hartsocks has joined #openstack-dev | 17:59 | |
| lbragstad | ah, the one I just reviewed? | 18:00 |
| dstanek | lbragstad: that's the one :-) | 18:00 |
| dstanek | lbragstad: i believe those newlines were added to match the style guide | 18:01 |
| lbragstad | ok | 18:01 |
| lbragstad | I figured as much | 18:01 |
| *** cadenzajon has joined #openstack-dev | 18:01 | |
| dstanek | that patch is uber big now - so hopefully we can get it though quickly after the next rebase | 18:01 |
| lbragstad | dstanek: I just wanted to make sure they were there for that reason, | 18:02 |
| lbragstad | and not on accident or something | 18:02 |
| *** byeager has joined #openstack-dev | 18:02 | |
| *** cagrev_ has joined #openstack-dev | 18:02 | |
| *** newell has joined #openstack-dev | 18:02 | |
| *** sweston has joined #openstack-dev | 18:02 | |
| *** SumitNaiksatam has joined #openstack-dev | 18:03 | |
| dstanek | i have a huge patch fix all the imports, but it was out of date even before i could submit the first review | 18:03 |
| *** derekh has quit IRC | 18:04 | |
| *** Tross has quit IRC | 18:04 | |
| *** marcoemorais has joined #openstack-dev | 18:04 | |
| lbragstad | dstanek: :) | 18:04 |
| lbragstad | that's no fun | 18:04 |
| *** morazi_ is now known as morazi | 18:04 | |
| bknudson | not sure what the point of explicit import _ is ... doesn't gettextutils.install() happen? | 18:05 |
| dstanek | lbragstad: i think i'm going to break it up by packages and submit them separately | 18:05 |
| bknudson | as in, doesn't tests.core get run? | 18:05 |
| lbragstad | dstanek: ++ | 18:05 |
| lbragstad | easier to manage | 18:05 |
| *** cagrev has quit IRC | 18:05 | |
| *** seagulls is now known as beagles | 18:06 | |
| *** nacim has quit IRC | 18:06 | |
| dstanek | bknudson: there are a whole bunch of tools that i use that either don't work right or flag it as broken code | 18:06 |
| *** enikanorov_ has joined #openstack-dev | 18:06 | |
| dstanek | bknudson: in interactive Python i had to add a hack to my .pythonrc to automatically import keystone if Python is started in a keystone working copy :-( | 18:07 |
| bknudson | dstanek: ok, submit it and we can get it merged quickly | 18:07 |
| *** bearhands is now known as comstud | 18:07 | |
| *** danielbruno has quit IRC | 18:08 | |
| *** comstud is now known as bearhands | 18:08 | |
| ayoung | dstanek, domain_id != domain_name | 18:08 |
| *** beagles is now known as seagulls | 18:08 | |
| *** jistr has joined #openstack-dev | 18:09 | |
| *** jistr has quit IRC | 18:09 | |
| dstanek | ayoung: is the approach to that review all wrong then? | 18:09 |
| *** mkollaro has quit IRC | 18:10 | |
| *** hemnafk is now known as hemna_ | 18:10 | |
| ayoung | dstanek, nah...we just need to get the domain name from config and check against that instead | 18:10 |
| dstanek | ayoung: i just noticed that the get_domain_by_name method should return a dict and that patch had it returning a string | 18:10 |
| *** byeager has quit IRC | 18:10 | |
| stevemar | samuelqueiroz-af, i think you're out of luck for a work-around, but the fix seems pretty straightforward | 18:10 |
| ayoung | he's close, but checking that domain_id = domain_name is conceptually wrong | 18:10 |
| *** kamalic has joined #openstack-dev | 18:10 | |
| ayoung | stevemar, so...list all users in a domain should rquire a domain role, and thus a domain scoped token | 18:11 |
| *** kamalic1 has joined #openstack-dev | 18:13 | |
| *** kamalic has quit IRC | 18:13 | |
| *** kamalic has joined #openstack-dev | 18:14 | |
| *** zhiyan is now known as zhiyan_ | 18:15 | |
| ayoung | huh | 18:15 |
| *** epim has quit IRC | 18:15 | |
| *** ramishra has joined #openstack-dev | 18:16 | |
| *** marekd is now known as marekd|away | 18:16 | |
| *** garyk has joined #openstack-dev | 18:16 | |
| ayoung | ah, because it needs to return the domain object. it is not "get domain id from domain name" | 18:16 |
| *** tongli has joined #openstack-dev | 18:16 | |
| *** arnaud has joined #openstack-dev | 18:17 | |
| *** kamalic1 has quit IRC | 18:18 | |
| *** jckasper_ has joined #openstack-dev | 18:18 | |
| *** kamalic has quit IRC | 18:19 | |
| *** galstrom is now known as galstrom_zzz | 18:20 | |
| *** max_lobur is now known as max_lobur_afk | 18:20 | |
| *** ramishra has quit IRC | 18:21 | |
| *** mcriedemannoid has quit IRC | 18:21 | |
| *** mriedem has joined #openstack-dev | 18:21 | |
| *** jckasper has quit IRC | 18:21 | |
| *** Mandell has joined #openstack-dev | 18:22 | |
| *** godara is now known as manishg | 18:22 | |
| *** mlegault_ has joined #openstack-dev | 18:22 | |
| *** mrodden has quit IRC | 18:23 | |
| *** kushal has joined #openstack-dev | 18:24 | |
| *** alagalah has quit IRC | 18:26 | |
| *** mlegault has quit IRC | 18:26 | |
| *** sarob has joined #openstack-dev | 18:26 | |
| *** kushal has quit IRC | 18:26 | |
| *** enikanorov has quit IRC | 18:26 | |
| *** wchrisj has joined #openstack-dev | 18:26 | |
| *** jnoller has quit IRC | 18:27 | |
| *** praneshp has joined #openstack-dev | 18:27 | |
| *** schwicke has quit IRC | 18:27 | |
| *** kushal has joined #openstack-dev | 18:27 | |
| *** sumanthns has quit IRC | 18:28 | |
| *** bdpayne has quit IRC | 18:28 | |
| *** schwicke has joined #openstack-dev | 18:28 | |
| *** lucasagomes has quit IRC | 18:28 | |
| *** jgrimm has quit IRC | 18:28 | |
| *** bdpayne has joined #openstack-dev | 18:28 | |
| *** lexano has quit IRC | 18:29 | |
| *** yassine has quit IRC | 18:31 | |
| *** sahid has quit IRC | 18:31 | |
| *** mrodden has joined #openstack-dev | 18:32 | |
| *** mrodden has quit IRC | 18:32 | |
| *** mrodden has joined #openstack-dev | 18:33 | |
| *** kushal has quit IRC | 18:34 | |
| *** wchrisj has quit IRC | 18:34 | |
| *** xmltok has joined #openstack-dev | 18:35 | |
| *** zhiyan_ is now known as zhiyan | 18:38 | |
| *** xarses_ has joined #openstack-dev | 18:39 | |
| *** sweston has quit IRC | 18:39 | |
| *** bknudson has quit IRC | 18:39 | |
| *** AnilV4 has quit IRC | 18:39 | |
| *** ijw has quit IRC | 18:41 | |
| *** schwicke has quit IRC | 18:42 | |
| *** xarses has quit IRC | 18:42 | |
| *** mlegault has joined #openstack-dev | 18:43 | |
| morganfainberg | dstanek, ping | 18:44 |
| dstanek | morganfainberg: pong | 18:44 |
| *** mlegault_ has quit IRC | 18:45 | |
| morganfainberg | dstanek, nvm got it . was having a hard time reading a code merge conflict | 18:46 |
| *** thedodd has quit IRC | 18:46 | |
| dstanek | morganfainberg: i'm glad i could assist! | 18:46 |
| morganfainberg | annnnd of course | 18:46 |
| *** devlaps has joined #openstack-dev | 18:47 | |
| morganfainberg | *grumbles* | 18:47 |
| *** zzelle has joined #openstack-dev | 18:48 | |
| *** gyee has joined #openstack-dev | 18:48 | |
| *** bearhands is now known as comstud | 18:49 | |
| *** comstud is now known as bearhands | 18:49 | |
| thomasem | markmcclain, hey, I was curious about something if you have a moment? | 18:50 |
| *** rfolco has quit IRC | 18:50 | |
| markmcclain | thomasem: sure what's up? | 18:51 |
| thomasem | markmcclain, Before oslo.messaging, the notification_topics configuration would define a queue that was stood up from the producer side. IIRC this was so that no messages would be lost even if the consumer wasn't ready yet. I'm not seeing that behavior with oslo.messaging and Nova compute. Is that intentional? Do you know? | 18:51 |
| *** _cjones_ has joined #openstack-dev | 18:52 | |
| thomasem | The context is RabbitMQ for me. | 18:52 |
| thomasem | If that has any bearing on it. :) | 18:52 |
| *** lbragstad has quit IRC | 18:53 | |
| ewindisch | sdague: does this have to be submitted yet, or did the gate stall the merge? https://review.openstack.org/#/c/72738/ | 18:53 |
| *** cnesa has quit IRC | 18:54 | |
| markmcclain | thomasem: the other Mark is the one you'll want to chat with… his nic is markmc, but he's not online at the moment | 18:54 |
| thomasem | markmcclain, So sorry | 18:54 |
| thomasem | heh | 18:54 |
| thomasem | :) | 18:54 |
| thomasem | markmcclain, Thanks!! :P | 18:55 |
| markmcclain | thomasem: no worries our nics cause confusion | 18:55 |
| *** _cjones__ has quit IRC | 18:56 | |
| *** bknudson has joined #openstack-dev | 18:56 | |
| *** salv-orlando_ has joined #openstack-dev | 18:56 | |
| *** galstrom_zzz is now known as galstrom | 18:56 | |
| *** salv-orlando has quit IRC | 18:56 | |
| *** salv-orlando_ is now known as salv-orlando | 18:56 | |
| *** abhirc has joined #openstack-dev | 18:57 | |
| *** sweston has joined #openstack-dev | 18:57 | |
| *** garyk has quit IRC | 18:57 | |
| luisbg | how do I use tox to run the tests in oslo.config? I can get it to run if I remove the reference to {posargs} in the tox.ini, but I pressume this is there for something | 18:58 |
| *** iv_m has joined #openstack-dev | 19:00 | |
| *** kris_h has joined #openstack-dev | 19:01 | |
| *** ijw has joined #openstack-dev | 19:01 | |
| *** alagalah has joined #openstack-dev | 19:04 | |
| *** bdpayne has quit IRC | 19:04 | |
| nkinder | ayoung: the live tests are working now | 19:04 |
| nkinder | ayoung: you do have to use nosetests (not run_tests.sh) | 19:04 |
| *** bdpayne has joined #openstack-dev | 19:05 | |
| nkinder | ayoung: there's also an error in the default config where it doesn't match what devstack does | 19:05 |
| nkinder | ayoung: I'll file a bug and submit a patch for that | 19:05 |
| *** arborism has joined #openstack-dev | 19:06 | |
| *** praneshp has quit IRC | 19:06 | |
| *** e0ne has joined #openstack-dev | 19:06 | |
| *** byeager has joined #openstack-dev | 19:07 | |
| *** sweston has quit IRC | 19:08 | |
| *** tris has joined #openstack-dev | 19:08 | |
| *** e0ne has quit IRC | 19:10 | |
| *** praneshp has joined #openstack-dev | 19:10 | |
| *** byeager has quit IRC | 19:11 | |
| *** saju_m has quit IRC | 19:11 | |
| *** xarses_ has quit IRC | 19:13 | |
| *** Mandell has quit IRC | 19:14 | |
| *** sweston has joined #openstack-dev | 19:14 | |
| *** alexpilotti has quit IRC | 19:15 | |
| *** yjiang5 is now known as yjiang5_away | 19:16 | |
| *** ramishra has joined #openstack-dev | 19:16 | |
| *** schwicht has joined #openstack-dev | 19:17 | |
| *** VINOD_ has joined #openstack-dev | 19:18 | |
| *** amcrn_ has joined #openstack-dev | 19:18 | |
| *** vartom1111111115 has joined #openstack-dev | 19:18 | |
| *** amcrn_ is now known as amcrn | 19:18 | |
| *** mrodden has quit IRC | 19:18 | |
| *** arborism has quit IRC | 19:19 | |
| *** e0ne has joined #openstack-dev | 19:19 | |
| *** sushil_ has quit IRC | 19:20 | |
| *** byeager has joined #openstack-dev | 19:20 | |
| *** zul has joined #openstack-dev | 19:20 | |
| *** jprovazn_afk is now known as jprovazn | 19:20 | |
| *** ramishra has quit IRC | 19:21 | |
| *** Mandell has joined #openstack-dev | 19:22 | |
| *** zul has quit IRC | 19:22 | |
| *** alexpilotti has joined #openstack-dev | 19:23 | |
| *** gokrokve has quit IRC | 19:23 | |
| morganfainberg | stevemar, dstanek, dolphm, https://review.openstack.org/#/c/73698/ https://review.openstack.org/#/c/72808/ https://review.openstack.org/#/c/73699/ split the auto-gen commits up so it'll be easier to land them | 19:23 |
| ayoung | nkinder, awesome. I assume you submitted the rmember-the-dn patch? | 19:23 |
| *** gokrokve has joined #openstack-dev | 19:24 | |
| nkinder | ayoung: not yet. I want to make sure the live tests are passing completely for a baseline run, then with the remember_the_dn stuff. | 19:24 |
| ayoung | diligence is good | 19:24 |
| ayoung | heh | 19:24 |
| *** sgrasley has quit IRC | 19:24 | |
| nkinder | ayoung: I'm waiting for the baseline results, but the tests are at least running now | 19:24 |
| ayoung | nkinder, they completely wipe out the DB after each tests. It seems like something that could be greatly optimized away | 19:25 |
| ayoung | 5 seconds per test is a long time to wait | 19:25 |
| nkinder | ayoung: yeah, but that helps eliminate cascading faliures | 19:25 |
| *** ngoracke has joined #openstack-dev | 19:26 | |
| nkinder | ayoung: richm starting working on the LDAP syntax violation issue we were discussing the other day | 19:26 |
| ayoung | nkinder, I know, that is why I wrote it that way. But still seems like we could speed things up somehow | 19:26 |
| ayoung | nkinder, I could get used to this level of LDAP support | 19:26 |
| *** ngoracke has left #openstack-dev | 19:26 | |
| *** rfolco has joined #openstack-dev | 19:26 | |
| *** gokrokve has quit IRC | 19:28 | |
| *** nkinder is now known as nkinder_afk | 19:30 | |
| ayoung | nkinder, I'm working on writing up the issues with token compression. Its been complicated enough to warrant a step by step discussion and explanation. I think, if we do things right, we can encapsulate the changes in Auth TOken Middleware, and thus not be linked in to the Icehouse release cycle, but can rather release the code when it is ready | 19:31 |
| *** ikhan has quit IRC | 19:31 | |
| *** thedodd has joined #openstack-dev | 19:32 | |
| *** mlavalle has joined #openstack-dev | 19:32 | |
| *** CaptTofu_ has joined #openstack-dev | 19:33 | |
| *** galstrom is now known as galstrom_zzz | 19:33 | |
| *** CaptTofu has quit IRC | 19:34 | |
| *** kgriffs is now known as kgriffs_afk | 19:34 | |
| *** cagrev_ has quit IRC | 19:35 | |
| *** tanisdl has quit IRC | 19:35 | |
| *** tjones has quit IRC | 19:36 | |
| *** adreznec has quit IRC | 19:38 | |
| *** kenperkins has quit IRC | 19:38 | |
| *** kenperkins_ has joined #openstack-dev | 19:38 | |
| *** enykeev has quit IRC | 19:38 | |
| *** jckasper__ has joined #openstack-dev | 19:38 | |
| *** lbragstad has joined #openstack-dev | 19:39 | |
| *** kenperkins_ has quit IRC | 19:39 | |
| *** cagrev_ has joined #openstack-dev | 19:40 | |
| *** kenperkins has joined #openstack-dev | 19:40 | |
| *** jsavak has joined #openstack-dev | 19:41 | |
| *** jckasper_ has quit IRC | 19:42 | |
| stevemar | dolphm, what should I do about https://review.openstack.org/#/c/72587/ | 19:44 |
| *** joesavak has quit IRC | 19:44 | |
| dolphm | stevemar: done, that bug has been fixed | 19:44 |
| stevemar | so reverify no bug? | 19:45 |
| dolphm | stevemar: that's not an option | 19:45 |
| *** morazi has quit IRC | 19:45 | |
| *** mrodden has joined #openstack-dev | 19:45 | |
| dolphm | bug 1280072 | 19:45 |
| *** zhiyan is now known as zhiyan_ | 19:45 | |
| stevemar | dolphm, yeah, i thought you had mentioned that, so reverify with the new bug that's been fixed | 19:45 |
| *** markwash_ has joined #openstack-dev | 19:45 | |
| dolphm | stevemar: done == i already ran a reverify for you | 19:46 |
| stevemar | dolphm, gah | 19:46 |
| ayoung | dolphm, can we release a new version of the client? I think any compression work will be better if the server and auth_token middleware code use the same implementation, and we can't get to that baseline without a fix for https://review.openstack.org/#/c/71455/ | 19:46 |
| ayoung | that fix is in master for client, but not on PIP | 19:46 |
| *** markwash has quit IRC | 19:47 | |
| *** markwash_ is now known as markwash | 19:47 | |
| dolphm | ayoung: what patch? | 19:47 |
| dolphm | client-side | 19:47 |
| *** radez is now known as radez_g0n3 | 19:47 | |
| *** alex-foo has quit IRC | 19:47 | |
| ayoung | dolphm, the popen monkeypatch detection | 19:47 |
| *** sn6i23a has joined #openstack-dev | 19:47 | |
| *** jtomasek has quit IRC | 19:48 | |
| *** cagrev_ has quit IRC | 19:48 | |
| ayoung | dolphm, https://github.com/openstack/python-keystoneclient/commit/bb7f6aa9a9651576b73f6f187285a966c2a5ffe4 | 19:48 |
| bknudson | which way are we going for the docs change? don't include openstack.common or add kombu, etc, to test-requirements? | 19:48 |
| bknudson | I'm leaning towards don't include openstack.common. | 19:49 |
| stevemar | bknudson, i'm okay with either | 19:49 |
| *** xga has joined #openstack-dev | 19:49 | |
| stevemar | bknudson, i just want it sooner rather than later | 19:49 |
| bknudson | let's get this done today | 19:49 |
| stevemar | ++ | 19:49 |
| bknudson | takes 3 to tango | 19:49 |
| stevemar | in this case, it does take 3 patches | 19:49 |
| *** denis_makogon_ has joined #openstack-dev | 19:50 | |
| bknudson | if jenkins passes I'll +A the openstack.common change -- https://review.openstack.org/#/c/73350/ | 19:51 |
| morganfainberg | dolphm, oh doh! double period, and it looks like i should have put the list_opts change into the previous patch in the change *facepalm* | 19:51 |
| *** n0ano has joined #openstack-dev | 19:51 | |
| morganfainberg | dolphm, i'll fix that quickly (the setup.cfg changes will be broken unless i do) | 19:52 |
| *** denis_makogon_ is now known as denis_makogon | 19:52 | |
| bknudson | stevemar: what are the other 2 required for sphinx build? | 19:53 |
| stevemar | bknudson, https://review.openstack.org/#/c/73341/ | 19:53 |
| stevemar | and https://review.openstack.org/#/c/72492/ | 19:53 |
| bknudson | stevemar: https://review.openstack.org/#/c/73341/ will need a rebase | 19:53 |
| *** DinaBelova_ is now known as DinaBelova | 19:53 | |
| *** kenperkins_ has joined #openstack-dev | 19:53 | |
| stevemar | yes, it can branch off master, give me 1 sec | 19:54 |
| bknudson | stevemar: and abandon https://review.openstack.org/#/c/73072? | 19:54 |
| stevemar | yep | 19:54 |
| *** xga has quit IRC | 19:54 | |
| *** enykeev has joined #openstack-dev | 19:54 | |
| bknudson | stevemar: include https://review.openstack.org/#/c/72492/ in that rebase | 19:55 |
| bknudson | stevemar: should rebase on https://review.openstack.org/#/c/73350/ so that https://review.openstack.org/#/c/72492/ will pass | 19:55 |
| *** kenperkins has quit IRC | 19:55 | |
| *** seagulls is now known as beagles | 19:56 | |
| *** rfolco has quit IRC | 19:56 | |
| stevemar | bknudson, alright, give me a sec, i usually manage to mess up rebasing when there are dependencies, let me double check things | 19:56 |
| *** promulo has quit IRC | 19:56 | |
| bknudson | stevemar: use git-review -nvR | 19:56 |
| bknudson | and can cherry-pick the changes with git-review -x | 19:57 |
| *** alagalah has quit IRC | 19:58 | |
| *** spzala has joined #openstack-dev | 19:58 | |
| *** alagalah has joined #openstack-dev | 19:58 | |
| *** morazi has joined #openstack-dev | 19:59 | |
| *** jprovazn is now known as jprovazn_afk | 19:59 | |
| *** alagalah has quit IRC | 20:00 | |
| *** alagalah has joined #openstack-dev | 20:01 | |
| *** adreznec has joined #openstack-dev | 20:01 | |
| *** vkozhukalov has joined #openstack-dev | 20:02 | |
| *** leseb has quit IRC | 20:03 | |
| dolphm | ayoung: i show that as released in 0.6.0 | 20:04 |
| dolphm | ayoung: https://bugs.launchpad.net/python-keystoneclient/+bug/1277231 | 20:04 |
| sudorandom | Is there a resource that exists that shows the current status of federations in Keystone (besides the source code of Keystone)? | 20:04 |
| ayoung | dolphm, Ok...so if I do pip-install I should get that patch....lemme see | 20:05 |
| sudorandom | There's a lot of documentation that describes how someone might use keystone, but it's not clear what actually exists | 20:05 |
| *** joesavak has joined #openstack-dev | 20:05 | |
| dolphm | sudorandom: there's a series of blueprints around federation, see the dependencies at the bottom of https://blueprints.launchpad.net/keystone/+spec/saml-id | 20:06 |
| *** tjones has joined #openstack-dev | 20:06 | |
| bknudson | ec2 middleware is not tested -- http://logs.openstack.org/e8/e8f8c1774983bf9d190d6452bfb98b88bf80a36b/post/keystone-coverage/3708766/cover/keystone_middleware_ec2_token.html | 20:06 |
| *** mriedem1 has joined #openstack-dev | 20:06 | |
| bknudson | ec2_token | 20:06 |
| ayoung | dolphm, good to go. THanks | 20:07 |
| bknudson | /opt/stack/keystone/doc/source/api/keystone.rst:71: WARNING: toctree contains reference to nonexisting document u'api/keystone.openstack' | 20:08 |
| bknudson | when I build with https://review.openstack.org/#/c/73350/ | 20:08 |
| bknudson | stevemar: dstanek: ^ | 20:08 |
| bknudson | am I doing something wrong? | 20:08 |
| *** jsavak has quit IRC | 20:08 | |
| morganfainberg | bknudson, afaict that ec2 middleware wasn't really working for a looooong time | 20:08 |
| *** mriedem has quit IRC | 20:08 | |
| dstanek | bknudson: i wonder if you have keystone.openstack files in doc/source/api | 20:09 |
| bknudson | dstanek: I rm -r'd it | 20:09 |
| bknudson | dstanek: rm -r doc/source/api doc/build | 20:10 |
| stevemar | bknudson, running it now | 20:10 |
| stevemar | no errors on my end | 20:10 |
| bknudson | stevemar: did you clear out doc/source/api doc/build ? | 20:11 |
| stevemar | http://paste.openstack.org/show/65549/ | 20:11 |
| stevemar | nope | 20:11 |
| stevemar | clean, ha | 20:11 |
| dstanek | after it runs is there a ref in doc/source/api/keystone.rst to keystone.openstack? | 20:11 |
| bknudson | dstanek: yes, near the end | 20:11 |
| stevemar | dstanek, yep keystone.openstack | 20:12 |
| *** sushils has joined #openstack-dev | 20:12 | |
| *** mgagne has quit IRC | 20:14 | |
| stevemar | bknudson, I get the error now, womp womp | 20:15 |
| *** amcrn has quit IRC | 20:15 | |
| ayoung | dstanek, Ok, merged your patch, pulled down and merged head, got the latest pip installed keystone client, ran the tests and... raise subprocess.CalledProcessError(retcode, "openssl") | 20:16 |
| ayoung | CalledProcessError: Command 'openssl' returned non-zero exit status 3 | 20:16 |
| *** alexpilotti_ has joined #openstack-dev | 20:16 | |
| ayoung | Now, let me fix my part of the patch | 20:16 |
| *** amcrn has joined #openstack-dev | 20:16 | |
| *** xarses has joined #openstack-dev | 20:16 | |
| stevemar | bknudson, so... stick to the original patch? updating test-req? | 20:17 |
| bknudson | stevemar: I'm going to try openstack/common rather than openstack. | 20:17 |
| dstanek | bknudson, stevemar: testing now - had to create another working copy | 20:17 |
| *** ramishra has joined #openstack-dev | 20:17 | |
| bknudson | it seemed to work. | 20:17 |
| ayoung | it passes dstanek | 20:18 |
| *** alexpilotti has quit IRC | 20:18 | |
| dstanek | ayoung: nice | 20:19 |
| dstanek | ayoung: was it as simple as changing the import? | 20:19 |
| ayoung | dstanek, and the catch line | 20:19 |
| bknudson | dstanek: stevemar: ok, docs build was clean this time | 20:19 |
| ayoung | from keystone.common import environment | 20:19 |
| *** exed_ has joined #openstack-dev | 20:19 | |
| ayoung | except environment.subprocess.CalledProcessError: | 20:19 |
| stevemar | bknudson, what did you change exactly? | 20:19 |
| ayoung | I guess I could have | 20:19 |
| bknudson | stevemar: I'll push up the changes. | 20:19 |
| stevemar | k | 20:19 |
| ayoung | from keystone.common.environment import subprocess and then it would have been just the import | 20:19 |
| *** tjones has quit IRC | 20:20 | |
| *** morazi has quit IRC | 20:20 | |
| *** morazi has joined #openstack-dev | 20:21 | |
| bknudson | stevemar: https://review.openstack.org/#/c/73350/2/doc/ext/apidoc.py | 20:21 |
| ayoung | ./keystone/token/providers/pki.py:19:1: H302 import only modules.'from keystone.common.environment import subprocess' does not import a module | 20:22 |
| ayoung | from keystone.common.environment import subprocess | 20:22 |
| bknudson | stevemar: dstanek: now we wait for jenkins. cross your fingers | 20:22 |
| *** ramishra has quit IRC | 20:22 | |
| luisbg | dolphm, hi! thanks for looking at my commit. When you mention adding the "Closes-Bug: ##" are you asking me to do it in the future or to fix this message of this commit now? | 20:23 |
| dstanek | bknudson: that directory doesn't exist | 20:23 |
| *** alexpilotti_ has quit IRC | 20:23 | |
| *** ijw has quit IRC | 20:23 | |
| bknudson | dstanek: oops! | 20:23 |
| *** rodrigods has joined #openstack-dev | 20:24 | |
| *** rodrigods has joined #openstack-dev | 20:24 | |
| bknudson | dstanek: I probably have kombu in my venv | 20:24 |
| *** gokrokve has joined #openstack-dev | 20:24 | |
| lbragstad | morganfainberg: ping? | 20:25 |
| dstanek | bknudson: this may just be sphinx being stupid | 20:26 |
| bknudson | dstanek: I'll try again with openstack/common. | 20:26 |
| *** rodrigods has quit IRC | 20:27 | |
| bknudson | dstanek: no dice, toctree contains reference to nonexisting document u'api/keystone.openstack.common' | 20:27 |
| dstanek | i think sphinx is no longer generating docs for the tree, but is still putting it into the toc | 20:27 |
| bknudson | dstanek: stevemar: how about we go with the change to test-requirements.txt until we can figure out the other prob? | 20:27 |
| stevemar | bknudson, i think that may be easier | 20:28 |
| ayoung | dstanek, keystone.tests.test_cert_setup.CertSetupTestCase.test_can_handle_missing_certs now fails.... I told you there was something that would fail | 20:29 |
| *** cadenzajon has quit IRC | 20:29 | |
| luisbg | woaaah so much stuff in zuul's wait queue | 20:30 |
| dstanek | i don't think they are mutually exclusive patches - and i think morganfainberg has added konbu as part of one of his patches | 20:30 |
| *** gokrokve has quit IRC | 20:31 | |
| *** gokrokve has joined #openstack-dev | 20:31 | |
| *** yolanda has quit IRC | 20:32 | |
| *** gokrokve_ has joined #openstack-dev | 20:32 | |
| bknudson | stevemar: did you abandon yours? | 20:33 |
| stevemar | bknudson, luckily my laziness came in handy | 20:33 |
| bknudson | stevemar: ok, looks like it's ready... I'll rebase all these on that one. | 20:34 |
| stevemar | cool | 20:34 |
| bknudson | and restore dstanek's patch to it's original | 20:34 |
| stevemar | bknudson, https://review.openstack.org/#/c/73072/ lockfile and kombu | 20:34 |
| *** AlexF has quit IRC | 20:34 | |
| *** e0ne has quit IRC | 20:35 | |
| *** kgriffs_afk is now known as kgriffs | 20:35 | |
| *** tdruiva_ has joined #openstack-dev | 20:35 | |
| *** gokrokve has quit IRC | 20:35 | |
| *** devlaps has quit IRC | 20:36 | |
| *** leseb has joined #openstack-dev | 20:36 | |
| *** gokrokve_ has quit IRC | 20:37 | |
| *** tdruiva has quit IRC | 20:38 | |
| dstanek | bknudson, stevemar: looks like this is a bug in sphinx - i'll send a patch upstream, but probably won't become a reality for a while | 20:38 |
| *** dspano has quit IRC | 20:38 | |
| dstanek | dolphm: ^ | 20:38 |
| *** xarses has quit IRC | 20:38 | |
| *** tdruiva_ is now known as tdruiva | 20:38 | |
| stevemar | dstanek, yeah, that could take a while | 20:39 |
| *** sweston has quit IRC | 20:39 | |
| *** alop has quit IRC | 20:40 | |
| *** radez_g0n3 is now known as radez | 20:40 | |
| stevemar | dstanek, did you get a chance to read my late night rambly email? | 20:40 |
| *** leseb has quit IRC | 20:40 | |
| *** pmathews has quit IRC | 20:41 | |
| *** pmathews1 has joined #openstack-dev | 20:41 | |
| *** romcheg1 has joined #openstack-dev | 20:41 | |
| *** sarob has quit IRC | 20:41 | |
| *** devlaps has joined #openstack-dev | 20:42 | |
| *** sarob has joined #openstack-dev | 20:42 | |
| *** t112 is now known as malteserTiffin | 20:42 | |
| *** devlaps has quit IRC | 20:44 | |
| *** devlaps has joined #openstack-dev | 20:44 | |
| dstanek | stevemar: yes, i starting poking at it this mornging, but didn't make much progress. i have started to narrow it down so i hope to have something to show soon. | 20:44 |
| bknudson | dstanek: stevemar: ok, pushed up the patches: https://review.openstack.org/#/c/72492/ | 20:45 |
| stevemar | dstanek, ohh, what did you find :) | 20:45 |
| *** jsavak has joined #openstack-dev | 20:46 | |
| dstanek | stevemar: base_url...ugg | 20:46 |
| *** sarob has quit IRC | 20:46 | |
| dstanek | stevemar: since we are using routes we could be naming them and using url_for | 20:47 |
| *** sarob has joined #openstack-dev | 20:47 | |
| *** joesavak has quit IRC | 20:49 | |
| *** rodrigods has joined #openstack-dev | 20:49 | |
| *** rodrigods has joined #openstack-dev | 20:49 | |
| *** xarses has joined #openstack-dev | 20:50 | |
| *** alop has joined #openstack-dev | 20:51 | |
| stevemar | dstanek, base_url is affecting the weird endpoint logging? | 20:51 |
| *** alexpilotti has joined #openstack-dev | 20:53 | |
| *** mburned has quit IRC | 20:53 | |
| *** mwagner_lap has quit IRC | 20:54 | |
| *** jecarey has quit IRC | 20:54 | |
| *** tongli has quit IRC | 20:55 | |
| *** abhirc has quit IRC | 20:56 | |
| *** hellome has joined #openstack-dev | 20:56 | |
| *** csd has quit IRC | 20:57 | |
| *** melwitt has joined #openstack-dev | 20:58 | |
| *** dvarga has quit IRC | 20:58 | |
| *** yjiang5_away is now known as yjiang5 | 21:00 | |
| *** tjones has joined #openstack-dev | 21:00 | |
| *** sweston has joined #openstack-dev | 21:01 | |
| *** devlaps has quit IRC | 21:01 | |
| *** gokrokve has joined #openstack-dev | 21:02 | |
| *** devlaps has joined #openstack-dev | 21:02 | |
| *** dprince has quit IRC | 21:03 | |
| *** novas0x2a|laptop has joined #openstack-dev | 21:03 | |
| *** shardy_afk is now known as shardy | 21:03 | |
| *** otherwiseguy has quit IRC | 21:04 | |
| *** gokrokve_ has joined #openstack-dev | 21:04 | |
| *** gyee has quit IRC | 21:04 | |
| *** byeager has quit IRC | 21:04 | |
| *** byeager has joined #openstack-dev | 21:05 | |
| *** mburned_out has joined #openstack-dev | 21:05 | |
| *** mburned_out is now known as mburned | 21:05 | |
| *** gokrokv__ has joined #openstack-dev | 21:05 | |
| *** gokrokve has quit IRC | 21:06 | |
| *** krtaylor has quit IRC | 21:08 | |
| *** ijw has joined #openstack-dev | 21:08 | |
| *** gokrokve_ has quit IRC | 21:08 | |
| *** IanGovett has joined #openstack-dev | 21:09 | |
| *** byeager has quit IRC | 21:09 | |
| *** IanGovett1 has quit IRC | 21:09 | |
| *** gokrokv__ has quit IRC | 21:10 | |
| *** joesavak has joined #openstack-dev | 21:10 | |
| *** kamalic has joined #openstack-dev | 21:11 | |
| *** cadenzajon has joined #openstack-dev | 21:11 | |
| *** lcheng has joined #openstack-dev | 21:12 | |
| *** DinaBelova is now known as DinaBelova_ | 21:13 | |
| *** jsavak has quit IRC | 21:13 | |
| *** denis_makogon has quit IRC | 21:13 | |
| dstanek | stevemar: i'm not sure if it's the same issue you were seeing, but it seems to be at the heart of what i was seeing | 21:14 |
| *** rodrigods has quit IRC | 21:16 | |
| *** lbragstad has quit IRC | 21:16 | |
| *** alexpilotti has quit IRC | 21:16 | |
| *** jprovazn_afk has quit IRC | 21:17 | |
| *** ramishra has joined #openstack-dev | 21:18 | |
| *** sweston has quit IRC | 21:20 | |
| ayoung | stevemar, https://review.openstack.org/#/c/69084/ got your additional notifications in there | 21:21 |
| *** uaberme has quit IRC | 21:22 | |
| *** ramishra has quit IRC | 21:23 | |
| stevemar | thanks ayoung | 21:23 |
| ayoung | stevemar, its the three that depend on that that I need to get in. This one was Yak shaving | 21:23 |
| *** changbl has quit IRC | 21:24 | |
| *** changbl has joined #openstack-dev | 21:24 | |
| *** marcoemorais has quit IRC | 21:28 | |
| *** csd has joined #openstack-dev | 21:30 | |
| *** vijendar has quit IRC | 21:32 | |
| *** jckasper__ has quit IRC | 21:34 | |
| *** byeager has joined #openstack-dev | 21:34 | |
| *** exed_ has quit IRC | 21:35 | |
| *** sweston has joined #openstack-dev | 21:36 | |
| *** cnesa has joined #openstack-dev | 21:36 | |
| *** leseb has joined #openstack-dev | 21:37 | |
| *** kamalic has quit IRC | 21:38 | |
| *** byeager has quit IRC | 21:38 | |
| jog0 | clarkb: what is wrong with https://review.openstack.org/#/c/64200/4 I am failing the layout test | 21:38 |
| jog0 | looks like the test is working but just not sure what it means | 21:39 |
| jog0 | (woops meant to ask in infra) | 21:39 |
| clarkb | jog0: check-grenade-dsvm-partial-ncpu not defined is the error | 21:40 |
| jog0 | I thought I defined it though | 21:40 |
| clarkb | jog0: the template is definied but not applied, try adding it to the job group at the end of the devstack-gate.yaml file | 21:40 |
| jog0 | clarkb: ah thanks | 21:41 |
| *** IanGovett has quit IRC | 21:41 | |
| *** leseb has quit IRC | 21:41 | |
| ayoung | dolphm, so, I am leaning once again to prependeding a header to the token like {cms}. I don't think I can cleanly look at a blob and tell: 1 was the right Base64 encoding used and 2 was it compressed. I think I want to leave the current token format as is, in all its brokeness, until we can deprecate the client and old servers: it will be legacy code for 2 more releases | 21:42 |
| ayoung | compression and the URL safe encoding will be one combined patch, one new format, handled by Auth token middleware first and then consumed by the server second. | 21:42 |
| ayoung | I might be able to work it in such a way that it it can be triggered by a config option | 21:43 |
| *** otherwiseguy has joined #openstack-dev | 21:43 | |
| ayoung | Not sure about that, though | 21:43 |
| *** dstanek has quit IRC | 21:44 | |
| *** iv_m has quit IRC | 21:45 | |
| *** mriedem1 is now known as mriedem | 21:48 | |
| *** alagalah has quit IRC | 21:48 | |
| *** marcoemorais has joined #openstack-dev | 21:49 | |
| *** jobewan has quit IRC | 21:49 | |
| *** joesavak has quit IRC | 21:50 | |
| *** bauzas has quit IRC | 21:52 | |
| *** bdpayne has quit IRC | 21:52 | |
| *** joesavak has joined #openstack-dev | 21:53 | |
| *** bdpayne has joined #openstack-dev | 21:53 | |
| *** ijw has quit IRC | 21:56 | |
| *** edmund1 has joined #openstack-dev | 21:58 | |
| *** sarob has quit IRC | 21:58 | |
| *** sarob has joined #openstack-dev | 21:59 | |
| *** xarses_ has joined #openstack-dev | 22:00 | |
| *** edmund has quit IRC | 22:00 | |
| *** xarses has quit IRC | 22:02 | |
| *** mfer has quit IRC | 22:03 | |
| *** jdob has quit IRC | 22:03 | |
| *** colinmcnamara has joined #openstack-dev | 22:03 | |
| *** sarob has quit IRC | 22:03 | |
| *** bhuvan has quit IRC | 22:04 | |
| *** gokrokve has joined #openstack-dev | 22:04 | |
| *** bhuvan has joined #openstack-dev | 22:05 | |
| *** caleb_ has quit IRC | 22:07 | |
| *** david-lyle has quit IRC | 22:09 | |
| *** jobewan has joined #openstack-dev | 22:09 | |
| *** vartom1111111115 has quit IRC | 22:12 | |
| *** achampion has quit IRC | 22:12 | |
| *** bswartz has quit IRC | 22:13 | |
| *** krtaylor has joined #openstack-dev | 22:13 | |
| *** peristeri has quit IRC | 22:15 | |
| *** thomasem has quit IRC | 22:15 | |
| *** markvoelker has quit IRC | 22:15 | |
| *** edmund1 has quit IRC | 22:16 | |
| *** rtheis has quit IRC | 22:17 | |
| *** relaxdiego has quit IRC | 22:17 | |
| *** SumitNaiksatam has quit IRC | 22:18 | |
| *** relaxdiego has joined #openstack-dev | 22:18 | |
| *** ramishra has joined #openstack-dev | 22:19 | |
| ayoung | jdennis, I think I've come back around on the Prefix for compressed tokens. It makes it much easier to determine what to do. Since ASN1, zlib and Base64 are all not 100% detectable, the header will imply: base64 surlsafe encoding + zlib compression + DER formatted CMS + JSON | 22:21 |
| ayoung | I think I want a prefix like this | 22:22 |
| ayoung | {keystone=v3.5} | 22:22 |
| ayoung | keystone being the implemenation of the identity API, and a token version | 22:22 |
| *** Alexei_987 has left #openstack-dev | 22:23 | |
| *** ramishra has quit IRC | 22:23 | |
| ekarlso | ayoung: kind of token is one using with keystone atm ? | 22:24 |
| ayoung | ekarlso, heh, I was just writing that up: | 22:24 |
| ayoung | take a JSON doc | 22:24 |
| ayoung | CMS sign it using openssl into PEM format | 22:24 |
| ayoung | strip off the header, footer and line breaks | 22:24 |
| *** nkinder_afk is now known as nkinder | 22:24 | |
| ayoung | and convert / to - | 22:24 |
| ayoung | its the last step that is the ugliest | 22:25 |
| jdennis | ayoung: glad to hear you've come around to the idea of a prefix but why so complicated and introduce an indirection and lookup? Why not just call it what it is? {uuid}, {cms_urlsafe}, or some such | 22:25 |
| ayoung | as it is not a proper URL safe format | 22:25 |
| ayoung | jdennis, too many variables | 22:25 |
| ayoung | jdennis, its a cms compressed base64 token | 22:25 |
| *** dbalog has left #openstack-dev | 22:26 | |
| ayoung | I'd rather just say "keystone token version blah " and let the user look up all of the details | 22:26 |
| jdennis | ayoung: fair enough | 22:26 |
| ekarlso | ayoung: any ideas on supporting other mechanisms then tokens ? | 22:26 |
| ayoung | ekarlso, like SAML? | 22:27 |
| ayoung | ekarlso, problem is not the format with SAML, problem is the RBAC data needs to be in there | 22:27 |
| ekarlso | ayoung: kinda | 22:27 |
| ekarlso | ah | 22:27 |
| _cjones_ | ayoung: Can you point me to the document where the nomenclature for Domains/tenants/projects, which to use for keystone v3 onwards is? My google skills are failing me atm. | 22:27 |
| ayoung | ekarlso, SAML is like LDAP, it has the organizational view of the user, but we need more specific data for Openstac | 22:27 |
| ayoung | _cjones_, identity-api | 22:28 |
| ayoung | https://github.com/openstack/identity-api/blob/master/openstack-identity-api/v3/src/markdown/identity-api-v3.md | 22:28 |
| _cjones_ | ayoung: Thanks man. I knew I read it! | 22:28 |
| ekarlso | ayoung: i've just been pokking at keystone for opendaylight usage | 22:28 |
| *** tjones has quit IRC | 22:28 | |
| ayoung | OK...family time. | 22:28 |
| ayoung | ekarlso, send me an email, I'd love to read it, but I need to go be dad for a while (East coast time) | 22:29 |
| *** ayoung is now known as ayoung-afk | 22:29 | |
| *** tjones has joined #openstack-dev | 22:29 | |
| *** prad has quit IRC | 22:29 | |
| *** CaptTofu_ has quit IRC | 22:31 | |
| *** aeperezt has quit IRC | 22:31 | |
| *** bhuvan has quit IRC | 22:33 | |
| *** bhuvan has joined #openstack-dev | 22:33 | |
| *** rwsu has quit IRC | 22:34 | |
| *** radez is now known as radez_g0n3 | 22:34 | |
| *** xarses_ is now known as xarses | 22:37 | |
| *** leseb has joined #openstack-dev | 22:37 | |
| *** tmclaugh[work] has quit IRC | 22:38 | |
| *** crandquist has quit IRC | 22:38 | |
| *** crandquist has joined #openstack-dev | 22:40 | |
| *** rcleere has quit IRC | 22:42 | |
| *** leseb has quit IRC | 22:42 | |
| *** gordc has quit IRC | 22:42 | |
| *** jmontemayor has quit IRC | 22:43 | |
| *** jmontemayor has joined #openstack-dev | 22:44 | |
| *** sweston has quit IRC | 22:44 | |
| *** mriedem has quit IRC | 22:44 | |
| *** gokrokve_ has joined #openstack-dev | 22:45 | |
| *** tjones has quit IRC | 22:48 | |
| *** gokrokve has quit IRC | 22:48 | |
| *** tjones has joined #openstack-dev | 22:48 | |
| *** mdurnosvistov_ has joined #openstack-dev | 22:49 | |
| *** adreznec has quit IRC | 22:54 | |
| *** exed_ has joined #openstack-dev | 22:54 | |
| *** tanisdl has joined #openstack-dev | 22:54 | |
| *** jecarey has joined #openstack-dev | 22:56 | |
| *** mrodden has quit IRC | 22:57 | |
| *** alagalah has joined #openstack-dev | 22:59 | |
| *** sarob has joined #openstack-dev | 22:59 | |
| *** alop has quit IRC | 23:01 | |
| *** kbringard has quit IRC | 23:01 | |
| *** kevinconway has quit IRC | 23:01 | |
| *** mlegault has quit IRC | 23:02 | |
| *** alagalah has quit IRC | 23:03 | |
| *** praneshp has quit IRC | 23:03 | |
| *** rwsu has joined #openstack-dev | 23:04 | |
| *** browne has quit IRC | 23:04 | |
| *** vkozhukalov has quit IRC | 23:04 | |
| *** sarob has quit IRC | 23:05 | |
| beekneemech | dhellmann: Looking through the i3 list, but a little confused by https://blueprints.launchpad.net/oslo/+spec/service-readiness | 23:09 |
| beekneemech | It shows up in the list, but it's not approved. | 23:09 |
| zzelle | pcm_, hi | 23:09 |
| *** sarob has joined #openstack-dev | 23:09 | |
| dhellmann | beekneemech: it looks like apevec added that recently | 23:10 |
| *** xarses has quit IRC | 23:10 | |
| *** carl_baldwin has quit IRC | 23:11 | |
| *** thedodd has quit IRC | 23:12 | |
| dhellmann | beekneemech: I'll email him to ask about that, so you can ignore it unless you have time to look over the approach -- the patch already has 2 -1 votes | 23:13 |
| beekneemech | dhellmann: Ah, okay. I didn't even get that far. :-) | 23:13 |
| beekneemech | dhellmann: Thanks | 23:13 |
| *** exed_ has quit IRC | 23:14 | |
| *** sarob has quit IRC | 23:14 | |
| *** leseb has joined #openstack-dev | 23:16 | |
| *** eharney has quit IRC | 23:17 | |
| *** sarob has joined #openstack-dev | 23:17 | |
| *** romcheg1 has quit IRC | 23:18 | |
| *** vkmc has quit IRC | 23:18 | |
| topol | morganfainberg, my meetup charts are starting to look very good. You are going to be very happy | 23:19 |
| morganfainberg | topol, hehe | 23:19 |
| morganfainberg | topol, sec | 23:19 |
| *** ramishra has joined #openstack-dev | 23:20 | |
| *** romcheg1 has joined #openstack-dev | 23:20 | |
| stevemar | topol! I forgot to send you the list | 23:21 |
| *** xarses has joined #openstack-dev | 23:22 | |
| *** rwsu has quit IRC | 23:22 | |
| *** tmclaugh[work] has joined #openstack-dev | 23:22 | |
| *** krtaylor has quit IRC | 23:24 | |
| *** ramishra has quit IRC | 23:24 | |
| topol | dolphm, what did you do to my patch??? | 23:24 |
| *** dims_ has quit IRC | 23:25 | |
| *** sarob has quit IRC | 23:25 | |
| *** sarob has joined #openstack-dev | 23:26 | |
| morganfainberg | topol, magic? | 23:26 |
| *** relaxdiego has quit IRC | 23:26 | |
| *** mriedem has joined #openstack-dev | 23:27 | |
| topol | dolphm, I guess I should not have taunted you about the context not working :-) | 23:29 |
| *** pablosan has quit IRC | 23:29 | |
| *** sarob has quit IRC | 23:31 | |
| *** lascii is now known as alaski | 23:31 | |
| topol | dolphm, stevemar, morganfainberg, if you want something halarious to look fwd to when you get my age consider this. I'm not going out with my wife for Valentines Day because she is instead taking my daughter and her boyfriend out for their valentines date (dinner and a movie). I am lesser priority and will have to wait till another night... | 23:31 |
| stevemar | topol, so, night to yourself, sounds good to me :P | 23:32 |
| stevemar | topol, he changed it up a bit :\ | 23:32 |
| *** joesavak has quit IRC | 23:33 | |
| topol | stevemar, do you know if he is gonna take it over??? | 23:33 |
| stevemar | topol, sent you a note btw | 23:35 |
| *** kolesovdv has joined #openstack-dev | 23:36 | |
| *** buzztroll has quit IRC | 23:36 | |
| *** buzztroll has joined #openstack-dev | 23:36 | |
| stevemar | topol, review it, if there is something you don't like, you can over-write his changes | 23:36 |
| stevemar | topol, i think the point it to move it out to the manager layer, he apologizes for leading you down the wrong path at the hackathon | 23:37 |
| topol | stevemar, at this point I just want it to get in. I'm okay with however he wants it structured | 23:38 |
| *** sn6i23a has quit IRC | 23:38 | |
| *** leseb has quit IRC | 23:38 | |
| topol | stevemar my concern is it got bumped down to WIP and I wasnt sure who is supposed to close itout | 23:38 |
| *** achampion has joined #openstack-dev | 23:39 | |
| stevemar | topol, he only marked it WIP cause he didn't change the tests | 23:39 |
| *** bdpayne has quit IRC | 23:39 | |
| *** dims_ has joined #openstack-dev | 23:40 | |
| *** kris_h has quit IRC | 23:41 | |
| *** lcheng has quit IRC | 23:42 | |
| *** leseb has joined #openstack-dev | 23:43 | |
| *** SumitNaiksatam has joined #openstack-dev | 23:44 | |
| topol | stevemar, were you gonna try and add the new tests? | 23:45 |
| *** colinmcnamara has quit IRC | 23:45 | |
| *** SumitNaiksatam has quit IRC | 23:46 | |
| *** SumitNaiksatam has joined #openstack-dev | 23:47 | |
| *** sarob has joined #openstack-dev | 23:48 | |
| *** FunnyLookinHat has quit IRC | 23:49 | |
| *** lazy_prince has joined #openstack-dev | 23:51 | |
| *** killer_prince has quit IRC | 23:52 | |
| *** lazy_prince is now known as killer_prince | 23:52 | |
| topol | stevemar, so he moved where the decorator went so he can get a hold of context, correct? | 23:54 |
| stevemar | topol, sorta, he pulled it back a level to the manager class, and only for the identity_api.authenticate method | 23:55 |
| *** sgordon has quit IRC | 23:57 | |
| *** killer_prince has quit IRC | 23:59 | |
| *** mlavalle has quit IRC | 23:59 | |
| *** melwitt has quit IRC | 23:59 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!