| *** bhuvan_ has quit IRC | 00:00 | |
| *** stevemar has quit IRC | 00:04 | |
| *** buzztroll has joined #openstack-dev | 00:05 | |
| *** jcooley_ has joined #openstack-dev | 00:07 | |
| *** bhuvan_ has joined #openstack-dev | 00:08 | |
| *** bhuvan has quit IRC | 00:08 | |
| *** colinmcnamara has joined #openstack-dev | 00:09 | |
| *** buzztroll has quit IRC | 00:10 | |
| *** sweston has joined #openstack-dev | 00:11 | |
| *** gokrokve has joined #openstack-dev | 00:12 | |
| *** jcooley_ has quit IRC | 00:13 | |
| *** gokrokve has quit IRC | 00:17 | |
| *** mikeoutland has joined #openstack-dev | 00:20 | |
| *** matsuhashi has joined #openstack-dev | 00:23 | |
| *** KurtMartin has joined #openstack-dev | 00:26 | |
| *** jcooley_ has joined #openstack-dev | 00:30 | |
| *** e0ne_ has quit IRC | 00:31 | |
| *** matsuhashi has quit IRC | 00:33 | |
| *** matsuhashi has joined #openstack-dev | 00:34 | |
| *** Sukhdev has quit IRC | 00:35 | |
| *** flaper87 is now known as flaper87|afk | 00:36 | |
| *** jcooley_ has quit IRC | 00:37 | |
| *** aspiers has quit IRC | 00:38 | |
| *** matsuhashi has quit IRC | 00:38 | |
| *** cnesa has joined #openstack-dev | 00:39 | |
| *** yamahata has quit IRC | 00:41 | |
| *** tserong has quit IRC | 00:41 | |
| *** alagalah has quit IRC | 00:42 | |
| *** mikeoutland has quit IRC | 00:43 | |
| *** tserong has joined #openstack-dev | 00:44 | |
| *** yamahata has joined #openstack-dev | 00:45 | |
| *** colinmcnamara has quit IRC | 00:46 | |
| *** bhuvan_ has quit IRC | 00:55 | |
| *** sweston has quit IRC | 00:56 | |
| *** sweston has joined #openstack-dev | 00:58 | |
| *** fandi has quit IRC | 00:59 | |
| *** yamahata has quit IRC | 01:00 | |
| *** asalkeld has joined #openstack-dev | 01:01 | |
| *** matsuhashi has joined #openstack-dev | 01:04 | |
| *** dkehn__ has joined #openstack-dev | 01:04 | |
| *** nosnos has joined #openstack-dev | 01:05 | |
| *** dkehn__ has quit IRC | 01:05 | |
| *** buzztroll has joined #openstack-dev | 01:05 | |
| *** dkehn__ has joined #openstack-dev | 01:05 | |
| *** dkehn_ has quit IRC | 01:06 | |
| *** dkehn__ is now known as dkehn_ | 01:09 | |
| *** buzztroll has quit IRC | 01:10 | |
| *** gmoro has quit IRC | 01:11 | |
| *** sambagirl has joined #openstack-dev | 01:11 | |
| *** tkay has joined #openstack-dev | 01:12 | |
| *** gokrokve has joined #openstack-dev | 01:13 | |
| *** sweston has quit IRC | 01:14 | |
| *** buzztroll has joined #openstack-dev | 01:16 | |
| *** gokrokve has quit IRC | 01:17 | |
| *** colinmcnamara has joined #openstack-dev | 01:19 | |
| *** gmoro has joined #openstack-dev | 01:23 | |
| *** faramir has joined #openstack-dev | 01:23 | |
| *** colinmcnamara has quit IRC | 01:23 | |
| *** faramir has quit IRC | 01:27 | |
| *** morganfainberg_Z is now known as morganfainberg | 01:28 | |
| * morganfainberg is back | 01:30 | |
| *** dsirrine has quit IRC | 01:30 | |
| *** jcooley_ has joined #openstack-dev | 01:30 | |
| * jamielennox is relieved | 01:31 | |
| morganfainberg | jamielennox, admit it... you're not really :P | 01:31 |
|---|---|---|
| *** troytoman-away is now known as troytoman | 01:32 | |
| jamielennox | morganfainberg: the _Z has been up a bit recently, i wsa getting worried as i never thought you slept | 01:32 |
| morganfainberg | jamielennox, i just turned that feature back on | 01:32 |
| morganfainberg | jamielennox, i had that function turned off in my ZNC a while ago | 01:33 |
| jamielennox | morganfainberg: i have that, but then i forget to close the window so it doesn't matter anyway | 01:33 |
| morganfainberg | jamielennox, hehe, i use my laptop for everything, i close the lid and it auto-disconnects and sets the _Z | 01:34 |
| morganfainberg | now... lets see if i can finish making it so we don't have to store token data twice. | 01:34 |
| morganfainberg | cause... trying to unwind this is icky :( | 01:34 |
| jamielennox | morganfainberg: i need to get back server side, i've been interested in fixing that stuff for a while | 01:34 |
| morganfainberg | jamielennox, it's a requirement to get to ephemeral tokens | 01:35 |
| morganfainberg | jamielennox, since the PKI blob only contains the data in token_ref['token_data'] | 01:35 |
| morganfainberg | and i'm making it so we stop reconstructing the token from the DB every time if it's a PKI token | 01:36 |
| *** hdd has joined #openstack-dev | 01:36 | |
| jamielennox | morganfainberg: yea, i get it | 01:36 |
| jamielennox | i would like to have auth_token do that for us if possible | 01:37 |
| morganfainberg | jamielennox, sure, eventually it will. right now i'm going to make AuthContext middleware a bit smarter | 01:37 |
| *** jcooley_ has quit IRC | 01:37 | |
| jamielennox | the only thing i can say to watch out for is that we can retrieve a PKI token using GET /auth/token/XXXX where XXX is the hash | 01:37 |
| morganfainberg | jamielennox, ideally auth_token shouldn't be used, but the underlying code for auth_token should be consumable as a library (we might want slightly different mechanism in keystone than how auth_token works) | 01:37 |
| jamielennox | i don't know why anyone would use that but it's possible | 01:38 |
| morganfainberg | jamielennox, i'm not changing anything that looks like a UUID token unless you use the (soon to be) ephemeral PKI provider | 01:38 |
| jamielennox | morganfainberg: i don't know - i would say ideally auth_token should work | 01:38 |
| morganfainberg | which case, no UUID tokens will be allowed | 01:38 |
| jamielennox | oh ok, it's a new provider - guess that solves that problem | 01:38 |
| morganfainberg | jamielennox, nah, auth_token has other assumptions that we shouldn't be making for the server | 01:39 |
| jamielennox | ... maybe | 01:39 |
| morganfainberg | jamielennox, but we should have the majority of the code in a library | 01:39 |
| morganfainberg | jamielennox, so auth_token, AuthContext, etc all are just spins on that logic | 01:39 |
| morganfainberg | the finer points of configuration, etc, | 01:40 |
| *** alagalah_ has joined #openstack-dev | 01:40 | |
| *** gokrokve has joined #openstack-dev | 01:40 | |
| morganfainberg | e.g. maybe the only difference is that AuthContext uses keystone's signing certs directly vs. auth_token asking a keystone for them | 01:40 |
| jamielennox | i need to fix that pecan patch, i'm of the opinion that auth_context as a middleware is not necessarily the right place for it | 01:40 |
| *** e0ne has joined #openstack-dev | 01:42 | |
| *** buzztroll has quit IRC | 01:43 | |
| *** gokrokve has quit IRC | 01:45 | |
| *** troytoman is now known as troytoman-away | 01:45 | |
| *** dsirrine has joined #openstack-dev | 01:46 | |
| *** mikeoutland has joined #openstack-dev | 01:47 | |
| *** colinmcnamara has joined #openstack-dev | 01:47 | |
| *** e0ne has quit IRC | 01:47 | |
| *** baoli has joined #openstack-dev | 01:47 | |
| *** sarob has joined #openstack-dev | 01:47 | |
| *** yaguang has joined #openstack-dev | 01:48 | |
| *** yamahata__ has quit IRC | 01:49 | |
| *** tkay has quit IRC | 01:51 | |
| *** yamahata has joined #openstack-dev | 01:51 | |
| *** mikeoutland has quit IRC | 01:51 | |
| *** buzztroll has joined #openstack-dev | 01:52 | |
| *** yamahata_ has joined #openstack-dev | 01:54 | |
| *** ramishra has joined #openstack-dev | 01:55 | |
| *** ramishra has quit IRC | 01:55 | |
| *** ramishra has joined #openstack-dev | 01:56 | |
| *** yamahata has quit IRC | 02:01 | |
| *** Mandell has quit IRC | 02:02 | |
| *** buzztroll has quit IRC | 02:03 | |
| *** stevemar has joined #openstack-dev | 02:04 | |
| *** sarob has quit IRC | 02:04 | |
| *** ngoracke has joined #openstack-dev | 02:05 | |
| *** xjiujiu has joined #openstack-dev | 02:06 | |
| *** colinmcnamara has quit IRC | 02:06 | |
| *** mikeoutland has joined #openstack-dev | 02:07 | |
| *** buzztroll has joined #openstack-dev | 02:08 | |
| *** dsirrine has quit IRC | 02:10 | |
| *** xarses has joined #openstack-dev | 02:17 | |
| *** matsuhashi has quit IRC | 02:18 | |
| *** erkules_ has joined #openstack-dev | 02:19 | |
| *** buzztroll has quit IRC | 02:19 | |
| *** xingchao has joined #openstack-dev | 02:20 | |
| *** ytwu has quit IRC | 02:20 | |
| *** erkules has quit IRC | 02:21 | |
| *** mikeoutland has quit IRC | 02:24 | |
| *** ytwu has joined #openstack-dev | 02:24 | |
| *** sgordon has joined #openstack-dev | 02:24 | |
| *** sgordon has joined #openstack-dev | 02:24 | |
| *** jcooley_ has joined #openstack-dev | 02:26 | |
| *** sushils has quit IRC | 02:26 | |
| *** matsuhashi has joined #openstack-dev | 02:26 | |
| *** baoli has quit IRC | 02:27 | |
| *** Ryan_Lane has joined #openstack-dev | 02:27 | |
| *** buzztroll has joined #openstack-dev | 02:28 | |
| *** gokrokve has joined #openstack-dev | 02:28 | |
| *** mikeoutland has joined #openstack-dev | 02:29 | |
| *** gokrokve_ has joined #openstack-dev | 02:30 | |
| *** jcooley_ has quit IRC | 02:31 | |
| *** sushils has joined #openstack-dev | 02:31 | |
| *** joesavak has joined #openstack-dev | 02:33 | |
| *** gokrokve has quit IRC | 02:33 | |
| *** malteserTiffin has quit IRC | 02:34 | |
| *** mikeoutland has quit IRC | 02:34 | |
| *** colinmcnamara has joined #openstack-dev | 02:34 | |
| *** jsavak has joined #openstack-dev | 02:35 | |
| *** gokrokve_ has quit IRC | 02:35 | |
| *** byeager has joined #openstack-dev | 02:35 | |
| *** hdd has quit IRC | 02:35 | |
| *** devoid has quit IRC | 02:36 | |
| *** baoli has joined #openstack-dev | 02:37 | |
| *** buzztroll has quit IRC | 02:37 | |
| *** joesavak has quit IRC | 02:39 | |
| *** baoli has quit IRC | 02:41 | |
| KurtMartin | could any openstack-requirement cores take a look at https://review.openstack.org/#/c/73727/ just a minimum version change on the hp3parclient, about 3 cinder patches for I3 are depending on it landing...thanks | 02:42 |
| *** dave_tucker is now known as dave_tucker_zzz | 02:42 | |
| *** sushils has quit IRC | 02:43 | |
| *** colinmcnamara has quit IRC | 02:46 | |
| morganfainberg | wow | 02:48 |
| morganfainberg | we do some janky stuff when we're storing the tokens. | 02:48 |
| *** sarob has joined #openstack-dev | 02:48 | |
| *** buzztroll has joined #openstack-dev | 02:48 | |
| morganfainberg | jamielennox, i;m almost sad to say SQL backend doesn't work even remotely the same as the kvs / memcache backend token store | 02:48 |
| morganfainberg | as in what it returns. | 02:49 |
| jamielennox | morganfainberg: i know i've looked at it closely in the past and wanted to cry | 02:49 |
| morganfainberg | jamielennox, the sad part is... it looks like we store all the data, but we don't actually use any of it | 02:50 |
| jamielennox | morganfainberg: at the time we didn't have token providers so it would have been much more difficult to fix | 02:50 |
| morganfainberg | jamielennox, eh, that is relative | 02:50 |
| morganfainberg | jamielennox, w/ token providers we've backed ourselves into a corner | 02:50 |
| jamielennox | morganfainberg: i think you use it when retrieving the token? the GET / | 02:50 |
| morganfainberg | jamielennox, nope, | 02:50 |
| jamielennox | morganfainberg: yea, agreed there too | 02:50 |
| jamielennox | morganfainberg: lol, ok | 02:51 |
| morganfainberg | jamielennox, tokens are univerisally reconstructed every time | 02:51 |
| morganfainberg | jamielennox, it's ... icky | 02:51 |
| morganfainberg | jamielennox, so if something changed in the DB, in theory you'd get different info back | 02:51 |
| jamielennox | morganfainberg: which in actual fact is ok - because if something changed in the db then keystone would apparently enforce those new permissions on you | 02:52 |
| *** Ryan_Lane has quit IRC | 02:52 | |
| jamielennox | :) | 02:52 |
| morganfainberg | jamielennox, sure, except the services (nova) could see something different than keystone | 02:52 |
| *** sarob has quit IRC | 02:52 | |
| morganfainberg | jamielennox, with the same token | 02:53 |
| *** sarob has joined #openstack-dev | 02:53 | |
| morganfainberg | jamielennox, so, no, i'd say in likelyhood you don't want the token to ever change. | 02:53 |
| jamielennox | morganfainberg: the :) was meant to negate the 'ok' in that | 02:53 |
| morganfainberg | jamielennox, LOL ok | 02:53 |
| morganfainberg | jamielennox, yeah. i'm... kinda sad | 02:53 |
| morganfainberg | jamielennox, i am thinking i'm going to always populate the service catalog out-of-band of the token itself. | 02:54 |
| morganfainberg | jamielennox, but the rest of the stuff will actually get stored | 02:54 |
| jamielennox | not following that | 02:54 |
| jamielennox | why is anything getting stored? | 02:54 |
| *** KurtMartin has quit IRC | 02:54 | |
| *** jsavak has quit IRC | 02:55 | |
| *** byeager has quit IRC | 02:55 | |
| *** ianw has quit IRC | 02:55 | |
| *** KurtMartin has joined #openstack-dev | 02:55 | |
| *** mriedem has quit IRC | 02:56 | |
| nebulta | i'm looking for some good software to manage my media, mostly tv/movies but maybe music if its worth a damn. Any recommendations? | 02:56 |
| *** paragan has joined #openstack-dev | 02:58 | |
| *** paragan has quit IRC | 02:58 | |
| *** paragan has joined #openstack-dev | 02:58 | |
| *** thomasem has joined #openstack-dev | 02:59 | |
| *** thomasem has quit IRC | 02:59 | |
| *** colinmcnamara has joined #openstack-dev | 03:01 | |
| *** jcooley_ has joined #openstack-dev | 03:01 | |
| *** pcm_ has quit IRC | 03:01 | |
| *** ianw has joined #openstack-dev | 03:02 | |
| sambagirl | sure | 03:02 |
| sambagirl | use myth | 03:02 |
| *** pcm_ has joined #openstack-dev | 03:02 | |
| sambagirl | or linuxmce | 03:02 |
| sambagirl | nebulta | 03:02 |
| sambagirl | http://www.linuxmce.com | 03:03 |
| sambagirl | or .org | 03:03 |
| *** RajeshMohan has quit IRC | 03:08 | |
| *** RajeshMohan has joined #openstack-dev | 03:09 | |
| *** samalba has quit IRC | 03:11 | |
| *** xchu has joined #openstack-dev | 03:12 | |
| *** samalba has joined #openstack-dev | 03:12 | |
| *** baoli has joined #openstack-dev | 03:12 | |
| *** erkules_ is now known as erkules | 03:12 | |
| *** networkstatic has joined #openstack-dev | 03:13 | |
| *** jobewan has quit IRC | 03:14 | |
| *** otherwiseguy has quit IRC | 03:17 | |
| *** colinmcnamara has quit IRC | 03:20 | |
| nebulta | wow this linux CME is buck wild | 03:22 |
| nebulta | tyvm for link | 03:22 |
| *** sweston has joined #openstack-dev | 03:22 | |
| nebulta | MCE rather | 03:22 |
| nebulta | oh god MAME emulator built into DVR? yes please | 03:23 |
| *** colinmcnamara has joined #openstack-dev | 03:24 | |
| topol | morganfainberg, sending you the meetup deck I created in about 10 minutes. Should hopefully save you some time | 03:27 |
| morganfainberg | topol, ++ thanks :) | 03:27 |
| stevemar | topol, cc me :) | 03:27 |
| morganfainberg | jamielennox, because in the past it was stored | 03:27 |
| morganfainberg | jamielennox, pre-providers | 03:27 |
| morganfainberg | jamielennox, and i'm going to move us back to using that information. but... this has been kinda of a facepalm moment for me. | 03:27 |
| *** gokrokve has joined #openstack-dev | 03:28 | |
| topol | stevemar. will do I promise. Feel free to give some feedback. I have to present on Wednesday | 03:28 |
| morganfainberg | jamielennox, i think this was an intentional choice (looking at some of the FIXME comments) | 03:28 |
| *** otherwiseguy has joined #openstack-dev | 03:29 | |
| morganfainberg | jamielennox, any thoughts on the catalog? I'm tempted to always construct that. | 03:29 |
| morganfainberg | stevemar, ^ the last comment | 03:29 |
| morganfainberg | jamielennox, just so we don't worry about storing a ton of data | 03:29 |
| morganfainberg | stevemar, ^ (damn it, i need to type more than one name) | 03:30 |
| stevemar | morganfainberg, :) | 03:30 |
| *** otherwiseguy has quit IRC | 03:30 | |
| morganfainberg | topol, ^ feel free to chime in as well. | 03:30 |
| morganfainberg | basically, tokens never use the "stored" data atm, we reconstruct them every time inside keystone. I want to move us away from that and use PKI provided data. | 03:31 |
| morganfainberg | but the catalog is a ton of data compared to say the rest of the token info | 03:31 |
| stevemar | morganfainberg, we've always stored, whats the motive for not storing it? | 03:32 |
| morganfainberg | stevemar, move to ephemeral tokens | 03:32 |
| *** colinmcnamara has quit IRC | 03:32 | |
| morganfainberg | stevemar, but... oh catalog | 03:32 |
| *** haomaiwang has quit IRC | 03:32 | |
| morganfainberg | stevemar, because it's potentially a _lot_ of data | 03:33 |
| stevemar | morganfainberg, can we reconstruct it if we need to? | 03:33 |
| morganfainberg | stevemar, and text blobs are limited in effective size | 03:33 |
| topol | morganfainberg the catalog is a big piggy | 03:33 |
| morganfainberg | stevemar, the catalog is available from the catalog_api | 03:33 |
| *** haomaiwa_ has joined #openstack-dev | 03:33 | |
| morganfainberg | so, since it's a (as topol just said) a bit of a pig when it comes to data, i could just "add it" and strip it out when storing the token | 03:33 |
| topol | morganfainberg didnt we give and option to make it optional ? | 03:33 |
| morganfainberg | topol, we did, i mean in the persistent store, never store it | 03:34 |
| morganfainberg | topol, if it should be in the token, we construct and add it on-demand | 03:34 |
| topol | morganfainberg I totally agree | 03:34 |
| stevemar | morganfainberg, that's what i was getting at | 03:34 |
| stevemar | morganfainberg, sounds like the right approach | 03:34 |
| morganfainberg | stevemar, topol, alternatively, i can just add a "catalog" blob column in SQL | 03:35 |
| morganfainberg | and we can store the catalog in that. i don't want to store it in the general "storage" | 03:35 |
| stevemar | morganfainberg, currently, is it a blob? | 03:35 |
| *** haomaiw__ has joined #openstack-dev | 03:35 | |
| stevemar | morganfainberg, you mean just do a jsondumps on it, and store that in the SQL? | 03:36 |
| morganfainberg | stevemar, we have a JSONblob (textblob) for everything token - except the "Expires" (datetime.datetime, used internally only, this isn't 'expires_at' in the token data), Valid (Bool), User_id, trust_id | 03:36 |
| nebulta | If I have a dedi box and lots of stuff I want to install(lamp,rutorrent,ownbox,host 2-3 websites,vpn) is there anything I should do initially, with partitions or the like, to keep everything in order? | 03:36 |
| morganfainberg | stevemar, so, we store some misc data for indexing, and then all items in the token in a textblob | 03:37 |
| morganfainberg | stevemar, and we just throw that out | 03:37 |
| morganfainberg | stevemar, since we construct the token each time | 03:37 |
| *** fandi has joined #openstack-dev | 03:37 | |
| morganfainberg | stevemar, so, with the fixes to use "PKI" token data instead, i want to move back to useing the 'stored' data when not deconstructing PKI data | 03:37 |
| morganfainberg | stevemar, the catalog has potential to be stupid in size, so, either i always construct it... which in theory could be bad (token data actually can change) | 03:38 |
| *** haomaiwa_ has quit IRC | 03:38 | |
| morganfainberg | or i could make the catalog it's own dump | 03:38 |
| morganfainberg | stevemar, topol, i am leaning towards constructing the catalog on demand, and making it "not part of the stored token data" | 03:38 |
| *** dkehn__ has joined #openstack-dev | 03:38 | |
| topol | morganfainberg I like that option | 03:39 |
| morganfainberg | topol, the catalog is optional / not used for anything but discoverability and doesn't feel like (currently) 'secure' data | 03:39 |
| morganfainberg | like roles are 'secure' for example (or trust) | 03:40 |
| topol | morganfainberg, a round peg in a square hole, yes | 03:40 |
| morganfainberg | topol, cool. | 03:40 |
| stevemar | morganfainberg, i say generate the catalog on demand | 03:40 |
| morganfainberg | topol, this is good cleanup, but ugh, what a mess to unwind | 03:40 |
| stevemar | morganfainberg, is it included by default? | 03:40 |
| morganfainberg | topol, but once this is done, i can make CMS decode PKI data | 03:40 |
| morganfainberg | stevemar, yes | 03:40 |
| stevemar | morganfainberg, we should change that | 03:41 |
| topol | morganfainberg, whats CMS? | 03:41 |
| *** dkehn_ has quit IRC | 03:41 | |
| morganfainberg | stevemar, can't we need it to be included by default. discoverability, better to include the catalog unless someone explicitly opts out | 03:41 |
| morganfainberg | topol, the PKI encryption bits we use | 03:41 |
| stevemar | ") | 03:41 |
| stevemar | :( | 03:41 |
| morganfainberg | topol, how auth_token works | 03:41 |
| morganfainberg | topol, i'm makign AuthContext middleware closer to auth_token | 03:42 |
| stevemar | topol, cms can be used to decrypt PKI, back to a normal uuid | 03:42 |
| morganfainberg | authcontext = middleware that does token loading | 03:42 |
| stevemar | i think ... | 03:42 |
| morganfainberg | in keystone | 03:42 |
| morganfainberg | stevemar, ++ | 03:42 |
| morganfainberg | stevemar, it is | 03:42 |
| topol | morganfainberg, K, the call out to the commandline stuff for signing? | 03:42 |
| stevemar | yee haw | 03:42 |
| morganfainberg | stevemar, it also is the openssl system used to encrypt the token and decrypt / decode the tokens | 03:42 |
| morganfainberg | topol, yep | 03:42 |
| topol | ehy did the catalog cause the PKI grief? | 03:43 |
| morganfainberg | topol, > 8k token | 03:43 |
| topol | besdes making it huge | 03:43 |
| morganfainberg | topol, or 4k | 03:43 |
| topol | (you didnt let me finish) | 03:43 |
| morganfainberg | topol, eventlet default max http header size was small | 03:43 |
| morganfainberg | so we exceeded the header limit | 03:43 |
| topol | everybody hates the size | 03:43 |
| stevemar | topol, cause it's a PITA to copy/paste | 03:44 |
| stevemar | :P | 03:44 |
| morganfainberg | stevemar, lol | 03:44 |
| topol | agreed you have to crap like this: | 03:44 |
| topol | export TOKEN=`curl -si -d @./token-request.json -H "Content-type:application/json" http://127.0.0.1:35357/v3/auth/tokens | awk '/X-Subject-Token/{print $2}'` | 03:44 |
| morganfainberg | topol, you'll still want that | 03:44 |
| morganfainberg | way better than the alternative | 03:44 |
| topol | curl -si -H"X-Auth-Token:$TOKEN" -H "Content-type: application/json" http://localhost:35357/v3/domains | 03:44 |
| topol | I hate the huge tokens. HATE THEM | 03:45 |
| *** ngoracke has quit IRC | 03:45 | |
| morganfainberg | ayoung is working on DER formatted tokens and compressed | 03:45 |
| morganfainberg | topol, PKI tokens will still be stupid long | 03:45 |
| morganfainberg | topol, it's the hazard of encoding all the relevant data in the token | 03:45 |
| topol | I got my export :-) | 03:45 |
| morganfainberg | though in all honesty, we could probably make the catalog a bit less human readable and a bit more size friendly | 03:46 |
| topol | wont that break folks? | 03:46 |
| morganfainberg | but that is a token version conversation | 03:46 |
| morganfainberg | topol, yes. which is why i want to get us (Juno) to version tokens independently from the API | 03:46 |
| topol | good idea | 03:47 |
| morganfainberg | so, as long as you know what the token version is, it can be an explicit schema | 03:47 |
| topol | yep | 03:47 |
| morganfainberg | perhaps even make keystone publish the token schema for each version | 03:47 |
| morganfainberg | so the middleware can say "how the hell do i decode version xyz" | 03:47 |
| jamielennox | morganfainberg: assuming i missed everything between now and the last mention of my name - why would you reconstruct the catalog? | 03:47 |
| *** matsuhashi has quit IRC | 03:48 | |
| morganfainberg | jamielennox, to not have to store the data in sql / kvs / memcache /etc | 03:48 |
| morganfainberg | jamielennox, the catalog is "special" data and optional | 03:48 |
| morganfainberg | jamielennox, and massive amount of data | 03:48 |
| morganfainberg | jamielennox, why not just construct that bit on demand. | 03:48 |
| jamielennox | morganfainberg: i thought the point was to move to ephemeral though | 03:48 |
| morganfainberg | jamielennox, correct, eventually we will be moving there, but | 03:48 |
| morganfainberg | jamielennox, for the non ephemeral providers | 03:48 |
| morganfainberg | jamielennox, which wont be deprecated until.... | 03:49 |
| morganfainberg | uhm | 03:49 |
| morganfainberg | L or M | 03:49 |
| morganfainberg | erm | 03:49 |
| morganfainberg | removed | 03:49 |
| morganfainberg | deprecated in J or K | 03:49 |
| jamielennox | oh, ok | 03:49 |
| *** sarob has quit IRC | 03:49 | |
| jamielennox | umm | 03:49 |
| morganfainberg | and catalog doesn't seem to be "secure" data compared to say... role data | 03:49 |
| jamielennox | considering that everything else is being recreated from the db you can recreate the SC | 03:49 |
| morganfainberg | jamielennox, well i am moving everything else to not recreate, just keep the catalog as on-demand | 03:50 |
| jamielennox | if you are looking to change that behaviour to always stored then i would store the SC | 03:50 |
| morganfainberg | jamielennox, if we are storing SC, i will be proposing a migration to the token table to make it have a column just to store that text | 03:50 |
| jamielennox | i guess it depends on things like whether the ?nocatalog behaviour is supposed to be permanent | 03:50 |
| morganfainberg | jamielennox, right now, iirc ?nocatalog is not permanent when you ask keystone to validate a token | 03:51 |
| morganfainberg | you must pass nocatalog each time. | 03:51 |
| morganfainberg | the PKI data decodes to not have it (permanent) | 03:51 |
| jamielennox | yea | 03:51 |
| jamielennox | that would be the way that makes the most sense | 03:51 |
| *** radsy has joined #openstack-dev | 03:51 | |
| morganfainberg | if we want to make nocatalog _really_ permanent (think it might break a lot to do that) | 03:51 |
| morganfainberg | i'll split catalog off so i can still support the ability to toggle on a per-validate basis | 03:52 |
| jamielennox | morganfainberg: i don't think service catalog is important | 03:52 |
| morganfainberg | jamielennox, ok, i'll create it on demand | 03:52 |
| jamielennox | it would actually be an interesting thing to memcache | 03:52 |
| jamielennox | ah, can't - whatever | 03:53 |
| morganfainberg | yeah | 03:53 |
| morganfainberg | jamielennox, i can memoize it | 03:53 |
| morganfainberg | but that is a different conversation | 03:53 |
| *** jcooley_ has quit IRC | 03:53 | |
| jamielennox | morganfainberg: yea, it's also not a real bottleneck compared to some of the other bad things we do | 03:53 |
| morganfainberg | jyeah | 03:53 |
| morganfainberg | i _do_ want to memoize it | 03:53 |
| morganfainberg | but i will need to aim for that in J | 03:54 |
| morganfainberg | there is a lot more cachign needed in keystone, | 03:54 |
| morganfainberg | ugh, i need to go, my computer is almost out of battery... and i'm 40min from home. | 03:54 |
| morganfainberg | oooh nvm, i see an open power socket in the coffee shop | 03:54 |
| *** ayoung has joined #openstack-dev | 03:55 | |
| ayoung | stevemar, you still up? | 03:55 |
| jamielennox | hmm, trying to figure out if it's better to fly out of atlanta on the friday night or saturday | 03:55 |
| *** kenperkins has quit IRC | 03:55 | |
| topol | stevemar is still around | 03:55 |
| *** kenperkins has joined #openstack-dev | 03:56 | |
| topol | morganfainberg, stevemar, deck should be making it to your inbox | 03:56 |
| topol | jamielennox, back to australia? | 03:56 |
| jamielennox | topol: yea, i thought about trying to do a stopover somewhere interesting but it takes too long to deal with the corp travel people | 03:57 |
| morganfainberg | jamielennox, fly saturday | 03:57 |
| morganfainberg | jamielennox, be less stressed about end of conference -> airport | 03:58 |
| topol | jamielennox ATL has a ton of flights. So for me I can get an 8pm friday flight back to Raleigh. You may get lucky and it there could be a late night flight back. | 03:58 |
| morganfainberg | annd coffee shop is closing | 03:58 |
| jamielennox | it's 7.10pm so it's relatively late | 03:58 |
| morganfainberg | time to go | 03:58 |
| jamielennox | but it's the same flight the next day | 03:58 |
| morganfainberg | i know i'm flying through Chicago to ATL (stop over for a day or so) | 03:58 |
| morganfainberg | gonna visit w/ a friend from college cause it';s awesome to do so | 03:59 |
| *** Guest62908 has joined #openstack-dev | 03:59 | |
| topol | jamielennox, keystone stuff is always seems to be held on the last day | 03:59 |
| morganfainberg | jamielennox, i'd still fly saturday | 03:59 |
| morganfainberg | jamielennox, means you can not be rushed. | 04:00 |
| topol | you would proably have to leave at 4pm take Marta and be at the airport by 5pm | 04:00 |
| morganfainberg | topol, ++ | 04:00 |
| morganfainberg | yeah might miss the end of stuff | 04:00 |
| jamielennox | oh, goes via dallas so i don't need to be that early | 04:01 |
| morganfainberg | ok see you guys later on | 04:01 |
| topol | k gnight | 04:01 |
| jamielennox | night | 04:01 |
| topol | jamielennox, I have a question since you are the last core standing | 04:02 |
| morganfainberg | ayoung, any chance you're going to have the revocation event chain mergable? or do you want some help fixing the part of the chain that is unhappy? | 04:02 |
| jamielennox | actually - may as well do the saturday, first trip to the US so may as well try and do touristy things | 04:02 |
| morganfainberg | jamielennox, ++ doooo eeeet | 04:02 |
| morganfainberg | ayoung, i ask since i'm piling code reviews on the end of your chain | 04:02 |
| *** rdas has joined #openstack-dev | 04:02 | |
| jamielennox | topol: i think there are others lurking but sure | 04:02 |
| morganfainberg | ayoung, and making sure i don't accidently rebase anything | 04:02 |
| topol | jamielennox, stone mountain outside of ATL is nice. and the world of coca cola museum is cool | 04:02 |
| topol | I lived in ATL for 9 years | 04:03 |
| topol | fun place | 04:03 |
| morganfainberg | topol, ATL is cool, i don't want to live there | 04:03 |
| morganfainberg | i'd rather live in chicago | 04:03 |
| jamielennox | topol: yea i have the weekend before but i think it'll be largely sleeping | 04:03 |
| morganfainberg | but thats just me | 04:03 |
| topol | morganfainberg agreed. nice place to visit | 04:03 |
| morganfainberg | ok getting the death stare from the employees | 04:03 |
| morganfainberg | i gotta go | 04:03 |
| topol | GET OUT | 04:03 |
| ayoung | Woah, I just realized this room was not dead... | 04:04 |
| ayoung | jamielennox, I'm flying Saturday. Booked the room through Friday night | 04:04 |
| jamielennox | ayoung: is there a sharing thing going again? | 04:05 |
| topol | so jamielennox one thing that perplexes me about keystone is which admin can do things like create domains. I have an example where my user is an admin in the default domain but it can then create other domains. which admin gets to do what perplexes me | 04:05 |
| *** baoli has quit IRC | 04:06 | |
| jamielennox | topol: so that's controlled by policy | 04:07 |
| ayoung | morganfainberg, is it messed up again? I had reposted on Friday, but hadn't looked | 04:07 |
| ayoung | jamielennox, I think so, we can ask Nate. | 04:07 |
| jamielennox | and if you're still using the default policy file then having admin in the default domain is sufficient | 04:07 |
| ayoung | morganfainberg, if you rebase, you rebase, I don't think anything is reviewed. | 04:07 |
| *** sweston has quit IRC | 04:08 | |
| ayoung | topol, I pulled my -2 on the token patch down to a -1...couple things: ""Federation" is not a method. "SAML" is a method | 04:10 |
| ayoung | if we do that, we can pull the protocol out of hte rul and we can merge everythign into the "authenticate" methdod | 04:11 |
| ayoung | I'm going to be OOTO tomorrow as it is a holdiay here, and I'm on kid duty. | 04:11 |
| topol | ayoung, can't argue with what you said. | 04:11 |
| ayoung | topol, yeah, just didn't want ot have t ocome down heavy, but it was the same issue that brought on the -2 in the API review.... | 04:11 |
| ayoung | trying to keep thing consistant, and not have multiple paths to do the same thing | 04:12 |
| *** alagalah_ has quit IRC | 04:12 | |
| ayoung | I've been playing translator on Federation for...a year an a hlaf now as I recon | 04:12 |
| ayoung | I want this to happen, but I want it to happen cleanly. | 04:12 |
| *** alagalah has joined #openstack-dev | 04:12 | |
| topol | K, I havent review stevemar's stuff lately | 04:13 |
| *** morganfainberg is now known as morganfainberg_Z | 04:13 | |
| *** rdas has quit IRC | 04:14 | |
| topol | jamielennox, K makes sense. I need to get used to perusing the policy file to know what mother allows me to do :-) | 04:14 |
| jamielennox | topol: if you look at the v3policy sample then it defines a role as cloud_admin which is intended for this purpose | 04:15 |
| *** dkehn__ is now known as dkehn_ | 04:16 | |
| topol | jamielenox, the default is "identity:create_domain": [["rule:admin_required"]], correct? which means any user with an admin role can do it? | 04:17 |
| *** alagalah has quit IRC | 04:17 | |
| *** jokke_ has quit IRC | 04:17 | |
| *** jokke_ has joined #openstack-dev | 04:17 | |
| *** kenperkins has quit IRC | 04:18 | |
| *** Guest62908 is now known as kdas_ | 04:19 | |
| *** kenperkins has joined #openstack-dev | 04:19 | |
| *** Mandell has joined #openstack-dev | 04:19 | |
| topol | jamielennox which bugs me because a user has roles on projects and domains. but you could not have admin role on the domain you want to create because it hasn't been created yet. thats where my head hurts | 04:19 |
| jamielennox | topol: it's kind of a legacy from v2 i think where a default domain exists | 04:20 |
| ayoung | topol, jamielennox I have something I need to run past you guys. Between the Hierarchical thing that vishy has been pushing, and the atiwari approach, its dawned on me that *everything* in Keystone should be managed hierarchical, and everything should be in a project (with domain just a kinds of super project) that means Role definitions, service catalog, everything | 04:20 |
| ayoung | and... | 04:20 |
| jamielennox | topol: even in v3 we classify that there is a default domain that must exist so i guess you get some sort of base | 04:20 |
| ayoung | if we do endpoint binding of tokens...we have a way for endpoints to request their own policy files | 04:20 |
| vishy | i don't know what the atiwari approach is | 04:20 |
| vishy | how would role definitions work? | 04:21 |
| ayoung | vishy, he wants roels defintionis scoped to services | 04:21 |
| jamielennox | ayoung: i saw that that thread had 40 odd emails in it that i hadn't seen and i've been saving it for a moment when i've nothing else to do :) | 04:21 |
| ayoung | they want to ues the keystone service catalog for other things | 04:21 |
| vishy | interesting | 04:21 |
| ayoung | vishy, I am so with you, I am ahead of you | 04:21 |
| jamielennox | ayoung: IMO domains are a funny concept to begin with and we could have extended the dfeinition of a project to incorporate that seperation | 04:21 |
| topol | jamielnnox, I'm ok with a default domain being there. Its just how does the policy rule interpret that being an admin in the default domain gives you authority to create a different domain. thats where I get lost | 04:21 |
| ayoung | jamielennox, domains are just top level projects | 04:21 |
| ayoung | the one thing that domains can do that a normal project can't is link to a different data source | 04:22 |
| jamielennox | ayoung: then projects own projects to some degree and we're sweet | 04:22 |
| ayoung | like domains like to different IdPs for their user lists. | 04:22 |
| ayoung | yes | 04:22 |
| jamielennox | ayoung: right i'm not looking to get rid of them | 04:22 |
| ayoung | projects own projecgts.... | 04:22 |
| topol | ayoung you and henrynash need to talk | 04:22 |
| ayoung | domains *are* proejcts ... plust a little more | 04:22 |
| ayoung | topol, yesh we do | 04:22 |
| jamielennox | ayoung: just that i'm not sure if i'd have architectured it like that | 04:22 |
| ayoung | jamielennox, so if we do endpoint binding of tokens, and inject an endpoint id into their config file, ...we use that to fetch the policy file]and fetching policy is "give me the one lowest on the tree" | 04:23 |
| ayoung | if an endpoint is owned by a project, then an admin for that project can push their own policy file | 04:24 |
| jamielennox | ayoung: i'm all for setting endpoints via domain or project, i've had that in mind for a while | 04:24 |
| ayoung | to include, it the really want, their own role definitinons | 04:24 |
| topol | ayoung, domains are a nice abstraction with a name that makes it clear what you are trying to accomplish: They define the administrative boundaries for management of Keystone entities. | 04:24 |
| ayoung | jamielennox, the #moc guys have a really interesting use case for it | 04:24 |
| ayoung | topol, ++ | 04:24 |
| *** kushal has joined #openstack-dev | 04:24 | |
| ayoung | topol, I could se an argument, too, that just like we put Identity into different backend, delineated by domain, we could do the same thing for service catalog | 04:25 |
| *** rdas has joined #openstack-dev | 04:25 | |
| jamielennox | topol: i'm not disagreeing but i have a suspicion that we could have done that via extending the attributes available on a project | 04:25 |
| ayoung | dont see a call for it yet, but it is a nice possibility | 04:25 |
| topol | ayoung, sure. domain scoped catalogs??? | 04:25 |
| ayoung | regardless, I a, against yanking away a temr that we've worked hard to train users to use. | 04:25 |
| jamielennox | ayoung: what are you talking about with policy file fetching? | 04:25 |
| *** kdas_ has quit IRC | 04:26 | |
| ayoung | jamielennox, so I want the poliucy check to be in keystone client | 04:26 |
| ayoung | move keystone/common/authorize.py to client | 04:26 |
| jamielennox | ayoung: sure, extending project definition can happen in conjunction with domains - and i think that the big cloud providers probably have a good case for domains | 04:26 |
| ayoung | and, make it middleware | 04:26 |
| topol | mayoung my concern is if everything is a project people wont understand how to seprate stuff | 04:26 |
| ayoung | so that the pther projects can use it | 04:26 |
| ayoung | and, part of that is fetching the policy file, kindof like how we fetch the certificates | 04:27 |
| jamielennox | ayoung: so i messed around with policy recently and found a problem very similar to this | 04:27 |
| ayoung | we can even use the same directory as the cache | 04:27 |
| jamielennox | the way keystone does policy now can't be converted to middleware | 04:27 |
| ayoung | jamielennox, yeah, we need to extend the fetch call, too | 04:27 |
| jamielennox | we currently base things on controller method names and that sort of information is not available at middleware time | 04:28 |
| *** kdas_ has joined #openstack-dev | 04:28 | |
| ayoung | get policy for endpoint needs to check first if there is an explicit policy file for that endpoint, then for that service in the containing project, and then start walking the porject tree back toward root. The defaults will be under "root" | 04:28 |
| ayoung | ah. | 04:28 |
| jamielennox | so we will need to discuss a new means of identifying a policy rule | 04:28 |
| ayoung | which is why we do it in the controller...ok, we need to re-architect that. Do you have thoughts? | 04:28 |
| ayoung | I'd rather look at extending the router or something | 04:29 |
| jamielennox | ayoung: the only information available at that time will be the URL path and information from auth_token | 04:29 |
| ayoung | it doesn't have to me "middleware" it needs to be simple to integrate | 04:29 |
| ayoung | router mapping knows the name of the method called | 04:30 |
| *** kushal has quit IRC | 04:30 | |
| jamielennox | ayoung: that won't work in pecan | 04:30 |
| topol | jamielennox, so "cloud_admin": "rule:admin_required and domain_id:admin_domain_id", means I must have the role of admin and what does the second half mean? | 04:30 |
| jamielennox | i did manage to work around it in that review, but it's not a scheme i would like to impose on other services | 04:30 |
| ayoung | that the user has the role "admin" on the domain specified as the admin_domain_id | 04:31 |
| ayoung | jamielennox, we don't need to solve it tonight, but I am glad that you have the Pecan perspective | 04:31 |
| ayoung | it might be a different solution for each, but I like the idea that, now, it doesnot have to be a controller method | 04:32 |
| *** rektide has quit IRC | 04:32 | |
| ayoung | policy can be enforced further down the stack | 04:32 |
| *** rektide has joined #openstack-dev | 04:32 | |
| *** matsuhashi has joined #openstack-dev | 04:32 | |
| ayoung | maybe we provide the decorators in a cleaned up form | 04:32 |
| topol | where is admin_domain_id defined? | 04:33 |
| jamielennox | topol: i can't remember if that means you need to create a domina with the name admin_domain_id, or if that's a config option somewhere | 04:33 |
| jamielennox | topol: i grepped it and nothing | 04:33 |
| jamielennox | ayoung: if we could somehow do it on path i would prefer that approach | 04:33 |
| ayoung | jamielennox, nah, the power of doing to code wise is too powerful to give up | 04:33 |
| jamielennox | or i guess path + method | 04:33 |
| ayoung | it will lead to being able to do fine grained controll | 04:34 |
| jamielennox | ayoung: right, but we would need to know how to preload all the other information available to a call at that time | 04:34 |
| ayoung | lets try to keep it non-Web specific | 04:34 |
| topol | jamielennox, Im thinking its some agreed to meaning that I dont know where its documented | 04:34 |
| ayoung | yeah, that is the rub | 04:34 |
| ayoung | which is why we have it on controller right now | 04:34 |
| jamielennox | topol: henrynash wrote all that and so is the expert i think | 04:35 |
| *** noslzzp has quit IRC | 04:35 | |
| topol | im guessing it means you have to be admin in the domain you are trying to do something on | 04:35 |
| jamielennox | ayoung: right, so i don't think that can be done from middleware | 04:35 |
| jamielennox | topol: no | 04:35 |
| jamielennox | topol: eg "identity:get_project": "rule:admin_required and domain_id:%(target.project.domain_id)s", would do that | 04:35 |
| topol | that one I understand :-) | 04:36 |
| jamielennox | ayoung: i'm pretty keen on the pecan move so we can start to figure some of this out | 04:36 |
| ayoung | yeah, admin_domain_id is probably expceted to be a config option, maybe one that henrynash never implemented? | 04:36 |
| *** Ryan_Lane has joined #openstack-dev | 04:36 | |
| jamielennox | topol: ayoung: i think more that admin_domain_id should be replaced in your policy file with a string of the domain id you consider admin | 04:36 |
| jamielennox | i think it's a placeholder value | 04:36 |
| ayoung | ++ | 04:37 |
| ayoung | sounds right | 04:37 |
| topol | ayoung that makes me feel better. Otherwise it was voodoo magic to me | 04:37 |
| *** byeager has joined #openstack-dev | 04:37 | |
| topol | jamielennox, that works for me too | 04:37 |
| ayoung | topol, I recall Henrynash saying something to the effect of what jamielennox just said at the last summit | 04:37 |
| jamielennox | there is no way we expect to have a domain with id: admin_domain_id, but the test creates that domain id specifically | 04:37 |
| topol | thanks to both of you. I will be able to sleep tonight then | 04:38 |
| jamielennox | so either you can create that domain id value, or fix the policy file | 04:38 |
| *** sumanthns has joined #openstack-dev | 04:39 | |
| *** amotoki has joined #openstack-dev | 04:39 | |
| jamielennox | ayoung: anyway yes i think for now we need it on the controller | 04:39 |
| jamielennox | the attribute flattening thing we do should probably be OSLOed | 04:39 |
| *** Qiming has joined #openstack-dev | 04:39 | |
| ayoung | jamielennox, I would like to get the decorators into authorize.py before we move it to the client | 04:39 |
| *** jokke_ has quit IRC | 04:40 | |
| ayoung | nah, I want to own it | 04:40 |
| *** jokke_ has joined #openstack-dev | 04:40 | |
| jamielennox | but i think most projects will end up doing there own actual decorator because they are the only ones that can no what information to load before doing the call | 04:40 |
| ayoung | I want policy to be in a library so that we can do fixes as soon as we get the CVEs | 04:40 |
| stevemar | ayoung, yo | 04:40 |
| ayoung | and it should be part of the identity project to make that happen | 04:40 |
| stevemar | ayoung, catching up | 04:40 |
| ayoung | stevemar, so..do you have enough to work with now? | 04:40 |
| ayoung | "federation" is not a method | 04:40 |
| ayoung | "SAML" is a mehtid | 04:41 |
| *** gokrokve has quit IRC | 04:41 | |
| ayoung | pull protocol out of the url | 04:41 |
| ayoung | should be aable to merge it with the authenticate method | 04:41 |
| *** gokrokve has joined #openstack-dev | 04:41 | |
| ayoung | stevemar, you are doing great things...just want this clean | 04:41 |
| *** byeager has quit IRC | 04:42 | |
| *** yamahata has joined #openstack-dev | 04:42 | |
| *** alagalah has joined #openstack-dev | 04:43 | |
| *** sgordon has quit IRC | 04:44 | |
| *** gokrokve_ has joined #openstack-dev | 04:44 | |
| *** edmund has quit IRC | 04:45 | |
| stevemar | ayoung, let me think this through for a sec... so there are 2 auth calls... one to get an unscoped token (which is currently needs its own url), another to get a scoped token (which goes through regular v3/auth/tokens) | 04:45 |
| ayoung | stevemar, why different urls? | 04:45 |
| ayoung | and what do you mean by "unscoped?" | 04:45 |
| stevemar | ayoung, unscoped meaning it has no project associated with it | 04:45 |
| *** rraja has joined #openstack-dev | 04:46 | |
| stevemar | ayoung, different url because we need to protect it with the apache module | 04:46 |
| *** gokrokve has quit IRC | 04:46 | |
| ayoung | OK, that is a fallacy | 04:46 |
| ayoung | disregard that | 04:46 |
| stevemar | why do you say that? | 04:46 |
| ayoung | there is going to have to be configuration work on the Apache side, and while it may end up being a differnet "apache" url that does not mean it needs to be a different route in Keystone | 04:47 |
| ayoung | that is an apache issues, not a kjeystone issue | 04:47 |
| ayoung | you can mount the same "route" from keystone multiple times in apache if necesary | 04:48 |
| ayoung | not certain if it is or isn't,as that is an aPache module thing to determine | 04:48 |
| ayoung | stevemar, see the distinction? | 04:48 |
| ayoung | what about the "scoped" thing? | 04:48 |
| stevemar | the scoped thing is fine, that's not a big deal | 04:49 |
| stevemar | so for both methods, you want there to be a POST request, with data, saying the idp id and protocol being used? | 04:50 |
| ayoung | stevemar, are they different from scoped/unscoped tokens from, say, password auth? Is it just the 'method' field that is different? | 04:50 |
| *** sarob has joined #openstack-dev | 04:50 | |
| *** alagalah has quit IRC | 04:51 | |
| ayoung | stevemar, yeah, like I said before, it should look really similar to how REMOTE_USER is done now | 04:51 |
| stevemar | ayoung, OK, one concern I have about your suggestion | 04:51 |
| ayoung | I like the we do unscoped to scoped token, actually, always felt it was the right way | 04:51 |
| stevemar | agreed | 04:52 |
| *** paragan has quit IRC | 04:52 | |
| ayoung | fire way | 04:52 |
| stevemar | so you want to bypass the logic of using the 'method' name to find the auth plugin to use? | 04:52 |
| stevemar | we don't even look at it? just ... if we see idp or protocol in the data field, go to the 'federation' plugin | 04:53 |
| *** ramishra has quit IRC | 04:53 | |
| stevemar | likewise, if we see project in the scope, then we scope it, otherwise it's an unscoped token | 04:54 |
| stevemar | ayoung, also it's my intention to rebase/re-evaluate if we need the old patch (given henrys work), it was just so recent we haven't had time to think it over | 04:55 |
| *** sarob has quit IRC | 04:56 | |
| ayoung | No..I don't want there to be a "federation" plugin. I want there to be a SAML plugin that implemented th Federation workflow. | 04:56 |
| ayoung | So...make it SAML specific | 04:56 |
| ayoung | if we find another federation protocol we care about,we add that | 04:57 |
| ayoung | and it maybe the same code, but probably not. | 04:57 |
| ayoung | probably a refactor with a lot of shared code | 04:57 |
| stevemar | ayoung, alright... i'll call it saml for now i guess | 04:58 |
| ayoung | Its the right thing | 04:58 |
| stevemar | i don't particularly like that....... | 04:58 |
| ayoung | stevemar, it is my opionion that all of Keystone will be "Federation" | 04:58 |
| stevemar | seems like theres going to be a lot of shared code | 04:58 |
| ayoung | yep...and SAML will just be there to make sure the SAML specific stuff gets done separate from the openid connect" | 04:59 |
| ayoung | I convinced David Chadwick of it...at some point" | 04:59 |
| ayoung | but it is the right thing | 04:59 |
| stevemar | ayoung, alrighty | 04:59 |
| stevemar | it's easy enough to do | 05:00 |
| stevemar | i'll start fiddling around | 05:00 |
| ayoung | stevemar, we have some plans to cleanup the token creation process. the more common the code is now, the more striaghtforward it wil lbe to do that, as well. | 05:00 |
| stevemar | marekd|away, read above ^^^^^^^^^^ | 05:00 |
| *** sarob has joined #openstack-dev | 05:00 | |
| ayoung | thanks. . gonna call it a night. I won't be aroundtomorrow until later in the evening | 05:00 |
| stevemar | ayoung, cool, it's a holiday for me tmrw too, but i'll be stuck doing federation :( | 05:01 |
| ayoung | sorry about that, but I think we have it far enough along to count for the Tuesday deadline | 05:01 |
| *** chandan_kumar has joined #openstack-dev | 05:02 | |
| *** paragan has joined #openstack-dev | 05:02 | |
| *** paragan has quit IRC | 05:02 | |
| *** paragan has joined #openstack-dev | 05:02 | |
| *** ramishra has joined #openstack-dev | 05:04 | |
| *** sarob has quit IRC | 05:05 | |
| *** david-lyle has joined #openstack-dev | 05:09 | |
| *** AMike has joined #openstack-dev | 05:10 | |
| *** AMike has quit IRC | 05:10 | |
| *** AMike has joined #openstack-dev | 05:10 | |
| *** ayoung has quit IRC | 05:12 | |
| *** bswartz has quit IRC | 05:12 | |
| *** irenab has joined #openstack-dev | 05:13 | |
| *** gokrokve_ has quit IRC | 05:19 | |
| *** retr0h has quit IRC | 05:20 | |
| *** retr0h has joined #openstack-dev | 05:21 | |
| *** radsy has quit IRC | 05:22 | |
| *** pradeep has joined #openstack-dev | 05:22 | |
| *** ytwu has quit IRC | 05:25 | |
| *** ytwu has joined #openstack-dev | 05:26 | |
| *** neeti has joined #openstack-dev | 05:27 | |
| *** gokrokve has joined #openstack-dev | 05:27 | |
| *** devoid has joined #openstack-dev | 05:29 | |
| *** RajeshMohan has quit IRC | 05:29 | |
| *** RajeshMohan has joined #openstack-dev | 05:30 | |
| *** buzztroll has quit IRC | 05:31 | |
| *** buzztroll has joined #openstack-dev | 05:32 | |
| *** killer_prince has quit IRC | 05:35 | |
| *** buzztroll has quit IRC | 05:36 | |
| *** Nikolay_St has joined #openstack-dev | 05:36 | |
| *** killer_prince has joined #openstack-dev | 05:39 | |
| *** tkay has joined #openstack-dev | 05:42 | |
| *** pcm_ has quit IRC | 05:45 | |
| *** mohits has joined #openstack-dev | 05:50 | |
| *** sarob has joined #openstack-dev | 05:54 | |
| *** nshaikh has joined #openstack-dev | 05:54 | |
| *** tdruiva has quit IRC | 05:55 | |
| *** sarob has quit IRC | 05:58 | |
| *** ik__ has joined #openstack-dev | 05:58 | |
| *** ik__ has left #openstack-dev | 05:59 | |
| *** ik__ has joined #openstack-dev | 05:59 | |
| ik__ | I have a basic doubt here | 05:59 |
| ik__ | in cinder | 06:00 |
| ik__ | how is manager.py deciding on which configuration should be chosen | 06:00 |
| ik__ | anyone? | 06:00 |
| KurtMartin | ik__, are you asking how it choose a backend? | 06:02 |
| *** mikeoutland has joined #openstack-dev | 06:05 | |
| *** paragan has quit IRC | 06:06 | |
| *** ramishra has quit IRC | 06:06 | |
| KurtMartin | ik__, for the different vendors set the the volume_backend_name in the cinder conf file and set the required settings..see http://docs.openstack.org/havana/config-reference/content/section_volume-drivers.html | 06:06 |
| *** buzztroll has joined #openstack-dev | 06:08 | |
| *** mikeoutland has quit IRC | 06:09 | |
| ik__ | KurtMartin: Thanks, yes I'm setting the volume backend and creating a volume type for each backend. But I'm lost on where manager is processing volume type information? | 06:10 |
| ik__ | KurtMartin: I know we specify the volume type while creating volume. | 06:11 |
| *** neeti has quit IRC | 06:11 | |
| *** buzztroll has quit IRC | 06:12 | |
| KurtMartin | ik__, are you setting the same volume_backend_name in the cinder extra specs for each volume type? | 06:15 |
| *** saju_m has joined #openstack-dev | 06:15 | |
| ik__ | KurtMartin: In conf file I've multiple backends with volume_backend_name | 06:15 |
| ik__ | KurtMartin: For each backend I do create volume type and I do have set the backend name in extra_specs of volume type | 06:16 |
| KurtMartin | ik__, ok, that volume backend name also has to be set on each volume type, see https://wiki.openstack.org/wiki/Cinder-multi-backend | 06:16 |
| KurtMartin | ik__, it even getting to the driver code or failing before that | 06:17 |
| *** topol has quit IRC | 06:17 | |
| KurtMartin | s/it/is it | 06:17 |
| ik__ | KurtMartin: Driver is working fine, I am able to create volume and take snapshots.. | 06:17 |
| ik__ | KurtMartin: I'm curious about internal working of manager | 06:17 |
| *** alex_xu has joined #openstack-dev | 06:18 | |
| KurtMartin | ik__, ok...do you know about the differnt filter schedulers | 06:18 |
| *** tkay has quit IRC | 06:19 | |
| ik__ | KurtMartin: Yes, I do remember setting simple scheduler as my default scheduler driver. | 06:20 |
| ik__ | KurtMartin: Is that right? | 06:20 |
| *** kbrierly has quit IRC | 06:21 | |
| *** paragan has joined #openstack-dev | 06:22 | |
| KurtMartin | if running devstack, the defaults should work unless you want to limited in by something, like capcity, availablity, etc.. | 06:23 |
| KurtMartin | what issues are you having or just trying to understand how things work? | 06:23 |
| KurtMartin | ik__, this is a pretty good description of the all the differnt schedulers: http://docs.openstack.org/developer/cinder/devref/filter_scheduler.html | 06:24 |
| *** mikeoutland has joined #openstack-dev | 06:25 | |
| ik__ | KurtMartin: I'm trying to understand how the driver configuration is being picked? I know a service will be started for each backend added, curious about where exactly are we validating the backend. | 06:26 |
| ik__ | KurtMartin: Suuppose I'm adding a new client call, where should I set the volume type.. | 06:27 |
| KurtMartin | ik__, that's all in the filter schedulers | 06:29 |
| *** kdas_ has quit IRC | 06:30 | |
| *** Ryan_Lane has quit IRC | 06:30 | |
| ik__ | KurtMartin: Ok, I will check out the link provided by you. | 06:30 |
| ik__ | KurtMartin: Thanks a lot! | 06:30 |
| KurtMartin | ik__, sure no problem | 06:31 |
| *** rraja has quit IRC | 06:33 | |
| *** benonsoftware has quit IRC | 06:35 | |
| *** buzztroll has joined #openstack-dev | 06:38 | |
| *** buzztroll has quit IRC | 06:39 | |
| *** buzztroll has joined #openstack-dev | 06:40 | |
| *** jaypipes has quit IRC | 06:42 | |
| *** afazekas_ has quit IRC | 06:42 | |
| *** jaypipes has joined #openstack-dev | 06:42 | |
| *** nosnos has quit IRC | 06:42 | |
| *** tkay has joined #openstack-dev | 06:46 | |
| *** ytwu1 has joined #openstack-dev | 06:47 | |
| *** ytwu2 has joined #openstack-dev | 06:49 | |
| *** ytwu has quit IRC | 06:49 | |
| *** NikitaKonovalov is now known as NikitaKonovalov_ | 06:49 | |
| *** rraja has joined #openstack-dev | 06:51 | |
| *** nosnos has joined #openstack-dev | 06:52 | |
| *** ytwu1 has quit IRC | 06:52 | |
| *** buzztroll has quit IRC | 06:52 | |
| *** buzztroll has joined #openstack-dev | 06:53 | |
| *** paragan has quit IRC | 06:53 | |
| *** buzztroll has joined #openstack-dev | 06:53 | |
| *** sarob has joined #openstack-dev | 06:54 | |
| *** toddnni has joined #openstack-dev | 06:54 | |
| *** paragan has joined #openstack-dev | 06:56 | |
| *** toddnni has quit IRC | 06:59 | |
| *** sarob has quit IRC | 07:00 | |
| *** kbrierly has joined #openstack-dev | 07:03 | |
| *** buzztroll has quit IRC | 07:04 | |
| *** buzztroll has joined #openstack-dev | 07:04 | |
| *** buzztroll has joined #openstack-dev | 07:05 | |
| *** buzztrol_ has joined #openstack-dev | 07:06 | |
| *** buzztroll has quit IRC | 07:06 | |
| *** rohitk has joined #openstack-dev | 07:06 | |
| *** nmagnezi has joined #openstack-dev | 07:09 | |
| *** devoid has quit IRC | 07:10 | |
| *** ogelbukh1 is now known as ogelbukh | 07:13 | |
| *** iv_m has joined #openstack-dev | 07:14 | |
| *** KurtMartin has quit IRC | 07:16 | |
| *** tkay has quit IRC | 07:16 | |
| *** NikitaKonovalov_ is now known as NikitaKonovalov | 07:16 | |
| *** asalkeld has quit IRC | 07:17 | |
| *** mikeoutland has quit IRC | 07:17 | |
| *** mrunge has joined #openstack-dev | 07:18 | |
| *** tkay has joined #openstack-dev | 07:19 | |
| *** ytwu has joined #openstack-dev | 07:20 | |
| *** yolanda has joined #openstack-dev | 07:22 | |
| *** ytwu2 has quit IRC | 07:24 | |
| *** tkay has quit IRC | 07:24 | |
| *** vartom1111111115 has joined #openstack-dev | 07:25 | |
| *** ytwu1 has joined #openstack-dev | 07:26 | |
| *** afazekas_ has joined #openstack-dev | 07:27 | |
| *** kushal has joined #openstack-dev | 07:28 | |
| *** ytwu has quit IRC | 07:29 | |
| *** belmoreira has joined #openstack-dev | 07:29 | |
| *** ifarkas has joined #openstack-dev | 07:30 | |
| *** sushils has joined #openstack-dev | 07:31 | |
| *** jhesketh_ has quit IRC | 07:37 | |
| *** mdurnosvistov has joined #openstack-dev | 07:37 | |
| *** rdas has quit IRC | 07:37 | |
| *** jhesketh__ has quit IRC | 07:37 | |
| *** Alexei_987 has joined #openstack-dev | 07:38 | |
| *** boris-42 has quit IRC | 07:40 | |
| *** sushils has quit IRC | 07:42 | |
| *** sushils has joined #openstack-dev | 07:44 | |
| *** jprovazn has joined #openstack-dev | 07:47 | |
| *** ndipanov has joined #openstack-dev | 07:48 | |
| *** rraja has quit IRC | 07:48 | |
| *** dshulyak has joined #openstack-dev | 07:49 | |
| *** jhesketh__ has joined #openstack-dev | 07:50 | |
| *** jhesketh_ has joined #openstack-dev | 07:50 | |
| *** buzztrol_ has quit IRC | 07:51 | |
| *** jtomasek has joined #openstack-dev | 07:51 | |
| *** buzztroll has joined #openstack-dev | 07:51 | |
| *** zyluo has joined #openstack-dev | 07:51 | |
| *** kdas_ has joined #openstack-dev | 07:53 | |
| *** buzztroll has quit IRC | 07:56 | |
| *** kushal has quit IRC | 07:57 | |
| *** sarob has joined #openstack-dev | 07:58 | |
| *** flaper87|afk is now known as flaper87 | 08:00 | |
| *** evgenyf has joined #openstack-dev | 08:02 | |
| *** stevemar has quit IRC | 08:02 | |
| *** rraja has joined #openstack-dev | 08:02 | |
| *** sarob has quit IRC | 08:02 | |
| *** stevemar has joined #openstack-dev | 08:02 | |
| *** bvandenh has joined #openstack-dev | 08:03 | |
| *** mflobo has joined #openstack-dev | 08:04 | |
| *** corXi has joined #openstack-dev | 08:07 | |
| *** asalkeld has joined #openstack-dev | 08:07 | |
| *** buzztroll has joined #openstack-dev | 08:12 | |
| *** avishay has joined #openstack-dev | 08:20 | |
| *** ala has quit IRC | 08:21 | |
| *** yamahata has quit IRC | 08:21 | |
| *** bauzas has joined #openstack-dev | 08:22 | |
| *** pasquier-s has joined #openstack-dev | 08:22 | |
| *** jamielennox is now known as jamielennox|away | 08:22 | |
| *** alagalah has joined #openstack-dev | 08:23 | |
| *** buzztroll has quit IRC | 08:24 | |
| *** leseb has joined #openstack-dev | 08:24 | |
| *** buzztroll has joined #openstack-dev | 08:24 | |
| *** xqueralt has joined #openstack-dev | 08:25 | |
| *** mdurnosvistov has quit IRC | 08:25 | |
| *** xqueralt has quit IRC | 08:26 | |
| *** jcoufal has joined #openstack-dev | 08:26 | |
| *** afazekas_ is now known as afazekas | 08:27 | |
| *** kdas_ has quit IRC | 08:28 | |
| *** alagalah has quit IRC | 08:28 | |
| *** jcoufal has quit IRC | 08:28 | |
| *** jcoufal has joined #openstack-dev | 08:29 | |
| ekarlso | BobBall: is xenserver tested yet with ml2 ? | 08:29 |
| *** buzztroll has quit IRC | 08:29 | |
| *** xgsa has joined #openstack-dev | 08:30 | |
| *** yeylon__ has joined #openstack-dev | 08:31 | |
| *** saju_m has quit IRC | 08:31 | |
| *** andreykurilin has joined #openstack-dev | 08:33 | |
| *** matrohon has joined #openstack-dev | 08:34 | |
| *** rdas has joined #openstack-dev | 08:34 | |
| *** salv-orlando_ has joined #openstack-dev | 08:35 | |
| *** salv-orlando has quit IRC | 08:35 | |
| *** salv-orlando_ is now known as salv-orlando | 08:35 | |
| *** xqueralt|afk has quit IRC | 08:35 | |
| *** amuller has joined #openstack-dev | 08:35 | |
| *** dtantsur has joined #openstack-dev | 08:35 | |
| *** sahid has joined #openstack-dev | 08:36 | |
| *** xqueralt has joined #openstack-dev | 08:37 | |
| *** florentflament has joined #openstack-dev | 08:38 | |
| *** akrivoka has joined #openstack-dev | 08:38 | |
| *** kushal has joined #openstack-dev | 08:39 | |
| *** jgallard has joined #openstack-dev | 08:39 | |
| *** jhesketh_ has quit IRC | 08:41 | |
| *** jhesketh__ has quit IRC | 08:41 | |
| *** zyluo has quit IRC | 08:41 | |
| *** gokrokve has quit IRC | 08:45 | |
| *** gokrokve has joined #openstack-dev | 08:46 | |
| *** amuller has quit IRC | 08:46 | |
| *** I159_ has joined #openstack-dev | 08:47 | |
| *** I159 has joined #openstack-dev | 08:47 | |
| *** nacim has joined #openstack-dev | 08:47 | |
| *** gokrokve has quit IRC | 08:50 | |
| *** malteserTiffin has joined #openstack-dev | 08:50 | |
| *** jtomasek has quit IRC | 08:52 | |
| *** ppetit has joined #openstack-dev | 08:52 | |
| *** jtomasek has joined #openstack-dev | 08:52 | |
| *** ygbo has joined #openstack-dev | 08:53 | |
| *** jhesketh_ has joined #openstack-dev | 08:54 | |
| *** jhesketh__ has joined #openstack-dev | 08:54 | |
| *** exed_ has joined #openstack-dev | 08:55 | |
| *** stannie has joined #openstack-dev | 08:55 | |
| *** amuller has joined #openstack-dev | 08:55 | |
| *** ala has joined #openstack-dev | 08:55 | |
| *** kushal has quit IRC | 08:56 | |
| *** sarob has joined #openstack-dev | 08:58 | |
| *** saju_m has joined #openstack-dev | 08:58 | |
| *** ytwu has joined #openstack-dev | 08:58 | |
| *** jordanP has joined #openstack-dev | 08:59 | |
| *** ytwu1 has quit IRC | 09:01 | |
| *** jistr has joined #openstack-dev | 09:01 | |
| *** haomaiw__ has quit IRC | 09:02 | |
| *** e0ne has joined #openstack-dev | 09:02 | |
| *** jamespage_ has quit IRC | 09:02 | |
| *** jamespage_ has joined #openstack-dev | 09:03 | |
| *** haomaiwa_ has joined #openstack-dev | 09:03 | |
| *** ytwu1 has joined #openstack-dev | 09:03 | |
| *** ytwu has quit IRC | 09:04 | |
| *** sarob has quit IRC | 09:05 | |
| *** rdas has quit IRC | 09:05 | |
| *** unicell has quit IRC | 09:09 | |
| *** chandan_kumar has quit IRC | 09:10 | |
| *** skudriashev has quit IRC | 09:11 | |
| *** e0ne has quit IRC | 09:11 | |
| *** buzztroll has joined #openstack-dev | 09:13 | |
| *** e0ne has joined #openstack-dev | 09:13 | |
| *** kushal has joined #openstack-dev | 09:14 | |
| *** buzztroll has quit IRC | 09:14 | |
| *** derekh has joined #openstack-dev | 09:14 | |
| *** buzztroll has joined #openstack-dev | 09:15 | |
| *** gokrokve has joined #openstack-dev | 09:16 | |
| *** yassine has joined #openstack-dev | 09:17 | |
| *** exed__ has joined #openstack-dev | 09:17 | |
| *** mdurnosvistov has joined #openstack-dev | 09:17 | |
| *** lucasagomes has joined #openstack-dev | 09:18 | |
| *** gokrokve_ has joined #openstack-dev | 09:18 | |
| *** jamespage_ has quit IRC | 09:19 | |
| *** buzztroll has quit IRC | 09:19 | |
| *** exed_ has quit IRC | 09:19 | |
| *** exed__ is now known as exed_ | 09:19 | |
| *** mmagr has joined #openstack-dev | 09:20 | |
| *** MaxV has joined #openstack-dev | 09:20 | |
| *** chandan_kumar has joined #openstack-dev | 09:20 | |
| *** gokrokve has quit IRC | 09:21 | |
| *** Ursinha is now known as Ursinha-afk | 09:22 | |
| *** gokrokve_ has quit IRC | 09:23 | |
| *** AnilV4 has joined #openstack-dev | 09:24 | |
| *** malteserTiffin has quit IRC | 09:25 | |
| *** paragan_ has joined #openstack-dev | 09:26 | |
| *** malteserTiffin has joined #openstack-dev | 09:27 | |
| *** paragan has quit IRC | 09:28 | |
| *** Steap_ has quit IRC | 09:28 | |
| *** Steap_ has joined #openstack-dev | 09:28 | |
| *** ytwu has joined #openstack-dev | 09:30 | |
| *** ytwu1 has quit IRC | 09:32 | |
| *** mindpixel has joined #openstack-dev | 09:33 | |
| *** stevemar has quit IRC | 09:33 | |
| *** pixelb has joined #openstack-dev | 09:34 | |
| *** ytwu1 has joined #openstack-dev | 09:34 | |
| *** ytwu has quit IRC | 09:35 | |
| *** pradeep1 has joined #openstack-dev | 09:36 | |
| *** pradeep has quit IRC | 09:36 | |
| *** aditirav has joined #openstack-dev | 09:38 | |
| *** rdas has joined #openstack-dev | 09:41 | |
| *** unicell has joined #openstack-dev | 09:42 | |
| *** neoXsys has joined #openstack-dev | 09:43 | |
| *** eglynn has joined #openstack-dev | 09:43 | |
| *** mrunge has quit IRC | 09:43 | |
| *** andreaf has joined #openstack-dev | 09:47 | |
| *** DinaBelova_ is now known as DinaBelova | 09:50 | |
| *** kolesovdv has joined #openstack-dev | 09:51 | |
| *** boris-42_ has joined #openstack-dev | 09:52 | |
| *** bogdando has joined #openstack-dev | 09:53 | |
| *** Qiming has quit IRC | 09:53 | |
| *** matsuhashi has quit IRC | 09:54 | |
| *** markmc has joined #openstack-dev | 09:55 | |
| *** Ursinha-afk has quit IRC | 09:56 | |
| *** networkstatic has quit IRC | 09:56 | |
| *** lazy_prince has joined #openstack-dev | 09:57 | |
| *** Ursinha-afk has joined #openstack-dev | 09:57 | |
| *** killer_prince has quit IRC | 09:58 | |
| *** lazy_prince is now known as killer_prince | 09:58 | |
| *** gmurphy has quit IRC | 09:58 | |
| *** Ursinha-afk is now known as Ursinha | 09:58 | |
| *** Ursinha has joined #openstack-dev | 09:58 | |
| *** unicell has quit IRC | 09:59 | |
| *** gmurphy has joined #openstack-dev | 10:00 | |
| *** sushils has quit IRC | 10:00 | |
| *** sarob has joined #openstack-dev | 10:01 | |
| *** leseb has quit IRC | 10:01 | |
| *** sushils has joined #openstack-dev | 10:02 | |
| *** athomas has joined #openstack-dev | 10:02 | |
| *** leseb has joined #openstack-dev | 10:02 | |
| *** matsuhashi has joined #openstack-dev | 10:02 | |
| marekd|away | dolphm: ping ping ping. | 10:02 |
| *** marekd|away is now known as marekd | 10:02 | |
| *** gszasz has joined #openstack-dev | 10:03 | |
| *** rohitk_ has joined #openstack-dev | 10:04 | |
| *** samuelqueiroz-af has quit IRC | 10:04 | |
| *** fandi has quit IRC | 10:05 | |
| *** xchu has quit IRC | 10:05 | |
| *** rdas has quit IRC | 10:06 | |
| *** sarob has quit IRC | 10:06 | |
| *** rohitk has quit IRC | 10:06 | |
| *** ytwu has joined #openstack-dev | 10:06 | |
| *** sushils has quit IRC | 10:06 | |
| *** ytwu1 has quit IRC | 10:08 | |
| *** ytwu1 has joined #openstack-dev | 10:08 | |
| *** sushils has joined #openstack-dev | 10:08 | |
| *** tkammer has joined #openstack-dev | 10:08 | |
| *** pbelanyi has joined #openstack-dev | 10:09 | |
| *** ytwu has quit IRC | 10:11 | |
| *** ytwu2 has joined #openstack-dev | 10:11 | |
| *** juice has quit IRC | 10:12 | |
| *** ytwu1 has quit IRC | 10:12 | |
| *** buzztroll has joined #openstack-dev | 10:13 | |
| *** danpb has joined #openstack-dev | 10:13 | |
| *** juice has joined #openstack-dev | 10:15 | |
| *** jp_at_hp has joined #openstack-dev | 10:15 | |
| *** matsuhashi has quit IRC | 10:17 | |
| *** matsuhashi has joined #openstack-dev | 10:17 | |
| *** buzztroll has quit IRC | 10:18 | |
| *** gokrokve has joined #openstack-dev | 10:18 | |
| *** ygbo has quit IRC | 10:21 | |
| *** alex_xu has quit IRC | 10:21 | |
| *** ygbo has joined #openstack-dev | 10:21 | |
| *** matsuhashi has quit IRC | 10:22 | |
| *** gcha has joined #openstack-dev | 10:22 | |
| *** gokrokve has quit IRC | 10:23 | |
| *** mkollaro has joined #openstack-dev | 10:28 | |
| *** e0ne_ has joined #openstack-dev | 10:29 | |
| *** paragan_ has quit IRC | 10:32 | |
| *** ytwu has joined #openstack-dev | 10:33 | |
| *** aditirav_ has joined #openstack-dev | 10:33 | |
| *** malteserTiffin has quit IRC | 10:33 | |
| *** e0ne has quit IRC | 10:33 | |
| *** tdruiva has joined #openstack-dev | 10:34 | |
| *** ytwu2 has quit IRC | 10:35 | |
| *** aditirav has quit IRC | 10:36 | |
| *** aditirav_ is now known as aditirav | 10:36 | |
| *** mrunge has joined #openstack-dev | 10:37 | |
| *** ramishra has joined #openstack-dev | 10:38 | |
| *** NikitaKonovalov is now known as NikitaKonovalov_ | 10:39 | |
| *** jp_at_hp has quit IRC | 10:39 | |
| *** aditirav has quit IRC | 10:40 | |
| *** aditirav has joined #openstack-dev | 10:41 | |
| *** jamieh has joined #openstack-dev | 10:44 | |
| *** martyntaylor has joined #openstack-dev | 10:45 | |
| *** vkozhukalov has joined #openstack-dev | 10:46 | |
| *** rdas has joined #openstack-dev | 10:46 | |
| *** matsuhashi has joined #openstack-dev | 10:47 | |
| *** jhesketh__ has quit IRC | 10:48 | |
| *** aditirav has quit IRC | 10:48 | |
| *** aditirav has joined #openstack-dev | 10:49 | |
| *** sushils has quit IRC | 10:50 | |
| *** yamahata has joined #openstack-dev | 10:51 | |
| *** sushils has joined #openstack-dev | 10:55 | |
| *** aditirav_ has joined #openstack-dev | 10:57 | |
| *** yamahata has quit IRC | 11:00 | |
| *** aditirav has quit IRC | 11:01 | |
| *** aditirav_ is now known as aditirav | 11:01 | |
| *** sarob has joined #openstack-dev | 11:02 | |
| *** yaguang has quit IRC | 11:03 | |
| *** Ruetobas has quit IRC | 11:04 | |
| *** galstrom_zzz is now known as galstrom | 11:05 | |
| *** matrohon has quit IRC | 11:06 | |
| *** ramishra has quit IRC | 11:08 | |
| *** sarob has quit IRC | 11:08 | |
| *** ramishra has joined #openstack-dev | 11:09 | |
| *** Ruetobas has joined #openstack-dev | 11:10 | |
| *** matrohon has joined #openstack-dev | 11:11 | |
| *** leseb has quit IRC | 11:11 | |
| *** b3nt_pin has joined #openstack-dev | 11:12 | |
| *** leseb has joined #openstack-dev | 11:12 | |
| *** b3nt_pin is now known as beagles | 11:12 | |
| *** buzztroll has joined #openstack-dev | 11:13 | |
| *** malteserTiffin has joined #openstack-dev | 11:14 | |
| *** Ruetobas has quit IRC | 11:15 | |
| *** yassine has quit IRC | 11:15 | |
| *** yassine has joined #openstack-dev | 11:15 | |
| *** leseb has quit IRC | 11:16 | |
| *** gokrokve has joined #openstack-dev | 11:17 | |
| *** buzztroll has quit IRC | 11:18 | |
| *** leseb has joined #openstack-dev | 11:18 | |
| *** pcm_ has joined #openstack-dev | 11:18 | |
| *** I159_ has quit IRC | 11:19 | |
| *** I159 has quit IRC | 11:19 | |
| *** pcm_ has quit IRC | 11:20 | |
| *** pcm_ has joined #openstack-dev | 11:21 | |
| *** Ruetobas has joined #openstack-dev | 11:21 | |
| *** gokrokve has quit IRC | 11:22 | |
| *** mindpixel has quit IRC | 11:26 | |
| *** leseb has quit IRC | 11:28 | |
| *** leseb has joined #openstack-dev | 11:29 | |
| *** toddnni has joined #openstack-dev | 11:32 | |
| *** ik__ has quit IRC | 11:33 | |
| *** leseb has quit IRC | 11:33 | |
| *** athomas has quit IRC | 11:34 | |
| *** malteserTiffin has quit IRC | 11:34 | |
| *** DinaBelova is now known as DinaBelova_ | 11:36 | |
| *** jp_at_hp has joined #openstack-dev | 11:37 | |
| aloga | is there any keystone dev around? | 11:37 |
| *** e0ne has joined #openstack-dev | 11:37 | |
| *** johnthetubaguy has joined #openstack-dev | 11:37 | |
| *** matsuhashi has quit IRC | 11:37 | |
| *** jp_at_hp has quit IRC | 11:38 | |
| *** jgallard has quit IRC | 11:38 | |
| *** kushal has quit IRC | 11:38 | |
| *** pradeep has joined #openstack-dev | 11:39 | |
| *** e0ne_ has quit IRC | 11:41 | |
| *** pradeep1 has quit IRC | 11:43 | |
| *** athomas has joined #openstack-dev | 11:44 | |
| *** Guest33243 has joined #openstack-dev | 11:44 | |
| *** ytwu1 has joined #openstack-dev | 11:46 | |
| *** gcha has quit IRC | 11:47 | |
| *** jp_at_hp has joined #openstack-dev | 11:48 | |
| *** samuelqueiroz has joined #openstack-dev | 11:48 | |
| *** mindpixel has joined #openstack-dev | 11:48 | |
| *** Guest33243 has quit IRC | 11:48 | |
| *** ytwu has quit IRC | 11:50 | |
| *** ytwu has joined #openstack-dev | 11:51 | |
| *** ytwu1 has quit IRC | 11:53 | |
| *** ytwu1 has joined #openstack-dev | 11:55 | |
| *** paragan_ has joined #openstack-dev | 11:55 | |
| *** kdas_ has joined #openstack-dev | 11:56 | |
| *** ytwu has quit IRC | 11:57 | |
| *** CaptTofu has joined #openstack-dev | 11:59 | |
| *** alagalah has joined #openstack-dev | 12:00 | |
| *** killer_prince has quit IRC | 12:01 | |
| *** jamespage_ has joined #openstack-dev | 12:01 | |
| *** bvandenh has quit IRC | 12:01 | |
| *** alagalah has quit IRC | 12:04 | |
| *** zhiyan_ is now known as zhiyan | 12:04 | |
| *** jamespage_ has quit IRC | 12:04 | |
| *** sarob has joined #openstack-dev | 12:05 | |
| *** ytwu has joined #openstack-dev | 12:07 | |
| *** tdruiva has quit IRC | 12:09 | |
| *** ytwu1 has quit IRC | 12:09 | |
| *** sarob has quit IRC | 12:10 | |
| *** rdas has quit IRC | 12:12 | |
| *** alexpilotti has quit IRC | 12:13 | |
| *** buzztroll has joined #openstack-dev | 12:13 | |
| *** ytwu1 has joined #openstack-dev | 12:15 | |
| *** topol has joined #openstack-dev | 12:16 | |
| *** rfolco has joined #openstack-dev | 12:17 | |
| *** gokrokve has joined #openstack-dev | 12:17 | |
| *** paragan_ has quit IRC | 12:18 | |
| *** buzztroll has quit IRC | 12:18 | |
| *** ytwu has quit IRC | 12:18 | |
| *** e0ne has quit IRC | 12:18 | |
| *** sushils has quit IRC | 12:18 | |
| *** e0ne_ has joined #openstack-dev | 12:18 | |
| *** FunnyLookinHat has joined #openstack-dev | 12:20 | |
| *** kdas_ has quit IRC | 12:20 | |
| *** nmarchenko has joined #openstack-dev | 12:21 | |
| *** gokrokve has quit IRC | 12:22 | |
| *** baoli_ has joined #openstack-dev | 12:23 | |
| *** ytwu has joined #openstack-dev | 12:23 | |
| *** jruzicka has joined #openstack-dev | 12:24 | |
| *** aditirav has quit IRC | 12:24 | |
| *** dkranz has quit IRC | 12:24 | |
| *** sushils has joined #openstack-dev | 12:25 | |
| *** e0ne_ has quit IRC | 12:26 | |
| *** ytwu1 has quit IRC | 12:26 | |
| *** e0ne has joined #openstack-dev | 12:26 | |
| *** e0ne_ has joined #openstack-dev | 12:28 | |
| *** e0ne has quit IRC | 12:28 | |
| *** galstrom is now known as galstrom_zzz | 12:28 | |
| *** leseb has joined #openstack-dev | 12:29 | |
| *** ArxCruz has joined #openstack-dev | 12:30 | |
| *** raildo has joined #openstack-dev | 12:30 | |
| *** sushils has quit IRC | 12:30 | |
| *** leseb has quit IRC | 12:31 | |
| *** leseb has joined #openstack-dev | 12:31 | |
| *** sushils has joined #openstack-dev | 12:31 | |
| *** lucasagomes is now known as lucas-hungry | 12:32 | |
| *** kushal has joined #openstack-dev | 12:33 | |
| *** IanGovett has joined #openstack-dev | 12:34 | |
| *** ytwu1 has joined #openstack-dev | 12:34 | |
| *** ytwu2 has joined #openstack-dev | 12:36 | |
| *** sushils has quit IRC | 12:36 | |
| *** tdruiva has joined #openstack-dev | 12:36 | |
| *** sushils has joined #openstack-dev | 12:37 | |
| *** ytwu has quit IRC | 12:37 | |
| *** ytwu1 has quit IRC | 12:39 | |
| *** iartarisi has joined #openstack-dev | 12:40 | |
| *** e0ne_ has quit IRC | 12:41 | |
| *** sushils has quit IRC | 12:42 | |
| *** e0ne has joined #openstack-dev | 12:42 | |
| *** sushils has joined #openstack-dev | 12:42 | |
| *** gcha has joined #openstack-dev | 12:43 | |
| dolphm | marekd: pongpongpong | 12:45 |
| *** sumanthns has quit IRC | 12:45 | |
| *** leseb has quit IRC | 12:46 | |
| *** neelashah has quit IRC | 12:47 | |
| *** baoli_ has quit IRC | 12:47 | |
| *** leseb has joined #openstack-dev | 12:47 | |
| *** leseb has quit IRC | 12:47 | |
| *** baoli has joined #openstack-dev | 12:47 | |
| *** ytwu has joined #openstack-dev | 12:47 | |
| *** leseb has joined #openstack-dev | 12:47 | |
| *** promulo has quit IRC | 12:48 | |
| *** ytwu2 has quit IRC | 12:48 | |
| *** mkollaro1 has joined #openstack-dev | 12:52 | |
| *** mkollaro has quit IRC | 12:52 | |
| *** nshaikh has left #openstack-dev | 12:52 | |
| *** nshaikh has quit IRC | 12:53 | |
| *** zhiyan is now known as zhiyan_ | 12:54 | |
| *** portante has quit IRC | 12:55 | |
| *** dshulyak has quit IRC | 12:56 | |
| *** ytwu1 has joined #openstack-dev | 12:57 | |
| *** nshaikh has joined #openstack-dev | 12:57 | |
| *** nshaikh has quit IRC | 12:57 | |
| *** avishay has quit IRC | 12:57 | |
| *** haomaiw__ has joined #openstack-dev | 12:58 | |
| *** jcoufal has quit IRC | 12:58 | |
| *** vkmc has joined #openstack-dev | 12:59 | |
| *** jcoufal has joined #openstack-dev | 12:59 | |
| marekd | dolphm: was tempted to write "knock knock knock, Dolph, knock knock knock, Dolph [....]" :-) | 13:00 |
| *** ytwu has quit IRC | 13:00 | |
| *** noslzzp has joined #openstack-dev | 13:00 | |
| marekd | dolphm: anyways, speaking of your comment about fetching data from the SQL and performance issues. | 13:01 |
| marekd | dolphm: the only other way i can see now is using OR expression which is also not the best one afaik... | 13:01 |
| *** markvoelker has joined #openstack-dev | 13:01 | |
| dolphm | marekd: http://docs.sqlalchemy.org/en/rel_0_9/orm/query.html#sqlalchemy.orm.join | 13:02 |
| *** haomaiwa_ has quit IRC | 13:02 | |
| dolphm | marekd: those are 0.9 docs, but it's identical in 0.8 | 13:02 |
| dolphm | marekd: henry had the same issue in the assignments refactor, actually | 13:03 |
| marekd | dolphm: i know, i was basing on his code. | 13:03 |
| *** sarob has joined #openstack-dev | 13:06 | |
| *** nosnos has quit IRC | 13:08 | |
| *** jgallard has joined #openstack-dev | 13:11 | |
| *** troytoman-away is now known as troytoman | 13:11 | |
| *** ukalifon1 has joined #openstack-dev | 13:12 | |
| *** nmagnezi has quit IRC | 13:12 | |
| *** thouveng has joined #openstack-dev | 13:12 | |
| *** sarob has quit IRC | 13:13 | |
| *** neelashah has joined #openstack-dev | 13:13 | |
| *** CaptTofu has quit IRC | 13:13 | |
| *** buzztroll has joined #openstack-dev | 13:13 | |
| *** lcheng has joined #openstack-dev | 13:14 | |
| *** ukalifon3 has joined #openstack-dev | 13:14 | |
| *** portante has joined #openstack-dev | 13:15 | |
| *** zhiyan_ is now known as zhiyan | 13:15 | |
| *** mrunge has quit IRC | 13:16 | |
| *** ukalifon1 has quit IRC | 13:17 | |
| *** mkollaro has joined #openstack-dev | 13:17 | |
| *** eglynn is now known as eglynn-lunch | 13:17 | |
| *** gokrokve has joined #openstack-dev | 13:17 | |
| *** nmagnezi has joined #openstack-dev | 13:18 | |
| *** buzztroll has quit IRC | 13:18 | |
| *** dave_tucker_zzz is now known as dave_tucker | 13:19 | |
| *** gokrokve_ has joined #openstack-dev | 13:19 | |
| *** bvandenh has joined #openstack-dev | 13:19 | |
| *** troytoman is now known as troytoman-away | 13:19 | |
| *** ytwu has joined #openstack-dev | 13:21 | |
| *** mkollaro1 has quit IRC | 13:21 | |
| *** tdruiva has quit IRC | 13:21 | |
| *** tdruiva has joined #openstack-dev | 13:22 | |
| *** alexpilotti has joined #openstack-dev | 13:22 | |
| *** troytoman-away is now known as troytoman | 13:22 | |
| *** gokrokve has quit IRC | 13:22 | |
| marekd | dolphm: have you actually ever used in_ special keyword somewhere in the openstack? :/ | 13:22 |
| *** alagalah has joined #openstack-dev | 13:23 | |
| dolphm | marekd: in_? | 13:23 |
| *** ytwu1 has quit IRC | 13:23 | |
| dolphm | marekd: like (x in ['a', 'b', 'c']) ? | 13:23 |
| *** DinaBelova_ is now known as DinaBelova | 13:24 | |
| marekd | so it produces sql: SELECT args FROM table WHERE arg IN (1,2,3,4,5,6); | 13:24 |
| marekd | no, in_ from sqlalchemy. | 13:24 |
| *** gokrokve_ has quit IRC | 13:24 | |
| marekd | sorry, i was not specific enough. | 13:24 |
| kashyap | afazekas, When you have a moment, after a while I'm setting up a minimal Devstack on an F20 VM w/ Neutron. can I just avoid Cinder altogether, right? Any other things I can eliminate to keep it minimal? | 13:24 |
| *** mohits has quit IRC | 13:24 | |
| dolphm | marekd: ah... i don't *think* so | 13:24 |
| kashyap | afazekas, I'm currently trying to derive my localrc from this - http://logs.openstack.org/36/68036/7/check/check-tempest-dsvm-neutron/8bf16c8/logs/localrc.txt.gz | 13:25 |
| *** NikitaKonovalov_ is now known as NikitaKonovalov | 13:25 | |
| afazekas | probbaly you would like to delete the ERROR_ON_CLONE=True and USE_SCREEN=False lines | 13:25 |
| *** kgriffs_afk is now known as kgriffs | 13:26 | |
| kashyap | afazekas, Cool, thanks for the tip. | 13:27 |
| afazekas | You maybe able remove s-* ; swift, celiometer-*; q-lbaas,q-vpn,q-fwaas,q-metering , h-* heat, horizon , n-obj if you just want a basic nova + neutron | 13:28 |
| kashyap | afazekas, There are quite a bunch of services here -- ENABLED_SERVICES | 13:28 |
| *** troytoman is now known as troytoman-away | 13:28 | |
| *** pschaef has joined #openstack-dev | 13:28 | |
| afazekas | n-cond probbaly still optional , you may want to try qpid instead of rabbit | 13:28 |
| *** ytwu1 has joined #openstack-dev | 13:28 | |
| kashyap | What is n-cod? /me is still RTFM | 13:29 |
| afazekas | n-cond | 13:29 |
| afazekas | nova conductor | 13:29 |
| *** jcoufal has quit IRC | 13:29 | |
| kashyap | ahale, okay. Thanks. | 13:30 |
| kashyap | Err, didn't mean to prompt :-( | 13:30 |
| *** ytwu has quit IRC | 13:30 | |
| *** galstrom_zzz is now known as galstrom | 13:32 | |
| afazekas | kashyap: I am not sure is is it still optional, may be not | 13:32 |
| *** gmoro has quit IRC | 13:33 | |
| kashyap | afazekas, Ok, and, I could also do: sq-*/n-* (Quantum -> Neutron) | 13:33 |
| *** rcrit has joined #openstack-dev | 13:33 | |
| kashyap | I meant: s/q-*/n-* | 13:33 |
| *** alaski is now known as alaski_eto | 13:34 | |
| afazekas | No, q- is the prefix even for neutron | 13:34 |
| mattymo | probably for convenience | 13:34 |
| kashyap | ahale, n is for Nova. Thanks for correction | 13:35 |
| *** cagrev has joined #openstack-dev | 13:35 | |
| *** unicell has joined #openstack-dev | 13:36 | |
| *** jcoufal has joined #openstack-dev | 13:36 | |
| *** schwicke has joined #openstack-dev | 13:37 | |
| *** VINOD has joined #openstack-dev | 13:37 | |
| *** schwicke has quit IRC | 13:37 | |
| *** VINOD has quit IRC | 13:37 | |
| afazekas | kashyap: looks like you cannot simply exclude the n-cond with devstack.. | 13:39 |
| *** ytwu has joined #openstack-dev | 13:39 | |
| *** troytoman-away is now known as troytoman | 13:39 | |
| kashyap | afazekas, Ok, noted. | 13:40 |
| afazekas | FYI: if the localrc is not enough fro you http://devstack.org/configuration.html | 13:40 |
| kashyap | Cool, will consult that too. | 13:41 |
| *** jdob has joined #openstack-dev | 13:41 | |
| *** lcheng has quit IRC | 13:41 | |
| *** lucas-hungry is now known as lucasagomes | 13:42 | |
| *** ytwu1 has quit IRC | 13:42 | |
| *** rtheis has joined #openstack-dev | 13:42 | |
| *** dprince has joined #openstack-dev | 13:43 | |
| *** jeckersb_gone is now known as jeckersb | 13:43 | |
| *** salv-orlando has quit IRC | 13:43 | |
| kashyap | afazekas, Can you please confirm this too -- I can just remove Cinder (c-*) services too (as it's not strictly needed for a guest) | 13:44 |
| *** troytoman is now known as troytoman-away | 13:45 | |
| *** d0ugal has quit IRC | 13:45 | |
| *** d0ugal has joined #openstack-dev | 13:47 | |
| *** jecarey has quit IRC | 13:47 | |
| *** yamahata has joined #openstack-dev | 13:48 | |
| *** gmoro has joined #openstack-dev | 13:48 | |
| *** iv_m has quit IRC | 13:49 | |
| *** sandywalsh has joined #openstack-dev | 13:50 | |
| *** ngoracke has joined #openstack-dev | 13:50 | |
| afazekas | kashyap: yes (unless you have special disk config option in your boot command, or using cinder as glance back-end) | 13:51 |
| *** dbalog has joined #openstack-dev | 13:51 | |
| kashyap | afazekas, No, not using Cinder as glance backend. The goal is to make it as minimal as possible (and reduce needless bloat) | 13:51 |
| afazekas | If swift is enabled glance uses swift as back-end, if it's disabled it should use plain file backend | 13:51 |
| kashyap | Yep, plain file backend it is | 13:52 |
| kashyap | (I'm running it in a VM (with VMX extensions exposed to it). Just don't want to make it more complicated :-) | 13:53 |
| *** thomasem has joined #openstack-dev | 13:54 | |
| *** promulo has joined #openstack-dev | 13:57 | |
| *** sambagirl has quit IRC | 13:57 | |
| *** CaptTofu has joined #openstack-dev | 13:59 | |
| *** sahid has quit IRC | 14:00 | |
| *** sahid has joined #openstack-dev | 14:01 | |
| *** prad_ has joined #openstack-dev | 14:01 | |
| *** ramishra_ has joined #openstack-dev | 14:01 | |
| *** jecarey has joined #openstack-dev | 14:01 | |
| *** henrique has joined #openstack-dev | 14:01 | |
| *** sgordon has joined #openstack-dev | 14:01 | |
| *** sgordon has joined #openstack-dev | 14:01 | |
| *** topol has quit IRC | 14:01 | |
| *** ramishra has quit IRC | 14:02 | |
| *** kolesovdv has quit IRC | 14:03 | |
| *** pbelanyi has quit IRC | 14:04 | |
| *** adreznec has quit IRC | 14:05 | |
| *** mkollaro has quit IRC | 14:05 | |
| *** tkammer has quit IRC | 14:06 | |
| *** ramishra_ has quit IRC | 14:06 | |
| *** sahid has quit IRC | 14:06 | |
| *** sahid has joined #openstack-dev | 14:07 | |
| *** alagalah has quit IRC | 14:08 | |
| *** dsirrine has joined #openstack-dev | 14:08 | |
| *** sarob has joined #openstack-dev | 14:09 | |
| *** troytoman-away is now known as troytoman | 14:11 | |
| *** vartom1111111115 has quit IRC | 14:12 | |
| henrique | Adam Young/Dolph Matthews. Hello. I'm investigating use cases to use domain in Nova and I have found some that may be useful. tellesnobrega has discussed it on keystone meeting last week. Should I start a new ML or should I use the Multitenancy ML? | 14:12 |
| *** buzztroll has joined #openstack-dev | 14:13 | |
| dolphm | henrique: that's up to you. if it's refining the direction for hierarchical multitenancy, use the existing thread. if it's only related, then start a new thread | 14:13 |
| *** sarob has quit IRC | 14:14 | |
| *** kgriffs is now known as kgriffs_afk | 14:15 | |
| *** ramishra has joined #openstack-dev | 14:15 | |
| *** saju_m has quit IRC | 14:15 | |
| *** zhiyan is now known as zhiyan_ | 14:16 | |
| *** dstanek has joined #openstack-dev | 14:17 | |
| *** gokrokve has joined #openstack-dev | 14:17 | |
| *** buzztroll has quit IRC | 14:17 | |
| *** zhiyan_ is now known as zhiyan | 14:18 | |
| *** shanturoy has quit IRC | 14:19 | |
| *** jdob has quit IRC | 14:19 | |
| *** jdob has joined #openstack-dev | 14:19 | |
| *** doron has joined #openstack-dev | 14:20 | |
| *** irenab has quit IRC | 14:20 | |
| *** caleb_ has joined #openstack-dev | 14:20 | |
| *** colinmcnamara has joined #openstack-dev | 14:20 | |
| *** jnoller has joined #openstack-dev | 14:20 | |
| *** feleouet has joined #openstack-dev | 14:21 | |
| *** dvarga has joined #openstack-dev | 14:21 | |
| *** eharney has joined #openstack-dev | 14:22 | |
| *** mriedem has joined #openstack-dev | 14:22 | |
| *** gokrokve has quit IRC | 14:22 | |
| *** rraja has quit IRC | 14:23 | |
| henrique | dolphm: ok! So i'll start a new one. Thanks | 14:23 |
| *** unicell has quit IRC | 14:24 | |
| *** iamben_tw has quit IRC | 14:24 | |
| marekd | dolphm: https://review.openstack.org/#/c/71353/12/keystone/assignment/controllers.py line 449 - you comented i should be getting a list of groups from context. I am not sure where I can modify context before it reaches that function. Is it somewhere in the auth.plugins.* plugin? | 14:24 |
| *** jpeeler has joined #openstack-dev | 14:24 | |
| *** jpeeler has quit IRC | 14:24 | |
| *** jpeeler has joined #openstack-dev | 14:24 | |
| dolphm | marekd: let me look - that's all brand new stuff | 14:24 |
| *** adreznec has joined #openstack-dev | 14:25 | |
| *** mindpixel has quit IRC | 14:25 | |
| *** vladikr has joined #openstack-dev | 14:25 | |
| dolphm | marekd: it would be an addition to keystone.common.authorization... | 14:26 |
| *** leseb has quit IRC | 14:27 | |
| *** doron is now known as doron_afk | 14:28 | |
| marekd | dolphm: so extension of v3_token_to_auth_context and another if statement, something like id 'user' in token_data and 'groups' in token_data['user']: store list of groups in the context. | 14:29 |
| *** shanturoy has joined #openstack-dev | 14:29 | |
| *** troytoman is now known as troytoman-away | 14:30 | |
| *** sushils has quit IRC | 14:30 | |
| *** mkerrin has quit IRC | 14:30 | |
| *** radez_g0n3 is now known as radez | 14:30 | |
| dolphm | marekd: http://pasteraw.com/33rsjj3a7p6xlm2ar33pu1qsn8sv8rl | 14:31 |
| *** ramishra has quit IRC | 14:31 | |
| *** iamben_tw has joined #openstack-dev | 14:31 | |
| *** doron_afk is now known as doron | 14:31 | |
| *** omachace has joined #openstack-dev | 14:31 | |
| marekd | right! | 14:32 |
| samuelqueiroz | dolphm, I'm working with a Keystone customized policy file and I need some help. If so, could you help me ? | 14:32 |
| samuelqueiroz | dolphm, Are you a keystoner? If so, could you help me ? * | 14:33 |
| dolphm | samuelqueiroz: feel free to ask questions in either #openstack or #openstack-dev as appropriate -- it's difficult for anyone to promise help without knowing the question | 14:33 |
| *** byeager has joined #openstack-dev | 14:34 | |
| samuelqueiroz | dolphm, Ok... | 14:34 |
| dolphm | samuelqueiroz: if you can't get an answer in IRC, raise the question to the mailing list as you'll get a broader audience there | 14:34 |
| *** jpomero has joined #openstack-dev | 14:35 | |
| samuelqueiroz | dolphm, In my config, I've a project admin and I'd like to allow him to list all users filtered by his domain. | 14:35 |
| *** nkinder has quit IRC | 14:36 | |
| *** sushils has joined #openstack-dev | 14:36 | |
| samuelqueiroz | dolphm, If he has a domain scoped token, I just need: "identity:list_users": "rule:admin_required and domain_id:%(domain_id)s" | 14:36 |
| dolphm | samuelqueiroz: a "project" admin by definition wouldn't have domain-scoped authorization to do that | 14:36 |
| samuelqueiroz | dolphm, But what about if he has a project scoped token? How could I define this in my policy? Is it possible? | 14:37 |
| *** jdob_ has joined #openstack-dev | 14:37 | |
| *** jdob has quit IRC | 14:37 | |
| dolphm | samuelqueiroz: not with a project-scoped token; keystone is working towards using domain-scoped tokens for that type of domain-level administration | 14:37 |
| *** blamar has joined #openstack-dev | 14:38 | |
| *** jdob_ is now known as jdob | 14:38 | |
| *** alagalah has joined #openstack-dev | 14:38 | |
| samuelqueiroz | dolphm, Ok... so the answer is it's not possible .. | 14:38 |
| *** aditirav has joined #openstack-dev | 14:38 | |
| *** kbringard has joined #openstack-dev | 14:39 | |
| samuelqueiroz | dolphm, thanks for ur help | 14:39 |
| *** aeperezt has joined #openstack-dev | 14:40 | |
| *** blamar has quit IRC | 14:40 | |
| *** blamar has joined #openstack-dev | 14:40 | |
| *** alagalah has quit IRC | 14:40 | |
| *** alagalah_ has joined #openstack-dev | 14:40 | |
| *** dkehn__ has joined #openstack-dev | 14:41 | |
| *** ytwu1 has joined #openstack-dev | 14:43 | |
| *** yamahata has quit IRC | 14:43 | |
| *** troytoman-away is now known as troytoman | 14:43 | |
| *** xingchao has quit IRC | 14:43 | |
| *** yamahata has joined #openstack-dev | 14:44 | |
| *** dkehn_ has quit IRC | 14:44 | |
| *** jeckersb is now known as jeckersb_gone | 14:45 | |
| *** ytwu has quit IRC | 14:46 | |
| *** afazekas has quit IRC | 14:46 | |
| *** dkehn__ is now known as dkehn_ | 14:46 | |
| *** anniec has joined #openstack-dev | 14:48 | |
| *** xjiujiu has quit IRC | 14:48 | |
| *** troytoman is now known as troytoman-away | 14:50 | |
| *** ukalifon3 has quit IRC | 14:50 | |
| *** huats_ is now known as huats | 14:50 | |
| *** themistymay has joined #openstack-dev | 14:51 | |
| *** peristeri has joined #openstack-dev | 14:52 | |
| *** CaptTofu has quit IRC | 14:52 | |
| *** killer_prince has joined #openstack-dev | 14:52 | |
| *** vijendar has joined #openstack-dev | 14:52 | |
| *** aditirav has quit IRC | 14:53 | |
| *** sandywalsh has quit IRC | 14:53 | |
| *** paragan has joined #openstack-dev | 14:54 | |
| *** doron is now known as doron_afk | 14:55 | |
| *** dperaza has quit IRC | 14:56 | |
| *** noslzzp has quit IRC | 14:57 | |
| *** tsekiyama has joined #openstack-dev | 14:57 | |
| *** achampion has quit IRC | 14:57 | |
| *** david-lyle has quit IRC | 14:58 | |
| *** jeckersb_gone is now known as jeckersb | 14:59 | |
| *** tsekiyama has quit IRC | 14:59 | |
| *** tsekiyama has joined #openstack-dev | 14:59 | |
| *** tsekiyama has quit IRC | 14:59 | |
| *** gszasz has quit IRC | 15:00 | |
| *** gszasz has joined #openstack-dev | 15:01 | |
| *** tsekiyama has joined #openstack-dev | 15:01 | |
| *** skraynev is now known as skraynev_afk | 15:02 | |
| *** skraynev_afk is now known as skraynev_afk_goi | 15:03 | |
| *** skraynev_afk_goi is now known as skraynev_afk | 15:03 | |
| *** YorikSar has joined #openstack-dev | 15:03 | |
| *** ukalifon1 has joined #openstack-dev | 15:03 | |
| *** FunnyLookinHat has quit IRC | 15:03 | |
| *** ygbo has quit IRC | 15:04 | |
| *** otherwiseguy has joined #openstack-dev | 15:04 | |
| *** doron_afk is now known as doron | 15:05 | |
| *** chandan_kumar has quit IRC | 15:07 | |
| mriedem | dripton: ping | 15:07 |
| *** nshaikh has joined #openstack-dev | 15:07 | |
| dripton | mriedem: pong | 15:08 |
| mriedem | dripton: hey, regarding 3rd party CI for this migrate patch https://review.openstack.org/#/c/55572/ | 15:08 |
| *** rustlebee is now known as russellb | 15:08 | |
| *** sandywalsh has joined #openstack-dev | 15:08 | |
| mriedem | the team has py26 running, but they were wondering if they also need to run py27? | 15:08 |
| dripton | mriedem: I think both would be ideal. We do sometimes see bugs on one and not the other. | 15:09 |
| mriedem | dripton: they are probably running py26 b/c they are running on rhel 6 (i think) | 15:09 |
| mriedem | dripton: ok, ideal == required to merge? | 15:09 |
| *** samuelqueiroz has quit IRC | 15:09 | |
| *** rwsu has joined #openstack-dev | 15:09 | |
| dripton | mriedem: my opinion is we should test on both 2.6 and 2.7 before merging. Of course I'm not the only one with a vote. | 15:10 |
| mattymo | dripton, +1 | 15:10 |
| mattymo | we've seen some issues with python 2.7 that didn't occur in 2.6 | 15:10 |
| *** sarob has joined #openstack-dev | 15:10 | |
| mriedem | dripton: ok, you're the only one reviewing it though so that's why i asked you :) i'll take that back to them | 15:10 |
| dripton | mreidem: thanks. | 15:10 |
| *** pberis has quit IRC | 15:11 | |
| *** nelsnelson has joined #openstack-dev | 15:11 | |
| *** rohitk_ has quit IRC | 15:11 | |
| *** rohitk has joined #openstack-dev | 15:12 | |
| *** matrohon_ has joined #openstack-dev | 15:12 | |
| *** buzztroll has joined #openstack-dev | 15:13 | |
| *** sandywalsh has quit IRC | 15:14 | |
| sileht | markmc, ping | 15:14 |
| markmc | sileht, hey | 15:14 |
| *** matrohon_ has quit IRC | 15:14 | |
| sileht | markmc, i have a question about this remark: https://review.openstack.org/#/c/61675/11/oslo/messaging/_drivers/impl_qpid.py | 15:15 |
| markmc | sileht, sure | 15:15 |
| *** doron is now known as doron_afk | 15:15 | |
| sileht | markmc, I think it's perhaps better to ack the message if requeue is not supported | 15:15 |
| *** gordc has joined #openstack-dev | 15:15 | |
| markmc | sileht, what happens if we don't ack it ? | 15:16 |
| *** sarob has quit IRC | 15:16 | |
| *** ygbo has joined #openstack-dev | 15:16 | |
| sileht | markmc, no idea I think on certain configuration the message still block on the queue | 15:16 |
| sileht | markmc, old oslo-rpc was quietly ack the message for qpid in this case | 15:17 |
| *** paragan has quit IRC | 15:17 | |
| *** buzztroll has quit IRC | 15:18 | |
| *** gokrokve has joined #openstack-dev | 15:19 | |
| markmc | ah | 15:19 |
| markmc | # TODO(sandy): Need support for optional ack_on_error. | 15:19 |
| markmc | self.session.acknowledge(message) | 15:19 |
| sileht | markmc, I think we can keep the old behavior, by catching the NotImplementError in the dispatcher, log the exception, ack the message | 15:19 |
| *** nmagnezi has quit IRC | 15:19 | |
| *** thouveng has quit IRC | 15:19 | |
| *** leseb has joined #openstack-dev | 15:19 | |
| sileht | markmc, (and improve the documentation :) ) | 15:19 |
| markmc | sileht, ok, sounds reasonable | 15:20 |
| *** alagalah_ has quit IRC | 15:20 | |
| markmc | sileht, hmm, or maybe just have the driver do the ack in requeue() | 15:20 |
| sileht | markmc, yes its more easy | 15:21 |
| *** giulivo has joined #openstack-dev | 15:22 | |
| *** dperaza has joined #openstack-dev | 15:22 | |
| sileht | markmc, thx for your time, I will publish a update soon | 15:23 |
| markmc | sileht, np, thanks for your patience on this | 15:23 |
| markmc | sileht, I think we've gotten to a better place with moving stuff into the dispatcher | 15:23 |
| * markmc happy now | 15:23 | |
| *** ytwu has joined #openstack-dev | 15:23 | |
| *** gokrokve has quit IRC | 15:23 | |
| *** achampion has joined #openstack-dev | 15:24 | |
| *** nkinder has joined #openstack-dev | 15:24 | |
| *** dkranz has joined #openstack-dev | 15:25 | |
| *** ytwu1 has quit IRC | 15:26 | |
| *** noslzzp has joined #openstack-dev | 15:26 | |
| *** ygbo has quit IRC | 15:26 | |
| *** coolsvap has joined #openstack-dev | 15:26 | |
| *** sandywalsh has joined #openstack-dev | 15:26 | |
| *** protux has joined #openstack-dev | 15:27 | |
| *** themistymay has quit IRC | 15:27 | |
| *** amuller has quit IRC | 15:30 | |
| *** CaptTofu has joined #openstack-dev | 15:31 | |
| *** ramishra has joined #openstack-dev | 15:32 | |
| *** jergerber has joined #openstack-dev | 15:32 | |
| *** themistymay has joined #openstack-dev | 15:33 | |
| *** beekneemech is now known as bnemec | 15:34 | |
| *** david-lyle has joined #openstack-dev | 15:35 | |
| *** vsergeyev has joined #openstack-dev | 15:36 | |
| *** viktors has joined #openstack-dev | 15:36 | |
| *** viktors has left #openstack-dev | 15:36 | |
| *** vsergeyev has left #openstack-dev | 15:36 | |
| *** viktors has joined #openstack-dev | 15:36 | |
| *** nshaikh has left #openstack-dev | 15:36 | |
| viktors | dhellmann: hello | 15:37 |
| *** ramishra has quit IRC | 15:37 | |
| *** mrodden has joined #openstack-dev | 15:37 | |
| *** e0ne has quit IRC | 15:38 | |
| *** ygbo has joined #openstack-dev | 15:38 | |
| *** rkukura has quit IRC | 15:38 | |
| *** themistymay has left #openstack-dev | 15:38 | |
| *** benonsoftware has joined #openstack-dev | 15:39 | |
| *** carlp has joined #openstack-dev | 15:41 | |
| *** sushils has quit IRC | 15:41 | |
| *** irimi has joined #openstack-dev | 15:42 | |
| *** topol has joined #openstack-dev | 15:42 | |
| *** sushils has joined #openstack-dev | 15:42 | |
| sileht | markmc, I have updated the topic, you have to rereview https://review.openstack.org/#/c/59714/, I have added some new tests to fully cover the eventlet spawn_with method. | 15:43 |
| *** ramishra has joined #openstack-dev | 15:44 | |
| markmc | sileht, cool | 15:44 |
| *** edmund has joined #openstack-dev | 15:45 | |
| *** e0ne has joined #openstack-dev | 15:47 | |
| *** beagles is now known as beagles_brb | 15:50 | |
| *** FunnyLookinHat has joined #openstack-dev | 15:50 | |
| *** mmagr has quit IRC | 15:50 | |
| *** ytwu1 has joined #openstack-dev | 15:53 | |
| *** kbringard has quit IRC | 15:53 | |
| *** kevinconway has joined #openstack-dev | 15:55 | |
| *** doron_afk is now known as doron | 15:55 | |
| *** ramishra has quit IRC | 15:55 | |
| *** jprovazn has quit IRC | 15:56 | |
| *** ytwu has quit IRC | 15:56 | |
| *** doron is now known as doron_afk | 15:57 | |
| *** Gordonz has joined #openstack-dev | 15:57 | |
| *** jergerber has quit IRC | 15:57 | |
| *** pradeep has left #openstack-dev | 15:57 | |
| *** Gordonz has quit IRC | 15:58 | |
| *** Gordonz has joined #openstack-dev | 15:59 | |
| *** e0ne_ has joined #openstack-dev | 15:59 | |
| *** NikitaKonovalov is now known as NikitaKonovalov_ | 15:59 | |
| *** colinmcnamara has quit IRC | 15:59 | |
| *** hdd_ has joined #openstack-dev | 15:59 | |
| *** alagalah has joined #openstack-dev | 16:00 | |
| *** salv-orlando has joined #openstack-dev | 16:00 | |
| *** dvarga is now known as dvarga|away | 16:00 | |
| *** dvarga|away is now known as dvarga | 16:00 | |
| *** Ruetobas has quit IRC | 16:01 | |
| *** boris-42_ has quit IRC | 16:01 | |
| *** e0ne has quit IRC | 16:02 | |
| *** caleb_ has quit IRC | 16:03 | |
| *** amotoki has quit IRC | 16:03 | |
| *** mgagne has joined #openstack-dev | 16:03 | |
| *** Ruetobas has joined #openstack-dev | 16:03 | |
| *** devoid has joined #openstack-dev | 16:03 | |
| *** devoid has quit IRC | 16:04 | |
| *** samuelqueiroz has joined #openstack-dev | 16:04 | |
| *** jergerber has joined #openstack-dev | 16:05 | |
| *** rcleere has joined #openstack-dev | 16:05 | |
| *** pberis has joined #openstack-dev | 16:05 | |
| *** caleb_ has joined #openstack-dev | 16:06 | |
| *** samuelqueiroz has quit IRC | 16:07 | |
| *** DinaBelova is now known as DinaBelova_ | 16:08 | |
| *** Ruetobas has quit IRC | 16:08 | |
| *** kbringard has joined #openstack-dev | 16:11 | |
| *** mjfork has quit IRC | 16:12 | |
| *** mjfork has joined #openstack-dev | 16:13 | |
| *** protux has quit IRC | 16:13 | |
| *** sarob has joined #openstack-dev | 16:13 | |
| *** buzztroll has joined #openstack-dev | 16:13 | |
| *** Ruetobas has joined #openstack-dev | 16:13 | |
| *** dshulyak has joined #openstack-dev | 16:14 | |
| *** jeckersb is now known as jeckersb_gone | 16:14 | |
| *** CaptTofu has quit IRC | 16:14 | |
| *** jamieh has quit IRC | 16:15 | |
| *** hdd_ is now known as hdd | 16:15 | |
| *** jamieh has joined #openstack-dev | 16:17 | |
| *** buzztroll has quit IRC | 16:17 | |
| *** ytwu has joined #openstack-dev | 16:18 | |
| *** sarob has quit IRC | 16:18 | |
| *** pablosan has joined #openstack-dev | 16:19 | |
| *** gokrokve has joined #openstack-dev | 16:19 | |
| *** ytwu1 has quit IRC | 16:20 | |
| *** jgrimm has joined #openstack-dev | 16:20 | |
| *** kgriffs_afk is now known as kgriffs | 16:22 | |
| *** jobewan has joined #openstack-dev | 16:22 | |
| *** bvandenh has quit IRC | 16:23 | |
| *** Mandell has quit IRC | 16:23 | |
| *** CaptTofu has joined #openstack-dev | 16:23 | |
| *** relaxdiego has joined #openstack-dev | 16:23 | |
| *** CaptTofu has quit IRC | 16:23 | |
| *** galstrom is now known as galstrom_zzz | 16:24 | |
| *** gokrokve has quit IRC | 16:24 | |
| *** belmoreira has quit IRC | 16:27 | |
| *** ukalifon1 has quit IRC | 16:28 | |
| *** chandan_kumar has joined #openstack-dev | 16:29 | |
| *** cagrev has quit IRC | 16:29 | |
| *** chandan_kumar has quit IRC | 16:29 | |
| *** cagrev has joined #openstack-dev | 16:30 | |
| *** chandan_kumar has joined #openstack-dev | 16:30 | |
| *** samuelqueiroz has joined #openstack-dev | 16:30 | |
| *** sushils has quit IRC | 16:30 | |
| *** caleb_ has quit IRC | 16:30 | |
| *** skraynev_afk is now known as skraynev | 16:31 | |
| *** xgsa has quit IRC | 16:31 | |
| *** sushils has joined #openstack-dev | 16:31 | |
| *** byeager has quit IRC | 16:32 | |
| *** jcoufal has quit IRC | 16:34 | |
| *** eharney has quit IRC | 16:34 | |
| *** dtantsur has quit IRC | 16:35 | |
| *** bvandenh has joined #openstack-dev | 16:35 | |
| *** yeylon__ has quit IRC | 16:35 | |
| *** jistr has quit IRC | 16:35 | |
| *** galstrom_zzz is now known as galstrom | 16:35 | |
| *** bearhands is now known as comstud | 16:36 | |
| *** sushils has quit IRC | 16:36 | |
| *** caleb_ has joined #openstack-dev | 16:36 | |
| *** jmontemayor has joined #openstack-dev | 16:36 | |
| *** sushils has joined #openstack-dev | 16:37 | |
| *** rohitk has quit IRC | 16:37 | |
| *** alexpilotti has quit IRC | 16:38 | |
| *** dvarga is now known as dvarga|away | 16:38 | |
| *** dvarga|away is now known as dvarga | 16:38 | |
| *** alexpilotti has joined #openstack-dev | 16:38 | |
| *** bauzas has quit IRC | 16:38 | |
| jdennis | how do you make a print statement in a unit test have have it be visible? With nosetests I would pass the -s argument, but with tox --> testr --> ?? I'm lost, -s is an unknown arg | 16:39 |
| *** eglynn-lunch is now known as eglynn | 16:40 | |
| *** sandywalsh has quit IRC | 16:40 | |
| *** andreaf has quit IRC | 16:40 | |
| tristanC | jdennis: you can still print to >>sys.stderr | 16:40 |
| *** rkukura has joined #openstack-dev | 16:41 | |
| raildo | jdennis: if you are using python, you can use the library pdb to debug your system. http://docs.python.org/2/library/pdb.html | 16:41 |
| *** byeager has joined #openstack-dev | 16:42 | |
| *** erkules_ has joined #openstack-dev | 16:42 | |
| *** erkules has quit IRC | 16:43 | |
| *** mikeoutland has joined #openstack-dev | 16:44 | |
| dhellmann | viktors: hi | 16:45 |
| *** eharney has joined #openstack-dev | 16:46 | |
| *** anniec has quit IRC | 16:47 | |
| *** prad_ has quit IRC | 16:47 | |
| viktors | dhellmann: I’ve tested your graduate.sh script a few days ago | 16:47 |
| *** e0ne has joined #openstack-dev | 16:48 | |
| viktors | dhellmann: I made some changes and and pushed them to review | 16:48 |
| dhellmann | viktors: I'll look for that review, thanks! | 16:48 |
| viktors | dhellmann: can you please look at this patch https://review.openstack.org/#/c/72320/ (Fix tools/graduate.sh for work with directories) | 16:48 |
| viktors | dhellmann: ok :) | 16:48 |
| *** erkules_ has quit IRC | 16:50 | |
| dhellmann | viktors: looks good, thanks! | 16:50 |
| *** e0ne_ has quit IRC | 16:50 | |
| *** erkules_ has joined #openstack-dev | 16:51 | |
| jdennis | raildo: I've had nothing but trouble trying to use pdb with the unit tests in keystone. The doc says I have use "tox -debug' but tox fails because keystone/tox.ini demands version 1.6 which is not in the requirements, if I install tox in .venv and run tox with wIth_venv.sh, tox fails again with "tox.ConfigError: ConfigError: substitution key 'posargs' not found", a bit frustrating trying to track down all the moving parts | 16:51 |
| *** rraja has joined #openstack-dev | 16:51 | |
| *** irimi has quit IRC | 16:51 | |
| *** sandywalsh has joined #openstack-dev | 16:52 | |
| dolphm | jdennis: what's your tox --version ? | 16:52 |
| clarkb | that tox bug is quite annoying | 16:54 |
| clarkb | dolphm 1.7.0, you need 1.6.1 | 16:54 |
| jdennis | dolphm: system tox is python-tox-1.4.2-8.fc19.noarch, tox I installed in .venv is 1.7.0 | 16:54 |
| dolphm | jdennis: pip install --upgrade "tox>=1.6,<1.7" | 16:54 |
| raildo | jdennis: using the command ./run_tests -d, with the pdb included in your code, it will stop the debug there. | 16:54 |
| *** gcha has quit IRC | 16:54 | |
| clarkb | there are now several ml threads about it. waiting on upstream to review my patch | 16:55 |
| lbragstad | clarkb: dolphm https://bugs.launchpad.net/openstack-ci/+bug/1274135 | 16:55 |
| lbragstad | that the one you're talking about | 16:55 |
| *** chandan_kumar has quit IRC | 16:55 | |
| lbragstad | jdennis: ^ | 16:55 |
| dolphm | lbragstad: ++ | 16:55 |
| *** dave_tucker is now known as dave_tucker_zzz | 16:55 | |
| clarkb | lbragstad: yes I have pushed a patch to tox even | 16:56 |
| lbragstad | clarkb: cool | 16:56 |
| clarkb | but holger hasnt reviewed it last I checked | 16:56 |
| *** rraja has quit IRC | 16:56 | |
| *** gokrokve has joined #openstack-dev | 16:56 | |
| *** mikeoutland has quit IRC | 16:57 | |
| clarkb | https://bitbucket.org/hpk42/tox/pull-request/85/fix-command-expansion-and-parsing/diff if anyone else wants to review/test | 16:58 |
| *** vkozhukalov has quit IRC | 17:00 | |
| *** colinmcnamara has joined #openstack-dev | 17:01 | |
| *** abhirc has joined #openstack-dev | 17:01 | |
| *** DinaBelova_ is now known as DinaBelova | 17:02 | |
| *** tanisdl has joined #openstack-dev | 17:03 | |
| jdennis | raildo: sorry, keystone/run_tests.sh does not seem to work with the -d command line arg, I think that's obsolete | 17:03 |
| *** tiamar has joined #openstack-dev | 17:03 | |
| *** _cjones_ has joined #openstack-dev | 17:05 | |
| *** Alexei_987 has quit IRC | 17:05 | |
| *** jaypipes has quit IRC | 17:07 | |
| *** jvrbanac has quit IRC | 17:07 | |
| *** jvrbanac has joined #openstack-dev | 17:08 | |
| *** devlaps has joined #openstack-dev | 17:08 | |
| *** relaxdiego has quit IRC | 17:09 | |
| *** corXi has quit IRC | 17:10 | |
| *** viktors has quit IRC | 17:10 | |
| *** jamieh has quit IRC | 17:10 | |
| *** bauzas has joined #openstack-dev | 17:11 | |
| dolphm | morganfainberg_Z: ping me when you get in | 17:11 |
| *** martyntaylor has left #openstack-dev | 17:11 | |
| *** sushils has quit IRC | 17:12 | |
| *** lazy_prince has joined #openstack-dev | 17:13 | |
| *** buzztroll has joined #openstack-dev | 17:13 | |
| *** unicell has joined #openstack-dev | 17:14 | |
| *** sarob has joined #openstack-dev | 17:14 | |
| *** exed_ has quit IRC | 17:15 | |
| *** e0ne has quit IRC | 17:16 | |
| *** kushal has quit IRC | 17:16 | |
| *** bdpayne has joined #openstack-dev | 17:16 | |
| *** beagles_brb is now known as beagles | 17:16 | |
| *** sn6i23a has joined #openstack-dev | 17:17 | |
| *** buzztroll has quit IRC | 17:17 | |
| *** doron_afk has quit IRC | 17:17 | |
| *** jobewan has quit IRC | 17:18 | |
| *** erkules_ is now known as erkules | 17:18 | |
| *** tkay has joined #openstack-dev | 17:19 | |
| *** bswartz has joined #openstack-dev | 17:20 | |
| *** sarob has quit IRC | 17:20 | |
| *** sarob has joined #openstack-dev | 17:21 | |
| *** portante has quit IRC | 17:21 | |
| *** dkranz has quit IRC | 17:21 | |
| *** portante has joined #openstack-dev | 17:21 | |
| *** dkranz has joined #openstack-dev | 17:22 | |
| *** sambagirl has joined #openstack-dev | 17:22 | |
| *** nacim has quit IRC | 17:22 | |
| *** ianw has quit IRC | 17:23 | |
| *** exed_ has joined #openstack-dev | 17:23 | |
| *** ianw has joined #openstack-dev | 17:24 | |
| *** ytwu1 has joined #openstack-dev | 17:25 | |
| *** mdurnosvistov_ has joined #openstack-dev | 17:26 | |
| *** relaxdiego has joined #openstack-dev | 17:27 | |
| *** sarob has quit IRC | 17:27 | |
| *** ytwu has quit IRC | 17:28 | |
| *** exed_ has quit IRC | 17:28 | |
| *** omachace has left #openstack-dev | 17:29 | |
| tellesnobrega | dolphm: regarding hierarchical projects in keystone, we should use hierarchical ids in code but show the user hierarchical names right? | 17:30 |
| *** dshulyak has quit IRC | 17:31 | |
| *** cdub has joined #openstack-dev | 17:31 | |
| *** mikeoutland has joined #openstack-dev | 17:31 | |
| *** jgallard has quit IRC | 17:33 | |
| topol | dolphm, does anyone use the keystone policy service? | 17:33 |
| *** ytwu has joined #openstack-dev | 17:33 | |
| dolphm | topol: there's been several things prototyped against it AFAIK, but not really. the idea is to upgrade the oslo policy engine to pull a centralized policy | 17:34 |
| *** eglynn has quit IRC | 17:34 | |
| *** ytwu1 has quit IRC | 17:35 | |
| topol | dolphm, that what I figured. Just wanted to make sure because I didnt cover it much in my meetup deck | 17:35 |
| *** ygbo has quit IRC | 17:35 | |
| mriedem | keystone guys, hyper-v's CI is puking on a stable/havana patch, looks like keystone migrations never ran successfully but i'm not sure how to tell | 17:36 |
| mriedem | http://64.119.130.115/73918/1/devstack_logs/screen-key.log.gz | 17:36 |
| mriedem | anyone know how to tell what's up there? | 17:36 |
| *** evgenyf has quit IRC | 17:37 | |
| *** SumitNaiksatam has quit IRC | 17:37 | |
| *** RajeshMohan has quit IRC | 17:37 | |
| dolphm | mriedem: your guess is certainly reasonable, but keystone-manage db_sync appears in console.log | 17:38 |
| mriedem | yeah, i see 10 hits for that | 17:38 |
| dolphm | mriedem: in a successful run, is there any output after db_sync? | 17:38 |
| *** ociuhandu has joined #openstack-dev | 17:38 | |
| mriedem | i didn't see any obvious fails around the db_sync hits | 17:38 |
| mriedem | there is output after the db_sync calls | 17:38 |
| *** jordanP has quit IRC | 17:39 | |
| *** RajeshMohan has joined #openstack-dev | 17:39 | |
| dolphm | mriedem: there's a bunch of other failures at the end of console.log .. | 17:39 |
| mriedem | dolphm: yeah, because the keystone tables don't exist | 17:39 |
| mriedem | so keystone init just pukes | 17:39 |
| mriedem | like the domain and service tables don't exist | 17:39 |
| *** boris-42_ has joined #openstack-dev | 17:40 | |
| mriedem | ociuhandu: ^ | 17:40 |
| *** iartarisi has quit IRC | 17:40 | |
| *** marun has joined #openstack-dev | 17:41 | |
| *** mikeoutland has quit IRC | 17:41 | |
| *** cdub has quit IRC | 17:41 | |
| *** mikeoutland has joined #openstack-dev | 17:42 | |
| dolphm | mriedem: i don't see anything else in the logs that would hint as to db_sync's failure | 17:42 |
| *** pschaef has quit IRC | 17:42 | |
| ociuhandu | dolphm: hi, it seems that it's running fine the "/opt/stack/keystone/bin/keystone-manage db_sync" but when it tries to create the accounts it just fails | 17:42 |
| dolphm | mriedem: how is this specific to hyper-v? | 17:42 |
| mriedem | it's their 3rd party CI | 17:42 |
| dolphm | ociuhandu: do you know what the state of the database is after db_sync? | 17:42 |
| ociuhandu | dolphm: it's not specific to hyper-v as this is a devstack that runs on KVM | 17:42 |
| *** cdub has joined #openstack-dev | 17:43 | |
| tellesnobrega | vishy: ping | 17:43 |
| ociuhandu | dolphm: we're now trying to manually run this as the VM gets destroyed once the run finishes so all we have are the logs (e.g. http://64.119.130.115/73918/1/) | 17:43 |
| *** akrivoka has quit IRC | 17:44 | |
| dolphm | ociuhandu: there's not much in the logs to work with | 17:44 |
| *** omachace has joined #openstack-dev | 17:44 | |
| *** florentflament has quit IRC | 17:44 | |
| dolphm | ociuhandu: you could also add a --debug or --verbose to the db_sync call | 17:44 |
| ociuhandu | dolphm: going to try this in the manual run asap | 17:45 |
| *** matjazp has joined #openstack-dev | 17:45 | |
| dolphm | ociuhandu: stable/havana should be on migration 36 when it's done, and there should be a default domain in the keystone.domain table | 17:45 |
| *** isd has joined #openstack-dev | 17:47 | |
| *** ndipanov is now known as ndipanov_gone | 17:48 | |
| *** isd has quit IRC | 17:48 | |
| dstanek | dolphm: for password rotation we wanted a separate table instead of reusing credentials right? or am i mis-remembering? | 17:49 |
| *** leseb has quit IRC | 17:49 | |
| dolphm | dstanek: yeah - i don't think we want to go down the road of exposing passwords to the API, or even making it look like we support that | 17:49 |
| *** leseb has joined #openstack-dev | 17:50 | |
| *** colinmcnamara has quit IRC | 17:50 | |
| *** buzztroll has joined #openstack-dev | 17:50 | |
| *** zhiyan is now known as zhiyan_ | 17:50 | |
| *** buzztroll has quit IRC | 17:50 | |
| *** buzztroll has joined #openstack-dev | 17:50 | |
| dstanek | dolphm: right, giving back a list of hashes isn't desirable; OK, i think the blueprint is a bit dated so i'll make some changes there | 17:50 |
| dolphm | dstanek: it is, as it tries to pretend that "access keys" are somehow different from passwords | 17:51 |
| *** cdub has quit IRC | 17:51 | |
| *** jaypipes has joined #openstack-dev | 17:53 | |
| *** sahid has quit IRC | 17:53 | |
| *** devoid has joined #openstack-dev | 17:53 | |
| *** leseb has quit IRC | 17:54 | |
| *** mikeoutland has quit IRC | 17:54 | |
| *** derekh has quit IRC | 17:54 | |
| *** lazy_prince has quit IRC | 17:55 | |
| *** matjazp has quit IRC | 17:55 | |
| *** gszasz has quit IRC | 17:56 | |
| *** MaxV has quit IRC | 17:56 | |
| *** sushils has joined #openstack-dev | 17:56 | |
| *** MaxV has joined #openstack-dev | 17:57 | |
| *** prad_ has joined #openstack-dev | 17:58 | |
| *** SumitNaiksatam has joined #openstack-dev | 17:58 | |
| *** ppetit has quit IRC | 17:58 | |
| *** sandywalsh has quit IRC | 17:58 | |
| *** mlavalle has joined #openstack-dev | 17:59 | |
| *** ppetit has joined #openstack-dev | 17:59 | |
| *** ppetit has quit IRC | 17:59 | |
| *** sushils has quit IRC | 18:01 | |
| *** MaxV has quit IRC | 18:01 | |
| *** dperaza1 has joined #openstack-dev | 18:02 | |
| *** dperaza has quit IRC | 18:02 | |
| *** cagrev has quit IRC | 18:02 | |
| *** luisg has quit IRC | 18:04 | |
| *** luisg has joined #openstack-dev | 18:04 | |
| *** atmb4u has joined #openstack-dev | 18:04 | |
| dolphm | bknudson: addressed your comments in https://review.openstack.org/#/c/69084/ | 18:06 |
| *** danpb has quit IRC | 18:06 | |
| dolphm | bknudson: i'd like to get that going as the next one is the meat of that bp | 18:06 |
| luisbg | is there a way I can run the Jenkins test suite without pushing the commit to gerrit's review system? a dev test suite run before I am ready to push the commit for review | 18:08 |
| *** luisg has quit IRC | 18:08 | |
| *** jp_at_hp has quit IRC | 18:08 | |
| *** alagalah has quit IRC | 18:08 | |
| *** alagalah has joined #openstack-dev | 18:09 | |
| *** luisg has joined #openstack-dev | 18:10 | |
| *** sandywalsh has joined #openstack-dev | 18:11 | |
| *** isd has joined #openstack-dev | 18:12 | |
| *** athomas has quit IRC | 18:12 | |
| *** vartom1111111115 has joined #openstack-dev | 18:13 | |
| *** isd has quit IRC | 18:14 | |
| *** _cjones_ has quit IRC | 18:16 | |
| *** _cjones_ has joined #openstack-dev | 18:16 | |
| *** alagalah has quit IRC | 18:17 | |
| *** sarob has joined #openstack-dev | 18:17 | |
| *** alagalah has joined #openstack-dev | 18:17 | |
| *** caleb_ has quit IRC | 18:18 | |
| *** isd has joined #openstack-dev | 18:18 | |
| *** tdruiva has quit IRC | 18:19 | |
| *** tdruiva has joined #openstack-dev | 18:19 | |
| *** byeager has quit IRC | 18:20 | |
| *** galstrom is now known as galstrom_zzz | 18:20 | |
| *** byeager has joined #openstack-dev | 18:21 | |
| *** sarob has quit IRC | 18:22 | |
| *** byeager has quit IRC | 18:22 | |
| *** gongysh has joined #openstack-dev | 18:23 | |
| *** SumitNaiksatam has quit IRC | 18:24 | |
| *** ytwu1 has joined #openstack-dev | 18:25 | |
| *** colinmcnamara has joined #openstack-dev | 18:27 | |
| *** ytwu2 has joined #openstack-dev | 18:27 | |
| *** ytwu has quit IRC | 18:27 | |
| *** mikeoutland has joined #openstack-dev | 18:28 | |
| bknudson | dolphm: https://review.openstack.org/#/c/69084/ looks good to me. | 18:28 |
| dolphm | bknudson: thanks! | 18:28 |
| *** gongysh has quit IRC | 18:29 | |
| *** ytwu1 has quit IRC | 18:30 | |
| *** stevemar has joined #openstack-dev | 18:30 | |
| *** alagalah has quit IRC | 18:31 | |
| *** alagalah has joined #openstack-dev | 18:31 | |
| *** sarob has joined #openstack-dev | 18:31 | |
| *** lucasagomes is now known as lucas-afk | 18:32 | |
| *** markmcclain has joined #openstack-dev | 18:33 | |
| *** markmcclain has quit IRC | 18:33 | |
| *** lbragstad has quit IRC | 18:33 | |
| *** carl_baldwin has joined #openstack-dev | 18:33 | |
| *** lbragstad has joined #openstack-dev | 18:35 | |
| samuelqueiroz | stevemar, ping | 18:36 |
| *** nacim has joined #openstack-dev | 18:38 | |
| *** markmcclain has joined #openstack-dev | 18:40 | |
| *** jeckersb_gone is now known as jeckersb | 18:40 | |
| *** dhellmann is now known as dhellmann_ | 18:40 | |
| *** sarob has quit IRC | 18:41 | |
| *** sarob has joined #openstack-dev | 18:42 | |
| stevemar | samuelqueiroz, pong | 18:42 |
| stevemar | marekd, ping | 18:42 |
| *** morganfainberg_Z is now known as morganfainberg | 18:42 | |
| samuelqueiroz | stevemar, I'm sorry for didnt get back last week | 18:43 |
| *** byeager has joined #openstack-dev | 18:43 | |
| samuelqueiroz | stevemar, do you remember my question? do u have news? | 18:43 |
| *** comay has joined #openstack-dev | 18:43 | |
| stevemar | samuelqueiroz, no problem, i was going to ask if you're using v3 policy json? | 18:44 |
| stevemar | samuelqueiroz, it offers a bit more details | 18:44 |
| *** luis_ has joined #openstack-dev | 18:44 | |
| samuelqueiroz | stevemar, yes, I am | 18:44 |
| *** vkozhukalov has joined #openstack-dev | 18:44 | |
| stevemar | samuelqueiroz, i think you can get the domain using project.domain .. ? | 18:44 |
| stevemar | samuelqueiroz, the trusts do a similar format to get user id | 18:44 |
| *** jruzicka has quit IRC | 18:45 | |
| *** luisg has quit IRC | 18:45 | |
| *** lcheng has joined #openstack-dev | 18:45 | |
| *** sushils has joined #openstack-dev | 18:46 | |
| samuelqueiroz | stevemar, when using domain scoped token I just do domain_id:%(domain_id)s and it works | 18:46 |
| samuelqueiroz | stevemar, with a project scoped token I shoudl do something like domain_id:%(project.domain_id)s right? | 18:46 |
| samuelqueiroz | stevemar, but it doesnt work | 18:46 |
| *** sarob has quit IRC | 18:46 | |
| morganfainberg | dolphm, any reason https://review.openstack.org/#/c/69084/ shouldn't be +A? | 18:47 |
| vishy | tellesnobrega: pong | 18:47 |
| samuelqueiroz | stevemar, I've talking to dolphm and he said me it isnt possible | 18:47 |
| dolphm | morganfainberg: just waiting on jenkins | 18:47 |
| *** Mandell has joined #openstack-dev | 18:47 | |
| stevemar | samuelqueiroz, ahh, i think the fix is to supply the data to in the token then | 18:47 |
| dolphm | morganfainberg: it's got a minute left | 18:48 |
| morganfainberg | dolphm, AHA! | 18:48 |
| morganfainberg | dolphm, see i knew there was a reason ;) | 18:48 |
| stevemar | samuelqueiroz, when we issue a project scoped token, also include the domain_id | 18:48 |
| tellesnobrega | vishy: i already have a "working" hierarchical projects version in keystone, i mean to send the code i the ML today, i'm just making some changes, and will start working on integration with your code maybe tomorrow, | 18:48 |
| marekd | marekd: pong | 18:49 |
| samuelqueiroz | stevemar, wait... so it isnt possible now right? | 18:50 |
| *** carl_baldwin has quit IRC | 18:51 | |
| stevemar | samuelqueiroz, correct :\ | 18:51 |
| *** sarob has joined #openstack-dev | 18:51 | |
| marekd | stevemar: pong. | 18:51 |
| stevemar | samuelqueiroz, unless there is a way to patch things | 18:51 |
| stevemar | marekd, hey! | 18:52 |
| stevemar | marekd, any luck with getting henrys stuff to work? | 18:52 |
| * morganfainberg pokes stevemar, dstanek, https://review.openstack.org/#/c/73698/ jamielennox|away | 18:52 | |
| samuelqueiroz | stevemar, wow :/ So like this I can't give a project member the right to get_domain of his domain | 18:52 |
| marekd | stevemar: i think so. | 18:52 |
| samuelqueiroz | stevemar, like this he could see the description, for example | 18:52 |
| marekd | stevemar: one test is failing, am looking at it now. | 18:53 |
| samuelqueiroz | stevemar, it requires the same verification up there | 18:53 |
| *** mlavalle has quit IRC | 18:53 | |
| morganfainberg | should be pretty easy and i would like to see auto-gen samples for Icehouse - way more descriptive than our current config sample. | 18:53 |
| *** mlavalle has joined #openstack-dev | 18:53 | |
| stevemar | samuelqueiroz, submit a bug report please, i hope there is a workaround | 18:54 |
| *** dave_tucker_zzz is now known as dave_tucker | 18:54 | |
| samuelqueiroz | stevemar, Ok thanks :) | 18:54 |
| *** ytwu2 has quit IRC | 18:54 | |
| morganfainberg | dolphm, i'm unwinding the ephemeral token stuff, but there is a lot of cleanup i've run across to make sure we can use the PKI data | 18:54 |
| morganfainberg | dolphm, it is moving forward. but it also depends on ayoung's code (not mergable but deep in the chain) | 18:55 |
| *** ytwu has joined #openstack-dev | 18:55 | |
| *** lcheng has quit IRC | 18:57 | |
| *** sarob has quit IRC | 18:57 | |
| *** e0ne has joined #openstack-dev | 18:57 | |
| *** giulivo has quit IRC | 18:57 | |
| *** colinmcnamara has quit IRC | 18:58 | |
| *** lucas-afk is now known as lucasagomes | 18:58 | |
| *** haomaiw__ has quit IRC | 18:58 | |
| *** colinmcnamara has joined #openstack-dev | 18:59 | |
| *** haomaiwang has joined #openstack-dev | 18:59 | |
| dolphm | morganfainberg: lots of legit failures in that jenkins run | 19:00 |
| *** dave_tucker is now known as dave_tucker_zzz | 19:00 | |
| *** otherwiseguy has quit IRC | 19:03 | |
| *** jprovazn has joined #openstack-dev | 19:04 | |
| *** colinmcnamara has quit IRC | 19:05 | |
| *** dolphm has left #openstack-dev | 19:06 | |
| *** sambagirl has quit IRC | 19:07 | |
| *** lcheng has joined #openstack-dev | 19:07 | |
| *** gokrokve has quit IRC | 19:07 | |
| *** gokrokve has joined #openstack-dev | 19:08 | |
| *** e0ne has quit IRC | 19:09 | |
| *** nacim has quit IRC | 19:09 | |
| *** e0ne has joined #openstack-dev | 19:09 | |
| *** caleb_ has joined #openstack-dev | 19:10 | |
| *** gokrokve has quit IRC | 19:12 | |
| *** gokrokve has joined #openstack-dev | 19:13 | |
| *** e0ne has quit IRC | 19:14 | |
| *** jcooley_ has joined #openstack-dev | 19:15 | |
| dstanek | morganfainberg: hi | 19:15 |
| morganfainberg | dstanek, allo | 19:16 |
| *** Gordonz_ has joined #openstack-dev | 19:17 | |
| *** gokrokve has quit IRC | 19:17 | |
| dstanek | morganfainberg: looking at your review now; what's the change from '' to None is FILE_OPTIONS for? | 19:18 |
| *** vkmc has quit IRC | 19:18 | |
| morganfainberg | None is (if you look at register_opt/opts) more correct than '' | 19:18 |
| morganfainberg | None is the "default" for no gorup | 19:18 |
| morganfainberg | vs '' which, while boolean false, not the same as the default | 19:19 |
| morganfainberg | dstanek, if that makes sense. | 19:19 |
| dstanek | morganfainberg: yep, i just didn't see the tie in | 19:20 |
| *** Gordonz__ has joined #openstack-dev | 19:20 | |
| morganfainberg | :) | 19:20 |
| *** mrodden has quit IRC | 19:20 | |
| *** lcheng has quit IRC | 19:20 | |
| morganfainberg | list_opts explains it in the docstring | 19:20 |
| morganfainberg | actually, but sure it wasn't called explicitly out | 19:20 |
| *** Gordonz has quit IRC | 19:20 | |
| topol | morganfainberg, did you get a chance to look at the meetup deck? | 19:21 |
| morganfainberg | topol, not yet | 19:21 |
| morganfainberg | topol, didn't look at much after kicked out of the coffee shop | 19:22 |
| vishy | tellesnobrega: sounds good | 19:22 |
| *** e0ne has joined #openstack-dev | 19:23 | |
| *** mrodden has joined #openstack-dev | 19:24 | |
| *** Gordonz_ has quit IRC | 19:24 | |
| *** Gordonz__ has quit IRC | 19:24 | |
| *** mjbot has quit IRC | 19:25 | |
| *** zaitcev has joined #openstack-dev | 19:26 | |
| dstanek | morganfainberg: i found the documentation a little confusing. seems like you are going to create a separate patch for that docstring? | 19:28 |
| morganfainberg | https://review.openstack.org/#/c/73898/ | 19:29 |
| *** caleb_ has quit IRC | 19:30 | |
| *** amcrn has joined #openstack-dev | 19:30 | |
| dstanek | morganfainberg: nice, i have addition comments on that docstring | 19:31 |
| dstanek | morganfainberg: i see no reason not to approve this one then | 19:31 |
| morganfainberg | dstanek, cool. | 19:31 |
| morganfainberg | dstanek, the next one in the chain should also be easy to approve | 19:31 |
| morganfainberg | just minor KDS option restructuring | 19:31 |
| morganfainberg | dstanek, i figure it's easier to get the docstring 100% in the separate review (since the review is up) since the docstrings don't affect code execution. | 19:34 |
| *** Gordonz has joined #openstack-dev | 19:34 | |
| *** Gordonz has quit IRC | 19:34 | |
| *** Gordonz has joined #openstack-dev | 19:35 | |
| dstanek | morganfainberg: is the generated config not supposed to have all of the sections like [sql]? | 19:36 |
| morganfainberg | dstanek, https://review.openstack.org/#/c/72808/ | 19:36 |
| morganfainberg | dstanek, that one? i don't generate the config until futher in the chain | 19:37 |
| morganfainberg | i don't think the sample config will show the deprecated groups (that we do magic registration to get) | 19:37 |
| *** vartom1111111115 has quit IRC | 19:37 | |
| morganfainberg | dstanek, but look https://review.openstack.org/#/c/72808/8/etc/keystone.conf.sample line 603 (new) | 19:38 |
| morganfainberg | it shows the deprecated group/name | 19:38 |
| *** gokrokve has joined #openstack-dev | 19:38 | |
| dstanek | morganfainberg: nm, i was reading it wrong - it's a huge diff | 19:39 |
| morganfainberg | dstanek, yeah, that one is large. | 19:40 |
| dstanek | morganfainberg: i was trying out the generate script before i +2ed the review | 19:40 |
| morganfainberg | dstanek, ahh yeah. | 19:40 |
| dstanek | morganfainberg: that's why it takes me so long to review things :-) i like to download and run the code | 19:41 |
| morganfainberg | dstanek, it does have one very odd requirement to generate the sample. if your git checkout directory isn't named "keystone" it breaks. | 19:41 |
| morganfainberg | dstanek, but i think that is a limiation on the oslo script(s) | 19:41 |
| morganfainberg | afaict | 19:41 |
| *** anniec has joined #openstack-dev | 19:41 | |
| *** gokrokve_ has joined #openstack-dev | 19:42 | |
| *** armax has joined #openstack-dev | 19:42 | |
| dstanek | morganfainberg: breaks in what way? i ran it in my review working copy (/opt/stack/keystone-reviews) and i didn't get an error | 19:42 |
| morganfainberg | dstanek, oh maybe i fixed that | 19:42 |
| morganfainberg | dstanek, it just failed a couple times. | 19:42 |
| morganfainberg | dstanek, said something like "pacakge keystone not available" might have been an issue w/ venv | 19:43 |
| *** devlaps1 has joined #openstack-dev | 19:43 | |
| dstanek | morganfainberg: ah, well I did run it with '-p keystone' | 19:43 |
| morganfainberg | aha | 19:43 |
| morganfainberg | yeah | 19:43 |
| *** gokrokv__ has joined #openstack-dev | 19:43 | |
| *** zzelle has joined #openstack-dev | 19:43 | |
| *** gokrokve has quit IRC | 19:44 | |
| *** otherwiseguy has joined #openstack-dev | 19:44 | |
| *** devlaps has quit IRC | 19:44 | |
| *** byeager_ has joined #openstack-dev | 19:45 | |
| *** byeager has quit IRC | 19:45 | |
| *** byeager has joined #openstack-dev | 19:46 | |
| *** byeager_ has quit IRC | 19:46 | |
| *** gokrokve_ has quit IRC | 19:47 | |
| *** byeager has quit IRC | 19:47 | |
| *** e0ne has quit IRC | 19:47 | |
| *** e0ne has joined #openstack-dev | 19:47 | |
| *** gokrokv__ has quit IRC | 19:48 | |
| *** martines_ has quit IRC | 19:49 | |
| *** jcoufal has joined #openstack-dev | 19:51 | |
| *** byeager has joined #openstack-dev | 19:52 | |
| *** byeager has quit IRC | 19:53 | |
| *** sarob has joined #openstack-dev | 19:54 | |
| *** aspiers has joined #openstack-dev | 19:55 | |
| *** alagalah has quit IRC | 19:57 | |
| *** sarob_ has joined #openstack-dev | 19:57 | |
| *** alagalah has joined #openstack-dev | 19:57 | |
| *** gokrokve has joined #openstack-dev | 19:58 | |
| *** sarob has quit IRC | 19:59 | |
| *** kgriffs is now known as kgriffs_afk | 19:59 | |
| *** sarob has joined #openstack-dev | 20:01 | |
| *** MaxV has joined #openstack-dev | 20:01 | |
| *** bdpayne_ has joined #openstack-dev | 20:01 | |
| *** sarob_ has quit IRC | 20:01 | |
| stevemar | bknudson, easy +A https://review.openstack.org/#/c/59179/ | 20:02 |
| *** alagalah has quit IRC | 20:02 | |
| stevemar | i think so, anyway :) | 20:02 |
| *** bdpayne has quit IRC | 20:02 | |
| *** lucasagomes is now known as lucas-afk | 20:02 | |
| *** kgriffs_afk is now known as kgriffs | 20:04 | |
| *** sarob has quit IRC | 20:04 | |
| *** markwash has joined #openstack-dev | 20:05 | |
| *** dave_tucker_zzz is now known as dave_tucker | 20:06 | |
| *** gcha has joined #openstack-dev | 20:10 | |
| *** ytwu1 has joined #openstack-dev | 20:10 | |
| *** ytwu has quit IRC | 20:13 | |
| *** ytwu has joined #openstack-dev | 20:14 | |
| *** ytwu1 has quit IRC | 20:17 | |
| *** novas0x2a|laptop has joined #openstack-dev | 20:17 | |
| *** caleb_ has joined #openstack-dev | 20:18 | |
| *** carl_baldwin has joined #openstack-dev | 20:18 | |
| *** carl_baldwin has quit IRC | 20:19 | |
| *** skraynev is now known as skraynev_afk | 20:19 | |
| *** dave_tucker is now known as dave_tucker_zzz | 20:20 | |
| *** irenab has joined #openstack-dev | 20:23 | |
| *** mdurnosvistov_ has quit IRC | 20:23 | |
| *** sushils has quit IRC | 20:23 | |
| *** dvarga is now known as dvarga|away | 20:25 | |
| *** jcooley_ has quit IRC | 20:25 | |
| *** bdpayne_ has quit IRC | 20:26 | |
| *** sushils has joined #openstack-dev | 20:26 | |
| *** e0ne has quit IRC | 20:28 | |
| *** ytwu1 has joined #openstack-dev | 20:28 | |
| *** e0ne has joined #openstack-dev | 20:29 | |
| *** yeylon__ has joined #openstack-dev | 20:29 | |
| *** henrique has quit IRC | 20:30 | |
| *** dstanek has quit IRC | 20:30 | |
| *** bdpayne has joined #openstack-dev | 20:30 | |
| *** ytwu has quit IRC | 20:30 | |
| *** johnthetubaguy has quit IRC | 20:33 | |
| *** e0ne has quit IRC | 20:33 | |
| *** omachace has left #openstack-dev | 20:34 | |
| *** ytwu has joined #openstack-dev | 20:36 | |
| *** markmc has quit IRC | 20:36 | |
| *** dvarga|away is now known as dvarga | 20:38 | |
| *** ytwu1 has quit IRC | 20:40 | |
| *** ytwu1 has joined #openstack-dev | 20:42 | |
| *** ytwu has quit IRC | 20:42 | |
| *** jecarey has quit IRC | 20:43 | |
| *** ifarkas has quit IRC | 20:44 | |
| *** jecarey has joined #openstack-dev | 20:44 | |
| morganfainberg | stevemar, isn't stats deprecateD? | 20:46 |
| morganfainberg | maybe i am/was misremembering | 20:47 |
| stevemar | yeah, but it's just cleanup | 20:47 |
| morganfainberg | ah | 20:47 |
| *** irenab has quit IRC | 20:47 | |
| stevemar | morganfainberg, it'll still hang around for another release or two, i forget when we remove it | 20:47 |
| *** MaxV has quit IRC | 20:47 | |
| morganfainberg | K | 20:47 |
| *** jcoufal has quit IRC | 20:48 | |
| *** jcoufal has joined #openstack-dev | 20:48 | |
| *** dstanek has joined #openstack-dev | 20:49 | |
| *** jecarey has quit IRC | 20:49 | |
| *** sweston has joined #openstack-dev | 20:50 | |
| *** jecarey has joined #openstack-dev | 20:52 | |
| *** gongysh has joined #openstack-dev | 20:52 | |
| *** marekd is now known as marekd|away | 20:53 | |
| *** gordc has quit IRC | 20:53 | |
| *** DinaBelova is now known as DinaBelova_ | 20:54 | |
| *** MaxV has joined #openstack-dev | 20:54 | |
| *** ytwu has joined #openstack-dev | 20:55 | |
| *** ytwu2 has joined #openstack-dev | 20:57 | |
| *** ytwu1 has quit IRC | 20:57 | |
| *** sarob has joined #openstack-dev | 20:57 | |
| *** raildo has quit IRC | 20:57 | |
| *** kris_h has joined #openstack-dev | 20:57 | |
| *** gordc has joined #openstack-dev | 20:59 | |
| *** bdpayne_ has joined #openstack-dev | 20:59 | |
| tellesnobrega | morganfainberg: just a question about keystone assigment backend, when creating a new method, does it need to be implemented in all backends? | 21:00 |
| morganfainberg | tellesnobrega, ideally yes. | 21:00 |
| *** ytwu has quit IRC | 21:00 | |
| stevemar | tellesnobrega, ideally, but start with SQL | 21:00 |
| *** emagana has joined #openstack-dev | 21:00 | |
| *** amotoki has joined #openstack-dev | 21:00 | |
| *** isd has left #openstack-dev | 21:00 | |
| stevemar | "ideally" being the key word :) | 21:00 |
| morganfainberg | tellesnobrega, you should be adding it to the abstract base class, decorate it with @abc.abstractmethod | 21:00 |
| tellesnobrega | morganfainberg: im, but im not sure what im doing wrong. its not start the keystone | 21:01 |
| morganfainberg | tellesnobrega, then implement in the backend you're developing, then the other(s) | 21:01 |
| tellesnobrega | morganfainberg: i have to go now, i will get back to you tomorrow to get some help | 21:01 |
| morganfainberg | tellesnobrega, sure. | 21:01 |
| tellesnobrega | morganfainberg: thanks | 21:01 |
| *** bdpayne has quit IRC | 21:01 | |
| *** SumitNaiksatam has joined #openstack-dev | 21:01 | |
| *** jobewan has joined #openstack-dev | 21:02 | |
| *** protux has joined #openstack-dev | 21:02 | |
| *** sarob has quit IRC | 21:02 | |
| *** ytwu has joined #openstack-dev | 21:04 | |
| *** asalkeld has quit IRC | 21:04 | |
| *** jecarey_ has joined #openstack-dev | 21:06 | |
| dstanek | morganfainberg: is there a way to tell if an extension is loaded? i could probably do Python hackery to see if my objects where created, but i'd rather not | 21:06 |
| morganfainberg | dstanek, uhm........ | 21:06 |
| morganfainberg | dstanek, >.> dunno | 21:06 |
| morganfainberg | python hackery | 21:06 |
| morganfainberg | i think would be my solution >.< | 21:06 |
| *** ytwu2 has quit IRC | 21:06 | |
| *** jecarey has quit IRC | 21:08 | |
| *** troytoman-away is now known as troytoman | 21:08 | |
| *** jeckersb is now known as jeckersb_gone | 21:09 | |
| *** ytwu1 has joined #openstack-dev | 21:09 | |
| *** byeager has joined #openstack-dev | 21:11 | |
| *** ytwu has quit IRC | 21:11 | |
| lifeless | primeministerp: hey! | 21:12 |
| lifeless | primeministerp: we're just talking about https://review.openstack.org/#/c/73054/4/ironic/drivers/modules/pxe_config_disk.template in the ironic channel | 21:12 |
| *** ianw has quit IRC | 21:14 | |
| *** henrynash has joined #openstack-dev | 21:14 | |
| *** ianw has joined #openstack-dev | 21:15 | |
| luisbg | is Jenkins acting strangely? | 21:18 |
| luisbg | https://jenkins.openstack.org/view/Overview/builds | 21:18 |
| luisbg | "no builds in the queue" | 21:18 |
| *** jamespage_ has joined #openstack-dev | 21:18 | |
| *** jtomasek has quit IRC | 21:18 | |
| *** gcha has quit IRC | 21:20 | |
| *** ytwu has joined #openstack-dev | 21:20 | |
| *** mdurnosvistov_lt has joined #openstack-dev | 21:20 | |
| *** denis_makogon_ has joined #openstack-dev | 21:21 | |
| *** afazekas has joined #openstack-dev | 21:21 | |
| *** byeager has joined #openstack-dev | 21:21 | |
| *** dolphm has joined #openstack-dev | 21:22 | |
| *** ytwu1 has quit IRC | 21:22 | |
| *** Gordonz has quit IRC | 21:24 | |
| *** ytwu1 has joined #openstack-dev | 21:25 | |
| *** salv-orlando has quit IRC | 21:25 | |
| *** salv-orlando has joined #openstack-dev | 21:25 | |
| *** pmathews has joined #openstack-dev | 21:25 | |
| *** ytwu has quit IRC | 21:27 | |
| *** dvarga has quit IRC | 21:29 | |
| *** ytwu has joined #openstack-dev | 21:29 | |
| *** byeager has quit IRC | 21:30 | |
| *** derekh has joined #openstack-dev | 21:31 | |
| *** ytwu2 has joined #openstack-dev | 21:31 | |
| *** aspiers has quit IRC | 21:32 | |
| *** ytwu1 has quit IRC | 21:32 | |
| *** koolhead17 has quit IRC | 21:33 | |
| *** koolhead17 has joined #openstack-dev | 21:33 | |
| *** ytwu has quit IRC | 21:34 | |
| *** lucas-afk has left #openstack-dev | 21:38 | |
| *** e0ne has joined #openstack-dev | 21:39 | |
| *** promulo has quit IRC | 21:40 | |
| *** jamespage_ has quit IRC | 21:40 | |
| *** dims has joined #openstack-dev | 21:41 | |
| *** jasdeepH has joined #openstack-dev | 21:42 | |
| *** cnesa has quit IRC | 21:43 | |
| *** vladikr has quit IRC | 21:43 | |
| *** coolsvap has quit IRC | 21:44 | |
| *** e0ne has quit IRC | 21:44 | |
| *** asalkeld has joined #openstack-dev | 21:47 | |
| *** ociuhandu has quit IRC | 21:47 | |
| *** ytwu has joined #openstack-dev | 21:49 | |
| *** cnesa has joined #openstack-dev | 21:50 | |
| *** ytwu1 has joined #openstack-dev | 21:51 | |
| *** MaxV has quit IRC | 21:51 | |
| *** ytwu2 has quit IRC | 21:52 | |
| *** vkozhukalov has quit IRC | 21:53 | |
| *** alagalah has joined #openstack-dev | 21:53 | |
| *** ytwu has quit IRC | 21:54 | |
| *** MaxV has joined #openstack-dev | 21:54 | |
| *** jdob has quit IRC | 21:54 | |
| *** mdurnosvistov_lt has quit IRC | 21:54 | |
| *** jprovazn has quit IRC | 21:55 | |
| *** mdurnosvistov_lt has joined #openstack-dev | 21:55 | |
| *** lcheng has joined #openstack-dev | 21:58 | |
| *** sarob has joined #openstack-dev | 21:58 | |
| *** mrodden has quit IRC | 21:59 | |
| *** carlp has quit IRC | 21:59 | |
| *** alagalah has quit IRC | 22:00 | |
| *** mrodden has joined #openstack-dev | 22:00 | |
| *** spzala has joined #openstack-dev | 22:02 | |
| *** alagalah has joined #openstack-dev | 22:02 | |
| *** ytwu has joined #openstack-dev | 22:02 | |
| *** sarob has quit IRC | 22:04 | |
| *** ytwu1 has quit IRC | 22:05 | |
| *** gongysh has quit IRC | 22:06 | |
| *** dhellmann_ is now known as dhellmann | 22:07 | |
| *** sandywalsh has quit IRC | 22:08 | |
| *** sarob has joined #openstack-dev | 22:08 | |
| *** armax has left #openstack-dev | 22:10 | |
| *** rfolco has quit IRC | 22:11 | |
| *** jecarey_ has quit IRC | 22:11 | |
| *** byeager has joined #openstack-dev | 22:12 | |
| *** jeckersb_gone is now known as jeckersb | 22:12 | |
| *** denis_makogon_ has quit IRC | 22:12 | |
| *** jcoufal has quit IRC | 22:12 | |
| *** sarob has quit IRC | 22:12 | |
| *** promulo has joined #openstack-dev | 22:13 | |
| *** lcheng has quit IRC | 22:14 | |
| *** ytwu1 has joined #openstack-dev | 22:15 | |
| *** dstanek has quit IRC | 22:15 | |
| *** leseb has joined #openstack-dev | 22:15 | |
| *** markmcclain has quit IRC | 22:16 | |
| *** ytwu has quit IRC | 22:17 | |
| lbragstad | dolphm: https://review.openstack.org/#/c/55908/46/keystone/common/config.py here are you asking what the config option revoke_by_id does? | 22:19 |
| *** ytwu has joined #openstack-dev | 22:19 | |
| *** topol has quit IRC | 22:20 | |
| *** Ursinha is now known as Ursinha-afk | 22:20 | |
| *** ytwu1 has quit IRC | 22:22 | |
| *** Ursinha-afk is now known as Ursinha | 22:22 | |
| *** dstanek has joined #openstack-dev | 22:23 | |
| morganfainberg | dolphm, are we holding on revocation events for I then? | 22:24 |
| morganfainberg | dolphm, (saw the -2) | 22:24 |
| morganfainberg | dolphm, if so, i'm going to hold on the ephemeral tokens work | 22:25 |
| *** kgriffs is now known as kgriffs_afk | 22:25 | |
| *** rtheis has quit IRC | 22:26 | |
| shardy | dtroyer: Hey, wanted to find out if we'll be in a position to merge https://review.openstack.org/#/c/73324/ anytime soon? | 22:28 |
| *** jpomero has quit IRC | 22:28 | |
| shardy | There's a big queue of heat patches waiting on it :) | 22:29 |
| *** leseb has quit IRC | 22:31 | |
| dtroyer | shardy: yeah, I've been a little conservative after the gate in openstackclient finally went in... | 22:31 |
| *** jhesketh__ has joined #openstack-dev | 22:31 | |
| dtroyer | I did the other patch for devstack using OSC yesterday so I think we're good here | 22:31 |
| *** leseb has joined #openstack-dev | 22:31 | |
| shardy | dtroyer: Ok, sounds good, if we can get it in I'd appreciate it :) | 22:33 |
| *** protux has quit IRC | 22:33 | |
| *** protux has joined #openstack-dev | 22:34 | |
| *** dprince has quit IRC | 22:35 | |
| *** jnoller has quit IRC | 22:36 | |
| *** nkinder has quit IRC | 22:37 | |
| *** vipuls is now known as vipul | 22:38 | |
| *** EntropyWorks has quit IRC | 22:38 | |
| *** mriedem has quit IRC | 22:38 | |
| *** tsekiyam_ has joined #openstack-dev | 22:39 | |
| *** dkranz has quit IRC | 22:39 | |
| *** vijendar has quit IRC | 22:40 | |
| *** EntropyWorks has joined #openstack-dev | 22:41 | |
| *** tsekiyam_ has quit IRC | 22:41 | |
| *** tsekiyama has quit IRC | 22:42 | |
| dolphm | morganfainberg: i stopped reviewing the revocation stuff when i noticed it wasn't following the proposed API -- i'm not say no to icehouse | 22:44 |
| dolphm | not saying* | 22:44 |
| morganfainberg | dolphm, ok. | 22:44 |
| dolphm | morganfainberg: it's got a new API method and appears to put 'id' attributes on all the events | 22:44 |
| dolphm | and there's no tests to speak of | 22:45 |
| morganfainberg | dolphm, well i'll circle back and see about rebasing some of the ephemeral toekn work on master (the general cleanup stuff and the decode PKI tokens) if it looks like it isn't moving forward | 22:45 |
| *** dstanek has quit IRC | 22:45 | |
| morganfainberg | dolphm, i just wont implement the ephemeral bits until the revocation stuff goes in (the cleanup will be good in either case) | 22:45 |
| *** jamielennox|away is now known as jamielennox | 22:45 | |
| dolphm | morganfainberg: regarding bug 1260080 -- shouldn't that be marked as fix implemented? | 22:45 |
| morganfainberg | dolphm, but for now i'm going to keep chasing config-gen stuff and dogpile kvs | 22:45 |
| dolphm | morganfainberg: remember, tomorrow is the last day to get features into review though | 22:46 |
| morganfainberg | dolphm, hmmm. | 22:46 |
| morganfainberg | dolphm, yeah i'm making sure the BPs that have code ready and are mostly there are in review :) | 22:46 |
| morganfainberg | dolphm, / not -1'd | 22:46 |
| morganfainberg | dolphm, uhm the revocations stuff will be solved in master by https://review.openstack.org/#/c/60743/ i need to add closes bug | 22:47 |
| morganfainberg | dolphm, and i talked to TTX about that saying the stabler things would be worked on post FPF since 18th was short deadline | 22:47 |
| dolphm | morganfainberg: ++ | 22:48 |
| morganfainberg | dolphm, i'll expect the ephemeral code and things will be Juno, but they can live WIP until we open for J-1 | 22:48 |
| *** mdurnosvistov_lt has quit IRC | 22:49 | |
| *** derekh has quit IRC | 22:49 | |
| dolphm | morganfainberg: alrighty | 22:50 |
| *** galstrom_zzz is now known as galstrom | 22:50 | |
| lifeless | anteaya: did you look at the python-neutronclient thing? | 22:50 |
| anteaya | just responded in -infra to say I have emailed markmcclain | 22:51 |
| anteaya | he is offline again due to the US holiday, President's day | 22:51 |
| dolphm | morganfainberg: bumped it to 'next' for now | 22:51 |
| morganfainberg | dolphm, ++ thanks | 22:51 |
| dolphm | we have a US holiday? | 22:51 |
| morganfainberg | dolphm, president's day or so i hear | 22:51 |
| anteaya | lifeless and he is working on a new release for neutronclient, it just has to be tagged | 22:52 |
| *** ytwu1 has joined #openstack-dev | 22:52 | |
| *** eharney has quit IRC | 22:52 | |
| anteaya | I emailed him to explain again with links how important this is for tripleo that a new neutronclient be released | 22:52 |
| lifeless | tripleo + everyone shipping stable versions :) | 22:52 |
| lifeless | this commit 'Fix passing keystone token to neutronclient instance' was backported from trunk to the stable releases | 22:53 |
| lifeless | same breakage | 22:53 |
| *** dbalog has left #openstack-dev | 22:53 | |
| *** ytwu has quit IRC | 22:53 | |
| morganfainberg | bknudson, ping | 22:54 |
| bknudson | morganfainberg: what's up? | 22:54 |
| morganfainberg | so, magic mock doesn't seem to apply | 22:55 |
| *** kbringard has quit IRC | 22:55 | |
| *** johnthetubaguy has joined #openstack-dev | 22:55 | |
| morganfainberg | bknudson, it looks like that is only used for the magic __<thing>__ methods | 22:55 |
| morganfainberg | bknudson, or am i mis-reading what your intention was | 22:55 |
| *** dave_tucker_zzz is now known as dave_tucker | 22:55 | |
| bknudson | morganfainberg: http://www.voidspace.org.uk/python/mock/magicmock.html#mock.MagicMock | 22:56 |
| bknudson | morganfainberg: essentially it's just recording the calls to the function | 22:56 |
| morganfainberg | right, does it do that for _all_ methods? | 22:56 |
| morganfainberg | bknudson, it looks like it only does it for the magic methdos | 22:56 |
| morganfainberg | i might not be reading the documentation correctly | 22:57 |
| *** johnthetubaguy has quit IRC | 22:57 | |
| bknudson | morganfainberg: ahh, well it also includes all the Mock stuff too | 22:57 |
| * dolphm stevemar is AWESOME https://review.openstack.org/#/c/69107/ | 22:57 | |
| *** RajeshMohan has quit IRC | 22:58 | |
| morganfainberg | bknudson, it doesn't seem to catch all methods (simple test) | 22:58 |
| bknudson | morganfainberg: you can use a Mock as the function and it records that it was called. | 22:59 |
| morganfainberg | hm | 22:59 |
| *** RajeshMohan has joined #openstack-dev | 22:59 | |
| *** jhesketh__ has quit IRC | 23:00 | |
| stevemar | dolphm, yay :) | 23:00 |
| morganfainberg | bknudson, ah ok i think i'm seeing it | 23:00 |
| morganfainberg | let me see what i can do with that | 23:00 |
| stevemar | dolphm, now we just need to get devstack to default to v3 .. (or get version discovery going...) and we're gold | 23:01 |
| dolphm | stevemar: ++ | 23:01 |
| *** sarob has joined #openstack-dev | 23:01 | |
| dolphm | stevemar: there's been a lot of bug reports and confusion and whatnot over that the last few weeks | 23:01 |
| bknudson | morganfainberg: http://www.voidspace.org.uk/python/mock/mock.html#calling -- the examples use MagicMock for some reason | 23:01 |
| morganfainberg | yeah | 23:01 |
| morganfainberg | i see it | 23:01 |
| *** relaxdiego has quit IRC | 23:02 | |
| dolphm | stevemar: around how to use v3 in devstack | 23:02 |
| stevemar | dolphm, oh yeah? | 23:02 |
| *** jhesketh__ has joined #openstack-dev | 23:02 | |
| stevemar | sauce? | 23:02 |
| *** bdpayne_ has quit IRC | 23:02 | |
| *** thomasem has quit IRC | 23:03 | |
| *** alagalah_ has joined #openstack-dev | 23:04 | |
| *** nkinder has joined #openstack-dev | 23:05 | |
| lifeless | anteaya: are you able to add a task to https://bugs.launchpad.net/neutron/+bug/1280941 for neutron's havana branch ? | 23:05 |
| *** sarob has quit IRC | 23:05 | |
| lifeless | anteaya: which is also broken | 23:06 |
| *** prad_ has quit IRC | 23:07 | |
| anteaya | I don't think I have ever added a task before | 23:07 |
| *** alagalah has quit IRC | 23:07 | |
| anteaya | lifeless: in comment #2 ihar notes that stable is broken | 23:07 |
| anteaya | how do I go about adding a task? | 23:07 |
| *** kgriffs_afk is now known as kgriffs | 23:08 | |
| lifeless | anteaya: I'm not sure, discussing in #launchpad atm | 23:08 |
| *** noslzzp has quit IRC | 23:09 | |
| anteaya | lifeless: k | 23:09 |
| *** neelashah has quit IRC | 23:10 | |
| lifeless | ttx will know | 23:10 |
| morganfainberg | bknudson, ugh, using mock like this is going to require a massive restructure. | 23:10 |
| bknudson | morganfainberg: ok, can leave it for a separate commit if we need it | 23:10 |
| morganfainberg | bknudson, was going to just ask if that's ok | 23:10 |
| *** caleb_ has quit IRC | 23:10 | |
| morganfainberg | bknudson, cool. | 23:10 |
| morganfainberg | i'll add a fixme in there | 23:11 |
| *** MaxV has quit IRC | 23:11 | |
| *** dstanek has joined #openstack-dev | 23:12 | |
| *** amotoki has quit IRC | 23:12 | |
| *** ytwu has joined #openstack-dev | 23:14 | |
| *** ytwu1 has quit IRC | 23:16 | |
| *** dstanek has quit IRC | 23:16 | |
| *** yamahata has quit IRC | 23:17 | |
| dolphm | bknudson: i'm trying to implement your comment in https://review.openstack.org/#/c/70664/6/keystone/tests/test_notifications.py | 23:18 |
| *** atmb4u has quit IRC | 23:18 | |
| dolphm | bknudson: specifically the one to use self.opt() ... but i'm getting an error i can't explain | 23:19 |
| bknudson | dolphm: I make that comment because morganfainberg ran into some problem with setting the config options directly. | 23:19 |
| dolphm | bknudson: with self.opt() in setUp of that class http://pasteraw.com/ade5j5bjc1drs5bobmjxkal8x8240xx | 23:19 |
| dolphm | ... but jamielennox's CONF.rpc_backend appears to work | 23:20 |
| morganfainberg | dolphm, if you set options directly if you reload config files you can lose it | 23:20 |
| morganfainberg | dolphm, if you use opt_in_group or opt, it overrides the config files no matter how many time to load the files | 23:20 |
| *** asalkeld has quit IRC | 23:20 | |
| dolphm | morganfainberg: but why would i get a NoSuchOption using self.opt(x=), but not with CONF.x = | 23:20 |
| morganfainberg | dolphm, please use opt/opt_in_group unless you expect a config file to win (bad assumption in most cases) | 23:20 |
| *** protux has quit IRC | 23:21 | |
| bknudson | dolphm: morganfainberg had a change to switch everything opt/opt_in_group, and also a pretty nifty conf fixture. | 23:21 |
| morganfainberg | dolphm, because opt / opt_in_group checks to see if the option exists | 23:21 |
| *** otherwiseguy has quit IRC | 23:22 | |
| morganfainberg | dolphm, conf.x = doesn't care, iirc it's an empty namespace that takes whatever | 23:22 |
| dolphm | hmm | 23:22 |
| dolphm | the option exists in keystone.conf.sample ... | 23:22 |
| *** mrodden has quit IRC | 23:22 | |
| morganfainberg | dolphm, doesn't mean it "really" exists. it's part of why i am doing the autogen stuff, manual maintenance of the config sample = not in sync | 23:22 |
| dolphm | but the tests fail if i remove it - maybe they're not registered ever? | 23:23 |
| *** radsy has joined #openstack-dev | 23:23 | |
| bknudson | dolphm: should be registered with http://git.openstack.org/cgit/openstack/keystone/tree/keystone/openstack/common/rpc/__init__.py#n40 | 23:23 |
| bknudson | so that's not getting imported? | 23:24 |
| morganfainberg | bknudson, ++ likely | 23:24 |
| jamielennox | dolphm: what's wrong: | 23:24 |
| *** peristeri has quit IRC | 23:25 | |
| dolphm | bknudson: that fixes one issue | 23:25 |
| *** noslzzp has joined #openstack-dev | 23:25 | |
| dolphm | bknudson: just a import keystone.openstack.common.rpc right before self.opt() | 23:26 |
| *** jgrimm has quit IRC | 23:26 | |
| bknudson | still kind of odd... if it wasn't imported then it's not being used | 23:26 |
| *** byeager has quit IRC | 23:26 | |
| morganfainberg | bknudson, remember, it can exist in the config file, be loaded and then appear when/if the option is registered | 23:28 |
| dolphm | i can't fix self.opt(notification_driver=...) with import keystone.openstack.common.notifier.api though... | 23:28 |
| *** yassine has quit IRC | 23:28 | |
| morganfainberg | so likely it is being imported sometime down the line and used | 23:28 |
| bknudson | dolphm: it's a new option/ | 23:29 |
| *** alexpilotti has quit IRC | 23:30 | |
| bknudson | dolphm: you can't import it? | 23:30 |
| dolphm | bknudson: http://pasteraw.com/b1cx8qou6uu5p833rq1i3hgh9i3eh45 i'm mistaken, this "works" but then crashes later | 23:31 |
| jamielennox | dolphm: that's used very early on, i remember i had to set the notification_drivers really early to get it to set, but what are you trying to fix | 23:31 |
| *** asalkeld has joined #openstack-dev | 23:31 | |
| jamielennox | i just noticed that there were two new patches on top of my last messaging one | 23:31 |
| dolphm | jamielennox: ++ that's what i'm running into now | 23:31 |
| dolphm | jamielennox: want to pick up this diff for me? :D i fixed all of brant's nits except this | 23:31 |
| jamielennox | dolphm: at https://review.openstack.org/#/c/70664/8/keystone/tests/test_notifications.py :135 i had to set CONF.notification_driver = because the option wasn't registered at that point | 23:32 |
| *** galstrom is now known as galstrom_zzz | 23:33 | |
| jamielennox | there was no way that i could use an override because the option is only registered slightly before it is read and there was no way that i could see to get in between registering and reading | 23:33 |
| bknudson | jamielennox: the value is registered and used on import? | 23:34 |
| jamielennox | bknudson: no | 23:34 |
| morganfainberg | bknudson, jamielennox, .import_opt ? | 23:35 |
| jamielennox | bknudson: https://github.com/openstack/oslo.messaging/blob/master/oslo/messaging/notify/notifier.py#L113 | 23:36 |
| *** Brainlag has joined #openstack-dev | 23:36 | |
| *** leseb has quit IRC | 23:36 | |
| *** rcleere has quit IRC | 23:36 | |
| jamielennox | so it does register_opt and then an almost immediate read | 23:36 |
| morganfainberg | jamielennox, oh yeah | 23:36 |
| dolphm | jamielennox: bknudson: uploaded new patchset https://review.openstack.org/#/c/70664/ | 23:36 |
| jamielennox | so i had to set CONF.notification_driver directly on the object | 23:36 |
| bknudson | how can you set the value if it's registered right before it's used? | 23:37 |
| jamielennox | an override doesn't work because it wasn't registered | 23:37 |
| *** jcooley_ has joined #openstack-dev | 23:37 | |
| morganfainberg | jamielennox, bknudson once we move away from config files, this will be much easier | 23:37 |
| bknudson | don't you do CONF() to update the values? | 23:37 |
| jamielennox | bknudson: it works just fine if it comes from a config file | 23:37 |
| *** bdpayne has joined #openstack-dev | 23:37 | |
| morganfainberg | becasue tests shouldn't have the volume of config files we have | 23:37 |
| bknudson | jamielennox: it re-reads the config file? | 23:37 |
| *** jergerber has quit IRC | 23:37 | |
| jamielennox | CONF gets loaded with all the values prior to actually registering options | 23:37 |
| dolphm | L129 https://review.openstack.org/#/c/70664/9/keystone/tests/test_notifications.py | 23:38 |
| morganfainberg | bknudson, no, options from config files are loaded anyway, they just aren't presented via CONF object until the option is registered | 23:38 |
| jamielennox | it can then enforce the style of option when it get's registered | 23:38 |
| jamielennox | which is why my direct set works | 23:38 |
| *** doug-fish has quit IRC | 23:38 | |
| jamielennox | i actually don't understand why oslo.messaging did that | 23:38 |
| jamielennox | actually i don't like the fact that a library relies on oslo.config at all | 23:38 |
| jamielennox | but as long as it does i don't know why you would put it in __init__rather than at import time because it means that CONF must be present anyway | 23:39 |
| *** pablosan has quit IRC | 23:39 | |
| *** sgordon has quit IRC | 23:39 | |
| bknudson | jamielennox: does it have to use config? there's several kwargs on Notifier() | 23:39 |
| *** mrodden has joined #openstack-dev | 23:40 | |
| bknudson | it's got driver= anyways | 23:40 |
| jamielennox | bknudson: i think you can set driver= and topic= to override the conf | 23:40 |
| jamielennox | bknudson: but i'm not sure how you would test that | 23:40 |
| jamielennox | i mean you could test the object directly, but if you are testing notifications from within keystone you would have to find a way of replacing the notifier object and i don't see that as a good test | 23:41 |
| bknudson | jamielennox: we don't have to test that the library works as documented. | 23:41 |
| *** FunnyLookinHat has quit IRC | 23:42 | |
| dolphm | just that we're calling it at the expected time with the expected data | 23:42 |
| bknudson | I think we can assume that the library owners did that. | 23:42 |
| jamielennox | bknudson: there is only one test that actually makes it into the library | 23:42 |
| *** pablosan has joined #openstack-dev | 23:43 | |
| bknudson | I wonder why the option is topics but the argument is only one topic | 23:43 |
| jamielennox | bknudson: yea, seems short sighted | 23:43 |
| *** IanGovett has left #openstack-dev | 23:43 | |
| jamielennox | anyway i think that the direct setting of the conf object is the right approach for now | 23:44 |
| bknudson | jamielennox: I agree with you that libraries shouldn't be using oslo.config. | 23:45 |
| bknudson | so if you make it work that way I'll be fine with it | 23:45 |
| bknudson | I assume we'd just have normal keystone options instead. | 23:45 |
| *** devoid has quit IRC | 23:46 | |
| *** devoid has joined #openstack-dev | 23:47 | |
| *** troytoman is now known as troytoman-away | 23:48 | |
| *** mwagner_lap has quit IRC | 23:51 | |
| morganfainberg | pleia2, i think the reviewday.json looks good | 23:51 |
| morganfainberg | pleia2, i know it took me a bit longer to get back to you on that, but it seems... pretty sane | 23:52 |
| *** kevinconway has quit IRC | 23:55 | |
| *** mlavalle has quit IRC | 23:55 | |
| jamielennox | for anything i do on the client now that will span more than 2 patches i'm going to do with a _ prefix and then at the end have a patch that just removes the _ | 23:56 |
| *** arosen has joined #openstack-dev | 23:56 | |
| jamielennox | https://review.openstack.org/#/c/68006/7/keystoneclient/auth/identity/base.py is just annoying | 23:56 |
| *** abhirc has quit IRC | 23:56 | |
| *** jmontemayor has quit IRC | 23:56 | |
| jamielennox | there is no way that anyone is relying on that behaviour | 23:57 |
| bknudson | jamielennox: good idea. maybe we could mark APIs experimental rather than _ | 23:57 |
| jamielennox | bknudson: that would work as well | 23:57 |
| jamielennox | bknudson: we had this talk before though and i'm not sure of a good way to mark things as experimental other than the ) | 23:57 |
| jamielennox | s/)/_ | 23:58 |
| bknudson | a ) would make it really hard to use. | 23:58 |
| stevemar | jamielennox, bknudson, dolphm going to approve oslo messaging change... | 23:58 |
| stevemar | well.. when jenkins is done :) | 23:58 |
| jamielennox | stevemar: jenkins | 23:58 |
| stevemar | jamielennox, spoke too soon | 23:58 |
| dolphm | stevemar: ack | 23:58 |
| jamielennox | stevemar: otherwise sure | 23:59 |
| jamielennox | bknudson: anyway guess i need to change it for now and we can change it back when we go for a 1.0 | 23:59 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!