| *** itlinux has joined #openstack-horizon | 00:03 | |
| *** btully has quit IRC | 00:04 | |
| *** itlinux has quit IRC | 00:07 | |
| *** btully has joined #openstack-horizon | 00:12 | |
| *** btully has quit IRC | 00:17 | |
| *** btully has joined #openstack-horizon | 00:17 | |
| *** itlinux has joined #openstack-horizon | 00:17 | |
| *** btully has quit IRC | 00:22 | |
| *** e0ne has quit IRC | 00:22 | |
| *** itlinux has quit IRC | 00:24 | |
| *** btully has joined #openstack-horizon | 00:24 | |
| *** itlinux has joined #openstack-horizon | 00:28 | |
| *** gyee has quit IRC | 00:30 | |
| *** btully has quit IRC | 00:33 | |
| *** btully has joined #openstack-horizon | 00:35 | |
| *** btully has quit IRC | 00:43 | |
| *** btully has joined #openstack-horizon | 00:43 | |
| *** btully has quit IRC | 00:51 | |
| *** btully has joined #openstack-horizon | 00:54 | |
| *** cshen has joined #openstack-horizon | 00:56 | |
| *** btully has quit IRC | 00:59 | |
| *** itlinux has quit IRC | 01:00 | |
| *** cshen has quit IRC | 01:01 | |
| *** lseki has quit IRC | 01:02 | |
| openstackgerrit | Merged openstack/horizon master: Fix KeyError when image was deleted https://review.opendev.org/656456 | 01:08 |
|---|---|---|
| *** btully has joined #openstack-horizon | 01:32 | |
| *** btully has quit IRC | 01:37 | |
| *** btully has joined #openstack-horizon | 01:51 | |
| *** btully has quit IRC | 01:56 | |
| *** whoami-rajat has quit IRC | 01:58 | |
| *** dklyle has joined #openstack-horizon | 02:30 | |
| *** ChanServ sets mode: +o dklyle | 02:30 | |
| *** dklyle has quit IRC | 02:36 | |
| *** awalende has joined #openstack-horizon | 02:38 | |
| *** awalende has quit IRC | 02:42 | |
| *** btully has joined #openstack-horizon | 02:47 | |
| *** btully has quit IRC | 02:55 | |
| *** cshen has joined #openstack-horizon | 02:57 | |
| *** cshen has quit IRC | 03:01 | |
| *** btully has joined #openstack-horizon | 03:06 | |
| *** btully has quit IRC | 03:10 | |
| *** btully has joined #openstack-horizon | 03:19 | |
| *** btully has quit IRC | 03:23 | |
| *** btully has joined #openstack-horizon | 03:23 | |
| *** btully has quit IRC | 03:28 | |
| *** btully has joined #openstack-horizon | 03:36 | |
| *** btully has quit IRC | 03:40 | |
| *** btully has joined #openstack-horizon | 03:51 | |
| *** btully has quit IRC | 03:56 | |
| *** btully has joined #openstack-horizon | 04:04 | |
| *** e0ne has joined #openstack-horizon | 04:06 | |
| *** ChanServ sets mode: +o e0ne | 04:06 | |
| *** btully has quit IRC | 04:08 | |
| *** pcaruana has joined #openstack-horizon | 04:12 | |
| *** btully has joined #openstack-horizon | 04:12 | |
| *** btully has quit IRC | 04:17 | |
| *** btully has joined #openstack-horizon | 04:17 | |
| openstackgerrit | Ivan Kolodyazhny proposed openstack/horizon master: Remove ENABLE_FLAVOR_EDIT config option https://review.opendev.org/656919 | 04:27 |
| *** btully has quit IRC | 04:29 | |
| *** btully has joined #openstack-horizon | 04:29 | |
| *** pcaruana has quit IRC | 04:32 | |
| *** btully has quit IRC | 04:37 | |
| *** btully has joined #openstack-horizon | 04:38 | |
| *** btully has quit IRC | 04:42 | |
| *** samueldmq has quit IRC | 04:46 | |
| *** btully has joined #openstack-horizon | 04:50 | |
| openstackgerrit | Ivan Kolodyazhny proposed openstack/horizon master: Remove deprecated SHOW_KEYSTONE_V2_RC config option https://review.opendev.org/656921 | 04:56 |
| *** btully has quit IRC | 04:57 | |
| *** btully has joined #openstack-horizon | 04:57 | |
| *** btully has quit IRC | 05:05 | |
| *** btully has joined #openstack-horizon | 05:06 | |
| *** btully has quit IRC | 05:14 | |
| *** e0ne has quit IRC | 05:15 | |
| *** btully has joined #openstack-horizon | 05:18 | |
| *** btully has quit IRC | 05:22 | |
| *** btully has joined #openstack-horizon | 05:22 | |
| *** btully has quit IRC | 05:27 | |
| *** btully has joined #openstack-horizon | 05:31 | |
| *** btully has quit IRC | 05:35 | |
| *** btully has joined #openstack-horizon | 05:37 | |
| *** btully has quit IRC | 05:45 | |
| *** btully has joined #openstack-horizon | 05:49 | |
| *** btully has quit IRC | 05:57 | |
| *** btully has joined #openstack-horizon | 05:58 | |
| *** btully has quit IRC | 06:02 | |
| *** btully has joined #openstack-horizon | 06:02 | |
| *** btully has quit IRC | 06:07 | |
| *** btully has joined #openstack-horizon | 06:10 | |
| *** cshen has joined #openstack-horizon | 06:23 | |
| *** jtomasek has joined #openstack-horizon | 06:30 | |
| *** btully has quit IRC | 06:31 | |
| *** btully has joined #openstack-horizon | 06:32 | |
| *** pcaruana has joined #openstack-horizon | 06:36 | |
| *** btully has quit IRC | 06:36 | |
| *** btully has joined #openstack-horizon | 06:40 | |
| *** btully has quit IRC | 06:48 | |
| *** btully has joined #openstack-horizon | 06:49 | |
| *** btully has quit IRC | 06:55 | |
| *** btully has joined #openstack-horizon | 06:56 | |
| *** btully has quit IRC | 07:00 | |
| *** tesseract has joined #openstack-horizon | 07:06 | |
| *** pcaruana has quit IRC | 07:22 | |
| *** rcernin has quit IRC | 07:36 | |
| *** jpich has joined #openstack-horizon | 07:37 | |
| *** tosky has joined #openstack-horizon | 07:46 | |
| *** altlogbot_1 has quit IRC | 08:03 | |
| *** altlogbot_3 has joined #openstack-horizon | 08:04 | |
| *** cshen has quit IRC | 08:27 | |
| *** pcaruana has joined #openstack-horizon | 08:56 | |
| *** cshen has joined #openstack-horizon | 09:01 | |
| *** cshen has quit IRC | 09:05 | |
| *** whoami-rajat has joined #openstack-horizon | 09:09 | |
| *** cshen has joined #openstack-horizon | 09:36 | |
| *** clauz has joined #openstack-horizon | 09:55 | |
| *** pcaruana has quit IRC | 10:22 | |
| *** cshen has quit IRC | 10:30 | |
| *** cshen has joined #openstack-horizon | 10:57 | |
| *** pcaruana has joined #openstack-horizon | 11:01 | |
| *** cshen has quit IRC | 11:02 | |
| *** cshen has joined #openstack-horizon | 11:07 | |
| *** e0ne has joined #openstack-horizon | 11:55 | |
| *** ChanServ sets mode: +o e0ne | 11:55 | |
| openstackgerrit | Ivan Kolodyazhny proposed openstack/horizon master: Remove deprecated SHOW_KEYSTONE_V2_RC config option https://review.opendev.org/656921 | 11:59 |
| *** whoami-rajat has quit IRC | 12:38 | |
| openstackgerrit | Ivan Kolodyazhny proposed openstack/horizon master: Remove deprecated SHOW_KEYSTONE_V2_RC config option https://review.opendev.org/656921 | 12:48 |
| *** whoami-rajat has joined #openstack-horizon | 12:58 | |
| *** e0ne has quit IRC | 13:22 | |
| *** btully has joined #openstack-horizon | 13:23 | |
| *** btully has quit IRC | 13:27 | |
| *** btully has joined #openstack-horizon | 13:34 | |
| *** btully has quit IRC | 13:39 | |
| *** btully has joined #openstack-horizon | 13:53 | |
| *** btully has quit IRC | 13:57 | |
| *** e0ne has joined #openstack-horizon | 14:05 | |
| *** ChanServ sets mode: +o e0ne | 14:05 | |
| *** jpich has quit IRC | 14:18 | |
| *** jpich has joined #openstack-horizon | 14:19 | |
| *** jpich has quit IRC | 14:39 | |
| *** jpich has joined #openstack-horizon | 14:39 | |
| *** e0ne has quit IRC | 14:41 | |
| *** btully has joined #openstack-horizon | 14:51 | |
| *** btully has quit IRC | 14:56 | |
| *** dklyle has joined #openstack-horizon | 14:56 | |
| *** ChanServ sets mode: +o dklyle | 14:56 | |
| *** e0ne has joined #openstack-horizon | 14:58 | |
| *** ChanServ sets mode: +o e0ne | 14:58 | |
| *** cshen has quit IRC | 15:01 | |
| *** dklyle has quit IRC | 15:01 | |
| *** btully has joined #openstack-horizon | 15:06 | |
| *** btully has quit IRC | 15:10 | |
| *** btully has joined #openstack-horizon | 15:13 | |
| *** btully has quit IRC | 15:17 | |
| *** gyee has joined #openstack-horizon | 15:21 | |
| *** btully has joined #openstack-horizon | 15:23 | |
| *** btully has quit IRC | 15:27 | |
| *** rdopiera has quit IRC | 15:31 | |
| *** cshen has joined #openstack-horizon | 15:36 | |
| *** btully has joined #openstack-horizon | 15:38 | |
| *** btully has quit IRC | 15:42 | |
| *** cshen has quit IRC | 15:52 | |
| *** cshen has joined #openstack-horizon | 15:54 | |
| *** cshen has quit IRC | 16:03 | |
| e0ne | amotoki: hi. could you please join keystone session right after the lunch? we can discuss policy issues there | 16:10 |
| amotoki | e0ne: when does it start? 1330 or 1400? | 16:11 |
| amotoki | I have nova-neutron session from 1400. | 16:11 |
| e0ne | amotoki: 1.30 | 16:11 |
| amotoki | got it. will be there. | 16:12 |
| e0ne | thanks | 16:12 |
| *** yan0s has quit IRC | 16:17 | |
| *** jpich has quit IRC | 16:17 | |
| *** dklyle has joined #openstack-horizon | 16:20 | |
| *** ChanServ sets mode: +o dklyle | 16:20 | |
| *** btully has joined #openstack-horizon | 16:22 | |
| *** btully has quit IRC | 16:26 | |
| *** btully has joined #openstack-horizon | 16:30 | |
| *** tosky has quit IRC | 16:35 | |
| *** tosky has joined #openstack-horizon | 16:36 | |
| *** lifeless has quit IRC | 16:40 | |
| *** e0ne has quit IRC | 16:41 | |
| *** btully has quit IRC | 16:42 | |
| *** btully has joined #openstack-horizon | 16:43 | |
| *** btully has quit IRC | 16:47 | |
| *** btully has joined #openstack-horizon | 16:48 | |
| *** btully has quit IRC | 16:52 | |
| *** betherly has joined #openstack-horizon | 16:53 | |
| *** btully has joined #openstack-horizon | 16:57 | |
| *** betherly has quit IRC | 16:58 | |
| *** btully has quit IRC | 17:01 | |
| *** dklyle has quit IRC | 17:02 | |
| *** e0ne has joined #openstack-horizon | 17:02 | |
| *** ChanServ sets mode: +o e0ne | 17:02 | |
| *** gyee has quit IRC | 17:16 | |
| *** zbr has joined #openstack-horizon | 17:21 | |
| *** dklyle has joined #openstack-horizon | 17:23 | |
| *** ChanServ sets mode: +o dklyle | 17:23 | |
| *** itlinux has joined #openstack-horizon | 17:23 | |
| *** cshen has joined #openstack-horizon | 17:25 | |
| *** tesseract has quit IRC | 17:28 | |
| *** dklyle has quit IRC | 17:29 | |
| *** ivve has joined #openstack-horizon | 17:36 | |
| *** cshen has quit IRC | 17:48 | |
| *** itlinux has quit IRC | 17:53 | |
| *** itlinux has joined #openstack-horizon | 18:00 | |
| *** btully has joined #openstack-horizon | 18:03 | |
| *** btully has quit IRC | 18:07 | |
| *** btully has joined #openstack-horizon | 18:07 | |
| *** e0ne has quit IRC | 18:12 | |
| *** btully has quit IRC | 18:15 | |
| *** btully has joined #openstack-horizon | 18:16 | |
| openstackgerrit | Akihiro Motoki proposed openstack/horizon master: Drop cinder consistency group support https://review.opendev.org/645515 | 18:16 |
| *** btully has quit IRC | 18:20 | |
| *** btully has joined #openstack-horizon | 18:21 | |
| *** btully has quit IRC | 18:26 | |
| *** awalende has joined #openstack-horizon | 18:27 | |
| *** dklyle has joined #openstack-horizon | 18:28 | |
| *** ChanServ sets mode: +o dklyle | 18:28 | |
| *** awalende has quit IRC | 18:32 | |
| *** btully has joined #openstack-horizon | 18:33 | |
| *** dklyle has quit IRC | 18:35 | |
| *** canori01 has joined #openstack-horizon | 18:36 | |
| canori01 | So I have a an ldap backend with 6000 users. Querying it in keystone is quick, but when trying to modify quotas or add users to projects in horizon, it's very slow. Is there anything I can to speed up on my end? | 18:38 |
| *** btully has quit IRC | 18:38 | |
| *** lseki has joined #openstack-horizon | 18:52 | |
| *** dklyle has joined #openstack-horizon | 18:53 | |
| *** ChanServ sets mode: +o dklyle | 18:53 | |
| *** awalende has joined #openstack-horizon | 18:58 | |
| *** pcaruana has quit IRC | 19:02 | |
| *** awalende has quit IRC | 19:02 | |
| *** betherly has joined #openstack-horizon | 19:16 | |
| *** btully has joined #openstack-horizon | 19:19 | |
| *** dklyle has quit IRC | 19:20 | |
| *** betherly has quit IRC | 19:21 | |
| *** btully has quit IRC | 19:24 | |
| *** btully has joined #openstack-horizon | 19:33 | |
| *** jtomasek has quit IRC | 19:33 | |
| *** e0ne has joined #openstack-horizon | 19:34 | |
| *** ChanServ sets mode: +o e0ne | 19:34 | |
| *** betherly has joined #openstack-horizon | 19:37 | |
| *** btully has quit IRC | 19:38 | |
| *** betherly has quit IRC | 19:42 | |
| *** cshen has joined #openstack-horizon | 19:44 | |
| *** btully has joined #openstack-horizon | 19:48 | |
| *** cshen has quit IRC | 19:49 | |
| *** dklyle has joined #openstack-horizon | 19:52 | |
| *** ChanServ sets mode: +o dklyle | 19:52 | |
| *** btully has quit IRC | 19:52 | |
| *** btully has joined #openstack-horizon | 20:00 | |
| *** e0ne has quit IRC | 20:00 | |
| *** btully has quit IRC | 20:05 | |
| *** e0ne has joined #openstack-horizon | 20:06 | |
| *** ChanServ sets mode: +o e0ne | 20:06 | |
| *** betherly has joined #openstack-horizon | 20:09 | |
| *** lifeless has joined #openstack-horizon | 20:11 | |
| *** betherly has quit IRC | 20:13 | |
| *** awalende has joined #openstack-horizon | 20:22 | |
| *** btully has joined #openstack-horizon | 20:23 | |
| *** btully has quit IRC | 20:28 | |
| amotoki | e0ne: I checked the response of issued token and understand what "admin role implies member roles implies reader" means correctly. | 20:32 |
| amotoki | e0ne: this is an example of token response http://paste.openstack.org/show/750436/ | 20:32 |
| amotoki | e0ne: keystone returns a list of roles. | 20:33 |
| amotoki | e0ne: we can check how openstack_auth and/or horizon policy engine handles a list of roles. | 20:33 |
| e0ne | amotoki: sounds reasonable | 20:33 |
| amotoki | e0ne: that's what I understand after the discussion | 20:33 |
| e0ne | I've got the same feeling | 20:33 |
| *** btully has joined #openstack-horizon | 20:38 | |
| *** btully has quit IRC | 20:42 | |
| *** btully has joined #openstack-horizon | 20:42 | |
| *** btully has quit IRC | 20:47 | |
| *** btully has joined #openstack-horizon | 20:47 | |
| *** btully has quit IRC | 20:51 | |
| *** btully has joined #openstack-horizon | 20:56 | |
| *** btully has quit IRC | 21:01 | |
| *** btully has joined #openstack-horizon | 21:01 | |
| *** betherly has joined #openstack-horizon | 21:01 | |
| *** btully has quit IRC | 21:05 | |
| *** betherly has quit IRC | 21:06 | |
| *** btully has joined #openstack-horizon | 21:12 | |
| *** btully has quit IRC | 21:16 | |
| *** btully has joined #openstack-horizon | 21:17 | |
| *** e0ne has quit IRC | 21:18 | |
| *** btully has quit IRC | 21:21 | |
| *** e0ne has joined #openstack-horizon | 21:25 | |
| *** ChanServ sets mode: +o e0ne | 21:25 | |
| *** btully has joined #openstack-horizon | 21:27 | |
| dklyle | amotoki, e0ne: openstack_auth checks that one of the roles applies https://github.com/openstack/horizon/blob/master/openstack_auth/user.py#L371 | 21:30 |
| dklyle | the checks can be AND or OR'd | 21:30 |
| dklyle | was the a XP session? | 21:31 |
| e0ne | dklyle: XP==cross project? | 21:31 |
| *** btully has quit IRC | 21:31 | |
| dklyle | yes | 21:31 |
| dklyle | *was there a XP | 21:32 |
| e0ne | we've got some information from keystone | 21:32 |
| e0ne | and we were given with some useful tips about oslo.policy | 21:32 |
| *** betherly has joined #openstack-horizon | 21:33 | |
| e0ne | I'll add notes to the etherpad | 21:33 |
| dklyle | thanks | 21:33 |
| e0ne | dklyle: you can find few notes here https://etherpad.openstack.org/p/keystone-train-ptg-scope-and-rbac | 21:33 |
| dklyle | list redundant looks helpful | 21:35 |
| amotoki | for example, a new policy rule in the system-scope era for list_projects is like "(role:reader and system_scope:all) or (role:reader and domain_id:%(target.domain_id)s)" | 21:35 |
| amotoki | my memory was a bit confused at the session, but anyway we need to make the above for example. | 21:36 |
| *** btully has joined #openstack-horizon | 21:36 | |
| dklyle | I'm not sure why that rule wouldn't work with the system as is | 21:36 |
| dklyle | hmmm, maybe system_scope needs to be added to the credentials passed to policy check | 21:37 |
| *** betherly has quit IRC | 21:37 | |
| dklyle | role and domain_id are handled | 21:37 |
| dklyle | https://github.com/openstack/horizon/blob/master/openstack_auth/policy.py#L206 | 21:38 |
| dklyle | likely have to add system_scope there | 21:38 |
| dklyle | is that in the token now? | 21:38 |
| *** mgagne has quit IRC | 21:39 | |
| *** mugsie has quit IRC | 21:39 | |
| dklyle | I don't see it in your paste | 21:39 |
| dklyle | I'd need to see the full policy file with system_scope to better understand | 21:40 |
| *** btully has quit IRC | 21:40 | |
| *** btully has joined #openstack-horizon | 21:49 | |
| *** betherly has joined #openstack-horizon | 21:53 | |
| *** prometheanfire has left #openstack-horizon | 21:54 | |
| *** awalende has quit IRC | 21:56 | |
| *** btully has quit IRC | 21:57 | |
| *** betherly has quit IRC | 21:58 | |
| *** btully has joined #openstack-horizon | 22:10 | |
| *** mugsie has joined #openstack-horizon | 22:10 | |
| *** mgagne has joined #openstack-horizon | 22:10 | |
| *** awalende has joined #openstack-horizon | 22:12 | |
| *** btully has quit IRC | 22:14 | |
| *** niceplace has quit IRC | 22:27 | |
| *** btully has joined #openstack-horizon | 22:29 | |
| *** niceplace has joined #openstack-horizon | 22:33 | |
| *** betherly has joined #openstack-horizon | 22:35 | |
| *** btully has quit IRC | 22:37 | |
| *** betherly has quit IRC | 22:40 | |
| *** openstackstatus has quit IRC | 22:47 | |
| *** e0ne has quit IRC | 22:47 | |
| *** e0ne has joined #openstack-horizon | 22:50 | |
| *** ChanServ sets mode: +o e0ne | 22:50 | |
| *** e0ne has quit IRC | 22:50 | |
| *** e0ne has joined #openstack-horizon | 22:51 | |
| *** ChanServ sets mode: +o e0ne | 22:51 | |
| *** dklyle has quit IRC | 22:51 | |
| *** e0ne has quit IRC | 22:51 | |
| *** e0ne has joined #openstack-horizon | 22:52 | |
| *** ChanServ sets mode: +o e0ne | 22:52 | |
| *** e0ne has quit IRC | 22:57 | |
| *** e0ne has joined #openstack-horizon | 23:03 | |
| *** ChanServ sets mode: +o e0ne | 23:03 | |
| *** e0ne has quit IRC | 23:05 | |
| *** e0ne has joined #openstack-horizon | 23:05 | |
| *** ChanServ sets mode: +o e0ne | 23:05 | |
| *** awalende has quit IRC | 23:07 | |
| *** awalende has joined #openstack-horizon | 23:08 | |
| *** e0ne has quit IRC | 23:08 | |
| *** btully has joined #openstack-horizon | 23:10 | |
| *** awalende has quit IRC | 23:12 | |
| *** tosky has quit IRC | 23:13 | |
| *** betherly has joined #openstack-horizon | 23:18 | |
| *** btully has quit IRC | 23:22 | |
| *** betherly has quit IRC | 23:23 | |
| *** btully has joined #openstack-horizon | 23:31 | |
| *** btully has quit IRC | 23:35 | |
| *** cloudnull has joined #openstack-horizon | 23:36 | |
| *** betherly has joined #openstack-horizon | 23:39 | |
| *** btully has joined #openstack-horizon | 23:43 | |
| *** betherly has quit IRC | 23:43 | |
| *** cshen has joined #openstack-horizon | 23:45 | |
| *** btully has quit IRC | 23:47 | |
| *** cshen has quit IRC | 23:49 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!