| *** andreaf has quit IRC | 00:02 | |
| *** Chicago has joined #openstack-keystone | 00:03 | |
| *** Chicago has joined #openstack-keystone | 00:03 | |
| *** gokrokve has quit IRC | 00:04 | |
| *** RockKuo has joined #openstack-keystone | 00:12 | |
| *** dstanek has joined #openstack-keystone | 00:14 | |
| *** gokrokve has joined #openstack-keystone | 00:26 | |
| openstackgerrit | David Stanek proposed a change to openstack/keystone: Adds style checks to ease reviewer burden https://review.openstack.org/78119 | 00:30 |
|---|---|---|
| *** bknudson has joined #openstack-keystone | 00:31 | |
| openstackgerrit | Jamie Lennox proposed a change to openstack/python-keystoneclient: Allow passing auth plugin as a parameter https://review.openstack.org/83673 | 00:38 |
| *** dstanek has quit IRC | 00:45 | |
| *** amcrn has quit IRC | 00:49 | |
| *** amcrn has joined #openstack-keystone | 00:55 | |
| *** marcoemorais has quit IRC | 00:56 | |
| *** zhiyan_ is now known as zhiyan | 00:57 | |
| *** zigo has quit IRC | 00:59 | |
| *** zigo has joined #openstack-keystone | 01:01 | |
| *** dstanek has joined #openstack-keystone | 01:17 | |
| openstackgerrit | David Stanek proposed a change to openstack/keystone: Adds style checks to ease reviewer burden https://review.openstack.org/78119 | 01:39 |
| ayoung | dtroyer, are you running Horizon now? With SSL enabled? | 01:44 |
| *** mberlin has joined #openstack-keystone | 01:57 | |
| *** mberlin1 has quit IRC | 01:59 | |
| *** dstanek has quit IRC | 02:01 | |
| *** zhiyan has left #openstack-keystone | 02:04 | |
| *** zhiyan has joined #openstack-keystone | 02:05 | |
| *** dims has quit IRC | 02:23 | |
| *** dims has joined #openstack-keystone | 02:24 | |
| dtroyer | ayoung: honestly, I hardly use horizon myself. I'm guessing you are looking at it and other wgi apps getting along in apache? | 02:26 |
| *** dstanek has joined #openstack-keystone | 02:28 | |
| openstackgerrit | Zhang Yang proposed a change to openstack/keystone: Fix dict wrong use in ec2 auth https://review.openstack.org/78837 | 02:33 |
| ayoung | dtroyer, yes, I am alos looking at Kerberizing Horizon. | 02:39 |
| *** dstanek has quit IRC | 02:42 | |
| *** amcrn has quit IRC | 02:42 | |
| *** david-lyle has joined #openstack-keystone | 02:44 | |
| *** topol has joined #openstack-keystone | 02:47 | |
| *** stevemar has joined #openstack-keystone | 02:53 | |
| *** harlowja is now known as harlowja_away | 02:59 | |
| *** harlowja_away is now known as harlowja | 03:09 | |
| ayoung | jamielennox, so...running Keystone and Horizon in the same Apache instance...and getting errors like this: ArgsAlreadyParsedError: arguments already parsed: cannot register CLI option | 03:11 |
| *** chandan_kumar has joined #openstack-keystone | 03:11 | |
| jamielennox | ayoung: from where? | 03:11 |
| ayoung | File "/var/www/cgi-bin/keystone/main", line 42, in <module> | 03:11 |
| ayoung | trying to login from the Horion UI | 03:11 |
| ayoung | jamielennox, its cuz they are in the same process space, I am fairly certain | 03:12 |
| jamielennox | ayoung: why are they in the same process space | 03:12 |
| ayoung | need to find some way to segregate the Horizon and Keystone WSGI apps | 03:12 |
| ayoung | jamielennox, cuz my Apache Config Fu is Weak | 03:12 |
| jamielennox | that will be a problem in the same space as the CONF objects will clash | 03:12 |
| jamielennox | (i assume horizon uses CONF) | 03:12 |
| jamielennox | ayoung: i doubt it - you would have to try hard to get them in the same process | 03:12 |
| ayoung | I'm guess it is an Apache conf issue. They are both defined in the same VirtualHost | 03:13 |
| ayoung | jamielennox, keystone worked fine before I got Horizon in SSL | 03:13 |
| jamielennox | ayoung: show me | 03:13 |
| jamielennox | same vhost? | 03:13 |
| ayoung | yep | 03:13 |
| jamielennox | oh you're going for server.com/identity layout | 03:13 |
| ayoung | jamielennox, yeah | 03:13 |
| ayoung | I suspect that, even so, there is a way to segregate them | 03:14 |
| ayoung | but maybe not | 03:14 |
| jamielennox | is it on a machine i can ssh? | 03:14 |
| ayoung | yeah...lemme set a password | 03:14 |
| jamielennox | i'm trying to rip client apart again - always looking for something more fun to do | 03:15 |
| jamielennox | it's time for a rewrite... | 03:15 |
| ayoung | jamielennox, I'll be working on the "external" plugin here shortly | 03:15 |
| jamielennox | ayoung: client you mean? | 03:16 |
| ayoung | yepo | 03:16 |
| jamielennox | ok | 03:16 |
| jamielennox | see: https://review.openstack.org/#/c/84071/ for preliminary docs | 03:16 |
| ayoung | jamielennox, will do | 03:16 |
| ayoung | Its going to be super trivial | 03:17 |
| ayoung | basically auth: {} | 03:17 |
| ayoung | the tricky thing is going to be telling the requests library to do negotiate | 03:17 |
| ayoung | jamielennox, sent you the login info internal. Let me know when you are in | 03:17 |
| ayoung | the last thing I did was the file /etc/httpd/conf.d/wsgi-horizon.conf | 03:18 |
| jamielennox | ayoung: that's not hard | 03:19 |
| ayoung | jamielennox, I know, I was dealing with NSS, though, and wanted to change as little as possible | 03:19 |
| jamielennox | ayoung: kerberos: ig Fu is Weak | 03:19 |
| jamielennox | <jamielennox> (i assume horizon uses CONF) | 03:19 |
| jamielennox | hmm | 03:19 |
| jamielennox | ayoung: kerberos: https://review.openstack.org/#/c/74974/ | 03:20 |
| jamielennox | though i assume you want to do kerberos all the time rather than just on auth | 03:20 |
| ayoung | jamielennox, just on Auth is sufficient, I think | 03:21 |
| jamielennox | also his is overkill - it's much simpler than that | 03:21 |
| jamielennox | ayoung: really? then yours is the same as jose's and i can do it in like 5 lines | 03:21 |
| ayoung | it makes sense to do: kerberos to /hostname/keystone/krb5/v3/auth and then get a token where the service catalog is under hostname/keystone/admin | 03:22 |
| jamielennox | hmm, that will be a fun setup | 03:23 |
| ayoung | jamielennox, yeah, it should be pretty trivial. I could see more complex things in the future. But if you took the token, put it in a cookie, you would have a reasonable facsimile of what IPA does already | 03:23 |
| jamielennox | cookie? who needs the token as a cookie? why are we doing anything with cookies? | 03:25 |
| ayoung | jamielennox, it shoulda been cookies all along....just to use the standard mechanism | 03:25 |
| ayoung | but the nice thing about the customer header we use is it has built in XSRF protection | 03:25 |
| jamielennox | hmm, i've never tried setting things up like this before | 03:28 |
| ayoung | jamielennox, I assume you got in? | 03:28 |
| jamielennox | yea | 03:29 |
| stevemar | morganfainberg, ayoung can either of you +2/+A this guy: https://review.openstack.org/#/c/83169/ | 03:30 |
| ayoung | stevemar, thought I already had | 03:30 |
| ayoung | stevemar, done | 03:31 |
| stevemar | ayoung, it had to get rebased | 03:31 |
| stevemar | for some very odd reason | 03:32 |
| ayoung | jamielennox, anyway, I assume the reason I am getting the conflict is that the WSGIDaemonProcess horizon user=fedora group=wheel processes=3 threads=10 home=/opt/stack/horizon is getting used by both horizon and keystone | 03:34 |
| jamielennox | ayoung yep | 03:34 |
| ayoung | not sure how to scope those...maybe through a location directive. Virtual host does'n't look to be an option | 03:34 |
| jamielennox | no you set WSGIProcessGroup | 03:34 |
| jamielennox | but that should require daemon mode for keystone | 03:35 |
| *** chandan_kumar has quit IRC | 03:35 | |
| ayoung | jamielennox, yeah, I think I can do that per Location... http://stackoverflow.com/questions/6590587/multiple-mod-wsgi-apps-on-one-virtual-host-directing-to-wrong-app | 03:35 |
| ayoung | anyway, I'll play with that tomorrow. | 03:35 |
| jamielennox | yep, i was just writing that out | 03:36 |
| ayoung | you going to change the config on this machine? | 03:36 |
| jamielennox | but i can leave it for you as i'm not sure i have a kerberos cred on that domain anyway | 03:36 |
| ayoung | all the machines are in our cloudlab. ipa.cloudlab.freeeipa.org is the IPA vm. | 03:37 |
| jamielennox | ayoung: i'll leave it anyway | 03:37 |
| ayoung | F20 machine | 03:37 |
| jamielennox | that's pretty much the guide i was following anyway | 03:37 |
| ayoung | OK...I can get it tomorrow. this has been trial and error, and I've been making progress. Once I get this, its kerberize Horizon, then drop the form based auth | 03:38 |
| jamielennox | ayoung: heh that SO question was asked by gabriel hurley | 03:38 |
| ayoung | SO? | 03:38 |
| jamielennox | stack overflow | 03:38 |
| jamielennox | you can do some awesome and strange stuff with httpd | 03:39 |
| ayoung | Nice.... | 03:41 |
| ayoung | gnight. | 03:41 |
| *** ayoung is now known as ayoung-ZZZzzz__ | 03:41 | |
| jamielennox | ayoung: cya | 03:41 |
| ayoung-ZZZzzz__ | BTW...its been a long year, hasn't it jamielennox ? | 03:42 |
| *** ayoung-ZZZzzz__ has quit IRC | 03:42 | |
| jamielennox | yes and no | 03:42 |
| *** chandan_kumar has joined #openstack-keystone | 03:59 | |
| *** chandan_kumar has quit IRC | 04:01 | |
| *** chandan_kumar has joined #openstack-keystone | 04:06 | |
| *** dstanek has joined #openstack-keystone | 04:28 | |
| *** dstanek has quit IRC | 04:33 | |
| stevemar | jamielennox, thanks for replying to the ML | 04:38 |
| jamielennox | stevemar: np | 04:38 |
| stevemar | jamielennox, have you seen this error before in a jenkins run? http://logs.openstack.org/69/83169/3/check/gate-keystone-python27/160e2d4/testr_results.html.gz | 04:39 |
| jamielennox | stevemar: ah | 04:39 |
| jamielennox | no | 04:39 |
| jamielennox | weird | 04:40 |
| stevemar | jamielennox, it looks like a nasty one | 04:42 |
| stevemar | the patch doesn't touch the revocation code either | 04:42 |
| stevemar | so it's worrisome | 04:42 |
| jamielennox | yea, 2 != 3 would imply that there is some sort of race or something | 04:42 |
| stevemar | did the parallel testing stuff get merged? | 04:43 |
| stevemar | ah it did: https://review.openstack.org/#/c/83584/ | 04:43 |
| jamielennox | stevemar: it shouldn't matter - the database should be created per process | 04:44 |
| jamielennox | although there was an in-mem testing thing recently | 04:44 |
| *** gokrokve_ has joined #openstack-keystone | 04:50 | |
| *** topol has quit IRC | 04:51 | |
| *** stevemar has quit IRC | 04:51 | |
| *** gokrokve has quit IRC | 04:53 | |
| *** harlowja is now known as harlowja_away | 05:11 | |
| *** gyee has quit IRC | 05:20 | |
| openstackgerrit | Andrey Kurilin proposed a change to openstack/python-keystoneclient: Reuse module `exceptions` from Oslo https://review.openstack.org/68897 | 05:27 |
| *** amerine has quit IRC | 05:27 | |
| *** zhiyan is now known as zhiyan_ | 05:42 | |
| openstackgerrit | Jenkins proposed a change to openstack/keystone: Imported Translations from Transifex https://review.openstack.org/83955 | 06:00 |
| *** saju_m has joined #openstack-keystone | 06:21 | |
| *** dstanek has joined #openstack-keystone | 06:27 | |
| *** dstanek has quit IRC | 06:31 | |
| *** flaper87|afk is now known as flaper87 | 06:50 | |
| openstackgerrit | Marek Denis proposed a change to openstack/python-keystoneclient: Add CRUD operations for Federated Protocols. https://review.openstack.org/83829 | 07:12 |
| *** marekd|away is now known as marekd | 07:13 | |
| *** jamielennox is now known as jamielennox|away | 07:27 | |
| *** leseb has joined #openstack-keystone | 07:28 | |
| *** gokrokve_ has quit IRC | 07:40 | |
| *** gokrokve has joined #openstack-keystone | 07:41 | |
| *** gokrokve has quit IRC | 07:45 | |
| *** andreaf has joined #openstack-keystone | 08:37 | |
| *** zhiyan_ is now known as zhiyan | 08:38 | |
| *** saju_m has quit IRC | 08:43 | |
| *** saju_m has joined #openstack-keystone | 08:56 | |
| openstackgerrit | Marek Denis proposed a change to openstack/python-keystoneclient: Add CRUD operations for Federated Protocols. https://review.openstack.org/83829 | 09:01 |
| *** bvandenh has quit IRC | 09:10 | |
| *** gokrokve has joined #openstack-keystone | 09:16 | |
| *** jaosorior has joined #openstack-keystone | 09:20 | |
| *** gokrokve has quit IRC | 09:21 | |
| *** chandankumar_ has joined #openstack-keystone | 09:25 | |
| *** zoresvit has joined #openstack-keystone | 09:25 | |
| *** zoresvit has quit IRC | 09:29 | |
| *** dstanek has joined #openstack-keystone | 09:30 | |
| openstackgerrit | Marek Denis proposed a change to openstack/keystone: List all missing/forbidden attributes in the request body. https://review.openstack.org/84389 | 09:31 |
| openstackgerrit | Marek Denis proposed a change to openstack/keystone: List all missing/forbidden attributes in the request body. https://review.openstack.org/84389 | 09:32 |
| *** dstanek has quit IRC | 09:34 | |
| *** morganfainberg is now known as morganfainberg_Z | 09:46 | |
| *** gokrokve has joined #openstack-keystone | 09:47 | |
| *** zoresvit has joined #openstack-keystone | 09:50 | |
| *** gokrokve has quit IRC | 09:52 | |
| *** chandankumar_ has quit IRC | 09:54 | |
| *** david-lyle has quit IRC | 09:55 | |
| marekd | bknudson: thought you could take a look at this patchset: https://review.openstack.org/#/c/84389/2 | 10:23 |
| *** leseb has quit IRC | 10:32 | |
| *** leseb has joined #openstack-keystone | 10:32 | |
| *** leseb has quit IRC | 10:37 | |
| *** gokrokve has joined #openstack-keystone | 10:48 | |
| *** gokrokve has quit IRC | 10:53 | |
| *** leseb has joined #openstack-keystone | 11:01 | |
| *** leseb has quit IRC | 11:05 | |
| *** saju_m has quit IRC | 11:44 | |
| *** gokrokve has joined #openstack-keystone | 11:47 | |
| *** gokrokve has quit IRC | 11:52 | |
| openstackgerrit | Jose Castro Leon proposed a change to openstack/keystone: Initial kerberos plugin implementation. https://review.openstack.org/74317 | 11:55 |
| *** saju_m has joined #openstack-keystone | 11:57 | |
| *** leseb has joined #openstack-keystone | 11:57 | |
| *** saju_m has quit IRC | 12:02 | |
| *** leseb has quit IRC | 12:10 | |
| *** leseb has joined #openstack-keystone | 12:11 | |
| *** leseb has quit IRC | 12:16 | |
| *** RockKuo has quit IRC | 12:18 | |
| *** saju_m has joined #openstack-keystone | 12:21 | |
| *** dims has quit IRC | 12:22 | |
| *** saju_m has quit IRC | 12:23 | |
| *** leseb has joined #openstack-keystone | 12:26 | |
| *** dstanek has joined #openstack-keystone | 12:32 | |
| *** dims_ has joined #openstack-keystone | 12:34 | |
| *** dstanek has quit IRC | 12:36 | |
| *** saju_m has joined #openstack-keystone | 12:40 | |
| *** gokrokve has joined #openstack-keystone | 12:47 | |
| *** zoresvit has quit IRC | 12:51 | |
| *** gokrokve has quit IRC | 12:52 | |
| *** browne has joined #openstack-keystone | 12:53 | |
| openstackgerrit | Florent Flament proposed a change to openstack/keystone: Sanitizes authentication methods received in requests. https://review.openstack.org/84425 | 12:56 |
| *** zoresvit has joined #openstack-keystone | 12:59 | |
| *** zoresvit has quit IRC | 13:02 | |
| *** lbragstad has joined #openstack-keystone | 13:07 | |
| openstackgerrit | Jose Castro Leon proposed a change to openstack/keystone: Initial kerberos plugin implementation. https://review.openstack.org/74317 | 13:07 |
| *** dstanek has joined #openstack-keystone | 13:07 | |
| *** saju_m has quit IRC | 13:15 | |
| marekd | lbragstad: around? | 13:16 |
| lbragstad | marekd: hey, what's up? | 13:16 |
| marekd | lbragstad: hey, wanted to add you as a reviewer but gerrit compained about your l-p account. Anyways, you were moving check_immutabe_params() from federation controllers to general V3Controllers and I thought you might want to take a look at this: https://review.openstack.org/#/c/84389/ :-) Feel free to add yourself as a reviewer :-) | 13:17 |
| lbragstad | marekd: sure thing! if you need to add me to thing you can use ldbragst@us.ibm.com | 13:18 |
| marekd | ahh, now it works! | 13:19 |
| marekd | lbragstad: I was trying your full name and got @gmail.com results only... | 13:19 |
| lbragstad | yeah, I tied a second acct to it and it doesn't exactly work right | 13:20 |
| lbragstad | this is good, before it only list the first attribute | 13:20 |
| marekd | lbragstad: yep, I think you discussed it with dolphm i think. | 13:20 |
| lbragstad | marekd: yeah, | 13:20 |
| marekd | lbragstad: ok, i think so too - may make some people lifes easier. | 13:21 |
| lbragstad | marekd: I agree, I was also working on using jsonschema to validate the request, but that was a little more involved. | 13:22 |
| lbragstad | I saw that Nova uses it when validating their V3 api | 13:22 |
| marekd | lbragstad: or Keystone when validating mapping rules. | 13:22 |
| marekd | lbragstad: do you have something already on gerrit/github? | 13:22 |
| lbragstad | not yet, I had a little more free time so I started stringing a bunch of commits together, but that was before my schedule was filled with other commitments. | 13:23 |
| marekd | lbragstad: Unserstand. | 13:23 |
| marekd | understand* | 13:24 |
| lbragstad | It was pretty cool though, | 13:24 |
| lbragstad | you essentially would add a schema for a resource type (like trusts) and the schema would enforce the parameters being passed in | 13:24 |
| *** ayoung has joined #openstack-keystone | 13:24 | |
| lbragstad | and it almost looked like the notifications wrapper. | 13:24 |
| marekd | lbragstad: yeah. | 13:25 |
| lbragstad | you just wrapped the method that needed validation | 13:25 |
| lbragstad | Nova had a pretty good implementation | 13:25 |
| * lbragstad digs for a link | 13:25 | |
| marekd | lbragstad: you were planning to bake the jsonschema template in the code or load it dynamically from external, configurable files? | 13:25 |
| lbragstad | marekd: when I originally just hacked it together it was baked in the code, and following the identify api spec | 13:26 |
| lbragstad | but there could be other ways to do it too. | 13:26 |
| marekd | aha | 13:26 |
| lbragstad | marekd: https://github.com/openstack/nova/blob/master/nova/api/openstack/compute/plugins/v3/admin_password.py#L40 | 13:28 |
| lbragstad | marekd: and this would be the schema enforced https://github.com/openstack/nova/blob/master/nova/api/openstack/compute/schemas/v3/admin_password.py | 13:28 |
| *** saju_m has joined #openstack-keystone | 13:29 | |
| marekd | lbragstad: nice. | 13:36 |
| *** joesavak has joined #openstack-keystone | 13:37 | |
| *** nkinder has quit IRC | 13:40 | |
| *** gokrokve has joined #openstack-keystone | 13:47 | |
| lbragstad | marekd: yeah its kinda cool, would've been handy for some of the api validation work bknudson was doing the endpoints (Is the 'enabled' field actaully a boolean?)... | 13:47 |
| bknudson | we need the api validation on all the resources and to not be trying to fix it piecemeal | 13:48 |
| bknudson | they're all incorrect at this point | 13:48 |
| *** gokrokve_ has joined #openstack-keystone | 13:49 | |
| marekd | bknudson: referring to lbragstad and my discussion now? | 13:49 |
| bknudson | marekd: yes | 13:50 |
| marekd | bknudson: hmmm, so what would you suggest? | 13:50 |
| bknudson | we should do what nova did. | 13:51 |
| lbragstad | the jsonschema validation is pretty robust | 13:51 |
| *** gokrokve has quit IRC | 13:52 | |
| lbragstad | and, it's pretty simple to implement on new resources... So say someone adds a new extention to keystone. They have to be sure to add the schema the enforces the Create and Update (possibly Read), API requests, and then wrap those methods in their extention | 13:53 |
| *** gokrokve_ has quit IRC | 13:54 | |
| bknudson | DELETE statement on table 'federation_protocol' expected to delete 1 row(s); 0 were matched. Please set confirm_deleted_rows=False within the mapper configuration to prevent this warning. | 13:59 |
| bknudson | Ever seen that? | 13:59 |
| marekd | nope, where did you get that? | 14:00 |
| *** stevemar has joined #openstack-keystone | 14:01 | |
| bknudson | was running the tests. | 14:01 |
| bknudson | it came from several tables | 14:01 |
| marekd | bknudson: all federation related? | 14:02 |
| bknudson | no, they weren't all federation related | 14:02 |
| *** topol has joined #openstack-keystone | 14:06 | |
| marekd | bknudson: I assume you are going to try testsuite again to see if it will happen again... | 14:06 |
| openstackgerrit | Ilya Pekelny proposed a change to openstack/keystone: Explicit foreign key indexes. https://review.openstack.org/84444 | 14:09 |
| openstackgerrit | Ilya Pekelny proposed a change to openstack/keystone: Compatible server default value in the models. https://review.openstack.org/84445 | 14:09 |
| openstackgerrit | Ilya Pekelny proposed a change to openstack/keystone: Corresponding `nullable` value. https://review.openstack.org/84446 | 14:09 |
| openstackgerrit | Ilya Pekelny proposed a change to openstack/keystone: federation_protocol unique constraint https://review.openstack.org/84447 | 14:09 |
| openstackgerrit | Ilya Pekelny proposed a change to openstack/keystone: Make it possible to use multiprocess file locks https://review.openstack.org/84448 | 14:09 |
| openstackgerrit | Ilya Pekelny proposed a change to openstack/keystone: Sync test_migrations https://review.openstack.org/80618 | 14:09 |
| openstackgerrit | Ilya Pekelny proposed a change to openstack/keystone: Comparision of database models and migrations. https://review.openstack.org/80630 | 14:09 |
| openstackgerrit | Ilya Pekelny proposed a change to openstack/keystone: Sync test_migrations https://review.openstack.org/80618 | 14:12 |
| openstackgerrit | Ilya Pekelny proposed a change to openstack/keystone: Missed unique constraint https://review.openstack.org/84447 | 14:12 |
| openstackgerrit | Ilya Pekelny proposed a change to openstack/keystone: Make it possible to use multiprocess file locks https://review.openstack.org/84448 | 14:12 |
| openstackgerrit | Ilya Pekelny proposed a change to openstack/keystone: Comparision of database models and migrations. https://review.openstack.org/80630 | 14:12 |
| *** saju_m has quit IRC | 14:14 | |
| openstackgerrit | Raildo Mascena de Sousa Filho proposed a change to openstack/keystone: Filter User by project https://review.openstack.org/84136 | 14:16 |
| *** Chicago has quit IRC | 14:16 | |
| marekd | stevemar: o/ Do you have some reference implementations for oauth (or similar) for the cli? | 14:17 |
| *** kun_huang has joined #openstack-keystone | 14:20 | |
| *** sneezewort has joined #openstack-keystone | 14:20 | |
| openstackgerrit | Jose Castro Leon proposed a change to openstack/python-keystoneclient: Initial kerberos plugin implementation. https://review.openstack.org/74974 | 14:26 |
| openstackgerrit | Ilya Pekelny proposed a change to openstack/keystone: Comparision of database models and migrations. https://review.openstack.org/80630 | 14:26 |
| *** nkinder has joined #openstack-keystone | 14:30 | |
| *** lbragstad has quit IRC | 14:32 | |
| *** lbragstad has joined #openstack-keystone | 14:33 | |
| *** david-lyle has joined #openstack-keystone | 14:35 | |
| *** kun_huang has quit IRC | 14:39 | |
| *** lbragstad has quit IRC | 14:40 | |
| *** kun_huang has joined #openstack-keystone | 14:41 | |
| dolphm | anyone have time to try and reproduce this today? https://bugs.launchpad.net/keystone/+bug/1279000/comments/12 | 14:42 |
| uvirtbot | Launchpad bug 1279000 in glance "db migrate script to set charset=utf8 for all tables" [Medium,In progress] | 14:42 |
| dolphm | i'm guessing ubuntu is defaulting mysql to latin1? | 14:42 |
| *** zoresvit has joined #openstack-keystone | 14:43 | |
| dolphm | we might need an exception in oslo.db for migrate_version, because i'm not sure we care about the charset of that table | 14:45 |
| *** gokrokve has joined #openstack-keystone | 14:47 | |
| bknudson | do we use oslo.db? | 14:49 |
| *** gokrokve has quit IRC | 14:51 | |
| *** gokrokve has joined #openstack-keystone | 14:53 | |
| *** ayoung has quit IRC | 14:56 | |
| bknudson | it's not in keystone requirements.txt | 14:56 |
| *** thedodd has joined #openstack-keystone | 14:56 | |
| *** lbragstad has joined #openstack-keystone | 14:58 | |
| *** jroovers|afk has joined #openstack-keystone | 15:00 | |
| jroovers|afk | hi all! | 15:00 |
| *** jroovers|afk is now known as jroovers | 15:00 | |
| jroovers | I've been looking at https://blueprints.launchpad.net/keystone/+spec/identity-providers | 15:00 |
| jroovers | wondering whether there is a wiki or something that has some instructions on how setup (in e.g. devstack) | 15:01 |
| *** stevemar has quit IRC | 15:05 | |
| *** stevemar has joined #openstack-keystone | 15:05 | |
| *** kun_huang has quit IRC | 15:08 | |
| *** gordc has joined #openstack-keystone | 15:08 | |
| *** ayoung has joined #openstack-keystone | 15:09 | |
| *** kun_huang has joined #openstack-keystone | 15:11 | |
| openstackgerrit | Marek Denis proposed a change to openstack/python-keystoneclient: Add CRUD operations for Federated Protocols. https://review.openstack.org/83829 | 15:12 |
| *** chandankumar_ has joined #openstack-keystone | 15:12 | |
| *** browne has quit IRC | 15:13 | |
| *** RockKuo has joined #openstack-keystone | 15:18 | |
| *** stevemar has quit IRC | 15:21 | |
| *** stevemar has joined #openstack-keystone | 15:21 | |
| *** dstanek has quit IRC | 15:30 | |
| openstackgerrit | Marek Denis proposed a change to openstack/python-keystoneclient: Add CRUD operations for Fedration Mapping Rules. https://review.openstack.org/83742 | 15:38 |
| openstackgerrit | Florent Flament proposed a change to openstack/keystone: Sanitizes authentication methods received in requests. https://review.openstack.org/84425 | 15:45 |
| *** browne has joined #openstack-keystone | 15:45 | |
| *** gyee has joined #openstack-keystone | 15:49 | |
| *** leseb has quit IRC | 15:51 | |
| *** leseb has joined #openstack-keystone | 15:51 | |
| *** jsavak has joined #openstack-keystone | 16:01 | |
| openstackgerrit | Marek Denis proposed a change to openstack/python-keystoneclient: Add CRUD operations for Federated Protocols. https://review.openstack.org/83829 | 16:02 |
| *** joesavak has quit IRC | 16:04 | |
| *** jaosorior has quit IRC | 16:10 | |
| *** marekd is now known as marekd|away | 16:14 | |
| *** RockKuo has quit IRC | 16:17 | |
| *** gordc has left #openstack-keystone | 16:27 | |
| *** jroovers has quit IRC | 16:29 | |
| *** dtroyer has quit IRC | 16:29 | |
| *** stevemar2 has joined #openstack-keystone | 16:30 | |
| *** ayoung has quit IRC | 16:30 | |
| *** marcoemorais has joined #openstack-keystone | 16:30 | |
| *** dtroyer has joined #openstack-keystone | 16:30 | |
| *** stevemar has quit IRC | 16:33 | |
| *** leseb has quit IRC | 16:41 | |
| *** leseb has joined #openstack-keystone | 16:41 | |
| *** ayoung has joined #openstack-keystone | 16:45 | |
| *** leseb has quit IRC | 16:45 | |
| *** jordant has quit IRC | 16:48 | |
| *** dstanek has joined #openstack-keystone | 16:50 | |
| *** henrynash has joined #openstack-keystone | 17:01 | |
| *** afaranha has joined #openstack-keystone | 17:03 | |
| afaranha | Hello, I have a question about keystone client. | 17:05 |
| afaranha | I want to list all the projects that a user participates but I don't know which method I call to do this. In the API I only use this http://10.1.0.42:5000/v3/users/<user-id>/projects and get all the projects, is there a way to get this using the client. THank you? | 17:05 |
| dolphm | afaranha: i believe it's c.projects.list(user=user_id) | 17:11 |
| *** harlowja_away is now known as harlowja | 17:14 | |
| *** kun_huang has quit IRC | 17:15 | |
| *** david-lyle is now known as david-lyle_afk | 17:17 | |
| afaranha | dolphm: I think it's it, thank you | 17:17 |
| *** browne1 has joined #openstack-keystone | 17:20 | |
| dolphm | bknudson: i just meant keystone.openstack.common.db | 17:20 |
| *** browne has quit IRC | 17:22 | |
| *** browne has joined #openstack-keystone | 17:23 | |
| *** browne1 has quit IRC | 17:26 | |
| *** zhiyan is now known as zhiyan_ | 17:27 | |
| *** thedodd has quit IRC | 17:29 | |
| *** joesavak has joined #openstack-keystone | 17:29 | |
| *** morganfainberg_Z is now known as morganfainberg | 17:31 | |
| *** jsavak has quit IRC | 17:31 | |
| openstackgerrit | Pablo Fernando Cargnelutti proposed a change to openstack/keystone: Moving delete_user and delete_group calls to IdentityManager https://review.openstack.org/80368 | 17:34 |
| *** henrynash has quit IRC | 17:41 | |
| *** jsavak has joined #openstack-keystone | 17:44 | |
| ayoung | dolphm, so, I was looking at running Keystone in the same HTTPD instance as Horizon (Devstack) and I came across an issue which lead to this: https://blueprints.launchpad.net/horizon/+spec/share-the-web-server | 17:44 |
| *** chandankumar_ has quit IRC | 17:46 | |
| ayoung | morganfainberg, that probably should have been for you ^^ | 17:47 |
| bknudson | ayoung: on another project I worked on we had a redirect from / to the GUI -- e.g., redirect / to dashboard/ | 17:47 |
| ayoung | bknudson, I accounted for that | 17:47 |
| *** joesavak has quit IRC | 17:47 | |
| ayoung | its pretty easy: standard HTTPD install from RPMS puts in a welcome.conf that you modify and redirect / to /dashboard | 17:48 |
| bknudson | ayoung: we did - RewriteEngine On -- RewriteRule ^/$ https://%{SERVER_NAME}/dashboard/ [R=permanent,L] -- in the .conf file | 17:50 |
| ayoung | bknudson, also works | 17:50 |
| ayoung | bknudson, that is the joy of apache. | 17:50 |
| morganfainberg | ayoung, hi | 17:51 |
| *** amcrn has joined #openstack-keystone | 17:51 | |
| morganfainberg | ayoung, yeah i agree on that | 17:51 |
| ayoung | morganfainberg, I think I have the answer to your "how do we run horizon and keystone in the same web server" | 17:51 |
| ayoung | read up | 17:51 |
| morganfainberg | ayoung, the message to dolphm? | 17:52 |
| morganfainberg | ayoung, and the bp? | 17:52 |
| ayoung | yep | 17:52 |
| morganfainberg | yeah that was what i was agreeing with | 17:52 |
| ayoung | morganfainberg, I'm not there 100% yet, as I am working through SSL ification | 17:52 |
| morganfainberg | ayoung, yeah that is the "fun" part | 17:52 |
| morganfainberg | ayoung, but personally i like that approach | 17:53 |
| morganfainberg | dolphm, really ubuntu is installing the default as latin1? | 17:53 |
| ayoung | morganfainberg, I need to get ascheme in place for each part of openstack having its own <Location> inside the config | 17:54 |
| dolphm | morganfainberg: that's just my guess | 17:54 |
| morganfainberg | dolphm, i can stand up a clean 12.04 instance in about 3 minutes and tell you | 17:54 |
| dolphm | morganfainberg: appreciated :) | 17:54 |
| morganfainberg | well, it's a slightly older base of 12.04 but i'll apt update everything before installing mysql and see what is going on | 17:55 |
| morganfainberg | shouldn't change anything | 17:55 |
| morganfainberg | vagrant is awesome for this type of testing | 17:56 |
| *** jamielennox|away is now known as jamielennox | 18:02 | |
| morganfainberg | dolphm, looks like ubuntu doesn't override the characterset, and yes the default is latin1. boo | 18:04 |
| *** jaosorior has joined #openstack-keystone | 18:11 | |
| dolphm | morganfainberg: is there any reason why the charset for migrate_version would ever matter? | 18:11 |
| morganfainberg | dolphm, sql-a migrate bitched at me at one point about non-utf8 lets chat post meeeting | 18:11 |
| dolphm | morganfainberg: ack | 18:13 |
| *** richm has joined #openstack-keystone | 18:20 | |
| openstackgerrit | Richard Megginson proposed a change to openstack/keystone: better handling for empty/None ldap values https://review.openstack.org/76002 | 18:29 |
| *** jroovers has joined #openstack-keystone | 18:42 | |
| openstackgerrit | A change was merged to openstack/keystone: Remove _delete_tokens function from federation controller https://review.openstack.org/83169 | 18:47 |
| *** thedodd has joined #openstack-keystone | 18:48 | |
| *** dstanek has quit IRC | 18:55 | |
| dolphm | topol: ayoung: yeah, nova is the obvious goal, but it might be nice to use another smaller project as a test case first | 19:01 |
| dolphm | like a stackforge project | 19:01 |
| gyee | jamielennox, we need to sync up on helping other projects to integrate with keystoneclient. I am doing the same thing right now. Just went to make sure we don't duplicate the work. | 19:01 |
| jamielennox | dolphm: also want to have a talk about https://review.openstack.org/#/c/81973/ | 19:01 |
| jamielennox | gyee: i'm mostly looking at other clients right now | 19:01 |
| dolphm | gyee: jamielennox: keep me in the loop! | 19:01 |
| ayoung | headed home...back online in a few | 19:02 |
| gyee | dolphm, sure I'll add you as reviewer once I have the patch up | 19:02 |
| *** ayoung has quit IRC | 19:02 | |
| jamielennox | trying to iron out the changes between the various service catalog implementations and such | 19:02 |
| dolphm | gyee: ping me directly, my review queue in gerrit is too big | 19:02 |
| gyee | k :) | 19:03 |
| dolphm | jamielennox: now or at the summit? :) | 19:03 |
| jamielennox | umm, don't know if it matters - it's not particularly urgent i guess | 19:03 |
| topol | dolphm, most important is we need to provide enough support (to Nova or whomever) so the transition is painless. then the others can follow the path that was blazed | 19:03 |
| gyee | topol, absolutely, otherwise, we won't make it out of the parking lot! | 19:04 |
| dolphm | topol: ++ | 19:07 |
| dolphm | topol: that's literally my highest priority for juno (atm?) | 19:07 |
| dolphm | anyone know/remember what happened to our coverage job in august? https://jenkins.openstack.org/view/All/job/keystone-coverage/1325/console | 19:07 |
| dolphm | did we just stop the job because it wasn't useful? ^ | 19:08 |
| *** gokrokve_ has joined #openstack-keystone | 19:10 | |
| *** gokrokve has quit IRC | 19:14 | |
| *** gyee has quit IRC | 19:14 | |
| *** gokrokve_ has quit IRC | 19:20 | |
| *** leseb has joined #openstack-keystone | 19:21 | |
| *** dstanek has joined #openstack-keystone | 19:32 | |
| *** gokrokve has joined #openstack-keystone | 19:46 | |
| *** jogo has left #openstack-keystone | 19:46 | |
| *** florentflament has quit IRC | 19:51 | |
| dolphm | i had this one mis-tagged as icehouse-backport-potential, but it's an icehouse-rc-potential https://review.openstack.org/#/c/84425/ | 19:55 |
| *** marcoemorais has quit IRC | 19:59 | |
| *** marcoemorais has joined #openstack-keystone | 19:59 | |
| *** marcoemorais has quit IRC | 19:59 | |
| *** marcoemorais has joined #openstack-keystone | 20:00 | |
| bknudson | dolphm: we get coverage in post -- http://logs.openstack.org/b8/b803fe85ba53a9c666b9badd0923502fcb5c3b0e/post/keystone-coverage/07cc472/cover/ | 20:00 |
| dolphm | bknudson: ah perfect -- i've seen this fairly recently but couldn't recall if it was on openstack.org or not -- thanks! | 20:01 |
| *** marcoemorais1 has joined #openstack-keystone | 20:02 | |
| *** marcoemorais has quit IRC | 20:04 | |
| morganfainberg | dolphm, so i haven't tried running migrations w/o setting ?charset=utf8 directly | 20:05 |
| morganfainberg | dolphm, i'll try that in a moment (w/o the charset on the connection string) | 20:06 |
| *** ayoung has joined #openstack-keystone | 20:07 | |
| ayoung | dstanek, would you expect https://review.openstack.org/#/c/71181/ to pass now? I haven't looked at your last change | 20:21 |
| jamielennox | dolphm: can/should we have another repo for auth plugins? | 20:22 |
| dstanek | ayoung: not sure, it passed all unit test, but appeared to fail on all other tests | 20:22 |
| ayoung | yeah, grenade, something about tempest | 20:23 |
| ayoung | dstanek, not sure that just bringing it back and rebasing will trigger a jenkins run | 20:23 |
| jamielennox | for jose's kerberos plugin and new things like that, keystoneclient has pluggable auth, keystone has more or less pluggable auth, can we have a keystone-kerberos package that contains both sides of that? | 20:23 |
| *** florentflament has joined #openstack-keystone | 20:24 | |
| *** gyee has joined #openstack-keystone | 20:24 | |
| dstanek | ayoung: actually this may have been the failure on at least one of the test runs: [ERROR] ./grenade.sh:275 Failure in upgrade-tempest | 20:24 |
| ayoung | dstanek, saw that, but not looked at the details | 20:24 |
| dstanek | ayoung: maybe there way an independent issue that's gone now | 20:24 |
| ayoung | yeah, that is what I am hoping | 20:25 |
| *** leseb has quit IRC | 20:27 | |
| *** leseb has joined #openstack-keystone | 20:27 | |
| dolphm | "nice work to the whole keystone team" -russelb | 20:27 |
| *** leseb has quit IRC | 20:32 | |
| bknudson | dolphm: they're going to let us stick around? | 20:32 |
| morganfainberg | bknudson, heh | 20:34 |
| morganfainberg | pip install -e . | 20:35 |
| morganfainberg | damn it | 20:35 |
| morganfainberg | interesting. | 20:36 |
| dolphm | bknudson: for now :) | 20:37 |
| morganfainberg | dolphm, pip freeze shows jsonschema==2.3.0 installed | 20:38 |
| dstanek | bknudson: why use patch object instead of just patch? | 20:38 |
| morganfainberg | dolphm, keystone-manage raises pkg_resources.DistributionNotFound: jsonschema>=2.0.0,<3.0.0 | 20:38 |
| morganfainberg | dolphm, clean precise install. | 20:38 |
| * morganfainberg debugs further | 20:38 | |
| bknudson | dstanek: I'd expect the string to be shorter since it'll mostly be in the import | 20:39 |
| morganfainberg | ooooh | 20:39 |
| morganfainberg | somehow repoze.lru isn't installed | 20:41 |
| dstanek | bknudson: in most of the cases where i used patch i got rid of the import depencency - your saying you'd rather see that added back in? | 20:41 |
| morganfainberg | which seems to be a requirement for routes.mapper? | 20:41 |
| morganfainberg | bknudson, dolphm, ^ | 20:41 |
| morganfainberg | any ideas on why repose.lru would be missing? | 20:42 |
| morganfainberg | besides maybe broken deps on routes package | 20:42 |
| bknudson | dstanek: I'd rather the import was there if the module is using it. | 20:42 |
| morganfainberg | which means we might want/need to get repoze.lru in global reqs so this isn't broken? | 20:42 |
| bknudson | dstanek: I get help from my editor for symbols... with strings I wouldn't get any help | 20:43 |
| *** jroovers has quit IRC | 20:43 | |
| dstanek | bknudson: when you say using it do you mean directly in the test code or somewhere under the hood? | 20:43 |
| dstanek | ah, i see - i can add that back in for you. if the code i'm patching isn't used directly by the test i normally don't import it just to patch it | 20:44 |
| bknudson | dstanek: the test is going to require that the module can be imported, isn't it? | 20:44 |
| *** dims_ has quit IRC | 20:44 | |
| *** stevemar2 is now known as stevemar | 20:44 | |
| dstanek | bknudson: in many cases the test doesn't directly use the module - some the test is using uses it | 20:45 |
| dstanek | something* | 20:45 |
| dolphm | morganfainberg: packaging issue? | 20:45 |
| dolphm | morganfainberg: ... me is catching up ... | 20:45 |
| bknudson | dstanek: is there any situation where you'd do a patch.object? | 20:45 |
| bknudson | I always just thought it was easier, and made sure that the package was imported. | 20:46 |
| morganfainberg | dolphm, this is an issue with pip -U | 20:46 |
| morganfainberg | dolphm, it doesn't update repoze in all cases when installing mapper | 20:46 |
| morganfainberg | dolphm, https://bugs.launchpad.net/cinder/+bug/1270602 this is the exact issue | 20:46 |
| uvirtbot | Launchpad bug 1270602 in cinder "repoze.lru not installed in test venv" [Undecided,Invalid] | 20:46 |
| dstanek | bknudson: with imports required at the top of modules the thing being patched would be imported already - in the past i've rarely used patch.object - but i can switch that if it makes it easier for the ide | 20:47 |
| morganfainberg | dolphm, in theory, the best way to solve this would be to shove that in our requirements file. | 20:47 |
| morganfainberg | dolphm, but eh. | 20:47 |
| morganfainberg | dolphm, but i'm still unable to run keystone-manage | 20:48 |
| morganfainberg | getting jsonschema not found | 20:48 |
| morganfainberg | dolphm, ok interesting. can't use -e in some cases with pip ... moving on | 20:50 |
| morganfainberg | dolphm, 2014-04-01 13:50:59.122 19795 CRITICAL keystone [-] ValueError: Tables "migrate_version" have non utf8 collation, please make sure all tables are CHARSET=utf8 | 20:51 |
| morganfainberg | dolphm, yep can't migrate w/o the table being utf8 | 20:51 |
| bknudson | morganfainberg: where is that raised from? | 20:51 |
| morganfainberg | bknudson, keystone-manage --config-file ./etc/keystone.conf.sample db_sync | 20:52 |
| morganfainberg | bknudson, where the sample config was modified to use local mysql precise clean install | 20:52 |
| morganfainberg | bknudson, which defaults to latin1 table charsets | 20:52 |
| bknudson | http://git.openstack.org/cgit/openstack/keystone/tree/keystone/openstack/common/db/sqlalchemy/migration.py#n200 | 20:52 |
| morganfainberg | yep | 20:53 |
| morganfainberg | and sql-a migrate doesn't explicitly set utf8 | 20:53 |
| bknudson | but it's only the one table | 20:53 |
| morganfainberg | so the migration_version table is latin1 | 20:53 |
| morganfainberg | yep. | 20:53 |
| bknudson | morganfainberg: but your tables are actually migrated? | 20:54 |
| morganfainberg | which means we can't migrate if the charset isn't utf8 explicitly in the my.cnf or on the conneciton stirng | 20:54 |
| bknudson | The schema should be ok? | 20:54 |
| *** leseb has joined #openstack-keystone | 20:54 | |
| morganfainberg | bknudson, http://pasteraw.com/tqkqhinj78b7c7d4lkmb76pep2c4dhd | 20:54 |
| morganfainberg | bknudson, nope | 20:54 |
| morganfainberg | bknudson, it bails before making any tables | 20:54 |
| *** marcoemorais1 has quit IRC | 20:55 | |
| morganfainberg | bknudson, http://pasteraw.com/5epv3qgcya26msrw7b2hzbb31dr0bln | 20:55 |
| *** florentflament has quit IRC | 20:55 | |
| bknudson | I see... it checks first | 20:55 |
| morganfainberg | yep | 20:55 |
| bknudson | but not afterwards. | 20:55 |
| *** marcoemorais has joined #openstack-keystone | 20:55 | |
| *** marcoemorais has quit IRC | 20:55 | |
| *** marcoemorais has joined #openstack-keystone | 20:56 | |
| *** marcoemorais has quit IRC | 20:56 | |
| bknudson | morganfainberg: my opinion is that the migrate_version table should be ignored. | 20:56 |
| morganfainberg | bknudson, i agree | 20:56 |
| bknudson | in the sanity check | 20:56 |
| *** marcoemorais has joined #openstack-keystone | 20:56 | |
| morganfainberg | bknudson, it is a SQLA migrate table, we shouldn't care what the charset there is | 20:57 |
| morganfainberg | bknudson, it's not something we control. | 20:57 |
| dolphm | morganfainberg: ooh, what is ubuntu using for the connection string?? | 20:58 |
| morganfainberg | bknudson, want me to go poke the oslo guys and see about a concurrent change. also is this an RC2 issue? cc dolphm | 20:58 |
| dolphm | morganfainberg: maybe that's the easiest fix | 20:58 |
| morganfainberg | dolphm, i use ?charset=utf8 in all my deployments | 20:58 |
| morganfainberg | dolphm, that solves it. | 20:58 |
| morganfainberg | or ... i think it does | 20:58 |
| * morganfainberg checks | 20:58 | |
| dolphm | morganfainberg: it should | 20:58 |
| morganfainberg | dolphm, nope | 20:59 |
| morganfainberg | dolphm, this looks like it requires a my.cnf change | 20:59 |
| morganfainberg | in the[mysqld] section | 20:59 |
| morganfainberg | dolphm, ubuntu uses the mysql default charset of latin1 in the default install. | 21:00 |
| *** david-lyle_afk is now known as david-lyle | 21:01 | |
| *** henrynash has joined #openstack-keystone | 21:05 | |
| *** marcoemorais has quit IRC | 21:08 | |
| *** marcoemorais has joined #openstack-keystone | 21:08 | |
| openstackgerrit | David Stanek proposed a change to openstack/keystone: Cleanup of test_cert_setup tests https://review.openstack.org/84550 | 21:12 |
| bknudson | morganfainberg: how do you create the db? | 21:12 |
| morganfainberg | bknudson, hm... | 21:12 |
| bknudson | morganfainberg: http://git.openstack.org/cgit/openstack-dev/devstack/tree/lib/databases/mysql#n42 | 21:12 |
| morganfainberg | bknudson, hmm. | 21:13 |
| morganfainberg | bknudson, to be fair that is just as bad as needing to do a my.cnf change | 21:13 |
| morganfainberg | bknudson, so yeah that fixes it... this should really be a non-issue if we are not enforcing this (we make all our tables utf8 explicitly everywhere else) | 21:17 |
| morganfainberg | erm if we are enforcing this. | 21:17 |
| openstackgerrit | David Stanek proposed a change to openstack/keystone: Removes useless wrapper from manager base class https://review.openstack.org/84553 | 21:19 |
| bknudson | morganfainberg: is there a way to convert the table to utf8? | 21:19 |
| morganfainberg | bknudson, sure. it's an alter command | 21:19 |
| bknudson | morganfainberg: is this an upgrade or a new install? | 21:19 |
| morganfainberg | bknudson, new install. but this is a bug report | 21:20 |
| morganfainberg | bknudson, not my personal install | 21:20 |
| morganfainberg | bknudson, i was just duplicating it | 21:20 |
| morganfainberg | bknudson, https://bugs.launchpad.net/keystone/+bug/1279000/comments/12 | 21:20 |
| uvirtbot | Launchpad bug 1279000 in oslo "db migrate script to set charset=utf8 for all tables" [High,Fix committed] | 21:20 |
| bknudson | morganfainberg: on a new install, I don't see any problem with asking them to create their database with utf8. | 21:22 |
| dstanek | anyone here good with debian packaging? | 21:23 |
| morganfainberg | bknudson, that is in the same category of saying "go change my.cnf to make utf8 the default" | 21:23 |
| morganfainberg | bknudson, it's not well documented and we shouldn't error because SQLA-Migrate does something different than anything else | 21:24 |
| bknudson | morganfainberg: a better error message would be useful. | 21:24 |
| morganfainberg | bknudson, ++ that too. | 21:24 |
| bknudson | morganfainberg: I'm still a little worried about the upgrade case... | 21:24 |
| morganfainberg | bknudson, going to raise this at the release meeting as well in a moment | 21:24 |
| morganfainberg | bknudson, it might be a simple document it, it might be a fix the oslo code | 21:24 |
| morganfainberg | it might be something else | 21:24 |
| bknudson | morganfainberg: seems like you'd be able to create havana schema and wouldn't be able to upgrade | 21:26 |
| morganfainberg | bknudson, shouldn't be an issue | 21:26 |
| morganfainberg | bknudson, migration 004 should fix all tables iirc | 21:26 |
| morganfainberg | for us at least | 21:26 |
| bknudson | migration 4 was havana? | 21:26 |
| morganfainberg | other projects unsure | 21:26 |
| morganfainberg | no, we fixed this issue back when we fixed all other tables | 21:27 |
| morganfainberg | we migrate from 0 though. vs a squashed migration like nova | 21:27 |
| bknudson | ok, so havana schema would have the migrate table utf8 | 21:28 |
| morganfainberg | bknudson, currently yes | 21:28 |
| morganfainberg | bknudson, i think | 21:30 |
| morganfainberg | bknudson, i'm not finding it though.... uhoh | 21:30 |
| *** henrynash has quit IRC | 21:31 | |
| bknudson | morganfainberg: http://git.openstack.org/cgit/openstack/keystone/tree/keystone/common/sql/migrate_repo/versions/005_set_utf8_character_set.py#n24 ? | 21:31 |
| morganfainberg | huh. | 21:31 |
| morganfainberg | i'm not seeing the migrate_version table in there | 21:31 |
| *** jaosorior has quit IRC | 21:40 | |
| openstackgerrit | A change was merged to openstack/python-keystoneclient: Replace auth fragements with identity_uri https://review.openstack.org/77491 | 21:40 |
| openstackgerrit | A change was merged to openstack/python-keystoneclient: Rename request_uri to identity_uri https://review.openstack.org/77748 | 21:40 |
| openstackgerrit | A change was merged to openstack/keystone: support conventional domain name with one or more dot https://review.openstack.org/79829 | 21:44 |
| openstackgerrit | A change was merged to openstack/keystone: Fix create_region_with_id raise 500 Error bug https://review.openstack.org/75816 | 21:44 |
| *** lbragstad has quit IRC | 21:45 | |
| *** topol has quit IRC | 21:49 | |
| *** stevemar has quit IRC | 21:49 | |
| *** jsavak has quit IRC | 21:50 | |
| *** dstanek has quit IRC | 21:52 | |
| *** openstackgerrit has quit IRC | 21:54 | |
| *** browne has quit IRC | 21:54 | |
| *** dstanek has joined #openstack-keystone | 22:01 | |
| *** dims_ has joined #openstack-keystone | 22:06 | |
| *** dstanek has quit IRC | 22:14 | |
| *** leseb has quit IRC | 22:14 | |
| *** leseb has joined #openstack-keystone | 22:15 | |
| *** dims_ has quit IRC | 22:18 | |
| *** leseb has quit IRC | 22:19 | |
| *** dims_ has joined #openstack-keystone | 22:36 | |
| *** nkinder has quit IRC | 22:40 | |
| *** dstanek has joined #openstack-keystone | 22:40 | |
| *** thedodd has quit IRC | 22:43 | |
| *** richm has quit IRC | 22:50 | |
| *** sneezewort has quit IRC | 23:00 | |
| *** gokrokve has quit IRC | 23:12 | |
| *** david-lyle has quit IRC | 23:20 | |
| *** nkinder has joined #openstack-keystone | 23:37 | |
| *** dstanek has quit IRC | 23:46 | |
| *** flaper87 is now known as flaper87|afk | 23:57 | |
| *** RockKuo has joined #openstack-keystone | 23:59 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!