*** marcoemorais has quit IRC | 00:01 | |
*** marcoemorais has joined #openstack-keystone | 00:02 | |
*** gokrokve has quit IRC | 00:14 | |
*** gokrokve has joined #openstack-keystone | 00:14 | |
*** openstackgerrit has quit IRC | 00:16 | |
*** gabriel-bezerra has quit IRC | 00:16 | |
*** openstackgerrit has joined #openstack-keystone | 00:17 | |
*** gabriel-bezerra has joined #openstack-keystone | 00:17 | |
morganfainberg | stevemar, np | 00:18 |
---|---|---|
morganfainberg | bknudson, failing because of keystone? | 00:18 |
morganfainberg | bknudson, we did convert postgres back to eventlet keystone for full coverage | 00:19 |
*** gokrokve has quit IRC | 00:19 | |
*** gabriel-bezerra has quit IRC | 00:23 | |
*** gabriel-bezerra has joined #openstack-keystone | 00:23 | |
*** xianghui has joined #openstack-keystone | 00:32 | |
*** markwash_ has joined #openstack-keystone | 00:47 | |
*** markwash has quit IRC | 00:50 | |
bknudson | morganfainberg: we'll see if https://review.openstack.org/#/c/111116/ passes jenkins, because everything else is failing | 00:54 |
bknudson | I don't see how eventlet / httpd would make a difference | 00:54 |
*** morganfainberg is now known as morganfainberg_Z | 00:55 | |
*** thedodd has quit IRC | 01:03 | |
*** ayoung has joined #openstack-keystone | 01:04 | |
*** marcoemorais has quit IRC | 01:06 | |
*** gokrokve has joined #openstack-keystone | 01:06 | |
openstackgerrit | Bob Thyne proposed a change to openstack/keystone: Refactor existing endpoint filter tests https://review.openstack.org/111130 | 01:25 |
*** gokrokve has quit IRC | 01:27 | |
*** gokrokve has joined #openstack-keystone | 01:28 | |
*** gokrokve has quit IRC | 01:33 | |
*** mitz_ has joined #openstack-keystone | 01:34 | |
openstackgerrit | Bob Thyne proposed a change to openstack/keystone: Refactor existing endpoint filter tests https://review.openstack.org/111130 | 01:36 |
*** mitz has quit IRC | 01:36 | |
*** gokrokve has joined #openstack-keystone | 01:41 | |
*** thedodd has joined #openstack-keystone | 01:43 | |
*** markwash_ has quit IRC | 02:01 | |
*** diegows has quit IRC | 02:06 | |
jamielennox | have we seen this coming up in tempest? | 02:07 |
jamielennox | 2014-08-01 01:22:27.396 | IdentityError: Got identity error | 02:07 |
jamielennox | 2014-08-01 01:22:27.396 | Details: Unexpected status code 404 | 02:07 |
*** gokrokve_ has joined #openstack-keystone | 02:09 | |
*** gokrokve has quit IRC | 02:13 | |
openstackgerrit | Bob Thyne proposed a change to openstack/keystone: Refactor existing endpoint filter tests https://review.openstack.org/111130 | 02:21 |
*** topol has joined #openstack-keystone | 02:23 | |
*** jamielennox is now known as jamielennox|away | 02:24 | |
*** yasukun has joined #openstack-keystone | 02:25 | |
yasukun | Hello forks, could you tell me how change length of keystone token? | 02:27 |
*** thedodd has quit IRC | 02:30 | |
openstackgerrit | Marek Denis proposed a change to openstack/keystone-specs: Hierarchical Multitenacy https://review.openstack.org/101017 | 02:39 |
openstackgerrit | Bob Thyne proposed a change to openstack/keystone: Refactor existing endpoint filter tests https://review.openstack.org/111130 | 02:44 |
*** hrybacki has quit IRC | 02:45 | |
*** rwsu has quit IRC | 02:55 | |
*** gabriel-bezerra has quit IRC | 03:00 | |
*** jgriffith has quit IRC | 03:00 | |
*** gabriel-bezerra has joined #openstack-keystone | 03:00 | |
*** jgriffith has joined #openstack-keystone | 03:02 | |
*** markwash has joined #openstack-keystone | 03:09 | |
openstackgerrit | wanghong proposed a change to openstack/keystone: add --rebuild option for ssl/pki_setup https://review.openstack.org/88207 | 03:35 |
*** gabriel-bezerra has quit IRC | 03:35 | |
*** gabriel-bezerra has joined #openstack-keystone | 03:35 | |
openstackgerrit | wanghong proposed a change to openstack/keystone: add --rebuild option for ssl/pki_setup https://review.openstack.org/88207 | 03:38 |
stevemar | is control_exchange controlled by oslo https://github.com/openstack/keystone/blob/master/etc/keystone.conf.sample#L323 | 03:44 |
stevemar | ? | 03:44 |
stevemar | if so, do other projects override it? | 03:45 |
*** ukalifon has joined #openstack-keystone | 04:00 | |
*** ukalifon has quit IRC | 04:04 | |
*** amcrn has quit IRC | 04:15 | |
*** jogo has joined #openstack-keystone | 04:27 | |
jogo | so https://bugs.launchpad.net/tempest/+bug/1351026 | 04:27 |
uvirtbot | Launchpad bug 1351026 in tempest "IdentityError in TokensV3TestJSON.test_rescope_token" [Undecided,In progress] | 04:27 |
*** gokrokve_ has quit IRC | 04:32 | |
*** gokrokve has joined #openstack-keystone | 04:33 | |
*** topol has quit IRC | 04:34 | |
*** jamielennox|away is now known as jamielennox | 04:36 | |
*** gokrokve has quit IRC | 04:37 | |
*** bobt has quit IRC | 04:41 | |
*** bobt_ is now known as bobt | 04:41 | |
stevemar | jogo, it's destroying everything | 04:56 |
jogo | stevemar: sure is! | 04:57 |
jogo | any progress on it? | 04:57 |
stevemar | jogo, bknudson has been looking at it since it showed up, haven't bugged him in a few hours though | 04:58 |
jogo | stevemar: worse case is we can disable the test test so that at least it doesn't block | 04:58 |
stevemar | jogo, yeah, hes got that going: https://review.openstack.org/#/c/111131/ | 04:59 |
*** chandankumar has joined #openstack-keystone | 04:59 | |
jogo | well that patch was wrong and https://review.openstack.org/#/c/111133/ | 04:59 |
jogo | 'reverts' it | 05:00 |
jogo | ohh its postgres only | 05:02 |
stevemar | jogo, i'm confused, why is the first one wrong? | 05:02 |
stevemar | yesh | 05:02 |
stevemar | the revert patch is to just re-add the test, bknudson is nice that way | 05:02 |
stevemar | it looks like we'll have a test similar to the tempest one too: https://review.openstack.org/#/c/109125/ | 05:02 |
jogo | stevemar: it should be @test.skip_because(bug="1351026") | 05:04 |
stevemar | i guess the thinking is... disable the tempest test, add a test to keystone similar to tempest, re-add the tempest test | 05:04 |
stevemar | jogo, i'll patch it | 05:04 |
jogo | stevemar: cool thanks | 05:04 |
stevemar | np, happy to help, it's crushing the gate atm :( | 05:04 |
jogo | stevemar: let me know when the revision is up | 05:10 |
jogo | and we can get it landed | 05:10 |
stevemar | jogo, up | 05:12 |
*** ajayaa has joined #openstack-keystone | 05:12 | |
stevemar | oh, looks like cyeoh was doing it at the exact same time | 05:12 |
stevemar | d'oh | 05:12 |
stevemar | yep, he snuck his in just before - error: failed to push some refs to 'ssh://stevemar@review.openstack.org:29418/openstack/tempest.git | 05:13 |
stevemar | beat me by 3 minutes | 05:13 |
jogo | stevemar: hehe | 05:14 |
stevemar | jogo, oh well, sanity is restored - if only temporarily | 05:16 |
jogo | stevemar: random question: | 05:19 |
jogo | does keystone use oslo log formatting now? | 05:19 |
jogo | re: http://logs.openstack.org/06/109106/2/gate/gate-tempest-dsvm-postgres-full/e779ab6/logs/screen-key.txt.gz | 05:19 |
jogo | stevemar: as previously we had a special grok filter for keystone logs | 05:19 |
jogo | and now that isn't working so there are no keystone logs in logstash | 05:20 |
*** k4n0 has joined #openstack-keystone | 05:28 | |
stevemar | jogo, so, we were using it, but since we changed over to running keystone under httpd, it's had some issues there | 05:35 |
stevemar | but since devstack runs keystone under httpd by default now..., you won't see oslo style logs there | 05:36 |
stevemar | jogo, now a random question for you, | 05:43 |
stevemar | the only thing thats needed to set "control_exchange" in nova.conf to 'nova', is this here: https://github.com/openstack/nova/blob/master/nova/config.py#L33 | 05:43 |
*** ukalifon has joined #openstack-keystone | 05:49 | |
*** bvandenh_ has quit IRC | 05:58 | |
openstackgerrit | Steve Martinelli proposed a change to openstack/keystone: Update the config file https://review.openstack.org/111162 | 06:02 |
openstackgerrit | OpenStack Proposal Bot proposed a change to openstack/keystone: Imported Translations from Transifex https://review.openstack.org/106939 | 06:05 |
*** tomoiaga has joined #openstack-keystone | 06:06 | |
*** morganfainberg_Z is now known as morganfainberg | 06:11 | |
openstackgerrit | Steve Martinelli proposed a change to openstack/keystone: Update control_exchange value in keystone.conf https://review.openstack.org/111170 | 06:19 |
*** ajayaa has quit IRC | 06:24 | |
*** jaosorior has joined #openstack-keystone | 06:30 | |
morganfainberg | jogo, keystone needs https://review.openstack.org/#/c/102425/ to use oslo fmt under mod_wsgi, i should be able to solve the nits/RHELvsUbuntu differences in the next day or two | 06:32 |
morganfainberg | jogo, the postgres job is using eventlet and should be using olsofmt | 06:32 |
*** stevemar has quit IRC | 06:32 | |
*** ajayaa has joined #openstack-keystone | 06:40 | |
*** ajayaa has quit IRC | 06:56 | |
*** morganfainberg is now known as morganfainberg_Z | 07:03 | |
*** gabriel-bezerra has quit IRC | 07:03 | |
*** gabriel-bezerra has joined #openstack-keystone | 07:04 | |
*** jamielennox is now known as jamielennox|away | 07:04 | |
*** afazekas has joined #openstack-keystone | 07:18 | |
*** ajayaa has joined #openstack-keystone | 07:18 | |
openstackgerrit | Juan Antonio Osorio Robles proposed a change to openstack/identity-api: Add user email to the documentation https://review.openstack.org/111186 | 07:24 |
*** bvandenh_ has joined #openstack-keystone | 07:46 | |
*** andreaf has joined #openstack-keystone | 07:46 | |
*** llu has joined #openstack-keystone | 07:56 | |
*** llu has left #openstack-keystone | 07:56 | |
*** andreaf_ has joined #openstack-keystone | 07:59 | |
*** andreaf_ is now known as andrea | 08:00 | |
*** andrea is now known as Guest91883 | 08:00 | |
*** andreaf has quit IRC | 08:01 | |
*** Guest91883 is now known as andreaf | 08:01 | |
*** henrynash has joined #openstack-keystone | 08:05 | |
jaosorior | henrynash: I made a CR for identity-api as you requested, ( https://review.openstack.org/111186 ) is that alright? | 08:07 |
henrynash | jaosorior: just looking now | 08:08 |
henrynash | jaosorior: one minor additional update….see my comemnt | 08:12 |
henrynash | jaosoiror: it is possible that you need to provide a spec in specs/juno for this change - I hope not given it is so small….we’ll check with dolph when he gets on | 08:13 |
henrynash | jaosoiror: here’s one I did recently - which has more impact than you change, however: https://review.openstack.org/#/c/110674/ | 08:14 |
openstackgerrit | Juan Antonio Osorio Robles proposed a change to openstack/identity-api: Add user email to the documentation https://review.openstack.org/111186 | 08:15 |
jaosorior | I hope not O_O | 08:17 |
jaosorior | but thanks for the input! | 08:17 |
henrynash | jaosoiror: ok, +2 added, let’s see if we need a spec as well….which would be minimal anyway | 08:20 |
jaosorior | henrynash, thanks, I do hope a spec is not needed, as this addresses a bug, even though it kind of introduces a new feature (which was kind of expected to work anyway) | 08:23 |
henrynash | jaosorior: if we need a spec, we’ll pushit through asap…we are changing our API contract however (it’s the REST API that is the contract, not the client) | 08:24 |
openstackgerrit | Alexey Miroshkin proposed a change to openstack/keystone: Filter List Regions by 'parent_region_id' https://review.openstack.org/111200 | 08:42 |
openstackgerrit | Abhishek Kekane proposed a change to openstack/keystone: Keystone service throws error on SIGHUP signal https://review.openstack.org/107482 | 08:57 |
*** ajayaa has quit IRC | 09:07 | |
*** ajayaa has joined #openstack-keystone | 09:08 | |
*** ajayaa has quit IRC | 09:13 | |
*** ajayaa has joined #openstack-keystone | 09:15 | |
jaosorior | Alexey Miroshkin, are you around? | 09:29 |
*** ajayaa has quit IRC | 09:33 | |
*** ajayaa has joined #openstack-keystone | 09:34 | |
*** gabriel-bezerra has quit IRC | 09:38 | |
*** gabriel-bezerra has joined #openstack-keystone | 09:38 | |
*** ajayaa has quit IRC | 09:44 | |
*** fmarco76 has joined #openstack-keystone | 09:57 | |
*** fmarco76 has left #openstack-keystone | 09:58 | |
*** yasukun has quit IRC | 09:58 | |
*** yasukun has joined #openstack-keystone | 09:58 | |
*** tomoiaga has quit IRC | 10:19 | |
*** gabriel-bezerra has quit IRC | 10:19 | |
*** gabriel-bezerra has joined #openstack-keystone | 10:20 | |
*** ajayaa has joined #openstack-keystone | 10:27 | |
*** ukalifon has quit IRC | 10:28 | |
*** diegows has joined #openstack-keystone | 10:58 | |
*** yasukun has quit IRC | 11:08 | |
openstackgerrit | Ajaya Agrawal proposed a change to openstack/keystone: Implemented caching in identity layer. https://review.openstack.org/110575 | 11:09 |
henrynash | dolphm: ping | 11:49 |
*** cjellick has joined #openstack-keystone | 11:59 | |
*** cjellick has quit IRC | 11:59 | |
*** cjellick has joined #openstack-keystone | 12:00 | |
*** cjellick has quit IRC | 12:00 | |
*** cjellick has joined #openstack-keystone | 12:01 | |
*** jasondotstar has quit IRC | 12:10 | |
*** xianghui has quit IRC | 12:18 | |
*** xianghui has joined #openstack-keystone | 12:33 | |
*** gordc has joined #openstack-keystone | 12:48 | |
*** markwash has quit IRC | 12:48 | |
*** gabriel-bezerra has quit IRC | 13:00 | |
*** hrybacki has joined #openstack-keystone | 13:01 | |
*** gabriel-bezerra has joined #openstack-keystone | 13:01 | |
jaosorior | henrynash | 13:02 |
jaosorior | are you around_ | 13:02 |
jaosorior | ? | 13:02 |
*** joesavak has joined #openstack-keystone | 13:08 | |
*** ukalifon1 has joined #openstack-keystone | 13:08 | |
*** gokrokve has joined #openstack-keystone | 13:09 | |
*** nkinder_away has quit IRC | 13:11 | |
*** jasondotstar has joined #openstack-keystone | 13:19 | |
*** chandankumar has quit IRC | 13:21 | |
*** cjellick_ has joined #openstack-keystone | 13:24 | |
*** cjellick_ has joined #openstack-keystone | 13:25 | |
*** k4n0 has quit IRC | 13:26 | |
*** cjellick has quit IRC | 13:26 | |
*** gokrokve has quit IRC | 13:26 | |
*** bknudson has quit IRC | 13:27 | |
*** gokrokve has joined #openstack-keystone | 13:29 | |
openstackgerrit | Harry Rybacki proposed a change to openstack/keystonemiddleware: Convert auth_token middleware to use sessions https://review.openstack.org/105031 | 13:31 |
*** topol has joined #openstack-keystone | 13:37 | |
*** jasondotstar has quit IRC | 13:40 | |
*** jasondotstar has joined #openstack-keystone | 13:41 | |
*** ukalifon1 has quit IRC | 13:43 | |
*** bknudson has joined #openstack-keystone | 13:44 | |
*** mriedem has joined #openstack-keystone | 13:48 | |
mriedem | looking at http://logs.openstack.org/31/111131/2/gate/gate-tempest-dsvm-full/58b9b4d/logs/screen-key.txt.gz | 13:48 |
mriedem | if i search for 'error' | 13:48 |
mriedem | i get 48431 hits | 13:48 |
mriedem | what is the "[:error]" from? | 13:49 |
bknudson | mriedem: keystone is running in apache httpd, so it must be sticking that on there | 13:51 |
mriedem | oh right | 13:52 |
bknudson | maybe it's reading from stderr? | 13:52 |
mriedem | yuck | 13:52 |
mriedem | that's kind of terrible for debugging | 13:52 |
bknudson | y, it's pretty gross | 13:52 |
ajayaa | http://logs.openstack.org/75/110575/2/check/check-tempest-dsvm-postgres-full/b13a5ca/console.html | 13:54 |
bknudson | ajayaa: https://bugs.launchpad.net/keystone/+bug/1351026 | 13:55 |
uvirtbot | Launchpad bug 1351026 in tempest "IdentityError in TokensV3TestJSON.test_rescope_token" [Undecided,In progress] | 13:55 |
ajayaa | Why does this fail? I have tested locally the same commands with my changes | 13:55 |
*** nkinder_away has joined #openstack-keystone | 14:00 | |
dstanek | bknudson: wasn't that you that had issues the hostnames in the generated config? | 14:00 |
bknudson | dstanek: y | 14:00 |
dstanek | bknudson: what was the issue? | 14:00 |
henrynash | jaosorior: hi | 14:01 |
bknudson | dstanek: in my /etc/hosts I had "127.0.0.1 localhost f1-ds" "127.0.0.1 f1-ds localhost" | 14:01 |
bknudson | oops, I had "127.0.0.1 localhost f1-ds " and then I changed it to "127.0.0.1 f1-ds localhost" | 14:01 |
bknudson | dstanek: it was something like that | 14:01 |
bknudson | dstanek: morganfainberg_Z actually figured out where in the oslo.config code it was messing up | 14:02 |
dstanek | that's very odd | 14:03 |
dstanek | should the value in the config file be localhost or keystone? | 14:03 |
henrynash | dolphm: do we need a “spec” for any API change? E.g. https://review.openstack.org/#/c/111186/ | 14:03 |
dolphm | henrynash: all API changes are effectively user-facing, so i'd say yes | 14:04 |
henrynash | dolphm: ok, I have to agree…any change to our contract needs a spec change | 14:04 |
dolphm | henrynash: although i've *never* noticed that we include email in several API examples! | 14:06 |
henrynash | dolphm: !! | 14:06 |
henrynash | dolphm: and it is indeed handled explicitly by keystoneclient | 14:06 |
*** YorikSar has quit IRC | 14:07 | |
jaosorior | dolphm, henrynash: yup, that's why I didn't think it needed a spec, but anyway, it's almost finished :P | 14:11 |
dolphm | jaosorior: v2 recognized 'email' address, and we never had a need to query on it or anything - we just quietly supported it as an unindexed attribute | 14:12 |
dolphm | jaosorior: i'd be curious to know why you want to query on it and such | 14:12 |
jaosorior | dolphm: some dudes doing a custom client complaigned, and I saw that bug report, and took the chanse :P | 14:13 |
*** stevemar has joined #openstack-keystone | 14:15 | |
*** vhoward has joined #openstack-keystone | 14:16 | |
*** bvandenh_ has quit IRC | 14:17 | |
openstackgerrit | Juan Antonio Osorio Robles proposed a change to openstack/keystone: Enable filtering of services by name https://review.openstack.org/110904 | 14:18 |
openstackgerrit | Juan Antonio Osorio Robles proposed a change to openstack/keystone: Filter users by email https://review.openstack.org/110970 | 14:18 |
*** xianghui has quit IRC | 14:19 | |
*** xianghui has joined #openstack-keystone | 14:21 | |
jaosorior | henrynash, dolphm: so should email then be an actual attribute? meaning I should write the migration scripts and such, or should I just leave it as extra in the backend? | 14:24 |
dolphm | jaosorior: if you're going to query on it, it'd be nice for the sql backend to be able to do the filtering | 14:24 |
bknudson | dstanek: the values in the sample config as they are now should be correct | 14:25 |
jaosorior | dolphm: well, before doing that, I would like to know if this is something anyone else is interested in having O_o | 14:25 |
dolphm | jaosorior: you're the first to suggest it in keystone's lifetime AFAIK! although it's certainly an odd discrepency between what the client appears to support and what the server/API considers first class | 14:27 |
openstackgerrit | Alexey Miroshkin proposed a change to openstack/keystone: Filter List Regions by 'parent_region_id' https://review.openstack.org/111200 | 14:28 |
jaosorior | dolphm: indeed it's an discrepancy. But that's why I ask | 14:30 |
openstackgerrit | Steve Martinelli proposed a change to openstack/keystone: Update control_exchange value in keystone.conf https://review.openstack.org/111170 | 14:30 |
*** nkinder_away is now known as nkinder | 14:31 | |
*** jsavak has joined #openstack-keystone | 14:35 | |
*** comstud is now known as bearhands | 14:36 | |
stevemar | bknudson, dolphm do either of you know why i run tox -e sample_config, it always slots in 'keystone' instead of 'localhost' in some spots? | 14:37 |
*** joesavak has quit IRC | 14:38 | |
*** joesavak has joined #openstack-keystone | 14:38 | |
lbragstad | stevemar: I noticed that the last time I generate the docs too | 14:40 |
*** jsavak has quit IRC | 14:40 | |
stevemar | lbragstad, i'm wondering if we're not doing something we should be in oslo | 14:41 |
stevemar | but then it happens with the ldap code too | 14:41 |
openstackgerrit | Diane Fleming proposed a change to openstack/identity-api: Remove ATOM responses for list versions and get version details. https://review.openstack.org/110777 | 14:42 |
bknudson | stevemar: dstanek was just talking about this | 14:42 |
bknudson | maybe ask on -oslo? | 14:42 |
bknudson | they might have changed it | 14:42 |
stevemar | but the ldap generated value isn't from oslo | 14:42 |
stevemar | i could go in and change it manually after it's generated, but that seems silly | 14:43 |
bknudson | I just did tox -e sample_config and the hostnames didn't change | 14:43 |
stevemar | weird | 14:44 |
bknudson | oslo.config==1.4.0.0a3 | 14:44 |
stevemar | morgan's didn't either: https://review.openstack.org/#/c/109657/1 | 14:44 |
stevemar | maybe that's it, i'll nuke my sample_config tox env | 14:44 |
bknudson | you need to do that every once in a while | 14:44 |
*** joesavak has quit IRC | 14:47 | |
*** YorikSar has joined #openstack-keystone | 14:47 | |
*** joesavak has joined #openstack-keystone | 14:48 | |
bknudson | when I `tox -r -e sample_config` I get a few differences | 14:49 |
bknudson | but it's not the hostnames | 14:49 |
stevemar | bknudson, the ec2 ones? | 14:52 |
stevemar | if so, i tossed up something already: https://review.openstack.org/#/c/111162/1 | 14:52 |
stevemar | just getting rid of the hostname diffs | 14:53 |
bknudson | that doesn't even pass jenkins | 14:53 |
stevemar | yes, because of 1350466 | 14:53 |
stevemar | not much is passing jenkins! | 14:53 |
bknudson | when I regen sample_config with 111162 there are still differences | 14:54 |
stevemar | yeah, i'm noticing a few more now | 14:54 |
bknudson | the hostname ones obviously | 14:54 |
bknudson | -#allowed_rpc_exception_modules=oslo.messaging.exceptions,nova.exception,cinder.exception,exceptions | 14:54 |
*** ajayaa has quit IRC | 14:54 | |
bknudson | -# Host to locate redis. (string value) | 14:54 |
openstackgerrit | Steve Martinelli proposed a change to openstack/keystone: Update the config file https://review.openstack.org/111162 | 14:55 |
stevemar | bknudson, ^ | 14:55 |
bknudson | stevemar: with that one it's just the hostnames changed | 14:55 |
bknudson | stevemar: what do you get when you run `hostname` ? | 14:56 |
stevemar | ubuntuvm, my hostname | 14:56 |
dolphm | bknudson: stevemar: it definitely seems to be newer version of oslo.config has newer behavior | 14:56 |
bknudson | I was having this problem earlier but I fixed it somehow when morganfainberg_Z pointed out the code... let me see if I can find it again | 14:57 |
stevemar | it's weird because of the change to [ldap] url | 14:58 |
stevemar | in config.py its defaulted to localhost - https://github.com/openstack/keystone/blob/master/keystone/common/config.py#L463-L464 | 14:59 |
bknudson | http://git.openstack.org/cgit/openstack/keystone/tree/keystone/openstack/common/config/generator.py#n224 | 14:59 |
bknudson | what does socket.gethostname() and socket.getfqdn() give you? | 15:00 |
bknudson | >>> (socket.gethostname(), socket.getfqdn()) -> ('f1-ds', 'f1-ds') | 15:00 |
stevemar | bknudson, ('ubuntuvm', 'localhost') | 15:01 |
bknudson | there you go. localhost | 15:02 |
stevemar | bknudson, but i'm changing it *from* localhost *to* keystone | 15:02 |
bknudson | stevemar: y, that happens at 239 | 15:02 |
bknudson | http://git.openstack.org/cgit/openstack/keystone/tree/keystone/openstack/common/config/generator.py#n239 | 15:02 |
stevemar | bknudson, i thought you pointed out the wrong code, but if you resize the browser to >100% the line numbers don't scale correctly | 15:05 |
bknudson | stevemar: firefox? | 15:05 |
stevemar | chrome | 15:06 |
*** stevemar has quit IRC | 15:11 | |
*** stevemar has joined #openstack-keystone | 15:11 | |
stevemar | bknudson, oh, it matches the first one out of /etc/hosts | 15:13 |
bknudson | maybe it's an ubuntu thing to stick localhost first? | 15:14 |
*** thedodd has joined #openstack-keystone | 15:15 | |
openstackgerrit | Steve Martinelli proposed a change to openstack/keystone: Update the config file https://review.openstack.org/111162 | 15:16 |
stevemar | bknudson, nah, i probably did that, but weird that it just picks the first one | 15:17 |
stevemar | i dunno, either way, it worked, i have to write that down somewhere | 15:17 |
*** mriedem has left #openstack-keystone | 15:18 | |
openstackgerrit | Steve Martinelli proposed a change to openstack/keystone: Update control_exchange value in keystone.conf https://review.openstack.org/111170 | 15:18 |
openstackgerrit | Thiago da Silva proposed a change to openstack/keystone: Adding python-setuptools to list of dependencies https://review.openstack.org/111312 | 15:24 |
*** arunkant has quit IRC | 15:31 | |
*** arunkant has joined #openstack-keystone | 15:31 | |
*** david-lyle has joined #openstack-keystone | 15:36 | |
*** gyee has joined #openstack-keystone | 15:36 | |
*** hrybacki has quit IRC | 15:43 | |
*** YorikSar has quit IRC | 15:58 | |
lbragstad | tox failing for anyone else because of https://github.com/openstack/keystone/commit/4afa111743626edb3dad4c15e5028c887d0fdfde | 15:58 |
lbragstad | or pep8 specifically? | 15:58 |
*** Farhan has quit IRC | 15:59 | |
openstackgerrit | Lance Bragstad proposed a change to openstack/keystone: Ignore import issue in keystone/tests/core.py https://review.openstack.org/111323 | 16:03 |
openstackgerrit | Lance Bragstad proposed a change to openstack/keystone: Check if lxml is installed before import https://review.openstack.org/111108 | 16:05 |
stevemar | lbragstad, ^ | 16:11 |
stevemar | commented on one of those | 16:11 |
openstackgerrit | Lance Bragstad proposed a change to openstack/keystone: Check if lxml is installed before import https://review.openstack.org/111108 | 16:11 |
lbragstad | stevemar: thanks! | 16:13 |
nkinder | was there a recent change to the oslo.config version that keystone requires? | 16:15 |
nkinder | pip isn't able to satisfy the dependency | 16:15 |
nkinder | http://paste.openstack.org/show/89625/ | 16:16 |
lbragstad | nkinder: try .tox/venv/bin/pip install oslo.config==1.4.0.0a3 --upgrade ? | 16:17 |
openstackgerrit | Diane Fleming proposed a change to openstack/identity-api: Remove ATOM responses for list versions and get version details. https://review.openstack.org/110777 | 16:17 |
nkinder | lbragstad: no dice | 16:18 |
nkinder | lbragstad: do I need to configure pip to look somewhere special for 1.4.0.0a3? | 16:18 |
*** gokrokve_ has joined #openstack-keystone | 16:19 | |
lbragstad | nkinder: I don't *think* so... http://paste.openstack.org/show/89626/ | 16:19 |
nkinder | lbragstad: interesting... http://paste.openstack.org/show/89631/ | 16:22 |
lbragstad | nkinder: strange | 16:23 |
*** gokrokve has quit IRC | 16:23 | |
lbragstad | nkinder: what version of setuptools are you running? | 16:23 |
lbragstad | and/or virtualenv | 16:23 |
nkinder | setuptools in my .venv is 0.9.8 | 16:24 |
lbragstad | $ .tox/venv/bin/pip list | grep setup | 16:24 |
lbragstad | setuptools (5.4.1) | 16:24 |
nkinder | python-virtualenv-1.10.1-1.fc20.noarch | 16:25 |
lbragstad | nkinder: can you update? | 16:25 |
lbragstad | setuptools | 16:25 |
*** nkinder has quit IRC | 16:29 | |
*** morganfainberg_Z is now known as morganfainberg | 16:33 | |
morganfainberg | mornin. | 16:37 |
dstanek | morganfainberg: morning | 16:37 |
morganfainberg | dstanek, how goes? | 16:37 |
dstanek | right now i'm struggling with devstack icehouse :-) so it could be better | 16:37 |
dstanek | you? | 16:37 |
morganfainberg | dstanek, hehe, i'll take that over my morning. but really since i woke up (20 mins ago) things aren't bad at all | 16:39 |
morganfainberg | dstanek, anything i can specifically help with? | 16:39 |
dstanek | morganfainberg: not yet. i keep running into walls, ripping them down and running into the next | 16:40 |
morganfainberg | dstanek i see | 16:41 |
*** nkinder has joined #openstack-keystone | 16:42 | |
dstanek | what's the feeling on squashing for backports? i have a patchset of maybe 5 patches that we may need in icehouse - should i squash into a single commit? | 16:42 |
morganfainberg | dstanek, well i'm about to try and figure out the policy rule engine so we can do a 'exists' check in policy, so... :P fun | 16:42 |
morganfainberg | dstanek, backports should be the same as the master patch iirc | 16:42 |
morganfainberg | dstanek, or as close as possible | 16:42 |
morganfainberg | so if it's 5 patches to master... it should be 5 patches to stable | 16:43 |
nkinder | lbragstad: got it working. I upgraded setuptools and had to enable wheel in ~/.pip/pip.conf | 16:44 |
lbragstad | nkinder: nice! | 16:44 |
dstanek | morganfainberg: that's easier for me anyway | 16:44 |
nkinder | lbragstad: never had to do that before, so this must be the first tie that there is only a .whl available for a requirement | 16:44 |
lbragstad | yeah, that was interesting | 16:45 |
dstanek | morganfainberg: ok, so now if i run openstack client it does nothing but print 'six>=1.6.0' | 16:46 |
morganfainberg | dstanek, that seems... sub-useful | 16:47 |
*** markwash_ has joined #openstack-keystone | 16:47 | |
*** markwash_ is now known as markwash | 16:48 | |
morganfainberg | oh.. wow policy engine uses ast | 16:48 |
* morganfainberg gets to learn ast now. | 16:48 | |
dstanek | morganfainberg: does it use more than just a safe eval? | 16:48 |
morganfainberg | literal_eval | 16:49 |
morganfainberg | so, probably a bit less crazy than the stuff you were doing | 16:49 |
morganfainberg | a little = a lot | 16:49 |
dstanek | morganfainberg: you should learn ast anyway - you can do some fun stuff | 16:50 |
morganfainberg | dstanek, ++ | 16:50 |
morganfainberg | evil stuff | 16:50 |
morganfainberg | but fun | 16:50 |
nkinder | yeah, ast is pretty cool | 16:51 |
*** hemna_ is now known as hemna | 17:07 | |
*** marcoemorais has joined #openstack-keystone | 17:11 | |
*** david-ly_ has joined #openstack-keystone | 17:11 | |
morganfainberg | hm.. | 17:14 |
morganfainberg | ok in a policy check what *should* a does value X exist look like? | 17:14 |
*** david-lyle has quit IRC | 17:15 | |
morganfainberg | oh wow, i think i see a big performance optimisation we can do in keystone... | 17:17 |
*** david-ly_ is now known as david-lyle | 17:18 | |
dstanek | morganfainberg: related to policy? | 17:21 |
morganfainberg | dstanek, yeah | 17:21 |
morganfainberg | dstanek, looks like auth context middleware is doing a lot of the same work the @protected decorator is | 17:22 |
morganfainberg | we can *probably* avoid doing token bind checks 2x, and load tokens form the backend 4x on each v3 request | 17:23 |
*** gokrokve_ has quit IRC | 17:24 | |
morganfainberg | that being said, i guess some call could *indavertently* muck with the context directly | 17:25 |
*** gokrokve has joined #openstack-keystone | 17:25 | |
*** gokrokve_ has joined #openstack-keystone | 17:27 | |
openstackgerrit | Nathan Kinder proposed a change to openstack/keystone: Trust unit tests should target additional threat scenarios https://review.openstack.org/109120 | 17:31 |
*** gokrokve has quit IRC | 17:31 | |
*** chandankumar has joined #openstack-keystone | 17:44 | |
stevemar | lbragstad, commented on the xml middleware thing | 17:45 |
*** gabriel-bezerra has quit IRC | 17:48 | |
*** gabriel-bezerra has joined #openstack-keystone | 17:49 | |
lbragstad | stevemar: sweet, thanks | 17:49 |
stevemar | lbragstad, you might want to check with one of the pythonistas if my thinking is correct | 17:53 |
*** marcoemorais has quit IRC | 18:02 | |
*** marcoemorais has joined #openstack-keystone | 18:02 | |
*** marcoemorais has quit IRC | 18:03 | |
*** marcoemorais has joined #openstack-keystone | 18:03 | |
*** ukalifon has joined #openstack-keystone | 18:06 | |
openstackgerrit | Raildo Mascena de Sousa Filho proposed a change to openstack/identity-api: API documentation for Hierarchical Multitenancy https://review.openstack.org/111355 | 18:08 |
openstackgerrit | Diane Fleming proposed a change to openstack/identity-api: Remove ATOM responses for list versions and get version details. https://review.openstack.org/110777 | 18:13 |
openstackgerrit | Diane Fleming proposed a change to openstack/identity-api: Remove ATOM responses for list versions and get version details. https://review.openstack.org/110777 | 18:18 |
*** ukalifon has quit IRC | 18:21 | |
*** markwash has quit IRC | 18:22 | |
dolphm | is infra emptying the gate queue? | 18:24 |
morganfainberg | dolphm, why do you ask? | 18:25 |
dolphm | morganfainberg: the gate depth has been plummeting for the past hour or two | 18:25 |
dolphm | could be a side effect of everything failing check queue :( | 18:26 |
morganfainberg | the skip for the bug in postgress landed | 18:26 |
morganfainberg | keystone bug + tempest in rescope | 18:26 |
morganfainberg | maybe things just started catching up? | 18:27 |
*** hemna has quit IRC | 18:33 | |
*** markwash has joined #openstack-keystone | 18:35 | |
bknudson | something must have changed in postgres that caused it to start failing. | 18:36 |
dolphm | bknudson: was a new version released? | 18:37 |
*** gabriel-bezerra has quit IRC | 18:37 | |
*** gabriel-bezerra has joined #openstack-keystone | 18:38 | |
*** marcoemorais has quit IRC | 18:38 | |
*** marcoemorais has joined #openstack-keystone | 18:39 | |
morganfainberg | dolphm, bknudson we moved back to eventlet for postgres | 18:46 |
morganfainberg | dolphm, bknudson, keystone uses postgres as the eventlet run so we have full coverage | 18:46 |
morganfainberg | perhaps eventlet issue? | 18:46 |
bknudson | I can't imagine how that would cause this issue at all. | 18:46 |
bknudson | and I can recreate it on my local system | 18:46 |
morganfainberg | neither can i | 18:46 |
morganfainberg | it's kinda weird | 18:47 |
*** afazekas has quit IRC | 18:48 | |
openstackgerrit | Alexey Miroshkin proposed a change to openstack/keystone: Filter List Regions by 'parent_region_id' https://review.openstack.org/111200 | 18:53 |
*** nkinder has quit IRC | 18:55 | |
dolphm | uhh, our keystone-coverage job has a bug | 18:59 |
morganfainberg | it does? | 18:59 |
dolphm | morganfainberg: bknudson's patch just ran into a weird failure here: http://logs.openstack.org/20/109820/3/check/gate-keystone-pep8/7317358/console.html | 18:59 |
openstackgerrit | Morgan Fainberg proposed a change to openstack/keystonemiddleware: Convert auth_token middleware to use sessions https://review.openstack.org/105031 | 19:00 |
dolphm | just look at the very end of the log | 19:00 |
morganfainberg | pip missing? | 19:00 |
morganfainberg | that is really weird | 19:00 |
dolphm | same failure appears in all of these jobs: http://pasteraw.com/948dni9io4c0xqh1cr7jqsebpsuwkx | 19:01 |
morganfainberg | very strange. | 19:01 |
dolphm | bug- https://bugs.launchpad.net/openstack-ci/+bug/1337089 | 19:01 |
uvirtbot | Launchpad bug 1337089 in openstack-ci "Pip temporarily diseappeared?" [Undecided,Incomplete] | 19:01 |
dolphm | it happens in different tox environments, but almost every failure is in the keystone-coverage job ?! | 19:02 |
morganfainberg | when did it start? | 19:02 |
dolphm | morganfainberg: last 14 days of hits-- http://pasteraw.com/cf2nrpekz8lqzu7dfc1chk2jldp757n | 19:04 |
morganfainberg | crazy | 19:04 |
dolphm | so definietly the 24ths | 19:04 |
dolphm | s/s// | 19:04 |
morganfainberg | wait... without pip how... did all the pep8 stuff get installed?! | 19:06 |
dstanek | that's really wierd | 19:08 |
dstanek | dolphm: that same type of error happens on the coverage jobs too? | 19:11 |
*** cjellick has joined #openstack-keystone | 19:30 | |
*** andreaf has quit IRC | 19:33 | |
*** cjellick_ has quit IRC | 19:33 | |
*** cjellick has quit IRC | 19:35 | |
*** rwsu has joined #openstack-keystone | 19:37 | |
*** cjellick has joined #openstack-keystone | 19:38 | |
*** cjellick has quit IRC | 19:39 | |
*** cjellick has joined #openstack-keystone | 19:39 | |
*** bknudson has quit IRC | 19:44 | |
*** topol has quit IRC | 19:46 | |
*** gabriel-bezerra has quit IRC | 19:46 | |
*** gabriel-bezerra has joined #openstack-keystone | 19:46 | |
openstackgerrit | Christian Berendt proposed a change to openstack/keystone: Bump hacking to 0.9.x series https://review.openstack.org/98996 | 19:51 |
dolphm | dstanek: yeah | 19:51 |
dolphm | it just happened again too | 19:52 |
dstanek | dolphm: i wonder if the boxes have a newer virtualenv or setuptools package that doesn't install pip | 19:53 |
dolphm | dstanek: that would be a drastic change - is there a new package that's missing pip somewhere? | 19:53 |
dolphm | dstanek: actually, it's happening on both precise and centos6 | 19:54 |
dolphm | dstanek: morganfainberg: would be nice to get this one in https://review.openstack.org/#/c/98996/ | 19:58 |
openstackgerrit | Raildo Mascena de Sousa Filho proposed a change to openstack/identity-api: API documentation for Hierarchical Multitenancy https://review.openstack.org/111355 | 20:00 |
*** asmacdo has left #openstack-keystone | 20:00 | |
*** chandankumar has quit IRC | 20:01 | |
dstanek | dolphm: i can take a look in a few | 20:08 |
dolphm | dstanek: awesome | 20:08 |
*** afazekas has joined #openstack-keystone | 20:08 | |
dstanek | dolphm: this https://bugs.launchpad.net/keystone/+bug/1347862 is actually https://bugs.launchpad.net/keystone/+bug/1230279 | 20:11 |
uvirtbot | Launchpad bug 1347862 in keystone "keystone will not auth users if there is a bad endpoint " [Undecided,Confirmed] | 20:11 |
openstackgerrit | Christian Berendt proposed a change to openstack/keystone: Bump hacking to 0.9.x series https://review.openstack.org/98996 | 20:35 |
*** jaosorior has quit IRC | 20:42 | |
lbragstad | dstanek: ping, Mock unit testing question for you | 20:42 |
dstanek | lbragstad: fire away | 20:42 |
lbragstad | dstanek: so, I'm mocking out a module level function, and the first time I call it I want it to return None and the second time I call it I want it to return something that isn't None | 20:43 |
lbragstad | so... if keystone.openstack.common.importutils.try_import('something') it returns None | 20:43 |
lbragstad | and if keystone.openstack.common.importutils.try_import('os') for example, it returns some object() | 20:44 |
lbragstad | is there a way to specify that behavior with a decorator - @mock.patch wrapping the unit test? | 20:44 |
dstanek | lbragstad: it sounds a little wierd that you would have to do that - what are you working on? | 20:46 |
lbragstad | dstanek: helping out here: https://review.openstack.org/#/c/111108/ | 20:47 |
dstanek | lbragstad: assuming that you have to do that you can create your own class to patch instead of patching a mock - jas i'll hack out a quick example | 20:47 |
lbragstad | I know you can create a mock and then call an assert on that mock that says "hey, was this mock called with these parameters", but I'm looking for, "if this is called with this parameter, return something specific" | 20:48 |
*** gabriel-bezerra has quit IRC | 20:48 | |
*** gabriel-bezerra has joined #openstack-keystone | 20:49 | |
dstanek | lbragstad: quick hack - http://paste.openstack.org/show/89673/ - *not guaranteed to be working :-) | 20:52 |
lbragstad | dstanek: gotcha, that makes sense | 20:53 |
lbragstad | dstanek: so FakeImporter would take place of try_import()? | 20:53 |
lbragstad | dstanek: the importutils.py module doesn't have a class or anything. It's just a module that holds a collection of utilities | 20:54 |
dstanek | yeah, you would use an instance of that to mock (in this case fake) try_import | 20:54 |
lbragstad | ok, cool | 20:54 |
dstanek | lbragstad: the reason it works is that it would fake with an instance that can remember if it was called or not - the __call__ allows a Python object instance to be called like a function | 20:55 |
openstackgerrit | Bob Thyne proposed a change to openstack/keystone: Refactor existing endpoint filter tests https://review.openstack.org/111130 | 20:55 |
lbragstad | dstanek: cool, that helps | 20:56 |
openstackgerrit | Bob Thyne proposed a change to openstack/keystone: Refactor existing endpoint filter tests https://review.openstack.org/111130 | 20:56 |
dstanek | lbragstad: i know it's not openstacky, but in this situation i would probably just put the import in the __init__ and call it a day | 21:00 |
dstanek | does try_import log the real reason for the import error? | 21:00 |
lbragstad | dstanek: no | 21:01 |
lbragstad | if try_import can't import the module or whatever, it returns None: | 21:02 |
lbragstad | https://github.com/openstack/oslo-incubator/blob/master/openstack/common/importutils.py#L68-L73 | 21:02 |
*** marzif_ has joined #openstack-keystone | 21:02 | |
lbragstad | so, you either get the object that you wanted, or nothing | 21:02 |
lbragstad | or whatever the default value is | 21:02 |
dstanek | lbragstad: well that sucks - if you can't import the module you'll never know why | 21:02 |
lbragstad | right | 21:02 |
lbragstad | all you know is that you can't do it | 21:02 |
lbragstad | so, relaying that to the user is about all we can do | 21:03 |
dstanek | lbragstad: that's why i like doing the import in the __init__; you'll get the real exception from Python | 21:03 |
*** cjellick_ has joined #openstack-keystone | 21:09 | |
*** cjellick has quit IRC | 21:13 | |
*** cjellick_ has quit IRC | 21:14 | |
openstackgerrit | Lance Bragstad proposed a change to openstack/keystone: Check if lxml is installed before import https://review.openstack.org/111108 | 21:19 |
*** joesavak has quit IRC | 21:21 | |
shufflebot | hey - anyone familair with the openstack hybrid identity driver? | 21:23 |
shufflebot | so we were looking at using ldap for user backend but we want service accounts to run in sql | 21:23 |
shufflebot | the way the hybrid driver functions is if you fail to authenticate againast sql it passes the query to ldap | 21:23 |
shufflebot | Would that be an appropriate appraoch? | 21:24 |
dolphm | shufflebot: are you using master or a stable/ release? | 21:27 |
*** stevemar has quit IRC | 21:28 | |
dolphm | shufflebot: master has a feature where you can have you service accounts in a separate domain than other users, and you can keep that entire identity domain in sql, while the rest of your users are in ldap. ping henrynash if you have questions :) | 21:29 |
dstanek | dolphm: did you seem my message about about the two bugs | 21:30 |
dstanek | ? | 21:30 |
shufflebot | dolphm: interesting, we're currently running havana but we will eventually be moving to icehouse | 21:33 |
shufflebot | http://www.mattfischer.com/blog/?p=576 stacked auth seemed interesting because then if LDAP failed we could still get back in | 21:33 |
*** ukalifon has joined #openstack-keystone | 21:33 | |
*** jasondotstar has quit IRC | 21:34 | |
*** cjellick has joined #openstack-keystone | 21:40 | |
*** bknudson has joined #openstack-keystone | 21:41 | |
*** nonameentername has left #openstack-keystone | 21:44 | |
*** nonameentername has joined #openstack-keystone | 21:44 | |
*** gabriel-bezerra has quit IRC | 21:44 | |
*** gabriel-bezerra has joined #openstack-keystone | 21:45 | |
*** bknudson has quit IRC | 21:45 | |
*** bknudson has joined #openstack-keystone | 21:46 | |
*** fifieldt has quit IRC | 21:47 | |
*** cjellick has quit IRC | 21:48 | |
*** nkinder has joined #openstack-keystone | 21:48 | |
*** fifieldt has joined #openstack-keystone | 22:00 | |
*** ukalifon has quit IRC | 22:04 | |
*** hrybacki has joined #openstack-keystone | 22:07 | |
*** gokrokve has joined #openstack-keystone | 22:07 | |
*** gokrokve has quit IRC | 22:11 | |
*** gokrokve_ has quit IRC | 22:11 | |
*** gordc has quit IRC | 22:15 | |
*** markwash has quit IRC | 22:40 | |
*** thedodd has quit IRC | 22:45 | |
*** morganfainberg is now known as morganfainberg_Z | 22:55 | |
*** slogan has joined #openstack-keystone | 22:58 | |
*** arunkant has left #openstack-keystone | 23:05 | |
*** arunkant has joined #openstack-keystone | 23:07 | |
*** slogan has quit IRC | 23:11 | |
*** david-lyle has quit IRC | 23:11 | |
*** slogan has joined #openstack-keystone | 23:28 | |
openstackgerrit | A change was merged to openstack/keystone: Check that region ID is not an empty string https://review.openstack.org/95212 | 23:37 |
*** slogan has quit IRC | 23:42 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!