*** gokrokve_ has quit IRC | 00:00 | |
*** amcrn has quit IRC | 00:00 | |
*** david-lyle has quit IRC | 00:01 | |
*** topol has joined #openstack-keystone | 00:33 | |
*** gokrokve has joined #openstack-keystone | 00:57 | |
*** dims has joined #openstack-keystone | 01:02 | |
*** dims_ has joined #openstack-keystone | 01:05 | |
*** marcoemorais has quit IRC | 01:05 | |
*** dims has quit IRC | 01:09 | |
*** zzzeek has quit IRC | 01:11 | |
*** renlt has joined #openstack-keystone | 01:12 | |
bknudson | the gate seems to be in some amount of trouble. | 01:13 |
---|---|---|
*** morganfainberg is now known as morganfainberg_Z | 01:13 | |
*** dims_ has quit IRC | 01:19 | |
*** RicoLin has joined #openstack-keystone | 01:23 | |
bknudson | I opened a bug https://bugs.launchpad.net/keystone/+bug/1361924 | 01:28 |
uvirtbot` | Launchpad bug 1361924 in keystone "python-subunit 0.0.20 failing to install causing gate failure" [Undecided,New] | 01:28 |
bknudson | pinged lifeless but haven't gotten a response. | 01:28 |
bknudson | also brought it up in infra | 01:28 |
*** shakamunyi has quit IRC | 01:29 | |
*** ncoghlan has joined #openstack-keystone | 01:30 | |
*** mitz_ has joined #openstack-keystone | 01:31 | |
*** mitz has quit IRC | 01:33 | |
*** morganfainberg_Z is now known as morganfainberg | 01:33 | |
bknudson | I think a fix is on the way | 01:34 |
bknudson | subunit 0.0.21 is up now which should fix it... not sure if a recheck right away will work. | 01:36 |
*** shakamunyi has joined #openstack-keystone | 01:36 | |
*** yasukun has joined #openstack-keystone | 01:37 | |
*** ncoghlan is now known as ncoghlan_afk | 01:52 | |
*** diegows has quit IRC | 01:53 | |
*** raildo has quit IRC | 01:55 | |
*** gabriel-bezerra has quit IRC | 01:55 | |
*** samuelmz has quit IRC | 01:56 | |
*** raildo has joined #openstack-keystone | 01:56 | |
*** samuelmz has joined #openstack-keystone | 01:56 | |
*** rodrigods has quit IRC | 01:56 | |
*** rodrigods has joined #openstack-keystone | 01:57 | |
*** rodrigods has joined #openstack-keystone | 01:57 | |
*** gabriel-bezerra has joined #openstack-keystone | 01:57 | |
*** david-lyle has joined #openstack-keystone | 02:02 | |
*** dims has joined #openstack-keystone | 02:02 | |
*** david-lyle has quit IRC | 02:07 | |
*** richm has quit IRC | 02:13 | |
*** dims has quit IRC | 02:13 | |
*** david-lyle has joined #openstack-keystone | 02:16 | |
*** stevemar has joined #openstack-keystone | 02:18 | |
*** david-lyle has quit IRC | 02:21 | |
*** toddnni has quit IRC | 02:21 | |
*** toddnni has joined #openstack-keystone | 02:25 | |
dolphm | bknudson: thanks :( | 02:25 |
*** renlt has quit IRC | 02:27 | |
*** afaranha1 has quit IRC | 02:27 | |
*** gabriel-bezerra has quit IRC | 02:29 | |
*** raildo has quit IRC | 02:29 | |
*** rodrigods has quit IRC | 02:29 | |
*** rodrigods has joined #openstack-keystone | 02:29 | |
*** rodrigods has joined #openstack-keystone | 02:29 | |
*** gabriel-bezerra has joined #openstack-keystone | 02:30 | |
*** raildo has joined #openstack-keystone | 02:30 | |
*** afaranha has joined #openstack-keystone | 02:32 | |
*** praneshp has quit IRC | 02:35 | |
*** ncoghlan has joined #openstack-keystone | 02:35 | |
*** ncoghlan has quit IRC | 02:36 | |
*** ncoghlan has joined #openstack-keystone | 02:36 | |
*** ncoghlan_ has joined #openstack-keystone | 02:37 | |
*** jamielennox|away has quit IRC | 02:37 | |
*** ncoghlan__ has joined #openstack-keystone | 02:37 | |
*** jamielennox|away has joined #openstack-keystone | 02:37 | |
*** ncoghlan__ has quit IRC | 02:38 | |
*** ncoghlan__ has joined #openstack-keystone | 02:38 | |
stevemar | apparently bug 1361924 destroyed everything | 02:38 |
uvirtbot` | Launchpad bug 1361924 in subunit "python-subunit 0.0.20 failing to install causing gate failure" [Critical,Fix released] https://launchpad.net/bugs/1361924 | 02:38 |
*** ncoghlan__ has quit IRC | 02:39 | |
dolphm | stevemar: it did | 02:39 |
*** ncoghlan__ has joined #openstack-keystone | 02:39 | |
*** ncoghlan_afk has quit IRC | 02:39 | |
*** ncoghlan__ has quit IRC | 02:39 | |
*** ncoghlan__ has joined #openstack-keystone | 02:40 | |
*** ncoghlan__ is now known as ncoghlan_afk | 02:40 | |
*** ncoghlan_afk has quit IRC | 02:40 | |
*** ncoghlan_afk has joined #openstack-keystone | 02:40 | |
*** ncoghlan has quit IRC | 02:41 | |
*** ncoghlan_afk has quit IRC | 02:41 | |
*** ncoghlan_afk has joined #openstack-keystone | 02:41 | |
*** ncoghlan_ has quit IRC | 02:42 | |
*** ncoghlan has joined #openstack-keystone | 02:42 | |
*** jamielennox|away has quit IRC | 02:42 | |
*** ncoghlan_ has joined #openstack-keystone | 02:42 | |
*** jamielennox|away has joined #openstack-keystone | 02:42 | |
*** yasukun has quit IRC | 02:43 | |
*** yasukun has joined #openstack-keystone | 02:43 | |
*** inteq has quit IRC | 02:44 | |
*** harlowja is now known as harlowja_away | 02:44 | |
*** ncoghlan_afk has quit IRC | 02:46 | |
*** ncoghlan has quit IRC | 02:47 | |
*** afaranha has quit IRC | 02:51 | |
*** raildo has quit IRC | 02:52 | |
*** afaranha has joined #openstack-keystone | 02:52 | |
*** raildo has joined #openstack-keystone | 02:52 | |
*** dims has joined #openstack-keystone | 02:54 | |
*** ncoghlan__ has joined #openstack-keystone | 02:58 | |
*** jamielennox|away has quit IRC | 02:59 | |
*** ncoghlan has joined #openstack-keystone | 02:59 | |
*** jamielennox|away has joined #openstack-keystone | 03:00 | |
*** ncoghlan_ has quit IRC | 03:02 | |
*** ncoghlan__ has quit IRC | 03:03 | |
*** KanagarajM has joined #openstack-keystone | 03:04 | |
*** dims has quit IRC | 03:16 | |
*** gyee has quit IRC | 03:17 | |
*** david-lyle has joined #openstack-keystone | 03:17 | |
*** david-lyle has quit IRC | 03:22 | |
*** harlowja_away has quit IRC | 03:29 | |
*** yasukun has quit IRC | 03:36 | |
*** yasukun has joined #openstack-keystone | 03:37 | |
*** jamielennox|away has quit IRC | 03:38 | |
*** yasukun has quit IRC | 03:38 | |
*** ncoghlan_ has joined #openstack-keystone | 03:38 | |
*** yasukun has joined #openstack-keystone | 03:38 | |
*** jamielennox|away has joined #openstack-keystone | 03:39 | |
*** ncoghlan has quit IRC | 03:42 | |
*** praneshp has joined #openstack-keystone | 03:56 | |
*** gokrokve has quit IRC | 03:59 | |
*** gokrokve has joined #openstack-keystone | 03:59 | |
*** praneshp_ has joined #openstack-keystone | 04:00 | |
*** oomichi has joined #openstack-keystone | 04:01 | |
*** praneshp has quit IRC | 04:02 | |
*** praneshp_ is now known as praneshp | 04:03 | |
*** amirosh has joined #openstack-keystone | 04:04 | |
stevemar | jamielennox, if you're up, https://review.openstack.org/#/c/117087/1 | 04:46 |
stevemar | i'm tired of seeing those changes :P | 04:46 |
jamielennox | stevemar: done | 04:47 |
stevemar | thank you jamielennox | 04:48 |
stevemar | now if only i can leave a msg for henrynash - then i'll be merged when i wake up :) | 04:48 |
stevemar | it'll* | 04:48 |
stevemar | i hope i'm not merged with anything when i wake up | 04:48 |
jamielennox | lol | 04:51 |
jamielennox | 130 lines to nearly double the number of unit tests, the simple way to get test numbers up | 04:57 |
*** ajayaa has joined #openstack-keystone | 05:02 | |
*** toddnni has quit IRC | 05:11 | |
*** bdossant has quit IRC | 05:13 | |
*** bdossant has joined #openstack-keystone | 05:13 | |
*** yasukun has quit IRC | 05:30 | |
*** yasukun has joined #openstack-keystone | 05:31 | |
*** k4n0 has joined #openstack-keystone | 05:59 | |
*** ajayaa has quit IRC | 06:05 | |
*** ncoghlan has joined #openstack-keystone | 06:08 | |
*** jamielennox|away has quit IRC | 06:10 | |
*** jamielennox|away has joined #openstack-keystone | 06:11 | |
*** ncoghlan_ has quit IRC | 06:11 | |
*** chandankumar has joined #openstack-keystone | 06:14 | |
*** topol has quit IRC | 06:22 | |
*** ajayaa has joined #openstack-keystone | 06:26 | |
*** ukalifon1 has joined #openstack-keystone | 06:35 | |
*** afazekas has joined #openstack-keystone | 06:59 | |
ByteSore | hi people, got a question.. i've been testing alot today with glance authentication.. i can't get it to work. when i run a glance index i'm getting an error in the api.log: NotAuthenticated: Authentication required i have the OS_USERNAME and all set to the right info. if i check it with swift the credentials do work. | 07:01 |
*** praneshp_ has joined #openstack-keystone | 07:09 | |
*** praneshp has quit IRC | 07:10 | |
*** praneshp_ is now known as praneshp | 07:10 | |
*** bvandenh has joined #openstack-keystone | 07:28 | |
*** jamielennox|away has quit IRC | 07:38 | |
*** ncoghlan_ has joined #openstack-keystone | 07:38 | |
*** jamielennox|away has joined #openstack-keystone | 07:39 | |
*** gokrokve_ has joined #openstack-keystone | 07:40 | |
*** ncoghlan has quit IRC | 07:42 | |
*** gokrokve has quit IRC | 07:43 | |
*** f13o has quit IRC | 07:52 | |
*** bdossant_ has joined #openstack-keystone | 08:00 | |
*** shakayumi has joined #openstack-keystone | 08:01 | |
*** amerine has joined #openstack-keystone | 08:01 | |
*** electrichead has joined #openstack-keystone | 08:02 | |
*** jamielennox_ has joined #openstack-keystone | 08:03 | |
*** praneshp has quit IRC | 08:03 | |
*** jdennis1 has joined #openstack-keystone | 08:04 | |
*** henrynash has joined #openstack-keystone | 08:04 | |
*** portante_ has joined #openstack-keystone | 08:08 | |
*** dhellmann_ has joined #openstack-keystone | 08:08 | |
*** Daviey_ has joined #openstack-keystone | 08:09 | |
*** bdossant has quit IRC | 08:10 | |
*** shakamunyi has quit IRC | 08:10 | |
*** amerine_ has quit IRC | 08:10 | |
*** Daviey has quit IRC | 08:10 | |
*** redrobot has quit IRC | 08:10 | |
*** RicoLin has quit IRC | 08:10 | |
*** jamielennox has quit IRC | 08:10 | |
*** jdennis has quit IRC | 08:10 | |
*** dhellmann has quit IRC | 08:10 | |
*** portante has quit IRC | 08:10 | |
*** Daviey_ is now known as Daviey | 08:10 | |
*** dhellmann_ has quit IRC | 08:12 | |
*** dhellmann has joined #openstack-keystone | 08:12 | |
*** ncoghlan_ has quit IRC | 08:12 | |
*** stevemar has quit IRC | 08:14 | |
*** RicoLin has joined #openstack-keystone | 08:15 | |
*** RicoLin has joined #openstack-keystone | 08:16 | |
*** aix has joined #openstack-keystone | 08:20 | |
*** f13o has joined #openstack-keystone | 08:22 | |
*** shakayumi has quit IRC | 08:40 | |
*** KanagarajM has quit IRC | 08:41 | |
*** KanagarajM has joined #openstack-keystone | 08:43 | |
*** alex_xu has quit IRC | 08:57 | |
*** alex_xu has joined #openstack-keystone | 08:58 | |
*** gokrokve has joined #openstack-keystone | 09:09 | |
*** oomichi has quit IRC | 09:09 | |
*** gokrokve_ has quit IRC | 09:13 | |
*** gokrokve has quit IRC | 09:13 | |
*** bvandenh has quit IRC | 09:27 | |
*** bvandenh has joined #openstack-keystone | 09:27 | |
*** rharwood has quit IRC | 09:29 | |
*** aix has quit IRC | 09:29 | |
*** portante_ has quit IRC | 09:29 | |
*** rharwood has joined #openstack-keystone | 09:29 | |
*** chandankumar has quit IRC | 09:32 | |
*** jamielenz has joined #openstack-keystone | 09:33 | |
*** rharwood has quit IRC | 09:34 | |
*** jaosorior has joined #openstack-keystone | 09:35 | |
*** jamielennox|away has quit IRC | 09:36 | |
*** gokrokve has joined #openstack-keystone | 09:39 | |
*** gokrokve has quit IRC | 09:40 | |
*** chandankumar has joined #openstack-keystone | 09:40 | |
*** gokrokve has joined #openstack-keystone | 09:41 | |
*** portante has joined #openstack-keystone | 09:43 | |
*** KanagarajM2 has joined #openstack-keystone | 09:44 | |
*** KanagarajM has quit IRC | 09:45 | |
*** gokrokve has quit IRC | 09:45 | |
*** henrynash has quit IRC | 09:49 | |
*** rharwood has joined #openstack-keystone | 09:49 | |
*** rushiagr_away is now known as rushiagr | 09:58 | |
*** xianghuihui has joined #openstack-keystone | 10:01 | |
*** aix has joined #openstack-keystone | 10:04 | |
*** jamielennox|away has joined #openstack-keystone | 10:07 | |
*** gokrokve has joined #openstack-keystone | 10:09 | |
*** jamielenz has quit IRC | 10:09 | |
*** gokrokve has quit IRC | 10:14 | |
*** chandankumar has quit IRC | 10:26 | |
*** chandankumar has joined #openstack-keystone | 10:27 | |
*** rushiagr is now known as rushiagr_away | 10:30 | |
*** yasukun has quit IRC | 10:34 | |
*** yasukun has joined #openstack-keystone | 10:34 | |
*** jamielennox_ has quit IRC | 11:03 | |
*** gokrokve has joined #openstack-keystone | 11:09 | |
*** dhellmann has quit IRC | 11:10 | |
*** dhellmann has joined #openstack-keystone | 11:14 | |
*** gokrokve has quit IRC | 11:14 | |
*** KanagarajM2 has quit IRC | 11:22 | |
*** jasondotstar has quit IRC | 11:29 | |
*** amerine_ has joined #openstack-keystone | 11:31 | |
*** amerine has quit IRC | 11:33 | |
*** dims has joined #openstack-keystone | 11:36 | |
*** dims has quit IRC | 11:40 | |
*** dims has joined #openstack-keystone | 11:41 | |
*** dims has quit IRC | 11:41 | |
*** dims has joined #openstack-keystone | 11:42 | |
*** jasondotstar has joined #openstack-keystone | 11:44 | |
*** dims_ has joined #openstack-keystone | 11:44 | |
*** dims has quit IRC | 11:47 | |
*** amirosh has quit IRC | 11:47 | |
*** amirosh has joined #openstack-keystone | 11:49 | |
*** yasukun has quit IRC | 12:00 | |
*** dims_ has quit IRC | 12:02 | |
*** yasukun has joined #openstack-keystone | 12:03 | |
*** diegows has joined #openstack-keystone | 12:03 | |
*** jasondotstar has quit IRC | 12:06 | |
*** yasukun has quit IRC | 12:08 | |
*** ajayaa has quit IRC | 12:08 | |
*** gokrokve has joined #openstack-keystone | 12:09 | |
*** gokrokve has quit IRC | 12:11 | |
*** gokrokve has joined #openstack-keystone | 12:11 | |
*** zzzeek has joined #openstack-keystone | 12:15 | |
*** gokrokve has quit IRC | 12:16 | |
*** chandankumar has quit IRC | 12:21 | |
*** ajayaa has joined #openstack-keystone | 12:29 | |
*** zzzeek has quit IRC | 12:36 | |
*** gordc has joined #openstack-keystone | 12:38 | |
*** jasondotstar has joined #openstack-keystone | 13:02 | |
*** gokrokve has joined #openstack-keystone | 13:03 | |
*** nkinder has quit IRC | 13:03 | |
*** richm has joined #openstack-keystone | 13:04 | |
*** saipandi has joined #openstack-keystone | 13:06 | |
*** ajayaa has quit IRC | 13:13 | |
*** bknudson has quit IRC | 13:22 | |
*** ajayaa has joined #openstack-keystone | 13:32 | |
*** bknudson has joined #openstack-keystone | 13:41 | |
*** shakamunyi has joined #openstack-keystone | 13:41 | |
*** chandankumar has joined #openstack-keystone | 13:51 | |
*** nkinder has joined #openstack-keystone | 13:53 | |
*** Dafna is now known as Dafna_away | 13:57 | |
*** shakamunyi has quit IRC | 13:58 | |
*** ajayaa has quit IRC | 14:03 | |
*** ajayaa has joined #openstack-keystone | 14:04 | |
*** topol has joined #openstack-keystone | 14:10 | |
*** joesavak has joined #openstack-keystone | 14:11 | |
*** shakamunyi has joined #openstack-keystone | 14:12 | |
*** ajayaa has quit IRC | 14:16 | |
lbragstad | dstanek: around? | 14:17 |
dstanek | lbragstad: yep | 14:17 |
lbragstad | dstanek: so, with domain validation | 14:18 |
lbragstad | the identity spec says that 'description' is an option parameter | 14:18 |
lbragstad | but in the case of the sql backend, there is no column for it | 14:18 |
lbragstad | in that case, it would be thrown in the extras column | 14:19 |
lbragstad | do we update the identity api spec? | 14:19 |
lbragstad | or migrate the db such that the domain table has a description column? | 14:19 |
dstanek | lbragstad: i wouldn't. does the spec define a size at all or does it just say it's a string? | 14:19 |
lbragstad | dstanek: it just lists `description` as an optional attribute that is a of type `string` | 14:20 |
lbragstad | https://github.com/openstack/identity-api/blob/master/v3/src/markdown/identity-api-v3.md#domains-v3domains | 14:20 |
lbragstad | so, if that's the case, I'll fix the schema so that it matches what the implementation does | 14:20 |
dstanek | lbragstad: for the purposes of this milestone we should probably just validate it as a string | 14:21 |
lbragstad | ok, so keep it as is | 14:21 |
lbragstad | keep validating `description` in the assignment.domain schema | 14:21 |
dstanek | lbragstad: for now at least | 14:21 |
*** shakamunyi has quit IRC | 14:22 | |
lbragstad | dstanek: ok, i'll wrap it with the nullable method then | 14:23 |
lbragstad | because this will fail https://github.com/openstack/tempest/blob/master/tempest/services/identity/v3/json/identity_client.py#L230 | 14:23 |
*** shakamunyi has joined #openstack-keystone | 14:23 | |
*** stevemar has joined #openstack-keystone | 14:24 | |
*** KanagarajM has joined #openstack-keystone | 14:24 | |
*** chandankumar has quit IRC | 14:24 | |
*** david-lyle has joined #openstack-keystone | 14:26 | |
*** Dafna_away is now known as Dafna | 14:27 | |
KanagarajM | stevemar: one help, for the review endpoint-region association, https://review.openstack.org/#/c/113183, i see your comments on the size of the endpoint.region column size, should it be 64? | 14:27 |
stevemar | KanagarajM, i think it should be 255, keep it the same i think | 14:27 |
mflobo | stevemar, One question about Hierachical Projects https://github.com/openstack/keystone-specs/blob/master/specs/juno/hierarchical_multitenancy.rst, We will have nested groups as well or this is only for Projects? | 14:29 |
KanagarajM | stevemar: to keep the endpoint.region_id size to be 255, now this column is foreign key to region.id which is of size 64, so should i change the region.id to 255 | 14:29 |
*** amirosh has quit IRC | 14:31 | |
stevemar | mflobo, pretty sure it's just projects | 14:31 |
mflobo | stevemar, ok, thanks | 14:32 |
stevemar | KanagarajM, let me look @ the code again, one minute please | 14:33 |
KanagarajM | stevemar: sure please | 14:33 |
*** cjellick has joined #openstack-keystone | 14:34 | |
*** cjellick has quit IRC | 14:34 | |
*** cjellick has joined #openstack-keystone | 14:35 | |
*** shakamunyi has quit IRC | 14:40 | |
dstanek | KanagarajM: are you going to allow users to specify region_id when creating/updating an endpoint? | 14:41 |
*** chandankumar has joined #openstack-keystone | 14:42 | |
dstanek | the 255 vs. 64 question may be a good thing to bring up to the larger group | 14:42 |
stevemar | KanagarajM, i don't think forgein keys have a size limit? | 14:42 |
stevemar | dstanek, do you know if they do? | 14:42 |
KanagarajM | dstanesk: in v2 api, only region will be allowed to use as existing today, where as v3 api, region_id will be used by user, and region also allowed to be backward compatible | 14:42 |
dstanek | stevemar: not that i know of | 14:43 |
stevemar | dstanek, we declare all FKs to be string(64), but couldn't they be whatever we want, like string(255) or int() | 14:43 |
dstanek | stevemar: yes | 14:43 |
stevemar | KanagarajM, I would keep that column to size 255, no loss of data, and I don't believe that FKs have to be 64 | 14:43 |
*** afazekas has quit IRC | 14:43 | |
dstanek | KanagarajM: do you have tests that show v3 usage like that? the code looks like it will alway overwrite the region_id | 14:43 |
KanagarajM | dstanek: yes, i have added test cases in v3_catalog | 14:44 |
*** diegows has quit IRC | 14:45 | |
dstanek | KanagarajM: which one uses the region_id? | 14:45 |
KanagarajM | stevemar: ok, i will keep the size for endpoint.region_id as 255 and i don't change the region.id size and leave it to 64 as its | 14:45 |
stevemar | yay | 14:45 |
dstanek | wait...what? i don't think you can have a foreign key that has a different data size | 14:46 |
KanagarajM | dstanek: in v3 all the test cases are made to use region_id and added additional test cases to validate the backward compatibility with region in test_v3_catalog.py | 14:46 |
dstanek | KanagarajM: i don't get why using a region_id that doesn't exist would give you a 404 when creating an endpoint - seems confusing | 14:51 |
*** HenryG has joined #openstack-keystone | 14:51 | |
stevemar | dstanek, can i bug you for https://review.openstack.org/#/c/117087/ regenerate sample_config | 14:51 |
stevemar | I'm tired of seeing diffs in the sample config when doing reviews | 14:52 |
*** jaosorior has quit IRC | 14:52 | |
KanagarajM | dstanek: actually now, the endpoint.region_id is foreign key to region, so if endpoint.region_id region does not exist, then RegionNotFound will be thrown. | 14:52 |
dstanek | KanagarajM: but is that the right behavior? | 14:52 |
dstanek | stevemar: sure | 14:53 |
KanagarajM | dstanek: i believe so, to be in similar page, kestone throws ServiceNotFound when endpont.service_id doesnot exist. | 14:53 |
*** openstackgerrit has joined #openstack-keystone | 14:54 | |
*** xianghuihui has quit IRC | 14:55 | |
KanagarajM | stevemar, dstanek: i just tested behavior of having endpoint.region_id (255) foreign key to region.id(64) it works | 14:57 |
dstanek | KanagarajM: what happens if endpoint.region_id have a value that is 100 characters? | 14:58 |
KanagarajM | stevemar, dstanek: tried with upgrade and downgrade * | 14:59 |
dstanek | KanagarajM: with what database? | 14:59 |
*** jdennis1 has quit IRC | 14:59 | |
KanagarajM | dstanek: mysql | 14:59 |
dstanek | KanagarajM: what what the value in the primary key column when the value or the foreign key was too large to fit? | 15:01 |
KanagarajM | dstanek: yes, it will lead to confusion when region_id is > 64 in len. so shall will keep 64 as real world regions are usually in lesser length and tempest aslo passes? | 15:03 |
*** amirosh has joined #openstack-keystone | 15:06 | |
dstanek | KanagarajM: i don't think tempest matters is cases like this - they play to the know as opposed to what's possible | 15:07 |
*** f13o has quit IRC | 15:07 | |
dstanek | KanagarajM: i think that having input from dolphm, morganfainberg and others would be wise. i suspect that truncating to 64 would be OK, but i had to call it out | 15:09 |
*** ukalifon1 has quit IRC | 15:09 | |
*** joesavak has quit IRC | 15:10 | |
*** joesavak has joined #openstack-keystone | 15:11 | |
*** KanagarajM has quit IRC | 15:17 | |
*** KanagarajM has joined #openstack-keystone | 15:18 | |
KanagarajM | dstanek: i got disconnected | 15:18 |
KanagarajM | dstanek, stevemar: could you suggest me to finalize the size for the endpoint.region_id and region.id. | 15:18 |
*** Daviey has quit IRC | 15:18 | |
*** cjellick has quit IRC | 15:19 | |
*** Daviey_ has joined #openstack-keystone | 15:19 | |
*** cjellick_ has joined #openstack-keystone | 15:19 | |
*** Daviey_ is now known as Daviey | 15:19 | |
morganfainberg | mornin | 15:19 |
*** erecio has joined #openstack-keystone | 15:22 | |
*** erecio has quit IRC | 15:22 | |
*** nkinder has quit IRC | 15:22 | |
*** bambam1 has quit IRC | 15:22 | |
*** vhoward- has quit IRC | 15:22 | |
*** Jean-Daniel1 has quit IRC | 15:22 | |
*** gmurphy has quit IRC | 15:22 | |
*** mfisch has quit IRC | 15:22 | |
*** erecio has joined #openstack-keystone | 15:22 | |
*** nkinder has joined #openstack-keystone | 15:22 | |
*** bambam1 has joined #openstack-keystone | 15:22 | |
*** vhoward- has joined #openstack-keystone | 15:22 | |
*** Jean-Daniel1 has joined #openstack-keystone | 15:22 | |
*** gmurphy has joined #openstack-keystone | 15:22 | |
*** mfisch has joined #openstack-keystone | 15:22 | |
*** erecio has quit IRC | 15:23 | |
*** erecio has joined #openstack-keystone | 15:23 | |
*** cjellick_ has quit IRC | 15:24 | |
*** topol has quit IRC | 15:24 | |
*** electrichead is now known as redrobot | 15:26 | |
dstanek | KanagarajM: not really...i'd like to get some other opinions | 15:27 |
KanagarajM | dstanek: sure | 15:27 |
stevemar | g'mornin morganfainberg | 15:30 |
stevemar | dstanek, whats the deal with api validation? | 15:30 |
stevemar | should i be reviewing that or not? | 15:31 |
stevemar | morganfainberg, also, when you have time, can you walk me through "Remove assignment_api dependency on token_api" | 15:32 |
*** openstack has joined #openstack-keystone | 16:18 | |
morganfainberg | stevemar, which one? | 16:19 |
*** amerine has joined #openstack-keystone | 16:21 | |
openstackgerrit | OpenStack Proposal Bot proposed a change to openstack/keystone: Updated from global requirements https://review.openstack.org/111620 | 16:22 |
*** bdossant_ has quit IRC | 16:22 | |
*** wwriverrat has left #openstack-keystone | 16:22 | |
*** amerine_ has quit IRC | 16:24 | |
*** marcoemorais has joined #openstack-keystone | 16:25 | |
*** bknudson has quit IRC | 16:26 | |
*** amerine_ has joined #openstack-keystone | 16:27 | |
*** amerine has quit IRC | 16:30 | |
*** dims has joined #openstack-keystone | 16:30 | |
*** amerine_ is now known as amerine | 16:34 | |
*** nkinder has quit IRC | 16:37 | |
*** nkinder has joined #openstack-keystone | 16:39 | |
openstackgerrit | Stuart McLaren proposed a change to openstack/keystonemiddleware: Add composite authentication support https://review.openstack.org/108384 | 16:41 |
openstackgerrit | Lance Bragstad proposed a change to openstack/keystone: Add string id type validation https://review.openstack.org/108862 | 16:42 |
*** marcoemorais has quit IRC | 16:42 | |
*** marcoemorais has joined #openstack-keystone | 16:42 | |
*** marcoemorais has quit IRC | 16:43 | |
*** marcoemorais has joined #openstack-keystone | 16:43 | |
*** rushiagr_away is now known as rushiagr | 16:43 | |
*** marcoemorais has quit IRC | 16:43 | |
*** marcoemorais has joined #openstack-keystone | 16:44 | |
openstackgerrit | Henrique Truta proposed a change to openstack/python-keystoneclient: Creating parameter to list inherited role assignments https://review.openstack.org/117300 | 16:45 |
openstackgerrit | Stuart McLaren proposed a change to openstack/keystonemiddleware: Add composite authentication support https://review.openstack.org/108384 | 16:49 |
*** zzzeek has joined #openstack-keystone | 16:52 | |
openstackgerrit | Lance Bragstad proposed a change to openstack/keystone: Add string id type validation https://review.openstack.org/108862 | 16:52 |
*** jimhoagland has joined #openstack-keystone | 16:58 | |
openstackgerrit | Kanagaraj Manickam proposed a change to openstack/keystone: Endpoint table is missing reference to region table https://review.openstack.org/113183 | 16:58 |
*** gokrokve_ has joined #openstack-keystone | 17:00 | |
*** gyee has joined #openstack-keystone | 17:00 | |
stevemar | morganfainberg, i forgot my question, but can you look @ https://review.openstack.org/#/c/113183/ specifically the sql FK size portion | 17:04 |
*** gokrokve has quit IRC | 17:04 | |
*** harlowja has joined #openstack-keystone | 17:04 | |
gabriel-bezerra | Hi all. In case of using LDAP as identity backend, are the service's users supposed to be stored in the ldap server along with the user's users? | 17:04 |
gabriel-bezerra | By this doc page, it seems not, but it is not clear: http://docs.openstack.org/grizzly/openstack-compute/admin/content/keystone-concepts.html#keystone-service-mgmt | 17:05 |
morganfainberg | stevemar, in the migration or in the model or both? | 17:07 |
stevemar | morganfainberg, both | 17:07 |
morganfainberg | stevemar, what about FK size? | 17:09 |
morganfainberg | stevemar, i'm... confused what you;re asking for | 17:09 |
*** praneshp has joined #openstack-keystone | 17:10 | |
gabriel-bezerra | This is newer: http://docs.openstack.org/admin-guide-cloud/content/keystone-service-mgmt.html | 17:10 |
*** KanagarajM has quit IRC | 17:11 | |
stevemar | morganfainberg, there was a bunch of discussion earlier, the author changed endpoints (region_id) from 255 to 64 and made it a FK | 17:12 |
morganfainberg | oh | 17:12 |
stevemar | morganfainberg, dstanek is worried that might cause some loss of data | 17:12 |
morganfainberg | oooooooh | 17:12 |
morganfainberg | yeah we can't do that | 17:12 |
stevemar | i said to keep it at 255 | 17:12 |
morganfainberg | oh ick | 17:12 |
morganfainberg | not pretty | 17:12 |
stevemar | we deferred to your judgement :) | 17:13 |
stevemar | i think 255 -> 64 is definitely not right | 17:13 |
stevemar | though it is a UUID | 17:13 |
stevemar | so.. it might be OK | 17:13 |
*** jsavak has joined #openstack-keystone | 17:14 | |
morganfainberg | except endpoint region could have been *anything*? | 17:15 |
*** joesavak has quit IRC | 17:16 | |
morganfainberg | also.. is it ok to rename region -> region_id ? | 17:17 |
morganfainberg | i'm thinking that might be bad. | 17:17 |
openstackgerrit | Steve Martinelli proposed a change to openstack/keystone: Add bash code style to some portions of configuration.rst https://review.openstack.org/117308 | 17:18 |
*** amirosh has joined #openstack-keystone | 17:18 | |
jimhoagland | Hello all. I'm hoping someone can help me. Has anyone made use of the Keystone middleware in Autobahn|Python or have suggestions on how to do so? I have an Autobahn Websocket service based on asyncio (Trollius) into which I want to add Keystone authentication. | 17:22 |
morganfainberg | jimhoagland, I haven't heard of anyone using Autobahn and keystonemiddleware. | 17:23 |
morganfainberg | jimhoagland, the keystonemiddleware should work if you can leverage something like a paste pipeline, though (of course) if you're running into a specific error we can try and help resolve it / point you in the right direction / ask you to file a bug so we can fix it | 17:24 |
morganfainberg | jimhoagland, but you very well might be treading on new groud :) | 17:25 |
*** arborism has joined #openstack-keystone | 17:26 | |
*** arborism has quit IRC | 17:26 | |
*** amerine_ has joined #openstack-keystone | 17:26 | |
*** amcrn has joined #openstack-keystone | 17:27 | |
*** marcoemorais has quit IRC | 17:27 | |
*** marcoemorais has joined #openstack-keystone | 17:27 | |
*** marcoemorais has quit IRC | 17:27 | |
openstackgerrit | A change was merged to openstack/keystone-specs: Move trust redelegation to Kilo https://review.openstack.org/116639 | 17:27 |
*** marcoemorais has joined #openstack-keystone | 17:28 | |
*** marcoemorais has quit IRC | 17:28 | |
*** marcoemorais has joined #openstack-keystone | 17:28 | |
jimhoagland | morganfainberg, I figured this might be new ground but was hoping someone might have tried this before | 17:29 |
*** amerine has quit IRC | 17:29 | |
morganfainberg | stevemar, https://review.openstack.org/#/c/113183/ commented | 17:30 |
stevemar | morganfainberg, thank you | 17:31 |
morganfainberg | stevemar, if it is a non-breaking issue / minimal breakage approval is fine (henry-nash gave a +2) | 17:31 |
morganfainberg | stevemar, but in havana region was free form with no corresponding model | 17:31 |
morganfainberg | it would be possible to have an endpoint without a region in the region table that was *never* updated | 17:31 |
morganfainberg | and just lingering around | 17:31 |
morganfainberg | and this would then break that region information (yes this is a fairly extreme edge case) | 17:32 |
stevemar | morganfainberg, whats the downside to having the FK be of size 255? | 17:32 |
morganfainberg | stevemar, overhead | 17:33 |
morganfainberg | stevemar, varchars are relatively efficient though | 17:35 |
morganfainberg | shouldnt be the end of the world | 17:35 |
*** aix has quit IRC | 17:37 | |
*** f13o has quit IRC | 17:39 | |
stevemar | morganfainberg, OK, sounds like setting it back to 255 would solve our concerns... | 17:40 |
morganfainberg | yeah | 17:40 |
stevemar | morganfainberg, henrynash, dstanek should we toss up a patch setting it to 255 and push it through? | 17:41 |
stevemar | bah henrys not online | 17:41 |
morganfainberg | stevemar, not opposed to that. | 17:42 |
stevemar | as bill said, f it, lets do it live | 17:42 |
*** joesavak has joined #openstack-keystone | 17:44 | |
openstackgerrit | Steve Martinelli proposed a change to openstack/keystone: Endpoint table is missing reference to region table https://review.openstack.org/113183 | 17:46 |
*** jsavak has quit IRC | 17:47 | |
openstackgerrit | Steve Martinelli proposed a change to openstack/keystone: backend for policy endpoint extension https://review.openstack.org/115362 | 17:48 |
openstackgerrit | Steve Martinelli proposed a change to openstack/keystone: controller for the endpoint policy extension https://review.openstack.org/115746 | 17:49 |
stevemar | morganfainberg, dstanek dolphm OK, the region_id BP and henrys endpoint policy stuff is all lined up, just needs another +2 :D | 17:50 |
stevemar | start at this chain and work your way up! https://review.openstack.org/#/c/113183/24 | 17:50 |
openstackgerrit | Bob Thyne proposed a change to openstack/keystone: Implementation of Endpoint Grouping https://review.openstack.org/111949 | 17:50 |
morganfainberg | stevemar, hmm. | 17:52 |
stevemar | uh oh | 17:53 |
bambam1 | hello where exactly is located the file that has all the extensions for keystone? i'm trying to enable OS-KSADM | 17:53 |
stevemar | it's never good when morganfainberg hmms | 17:53 |
morganfainberg | stevemar, oh troubleshooting a series of tracebacks i don't understand why i'm getting. | 17:53 |
*** hockeynut has joined #openstack-keystone | 17:58 | |
openstackgerrit | Bob Thyne proposed a change to openstack/keystone: Implementation of Endpoint Grouping https://review.openstack.org/111949 | 18:04 |
*** toddnni has joined #openstack-keystone | 18:08 | |
openstackgerrit | A change was merged to openstack/keystone: Notification Constant Cleanup and internal notify type https://review.openstack.org/115337 | 18:13 |
morganfainberg | stevemar, crap. need to talk to ayoung about this. there is some bad assumptions :( | 18:16 |
*** rushiagr is now known as rushiagr_away | 18:16 | |
openstackgerrit | Morgan Fainberg proposed a change to openstack/keystone: Do not load auth plugins by class in tests https://review.openstack.org/117062 | 18:16 |
openstackgerrit | Lance Bragstad proposed a change to openstack/keystone: Add string id type validation https://review.openstack.org/108862 | 18:20 |
*** bknudson has joined #openstack-keystone | 18:21 | |
stevemar | morganfainberg, still on the stacktrace? | 18:21 |
stevemar | revocations? | 18:21 |
*** RicoLin has quit IRC | 18:21 | |
*** ukalifon has joined #openstack-keystone | 18:24 | |
*** dims has quit IRC | 18:28 | |
morganfainberg | stevemar, found it | 18:28 |
morganfainberg | stevemar, yeah there was some assumption on the auth plugin method name | 18:28 |
morganfainberg | fixed it finally. | 18:28 |
*** dims has joined #openstack-keystone | 18:28 | |
*** gokrokve has joined #openstack-keystone | 18:29 | |
*** gokrokve_ has quit IRC | 18:33 | |
raildo | dolphm: How do I create a new branch in gerrit for the patches of hierarchical projects? | 18:33 |
raildo | dolphm: i have this permission? | 18:33 |
dstanek | morganfainberg: i was worried about the renaming (region -> region_id) too, but couldn't find anything that would break because of it | 18:35 |
morganfainberg | dstanek, yeah | 18:36 |
morganfainberg | raildo, i thnk either dolphm can do it or we need infra to | 18:36 |
*** gokrokve has quit IRC | 18:36 | |
raildo | morganfainberg: That's what I was thinking | 18:36 |
dstanek | so is the thought to resize region.id to 255 or to resize endpoint.region to 64? | 18:37 |
*** gokrokve has joined #openstack-keystone | 18:37 | |
raildo | morganfainberg: yesterday at the meeting, he suggested that I created a branch for hierarchical projects. | 18:37 |
morganfainberg | dolphm, resize region.id | 18:37 |
morganfainberg | erm dstanek ^ | 18:37 |
*** gokrokve has quit IRC | 18:39 | |
*** gokrokve has joined #openstack-keystone | 18:39 | |
dstanek | morganfainberg: thx | 18:40 |
morganfainberg | dstanek, this is becaus ehavana we didn't have a region model | 18:41 |
morganfainberg | and if you didn't update the endpoing since havana you might have region = <random string> | 18:41 |
*** bobt_ has joined #openstack-keystone | 18:41 | |
raildo | morganfainberg: So, i have to talk with the infra team to create this branch? Or dolph can do this? | 18:42 |
morganfainberg | raildo, honestly not sure | 18:43 |
*** zigo has quit IRC | 18:43 | |
morganfainberg | raildo, will chase that info down for you post lunch unless someone else can get to it first | 18:43 |
*** gokrokve has quit IRC | 18:44 | |
*** gokrokve has joined #openstack-keystone | 18:45 | |
raildo | morganfainberg: ok, thanks :-D | 18:45 |
*** harlowja has quit IRC | 18:46 | |
*** zigo has joined #openstack-keystone | 18:46 | |
dstanek | raildo: morganfainberg: not sure who can do it, but the instructions are here: https://wiki.openstack.org/wiki/GerritJenkinsGit#Create_proposed.2F.2A_Branch | 18:46 |
*** harlowja has joined #openstack-keystone | 18:46 | |
dstanek | stevemar: i'm still not liking the 404 on the test_create_endpoint_404 test | 18:47 |
stevemar | dstanek, ref? | 18:48 |
dstanek | https://review.openstack.org/#/c/113183/24/keystone/tests/test_v3_catalog.py | 18:48 |
raildo | dstanek: Indeed, I do not have permission to perform this, but I believe this is the way. | 18:48 |
openstackgerrit | Lance Bragstad proposed a change to openstack/identity-api: Domain IDs in project references are required https://review.openstack.org/117325 | 18:48 |
*** gokrokve has quit IRC | 18:49 | |
stevemar | dstanek, this one? test_create_endpoint_404(self | 18:50 |
openstackgerrit | Bob Thyne proposed a change to openstack/keystone: Implementation of Endpoint Grouping https://review.openstack.org/111949 | 18:50 |
dstanek | stevemar: yes | 18:50 |
dstanek | stevemar: to me bad data in the message body should be a 400 and not a 404 | 18:51 |
*** bobt_ has quit IRC | 18:56 | |
stevemar | dstanek, ok now i'm really confused | 18:59 |
stevemar | dstanek, how does that command even return a 400? | 18:59 |
dstanek | stevemar: creating an endpoint? | 18:59 |
*** Shrews has joined #openstack-keystone | 18:59 | |
stevemar | i'm looking at the controller, it creates a region entry if it can't find the region | 18:59 |
stevemar | line 100 https://review.openstack.org/#/c/113183/24/keystone/catalog/controllers.py | 19:00 |
openstackgerrit | Morgan Fainberg proposed a change to openstack/keystone: Notification Cleanup: Objects for actions https://review.openstack.org/117330 | 19:01 |
openstackgerrit | Morgan Fainberg proposed a change to openstack/keystone: Comments to docstrings for notification emit methods https://review.openstack.org/117331 | 19:01 |
dstanek | stevemar: the poster said that a RegionNotFound is raised at some point | 19:01 |
*** gokrokve has joined #openstack-keystone | 19:02 | |
stevemar | dstanek, oh i was looking at the v2 controller | 19:02 |
stevemar | v3 is at line 309 | 19:02 |
*** amirosh has quit IRC | 19:03 | |
stevemar | dstanek, it's going right into the else block at line 296 | 19:04 |
*** amirosh has joined #openstack-keystone | 19:04 | |
dstanek | stevemar: ah, yeah. 296 is where the exception is thrown | 19:04 |
openstackgerrit | Morgan Fainberg proposed a change to openstack/keystone: Notification Cleanup: Objects for actions https://review.openstack.org/117330 | 19:05 |
openstackgerrit | Morgan Fainberg proposed a change to openstack/keystone: Add commas for ease of maintenance https://review.openstack.org/117332 | 19:05 |
stevemar | cause region isn't None, but some bogus stuff | 19:05 |
openstackgerrit | Morgan Fainberg proposed a change to openstack/keystone: Comments to docstrings for notification emit methods https://review.openstack.org/117331 | 19:05 |
lbragstad | dstanek: this guy can be abandon now https://review.openstack.org/#/c/110338/ | 19:05 |
*** gokrokve has quit IRC | 19:07 | |
dstanek | lbragstad: doing that now | 19:08 |
*** amirosh has quit IRC | 19:08 | |
dstanek | lbragstad: can you make sure we have a test showing that domain_id can't updated to null? | 19:08 |
morganfainberg | stevemar, your fix wont work | 19:09 |
morganfainberg | stevemar, for the region stuff | 19:09 |
morganfainberg | https://review.openstack.org/#/c/113183/24/keystone/catalog/backends/sql.py region.id is still 64 characters | 19:09 |
openstackgerrit | henry-nash proposed a change to openstack/keystone: Mark kvs backends as deprecated, for removal in Kilo. https://review.openstack.org/117288 | 19:10 |
*** henrynash has joined #openstack-keystone | 19:10 | |
openstackgerrit | Lance Bragstad proposed a change to openstack/keystone: Add string id type validation https://review.openstack.org/108862 | 19:12 |
morganfainberg | stevemar, set that review to WIP, sorry :( | 19:12 |
lbragstad | dstanek: yeah, I can add a test for that | 19:12 |
morganfainberg | stevemar, other than that the review looks good | 19:12 |
morganfainberg | dstanek, cc ^ | 19:13 |
stevemar | morganfainberg, shiettt | 19:13 |
dstanek | morganfainberg: you beat me to it :-( | 19:13 |
dstanek | morganfainberg: what do you think about the 404 vs 400? | 19:14 |
morganfainberg | dstanek, hmm. | 19:14 |
morganfainberg | dstanek, it's not a different class of status | 19:14 |
*** gokrokve has joined #openstack-keystone | 19:15 | |
morganfainberg | dstanek, yeah it should be a 400 | 19:15 |
morganfainberg | dstanek, it's not "not found" it's validation error. | 19:15 |
morganfainberg | i dunno what happens if we create a project for a bogus domain? | 19:16 |
morganfainberg | does that 404 or 400? | 19:16 |
*** gokrokve has quit IRC | 19:17 | |
dstanek | morganfainberg: i'm writing up a bug right now for creating an endpoint with an invalid service_id | 19:17 |
*** gokrokve_ has joined #openstack-keystone | 19:17 | |
*** jdennis has joined #openstack-keystone | 19:17 | |
morganfainberg | dstanek, ++ | 19:17 |
dstanek | morganfainberg: i'll write a test for that too | 19:17 |
openstackgerrit | Lance Bragstad proposed a change to openstack/keystone: Add string id type validation https://review.openstack.org/108862 | 19:20 |
lbragstad | dstanek: ^ added a test so that domain_id can't be None in project update references | 19:20 |
*** jsavak has joined #openstack-keystone | 19:22 | |
lbragstad | does anyone have the link handy for the starred reviews? | 19:22 |
morganfainberg | lbragstad, dstanek, mind setting any of the "not-ready-for-consumption" reviews to WIP? | 19:23 |
morganfainberg | lbragstad, dstanek, i'm not sure which validate ones i should be looking at | 19:24 |
morganfainberg | if any | 19:24 |
*** r-daneel has joined #openstack-keystone | 19:24 | |
lbragstad | morganfainberg: start here: https://review.openstack.org/#/c/116954/ | 19:24 |
morganfainberg | lbragstad, ok | 19:24 |
morganfainberg | thanks | 19:24 |
*** joesavak has quit IRC | 19:24 | |
lbragstad | that's the base one that extends some of the testing stuff we need in later patches | 19:24 |
morganfainberg | ah cool | 19:24 |
lbragstad | from there, everything else is pretty much dependent on that, the policy, assignment, catalog, and credential API validation patches are passing jenkins | 19:25 |
lbragstad | and finally https://review.openstack.org/#/c/108862/ which adds another parameter_type | 19:25 |
*** joesavak has joined #openstack-keystone | 19:25 | |
stevemar | and if i could plead to the cores, please review the keystone2keystone stuff :) | 19:26 |
morganfainberg | stevemar, but... i dunt wanna :P yeah on my list but i need fooooooood | 19:27 |
stevemar | thank you morganfainberg :) | 19:27 |
stevemar | it's not nearly as scary as the federation code from last release | 19:27 |
stevemar | if that helps | 19:27 |
stevemar | also, i give up on the region.id code, that is someone else's problem now :P | 19:28 |
*** jsavak has quit IRC | 19:28 | |
morganfainberg | stevemar, i've got 2-3 other things on my plate to do today, but if i have some time i'll swing through and fix the 255 column thing | 19:32 |
morganfainberg | at the least | 19:32 |
stevemar | morganfainberg, sounds fair, i'll review it at night again, i'm fine with it aside from that part | 19:33 |
stevemar | and im fine with henrynash's changes too | 19:33 |
morganfainberg | the 404 vs 400 is a minor other issue | 19:33 |
stevemar | just eager to get stuff in :) | 19:33 |
stevemar | the sooner we close out some specs, the sooner people are forced to look at keystone2keystone :D | 19:34 |
raildo | henrynash: The folks at my team resolved this bug and had a comment yours about it. I think you'd be interested in reviewing it :) https://review.openstack.org/#/c/116682/ | 19:36 |
*** stevelle has joined #openstack-keystone | 19:39 | |
*** cjellick has joined #openstack-keystone | 19:43 | |
openstackgerrit | David Stanek proposed a change to openstack/keystone: Fixes HTTP status code when creating/updating endpoints https://review.openstack.org/117341 | 19:44 |
*** Shrews has left #openstack-keystone | 19:48 | |
*** ukalifon has quit IRC | 19:51 | |
*** amerine_ is now known as amerine | 20:04 | |
*** stevemar has quit IRC | 20:06 | |
*** erecio has quit IRC | 20:07 | |
henrynash | raildo: ok…will look at it later today | 20:09 |
*** bobt_ has joined #openstack-keystone | 20:12 | |
*** henrynash has quit IRC | 20:14 | |
*** nkinder has quit IRC | 20:28 | |
*** david-lyle has quit IRC | 20:37 | |
*** david-lyle has joined #openstack-keystone | 20:37 | |
*** amerine has quit IRC | 20:44 | |
*** nkinder has joined #openstack-keystone | 20:45 | |
*** amerine has joined #openstack-keystone | 20:54 | |
*** rm_work is now known as rm_work|away | 21:03 | |
*** marcoemorais has quit IRC | 21:07 | |
*** marcoemorais has joined #openstack-keystone | 21:07 | |
*** marcoemorais has quit IRC | 21:08 | |
*** marcoemorais has joined #openstack-keystone | 21:08 | |
*** jsavak has joined #openstack-keystone | 21:11 | |
lbragstad | dstanek: around? | 21:14 |
*** joesavak has quit IRC | 21:14 | |
dstanek | lbragstad: | 21:18 |
dstanek | errr....yes | 21:19 |
lbragstad | dstanek: I think I found a bug with how trusts are tested... opening a bug report for it now | 21:19 |
dstanek | lbragstad: send me the link once you create it | 21:20 |
morganfainberg | notmyname, i'm back from lunch now, anytime you're available is good for me re: operator meetup | 21:23 |
*** sagara has joined #openstack-keystone | 21:26 | |
sagara | Hi | 21:28 |
*** jasondotstar has quit IRC | 21:28 | |
lbragstad | dstanek: brain dump https://bugs.launchpad.net/keystone/+bug/1362344 | 21:29 |
uvirtbot` | Launchpad bug 1362344 in keystone "Tests for Trusts don't actually test the roles provided in the trust reference" [Undecided,New] | 21:29 |
sagara | Is there anyone can triage bug importance https://bugs.launchpad.net/python-keystoneclient/+bug/1360892 , and review https://review.openstack.org/#/c/116523/ ? | 21:30 |
uvirtbot` | Launchpad bug 1360892 in python-keystoneclient "EC2 v4 signature calculation is wrong, in case of request is POST" [Undecided,In progress] | 21:30 |
sagara | It blocks Heat Instance HA feature, so I think it's importance is high or critical. | 21:31 |
*** nkinder has quit IRC | 21:39 | |
openstackgerrit | Brad Topol proposed a change to openstack/keystone: Add audit support to keystone federation https://review.openstack.org/114337 | 21:42 |
topol | gyee I was so close to being done with my patch and your cleanup of notifications caused me to have to rebase one more time!! | 21:43 |
topol | Thanks gyee!!! | 21:43 |
morganfainberg | topol, you sure that was gyee ? | 21:47 |
lbragstad | dstanek: according to the trust spec, trust['roles'] is a list of objects, but I *think* it has to be a list of dictionaries | 21:48 |
lbragstad | so, trust['roles'] = [{'id': '<some-role-id>'},{'name': '<some-role-name>'}] | 21:49 |
*** amerine has quit IRC | 21:49 | |
topol | morganfainberg I stand corrected!!! et tu brutus??? | 21:49 |
morganfainberg | topol, oh don't worry there is a nother change coming | 21:49 |
topol | morganfainberg it was you | 21:49 |
morganfainberg | topol, as well | 21:49 |
morganfainberg | topol, https://review.openstack.org/#/c/117330/ | 21:50 |
lbragstad | where as the new_trust_ref builds trust['roles'] = ['some-role-id', 'some-role-name'] | 21:50 |
topol | morganfainberg, I HATE YOU I HATE YOU I HATE YOU :-) | 21:51 |
topol | morganfainberg, its all good. We all know I need as much practice as I can get | 21:51 |
morganfainberg | topol, i think i squeeze one more change into notifications before yours lands (as soon as you rebase) if you *really* want | 21:51 |
morganfainberg | sagara, i'm looking at that bug and the code now | 21:52 |
topol | morganfainberg, no more for me thanks... Im driving | 21:52 |
sagara | morganfainberg: Thank you! | 21:52 |
morganfainberg | sagara, i'll be honest, i'm not as familiar with the Ec2v4 stuff as i should be :P | 21:52 |
morganfainberg | so it's taking me a bit to see what is going on | 21:53 |
bambam1 | hello somebody could help me to answer this question please :)? http://stackoverflow.com/questions/25537441/keystone-get-user-email | 21:55 |
morganfainberg | sagara, so if i'm reading this correctly it's just that EC2 says query_string should be '' if the query is a POST? | 21:55 |
topol | morganfainberg between trying to get my code done in time and my daughter starting high school Im on 3 hours sleep. and I thought I could take tonight off... | 21:55 |
*** dims has quit IRC | 21:55 | |
morganfainberg | topol, oh sorry, we need to get you down to 1hr sleep | 21:55 |
morganfainberg | topol, didn't you get the memo? | 21:55 |
topol | morganfainberg thank you for pushing me to the new normal | 21:56 |
sagara | morganfainberg: EC2 documents is not consistent. | 21:56 |
morganfainberg | sagara, ugh that makes this tough :( | 21:56 |
morganfainberg | sagara, i can see why this mismatch could be bad though. | 21:56 |
morganfainberg | sagara, /me wants a clean spec from amazon (hahahahah wow, pot, kettle, anyone? topol what do you think, silly of me to ask right?) | 21:57 |
*** rm_work|away is now known as rm_work | 21:57 | |
sagara | morganfainberg: please wait. | 21:57 |
topol | morganfainberg you get what you deserve :-) | 21:58 |
morganfainberg | sagara, sure. i see the issue i need to go take a peek at boto. but this looks like a legitimate issue. | 21:58 |
*** amerine has joined #openstack-keystone | 22:00 | |
sagara | morganfainberg: In my launchpad report, cfnbootstrap/aws_client.py implements contains "if verb == 'POST' else ''". | 22:00 |
sagara | morganfainberg: and boto too. so EC2 document may be wrong. | 22:01 |
morganfainberg | sagara, right | 22:01 |
morganfainberg | thats why this is a hard one | 22:02 |
sagara | morganfainberg: additionaly, current keystoneclient test code also describes, this inconsistent problem. | 22:02 |
sagara | morganfainberg: it's hard.. | 22:02 |
sagara | https://review.openstack.org/#/c/116523/2/keystoneclient/tests/test_ec2utils.py L129 | 22:03 |
*** jsavak has quit IRC | 22:04 | |
sagara | morganfainberg: If you could not determine immediately, please turn it later. but it's important for Heat users. | 22:07 |
*** gordc has quit IRC | 22:08 | |
*** harlowja_ has joined #openstack-keystone | 22:13 | |
*** saipandi has quit IRC | 22:13 | |
*** harlowja_ has quit IRC | 22:15 | |
*** harlowja_ has joined #openstack-keystone | 22:15 | |
*** harlowja has quit IRC | 22:16 | |
morganfainberg | sagara, yeah i'm looking at it, trying to figure it out | 22:16 |
*** topol has quit IRC | 22:18 | |
openstackgerrit | Lance Bragstad proposed a change to openstack/keystone: Add string id type validation https://review.openstack.org/108862 | 22:20 |
openstackgerrit | Lance Bragstad proposed a change to openstack/keystone: Adds tests that show how update with validation works https://review.openstack.org/116954 | 22:20 |
openstackgerrit | Lance Bragstad proposed a change to openstack/keystone: Implement validation on Assignment V3 API https://review.openstack.org/86484 | 22:20 |
openstackgerrit | Lance Bragstad proposed a change to openstack/keystone: Implement validation on Trust V3 API https://review.openstack.org/104066 | 22:20 |
morganfainberg | sagara, we'll definitely need to get some resolution on it | 22:21 |
sagara | morganfainberg: yes. what is need? | 22:22 |
morganfainberg | sagara, it's a question of making sure we're doing it the right way. though my guess is boto would be far more broken and have louder complaints | 22:23 |
morganfainberg | sagara, so i'm inclined to belive boto is doing it right | 22:24 |
sagara | morganfainberg: Is it bad to align keystoneclient to AWS original client? | 22:26 |
morganfainberg | sagara, no. it isn't bad. | 22:28 |
*** Daviey has quit IRC | 22:31 | |
sagara | morganfainberg: Sorry, I need to ready for work. I'm live in JST(Japan) timezone. now is at 7:30 in AM. | 22:35 |
sagara | morganfainberg: I will also see this IRC tonight. | 22:35 |
morganfainberg | sagara, no worries i'll continue looking at this. i'll try and get some response on the bug/code as soon as possible | 22:35 |
sagara | morganfainberg: Yes, please. for now, please change launchpad importance status. | 22:35 |
sagara | morganfainberg: If you have any request for me to solvethis, please comment to launchpad. | 22:36 |
morganfainberg | sagara, ++ will do | 22:37 |
sagara | morganfainberg: Thank you, bye. | 22:37 |
*** praneshp has quit IRC | 22:40 | |
*** marcoemorais has quit IRC | 22:40 | |
*** marcoemorais has joined #openstack-keystone | 22:40 | |
*** marcoemorais has quit IRC | 22:41 | |
*** marcoemorais has joined #openstack-keystone | 22:41 | |
morganfainberg | lbragstad, ping | 22:46 |
openstackgerrit | Brant Knudson proposed a change to openstack/keystone: pki/ssl_setup configurable digest https://review.openstack.org/117366 | 22:46 |
openstackgerrit | Brant Knudson proposed a change to openstack/keystone: Change the default digest for pki/ssl_setup to sha256 https://review.openstack.org/117367 | 22:46 |
*** Daviey has joined #openstack-keystone | 22:47 | |
*** stevelle has quit IRC | 23:02 | |
openstackgerrit | Brant Knudson proposed a change to openstack/python-keystoneclient: Change cms_sign_data to use sha256 message digest https://review.openstack.org/117371 | 23:07 |
openstackgerrit | Brant Knudson proposed a change to openstack/python-keystoneclient: cms_sign_data support alternative message digest https://review.openstack.org/117372 | 23:07 |
*** rm_work is now known as rm_work|away | 23:08 | |
*** jamielennox|away is now known as jamielennox | 23:10 | |
*** stevelle has joined #openstack-keystone | 23:13 | |
jamielennox | quite a check/gate queue this morning | 23:28 |
*** richm has quit IRC | 23:37 | |
*** oomichi has joined #openstack-keystone | 23:39 | |
*** david-lyle has quit IRC | 23:42 | |
openstackgerrit | Brant Knudson proposed a change to openstack/keystone: Configurable PKI token signature digest https://review.openstack.org/117380 | 23:42 |
morganfainberg | jamielennox, i know right?! | 23:42 |
jamielennox | morganfainberg: i logged on a couple of hours ago to recheck the things that had failed expecting them to be ok by now, most of them are still queued | 23:43 |
*** sagara has quit IRC | 23:43 | |
morganfainberg | milestone time! | 23:43 |
*** jimhoagland has quit IRC | 23:47 | |
*** RicoLin has joined #openstack-keystone | 23:50 | |
jamielennox | https://review.openstack.org/#/c/113415/ - has a +2 and +1 already - anyone? | 23:52 |
*** gokrokve_ has quit IRC | 23:54 | |
*** dims has joined #openstack-keystone | 23:59 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!