Tuesday, 2014-12-30

« Monday, 2014-12-29 Index Wednesday, 2014-12-31 »
*** david-lyle is now known as david-lyle_afk00:06
_cjones_Anyone able to answer anything about OS-REVOKE00:08
_cjones_?00:08
*** diegows has joined #openstack-keystone00:11
*** afaranha has quit IRC00:17
*** nellysmitt has joined #openstack-keystone00:31
*** nellysmitt has quit IRC00:36
*** diegows has quit IRC00:38
*** dims__ has quit IRC00:42
*** LinstatSDR has quit IRC00:47
*** zzzeek has quit IRC01:03
*** afaranha has joined #openstack-keystone01:06
openstackgerritDave Chen proposed openstack/keystone: Check token provider's configuration  https://review.openstack.org/14399001:22
*** dims__ has joined #openstack-keystone01:24
*** dims__ has quit IRC01:46
*** dims__ has joined #openstack-keystone01:58
*** afaranha has quit IRC01:59
*** dims__ has quit IRC01:59
*** boris-42 has quit IRC02:03
*** erkules_ has joined #openstack-keystone02:08
*** erkules has quit IRC02:11
*** _cjones_ has quit IRC02:17
openstackgerritDave Chen proposed openstack/keystone: Check token provider's configuration  https://review.openstack.org/14399002:18
*** lhcheng has quit IRC02:20
*** nellysmitt has joined #openstack-keystone02:32
*** nellysmitt has quit IRC02:36
*** jungleboyj has joined #openstack-keystone02:56
*** dims__ has joined #openstack-keystone03:00
*** samueldmq has quit IRC03:01
*** dims__ has quit IRC03:05
*** dims__ has joined #openstack-keystone03:07
*** rushiagr_away is now known as rushiagr03:15
*** dougwig has quit IRC03:21
*** dougwig_ has joined #openstack-keystone03:22
*** _cjones_ has joined #openstack-keystone03:25
*** _cjones_ has quit IRC03:25
*** _cjones_ has joined #openstack-keystone03:25
*** dims__ has quit IRC03:37
*** chrisshattuck has joined #openstack-keystone03:50
*** rm_work is now known as rm_work|away03:51
*** rushiagr is now known as rushiagr_away04:01
*** drjones has joined #openstack-keystone04:32
*** nellysmitt has joined #openstack-keystone04:33
*** _cjones_ has quit IRC04:35
*** rushiagr_away is now known as rushiagr04:37
*** nellysmitt has quit IRC04:37
*** dims__ has joined #openstack-keystone04:38
*** dims__ has quit IRC04:42
openstackgerrithenry-nash proposed openstack/keystone: Split roles into their own backend within assignments.  https://review.openstack.org/14423904:43
openstackgerrithenry-nash proposed openstack/keystone: Correct doc string for grant driver methods.  https://review.openstack.org/14440304:47
*** drjones has quit IRC04:58
*** fifieldt has quit IRC05:02
*** fifieldt has joined #openstack-keystone05:15
*** _cjones_ has joined #openstack-keystone05:18
*** _cjones_ has quit IRC05:23
*** rm_work|away is now known as rm_work05:27
*** hdd has joined #openstack-keystone05:28
*** chrisshattuck has quit IRC05:31
*** ajayaa has joined #openstack-keystone05:45
*** henrynash_ has quit IRC06:08
*** hdd has quit IRC06:17
*** mogami has joined #openstack-keystone06:17
*** hdd has joined #openstack-keystone06:18
*** rm_work is now known as rm_work|away06:25
*** nellysmitt has joined #openstack-keystone06:34
*** nellysmitt has quit IRC06:38
*** lhcheng has joined #openstack-keystone06:40
openstackgerritwanghong proposed openstack/keystonemiddleware: add more tests for auth_version option  https://review.openstack.org/14441007:09
*** hdd has quit IRC07:23
*** kpavel has joined #openstack-keystone07:36
*** dims__ has joined #openstack-keystone07:50
*** dims__ has quit IRC07:55
*** stevemar has quit IRC07:59
*** nellysmitt has joined #openstack-keystone08:35
*** nellysmitt has quit IRC08:37
*** nellysmitt has joined #openstack-keystone08:38
*** kpavel has quit IRC08:49
*** kpavel has joined #openstack-keystone09:00
*** nellysmitt has quit IRC09:06
*** nellysmitt has joined #openstack-keystone09:11
*** pcaruana has joined #openstack-keystone09:24
openstackgerritwanghong proposed openstack/python-keystoneclient: fix enabled parameter of update doesn't default to None  https://review.openstack.org/14442209:30
*** lhcheng has quit IRC09:35
*** boris-42 has joined #openstack-keystone09:50
*** erkules has joined #openstack-keystone10:20
*** erkules_ has quit IRC10:21
*** lhcheng has joined #openstack-keystone10:36
*** mogami has quit IRC10:37
openstackgerritSergey Kraynev proposed openstack/python-keystoneclient: Using correct keyword for region in v3  https://review.openstack.org/11838310:37
*** lhcheng has quit IRC10:40
*** andreaf has quit IRC10:55
*** andreaf has joined #openstack-keystone10:55
*** dims__ has joined #openstack-keystone11:28
*** amakarov_away is now known as amakarov11:29
*** samueldmq has joined #openstack-keystone11:30
*** dims__ has quit IRC11:33
*** lhcheng has joined #openstack-keystone11:37
*** lhcheng has quit IRC11:41
*** dims__ has joined #openstack-keystone12:22
*** pcaruana has quit IRC12:36
*** pcaruana has joined #openstack-keystone12:47
*** ajayaa has quit IRC12:53
*** rawat_vedams has joined #openstack-keystone13:02
rawat_vedamshi all13:04
rawat_vedamsi am new user for for openstack and iam trying to install swift on the top of docker13:04
rawat_vedamsi had completed storage node but while the installing keystone its giving Warning13:05
*** kpavel has quit IRC13:05
rawat_vedamsWARNING keystone.cli [-] keystone-manage pki_setup is not recommended for production use.13:05
*** rushiagr is now known as rushiagr_away13:05
rawat_vedamsand when i am trying to start keystone service its returns :   :::: keystone: unrecognized service13:05
*** openstack has joined #openstack-keystone13:06
rawat_vedamscan anybudy help me how to solve this problem13:06
rawat_vedams i am new user for for openstack and iam trying to install swift on the top of docker13:07
rawat_vedams i had completed storage node but while the installing keystone its giving Warning13:07
rawat_vedamsWARNING keystone.cli [-] keystone-manage pki_setup is not recommended for production use.13:08
rawat_vedamsWARNING keystone.cli [-] keystone-manage pki_setup is not recommended for production use.13:08
rawat_vedams and when i am trying to start keystone service its returns :   :::: keystone: unrecognized service13:08
openstackgerritIlya Pekelny proposed openstack/keystone: Migrate_repo init version helper  https://review.openstack.org/13764013:10
openstackgerritIlya Pekelny proposed openstack/keystone: Share engine between migration helpers.  https://review.openstack.org/13777813:10
openstackgerritIlya Pekelny proposed openstack/keystone: Use metadata.create_all() to fill a test database  https://review.openstack.org/9355813:10
openstackgerritIlya Pekelny proposed openstack/keystone: Add primary key to the endpoint_group id column.  https://review.openstack.org/13763813:10
openstackgerritIlya Pekelny proposed openstack/keystone: Add index to the revocation_event.revoked_at.  https://review.openstack.org/13763913:10
openstackgerritIlya Pekelny proposed openstack/keystone: Explicit MySQL engine designation.  https://review.openstack.org/13871213:10
*** abhirc has quit IRC13:10
openstackgerritIlya Pekelny proposed openstack/keystone: Comparision of database models and migrations.  https://review.openstack.org/8063013:10
openstackgerritIlya Pekelny proposed openstack/keystone: Fix index name the assignment.actor_id table.  https://review.openstack.org/13763713:10
*** dims__ has quit IRC13:30
*** dims__ has joined #openstack-keystone13:43
*** ajayaa has joined #openstack-keystone13:47
*** fifieldt has quit IRC13:48
*** gordc has joined #openstack-keystone13:58
openstackgerritBoris Bobrov proposed openstack/keystone: Fix migration 42 downgrade  https://review.openstack.org/14433113:58
openstackgerritBoris Bobrov proposed openstack/keystone: Fix transaction issue in 44->43 downgrade  https://review.openstack.org/14432113:58
openstackgerritBoris Bobrov proposed openstack/keystone: Fix incorrect session usage in tests  https://review.openstack.org/14446013:59
*** fifieldt has joined #openstack-keystone14:01
openstackgerritAlexander Makarov proposed openstack/keystone: Trust redelegation  https://review.openstack.org/12689714:03
*** EmilienM is now known as EmilienM|afk14:03
*** EmilienM|afk is now known as EmilienM14:15
*** dims__ has quit IRC14:20
*** dims__ has joined #openstack-keystone14:34
*** rushiagr_away is now known as rushiagr14:35
*** zzzeek has joined #openstack-keystone14:49
*** diegows has joined #openstack-keystone15:01
*** dims__ has quit IRC15:07
*** hdd has joined #openstack-keystone15:11
*** lhcheng has joined #openstack-keystone15:14
*** dims__ has joined #openstack-keystone15:16
*** lhcheng has quit IRC15:19
*** diegows has quit IRC15:22
*** henrynash has joined #openstack-keystone15:34
*** ChanServ sets mode: +v henrynash15:34
*** diegows has joined #openstack-keystone15:38
*** LinstatSDR has joined #openstack-keystone15:39
openstackgerritBrant Knudson proposed openstack/python-keystoneclient: Add validate token for v3  https://review.openstack.org/14214715:45
openstackgerritRodrigo Duarte proposed openstack/python-keystoneclient: Hierarchical multitenancy basic calls  https://review.openstack.org/11577015:47
*** diegows has quit IRC15:49
*** LinstatSDR has quit IRC15:52
*** LinstatSDR has joined #openstack-keystone16:00
*** diegows has joined #openstack-keystone16:10
*** afazekas has joined #openstack-keystone16:12
*** ajayaa has quit IRC16:28
*** ajayaa has joined #openstack-keystone16:29
*** stevemar has joined #openstack-keystone16:29
*** ChanServ sets mode: +v stevemar16:29
*** henrynash has quit IRC16:38
*** lhcheng has joined #openstack-keystone16:43
*** _cjones_ has joined #openstack-keystone16:45
*** chrisshattuck has joined #openstack-keystone16:45
*** ajayaa has quit IRC16:52
*** samueldmq has quit IRC16:54
*** henrynash has joined #openstack-keystone16:59
*** ChanServ sets mode: +v henrynash16:59
openstackgerritBrant Knudson proposed openstack/python-keystoneclient: Add validate token for v3  https://review.openstack.org/14214717:00
*** chrisshattuck has quit IRC17:15
*** hdd has quit IRC17:15
*** chrisshattuck has joined #openstack-keystone17:16
*** chrisshattuck has quit IRC17:16
*** rawat_vedams has quit IRC17:25
*** flwang1 has quit IRC17:26
*** flwang has joined #openstack-keystone17:39
openstackgerritAndre Aranha proposed openstack/keystone: Member for assignment policy  https://review.openstack.org/14216217:39
openstackgerritMerged openstack/keystonemiddleware: remove unused variable in _IdentityServer  https://review.openstack.org/14424417:39
*** afaranha has joined #openstack-keystone17:41
openstackgerritAndre Aranha proposed openstack/keystone: policy exception handling  https://review.openstack.org/14220717:44
*** LinstatSDR has quit IRC17:48
*** stevemar has quit IRC18:01
*** stevemar has joined #openstack-keystone18:01
*** ChanServ sets mode: +v stevemar18:01
openstackgerritBrant Knudson proposed openstack/python-keystoneclient: Add validate token for v2.0  https://review.openstack.org/14194418:06
*** afaranha has quit IRC18:11
*** harlowja has joined #openstack-keystone18:13
*** afaranha has joined #openstack-keystone18:18
*** dims__ has quit IRC18:18
*** EmilienM is now known as EmilienM|food18:24
*** EmilienM|food is now known as EmilienM|afk18:25
*** dougwig_ is now known as dougwig18:32
*** afaranha has quit IRC18:38
openstackgerrithenry-nash proposed openstack/keystone: Split roles into their own backend within assignments.  https://review.openstack.org/14423918:39
openstackgerrithenry-nash proposed openstack/keystone: Correct doc string for grant driver methods.  https://review.openstack.org/14440318:40
openstackgerrithenry-nash proposed openstack/keystone: Make controllers call the role manager.  https://review.openstack.org/14449418:42
_cjones_Hey guys. I noticed that some of our local builds were failing this morning due to the release of alembic 0.7.3 Anyone else notice issues?18:45
*** amakarov is now known as amakarov_away18:53
*** afaranha has joined #openstack-keystone18:55
*** afaranha has quit IRC18:55
*** pcaruana has quit IRC19:00
*** jungleboyj has quit IRC19:12
bknudson_cjones_: keystone doesn't use alembic as far as I know19:12
*** afaranha has joined #openstack-keystone19:13
*** diegows has quit IRC19:14
*** dims__ has joined #openstack-keystone19:19
*** nellysmitt has quit IRC19:23
*** dims__ has quit IRC19:24
*** samueldmq has joined #openstack-keystone19:26
openstackgerrithenry-nash proposed openstack/keystone: Make controllers call the role manager.  https://review.openstack.org/14449419:38
*** rushiagr is now known as rushiagr_away19:40
_cjones_bknudson: Sorry. My mistake. The error appeared to be the same root cause.19:52
_cjones_https://gist.github.com/anonymous/f7789f84026b17befd5e19:53
_cjones_bknudson: I just can't decipher what the error is here.19:54
*** diegows has joined #openstack-keystone19:57
*** _cjones_ has quit IRC19:59
openstackgerritAndre Aranha proposed openstack/keystone: Member for assignment policy  https://review.openstack.org/14216220:05
openstackgerritAndre Aranha proposed openstack/keystone: policy refactoring  https://review.openstack.org/14196920:05
openstackgerritAndre Aranha proposed openstack/keystone: policy exception handling  https://review.openstack.org/14220720:09
*** nellysmitt has joined #openstack-keystone20:14
*** afaranha has quit IRC20:18
*** abhirc has joined #openstack-keystone20:23
samueldmqhenrynash, you around?20:32
*** nellysmitt has quit IRC20:38
*** hdd has joined #openstack-keystone20:39
*** raildo has joined #openstack-keystone20:44
openstackgerritBrant Knudson proposed openstack/python-keystoneclient-federation: Fix pep8 issue  https://review.openstack.org/14451120:45
openstackgerritBrant Knudson proposed openstack/python-keystoneclient-federation: Updated from global requirements  https://review.openstack.org/13357020:46
*** Guest60657 is now known as mfisch20:46
*** mfisch has joined #openstack-keystone20:46
openstackgerritBrant Knudson proposed openstack/python-keystoneclient-federation: Fix pep8 issue  https://review.openstack.org/14451120:47
openstackgerritBrant Knudson proposed openstack/python-keystoneclient-federation: Updated from global requirements  https://review.openstack.org/13357020:47
*** zzzeek has quit IRC20:53
*** zzzeek has joined #openstack-keystone20:53
*** david-lyle_afk is now known as david-lyle20:58
*** dims__ has joined #openstack-keystone20:59
*** _cjones_ has joined #openstack-keystone20:59
*** _cjones_ has quit IRC21:08
*** _cjones_ has joined #openstack-keystone21:08
openstackgerritBrant Knudson proposed openstack/python-keystoneclient-federation: Workflow documentation is now in infra-manual  https://review.openstack.org/13937621:09
*** EmilienM|afk is now known as EmilienM21:19
*** andreaf has quit IRC21:20
*** andreaf has joined #openstack-keystone21:20
*** gordc has quit IRC21:42
*** harlowja is now known as harlowja_away22:17
*** _cjones_ has quit IRC22:37
*** dims__ has quit IRC22:52
*** chrisshattuck has joined #openstack-keystone22:57
*** chrisshattuck has quit IRC22:57
*** hdd has quit IRC23:00
*** andreaf has quit IRC23:10
*** dims__ has joined #openstack-keystone23:12
*** _cjones_ has joined #openstack-keystone23:17
*** raildo has quit IRC23:29
henrynashsamueldmq: hi23:30
samueldmqhenrynash, hey :)23:31
samueldmqhenrynash, hope you had a merry christmas23:32
samueldmqhenrynash, I'm doing some work on role assignment tests23:32
henrynashsamueldmq: I did….hope you did too…23:32
henrynashok23:32
samueldmqhenrynash, I'd like to confirm with you invalid filter combinations23:32
samueldmqhenrynash, they are: 1) effective + inherited23:32
samueldmq2) group + user 3) project + domain23:33
samueldmqanything else?23:33
samueldmqhenrynash, I think you said effective + groups were not allowed23:34
henrynashwell 1) isn’t so much invalid. but implied…i.e. if you ask for effective, then you get inherited roles will be expanded out23:34
henrynashsame for group roles23:34
*** dims__ has quit IRC23:34
henrynashyou can’t ask for effective…but don’t expand groups, for instance23:35
samueldmqgroup + effective could mean gimme effective from that group23:35
samueldmqmakes sense?23:35
henrynashso you are right, you will never SEE an an inherited or group assignment in the data returned from an effective call…only the results of those assignments23:35
samueldmqyep23:36
samueldmq*nor domainù assignment in effective mode23:36
samueldmqdomain*23:36
henrynashwell….it *could*….it is just the usuall filters are meant to be a way of filtering the things that would be in the list if you hadn’t specified the filter23:36
henrynash(that was the asnwer to your group question)23:37
samueldmqhenrynash, so those filters are then meant to filter the *final* results23:37
samueldmqhenrynash, makes sense to me23:37
henrynashyes23:37
samueldmqhenrynash, agreed23:37
henrynashwhich I agree…makes ?effective a bit odd23:37
henrynashsince it’s not really a filter23:37
samueldmqhenrynash, yep, I always call it an option :)23:38
samueldmqor effective *mode*23:38
henrynashon reflection, we should probably made it /effective on the end of the url23:38
samueldmqwell, I will report a bug to this and put on my patches chain23:38
samueldmqhenrynash, could be a nice option .. would be clearer23:38
henrynashI guess it’s technically not WROUNG to have ?effective an, say, ?group=xyz23:39
henrynash….it;s just that you won’t get back what you think!23:39
henrynashso we should probably catch it as you are suggesting23:40
samueldmqhenrynash, hmm .. mulling it a bit23:40
samueldmqhenrynash, yep23:40
samueldmqhenrynash, it improves user experience23:40
henrynashagreed23:41
samueldmqhenrynash, another point23:41
samueldmqhenrynash, do you plan to remove OS-INHERIT from url?23:41
samueldmqin addition, OS-INHERIT is meant to make it clear it was an extension?23:41
henrynashso if we agree that inheritance becomes core (and I think we have kind of decided that), then it should disappear23:41
henrynashI woudl think we should support it for a release or two for compatibility23:42
henrynash…and then deprecate it23:42
henrynashi.e. two urls will point at the same action, for a while23:42
samueldmqhenrynash, ok23:43
henrynashthe slight harder thing, is what do we do about when we include it in the results23:43
samueldmqhenrynash, the same is about grant vs role assingment APIS23:43
henrynashI’d have thought we drop it…but maybe for compatibility we have to have a config switch that includes it?  Not sure about that…maybe too much hassle than its worth23:44
samueldmqhenrynash, drop grant APIs?23:45
henrynashno, sorry, drop OS-INHERIT appearing in the results we return (i.e. in the scope etc.)23:45
samueldmqhenrynash, I'm saying have apis for GRANTS and for /role_assignments is quite inconsistent, since role assignments and grants are the same thinkg23:45
henrynashyes, I know…..although we don’t yet support using the /role_assignment API to manage the assignments (nee grants)23:46
henrynashI did propose that a few cycles ago23:46
samueldmqhenrynash, ok, we have to agree on that point later .. when we decide if it goes to core code (non experimental)23:46
samueldmqhenrynash, didnt know that23:47
samueldmqhenrynash, well.. I'm working on /role_assignment tests23:47
henrynashso the new approach is that extensions become either in-tree or out-of-tree (OS INHERIT would be in-tree for sure)23:47
samueldmqdid some tests to cover all filters and possible results23:47
samueldmqin < 300 lines23:48
henrynashthen we have to deicde if these new “core in-tree” functionality is stable or experimental23:48
henrynashnice!23:48
samueldmqhenrynash, I need to ensure we have a strong suite of tests for role assig23:48
samueldmqyep23:48
samueldmqmy goal is to have it as stable23:48
samueldmqwith every piece of code strongly tested23:49
henrynashof course…experimetnal is meant to be transitional23:49
samueldmqah ok23:49
henrynashso I woudl think no one would argue that the orgional domain->project is stable23:49
henrynash(it’s been in for a while)23:49
henrynash,….sorrry, I meant no one would argue it ISN’T stable23:50
samueldmqyep, was getting confused haha23:50
henrynashI could see an argument that the project->project part should be marked as experimetnal for a cycle, before being marked as stable23:50
samueldmqyep, and I'm not against this23:51
samueldmqthat a big and important thing23:51
henrynashthe idea is that you can use JSON-HOME to find out what apis there are…and whether they are experimemtal or stable23:52
samueldmqwhat's json home?23:53
samueldmqsorry I know I should know that :p23:53
henrynashit’s a “standard” for discovery of rest apis23:56
« Monday, 2014-12-29 Index Wednesday, 2014-12-31 »

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!