| dstanek | damn...it's not sqlalchemy migrate - it's us databasing wrong | 00:02 |
|---|---|---|
| *** gordc has quit IRC | 00:03 | |
| openstackgerrit | Jamie Lennox proposed openstack/python-keystoneclient: Allow searching a catalog on service or endpoint id https://review.openstack.org/174669 | 00:04 |
| *** Raildo_ has joined #openstack-keystone | 00:05 | |
| *** markvoelker has joined #openstack-keystone | 00:06 | |
| *** chlong_ has joined #openstack-keystone | 00:20 | |
| lbragstad | dstanek: :( | 00:22 |
| lbragstad | dstanek: what did we do?! | 00:22 |
| morganfainberg | lbragstad: lots of things i'm sure | 00:26 |
| *** david-lyle has quit IRC | 00:28 | |
| morganfainberg | mordred: i am starting to agree with you... we (OpenStack) must hate our users... a lot | 00:29 |
| Raildo_ | morganfainberg, thanks for you explaination :) | 00:29 |
| Raildo_ | in the reseller patch | 00:29 |
| *** lhcheng has quit IRC | 00:32 | |
| *** lhcheng has joined #openstack-keystone | 00:32 | |
| *** ChanServ sets mode: +v lhcheng | 00:32 | |
| *** lhcheng has quit IRC | 00:32 | |
| morganfainberg | Raildo_, no problem | 00:35 |
| *** leveldoc has quit IRC | 00:36 | |
| dstanek | lbragstad: i haven't looked in detail yet, but from the error i think we have mutually-dependent foreign key constraints in federation | 00:37 |
| dstanek | wanted to eat dinner before i followed that rabbit hole | 00:37 |
| lbragstad | dstanek: that sounds like fun | 00:38 |
| lbragstad | dstanek: you made a comment about a code conversation we had yesterday? Wanted to follow up with you but I'll let you eat dinner first | 00:38 |
| * lbragstad had a crazy afternoon | 00:38 | |
| lbragstad | I wasn't as prompt this afternoon responding | 00:38 |
| openstackgerrit | Jamie Lennox proposed openstack/keystoneauth: Reorder catalog exceptions https://review.openstack.org/182507 | 00:40 |
| openstackgerrit | Merged openstack/python-keystoneclient: Removes temporary fix for doc generation https://review.openstack.org/121667 | 00:41 |
| *** ankita_wagh has quit IRC | 00:43 | |
| openstackgerrit | Jamie Lennox proposed openstack/keystoneauth: Add a readme https://review.openstack.org/182508 | 00:44 |
| dstanek | lbragstad: oh, i was just wondering if you thought more about the code required to do a 0-downtime upgrade and how to manage it | 00:45 |
| lbragstad | dstanek: I did a few tests today | 00:46 |
| lbragstad | without downtime, I can fill you in on them | 00:46 |
| dstanek | lbragstad: you were able to survive deleting a column without code changes? | 00:47 |
| lbragstad | yeah | 00:47 |
| dstanek | lbragstad: how does the keystone not break when the column goes away? | 00:47 |
| lbragstad | dstanek: tl;dr I tested out the percona toolkit and did it that way, using TOI with galera, | 00:47 |
| lbragstad | dstanek: it creates a shadow table | 00:48 |
| lbragstad | with the new schema | 00:48 |
| dstanek | and that remains until you rollout a new code release? | 00:48 |
| lbragstad | then it sets up a trigger that allows all incoming writes to be propagated to the new table. | 00:48 |
| lbragstad | then it start piecing all data from the old table to the new "shadow" table, once that's done, it renames them and deletes the old one | 00:49 |
| dstanek | but you still have code that is trying to use the column that no longer exists | 00:49 |
| lbragstad | dstanek: that would be if you were going to delete a required table according to the application | 00:50 |
| lbragstad | the application would have to be smart enough to handle both schema for a period of time while the migration is happening | 00:50 |
| dstanek | lbragstad: right, that's what i'm asking about :-P | 00:51 |
| lbragstad | ahh | 00:51 |
| lbragstad | gotcha | 00:51 |
| lbragstad | I thought you were asking about how the database did it explicitly | 00:51 |
| lbragstad | dstanek: I'll still working through those pieces. | 00:51 |
| dstanek | multi-phase release don't seem like they'd work well in this ecosystem | 00:51 |
| lbragstad | yeah | 00:51 |
| jamielennox | morganfainberg: i was talking with richm this morning and he said it would be good if we (keystone-core) and you specifically could lean on the puppet guys at summit and explain how important v3 auth in the puppet modules is | 00:52 |
| morganfainberg | sounds good | 00:52 |
| jamielennox | probably in general - not just summit | 00:52 |
| dstanek | lbragstad: i do think we'd need some community support to pull this off | 00:52 |
| lbragstad | dstanek: possibly | 00:52 |
| *** browne has quit IRC | 00:53 | |
| dstanek | otherwise we'd have to carry temporary patches that don't get reviewed by the core team | 00:53 |
| lbragstad | dstanek: the upstream migration scripts are great for documenting exactly what we need to do, but having an upgrade path that's more realistic would be awesome, | 00:53 |
| lbragstad | (but I also understand the overhead of that) | 00:54 |
| *** rwsu has quit IRC | 00:54 | |
| dstanek | lbragstad: what's more realistic? | 00:54 |
| lbragstad | having upstream migration that run in 0 downtime manner | 00:54 |
| lbragstad | migrations* | 00:54 |
| *** stevemar has joined #openstack-keystone | 00:54 | |
| *** ChanServ sets mode: +v stevemar | 00:54 | |
| *** Raildo__ has joined #openstack-keystone | 00:54 | |
| lbragstad | dstanek: we got this little tid bit from jaypipes http://specs.openstack.org/openstack/nova-specs/specs/kilo/approved/online-schema-changes.html | 00:54 |
| dstanek | that's easy enough to do with migrations if we code and support a multiphase deploy | 00:55 |
| *** _cjones_ has quit IRC | 00:55 | |
| lbragstad | dstanek: do you suggest that we start coding migration paths that way? | 00:55 |
| lbragstad | s/coding/reviewing/ | 00:55 |
| dstanek | lbragstad: we should all probably discuss at the summit | 00:56 |
| lbragstad | then we would have to have a rule in place for the "old schema" that is cleaned up every release | 00:56 |
| lbragstad | ++ | 00:56 |
| lbragstad | I agree | 00:56 |
| lbragstad | so I would assume it would be similar to how we remove deprecated cruft at the beginning of every release | 00:57 |
| dstanek | in a previous life we did live upgrades by doing them in several phases - deploy code that knows the migration will happen - migrate - deploy new code - last db migrate if needed | 00:58 |
| dstanek | every time we changed schemas it was a big deal - even adding tables and columns | 00:58 |
| *** Raildo_ has quit IRC | 00:58 | |
| *** ayoung has joined #openstack-keystone | 00:59 | |
| *** ChanServ sets mode: +v ayoung | 00:59 | |
| openstackgerrit | Sam Leong proposed openstack/keystone-specs: Light-weight Keystone to Keystone Federation https://review.openstack.org/182513 | 00:59 |
| *** erickson has joined #openstack-keystone | 00:59 | |
| lbragstad | dstanek: I could see that... | 00:59 |
| lbragstad | dstanek: you'd like to see the application be smart enough to just deal with it, which would mean more flexibility for the migrations overall, right? | 01:00 |
| *** alexsyip has quit IRC | 01:00 | |
| *** ericksonfgds has quit IRC | 01:00 | |
| dstanek | lbragstad: at least that's the way i've done it in the past; i don't know how you can get around that when doing certain kinds of migrations | 01:01 |
| lbragstad | dstanek: let alone complicated ones | 01:01 |
| lbragstad | dstanek: the percona toolkit for galera only supports certain operations, other things it just doesn't know how to deal with | 01:02 |
| *** greghaynes has joined #openstack-keystone | 01:02 | |
| *** bknudson has joined #openstack-keystone | 01:07 | |
| *** ChanServ sets mode: +v bknudson | 01:07 | |
| openstackgerrit | Julian Edwards proposed openstack/keystone: Improve websso documentation. https://review.openstack.org/181782 | 01:07 |
| *** samleon has quit IRC | 01:13 | |
| stevemar | nkinder, thanks for making all those changes to the slide deck | 01:20 |
| nkinder | stevemar: Sure. I'm on a roll with making diagrams :) | 01:21 |
| nkinder | stevemar: I like the changes you've made. It's shaping up nicely. | 01:21 |
| *** lhcheng has joined #openstack-keystone | 01:25 | |
| *** ChanServ sets mode: +v lhcheng | 01:25 | |
| stevemar | nkinder, i'm pretty much 99% done the presentation i have with bknudson, and now i'm reviewing ours (while watching the flash) | 01:28 |
| stevemar | then comes the one i have to do with marekd .... | 01:29 |
| stevemar | which is the most behind | 01:29 |
| nkinder | stevemar: cool. I'm going to add multiple slides to show the federation flow step by step | 01:29 |
| dstanek | stevemar: which talk are you guys doing? | 01:29 |
| nkinder | stevemar: also want to do a set for the Horizon SSO stuff | 01:29 |
| nkinder | dstanek: me and stevemar? Advanced authentication methods. | 01:30 |
| dstanek | nkinder: what are you using for the diagrams? | 01:30 |
| nkinder | dstanek: inkscape | 01:30 |
| nkinder | I like to produce in SVGs for nice scaling | 01:30 |
| dstanek | nkinder: cool, i'll have to add that to my schedule | 01:30 |
| stevemar | nkinder, yeah, i think you had those in the one you did last summit | 01:31 |
| *** lhcheng_ has joined #openstack-keystone | 01:31 | |
| dstanek | nkinder: i've never really tried it; installed it, but looked too scary | 01:31 |
| nkinder | dstanek: it's pretty cool, but has a bit of a learning curve | 01:32 |
| nkinder | I did some logo work with it for the Dogtag project to learn it | 01:32 |
| stevemar | nkinder, you want the SSO pictures to be staggered like yours? or you want the actual keystone -> horizon -> whatever flow in boxes ? | 01:33 |
| *** lhcheng has quit IRC | 01:34 | |
| *** Raildo_ has joined #openstack-keystone | 01:35 | |
| nkinder | stevemar: I was thinking of using the multiple slides approach to show each step | 01:35 |
| nkinder | oh, you mean the boxes that show the architecture? | 01:35 |
| nkinder | not really sure yet | 01:35 |
| stevemar | yeah, boxes that show component or just screen caps :) | 01:35 |
| stevemar | could show both side by side ;) | 01:36 |
| nkinder | both are nice actually | 01:36 |
| nkinder | "here's how it looks", then "here's how it works" | 01:36 |
| stevemar | alright, i'll get that done before snoozing | 01:36 |
| *** Raildo__ has quit IRC | 01:39 | |
| *** Raildo_ has quit IRC | 01:39 | |
| *** topol has joined #openstack-keystone | 01:40 | |
| *** ChanServ sets mode: +v topol | 01:40 | |
| *** topol has quit IRC | 01:40 | |
| *** mestery has quit IRC | 01:45 | |
| openstackgerrit | Jamie Lennox proposed openstack/keystonemiddleware: Remove custom header handling https://review.openstack.org/180385 | 01:46 |
| openstackgerrit | Jamie Lennox proposed openstack/keystonemiddleware: Fetch user token from request rather than env https://review.openstack.org/174202 | 01:46 |
| openstackgerrit | Jamie Lennox proposed openstack/keystonemiddleware: Remove the _msg_format function https://review.openstack.org/174201 | 01:46 |
| openstackgerrit | Jamie Lennox proposed openstack/keystonemiddleware: Base use webob https://review.openstack.org/174200 | 01:46 |
| openstackgerrit | Jamie Lennox proposed openstack/keystonemiddleware: Don't rely on token_info for header building https://review.openstack.org/174199 | 01:46 |
| openstackgerrit | Jamie Lennox proposed openstack/keystonemiddleware: Move project included validation https://review.openstack.org/174198 | 01:46 |
| openstackgerrit | Jamie Lennox proposed openstack/keystonemiddleware: Depend on keystoneclient for expiration checking https://review.openstack.org/174197 | 01:46 |
| openstackgerrit | Jamie Lennox proposed openstack/keystonemiddleware: Don't store expire into memcache https://review.openstack.org/174196 | 01:46 |
| openstackgerrit | Jamie Lennox proposed openstack/keystonemiddleware: Cleanup token hashes generated by cache https://review.openstack.org/174194 | 01:46 |
| *** zzzeek has quit IRC | 01:47 | |
| *** erickson has quit IRC | 01:47 | |
| openstackgerrit | Jamie Lennox proposed openstack/keystonemiddleware: Remove custom header handling https://review.openstack.org/180385 | 02:04 |
| openstackgerrit | Jamie Lennox proposed openstack/keystonemiddleware: Fetch user token from request rather than env https://review.openstack.org/174202 | 02:04 |
| openstackgerrit | Jamie Lennox proposed openstack/keystonemiddleware: Remove the _msg_format function https://review.openstack.org/174201 | 02:04 |
| openstackgerrit | Jamie Lennox proposed openstack/keystonemiddleware: Base use webob https://review.openstack.org/174200 | 02:04 |
| openstackgerrit | Jamie Lennox proposed openstack/keystonemiddleware: Don't rely on token_info for header building https://review.openstack.org/174199 | 02:04 |
| openstackgerrit | Jamie Lennox proposed openstack/keystonemiddleware: Move project included validation https://review.openstack.org/174198 | 02:04 |
| openstackgerrit | Jamie Lennox proposed openstack/keystonemiddleware: Depend on keystoneclient for expiration checking https://review.openstack.org/174197 | 02:04 |
| openstackgerrit | Jamie Lennox proposed openstack/keystonemiddleware: Don't store expire into memcache https://review.openstack.org/174196 | 02:04 |
| openstackgerrit | Jamie Lennox proposed openstack/keystonemiddleware: Cleanup token hashes generated by cache https://review.openstack.org/174194 | 02:04 |
| openstackgerrit | Jamie Lennox proposed openstack/python-keystoneclient: Extract the Loadable interface from a plugin https://review.openstack.org/138575 | 02:08 |
| jamielennox | does someone want to kick off https://review.openstack.org/#/c/180945/ and https://review.openstack.org/#/c/180688/ | 02:09 |
| jamielennox | it's a client oslo-incubator sync with a patch to some doc strings, it's the last of us using the oslo. syntax | 02:10 |
| *** erickson has joined #openstack-keystone | 02:11 | |
| *** browne has joined #openstack-keystone | 02:17 | |
| *** ankita_wagh has joined #openstack-keystone | 02:19 | |
| *** zzzeek has joined #openstack-keystone | 02:26 | |
| *** zzzeek has quit IRC | 02:26 | |
| *** darrenc is now known as darrenc_afk | 02:40 | |
| *** gyee has quit IRC | 02:47 | |
| *** jimbaker has quit IRC | 02:52 | |
| *** jimbaker has joined #openstack-keystone | 02:56 | |
| *** wpf has quit IRC | 02:56 | |
| *** jimbaker has quit IRC | 02:56 | |
| *** jimbaker has joined #openstack-keystone | 02:56 | |
| *** chlong has quit IRC | 03:05 | |
| *** erickson has quit IRC | 03:10 | |
| stevemar | nkinder, can i get some of the svg source files that you've been using for the block diagrams? | 03:15 |
| stevemar | hopefully i can figure it out quickly :P | 03:15 |
| *** richm has quit IRC | 03:16 | |
| *** darrenc_afk is now known as darrenc | 03:17 | |
| *** dims_ has quit IRC | 03:18 | |
| *** links has joined #openstack-keystone | 03:30 | |
| morganfainberg | Oh hai. | 03:40 |
| *** trey has quit IRC | 03:43 | |
| *** trey has joined #openstack-keystone | 03:45 | |
| stevemar | morganfainberg, o/ | 03:46 |
| *** david-lyle has joined #openstack-keystone | 03:48 | |
| *** chlong_ has quit IRC | 03:52 | |
| *** sigmavirus24 is now known as sigmavirus24_awa | 04:06 | |
| *** dims has joined #openstack-keystone | 04:18 | |
| *** dims has quit IRC | 04:25 | |
| nkinder | stevemar: sure, I'll e-mail them to you. I have them all in one big svg file. | 04:41 |
| stevemar | yahoo | 04:44 |
| stevemar | nkinder, now to learn how to edit svgs :P | 04:44 |
| nkinder | stevemar: I use inkscape | 04:45 |
| stevemar | nkinder, i saw you mention that earlier, i already have it installed | 04:45 |
| nkinder | cool | 04:45 |
| nkinder | if you have questions, let me know | 04:46 |
| nkinder | most of the diagrams I have are grouped objects. You can select a group and copy paste the whole thing to mess around with one of them. | 04:46 |
| stevemar | interesting setup | 04:47 |
| nkinder | There's an "ungroup" menu option so you can break it apart and move individual parts of the diagram around (or modify them) | 04:47 |
| nkinder | You can select an individual item even when grouped with ctrl-click | 04:47 |
| *** lhcheng_ has quit IRC | 04:47 | |
| nkinder | that's pretty handy so you're not always ungrouping/re-grouping | 04:48 |
| *** lhcheng has joined #openstack-keystone | 04:48 | |
| stevemar | nkinder, how can i extend the layout? | 04:48 |
| *** ChanServ sets mode: +v lhcheng | 04:48 | |
| stevemar | oh i guess just zoom out a bit more | 04:48 |
| nkinder | just copy/paste one of the digarams and drag it over to the side | 04:49 |
| nkinder | youcan expand as far as you want | 04:49 |
| * stevemar is learning | 04:49 | |
| stevemar | yep, i noticed it was a silly question :) | 04:49 |
| nkinder | when you want to create a png, you select the group you want and choose "export bitmap" | 04:49 |
| *** josecastroleon has joined #openstack-keystone | 04:53 | |
| stevemar | nkinder, cool | 04:54 |
| stevemar | the "user" icon in the sso case is really a browser right? | 04:54 |
| nkinder | stevemar: on the image you edited, we still want it to be a token for the second and third line | 04:54 |
| nkinder | yeah, user == browser is fine I think | 04:54 |
| stevemar | uh | 04:54 |
| stevemar | copy pasta | 04:55 |
| stevemar | my bad | 04:55 |
| nkinder | you made all 3 images the id :) | 04:55 |
| * stevemar head meets desk | 04:55 | |
| *** josecastroleon has quit IRC | 04:55 | |
| *** markvoelker has quit IRC | 04:58 | |
| *** markvoelker has joined #openstack-keystone | 05:06 | |
| *** arunkant has quit IRC | 05:11 | |
| *** hemna_ has joined #openstack-keystone | 05:13 | |
| *** stevemar2 has joined #openstack-keystone | 05:14 | |
| *** ChanServ sets mode: +v stevemar2 | 05:14 | |
| *** gsilvis_ has joined #openstack-keystone | 05:14 | |
| *** ir2ivps8 has quit IRC | 05:15 | |
| stevemar2 | nkinder, did you get that last msg? i was disconnected | 05:15 |
| *** bboese_ has joined #openstack-keystone | 05:20 | |
| *** chlong has joined #openstack-keystone | 05:23 | |
| *** stevemar has quit IRC | 05:26 | |
| *** hemna has quit IRC | 05:26 | |
| *** anteaya has quit IRC | 05:26 | |
| *** gsilvis has quit IRC | 05:26 | |
| *** bboese has quit IRC | 05:27 | |
| *** anteaya has joined #openstack-keystone | 05:29 | |
| *** arunkant has joined #openstack-keystone | 05:32 | |
| *** chlong has quit IRC | 05:34 | |
| *** ir2ivps8 has joined #openstack-keystone | 05:34 | |
| stevemar2 | marekd, i see you browsing the slides... | 05:39 |
| *** lhcheng has quit IRC | 05:39 | |
| marekd | stevemar2: hey, i just logged in, so maybe my browser tab got activated. | 05:39 |
| marekd | stevemar2: anything particular you want me to take a look at? | 05:40 |
| stevemar2 | marekd, oh haha | 05:40 |
| stevemar2 | nope | 05:40 |
| stevemar2 | it can wait til our meeting | 05:40 |
| marekd | it's 1pm edt which happens to be 5pm utc, right? | 05:40 |
| *** arunkant has quit IRC | 05:41 | |
| marekd | stevemar2: ^^ | 05:43 |
| stevemar2 | marekd, i believe so | 05:44 |
| stevemar2 | it's 1:44 for me now, and 5:44am utc | 05:44 |
| marekd | allright | 05:45 |
| *** kiranr has joined #openstack-keystone | 05:45 | |
| *** chlong has joined #openstack-keystone | 05:48 | |
| *** josecastroleon has joined #openstack-keystone | 05:50 | |
| *** dims has joined #openstack-keystone | 06:01 | |
| *** kiranr is now known as kiran-r | 06:04 | |
| *** dims has quit IRC | 06:06 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone: Imported Translations from Transifex https://review.openstack.org/179331 | 06:08 |
| *** mabrams has joined #openstack-keystone | 06:08 | |
| *** stevemar2 is now known as stevemar | 06:10 | |
| stevemar | nkinder, i cleaned up our MFA slide | 06:11 |
| *** afazekas_ has joined #openstack-keystone | 06:11 | |
| stevemar | nuke x509 if you want | 06:11 |
| stevemar | and... the "token auth" seems a bit bare | 06:11 |
| stevemar | other than that... i think we're looking good | 06:11 |
| *** chlong has quit IRC | 06:24 | |
| stevemar | morganfainberg, nkinder marekd i'm out, keep keystone safe while i'm gone | 06:24 |
| marekd | good night, sir | 06:25 |
| *** chlong has joined #openstack-keystone | 06:27 | |
| stevemar | signing off sir. o\ | 06:38 |
| *** ankita_wagh has quit IRC | 06:41 | |
| *** stevemar has quit IRC | 06:43 | |
| marekd | bigjools: here? | 06:44 |
| breton | good morning, keystone | 06:47 |
| marekd | hello | 06:47 |
| morganfainberg | breton: zzz good evening ;) | 06:47 |
| *** smallbig has left #openstack-keystone | 06:49 | |
| breton | it's interesting how keystone is tackled around the clock | 06:49 |
| morganfainberg | breton: maybe... or it's cause we're just cool like that :P | 06:50 |
| *** kiranr has joined #openstack-keystone | 06:54 | |
| *** fifieldt has joined #openstack-keystone | 06:56 | |
| *** fifieldt has quit IRC | 06:56 | |
| *** kiran-r has quit IRC | 06:57 | |
| *** kiranr has quit IRC | 07:02 | |
| *** kiranr has joined #openstack-keystone | 07:02 | |
| *** lufix has joined #openstack-keystone | 07:05 | |
| *** kiranr is now known as kiran-r | 07:16 | |
| kiran-r | breton morganfainberg Hi! | 07:23 |
| kiran-r | breton morganfainberg I have a multi node deployment, When I try to use keystone client from an external VM, it gets token through publicURL but further operations are done through adminURL which is unreachable. Is there a way to make keystone use publicURL for all operations?? | 07:28 |
| *** arunkant has joined #openstack-keystone | 07:43 | |
| *** jistr has joined #openstack-keystone | 07:49 | |
| *** dguerri is now known as _dguerri | 07:52 | |
| *** _dguerri is now known as dguerri | 07:52 | |
| ccard | I have been trying to get keystone running as a wsgi app using TLS under Apache in our OpenStack installation (juno), and I thought I had it all working, but although the v2.0 api appears to work, I can't get the v3 api to work any more. | 07:52 |
| morganfainberg | kiran-r: for v2 public and admin urls have separate capabilities. the public url (iirc) is mostly just auth | 07:53 |
| morganfainberg | kiran-r: with v3 the API pipelines are the same. | 07:53 |
| ccard | If I do a simple /v3/tokens request using curl I get HTTP 500 back, and in the keystone log I see the message like this: 2015-05-13 07:15:43.801 23432 DEBUG keystone.middleware.core [-] Auth token not in the request header. Will not build auth context. process_request /usr/lib/python2.7/site-packages/keystone/middleware/core.py:270 | 07:54 |
| *** browne has quit IRC | 07:54 | |
| morganfainberg | kiran-r: i highly recommend using v3 where possible and likely you need the admin url available for all CRUD actions anyway on v2 | 07:54 |
| morganfainberg | ccard: do you have X-Auth-Token header (and if you're doing a validate of a token) x-subject-token headers set? | 07:55 |
| morganfainberg | ccard: x-auth-token is the token for authorization (can I perform an action), x-subject-token is the token you're validating *or* revoking in the case of a DELETE | 07:56 |
| morganfainberg | however, the 500 is odd, you should see a 4xx response if those are missing. | 07:56 |
| ccard | morganfainberg: I get the same error if I run "openstack domain list" | 07:56 |
| openstackgerrit | xu-haiwei proposed openstack/keystonemiddleware: Change auth_url to identity_uri https://review.openstack.org/182562 | 07:57 |
| morganfainberg | ccard: are you using the admin_token or a real user? | 07:57 |
| ccard | I was just trying to narrow down the issue by running a curl command (taken from http://docs.openstack.org/developer/keystone/api_curl_examples.html) | 07:57 |
| morganfainberg | ccard: admin_token is kind of voodoo/magic and should only be used for bootstrapping | 07:57 |
| ccard | I have OS_USERNAME=admin and OS_PASSWORD=<admin password> | 07:58 |
| morganfainberg | ccard: unfortunately i don't think i can debug much atm - it is almost 1am here and i'm falling asleep. | 07:59 |
| ccard | The openstack domain list command worked when keystone was configured to run as an eventlet, all I've changed is moving it to Apache wsgi and adding ssl certs and https endpoints | 07:59 |
| morganfainberg | ccard: you might have an issue with the wsgi script permissions | 07:59 |
| ccard | but v2.0 api works fine | 07:59 |
| morganfainberg | apache is *very* picky about the permissions of the scripts that it is executing | 07:59 |
| morganfainberg | ccard: unfortunately like i said, i'm exaughsted and don't think i can debug much else via IRC atm. (sorry) | 08:00 |
| morganfainberg | if it was a bit earlier i might have a bit more steam | 08:00 |
| ccard | morganfainberg: np | 08:00 |
| morganfainberg | ccard: i'd look to make sure you don't have some erroneous json typo and/or make sure apache isn't erroring itself somewhere | 08:01 |
| morganfainberg | that error looks likeeither x-auth-token or x-subject-token header is missing | 08:01 |
| morganfainberg | but the 500 error is a bit weird. | 08:02 |
| morganfainberg | there should be some east-coasters awake in a few hours. and a fresh pair of eyes might see something i am nt seeing | 08:02 |
| ccard | Yes, the error message implies x-auth-token is missing, but surely that's the client's job to put in the request. | 08:02 |
| morganfainberg | ccard: well depends on lots of things. the client should | 08:03 |
| morganfainberg | but it could be doing something silly :P | 08:03 |
| morganfainberg | ccard: best of luck and it's 4am east coast, so might have some luck when the east coasters start rolling in | 08:03 |
| morganfainberg | should be sooner vs later | 08:04 |
| ccard | the only difference the client would see is that the keystone endpoint is now https | 08:04 |
| ccard | ok | 08:04 |
| morganfainberg | if east coast types can't help i'll be back in ~6-8 hrs likely | 08:04 |
| morganfainberg | sorry i'm not more help right now | 08:05 |
| ccard | np | 08:05 |
| morganfainberg | good luck in either case - hopefully we can get it resolved for you :) | 08:05 |
| morganfainberg | s/et it/help get it | 08:05 |
| breton | btw I am aware of that issue with keystoneclient | 08:09 |
| breton | morganfainberg: the issue there is that publicurl and adminurl point to different ips, http://172.16.0.2:5000/v2.0 and http://192.168.0.1:35357/v2.0 for example. And 192.xxx is not reachable outside the deployment | 08:16 |
| breton | and calls like 'tenant-list' call adminurl | 08:17 |
| breton | and I can't find that logic in ksc | 08:18 |
| *** e0ne has joined #openstack-keystone | 08:25 | |
| *** e0ne has quit IRC | 08:28 | |
| *** jaosorior has joined #openstack-keystone | 08:28 | |
| *** e0ne has joined #openstack-keystone | 08:30 | |
| *** e0ne has quit IRC | 08:31 | |
| openstackgerrit | darren-wang proposed openstack/keystone: Closes-Bug: #1454531 Change-Id: I01af5376505f49c3c7c1906b7bc9511adb114632 https://review.openstack.org/182569 | 08:40 |
| openstack | bug 1454531 in Keystone "list_user_projects() can't get filtered by 'domain_id'." [Undecided,In progress] https://launchpad.net/bugs/1454531 - Assigned to DWang (darren-wang) | 08:40 |
| openstackgerrit | Victor Stinner proposed openstack/python-keystoneclient: Remove discover and iso8601 dependencies https://review.openstack.org/177687 | 08:43 |
| openstackgerrit | darren-wang proposed openstack/keystone: Adding 'domain_id' filter to list_user_projects() https://review.openstack.org/182569 | 08:45 |
| *** josecastroleon has quit IRC | 08:50 | |
| *** ericksonfgds has joined #openstack-keystone | 08:52 | |
| *** josecastroleon has joined #openstack-keystone | 08:54 | |
| *** ericksonfgds has quit IRC | 09:20 | |
| *** e0ne has joined #openstack-keystone | 09:22 | |
| *** fhubik has joined #openstack-keystone | 09:30 | |
| *** dims has joined #openstack-keystone | 09:35 | |
| *** e0ne is now known as e0ne_ | 09:36 | |
| *** e0ne_ is now known as e0ne | 09:38 | |
| *** dims has quit IRC | 09:40 | |
| *** dims has joined #openstack-keystone | 10:01 | |
| *** mabrams has quit IRC | 10:06 | |
| *** jamielennox is now known as jamielennox|away | 10:08 | |
| *** fhubik is now known as fhubik_afk | 10:16 | |
| *** fhubik_afk is now known as fhubik | 10:22 | |
| *** e0ne is now known as e0ne_ | 10:25 | |
| *** avozza has quit IRC | 10:25 | |
| *** josecastroleon1 has joined #openstack-keystone | 10:25 | |
| *** darrenc has quit IRC | 10:25 | |
| *** gus has quit IRC | 10:25 | |
| *** e0ne_ is now known as e0ne | 10:26 | |
| *** darrenc has joined #openstack-keystone | 10:27 | |
| *** breton has quit IRC | 10:27 | |
| *** josecastroleon has quit IRC | 10:28 | |
| *** breton has joined #openstack-keystone | 10:29 | |
| *** mhu has quit IRC | 10:29 | |
| *** josecastroleon1 has quit IRC | 10:29 | |
| *** LarsHau has quit IRC | 10:30 | |
| *** mhu has joined #openstack-keystone | 10:31 | |
| *** grantbow has quit IRC | 10:31 | |
| *** grantbow has joined #openstack-keystone | 10:32 | |
| *** zz_avozza has joined #openstack-keystone | 10:32 | |
| *** EmilienM has quit IRC | 10:33 | |
| *** zz_avozza is now known as avozza | 10:33 | |
| *** ekarlso has quit IRC | 10:33 | |
| *** gus has joined #openstack-keystone | 10:33 | |
| *** EmilienM has joined #openstack-keystone | 10:35 | |
| *** LarsHau has joined #openstack-keystone | 10:37 | |
| samueldmq | morning | 10:39 |
| *** e0ne is now known as e0ne_ | 10:39 | |
| *** e0ne_ is now known as e0ne | 10:40 | |
| *** ekarlso has joined #openstack-keystone | 10:41 | |
| *** dhague has joined #openstack-keystone | 10:44 | |
| *** ekarlso has quit IRC | 10:45 | |
| *** ekarlso has joined #openstack-keystone | 10:45 | |
| *** Trozz has quit IRC | 10:58 | |
| *** Trozz has joined #openstack-keystone | 11:05 | |
| *** e0ne is now known as e0ne_ | 11:26 | |
| *** josecastroleon has joined #openstack-keystone | 11:36 | |
| dstanek | samueldmq: that it is | 11:36 |
| *** fhubik is now known as fhubik_afk | 11:39 | |
| samueldmq | dstanek, hey, what's up :-) | 11:45 |
| dstanek | samueldmq: not much | 11:52 |
| *** kiran-r has quit IRC | 11:55 | |
| *** e0ne_ is now known as e0ne | 12:08 | |
| *** aix has joined #openstack-keystone | 12:13 | |
| *** trey has quit IRC | 12:15 | |
| *** fhubik_afk is now known as fhubik | 12:15 | |
| *** trey has joined #openstack-keystone | 12:16 | |
| openstackgerrit | David Stanek proposed openstack/keystone: Removes temporary fix for doc generation https://review.openstack.org/182643 | 12:22 |
| *** gordc has joined #openstack-keystone | 12:25 | |
| *** lmtaylor has joined #openstack-keystone | 12:26 | |
| *** amakarov_away is now known as amakarov | 12:37 | |
| *** bknudson has quit IRC | 12:40 | |
| *** mestery has joined #openstack-keystone | 12:44 | |
| *** mflobo has left #openstack-keystone | 12:44 | |
| *** mflobo1 has joined #openstack-keystone | 12:48 | |
| *** mflobo1 has left #openstack-keystone | 12:48 | |
| *** kiran-r has joined #openstack-keystone | 12:51 | |
| openstackgerrit | Enrique Garcia Navalon proposed openstack/python-keystoneclient: Added endpoint group filter manager methods. Following spec defined at: https://github.com/openstack-attic/identity-api/blob/master/v3/src/markdown/identity-api-v3-os-ep-filter-ext.md https://review.openstack.org/182658 | 13:02 |
| *** richm has joined #openstack-keystone | 13:10 | |
| *** radez_g0n3 is now known as radez | 13:19 | |
| *** jsavak has joined #openstack-keystone | 13:20 | |
| *** nkinder has quit IRC | 13:24 | |
| breton | ImportError: No module named pbr_json on debian jessie | 13:28 |
| breton | any suggestions what it can be? | 13:28 |
| openstackgerrit | Enrique Garcia Navalon proposed openstack/python-keystoneclient: Added endpoint group filter manager methods https://review.openstack.org/182658 | 13:30 |
| breton | https://bugs.launchpad.net/pbr/+bug/1324784 oh well | 13:31 |
| openstack | Launchpad bug 1324784 in PBR "TypeError: dist must be a Distribution instance" [Undecided,Fix released] | 13:31 |
| *** richm has quit IRC | 13:34 | |
| *** sigmavirus24_awa is now known as sigmavirus24 | 13:37 | |
| openstackgerrit | Boris Bobrov proposed openstack/keystone: alembic initial support https://review.openstack.org/150057 | 13:40 |
| openstackgerrit | Boris Bobrov proposed openstack/keystone: Use migration_cli for db migrations https://review.openstack.org/147548 | 13:40 |
| *** mattfarina has joined #openstack-keystone | 13:40 | |
| openstackgerrit | Enrique Garcia Navalon proposed openstack/python-keystoneclient: Added endpoint group filter manager methods https://review.openstack.org/182658 | 13:43 |
| samueldmq | morganfainberg, jamielennox|away already updated the patch for identity v3 jobs .. see https://review.openstack.org/#/c/179663/ | 13:44 |
| *** bjornar has quit IRC | 13:46 | |
| *** richm has joined #openstack-keystone | 13:48 | |
| *** links has quit IRC | 13:48 | |
| *** kairat_kushaev has joined #openstack-keystone | 13:51 | |
| kairat_kushaev | Hi guys! I noticed keystone is using dogpile for caching operations. Have you noticed any drawbacks of using dogpile in Keystone? | 13:52 |
| kairat_kushaev | I am asking because we would like to implement caching using dogpile. | 13:53 |
| kairat_kushaev | I reviewed the solution in keystone and it seems ok but maybe someone faces with some issues that we can avoid in Heat. | 13:54 |
| *** markvoelker has quit IRC | 13:59 | |
| raildo | kairat_kushaev, I have had a little issue, because the dogpile can't store kwargs. you can see morganfainberg 's comment about this here: https://review.openstack.org/#/c/158372/51/keystone/resource/core.py | 14:00 |
| openstackgerrit | Raildo Mascena de Sousa Filho proposed openstack/keystone: Change project name constraint https://review.openstack.org/158372 | 14:02 |
| kairat_kushaev | raildo: Thanks. | 14:03 |
| kairat_kushaev | morganfainberg: Hello, could you please help with the questions below? | 14:05 |
| *** mabrams has joined #openstack-keystone | 14:05 | |
| kairat_kushaev | morganfainberg: sorry, above | 14:05 |
| *** bknudson has joined #openstack-keystone | 14:15 | |
| *** ChanServ sets mode: +v bknudson | 14:15 | |
| *** nkinder has joined #openstack-keystone | 14:17 | |
| *** afazekas has joined #openstack-keystone | 14:29 | |
| ayoung | morganfainberg, http://interactive.blockdiag.com | 14:29 |
| *** chlong has quit IRC | 14:30 | |
| *** bdossant has joined #openstack-keystone | 14:31 | |
| *** stevemar has joined #openstack-keystone | 14:32 | |
| *** ChanServ sets mode: +v stevemar | 14:32 | |
| *** lmtaylor has quit IRC | 14:36 | |
| *** bdossant has quit IRC | 14:36 | |
| openstackgerrit | Enrique Garcia Navalon proposed openstack/python-keystoneclient: Added endpoint group filter manager methods https://review.openstack.org/182658 | 14:42 |
| *** mestery has quit IRC | 14:44 | |
| *** fhubik has quit IRC | 14:48 | |
| *** blewis has joined #openstack-keystone | 14:49 | |
| *** e0ne is now known as e0ne_ | 14:50 | |
| *** e0ne_ is now known as e0ne | 14:52 | |
| *** hemna_ is now known as hemna | 14:53 | |
| *** josecastroleon has quit IRC | 14:57 | |
| *** lmtaylor1 has joined #openstack-keystone | 15:01 | |
| *** e0ne is now known as e0ne_ | 15:02 | |
| morganfainberg | ayoung: that's cool. | 15:08 |
| *** blewis has quit IRC | 15:09 | |
| ayoung | morganfainberg, yep. Although I think I am still going to use the tikz UML generation in Latex for my presentation | 15:09 |
| ayoung | the block diagrams don't seem to want to work as object/class diagrams | 15:10 |
| *** blewis has joined #openstack-keystone | 15:11 | |
| openstackgerrit | Raildo Mascena de Sousa Filho proposed openstack/keystone: Honor domain operations in project table https://review.openstack.org/143763 | 15:15 |
| *** dims has quit IRC | 15:15 | |
| *** dims has joined #openstack-keystone | 15:16 | |
| openstackgerrit | Raildo Mascena de Sousa Filho proposed openstack/keystone: List projects filtering by is_domain flag https://review.openstack.org/158398 | 15:17 |
| openstackgerrit | Raildo Mascena de Sousa Filho proposed openstack/keystone: Restrict inherited role assignments to subdomains https://review.openstack.org/164180 | 15:18 |
| *** blewis has quit IRC | 15:18 | |
| *** jistr is now known as jistr|mtg | 15:19 | |
| stevemar | morganfainberg, i was confused by your comment about the keystone logo change | 15:21 |
| morganfainberg | stevemar: just a silly add a "remote Idp" thing. | 15:21 |
| morganfainberg | Since it is "using federation" :p | 15:22 |
| morganfainberg | Totally superfluous and random. | 15:22 |
| stevemar | i'm okay with that :P | 15:22 |
| *** afazekas_ has quit IRC | 15:24 | |
| *** afazekas has quit IRC | 15:24 | |
| *** jistr|mtg is now known as jistr | 15:29 | |
| *** browne has joined #openstack-keystone | 15:34 | |
| *** _cjones_ has joined #openstack-keystone | 15:39 | |
| *** lhcheng has joined #openstack-keystone | 15:40 | |
| *** ChanServ sets mode: +v lhcheng | 15:40 | |
| amakarov | ayoung, hi! Help me please with a question about policies in keystone: we still have to edit policy.json manually or it can be somehow managed through API? | 15:41 |
| ayoung | amakarov, manual for now | 15:42 |
| *** e0ne_ is now known as e0ne | 15:43 | |
| *** gyee has joined #openstack-keystone | 15:44 | |
| *** ChanServ sets mode: +v gyee | 15:44 | |
| amakarov | ayoung, oh... thanks. Is there any spec/bp or discussion on the summit maybe? | 15:44 |
| ayoung | just a couple | 15:44 |
| ayoung | amakarov, http://openstacksummitmay2015vancouver.sched.org/event/14f4c5993e34b0f6a10c810510abbd73 | 15:44 |
| *** _cjones_ has quit IRC | 15:44 | |
| *** _cjones_ has joined #openstack-keystone | 15:45 | |
| *** kiran-r has quit IRC | 15:54 | |
| *** alexsyip has joined #openstack-keystone | 16:07 | |
| *** rwsu has joined #openstack-keystone | 16:13 | |
| openstackgerrit | Raildo Mascena de Sousa Filho proposed openstack/keystone: Honor domain operations in project table https://review.openstack.org/143763 | 16:17 |
| *** Akshik has joined #openstack-keystone | 16:23 | |
| *** jistr has quit IRC | 16:25 | |
| *** edmondsw has joined #openstack-keystone | 16:26 | |
| openstackgerrit | Dolph Mathews proposed openstack/python-keystoneclient: Prevent attempts to "filter" list() calls by globally unique IDs https://review.openstack.org/182752 | 16:42 |
| *** browne has quit IRC | 16:51 | |
| *** samleon has joined #openstack-keystone | 16:58 | |
| marekd | /msg stevemar i think i need swiss number again :/ | 17:01 |
| raildo | lbragstad, about your first comment in https://review.openstack.org/#/c/165936/21/keystone/resource/core.py | 17:01 |
| raildo | what would be the best way to do this schema checking without the clean? | 17:01 |
| stevemar | morganfainberg, join up! | 17:02 |
| morganfainberg | But.... | 17:02 |
| * morganfainberg gets computer out. | 17:03 | |
| stevemar | morganfainberg, you just need a phone | 17:03 |
| morganfainberg | Phone is dead. Needed computer to charge it. | 17:03 |
| *** topol has joined #openstack-keystone | 17:04 | |
| *** ChanServ sets mode: +v topol | 17:04 | |
| *** zzzeek has joined #openstack-keystone | 17:06 | |
| openstackgerrit | Min Song proposed openstack/keystone: Use single connection in get_all function https://review.openstack.org/180247 | 17:15 |
| *** ankita_wagh has joined #openstack-keystone | 17:18 | |
| *** harlowja has quit IRC | 17:20 | |
| *** harlowja has joined #openstack-keystone | 17:20 | |
| openstackgerrit | Min Song proposed openstack/keystone: Use single connection in get_all function https://review.openstack.org/180247 | 17:21 |
| *** samleon has quit IRC | 17:30 | |
| *** samleon has joined #openstack-keystone | 17:31 | |
| *** browne has joined #openstack-keystone | 17:33 | |
| *** Akshik has quit IRC | 17:34 | |
| *** Akshik has joined #openstack-keystone | 17:35 | |
| *** belmoreira has joined #openstack-keystone | 17:41 | |
| *** belmoreira has quit IRC | 17:43 | |
| *** dguerri is now known as _dguerri | 17:46 | |
| raildo | lbragstad, i get yout point here, but I don't know how to check because I don't know if we need to check this here, since this is already validate before https://review.openstack.org/#/c/165936/21/keystone/resource/core.py | 17:49 |
| dolphm | raildo: he'll be afk until tomorrow, so i guess reply in the review? | 17:50 |
| raildo | dolphm, ok, thanks. | 17:51 |
| *** dhague has quit IRC | 17:56 | |
| openstackgerrit | Raildo Mascena de Sousa Filho proposed openstack/keystone: Restrict inherited role assignments to subdomains https://review.openstack.org/164180 | 17:57 |
| *** e0ne is now known as e0ne_ | 18:00 | |
| stevemar | morganfainberg, feel free to drop | 18:01 |
| stevemar | its past 2 | 18:01 |
| *** mabrams has quit IRC | 18:01 | |
| *** mflobo has joined #openstack-keystone | 18:04 | |
| *** e0ne_ is now known as e0ne | 18:04 | |
| *** e0ne has quit IRC | 18:06 | |
| marekd | rodrigods: still connected ? | 18:12 |
| rodrigods | marekd, phone hung up | 18:14 |
| *** Akshik has quit IRC | 18:15 | |
| *** gokrokve has joined #openstack-keystone | 18:16 | |
| dstanek | dolphm: i was hoping that the hashing algorithm was implemented in Python and we could speed it up in C, but it looks like it's already C | 18:22 |
| dolphm | dstanek: are you looking at a profile of auth? | 18:23 |
| dstanek | dolphm: yes, of a single request to get a token from a password | 18:23 |
| dolphm | dstanek: can you paste it? | 18:24 |
| dstanek | dolphm: http://paste.openstack.org/show/222044/ | 18:25 |
| openstackgerrit | David Stanek proposed openstack/keystone: Order routes so most frequent requests are first https://review.openstack.org/182781 | 18:25 |
| dstanek | dolphm: ^ that gave me a 2-10% speed bump for an auth request, but at the expense of others | 18:26 |
| dolphm | oh wow | 18:26 |
| dstanek | ymmv....the speedup on a faster VM might be much less | 18:26 |
| dstanek | dolphm: i'm experimenting with several other things including a rounds change. | 18:27 |
| *** mflobo has quit IRC | 18:28 | |
| openstackgerrit | Min Song proposed openstack/keystone: Use single connection in get_all function https://review.openstack.org/180247 | 18:28 |
| *** mflobo has joined #openstack-keystone | 18:33 | |
| dolphm | dstanek: have a profile after minimizing the number of rounds? | 18:33 |
| *** mflobo has left #openstack-keystone | 18:34 | |
| dolphm | dstanek: should have lbragstad deploy http://docs.repoze.org/profile/ | 18:38 |
| *** e0ne has joined #openstack-keystone | 18:45 | |
| *** aix has quit IRC | 18:47 | |
| *** ankita_wagh has quit IRC | 18:48 | |
| *** jaosorior has quit IRC | 18:52 | |
| *** yapeng has joined #openstack-keystone | 18:54 | |
| *** ankita_wagh has joined #openstack-keystone | 18:56 | |
| *** _dguerri is now known as dguerri | 18:59 | |
| stevemar | nkinder, use bluejeans? | 19:00 |
| nkinder | stevemar: yep, joining now | 19:00 |
| *** palendae has left #openstack-keystone | 19:01 | |
| *** yapeng has quit IRC | 19:02 | |
| breton | dstanek: wow. I thought there are regexps and it the order is not significant | 19:05 |
| breton | > The problem is that routes uses one, yes one, huge regex for | 19:05 |
| breton | > dispatching | 19:05 |
| breton | I mean, regexp is an automaton and it can be reduced to the minimum. | 19:08 |
| *** Rockyg_ has joined #openstack-keystone | 19:12 | |
| dstanek | breton: yes, i had issues with routes at my last job | 19:14 |
| *** achudnovets has joined #openstack-keystone | 19:14 | |
| dstanek | dolphm: that profile was after the routes change was applied | 19:16 |
| *** achudnovets has quit IRC | 19:19 | |
| *** belmoreira has joined #openstack-keystone | 19:32 | |
| *** e0ne has quit IRC | 19:32 | |
| *** belmoreira has quit IRC | 19:33 | |
| *** e0ne has joined #openstack-keystone | 19:33 | |
| dolphm | dstanek: repoze won't make the datas http://162.242.172.215:35357/v3/__profile__ | 19:36 |
| dstanek | dolphm: i'm using my own | 19:36 |
| dolphm | dstanek: you're own what? | 19:37 |
| dstanek | dolphm: http://paste.openstack.org/show/222096/ | 19:38 |
| dstanek | it drops to a single file, but that could be easily changed | 19:38 |
| dolphm | dstanek: ah | 19:39 |
| breton | maybe we should use Rally for benchmarks | 19:39 |
| *** packet has joined #openstack-keystone | 19:40 | |
| dstanek | too much of a pain for what i am doing and dolphm's are based on Rackspace's reality; not sure how easy it is to muck with Rally | 19:40 |
| breton | dstanek: http://logs.openstack.org/35/133135/20/check/gate-rally-dsvm-keystone/0fb6153/rally-plot/results.html.gz -- before your patch | 19:42 |
| breton | dstanek: http://logs.openstack.org/81/182781/1/check/gate-rally-dsvm-keystone/43b31d8/rally-plot/results.html.gz -- with the patch | 19:42 |
| dstanek | wow, that's a pretty big difference | 19:43 |
| *** e0ne has quit IRC | 19:43 | |
| dstanek | i'm hacking together a quick change to use pecan's dispatching just to see if it's better | 19:43 |
| *** stevemar has quit IRC | 19:44 | |
| breton | and I'll try launching one of rally's tests via gates to see how it goes | 19:45 |
| openstackgerrit | Min Song proposed openstack/keystone: Use single connection in get_all function https://review.openstack.org/180247 | 19:45 |
| *** turul_ has quit IRC | 19:45 | |
| *** turul_ has joined #openstack-keystone | 19:46 | |
| dolphm | data! http://162.242.172.215:35357/v3/__profile__ | 19:46 |
| dstanek | dolphm: if you have it not strip_dirs it's a little easier to see where the files come from | 19:48 |
| dstanek | dolphm: reducing rounds made a pretty big difference | 19:49 |
| dolphm | dstanek: it makes such a big difference that we actually got a vulnerability report once which said 40,000 was high enough to be vulnerable to a DoS | 19:50 |
| dolphm | dstanek: =) | 19:50 |
| dstanek | haha | 19:50 |
| *** Rockyg_ has quit IRC | 19:59 | |
| *** e0ne has joined #openstack-keystone | 19:59 | |
| *** Rockyg has joined #openstack-keystone | 20:01 | |
| *** mattfarina has quit IRC | 20:09 | |
| openstackgerrit | Boris Bobrov proposed openstack/keystone: Test before dstanek's patch https://review.openstack.org/182819 | 20:10 |
| dolphm | lbragstad: i sent you a couple TODO items that we discussed earlier today ^ | 20:11 |
| lbragstad | dolphm: yep, reading them now | 20:11 |
| raildo | breton, that is a weird name for a patch :P | 20:11 |
| dolphm | lbragstad: why is the deploy broken at the moment? | 20:11 |
| dolphm | lbragstad: locust is getting 404's on GET /v3/auth/tokens | 20:12 |
| lbragstad | raildo: regarding the jsonschema comment, as long as we can prove that it's always validated prior with jsonschema, I think that'd be ok | 20:12 |
| *** amakarov is now known as amakarov_away | 20:12 | |
| lbragstad | raildo: it's just weird to be using clean.py | 20:12 |
| lbragstad | dolphm: checking it out | 20:12 |
| lbragstad | not sure what happend. | 20:12 |
| breton | raildo: meh, it's just to see what rally gonna say | 20:12 |
| raildo | lbragstad, right :) thanks for that | 20:13 |
| openstackgerrit | Boris Bobrov proposed openstack/keystone: after dstanek's patch https://review.openstack.org/182823 | 20:13 |
| dolphm | breton: rally uses cprofile too, right? | 20:13 |
| breton | dolphm: as far as I know, they just make http requests and measure real time. | 20:14 |
| dolphm | breton: the graphs it produces look like cprofile output converted into html | 20:15 |
| lbragstad | dolphm: redeploying the cluster | 20:15 |
| dolphm | lbragstad: how long is that going to take? | 20:16 |
| dstanek | dolphm: i don't think rally does any kind of profining | 20:16 |
| dstanek | or profiling even | 20:16 |
| lbragstad | dolphm: it's just the app nodes, so 10 - 15 minutes? | 20:16 |
| lbragstad | dolphm: where do you want me to deploy this middleware? | 20:18 |
| *** mattfarina has joined #openstack-keystone | 20:19 | |
| dolphm | lbragstad: http://cdn.pasteraw.com/kjuywuxgrqenus642z798k7f9nhmmvb | 20:19 |
| dolphm | lbragstad: i added a [filter:profile_v3] and added 3 filters to the beginning of [pipeline:api_v3] | 20:20 |
| lbragstad | dolphm: cool, got it | 20:20 |
| dolphm | lbragstad: add tags to all your plays so you can just do --tags=config next time to skip all the package installs and whatnot | 20:31 |
| lbragstad | ok | 20:32 |
| lbragstad | dolphm: for some reason, the patch it's getting deployed from gerrit | 20:32 |
| dolphm | lbragstad: ? | 20:32 |
| lbragstad | ssh to any of the app nodes and check the keystone repo | 20:33 |
| dolphm | lbragstad: gerrit is the upstream repo? | 20:34 |
| lbragstad | yeah | 20:34 |
| dolphm | lbragstad: that's correct - that's how it's able to deploy patches directly | 20:34 |
| *** ankita_wagh has quit IRC | 20:35 | |
| lbragstad | using refspec | 20:35 |
| *** ankita_wagh has joined #openstack-keystone | 20:35 | |
| *** nkinder has quit IRC | 20:37 | |
| *** ankita_wagh has quit IRC | 20:40 | |
| *** ankita_wagh has joined #openstack-keystone | 20:47 | |
| *** belmoreira has joined #openstack-keystone | 20:49 | |
| *** radez is now known as radez_g0n3 | 20:52 | |
| *** jorge_munoz_ has joined #openstack-keystone | 21:04 | |
| *** jorge_munoz has quit IRC | 21:09 | |
| *** amaurymedeiros has quit IRC | 21:09 | |
| *** ekarlso has quit IRC | 21:09 | |
| *** larsks has quit IRC | 21:09 | |
| *** wolsen has quit IRC | 21:09 | |
| *** haneef has quit IRC | 21:09 | |
| *** samueldmq has quit IRC | 21:09 | |
| *** jdennis has quit IRC | 21:09 | |
| *** greghaynes has quit IRC | 21:09 | |
| *** jorge_munoz_ is now known as jorge_munoz | 21:09 | |
| *** samueldmq has joined #openstack-keystone | 21:10 | |
| *** amaurymedeiros has joined #openstack-keystone | 21:10 | |
| *** amaurymedeiros has quit IRC | 21:10 | |
| *** amaurymedeiros has joined #openstack-keystone | 21:10 | |
| *** wolsen has joined #openstack-keystone | 21:10 | |
| *** greghayn1 has joined #openstack-keystone | 21:10 | |
| *** ekarlso has joined #openstack-keystone | 21:10 | |
| *** larsks has joined #openstack-keystone | 21:11 | |
| *** jdennis has joined #openstack-keystone | 21:11 | |
| *** haneef has joined #openstack-keystone | 21:11 | |
| *** gokrokve has quit IRC | 21:20 | |
| *** gokrokve has joined #openstack-keystone | 21:21 | |
| *** gokrokve has quit IRC | 21:25 | |
| *** gokrokve has joined #openstack-keystone | 21:29 | |
| *** greghayn1 is now known as greghaynes | 21:29 | |
| *** gokrokve has quit IRC | 21:45 | |
| *** gokrokve has joined #openstack-keystone | 21:45 | |
| *** gokrokve has quit IRC | 21:50 | |
| *** belmoreira has quit IRC | 21:54 | |
| *** lmtaylor1 has quit IRC | 21:54 | |
| *** gordc has quit IRC | 22:06 | |
| *** topol has quit IRC | 22:10 | |
| *** gokrokve has joined #openstack-keystone | 22:11 | |
| bknudson | check out this marshmallow library -- http://marshmallow.readthedocs.org/en/latest/ | 22:11 |
| bknudson | object serializer / deserializer | 22:11 |
| bknudson | we could use that in the controllers | 22:12 |
| bknudson | and start working with objects rather than dicts | 22:12 |
| *** zzzeek has quit IRC | 22:17 | |
| gyee | what's the advantage? | 22:17 |
| *** nkinder has joined #openstack-keystone | 22:18 | |
| bknudson | we already have to deal with objects with the sqlalchemy models | 22:18 |
| bknudson | we should be able to re-use those models | 22:18 |
| bknudson | keystone would be about 5 lines of code | 22:19 |
| *** jsavak has quit IRC | 22:19 | |
| *** jamielennox|away is now known as jamielennox | 22:19 | |
| *** bknudson has quit IRC | 22:20 | |
| *** Ephur has joined #openstack-keystone | 22:20 | |
| gyee | oh I see what you mean :) | 22:24 |
| gyee | do it! | 22:25 |
| *** mattfarina has quit IRC | 22:27 | |
| *** ankita_wagh has quit IRC | 22:27 | |
| *** e0ne has quit IRC | 22:28 | |
| *** Rockyg has quit IRC | 22:33 | |
| *** ekarlso has quit IRC | 22:34 | |
| *** ekarlso has joined #openstack-keystone | 22:34 | |
| gyee | wow, 6 roundtrips for "openstack role add", that doesn't look right | 22:36 |
| *** mattfarina has joined #openstack-keystone | 22:36 | |
| -openstackstatus- NOTICE: Gerrit and Zuul are going offline for reboots to fix a security vulnerability. | 22:39 | |
| *** ChanServ changes topic to "Gerrit and Zuul are going offline for reboots to fix a security vulnerability." | 22:39 | |
| *** dims_ has joined #openstack-keystone | 22:40 | |
| *** mattfarina has quit IRC | 22:40 | |
| *** dims has quit IRC | 22:41 | |
| *** dims has joined #openstack-keystone | 22:43 | |
| *** dims_ has quit IRC | 22:47 | |
| *** openstackgerrit has quit IRC | 22:47 | |
| *** mattfarina has joined #openstack-keystone | 22:48 | |
| *** openstackgerrit has joined #openstack-keystone | 22:49 | |
| *** Raildo_ has joined #openstack-keystone | 22:53 | |
| *** ChanServ changes topic to "Liberty Development Open | Review Liberty Specs | See you at the summit!" | 22:57 | |
| -openstackstatus- NOTICE: Gerrit and Zuul are back online. | 22:57 | |
| *** ericksonfgds has joined #openstack-keystone | 22:58 | |
| *** ankita_wagh has joined #openstack-keystone | 23:00 | |
| *** Rockyg has joined #openstack-keystone | 23:07 | |
| *** gokrokve has quit IRC | 23:13 | |
| *** gokrokve has joined #openstack-keystone | 23:14 | |
| *** gokrokve has quit IRC | 23:15 | |
| *** mattfarina has quit IRC | 23:28 | |
| *** mattfarina has joined #openstack-keystone | 23:32 | |
| *** mattfarina has quit IRC | 23:34 | |
| *** mattfarina has joined #openstack-keystone | 23:37 | |
| *** mattfarina has quit IRC | 23:39 | |
| *** Raildo_ has quit IRC | 23:44 | |
| *** bknudson has joined #openstack-keystone | 23:51 | |
| *** ChanServ sets mode: +v bknudson | 23:51 | |
| *** ankita_wagh has quit IRC | 23:54 | |
| *** ericksonfgds has quit IRC | 23:55 | |
| *** _cjones_ has quit IRC | 23:56 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!