| *** boris-42 has quit IRC | 00:58 | |
| *** emagana has joined #openstack-keystone | 01:01 | |
| *** jamielennox|away is now known as jamielennox | 01:02 | |
| *** jamielennox is now known as jamielennox|away | 01:03 | |
| *** liusheng has quit IRC | 01:15 | |
| *** liusheng has joined #openstack-keystone | 01:28 | |
| *** tobe has joined #openstack-keystone | 01:36 | |
| *** dimsum__ has joined #openstack-keystone | 01:51 | |
| *** davechen has joined #openstack-keystone | 02:05 | |
| *** davechen1 has joined #openstack-keystone | 02:08 | |
| *** davechen has quit IRC | 02:11 | |
| *** davechen has joined #openstack-keystone | 02:12 | |
| *** davechen1 has quit IRC | 02:14 | |
| *** emagana has quit IRC | 02:31 | |
| *** dimsum__ has quit IRC | 02:35 | |
| *** lhcheng has quit IRC | 03:14 | |
| *** lhcheng has joined #openstack-keystone | 03:19 | |
| *** ChanServ sets mode: +v lhcheng | 03:19 | |
| *** dimsum__ has joined #openstack-keystone | 03:36 | |
| openstackgerrit | Eli Qiao proposed openstack/oslo.policy: WIP: Use watchdog instead of cache https://review.openstack.org/185298 | 03:41 |
|---|---|---|
| *** dimsum__ has quit IRC | 03:41 | |
| *** jaison has joined #openstack-keystone | 03:49 | |
| *** outsdset has joined #openstack-keystone | 03:50 | |
| *** Ephur has joined #openstack-keystone | 04:03 | |
| openstackgerrit | Merged openstack/keystone-specs: Add spec for request-helpers https://review.openstack.org/164582 | 04:11 |
| *** ChanServ changes topic to "Welcome Back from Vancouver! | Reminder next IRC meeting is 6/2" | 04:11 | |
| morganfainberg | dstanek: wish me luck... just ordered a new laptop. | 04:34 |
| morganfainberg | dstanek: going x1 carbon | 04:34 |
| morganfainberg | dstanek: getting tired of playing the "must run a VM" to get basic functionality for dev work. | 04:34 |
| openstackgerrit | Merged openstack/keystone: Correct tests setting auth methods to a non-list https://review.openstack.org/184913 | 04:46 |
| openstackgerrit | Merged openstack/keystone: Test use config_overrides for configs https://review.openstack.org/184914 | 04:47 |
| openstackgerrit | Merged openstack/keystone: Tests consistently use auth_plugin_config_override https://review.openstack.org/184915 | 04:48 |
| openstackgerrit | Merged openstack/keystone: Tests don't override default auth methods/plugins https://review.openstack.org/182137 | 04:50 |
| *** dimsum__ has joined #openstack-keystone | 04:53 | |
| *** dimsum__ has quit IRC | 04:57 | |
| *** tobe has quit IRC | 05:10 | |
| *** stevemar has joined #openstack-keystone | 05:16 | |
| *** ChanServ sets mode: +v stevemar | 05:16 | |
| *** tobe has joined #openstack-keystone | 05:33 | |
| *** kiran-r has joined #openstack-keystone | 05:44 | |
| bigjools | morganfainberg: I've got one of those - it's going back | 05:45 |
| morganfainberg | bigjools: the Macbook is turning into hell for me to develop on :( | 05:45 |
| morganfainberg | bigjools: i'm getting really annoyed by the libs on the MBP and that a vm = trash battery life | 05:46 |
| morganfainberg | bigjools: basically - i am tired of yosemite :( | 05:46 |
| morganfainberg | bigjools: what is wrong with your x1c? | 05:46 |
| bigjools | morganfainberg: don't expect to run too many VMs on X1 Carbons, they only have 8GiB | 05:46 |
| morganfainberg | bigjools: running a single vm is plenty | 05:46 |
| bigjools | I'm using LXCs but it still is on the limit | 05:46 |
| bigjools | also the touchpad is a disaster | 05:47 |
| bigjools | if you use the pointer then it's ok | 05:47 |
| morganfainberg | bigjools: that makes me sad to hear | 05:47 |
| morganfainberg | bigjools: 14.04? 15.04? | 05:47 |
| morganfainberg | other linux? | 05:47 |
| bigjools | using 14.10 still | 05:47 |
| * morganfainberg has never been a fan of the eraser pointer | 05:47 | |
| bigjools | the nipple! | 05:47 |
| morganfainberg | i think we have someone on our team doing the x1c w/ vivid | 05:48 |
| morganfainberg | and it is working for them | 05:48 |
| bigjools | FWIW one VM took me into swap once you take into account how heavy browsers are these days | 05:48 |
| bigjools | it's lovely and light though, it does have that going for it | 05:49 |
| morganfainberg | fair enough, i have ~1GB swap used on the MBPr i have (16GB) | 05:49 |
| morganfainberg | with 1 VM running | 05:49 |
| bigjools | but not having buttons below the touchpad drives me insane, you have to click the pad and it rotates about a hinge at the top edge | 05:49 |
| morganfainberg | i really wish they offered 16GB x1c | 05:49 |
| bigjools | +1 | 05:50 |
| morganfainberg | i was really close to getting the new macbook, but see above complaints | 05:50 |
| morganfainberg | also the 15" mbpr is not travel friendly | 05:50 |
| bigjools | I am still caressing my old T410, it was the last of the decent Lenovo keyboards + touchpads | 05:50 |
| morganfainberg | hehe | 05:51 |
| bigjools | hey, while you're around, would you happen to know why when I use keystoneclient CLI with SAML, it redirects to the web portal on testshib rather than doing ECP? | 05:52 |
| morganfainberg | bigjools: oh god. HAHA want to talk about scary memory leaking ickyness? | 05:52 |
| morganfainberg | 800MB used for youtube. | 05:53 |
| bigjools | ! | 05:53 |
| bigjools | Google's pages are usually very heavyweight, but that's crazy | 05:53 |
| morganfainberg | yeah | 05:53 |
| morganfainberg | closed safari, memory used 5.5GB | 05:53 |
| morganfainberg | yeah. i think i can probably not be stupid about browsers and stay safe w/ 8gb ram | 05:54 |
| bigjools | I get about a Gig back if I close gmail and g+ | 05:54 |
| morganfainberg | bigjools: not sure about testshib and ECP atm | 05:54 |
| bigjools | ok no worries, I think marekd was going to help me | 05:55 |
| morganfainberg | bigjools: i'd need to prod it with a stick to look at it right now | 05:55 |
| morganfainberg | bigjools: which reminds me... need to release 1.4 of ksc tomorrow | 05:55 |
| bigjools | I'd like to catch up with someone about how much work is left to get the websso part of k2k working | 05:55 |
| *** stevemar has quit IRC | 05:55 | |
| morganfainberg | bigjools: I also need to catch up on the current state of affairs in that regard | 05:56 |
| bigjools | which would have been great if I could have made it to Vancouver last week! | 05:56 |
| morganfainberg | bigjools: have to do some customer facing research | 05:56 |
| morganfainberg | bigjools: yeah i heard you weren't there. :( | 05:56 |
| bigjools | *sadface* | 05:56 |
| bigjools | thanks for the shoutout on one of the slides :) | 05:57 |
| morganfainberg | :) | 05:58 |
| *** mabrams has joined #openstack-keystone | 06:04 | |
| morganfainberg | bigjools: make sure you thank stevemar too | 06:05 |
| morganfainberg | bigjools: i think he's the one who put that into the slide | 06:05 |
| *** tobe has quit IRC | 06:05 | |
| bigjools | ah ok, I've not interacted with him yet | 06:05 |
| morganfainberg | he's one of our resident canadians | 06:05 |
| morganfainberg | our = keystone | 06:05 |
| bigjools | cool. Any others down here in Australia? | 06:06 |
| morganfainberg | jamielennox|away is in SYD | 06:06 |
| bigjools | good to know, thanks | 06:06 |
| morganfainberg | also: mid july, Keystone midcycle | 06:07 |
| morganfainberg | if you're able to come visit | 06:07 |
| morganfainberg | if not, i'll also be at pyconau | 06:07 |
| bigjools | pyconau is right here in Brisbane | 06:07 |
| morganfainberg | if you're there and just want to chat aobout stuff. | 06:07 |
| bigjools | I should be going | 06:07 |
| morganfainberg | cool | 06:07 |
| bigjools | are you meeting for keystone midcycle? | 06:07 |
| morganfainberg | i think an openstack hack-day is happening | 06:07 |
| morganfainberg | bigjools: woopse left off Boston for midcycle | 06:08 |
| morganfainberg | :P | 06:08 |
| bigjools | heh | 06:08 |
| * morganfainberg is feeling the "need food" and is late post summit | 06:08 | |
| bigjools | I'll look into Boston | 06:08 |
| morganfainberg | bigjools: ayoung has been helping get that going, so you can get info from him or the wiki on midcycle spints | 06:09 |
| bigjools | great | 06:09 |
| morganfainberg | https://wiki.openstack.org/wiki/Sprints/KeystoneLibertySprint | 06:09 |
| *** tobe has joined #openstack-keystone | 06:17 | |
| *** pnavarro has joined #openstack-keystone | 06:20 | |
| *** bradjones has joined #openstack-keystone | 06:22 | |
| *** pnavarro has quit IRC | 06:43 | |
| *** e0ne has joined #openstack-keystone | 06:54 | |
| *** e0ne has quit IRC | 06:55 | |
| *** Ephur has quit IRC | 07:01 | |
| *** davechen has left #openstack-keystone | 07:04 | |
| *** tobe has quit IRC | 07:10 | |
| *** tobe has joined #openstack-keystone | 07:19 | |
| *** davechen has joined #openstack-keystone | 07:30 | |
| openstackgerrit | Dave Chen proposed openstack/keystone: Move endpoint policy into keystone core https://review.openstack.org/171448 | 07:30 |
| *** jistr has joined #openstack-keystone | 07:34 | |
| *** pnavarro has joined #openstack-keystone | 07:35 | |
| *** pnavarro has quit IRC | 07:56 | |
| *** ncoghlan has quit IRC | 08:01 | |
| *** pece has joined #openstack-keystone | 08:23 | |
| *** lhcheng has quit IRC | 08:25 | |
| *** dimsum__ has joined #openstack-keystone | 08:30 | |
| *** aix has quit IRC | 08:34 | |
| *** kashyap has joined #openstack-keystone | 08:34 | |
| *** dimsum__ has quit IRC | 08:35 | |
| kashyap | What does upstream recommend for tokens? PKI or UUID? My guess: the former. | 08:38 |
| *** tobe has quit IRC | 08:40 | |
| *** fhubik has joined #openstack-keystone | 08:49 | |
| *** tobe has joined #openstack-keystone | 08:58 | |
| *** aix has joined #openstack-keystone | 09:02 | |
| *** afazekas_ has joined #openstack-keystone | 09:05 | |
| *** tobe has quit IRC | 09:13 | |
| *** tobe has joined #openstack-keystone | 09:18 | |
| openstackgerrit | Dave Chen proposed openstack/keystone: Move endpoint filter into keystone core https://review.openstack.org/183377 | 09:20 |
| openstackgerrit | Dave Chen proposed openstack/keystone: Move endpoint filter into keystone core https://review.openstack.org/183377 | 09:43 |
| *** davechen has left #openstack-keystone | 09:57 | |
| *** fhubik is now known as fhubik_afk | 10:20 | |
| *** fhubik_afk is now known as fhubik | 10:46 | |
| *** e0ne has joined #openstack-keystone | 10:53 | |
| *** amakarov_away is now known as amakarov | 11:09 | |
| *** dimsum__ has joined #openstack-keystone | 11:09 | |
| amakarov | kashyap, use Fernet tokens | 11:14 |
| * kashyap looks up what is Fernet tokens (vaguely heard that, but don't recall). | 11:14 | |
| *** tobe has quit IRC | 11:15 | |
| kashyap | amakarov: I asked it as I came across this review on a mailing list - https://review.openstack.org/185120 | 11:16 |
| kashyap | Which removes the mention of PKI "the guide uses UUID token. That felt a little w | 11:16 |
| kashyap | Err, truncated sentence. | 11:16 |
| kashyap | Meant to type: Which removes the mention of PKI "because the guide uses UUID token". That didn't feel right. | 11:17 |
| amakarov | kashyap, https://github.com/openstack/keystone-specs/blob/master/specs/kilo/klwt.rst | 11:17 |
| kashyap | Thanks for the pointer. | 11:18 |
| amakarov | yw | 11:19 |
| *** tobe has joined #openstack-keystone | 11:19 | |
| *** e0ne is now known as e0ne_ | 11:25 | |
| *** e0ne_ is now known as e0ne | 11:31 | |
| *** fhubik is now known as fhubik_afk | 11:41 | |
| *** fhubik_afk is now known as fhubik | 12:16 | |
| *** gordc has joined #openstack-keystone | 12:33 | |
| *** kiran-r has quit IRC | 12:50 | |
| *** fhubik is now known as fhubik_afk | 13:01 | |
| *** jaison has quit IRC | 13:01 | |
| *** krykowski has joined #openstack-keystone | 13:06 | |
| *** fhubik_afk is now known as fhubik | 13:07 | |
| *** chlong has quit IRC | 13:07 | |
| *** fhubik is now known as fhubik_afk | 13:08 | |
| *** rohitk has joined #openstack-keystone | 13:15 | |
| rohitk | Can horizon Kilo version work with an Icehouse/Juno Openstack deployment? | 13:16 |
| *** tobe has quit IRC | 13:32 | |
| *** fhubik_afk is now known as fhubik | 13:36 | |
| *** rohitk has quit IRC | 13:51 | |
| *** mabrams has left #openstack-keystone | 14:00 | |
| *** chlong has joined #openstack-keystone | 14:04 | |
| *** e0ne is now known as e0ne_ | 14:06 | |
| *** krykowski has quit IRC | 14:09 | |
| *** e0ne_ has quit IRC | 14:17 | |
| *** dguerri`away is now known as dguerri | 14:17 | |
| *** e0ne has joined #openstack-keystone | 14:19 | |
| *** stevemar has joined #openstack-keystone | 14:20 | |
| *** ChanServ sets mode: +v stevemar | 14:20 | |
| *** fhubik is now known as fhubik_afk | 14:30 | |
| *** krykowski has joined #openstack-keystone | 14:39 | |
| *** fhubik_afk is now known as fhubik | 14:44 | |
| *** krykowski has quit IRC | 15:02 | |
| *** jistr has quit IRC | 15:04 | |
| *** dimsum__ has quit IRC | 15:05 | |
| *** fhubik is now known as fhubik_afk | 15:12 | |
| *** fhubik_afk is now known as fhubik | 15:12 | |
| *** zzzeek has joined #openstack-keystone | 15:13 | |
| *** fhubik has quit IRC | 15:46 | |
| *** e0ne is now known as e0ne_ | 15:50 | |
| *** e0ne_ is now known as e0ne | 15:51 | |
| gordc | anyone have an example of how to create read only access via policy.json? | 15:58 |
| morganfainberg | gordc: for what api? | 15:59 |
| morganfainberg | Or what call? | 15:59 |
| morganfainberg | Read only is a bit vague. There are lots of things that are used for read ;) | 16:00 |
| gordc | morganfainberg: any api i guess... we can use nova for example. it was brought up that a lot of operators are using a readonly api for ceilometer specific queries since they don't want ceilometer's polling to effect normal api calls | 16:02 |
| gordc | is it simply specifying empty values in policy.json? https://github.com/openstack/nova/blob/master/etc/nova/policy.json#L8-L9 | 16:03 |
| morganfainberg | gordc: so the easiest solution is to create a new role called "read-only" or similar, then in the policy.json for the "get" or "list" type apis (vs post) do an "or" and look soft that role too | 16:03 |
| morganfainberg | gordc: you can make a rule like an is_admin rule for read-only | 16:04 |
| morganfainberg | S/soft/for | 16:04 |
| morganfainberg | Empty value means no specific role iirc | 16:04 |
| morganfainberg | I *think* /me is just waking up and would need to 2x check | 16:05 |
| gordc | morganfainberg: ah i see... cool cool. i'll work with the 'read-only' role stuff you mentioned. | 16:05 |
| morganfainberg | Yeah. | 16:06 |
| morganfainberg | That is likely the best bet. | 16:06 |
| gordc | morganfainberg: kk. thanks! | 16:07 |
| morganfainberg | gordc: makes me realize I should poke at this stuff a bit more ;) | 16:07 |
| gordc | morganfainberg: i thought the ptl's role was to relax and be fanned by palm leaves? | 16:09 |
| gordc | i was severly mislead when i signed up. | 16:09 |
| *** ericksonsantos has joined #openstack-keystone | 16:10 | |
| morganfainberg | gordc: I swear that was the job description. Someone lied on the paperwork :P | 16:10 |
| gordc | :( | 16:11 |
| *** afazekas_ has quit IRC | 16:17 | |
| *** blewis` has quit IRC | 16:21 | |
| *** _cjones_ has joined #openstack-keystone | 16:27 | |
| openstackgerrit | Merged openstack/keystone: Use single connection in get_all function https://review.openstack.org/180247 | 16:31 |
| *** gokrokve has joined #openstack-keystone | 16:39 | |
| *** kashyap has left #openstack-keystone | 16:41 | |
| *** stevemar has quit IRC | 16:50 | |
| *** aix has quit IRC | 17:01 | |
| *** e0ne has quit IRC | 17:02 | |
| *** liusheng has quit IRC | 17:10 | |
| *** liusheng has joined #openstack-keystone | 17:10 | |
| *** bradjones has quit IRC | 17:15 | |
| openstackgerrit | Merged openstack/pycadf: Remove run_cross_tests.sh https://review.openstack.org/179481 | 17:28 |
| *** blewis has joined #openstack-keystone | 17:38 | |
| *** afazekas_ has joined #openstack-keystone | 17:46 | |
| *** bradjones_ has joined #openstack-keystone | 17:46 | |
| *** gokrokve has quit IRC | 17:50 | |
| *** afazekas_ has quit IRC | 18:00 | |
| *** amakarov is now known as amakarov_away | 18:02 | |
| *** afazekas_ has joined #openstack-keystone | 18:16 | |
| *** afazekas_ has quit IRC | 18:31 | |
| *** emagana has joined #openstack-keystone | 18:40 | |
| *** emagana has quit IRC | 18:42 | |
| *** rushiagr_away is now known as rushiagr | 18:47 | |
| *** e0ne has joined #openstack-keystone | 18:51 | |
| *** pnavarro has joined #openstack-keystone | 19:01 | |
| *** rushiagr is now known as rushiagr_away | 19:05 | |
| *** e0ne has quit IRC | 19:07 | |
| *** e0ne has joined #openstack-keystone | 19:23 | |
| *** samueldmq has joined #openstack-keystone | 19:35 | |
| *** zzzeek has quit IRC | 19:35 | |
| *** lhcheng has joined #openstack-keystone | 19:36 | |
| *** ChanServ sets mode: +v lhcheng | 19:36 | |
| samueldmq | hi, I hope everyone has enjoyed the summit | 19:38 |
| samueldmq | let's make Liberty an outstanding cycle :) | 19:38 |
| *** zzzeek has joined #openstack-keystone | 19:40 | |
| *** bradjones_ has quit IRC | 19:49 | |
| *** bradjones has joined #openstack-keystone | 19:49 | |
| *** pnavarro has quit IRC | 19:51 | |
| *** zzzeek has quit IRC | 20:00 | |
| *** e0ne has quit IRC | 20:20 | |
| *** zzzeek has joined #openstack-keystone | 20:50 | |
| *** samueldmq has quit IRC | 20:52 | |
| *** samueldmq has joined #openstack-keystone | 20:52 | |
| *** notmyname has quit IRC | 21:06 | |
| *** pece has quit IRC | 21:31 | |
| *** blewis` has joined #openstack-keystone | 21:57 | |
| *** blewis has quit IRC | 21:59 | |
| *** gabriel-bezerra has quit IRC | 22:03 | |
| *** blewis` has quit IRC | 22:04 | |
| *** blewis has joined #openstack-keystone | 22:10 | |
| openstackgerrit | Alan Pevec proposed openstack/keystone: disable admin_token by default https://review.openstack.org/185464 | 22:14 |
| *** gordc has quit IRC | 22:15 | |
| *** dguerri is now known as dguerri`away | 22:18 | |
| *** samueldmq has quit IRC | 22:30 | |
| *** jamielennox|away is now known as jamielennox | 23:10 | |
| *** chlong has quit IRC | 23:16 | |
| jamielennox | morganfainberg: webob contains a 3mb test directory, mostly from __pycache__ and every possible combination of pyo and pyc files | 23:34 |
| morganfainberg | jamielennox: /facepalm | 23:34 |
| jamielennox | he's got pyc files generated for py32, py33, py34 and pypy, and pyc and py0 for the py2 files | 23:36 |
| morganfainberg | jamielennox: that is all sorts of amazingly bad | 23:49 |
| jamielennox | morganfainberg: i'm just not sure i can be bothered fixing it for him | 23:49 |
| *** samueldmq has joined #openstack-keystone | 23:59 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!