*** dims has joined #openstack-keystone | 00:03 | |
*** dims has quit IRC | 00:05 | |
*** dims has joined #openstack-keystone | 00:05 | |
*** dave-mccowan has joined #openstack-keystone | 00:06 | |
*** dims has quit IRC | 00:10 | |
*** tsymanczyk has quit IRC | 00:15 | |
*** dims has joined #openstack-keystone | 00:17 | |
*** mylu has joined #openstack-keystone | 00:19 | |
*** btully has joined #openstack-keystone | 00:22 | |
*** shadower has quit IRC | 00:23 | |
*** shadower has joined #openstack-keystone | 00:23 | |
*** tsymanczyk has joined #openstack-keystone | 00:29 | |
*** tsymanczyk is now known as Guest4252 | 00:30 | |
*** mylu has quit IRC | 00:37 | |
*** mylu has joined #openstack-keystone | 00:38 | |
*** markvoelker has joined #openstack-keystone | 00:39 | |
*** tqtran_ has quit IRC | 00:41 | |
*** mylu has quit IRC | 00:43 | |
*** _cjones_ has quit IRC | 00:44 | |
*** bknudson has joined #openstack-keystone | 00:46 | |
*** ChanServ sets mode: +v bknudson | 00:46 | |
openstackgerrit | Sam Leong proposed openstack/keystone: Tokenless authz with X.509 SSL client certificate https://review.openstack.org/156870 | 00:48 |
---|---|---|
openstackgerrit | Sam Leong proposed openstack/keystone: Tokenless authz with X.509 SSL client certificate https://review.openstack.org/156870 | 00:50 |
*** browne has quit IRC | 00:54 | |
*** EinstCrazy has joined #openstack-keystone | 00:56 | |
bknudson | the tests seem to run slower. | 01:08 |
*** zzzeek has joined #openstack-keystone | 01:14 | |
*** ankita_wagh has quit IRC | 01:19 | |
*** jasonsb has quit IRC | 01:25 | |
openstackgerrit | Dave Chen proposed openstack/keystone: Remove local conf information from paste-ini https://review.openstack.org/134124 | 01:27 |
*** davechen has joined #openstack-keystone | 01:28 | |
morgan | bknudson: we've added a whole mess of really slow tests latelyu | 01:29 |
morgan | this is the unit tests are not functional tests issue | 01:29 |
morgan | but we're still massively using them like they are (erm vice-versa) | 01:29 |
bknudson | it's taking 15 mins where it used to be 5. | 01:29 |
bknudson | maybe something got messed up on my laptop | 01:29 |
morgan | no, same thing here | 01:30 |
morgan | i'm trying to unwind awful test issues before going back to look at performance | 01:30 |
morgan | but we have issues where moving tests to "functional" is either a "fix loading of things" or rewrite from scratch because they make tons of assumptions. | 01:30 |
*** darrenc is now known as darrenc_afk | 01:31 | |
bknudson | I'd expect functional tests will be starting over. | 01:31 |
morgan | bknudson: i was trying to salvage some basic test logic | 01:31 |
morgan | but i guess i can just dump this work to the side. | 01:31 |
morgan | i'm already beyond frustrated with the ldap tests (rm -rf test_backend_ldap plz) | 01:32 |
morgan | the tests are kindof a nightmare atm | 01:32 |
bknudson | I totally agree | 01:32 |
rodrigods | morgan, but the HMT tests are not just skips! ;) | 01:33 |
morgan | maybe we should just standup the functional test suite initializers and focus on re-writing the tests we need and just drop our unit tests | 01:33 |
bknudson | rodrigods: you should implement an LDAP backend and then only implement 1/2 the functionality | 01:33 |
bknudson | and then have 3 or 4 versions of the LDAP tests. | 01:33 |
morgan | 29 files changed, 290 insertions(+), 125 deletions(-) | 01:34 |
rodrigods | bknudson, didn't get your point | 01:34 |
morgan | just to unwind the fixture loading so i can start unwinding the "setup sample data" | 01:34 |
morgan | without massive errors | 01:34 |
morgan | and still have 57 tests failing | 01:34 |
morgan | i may have already spent 4 hours on this | 01:35 |
bknudson | {1} keystone.tests.unit.test_v3_federation.WebSSOTests.test_scope_to_project_multiple_times [3.058932s] ... ok | 01:35 |
bknudson | all these unit tests take 3 seconds | 01:35 |
morgan | bknudson: and a lot of the DomainSQL ones take 3s | 01:35 |
morgan | basically all the new tests are obnoxiously slow | 01:35 |
rodrigods | federation tests are slow because they need to load tons of fixtures | 01:35 |
morgan | rodrigods: that is a sign we are using the wrong test system. unit tests are not meant to be abused like we are | 01:35 |
bknudson | I reverted back a ways and now they're running fast again. | 01:36 |
rodrigods | morgan, ++ there was a review adding some fixtures there where I maid this complaint | 01:36 |
* morgan sighs | 01:36 | |
*** woodster_ has quit IRC | 01:39 | |
bknudson | morgan: when I talked to mtrienish about functional tests in the projects he actually had a different idea of what they're supposed to do. | 01:39 |
bknudson | He said that our functional tests should be written such that they reach into the backend data and check on things. | 01:40 |
morgan | not what we are currently doing. | 01:40 |
morgan | i disagree so much with that | 01:40 |
bknudson | if the functional tests don't reach into the backend then they should be in tempest | 01:40 |
morgan | then everything we do should be tempest | 01:41 |
morgan | except... we need real LDAP, SQL, and etc backends | 01:41 |
bknudson | yeah, that's probably the case. | 01:41 |
morgan | but we got told they don't want our tests before [not just the ksc ones] | 01:41 |
morgan | so.. i am of the opinion tempest is the wrong place for them. | 01:41 |
bknudson | for getting real LDAP and SQL -- there's a mysql in the test instance that we can use | 01:42 |
bknudson | and we could probably get an LDAP server running there too | 01:42 |
morgan | yeah LDAP isn't hard to do | 01:42 |
morgan | i in fact want to make FreeIPA always in devstacks | 01:42 |
bknudson | and then have the unit tests run live tests if they're available | 01:42 |
morgan | so instead of functional, we should just coin "live tests" and if tempest likes them, we can move them over but I don't think tempest wants us to be bombarding them with 1000s of tests | 01:43 |
bknudson | so I think you should check with mtrienish before we go to far down the path of putting the keystone unit/funcational tests as functional | 01:43 |
morgan | because thats the next thing | 01:43 |
morgan | since our restful tests case should die. | 01:43 |
bknudson | I think it's fine to have a few restful tests but we're using it as a crutch -- call the controller directly instead where possible. | 01:44 |
bknudson | or call the backend directly | 01:44 |
morgan | yes. we shouldn't be standing up the entire stack for 100% of our tests | 01:44 |
morgan | if it is a unit test, it is a unit test | 01:44 |
morgan | not a "end to end" test | 01:44 |
bknudson | yep | 01:45 |
bknudson | btw, I think it's 03e4cb6 Merge "Use entrypoints for paste middleware and apps" that slowed things. | 01:45 |
morgan | looking | 01:45 |
morgan | stevedore? | 01:46 |
*** darrenc_afk is now known as darrenc | 01:47 | |
bknudson | I have heard stevedore is slow. | 01:47 |
morgan | well it is a sign we need to just drop that restful case on the floor i think. | 01:47 |
morgan | and start calling things directly | 01:47 |
morgan | but it wont speed up the tests much then :( | 01:47 |
morgan | because the backend loading is stevedore. | 01:47 |
*** spandhe has quit IRC | 01:47 | |
morgan | maybe we mock stevedore :P | 01:47 |
morgan | *shiftyeyes* | 01:48 |
bknudson | does test_v3_federation really go through rest? | 01:48 |
morgan | yes | 01:48 |
bknudson | I like how it's test_v3 as if there's another version that supports it. | 01:48 |
morgan | stands up the entire app in eventlet for every test | 01:48 |
morgan | class FederationTests(test_v3.RestfulTestCase): | 01:49 |
bknudson | most of them don't do any rest call... | 01:49 |
bknudson | MappingRuleEngineTests shouldn't be doing rest calls. | 01:49 |
morgan | i really think we need to make restfultest case go away simply. | 01:50 |
morgan | otherwise we will keep seeing this | 01:50 |
bknudson | MappingRuleEngineTests was a case where we have actual unit tests rather than functional tests so we actually did it right... | 01:50 |
morgan | yay | 01:50 |
bknudson | but then screwed it up to pick up a bunch of stuff we didn't need | 01:51 |
morgan | boo | 01:51 |
morgan | part of it is also that our tests never really learned how not to do controller->manager->backend | 01:51 |
morgan | because of how much logic we have at each layer | 01:51 |
bknudson | that's the thing about MappingRuleEngineTests it didn't do that. | 01:52 |
bknudson | should just be calling the mapping rule engine rather than trying to build mappings and identity providers for every test! | 01:52 |
openstackgerrit | Brant Knudson proposed openstack/keystone: Revert "Use entrypoints for paste middleware and apps" https://review.openstack.org/218038 | 01:53 |
bknudson | ^ I'm not saying this should be reverted since it looks like a pretty neat change but it does slow the tests down. | 01:57 |
bknudson | maybe there's a way to speed it back up without reverting or doing too much work | 01:58 |
*** ankita_wagh has joined #openstack-keystone | 02:00 | |
bknudson | would be great if we could get https://review.openstack.org/207267 in to get keystoneauth_integration merged | 02:02 |
bknudson | and then I'll do the merge again since a bunch of stuff has merged in master. | 02:03 |
*** ankita_wagh has quit IRC | 02:03 | |
*** ankita_wagh has joined #openstack-keystone | 02:04 | |
*** htruta has quit IRC | 02:05 | |
*** boltR has quit IRC | 02:05 | |
*** dims has quit IRC | 02:06 | |
*** htruta has joined #openstack-keystone | 02:09 | |
*** boris-42 has quit IRC | 02:10 | |
*** boltR has joined #openstack-keystone | 02:13 | |
*** csoukup has joined #openstack-keystone | 02:21 | |
*** raginbajin has quit IRC | 02:23 | |
*** jasonsb has joined #openstack-keystone | 02:23 | |
*** raginbajin has joined #openstack-keystone | 02:28 | |
*** spandhe has joined #openstack-keystone | 02:32 | |
*** dims has joined #openstack-keystone | 02:33 | |
*** rodrigods has quit IRC | 02:34 | |
*** tellesnobrega has quit IRC | 02:35 | |
*** tellesnobrega has joined #openstack-keystone | 02:38 | |
*** rodrigods has joined #openstack-keystone | 02:39 | |
*** dave-mccowan has quit IRC | 02:43 | |
*** lhcheng has quit IRC | 02:46 | |
openstackgerrit | javeme proposed openstack/python-keystoneclient: pass correct max_positional_arg 4 utils.positional https://review.openstack.org/207857 | 02:51 |
*** gyee has quit IRC | 02:51 | |
*** hakimo has joined #openstack-keystone | 02:52 | |
*** shoutm has quit IRC | 02:54 | |
*** hakimo_ has quit IRC | 02:54 | |
*** spandhe has quit IRC | 03:01 | |
*** raildo-afk has quit IRC | 03:05 | |
*** browne has joined #openstack-keystone | 03:06 | |
*** raildo-afk has joined #openstack-keystone | 03:08 | |
*** richm has quit IRC | 03:16 | |
*** dims has quit IRC | 03:23 | |
*** jacorob has quit IRC | 03:27 | |
*** rm_work has quit IRC | 03:27 | |
*** dtroyer has quit IRC | 03:27 | |
*** sigmavirus24_awa has quit IRC | 03:27 | |
*** hockeynut has quit IRC | 03:27 | |
*** sudorandom has quit IRC | 03:28 | |
*** comstud has quit IRC | 03:28 | |
*** mgagne has quit IRC | 03:28 | |
*** darrenc_ has joined #openstack-keystone | 03:28 | |
*** d34dh0r53 has quit IRC | 03:28 | |
*** lbragstad has quit IRC | 03:28 | |
*** blewis has quit IRC | 03:28 | |
*** darrenc has quit IRC | 03:28 | |
*** gus has quit IRC | 03:28 | |
*** Nakato has quit IRC | 03:28 | |
*** dolphm has quit IRC | 03:28 | |
*** eglute has quit IRC | 03:28 | |
*** Nakato has joined #openstack-keystone | 03:31 | |
*** eglute has joined #openstack-keystone | 03:31 | |
*** gus has joined #openstack-keystone | 03:31 | |
*** rm_work has joined #openstack-keystone | 03:31 | |
*** d34dh0r53 has joined #openstack-keystone | 03:32 | |
*** dolphm has joined #openstack-keystone | 03:32 | |
*** sudorandom has joined #openstack-keystone | 03:32 | |
*** Guest4252 has quit IRC | 03:33 | |
*** sigmavirus24_awa has joined #openstack-keystone | 03:33 | |
*** mgagne has joined #openstack-keystone | 03:34 | |
*** hockeynut has joined #openstack-keystone | 03:36 | |
*** blewis has joined #openstack-keystone | 03:37 | |
*** dtroyer has joined #openstack-keystone | 03:37 | |
*** comstud has joined #openstack-keystone | 03:37 | |
*** lbragstad has joined #openstack-keystone | 03:37 | |
*** jacorob has joined #openstack-keystone | 03:37 | |
*** lhcheng has joined #openstack-keystone | 03:38 | |
*** ChanServ sets mode: +v lhcheng | 03:38 | |
*** lhcheng_ has joined #openstack-keystone | 03:40 | |
*** lhcheng has quit IRC | 03:43 | |
*** roxanaghe has quit IRC | 03:52 | |
*** fangzhou has quit IRC | 03:58 | |
*** doug-fish has joined #openstack-keystone | 03:58 | |
*** zzzeek has quit IRC | 03:59 | |
*** doug-fish has quit IRC | 04:03 | |
*** links has joined #openstack-keystone | 04:09 | |
*** roxanaghe has joined #openstack-keystone | 04:14 | |
*** darrenc_ is now known as darrenc | 04:22 | |
*** boltR has quit IRC | 04:51 | |
*** lhcheng has joined #openstack-keystone | 05:00 | |
*** ChanServ sets mode: +v lhcheng | 05:00 | |
*** lhcheng_ has quit IRC | 05:01 | |
*** ankita_w_ has joined #openstack-keystone | 05:01 | |
*** ChanServ sets mode: -o morgan | 05:01 | |
*** ankita_wagh has quit IRC | 05:04 | |
*** lhcheng has quit IRC | 05:06 | |
jamielennox | does anyone remember a problem with our tests and sqlite | 05:14 |
jamielennox | it's creating a -journal file rather than commiting and so the migration tests fail | 05:14 |
jamielennox | the tests i'm running are old and i'm assuming something has changed in a version of sqlite or sqlalchemy or something since then | 05:14 |
davechen | jamielennox: I think there are effort to enforce the FK constriant for sqlite, but not aware of the journal file. | 05:19 |
davechen | jamielennox: what | 05:19 |
jamielennox | it seems to be a change in the commiting behaviour or something | 05:19 |
davechen | jamielennox: what's the journal file you metioned? | 05:19 |
jamielennox | the teardowns are failing | 05:19 |
jamielennox | there is a file in keystone/tests/tmp/{pid}/keystone-migrate-tests.db-journal | 05:20 |
jamielennox | or close to | 05:20 |
jamielennox | if i do a commit() to end the transaction it gets commited to the db and the file goes away | 05:20 |
jamielennox | but for whatever reason in old keysonte (icehouse) it doesn't work | 05:20 |
jamielennox | it's not commiting | 05:21 |
morgan | Sqlite? | 05:22 |
davechen | no knowledge about what it was did in the icehouse. :) | 05:22 |
morgan | Not adhering to fk consttaints was the latest one in master | 05:22 |
openstackgerrit | Merged openstack/keystoneauth: Give easy entry points for session loading https://review.openstack.org/217972 | 05:23 |
*** doug-fish has joined #openstack-keystone | 05:27 | |
*** doug-fish has quit IRC | 05:32 | |
*** urulama has quit IRC | 05:33 | |
*** urulama has joined #openstack-keystone | 05:33 | |
openstackgerrit | Craige McWhirter proposed openstack/python-keystoneclient: Add drivers to the documentation https://review.openstack.org/218099 | 05:39 |
openstackgerrit | Dave Chen proposed openstack/keystone: Move endpoint_filter migrations into keystone core https://review.openstack.org/186988 | 05:43 |
*** ankita_w_ has quit IRC | 05:44 | |
*** roxanaghe has quit IRC | 05:44 | |
openstackgerrit | Dave Chen proposed openstack/keystone: Move endpoint_filter migrations into keystone core https://review.openstack.org/186988 | 05:46 |
openstackgerrit | Dave Chen proposed openstack/keystone: Move endpoint filter into keystone core https://review.openstack.org/183377 | 05:46 |
*** Nirupama has joined #openstack-keystone | 05:47 | |
*** csoukup has quit IRC | 05:52 | |
jamielennox | morgan: yes, sqlite | 06:12 |
jamielennox | it doesn't seem to be a FK problem | 06:12 |
jamielennox | when you do a session.execute("SQL") it doesn't do a session.commit() | 06:12 |
jamielennox | the journal file is sqlite's way of recording a transaction | 06:12 |
jamielennox | however the way keystone's tests are structured it does things like a rename table in an execute statement and then tries to move entries into that table | 06:13 |
jamielennox | but it hasn't been commited so i see an error that the new table doesn't exist | 06:13 |
jamielennox | i'm just wondering if anyone has seen this before, or know what's changed that this wasn't an issue previously | 06:14 |
*** clayton has quit IRC | 06:33 | |
*** clayton has joined #openstack-keystone | 06:33 | |
*** ankita_wagh has joined #openstack-keystone | 06:41 | |
*** ankita_wagh has quit IRC | 06:47 | |
*** ankita_wagh has joined #openstack-keystone | 06:47 | |
*** vivekd has joined #openstack-keystone | 06:48 | |
*** Nirupama has quit IRC | 06:50 | |
*** pl33g0r has joined #openstack-keystone | 06:51 | |
pl33g0r | hi everyone | 06:51 |
*** hrou has quit IRC | 06:51 | |
pl33g0r | Hi I am trying to setup a controller node on CentOS7 with OpenStack Kilo. When I am trying to add a new identity I am getting the following error: ERROR: openstack An unexpected error prevented the server from fulfilling your request. (HTTP 500) (Request-ID: req-e7093256-fb31-4cf6-b0ae-ee6d750f9a91) | 06:53 |
pl33g0r | this is the command I am running: openstack service create --name keystone --description "OpenStack Identity" identity | 06:53 |
pl33g0r | any ideas what can be wrong? | 06:53 |
pl33g0r | I am new to OpenStack | 06:53 |
*** Nirupama has joined #openstack-keystone | 06:53 | |
*** lhcheng has joined #openstack-keystone | 06:55 | |
*** ChanServ sets mode: +v lhcheng | 06:55 | |
*** lhcheng has quit IRC | 06:59 | |
*** spandhe has joined #openstack-keystone | 07:11 | |
*** EinstCrazy has quit IRC | 07:13 | |
*** browne has quit IRC | 07:17 | |
*** pl33g0r has quit IRC | 07:25 | |
*** henrynash has joined #openstack-keystone | 07:25 | |
*** ChanServ sets mode: +v henrynash | 07:25 | |
*** pnavarro has joined #openstack-keystone | 07:45 | |
*** spandhe has quit IRC | 07:59 | |
*** fhubik has joined #openstack-keystone | 08:08 | |
*** jistr has joined #openstack-keystone | 08:12 | |
openstackgerrit | Marek Denis proposed openstack/keystone: Add methods for checking scoped tokens https://review.openstack.org/208885 | 08:15 |
*** henrynash has quit IRC | 08:29 | |
*** henrynash has joined #openstack-keystone | 08:30 | |
*** ChanServ sets mode: +v henrynash | 08:30 | |
*** katkapilatova has joined #openstack-keystone | 08:35 | |
*** jbonjean has joined #openstack-keystone | 08:43 | |
*** lhcheng has joined #openstack-keystone | 08:44 | |
*** ChanServ sets mode: +v lhcheng | 08:44 | |
openstackgerrit | Marek Denis proposed openstack/keystone: Fixes query.one() return usage in endpoint-policy https://review.openstack.org/208609 | 08:45 |
*** ankita_wagh has quit IRC | 08:45 | |
*** lhcheng has quit IRC | 08:48 | |
*** amit213 has quit IRC | 08:50 | |
*** amit213 has joined #openstack-keystone | 08:51 | |
*** e0ne has joined #openstack-keystone | 08:54 | |
*** urulama has quit IRC | 08:57 | |
*** urulama has joined #openstack-keystone | 08:58 | |
*** marzif has joined #openstack-keystone | 08:59 | |
*** e0ne has quit IRC | 09:03 | |
*** exploreshaifali has joined #openstack-keystone | 09:04 | |
*** marzif has quit IRC | 09:12 | |
*** marzif has joined #openstack-keystone | 09:12 | |
*** e0ne has joined #openstack-keystone | 09:25 | |
*** marzif has quit IRC | 09:41 | |
*** davechen has left #openstack-keystone | 09:43 | |
*** henrynash has quit IRC | 09:48 | |
*** dave-mccowan has joined #openstack-keystone | 09:58 | |
*** kiran-r has joined #openstack-keystone | 09:59 | |
openstackgerrit | Merged openstack/keystone: Rationalize unfiltered list role assignment test https://review.openstack.org/213820 | 10:20 |
openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone: Updating sample configuration file https://review.openstack.org/216998 | 10:21 |
*** jacorob has quit IRC | 10:27 | |
*** mgagne has quit IRC | 10:27 | |
*** rm_work has quit IRC | 10:27 | |
*** darrenc has quit IRC | 10:27 | |
*** hakimo has quit IRC | 10:27 | |
*** jasonsb has quit IRC | 10:27 | |
*** bknudson has quit IRC | 10:27 | |
*** aix has quit IRC | 10:27 | |
*** Kennan has quit IRC | 10:27 | |
*** jamielennox has quit IRC | 10:27 | |
*** mhu has quit IRC | 10:27 | |
*** david8hu has quit IRC | 10:27 | |
*** d0ugal has quit IRC | 10:27 | |
*** dguerri` has quit IRC | 10:27 | |
*** links has quit IRC | 10:27 | |
*** comstud has quit IRC | 10:27 | |
*** dtroyer has quit IRC | 10:27 | |
*** blewis has quit IRC | 10:27 | |
*** lbragstad has quit IRC | 10:27 | |
*** hockeynut has quit IRC | 10:27 | |
*** sudorandom has quit IRC | 10:27 | |
*** dolphm has quit IRC | 10:27 | |
*** d34dh0r53 has quit IRC | 10:27 | |
*** sigmavirus24_awa has quit IRC | 10:27 | |
*** gus has quit IRC | 10:27 | |
*** Nakato has quit IRC | 10:27 | |
*** eglute has quit IRC | 10:27 | |
*** markvoelker has quit IRC | 10:27 | |
*** btully has quit IRC | 10:27 | |
*** jdennis has quit IRC | 10:27 | |
*** breton_ has quit IRC | 10:27 | |
*** afazekas has quit IRC | 10:27 | |
*** krotscheck has quit IRC | 10:27 | |
*** anteaya has quit IRC | 10:27 | |
*** links has joined #openstack-keystone | 10:29 | |
*** lbragstad has joined #openstack-keystone | 10:29 | |
*** comstud has joined #openstack-keystone | 10:29 | |
*** dtroyer has joined #openstack-keystone | 10:29 | |
*** blewis has joined #openstack-keystone | 10:29 | |
*** hockeynut has joined #openstack-keystone | 10:29 | |
*** sigmavirus24_awa has joined #openstack-keystone | 10:29 | |
*** sudorandom has joined #openstack-keystone | 10:29 | |
*** dolphm has joined #openstack-keystone | 10:29 | |
*** d34dh0r53 has joined #openstack-keystone | 10:29 | |
*** gus has joined #openstack-keystone | 10:29 | |
*** eglute has joined #openstack-keystone | 10:29 | |
*** Nakato has joined #openstack-keystone | 10:29 | |
*** markvoelker has joined #openstack-keystone | 10:29 | |
*** btully has joined #openstack-keystone | 10:29 | |
*** jdennis has joined #openstack-keystone | 10:29 | |
*** breton_ has joined #openstack-keystone | 10:29 | |
*** afazekas has joined #openstack-keystone | 10:29 | |
*** krotscheck has joined #openstack-keystone | 10:29 | |
*** anteaya has joined #openstack-keystone | 10:29 | |
*** jacorob has joined #openstack-keystone | 10:30 | |
*** mgagne has joined #openstack-keystone | 10:30 | |
*** rm_work has joined #openstack-keystone | 10:30 | |
*** darrenc has joined #openstack-keystone | 10:30 | |
*** hakimo has joined #openstack-keystone | 10:30 | |
*** jasonsb has joined #openstack-keystone | 10:30 | |
*** bknudson has joined #openstack-keystone | 10:30 | |
*** aix has joined #openstack-keystone | 10:30 | |
*** Kennan has joined #openstack-keystone | 10:30 | |
*** jamielennox has joined #openstack-keystone | 10:30 | |
*** mhu has joined #openstack-keystone | 10:30 | |
*** david8hu has joined #openstack-keystone | 10:30 | |
*** d0ugal has joined #openstack-keystone | 10:30 | |
*** dguerri` has joined #openstack-keystone | 10:30 | |
*** cameron.freenode.net sets mode: +vv bknudson jamielennox | 10:30 | |
*** jacorob has quit IRC | 10:30 | |
*** mgagne has quit IRC | 10:30 | |
*** rm_work has quit IRC | 10:30 | |
*** darrenc has quit IRC | 10:30 | |
*** hakimo has quit IRC | 10:30 | |
*** jasonsb has quit IRC | 10:30 | |
*** bknudson has quit IRC | 10:30 | |
*** aix has quit IRC | 10:30 | |
*** Kennan has quit IRC | 10:30 | |
*** jamielennox has quit IRC | 10:30 | |
*** mhu has quit IRC | 10:30 | |
*** david8hu has quit IRC | 10:30 | |
*** d0ugal has quit IRC | 10:30 | |
*** dguerri` has quit IRC | 10:30 | |
*** jacorob has joined #openstack-keystone | 10:32 | |
*** mgagne has joined #openstack-keystone | 10:32 | |
*** rm_work has joined #openstack-keystone | 10:32 | |
*** darrenc has joined #openstack-keystone | 10:32 | |
*** hakimo has joined #openstack-keystone | 10:32 | |
*** jasonsb has joined #openstack-keystone | 10:32 | |
*** bknudson has joined #openstack-keystone | 10:32 | |
*** aix has joined #openstack-keystone | 10:32 | |
*** Kennan has joined #openstack-keystone | 10:32 | |
*** jamielennox has joined #openstack-keystone | 10:32 | |
*** mhu has joined #openstack-keystone | 10:32 | |
*** david8hu has joined #openstack-keystone | 10:32 | |
*** d0ugal has joined #openstack-keystone | 10:32 | |
*** dguerri` has joined #openstack-keystone | 10:32 | |
*** cameron.freenode.net sets mode: +vv bknudson jamielennox | 10:32 | |
*** shoutm has joined #openstack-keystone | 10:34 | |
*** jacorob has quit IRC | 10:34 | |
*** jacorob_ has joined #openstack-keystone | 10:34 | |
*** fhubik is now known as fhubik_brb | 10:45 | |
*** dimsum__ has joined #openstack-keystone | 10:53 | |
*** aix has quit IRC | 11:14 | |
*** fhubik_brb is now known as fhubik | 11:28 | |
*** marzif has joined #openstack-keystone | 11:32 | |
*** pnavarro is now known as pnavarro|lunch | 11:41 | |
*** fhubik is now known as fhubik_brb | 11:45 | |
*** fhubik_brb is now known as fhubik | 11:50 | |
*** kiran-r has quit IRC | 11:51 | |
*** gordc has joined #openstack-keystone | 11:51 | |
*** petertr7_away is now known as petertr7 | 12:04 | |
*** Nirupama has quit IRC | 12:07 | |
*** raildo-afk is now known as raildo | 12:16 | |
*** Kennan has quit IRC | 12:18 | |
*** thiagop has joined #openstack-keystone | 12:22 | |
*** vivekd has quit IRC | 12:23 | |
*** aix has joined #openstack-keystone | 12:24 | |
*** exploreshaifali has quit IRC | 12:32 | |
*** Kennan has joined #openstack-keystone | 12:33 | |
*** chlong has joined #openstack-keystone | 12:34 | |
*** exploreshaifali has joined #openstack-keystone | 12:37 | |
*** exploreshaifali has quit IRC | 12:40 | |
*** exploreshaifali has joined #openstack-keystone | 12:41 | |
*** exploreshaifali has quit IRC | 12:41 | |
*** samueldmq has quit IRC | 12:43 | |
*** Kennan has quit IRC | 12:46 | |
*** richm has joined #openstack-keystone | 12:51 | |
*** woodster_ has joined #openstack-keystone | 12:55 | |
*** Kennan has joined #openstack-keystone | 13:00 | |
*** marzif has quit IRC | 13:00 | |
*** bknudson has left #openstack-keystone | 13:02 | |
*** thiagop_ has joined #openstack-keystone | 13:04 | |
openstackgerrit | Merged openstack/keystone: Set max on max_password_length to passlib max https://review.openstack.org/217449 | 13:05 |
*** Ephur has joined #openstack-keystone | 13:07 | |
openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone: Updating sample configuration file https://review.openstack.org/216998 | 13:07 |
*** Ephur_ has joined #openstack-keystone | 13:08 | |
*** petertr7 is now known as petertr7_away | 13:08 | |
*** aix has quit IRC | 13:10 | |
*** Ephur has quit IRC | 13:12 | |
openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone: Updated from global requirements https://review.openstack.org/214509 | 13:13 |
*** pgbridge has joined #openstack-keystone | 13:14 | |
*** petertr7_away is now known as petertr7 | 13:14 | |
openstackgerrit | OpenStack Proposal Bot proposed openstack/python-keystoneclient-kerberos: Updated from global requirements https://review.openstack.org/192319 | 13:17 |
*** nicodemos has joined #openstack-keystone | 13:17 | |
*** pnavarro|lunch is now known as pnavarro | 13:20 | |
*** links has quit IRC | 13:29 | |
*** aix has joined #openstack-keystone | 13:29 | |
*** sigmavirus24_awa is now known as sigmavirus24 | 13:30 | |
*** browne has joined #openstack-keystone | 13:33 | |
*** bknudson has joined #openstack-keystone | 13:38 | |
*** ChanServ sets mode: +v bknudson | 13:38 | |
*** Kennan2 has joined #openstack-keystone | 13:44 | |
*** Kennan has quit IRC | 13:44 | |
*** edmondsw has joined #openstack-keystone | 13:48 | |
*** dimsum__ has quit IRC | 13:49 | |
openstackgerrit | Marek Denis proposed openstack/keystone: IdP deletion triggers token revocation https://review.openstack.org/210456 | 13:50 |
*** dimsum__ has joined #openstack-keystone | 13:50 | |
*** HT_sergio has joined #openstack-keystone | 13:53 | |
*** jaosorior has joined #openstack-keystone | 13:57 | |
*** Kennan2 has quit IRC | 14:00 | |
openstackgerrit | Olivier Pilotte proposed openstack/keystone-specs: Accepts Group IDs from the IdP without domain https://review.openstack.org/216308 | 14:03 |
*** fhubik has quit IRC | 14:03 | |
*** pnavarro has quit IRC | 14:07 | |
*** exploreshaifali has joined #openstack-keystone | 14:08 | |
*** tjcocozz has joined #openstack-keystone | 14:10 | |
*** Kennan has joined #openstack-keystone | 14:14 | |
*** aix has quit IRC | 14:25 | |
openstackgerrit | Marek Denis proposed openstack/python-keystoneclient: Allow saving and caching the plugin auth state https://review.openstack.org/149175 | 14:34 |
*** sigmavirus24 is now known as sigmavirus24_awa | 14:38 | |
*** sigmavirus24_awa is now known as sigmavirus24 | 14:38 | |
*** aix has joined #openstack-keystone | 14:38 | |
*** exploreshaifali has quit IRC | 14:39 | |
dolphm | morgan: with specs in full force, i'm struggling to think of a reason to keep using blueprints instead of wishlist bugs, where some wishlist bugs have specs (other than the existing tooling around specs+blueprints) | 14:42 |
dolphm | morgan: the only extra metadata they provide is perhaps progress, but it's not hard to estimate that from gerrit using review status + Related/Partial/Closes tags | 14:42 |
gordc | dolphm: it won't show up on all (arguably) nice and pretty here: http://status.openstack.org/release/ | 14:45 |
dolphm | gordc: so add wishlist bugs to that page :) | 14:47 |
gordc | ain't nobody got time for that. | 14:48 |
*** aix has quit IRC | 14:48 | |
*** HT_sergio has quit IRC | 14:48 | |
*** thiagop_ has quit IRC | 14:54 | |
*** thiagop_ has joined #openstack-keystone | 14:54 | |
dstanek | i'd love to say specs should be added to that, but specs are missing a workflow | 14:55 |
*** annasort has joined #openstack-keystone | 14:55 | |
dolphm | dstanek: add specs to that page? | 14:57 |
dstanek | dolphm: yeah, that's were we really document the features for a release | 14:58 |
dolphm | dstanek: for the most part. some things end up only in wishlist bugs though | 14:59 |
morgan | dolphm: yeah bps suck | 15:00 |
*** aix has joined #openstack-keystone | 15:00 | |
dstanek | dolphm: i'm not saying we shouldn't add wishlist bugs, but that specs should be added in some way | 15:00 |
dolphm | the *only* feature i can think of that bps support that wishlist bugs totally don't is dependencies between bugs | 15:00 |
morgan | Wishlist bugs should be sufficient for everthing | 15:00 |
dolphm | but... we could also express that in gerrit with Depends-On and review sequences | 15:00 |
morgan | The biggest issue with wishlist bugs is "approved" (triaged state?) is shared with "in progress" | 15:01 |
morgan | And anyone can change that | 15:01 |
morgan | dolphm: but bps could die if cores are willing to look at the bug to be sure the spec is approved | 15:02 |
*** zzzeek has joined #openstack-keystone | 15:03 | |
*** amakarov is now known as amakarov_away | 15:03 | |
dolphm | morgan: again, i think that's where gerrit comes into play. the "approved" field is completely meaningless bureaucracy in blueprints, whereas in gerrit cores have actual authority over proposals with actual content | 15:03 |
*** pnavarro has joined #openstack-keystone | 15:03 | |
dolphm | morgan: the "please approve this blueprint so i can begin working on it" mindset is completely backwards | 15:04 |
morgan | To be honest. Specs could die too with wishlist bugs | 15:04 |
*** petertr7 is now known as petertr7_away | 15:04 | |
dolphm | morgan: if you can prototype your proposal then it's not a meaningful proposal | 15:04 |
morgan | Since the conversation is static/cant be lost | 15:05 |
dolphm | morgan: i disagree with that, mostly because of the voting and design process that can happen in specs (which can't happen in bugs) | 15:05 |
dstanek | i really don't like the gerrit workflow that is imposed on specs. it shouldn't be that hard and rigid | 15:05 |
marekd | dolphm: ++ | 15:05 |
dolphm | dstanek: i think we need to work on trimming it down further | 15:06 |
morgan | Gerrit workflow is awful for specs. It is the wrong tool for the job | 15:06 |
*** dave-mccowan has quit IRC | 15:06 | |
bknudson | how about etherpad for specs? | 15:06 |
morgan | It is just way better than bps | 15:06 |
dolphm | morgan: is gerrit the wrong tool, or is the current spec template the wrong tool? | 15:06 |
morgan | dolphm: git and gerrit is the wrong tool | 15:06 |
morgan | A bug tracker really is the right tool | 15:07 |
*** tonytan4ever has joined #openstack-keystone | 15:07 | |
dolphm | morgan: you can't do design work in a bug tracker though | 15:07 |
morgan | Launchpad sucks so much gerrit is a million times better for this | 15:07 |
morgan | dolphm: a proper bug tracker buys us all the things a spec is meant to do | 15:07 |
dstanek | dolphm: i think it's wrong. it's harder than it needs to be. consider something simple like moving a spec from the icebox to a release | 15:07 |
dolphm | morgan: what's not proper about launchpad bugs? | 15:07 |
dstanek | (or whatever we call icebox in specs_ | 15:08 |
morgan | dolphm: searching is a pain in the ass, the ui is broken half the time, timeouts, etc. and the lack of clear driver limited fields | 15:08 |
dolphm | dstanek: i'm not sure that filing specs into releases in git is a beneficial idea to begin with | 15:09 |
morgan | Seriously, "approved" / assigning to a milestone should be a driver locked thing | 15:09 |
morgan | But that is a small gap | 15:09 |
dolphm | morgan: i use google for searching; launchpad being literally broken is a different issue :) | 15:10 |
morgan | Conversation, etc can all happen in the comments of a bug. | 15:10 |
dstanek | dolphm: that's how we are trying to mimic a real workflow - in git i agree that is't not good, but in a real tool it would be | 15:10 |
morgan | So specs are good. Git / gerrit is the wrong tool. But lp (also lp being effectively EOL) is not typically sufficient. We could make due with wishlist bugs | 15:11 |
morgan | The api spec would still live in git | 15:11 |
morgan | Just look at epics in jira | 15:12 |
dolphm | morgan: ooh, not familiar with that | 15:12 |
dolphm | epics | 15:12 |
morgan | Epics really are what we are modeling in specs :) | 15:12 |
dolphm | https://confluence.atlassian.com/display/AGILE/Creating+an+Epic | 15:12 |
morgan | Yeah | 15:12 |
dolphm | very much makes sense | 15:13 |
*** geoffarnold has joined #openstack-keystone | 15:13 | |
morgan | :) | 15:13 |
dolphm | so why don't we just deploy jira.openstack.org | 15:13 |
morgan | If lp had that concept (bps just are awful) we'd be set | 15:13 |
dolphm | cross-project issues not supported? | 15:13 |
morgan | dolphm: jira isnt F/LOSS | 15:13 |
dolphm | oh. | 15:13 |
*** boris-42 has joined #openstack-keystone | 15:13 | |
morgan | They even offer free license to oss projects. But managing jira is also really bad | 15:14 |
bknudson | I heard that openstack was considering phabricator | 15:14 |
dolphm | bknudson: i think i remember you mentioning that before - know if there's been any progress? | 15:15 |
bknudson | dolphm: no, and I don't know where I heard it from. Maybe there will be discussion at the summit. | 15:15 |
dstanek | i've been wanting to try out https://github.com/wekan/wekan as a F/LOSS replacement for my trello uses | 15:15 |
bknudson | probably just a rumor someone was trying to start. | 15:15 |
dolphm | bknudson: stop starting rumors, then | 15:16 |
morgan | Phabricator is what inheard from some people in the know (aka bknudson :P) | 15:16 |
morgan | I have heard that from other people too | 15:16 |
*** diazjf has joined #openstack-keystone | 15:16 | |
bknudson | this rumor is spreading like a fire. | 15:16 |
dolphm | dstanek: open source trello clone? | 15:17 |
bknudson | pretty soon it will have to come true | 15:17 |
dstanek | dolphm: thats the claim at least | 15:17 |
dolphm | "Use sophisticated drag and drop to make sure your project is properly micro managed." -phabricator | 15:17 |
bknudson | dragging and dropping is sophisticated. | 15:18 |
*** gabriel-bezerra is now known as gabrielb | 15:19 | |
dolphm | "Written in PHP so literally anyone can contribute, even if they have no idea how to program." -phabricator | 15:19 |
dstanek | "micro managed" sounds like an openstack thing | 15:19 |
*** edmondsw has quit IRC | 15:19 | |
dstanek | "Written in PHP so literally anyone can hack into it!" | 15:19 |
*** dave-mccowan has joined #openstack-keystone | 15:19 | |
dolphm | dstanek: ++ | 15:20 |
dolphm | "Are we missing a feature? Issue MySQL queries directly from your browser's address bar!" | 15:20 |
*** gabrielb is now known as gabriel-bezerra | 15:20 | |
*** edmondsw has joined #openstack-keystone | 15:20 | |
dolphm | i've always wanted to take a simple web app concept and implement it supporting as many security vulnerabilities as possible, as a sort of demo | 15:21 |
*** gabriel-bezerra is now known as gbezerra | 15:22 | |
dolphm | it must also be very pretty so that people will use it regardless of the actual intended purpose | 15:22 |
morgan | dolphm: ahaha | 15:22 |
*** gbezerra is now known as gabezerra | 15:22 | |
morgan | dolphm: sadly storyboard died :( | 15:22 |
*** gabezerra is now known as gbezerra_ | 15:23 | |
dolphm | morgan: i would be okay with that if there was an alternative plan | 15:23 |
*** gbezerra_ is now known as gabrielb | 15:23 | |
*** csoukup has joined #openstack-keystone | 15:23 | |
dolphm | morgan: but right now i miss storyboard much | 15:23 |
morgan | Yes. | 15:23 |
morgan | Yes. But no one contributed to it. Well except krotscheck who did a great job. But one person cant make it go | 15:23 |
*** gabrielb is now known as gabriel-bezerra | 15:23 | |
*** lhcheng has joined #openstack-keystone | 15:26 | |
*** ChanServ sets mode: +v lhcheng | 15:26 | |
*** lhcheng has quit IRC | 15:26 | |
*** lhcheng has joined #openstack-keystone | 15:26 | |
*** ChanServ sets mode: +v lhcheng | 15:26 | |
dstanek | morgan: i've never actually looked at it. maybe it's worthy of some weekend hacking... or is it dead, dead? looks like there is still a small stream of commits | 15:27 |
openstackgerrit | Lance Bragstad proposed openstack/keystone: Add documentation for configuring IdP WebSSO https://review.openstack.org/218353 | 15:28 |
morgan | I would expect it to need serious concerted effort from a wide range of folks to resuscitate it | 15:28 |
morgan | Because if there isnt continued interest in it, it wont get more adoption | 15:29 |
dolphm | dstanek: i'd love to work on it too | 15:29 |
dstanek | morgan: what is the problem with it? not working, not enough features or? | 15:29 |
morgan | The small team hacking on it uses it internally i think. But no one outside of infra used it | 15:30 |
dolphm | morgan: WE WERE TOLD NOT TO USE IT! | 15:30 |
dolphm | repeatedly | 15:30 |
morgan | It was missing basic features (not sure what isnmissing) and needed more work to scale up to openstack level | 15:30 |
morgan | There is a reason we were told not to use it. It wasnt really ready to take on more projects | 15:30 |
dstanek | if we were using it i would have fixed the things that frustrated me. since i never used it there was no motivation | 15:31 |
morgan | Talk to ttx, krotscheck, mordred, fungi, dhellmann, and clarkb | 15:31 |
mordred | what did I do? | 15:31 |
morgan | Talking about storyboard and its death | 15:32 |
mordred | ah | 15:32 |
mordred | yeah. it's sad | 15:32 |
morgan | And the new alternatives. Or what it would tame to resuscitate i t | 15:32 |
mordred | current plan is phabricator | 15:32 |
morgan | bknudson: ^ see you didnt make it up | 15:32 |
bknudson | morgan: maybe mordred heard the rumor from me? | 15:33 |
dstanek | mordred: is that locked in then? | 15:33 |
mordred | dstanek: it's not _locked_ in ... but it's currently the thing that our next step is "stand one up, start using it and see what breaks and what we need to fix/add" | 15:33 |
*** hrou has joined #openstack-keystone | 15:33 | |
mordred | http://specs.openstack.org/openstack-infra/infra-specs/specs/maniphest.html | 15:34 |
bknudson | https://showoff.phab.io/ | 15:34 |
dstanek | mordred: ok, then i won't bother tinkering with storyboard for now | 15:34 |
bknudson | login with demo / demonstrate | 15:34 |
lbragstad | the ph substitution for f is pretty phrequent... | 15:36 |
lbragstad | found a bug... 'Feed' should be 'Pheed' | 15:36 |
lbragstad | ;) | 15:36 |
*** zzzeek has quit IRC | 15:37 | |
krotscheck | Eh, wha? | 15:37 |
*** zzzeek has joined #openstack-keystone | 15:38 | |
krotscheck | dolphm: You were told not to use it by jeblair. Not by me. | 15:38 |
*** zzzeek has quit IRC | 15:38 | |
krotscheck | Unfortunately, he controls the gate of what is used. | 15:38 |
krotscheck | I don't. | 15:38 |
krotscheck | And, quite frankly, I lay the blame for storyboard's death at his feet. | 15:38 |
*** zzzeek has joined #openstack-keystone | 15:39 | |
morgan | krotscheck: but you can fill in details on storyboard its death :). I only included you cause i said you did a great job on it. | 15:39 |
morgan | (which imo you did) | 15:39 |
*** chlong has quit IRC | 15:39 | |
krotscheck | Well, there's another team working on it independently now. | 15:40 |
morgan | Right | 15:40 |
dolphm | krotscheck: i'm not looking for blame, i share dstanek's sentiment above. if we could work with it, we would be motivated to contribute. | 15:41 |
dolphm | like, mirror everything from launchpad into a staged environment of <new-thing> to show us what's it like. nuke and rebuild staged environment every week. i'll start going through the motions with it, and one day we can just abandon launchpad | 15:42 |
morgan | I did try to move keystone to it as an early adopter too fwiw | 15:43 |
krotscheck | Yep. Ditto for ironic, and trove. | 15:43 |
krotscheck | And designate I think. | 15:43 |
krotscheck | It told everyone that I want them on there. | 15:43 |
krotscheck | Nobody wanted to. | 15:43 |
krotscheck | Sorry | 15:43 |
krotscheck | I meant, everyone wanted to. | 15:43 |
dolphm | krotscheck: no need to apologize | 15:43 |
morgan | :) | 15:43 |
krotscheck | And yet.... | 15:44 |
krotscheck | It's still a brilliant concept. Federated ticket tracking. No more duplication between upstream and downstream. | 15:44 |
morgan | Take that as a massive compliment regardless of the result. | 15:44 |
morgan | krotscheck: :). | 15:44 |
krotscheck | Thanks :) | 15:44 |
*** __dstanek__ has joined #openstack-keystone | 15:45 | |
krotscheck | But, well, at this point my paycheck is no longer attached to storyboard, so I can't really justify working on it. | 15:45 |
morgan | Sure. I mean, it *could* still be a hobby. But i'd take the cnc stuff over storyboard ;) | 15:45 |
morgan | As a hobby that is. | 15:46 |
krotscheck | morgan: Also, brewing. And big data processing. And soon being a dad. | 15:46 |
* krotscheck might be over-hobbied. | 15:46 | |
morgan | Yah. All good hobbies. Though that last one isnt really a hobby yanno | 15:47 |
morgan | :P | 15:47 |
dolphm | morgan: it's the hobby that trumps all other hobbies | 15:47 |
morgan | dolphm: hehe. | 15:47 |
dolphm | krotscheck: my condolences to your beer making endeavors | 15:47 |
krotscheck | morgan: Wanna bet? I hear you can win good money at the German Infant Tossfest | 15:48 |
*** vivekd has joined #openstack-keystone | 15:48 | |
* krotscheck is going to be an AWESOME dad ;D | 15:48 | |
bknudson | I thought gitfest was for git fans. | 15:48 |
mfisch | wow what a bad time to join the channel | 15:48 |
morgan | bknudson: heheh | 15:49 |
*** katkapilatova has left #openstack-keystone | 15:51 | |
krotscheck | bknudson: What do you think git stand for? | 15:52 |
*** shoutm has quit IRC | 15:54 | |
*** shoutm has joined #openstack-keystone | 15:55 | |
*** shoutm has quit IRC | 15:55 | |
*** jasonsb has quit IRC | 16:04 | |
*** jasonsb has joined #openstack-keystone | 16:05 | |
*** david8hu has quit IRC | 16:09 | |
*** jasonsb has quit IRC | 16:10 | |
lbragstad | lhcheng: do you have an idea of how the DOA is going to work for the idp specific websso patch? i'm happy to help with that in any way i can | 16:10 |
bknudson | there's a thread on the -dev mailing list about replacing wsme - http://lists.openstack.org/pipermail/openstack-dev/2015-August/073156.html | 16:10 |
bknudson | responses indicate people are happy with flask | 16:11 |
*** kiran-r has joined #openstack-keystone | 16:13 | |
lhcheng | lbragstad: I am thinking of just extending the current WebSSO configuration in horizon right now, to allow user to specify Idp/Protocol as values in here: https://github.com/openstack/horizon/blob/master/openstack_dashboard/local/local_settings.py.example#L154-L157 | 16:13 |
lbragstad | lhcheng: ok | 16:14 |
*** urulama has quit IRC | 16:15 | |
lhcheng | lbragstad: so the value can either be a string "<protocol>" (for backward compatibility), or a a tuple (IDP, protocol). | 16:15 |
*** urulama has joined #openstack-keystone | 16:15 | |
*** tjcocozz has quit IRC | 16:16 | |
lbragstad | lhcheng: digging through the horizon tests, do the websso tests live anywhere in the integration directory? | 16:18 |
*** _cjones_ has joined #openstack-keystone | 16:19 | |
lhcheng | lbragstad: the tests lives in DOA, since all the authentication logic is in there. https://github.com/openstack/django_openstack_auth/blob/master/openstack_auth/tests/tests.py#L823 | 16:19 |
*** chlong has joined #openstack-keystone | 16:22 | |
*** petertr7_away is now known as petertr7 | 16:22 | |
*** kiran-r has quit IRC | 16:25 | |
*** e0ne has quit IRC | 16:28 | |
*** doug-fish has joined #openstack-keystone | 16:29 | |
*** doug-fish has quit IRC | 16:30 | |
*** david8hu has joined #openstack-keystone | 16:32 | |
*** browne has quit IRC | 16:32 | |
*** claudiub has joined #openstack-keystone | 16:34 | |
claudiub | hi. could you please review the init_poolmanager bugfix? https://review.openstack.org/#/c/211686/ | 16:34 |
*** tonytan4ever has quit IRC | 16:34 | |
*** exploreshaifali has joined #openstack-keystone | 16:34 | |
*** jistr has quit IRC | 16:35 | |
*** tqtran_ has joined #openstack-keystone | 16:37 | |
*** tjcocozz has joined #openstack-keystone | 16:44 | |
*** roxanaghe has joined #openstack-keystone | 16:44 | |
*** chlong has quit IRC | 16:45 | |
*** shaleh has joined #openstack-keystone | 16:45 | |
*** thiagop_ has quit IRC | 16:48 | |
*** petertr7 is now known as petertr7_away | 16:50 | |
*** petertr7_away is now known as petertr7 | 16:52 | |
*** urulama has quit IRC | 16:52 | |
__dstanek__ | claudiub: we get notifications as things get updated so no need to ping in chat. there's lots of things going on this late in the cycle, which is why it might not be getting that much attention | 16:58 |
__dstanek__ | bknudson: speaking of Flask... I'll have a bunch more commits for it that I'll need reviewed next week. | 17:07 |
*** erhudy has joined #openstack-keystone | 17:10 | |
*** samueldmq has joined #openstack-keystone | 17:15 | |
*** ankita_wagh has joined #openstack-keystone | 17:17 | |
dolphm | __dstanek__: to do what with flask? | 17:17 |
*** e0ne has joined #openstack-keystone | 17:18 | |
__dstanek__ | dolphm: replace our web layer with it | 17:18 |
dolphm | __dstanek__: i'd be really curious to see that | 17:18 |
*** shaleh has quit IRC | 17:20 | |
*** tjcocozz has quit IRC | 17:20 | |
*** aix has quit IRC | 17:20 | |
*** pl33g0r has joined #openstack-keystone | 17:21 | |
pl33g0r | Hello everyone, I am following openstack setup doc for kilo on centos7 and when im trying to create an identity (openstack service create --name keystone --description "OpenStack Identity" identity) I am getting the following error: openstack An unexpected error prevented the server from fulfilling your request. (HTTP 500) (Request-ID: req-7e2b16ee-7b9f-4432-9fe2-c5db33230c4f) Any ideas what I should check for inorder to | 17:23 |
*** pl33g0r has quit IRC | 17:29 | |
*** eandersson has quit IRC | 17:29 | |
*** ankita_w_ has joined #openstack-keystone | 17:31 | |
*** e0ne has quit IRC | 17:33 | |
*** ankita_wagh has quit IRC | 17:34 | |
*** ankita_wagh has joined #openstack-keystone | 17:36 | |
*** ankita_w_ has quit IRC | 17:36 | |
*** spandhe has joined #openstack-keystone | 17:37 | |
*** browne has joined #openstack-keystone | 17:37 | |
bknudson | merging latest master to the keystoneauth_integration feature branch: https://review.openstack.org/#/c/218269/ | 17:40 |
bknudson | there were a couple of conflicts | 17:40 |
*** ngupta has joined #openstack-keystone | 17:45 | |
*** henrynash has joined #openstack-keystone | 17:46 | |
*** ChanServ sets mode: +v henrynash | 17:46 | |
*** jasonsb has joined #openstack-keystone | 17:52 | |
*** thiagop has quit IRC | 17:52 | |
*** e0ne has joined #openstack-keystone | 17:55 | |
*** bknudson has quit IRC | 18:00 | |
*** ankita_w_ has joined #openstack-keystone | 18:06 | |
*** ankita_wagh has quit IRC | 18:06 | |
sigmavirus24 | __dstanek__: have you seen klein? | 18:07 |
*** tsymanczyk has joined #openstack-keystone | 18:08 | |
*** nicodemos has quit IRC | 18:11 | |
*** marzif has joined #openstack-keystone | 18:12 | |
*** aix has joined #openstack-keystone | 18:14 | |
*** mpmsimo has joined #openstack-keystone | 18:16 | |
*** mpmsimo has quit IRC | 18:21 | |
*** exploreshaifali has quit IRC | 18:21 | |
__dstanek__ | sigmavirus24: no what is that? | 18:25 |
*** jaosorior has quit IRC | 18:25 | |
sigmavirus24 | It's flask implemented on twisted | 18:25 |
sigmavirus24 | github.com/twisted/klein | 18:25 |
sigmavirus24 | so the same API but not an April Fool's day joke | 18:25 |
*** e0ne has quit IRC | 18:42 | |
*** tonytan4ever has joined #openstack-keystone | 18:42 | |
tonytan4ever | hi keystone folks, does anybody here can help me with a keystone middleware question ? | 18:43 |
tonytan4ever | What should I put in the HTTP header if I am trying access a keystone-middleware-enabled openstack service, (such as mistral) ? | 18:45 |
tonytan4ever | X-Auth-Header ? | 18:45 |
*** exploreshaifali has joined #openstack-keystone | 18:47 | |
dolphm | tonytan4ever: X-Auth-Token | 18:50 |
dolphm | tonytan4ever: with your UUID, PKI, PKIz, or Fernet token value | 18:50 |
*** ankita_wagh has joined #openstack-keystone | 18:51 | |
tonytan4ever | UUID is the user_id of the user ? | 18:51 |
tonytan4ever | dolphm: ^^ ? | 18:51 |
dolphm | tonytan4ever: no, you first need to authenticate with keystone to retrieve a token, then go back to the service you actually want to use and pass it your token using the X-Auth-Token header | 18:52 |
tonytan4ever | Okay I see. But Here is a response I get back from keystone v3, where I can't find token any where | 18:52 |
tonytan4ever | http://cdn.pasteraw.com/43wqr9h9drqqq59mz7iig8rriau3dj2 | 18:53 |
tonytan4ever | dolphm: ^^ | 18:53 |
dolphm | tonytan4ever: keystone passes back the actual token using the X-Subject-Token header in your response (it's not in the body!) | 18:53 |
tonytan4ever | Oh | 18:53 |
tonytan4ever | OK | 18:53 |
*** ankita___ has joined #openstack-keystone | 18:54 | |
dolphm | tonytan4ever: you'll also need to add a scope (a project, in your case) to your authentication request, so that you get back a scoped token with a service catalog and roles https://github.com/openstack/keystone-specs/blob/master/api/v3/identity-api-v3.rst#scope-scope | 18:54 |
*** ankita_w_ has quit IRC | 18:54 | |
*** ngupta_ has joined #openstack-keystone | 18:55 | |
dolphm | tonytan4ever: and on your token not being in the authentication response, but actually being in a header: https://github.com/openstack/keystone-specs/blob/master/api/v3/identity-api-v3.rst#authentication-responses | 18:55 |
* dolphm goes to get food | 18:55 | |
vivekd | dstanek: __dstanek__ two days back you had said you were in the middle of documenting your thoughts in a review on the subclass approach to stable driver interfaces. have you pushed up that review? | 18:56 |
samueldmq | dolphm, bon apetit :) | 18:56 |
dstanek | vivekd: no, too many things and not enough time. let me context switch over to that to finish up | 18:57 |
*** ankita_wagh has quit IRC | 18:57 | |
*** ngupta has quit IRC | 18:58 | |
*** claudiub has quit IRC | 18:59 | |
*** roxanaghe has quit IRC | 18:59 | |
*** vivekd_ has joined #openstack-keystone | 18:59 | |
*** vivekd has quit IRC | 19:01 | |
*** vivekd_ is now known as vivekd | 19:01 | |
vivekd | dstanek: __dstanek__ if ur busy, i can resume with that. actually i'm waiting on you past two days as my primary task is to see stable driver interfaces to completion | 19:03 |
dstanek | liberty is the first to use semantic versioning right? | 19:03 |
*** sigmavirus24 is now known as sigmavirus24_awa | 19:05 | |
*** diazjf has quit IRC | 19:05 | |
vivekd | dstanek: are u asking me regarding interface versioning? if yes, then yes. | 19:05 |
*** diazjf has joined #openstack-keystone | 19:06 | |
dstanek | hey vivekd, i'm back to working on driver def that we talked about - are you planning on actually validating anything more than method names? | 19:06 |
*** ankita_wagh has joined #openstack-keystone | 19:06 | |
vivekd | dstanek: no | 19:09 |
*** ankita___ has quit IRC | 19:10 | |
*** pgbridge has quit IRC | 19:14 | |
vivekd | morgan: inline with our discussion two days back(including gyee), i've submitted https://review.openstack.org/#/c/218237/ kindly review | 19:15 |
*** dave-mccowan has quit IRC | 19:16 | |
*** stevemar has joined #openstack-keystone | 19:17 | |
*** ChanServ sets mode: +v stevemar | 19:17 | |
dstanek | vivekd: db-drivers? | 19:19 |
vivekd | dstanek: its in the context of the discussion @ http://eavesdrop.openstack.org/irclogs/%23openstack-keystone/%23openstack-keystone.2015-08-26.log.html#t2015-08-26T19:26:40 | 19:21 |
*** jasonsb has quit IRC | 19:21 | |
*** jasonsb has joined #openstack-keystone | 19:22 | |
vivekd | dstanek: for the spec @ https://review.openstack.org/#/c/178999/ | 19:22 |
stevemar | anyone have a blog of using the external auth w/ x509 for keystone? | 19:23 |
dstanek | vivekd: i think the db part of the name is strange. are you thinking all third party drivers would go there? | 19:23 |
dstanek | vivekd: my biggest concern is that this will have to be maintained by the keystone team. | 19:24 |
vivekd | dstanek: gyee 's mongo driver and our driver | 19:24 |
dstanek | vivekd: but who will maintain them, be core on them and responsible for dealing with reported bugs? | 19:25 |
*** jasonsb has quit IRC | 19:26 | |
vivekd | dstanek: I'll maintain that but rest of the questions we'll have to ask morgan | 19:32 |
dstanek | vivekd: if you're the maintainer then the answer to all the questions is you :-) | 19:33 |
vivekd | :-) | 19:33 |
dstanek | i worry that the name may make people think they are Keystone supported drivers | 19:34 |
dstanek | it's more like 'keystone-unofficial-drivers' | 19:34 |
vivekd | dstanek: its already out-of-tree :-) | 19:36 |
vivekd | dstanek: i 'm ok with any name keystone community wants :-) | 19:36 |
*** mylu has joined #openstack-keystone | 19:36 | |
dstanek | vivekd: i just don't want people to get confused and expect us to address their bugs | 19:37 |
vivekd | dstanek: ok | 19:37 |
*** devlaps has joined #openstack-keystone | 19:37 | |
vivekd | dstanek: i'm worried about feature freeze and its a weekend coming up. | 19:41 |
vivekd | so, if your not able to find time for stable driver interfaces today, shall i go ahead and modify my patch inline with your and morgan's suggestion of subclasses? | 19:41 |
vivekd | dstanek: sorry to pester you...feature freeze | 19:41 |
dstanek | vivekd: i'll let you know in a few. there is almost no code i'm what i am doing. maybe 50 liness or so. i'm more worried about getting the doc passed review :-) | 19:42 |
vivekd | dstanek: i conveniently assume that u meant few minutes and not few hours :-) | 19:44 |
*** stevemar has quit IRC | 19:44 | |
*** diazjf has quit IRC | 19:45 | |
* vivekd looking at time...its 1.15am | 19:45 | |
dstanek | vivekd: it's going to take me another 30-an hour to finish and push a 1st draft. then once it's in Gerrit I'll go back and start fixing grammar, spelling, etc. | 19:46 |
*** dave-mccowan has joined #openstack-keystone | 19:47 | |
vivekd | dstanek: ok then i'll goto sleep and continue from your review early morning and thru the weekend. | 19:47 |
*** henrynash has quit IRC | 19:50 | |
*** vivekd_ has joined #openstack-keystone | 19:56 | |
*** sigmavirus24_awa is now known as sigmavirus24 | 19:59 | |
*** vivekd has quit IRC | 19:59 | |
*** vivekd_ is now known as vivekd | 19:59 | |
*** bknudson has joined #openstack-keystone | 20:01 | |
*** ChanServ sets mode: +v bknudson | 20:01 | |
*** tsymanczyk has quit IRC | 20:02 | |
*** mylu has quit IRC | 20:03 | |
*** mylu has joined #openstack-keystone | 20:04 | |
*** petertr7 is now known as petertr7_away | 20:06 | |
*** mylu has quit IRC | 20:07 | |
*** mylu has joined #openstack-keystone | 20:08 | |
*** pgbridge has joined #openstack-keystone | 20:10 | |
*** tsymancz1k has joined #openstack-keystone | 20:11 | |
*** mylu has quit IRC | 20:12 | |
*** lhcheng has quit IRC | 20:15 | |
*** ankita_wagh has quit IRC | 20:21 | |
*** stevemar has joined #openstack-keystone | 20:23 | |
*** ChanServ sets mode: +v stevemar | 20:23 | |
*** ankita_wagh has joined #openstack-keystone | 20:26 | |
*** jasonsb has joined #openstack-keystone | 20:27 | |
*** ankita_w_ has joined #openstack-keystone | 20:27 | |
*** exploreshaifali has quit IRC | 20:28 | |
*** ankita___ has joined #openstack-keystone | 20:28 | |
*** ankita_w_ has quit IRC | 20:28 | |
*** vivekd has quit IRC | 20:29 | |
*** ankita_wagh has quit IRC | 20:30 | |
*** ankita_wagh has joined #openstack-keystone | 20:33 | |
*** ankita___ has quit IRC | 20:33 | |
*** pgbridge has quit IRC | 20:39 | |
*** stevemar has quit IRC | 20:39 | |
*** gordc has quit IRC | 20:40 | |
*** mylu has joined #openstack-keystone | 20:41 | |
*** mylu has quit IRC | 20:45 | |
*** mylu has joined #openstack-keystone | 20:46 | |
*** diazjf has joined #openstack-keystone | 20:47 | |
*** mylu has quit IRC | 20:48 | |
*** lhcheng has joined #openstack-keystone | 20:48 | |
*** ChanServ sets mode: +v lhcheng | 20:48 | |
*** mylu has joined #openstack-keystone | 20:49 | |
*** tsymancz1k has quit IRC | 20:51 | |
dstanek | bknudson: that really slowed down the tests? | 20:55 |
bknudson | dstanek: significantly | 20:55 |
dstanek | bknudson: hmmm, i'll have to take a look and see why | 20:55 |
bknudson | tests that took 0.x sec now take 3.x seconds | 20:55 |
*** samuel-dmq has joined #openstack-keystone | 20:56 | |
dstanek | bknudson: only v3 tests though right? | 20:56 |
bknudson | test_v3 and test_v2 | 20:56 |
bknudson | these crappy tests that do rest | 20:56 |
*** tsymancz1k has joined #openstack-keystone | 20:56 | |
dstanek | bknudson: ok, i'll have a look see tonight. nothings ever easy :-( | 20:56 |
*** samueldmq has quit IRC | 20:57 | |
*** richm has quit IRC | 20:59 | |
*** raildo is now known as raildo-afk | 21:02 | |
*** richm has joined #openstack-keystone | 21:03 | |
*** _cjones_ has quit IRC | 21:04 | |
*** roxanaghe has joined #openstack-keystone | 21:09 | |
*** ankita_w_ has joined #openstack-keystone | 21:11 | |
*** ankita___ has joined #openstack-keystone | 21:12 | |
*** ankita_wagh has quit IRC | 21:12 | |
*** diazjf has left #openstack-keystone | 21:13 | |
openstackgerrit | Brant Knudson proposed openstack/keystone: Add user domain info to federated fernet tokens https://review.openstack.org/213742 | 21:14 |
openstackgerrit | Brant Knudson proposed openstack/keystone: Add user_domain_id, project_domain_id to auth context https://review.openstack.org/213792 | 21:14 |
openstackgerrit | Brant Knudson proposed openstack/keystone: Fix docstring for common.authorization https://review.openstack.org/213752 | 21:14 |
openstackgerrit | Brant Knudson proposed openstack/keystone: Add unit tests for token_to_auth_context https://review.openstack.org/213797 | 21:14 |
openstackgerrit | Brant Knudson proposed openstack/keystone: Build oslo.context RequestContext https://review.openstack.org/213595 | 21:14 |
*** samuel-dmq is now known as samueldmq | 21:15 | |
*** ankita_w_ has quit IRC | 21:15 | |
*** stevemar has joined #openstack-keystone | 21:21 | |
*** ChanServ sets mode: +v stevemar | 21:21 | |
*** jasonsb has quit IRC | 21:29 | |
*** gordc has joined #openstack-keystone | 21:29 | |
*** gordc has quit IRC | 21:29 | |
openstackgerrit | David Stanek proposed openstack/keystone: Initial support for versioned driver classes https://review.openstack.org/218481 | 21:33 |
openstackgerrit | David Stanek proposed openstack/keystone: Initial support for versioned driver classes https://review.openstack.org/218481 | 21:34 |
dstanek | morgan: that's what i was thinking for versioning drivers ^ | 21:34 |
dstanek | doc needs more love though | 21:35 |
dstanek | morgan: i was a little bitchy in the "How To Make a Driver" section, but that'll be fixed when I expand it out | 21:35 |
*** pnavarro has quit IRC | 21:38 | |
*** dimsum__ has quit IRC | 21:38 | |
morgan | dstanek: ack | 21:45 |
*** samueldmq has quit IRC | 21:45 | |
morgan | Will look in a few | 21:46 |
dstanek | no rush, going to carve up some more flask stuff to push into gerrit | 21:46 |
morgan | Yay flask | 21:47 |
dstanek | for the record, writing documentation is nowhere near as fun as writing code | 21:47 |
*** csoukup has quit IRC | 21:48 | |
*** ngupta_ has quit IRC | 21:54 | |
lbragstad | dstanek: amen | 21:54 |
*** dimsum__ has joined #openstack-keystone | 21:56 | |
*** sigmavirus24 is now known as sigmavirus24_awa | 21:59 | |
*** sigmavirus24_awa is now known as sigmavirus24 | 21:59 | |
*** dims_ has joined #openstack-keystone | 22:00 | |
*** dimsum__ has quit IRC | 22:02 | |
morgan | dstanek: docs are more fun than refactoring tests :( | 22:06 |
dstanek | morgan: what to trade? | 22:06 |
morgan | dstanek: not really, the test refactoring I may have done a git reset --hard in the working directory | 22:08 |
morgan | dstanek: sooooo... less happy about that | 22:08 |
*** samleon has quit IRC | 22:09 | |
dstanek | "rm -rf keystone/tests"; tests? what tests? | 22:09 |
*** mylu has quit IRC | 22:10 | |
*** mylu has joined #openstack-keystone | 22:10 | |
*** mylu has quit IRC | 22:12 | |
*** mylu has joined #openstack-keystone | 22:12 | |
*** hrou has quit IRC | 22:13 | |
*** edmondsw has quit IRC | 22:17 | |
morgan | dstanek: commented on your patch | 22:27 |
morgan | for the versioned driver class(es) | 22:27 |
*** zzzeek has quit IRC | 22:27 | |
dstanek | morgan: awesome, thx! i was intentionally being snarky. the self deprecating statements give our docs personality. that and i need to think through what i really want to say there. | 22:31 |
morgan | sure | 22:31 |
morgan | hence why these were mostly just "suggestions" | 22:31 |
morgan | :) | 22:31 |
*** ngupta has joined #openstack-keystone | 22:42 | |
*** ngupta has quit IRC | 22:43 | |
*** ngupta has joined #openstack-keystone | 22:44 | |
*** stevemar has quit IRC | 22:52 | |
*** stevemar has joined #openstack-keystone | 22:53 | |
*** ChanServ sets mode: +v stevemar | 22:53 | |
*** tonytan4ever has quit IRC | 22:55 | |
*** stevemar has quit IRC | 22:57 | |
*** ngupta has quit IRC | 22:57 | |
*** ngupta has joined #openstack-keystone | 22:58 | |
openstackgerrit | Henrique Truta proposed openstack/keystone: Honor domain operations in project table https://review.openstack.org/143763 | 22:59 |
*** jamielennox is now known as jamielennox|away | 23:00 | |
*** roxanagh_ has joined #openstack-keystone | 23:04 | |
openstackgerrit | Morgan Fainberg proposed openstack/keystone: Stops using deprecated assignment manager methods https://review.openstack.org/216347 | 23:11 |
openstackgerrit | Henrique Truta proposed openstack/keystone: Restricting domain_id update https://review.openstack.org/207218 | 23:12 |
*** ankita___ has quit IRC | 23:13 | |
*** tonytan4ever has joined #openstack-keystone | 23:19 | |
openstackgerrit | Brant Knudson proposed openstack/keystone: Add user domain info to federated fernet tokens https://review.openstack.org/213742 | 23:20 |
openstackgerrit | Brant Knudson proposed openstack/keystone: Add user_domain_id, project_domain_id to auth context https://review.openstack.org/213792 | 23:20 |
openstackgerrit | Brant Knudson proposed openstack/keystone: Fix docstring for common.authorization https://review.openstack.org/213752 | 23:20 |
openstackgerrit | Brant Knudson proposed openstack/keystone: Add unit tests for token_to_auth_context https://review.openstack.org/213797 | 23:20 |
openstackgerrit | Brant Knudson proposed openstack/keystone: More info in RequestContext https://review.openstack.org/213595 | 23:20 |
openstackgerrit | Brant Knudson proposed openstack/keystone: Build oslo.context RequestContext https://review.openstack.org/218511 | 23:20 |
*** david-lyle has quit IRC | 23:24 | |
*** lhcheng has quit IRC | 23:37 | |
openstackgerrit | Merged openstack/keystoneauth: Remove plugin.load_from_conf_options and argparse https://review.openstack.org/216512 | 23:41 |
*** stevemar has joined #openstack-keystone | 23:42 | |
*** ChanServ sets mode: +v stevemar | 23:42 | |
openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone: Updated from global requirements https://review.openstack.org/214509 | 23:43 |
*** hrou has joined #openstack-keystone | 23:44 | |
*** roxanaghe has quit IRC | 23:49 | |
openstackgerrit | Brant Knudson proposed openstack/keystone: Add user_domain_id, project_domain_id to auth context https://review.openstack.org/213792 | 23:51 |
openstackgerrit | Brant Knudson proposed openstack/keystone: Add unit tests for token_to_auth_context https://review.openstack.org/213797 | 23:51 |
openstackgerrit | Brant Knudson proposed openstack/keystone: More info in RequestContext https://review.openstack.org/213595 | 23:51 |
*** dimsum__ has joined #openstack-keystone | 23:52 | |
*** dims_ has quit IRC | 23:55 | |
*** ngupta has quit IRC | 23:55 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!