| *** flwang has quit IRC | 00:03 | |
| *** mylu has quit IRC | 00:04 | |
| *** flwang has joined #openstack-keystone | 00:04 | |
| *** roxanagh_ has quit IRC | 00:05 | |
| *** roxanagh_ has joined #openstack-keystone | 00:05 | |
| *** mylu has joined #openstack-keystone | 00:06 | |
| *** EinstCrazy has quit IRC | 00:06 | |
| *** gyee has quit IRC | 00:10 | |
| *** ankita_wagh has joined #openstack-keystone | 00:10 | |
| *** wwwjfy has joined #openstack-keystone | 00:11 | |
| *** diazjf has joined #openstack-keystone | 00:14 | |
| *** su_zhang has quit IRC | 00:15 | |
| *** su_zhang has joined #openstack-keystone | 00:17 | |
| *** shadower has quit IRC | 00:23 | |
| *** su_zhang has quit IRC | 00:23 | |
| *** shadower has joined #openstack-keystone | 00:23 | |
| *** stevemar has joined #openstack-keystone | 00:27 | |
| *** ChanServ sets mode: +v stevemar | 00:27 | |
| *** nkinder has quit IRC | 00:27 | |
| *** roxanagh_ has quit IRC | 00:29 | |
| *** _cjones_ has quit IRC | 00:32 | |
| *** lhcheng_ has quit IRC | 00:39 | |
| *** dims_ has quit IRC | 00:42 | |
| *** topol has joined #openstack-keystone | 00:42 | |
| *** ChanServ sets mode: +v topol | 00:42 | |
| *** maxabidi has quit IRC | 00:43 | |
| *** maxabidi has joined #openstack-keystone | 00:43 | |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Config option for insecure responses https://review.openstack.org/207226 | 00:46 |
|---|---|---|
| openstackgerrit | Brant Knudson proposed openstack/keystone: Log message when debug is enabled https://review.openstack.org/226110 | 00:46 |
| *** mylu has quit IRC | 00:51 | |
| *** EinstCrazy has joined #openstack-keystone | 00:51 | |
| *** mylu has joined #openstack-keystone | 00:53 | |
| *** geoffarnold has quit IRC | 00:54 | |
| *** dsirrine has joined #openstack-keystone | 00:58 | |
| *** topol has quit IRC | 00:58 | |
| *** sdake_ has joined #openstack-keystone | 01:04 | |
| *** nkinder has joined #openstack-keystone | 01:05 | |
| *** sdake has quit IRC | 01:06 | |
| *** sdake_ has quit IRC | 01:07 | |
| *** sdake has joined #openstack-keystone | 01:07 | |
| *** ankita_wagh has quit IRC | 01:16 | |
| *** richm has quit IRC | 01:19 | |
| *** dims has joined #openstack-keystone | 01:26 | |
| openstackgerrit | Eric Brown proposed openstack/keystone: Handle edge case converting a non uuid user_id https://review.openstack.org/226121 | 01:28 |
| openstackgerrit | Joshua Harlow proposed openstack/oslo.policy: Use requests in http check instead of urllib https://review.openstack.org/226122 | 01:28 |
| openstackgerrit | Eric Brown proposed openstack/keystone: Handle edge case converting a non uuid user_id https://review.openstack.org/226121 | 01:29 |
| *** browne has quit IRC | 01:30 | |
| *** spandhe has quit IRC | 01:43 | |
| openstackgerrit | Steve Martinelli proposed openstack/keystone: Update the examples used for the trusted_dashboard option https://review.openstack.org/225987 | 01:45 |
| stevemar | bknudson: ^ let me know if you want a bug, its just a help text change so /me shrugs | 01:45 |
| *** stevemar has quit IRC | 01:46 | |
| *** zzzeek has quit IRC | 01:46 | |
| *** wwwjfy has quit IRC | 01:48 | |
| *** hrou has joined #openstack-keystone | 01:53 | |
| *** woodster_ has quit IRC | 01:59 | |
| *** davechen has joined #openstack-keystone | 02:00 | |
| *** dsirrine has quit IRC | 02:01 | |
| *** diazjf has left #openstack-keystone | 02:01 | |
| *** KarthikB has joined #openstack-keystone | 02:02 | |
| *** davechen1 has joined #openstack-keystone | 02:05 | |
| *** davechen has quit IRC | 02:08 | |
| *** browne has joined #openstack-keystone | 02:19 | |
| *** mylu has quit IRC | 02:28 | |
| *** mtreinish has quit IRC | 02:28 | |
| *** mylu has joined #openstack-keystone | 02:28 | |
| openstackgerrit | Merged openstack/keystone: Relax newly imposed sql driver restriction for domain config https://review.openstack.org/191976 | 02:29 |
| *** mylu has quit IRC | 02:33 | |
| *** dims has quit IRC | 02:33 | |
| *** sdake has quit IRC | 02:39 | |
| *** david-ly_ has joined #openstack-keystone | 02:39 | |
| *** david-lyle has quit IRC | 02:40 | |
| *** dhellmann has quit IRC | 02:40 | |
| *** dhellmann has joined #openstack-keystone | 02:41 | |
| *** BAKfr has quit IRC | 02:44 | |
| *** BAKfr has joined #openstack-keystone | 02:47 | |
| *** tobe has joined #openstack-keystone | 02:48 | |
| *** tobe has quit IRC | 02:48 | |
| *** mylu has joined #openstack-keystone | 02:51 | |
| *** wwwjfy has joined #openstack-keystone | 02:53 | |
| *** stevemar has joined #openstack-keystone | 02:56 | |
| *** ChanServ sets mode: +v stevemar | 02:56 | |
| *** mtreinish has joined #openstack-keystone | 02:59 | |
| *** csoukup has joined #openstack-keystone | 03:01 | |
| *** lhcheng has joined #openstack-keystone | 03:03 | |
| *** ChanServ sets mode: +v lhcheng | 03:03 | |
| *** RA_ has joined #openstack-keystone | 03:04 | |
| *** topol has joined #openstack-keystone | 03:10 | |
| *** ChanServ sets mode: +v topol | 03:10 | |
| *** topol has quit IRC | 03:15 | |
| *** david-ly_ is now known as david-lyle | 03:17 | |
| *** ayoung has quit IRC | 03:30 | |
| *** lhcheng has quit IRC | 03:33 | |
| *** dims has joined #openstack-keystone | 03:34 | |
| *** maxabidi has quit IRC | 03:37 | |
| *** Ephur has quit IRC | 03:37 | |
| *** mylu has quit IRC | 03:47 | |
| *** mylu has joined #openstack-keystone | 03:48 | |
| *** mylu has quit IRC | 03:52 | |
| *** roxanagh_ has joined #openstack-keystone | 04:01 | |
| *** dims has quit IRC | 04:09 | |
| *** stevemar has quit IRC | 04:09 | |
| *** stevemar has joined #openstack-keystone | 04:10 | |
| *** ChanServ sets mode: +v stevemar | 04:10 | |
| *** Nirupama has joined #openstack-keystone | 04:12 | |
| *** darrenc is now known as darrenc_afk | 04:14 | |
| openstackgerrit | Merged openstack/keystone: Add documentation for configuring IdP WebSSO https://review.openstack.org/218353 | 04:15 |
| *** mtreinish has quit IRC | 04:18 | |
| *** hrou has quit IRC | 04:23 | |
| *** roxanagh_ has quit IRC | 04:23 | |
| *** mtreinish has joined #openstack-keystone | 04:23 | |
| *** roxanagh_ has joined #openstack-keystone | 04:23 | |
| *** wwwjfy has quit IRC | 04:29 | |
| *** lhcheng has joined #openstack-keystone | 04:38 | |
| *** ChanServ sets mode: +v lhcheng | 04:38 | |
| *** ankita_wagh has joined #openstack-keystone | 04:42 | |
| *** csoukup has quit IRC | 04:47 | |
| *** KarthikB has quit IRC | 04:47 | |
| *** darrenc_afk is now known as darrenc | 05:09 | |
| *** wwwjfy has joined #openstack-keystone | 05:09 | |
| *** annasort has quit IRC | 05:20 | |
| *** urulama has quit IRC | 05:24 | |
| *** urulama has joined #openstack-keystone | 05:24 | |
| rajesht_ | hi cores | 05:47 |
| rajesht_ | need one more +2 on minor nit https://review.openstack.org/#/c/210365/ | 05:47 |
| rajesht_ | thanks in advance | 05:47 |
| *** henrynash has joined #openstack-keystone | 05:52 | |
| *** ChanServ sets mode: +v henrynash | 05:52 | |
| *** stevemar has quit IRC | 05:53 | |
| rajesht_ | henrynash: need one more +2 on minor nit https://review.openstack.org/#/c/210365/ | 05:53 |
| henrynash | ok will look | 05:54 |
| rajesht_ | henrynash: thanks | 05:54 |
| henrynash | rajesht_: given that you have a -1 from dolph, you need to make sure he is happy before I would +2/A | 05:56 |
| rajesht_ | henrynash: in that case, instead of removing assertIsInstance, we need to first store return value from parse method and then need to call assertIsInstance before returning it | 05:59 |
| *** lhcheng has quit IRC | 06:03 | |
| *** roxanagh_ has quit IRC | 06:09 | |
| *** roxanagh_ has joined #openstack-keystone | 06:10 | |
| *** lhcheng has joined #openstack-keystone | 06:12 | |
| *** ChanServ sets mode: +v lhcheng | 06:12 | |
| *** roxanagh_ has quit IRC | 06:15 | |
| *** ParsectiX has joined #openstack-keystone | 06:15 | |
| *** spandhe has joined #openstack-keystone | 06:38 | |
| *** jaosorior has joined #openstack-keystone | 06:42 | |
| *** browne has quit IRC | 06:43 | |
| *** ankita_wagh has quit IRC | 06:52 | |
| *** lhcheng has quit IRC | 06:54 | |
| *** jaosorior has quit IRC | 06:56 | |
| *** david-lyle has quit IRC | 06:58 | |
| *** jaosorior has joined #openstack-keystone | 06:59 | |
| *** ParsectiX has quit IRC | 07:03 | |
| *** kiran-r has joined #openstack-keystone | 07:07 | |
| *** roxanagh_ has joined #openstack-keystone | 07:12 | |
| *** david-lyle has joined #openstack-keystone | 07:14 | |
| *** jamielennox is now known as jamielennox|away | 07:15 | |
| *** spandhe has quit IRC | 07:16 | |
| *** roxanagh_ has quit IRC | 07:16 | |
| *** kiran-r has quit IRC | 07:18 | |
| *** kiran-r has joined #openstack-keystone | 07:23 | |
| *** su_zhang has joined #openstack-keystone | 07:31 | |
| *** nzeer has quit IRC | 07:41 | |
| *** ramishra has quit IRC | 07:41 | |
| *** serverascode has quit IRC | 07:41 | |
| *** boris-42 has quit IRC | 07:41 | |
| *** ctracey has quit IRC | 07:41 | |
| *** zhiyan has quit IRC | 07:41 | |
| *** briancurtin has quit IRC | 07:41 | |
| *** jraim has quit IRC | 07:41 | |
| *** jaosorior has quit IRC | 07:41 | |
| *** briancurtin has joined #openstack-keystone | 07:43 | |
| *** jaosorior has joined #openstack-keystone | 07:45 | |
| *** su_zhang has quit IRC | 07:47 | |
| *** ramishra has joined #openstack-keystone | 07:49 | |
| openstackgerrit | Merged openstack/keystone: Imported Translations from Zanata https://review.openstack.org/224242 | 07:50 |
| *** aix has joined #openstack-keystone | 07:50 | |
| openstackgerrit | Dave Chen proposed openstack/keystone-specs: Clarify documentation about scope https://review.openstack.org/224792 | 07:58 |
| *** RA_ has quit IRC | 08:12 | |
| *** fhubik has joined #openstack-keystone | 08:12 | |
| *** fhubik has quit IRC | 08:15 | |
| *** fhubik has joined #openstack-keystone | 08:15 | |
| *** jaosorior has quit IRC | 08:26 | |
| *** pece has joined #openstack-keystone | 08:28 | |
| *** fhubik has quit IRC | 08:29 | |
| *** fhubik has joined #openstack-keystone | 08:29 | |
| *** lhcheng has joined #openstack-keystone | 08:43 | |
| *** ChanServ sets mode: +v lhcheng | 08:43 | |
| *** aix has quit IRC | 08:46 | |
| *** lhcheng has quit IRC | 08:47 | |
| *** pnavarro has joined #openstack-keystone | 08:52 | |
| *** roxanagh_ has joined #openstack-keystone | 09:00 | |
| openstackgerrit | Merged openstack/keystone: Log message when debug is enabled https://review.openstack.org/226110 | 09:04 |
| *** roxanagh_ has quit IRC | 09:06 | |
| *** henrynash has quit IRC | 09:07 | |
| *** henrynash has joined #openstack-keystone | 09:11 | |
| *** ChanServ sets mode: +v henrynash | 09:11 | |
| *** aix has joined #openstack-keystone | 09:16 | |
| *** boris-42 has joined #openstack-keystone | 09:26 | |
| *** e0ne has joined #openstack-keystone | 09:26 | |
| *** henrynash has quit IRC | 09:35 | |
| *** henrynash has joined #openstack-keystone | 09:38 | |
| *** ChanServ sets mode: +v henrynash | 09:38 | |
| *** wwwjfy has quit IRC | 09:39 | |
| *** wwwjfy has joined #openstack-keystone | 09:44 | |
| *** dims has joined #openstack-keystone | 09:47 | |
| *** henrynash_ has joined #openstack-keystone | 09:52 | |
| *** ChanServ sets mode: +v henrynash_ | 09:52 | |
| *** henrynash has quit IRC | 09:52 | |
| *** henrynash_ is now known as henrynash | 09:52 | |
| *** fhubik is now known as fhubik_brb | 09:53 | |
| *** jraim has joined #openstack-keystone | 09:54 | |
| *** zhiyan has joined #openstack-keystone | 09:54 | |
| openstackgerrit | Dave Chen proposed openstack/keystone: Using the right format to render the docstring correctly https://review.openstack.org/226225 | 09:55 |
| *** ctracey has joined #openstack-keystone | 09:55 | |
| *** davechen1 has left #openstack-keystone | 09:55 | |
| *** nzeer has joined #openstack-keystone | 09:55 | |
| *** pece has quit IRC | 09:56 | |
| *** serverascode has joined #openstack-keystone | 09:56 | |
| *** pece has joined #openstack-keystone | 09:57 | |
| *** markvoelker has quit IRC | 09:57 | |
| *** ParsectiX has joined #openstack-keystone | 09:59 | |
| *** fhubik_brb is now known as fhubik | 10:02 | |
| *** ParsectiX has quit IRC | 10:03 | |
| *** ParsectiX has joined #openstack-keystone | 10:04 | |
| *** RA_ has joined #openstack-keystone | 10:08 | |
| *** ParsectiX has quit IRC | 10:12 | |
| *** henrynash has quit IRC | 10:24 | |
| *** ParsectiX has joined #openstack-keystone | 10:28 | |
| *** e0ne has quit IRC | 10:30 | |
| *** RA_ has quit IRC | 10:31 | |
| *** lhcheng has joined #openstack-keystone | 10:32 | |
| *** ChanServ sets mode: +v lhcheng | 10:32 | |
| *** e0ne has joined #openstack-keystone | 10:35 | |
| *** lhcheng has quit IRC | 10:37 | |
| *** lhcheng has joined #openstack-keystone | 10:37 | |
| *** ChanServ sets mode: +v lhcheng | 10:37 | |
| *** roxanagh_ has joined #openstack-keystone | 10:49 | |
| *** fhubik has quit IRC | 10:49 | |
| *** aix has quit IRC | 10:53 | |
| *** fhubik has joined #openstack-keystone | 10:54 | |
| *** roxanagh_ has quit IRC | 10:54 | |
| *** samueldmq has quit IRC | 10:58 | |
| *** amakarov_away is now known as amakarov | 11:00 | |
| *** samueldmq has joined #openstack-keystone | 11:01 | |
| *** aix has joined #openstack-keystone | 11:05 | |
| *** topol has joined #openstack-keystone | 11:08 | |
| *** ChanServ sets mode: +v topol | 11:08 | |
| *** doug-fish has joined #openstack-keystone | 11:09 | |
| *** topol has quit IRC | 11:13 | |
| *** _pece has joined #openstack-keystone | 11:13 | |
| *** pece has quit IRC | 11:14 | |
| *** wwwjfy has quit IRC | 11:22 | |
| *** akscram1 is now known as akscram | 11:24 | |
| openstackgerrit | Ghe Rivero proposed openstack/keystoneauth: Fix doc session example https://review.openstack.org/226262 | 11:24 |
| *** markvoelker has joined #openstack-keystone | 11:28 | |
| *** gordc has joined #openstack-keystone | 11:31 | |
| *** markvoelker has quit IRC | 11:33 | |
| *** fhubik is now known as fhubik_brb | 11:33 | |
| *** lhcheng has quit IRC | 11:41 | |
| *** fhubik_brb is now known as fhubik | 11:42 | |
| *** fhubik is now known as fhubik_brb | 11:43 | |
| *** roxanagh_ has joined #openstack-keystone | 11:51 | |
| *** roxanagh_ has quit IRC | 11:57 | |
| *** e0ne has quit IRC | 12:03 | |
| *** fhubik_brb is now known as fhubik | 12:04 | |
| *** markvoelker has joined #openstack-keystone | 12:18 | |
| *** raildo-afk is now known as raildo | 12:19 | |
| *** e0ne has joined #openstack-keystone | 12:23 | |
| *** doug-fish has quit IRC | 12:23 | |
| *** samueldmq has quit IRC | 12:25 | |
| *** doug-fish has joined #openstack-keystone | 12:25 | |
| openstackgerrit | Alexander Makarov proposed openstack/keystone: Unified delegation model https://review.openstack.org/208488 | 12:26 |
| *** dobson has quit IRC | 12:27 | |
| *** jaosorior has joined #openstack-keystone | 12:28 | |
| openstackgerrit | Alexander Makarov proposed openstack/keystone: Unified delegation driver https://review.openstack.org/209600 | 12:30 |
| *** doug-fish has quit IRC | 12:30 | |
| *** wwwjfy has joined #openstack-keystone | 12:32 | |
| *** dobson has joined #openstack-keystone | 12:32 | |
| *** edmondsw has joined #openstack-keystone | 12:33 | |
| *** nicodemos has joined #openstack-keystone | 12:36 | |
| *** RA_ has joined #openstack-keystone | 12:37 | |
| *** kiran-r has quit IRC | 12:45 | |
| *** doug-fish has joined #openstack-keystone | 12:45 | |
| *** _kiran_ has joined #openstack-keystone | 12:45 | |
| *** _kiran_ is now known as kiran-r | 12:45 | |
| *** alejandrito has joined #openstack-keystone | 12:47 | |
| *** samueldmq has joined #openstack-keystone | 12:48 | |
| *** boris-42 has quit IRC | 12:49 | |
| *** fhubik is now known as fhubik_brb | 12:51 | |
| openstackgerrit | Merged openstack/oslo.policy: Change ignore-errors to ignore_errors https://review.openstack.org/225799 | 12:57 |
| *** fhubik_brb is now known as fhubik | 12:57 | |
| *** RA_ has quit IRC | 12:58 | |
| *** richm has joined #openstack-keystone | 13:03 | |
| *** jsavak has joined #openstack-keystone | 13:05 | |
| *** Nirupama has left #openstack-keystone | 13:08 | |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Bring bandit config up-to-date https://review.openstack.org/194417 | 13:09 |
| samueldmq | bknudson: ping, I remember you were working in a documentation containing something like : 'what other projects need to know about keystone' | 13:10 |
| bknudson | samueldmq: https://review.openstack.org/#/c/204801/ | 13:10 |
| samueldmq | bknudson: exactly, thanks | 13:11 |
| bknudson | samueldmq: edit https://etherpad.openstack.org/p/keystone-info and update the review. | 13:11 |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Update bandit blacklist_calls config https://review.openstack.org/225327 | 13:11 |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Update bandit blacklist_imports config https://review.openstack.org/225341 | 13:11 |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Enable Bandit 0.13.2 tests https://review.openstack.org/225347 | 13:11 |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Enable hardcoded_bind_all_interfaces Bandit test https://review.openstack.org/225690 | 13:11 |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Enable password_config_option_not_marked_secret Bandit test https://review.openstack.org/225691 | 13:11 |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Enable subprocess_without_shell_equals_true Bandit test https://review.openstack.org/225692 | 13:12 |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Enable try_except_pass Bandit test https://review.openstack.org/225738 | 13:12 |
| *** fhubik_ has joined #openstack-keystone | 13:13 | |
| *** fhubik_ is now known as fhubik_brb | 13:13 | |
| samueldmq | bknudson: k | 13:13 |
| samueldmq | bknudson: looking at dolphm's comment in the review, what if we assume 'default' in the v3clients if no domain is specified ? | 13:14 |
| samueldmq | could that be a security concern? | 13:14 |
| *** dims has quit IRC | 13:14 | |
| bknudson | samueldmq: I can't think of a security problem that could be caused by it. | 13:15 |
| *** dims has joined #openstack-keystone | 13:15 | |
| bknudson | samueldmq: what v3clients? in python-keystoneclient? | 13:15 |
| samueldmq | bknudson: yes | 13:15 |
| bknudson | also, is 'default' the domain ID or domain name? | 13:15 |
| *** fhubik has quit IRC | 13:16 | |
| samueldmq | bknudson: I think we shoud assume the domain name, since the default_doman_id can be changed in the confi | 13:16 |
| *** _kiran_ has joined #openstack-keystone | 13:16 | |
| bknudson | samueldmq: I think the default name is "Default" rather than "default", but I'd have to check the code. | 13:17 |
| samueldmq | bknudson: although the name is 'Default' I think, instead of 'default' | 13:17 |
| samueldmq | bknudson: yeah, that | 13:17 |
| *** kiran-r has quit IRC | 13:17 | |
| bknudson | the user could create a domain and then set the default_domain_id to it, so the name isn't always going to be Default | 13:17 |
| *** _kiran_ is now known as kiran-r | 13:17 | |
| bknudson | nor is the domain_id always going to be default | 13:18 |
| samueldmq | bknudson: sure, but we could assume that in most cases, since that's what we provide by default, and document that | 13:18 |
| bknudson | that doesn't mean we can't set the default value to 'default' or 'Default', just that the default won't always work. | 13:18 |
| samueldmq | bknudson: if one has changed the domain default, it won't work anyway, and will have to provide the domain | 13:18 |
| samueldmq | bknudson: ++ yes, it won't always work, but I think in most of the cases yes | 13:19 |
| samueldmq | in any case, it wouldn't break anything for anyone, but easing for people who run on the provided default doman | 13:20 |
| samueldmq | domain* | 13:20 |
| openstackgerrit | Merged openstack/pycadf: Updated from global requirements https://review.openstack.org/224662 | 13:20 |
| *** hrou has joined #openstack-keystone | 13:23 | |
| *** diazjf has joined #openstack-keystone | 13:27 | |
| *** thiagop has joined #openstack-keystone | 13:28 | |
| *** dsirrine has joined #openstack-keystone | 13:28 | |
| *** jecarey has joined #openstack-keystone | 13:29 | |
| *** zzzeek has joined #openstack-keystone | 13:30 | |
| *** e0ne has quit IRC | 13:37 | |
| *** RA_ has joined #openstack-keystone | 13:39 | |
| *** e0ne has joined #openstack-keystone | 13:39 | |
| *** e0ne has quit IRC | 13:39 | |
| *** annasort has joined #openstack-keystone | 13:40 | |
| *** roxanagh_ has joined #openstack-keystone | 13:40 | |
| *** e0ne has joined #openstack-keystone | 13:40 | |
| *** kiran-r has quit IRC | 13:40 | |
| *** roxanagh_ has quit IRC | 13:45 | |
| *** henrynash has joined #openstack-keystone | 13:47 | |
| *** ChanServ sets mode: +v henrynash | 13:47 | |
| *** doug-fis_ has joined #openstack-keystone | 13:47 | |
| *** doug-fish has quit IRC | 13:50 | |
| *** doug-fish has joined #openstack-keystone | 13:51 | |
| *** doug-fis_ has quit IRC | 13:52 | |
| samueldmq | bknudson: what if we create an option in the server for using the default domain if no domain is provided? | 13:55 |
| samueldmq | bknudson: it'd work even if the deployer changed the default domain | 13:56 |
| *** topol has joined #openstack-keystone | 13:57 | |
| *** ChanServ sets mode: +v topol | 13:57 | |
| *** csoukup has joined #openstack-keystone | 14:00 | |
| *** EinstCrazy has quit IRC | 14:03 | |
| *** stevemar has joined #openstack-keystone | 14:03 | |
| *** ChanServ sets mode: +v stevemar | 14:03 | |
| openstackgerrit | Merged openstack/keystone: federation.idp use correct subprocess https://review.openstack.org/225340 | 14:09 |
| *** annasort_ has joined #openstack-keystone | 14:10 | |
| *** annasort has quit IRC | 14:10 | |
| *** annasort_ is now known as annasort | 14:10 | |
| *** dobson has quit IRC | 14:10 | |
| *** browne has joined #openstack-keystone | 14:13 | |
| *** exploreshaifali has joined #openstack-keystone | 14:14 | |
| *** doug-fish has quit IRC | 14:14 | |
| *** doug-fish has joined #openstack-keystone | 14:15 | |
| *** dobson has joined #openstack-keystone | 14:15 | |
| *** ayoung has joined #openstack-keystone | 14:16 | |
| *** ChanServ sets mode: +v ayoung | 14:16 | |
| *** slberger has joined #openstack-keystone | 14:18 | |
| openstackgerrit | Alexander Makarov proposed openstack/keystone: Move region configuration to a critical section https://review.openstack.org/222173 | 14:21 |
| *** henrynash has quit IRC | 14:24 | |
| *** KarthikB has joined #openstack-keystone | 14:24 | |
| *** boris-42 has joined #openstack-keystone | 14:30 | |
| *** ayoung has quit IRC | 14:32 | |
| morgan | samueldmq: it is a bad idea in the server to assume any domain | 14:34 |
| morgan | samueldmq: the *only* exception is if you are using the v2 api | 14:35 |
| morgan | So, I am against automatically assuming "default domain id" in v3 of domain is not supplied. A 400 error is more correct | 14:36 |
| morgan | samueldmq: if the client is papering over the 400 error by supplying the default domain "default" magically, | 14:37 |
| morgan | We are doing it wrong in the client side | 14:37 |
| morgan | Cc bknudson ^ dolphm | 14:38 |
| dolphm | morgan: i actually think 'default' is a reasonable default value for a domain ID on the client side, but completely agree on the service side | 14:39 |
| samueldmq | morgan: even if the server option is an option switch? | 14:39 |
| morgan | samueldmq: yes. Do not assume a domain on the server side except via v2 api | 14:40 |
| dolphm | samueldmq: the server should never assume anything, except to scope the v2 api to CONF.identity.default_domain_id | 14:40 |
| morgan | samueldmq: it makes the API behave differently based upon input and possibly allows mistargeting of resources if you have access to both default domain and the one you are aiming for | 14:41 |
| morgan | dolphm: ++ | 14:41 |
| dolphm | on the client side, having a default value for domain_id makes it easier for people to migrate to v3, and caters the user experience to single domain deployments or deployments where the users exist in the default domain | 14:41 |
| morgan | dolphm: i think the client shouldnt assume default either. But i wont argue too strongly against it | 14:41 |
| morgan | dolphm: server is much more important | 14:42 |
| dolphm | morgan: my only argument on the client side is for user experience.... if there's a reason why that would be a misbehavior / bug, then that should win | 14:42 |
| samueldmq | morgan: dolphm okay, makes sense, I think the point of mistargeting resources by name is important (like projects with same name in dfferent domains) | 14:42 |
| dolphm | samueldmq: what? | 14:43 |
| openstackgerrit | Thierry Carrez proposed openstack/keystone: Open Mitaka development https://review.openstack.org/226356 | 14:43 |
| *** exploreshaifali has quit IRC | 14:43 | |
| samueldmq | dolphm: what morgan said above, if we make 'default' the domain if it isn't supplied, and one wants to use project X | 14:43 |
| samueldmq | dolphm: and he/she also have access to project X in another domain, it's easy to get in the wrong project/doamin because of the default | 14:44 |
| morgan | samueldmq: uh. That wasn't really the point | 14:44 |
| dolphm | samueldmq: .... "and one wants to use project X" ? what does that mean? | 14:44 |
| *** phalmos has joined #openstack-keystone | 14:44 | |
| samueldmq | dolphm: getting a token there | 14:45 |
| morgan | samueldmq: or eh sure. Nvm me. Pre-coffee | 14:45 |
| samueldmq | morgan: so I am misunderstanding | 14:45 |
| morgan | Also... New PTL next week. Last IRC meeting as PTL. Wheeeeee | 14:45 |
| samueldmq | morgan: o/ | 14:46 |
| * morgan wonders who is going to win election | 14:46 | |
| samueldmq | morgan: when is the vote going to close? | 14:46 |
| morgan | Uh. Sometime this week | 14:46 |
| dolphm | samueldmq: thursday | 14:47 |
| dolphm | if OS_USER_DOMAIN_NAME defaults to "Default", then whenever the user sets either OS_USER_DOMAIN_NAME or OS_USER_DOMAIN_ID, then it'll override the default name "Default". | 14:47 |
| dolphm | OS_DOMAIN_ID and OS_DOMAIN_NAME should NOT have a default, ever, ever, ever | 14:48 |
| dolphm | the logic for OS_USER_DOMAIN_NAME also applies to OS_PROJECT_DOMAIN_NAME | 14:48 |
| dolphm | and it applies to all client interfaces that i can think of (keystoneauth / middleware / client / cli / whatever) | 14:49 |
| dolphm | but again, the server should never, ever assume domain IDs anywhere for any reason outside of v2 controllers assuming CONF.identity.default_domain_id | 14:49 |
| samueldmq | dolphm: yes, and at worst (in the case the default project id/name is changed by the deployer) it will break and the domain will need to be supplied anyway | 14:49 |
| samueldmq | dolphm: makes sense, beause that looks like defaults to improve UX (like cookies in the browsers?) | 14:50 |
| *** henrynash has joined #openstack-keystone | 14:50 | |
| *** ChanServ sets mode: +v henrynash | 14:50 | |
| dolphm | i'd also rather flip all the logic around between DOMAIN_ID and DOMAIN_NAME in terms of what carries a default and what overrides what, but i suspect i'm alone on that because everyone seems to love (the fragility of) names | 14:50 |
| morgan | dolphm: you're not alone, but I feel like we're def the minority | 14:51 |
| *** urulama has quit IRC | 14:51 | |
| samueldmq | dolphm: what would it looks like ? I mean, what do you propose | 14:51 |
| *** urulama has joined #openstack-keystone | 14:52 | |
| dolphm | samueldmq: everything i said above except flip every occurrence of _ID and _DOMAIN and swap "default" for "Default" | 14:53 |
| dolphm | the only weird part is that the user setting a _DOMAIN_NAME must override a _DOMAIN_ID, which means the client is opting for a slightly less efficient and less specific operation, which is icky | 14:54 |
| dolphm | so you'd have to (and certainly could) work around that | 14:54 |
| *** ayoung has joined #openstack-keystone | 14:55 | |
| *** ChanServ sets mode: +v ayoung | 14:55 | |
| stevemar | dolphm: file a bug? | 15:01 |
| *** itlinux has joined #openstack-keystone | 15:01 | |
| samueldmq | stevemar: ++, would be a good idea, to keep track of it/make people aware | 15:01 |
| *** fhubik_brb is now known as fhubik_ | 15:01 | |
| *** doug-fish has quit IRC | 15:03 | |
| *** doug-fish has joined #openstack-keystone | 15:03 | |
| *** doug-fish has quit IRC | 15:04 | |
| *** doug-fish has joined #openstack-keystone | 15:05 | |
| *** doug-fish has quit IRC | 15:06 | |
| samueldmq | stevemar: keystoneauth is the one for auth | 15:06 |
| *** doug-fish has joined #openstack-keystone | 15:06 | |
| samueldmq | stevemar: are we deprecating auth in ksclient ? and letting it only for accessing the apis ? | 15:07 |
| samueldmq | stevemar: like, ksclient would use keystoneauth | 15:07 |
| samueldmq | is that the idea? | 15:07 |
| stevemar | samueldmq: that is the idea, yes | 15:07 |
| samueldmq | dolphm: so all those changes would be in ksauth | 15:07 |
| samueldmq | stevemar: kk got it sir :) | 15:07 |
| stevemar | samueldmq: we will rip out auth plugins, session, middleware and CLI from ksc | 15:07 |
| *** roxanagh_ has joined #openstack-keystone | 15:07 | |
| stevemar | samueldmq: jamie has a patch for it | 15:08 |
| stevemar | samueldmq: https://review.openstack.org/#/c/221596/ | 15:08 |
| samueldmq | stevemar: nice, thanks | 15:08 |
| *** lhcheng has joined #openstack-keystone | 15:11 | |
| *** ChanServ sets mode: +v lhcheng | 15:11 | |
| *** kiran-r has joined #openstack-keystone | 15:12 | |
| *** EinstCrazy has joined #openstack-keystone | 15:14 | |
| *** lhcheng has quit IRC | 15:16 | |
| stevemar | dstanek: why would you rather the error codes stay explicitly? | 15:16 |
| stevemar | https://review.openstack.org/#/c/224545/5/keystone/tests/unit/test_v3_assignment.py | 15:16 |
| dstanek | stevemar: so i don't have to remember what they are or look them up every time :-) | 15:17 |
| stevemar | dstanek: i actually told davechen to remove the explicitness in an earlier patch | 15:17 |
| morgan | Keystoneclient session is frozen now unless you have a security bug | 15:17 |
| morgan | Fwiw | 15:17 |
| morgan | All work should be focused on keystoneauth | 15:18 |
| bknudson | if you want it to be explicit then change the API so that it has to be. | 15:18 |
| morgan | And a drive towards fixing keystoneclient to use ksa is a next major hurdle. | 15:18 |
| dstanek | bknudson: ++ | 15:19 |
| samueldmq | morgan: before LIberty final release? | 15:19 |
| morgan | Ksc has been branched i think | 15:19 |
| *** itlinux has quit IRC | 15:19 | |
| *** Ephur has joined #openstack-keystone | 15:19 | |
| morgan | samueldmq: yes stable/liberty branch exists for ksc now | 15:20 |
| samueldmq | morgan: kk | 15:20 |
| morgan | And by tomorrow rc1 of keystone should happen | 15:20 |
| *** dims has quit IRC | 15:20 | |
| morgan | We have one outstanding rc bug and if it isnt gating today- it is punted out to mitaka eith potential backport | 15:21 |
| *** btully has quit IRC | 15:21 | |
| stevemar | bknudson: dstanek but our APIs do state that, like the case of a PUT call for role assignments results in 204, or a delete | 15:21 |
| stevemar | https://review.openstack.org/#/c/224545/5/keystone/tests/unit/test_v3_assignment.py | 15:21 |
| samueldmq | morgan: which one ? | 15:21 |
| * samueldmq would like to help with what is missing in priority reviews, etc | 15:22 | |
| *** btully has joined #openstack-keystone | 15:22 | |
| dstanek | stevemar: i think bknudson was directing that at me. saying that i should make the interface require it to be passed in | 15:22 |
| bknudson | stevemar: I actually like the defaults and implicit since then it's clear when we're doing something out of the ordinary. | 15:22 |
| stevemar | bknudson: yeah, thats what i like about it too :) | 15:23 |
| morgan | samueldmq: https://review.openstack.org/#/c/167675/29 | 15:23 |
| morgan | samueldmq: and with the -1 i am tempted to punt to mitaka | 15:24 |
| stevemar | bknudson: its your favorite type of change, fixing docstrings! https://review.openstack.org/#/c/226225/1 | 15:24 |
| bknudson | e.g., in https://review.openstack.org/#/c/224545/5/keystone/tests/unit/test_v3_assignment.py at line 366 -- why do we have to override? | 15:24 |
| morgan | dstanek: ^ your thoughts on likelihood that review will be ready for gating today? | 15:25 |
| bknudson | I like docstring fixes but they should actually be changing to use valid rst. | 15:25 |
| morgan | dstanek: the catalog one. And also how important is it for liberty? | 15:26 |
| dstanek | morgan: i can make the change i suggested. was thinking that David was going to address it. | 15:26 |
| morgan | dstanek: well it is the last thing holding up RC1 | 15:26 |
| *** fhubik_ is now known as fhubik_brb | 15:26 | |
| morgan | And david and gyee are not here atm | 15:27 |
| * morgan needs to have a chat with people about irc bouncers | 15:27 | |
| dstanek | morgan: not important at all as far as i am concerned because it's just fixing a bug where the service name isn't in the filtered service catalog | 15:27 |
| *** roxanagh_ has quit IRC | 15:27 | |
| morgan | Ok punting it and we can backport | 15:27 |
| stevemar | \o/ | 15:27 |
| dstanek | morgan: the change is a bit bigger because it was requested that he move the filtering logic into core | 15:28 |
| bknudson | I got a softlayer account so I can run znc | 15:28 |
| *** e0ne has quit IRC | 15:28 | |
| *** dims has joined #openstack-keystone | 15:28 | |
| dstanek | morgan: yep, punt it and i'll just upload my latest fix | 15:28 |
| bknudson | I don't think moving code is a bug. | 15:28 |
| dstanek | bknudson: it is when it creates two! | 15:29 |
| *** e0ne has joined #openstack-keystone | 15:30 | |
| samueldmq | morgan: kk thanks for the link | 15:30 |
| dstanek | bknudson, stevemar: i'm OK with removing my -1 if you guys things defaults are find, but i this we are bad people http://git.openstack.org/cgit/openstack/keystone/tree/keystone/tests/unit/test_v3.py#n462 | 15:30 |
| dstanek | what is the default? | 15:30 |
| bknudson | dstanek: 204 | 15:31 |
| * morgan just punted catalog and approved the open mitaka review | 15:31 | |
| morgan | Please say something NOW if you want me to hold off | 15:31 |
| bknudson | dstanek: I don't think using defaults makes us bad people | 15:32 |
| dstanek | bknudson: sure, but it's not actually declare as a default | 15:32 |
| bknudson | dstanek: We're not ISIS. | 15:32 |
| -morgan- Mitaka Development Opening Review is about to gate. Please say something *now* if you want this to be held. | 15:32 | |
| bknudson | oh, you'd rather see expected_status=204 in the method? | 15:32 |
| dstanek | bknudson: it's not that we are using defaults it's that we are declaring them in the body as opposed to where you would normally find them | 15:32 |
| bknudson | That would be smarter. | 15:32 |
| *** roxanagh_ has joined #openstack-keystone | 15:34 | |
| stevemar | dstanek: okay, i'll meet you there, that should be in the method signature, not in the body | 15:35 |
| dstanek | stevemar: i'm going to write up a quick patch while i'm thinking about it | 15:36 |
| stevemar | dstanek: sure | 15:36 |
| stevemar | it should be a pretty straightforward patch, .... trying to think of any implications from it, but it seems safe | 15:37 |
| stevemar | i'd be curious to see what the fall out is :) | 15:37 |
| morgan | We have about 1hr before mitaka development will be open. | 15:38 |
| morgan | Fwiw | 15:38 |
| *** roxanag__ has joined #openstack-keystone | 15:38 | |
| openstackgerrit | David Stanek proposed openstack/keystone: Move endpoint catalog filtering to default driver https://review.openstack.org/167675 | 15:39 |
| dolphm | stevemar: you're welcome https://bugs.launchpad.net/keystone/+bug/1498556 | 15:39 |
| openstack | Launchpad bug 1498556 in python-keystoneclient "Reasonable assumptions concerning domain references" [Medium,Triaged] | 15:39 |
| *** geoffarnold has joined #openstack-keystone | 15:39 | |
| *** roxanagh_ has quit IRC | 15:40 | |
| *** BAKfr has quit IRC | 15:41 | |
| *** e0ne has quit IRC | 15:41 | |
| *** itlinux has joined #openstack-keystone | 15:42 | |
| henrynash | morgan: fine by me | 15:43 |
| bknudson | lbragstad: dolphm: with mitaka open in 53 mins do we need https://review.openstack.org/#/c/221786/ ? | 15:43 |
| lbragstad | bknudson: it would be nice, I would think we'd need it | 15:44 |
| bknudson | lbragstad: the commit message makes it sound like it's not needed in M | 15:44 |
| bknudson | fix the commit message if that's not the case | 15:44 |
| *** fhubik_brb is now known as fhubik_ | 15:45 | |
| *** phalmos has quit IRC | 15:45 | |
| *** hrou has quit IRC | 15:46 | |
| *** hrou has joined #openstack-keystone | 15:46 | |
| dolphm | bknudson: yes, it'll avoid a bunch of 401's after upgrading from kilo -> liberty in deployments using fernet | 15:47 |
| dolphm | bknudson: it is not needed in M, it is needed in liberty | 15:47 |
| bknudson | I think this can just be proposed to stable, then. | 15:47 |
| lbragstad | bknudson: it's for upgrades | 15:47 |
| dolphm | bknudson: unless you want to upgrade from kilo -> mitaka, actually | 15:48 |
| stevemar | bknudson: can you take a quick look at https://review.openstack.org/#/c/225987/ | 15:48 |
| stevemar | actually morgan ^ let me know if you want that in L or not | 15:48 |
| dolphm | stevemar: docs can be trivially backported | 15:49 |
| bknudson | stevemar: first patch! | 15:49 |
| morgan | Backport | 15:49 |
| stevemar | dolphm: morgan it would mean that keystone.conf needs to be re-generated too | 15:49 |
| bknudson | does the config generator work on stable/? | 15:49 |
| *** roxanag__ has quit IRC | 15:50 | |
| morgan | It should? | 15:50 |
| morgan | We can do a one off run if needed. | 15:50 |
| stevemar | morgan: ++ | 15:50 |
| stevemar | but i think it works on stable | 15:50 |
| morgan | I'm sure we will need an rc2 | 15:50 |
| morgan | We always do. | 15:50 |
| *** phalmos has joined #openstack-keystone | 15:51 | |
| bknudson | we never did get any translations | 15:52 |
| *** f13o has joined #openstack-keystone | 15:55 | |
| morgan | bknudson: =/ | 15:55 |
| morgan | I checked w/ relmanagement before approving. They said go ahead | 15:55 |
| *** woodster_ has joined #openstack-keystone | 15:56 | |
| *** BAKfr has joined #openstack-keystone | 15:56 | |
| *** RA_ has quit IRC | 15:57 | |
| *** petertr7_away has quit IRC | 15:58 | |
| *** RA_ has joined #openstack-keystone | 15:58 | |
| morgan | I think translations are going to be in rc2 | 15:59 |
| morgan | Based on ML traffic | 15:59 |
| bknudson | they make rc2 from stable/ ? | 15:59 |
| dstanek | just about lunch time! | 16:00 |
| *** petertr7_away has joined #openstack-keystone | 16:00 | |
| *** petertr7_away is now known as petertr7 | 16:00 | |
| bknudson | dstanek must have something really good lined up for lunch | 16:00 |
| dstanek | so if we add V3 endpoints to the V2 list we have to choose only one ID to return. what do we do it someone does a GET for that ID under V2? | 16:00 |
| *** itlinux_ has joined #openstack-keystone | 16:01 | |
| dstanek | bknudson: nope, just doing out with the wife and son. the food is just an added benefit | 16:01 |
| bknudson | return the public one? | 16:01 |
| *** itlinux has quit IRC | 16:02 | |
| *** henrynash has quit IRC | 16:02 | |
| dstanek | bknudson: does that break the contract since we are not returning all of the interfaces? | 16:03 |
| *** RA_ has quit IRC | 16:04 | |
| bknudson | oh, look up the service for the public one and return all the interfaces. | 16:08 |
| *** fhubik_ has quit IRC | 16:08 | |
| *** fhubik_ has joined #openstack-keystone | 16:09 | |
| dstanek | bknudson: yeah, that's what i was thinking here: https://review.openstack.org/#/c/215870/ | 16:10 |
| edmondsw | dstanek, answered your comments in https://review.openstack.org/#/c/217373/ | 16:11 |
| *** gyee has joined #openstack-keystone | 16:11 | |
| *** ChanServ sets mode: +v gyee | 16:11 | |
| *** exploreshaifali has joined #openstack-keystone | 16:12 | |
| *** tonytan4ever has joined #openstack-keystone | 16:14 | |
| *** zzzeek has quit IRC | 16:14 | |
| wwwjfy | dstanek: I didn't check thoroughly, but since Endpoint class doesn't have a GET interface via a single endpoint id, I assume it's safe to return any id as the v2 endpoint's id | 16:14 |
| *** fhubik_ is now known as fhubik_brb | 16:14 | |
| wwwjfy | just to be consistent, I decided to return public interface's id | 16:14 |
| *** fhubik_brb is now known as fhubik_ | 16:15 | |
| *** EinstCrazy has quit IRC | 16:19 | |
| *** fhubik_ has quit IRC | 16:20 | |
| *** zzzeek has joined #openstack-keystone | 16:23 | |
| *** lhcheng has joined #openstack-keystone | 16:29 | |
| *** ChanServ sets mode: +v lhcheng | 16:29 | |
| *** lhcheng_ has joined #openstack-keystone | 16:30 | |
| *** lhcheng has quit IRC | 16:30 | |
| *** kiran-r is now known as _kiran_ | 16:35 | |
| *** itlinux_ has quit IRC | 16:39 | |
| *** _kiran_ has quit IRC | 16:40 | |
| *** kiran-r has joined #openstack-keystone | 16:40 | |
| *** kiran-r has quit IRC | 16:40 | |
| *** kiranr_ has joined #openstack-keystone | 16:40 | |
| *** kiranr_ has quit IRC | 16:40 | |
| *** phalmos has quit IRC | 16:41 | |
| *** itlinux has joined #openstack-keystone | 16:41 | |
| *** mylu has joined #openstack-keystone | 16:45 | |
| *** david-lyle has quit IRC | 16:46 | |
| *** _cjones_ has joined #openstack-keystone | 16:55 | |
| *** tsymancz1k has quit IRC | 16:56 | |
| *** tsymancz3k has quit IRC | 16:56 | |
| *** spandhe has joined #openstack-keystone | 16:59 | |
| *** spandhe_ has joined #openstack-keystone | 17:02 | |
| *** pauloewerton has joined #openstack-keystone | 17:03 | |
| *** spandhe has quit IRC | 17:03 | |
| *** spandhe_ is now known as spandhe | 17:03 | |
| *** pnavarro has quit IRC | 17:04 | |
| *** su_zhang has joined #openstack-keystone | 17:06 | |
| *** ankita_wagh has joined #openstack-keystone | 17:06 | |
| *** tsymancz1k has joined #openstack-keystone | 17:07 | |
| *** tsymancz1k is now known as tsymanczyk | 17:07 | |
| *** su_zhang has quit IRC | 17:08 | |
| *** su_zhang has joined #openstack-keystone | 17:08 | |
| *** tsymancz1k has joined #openstack-keystone | 17:12 | |
| *** amakarov is now known as amakarov_away | 17:13 | |
| openstackgerrit | Merged openstack/keystone: Clean up bandit profiles https://review.openstack.org/225304 | 17:25 |
| *** diazjf has quit IRC | 17:25 | |
| *** mylu has quit IRC | 17:30 | |
| *** dims has quit IRC | 17:31 | |
| *** dims has joined #openstack-keystone | 17:32 | |
| *** kiran-r has joined #openstack-keystone | 17:32 | |
| openstackgerrit | Merged openstack/keystone: Bring bandit config up-to-date https://review.openstack.org/194417 | 17:34 |
| *** kiranr has joined #openstack-keystone | 17:36 | |
| *** mylu has joined #openstack-keystone | 17:39 | |
| *** mylu has quit IRC | 17:39 | |
| *** shaleh has joined #openstack-keystone | 17:44 | |
| *** itlinux has quit IRC | 17:47 | |
| *** henrynash has joined #openstack-keystone | 17:57 | |
| *** ChanServ sets mode: +v henrynash | 17:57 | |
| *** exploreshaifali has quit IRC | 17:57 | |
| morgan | almost that time | 17:58 |
| openstackgerrit | Julien Danjou proposed openstack/keystone: wsgi: fix base_url finding https://review.openstack.org/226464 | 17:58 |
| stevemar | morgan: feeling bitter sweet yet? | 17:59 |
| *** _cjones_ has quit IRC | 18:01 | |
| *** _cjones_ has joined #openstack-keystone | 18:02 | |
| *** samleon has joined #openstack-keystone | 18:05 | |
| *** diazjf has joined #openstack-keystone | 18:06 | |
| *** samleon has quit IRC | 18:08 | |
| gyee | ayoung, thanks! | 18:09 |
| dolphm | and to whoever wins the election ayoung, dstanek, stevemar: know that you'll be able to refer to either morgan or myself for help / direction / advice / etc - the job isn't exactly well documented! but you're keeping the hat, either way, i don't think either of us want it back. | 18:09 |
| stevemar | dolphm: lol thanks good to know | 18:10 |
| *** phalmos has joined #openstack-keystone | 18:10 | |
| morgan | dolphm: +∞ | 18:10 |
| dstanek | dolphm: i heard you were a write in candidate | 18:10 |
| ayoung | dolphm, I was scared to run for it, to be honest. But...you have to be willing to put your neck on the line if you complain as much as I do. | 18:11 |
| ayoung | We'll see how it goes; might suggest we take up the heat approach of having a rotating PTL, one release per... | 18:12 |
| dstanek | ayoung: the other option is to stop complaining :-) | 18:12 |
| ayoung | dstanek, this is me we are talking about. That is not an option. | 18:12 |
| stevemar | dstanek: lbragstad bknudson what were you guys referring to when talking about hackathon? you mean the mid-cycle one? | 18:12 |
| ayoung | when I was a new Platoon Leader, an NCO explained this to me: | 18:12 |
| morgan | ayoung: even 2 cycles isn't bad | 18:13 |
| ayoung | don't worry about your Soldiers' complain | 18:13 |
| morgan | but it's draining | 18:13 |
| ayoung | worry when they stop. | 18:13 |
| bknudson | stevemar: I was hoping to put together some time to work on test refactoring so that they would run faster. (as in, not do full REST calls) | 18:13 |
| * raildo thinking that we should have a debate between the candidates :P | 18:13 | |
| lbragstad | stevemar: a while back, bknudson had a bunch of stuff wrt testing that he wanted to get done, and he mentioned an "off-line" hackathon | 18:13 |
| dstanek | stevemar: i'd like to do virtual ones | 18:13 |
| lbragstad | dstanek: ++ | 18:13 |
| lbragstad | yes, we have the tools | 18:13 |
| lbragstad | and it if makes working on things easier, like improving test times, I think we should be using them | 18:14 |
| bknudson | this is as far as I got: https://etherpad.openstack.org/p/keystone-testing | 18:14 |
| *** Alexander has joined #openstack-keystone | 18:14 | |
| *** Alexander is now known as amakarov | 18:14 | |
| bknudson | I think maybe dstanek had written up some ideas for how he'd like the tests to be structured, too. | 18:15 |
| dstanek | bknudson: yeah, looking for the link now | 18:15 |
| dstanek | bknudson: i only got part way through my list | 18:15 |
| bknudson | dstanek: we should have a hackathon or something | 18:15 |
| morgan | stevemar: https://wiki.openstack.org/wiki/Meetings/KeystoneMeeting#Main_Agenda :P | 18:16 |
| dstanek | i'd also be willing to have a standing hackathon meeting that i'll be at each week in hopes to have other join and get some reviews/bug done | 18:16 |
| bknudson | I like that idea... might be able to get something done. | 18:17 |
| morgan | that isn't a bad idea | 18:17 |
| morgan | pick a day, carve out a chunk of time (I recommend against tuesdays) | 18:17 |
| stevemar | sounds like a fun | 18:17 |
| morgan | unless a bunch of meetings all change timeslots | 18:17 |
| morgan | (like TC, etc) | 18:18 |
| dstanek | bknudson: https://etherpad.openstack.org/p/keystone-test-restructuring | 18:18 |
| stevemar | we could have a hangout that repeats, i think the URL stays the same | 18:18 |
| dstanek | i was thinking Friday i'd just hang out in a Hangout | 18:18 |
| bknudson | dstanek: we've made some progress on your list. | 18:19 |
| dstanek | yes, been getting there | 18:19 |
| dstanek | i should start adding more! | 18:19 |
| openstackgerrit | Merged openstack/keystone: Update the examples used for the trusted_dashboard option https://review.openstack.org/225987 | 18:19 |
| bknudson | I wanted to focus the hackathon on unit testing vs scenario testing (or whatever we should call the test_v3_*) | 18:20 |
| stevemar | dstanek: it sounds like we have some immediately goals we want to cross off the list first, lets keep the invite list to the hackathon small for the first few times | 18:21 |
| stevemar | it'll help to iron out any kinks | 18:21 |
| stevemar | then we can open it up | 18:21 |
| openstackgerrit | Merged openstack/keystone: Open Mitaka development https://review.openstack.org/226356 | 18:21 |
| morgan | https://twitter.com/MdrnStm/status/646388906322206722 | 18:21 |
| dstanek | stevemar: i'll create a hangout for friday and just invite a handful of people | 18:21 |
| dstanek | if that day doesn't work we can change it | 18:22 |
| *** shaleh has quit IRC | 18:22 | |
| *** morgan changes topic to "Mitaka Development Cycle open for Keystone! Good Job Everyone! | Expect -2 holds to be lifted in the next couple days." | 18:22 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone: Updating sample configuration file https://review.openstack.org/226483 | 18:23 |
| stevemar | thats a good little robot | 18:23 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone: Updating sample configuration file https://review.openstack.org/226483 | 18:24 |
| henrynash | that’s a repeating little robot | 18:25 |
| bknudson | robot's having a tough time telling when the file hasn't changed | 18:25 |
| morgan | going to need to backport that to stable | 18:25 |
| morgan | but. | 18:25 |
| stevemar | henrynash: bad robot http://www.thewrap.com/wp-content/uploads/2015/04/Bad-Robot.jpg | 18:25 |
| henrynash | build by robots: https://www.youtube.com/watch?v=FU-tuY0Z7nQ | 18:27 |
| slberger | Does anyone know any good ways for debugging latency in keystone? | 18:27 |
| morgan | slberger: what kind of latency | 18:27 |
| morgan | slberger: you need to be a bit more specific | 18:28 |
| morgan | I'll go through and un -2 lots of things in the next couple days | 18:28 |
| morgan | fyi. | 18:28 |
| morgan | so by thursday evening everything should be clear. | 18:28 |
| slberger | morgan, when making keystone requests | 18:28 |
| morgan | slberger: what kinds of keystone requests? Authentication? Token Validation? Crud Actions? | 18:29 |
| *** amakarov has quit IRC | 18:29 | |
| morgan | slberger: and some actions are much more punitive than others. | 18:29 |
| *** kiran-r has quit IRC | 18:29 | |
| slberger | morgan, all requests for the most part, the most significant increase in latency that we are seeing is from creation of projects | 18:30 |
| morgan | slberger: and the other question I have is what is a "significant increase in latency" you're noticing? | 18:30 |
| slberger | morgan, ~70% increase | 18:31 |
| morgan | slberger: also what version of Keystone are you running? | 18:31 |
| slberger | morgan, v2 | 18:31 |
| morgan | slberger: kilo? Juno? Icehouse? | 18:31 |
| slberger | morgan, ohh sorry kilo | 18:32 |
| morgan | slberger: I can see a couple places to look: 1) If you are using UUID tokens and the SQL token backend, make sure you've flushed the token table. | 18:32 |
| slberger | morgan, we have moved to fernet tokens | 18:32 |
| morgan | ok | 18:33 |
| morgan | hm. | 18:33 |
| morgan | Apache or Eventlet based keystone? | 18:33 |
| slberger | morgan, apache | 18:33 |
| dolphm | slberger: how many items are in your service catalog? | 18:33 |
| morgan | dolphm: ah good question | 18:33 |
| slberger | morgan, I will need to check that real quick | 18:34 |
| dolphm | slberger: we've noticed a performance *drop* on operations that require validating fernet tokens that was introduced sometime between late kilo-2 and stable/kilo | 18:34 |
| *** itlinux has joined #openstack-keystone | 18:34 | |
| dolphm | slberger: lbragstad has a couple patches working to improve performance in that regard ( lbragstad: links? ) | 18:34 |
| *** _cjones_ has quit IRC | 18:36 | |
| *** jsavak has quit IRC | 18:36 | |
| *** itlinux has quit IRC | 18:38 | |
| *** jsavak has joined #openstack-keystone | 18:38 | |
| *** ayoung has quit IRC | 18:39 | |
| slberger | dolphm, morgan, there are 11 items in the service catalog, barbican, ceilometer, cinder, cinderv2, glance, heat, heat-cfn, keystone, neutron, nova, swift | 18:40 |
| stevemar | slberger: not exactly an insane amount of things | 18:42 |
| dolphm | nope | 18:42 |
| dolphm | slberger: single region? | 18:43 |
| slberger | dolphm, the original increase was found before it became multi region, but the environment is currently multi region | 18:44 |
| lbragstad | dolphm: for the caching stuff? one sec | 18:45 |
| dstanek | what about the crypt_strength? | 18:45 |
| lbragstad | https://review.openstack.org/#/q/status:open+project:openstack/keystone+branch:master+topic:caching,n,z | 18:45 |
| dolphm | slberger: how many regions appear in the service catalog now? | 18:46 |
| dolphm | lbragstad: i haven't looked at those in a while. what's the next step for those patches? | 18:46 |
| lbragstad | dolphm: they were passing jenkins not long ago, I need to investigate | 18:47 |
| dstanek | dolphm: we need to address the invalidation concerns | 18:47 |
| lbragstad | ah, yes | 18:47 |
| dstanek | slberger: did you set a custom crypt_strength? | 18:47 |
| lbragstad | that was something henrynash and david8hu mentioned | 18:48 |
| slberger | dolphm, we don't have regions in the service catalog, we have 2 regions worth of endpoints | 18:48 |
| slberger | dstanek, is that a keystone config setting? | 18:49 |
| *** aix has quit IRC | 18:49 | |
| dstanek | slberger: yes, for a while our default was way too high | 18:49 |
| slberger | dstanek, I don't think we set anything for that | 18:50 |
| slberger | dstanek, what does that option do exactly | 18:51 |
| *** _cjones_ has joined #openstack-keystone | 18:51 | |
| dstanek | slberger: it sets the number of times the crypto hashing happens (or how much CPU you want to use up :) | 18:52 |
| dolphm | slberger: specifically the number of times passwords are iteratively hashed before being stored in SQL | 18:52 |
| dstanek | slberger: if you don't set it and your config says the default is 1000, then you're fine | 18:52 |
| dolphm | slberger: it's explicitly designed to make it more expensive (in terms of time) to brute force a password if the user table is compromised | 18:53 |
| dstanek | oops...default is 10000 - left off a 0 | 18:53 |
| *** su_zhang has quit IRC | 18:53 | |
| dolphm | dstanek: but in this case, performance degredation is on all calls to keystone, not just auth | 18:53 |
| dolphm | slberger: you might want to tweak your performance vs security on that one, but i'll only effect authentication calls to keystone that contain passwords | 18:54 |
| tjcocozz | mitaka | 18:54 |
| *** ayoung has joined #openstack-keystone | 18:54 | |
| *** ChanServ sets mode: +v ayoung | 18:54 | |
| tjcocozz | I'm sorry i was searching for something | 18:54 |
| *** tsymanczyk has quit IRC | 18:58 | |
| *** tsymancz1k has quit IRC | 18:59 | |
| *** lhcheng_ has quit IRC | 19:00 | |
| *** ankita_wagh has quit IRC | 19:00 | |
| *** ankita_wagh has joined #openstack-keystone | 19:00 | |
| bknudson | we can remove eventlet support | 19:01 |
| dolphm | bknudson: like, now? | 19:01 |
| bknudson | should be able to, with mitaka open | 19:01 |
| dolphm | bknudson: that should be a mailing list announcement | 19:01 |
| bknudson | Running keystone via eventlet is deprecated as of Kilo in favor of running in a WSGI server (e.g. mod_wsgi). Support for keystone under eventlet will be removed in the "M"-Release. | 19:05 |
| bknudson | so it was deprecated all of L | 19:05 |
| slberger | dolphm, dstanek, thanks for the info it gives me something to look into | 19:06 |
| dolphm | bknudson: was? we just cut L | 19:07 |
| bknudson | right, so master is M and we can remove it | 19:08 |
| dolphm | bknudson: oh i just meant it's worthy of some cross project celebration | 19:08 |
| *** tsymanczyk has joined #openstack-keystone | 19:08 | |
| bknudson | I'll put it on my list, but maybe someone will get to it before me. | 19:08 |
| *** tsymanczyk is now known as Guest61858 | 19:08 | |
| *** annasort has quit IRC | 19:10 | |
| *** e0ne has joined #openstack-keystone | 19:10 | |
| *** mmo has joined #openstack-keystone | 19:11 | |
| *** mmo has quit IRC | 19:11 | |
| *** Mmo has joined #openstack-keystone | 19:12 | |
| *** exploreshaifali has joined #openstack-keystone | 19:14 | |
| Mmo | Hi. Is there any python api to get list of all group users? I know that i can get list of a group users by api.keystone.users.list(group_id). But i want all goups users. Is there any python api to do that? | 19:15 |
| *** ankita_w_ has joined #openstack-keystone | 19:19 | |
| *** ankita_wagh has quit IRC | 19:19 | |
| *** su_zhang has joined #openstack-keystone | 19:19 | |
| *** ankita_w_ has quit IRC | 19:20 | |
| *** gyee has quit IRC | 19:20 | |
| *** ankita_wagh has joined #openstack-keystone | 19:20 | |
| *** Mmo has quit IRC | 19:22 | |
| stevemar | looks like mmo left before i could ask for clarification | 19:23 |
| stevemar | oh sounds like he wants all the users in all the groups? | 19:24 |
| stevemar | call list all gorups? then list users for every group? | 19:24 |
| *** su_zhang has quit IRC | 19:29 | |
| *** jsavak has quit IRC | 19:36 | |
| *** jsavak has joined #openstack-keystone | 19:37 | |
| *** tsymancz3k has joined #openstack-keystone | 19:38 | |
| *** su_zhang has joined #openstack-keystone | 19:38 | |
| *** annasort has joined #openstack-keystone | 19:40 | |
| *** urulama has quit IRC | 19:43 | |
| *** urulama has joined #openstack-keystone | 19:44 | |
| *** jsavak has quit IRC | 19:44 | |
| *** jsavak has joined #openstack-keystone | 19:44 | |
| *** bradjones has joined #openstack-keystone | 19:46 | |
| *** bradjones has quit IRC | 19:46 | |
| *** bradjones has joined #openstack-keystone | 19:46 | |
| *** _pece has quit IRC | 19:48 | |
| openstackgerrit | Henrique Truta proposed openstack/keystone: Restricting domain_id update https://review.openstack.org/207218 | 19:54 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone: Updating sample configuration file https://review.openstack.org/226483 | 19:55 |
| *** tsymancz3k is now known as tsymanczyk | 19:56 | |
| *** jamielennox|away is now known as jamielennox | 20:03 | |
| *** lhcheng has joined #openstack-keystone | 20:04 | |
| *** ChanServ sets mode: +v lhcheng | 20:04 | |
| *** csoukup has quit IRC | 20:07 | |
| *** jecarey has left #openstack-keystone | 20:09 | |
| openstackgerrit | Joshua Harlow proposed openstack/oslo.policy: Use requests in http check instead of urllib https://review.openstack.org/226122 | 20:10 |
| *** nicodemos has quit IRC | 20:15 | |
| *** gordc has quit IRC | 20:17 | |
| *** jaosorior has quit IRC | 20:18 | |
| stevemar | bknudson: poke | 20:25 |
| bknudson | stevemar: what's up? | 20:25 |
| stevemar | bknudson: wanted to bounce an idea off of you | 20:25 |
| bknudson | stevemar: shoot! | 20:26 |
| stevemar | the notifications that are generated by keystone, mfisch was saying he wishes he could opt out of some | 20:26 |
| stevemar | i'm thinking that's easy enough to do via a config file change, but enumerating all of them seems tedious | 20:26 |
| bknudson | then don't listen for them | 20:26 |
| stevemar | he doesn't even want the traffic | 20:27 |
| bknudson | put it in oslo.messaging | 20:27 |
| stevemar | bknudson: hmm, put what in oslo.messaging? | 20:27 |
| bknudson | some kind of filtering | 20:27 |
| bknudson | mfish can fork keystone and comment out the lines he doesn't like | 20:28 |
| stevemar | bknudson: i don't think he wants to do that :) | 20:29 |
| *** su_zhang has quit IRC | 20:30 | |
| *** kiranr has quit IRC | 20:32 | |
| *** jaosorior has joined #openstack-keystone | 20:32 | |
| stevemar | i dont think *we* wnat him doing that either | 20:32 |
| openstackgerrit | Julien Danjou proposed openstack/keystone: wsgi: fix base_url finding https://review.openstack.org/226464 | 20:34 |
| tjcocozz | I was wondering, if this page not generating the table of contents correctly, part of a keystone problem or doc-tools? http://docs.openstack.org/developer/python-keystoneclient/api/keystoneclient.v3.contrib.federation.html#module-keystoneclient.v3.contrib.federation.base | 20:38 |
| *** doug-fish has quit IRC | 20:39 | |
| *** gyee has joined #openstack-keystone | 20:39 | |
| *** ChanServ sets mode: +v gyee | 20:39 | |
| stevemar | tjcocozz: i'd say the theme we use | 20:39 |
| stevemar | oslosphinx theme | 20:39 |
| *** su_zhang has joined #openstack-keystone | 20:40 | |
| *** tonytan4ever has quit IRC | 20:40 | |
| stevemar | tjcocozz: if you're brave enough and know enough css: https://github.com/openstack/oslosphinx | 20:40 |
| tjcocozz | I will take a look :p | 20:40 |
| tjcocozz | thank you | 20:40 |
| stevemar | tjcocozz: https://github.com/openstack/oslosphinx/blob/af39c45cca2a77a78c062f9865f23a987e3613f7/oslosphinx/theme/openstack/layout.html#L17 | 20:43 |
| tjcocozz | I don't know django | 20:46 |
| stevemar | dstanek: dolphm lbragstad gyee henrynash morgan ayoung lhcheng bknudson jamielennox topol samueldmq it's release note time - https://wiki.openstack.org/wiki/ReleaseNotes/Liberty#OpenStack_Identity_.28Keystone.29 | 20:48 |
| samueldmq | stevemar: ++ | 20:48 |
| lbragstad | oooooo shiny | 20:48 |
| lbragstad | shiney?* | 20:48 |
| dolphm | stevemar: so, we need to start by making a list of every blueprint and wishlist bug that merged in liberty | 20:48 |
| samueldmq | stevemar: are we going to work in an etherpad ? and then c&p there, as dolphm and me did last cycle | 20:49 |
| stevemar | dolphm: yep | 20:49 |
| gyee | stevemar, yes indeed, thanks for the reminder | 20:49 |
| dolphm | stevemar: and any critical / high bugs that were fixed but reported in a previous release | 20:49 |
| lbragstad | https://etherpad.openstack.org/p/keystone-liberty-release-notes | 20:49 |
| dolphm | stevemar: and then start replacing that list of blueprint links with tl;dr's | 20:49 |
| stevemar | dolphm: yeah, just getting the ball rolling | 20:49 |
| stevemar | lbragstad: thx! | 20:49 |
| stevemar | everyone can now use: https://etherpad.openstack.org/p/keystone-liberty-release-notes | 20:50 |
| lbragstad | stevemar: np | 20:50 |
| *** e0ne has quit IRC | 20:51 | |
| samueldmq | stevemar: where can we look at blueprints/bugs that merged this cycle? | 20:52 |
| stevemar | samueldmq: i go to: https://launchpad.net/keystone/+milestone/liberty-3 https://launchpad.net/keystone/+milestone/liberty-2 https://launchpad.net/keystone/+milestone/liberty-1 | 20:53 |
| dolphm | whoever is adding subjects to the release notes, can you start with links instead? | 20:53 |
| dolphm | it makes it easier to see what needs to be written still | 20:53 |
| *** diazjf has left #openstack-keystone | 20:54 | |
| gyee | dolphm, you want the spec link right? | 20:54 |
| dolphm | gyee: it's easier to start with links to blueprints, since blueprints link to everything, including the release milestones etc | 20:54 |
| gyee | dolphm, sure | 20:55 |
| samueldmq | dolphm: so we need to make the release notes by L1/l2/l3? | 20:55 |
| *** dsirrine has quit IRC | 20:56 | |
| dolphm | samueldmq: no, but the milestone summaries are where you get links to Implemented blueprints from :) | 20:57 |
| dolphm | samueldmq: release notes are ultimately sorted by impact, but that's basically the last step | 20:58 |
| stevemar | samueldmq: yeah, impact, not so much the order | 20:58 |
| stevemar | dolphm: why you delete my deprecation section :( | 20:58 |
| bknudson | we should change the name of keystone to bedrock | 20:59 |
| dolphm | stevemar: because it's on the wiki? | 20:59 |
| lbragstad | dolphm: stevemar do you want the fernet links in there? | 20:59 |
| samueldmq | dolphm: stevemar yeah, Keystone now does this and that! | 21:00 |
| bknudson | can we sneak that in to rc2? | 21:00 |
| dolphm | lbragstad: what fernet links? | 21:00 |
| lbragstad | dolphm: https://goo.gl/YOJfv9 all of those that were "fix committed" in liberty. | 21:00 |
| dolphm | lbragstad: unless there's a significant bug fixed in liberty that cannot be backported to previous stable branches, it doesn't need to be in the release notes | 21:01 |
| lbragstad | ok | 21:01 |
| dolphm | basically only need to document the reasons why (or why not) people should upgrade, and any relevant notes that are helpful along the way | 21:02 |
| *** lhcheng has quit IRC | 21:02 | |
| *** lhcheng has joined #openstack-keystone | 21:02 | |
| *** ChanServ sets mode: +v lhcheng | 21:02 | |
| stevemar | dolphm: replied via etherpad | 21:04 |
| *** lhcheng has quit IRC | 21:04 | |
| *** lhcheng has joined #openstack-keystone | 21:04 | |
| *** ChanServ sets mode: +v lhcheng | 21:04 | |
| *** su_zhang has quit IRC | 21:05 | |
| stevemar | i'm glad we don't have this problem: https://review.openstack.org/#/c/198732/ | 21:06 |
| samueldmq | dolphm: basically we describe things that were exclusively introduced/fixed in this cycle | 21:06 |
| dolphm | samueldmq: yep | 21:06 |
| dolphm | samueldmq: that's generally just features. we only have a *very* short list of true bug fixes that are featured in release notes. usually those are fixed as the result of blueprint implementations, anyway. | 21:07 |
| *** jaosorior has quit IRC | 21:07 | |
| dolphm | this is also the point at which it bites us if absolutely every bug hasn't already been properly triaged | 21:08 |
| samueldmq | dolphm: ++ I remember we discussed once that bugs should only be for something significant that could be in the release notes | 21:08 |
| samueldmq | dolphm: internal fixes shoudln't need to link to bugs, like doc fixes, etc | 21:09 |
| dolphm | samueldmq: right | 21:09 |
| *** ayoung has quit IRC | 21:09 | |
| dolphm | otherwise, those bugs become a big distraction later (i.e. now) | 21:09 |
| dolphm | tracking things that need not be tracked | 21:09 |
| samueldmq | dolphm: cool, proper triage would make the work of creating release notes much easier | 21:10 |
| samueldmq | dolphm: ++ | 21:10 |
| * dolphm is thinking we should automate the first draft of the release notes for all projects | 21:10 | |
| samueldmq | yes, we definitely can do that | 21:11 |
| *** raildo is now known as raildo-afk | 21:12 | |
| lifeless | dolphm: you thinking something different to reno ? | 21:15 |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Add user domain info to federated fernet tokens https://review.openstack.org/213742 | 21:17 |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Add unit tests for token_to_auth_context https://review.openstack.org/213797 | 21:17 |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Unit tests for fernet test_validate_v3_token https://review.openstack.org/226557 | 21:17 |
| dolphm | lifeless: reno? | 21:18 |
| dolphm | lbragstad: etherpad doesn't know to ignore the parens you're putting on all the bug links, so i dropped all the parens | 21:20 |
| dolphm | lbragstad: the bug links themselves should be dropped by the time we're done, anyway | 21:20 |
| *** tsymanczyk has quit IRC | 21:20 | |
| lbragstad | dolphm: ok, I don't think I added anything to it yet | 21:20 |
| *** Guest61858 has quit IRC | 21:21 | |
| *** thiagop has quit IRC | 21:21 | |
| *** ayoung has joined #openstack-keystone | 21:22 | |
| *** ChanServ sets mode: +v ayoung | 21:22 | |
| *** jsavak has quit IRC | 21:24 | |
| lifeless | dolphm: the in-tree release notes thing we've (mainly dhellmann) put together | 21:25 |
| *** IBMDavid has joined #openstack-keystone | 21:26 | |
| dolphm | lifeless: i haven't seen this project before, but i'm also not really clear on how it's supposed to be used. it looks to entirely replace the wiki-based release notes? | 21:28 |
| dolphm | lifeless: i was referring to automating the creation of a first draft for our wiki-based release notes by scraping launchpad blueprints & wishlist bugs to produce a list of things to summarize as action items for release note authors | 21:28 |
| dolphm | lifeless: also, please tell me you have an IRC alert set on "automate" ;) | 21:29 |
| *** ayoung has quit IRC | 21:29 | |
| *** pauloewerton has quit IRC | 21:30 | |
| lifeless | dolphm: I don't, but perhaps I should :) | 21:31 |
| lifeless | dolphm: yes, it replaces the wiki thing | 21:31 |
| lifeless | dolphm: federates it out to each project, and lets them be built up over the cycle | 21:31 |
| dolphm | lifeless: cool, that's a much better process overall, then | 21:32 |
| *** alejandrito has quit IRC | 21:32 | |
| lifeless | dolphm: we think so :) | 21:32 |
| dolphm | lifeless: and renders launchpad a touch more useless overall! | 21:32 |
| lifeless | dolphm: ouch :( | 21:33 |
| *** alejandrito has joined #openstack-keystone | 21:33 | |
| samueldmq | dolphm: stevemar k, just finished putting the bug description + my view on whether getting them in release notes in all the wishlisted bugs | 21:34 |
| dolphm | samueldmq: i'm looking through your removal proposals now -- and probably re-triaging those bugs as Low | 21:35 |
| samueldmq | dolphm: ++ | 21:36 |
| samueldmq | dolphm: do things removed as of Liberty need to be listed ? | 21:37 |
| dolphm | samueldmq: there's a section on the wiki, yes | 21:37 |
| dolphm | samueldmq: there's only a couple items listed, you can just edit it there | 21:37 |
| dolphm | samueldmq: deprecated in liberty + removed as of liberty | 21:38 |
| samueldmq | dolphm: okay, so in the Deprecations seciton | 21:38 |
| samueldmq | dolphm: kk | 21:38 |
| dolphm | samueldmq: i think so. they're definitely not "key new features," but i suppose they could also fit in as upgrade notes? "this thing is no longer available" | 21:38 |
| dolphm | samueldmq: i think i just convinced myself they belong in upgrade notes | 21:39 |
| samueldmq | dolphm: makes sense to me | 21:39 |
| *** phalmos has quit IRC | 21:42 | |
| *** topol has quit IRC | 21:44 | |
| *** tsymancz1k has joined #openstack-keystone | 21:45 | |
| *** su_zhang has joined #openstack-keystone | 21:46 | |
| samueldmq | dolphm: brb | 21:52 |
| lbragstad | has anyone hit this on devstack recently? http://cdn.pasteraw.com/3287rkhxwi654d7qxv11vwprsv6o316 | 21:54 |
| *** hrou has quit IRC | 21:54 | |
| dolphm | lbragstad: what's /home/vagrant/projects/devstack/lib/keystone ? | 21:58 |
| dolphm | lbragstad: is that in the gate?? | 21:58 |
| *** su_zhang has quit IRC | 21:58 | |
| lbragstad | dolphm: that's where devstack's repo is | 22:00 |
| lbragstad | so - https://github.com/openstack-dev/devstack/blob/master/lib/keystone | 22:01 |
| lbragstad | it's failing on the entry point | 22:01 |
| lbragstad | because /usr/local/bin/keystone-manage doesn't exist. | 22:01 |
| *** lhcheng has quit IRC | 22:02 | |
| *** lhcheng has joined #openstack-keystone | 22:03 | |
| *** ChanServ sets mode: +v lhcheng | 22:03 | |
| stevemar | lbragstad: thats a change for the release notes | 22:03 |
| lbragstad | stevemar: yeah I suppose it probably is | 22:03 |
| *** mylu has joined #openstack-keystone | 22:05 | |
| *** timburke has quit IRC | 22:06 | |
| stevemar | lbragstad: i made a quick note under the stevedore blueprint | 22:07 |
| *** btully has quit IRC | 22:07 | |
| *** timburke has joined #openstack-keystone | 22:07 | |
| *** jerrygb has joined #openstack-keystone | 22:08 | |
| *** btully has joined #openstack-keystone | 22:08 | |
| *** edmondsw has quit IRC | 22:10 | |
| *** Guest61243 is now known as mfisch | 22:11 | |
| *** mfisch is now known as Guest50715 | 22:12 | |
| *** gus has quit IRC | 22:12 | |
| *** Guest50715 is now known as mfisch | 22:13 | |
| *** mfisch has quit IRC | 22:13 | |
| *** mfisch has joined #openstack-keystone | 22:13 | |
| *** gus has joined #openstack-keystone | 22:14 | |
| *** tsymancz4k has joined #openstack-keystone | 22:15 | |
| *** csoukup has joined #openstack-keystone | 22:19 | |
| *** boris-42 has quit IRC | 22:22 | |
| dolphm | lbragstad: which build are you seeing that in? | 22:23 |
| *** boris-42 has joined #openstack-keystone | 22:24 | |
| *** briancurtin has quit IRC | 22:26 | |
| *** darrenc has quit IRC | 22:27 | |
| *** mylu has quit IRC | 22:28 | |
| *** mylu has joined #openstack-keystone | 22:28 | |
| *** briancurtin has joined #openstack-keystone | 22:28 | |
| *** csoukup has quit IRC | 22:29 | |
| *** mylu has quit IRC | 22:29 | |
| *** mylu has joined #openstack-keystone | 22:30 | |
| *** darrenc has joined #openstack-keystone | 22:30 | |
| *** dsirrine has joined #openstack-keystone | 22:32 | |
| *** mylu has quit IRC | 22:33 | |
| *** mylu has joined #openstack-keystone | 22:33 | |
| *** lhcheng_ has joined #openstack-keystone | 22:36 | |
| *** lhcheng has quit IRC | 22:36 | |
| *** IBMDavid has quit IRC | 22:37 | |
| *** mylu has quit IRC | 22:38 | |
| *** KarthikB has quit IRC | 22:40 | |
| *** ayoung has joined #openstack-keystone | 22:44 | |
| *** ChanServ sets mode: +v ayoung | 22:44 | |
| *** topol has joined #openstack-keystone | 22:45 | |
| *** ChanServ sets mode: +v topol | 22:45 | |
| *** ankita_w_ has joined #openstack-keystone | 22:49 | |
| *** topol has quit IRC | 22:49 | |
| *** su_zhang has joined #openstack-keystone | 22:51 | |
| *** tsymancz4k has quit IRC | 22:51 | |
| *** tsymancz1k has quit IRC | 22:52 | |
| *** ankita_wagh has quit IRC | 22:52 | |
| *** ankita_wagh has joined #openstack-keystone | 22:53 | |
| *** alejandrito has quit IRC | 22:55 | |
| *** annasort has quit IRC | 22:56 | |
| *** topol has joined #openstack-keystone | 22:56 | |
| *** ChanServ sets mode: +v topol | 22:56 | |
| *** ankita_w_ has quit IRC | 22:56 | |
| dstanek | do we automate the release notes at all? | 23:05 |
| *** zzzeek has quit IRC | 23:08 | |
| *** tsymancz2k has joined #openstack-keystone | 23:14 | |
| *** ankita_w_ has joined #openstack-keystone | 23:15 | |
| *** ankita_wagh has quit IRC | 23:15 | |
| *** dims has quit IRC | 23:18 | |
| *** tsymancz3k has joined #openstack-keystone | 23:19 | |
| *** slberger has left #openstack-keystone | 23:20 | |
| *** ankita_wagh has joined #openstack-keystone | 23:20 | |
| *** ankita_w_ has quit IRC | 23:20 | |
| *** hrou has joined #openstack-keystone | 23:21 | |
| dolphm | dstanek: no, but it's coming and not wiki-based github.com/openstack/reno | 23:22 |
| *** zzzeek has joined #openstack-keystone | 23:22 | |
| *** stevemar has quit IRC | 23:23 | |
| *** darrenc is now known as darrenc_afk | 23:30 | |
| openstackgerrit | Joshua Harlow proposed openstack/oslo.policy: Use requests in http check instead of urllib https://review.openstack.org/226122 | 23:32 |
| *** stevemar has joined #openstack-keystone | 23:32 | |
| *** ChanServ sets mode: +v stevemar | 23:32 | |
| *** stevemar has quit IRC | 23:36 | |
| *** markvoelker has quit IRC | 23:40 | |
| *** su_zhang has quit IRC | 23:43 | |
| *** darrenc_afk is now known as darrenc | 23:46 | |
| *** dims has joined #openstack-keystone | 23:54 | |
| *** dims has quit IRC | 23:55 | |
| *** Guest18166 has joined #openstack-keystone | 23:55 | |
| openstackgerrit | Merged openstack/keystone: Updating sample configuration file https://review.openstack.org/226483 | 23:57 |
| *** tonytan4ever has joined #openstack-keystone | 23:59 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!
