| *** jasonsb_ has joined #openstack-keystone | 00:00 | |
| *** jasonsb has quit IRC | 00:00 | |
| *** topol has quit IRC | 00:08 | |
| *** topol has joined #openstack-keystone | 00:08 | |
| *** ChanServ sets mode: +v topol | 00:08 | |
| *** EinstCrazy has quit IRC | 00:13 | |
| *** roxanagh_ has joined #openstack-keystone | 00:17 | |
| *** amit213 has quit IRC | 00:20 | |
| *** amit213 has joined #openstack-keystone | 00:21 | |
| *** roxanagh_ has quit IRC | 00:22 | |
| *** shadower has quit IRC | 00:23 | |
| *** shadower has joined #openstack-keystone | 00:23 | |
| *** pumaranikar has joined #openstack-keystone | 00:26 | |
| *** mylu has quit IRC | 00:30 | |
| *** tsymancz1k has quit IRC | 00:33 | |
| *** Guest78253 has quit IRC | 00:33 | |
| *** gyee has quit IRC | 00:36 | |
| *** hidekazu has joined #openstack-keystone | 00:36 | |
| *** su_zhang has quit IRC | 00:36 | |
| *** dims_ has joined #openstack-keystone | 00:38 | |
| *** mylu has joined #openstack-keystone | 00:44 | |
| *** pumaranikar has quit IRC | 00:48 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone: Updated from global requirements https://review.openstack.org/237293 | 00:50 |
|---|---|---|
| *** browne has quit IRC | 00:55 | |
| *** mylu has quit IRC | 00:59 | |
| *** lhcheng_ has quit IRC | 01:09 | |
| *** EinstCrazy has joined #openstack-keystone | 01:11 | |
| *** davechen has joined #openstack-keystone | 01:15 | |
| *** roxanagh_ has joined #openstack-keystone | 01:19 | |
| *** pumaranikar has joined #openstack-keystone | 01:21 | |
| *** roxanagh_ has quit IRC | 01:24 | |
| *** richm has quit IRC | 01:26 | |
| *** jasonsb_ has quit IRC | 01:28 | |
| *** lhcheng has joined #openstack-keystone | 01:32 | |
| *** ChanServ sets mode: +v lhcheng | 01:32 | |
| *** wwwjfy has quit IRC | 01:40 | |
| *** markvoelker has joined #openstack-keystone | 01:40 | |
| *** dims_ has quit IRC | 01:41 | |
| *** pumaranikar has quit IRC | 01:44 | |
| *** tqtran has quit IRC | 01:46 | |
| *** mylu has joined #openstack-keystone | 01:48 | |
| *** pumaranikar has joined #openstack-keystone | 01:51 | |
| *** wanghua has joined #openstack-keystone | 01:55 | |
| *** wanghua has joined #openstack-keystone | 01:56 | |
| *** spandhe has joined #openstack-keystone | 02:04 | |
| openstackgerrit | Merged openstack/oslo.policy: Updated from global requirements https://review.openstack.org/237310 | 02:10 |
| *** jbell8 has quit IRC | 02:11 | |
| *** devlaps has quit IRC | 02:15 | |
| *** pumaranikar has quit IRC | 02:17 | |
| *** browne has joined #openstack-keystone | 02:18 | |
| *** spandhe has quit IRC | 02:18 | |
| *** jbell8 has joined #openstack-keystone | 02:19 | |
| *** spandhe has joined #openstack-keystone | 02:20 | |
| *** roxanagh_ has joined #openstack-keystone | 02:20 | |
| *** roxanagh_ has quit IRC | 02:25 | |
| *** pumaranikar has joined #openstack-keystone | 02:28 | |
| *** devlaps has joined #openstack-keystone | 02:29 | |
| *** jasonsb has joined #openstack-keystone | 02:29 | |
| *** jasonsb has quit IRC | 02:29 | |
| *** jasonsb has joined #openstack-keystone | 02:29 | |
| *** devlaps has quit IRC | 02:40 | |
| *** dims_ has joined #openstack-keystone | 02:41 | |
| *** dims_ has quit IRC | 02:47 | |
| *** wwwjfy has joined #openstack-keystone | 02:51 | |
| *** mylu_ has joined #openstack-keystone | 03:09 | |
| *** mylu has quit IRC | 03:13 | |
| *** pumaranikar has quit IRC | 03:14 | |
| *** jbell8 has quit IRC | 03:17 | |
| *** roxanagh_ has joined #openstack-keystone | 03:21 | |
| *** roxanagh_ has quit IRC | 03:26 | |
| *** GB21 has joined #openstack-keystone | 03:27 | |
| openstackgerrit | ZhiQiang Fan proposed openstack/python-keystoneclient: remove unnecessary FakeLog class in test code https://review.openstack.org/236824 | 03:28 |
| *** agireud has quit IRC | 03:33 | |
| *** agireud has joined #openstack-keystone | 03:33 | |
| *** links has joined #openstack-keystone | 03:39 | |
| *** dims_ has joined #openstack-keystone | 03:43 | |
| *** GB21 has quit IRC | 03:44 | |
| *** GB21 has joined #openstack-keystone | 03:45 | |
| *** mylu_ has quit IRC | 03:46 | |
| *** mylu has joined #openstack-keystone | 03:47 | |
| *** dims_ has quit IRC | 03:48 | |
| *** mylu has quit IRC | 03:51 | |
| *** links has quit IRC | 03:52 | |
| *** GB21 has quit IRC | 03:56 | |
| *** jaosorior has joined #openstack-keystone | 03:59 | |
| *** spandhe has quit IRC | 04:00 | |
| *** zqfan has joined #openstack-keystone | 04:08 | |
| zqfan | Hi, good afternoon, I have some simple questions: Keystone API v2 is deprecated since when? Kilo release? What the time it will be removed? Mitaka or N*? | 04:11 |
| *** links has joined #openstack-keystone | 04:15 | |
| *** roxanagh_ has joined #openstack-keystone | 04:23 | |
| *** ajaya has joined #openstack-keystone | 04:25 | |
| *** roxanagh_ has quit IRC | 04:29 | |
| *** stevemar_ has quit IRC | 04:34 | |
| *** alex_xu has quit IRC | 04:34 | |
| *** alex_xu has joined #openstack-keystone | 04:35 | |
| jamielennox | zqfan: it's deprecated but since it's such a fundamental part of openstack that has been in use for so long it isn't being removed any time soon | 04:41 |
| jamielennox | zqfan: hopefully we can remove the v2 api in N but the v2 authentication will probably live longer than that | 04:42 |
| *** dims_ has joined #openstack-keystone | 04:45 | |
| *** dims_ has quit IRC | 04:50 | |
| *** pumaranikar has joined #openstack-keystone | 04:53 | |
| *** su_zhang has joined #openstack-keystone | 04:57 | |
| *** e0ne has joined #openstack-keystone | 05:01 | |
| *** stevemar_ has joined #openstack-keystone | 05:02 | |
| *** ChanServ sets mode: +o stevemar_ | 05:02 | |
| *** boris-42 has joined #openstack-keystone | 05:09 | |
| *** pumaranikar has quit IRC | 05:15 | |
| openstackgerrit | Jin Nan Zhang proposed openstack/keystone: change stackforge url to openstack url https://review.openstack.org/237396 | 05:16 |
| *** e0ne has quit IRC | 05:23 | |
| zqfan | jamielennox: Thank you very much! | 05:23 |
| *** roxanagh_ has joined #openstack-keystone | 05:25 | |
| *** jbell8 has joined #openstack-keystone | 05:26 | |
| *** e0ne has joined #openstack-keystone | 05:26 | |
| *** GB21 has joined #openstack-keystone | 05:27 | |
| *** zqfan has left #openstack-keystone | 05:27 | |
| *** stevemar_ has quit IRC | 05:28 | |
| *** stevemar_ has joined #openstack-keystone | 05:29 | |
| *** ChanServ sets mode: +o stevemar_ | 05:29 | |
| *** roxanagh_ has quit IRC | 05:32 | |
| *** urulama_ has quit IRC | 05:32 | |
| *** urulama has joined #openstack-keystone | 05:32 | |
| openstackgerrit | Jin Nan Zhang proposed openstack/keystone: change stackforge url to openstack url https://review.openstack.org/237396 | 05:37 |
| *** jamielennox is now known as jamielennox|away | 05:39 | |
| *** dikonoor has joined #openstack-keystone | 05:40 | |
| *** edmondsw has quit IRC | 05:41 | |
| *** Nirupama has joined #openstack-keystone | 05:43 | |
| *** dims_ has joined #openstack-keystone | 05:47 | |
| *** su_zhang has quit IRC | 05:50 | |
| *** topol has quit IRC | 05:50 | |
| *** stevemar_ has quit IRC | 05:51 | |
| *** dims_ has quit IRC | 05:52 | |
| *** GB21 has quit IRC | 05:55 | |
| *** josecastroleon has joined #openstack-keystone | 06:01 | |
| *** e0ne has quit IRC | 06:05 | |
| *** exploreshaifali has joined #openstack-keystone | 06:06 | |
| *** lsmola_ has joined #openstack-keystone | 06:13 | |
| *** stevemar_ has joined #openstack-keystone | 06:14 | |
| *** ChanServ sets mode: +o stevemar_ | 06:14 | |
| *** ParsectiX has joined #openstack-keystone | 06:15 | |
| *** lhcheng_ has joined #openstack-keystone | 06:24 | |
| *** markvoelker_ has joined #openstack-keystone | 06:26 | |
| *** lhcheng has quit IRC | 06:26 | |
| *** markvoelker has quit IRC | 06:29 | |
| *** e0ne has joined #openstack-keystone | 06:30 | |
| *** tyagiprince2010 has joined #openstack-keystone | 06:35 | |
| tyagiprince2010 | Hey guys, I need help...... | 06:35 |
| tyagiprince2010 | I installed devstack for testing keystone | 06:35 |
| tyagiprince2010 | and i want keystone to use pki token authentication and others as well. | 06:36 |
| tyagiprince2010 | so could you forward me the link where i can see all that with good description. | 06:36 |
| tyagiprince2010 | Thanks. | 06:36 |
| tyagiprince2010 | Already looked at the configuration file section on the keystone page. | 06:37 |
| *** Harsh has joined #openstack-keystone | 06:39 | |
| *** Harsh is now known as Guest94102 | 06:39 | |
| Guest94102 | hi all | 06:39 |
| Guest94102 | Can anyone help me out with keystone authentication | 06:40 |
| stevemar_ | tyagiprince2010: http://docs.openstack.org/developer/keystone/configuration.html#certificates-for-pki and http://docs.openstack.org/developer/keystone/configuration.html#token-provider would be a good place to start | 06:41 |
| Guest94102 | Actually I am doing some customizations | 06:42 |
| Guest94102 | I want to create a SSO web application where in its home page contains different Tabs | 06:42 |
| *** fifieldt has joined #openstack-keystone | 06:43 | |
| Guest94102 | one of the tab will be Openstack and as soon as I click the tab it should show the Dashboard of the Openstack bypassing the login page | 06:43 |
| Guest94102 | Is this scenario is possible with SAML appraoch in Opensatck KILO release | 06:44 |
| *** stevemar_ has quit IRC | 06:44 | |
| *** jaosorior has quit IRC | 06:45 | |
| *** jaosorior has joined #openstack-keystone | 06:45 | |
| *** kragniz has quit IRC | 06:46 | |
| Guest94102 | Can anyone help on that scenario | 06:47 |
| *** dims_ has joined #openstack-keystone | 06:48 | |
| *** akanksha_ has joined #openstack-keystone | 06:51 | |
| *** dims_ has quit IRC | 06:53 | |
| tyagiprince2010 | There is either no auth token in the request or the certificate issuer is not trusted. No auth context will be set. process_request /opt/stack/keystone/keystone/middleware/core.py:311 | 06:56 |
| *** ParsectiX has quit IRC | 06:56 | |
| tyagiprince2010 | on changing the provider to keystone.token.providers.pki.Provider and restarting devstack keystone service, I got this error. | 06:56 |
| tyagiprince2010 | @stevemar_ | 06:56 |
| *** e0ne has quit IRC | 07:05 | |
| tyagiprince2010 | <@stevemar_> : can you tell me the configuration settings for pki setup ? | 07:06 |
| tyagiprince2010 | <breton> Hey breton need help with keystone | 07:07 |
| *** e0ne has joined #openstack-keystone | 07:09 | |
| *** woodster_ has quit IRC | 07:09 | |
| *** e0ne has quit IRC | 07:11 | |
| *** e0ne has joined #openstack-keystone | 07:16 | |
| *** e0ne has quit IRC | 07:19 | |
| *** zqfan has joined #openstack-keystone | 07:20 | |
| tyagiprince2010 | hey need help with the keystone authentication | 07:21 |
| *** pnavarro|off has joined #openstack-keystone | 07:26 | |
| zqfan | Hi, what the parameter endpoint_override means? if I pass Keystone API v2 endpoint to it, it no longer returns full tenant list, but only the tenant the user involved, for example, admin:admin only return admin and demo tenant. I think endpoint_override just force keystoneclient to use it directly, instead of looking up endpoint from Keystone API, but the | 07:31 |
| zqfan | behavior seems different, is this by design or this is a bug? | 07:31 |
| zqfan | problem solved, it needs to be administrator endpoint instead of public endpoint, thanks! | 07:43 |
| *** ParsectiX has joined #openstack-keystone | 07:43 | |
| *** ParsectiX has quit IRC | 07:44 | |
| *** openstackgerrit has quit IRC | 07:46 | |
| *** openstackgerrit has joined #openstack-keystone | 07:47 | |
| *** tyagiprince2010 has quit IRC | 07:48 | |
| *** dims_ has joined #openstack-keystone | 07:49 | |
| *** browne has quit IRC | 07:49 | |
| *** Guest94102 has quit IRC | 07:50 | |
| openstackgerrit | Merged openstack/keystone: Adds already passing tests to py34 run https://review.openstack.org/237210 | 07:54 |
| *** dims_ has quit IRC | 07:55 | |
| *** jbell8 has quit IRC | 07:55 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone: Updating sample configuration file https://review.openstack.org/236807 | 07:59 |
| *** fhubik has joined #openstack-keystone | 08:01 | |
| *** ParsectiX has joined #openstack-keystone | 08:03 | |
| openstackgerrit | Dave Chen proposed openstack/keystone: No request body or empty resource acceptable in the validation https://review.openstack.org/237448 | 08:07 |
| openstackgerrit | Hidekazu Nakamura proposed openstack/keystone: Fix typo in Configuring Keystone doc https://review.openstack.org/237449 | 08:07 |
| *** belmoreira has joined #openstack-keystone | 08:09 | |
| *** fhubik is now known as fhubik_brb | 08:11 | |
| *** hidekazu has quit IRC | 08:13 | |
| *** roxanaghe has quit IRC | 08:13 | |
| *** kiran-r has joined #openstack-keystone | 08:13 | |
| *** boris-42 has quit IRC | 08:18 | |
| *** jsheeren has joined #openstack-keystone | 08:20 | |
| *** jaosorior has quit IRC | 08:23 | |
| *** jaosorior has joined #openstack-keystone | 08:24 | |
| *** jistr has joined #openstack-keystone | 08:27 | |
| *** fhubik_brb is now known as fhubik | 08:30 | |
| zqfan | Hi, I have a problem when using keystoneclient.v2_0.client in a environment which register Identity Service using v3 endpoint, so when Ceilometer try to query tenant list, then Keystone always returns 404 Resource Not Found, this is because keystoneclient will look up endpoint from its auth plugin, so v3 endpoint is returned, but v2_0.client uses v2 path: | 08:31 |
| zqfan | /tenants which cause the 404 error. I think in v2_0.client using v3 endpoint should be avoided, because end user (here is Ceilometer) already explicitly specify that v2_0.client is used, so maybe v2_0.client should ensure that v2 endpoint is used as well. What's your opinion? Or v2_0.client has nothing to do with V2 API, just a branch/release/generation name | 08:31 |
| zqfan | in keystoneclient? Thank you | 08:31 |
| openstackgerrit | Jin Nan Zhang proposed openstack/keystone: change stackforge url to openstack url https://review.openstack.org/237396 | 08:32 |
| openstackgerrit | Dave Chen proposed openstack/keystone: No request body or empty resource acceptable in the validation https://review.openstack.org/237448 | 08:34 |
| *** kragniz_ has joined #openstack-keystone | 08:41 | |
| davechen | tyagiprince2010: Just run keystone-manage pki_setup | 08:41 |
| *** kragniz_ is now known as kragniz | 08:41 | |
| davechen | tyagiprince2010: then your non-production pki is set up. | 08:42 |
| davechen | tyagiprince2010: then go to keystone.conf to change [token] /provider as pki | 08:43 |
| davechen | tyagiprince2010: then restart your service, it should work for you. | 08:43 |
| *** dims_ has joined #openstack-keystone | 08:51 | |
| *** dims_ has quit IRC | 08:57 | |
| *** stevemar_ has joined #openstack-keystone | 09:00 | |
| *** ChanServ sets mode: +o stevemar_ | 09:00 | |
| *** stevemar_ has quit IRC | 09:03 | |
| *** rha has quit IRC | 09:04 | |
| *** lhcheng_ has quit IRC | 09:05 | |
| *** aix has joined #openstack-keystone | 09:05 | |
| *** marzif has joined #openstack-keystone | 09:07 | |
| *** e0ne has joined #openstack-keystone | 09:07 | |
| *** jsheeren has quit IRC | 09:11 | |
| *** amakarov_away is now known as amakarov | 09:16 | |
| *** zqfan is now known as robot | 09:16 | |
| *** kiran-r has quit IRC | 09:16 | |
| *** davechen1 has joined #openstack-keystone | 09:17 | |
| *** davechen has quit IRC | 09:20 | |
| openstackgerrit | Marek Denis proposed openstack/keystone: Fix incorrect federated mapping example https://review.openstack.org/237479 | 09:24 |
| *** jamielennox|away is now known as jamielennox | 09:26 | |
| *** davechen has joined #openstack-keystone | 09:32 | |
| *** davechen has left #openstack-keystone | 09:32 | |
| *** davechen1 has quit IRC | 09:34 | |
| *** alex_xu has quit IRC | 09:34 | |
| *** alex_xu has joined #openstack-keystone | 09:36 | |
| openstackgerrit | Boris Bobrov proposed openstack/keystone: Enable limiting in ldap for groups https://review.openstack.org/234849 | 09:43 |
| openstackgerrit | Boris Bobrov proposed openstack/keystone: Use @truncated in ldap for users https://review.openstack.org/233070 | 09:43 |
| *** fawadkhaliq has joined #openstack-keystone | 09:46 | |
| *** dims_ has joined #openstack-keystone | 09:49 | |
| *** robot is now known as zqfan | 09:52 | |
| *** marzif has quit IRC | 10:10 | |
| *** markvoelker_ has quit IRC | 10:13 | |
| *** fhubik is now known as fhubik_brb | 10:14 | |
| *** exploreshaifali has quit IRC | 10:18 | |
| *** aix has quit IRC | 10:29 | |
| *** aix has joined #openstack-keystone | 10:30 | |
| openstackgerrit | Hidekazu Nakamura proposed openstack/keystone: Update Configuring Keystone doc for consistency https://review.openstack.org/237449 | 10:33 |
| *** wwwjfy has quit IRC | 10:35 | |
| *** topol has joined #openstack-keystone | 10:47 | |
| *** ChanServ sets mode: +v topol | 10:47 | |
| *** ParsectiX has quit IRC | 10:50 | |
| *** topol has quit IRC | 10:51 | |
| openstackgerrit | Alexander Makarov proposed openstack/keystone-specs: Unified delegation spec https://review.openstack.org/189816 | 10:52 |
| amakarov | ayoung, thank you for helping with the language. I've described 2 more delegation fields: 'transitive' and 'active', please review the updated spec ^^ | 10:55 |
| *** rvba has quit IRC | 10:57 | |
| *** jamielennox is now known as jamielennox|away | 11:00 | |
| *** arunkant has quit IRC | 11:02 | |
| *** fhubik_brb is now known as fhubik | 11:03 | |
| *** weihan has joined #openstack-keystone | 11:04 | |
| *** arunkant has joined #openstack-keystone | 11:07 | |
| *** ParsectiX has joined #openstack-keystone | 11:09 | |
| *** pnavarro|off is now known as pnavarro|lunch | 11:13 | |
| *** urulama has quit IRC | 11:13 | |
| *** urulama has joined #openstack-keystone | 11:13 | |
| *** markvoelker has joined #openstack-keystone | 11:14 | |
| *** e0ne has quit IRC | 11:21 | |
| openstackgerrit | Kseniya Tychkova proposed openstack/oslo.policy: Apache Fortress support prototype https://review.openstack.org/237521 | 11:27 |
| samueldmq | morning | 11:30 |
| *** wwwjfy has joined #openstack-keystone | 11:32 | |
| *** markvoelker has quit IRC | 11:32 | |
| *** dikonoor has quit IRC | 11:33 | |
| *** ParsectiX has quit IRC | 11:36 | |
| *** markvoelker has joined #openstack-keystone | 11:39 | |
| *** markvoelker has quit IRC | 11:39 | |
| *** gordc has joined #openstack-keystone | 11:40 | |
| dims_ | samueldmq: please see https://review.openstack.org/237521 some folks are trying to integrate with Apache Fortress, they need feedback on what's the best way to do this with the new dynamic policy stuff | 11:41 |
| dims_ | samueldmq: looks like they just hacked direct calls to fortress api there | 11:42 |
| *** stevemar_ has joined #openstack-keystone | 11:45 | |
| *** ChanServ sets mode: +o stevemar_ | 11:45 | |
| *** Ephur has quit IRC | 11:47 | |
| *** stevemar_ has quit IRC | 11:48 | |
| samueldmq | dims_: nice, gonna look now .. thanks for the heads up | 11:52 |
| samueldmq | dims_: that's interesting, they get from fortress the list of users that can execute an operation, and see if the current user is in that list | 11:54 |
| samueldmq | dims_: that's the opposite of users carrying what they can do within the token (through their roles) | 11:55 |
| *** ParsectiX has joined #openstack-keystone | 11:55 | |
| dims_ | samueldmq: i did not try to understand the specific review :) just know that some folks are trying to do that | 11:56 |
| samueldmq | dims_: and can be too bad ... suppose a cloud with (10k users ? can be even more) that can execute (get_project) | 11:56 |
| dims_ | samueldmq: right | 11:56 |
| *** fhubik is now known as fhubik_brb | 11:56 | |
| samueldmq | dims_: that's just bad, and would stuck the cloud, I don't think that model work well | 11:57 |
| samueldmq | dims_: cool, I will leave a review there | 11:57 |
| *** fawadkhaliq has quit IRC | 11:58 | |
| *** ParsectiX has quit IRC | 11:58 | |
| samueldmq | amakarov: ping - you around ? | 11:58 |
| samueldmq | amakarov: do you know Kseniya Tychkova from Mirantis ? | 11:59 |
| *** EinstCrazy has quit IRC | 11:59 | |
| *** weihan has quit IRC | 12:07 | |
| *** ParsectiX has joined #openstack-keystone | 12:14 | |
| *** doug-fish has quit IRC | 12:19 | |
| *** doug-fish has joined #openstack-keystone | 12:19 | |
| *** doug-fish has quit IRC | 12:21 | |
| *** fhubik_brb is now known as fhubik | 12:21 | |
| *** doug-fish has joined #openstack-keystone | 12:21 | |
| amakarov | samueldmq, hi! I don't know her - she is from the other office | 12:21 |
| *** EinstCrazy has joined #openstack-keystone | 12:26 | |
| samueldmq | amakarov: it's okay, she's proposing https://review.openstack.org/237521 | 12:28 |
| samueldmq | amakarov: and I'd like to discuss some points with her, but that's okay | 12:28 |
| samueldmq | amakarov: I am leaving a review there | 12:28 |
| amakarov | samueldmq, I think you can easily find her on oslo channel :) | 12:29 |
| *** pnavarro|lunch is now known as pnavarro | 12:32 | |
| *** edmondsw has joined #openstack-keystone | 12:32 | |
| *** e0ne has joined #openstack-keystone | 12:33 | |
| *** markvoelker_ has joined #openstack-keystone | 12:35 | |
| *** su_zhang has joined #openstack-keystone | 12:38 | |
| *** arunkant has quit IRC | 12:38 | |
| *** arunkant has joined #openstack-keystone | 12:44 | |
| samueldmq | amakarov: kk thanks | 12:45 |
| samueldmq | ayoung: you around ? see https://review.openstack.org/#/c/237521/ | 12:46 |
| *** markvoelker_ has quit IRC | 12:54 | |
| *** alejandrito has joined #openstack-keystone | 12:54 | |
| *** doug-fish has quit IRC | 12:54 | |
| *** doug-fish has joined #openstack-keystone | 12:55 | |
| *** fhubik is now known as fhubik_brb | 12:58 | |
| *** fawadkhaliq has joined #openstack-keystone | 12:59 | |
| *** doug-fish has quit IRC | 13:00 | |
| openstackgerrit | henry-nash proposed openstack/keystone-specs: Support virtual roles https://review.openstack.org/226661 | 13:00 |
| *** henrynash has joined #openstack-keystone | 13:00 | |
| *** ChanServ sets mode: +v henrynash | 13:00 | |
| *** topol has joined #openstack-keystone | 13:01 | |
| *** ChanServ sets mode: +v topol | 13:01 | |
| *** fawadkhaliq has quit IRC | 13:04 | |
| *** pauloewerton has joined #openstack-keystone | 13:04 | |
| *** mjb has quit IRC | 13:04 | |
| dims_ | breton: amakarov: you should see https://review.openstack.org/#/c/237521/ as well :) | 13:04 |
| amakarov | dims_, saw it | 13:05 |
| amakarov | reading what the fortress is )) | 13:05 |
| openstackgerrit | henry-nash proposed openstack/keystone-specs: Support Management Role Groups https://review.openstack.org/226661 | 13:06 |
| openstackgerrit | henry-nash proposed openstack/keystone-specs: Support Management Role Groups https://review.openstack.org/226661 | 13:08 |
| *** petertr7_away is now known as petertr7 | 13:08 | |
| *** GB21 has joined #openstack-keystone | 13:09 | |
| *** henrynash has quit IRC | 13:11 | |
| *** ParsectiX has quit IRC | 13:13 | |
| *** mjb has joined #openstack-keystone | 13:17 | |
| *** doug-fish has joined #openstack-keystone | 13:20 | |
| *** topol has quit IRC | 13:20 | |
| *** petertr7 is now known as petertr7_away | 13:22 | |
| *** NM has joined #openstack-keystone | 13:26 | |
| *** petertr7_away is now known as petertr7 | 13:28 | |
| *** dims_ has quit IRC | 13:30 | |
| *** dims_ has joined #openstack-keystone | 13:30 | |
| *** jsavak has joined #openstack-keystone | 13:32 | |
| *** ParsectiX has joined #openstack-keystone | 13:32 | |
| *** davechen has joined #openstack-keystone | 13:37 | |
| *** zqfan is now known as zqfan_afk | 13:38 | |
| *** nate_gone is now known as njohnston | 13:42 | |
| *** Nirupama has quit IRC | 13:46 | |
| *** weihan has joined #openstack-keystone | 13:47 | |
| *** richm has joined #openstack-keystone | 13:48 | |
| *** davechen has left #openstack-keystone | 13:49 | |
| *** raildo-afk is now known as raildo | 13:56 | |
| *** fawadkhaliq has joined #openstack-keystone | 13:56 | |
| *** su_zhang has quit IRC | 13:56 | |
| *** pumaranikar has joined #openstack-keystone | 13:57 | |
| *** Ephur has joined #openstack-keystone | 13:57 | |
| *** phalmos has joined #openstack-keystone | 13:58 | |
| *** phalmos has quit IRC | 14:00 | |
| *** GB21 has quit IRC | 14:01 | |
| *** doug-fish has quit IRC | 14:02 | |
| *** Ephur has quit IRC | 14:03 | |
| *** topol has joined #openstack-keystone | 14:03 | |
| *** ChanServ sets mode: +v topol | 14:03 | |
| *** Ephur has joined #openstack-keystone | 14:06 | |
| *** fawadkhaliq has quit IRC | 14:07 | |
| *** topol has quit IRC | 14:07 | |
| *** ParsectiX has quit IRC | 14:08 | |
| *** tonytan4ever has joined #openstack-keystone | 14:12 | |
| *** petertr7 is now known as petertr7_away | 14:13 | |
| *** ankurgupta has joined #openstack-keystone | 14:13 | |
| ayoung | amakarov, ok so you have: - transitive: flag, indicating the possibility to create inheriteddelegation | 14:14 |
| ayoung | - active: flag, indicationg that *actor* is allowed to perform any delegated | 14:14 |
| ayoung | role - not only delegate it to the next *actor*, if **transitive** flag is set to True | 14:14 |
| ayoung | amakarov, I think we need to be careful with the term "inherited delegation" | 14:15 |
| ayoung | I assume your are talking about HMT role assignment inheritance? | 14:15 |
| ayoung | Otherwise, maybe shy away from the term inherited. | 14:16 |
| *** stevemar_ has joined #openstack-keystone | 14:16 | |
| *** ChanServ sets mode: +o stevemar_ | 14:16 | |
| ayoung | gotta run | 14:17 |
| *** petertr7_away is now known as petertr7 | 14:17 | |
| *** ayoung has quit IRC | 14:17 | |
| *** su_zhang has joined #openstack-keystone | 14:18 | |
| *** su_zhang has quit IRC | 14:19 | |
| *** stevemar_ has quit IRC | 14:20 | |
| *** sigmavirus24_awa is now known as sigmavirus24 | 14:20 | |
| *** sigmavirus24 has left #openstack-keystone | 14:21 | |
| *** NM has quit IRC | 14:25 | |
| *** browne has joined #openstack-keystone | 14:25 | |
| *** NM has joined #openstack-keystone | 14:28 | |
| *** timcline has joined #openstack-keystone | 14:31 | |
| *** jsavak has quit IRC | 14:33 | |
| *** jsavak has joined #openstack-keystone | 14:34 | |
| lbragstad | dolphm o/ curious if you've seen my latest comments on - https://review.openstack.org/#/c/231191/ | 14:37 |
| *** ajaya has quit IRC | 14:39 | |
| *** bradjones has joined #openstack-keystone | 14:42 | |
| *** bradjones has quit IRC | 14:42 | |
| *** bradjones has joined #openstack-keystone | 14:42 | |
| openstackgerrit | Merged openstack/keystonemiddleware: Updated from global requirements https://review.openstack.org/237294 | 14:44 |
| *** sseago has joined #openstack-keystone | 14:44 | |
| *** jaosorior has quit IRC | 14:47 | |
| *** jaosorior has joined #openstack-keystone | 14:47 | |
| *** phalmos has joined #openstack-keystone | 14:50 | |
| *** pnavarro is now known as pnavarro|off | 14:52 | |
| *** slberger has joined #openstack-keystone | 14:53 | |
| openstackgerrit | Merged openstack/python-keystoneclient: Updated from global requirements https://review.openstack.org/235690 | 14:55 |
| *** boris-42 has joined #openstack-keystone | 14:56 | |
| *** belmoreira has quit IRC | 14:57 | |
| *** jsavak has quit IRC | 14:58 | |
| *** henrynash has joined #openstack-keystone | 14:58 | |
| *** ChanServ sets mode: +v henrynash | 14:58 | |
| *** jsavak has joined #openstack-keystone | 14:59 | |
| *** e0ne has quit IRC | 15:00 | |
| *** fhubik_brb is now known as fhubik | 15:02 | |
| *** e0ne has joined #openstack-keystone | 15:02 | |
| *** links has quit IRC | 15:02 | |
| *** zqfan_afk is now known as zqfan | 15:05 | |
| *** phalmos has quit IRC | 15:06 | |
| *** doug-fish has joined #openstack-keystone | 15:06 | |
| *** fhubik is now known as fhubik_brb | 15:08 | |
| openstackgerrit | Merged openstack/keystone: Updated from global requirements https://review.openstack.org/237293 | 15:09 |
| *** jlvillal has quit IRC | 15:11 | |
| *** henrynash has quit IRC | 15:15 | |
| *** jlvillal has joined #openstack-keystone | 15:17 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone: Updating sample configuration file https://review.openstack.org/236807 | 15:17 |
| *** zzzeek has quit IRC | 15:21 | |
| njohnston | It's probably crazy, but one of the operators I work with is trying to figure out if he can replace Icehouse keystone with Liberty keystone and still have the rest of his Icehouse installation work. Before he goes to all that effort, I figured I'd ask here. Can such a thing work? | 15:23 |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Merge keystone.config info keystone.common.config https://review.openstack.org/237209 | 15:30 |
| *** zzzeek has joined #openstack-keystone | 15:30 | |
| *** josecastroleon has quit IRC | 15:30 | |
| *** zzzeek has quit IRC | 15:30 | |
| *** petertr7 is now known as petertr7_away | 15:31 | |
| *** zzzeek has joined #openstack-keystone | 15:31 | |
| bknudson | are other people seeing warnings running tox -e pep8 today? | 15:32 |
| bknudson | seems like this just started today | 15:32 |
| *** dims__ has joined #openstack-keystone | 15:33 | |
| *** dims_ has quit IRC | 15:36 | |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Correct bashate issues in gen_pki.sh https://review.openstack.org/237644 | 15:40 |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Merge keystone.config into keystone.common.config https://review.openstack.org/237209 | 15:40 |
| *** fhubik_brb is now known as fhubik | 15:41 | |
| morgan | njohnston: possibly. Our API has been pretty good about not breaking the contract. However, if the operator is trying to run the nee keystone on the same server as another openstack service he will have to resolve the dependency differences between icehouse and Liberty (or use a venv) | 15:42 |
| *** stevemar_ has joined #openstack-keystone | 15:43 | |
| *** ChanServ sets mode: +o stevemar_ | 15:43 | |
| *** roxanaghe has joined #openstack-keystone | 15:44 | |
| njohnston | morgan: Thanks! | 15:47 |
| *** wasmum has joined #openstack-keystone | 15:48 | |
| stevemar_ | reminder to update meeting agenda: https://wiki.openstack.org/wiki/Meetings/KeystoneMeeting | 15:48 |
| stevemar_ | bknudson: i was gonna wait til the summit to talk about liasons :) | 15:49 |
| bknudson | stevemar_: if you want to wait on this then move it to next meeting | 15:50 |
| bknudson | I just wanted to bring it up in case someone wanted to step up as a liaison. | 15:50 |
| *** fawadkhaliq has joined #openstack-keystone | 15:53 | |
| *** jbell8 has joined #openstack-keystone | 15:55 | |
| *** jaosorior has quit IRC | 15:55 | |
| *** jaosorior has joined #openstack-keystone | 15:55 | |
| *** gyee has joined #openstack-keystone | 15:56 | |
| *** ChanServ sets mode: +v gyee | 15:56 | |
| *** fawadkhaliq has quit IRC | 15:58 | |
| stevemar_ | bknudson: yeah, i guess it's fine, some of the newer folks may not even know such a thing exists | 16:02 |
| *** jsavak has quit IRC | 16:02 | |
| *** jsavak has joined #openstack-keystone | 16:02 | |
| *** wanghua_ has joined #openstack-keystone | 16:02 | |
| *** phalmos has joined #openstack-keystone | 16:04 | |
| *** wanghua has quit IRC | 16:05 | |
| openstackgerrit | zouyee proposed openstack/keystone: change get_user_roles in RoleAssignmentV2 to resolve exception ProjectNotFound https://review.openstack.org/237658 | 16:07 |
| brad[] | Revisiting API v3 implementation for our private cloud, I'm finding little in way of official documentation - in fact the install guide for Kilo lists v2 for keystone principally | 16:08 |
| brad[] | The recommendation I've had though is to focus on v3 - but ... | 16:09 |
| brad[] | Outside of configuration reference I'm unclear on how to proceed. | 16:09 |
| stevemar_ | brad[]: both v2 and v3 are served at the same time, since grizzly | 16:09 |
| *** woodster_ has joined #openstack-keystone | 16:09 | |
| brad[] | stevemar_: Are they consumed automatically if available, by the other services? Is defining the endpoints in SQL still a requirement? | 16:10 |
| stevemar_ | brad[]: defining endpoints in sql is still the recommended approach | 16:11 |
| stevemar_ | brad[]: those endpoints are the basis for the service catalog | 16:12 |
| brad[] | stevemar_: So - definne endpoints in SQL, configure them in the keystone_authtoken block for all services - is there any other prep required? Such as a default domain etc | 16:12 |
| * stevemar_ is trying to find docs around this | 16:12 | |
| brad[] | Or does v3 drop in place of v2 | 16:12 |
| stevemar_ | brad[]: so you can keep your endpoints in sql as v2, that's cool | 16:13 |
| brad[] | I'm assuming the policy.json files also need to be replaced, so considerations for existing customization has to be ported over | 16:13 |
| brad[] | okay.. | 16:13 |
| stevemar_ | brad[]: and yeah, you'll need to update the keystone-authtoken block to reference a default domain for both user and project | 16:13 |
| brad[] | hmm ok | 16:14 |
| openstackgerrit | zouyee proposed openstack/keystone: change get_user_roles in RoleAssignmentV2 to resolve ProjectNotFound https://review.openstack.org/237658 | 16:14 |
| stevemar_ | policy.json doesn't need to necessarily be replaced | 16:14 |
| *** Zanatoz has joined #openstack-keystone | 16:15 | |
| stevemar_ | brad[]: check out these docs (they are not yet published) http://docs-draft.openstack.org/98/232098/3/check/gate-keystone-docs/4ad4786//doc/build/html/services.html | 16:17 |
| brad[] | stevemar_: Pedantic question but why aren't the endpoint definitions required in SQL? Are they automatically probed for now? | 16:17 |
| brad[] | will do | 16:17 |
| stevemar_ | brad[]: there still exists a 'templated' backend, which is file based and stored in kvs, but umm, don't use that | 16:18 |
| *** david-lyle has quit IRC | 16:18 | |
| *** david-lyle has joined #openstack-keystone | 16:18 | |
| *** dstanek has quit IRC | 16:19 | |
| *** dstanek has joined #openstack-keystone | 16:22 | |
| *** ChanServ sets mode: +v dstanek | 16:22 | |
| *** diazjf has joined #openstack-keystone | 16:24 | |
| *** exploreshaifali has joined #openstack-keystone | 16:25 | |
| openstackgerrit | Fernando Diaz proposed openstack/keystone: Add Mapping Combinations for Keystone to Keystone Federation https://review.openstack.org/237673 | 16:26 |
| brad[] | stevemar_: yeah that doesn't sound good. I'm mainly asking in relation to <stevemar_> brad[]: so you can keep your endpoints in sql as v2, that's cool | 16:26 |
| brad[] | just for my own understanding, really | 16:26 |
| *** jistr has quit IRC | 16:27 | |
| *** lhcheng has joined #openstack-keystone | 16:28 | |
| *** ChanServ sets mode: +v lhcheng | 16:28 | |
| *** weihan has quit IRC | 16:32 | |
| *** weihan has joined #openstack-keystone | 16:33 | |
| *** lhcheng has quit IRC | 16:33 | |
| *** e0ne has quit IRC | 16:33 | |
| stevemar_ | brad[]: you can keep endpoints in sql as v2 since keystone can authenticate services with both v2 and v3, so long as you include the necessary info in keystone_authtoken | 16:36 |
| brad[] | ahh | 16:37 |
| *** weihan has quit IRC | 16:37 | |
| brad[] | Based on the doc draft there - as soon as a user is created in a domain other than 'default' they're no longer a member of the default domain? | 16:39 |
| *** su_zhang has joined #openstack-keystone | 16:40 | |
| *** mylu has joined #openstack-keystone | 16:42 | |
| *** jasonsb has quit IRC | 16:42 | |
| openstackgerrit | Fernando Diaz proposed openstack/keystone: Add Mapping Combinations for Keystone to Keystone Federation https://review.openstack.org/237673 | 16:43 |
| *** blogan is now known as testudp | 16:44 | |
| *** testudp is now known as blogan | 16:44 | |
| *** aix has quit IRC | 16:44 | |
| *** rha has joined #openstack-keystone | 16:46 | |
| dolphm | stevemar_: just shared this on the mailing list for the first time in the "Reviews with a prio label?" thread, but here's an slightly more modern version of the release-blocking reviews gist, but it's not a permalink http://bit.ly/1GnOuqw | 16:48 |
| dolphm | stevemar_: that's a personalized review queue of all of keystone-core's starred reviews in the keystone ecosystem | 16:49 |
| dolphm | and for logging posterity, the full link is super long: https://review.openstack.org/#/dashboard/?foreach=is:open+%252Downer:self+(project:openstack%252Dattic/identity%252Dapi+OR+project:openstack/keystone+OR+project:openstack/keystone%252Dspecs+OR+project:openstack/keystoneauth+OR+project:openstack/keystoneauth%252Dsaml2+OR+project:openstack/keystonemiddleware+OR+project:openstack/pycadf+OR+project:openstack/python%252Dkey | 16:50 |
| dolphm | stoneclient)+(starredby:bknudson@us.ibm.com+OR+starredby:dstanek@dstanek.com+OR+starredby:dolph.mathews@gmail.com+OR+starredby:jamielennox@redhat.com+OR+starredby:lbragstad@gmail.com+OR+starredby:os.lcheng@gmail.com+OR+starredby:marek.denis@cern.ch+OR+starredby:morgan.fainberg@gmail.com+OR+starredby:stevemar@ca.ibm.com+OR+starredby:ayoung@redhat.com+OR+starredby:guang.yee@hpe.com+OR+starredby:henryn@linux.vnet.ibm.com)&titl | 16:50 |
| dolphm | e=Priority+keystone+reviews&Needs+attention=%252Dlabel:Code%252DReview<=2%252cself+%252Dlabel:Verified%2B1%252cjenkins+label:Workflow%2B0&New=%252Dlabel:Code%252DReview<=2+label:Verified%2B1%252cjenkins+label:Workflow%2B0&%2B1=%252Dlabel:Code%252DReview<=%2B2%252cself+%252Dlabel:Code%252DReview<=%252D1+label:Code%252DReview%2B1+%252Dlabel:Code%252DReview%2B2+label:Verified%2B1%252cjenkins+label:Workflow%2B0&%2B2=%252Dlabel: | 16:50 |
| dolphm | Code%252DReview<=%2B2%252cself+%252Dlabel:Code%252DReview<=%252D1+label:Code%252DReview%2B2+label:Verified%2B1%252cjenkins+label:Workflow%2B0&Pending+gating=label:Verified=%2B1%252cjenkins+label:Workflow%2B1&Gating=%252Dlabel:Verified<=%252D1%252cjenkins+%252Dlabel:Verified>=%2B1%252cjenkins+label:Workflow%2B1&Failed+gating=label:Verified<=%252D1%252cjenkins+label:Workflow%2B1 | 16:50 |
| brad[] | lol | 16:50 |
| dstanek | whoa | 16:50 |
| *** stevemar_ has quit IRC | 16:52 | |
| *** pumaranikar has quit IRC | 16:52 | |
| marekd | i guess everyone is now scanning through dolphm's query and trying to find his'her name :P | 16:53 |
| *** pumaranikar has joined #openstack-keystone | 16:53 | |
| marekd | found mine! | 16:53 |
| lbragstad | lol; | 16:53 |
| lbragstad | i was just doing that, too | 16:53 |
| marekd | :D | 16:53 |
| *** fawadkhaliq has joined #openstack-keystone | 16:54 | |
| *** phalmos has quit IRC | 16:56 | |
| *** jsavak has quit IRC | 16:57 | |
| *** jsavak has joined #openstack-keystone | 16:58 | |
| gyee | me 2! :) | 16:58 |
| *** fawadkhaliq has quit IRC | 16:58 | |
| marekd | gyee: btw why did you guys switched from hp.com to hpe.com | 16:58 |
| *** stevemar_ has joined #openstack-keystone | 16:59 | |
| *** ChanServ sets mode: +o stevemar_ | 16:59 | |
| gyee | marekd, we're splitting on Nov 1st | 16:59 |
| marekd | what do you mean? | 17:00 |
| gyee | HP is splitting into two companies | 17:00 |
| stevemar_ | dolphm: that's a sizeable link | 17:00 |
| openstackgerrit | Tony Wang proposed openstack/keystone: add `type' filter for list_credentials_for_user https://review.openstack.org/235214 | 17:00 |
| marekd | gyee: aha | 17:00 |
| marekd | gyee: so what will be the companies? | 17:01 |
| dolphm | stevemar_: it also has a bug, hence the need for a permalink :-/ https://github.com/dolph/dotfiles/commit/87a5d7b4d885f012933f5012d68bc4052d19da75 | 17:01 |
| stevemar_ | brad[]: that is correct, once a user is created in a non-default domain they are no longer available in the default domain | 17:01 |
| *** browne has quit IRC | 17:01 | |
| gyee | marekd, HP Inc. and Hewlett Packard Enterprise | 17:01 |
| gyee | take a page from IBM's old playbook :) | 17:02 |
| stevemar_ | gyee: ibm split? | 17:02 |
| marekd | the more fresh one is Google and Alphabet I guess | 17:02 |
| lbragstad | that must have been a long time ago? | 17:02 |
| stevemar_ | did it ever? i thought it didn't | 17:02 |
| gyee | IBM split out the PC awhile back, now part of Lenovo | 17:02 |
| lbragstad | oh... | 17:02 |
| stevemar_ | not so much, they just sold it off | 17:03 |
| gyee | ah | 17:03 |
| *** lhcheng has joined #openstack-keystone | 17:03 | |
| *** ChanServ sets mode: +v lhcheng | 17:03 | |
| stevemar_ | gyee: yep, wikipedia just confirmed it was a sale https://en.wikipedia.org/wiki/Lenovo | 17:04 |
| gyee | stevemar_, I see | 17:05 |
| *** spandhe has joined #openstack-keystone | 17:05 | |
| dolphm | rootkits are profitable | 17:05 |
| *** ajaya has joined #openstack-keystone | 17:05 | |
| gyee | hah | 17:06 |
| stevemar_ | dstanek: i hope you didn't just wake the sleeping giant by abandoning abfab | 17:06 |
| marekd | stevemar_: LOL | 17:08 |
| *** mylu has quit IRC | 17:10 | |
| *** topol has joined #openstack-keystone | 17:13 | |
| *** ChanServ sets mode: +v topol | 17:13 | |
| *** petertr7_away is now known as petertr7 | 17:14 | |
| *** mylu has joined #openstack-keystone | 17:15 | |
| *** jsavak has quit IRC | 17:15 | |
| stevemar_ | bknudson: question for you about your bashate change: https://review.openstack.org/#/c/237644/ | 17:18 |
| openstackgerrit | Fernando Diaz proposed openstack/keystone: Add Mapping Combinations for Keystone to Keystone Federation https://review.openstack.org/237673 | 17:18 |
| *** boris-42 has quit IRC | 17:18 | |
| *** shaleh has joined #openstack-keystone | 17:18 | |
| *** fhubik has quit IRC | 17:19 | |
| *** mylu has quit IRC | 17:19 | |
| *** diazjf has quit IRC | 17:19 | |
| *** timcline has quit IRC | 17:22 | |
| *** topol has quit IRC | 17:27 | |
| *** dims__ has quit IRC | 17:27 | |
| *** dims_ has joined #openstack-keystone | 17:28 | |
| *** tonytan4ever has quit IRC | 17:30 | |
| *** harlowja has quit IRC | 17:30 | |
| *** lhcheng has quit IRC | 17:30 | |
| *** tsymancz1k has joined #openstack-keystone | 17:31 | |
| *** tsymancz2k has joined #openstack-keystone | 17:31 | |
| gyee | damn, bknudson's reviews are tough | 17:34 |
| *** timcline has joined #openstack-keystone | 17:34 | |
| *** lhcheng has joined #openstack-keystone | 17:35 | |
| *** ChanServ sets mode: +v lhcheng | 17:35 | |
| *** harlowja has joined #openstack-keystone | 17:36 | |
| *** jsavak has joined #openstack-keystone | 17:37 | |
| *** tonytan4ever has joined #openstack-keystone | 17:38 | |
| *** kragniz has quit IRC | 17:39 | |
| *** kragniz has joined #openstack-keystone | 17:39 | |
| *** rderose has joined #openstack-keystone | 17:41 | |
| *** jasonsb has joined #openstack-keystone | 17:42 | |
| rderose | ls | 17:43 |
| rderose | oops, wrong window :) | 17:43 |
| *** pnavarro|off has quit IRC | 17:48 | |
| dstanek | stevemar_: I'll be a little late to the meeting today | 17:50 |
| *** tsymancz1k is now known as tsymanczyk | 17:55 | |
| *** browne has joined #openstack-keystone | 17:55 | |
| *** phalmos has joined #openstack-keystone | 17:58 | |
| samueldmq | did groups exist in v2 ? | 17:58 |
| *** diazjf has joined #openstack-keystone | 18:00 | |
| stevemar_ | samueldmq: they did not | 18:00 |
| samueldmq | stevemar_: versions, tokens, users and tenants | 18:01 |
| stevemar_ | samueldmq: and roles | 18:02 |
| samueldmq | stevemar_: anything beyond those ? that's what I could see from http://developer.openstack.org/api-ref-identity-v2.html | 18:02 |
| samueldmq | stevemar_: and http://developer.openstack.org/api-ref-identity-admin-v2.html | 18:02 |
| samueldmq | stevemar_: catalog ? | 18:02 |
| *** jamielennox|away is now known as jamielennox | 18:02 | |
| stevemar_ | samueldmq: that did too | 18:02 |
| *** henrynash has joined #openstack-keystone | 18:02 | |
| *** ChanServ sets mode: +v henrynash | 18:02 | |
| *** henrynash has quit IRC | 18:03 | |
| samueldmq | stevemar_: cool, although it isn't in the docs, which isn't cool :p | 18:03 |
| samueldmq | stevemar_: thanks | 18:03 |
| *** henrynash has joined #openstack-keystone | 18:03 | |
| *** ChanServ sets mode: +v henrynash | 18:03 | |
| openstackgerrit | Steve Martinelli proposed openstack/python-keystoneclient: Add plugin doco generated with stevedore.sphinxext https://review.openstack.org/218099 | 18:09 |
| *** bill_az has joined #openstack-keystone | 18:09 | |
| bill_az | Does anyone have a pointer to best practices for multi-region configuration? Everything I can find appears to have keystone at a single site and if that site is lost your out of luck. | 18:14 |
| openstackgerrit | guang-yee proposed openstack/python-keystoneclient: Remove hardcoded endpoint filter for update password https://review.openstack.org/231749 | 18:14 |
| *** marzif has joined #openstack-keystone | 18:16 | |
| *** su_zhang has quit IRC | 18:21 | |
| *** ayoung has joined #openstack-keystone | 18:21 | |
| *** ChanServ sets mode: +v ayoung | 18:21 | |
| *** marzif has quit IRC | 18:23 | |
| *** marzif has joined #openstack-keystone | 18:29 | |
| *** zqfan is now known as zqfan_afk | 18:32 | |
| marekd | morgan: what is hound.openstack.org running on? | 18:41 |
| marekd | morgan: sorry, meant mordred ^^ | 18:41 |
| mordred | marekd: not sure I understand the question - also, it's not necessarily being updated properly yet - it's still a work in progress | 18:42 |
| *** urulama has quit IRC | 18:42 | |
| mordred | marekd: but it's running the "hound" source code indexer which was written by etsy | 18:42 |
| *** urulama has joined #openstack-keystone | 18:43 | |
| marekd | mordred: i was asking whether it's something inhouse baked or some kind of 3rd party project. | 18:43 |
| marekd | mordred: is it open source? | 18:43 |
| mordred | yup! we don't run any non-open source things :) | 18:43 |
| marekd | (and where is the code) :-) | 18:44 |
| mordred | https://github.com/etsy/hound | 18:44 |
| marekd | mordred: etsy works on infra, right? | 18:44 |
| *** fawadkhaliq has joined #openstack-keystone | 18:44 | |
| *** exploreshaifali has quit IRC | 18:44 | |
| mordred | nope. not at all | 18:44 |
| mordred | I WISH! | 18:44 |
| mordred | that would be awesome - we use several of their things | 18:45 |
| marekd | mordred: sorry, i thought etsy was a person :-) | 18:45 |
| *** topol has joined #openstack-keystone | 18:45 | |
| *** ChanServ sets mode: +v topol | 18:45 | |
| mordred | heh. nope. they're a web site that sells arts and crafts | 18:45 |
| shaleh | mordred: why the concern for v2 catalog? | 18:47 |
| shaleh | all of v2 is being deprecated | 18:47 |
| mordred | shaleh: thta is irrelevant | 18:47 |
| mordred | shaleh: v2 catalogs ABOUND in the wild | 18:48 |
| mordred | so we still must be able to have clinet things interact with them | 18:48 |
| mordred | that we will not continue shipping new ones is not the same as making sure that our tools can still talk to old ones | 18:48 |
| shaleh | mordred: agreed, just checking. | 18:48 |
| mordred | as long as osc can talk to v2 catalogs for introspection, that means our modern tools can still be used on old couds, which is awesome | 18:49 |
| shaleh | mordred: maybe you knew of something important that v2 catalogs were supporting or something | 18:49 |
| shaleh | beyond existing users/customers | 18:49 |
| *** topol has quit IRC | 18:49 | |
| mordred | nope. just existing customers | 18:50 |
| mordred | like me | 18:50 |
| *** lhcheng has quit IRC | 18:50 | |
| mordred | 1 of my 15 clouds will give me a v3 catalog | 18:50 |
| morgan | we need the v4 catalog *duck* | 18:50 |
| shaleh | heh | 18:50 |
| * mordred throws an angry cow at the ducking morgan | 18:50 | |
| morgan | actually for the catalog cleanup, we probably do need a new format :( | 18:50 |
| morgan | so we don't break everyone with proper standards being enforced | 18:51 |
| morgan | but meh | 18:51 |
| shaleh | tools supporting old things is important for sure. | 18:51 |
| * morgan is still an advocate of /catalog and not embedding the catalog in the token at all | 18:51 | |
| morgan | but.. again... | 18:51 |
| *** ChanServ sets mode: -o morgan | 18:51 | |
| morgan | there we go. i don't need to be +o in this channel | 18:52 |
| morgan | let the PTL do that | 18:52 |
| morgan | >.> | 18:52 |
| *** harlowja has quit IRC | 18:53 | |
| *** mylu has joined #openstack-keystone | 18:54 | |
| *** lhcheng has joined #openstack-keystone | 18:57 | |
| *** ChanServ sets mode: +v lhcheng | 18:57 | |
| *** rderose has quit IRC | 18:59 | |
| shaleh | stevemar_: we can continue here | 19:00 |
| openstackgerrit | henry-nash proposed openstack/keystone-specs: Policy rule name spacing via catalog https://review.openstack.org/237743 | 19:00 |
| jamielennox | shaleh: i would read bugs with solutions as "we know what's going on here" rather than "there's a patch for this" | 19:01 |
| shaleh | jamielennox: it says "or a patch" | 19:01 |
| dstanek | shaleh: what docs day a patch is included when a bug is triaged | 19:01 |
| shaleh | https://wiki.openstack.org/wiki/BugTriage | 19:01 |
| shaleh | If the bug contains the solution, or a patch, set the bug status to Triaged | 19:01 |
| shaleh | that is not what I am used to "triaged" meaning for a bug system | 19:02 |
| jamielennox | not sure, that's in progress for me | 19:02 |
| dstanek | I don't think I've ever seen anyone do that | 19:02 |
| shaleh | to me, that says leave triaged alone, someone has looked at it | 19:02 |
| shaleh | triaged should be the fresh meat waiting for eyes | 19:03 |
| shaleh | it is a bug you aren't wasting your time | 19:03 |
| shaleh | new -> triaged -> in progress -> fixed/dropped | 19:03 |
| *** jsavak has quit IRC | 19:04 | |
| openstackgerrit | Merged openstack/keystone: Fix incorrect federated mapping example https://review.openstack.org/237479 | 19:04 |
| *** jsavak has joined #openstack-keystone | 19:04 | |
| dstanek | If I'm looking for a bug to work on i look for new or confirmed. Also old bugs regardless of status | 19:04 |
| *** mylu has quit IRC | 19:05 | |
| *** gyee has quit IRC | 19:05 | |
| stevemar_ | marekd: i haven't gotten to your email about service catalog yet :( | 19:06 |
| marekd | stevemar_: no problemo | 19:06 |
| marekd | thought you had lost it | 19:06 |
| marekd | it's not super burning (I think) | 19:07 |
| stevemar_ | marekd: there are 2 x-project sessions about it | 19:08 |
| stevemar_ | and a spec, it's up for review | 19:08 |
| marekd | ok | 19:08 |
| stevemar_ | what was your specific question? | 19:08 |
| marekd | stevemar_: whether the new service catalog shape is already agreed or not. | 19:08 |
| stevemar_ | marekd: it's not | 19:09 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone: Updating sample configuration file https://review.openstack.org/236807 | 19:09 |
| stevemar_ | i think that will be decided in the x-project session, or later | 19:09 |
| stevemar_ | you aare concerned about the serivce-providers no? | 19:09 |
| *** harlowja has joined #openstack-keystone | 19:11 | |
| marekd | well, given that some important people raised some interest in hearing what federation and the new service catalog is being reshaped now i thought maybe it's worth thinking about identification of services or users from federated/hybrid clouds. | 19:11 |
| marekd | but i don't know | 19:12 |
| marekd | just wanted to know better what a current state is. | 19:12 |
| *** jsavak has quit IRC | 19:13 | |
| marekd | i am not sure i was clear enough :-) | 19:13 |
| *** jsavak has joined #openstack-keystone | 19:13 | |
| dstanek | shaleh: i'm having trouble finding a project that is doing the triaging consistently correctly :-( | 19:15 |
| shaleh | dstanek: exactly :-) | 19:17 |
| dstanek | shaleh: if you are looking for bug work then confirming new bugs would be extremely useful | 19:20 |
| shaleh | dstanek: I was trying to use bugs as ways to learn. Knowing it was a confirmed bug reduced my tail chasing. | 19:21 |
| shaleh | dstanek: less true now | 19:21 |
| dstanek | shaleh: if you want to learn then i think reviews are much better | 19:22 |
| dstanek | you can see what bug they were fixing, how they fixed it and all of the comments/changes along the way | 19:22 |
| *** jsavak has quit IRC | 19:22 | |
| marekd | dstanek: you mean reviewing? | 19:22 |
| dstanek | marekd: what's the context of your question? | 19:23 |
| dstanek | marekd: as a way to learn? | 19:23 |
| marekd | dstanek: that reviews are better for learning | 19:23 |
| dstanek | marekd: yes, even if you dont feel comfortable doing the review. there is a wealth of information in there | 19:24 |
| dstanek | not only the technical "what", but the project social "hows" are in there too | 19:24 |
| samueldmq | dstanek: ++ | 19:25 |
| marekd | dstanek: partially true, but i'd personally leave lots of questions and never dare -1 | 19:25 |
| bknudson | why leave a question? figure out the answer instead. | 19:25 |
| *** ajaya has quit IRC | 19:26 | |
| marekd | bknudson: the questions like "why is it here"? Some decisions are dictated by backwards compatibility or historical mistakes. | 19:27 |
| marekd | and this you cannot easily figure out in a short period of time I think | 19:27 |
| *** marzif has quit IRC | 19:27 | |
| shaleh | marekd: ++ I find decisions without reasons useless | 19:27 |
| shaleh | I have been reading reviews but often I lack context | 19:28 |
| *** marzif has joined #openstack-keystone | 19:28 | |
| shaleh | especially since the bug system is so poorly used as a way to store bug progress and details | 19:28 |
| marekd | shaleh: well, sometimes we make mistakes or there is a decision dicated by other factors, not really visible in the review itself. | 19:28 |
| marekd | one just need to start spending time on a project and at some point it will click. | 19:28 |
| *** jsavak has joined #openstack-keystone | 19:28 | |
| marekd | that's how i see this. | 19:28 |
| shaleh | marekd: agreed, that is what I have been doing. But the ramp up is painful. Especially if you want to read and hack instead of hang out here on IRC all day :-) | 19:29 |
| shaleh | finding reviews is not easy on gerrit either | 19:30 |
| shaleh | so duplicated work happens. | 19:30 |
| marekd | use next-review | 19:30 |
| marekd | pip install next-review | 19:30 |
| shaleh | marekd: no, I mean looking for a review doing something similar to what you are doing | 19:30 |
| marekd | a | 19:30 |
| shaleh | right now I use 'file:<some file>' as the fastest way | 19:31 |
| marekd | i didn't even know it existed :P | 19:31 |
| dstanek | shaleh: i find that there isn't really a ton of discussion on bugs. i think a lot of it tends to be done in chat. | 19:31 |
| shaleh | dstanek: which is painful when the bug is left lingering for months | 19:31 |
| shaleh | so much of the context of all of the work lives here in the active contributors conversations | 19:32 |
| shaleh | not on the mailing list, not on the bugs. | 19:32 |
| shaleh | digging through review comments is not fun either | 19:33 |
| shaleh | educational, but not fun | 19:33 |
| dstanek | i don't think that will ever significantly change - the key will be being on top of bugs | 19:33 |
| *** tonytan4ever has quit IRC | 19:34 | |
| dstanek | for example if we only had 25 open bugs then this wouldn't be much of a problem | 19:34 |
| *** amakarov is now known as amakarov_away | 19:35 | |
| shaleh | dstanek: give us a few more weeks of Bug Friday and we will find out :-) | 19:36 |
| dstanek | shaleh: i'm hoping :-) | 19:37 |
| jamielennox | i keep forgetting we have to increase upper-constraints.txt now to get things to run in gate | 19:37 |
| dstanek | shaleh: for core contributors you have the other issue of having 150+ code reviews to look at | 19:37 |
| shaleh | while working on something I was writing a unit test and wanted to make some dummy items like services and endpoints. Reading the code I noticed that some code makes dicts for the ref by hand and others use unit.new_<thing>_ref(). I have a patch ready to submit that migrates the code for endpoints to just using new_endpoint_ref() as a start. | 19:38 |
| shaleh | is this reasonable or am I spinning my tires? | 19:38 |
| dstanek | shaleh: no, that's definitely reasonable | 19:39 |
| dstanek | shaleh: if you've already done the work it doesnt' hurt to submit | 19:39 |
| shaleh | dstanek: k. I figured if I fixed one type of ref per review it would keep the noise down | 19:39 |
| *** jbell8 has quit IRC | 19:41 | |
| *** jbell8 has joined #openstack-keystone | 19:41 | |
| dstanek | according to next-review i have 217 reviews to look at | 19:41 |
| *** jbell8 has quit IRC | 19:42 | |
| openstackgerrit | Sean Perry proposed openstack/keystone: Use unit.new_endpoint_ref consistently https://review.openstack.org/237758 | 19:42 |
| shaleh | dstanek: when I run next-review it says "no existing session" after it asks for my ssh key. I know the key auth worked because I get a different complaint if I typo the key | 19:46 |
| *** pnavarro|off has joined #openstack-keystone | 19:47 | |
| openstackgerrit | Dolph Mathews proposed openstack/keystone: Demo patch (do not review) https://review.openstack.org/237759 | 19:47 |
| dstanek | shaleh: i think it looks for any review for projects you have starred | 19:48 |
| *** akanksha_ has quit IRC | 19:48 | |
| openstackgerrit | Dolph Mathews proposed openstack/keystone: Demo patch (do not review) https://review.openstack.org/237759 | 19:51 |
| shaleh | dstanek: my unix name != my gerrit name. I needed a -u. | 19:52 |
| shaleh | confusing error message | 19:52 |
| dstanek | shaleh: i just have a review.openstack.org section in my ssh config | 19:52 |
| dstanek | that way i can use different users, keys, etc. | 19:53 |
| shaleh | dstanek: good idea | 19:53 |
| *** fawadkhaliq has quit IRC | 19:58 | |
| *** jaosorior has quit IRC | 19:59 | |
| morgan | dolphm: but i want to review the demonpatch! | 20:00 |
| *** jaosorior has joined #openstack-keystone | 20:01 | |
| *** boris-42 has joined #openstack-keystone | 20:02 | |
| dstanek | sounds evil | 20:02 |
| stevemar_ | demon patch! | 20:04 |
| *** ankurgupta has quit IRC | 20:04 | |
| stevemar_ | dolphm: morgan i'm going to be afk for a good chunk of tomorrow and thursday sadly, | 20:04 |
| stevemar_ | have some course i need to go to | 20:04 |
| *** ankurgupta has joined #openstack-keystone | 20:04 | |
| stevemar_ | just a heads up if you can't find me | 20:05 |
| *** jsavak has quit IRC | 20:06 | |
| *** jsavak has joined #openstack-keystone | 20:06 | |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Explain default domain in docs for other services https://review.openstack.org/232098 | 20:07 |
| stevemar_ | thanks bknudson | 20:08 |
| bknudson | stevemar_: just doing my job | 20:08 |
| stevemar_ | bknudson: mind doing your job on this review: https://review.openstack.org/#/c/171916/ ? | 20:08 |
| *** marzif has quit IRC | 20:22 | |
| *** petertr7 is now known as petertr7_away | 20:22 | |
| *** marzif has joined #openstack-keystone | 20:25 | |
| *** pnavarro|off has quit IRC | 20:25 | |
| *** tonytan4ever has joined #openstack-keystone | 20:28 | |
| stevemar_ | bknudson: bah on you https://review.openstack.org/#/c/171916/19/keystone/tests/unit/test_sql_upgrade.py | 20:33 |
| *** marzif has quit IRC | 20:33 | |
| *** petertr7_away is now known as petertr7 | 20:34 | |
| *** pnavarro|off has joined #openstack-keystone | 20:34 | |
| openstackgerrit | Merged openstack/keystone: Correct bashate issues in gen_pki.sh https://review.openstack.org/237644 | 20:38 |
| *** gyee has joined #openstack-keystone | 20:43 | |
| *** ChanServ sets mode: +v gyee | 20:43 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone: Updating sample configuration file https://review.openstack.org/236807 | 20:43 |
| *** su_zhang has joined #openstack-keystone | 20:49 | |
| *** su_zhang has quit IRC | 20:53 | |
| *** pauloewerton has quit IRC | 20:53 | |
| *** jasonsb has quit IRC | 21:00 | |
| *** raildo is now known as raildo-afk | 21:01 | |
| *** spandhe has quit IRC | 21:01 | |
| *** spandhe has joined #openstack-keystone | 21:04 | |
| *** zqfan_afk has quit IRC | 21:06 | |
| *** NM has quit IRC | 21:09 | |
| *** jsavak has quit IRC | 21:12 | |
| *** lhcheng has quit IRC | 21:13 | |
| *** ankurgupta has quit IRC | 21:18 | |
| *** jamielennox is now known as jamielennox|away | 21:20 | |
| *** su_zhang has joined #openstack-keystone | 21:21 | |
| *** pnavarro|off has quit IRC | 21:21 | |
| *** petertr7 is now known as petertr7_away | 21:23 | |
| *** jamielennox|away is now known as jamielennox | 21:28 | |
| *** phalmos has quit IRC | 21:37 | |
| *** timcline has quit IRC | 21:40 | |
| *** alex_xu has quit IRC | 21:46 | |
| *** breton has quit IRC | 21:47 | |
| *** alejandrito has quit IRC | 21:47 | |
| *** alex_xu has joined #openstack-keystone | 21:48 | |
| *** jongchoi_ has joined #openstack-keystone | 21:57 | |
| *** stevemar_ has quit IRC | 21:58 | |
| openstackgerrit | Fernando Diaz proposed openstack/keystone: Add Mapping Combinations for Keystone to Keystone Federation https://review.openstack.org/237673 | 21:58 |
| openstackgerrit | Merged openstack/keystone: change stackforge url to openstack url https://review.openstack.org/237396 | 21:58 |
| *** jbell8 has joined #openstack-keystone | 21:58 | |
| *** stevemar_ has joined #openstack-keystone | 21:58 | |
| *** ChanServ sets mode: +o stevemar_ | 21:58 | |
| *** edmondsw has quit IRC | 21:59 | |
| *** spandhe has quit IRC | 21:59 | |
| *** lhcheng has joined #openstack-keystone | 22:01 | |
| *** ChanServ sets mode: +v lhcheng | 22:01 | |
| *** stevemar_ has quit IRC | 22:02 | |
| *** diazjf has left #openstack-keystone | 22:03 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone: Updating sample configuration file https://review.openstack.org/236807 | 22:03 |
| *** doug-fish has quit IRC | 22:05 | |
| *** urulama has quit IRC | 22:08 | |
| *** browne has quit IRC | 22:08 | |
| *** urulama has joined #openstack-keystone | 22:08 | |
| *** browne has joined #openstack-keystone | 22:09 | |
| *** browne has quit IRC | 22:14 | |
| *** gildub has joined #openstack-keystone | 22:18 | |
| *** jbell8 has quit IRC | 22:21 | |
| *** tonytan4ever has quit IRC | 22:23 | |
| *** jongchoi_ has quit IRC | 22:26 | |
| *** slberger has left #openstack-keystone | 22:26 | |
| *** jamielennox is now known as jamielennox|away | 22:31 | |
| *** pumaranikar has quit IRC | 22:35 | |
| *** jongchoi has joined #openstack-keystone | 22:36 | |
| *** jongchoi has quit IRC | 22:36 | |
| *** gordc has quit IRC | 22:37 | |
| *** jaosorior has quit IRC | 22:47 | |
| *** jaosorior has joined #openstack-keystone | 22:47 | |
| *** browne has joined #openstack-keystone | 23:10 | |
| *** alex_xu has quit IRC | 23:11 | |
| *** alex_xu has joined #openstack-keystone | 23:12 | |
| *** breton has joined #openstack-keystone | 23:13 | |
| *** breton has quit IRC | 23:17 | |
| *** jamielennox|away is now known as jamielennox | 23:32 | |
| *** dims_ has quit IRC | 23:45 | |
| *** dims has joined #openstack-keystone | 23:46 | |
| *** topol has joined #openstack-keystone | 23:51 | |
| *** ChanServ sets mode: +v topol | 23:51 | |
| *** topol has quit IRC | 23:52 | |
| *** pumaranikar has joined #openstack-keystone | 23:52 | |
| *** topol has joined #openstack-keystone | 23:52 | |
| *** ChanServ sets mode: +v topol | 23:52 | |
| *** Ephur has quit IRC | 23:52 | |
| *** pumaranikar has quit IRC | 23:57 | |
| *** topol has quit IRC | 23:57 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!