| openstackgerrit | Rodrigo Duarte proposed openstack/keystone: Add identity providers integration tests https://review.openstack.org/302299 | 00:09 |
|---|---|---|
| *** mylu has quit IRC | 00:19 | |
| *** markvoelker has joined #openstack-keystone | 00:32 | |
| *** markvoelker has quit IRC | 00:37 | |
| *** fedruantine has quit IRC | 00:42 | |
| *** mylu has joined #openstack-keystone | 00:58 | |
| *** roxanaghe has joined #openstack-keystone | 01:00 | |
| *** roxanaghe has quit IRC | 01:10 | |
| *** mylu has quit IRC | 01:11 | |
| *** dave-mccowan has joined #openstack-keystone | 01:11 | |
| *** mylu has joined #openstack-keystone | 01:11 | |
| dstanek | hoonetorg: they need to be somewhat in sync | 01:26 |
| *** stingaci has joined #openstack-keystone | 01:27 | |
| dstanek | it should be mostly safe to rotate on one and sync that to the others since the next *live* key is already synced | 01:27 |
| *** stingaci has quit IRC | 01:32 | |
| *** markvoelker has joined #openstack-keystone | 01:33 | |
| hoonetorg | \ | 01:35 |
| hoonetorg | \ | 01:35 |
| hoonetorg | sorry my cat tapping over the keyboard :) | 01:36 |
| hoonetorg | dstanek: is the rotation done in keystone or do i do that manually?? | 01:37 |
| *** markvoelker has quit IRC | 01:37 | |
| dstanek | hoonetorg: you have to use the manage command to do the rotation | 01:37 |
| dstanek | hoonetorg: them you have to use your configuration management system (or rsync) to do the sync | 01:38 |
| hoonetorg | so cronjob rotating the keys and rsyncing them over to all other keystone nodes is sufficient | 01:38 |
| dstanek | hoonetorg: i would imagine so, but i'd have to delegate to lbragstad to make sure i'm not giving you bad advice. | 01:39 |
| dstanek | i don't actually deploy fernet in any meaningful way | 01:39 |
| hoonetorg | i think i read that the fuel people creat/rotate fernet keys on their puppet master and nodes get new keys on next puppet run | 01:39 |
| hoonetorg | must read again | 01:40 |
| *** dan_nguyen has joined #openstack-keystone | 01:41 | |
| hoonetorg | but my important question was: rotating of fernet keys is always done by me | 01:41 |
| dstanek | hoonetorg: you or your CM system. keystone does't do that for you. it's just a dumb webapp. | 01:42 |
| hoonetorg | the keystone executable doesn't do any fernet key rotation, does it? | 01:42 |
| hoonetorg | ok dstanek, you were faster | 01:42 |
| hoonetorg | i think it's possible to keep them somehow in sync | 01:43 |
| *** dan_nguyen has quit IRC | 01:45 | |
| *** dan_nguyen has joined #openstack-keystone | 01:46 | |
| *** fedruantine has joined #openstack-keystone | 01:46 | |
| dstanek | hoonetorg: keystone will rotate on a single node using 'keystone-manage fernet_rotate', but you can only do that on one node | 01:47 |
| dstanek | hoonetorg: although i think i remember reading that mfisch doesn't use that and does his own thing - so there are lots of possibilities | 01:48 |
| hoonetorg | dstanek: probably that one https://review.openstack.org/gitweb?p=openstack/fuel-library.git;a=commitdiff;h=537bfaab33dbf9be8203c6c45aba6bd19b7fbfcc | 01:54 |
| hoonetorg | yeah, found it | 01:55 |
| *** mylu has quit IRC | 02:09 | |
| *** jasonsb has joined #openstack-keystone | 02:18 | |
| *** jasonsb has quit IRC | 02:23 | |
| *** markvoelker has joined #openstack-keystone | 02:33 | |
| *** markvoelker has quit IRC | 02:38 | |
| *** sdake has joined #openstack-keystone | 02:41 | |
| *** sdake_ has joined #openstack-keystone | 02:44 | |
| *** sdake has quit IRC | 02:46 | |
| *** mylu has joined #openstack-keystone | 03:19 | |
| *** mylu has quit IRC | 03:20 | |
| morgan | Zzzzzzzzzzzz | 03:23 |
| morgan | Post Summit so-not-awake | 03:24 |
| *** dan_nguyen has quit IRC | 03:26 | |
| *** mylu has joined #openstack-keystone | 03:27 | |
| *** mylu has quit IRC | 03:30 | |
| *** mylu has joined #openstack-keystone | 03:31 | |
| *** markvoelker has joined #openstack-keystone | 03:34 | |
| *** markvoelker has quit IRC | 03:39 | |
| *** fedruantine has quit IRC | 03:46 | |
| *** mylu has quit IRC | 04:03 | |
| *** mylu has joined #openstack-keystone | 04:05 | |
| *** mylu has quit IRC | 04:08 | |
| *** sdake_ has quit IRC | 04:09 | |
| *** mylu has joined #openstack-keystone | 04:20 | |
| *** jasonsb has joined #openstack-keystone | 04:20 | |
| *** jasonsb has quit IRC | 04:25 | |
| *** stingaci has joined #openstack-keystone | 04:29 | |
| *** stingaci has quit IRC | 04:33 | |
| *** markvoelker has joined #openstack-keystone | 04:35 | |
| *** markvoelker has quit IRC | 04:40 | |
| *** yolanda has joined #openstack-keystone | 04:45 | |
| *** dave-mccowan has quit IRC | 04:52 | |
| *** fedruantine has joined #openstack-keystone | 05:10 | |
| *** sdake has joined #openstack-keystone | 05:25 | |
| *** mylu has quit IRC | 05:33 | |
| *** markvoelker has joined #openstack-keystone | 05:36 | |
| *** markvoelker has quit IRC | 05:40 | |
| *** sdake has quit IRC | 05:53 | |
| *** sdake has joined #openstack-keystone | 06:02 | |
| *** stingaci has joined #openstack-keystone | 06:27 | |
| *** TxGVNN has joined #openstack-keystone | 06:27 | |
| *** stingaci has quit IRC | 06:31 | |
| *** sdake has quit IRC | 06:35 | |
| *** markvoelker has joined #openstack-keystone | 06:37 | |
| *** markvoelker has quit IRC | 06:41 | |
| *** fedruantine has quit IRC | 06:53 | |
| *** jasonsb has joined #openstack-keystone | 07:35 | |
| *** markvoelker has joined #openstack-keystone | 07:37 | |
| *** jasonsb has quit IRC | 07:40 | |
| *** markvoelker has quit IRC | 07:42 | |
| *** yolanda has quit IRC | 07:46 | |
| *** fedruantine has joined #openstack-keystone | 07:51 | |
| *** zzzeek has quit IRC | 08:00 | |
| *** zzzeek has joined #openstack-keystone | 08:00 | |
| *** henrynash has joined #openstack-keystone | 08:05 | |
| *** ChanServ sets mode: +v henrynash | 08:05 | |
| *** markvoelker has joined #openstack-keystone | 08:38 | |
| *** markvoelker has quit IRC | 08:43 | |
| *** yolanda has joined #openstack-keystone | 09:22 | |
| *** markvoelker has joined #openstack-keystone | 09:39 | |
| *** markvoelker has quit IRC | 09:44 | |
| *** fedruantine has quit IRC | 09:56 | |
| *** dims has quit IRC | 09:56 | |
| *** dims has joined #openstack-keystone | 10:01 | |
| *** TxGVNN has quit IRC | 10:02 | |
| *** stingaci has joined #openstack-keystone | 10:28 | |
| *** fedruantine has joined #openstack-keystone | 10:29 | |
| *** sdake_ has joined #openstack-keystone | 10:32 | |
| *** stingaci has quit IRC | 10:33 | |
| *** rodrigods has quit IRC | 10:35 | |
| *** rodrigods has joined #openstack-keystone | 10:35 | |
| *** jasonsb has joined #openstack-keystone | 10:37 | |
| *** markvoelker has joined #openstack-keystone | 10:40 | |
| *** jasonsb has quit IRC | 10:42 | |
| *** markvoelker has quit IRC | 10:44 | |
| *** d0ugal has quit IRC | 11:09 | |
| *** d0ugal has joined #openstack-keystone | 11:10 | |
| *** sdake has joined #openstack-keystone | 11:18 | |
| *** sdake_ has quit IRC | 11:18 | |
| openstackgerrit | Stefan Herrnleben proposed openstack/keystone: Invalid default group filter in LDAP GroupAPI https://review.openstack.org/311612 | 11:24 |
| *** markvoelker has joined #openstack-keystone | 11:41 | |
| *** markvoelker has quit IRC | 11:45 | |
| *** permalac has joined #openstack-keystone | 11:46 | |
| *** ianw has quit IRC | 11:52 | |
| *** ianw has joined #openstack-keystone | 11:52 | |
| *** sdake has quit IRC | 12:00 | |
| *** EinstCrazy has joined #openstack-keystone | 12:20 | |
| *** EinstCrazy has quit IRC | 12:26 | |
| *** markvoelker has joined #openstack-keystone | 12:36 | |
| *** jasonsb has joined #openstack-keystone | 12:39 | |
| *** jasonsb has quit IRC | 12:44 | |
| *** daemontool has joined #openstack-keystone | 12:46 | |
| *** hoonetorg has quit IRC | 12:52 | |
| *** fedruantine has quit IRC | 13:01 | |
| *** hoonetorg has joined #openstack-keystone | 13:05 | |
| *** TxGVNN has joined #openstack-keystone | 13:09 | |
| *** hogepodge has quit IRC | 13:20 | |
| *** fedruantine has joined #openstack-keystone | 13:39 | |
| *** stingaci has joined #openstack-keystone | 14:00 | |
| *** stingaci has quit IRC | 14:04 | |
| *** sdake has joined #openstack-keystone | 14:10 | |
| *** sdake_ has joined #openstack-keystone | 14:15 | |
| *** sdake has quit IRC | 14:17 | |
| *** sdake_ is now known as dake | 14:26 | |
| *** agireud has joined #openstack-keystone | 14:32 | |
| *** TxGVNN has quit IRC | 14:43 | |
| *** markvoelker has quit IRC | 14:43 | |
| *** sdake has joined #openstack-keystone | 14:52 | |
| *** dake has quit IRC | 14:52 | |
| *** mylu has joined #openstack-keystone | 15:18 | |
| *** dan_nguyen has joined #openstack-keystone | 15:23 | |
| *** markvoelker has joined #openstack-keystone | 15:44 | |
| *** markvoelker has quit IRC | 15:49 | |
| *** fedruantine has quit IRC | 15:50 | |
| *** yolanda has quit IRC | 16:14 | |
| *** yolanda has joined #openstack-keystone | 16:22 | |
| *** zqfan has quit IRC | 16:22 | |
| *** fedruantine has joined #openstack-keystone | 16:23 | |
| *** mylu has quit IRC | 16:23 | |
| *** mylu has joined #openstack-keystone | 16:32 | |
| *** jasonsb has joined #openstack-keystone | 16:42 | |
| *** dan_nguyen has quit IRC | 16:43 | |
| *** markvoelker has joined #openstack-keystone | 16:45 | |
| *** doug___ has joined #openstack-keystone | 16:46 | |
| *** doug___ is now known as bigdogstl | 16:46 | |
| *** bigdogstl has quit IRC | 16:47 | |
| *** bigdogstl has joined #openstack-keystone | 16:47 | |
| *** jasonsb has quit IRC | 16:48 | |
| *** markvoelker has quit IRC | 16:49 | |
| *** bigdogstl has quit IRC | 16:49 | |
| *** dan_nguyen has joined #openstack-keystone | 16:49 | |
| morgan | zzzeek: i'll have a PR (is it really a PR?) for merging dogpile.core into dogpile.cache today. | 16:57 |
| morgan | zzzeek: running tests right now (it seems to be working) | 16:57 |
| morgan | the dogpile tests sure do take a chunk of time though... wonder if i'm stuck in a loop | 16:57 |
| *** mylu has quit IRC | 17:04 | |
| *** mylu has joined #openstack-keystone | 17:05 | |
| *** mylu has quit IRC | 17:09 | |
| *** BigDogStl has joined #openstack-keystone | 17:10 | |
| *** permalac has quit IRC | 17:12 | |
| *** BigDogStl has quit IRC | 17:13 | |
| *** mylu has joined #openstack-keystone | 17:25 | |
| *** ChanServ sets mode: -v morgan | 17:26 | |
| *** mylu_ has joined #openstack-keystone | 17:28 | |
| *** sdake_ has joined #openstack-keystone | 17:29 | |
| *** sdake has quit IRC | 17:30 | |
| *** mylu has quit IRC | 17:30 | |
| *** sdake has joined #openstack-keystone | 17:32 | |
| *** dan_nguyen has quit IRC | 17:33 | |
| *** sdake_ has quit IRC | 17:33 | |
| *** mylu_ has quit IRC | 17:37 | |
| *** mylu has joined #openstack-keystone | 17:37 | |
| *** sdake_ has joined #openstack-keystone | 17:45 | |
| *** markvoelker has joined #openstack-keystone | 17:46 | |
| *** sdake has quit IRC | 17:48 | |
| *** markvoelker has quit IRC | 17:50 | |
| *** sdake_ has quit IRC | 17:56 | |
| *** sdake has joined #openstack-keystone | 17:57 | |
| *** stingaci has joined #openstack-keystone | 18:02 | |
| *** stingaci has quit IRC | 18:06 | |
| *** sdake_ has joined #openstack-keystone | 18:09 | |
| *** sdake has quit IRC | 18:09 | |
| *** dave-mccowan has joined #openstack-keystone | 18:17 | |
| *** sdake_ has quit IRC | 18:18 | |
| *** sdake has joined #openstack-keystone | 18:21 | |
| *** zeus has quit IRC | 18:21 | |
| *** zeus has joined #openstack-keystone | 18:26 | |
| *** zeus is now known as Guest68119 | 18:26 | |
| *** fedruantine has quit IRC | 18:27 | |
| *** mylu has quit IRC | 18:36 | |
| *** sdake has quit IRC | 18:44 | |
| *** markvoelker has joined #openstack-keystone | 18:46 | |
| *** markvoelker has quit IRC | 18:51 | |
| *** mylu has joined #openstack-keystone | 18:58 | |
| *** hogepodge has joined #openstack-keystone | 19:05 | |
| *** stingaci has joined #openstack-keystone | 19:08 | |
| *** yolanda has quit IRC | 19:11 | |
| *** dancn has quit IRC | 19:17 | |
| *** fedruantine has joined #openstack-keystone | 19:37 | |
| *** markvoelker has joined #openstack-keystone | 19:47 | |
| *** richm has joined #openstack-keystone | 19:50 | |
| *** markvoelker has quit IRC | 19:52 | |
| *** mylu has quit IRC | 19:52 | |
| *** mylu has joined #openstack-keystone | 19:54 | |
| *** sdake has joined #openstack-keystone | 19:57 | |
| *** sdake_ has joined #openstack-keystone | 20:00 | |
| *** sdake has quit IRC | 20:02 | |
| *** richm has quit IRC | 20:09 | |
| *** mylu has quit IRC | 20:17 | |
| *** mylu has joined #openstack-keystone | 20:18 | |
| *** sdake has joined #openstack-keystone | 20:19 | |
| *** sdake_ has quit IRC | 20:21 | |
| *** ozialien10 has quit IRC | 20:25 | |
| *** stingaci has quit IRC | 20:37 | |
| *** stingaci has joined #openstack-keystone | 20:37 | |
| *** stingaci has quit IRC | 20:42 | |
| *** jasonsb has joined #openstack-keystone | 20:46 | |
| *** markvoelker has joined #openstack-keystone | 20:48 | |
| *** jasonsb has quit IRC | 20:51 | |
| *** markvoelker has quit IRC | 20:53 | |
| *** tlbr has quit IRC | 21:03 | |
| *** sdake_ has joined #openstack-keystone | 21:07 | |
| *** sdake has quit IRC | 21:08 | |
| *** dan_nguyen has joined #openstack-keystone | 21:11 | |
| *** fedruantine has quit IRC | 21:14 | |
| *** henrynash has quit IRC | 21:16 | |
| *** dan_nguyen has quit IRC | 21:17 | |
| *** henrynash has joined #openstack-keystone | 21:19 | |
| *** ChanServ sets mode: +v henrynash | 21:19 | |
| *** sdake has joined #openstack-keystone | 21:19 | |
| *** sdake_ has quit IRC | 21:20 | |
| *** henrynash has quit IRC | 21:47 | |
| *** markvoelker has joined #openstack-keystone | 21:49 | |
| *** markvoelker has quit IRC | 21:53 | |
| *** edtubill has joined #openstack-keystone | 22:03 | |
| *** edtubill has quit IRC | 22:10 | |
| *** henrynash has joined #openstack-keystone | 22:14 | |
| *** ChanServ sets mode: +v henrynash | 22:14 | |
| *** fedruantine has joined #openstack-keystone | 22:26 | |
| *** sdake_ has joined #openstack-keystone | 22:28 | |
| openstackgerrit | henry-nash proposed openstack/keystone: DO NOT REVIEW: Test https://review.openstack.org/311638 | 22:28 |
| *** sdake has quit IRC | 22:30 | |
| *** jasonsb has joined #openstack-keystone | 22:48 | |
| *** markvoelker has joined #openstack-keystone | 22:50 | |
| *** jasonsb has quit IRC | 22:52 | |
| *** markvoelker has quit IRC | 22:54 | |
| *** stingaci has joined #openstack-keystone | 22:54 | |
| *** daemontool has quit IRC | 23:05 | |
| *** sdake has joined #openstack-keystone | 23:09 | |
| *** sdake_ has quit IRC | 23:11 | |
| *** sdake has quit IRC | 23:24 | |
| *** henrynash has quit IRC | 23:29 | |
| *** mylu has quit IRC | 23:36 | |
| *** mylu has joined #openstack-keystone | 23:41 | |
| *** mylu has quit IRC | 23:46 | |
| *** markvoelker has joined #openstack-keystone | 23:50 | |
| *** markvoelker has quit IRC | 23:55 | |
| *** sdake has joined #openstack-keystone | 23:55 | |
| *** mylu has joined #openstack-keystone | 23:56 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!