| jamielennox | bknudson, stevemar, @here: so the change to add is_admin_project to all tokens, not just is_admin_project=true - can i get away with a bug for that? | 00:03 |
|---|---|---|
| openstackgerrit | Merged openstack/keystone: Make all fixture project_ids into uuids https://review.openstack.org/306681 | 00:03 |
| jamielennox | seems trivial for a spec, but it could be considered api | 00:03 |
| bknudson | does the API spec need to change? | 00:04 |
| bknudson | a bug would help explain what problem it's causing. | 00:04 |
| jamielennox | bknudson: it's only referenced in the token option attributes, and doesn't say that it is only set true | 00:06 |
| jamielennox | so it would be more clarifying it to say that would be always set | 00:06 |
| jamielennox | but my reading doesn't indicate i would need to update anything there | 00:07 |
| bknudson | it's in the "Optional asttributes" section, so it should be moved to the "Required attributes" setion | 00:07 |
| jamielennox | can it be required when it's only introduced in a later api version? | 00:07 |
| bknudson | I guess the spec should say it's required in 3.7 and optional in 3.6 ? | 00:09 |
| *** amrith is now known as _amrith_ | 00:09 | |
| bknudson | I'd expect it to still be moved to required, and say it was optional in 3.6 | 00:10 |
| jamielennox | ok, but still seems like i can do that without a spec | 00:10 |
| bknudson | a spec seems like overkill to me. | 00:11 |
| jamielennox | bknudson: me too, but i thought i'd check with others | 00:12 |
| *** markvoelker has joined #openstack-keystone | 00:14 | |
| jamielennox | bknudson: filed bug 1577996 | 00:21 |
| openstack | bug 1577996 in OpenStack Identity (keystone) "Unable to distinguish between not is_admin_project and feature not enabled" [Undecided,New] https://launchpad.net/bugs/1577996 | 00:21 |
| jamielennox | ayoung: ^ | 00:21 |
| ayoung | jamielennox, its a feature | 00:22 |
| jamielennox | there is a question there about adding it to every token, or adding False when admin project is not defined | 00:22 |
| jamielennox | ayoung: everything is | 00:22 |
| ayoung | jamielennox, so, did you catch the hack to fix that we discussed at the summit? Essentially what you wrote there, but... | 00:23 |
| ayoung | if the feature is not enabled, we put it in the token IFF the user requests an admin_token | 00:23 |
| ayoung | er | 00:23 |
| ayoung | a token with admin_role in it | 00:23 |
| ayoung | so...yeah, its on my roadmap | 00:23 |
| *** pgbridge has joined #openstack-keystone | 00:24 | |
| ayoung | jamielennox, does not need to be in the token, though. | 00:24 |
| *** _amrith_ is now known as amrith | 00:24 | |
| jamielennox | ayoung: yea, that was in my policy discussion and what i was going for with the bug | 00:24 |
| ayoung | jamielennox, cool. I just grabbed it, assuming you wrote it for me. | 00:25 |
| jamielennox | i'm happy to fix this one | 00:25 |
| jamielennox | oh, depends on speed, i was going to do a quick version now | 00:25 |
| jamielennox | cause i'm thinking i'll need a new cross project spec to fix policy for projects to use it | 00:25 |
| jamielennox | i was just giving you the heads up because we discussed it | 00:26 |
| *** roxanaghe has quit IRC | 00:30 | |
| *** rderose has quit IRC | 00:50 | |
| *** dan_nguyen has quit IRC | 00:53 | |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Revert "Revert "Unit test for checking cross-version migrations compatibility"" https://review.openstack.org/310589 | 00:56 |
| *** amrith is now known as _amrith_ | 00:59 | |
| *** csoukup has joined #openstack-keystone | 01:04 | |
| *** csoukup has quit IRC | 01:08 | |
| *** dan_nguyen has joined #openstack-keystone | 01:10 | |
| *** sdake has quit IRC | 01:13 | |
| jamielennox | ayoung: ping - are you taking it, i was going to fix it but i don't want to repeat the work if you are doing ti | 01:13 |
| ayoung | jamielennox, take it | 01:14 |
| jamielennox | cool | 01:14 |
| ayoung | its yours, assuming you are going with the solution I just wrote | 01:14 |
| ayoung | if tyou are doing something else, please let me know about it first | 01:14 |
| ayoung | jamielennox, I was going to modify things right here http://git.openstack.org/cgit/openstack/keystone/tree/keystone/token/providers/common.py#n275 | 01:16 |
| ayoung | something like: | 01:16 |
| ayoung | else: if 'admin' in roles: token_data['is_admin_project'] = True | 01:16 |
| ayoung | and move the check http://git.openstack.org/cgit/openstack/keystone/tree/keystone/token/providers/common.py#n522 | 01:17 |
| ayoung | jamielennox, make sense, or do you have something else planned? | 01:17 |
| jamielennox | i don't want to explicitly check admin role - i don't think we need to | 01:17 |
| *** vkmc is now known as Guest9874 | 01:20 | |
| *** Guest9874 is now known as cmkv | 01:22 | |
| *** cmkv is now known as violenciarivas | 01:22 | |
| *** violenciarivas is now known as vkmc | 01:23 | |
| *** EinstCrazy has joined #openstack-keystone | 01:24 | |
| *** dan_nguyen has quit IRC | 01:24 | |
| ayoung | jamielennox, just put it in all tokens? That would actually work | 01:27 |
| jamielennox | yea, that was the plan | 01:27 |
| jamielennox | still testing that i haven't done anything silly but basically: http://paste.openstack.org/show/496022/ | 01:28 |
| *** EinstCrazy has quit IRC | 01:28 | |
| *** EinstCrazy has joined #openstack-keystone | 01:29 | |
| *** EinstCrazy has quit IRC | 01:29 | |
| *** EinstCrazy has joined #openstack-keystone | 01:30 | |
| jamielennox | it's probably not a backport candidate - but it's a shame because it essentially means that is_admin_project isn't useful in this release | 01:32 |
| *** EinstCra_ has joined #openstack-keystone | 01:32 | |
| *** EinstCrazy has quit IRC | 01:33 | |
| ayoung | jamielennox, change line 277 to | 01:33 |
| ayoung | token_data['is_admin_project'] = True | 01:33 |
| *** EinstCrazy has joined #openstack-keystone | 01:33 | |
| ayoung | if the feature is not enabled, always add that to a token | 01:33 |
| ayoung | that is, essentially what we have now | 01:33 |
| *** wxy has joined #openstack-keystone | 01:33 | |
| jamielennox | ayoung: that was the choice i was talking about in the bug, i don't mind which way we go on that | 01:33 |
| ayoung | jamielennox, what is the other choice? | 01:34 |
| jamielennox | because the policy check is going to have to be token.get(is_admin_project, True) for backwards compatibility | 01:34 |
| jamielennox | so so long as we have = False in there setting true doesn't matter that much | 01:34 |
| ayoung | I'm pretty sure that missing is OK | 01:35 |
| jamielennox | having empty in the token can be used to indicate this feature not being used in the cloud, which i don't know if it matters we leak that anyway as it's easy to guess | 01:35 |
| ayoung | jamielennox, grab this review and test with it: https://review.openstack.org/#/c/257636/ | 01:36 |
| patchbot | ayoung: patch 257636 - keystone - Add is_admin_project check to policy.json | 01:36 |
| jamielennox | ayoung: what's adding is_admin_project to the context there | 01:37 |
| jamielennox | i was thinking because of the unusual default i would want to add an is_admin_project check to oslo.policy | 01:37 |
| *** EinstCra_ has quit IRC | 01:37 | |
| ayoung | jamielennox, getting it right out of the token itself works | 01:37 |
| ayoung | we do the same thing in cloudsample | 01:37 |
| ayoung | http://git.openstack.org/cgit/openstack/keystone/tree/etc/policy.v3cloudsample.json#n3 | 01:38 |
| jamielennox | yea, works for keystone because we dump the entire token into policy enforcement, not true for other services | 01:38 |
| ayoung | we have a test that shows it works... | 01:38 |
| jamielennox | so (not knowing enough of the internals) how will that work if Is_admin_token is not present in the token? | 01:38 |
| ayoung | jamielennox, you sure? I thought I checked that. | 01:39 |
| ayoung | I had a context patch but killed it | 01:39 |
| *** EinstCrazy has quit IRC | 01:39 | |
| * ayoung can pull it back up | 01:39 | |
| jamielennox | i have some work to do in oslo.context to add it there as well | 01:39 |
| jamielennox | and then get all services using it | 01:39 |
| ayoung | jamielennox, https://review.openstack.org/#/c/295870/ | 01:39 |
| patchbot | ayoung: patch 295870 - oslo.context - Add is_admin_project check (ABANDONED) | 01:39 |
| jamielennox | because, ugh | 01:39 |
| ayoung | jamielennox, should I restore that? | 01:40 |
| jamielennox | ayoung: so not exactly as is, i would like to add it to the from_environ check | 01:41 |
| *** EinstCrazy has joined #openstack-keystone | 01:41 | |
| jamielennox | which would probably mean passing the flag down out of auth_token middleware | 01:41 |
| ayoung | jamielennox, I'll restore and you can take it from there | 01:41 |
| jamielennox | i don't want to have every service have to figure out what to pass to __init__ there | 01:41 |
| ayoung | jamielennox, yep, see bknudson 's comment, too | 01:42 |
| ayoung | regardless, the change can go into Keystone to start. | 01:42 |
| jamielennox | yea, i don't think we do oslo.context correctly anyway | 01:43 |
| *** ozialien10 has joined #openstack-keystone | 01:46 | |
| *** ozialien10 has quit IRC | 01:46 | |
| *** ozialien10 has joined #openstack-keystone | 01:47 | |
| ayoung | jamielennox, oslo config question. I want to make the api, the scheduler, the conductor services and compute node to each read a different Rabbit user out of the Nova config file(s). Are there any tools to make that somewhat easy? | 01:47 |
| jamielennox | umm | 01:49 |
| jamielennox | ayoung: not afaik if they are reading from the same actual file | 01:49 |
| ayoung | jamielennox, they are in devstack, and whenever co-located | 01:49 |
| ayoung | is there support for includes? | 01:50 |
| jamielennox | but those are very different services and the easiest thing to do is probably create a new config file for each service like glance does | 01:50 |
| ayoung | yeah, but they share a huge portion of the config file, I think | 01:50 |
| jamielennox | i think there is some support for conf directories, but i'm not sure | 01:50 |
| ayoung | I really don't want to rework Nova's config file | 01:50 |
| jamielennox | ayoung: which is a problem for devstack but not your average config mgmt system | 01:50 |
| ayoung | Nova core hates me. | 01:50 |
| ayoung | I mean, they hate everyone, but that includes me | 01:51 |
| jamielennox | ayoung: but apparently they had enough people complain about it last week that they are going to do it anyway | 01:51 |
| ayoung | really? | 01:51 |
| jamielennox | i'm told at least the vendordata extension has been undeprecated | 01:51 |
| jamielennox | and i'm sure they will do it there own way, but it might get here | 01:51 |
| jamielennox | there | 01:51 |
| *** dan_nguyen has joined #openstack-keystone | 01:51 | |
| *** pgbridge has quit IRC | 01:54 | |
| ayoung | vendordata is for metatdata I thought? | 01:57 |
| jamielennox | i'm not sure, i just know that someone in that session complained they were using it for something like this but it got deprecated | 01:57 |
| ayoung | CONF(default_config_files=['app.conf', 'mything.conf']) | 01:58 |
| ayoung | So I could do somethuing like | 01:58 |
| jamielennox | i still think you should do it the metadata way for now though | 01:58 |
| ayoung | CONF(default_config_files=['conductor.conf', 'nova.conf']) | 01:58 |
| ayoung | metadata fro Rabbit? | 01:58 |
| ayoung | or are you tallking about autoenroll | 01:58 |
| jamielennox | no i mean the instance users still | 01:58 |
| ayoung | cuz on autoenroll I am withh oyou | 01:58 |
| ayoung | OK | 01:58 |
| jamielennox | so to change CONF for rabbit you would need to change code in all your projects | 01:59 |
| *** EinstCrazy has quit IRC | 01:59 | |
| jamielennox | actually no | 01:59 |
| jamielennox | you can probably pass --config-file multiple times to the service start | 01:59 |
| jamielennox | i think that's how the packages managed to have distro config in /usr/share | 02:00 |
| ayoung | and then each gets a common and a rabbit specific file name. | 02:00 |
| *** EinstCrazy has joined #openstack-keystone | 02:00 | |
| ayoung | yeah, we do something horrible like that in the Keystone RPM | 02:00 |
| jamielennox | all the services i think | 02:00 |
| jamielennox | because it sometimes means the defaults are not the same as upstream which is blah | 02:00 |
| *** EinstCra_ has joined #openstack-keystone | 02:04 | |
| ayoung | dirname = env.get('OS_KEYSTONE_CONFIG_DIR', '').strip() | 02:08 |
| *** woodster_ has quit IRC | 02:08 | |
| *** EinstCrazy has quit IRC | 02:08 | |
| *** jaosorior has joined #openstack-keystone | 02:09 | |
| *** gyee has quit IRC | 02:12 | |
| *** fangxu has quit IRC | 02:19 | |
| *** EinstCra_ has quit IRC | 02:22 | |
| harbor | hi, I know this isn't directly keystone related but there seem to be enough people about who might know the answer :) I'm using ipsilon to authenticate with keystone via federation - and want to map user groups from FreeIPA to keystone user groups - I'm getting everything I need from Ipsilon but in the wrong format : MELLON_group_X etc. but i need a single Var with all the groups in - I've tried a few approche | 02:27 |
| harbor | s but seem to be hitting a brick wall? | 02:27 |
| *** dan_nguyen has quit IRC | 02:37 | |
| *** EinstCrazy has joined #openstack-keystone | 02:44 | |
| *** EinstCrazy has quit IRC | 02:45 | |
| *** markvoelker has quit IRC | 02:52 | |
| *** ozialien10 has quit IRC | 02:52 | |
| *** ozialien10 has joined #openstack-keystone | 02:52 | |
| *** akscram has quit IRC | 02:54 | |
| *** akscram has joined #openstack-keystone | 02:54 | |
| *** EinstCrazy has joined #openstack-keystone | 02:57 | |
| *** EinstCrazy has quit IRC | 02:58 | |
| *** EinstCrazy has joined #openstack-keystone | 03:00 | |
| *** lhcheng has joined #openstack-keystone | 03:01 | |
| *** ChanServ sets mode: +v lhcheng | 03:01 | |
| *** EinstCrazy has quit IRC | 03:01 | |
| *** EinstCrazy has joined #openstack-keystone | 03:03 | |
| *** EinstCrazy has quit IRC | 03:07 | |
| *** EinstCrazy has joined #openstack-keystone | 03:09 | |
| *** dave-mccowan has quit IRC | 03:10 | |
| *** EinstCra_ has joined #openstack-keystone | 03:12 | |
| *** EinstCra_ has quit IRC | 03:15 | |
| *** EinstCrazy has quit IRC | 03:15 | |
| *** EinstCrazy has joined #openstack-keystone | 03:18 | |
| *** wanghua has joined #openstack-keystone | 03:18 | |
| *** EinstCra_ has joined #openstack-keystone | 03:23 | |
| *** EinstCrazy has quit IRC | 03:23 | |
| *** jamielennox is now known as jamielennox|away | 03:28 | |
| *** dan_nguyen has joined #openstack-keystone | 03:35 | |
| *** jamielennox|away is now known as jamielennox | 03:37 | |
| harbor | turned out it was as easy as adding "MellonMergeEnvVars On" to my wsgi-keystone.conf :) | 03:43 |
| *** jaosorior has quit IRC | 03:51 | |
| *** markvoelker has joined #openstack-keystone | 03:52 | |
| *** markvoelker has quit IRC | 03:57 | |
| *** e0ne has joined #openstack-keystone | 03:59 | |
| *** dan_nguyen has quit IRC | 04:00 | |
| *** e0ne has quit IRC | 04:01 | |
| *** e0ne has joined #openstack-keystone | 04:02 | |
| *** EinstCra_ has quit IRC | 04:03 | |
| *** EinstCrazy has joined #openstack-keystone | 04:04 | |
| *** e0ne has quit IRC | 04:05 | |
| *** EinstCrazy has quit IRC | 04:05 | |
| *** jaosorior has joined #openstack-keystone | 04:06 | |
| *** richm has quit IRC | 04:06 | |
| *** EinstCrazy has joined #openstack-keystone | 04:08 | |
| *** EinstCrazy has quit IRC | 04:09 | |
| *** EinstCrazy has joined #openstack-keystone | 04:10 | |
| *** EinstCrazy has quit IRC | 04:10 | |
| *** EinstCrazy has joined #openstack-keystone | 04:12 | |
| *** EinstCrazy has quit IRC | 04:13 | |
| *** EinstCrazy has joined #openstack-keystone | 04:14 | |
| *** EinstCrazy has quit IRC | 04:14 | |
| *** EinstCrazy has joined #openstack-keystone | 04:15 | |
| *** EinstCrazy has quit IRC | 04:15 | |
| *** EinstCrazy has joined #openstack-keystone | 04:16 | |
| *** EinstCrazy has quit IRC | 04:16 | |
| *** EinstCrazy has joined #openstack-keystone | 04:17 | |
| *** EinstCrazy has quit IRC | 04:19 | |
| *** EinstCrazy has joined #openstack-keystone | 04:21 | |
| *** EinstCra_ has joined #openstack-keystone | 04:22 | |
| *** EinstCrazy has quit IRC | 04:22 | |
| *** EinstCra_ has quit IRC | 04:22 | |
| *** EinstCrazy has joined #openstack-keystone | 04:24 | |
| *** EinstCrazy has quit IRC | 04:24 | |
| *** links has joined #openstack-keystone | 04:25 | |
| *** EinstCra_ has joined #openstack-keystone | 04:27 | |
| *** EinstCra_ has quit IRC | 04:28 | |
| *** hoonetorg has quit IRC | 04:32 | |
| *** EinstCrazy has joined #openstack-keystone | 04:32 | |
| *** EinstCrazy has quit IRC | 04:33 | |
| *** hoonetorg has joined #openstack-keystone | 04:33 | |
| openstackgerrit | Jamie Lennox proposed openstack/keystone: Always add is_admin_project if admin project defined https://review.openstack.org/312323 | 04:37 |
| *** EinstCra_ has joined #openstack-keystone | 04:37 | |
| *** EinstCra_ has quit IRC | 04:38 | |
| *** EinstCra_ has joined #openstack-keystone | 04:38 | |
| *** EinstCra_ has quit IRC | 04:38 | |
| *** josecastroleon has joined #openstack-keystone | 04:43 | |
| *** EinstCrazy has joined #openstack-keystone | 04:43 | |
| *** EinstCrazy has quit IRC | 04:44 | |
| *** amit213 has quit IRC | 04:44 | |
| *** EinstCrazy has joined #openstack-keystone | 04:45 | |
| *** EinstCrazy has quit IRC | 04:45 | |
| *** EinstCrazy has joined #openstack-keystone | 04:46 | |
| *** EinstCrazy has quit IRC | 04:46 | |
| *** EinstCrazy has joined #openstack-keystone | 04:46 | |
| *** EinstCra_ has joined #openstack-keystone | 04:49 | |
| *** EinstCrazy has quit IRC | 04:50 | |
| *** EinstCra_ has quit IRC | 04:53 | |
| *** EinstCrazy has joined #openstack-keystone | 04:58 | |
| *** EinstCrazy has quit IRC | 04:58 | |
| *** EinstCrazy has joined #openstack-keystone | 04:58 | |
| *** furface has quit IRC | 04:59 | |
| *** EinstCrazy has quit IRC | 04:59 | |
| *** furface has joined #openstack-keystone | 05:02 | |
| morgan | i think we have an issue with our migrations. | 05:02 |
| *** EinstCrazy has joined #openstack-keystone | 05:05 | |
| *** EinstCrazy has quit IRC | 05:06 | |
| stevemar | morgan: ? | 05:07 |
| *** EinstCrazy has joined #openstack-keystone | 05:07 | |
| morgan | stevemar: nope, nvm ... 16.04 changed defaults breaks sql-alchemy-migrate out of the box :( | 05:07 |
| *** EinstCrazy has quit IRC | 05:07 | |
| *** hoonetorg has quit IRC | 05:07 | |
| *** EinstCrazy has joined #openstack-keystone | 05:07 | |
| stevemar | morgan: weird, devstack ran fine with my 16.04 | 05:07 |
| morgan | stevemar: Specified key was too long; max key length is 767 bytes') [SQL: u'\nCREATE TABLE migrate_version (\n\trepository_id VARCHAR(250) NOT NULL, \n\trepository_path TEXT, \n\tversion INTEGER, \n\tPRIMARY KEY (repository_id)\n)\n\n | 05:08 |
| morgan | stevemar: oh wait... mariadb vs mysql | 05:14 |
| morgan | stevemar: yep. mariadb is all sorts of wonky | 05:15 |
| morgan | by default | 05:15 |
| *** ramishra has joined #openstack-keystone | 05:15 | |
| stevemar | morgan: i wonder if it worked before mitaka | 05:16 |
| morgan | stevemar: i think 16.04 changed things | 05:16 |
| morgan | so ... likely not with xenial | 05:16 |
| *** yolanda has joined #openstack-keystone | 05:16 | |
| *** hoonetorg has joined #openstack-keystone | 05:23 | |
| *** akscram has quit IRC | 05:26 | |
| *** akscram has joined #openstack-keystone | 05:28 | |
| *** ayoung has quit IRC | 05:31 | |
| jaosorior | morgan: Stumbled upon the same issue in Barbican. Had to change the the length of the index to fix the 767 bytes that are required in InnoDB databases in the migration script that was crashing. In theory it shouldn't have worked from the beginning | 05:39 |
| *** jamielennox is now known as jamielennox|away | 05:40 | |
| *** mnaser has quit IRC | 05:41 | |
| *** huats_ has quit IRC | 05:42 | |
| *** huats_ has joined #openstack-keystone | 05:42 | |
| *** huats_ has quit IRC | 05:42 | |
| *** huats_ has joined #openstack-keystone | 05:42 | |
| *** furface has quit IRC | 05:58 | |
| *** furface has joined #openstack-keystone | 05:59 | |
| *** furface has joined #openstack-keystone | 05:59 | |
| *** mnaser has joined #openstack-keystone | 06:00 | |
| *** david-lyle has quit IRC | 06:05 | |
| *** jrist has quit IRC | 06:06 | |
| *** jaosorior_ has joined #openstack-keystone | 06:07 | |
| *** jaosorior has quit IRC | 06:07 | |
| openstackgerrit | Merged openstack/keystone: Revert "Revert "Unit test for checking cross-version migrations compatibility"" https://review.openstack.org/310589 | 06:08 |
| *** jaosorior_ has quit IRC | 06:13 | |
| *** jaosorior_ has joined #openstack-keystone | 06:17 | |
| *** openstackgerrit has quit IRC | 06:17 | |
| *** openstackgerrit has joined #openstack-keystone | 06:17 | |
| *** jaosorior_ is now known as jaosorior | 06:20 | |
| *** naresht has joined #openstack-keystone | 06:32 | |
| *** lhcheng has quit IRC | 06:35 | |
| *** vgridnev has joined #openstack-keystone | 06:40 | |
| *** e0ne has joined #openstack-keystone | 06:41 | |
| *** markvoelker has joined #openstack-keystone | 06:54 | |
| *** NeedHelpKestoneF has joined #openstack-keystone | 06:55 | |
| *** markvoelker has quit IRC | 07:00 | |
| *** tesseract has joined #openstack-keystone | 07:01 | |
| *** tesseract is now known as Guest23319 | 07:01 | |
| *** henrynash has joined #openstack-keystone | 07:02 | |
| *** ChanServ sets mode: +v henrynash | 07:02 | |
| openstackgerrit | Steve Martinelli proposed openstack/keystone: Fix fernet audit ids for v2.0 https://review.openstack.org/311886 | 07:05 |
| NeedHelpKestoneF | Hi all. Is any one had done POC on Keystone Federation ? | 07:08 |
| openstackgerrit | Steve Martinelli proposed openstack/python-keystoneclient: Updated from global requirements https://review.openstack.org/311548 | 07:09 |
| *** jrist has joined #openstack-keystone | 07:20 | |
| *** jamielennox|away is now known as jamielennox | 07:22 | |
| *** jamielennox has left #openstack-keystone | 07:22 | |
| *** jamielennox has joined #openstack-keystone | 07:22 | |
| *** ChanServ sets mode: +v jamielennox | 07:22 | |
| jamielennox | gah - glance tests run without keystonemiddleware | 07:22 |
| stevemar | ? | 07:23 |
| stevemar | they do | 07:23 |
| *** yolanda has quit IRC | 07:23 | |
| stevemar | news to me :\ | 07:24 |
| stevemar | what were they running | 07:24 |
| jamielennox | they have a paste file that is only for tests and they just skip authtoken and pass X-Tenant-Id etc as headers | 07:24 |
| jamielennox | i have no idea how to fix that | 07:26 |
| *** fhubik has joined #openstack-keystone | 07:29 | |
| *** nkinder has quit IRC | 07:31 | |
| *** yolanda has joined #openstack-keystone | 07:32 | |
| *** jaosorior has quit IRC | 07:37 | |
| *** jaosorior has joined #openstack-keystone | 07:37 | |
| *** jrist has quit IRC | 07:38 | |
| *** sshen has quit IRC | 07:39 | |
| *** ayoung has joined #openstack-keystone | 07:49 | |
| *** ChanServ sets mode: +v ayoung | 07:49 | |
| *** pnavarro has joined #openstack-keystone | 07:49 | |
| *** dmk0202 has joined #openstack-keystone | 07:54 | |
| *** EinstCra_ has joined #openstack-keystone | 07:57 | |
| *** zzzeek has quit IRC | 08:00 | |
| *** zzzeek has joined #openstack-keystone | 08:00 | |
| *** EinstCrazy has quit IRC | 08:00 | |
| *** henrynash has quit IRC | 08:01 | |
| *** jaosorior_ has joined #openstack-keystone | 08:04 | |
| *** arunkant_ has quit IRC | 08:06 | |
| *** jaosorior has quit IRC | 08:07 | |
| openstackgerrit | yolanda.robla proposed openstack/keystoneauth: Use betamax hooks to mask fixture results https://review.openstack.org/311133 | 08:08 |
| *** sshen has joined #openstack-keystone | 08:09 | |
| *** jaosorior_ is now known as jaosorior | 08:11 | |
| openstackgerrit | yolanda.robla proposed openstack/keystoneauth: Use betamax hooks to mask fixture results https://review.openstack.org/311133 | 08:14 |
| *** mvk_ has joined #openstack-keystone | 08:23 | |
| *** jistr has joined #openstack-keystone | 08:24 | |
| *** mvk has quit IRC | 08:26 | |
| *** ozialien10 has quit IRC | 08:28 | |
| *** ozialien10 has joined #openstack-keystone | 08:29 | |
| *** TxGVNN has joined #openstack-keystone | 08:30 | |
| *** jrist has joined #openstack-keystone | 08:33 | |
| *** arunkant has joined #openstack-keystone | 08:37 | |
| *** mhu has joined #openstack-keystone | 08:45 | |
| *** markvoelker has joined #openstack-keystone | 08:50 | |
| *** markvoelker has quit IRC | 08:55 | |
| *** Srushti has joined #openstack-keystone | 09:15 | |
| *** fhubik has quit IRC | 09:21 | |
| *** fhubik has joined #openstack-keystone | 09:25 | |
| *** TxGVNN has quit IRC | 09:25 | |
| *** daemontool has joined #openstack-keystone | 09:35 | |
| *** yolanda has quit IRC | 09:36 | |
| *** yolanda has joined #openstack-keystone | 09:41 | |
| *** dmk0202 has quit IRC | 09:59 | |
| *** jrist has quit IRC | 10:02 | |
| *** TxGVNN has joined #openstack-keystone | 10:04 | |
| *** e0ne has quit IRC | 10:06 | |
| *** e0ne has joined #openstack-keystone | 10:06 | |
| *** _amrith_ is now known as amrith | 10:08 | |
| *** ozialien10 has quit IRC | 10:18 | |
| *** ozialien10 has joined #openstack-keystone | 10:18 | |
| *** mou has joined #openstack-keystone | 10:20 | |
| *** EinstCra_ has quit IRC | 10:30 | |
| *** yolanda has quit IRC | 10:33 | |
| *** yolanda has joined #openstack-keystone | 10:38 | |
| *** links has quit IRC | 10:45 | |
| *** jrist has joined #openstack-keystone | 10:45 | |
| *** mvk_ has quit IRC | 10:46 | |
| *** dave-mccowan has joined #openstack-keystone | 10:51 | |
| *** david-lyle has joined #openstack-keystone | 10:58 | |
| *** jaosorior has quit IRC | 11:10 | |
| *** jaosorior has joined #openstack-keystone | 11:10 | |
| *** chmouel has left #openstack-keystone | 11:12 | |
| *** belmoreira has joined #openstack-keystone | 11:15 | |
| *** rodrigods has quit IRC | 11:16 | |
| *** rodrigods has joined #openstack-keystone | 11:16 | |
| *** daemontool has quit IRC | 11:27 | |
| *** TxGVNN has quit IRC | 11:28 | |
| *** amrith is now known as _amrith_ | 11:42 | |
| *** NeedHelpKestoneF has quit IRC | 11:46 | |
| *** naresht has quit IRC | 11:46 | |
| *** mvk_ has joined #openstack-keystone | 11:54 | |
| *** links has joined #openstack-keystone | 11:59 | |
| *** nkinder has joined #openstack-keystone | 12:04 | |
| *** markvoelker has joined #openstack-keystone | 12:04 | |
| *** e0ne has quit IRC | 12:05 | |
| *** raildo-afk is now known as raildo | 12:13 | |
| *** e0ne has joined #openstack-keystone | 12:22 | |
| *** dave-mcc_ has joined #openstack-keystone | 12:24 | |
| *** ozialien10 has quit IRC | 12:24 | |
| *** ozialien10 has joined #openstack-keystone | 12:25 | |
| *** doug-fish has joined #openstack-keystone | 12:27 | |
| *** dave-mccowan has quit IRC | 12:27 | |
| *** links has quit IRC | 12:46 | |
| *** julim has joined #openstack-keystone | 12:47 | |
| *** jsavak has joined #openstack-keystone | 12:49 | |
| *** pauloewerton has joined #openstack-keystone | 12:51 | |
| *** richm has joined #openstack-keystone | 12:56 | |
| *** _amrith_ is now known as amrith | 12:57 | |
| *** jsavak has quit IRC | 12:58 | |
| *** jsavak has joined #openstack-keystone | 12:59 | |
| *** nalind has joined #openstack-keystone | 13:03 | |
| *** krotscheck_dcm is now known as krotscheck | 13:10 | |
| *** TxGVNN has joined #openstack-keystone | 13:10 | |
| openstackgerrit | Gyorgy Szombathelyi proposed openstack/keystone: Allow 'domain' property for local.group https://review.openstack.org/310147 | 13:20 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: Make keystone exit when fernet keys don't exist https://review.openstack.org/311811 | 13:22 |
| *** tonytan4ever has joined #openstack-keystone | 13:26 | |
| *** amakarov has joined #openstack-keystone | 13:28 | |
| *** markus_z has joined #openstack-keystone | 13:30 | |
| *** BjoernT has joined #openstack-keystone | 13:30 | |
| markus_z | Hey, tempest sometimes fails because an authentication cannot be made: http://logstash.openstack.org/#/dashboard/file/logstash.json?from=86400s&query=message:%5C%22Details:%20%7Bu'title':%20u'Unauthorized',%20u'code':%20401,%20u'message':%20u'The%20request%20you%20have%20made%20requires%20authentication.'%7D%5C%22 | 13:31 |
| markus_z | Anyone an idea what's happening there? | 13:31 |
| *** BigWillie has joined #openstack-keystone | 13:33 | |
| markus_z | It seems to happen only in teardowns when tenants or users get deleted | 13:35 |
| *** d0ugal has quit IRC | 13:46 | |
| *** d0ugal has joined #openstack-keystone | 13:47 | |
| *** csoukup has joined #openstack-keystone | 13:48 | |
| *** sdake has joined #openstack-keystone | 13:48 | |
| markus_z | For the sake of completeness: https://bugs.launchpad.net/keystone/+bug/1578210 | 13:48 |
| openstack | Launchpad bug 1578210 in OpenStack Identity (keystone) "Keystone fails negative tests with unauthenticated users" [High,Confirmed] | 13:48 |
| *** sdake has quit IRC | 13:48 | |
| *** ametts has joined #openstack-keystone | 13:55 | |
| *** sigmavirus24_awa is now known as sigmavirus24 | 13:56 | |
| *** dave-mcc_ has quit IRC | 13:57 | |
| *** josecastroleon has quit IRC | 14:03 | |
| *** sdake has joined #openstack-keystone | 14:06 | |
| *** gordc has joined #openstack-keystone | 14:09 | |
| *** dmk0202 has joined #openstack-keystone | 14:14 | |
| *** daemontool has joined #openstack-keystone | 14:19 | |
| *** lamt has joined #openstack-keystone | 14:21 | |
| *** jaosorior has quit IRC | 14:25 | |
| *** jaosorior has joined #openstack-keystone | 14:25 | |
| *** jaosorior has quit IRC | 14:30 | |
| *** BigWillie has quit IRC | 14:30 | |
| *** ozialien10 has quit IRC | 14:31 | |
| *** julim has quit IRC | 14:32 | |
| *** dmk0202 has quit IRC | 14:33 | |
| *** julim has joined #openstack-keystone | 14:35 | |
| *** navidp has joined #openstack-keystone | 14:36 | |
| *** slberger has joined #openstack-keystone | 14:42 | |
| *** m1r4nt15_b0y is now known as d34dh0r53 | 14:44 | |
| *** pgbridge has joined #openstack-keystone | 14:46 | |
| *** navidp has quit IRC | 14:46 | |
| *** ramishra has quit IRC | 14:47 | |
| *** ramishra has joined #openstack-keystone | 14:48 | |
| *** e0ne has quit IRC | 14:50 | |
| *** edtubill has joined #openstack-keystone | 14:56 | |
| *** timcline has joined #openstack-keystone | 14:58 | |
| *** haplo37 has joined #openstack-keystone | 14:58 | |
| *** jsavak has quit IRC | 14:59 | |
| *** dan_nguyen has joined #openstack-keystone | 15:00 | |
| *** slberger1 has joined #openstack-keystone | 15:00 | |
| *** jsavak has joined #openstack-keystone | 15:00 | |
| *** yolanda has quit IRC | 15:00 | |
| *** slberger has quit IRC | 15:01 | |
| *** yolanda has joined #openstack-keystone | 15:03 | |
| *** gb21 has joined #openstack-keystone | 15:10 | |
| *** vgridnev has quit IRC | 15:10 | |
| *** pushkaru has joined #openstack-keystone | 15:14 | |
| *** yolanda has quit IRC | 15:15 | |
| *** yolanda has joined #openstack-keystone | 15:17 | |
| *** spzala has joined #openstack-keystone | 15:18 | |
| openstackgerrit | Merged openstack/keystone: Fix fernet audit ids for v2.0 https://review.openstack.org/311886 | 15:22 |
| bknudson | hopefully https://review.openstack.org/311886 fixes https://bugs.launchpad.net/keystone/+bug/1578210 | 15:24 |
| openstack | Launchpad bug 1577558 in OpenStack Identity (keystone) "duplicate for #1578210 v2.0 fernet tokens audit ids are inconsistent" [High,Fix released] - Assigned to Lance Bragstad (lbragstad) | 15:24 |
| *** fhubik has quit IRC | 15:25 | |
| openstackgerrit | Steve Martinelli proposed openstack/python-keystoneclient: Fixing D204, D205, and D207 PEP257 violation. https://review.openstack.org/312192 | 15:26 |
| openstackgerrit | Steve Martinelli proposed openstack/python-keystoneclient: Fixing D202 and D203 PEP257 violation. https://review.openstack.org/312207 | 15:27 |
| openstackgerrit | Steve Martinelli proposed openstack/python-keystoneclient: Fixing D200 PEP257 violation. https://review.openstack.org/312208 | 15:28 |
| *** yolanda has quit IRC | 15:29 | |
| *** yolanda has joined #openstack-keystone | 15:32 | |
| *** belmoreira has quit IRC | 15:34 | |
| *** timcline_ has joined #openstack-keystone | 15:37 | |
| *** timcline has quit IRC | 15:37 | |
| *** jistr has quit IRC | 15:37 | |
| *** sdake_ has joined #openstack-keystone | 15:40 | |
| *** sdake has quit IRC | 15:43 | |
| *** sdake_ has quit IRC | 15:46 | |
| *** Guest23319 has quit IRC | 15:46 | |
| *** e0ne has joined #openstack-keystone | 15:49 | |
| *** jistr has joined #openstack-keystone | 15:58 | |
| *** woodster_ has joined #openstack-keystone | 16:04 | |
| *** mou has quit IRC | 16:06 | |
| *** mou has joined #openstack-keystone | 16:06 | |
| *** nikhil has joined #openstack-keystone | 16:07 | |
| *** slberger1 has quit IRC | 16:07 | |
| *** slberger has joined #openstack-keystone | 16:07 | |
| *** roxanaghe has joined #openstack-keystone | 16:16 | |
| *** TxGVNN has quit IRC | 16:18 | |
| *** mou has quit IRC | 16:19 | |
| *** sdake has joined #openstack-keystone | 16:24 | |
| *** TxGVNN has joined #openstack-keystone | 16:27 | |
| *** daemontool_ has joined #openstack-keystone | 16:27 | |
| *** daemontool_ has quit IRC | 16:28 | |
| *** daemontool has quit IRC | 16:28 | |
| *** daemontool has joined #openstack-keystone | 16:29 | |
| *** ozialien10 has joined #openstack-keystone | 16:29 | |
| *** fangxu has joined #openstack-keystone | 16:31 | |
| *** TxGVNN has quit IRC | 16:31 | |
| *** gb21 has quit IRC | 16:35 | |
| *** ninag has joined #openstack-keystone | 16:38 | |
| *** TxGVNN has joined #openstack-keystone | 16:44 | |
| *** e0ne has quit IRC | 16:46 | |
| *** e0ne has joined #openstack-keystone | 16:47 | |
| *** gb21 has joined #openstack-keystone | 16:47 | |
| *** rbridgeman has joined #openstack-keystone | 16:48 | |
| *** rbridgeman_ has joined #openstack-keystone | 16:49 | |
| *** markus_z has quit IRC | 16:51 | |
| *** e0ne has left #openstack-keystone | 16:52 | |
| *** rbridgeman has quit IRC | 16:53 | |
| *** jistr has quit IRC | 16:54 | |
| *** sdake has quit IRC | 16:55 | |
| raildo | lbragstad: hey, did you find a way to fix the 'Config file not found, using default configs.' not in u'' error? | 16:59 |
| *** eandersson has quit IRC | 16:59 | |
| raildo | lbragstad: I'm having the same problem now :( | 16:59 |
| *** ninag has quit IRC | 17:02 | |
| *** ninag has joined #openstack-keystone | 17:02 | |
| *** darosale has joined #openstack-keystone | 17:03 | |
| *** ninag has quit IRC | 17:07 | |
| *** bigdogstl has joined #openstack-keystone | 17:09 | |
| *** pnavarro has quit IRC | 17:12 | |
| *** bigdogstl has quit IRC | 17:15 | |
| *** phalmos has joined #openstack-keystone | 17:21 | |
| rodrigods | dstanek, ping... care to +A https://review.openstack.org/#/c/294201/ ? | 17:22 |
| patchbot | rodrigods: patch 294201 - keystone - Add conflict validation for idp update | 17:22 |
| *** dave-mccowan has joined #openstack-keystone | 17:22 | |
| dstanek | rodrigods: looking | 17:23 |
| *** jed56 has quit IRC | 17:24 | |
| dstanek | rodrigods: done | 17:26 |
| dstanek | nice work | 17:26 |
| rodrigods | thanks dstanek | 17:26 |
| *** roxanaghe has quit IRC | 17:29 | |
| stevemar | channel is quiet today | 17:29 |
| rodrigods | stevemar, yeah, will start to ask for reviews | 17:30 |
| *** spzala has quit IRC | 17:30 | |
| *** spzala has joined #openstack-keystone | 17:30 | |
| openstackgerrit | Merged openstack/python-keystoneclient: Fixing D301 PEP257 violation. https://review.openstack.org/311783 | 17:31 |
| openstackgerrit | Merged openstack/python-keystoneclient: Fixing D211 PEP257 violation. https://review.openstack.org/311785 | 17:31 |
| *** spzala has quit IRC | 17:31 | |
| openstackgerrit | Merged openstack/python-keystoneclient: Fixing D208 PEP257 violation. https://review.openstack.org/311787 | 17:31 |
| *** spzala has joined #openstack-keystone | 17:32 | |
| *** roxanaghe has joined #openstack-keystone | 17:33 | |
| stevemar | navidp's changes are landing ^_^ | 17:33 |
| stevemar | bknudson: ksc gate should be fixed now... time to drop ksc 3.0.0? :) | 17:33 |
| bknudson | stevemar: yes, but then there's a note to the mailing list that there won't be releases this week. | 17:34 |
| *** tonytan4ever has quit IRC | 17:34 | |
| stevemar | womp womp | 17:34 |
| *** bigdogstl has joined #openstack-keystone | 17:35 | |
| *** jsavak has quit IRC | 17:36 | |
| stevemar | lunch time i guess, things are quiet | 17:36 |
| rodrigods | bknudson, thanks for the review in https://review.openstack.org/#/c/302299/ | 17:37 |
| patchbot | rodrigods: patch 302299 - keystone - Add identity providers integration tests | 17:37 |
| *** tqtran has joined #openstack-keystone | 17:37 | |
| rodrigods | took a while to address everything, but i think it is much better now :) | 17:37 |
| *** bigdogstl has quit IRC | 17:45 | |
| *** tonytan4ever has joined #openstack-keystone | 17:45 | |
| lbragstad | raildo nope, i haven't fixed that one yet | 17:46 |
| raildo | lbragstad: I got this error during the rebase on https://review.openstack.org/#/c/311811/, so I didn't send a new patch set | 17:47 |
| patchbot | raildo: patch 311811 - keystone - Make keystone exit when fernet keys don't exist | 17:47 |
| lbragstad | raildo it doesn't happen upstream in the gate | 17:47 |
| lbragstad | raildo I can only reproduce it locally | 17:47 |
| raildo | lbragstad: great, so I'll send the rebase | 17:48 |
| kfox1111 | whats the environment variable for passing a token instead of authing with username/password. | 17:48 |
| kfox1111 | OS_TOKEN? | 17:48 |
| openstackgerrit | Raildo Mascena proposed openstack/keystone: Make keystone exit when fernet keys don't exist https://review.openstack.org/311811 | 17:50 |
| *** mvk_ has quit IRC | 17:53 | |
| *** ninag has joined #openstack-keystone | 18:02 | |
| *** jsavak has joined #openstack-keystone | 18:06 | |
| *** hoonetorg has quit IRC | 18:07 | |
| *** ninag has quit IRC | 18:18 | |
| *** ninag has joined #openstack-keystone | 18:19 | |
| *** ninag_ has joined #openstack-keystone | 18:20 | |
| *** ninag has quit IRC | 18:24 | |
| *** ninag_ has quit IRC | 18:25 | |
| *** yolanda has quit IRC | 18:25 | |
| *** bigdogstl has joined #openstack-keystone | 18:32 | |
| *** timcline_ has quit IRC | 18:34 | |
| *** jsavak has quit IRC | 18:34 | |
| *** ninag has joined #openstack-keystone | 18:34 | |
| *** ninag_ has joined #openstack-keystone | 18:35 | |
| *** ninag__ has joined #openstack-keystone | 18:36 | |
| *** ninag has quit IRC | 18:38 | |
| *** bigdogstl has quit IRC | 18:39 | |
| *** ninag_ has quit IRC | 18:40 | |
| *** ninag__ has quit IRC | 18:40 | |
| *** sdake has joined #openstack-keystone | 18:42 | |
| *** roxanaghe has quit IRC | 18:42 | |
| *** bigdogstl has joined #openstack-keystone | 18:43 | |
| *** sdake has quit IRC | 18:44 | |
| *** sdake has joined #openstack-keystone | 18:46 | |
| *** roxanaghe has joined #openstack-keystone | 18:46 | |
| openstackgerrit | ayoung proposed openstack/keystone: Replace revoke tree with linear search https://review.openstack.org/311652 | 18:48 |
| *** vgridnev has joined #openstack-keystone | 18:48 | |
| *** bigdogstl has quit IRC | 18:48 | |
| stevemar | dolphm: if you're around, https://review.openstack.org/#/c/309491/7 could use a quick set of eyes | 18:49 |
| patchbot | stevemar: patch 309491 - keystone - Fixing D105, D203, and D205 PEP257 | 18:49 |
| stevemar | bknudson: why don't we backport https://review.openstack.org/#/c/306681/ and then lance's fix for fernet+v2+audit_id? | 18:50 |
| patchbot | stevemar: patch 306681 - keystone - Make all fixture project_ids into uuids (MERGED) | 18:50 |
| bknudson | stevemar: that's one option. I don't have time to do it now. | 18:50 |
| *** TxGVNN has quit IRC | 18:50 | |
| stevemar | bknudson: i can do it | 18:51 |
| bknudson | I'm on a squad now so am not sure how much time I'll have to work upstream for a while. | 18:51 |
| lbragstad | stevemar is that going to help with some of the issues in the gate? | 18:51 |
| *** ninag has joined #openstack-keystone | 18:52 | |
| ayoung | bknudson, an Infantry squad? | 18:52 |
| bknudson | ayoung: might as well be. | 18:52 |
| ayoung | Did they make you carry the M-60? | 18:52 |
| lbragstad | stevemar dolphm and I are also looking into why all the tempest.api.identity.admin.v2.test_roles_negative.RolesNegativeTestJSON tests are failing | 18:52 |
| ayoung | lbragstad, is this more Fernet Fallout? | 18:53 |
| lbragstad | i'll carry an m-60 | 18:53 |
| lbragstad | ayoung possibly | 18:53 |
| ayoung | lbragstad, just make sure the round extractor is in place out you will be carying nothing but a very heavy necklace. True Story | 18:53 |
| bknudson | I expect that the incorrect audit IDs is causing revocation to not work | 18:53 |
| bknudson | since revocation is by audit id | 18:53 |
| lbragstad | bknudson but we landed that patch? | 18:54 |
| *** ninag has quit IRC | 18:54 | |
| bknudson | the patch landed a couple of hours ago | 18:54 |
| lbragstad | audit ids should be working for v2 + fernet now | 18:54 |
| lbragstad | ayoung lol nice | 18:54 |
| ayoung | bknudson, what do you mean by Squad? | 18:54 |
| bknudson | ayoung: https://labs.spotify.com/2014/03/27/spotify-engineering-culture-part-1/ | 18:55 |
| stevemar | bknudson: I backported the proejct id patch and rebased lance's bits on it | 18:55 |
| *** ninag has joined #openstack-keystone | 18:55 | |
| stevemar | bknudson: upstream will miss you :( | 18:55 |
| bknudson | ayoung: they're making me actually do work. | 18:55 |
| ayoung | bknudson, pretty sure IBM can't afford to have you directed off of Keystone. | 18:56 |
| stevemar | bknudson: your time of idling and sitting on your hands is over! | 18:56 |
| stevemar | ayoung: openstack as a whole can't afford that | 18:57 |
| ayoung | lbragstad, it was a live fire exercise a Infantry Officer Basic. I got to fire one round, and then had to pull off the barrel and treat it as a possible live, because the shell was still in the end of it. | 18:59 |
| ayoung | Turns out the person that had it before me lost the extractor. | 18:59 |
| *** mvk_ has joined #openstack-keystone | 19:00 | |
| lbragstad | ayoung ha that sucks | 19:01 |
| lbragstad | stevemar if you propose the backports i'll review them | 19:01 |
| stevemar | lbragstad: https://review.openstack.org/#/q/status:open+project:openstack/keystone+branch:stable/mitaka | 19:02 |
| *** jsavak has joined #openstack-keystone | 19:04 | |
| lbragstad | stevemar the gate would be picking this up through master though right? | 19:05 |
| lbragstad | stevemar just asking because there seem to be some patches still failing | 19:06 |
| stevemar | lbragstad: i don't follow, what's failing? | 19:12 |
| lbragstad | stevemar https://review.openstack.org/#/c/312207/ | 19:12 |
| patchbot | lbragstad: patch 312207 - python-keystoneclient - Fixing D202 and D203 PEP257 violation. | 19:12 |
| lbragstad | stevemar ignore the pep8 issue | 19:12 |
| stevemar | lbragstad: the functional gate job was failing | 19:13 |
| stevemar | the dsvm one is probably transient failure | 19:13 |
| lbragstad | stevemar because of fernet + v2.0 + audit_ids? | 19:13 |
| stevemar | lbragstad: i don't think so... cause https://review.openstack.org/#/c/311787/ just merged now | 19:14 |
| patchbot | stevemar: patch 311787 - python-keystoneclient - Fixing D208 PEP257 violation. (MERGED) | 19:14 |
| openstackgerrit | Navid Pustchi proposed openstack/python-keystoneclient: Fixing D105 PEP257 https://review.openstack.org/312703 | 19:15 |
| *** rmcall has joined #openstack-keystone | 19:16 | |
| *** tonytan4ever has quit IRC | 19:17 | |
| *** pnavarro has joined #openstack-keystone | 19:19 | |
| *** lhcheng has joined #openstack-keystone | 19:22 | |
| *** ChanServ sets mode: +v lhcheng | 19:22 | |
| ayoung | stevemar, Here is what I plan on working on this release http://adam.younglogic.com/2016/05/identity-newton/ | 19:23 |
| stevemar | ayoung: i like 1 | 19:24 |
| stevemar | i like 2 | 19:24 |
| stevemar | 3 is kinda out of keystone scope | 19:25 |
| *** sdake has quit IRC | 19:25 | |
| *** sdake has joined #openstack-keystone | 19:26 | |
| ayoung | stevemar, yeah. A lot of this getting stuff into Tripleo that we have worked on in Keystone, to get it out to the deployments. | 19:27 |
| *** bigdogstl has joined #openstack-keystone | 19:28 | |
| stevemar | all good stuff | 19:28 |
| stevemar | i don't quite understand the new federation routes, but hopefully i see a spec that explains it so well a dumb guy like me can understand it :) | 19:29 |
| openstackgerrit | Navid Pustchi proposed openstack/python-keystoneclient: Fixing D204, D205, and D207 PEP257 violation. https://review.openstack.org/312192 | 19:30 |
| *** bigdogstl has quit IRC | 19:33 | |
| ayoung | stevemar, yeah, I'll work with rderose on those | 19:34 |
| *** timcline has joined #openstack-keystone | 19:34 | |
| openstackgerrit | Navid Pustchi proposed openstack/python-keystoneclient: Fixing D105 PEP257 https://review.openstack.org/312703 | 19:36 |
| *** tonytan4ever has joined #openstack-keystone | 19:38 | |
| *** timcline has quit IRC | 19:39 | |
| *** mkrcmari__ has joined #openstack-keystone | 19:40 | |
| *** timcline has joined #openstack-keystone | 19:41 | |
| *** mvk_ has quit IRC | 19:44 | |
| openstackgerrit | Raildo Mascena proposed openstack/keystone: Make keystone exit when fernet keys don't exist https://review.openstack.org/311811 | 19:45 |
| openstackgerrit | Navid Pustchi proposed openstack/python-keystoneclient: Fixing D202 and D203 PEP257 violation. https://review.openstack.org/312207 | 19:45 |
| openstackgerrit | Navid Pustchi proposed openstack/python-keystoneclient: Fixing D200 PEP257 violation. https://review.openstack.org/312208 | 19:47 |
| openstackgerrit | Navid Pustchi proposed openstack/python-keystoneclient: Fixing D105 PEP257 https://review.openstack.org/312703 | 19:47 |
| *** openstackgerrit has quit IRC | 19:48 | |
| *** openstackgerrit has joined #openstack-keystone | 19:48 | |
| openstackgerrit | Merged openstack/python-keystoneclient: httpclient: remove unused debug kwargs https://review.openstack.org/236739 | 19:54 |
| *** navidp has joined #openstack-keystone | 19:57 | |
| *** gyee has joined #openstack-keystone | 19:57 | |
| *** ChanServ sets mode: +v gyee | 19:57 | |
| navidp | can you review this | 19:57 |
| navidp | https://review.openstack.org/#/c/309491/ | 19:57 |
| patchbot | navidp: patch 309491 - keystone - Fixing D105, D203, and D205 PEP257 | 19:57 |
| *** pauloewerton has quit IRC | 20:06 | |
| *** stingaci has joined #openstack-keystone | 20:08 | |
| *** harlowja has quit IRC | 20:09 | |
| *** stingaci has quit IRC | 20:09 | |
| *** stingaci has joined #openstack-keystone | 20:10 | |
| *** jsavak has quit IRC | 20:11 | |
| *** jsavak has joined #openstack-keystone | 20:11 | |
| *** navid_ has joined #openstack-keystone | 20:13 | |
| *** dmk0202 has joined #openstack-keystone | 20:14 | |
| *** navidp has quit IRC | 20:16 | |
| *** mvk_ has joined #openstack-keystone | 20:16 | |
| *** mvk has joined #openstack-keystone | 20:18 | |
| *** mkrcmari__ has quit IRC | 20:19 | |
| *** mvk_ has quit IRC | 20:21 | |
| *** mkrcmari__ has joined #openstack-keystone | 20:21 | |
| *** bigdogstl has joined #openstack-keystone | 20:23 | |
| *** mvk has quit IRC | 20:25 | |
| *** fawadkhaliq has joined #openstack-keystone | 20:27 | |
| *** bigdogstl has quit IRC | 20:27 | |
| *** gyee has quit IRC | 20:27 | |
| *** amrith is now known as _amrith_ | 20:28 | |
| *** roxanaghe has quit IRC | 20:29 | |
| *** gyee has joined #openstack-keystone | 20:30 | |
| *** ChanServ sets mode: +v gyee | 20:30 | |
| *** tonytan4ever has quit IRC | 20:33 | |
| *** navid_ has quit IRC | 20:36 | |
| *** bigdogstl has joined #openstack-keystone | 20:38 | |
| *** mvk has joined #openstack-keystone | 20:41 | |
| *** bigdogstl has quit IRC | 20:43 | |
| *** mkrcmari__ has quit IRC | 20:44 | |
| *** mvk_ has joined #openstack-keystone | 20:44 | |
| *** spandhe has joined #openstack-keystone | 20:45 | |
| openstackgerrit | Merged openstack/keystone: Remove test_invalid_policy_raises_error https://review.openstack.org/311804 | 20:46 |
| *** mkrcmari__ has joined #openstack-keystone | 20:47 | |
| *** fawadk has joined #openstack-keystone | 20:47 | |
| *** doug-fis_ has joined #openstack-keystone | 20:48 | |
| *** mvk has quit IRC | 20:48 | |
| *** _amrith_ is now known as amrith | 20:48 | |
| *** fawadkhaliq has quit IRC | 20:50 | |
| *** doug-fish has quit IRC | 20:50 | |
| *** mvk_ has quit IRC | 20:50 | |
| *** mvk has joined #openstack-keystone | 20:51 | |
| *** doug-fish has joined #openstack-keystone | 20:51 | |
| *** doug-fi__ has joined #openstack-keystone | 20:52 | |
| *** doug-fis_ has quit IRC | 20:52 | |
| *** mkrcmari__ has quit IRC | 20:53 | |
| *** mvk_ has joined #openstack-keystone | 20:53 | |
| *** doug-fish has quit IRC | 20:55 | |
| *** mkrcmari__ has joined #openstack-keystone | 20:56 | |
| arunkant | dstanek, stevemar: Can you review https://review.openstack.org/#/c/279828/ . It has been sitting there for quite some time. | 20:56 |
| patchbot | arunkant: patch 279828 - keystonemiddleware - Adding audit middleware specific notification driv... | 20:56 |
| *** mvk has quit IRC | 20:56 | |
| *** doug-fi__ has quit IRC | 20:57 | |
| *** julim has quit IRC | 20:59 | |
| *** mvk_ has quit IRC | 20:59 | |
| *** richm has quit IRC | 21:00 | |
| *** mvk_ has joined #openstack-keystone | 21:00 | |
| *** julim has joined #openstack-keystone | 21:01 | |
| *** mkrcmari__ has quit IRC | 21:04 | |
| *** gyee has quit IRC | 21:06 | |
| *** harlowja has joined #openstack-keystone | 21:10 | |
| openstackgerrit | Jamie Lennox proposed openstack/keystone: Always add is_admin_project if admin project defined https://review.openstack.org/312323 | 21:11 |
| *** haplo37 has quit IRC | 21:12 | |
| *** roxanaghe has joined #openstack-keystone | 21:18 | |
| *** gyee has joined #openstack-keystone | 21:20 | |
| *** ChanServ sets mode: +v gyee | 21:20 | |
| *** gyee has quit IRC | 21:27 | |
| *** pushkaru has quit IRC | 21:31 | |
| *** pushkaru has joined #openstack-keystone | 21:32 | |
| *** fangxu has quit IRC | 21:34 | |
| *** bigdogstl has joined #openstack-keystone | 21:34 | |
| *** ninag has quit IRC | 21:35 | |
| *** roxanaghe has quit IRC | 21:37 | |
| *** gyee has joined #openstack-keystone | 21:39 | |
| *** ChanServ sets mode: +v gyee | 21:39 | |
| *** bigdogstl has quit IRC | 21:39 | |
| *** roxanaghe has joined #openstack-keystone | 21:40 | |
| *** vgridnev has quit IRC | 21:40 | |
| *** chlong has quit IRC | 21:45 | |
| *** rmcall has quit IRC | 21:47 | |
| *** amrith is now known as _amrith_ | 21:47 | |
| mfisch | morgan: I filed a bug on the memcache thing I found and I think it might have an impact on system resources, but the impact is just a guess for now. https://bugs.launchpad.net/keystone/+bug/1578401 | 21:50 |
| openstack | Launchpad bug 1578401 in OpenStack Identity (keystone) "tokens in memcache have no/improper expiration" [Undecided,New] | 21:50 |
| mfisch | bonus ghostbusters reference in bug | 21:50 |
| *** diazjf has joined #openstack-keystone | 21:51 | |
| *** spandhe has quit IRC | 21:54 | |
| * tellesnobrega is away: I'm busy | 21:57 | |
| *** navidp has joined #openstack-keystone | 21:58 | |
| *** fangxu has joined #openstack-keystone | 21:59 | |
| *** dmk0202 has quit IRC | 22:01 | |
| *** nalind has quit IRC | 22:02 | |
| openstackgerrit | Merged openstack/python-keystoneclient: Fixing D204, D205, and D207 PEP257 violation. https://review.openstack.org/312192 | 22:04 |
| *** chlong has joined #openstack-keystone | 22:05 | |
| *** julim has quit IRC | 22:06 | |
| *** diazjf has quit IRC | 22:08 | |
| *** stingaci has quit IRC | 22:08 | |
| openstackgerrit | Navid Pustchi proposed openstack/keystonemiddleware: Fix D401 PEP257 violation. https://review.openstack.org/312767 | 22:09 |
| *** darosale has quit IRC | 22:09 | |
| *** stingaci has joined #openstack-keystone | 22:11 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/python-keystoneclient: Updated from global requirements https://review.openstack.org/311548 | 22:12 |
| *** slberger has left #openstack-keystone | 22:13 | |
| *** navidp has quit IRC | 22:13 | |
| *** csoukup has quit IRC | 22:15 | |
| mfisch | dolphm: do fernet tokens not get returned in the revocation list? | 22:16 |
| mfisch | docs says that only for PKI | 22:16 |
| mfisch | and I dont see the middleware calling to ask for a list in my keystone logs | 22:17 |
| *** phalmos has quit IRC | 22:17 | |
| *** gordc has quit IRC | 22:20 | |
| *** sigmavirus24 is now known as sigmavirus24_awa | 22:21 | |
| *** darosale has joined #openstack-keystone | 22:22 | |
| *** edtubill has quit IRC | 22:30 | |
| *** BjoernT has quit IRC | 22:38 | |
| *** timcline has quit IRC | 22:40 | |
| *** pushkaru has quit IRC | 22:42 | |
| *** agrebennikov_ has quit IRC | 22:47 | |
| *** gordc has joined #openstack-keystone | 22:50 | |
| *** ametts has quit IRC | 22:52 | |
| *** harlowja has quit IRC | 22:52 | |
| *** harlowja has joined #openstack-keystone | 22:53 | |
| *** darosale has quit IRC | 22:55 | |
| *** _amrith_ is now known as amrith | 23:00 | |
| openstackgerrit | Rodrigo Duarte proposed openstack/keystone: Add conflict validation for idp update https://review.openstack.org/294201 | 23:07 |
| openstackgerrit | Merged openstack/keystone: Fixing D105, D203, and D205 PEP257 https://review.openstack.org/309491 | 23:10 |
| *** jsavak has quit IRC | 23:16 | |
| *** gordc has quit IRC | 23:20 | |
| *** chrisplo has quit IRC | 23:23 | |
| *** bapalm_ has quit IRC | 23:30 | |
| openstackgerrit | Merged openstack/python-keystoneclient: Fixing D202 and D203 PEP257 violation. https://review.openstack.org/312207 | 23:31 |
| openstackgerrit | Merged openstack/python-keystoneclient: Fixing D200 PEP257 violation. https://review.openstack.org/312208 | 23:31 |
| openstackgerrit | Merged openstack/python-keystoneclient: Fixing D105 PEP257 https://review.openstack.org/312703 | 23:31 |
| *** tellesnobrega is now known as tellesnobrega_af | 23:35 | |
| *** sdake has quit IRC | 23:37 | |
| *** pushkaru has joined #openstack-keystone | 23:38 | |
| *** pgbridge has quit IRC | 23:38 | |
| *** gb21 has quit IRC | 23:39 | |
| *** gb21 has joined #openstack-keystone | 23:40 | |
| gyee | ayoung, fyi, Anchor master branch is broken right now, its Pecan instantiation is outdated | 23:40 |
| gyee | I got it working finally, but yak! | 23:41 |
| *** fawadkhaliq has joined #openstack-keystone | 23:50 | |
| *** amit213 has joined #openstack-keystone | 23:51 | |
| *** fawadk has quit IRC | 23:52 | |
| ayoung | gyee, Pecan? REally? | 23:53 |
| *** roxanaghe has quit IRC | 23:58 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!