*** thumpba has quit IRC | 00:02 | |
openstackgerrit | henry-nash proposed openstack/keystone: Improve readability of the api-ref roles section https://review.openstack.org/342325 | 00:08 |
---|---|---|
openstackgerrit | henry-nash proposed openstack/keystone: Fix up the api-ref for role query paramaters https://review.openstack.org/342441 | 00:08 |
openstackgerrit | henry-nash proposed openstack/keystone: Fix up numerous errors in params in api-ref for roles https://review.openstack.org/342468 | 00:09 |
*** spzala has joined #openstack-keystone | 00:15 | |
*** code-R_ has quit IRC | 00:15 | |
openstackgerrit | Jamie Lennox proposed openstack/keystone: Remove unused context from AuthInfo https://review.openstack.org/342478 | 00:18 |
*** jrist has joined #openstack-keystone | 00:22 | |
*** adu has quit IRC | 00:24 | |
*** jerrygb has joined #openstack-keystone | 00:25 | |
*** pooja has joined #openstack-keystone | 00:26 | |
*** adrian_otto has quit IRC | 00:27 | |
pooja | Hi, I needed some help getting effective role information for SSO users in Mitaka.. If I query effective roles for a SSO user using the shadow user id, it returns an empty roles it. I was expecting it to return the effective roles based on group membership by virtue of SAML attributes. | 00:28 |
pooja | Is there such an api or a way to query the groups to which a SSO user belongs? | 00:29 |
*** jerrygb has quit IRC | 00:30 | |
openstackgerrit | Swapnil Kulkarni (coolsvap) proposed openstack/keystone: [WIP] Testing latest u-c https://review.openstack.org/318435 | 00:31 |
*** simondodsley has quit IRC | 00:33 | |
*** roxanaghe has joined #openstack-keystone | 00:35 | |
*** clenimar_ has quit IRC | 00:38 | |
openstackgerrit | Alexander Ignatyev proposed openstack/keystone: Support new osprofiler API https://review.openstack.org/341401 | 00:40 |
*** markvoelker has quit IRC | 00:48 | |
*** roxanagh_ has joined #openstack-keystone | 00:48 | |
*** tonytan4ever has joined #openstack-keystone | 00:49 | |
*** aastha has quit IRC | 00:49 | |
*** roxanagh_ has quit IRC | 00:52 | |
*** code-R has joined #openstack-keystone | 00:52 | |
*** tonytan4ever has quit IRC | 00:53 | |
openstackgerrit | Alexander Ignatyev proposed openstack/keystone: Support new osprofiler API https://review.openstack.org/341401 | 00:53 |
*** tonytan4ever has joined #openstack-keystone | 00:53 | |
*** code-R_ has joined #openstack-keystone | 00:55 | |
*** iurygregory_ has joined #openstack-keystone | 00:56 | |
*** clenimar_ has joined #openstack-keystone | 00:56 | |
*** browne has quit IRC | 00:56 | |
*** code-R has quit IRC | 00:58 | |
*** jrist has quit IRC | 01:02 | |
*** wangqun has joined #openstack-keystone | 01:04 | |
*** arunkant_ has quit IRC | 01:04 | |
*** henrynash has quit IRC | 01:06 | |
*** clenimar_ has quit IRC | 01:07 | |
*** henrynash has joined #openstack-keystone | 01:08 | |
*** ChanServ sets mode: +v henrynash | 01:08 | |
*** clenimar_ has joined #openstack-keystone | 01:19 | |
*** EinstCrazy has joined #openstack-keystone | 01:19 | |
*** dan_nguyen has joined #openstack-keystone | 01:20 | |
*** thumpba has joined #openstack-keystone | 01:21 | |
*** spzala has quit IRC | 01:21 | |
*** spzala has joined #openstack-keystone | 01:22 | |
*** spzala has quit IRC | 01:22 | |
*** spzala has joined #openstack-keystone | 01:22 | |
*** EinstCrazy has quit IRC | 01:24 | |
*** dan_nguyen has quit IRC | 01:26 | |
openstackgerrit | Alexander Ignatyev proposed openstack/keystone: Support new osprofiler API https://review.openstack.org/341401 | 01:29 |
*** tonytan4ever has quit IRC | 01:30 | |
*** rderose has quit IRC | 01:31 | |
*** EinstCrazy has joined #openstack-keystone | 01:32 | |
openstackgerrit | Alexander Ignatyev proposed openstack/keystone: Support new osprofiler API https://review.openstack.org/341401 | 01:33 |
*** spzala has quit IRC | 01:34 | |
*** spzala has joined #openstack-keystone | 01:35 | |
*** pooja has quit IRC | 01:36 | |
*** spzala has quit IRC | 01:39 | |
*** itlinux has quit IRC | 01:45 | |
*** richm has quit IRC | 01:49 | |
*** kfox1111 has quit IRC | 01:51 | |
*** browne has joined #openstack-keystone | 01:54 | |
*** richm has joined #openstack-keystone | 02:07 | |
*** code-R has joined #openstack-keystone | 02:14 | |
*** code-R_ has quit IRC | 02:14 | |
*** links has joined #openstack-keystone | 02:16 | |
*** sdake_ has quit IRC | 02:16 | |
*** TxGVNN has joined #openstack-keystone | 02:19 | |
*** woodster_ has quit IRC | 02:19 | |
*** davechen has joined #openstack-keystone | 02:19 | |
*** Gorian has joined #openstack-keystone | 02:23 | |
*** TxGVNN has quit IRC | 02:28 | |
*** TxGVNN has joined #openstack-keystone | 02:28 | |
*** TxGVNN has quit IRC | 02:30 | |
*** TxGVNN has joined #openstack-keystone | 02:31 | |
*** tonytan4ever has joined #openstack-keystone | 02:31 | |
*** sdake has joined #openstack-keystone | 02:31 | |
*** tonytan4ever has quit IRC | 02:36 | |
*** roxanagh_ has joined #openstack-keystone | 02:36 | |
*** ddieterly has joined #openstack-keystone | 02:37 | |
*** iurygregory_ has quit IRC | 02:38 | |
*** browne has quit IRC | 02:40 | |
*** roxanagh_ has quit IRC | 02:41 | |
*** ddieterly has quit IRC | 02:46 | |
*** ddieterly has joined #openstack-keystone | 02:47 | |
*** markvoelker has joined #openstack-keystone | 02:48 | |
*** ddieterly has quit IRC | 02:50 | |
*** chlong has joined #openstack-keystone | 02:56 | |
*** sdake_ has joined #openstack-keystone | 02:58 | |
*** sdake has quit IRC | 03:02 | |
*** rderose has joined #openstack-keystone | 03:03 | |
*** sdake_ has quit IRC | 03:05 | |
*** dan_nguyen has joined #openstack-keystone | 03:05 | |
*** dan_nguyen has left #openstack-keystone | 03:06 | |
*** julim has quit IRC | 03:06 | |
*** chrisshattuck has joined #openstack-keystone | 03:07 | |
*** sdake has joined #openstack-keystone | 03:08 | |
*** tonytan4ever has joined #openstack-keystone | 03:11 | |
*** clenimar_ has quit IRC | 03:13 | |
*** code-R_ has joined #openstack-keystone | 03:19 | |
*** code-R has quit IRC | 03:22 | |
*** dikonoor has joined #openstack-keystone | 03:25 | |
*** jerrygb has joined #openstack-keystone | 03:32 | |
*** links has quit IRC | 03:33 | |
openstackgerrit | Jamie Lennox proposed openstack/keystone: Pass request to v2 token authenticate https://review.openstack.org/342547 | 03:34 |
*** spzala has joined #openstack-keystone | 03:35 | |
stevemar | thanks henrynash! | 03:37 |
henrynash | stevemar: anything in particular? :-) | 03:38 |
stevemar | henrynash: the role update bits | 03:39 |
stevemar | henrynash: also, go to bed | 03:39 |
henrynash | stevemar: ah, right… | 03:39 |
*** rderose has quit IRC | 03:39 | |
stevemar | henrynash: oh wait, you're in the US | 03:39 |
henrynash | stevemar: yep…. | 03:39 |
stevemar | henrynash: proceed to work *cracks whip* | 03:39 |
henrynash | stevemar: yes, sir! | 03:39 |
*** jerrygb has quit IRC | 03:39 | |
*** spzala has quit IRC | 03:40 | |
*** jerrygb has joined #openstack-keystone | 03:40 | |
*** jerrygb has quit IRC | 03:41 | |
*** jerrygb has joined #openstack-keystone | 03:41 | |
openstackgerrit | henry-nash proposed openstack/keystone: Fix up the api-ref for role query paramaters https://review.openstack.org/342441 | 03:50 |
stevemar | henrynash: want to review all the patches in this chain https://review.openstack.org/#/c/342351/ ? :) | 03:52 |
patchbot | stevemar: patch 342351 - keystone - clean up OAUTH API | 03:52 |
henrynash | stevemar: sure | 03:52 |
stevemar | henrynash: i suppose i should send over the first of the series: https://review.openstack.org/#/c/342347/1 | 03:52 |
patchbot | stevemar: patch 342347 - keystone - Copy the preamble / summary of OAuth1 from the spe... | 03:52 |
stevemar | henrynash: you in the west coast? | 03:52 |
henrynash | stevemar: yep | 03:53 |
stevemar | nice | 03:53 |
henrynash | stevemar: no excuse for falling asleep at the midcycle | 03:53 |
stevemar | henrynash & davechen - feel free to single +2/+A patches that are for the api sprint, i'd prefer we just get those over with if they are ready | 03:54 |
*** clenimar_ has joined #openstack-keystone | 03:55 | |
henrynash | ok | 03:55 |
*** gyee has quit IRC | 03:55 | |
openstackgerrit | Clenimar Filemon proposed openstack/keystone: Update identity endpoint in v3 and v3-ext samples https://review.openstack.org/341829 | 03:56 |
*** richm has quit IRC | 03:57 | |
*** thumpba has quit IRC | 03:58 | |
openstackgerrit | Steve Martinelli proposed openstack/keystone-specs: Remove the v2.0 section from our APIs https://review.openstack.org/342395 | 03:58 |
*** sdake has quit IRC | 04:05 | |
openstackgerrit | Clenimar Filemon proposed openstack/keystone: Update identity endpoint in v3 and v3-ext samples https://review.openstack.org/341829 | 04:05 |
davechen | stevemar: okay, okay. | 04:08 |
stevemar | davechen: i loosen the rules for two days and no one likes it :) | 04:10 |
*** adrian_otto has joined #openstack-keystone | 04:11 | |
davechen | stevemar: I love to do that but I think only PTL can have the right.;-) | 04:13 |
openstackgerrit | henry-nash proposed openstack/keystone: Fix up numerous errors in params in api-ref for roles https://review.openstack.org/342468 | 04:13 |
stevemar | davechen: hehe | 04:14 |
stevemar | henrynash: your description of `roles` was so good, i think you should do it for all the v3 resources :P | 04:14 |
henrynash | stevemar: oops | 04:15 |
*** GB21 has joined #openstack-keystone | 04:16 | |
*** davechen has left #openstack-keystone | 04:18 | |
*** adrian_otto has quit IRC | 04:23 | |
henrynash | anyone know in the new gerrit…is the order of patches under “Related changes” the dependancy order? | 04:30 |
*** GB21 has quit IRC | 04:31 | |
*** jerrygb has quit IRC | 04:34 | |
*** chrisshattuck has quit IRC | 04:35 | |
*** chrisshattuck has joined #openstack-keystone | 04:36 | |
*** chrisshattuck has quit IRC | 04:37 | |
*** chrisshattuck has joined #openstack-keystone | 04:38 | |
*** henrynash has quit IRC | 04:38 | |
*** links has joined #openstack-keystone | 04:39 | |
*** chrisshattuck has quit IRC | 04:40 | |
*** chrisshattuck has joined #openstack-keystone | 04:42 | |
*** chrisshattuck has quit IRC | 04:43 | |
*** chrisshattuck has joined #openstack-keystone | 04:44 | |
openstackgerrit | Merged openstack/keystone: Remove unused context from AuthInfo https://review.openstack.org/342478 | 04:53 |
tonyb | jamielennox: ping? | 04:55 |
*** code-R_ has quit IRC | 04:57 | |
*** code-R has joined #openstack-keystone | 04:58 | |
openstackgerrit | Steve Martinelli proposed openstack/keystone: Add v2.0 /endpoints/ api-ref https://review.openstack.org/342294 | 04:58 |
stevemar | tonyb: whaddup | 04:59 |
tonyb | stevemar: I just wanted to warn jamielennox that https://review.openstack.org/342604 will break his https://review.openstack.org/#/c/341895 review chain | 05:00 |
patchbot | tonyb: patch 341895 - nova - Pass kwargs through to base context | 05:00 |
tonyb | stevemar: basically nova wont work with oslo.context 2.6.0 to I'm tryint to "fix" that ;P | 05:01 |
stevemar | tonyb: i'm sure he'll live :) | 05:01 |
tonyb | stevemar: better yet he can call me a noob and fix it for me ;P | 05:01 |
*** GB21 has joined #openstack-keystone | 05:02 | |
*** chrisshattuck has quit IRC | 05:02 | |
*** chrisshattuck has joined #openstack-keystone | 05:03 | |
Gorian | @stevemar where in west coast? | 05:05 |
*** abhishekk has left #openstack-keystone | 05:09 | |
openstackgerrit | Steve Martinelli proposed openstack/keystone: clean up OAUTH API https://review.openstack.org/342351 | 05:13 |
*** sdake has joined #openstack-keystone | 05:17 | |
stevemar | Gorian: i'm east coast, but will be in west coast (where henry nash is (temporarily)) next week (san jose) | 05:17 |
Gorian | oh nice. Too far from me still :p | 05:19 |
*** chrisshattuck has quit IRC | 05:19 | |
Gorian | I'm in Portland area, you'll be south | 05:19 |
*** nisha_ has joined #openstack-keystone | 05:19 | |
*** itisha has quit IRC | 05:20 | |
*** chrisshattuck has joined #openstack-keystone | 05:21 | |
*** GB21 has quit IRC | 05:26 | |
stevemar | Gorian: plenty of OpenStackers in PDX, check out one of their meetups http://www.meetup.com/openstack-pdx/ | 05:29 |
*** chrisshattuck has quit IRC | 05:30 | |
stevemar | Gorian: oh nice aedo is the organizer, he is good people | 05:30 |
Gorian | oh cool | 05:33 |
Gorian | thanks btw. Already joined that meetup, but only recently so I haven't went yet | 05:34 |
*** GB21 has joined #openstack-keystone | 05:34 | |
*** jerrygb has joined #openstack-keystone | 05:34 | |
Gorian | @stevemar so are you part of openstack, or just hang out in the irc long enough here to be op or whatever? | 05:36 |
stevemar | Gorian: i dabble in this witchcraft known as openstack | 05:37 |
Gorian | this is my first time. | 05:38 |
stevemar | Gorian: it gets better ;) | 05:38 |
stevemar | you hit a very funny error, it's probably a small syntax error in a config file, :( | 05:39 |
Gorian | I have a pile of servers, a rack, and got my network setup with all the vlans (I'm a DevOps/Sysdmin, never, unfortunately in my opinion, been able to do much networking at work, so it's definitely lacking. Ended up enlisting a friend to get my switch configured correctly) | 05:39 |
Gorian | and, took a week of non-stop work to get my bare-metal OS configured like i want. Tested FreeBSD, Ubuntu 16.04, Solaris11, and SmartOS before deciding that trying to figure out how to get nfs installed as root on Ubuntu 16.04 was going to be the best course of action | 05:40 |
Gorian | and then a few more days of all my non-working time to successfully do that | 05:40 |
*** jerrygb has quit IRC | 05:40 | |
stevemar | Gorian: hehe, you're definitely on the ops side! | 05:41 |
stevemar | Gorian: FWIW, there is an #openstack-operators channel that is somewhat active | 05:41 |
*** lamt has quit IRC | 05:41 | |
stevemar | most of the #openstack-{project} channels are upstream/dev related | 05:41 |
Gorian | oh nice. I haven't regulared in IRC in a long long time. used to have a bouncer and everything setup, with a desktop client. Bouncer died, was too lazy to get a new one, and now I'm using the browser client :p | 05:42 |
*** markvoelker has quit IRC | 05:43 | |
Gorian | maybe after I get VMs working on my cloud, I'll setup an IRC bouncer again | 05:43 |
stevemar | eww browser client :_ | 05:43 |
stevemar | :) | 05:43 |
Gorian | oh trust me, I share that sentiment | 05:43 |
*** code-R_ has joined #openstack-keystone | 05:43 | |
Gorian | just was lazy, didn't want to install and configure a client again | 05:43 |
stevemar | <3 my bouncer, it runs on openstack yay | 05:43 |
openstackgerrit | Merged openstack/keystone: Copy the preamble / summary of OAuth1 from the specs repo https://review.openstack.org/342347 | 05:43 |
Gorian | eating your own dogfood for the win? :P | 05:44 |
stevemar | yay my patches are merging | 05:44 |
openstackgerrit | Merged openstack/keystone: re-order the oauth APIs https://review.openstack.org/342348 | 05:44 |
stevemar | you know it | 05:44 |
openstackgerrit | Merged openstack/keystone: add OS-OAUTH1/authorize/{request_token_id} API https://review.openstack.org/342349 | 05:44 |
Gorian | yeah, I got tired of years of small homelab clouds dying | 05:44 |
Gorian | esxi, proxmox, etc. | 05:44 |
Gorian | a server or disk dies, and then it's months before i get around to building everything from scratch again | 05:44 |
Gorian | decided to make something elastic and resiliant | 05:44 |
Gorian | and, as a career DevOps, it's great to add to a resume | 05:44 |
Gorian | got a bunch of friends with less time than I do, donated a bunch of servers, disks, a pile of older SSDs, etc. | 05:45 |
Gorian | so, I have plenty of hardware now. More concerned about my potential power bill | 05:45 |
stevemar | i think, as a career devops person, you'll feel right at home in openstack | 05:45 |
Gorian | yeah, part of why I chose it, I think so too | 05:46 |
* stevemar looks at the time | 05:46 | |
Gorian | :) | 05:46 |
stevemar | shit, didn't realize it | 05:46 |
*** code-R has quit IRC | 05:46 | |
stevemar | gotta be up in ~5 hrs | 05:46 |
Gorian | oh, fun! :p | 05:46 |
* stevemar salute | 05:46 | |
Gorian | I'll just roll into work around 10ish and no one will care :P | 05:46 |
stevemar | hehe | 05:46 |
Gorian | later buddy, thanks for the help! | 05:46 |
stevemar | have fun in openstack, glad you fixed your problem | 05:47 |
Gorian | :) | 05:47 |
*** sdake has quit IRC | 05:51 | |
*** tonytan4ever has quit IRC | 05:54 | |
*** timonwong has joined #openstack-keystone | 05:56 | |
*** davechen has joined #openstack-keystone | 05:58 | |
*** tonytan4ever has joined #openstack-keystone | 06:04 | |
*** sdake has joined #openstack-keystone | 06:13 | |
openstackgerrit | Merged openstack/keystone: Update identity endpoint in v3 and v3-ext samples https://review.openstack.org/341829 | 06:15 |
Gorian | anyone have experience with keystone under nginx? | 06:17 |
Gorian | thoughts / opinions? | 06:17 |
*** rcernin has joined #openstack-keystone | 06:17 | |
*** markvoelker has joined #openstack-keystone | 06:30 | |
*** openstackgerrit has quit IRC | 06:33 | |
*** openstackgerrit has joined #openstack-keystone | 06:33 | |
*** spzala has joined #openstack-keystone | 06:35 | |
*** chlong has quit IRC | 06:38 | |
*** markvoelker has quit IRC | 06:39 | |
*** spzala has quit IRC | 06:39 | |
*** sheel has joined #openstack-keystone | 06:40 | |
*** timonwong has quit IRC | 06:42 | |
*** sdake_ has joined #openstack-keystone | 06:49 | |
*** sdake has quit IRC | 06:52 | |
*** timonwong has joined #openstack-keystone | 06:56 | |
*** nisha_ has quit IRC | 07:13 | |
*** tesseract- has joined #openstack-keystone | 07:15 | |
*** sdake_ has quit IRC | 07:16 | |
*** code-R_ has quit IRC | 07:21 | |
openstackgerrit | Merged openstack/keystone: Add v2.0 /endpoints/ api-ref https://review.openstack.org/342294 | 07:23 |
*** pcaruana has joined #openstack-keystone | 07:27 | |
*** tonytan4ever has quit IRC | 07:30 | |
*** d0ugal has joined #openstack-keystone | 07:31 | |
*** d0ugal has quit IRC | 07:31 | |
*** d0ugal has joined #openstack-keystone | 07:31 | |
*** d0ugal has quit IRC | 07:31 | |
*** d0ugal has joined #openstack-keystone | 07:31 | |
*** jojden has joined #openstack-keystone | 07:32 | |
*** jaosorior has joined #openstack-keystone | 07:35 | |
*** jerrygb has joined #openstack-keystone | 07:37 | |
*** jerrygb has quit IRC | 07:41 | |
*** daemontool has joined #openstack-keystone | 07:43 | |
openstackgerrit | Jamie Lennox proposed openstack/keystone: Move audit initiator creation to request https://review.openstack.org/342658 | 07:57 |
*** zzzeek has quit IRC | 08:00 | |
*** zzzeek has joined #openstack-keystone | 08:00 | |
openstackgerrit | Davanum Srinivas (dims) proposed openstack/keystone: [WIP] Testing latest u-c https://review.openstack.org/318435 | 08:10 |
Gorian | anyone home? | 08:11 |
*** markvoelker has joined #openstack-keystone | 08:23 | |
jojden | yes | 08:27 |
*** markvoelker has quit IRC | 08:27 | |
*** tonytan4ever has joined #openstack-keystone | 08:30 | |
*** tonytan4ever has quit IRC | 08:36 | |
breton | o/ | 08:36 |
Gorian | ohai | 08:45 |
Gorian | don't suppose any of you have got keystone working on nginx? | 08:45 |
Gorian | I followed a guide on getting it to work.. .and it just gave me a sigsegv | 08:46 |
*** jrist has joined #openstack-keystone | 09:09 | |
*** jaosorior is now known as jaosorior_brb | 09:11 | |
*** timonwong has quit IRC | 09:11 | |
*** markvoelker has joined #openstack-keystone | 09:17 | |
*** jaosorior_brb has quit IRC | 09:19 | |
*** markvoelker has quit IRC | 09:21 | |
*** GB21 has quit IRC | 09:23 | |
*** GB21 has joined #openstack-keystone | 09:31 | |
*** nisha_ has joined #openstack-keystone | 09:31 | |
*** davechen has quit IRC | 09:33 | |
openstackgerrit | Alexander Ignatyev proposed openstack/keystone: Support new osprofiler API https://review.openstack.org/341401 | 09:33 |
openstackgerrit | Nisha Yadav proposed openstack/python-keystoneclient: Add endpoint functional tests https://review.openstack.org/340418 | 09:45 |
openstackgerrit | Nisha Yadav proposed openstack/python-keystoneclient: Add endpoint functional tests https://review.openstack.org/340418 | 09:46 |
*** GB21 has quit IRC | 10:07 | |
*** markvoelker has joined #openstack-keystone | 10:11 | |
*** kean has quit IRC | 10:11 | |
*** markvoelker has quit IRC | 10:16 | |
*** GB21 has joined #openstack-keystone | 10:25 | |
*** rcernin has quit IRC | 10:26 | |
*** tonytan4ever has joined #openstack-keystone | 10:32 | |
*** spzala has joined #openstack-keystone | 10:36 | |
*** tonytan4ever has quit IRC | 10:36 | |
*** rodrigods has quit IRC | 10:38 | |
*** rodrigods has joined #openstack-keystone | 10:39 | |
*** spzala has quit IRC | 10:40 | |
*** rcernin has joined #openstack-keystone | 10:45 | |
*** rcernin is now known as rcernin|lunch | 10:46 | |
*** EinstCrazy has quit IRC | 10:52 | |
*** EinstCrazy has joined #openstack-keystone | 10:55 | |
*** TxGVNN has quit IRC | 10:58 | |
openstackgerrit | Dave Chen proposed openstack/keystone: {WIP} Choose the right parameter from the parameter list https://review.openstack.org/342089 | 11:00 |
openstackgerrit | Dave Chen proposed openstack/keystone: Remove `name` property from `endpoint` create/update API https://review.openstack.org/342738 | 11:00 |
*** markvoelker has joined #openstack-keystone | 11:05 | |
breton | wow, Steve endeed woke up in 5h :) | 11:08 |
*** markvoelker has quit IRC | 11:10 | |
*** adu has joined #openstack-keystone | 11:18 | |
*** nk2527 has joined #openstack-keystone | 11:22 | |
*** nk2527 has quit IRC | 11:23 | |
*** wangqun has quit IRC | 11:23 | |
*** jerrygb has joined #openstack-keystone | 11:38 | |
*** jerrygb has quit IRC | 11:43 | |
openstackgerrit | Merged openstack/keystone: Remove get_trust_id_for_request function https://review.openstack.org/342056 | 11:48 |
*** wangqun has joined #openstack-keystone | 11:49 | |
*** julim has joined #openstack-keystone | 11:50 | |
*** markvoelker has joined #openstack-keystone | 11:59 | |
*** markvoelker has quit IRC | 12:03 | |
*** ddieterly has joined #openstack-keystone | 12:07 | |
*** rdo has quit IRC | 12:12 | |
*** rdo has joined #openstack-keystone | 12:14 | |
*** GB21 has quit IRC | 12:14 | |
openstackgerrit | Nisha Yadav proposed openstack/python-keystoneclient: Improve docs for v3 roles https://review.openstack.org/334546 | 12:15 |
openstackgerrit | Nisha Yadav proposed openstack/python-keystoneclient: Improve docs for v3 roles https://review.openstack.org/334546 | 12:17 |
*** clenimar_ has quit IRC | 12:17 | |
*** raildo has joined #openstack-keystone | 12:18 | |
*** ddieterly has quit IRC | 12:20 | |
rvasilets_ | HI. I need to create session to initialize python-keystoneclient with it. To create the session I need to know what parameters to pass(v2 or v3 params) to it. How can I know what versions of keystone I have before initialize python-keystoneclient? Looks like stuff for that https://github.com/openstack/keystoneauth/blob/master/keystoneauth1/discover.py#L138 require session object. What will you suggest to me? | 12:21 |
*** gordc has joined #openstack-keystone | 12:24 | |
*** ddieterly has joined #openstack-keystone | 12:25 | |
*** GB21 has joined #openstack-keystone | 12:26 | |
*** ddieterly has quit IRC | 12:27 | |
stevemar | breton: maybe | 12:29 |
stevemar | okay, it was 6... | 12:29 |
stevemar | i was up 5 hrs later, but had to take care of baby a bit | 12:29 |
*** GB21 has quit IRC | 12:31 | |
*** spzala has joined #openstack-keystone | 12:32 | |
openstackgerrit | Nisha Yadav proposed openstack/python-keystoneclient: Add role functional tests https://review.openstack.org/335118 | 12:32 |
openstackgerrit | Nisha Yadav proposed openstack/python-keystoneclient: Add role functional tests https://review.openstack.org/335118 | 12:34 |
*** pauloewerton has joined #openstack-keystone | 12:34 | |
*** spzala has quit IRC | 12:39 | |
*** jerrygb has joined #openstack-keystone | 12:48 | |
*** jerrygb has quit IRC | 12:48 | |
*** ddieterly has joined #openstack-keystone | 12:52 | |
*** ddieterly has quit IRC | 13:01 | |
*** nisha_ has quit IRC | 13:02 | |
*** markvoelker has joined #openstack-keystone | 13:03 | |
*** henrynash has joined #openstack-keystone | 13:05 | |
*** ChanServ sets mode: +v henrynash | 13:05 | |
*** spzala has joined #openstack-keystone | 13:17 | |
*** bknudson_ has left #openstack-keystone | 13:26 | |
*** bknudson_ has joined #openstack-keystone | 13:26 | |
*** ChanServ sets mode: +v bknudson_ | 13:26 | |
*** ametts has joined #openstack-keystone | 13:27 | |
lbragstad | morning | 13:30 |
*** gagehugo has joined #openstack-keystone | 13:32 | |
*** jrist has quit IRC | 13:32 | |
openstackgerrit | Merged openstack/keystone: Remove `name` property from `endpoint` create/update API https://review.openstack.org/342738 | 13:34 |
*** tonytan4ever has joined #openstack-keystone | 13:36 | |
*** ddieterly has joined #openstack-keystone | 13:36 | |
openstackgerrit | Steve Martinelli proposed openstack/keystone: Add relationship links to OAUTH APIs https://review.openstack.org/342350 | 13:40 |
openstackgerrit | Steve Martinelli proposed openstack/keystone: clean up OAUTH API https://review.openstack.org/342351 | 13:40 |
*** richm has joined #openstack-keystone | 13:40 | |
openstackgerrit | Steve Martinelli proposed openstack/keystone: clean up OAUTH API https://review.openstack.org/342351 | 13:43 |
stevemar | lbragstad: morning o | 13:43 |
stevemar | o/ | 13:43 |
stevemar | gagehugo: thanks for updating the blueprint | 13:45 |
*** sheel has quit IRC | 13:46 | |
*** sdake has joined #openstack-keystone | 13:47 | |
*** adu has quit IRC | 13:49 | |
*** sdake_ has joined #openstack-keystone | 13:50 | |
gagehugo | stevemar: no prob, i'll start looking at the v2 stuff | 13:51 |
*** sdake has quit IRC | 13:52 | |
*** sdake_ has quit IRC | 13:52 | |
*** rderose has joined #openstack-keystone | 13:57 | |
*** code-R has joined #openstack-keystone | 13:57 | |
*** itisha has joined #openstack-keystone | 13:57 | |
*** EinstCrazy has quit IRC | 14:02 | |
*** edmondsw has joined #openstack-keystone | 14:02 | |
*** EinstCrazy has joined #openstack-keystone | 14:02 | |
*** code-R_ has joined #openstack-keystone | 14:03 | |
lbragstad | is r.o.o slow/giving 502s for anyone? | 14:05 |
*** code-R has quit IRC | 14:06 | |
*** EinstCrazy has quit IRC | 14:07 | |
*** rha has quit IRC | 14:12 | |
*** ravelar159 has joined #openstack-keystone | 14:12 | |
*** rderose_ has joined #openstack-keystone | 14:12 | |
*** markvoelker has quit IRC | 14:13 | |
stevemar | lbragstad: no 502s, but def slow | 14:13 |
*** nisha_ has joined #openstack-keystone | 14:14 | |
*** rderose has quit IRC | 14:15 | |
*** nisha_ has quit IRC | 14:15 | |
*** nisha has joined #openstack-keystone | 14:16 | |
*** markvoelker has joined #openstack-keystone | 14:16 | |
*** markvoelker has quit IRC | 14:16 | |
*** nisha is now known as Guest55913 | 14:16 | |
-openstackstatus- NOTICE: Gerrit is restarting to correct memory/performance issues. | 14:18 | |
dolphm | it took gerrit going down to make me realize i wasn't on IRC | 14:18 |
lbragstad | lol | 14:19 |
knikolla | morning o/ | 14:21 |
*** rderose_ has quit IRC | 14:24 | |
dstanek | knikolla: good morning! | 14:26 |
*** links has quit IRC | 14:27 | |
*** jaosorior has joined #openstack-keystone | 14:28 | |
*** Guest55913 is now known as nisha_ | 14:30 | |
*** nisha_ has quit IRC | 14:31 | |
*** dikonoor has quit IRC | 14:31 | |
*** nisha_ has joined #openstack-keystone | 14:31 | |
*** rderose has joined #openstack-keystone | 14:32 | |
nisha_ | hey all | 14:32 |
nisha_ | I am having some trouble figuring out why I am getting, keystoneauth1.exceptions.http.Conflict in this patch https://review.openstack.org/#/c/335118/ | 14:33 |
patchbot | nisha_: patch 335118 - python-keystoneclient - Add role functional tests | 14:33 |
nisha_ | though the tests are passing locally for me | 14:34 |
nisha_ | can anyone please help | 14:34 |
*** code-R_ has quit IRC | 14:35 | |
*** daemontool has quit IRC | 14:35 | |
stevemar | dolphm: slacker1 | 14:36 |
dolphm | stevemar: stackerslacker | 14:37 |
*** markvoelker has joined #openstack-keystone | 14:37 | |
nisha_ | rodrigods, hey you around? | 14:37 |
stevemar | dolphm: i'm wondering if doing a civs is overkill for the keystone mascot? | 14:42 |
dolphm | stevemar: civs? | 14:42 |
stevemar | dolphm: like for the ptl elections: http://civs.cs.cornell.edu/ | 14:42 |
dolphm | stevemar: oh, condorcet | 14:43 |
*** nisha_ is now known as nisha__ | 14:44 | |
*** nisha__ is now known as nisha_ | 14:44 | |
dolphm | stevemar: http://i.imgur.com/EFZqEuY.jpg | 14:44 |
stevemar | hehe | 14:45 |
*** jdandrea has joined #openstack-keystone | 14:45 | |
jdandrea | Can someone tell me when Keystone Domains became (or will become) "fully supported" in OpenStack? I'm hearing there's "partial support for domains" in Mitaka and "full support" in Newton, but the Grizzly release notes are where Keystone Domains (and v3 API) made their debut. | 14:46 |
*** jaosorior_ has joined #openstack-keystone | 14:47 | |
*** jaosorior has quit IRC | 14:47 | |
dolphm | jdandrea: that depends on the use case you're looking to take advantage of? | 14:48 |
*** jaosorior has joined #openstack-keystone | 14:48 | |
breton | jdandrea: it's not about support or domains. It's about usage of them. Some projects use them explicitely, some don't and live fine without them. | 14:49 |
jdandrea | @dolphm I wonder if they may be conflating Keystone's introduction of it with other OpenStack projects *use* of it. | 14:49 |
jdandrea | breton *nodnod* | 14:49 |
*** phalmos has joined #openstack-keystone | 14:50 | |
stevemar | jdandrea: ++ it's been around for a while, just other projects don't take advantage of them | 14:50 |
dolphm | jdandrea: when we originally introduced domains, we had no reason to bother any other services with their existence, so i'd say they were "fully supported" on day 1. we've since added additional use cases, some including support/acknowledgement in other services, and additional features that utilize them in keystone | 14:50 |
*** KevinE has joined #openstack-keystone | 14:50 | |
*** KevinE has quit IRC | 14:51 | |
breton | jdandrea: we don't talk about "support" for a long time already. If there is a usecase with domains in another service that you need, then it's just yet another missing feature, that has little to do with domains support | 14:51 |
*** edtubill has joined #openstack-keystone | 14:51 | |
*** KevinE has joined #openstack-keystone | 14:51 | |
jdandrea | Thanks everyone - that is superb! | 14:51 |
*** jaosorior_ has quit IRC | 14:52 | |
jdandrea | I had a feeling "support" was being conflated with "usage" and this confirms it. Very much appreciated. | 14:52 |
*** dave-mccowan has joined #openstack-keystone | 14:52 | |
*** jerrygb has joined #openstack-keystone | 14:52 | |
*** KevinE has quit IRC | 15:02 | |
*** jerrygb_ has joined #openstack-keystone | 15:06 | |
*** nisha_ has left #openstack-keystone | 15:09 | |
*** jerrygb has quit IRC | 15:09 | |
*** jrist has joined #openstack-keystone | 15:10 | |
crinkle | good morning keystone | 15:13 |
dstanek | hiya crinkle | 15:13 |
*** jrist has quit IRC | 15:16 | |
*** jrist has joined #openstack-keystone | 15:17 | |
edmondsw | any ideas on why I might be hitting this circular import of oslo_config, and how to avoid it? http://paste.openstack.org/show/533068/ | 15:21 |
*** gagehugo has quit IRC | 15:24 | |
*** gagehugo has joined #openstack-keystone | 15:24 | |
dstanek | edmondsw: i've not seen that. what are you running to get that? | 15:25 |
edmondsw | newton | 15:25 |
edmondsw | higher up in the trace is a script I wrote (that I can't share), but that shouldn't matter... circular is circular, and shouldn't happen no matter what originally imported the first time | 15:26 |
*** ametts has quit IRC | 15:27 | |
*** nisha_ has joined #openstack-keystone | 15:29 | |
*** nisha_ has left #openstack-keystone | 15:29 | |
*** spzala has quit IRC | 15:30 | |
*** spzala has joined #openstack-keystone | 15:30 | |
*** phalmos has quit IRC | 15:32 | |
dstanek | edmondsw: what is token/__init__.py? it seems like you are running your script from within the keystone directory | 15:33 |
dstanek | edmondsw: and you are getting keystone.token imported instead of python's token module | 15:34 |
*** itlinux has joined #openstack-keystone | 15:34 | |
*** spzala has quit IRC | 15:35 | |
edmondsw | dstanek... ahhh... yep, that's it | 15:35 |
*** ametts has joined #openstack-keystone | 15:35 | |
edmondsw | dstanek thanks! | 15:35 |
edmondsw | I knew this code was working yesterday... but I'd gone into the keystone dir to look at something and hadn't thought about that being what was different | 15:36 |
*** ravelar_159 has joined #openstack-keystone | 15:37 | |
*** ddieterly is now known as ddieterly[away] | 15:38 | |
*** chrisshattuck has joined #openstack-keystone | 15:38 | |
*** ravelar159 has quit IRC | 15:38 | |
*** phalmos has joined #openstack-keystone | 15:39 | |
*** ravelar_159 has quit IRC | 15:40 | |
dstanek | edmondsw: :-D | 15:42 |
*** ravelar159 has joined #openstack-keystone | 15:42 | |
*** ddieterly[away] is now known as ddieterly | 15:44 | |
*** links has joined #openstack-keystone | 15:45 | |
*** gyee has joined #openstack-keystone | 15:50 | |
*** ChanServ sets mode: +v gyee | 15:50 | |
openstackgerrit | werner mendizabal proposed openstack/keystone: Support encryption of credentials in Keystone https://review.openstack.org/317169 | 15:53 |
openstackgerrit | Merged openstack/keystone: Add relationship links to OAUTH APIs https://review.openstack.org/342350 | 15:53 |
*** wangqun has quit IRC | 15:55 | |
lbragstad | jamielennox around? | 15:56 |
lbragstad | I have a feeling no, but... | 15:56 |
dolphm | lbragstad: it's saturday | 15:57 |
dolphm | lbragstad: so, no | 15:57 |
*** dan_nguyen has joined #openstack-keystone | 15:57 | |
lbragstad | i figured as much | 15:57 |
lbragstad | dolphm if it's saturday in Australia then are we done, too? | 15:58 |
lbragstad | #happyhour! | 15:58 |
lbragstad | I mean, that's how it works.. right? | 15:58 |
dstanek | #happyhour sounds good | 16:02 |
*** adrian_otto has joined #openstack-keystone | 16:03 | |
lbragstad | rderose i take it you got around the gate issue you were seeing with the coverage job because of https://review.openstack.org/#/c/340074/19..25/test-requirements.txt,unified ? | 16:04 |
patchbot | lbragstad: patch 340074 - keystone - PCI-DSS Lockout requirements | 16:04 |
dstanek | lbragstad: i think he just had to update the requirements | 16:05 |
openstackgerrit | Merged openstack/keystone: clean up OAUTH API https://review.openstack.org/342351 | 16:05 |
lbragstad | I've never seen the use of three (===) in a requirements file before | 16:05 |
lbragstad | i.e. freezegun===0.3.5 | 16:05 |
lbragstad | dstanek is ^ that a thing? | 16:06 |
dstanek | lbragstad: i've never seen that before. maybe a typo in g-r? | 16:06 |
lbragstad | maybe? | 16:06 |
lbragstad | dstanek https://review.openstack.org/#/c/340074/25/test-requirements.txt has it removed | 16:06 |
patchbot | lbragstad: patch 340074 - keystone - PCI-DSS Lockout requirements | 16:06 |
lbragstad | so we're not specifying a version at all (should we be?) | 16:07 |
dolphm | lbragstad: sounds like teamwork - no man left behind or something | 16:07 |
*** sdake has joined #openstack-keystone | 16:07 | |
lbragstad | dolphm ++ | 16:07 |
lbragstad | "I'll take the day off *with* you! | 16:07 |
dstanek | lbragstad: ah, i think that's why it was broken. rderose said that -infra told him the failure was because his requirements didn't match up exactly to g-r | 16:08 |
dolphm | lbragstad: the line in keystone has to match this line exactly https://github.com/openstack/requirements/blob/master/global-requirements.txt#L300 | 16:08 |
lbragstad | ah - https://github.com/openstack/requirements/search?utf8=%E2%9C%93&q=freezegun | 16:08 |
lbragstad | i was looking at upper constraints before | 16:08 |
dstanek | dolphm: ++ | 16:08 |
*** adrian_otto1 has joined #openstack-keystone | 16:09 | |
*** edtubill has quit IRC | 16:09 | |
dolphm | lbragstad: dstanek: that's the format of upper requirements though https://github.com/openstack/requirements/blob/master/upper-constraints.txt#L119 | 16:09 |
stevemar | keep an eye out for a poll email | 16:09 |
*** KevinE has joined #openstack-keystone | 16:09 | |
dolphm | but we don't maintain upper requirements in keystone | 16:09 |
lbragstad | dolphm I wonder if that is specific to upper requirements | 16:09 |
stevemar | anyone that had 2 commits in this release or mitaka got a vote | 16:10 |
lbragstad | i've never seen that format used in requirements.txt or test-requirements.txt | 16:10 |
*** roxanagh_ has joined #openstack-keystone | 16:10 | |
dolphm | stevemar: humpty dumpty didn't make the cut? | 16:10 |
dstanek | stevemar: will it allow a write in candidate? | 16:10 |
stevemar | nope | 16:10 |
dstanek | stevemar: i was thinking we should nominate Trump's hair | 16:11 |
*** woodster_ has joined #openstack-keystone | 16:11 | |
*** roxanagh_ has quit IRC | 16:11 | |
lbragstad | dstanek it hasn't improve in 40 years... i don't know if that's a good thing | 16:11 |
lbragstad | improved* | 16:12 |
dstanek | but it is a natural wonder | 16:12 |
stevemar | dstanek: maybe then we can write in newt as his vp | 16:12 |
*** adrian_otto has quit IRC | 16:13 | |
*** spzala has joined #openstack-keystone | 16:13 | |
*** tesseract- has quit IRC | 16:16 | |
*** code-R has joined #openstack-keystone | 16:16 | |
*** rcernin|lunch has quit IRC | 16:18 | |
stevemar | Actual votes cast thus far: 5 | 16:19 |
stevemar | out of 88 hehe | 16:19 |
*** pcaruana has quit IRC | 16:20 | |
*** code-R_ has joined #openstack-keystone | 16:20 | |
breton | what are we voting for? | 16:22 |
dstanek | breton: favorite ice cream toppings | 16:22 |
stevemar | breton: keystone mascot - i needed a bit of fun on a friday | 16:23 |
*** code-R has quit IRC | 16:23 | |
breton | and where is the list? | 16:23 |
dstanek | stevemar: ah man, then i'd better change my vote! | 16:23 |
stevemar | lbragstad: hehe, you're such a stickler! this is a straight refactor: https://review.openstack.org/#/c/341969/ | 16:23 |
patchbot | stevemar: patch 341969 - keystone - Cleanup trusts controller | 16:23 |
stevemar | breton: the list should be in the poll | 16:23 |
breton | ooooh, just got the email | 16:23 |
stevemar | breton: you were sent | 16:23 |
stevemar | breton: :) | 16:23 |
*** sdake has quit IRC | 16:25 | |
knikolla | voted | 16:26 |
*** aastha has joined #openstack-keystone | 16:26 | |
*** edtubill has joined #openstack-keystone | 16:27 | |
*** ametts has quit IRC | 16:29 | |
*** KevinE has quit IRC | 16:31 | |
*** henrynash has quit IRC | 16:31 | |
*** nisha_ has joined #openstack-keystone | 16:38 | |
*** nisha_ has quit IRC | 16:38 | |
*** NishaYadav has joined #openstack-keystone | 16:38 | |
*** NishaYadav is now known as Guest44853 | 16:39 | |
*** david-lyle has joined #openstack-keystone | 16:42 | |
*** Guest44853 has quit IRC | 16:44 | |
notmorgan | stevemar: really? pangolin? :P | 16:44 |
* notmorgan is against using an animal ubuntu used. | 16:44 | |
notmorgan | [esp. recently] | 16:45 |
*** ametts has joined #openstack-keystone | 16:45 | |
*** nisha_ has joined #openstack-keystone | 16:49 | |
*** nisha_ has quit IRC | 16:50 | |
*** NishaYadav has joined #openstack-keystone | 16:50 | |
*** roxanagh_ has joined #openstack-keystone | 16:56 | |
*** ddieterly is now known as ddieterly[away] | 16:56 | |
*** NishaYadav has quit IRC | 16:58 | |
*** nisha_ has joined #openstack-keystone | 16:58 | |
*** nisha_ has quit IRC | 16:58 | |
*** NishaYadav has joined #openstack-keystone | 16:58 | |
*** adrian_otto1 has quit IRC | 17:04 | |
*** phalmos has quit IRC | 17:07 | |
*** david-lyle has quit IRC | 17:08 | |
*** roxanagh_ has quit IRC | 17:14 | |
*** spzala has quit IRC | 17:17 | |
*** browne has joined #openstack-keystone | 17:18 | |
*** spzala has joined #openstack-keystone | 17:18 | |
*** KevinE has joined #openstack-keystone | 17:19 | |
*** spzala has quit IRC | 17:23 | |
*** ddieterly[away] is now known as ddieterly | 17:26 | |
*** dan_nguyen has quit IRC | 17:28 | |
*** NishaYadav has quit IRC | 17:29 | |
breton | prepare_ldap turns out to be very small | 17:31 |
*** ddieterly is now known as ddieterly[away] | 17:34 | |
*** roxanagh_ has joined #openstack-keystone | 17:38 | |
*** harlowja has quit IRC | 17:39 | |
*** harlowja has joined #openstack-keystone | 17:41 | |
*** catintheroof has joined #openstack-keystone | 17:48 | |
stevemar | breton: ++ | 17:51 |
stevemar | call list_users and then call the mapping_api ? :) | 17:51 |
stevemar | notmorgan: OSSG already voted the pangolin as theirs, so we don't have first dibs on it anyway | 17:51 |
*** links has quit IRC | 17:52 | |
stevemar | jdennis1: thanks for looking at the unicode stuff in osc :D | 17:55 |
breton | stevemar: nope | 17:56 |
breton | stevemar: only call list_users. | 17:56 |
jdennis1 | stevemar: you're welcome, one more patch coming for openstack client | 17:56 |
*** catintheroof has quit IRC | 17:56 | |
stevemar | breton: hehe | 17:57 |
stevemar | jdennis1: i'm eager to review it | 17:57 |
stevemar | jdennis1: i thought we did a small fix for that in swift... let me look at git blame | 17:57 |
stevemar | jdennis1: we just cheaped out, d'oh: https://github.com/openstack/python-openstackclient/commit/cfd2bf5882b72d6dbd09a1839b63ed41f3834365 | 17:58 |
jdennis1 | stevemar: it seems (at least in keystone and keystoneclient) we've make local fixes where we see encode/decode issues instead of trying to assure everythine is Unicode internally | 17:59 |
*** rcernin has joined #openstack-keystone | 17:59 | |
stevemar | jdennis1: oh actually, swift properties are in headers and not allowed to be unicode, so that is right | 18:00 |
stevemar | jdennis1: this looks good though: https://github.com/openstack/python-openstackclient/commit/985b2cdd2c07442f4446e6164117cb8011269c8c | 18:00 |
*** AJaeger has joined #openstack-keystone | 18:00 | |
openstackgerrit | Andreas Jaeger proposed openstack/keystone: Use constraints for coverage job https://review.openstack.org/343016 | 18:00 |
AJaeger | keystone team, here's a change that I'd love to see merged for testing that constraints can be used in post jobs - if you're up to it ^ | 18:01 |
stevemar | AJaeger: i would love that | 18:01 |
AJaeger | stevemar: do you want to guinea-pig it, please? | 18:02 |
AJaeger | first the infra change must merge... | 18:02 |
stevemar | AJaeger: sure, i'll pull it down | 18:02 |
AJaeger | and if this works out, we can allow constraints for *all* jobs... | 18:02 |
AJaeger | thanks, stevemar | 18:03 |
stevemar | AJaeger: one related question, if you don't mind | 18:03 |
AJaeger | sure | 18:03 |
stevemar | AJaeger: we also have the coverage job in the stable gates, but in liberty it's failing :( | 18:03 |
stevemar | AJaeger: i tried doing what you just did: https://review.openstack.org/#/c/333560/ | 18:04 |
patchbot | stevemar: patch 333560 - keystone (stable/liberty) - fix cover job for liberty | 18:04 |
stevemar | AJaeger: with the added change of pulling down the requirements file | 18:04 |
AJaeger | let me check... | 18:05 |
stevemar | AJaeger: awesomeo | 18:05 |
*** jaosorior has quit IRC | 18:05 | |
*** jsavak has joined #openstack-keystone | 18:05 | |
AJaeger | stevemar: right now the infra job does not set constraints at all for coverage, my change adds it. | 18:06 |
stevemar | AJaeger: ah okay, so we probably should not have been running that job as a voting job :) | 18:06 |
AJaeger | stevemar: no, you should have - but change 333560 fails because of the constraints file. | 18:07 |
AJaeger | stevemar: looking at https://review.openstack.org/#/c/333537/, it seems that a newer dogpile version is the problem. | 18:08 |
patchbot | AJaeger: patch 333537 - keystone (stable/liberty) - Fix keystone-coverage-db gate for stable/liberty (ABANDONED) | 18:08 |
AJaeger | So, my proposal to fix it: Merge the infra patch - and then 333560 will just work out of the box. So, recheck it and see whether that works (it should ;) | 18:09 |
AJaeger | since the infra job adds the constraints file - and should use it. | 18:09 |
AJaeger | A good test case, thanks ;) | 18:09 |
stevemar | AJaeger: hehe | 18:10 |
stevemar | AJaeger: will the depends-on work in this case? | 18:11 |
stevemar | added it anyway | 18:11 |
AJaeger | stevemar: it will not allow it to merge before the infra change is in. | 18:11 |
stevemar | of course | 18:12 |
AJaeger | stevemar: but that's all - it will not change the job definition for you, so it will not succeed magically - only after the infra one is merged. | 18:12 |
stevemar | i was just wondering if depends-on pulled in infra changes | 18:12 |
stevemar | ah | 18:12 |
AJaeger | it does not | 18:12 |
stevemar | doh | 18:12 |
AJaeger | far too much risk to create havoc this way... | 18:13 |
*** spzala has joined #openstack-keystone | 18:17 | |
lbragstad | stevemar ravelar159 and I have an osc question for you when you have a minute | 18:20 |
*** ddieterly[away] is now known as ddieterly | 18:27 | |
*** henrynash has joined #openstack-keystone | 18:29 | |
*** ChanServ sets mode: +v henrynash | 18:29 | |
*** phalmos has joined #openstack-keystone | 18:29 | |
*** dave-mccowan has quit IRC | 18:34 | |
EmilienM | stevemar: hey Steve I have some questions for you | 18:34 |
EmilienM | what is the diff between auth_url, auth_uri and identity_uri? | 18:34 |
lbragstad | stevemar nevermind - ravelar159 figured it out :) | 18:34 |
stevemar | EmilienM: oh jeez | 18:35 |
EmilienM | yes | 18:35 |
stevemar | lbragstad: cool | 18:35 |
stevemar | EmilienM: so, one of those is deprecated, let me look | 18:35 |
stevemar | EmilienM: this is all keystonemiddleware right? | 18:35 |
EmilienM | yes | 18:35 |
EmilienM | this is so confusing | 18:35 |
iurygregory | +1 | 18:35 |
openstackgerrit | Boris Bobrov proposed openstack/keystone: Faster id mapping lookup https://review.openstack.org/339294 | 18:38 |
openstackgerrit | Boris Bobrov proposed openstack/keystone: Prevent error in when duplicate mapping is created https://review.openstack.org/343027 | 18:38 |
openstackgerrit | Boris Bobrov proposed openstack/keystone: Add prepare_ldap command https://review.openstack.org/343028 | 18:38 |
stevemar | EmilienM: so definitely identity_uri is deprecated: https://github.com/openstack/keystonemiddleware/blob/31c8582f3951137c361af5a5346eeab79e99cfc9/keystonemiddleware/auth_token/_auth.py#L36 | 18:38 |
EmilienM | ok good | 18:38 |
EmilienM | and auth_type should we set to what ? | 18:38 |
EmilienM | password? | 18:38 |
EmilienM | so here's the thing, see this log: http://logs.openstack.org/05/342905/5/check/gate-puppet-openstack-integration-3-scenario001-tempest-ubuntu-xenial/0294b4c/logs/cinder/cinder-api.txt.gz#_2016-07-15_17_49_48_888 | 18:38 |
EmilienM | but see the conf | 18:38 |
EmilienM | http://logs.openstack.org/79/342379/1/gate/gate-puppet-openstack-integration-3-scenario001-tempest-ubuntu-xenial/e7a88d7/logs/etc/cinder/cinder.conf.txt.gz | 18:38 |
EmilienM | it looks like something in middleware is using https, while in conf we use http | 18:39 |
dolphm | lbragstad: do you remember where that list of keystone-manage doctor ideas we had was? some etherpad of a keystone meeting | 18:40 |
dolphm | from* | 18:40 |
dolphm | stevemar: ^ ? | 18:40 |
EmilienM | dolphm: do you know your website is down? http://dolphm.com | 18:41 |
EmilienM | looks like DNS issue | 18:41 |
dolphm | EmilienM: works for me? :-/ | 18:41 |
EmilienM | what? | 18:42 |
stevemar | works for me | 18:42 |
dolphm | EmilienM: it's coming up just fine when i load it | 18:42 |
breton | dolphm: $ ping dolph.com | 18:42 |
breton | ping: unknown host dolph.com | 18:42 |
breton | oh ok | 18:42 |
dolphm | dolphm*.com | 18:42 |
EmilienM | same as breton | 18:42 |
lbragstad | works for me | 18:42 |
knikolla | works for me | 18:42 |
knikolla | dolphm: jekyll? | 18:42 |
EmilienM | it works also for me, but when I'm out of VPN, my bad. Probably something with redhat dns | 18:42 |
breton | yeah, dolphm.com works for me too | 18:42 |
EmilienM | cool, sorry for noise then :-) | 18:43 |
breton | also, why dolph.com doesn't work? | 18:43 |
stevemar | EmilienM: auth_url is used if you're using the auth plugins | 18:43 |
breton | such a cool domain wasted. | 18:43 |
dolphm | breton: because someone else has owned it since 1996 | 18:43 |
stevemar | EmilienM: auth_uri is used if you're using the old middleware specific ones | 18:44 |
EmilienM | stevemar: is 'password' a good default for auth_type ? | 18:44 |
stevemar | this is all IIRC | 18:44 |
EmilienM | err, auth_plugin | 18:44 |
stevemar | EmilienM: yep | 18:44 |
EmilienM | err, auth_type | 18:44 |
EmilienM | ok thank Steve you rock | 18:44 |
notmorgan | EmilienM: dolphm's website loads to me | 18:44 |
EmilienM | it's probably blocked by Quebec firewall | 18:45 |
EmilienM | (it's a joke ^= | 18:45 |
openstackgerrit | henry-nash proposed openstack/keystone: Improve readability of the api-ref roles section https://review.openstack.org/342325 | 18:47 |
EmilienM | notmorgan, stevemar: do you guys know why keystonemiddleware would take https by default ? http://logs.openstack.org/05/342905/5/check/gate-puppet-openstack-integration-3-scenario001-tempest-ubuntu-xenial/0294b4c/logs/cinder/cinder-api.txt.gz#_2016-07-15_17_49_48_888 | 18:47 |
*** sdake has joined #openstack-keystone | 18:47 | |
stevemar | EmilienM: do you have a copy of the config file? | 18:49 |
openstackgerrit | henry-nash proposed openstack/keystone: Fix up the api-ref for role query paramaters https://review.openstack.org/342441 | 18:51 |
lbragstad | dolphm i have no idea... i just parsed every etherpad i've opened since april looking for it | 18:51 |
stevemar | lbragstad: dolphm i don't recall there ever being a doctor etherpad | 18:52 |
stevemar | lbragstad: dolphm are you referring to https://etherpad.openstack.org/p/troubleshoot-keystone ? | 18:52 |
stevemar | breton: i'm trying to think of how you can test that | 18:52 |
lbragstad | stevemar no - we had a specific etherpad somewhere and I think we just started adding keystone-manage doctor cases to it after a meeting | 18:54 |
openstackgerrit | henry-nash proposed openstack/keystone: Fix up the api-ref for role query paramaters https://review.openstack.org/342441 | 18:54 |
EmilienM | stevemar: http://logs.openstack.org/79/342379/1/gate/gate-puppet-openstack-integration-3-scenario001-tempest-ubuntu-xenial/e7a88d7/logs/etc/cinder/cinder.conf.txt.gz | 18:54 |
stevemar | duh | 18:55 |
stevemar | lbragstad: i don't recall it | 18:56 |
EmilienM | maybe because it's missing auth_type | 18:56 |
EmilienM | so it takes https from somewhere | 18:56 |
*** slberger has joined #openstack-keystone | 18:59 | |
breton | stevemar: i am writing tests now | 19:00 |
breton | stevemar: doesn't look too complex to me | 19:00 |
*** jsavak has quit IRC | 19:02 | |
EmilienM | stevemar: don't worry if you don't find it, we'll use new parameters anyway and it should work | 19:02 |
*** tonytan4ever has quit IRC | 19:05 | |
stevemar | dolphm: lbragstad i looked at all the meeting logs post summit -- no mention of doctor | 19:08 |
*** d0ugal has quit IRC | 19:09 | |
lbragstad | stevemar same here | 19:09 |
stevemar | i thought that was the case, but i missed a few meetings so i wasn't sure | 19:09 |
dolphm | lbragstad: it was in a random etherpad we contributed to - outside of the meeting agenda | 19:09 |
dolphm | i'll have to go through meeting logs | 19:10 |
*** jerrygb_ has quit IRC | 19:10 | |
stevemar | dolphm: here ya go: http://eavesdrop.openstack.org/meetings/keystone/2016/ | 19:10 |
*** gagehugo has quit IRC | 19:10 | |
*** gagehugo has joined #openstack-keystone | 19:12 | |
dolphm | stevemar: lbragstad: bingo, bottom of https://etherpad.openstack.org/p/keystone-troubleshooting | 19:12 |
lbragstad | ah! | 19:12 |
lbragstad | and we also have https://etherpad.openstack.org/p/troubleshoot-keystone | 19:12 |
stevemar | EmilienM: wow that is weird | 19:15 |
stevemar | lbragstad: i copied the content to the beefier etherpad, and dropped in a link | 19:18 |
openstackgerrit | henry-nash proposed openstack/keystone: Fix up the api-ref for role query paramaters https://review.openstack.org/342441 | 19:18 |
lbragstad | stevemar sweet, thanks! | 19:19 |
openstackgerrit | henry-nash proposed openstack/keystone: Fix up numerous errors in params in api-ref for roles https://review.openstack.org/342468 | 19:19 |
*** henrynash has quit IRC | 19:19 | |
stevemar | dolphm: do you have a few minutes to look at some of the published v2 APIs? i think you're the only one with enough history to know whats accurate :) | 19:20 |
dolphm | stevemar: sure, i can do that in a bit | 19:21 |
stevemar | dolphm: mostly concerned about http://developer.openstack.org/api-ref/identity/v2-ext/index.html and http://developer.openstack.org/api-ref/identity/v2-admin/index.html | 19:23 |
stevemar | especially because there are non-KSADM routes in the KSADM docs :P | 19:23 |
stevemar | and i don't think we support the KSEC2 ones :) | 19:24 |
*** KevinE has quit IRC | 19:27 | |
openstackgerrit | Davanum Srinivas (dims) proposed openstack/keystone: [WIP] Testing latest u-c https://review.openstack.org/318435 | 19:39 |
*** browne has quit IRC | 19:40 | |
EmilienM | stevemar: http://logs.openstack.org/05/342905/7/check/gate-puppet-openstack-integration-3-scenario001-tempest-ubuntu-xenial/2c6f6f3/logs/cinder/cinder-api.txt.gz#_2016-07-15_19_30_56_664 | 19:41 |
EmilienM | stevemar: it's not username anymore? | 19:41 |
EmilienM | https://github.com/openstack/keystoneauth/blob/01d040b2beceac4f46288bbc29ed42449ef5f49b/keystoneauth1/loading/_plugins/identity/v3.py#L23 | 19:42 |
*** jsavak has joined #openstack-keystone | 19:47 | |
*** woodster_ has quit IRC | 19:49 | |
openstackgerrit | Boris Bobrov proposed openstack/keystone: [wip] Add prepare_ldap command https://review.openstack.org/343028 | 19:55 |
*** ametts has quit IRC | 19:56 | |
*** henrynash has joined #openstack-keystone | 19:58 | |
*** ChanServ sets mode: +v henrynash | 19:58 | |
*** ddieterly is now known as ddieterly[away] | 19:58 | |
*** tonytan4ever has joined #openstack-keystone | 20:05 | |
openstackgerrit | Steve Martinelli proposed openstack/keystone: v2 api: correct user list https://review.openstack.org/343053 | 20:06 |
*** sdake has quit IRC | 20:08 | |
openstackgerrit | Steve Martinelli proposed openstack/keystone: v2 api: change update user https://review.openstack.org/343055 | 20:09 |
*** dan_nguyen has joined #openstack-keystone | 20:09 | |
*** tonytan4ever has quit IRC | 20:11 | |
*** jlk has left #openstack-keystone | 20:12 | |
openstackgerrit | Steve Martinelli proposed openstack/keystone: v2 api: delete user is defined twice https://review.openstack.org/343056 | 20:13 |
openstackgerrit | Ron De Rose proposed openstack/keystone: PCI-DSS Adds password_expires_at to API docs https://review.openstack.org/336318 | 20:17 |
*** chrisshattuck has quit IRC | 20:19 | |
*** ddieterly[away] is now known as ddieterly | 20:20 | |
*** roxanagh_ has quit IRC | 20:23 | |
openstackgerrit | Steve Martinelli proposed openstack/keystone: v2 api: clean up tenant APIs https://review.openstack.org/343061 | 20:27 |
stevemar | dolphm: fwiw, i'm hacking away at it ^ | 20:28 |
*** henrynash has quit IRC | 20:30 | |
*** henrynash has joined #openstack-keystone | 20:30 | |
*** ChanServ sets mode: +v henrynash | 20:30 | |
*** adrian_otto has joined #openstack-keystone | 20:31 | |
*** adrian_otto has quit IRC | 20:31 | |
openstackgerrit | Steve Martinelli proposed openstack/keystone: api v2: move services API to admin, not extension https://review.openstack.org/343062 | 20:32 |
*** adrian_otto has joined #openstack-keystone | 20:33 | |
openstackgerrit | Steve Martinelli proposed openstack/keystone: The service APIs are missing OS-KSADM in the path https://review.openstack.org/343064 | 20:38 |
*** gyee has quit IRC | 20:42 | |
*** gordc has quit IRC | 20:43 | |
openstackgerrit | Steve Martinelli proposed openstack/keystone: v2 api: remove API to list user roles https://review.openstack.org/343066 | 20:45 |
*** jsavak has quit IRC | 20:49 | |
*** browne has joined #openstack-keystone | 20:49 | |
*** edmondsw has quit IRC | 20:58 | |
lbragstad | henrynash your latest string of patches for the role assignment docs look good - thanks for respinning | 20:59 |
*** dan_nguyen has quit IRC | 20:59 | |
*** phalmos has quit IRC | 21:00 | |
*** edmondsw has joined #openstack-keystone | 21:02 | |
*** edmondsw has quit IRC | 21:02 | |
*** edmondsw has joined #openstack-keystone | 21:03 | |
*** sdake has joined #openstack-keystone | 21:03 | |
*** edmondsw has quit IRC | 21:04 | |
*** ddieterly is now known as ddieterly[away] | 21:04 | |
*** jsavak has joined #openstack-keystone | 21:04 | |
*** EinstCrazy has joined #openstack-keystone | 21:08 | |
*** ddieterly[away] is now known as ddieterly | 21:09 | |
openstackgerrit | Dolph Mathews proposed openstack/keystone: keystone-manage doctor https://review.openstack.org/343077 | 21:11 |
*** EinstCrazy has quit IRC | 21:13 | |
*** roxanagh_ has joined #openstack-keystone | 21:16 | |
henrynash | lbragstad: thx | 21:16 |
*** gyee has joined #openstack-keystone | 21:20 | |
*** ChanServ sets mode: +v gyee | 21:20 | |
*** haplo37_ has joined #openstack-keystone | 21:21 | |
henrynash | stevemar: set of patches on roles are probably ready to go in: starting at: https://review.openstack.org/#/c/342325/ | 21:21 |
patchbot | henrynash: patch 342325 - keystone - Improve readability of the api-ref roles section | 21:21 |
henrynash | projects up next ! | 21:22 |
*** tonytan4ever has joined #openstack-keystone | 21:23 | |
dstanek | henrynash: nice! | 21:23 |
*** edtubill has quit IRC | 21:25 | |
*** tonytan4ever has quit IRC | 21:28 | |
*** clenimar_ has joined #openstack-keystone | 21:29 | |
dstanek | henrynash: you still around? | 21:35 |
henrynash | dstanek: hi | 21:35 |
dstanek | henrynash: howdy! | 21:36 |
henrynash | dstanek: howdydo | 21:36 |
dstanek | henrynash: i'm looking at https://review.openstack.org/#/c/342441/9/api-ref/source/v3/roles.inc | 21:37 |
patchbot | dstanek: patch 342441 - keystone - Fix up the api-ref for role query paramaters | 21:37 |
henrynash | dstanek: yep | 21:37 |
dstanek | shoudl scope.project_id be score.project.id? | 21:37 |
henrynash | dstanek: ooh | 21:37 |
dstanek | henrynash: i was confirming the docs using Martinelli | 21:37 |
dstanek | lol | 21:37 |
dstanek | http://git.openstack.org/cgit/openstack/keystone/tree/keystone/assignment/controllers.py#n929 | 21:37 |
dstanek | stevemar helps me find all the things | 21:38 |
henrynash | dstanek: you are, as ever, correct my friend! | 21:38 |
henrynash | dstanek: yeah, most of the useless, but just occasionally…. | 21:38 |
henrynash | :-) | 21:38 |
henrynash | dstanek: i’ll update the patch…good spot | 21:39 |
stevemar | dstanek: hmm? | 21:39 |
stevemar | what i do now? | 21:40 |
dstanek | henrynash: i just voted -1 so we don't accidentally merge it | 21:40 |
henrynash | dstanek: good | 21:40 |
dstanek | stevemar: lol, nothing i tried to copy and paste a link to henrynash and ended up copying your name | 21:40 |
stevemar | ah | 21:40 |
dstanek | stevemar: "i was confirming the docs using Martinelli" | 21:40 |
stevemar | damn, thought i was helpful for a minute :( | 21:40 |
dstanek | you're my best doc resource :-) | 21:41 |
henrynash | stevemar: we currently keep the OS-INHERIT stuff serparte in the docs….even though it is now core….I think it really makes understanding it much harder….I wonder if we could combine (evein though the APIs have OS-INHERIT in them)… | 21:44 |
stevemar | ohhh i like keystone doctor | 21:44 |
stevemar | henrynash: i was fine with that in the spec repo right? | 21:45 |
stevemar | henrynash: this change? https://github.com/openstack/keystone-specs/commit/3b790eafdcfd2f5d8c070980783a50d01574c425 | 21:45 |
dstanek | https://review.openstack.org/#/c/337835/ ftw! | 21:46 |
patchbot | dstanek: patch 337835 - python-keystoneclient - Use the adapter instead of the client in tests | 21:46 |
henrynash | stevemar: yeah, we did it for the old API spec | 21:46 |
henrynash | stevemar: but it’s still all spearate in api-ref | 21:46 |
dstanek | henrynash: you're really ripping through the documenation | 21:46 |
henrynash | stevemar: I’m happy to take on the act of merhing | 21:46 |
henrynash | merging | 21:46 |
henrynash | dstanek: strangely I like this kind of stuff (must be a British tea-drinking thing…) | 21:47 |
stevemar | henrynash: i'm a fan of it too | 21:47 |
dstanek | i say, good show sir! | 21:47 |
*** julim has quit IRC | 21:48 | |
henrynash | dstanek: chocks away! | 21:48 |
*** ddieterly is now known as ddieterly[away] | 21:48 | |
henrynash | stevemar: we shuold also probably make our code support APIs without the extension name in them (while cotinuing to supprot them with it in)….be much more consistent now they are core | 21:49 |
*** spzala has quit IRC | 21:50 | |
dstanek | henrynash: i was thinking the same thing yesterday when looking at doc reviews | 21:50 |
stevemar | henrynash: you mean just have an alias without the OS-FEDERATION part? | 21:50 |
henrynash | stevemar: yes | 21:50 |
stevemar | henrynash: surprisingly, we already do this... https://github.com/openstack/keystone/blob/master/keystone/v2_crud/admin_crud.py#L104-L114 | 21:51 |
dstanek | that'll make them look like first class apis | 21:51 |
*** ddieterly[away] is now known as ddieterly | 21:51 | |
henrynash | stevemar, dstanek: one slight complication is that you would want to make sure the url returned in any links matched what the user had entered | 21:52 |
*** haplo37_ has quit IRC | 21:52 | |
stevemar | henrynash: those links are so pointless | 21:53 |
henrynash | stevemar: yep, I give a coconut to the first person who sees them used in teh field… | 21:53 |
*** spzala has joined #openstack-keystone | 21:54 | |
openstackgerrit | henry-nash proposed openstack/keystone: Fix up the api-ref for role query paramaters https://review.openstack.org/342441 | 21:57 |
*** spzala has quit IRC | 21:58 | |
openstackgerrit | henry-nash proposed openstack/keystone: Fix up numerous errors in params in api-ref for roles https://review.openstack.org/342468 | 21:59 |
henrynash | dstanek: fixed up the scope.project.id thing | 22:00 |
dstanek | henrynash: nice. thanks! | 22:02 |
henrynash | dstanek: i also removed the scope.OS_INHERIT option…since until we merge in the OS-INHERIT that shouldn’t be in that doc | 22:03 |
*** pauloewerton has quit IRC | 22:05 | |
*** slberger has quit IRC | 22:06 | |
*** slberger has joined #openstack-keystone | 22:09 | |
*** gagehugo has quit IRC | 22:12 | |
*** pooja has joined #openstack-keystone | 22:12 | |
pooja | Hi, I needed some help getting effective role information for SSO users in Mitaka.. If I query effective roles for a SSO user using the shadow user id, it returns an empty roles it. | 22:12 |
pooja | Is there an api to query effective roles for a SSO user using group mappings? | 22:13 |
*** clenimar_ has quit IRC | 22:14 | |
*** bknudson_ has left #openstack-keystone | 22:15 | |
*** clenimar_ has joined #openstack-keystone | 22:16 | |
*** tonytan4ever has joined #openstack-keystone | 22:17 | |
*** ravelar159 has quit IRC | 22:18 | |
*** raildo has quit IRC | 22:19 | |
*** sdake has quit IRC | 22:19 | |
*** ddieterly is now known as ddieterly[away] | 22:29 | |
*** dan_nguyen has joined #openstack-keystone | 22:31 | |
*** ddieterly[away] has quit IRC | 22:32 | |
*** slberger has left #openstack-keystone | 22:37 | |
*** dan_nguyen has quit IRC | 22:38 | |
*** edmondsw has joined #openstack-keystone | 22:40 | |
*** sdake has joined #openstack-keystone | 22:40 | |
*** jsavak has quit IRC | 22:45 | |
*** edmondsw has quit IRC | 22:45 | |
*** sdake has quit IRC | 22:46 | |
openstackgerrit | henry-nash proposed openstack/keystone: Improve introdcution to api-ref projects https://review.openstack.org/343107 | 22:51 |
*** henrynash has quit IRC | 22:56 | |
*** aastha has quit IRC | 22:59 | |
*** sdake has joined #openstack-keystone | 23:02 | |
*** EinstCrazy has joined #openstack-keystone | 23:09 | |
*** aastha has joined #openstack-keystone | 23:10 | |
*** clenimar_ has quit IRC | 23:11 | |
*** EinstCrazy has quit IRC | 23:14 | |
*** sdake has quit IRC | 23:22 | |
*** clenimar_ has joined #openstack-keystone | 23:23 | |
*** ddieterly has joined #openstack-keystone | 23:28 | |
*** rcernin has quit IRC | 23:30 | |
*** haplo37_ has joined #openstack-keystone | 23:30 | |
*** pooja has quit IRC | 23:33 | |
*** tonytan4ever has quit IRC | 23:35 | |
openstackgerrit | Roxana Gherle proposed openstack/keystone: Fix the username value in federated tokens https://review.openstack.org/335617 | 23:36 |
*** spzala has joined #openstack-keystone | 23:37 | |
*** gyee has quit IRC | 23:49 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!