| *** hoangcx has joined #openstack-keystone | 00:59 | |
| *** phalmos_ has quit IRC | 01:03 | |
| *** markvoelker has joined #openstack-keystone | 01:19 | |
| *** markvoelker has quit IRC | 01:23 | |
| *** zhangjl has joined #openstack-keystone | 01:27 | |
| *** xek has quit IRC | 01:27 | |
| openstackgerrit | Maho Koshiya proposed openstack/python-keystoneclient: Add wrapper classes for return-request-id-to-caller https://review.openstack.org/261188 | 02:03 |
|---|---|---|
| *** namnh has joined #openstack-keystone | 02:08 | |
| *** hoonetorg has quit IRC | 02:40 | |
| *** dims has quit IRC | 02:43 | |
| *** hoonetorg has joined #openstack-keystone | 02:52 | |
| stevemar | breton: [A ? :) | 02:54 |
| openstackgerrit | Maho Koshiya proposed openstack/python-keystoneclient: Add return-request-id-to-caller function(v2_0) https://review.openstack.org/267449 | 02:56 |
| *** guoshan has joined #openstack-keystone | 03:01 | |
| *** markvoelker has joined #openstack-keystone | 03:20 | |
| *** markvoelker has quit IRC | 03:24 | |
| openstackgerrit | Maho Koshiya proposed openstack/python-keystoneclient: Add return-request-id-to-caller function(v3) https://review.openstack.org/267456 | 03:42 |
| *** guoshan has quit IRC | 03:53 | |
| *** links has joined #openstack-keystone | 04:15 | |
| openstackgerrit | Maho Koshiya proposed openstack/python-keystoneclient: Add return-request-id-to-caller function(v3/contrib) https://review.openstack.org/268003 | 04:27 |
| *** adriant has joined #openstack-keystone | 04:54 | |
| *** guoshan has joined #openstack-keystone | 04:54 | |
| *** GB21 has joined #openstack-keystone | 04:58 | |
| *** guoshan has quit IRC | 04:59 | |
| *** markvoelker has joined #openstack-keystone | 05:21 | |
| *** markvoelker has quit IRC | 05:25 | |
| openstackgerrit | Maho Koshiya proposed openstack/python-keystoneclient: Add release notes for return-request-id-to-caller https://review.openstack.org/276644 | 05:41 |
| *** guoshan has joined #openstack-keystone | 05:55 | |
| *** guoshan has quit IRC | 05:59 | |
| *** hyakuhei has quit IRC | 06:04 | |
| *** jaosorior has joined #openstack-keystone | 06:09 | |
| *** guoshan has joined #openstack-keystone | 06:21 | |
| *** tobberyd_ has joined #openstack-keystone | 06:22 | |
| *** huanxie has quit IRC | 06:26 | |
| *** jaosorior has quit IRC | 06:39 | |
| *** jaosorior has joined #openstack-keystone | 06:39 | |
| *** richm has quit IRC | 06:42 | |
| *** belmoreira has joined #openstack-keystone | 06:45 | |
| *** udesale has joined #openstack-keystone | 06:45 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 06:51 | |
| *** AlexeyAbashkin has quit IRC | 06:57 | |
| *** adriant has quit IRC | 07:19 | |
| *** mrsoul has joined #openstack-keystone | 07:20 | |
| *** jaosorior has quit IRC | 07:27 | |
| *** rha has quit IRC | 07:33 | |
| *** frickler has quit IRC | 07:34 | |
| *** pnavarro has joined #openstack-keystone | 07:45 | |
| *** GB21 has quit IRC | 07:49 | |
| *** frickler has joined #openstack-keystone | 07:53 | |
| *** jaosorior has joined #openstack-keystone | 07:55 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 07:56 | |
| *** masber has joined #openstack-keystone | 07:56 | |
| *** pcaruana has joined #openstack-keystone | 07:57 | |
| *** GB21 has joined #openstack-keystone | 08:11 | |
| *** iurygregory has quit IRC | 08:13 | |
| *** d0ugal has joined #openstack-keystone | 08:42 | |
| *** amoralej|off is now known as amoralej | 08:44 | |
| *** masber has quit IRC | 08:46 | |
| *** jpich has joined #openstack-keystone | 08:48 | |
| *** henrynash has joined #openstack-keystone | 08:58 | |
| *** ChanServ sets mode: +v henrynash | 08:58 | |
| *** zzzeek has quit IRC | 09:00 | |
| *** zzzeek has joined #openstack-keystone | 09:01 | |
| *** AlexeyAbashkin has quit IRC | 09:04 | |
| *** aloga_ has joined #openstack-keystone | 09:15 | |
| *** asettle has joined #openstack-keystone | 09:43 | |
| *** openstackgerrit has quit IRC | 09:47 | |
| *** openstackgerrit has joined #openstack-keystone | 09:48 | |
| *** henrynash has quit IRC | 09:54 | |
| *** aloga_ has quit IRC | 10:02 | |
| *** henrynash has joined #openstack-keystone | 10:04 | |
| *** henrynash has quit IRC | 10:04 | |
| *** aloga_ has joined #openstack-keystone | 10:04 | |
| *** henrynash has joined #openstack-keystone | 10:08 | |
| *** ChanServ sets mode: +v henrynash | 10:08 | |
| *** udesale has quit IRC | 10:08 | |
| *** aloga_ has quit IRC | 10:13 | |
| *** zhangjl has quit IRC | 10:15 | |
| *** mvk has quit IRC | 10:23 | |
| *** hoangcx has quit IRC | 10:40 | |
| *** henrynash has quit IRC | 10:41 | |
| *** mvk has joined #openstack-keystone | 10:55 | |
| *** d0ugal has quit IRC | 10:56 | |
| *** GB21 has quit IRC | 10:59 | |
| *** d0ugal has joined #openstack-keystone | 11:04 | |
| *** namnh has quit IRC | 11:05 | |
| *** richm has joined #openstack-keystone | 11:13 | |
| *** guoshan has quit IRC | 11:18 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 11:27 | |
| *** nicolasbock has joined #openstack-keystone | 11:50 | |
| *** guoshan has joined #openstack-keystone | 11:53 | |
| *** guoshan has quit IRC | 11:56 | |
| *** guoshan has joined #openstack-keystone | 11:57 | |
| *** dave-mccowan has joined #openstack-keystone | 12:01 | |
| *** guoshan has quit IRC | 12:01 | |
| *** GB21 has joined #openstack-keystone | 12:19 | |
| *** catintheroof has joined #openstack-keystone | 12:24 | |
| *** raildo has joined #openstack-keystone | 12:30 | |
| *** AlexeyAbashkin has quit IRC | 12:35 | |
| *** rodrigods has quit IRC | 12:47 | |
| *** rodrigods has joined #openstack-keystone | 12:47 | |
| *** amoralej is now known as amoralej|lunch | 12:50 | |
| *** ayoung has quit IRC | 12:54 | |
| *** vkmc has left #openstack-keystone | 12:55 | |
| *** guoshan has joined #openstack-keystone | 12:57 | |
| *** belmorei_ has joined #openstack-keystone | 13:00 | |
| *** belmoreira has quit IRC | 13:01 | |
| *** guoshan has quit IRC | 13:02 | |
| *** edmondsw has joined #openstack-keystone | 13:03 | |
| *** lamt has joined #openstack-keystone | 13:21 | |
| *** lamt has quit IRC | 13:22 | |
| *** lamt has joined #openstack-keystone | 13:23 | |
| *** amoralej|lunch is now known as amoralej | 13:28 | |
| *** jdennis has joined #openstack-keystone | 13:30 | |
| *** dims has joined #openstack-keystone | 13:35 | |
| *** raildo has quit IRC | 13:45 | |
| *** markvoelker has joined #openstack-keystone | 13:46 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 13:49 | |
| *** guoshan has joined #openstack-keystone | 13:52 | |
| *** guoshan has quit IRC | 13:56 | |
| *** nkinder has joined #openstack-keystone | 14:00 | |
| *** AlexeyAbashkin has quit IRC | 14:02 | |
| *** raildo has joined #openstack-keystone | 14:03 | |
| *** khamtamtun has joined #openstack-keystone | 14:04 | |
| *** clenimar has joined #openstack-keystone | 14:04 | |
| *** jperry has joined #openstack-keystone | 14:14 | |
| *** jperry has quit IRC | 14:15 | |
| *** khamtamtun has quit IRC | 14:16 | |
| *** pcaruana has quit IRC | 14:16 | |
| openstackgerrit | Merged openstack/keystone: Deprecate `endpoint_filter.sql` backend https://review.openstack.org/375931 | 14:17 |
| *** udesale has joined #openstack-keystone | 14:21 | |
| *** jperry has joined #openstack-keystone | 14:22 | |
| stevemar | o/ | 14:22 |
| stevemar | morning keystoners | 14:22 |
| dstanek | stevemar: o/ | 14:24 |
| *** khamtamtun has joined #openstack-keystone | 14:25 | |
| dstanek | woot i've been merged into planet openstack | 14:27 |
| stevemar | dstanek: blog it up! | 14:28 |
| stevemar | dstanek: i was taking a tally of the new features i'm looking at for ocata, do you plan on uploading a spec for the saml middleware shhhtuff? | 14:29 |
| dstanek | that's the goal. we'll see what happens | 14:29 |
| stevemar | was that reply to my previous comment? got bad lag here | 14:30 |
| dstanek | stevemar: i can post the patch later today. i meant to do it yesterday, but ended up getting busy | 14:30 |
| openstackgerrit | Merged openstack/keystone: Replace tenant with project for keystone catalog https://review.openstack.org/384165 | 14:30 |
| dstanek | stevemar: "the goal" was writing, "todyay" was spec | 14:30 |
| stevemar | gotcha | 14:30 |
| dstanek | stevemar: coffee shop wifis? | 14:30 |
| stevemar | spec proposal freeze is this week | 14:31 |
| stevemar | dstanek: jury duty wifi | 14:31 |
| dstanek | stevemar: oh, right. how's that going? | 14:33 |
| stevemar | trying to get out of it | 14:33 |
| *** ayoung has joined #openstack-keystone | 14:37 | |
| *** ChanServ sets mode: +v ayoung | 14:37 | |
| *** jaosorior has quit IRC | 14:39 | |
| *** jaosorior has joined #openstack-keystone | 14:40 | |
| *** khamtamtun has quit IRC | 14:41 | |
| stevemar | i was resorted to using the hotspot on my phone, i was unable to file a launchpad bug :( | 14:42 |
| *** khamtamtun has joined #openstack-keystone | 14:42 | |
| *** _fortis has joined #openstack-keystone | 14:42 | |
| *** khamtamtun has quit IRC | 14:43 | |
| bknudson | new keystone bug about bad wifi at jury duty | 14:43 |
| stevemar | bknudson: ++ | 14:44 |
| stevemar | bknudson: hows it going for you this week | 14:44 |
| bknudson | I will be traveling this week to dallas, so we'll see how that goes. | 14:45 |
| *** guoshan has joined #openstack-keystone | 14:46 | |
| *** catintheroof has quit IRC | 14:48 | |
| *** guoshan has quit IRC | 14:50 | |
| *** catintheroof has joined #openstack-keystone | 14:51 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone: Updated from global requirements https://review.openstack.org/397236 | 15:05 |
| *** GB21 has quit IRC | 15:13 | |
| *** links has quit IRC | 15:13 | |
| *** edtubill has joined #openstack-keystone | 15:14 | |
| mfisch | rodrigods: stevemar I'm going to publish my results on this testing unless you guys have reservations. It seems to match the other data which is good | 15:19 |
| rodrigods | mfisch, yep | 15:20 |
| rodrigods | mfisch, nice tests btw, the results help a lot so we know we are on the right track to fix the revocation stuff | 15:21 |
| mfisch | those are a forked version of dolphm's stuff | 15:21 |
| rodrigods | mfisch, ++ | 15:22 |
| *** clenimar has quit IRC | 15:22 | |
| *** raildo has quit IRC | 15:23 | |
| *** phalmos has joined #openstack-keystone | 15:27 | |
| mfisch | stevemar: if I make it to ATL I'd like to have a discussion on the PCI stuff | 15:29 |
| *** nk2527 has joined #openstack-keystone | 15:35 | |
| stevemar | mfisch: of course, we can start the discussion sooner | 15:35 |
| *** spilla has joined #openstack-keystone | 15:35 | |
| dolphm | rderose: ^ | 15:37 |
| rderose | thanks dolphm | 15:38 |
| rderose | stevemar mfisch: plz include me in the PCI discussion; will be working on another patch soon | 15:38 |
| mfisch | lets figure out a time | 15:39 |
| mfisch | and its okay with me if its after Thanksgiving, im out all next week | 15:39 |
| *** guoshan has joined #openstack-keystone | 15:40 | |
| *** udesale has quit IRC | 15:40 | |
| *** diazjf has joined #openstack-keystone | 15:43 | |
| *** guoshan has quit IRC | 15:44 | |
| *** diazjf has quit IRC | 15:45 | |
| *** woodburn has joined #openstack-keystone | 15:55 | |
| *** dgonzalez is now known as dgonzalez__ | 15:55 | |
| *** dgonzalez__ is now known as dgonzalez | 15:55 | |
| *** jaugustine has joined #openstack-keystone | 15:57 | |
| *** jaugustine has left #openstack-keystone | 15:58 | |
| *** jaugustine has joined #openstack-keystone | 15:59 | |
| *** tobber___ has joined #openstack-keystone | 16:05 | |
| *** jaugustine has quit IRC | 16:07 | |
| *** jaugustine has joined #openstack-keystone | 16:07 | |
| *** tobberyd_ has quit IRC | 16:08 | |
| *** tobber___ has quit IRC | 16:09 | |
| *** raildo has joined #openstack-keystone | 16:11 | |
| *** belmorei_ has quit IRC | 16:11 | |
| *** edtubill has quit IRC | 16:12 | |
| *** diazjf has joined #openstack-keystone | 16:13 | |
| *** edtubill has joined #openstack-keystone | 16:13 | |
| *** belmoreira has joined #openstack-keystone | 16:13 | |
| *** chris_hultin|AWA is now known as chris_hultin | 16:21 | |
| *** khamtamtun has joined #openstack-keystone | 16:23 | |
| *** pcaruana has joined #openstack-keystone | 16:24 | |
| *** kamal___ has joined #openstack-keystone | 16:31 | |
| *** chris_hultin is now known as chris_hultin|AWA | 16:32 | |
| *** belmoreira has quit IRC | 16:33 | |
| *** guoshan has joined #openstack-keystone | 16:34 | |
| kamal___ | hello. I've been trying to understand how policy.json file works with keystone. I see the policy.json file has <target>: <rule> However, I am struggling to understand how the action is mapped to the API call. Does each service have to read the policy.json file, process and take appropriate action? | 16:37 |
| *** guoshan has quit IRC | 16:38 | |
| *** pnavarro has quit IRC | 16:39 | |
| *** khamtamtun has quit IRC | 16:43 | |
| raildo | kamal___, keystone basically implements this policy mapping https://github.com/openstack/keystone/blob/master/doc/source/policy_mapping.rst | 16:45 |
| raildo | kamal___, every service do something similar to that | 16:45 |
| kamal___ | is there a standard way to do this policy mapping? | 16:45 |
| kamal___ | raildo: also, how do we know what actions are supported in a service? | 16:46 |
| raildo | kamal___, the is a router that indicates for which api call a policy entry is related | 16:47 |
| kamal___ | raildo: for example, on neutron how do I know what actions are supported? | 16:48 |
| raildo | kamal___, you can go in the service documentation, to see this actions | 16:48 |
| *** khamtamtun has joined #openstack-keystone | 16:49 | |
| kamal___ | raildo: I was looking for it. Would you happen to know the link? | 16:49 |
| raildo | kamal___, http://developer.openstack.org/api-ref/networking/v2/ | 16:50 |
| raildo | for neutron | 16:50 |
| raildo | kamal___, and there is a similar documentation for every openstack service, including keystone | 16:51 |
| kamal___ | raildo: that gives REST API docs but im not sure how the targets/actions are matched with these API cals | 16:51 |
| kamal___ | calls | 16:51 |
| raildo | kamal___, hum, I see | 16:51 |
| raildo | hum... I'm not sure that we have the policy mapping doc, for each service | 16:52 |
| kamal___ | raildo: for eg, the policy json has an action "create_network". How is that matched to REST API for creating a network | 16:52 |
| kamal___ | raildo: more pertinent question for me is if I am implementing a totally new service, what are the things I need to do to enable keystone authentication. Definitely, a policy.json file is required. What are the next steps? Do I need to create write code to process policy.json and then map that to each API call the service provides? | 16:54 |
| raildo | kamal___, nice, so every service implements the oslo.policy, that provides a interface to perform this kind of actions: for example https://github.com/openstack/neutron/blob/master/neutron/policy.py#L374 | 16:56 |
| kamal___ | raildo: ok, great. It looks I need to do something similar to policy.py in my service too | 16:58 |
| raildo | kamal___, you have to dealing the API calls that you want to use and not all the api calls. | 16:58 |
| raildo | kamal___, the policy will works as a access control to this api calls | 16:58 |
| kamal___ | raildo: ok got it. It looks like there is no magical way I can create mapping file and then be done with it. | 16:59 |
| raildo | kamal___, I don't think so :) | 17:00 |
| *** chris_hultin|AWA is now known as chris_hultin | 17:00 | |
| kamal___ | raildo: thanks for your help. I appreciagte it | 17:00 |
| kamal___ | appreciate | 17:00 |
| raildo | kamal___, no problem, good luck with that! | 17:00 |
| *** asettle__ has joined #openstack-keystone | 17:00 | |
| *** ayoung has quit IRC | 17:02 | |
| *** asettle has quit IRC | 17:03 | |
| *** jaosorior has quit IRC | 17:05 | |
| *** asettle__ is now known as asettle | 17:06 | |
| *** jaosorior has joined #openstack-keystone | 17:08 | |
| stevemar | rderose: you have not begun work on "shadow users" right? http://specs.openstack.org/openstack/keystone-specs/specs/keystone/ocata/shadow-mapping.html ? | 17:08 |
| rderose | stevemar: no, I haven't | 17:12 |
| rderose | stevemar: looks like lbragstad is going to start on this soon | 17:14 |
| stevemar | ok cool | 17:14 |
| stevemar | rderose: i'm creating a massive spreadsheet for everything that was discussed at the summit | 17:15 |
| stevemar | you guys are going to think i'm preparing to be a manager | 17:15 |
| rderose | stevemar: cool | 17:15 |
| rderose | stevemar: haha, aren't you? | 17:16 |
| * stevemar throws tomatoes at rderose | 17:17 | |
| *** ayoung has joined #openstack-keystone | 17:17 | |
| *** ChanServ sets mode: +v ayoung | 17:17 | |
| *** clsacramento has quit IRC | 17:21 | |
| *** xek has joined #openstack-keystone | 17:25 | |
| *** guoshan has joined #openstack-keystone | 17:28 | |
| *** agrebennikov has joined #openstack-keystone | 17:29 | |
| *** khamtamtun has quit IRC | 17:29 | |
| *** khamtamtun has joined #openstack-keystone | 17:29 | |
| *** guoshan has quit IRC | 17:32 | |
| *** jpich has quit IRC | 17:36 | |
| breton | someone is bored at the jury duty and created 9 bugs for fun | 17:38 |
| stevemar | breton: i created https://bugs.launchpad.net/keystone/+bug/1641652 for you | 17:39 |
| openstack | Launchpad bug 1641652 in OpenStack Identity (keystone) "cache invalidation should be wrapped to local context" [High,In progress] - Assigned to Boris Bobrov (bbobrov) | 17:39 |
| stevemar | breton: :) | 17:39 |
| stevemar | it's called organizing! | 17:39 |
| stevemar | you people live in chaos! | 17:39 |
| *** khamtamtun has quit IRC | 17:40 | |
| stevemar | breton: i only have another 12 or so to create :P | 17:40 |
| *** khamtamtun has joined #openstack-keystone | 17:46 | |
| *** jaosorior has quit IRC | 17:51 | |
| *** mvk has quit IRC | 17:52 | |
| *** ayoung has quit IRC | 17:55 | |
| *** khamtamtun has quit IRC | 17:57 | |
| *** khamtamtun has joined #openstack-keystone | 17:57 | |
| *** diazjf has quit IRC | 17:58 | |
| *** GB21 has joined #openstack-keystone | 18:06 | |
| *** khamtamtun has quit IRC | 18:07 | |
| *** khamtamtun has joined #openstack-keystone | 18:08 | |
| *** ayoung has joined #openstack-keystone | 18:08 | |
| *** ChanServ sets mode: +v ayoung | 18:08 | |
| openstackgerrit | Merged openstack/python-keystoneclient: Do not add last_request_id https://review.openstack.org/396260 | 18:10 |
| *** khamtamtun has quit IRC | 18:18 | |
| openstackgerrit | David Stanek proposed openstack/keystone: Limits config fixture usage to where it's needed https://review.openstack.org/266399 | 18:21 |
| *** guoshan has joined #openstack-keystone | 18:22 | |
| *** guoshan has quit IRC | 18:26 | |
| *** mvk has joined #openstack-keystone | 18:29 | |
| *** rcernin has joined #openstack-keystone | 18:33 | |
| *** amoralej is now known as amoralej|off | 18:38 | |
| *** khamtamtun has joined #openstack-keystone | 18:40 | |
| morgan_ | mornin | 18:44 |
| *** khamtamtun has quit IRC | 18:50 | |
| *** tqtran has joined #openstack-keystone | 18:50 | |
| *** asettle has quit IRC | 18:52 | |
| *** GB21 has quit IRC | 18:52 | |
| *** browne has joined #openstack-keystone | 19:01 | |
| *** khamtamtun has joined #openstack-keystone | 19:06 | |
| openstackgerrit | Tin Lam proposed openstack/keystone: Enable CADF notification by default https://review.openstack.org/397339 | 19:10 |
| breton | are we going to release ksc anytime soon? Rally would like to consume https://review.openstack.org/396260 | 19:12 |
| stevemar | breton: propose a release | 19:15 |
| *** guoshan has joined #openstack-keystone | 19:16 | |
| * morgan_ hides. | 19:19 | |
| stevemar | dstanek: you may want to consider picking up https://review.openstack.org/182658 since it has languished so much | 19:20 |
| *** guoshan has quit IRC | 19:20 | |
| *** belmoreira has joined #openstack-keystone | 19:23 | |
| *** khamtamtun has quit IRC | 19:26 | |
| *** belmoreira has quit IRC | 19:27 | |
| *** khamtamtun has joined #openstack-keystone | 19:27 | |
| *** diazjf has joined #openstack-keystone | 19:28 | |
| stevemar | thanks breton | 19:30 |
| *** stevemar changes topic to "Meeting Agenda: https://etherpad.openstack.org/p/keystone-weekly-meeting | Ocata goals: https://docs.google.com/spreadsheets/d/156q820cXcEc8Y9YWQgoc_hyOm3AZ2jtMQM3zdDhwGFU/edit?usp=sharing" | 19:38 | |
| stevemar | i took all the data from the summit and compiled it here: https://docs.google.com/spreadsheets/d/156q820cXcEc8Y9YWQgoc_hyOm3AZ2jtMQM3zdDhwGFU/edit?usp=sharing | 19:39 |
| stevemar | i hope this is useless and not just another thing to look at, folks can ignore the doc that i had up earlier... | 19:39 |
| stevemar | breton: jump over to #openstack-release if you can | 19:42 |
| mfisch | breton: did you have any insight into https://review.openstack.org/#/c/383333/ | 19:42 |
| breton | mfisch: no, sorry, will do tomorrow | 19:49 |
| mfisch | thanks | 19:49 |
| dstanek | stevemar: shore | 19:54 |
| *** woodster_ has joined #openstack-keystone | 20:01 | |
| *** tobberyd_ has joined #openstack-keystone | 20:04 | |
| stevemar | lbragstad dolphm where's ravelar? | 20:10 |
| stevemar | get the guy a bouncer | 20:10 |
| rderose | stevemar: ravelar will be back tomorrow | 20:10 |
| *** guoshan has joined #openstack-keystone | 20:10 | |
| stevemar | rderose: oh, who gave him the day off? ;) | 20:15 |
| *** guoshan has quit IRC | 20:15 | |
| rderose | :) | 20:16 |
| *** khamtamtun has quit IRC | 20:27 | |
| *** khamtamtun has joined #openstack-keystone | 20:31 | |
| *** rcernin has quit IRC | 20:35 | |
| *** spilla has quit IRC | 20:36 | |
| *** pcaruana has quit IRC | 20:45 | |
| *** khamtamtun has quit IRC | 20:51 | |
| *** khamtamtun has joined #openstack-keystone | 20:53 | |
| *** woodburn has left #openstack-keystone | 20:53 | |
| *** khamtamtun has quit IRC | 20:55 | |
| morgan_ | mordred: i think i need to pick your brain about a couple things | 20:56 |
| morgan_ | mordred: for the task interface. | 20:56 |
| *** rcernin has joined #openstack-keystone | 21:00 | |
| mordred | morgan_: woot | 21:01 |
| mordred | morgan_: sup? | 21:01 |
| morgan_ | so, looking at https://review.openstack.org/#/c/362473/1/keystoneauth1/task_manager.py and your comment | 21:01 |
| morgan_ | what cleanup were you thinking? | 21:02 |
| morgan_ | the raw part | 21:02 |
| *** arunkant has quit IRC | 21:03 | |
| mordred | morgan_: yah - the raw thing is a hack ... one sec and let me re-read stuff | 21:03 |
| morgan_ | yeah, figured it was quicker to just ask | 21:03 |
| morgan_ | it looks hack-y | 21:04 |
| mordred | yup. you are very correct :) | 21:04 |
| *** guoshan has joined #openstack-keystone | 21:04 | |
| mordred | morgan_: ah! I remember what's up with both of them now (and why there are two) | 21:05 |
| mordred | morgan_: so - both of them (please forgive the terrible naming) are about processing results before returning them | 21:06 |
| morgan_ | right | 21:06 |
| mordred | morgan_: results_filter_cb is a general callback function you can register with the TaskManager - raw is a per-task flag to skip it | 21:06 |
| morgan_ | ah | 21:07 |
| morgan_ | so if you have the cb raw just says "don't cb the results" | 21:07 |
| mordred | yah | 21:07 |
| morgan_ | but if you don't have a cb, it does nothing | 21:07 |
| mordred | double-checking that | 21:07 |
| morgan_ | hmm.... | 21:07 |
| mordred | yah | 21:07 |
| morgan_ | ok that makes sense. | 21:07 |
| morgan_ | it's a bit wierd. | 21:07 |
| mordred | it is - it's not the best designed hack I've ever done | 21:08 |
| *** guoshan has quit IRC | 21:09 | |
| morgan_ | ok yeah. i don't think there is aother good way to do that | 21:09 |
| morgan_ | unless you require passing the cb every time... which seems equally clunky | 21:09 |
| mordred | morgan_: so - it should be noted that result_filter_cb is really only for auto-generated Task classes from submit_function | 21:10 |
| morgan_ | right | 21:11 |
| morgan_ | hence, passing cb everytime becomes super clunky if not careful | 21:11 |
| morgan_ | even if it's in our code | 21:11 |
| mordred | morgan_: although raw=True _should_ from a contract perspective have the same semantics even if you're defining post-processing in your own base task | 21:11 |
| mordred | yup | 21:11 |
| morgan_ | ok i can roll with this. | 21:11 |
| * morgan_ is reading the patch to make sure i get it before trying to rebase/get it ready to go | 21:12 | |
| mordred | cool. sorry for the ugly bits - the parts that aren't raw/result_filter_cb are the good bits :) | 21:12 |
| morgan_ | i expect that'll start later tonight / early tomorrow | 21:12 |
| openstackgerrit | Merged openstack/keystone: Updated from global requirements https://review.openstack.org/397236 | 21:12 |
| *** diazjf has quit IRC | 21:12 | |
| mordred | \o/ | 21:12 |
| *** spzala has joined #openstack-keystone | 21:15 | |
| morgan_ | mordred: hm. going to need to get a set of tests for this too. | 21:17 |
| morgan_ | mordred: do you have an example of the task manager use in shade? | 21:18 |
| morgan_ | just so i can confirm it works as expected via a test or three | 21:19 |
| *** gyee has joined #openstack-keystone | 21:19 | |
| *** jaugustine has quit IRC | 21:21 | |
| mordred | morgan_: well - we do have shade/tests/unit/test_task_manager.py - although that is not nearly enough I'd imagine | 21:27 |
| mordred | morgan_: it mostly gets covered via _every_ openstack interaction in shade being encapsulated in a Task | 21:27 |
| morgan_ | that is likely enough to build a test in ksa | 21:28 |
| mordred | morgan_: so - shade/_tasks.py has a giant pile | 21:28 |
| morgan_ | we can massage it once we're there if we're missing something | 21:28 |
| morgan_ | and add more. | 21:28 |
| mordred | ++ | 21:28 |
| morgan_ | i just want basic coverage before we land that file in ksa | 21:28 |
| mordred | morgan_: and then we run a function shade+nodepool test that shows us that shade's Tasks running via the TaskManager that nodepool passes in to shade's constructor all works together | 21:28 |
| mordred | s/function/functional/ | 21:28 |
| morgan_ | yep | 21:29 |
| morgan_ | exactly | 21:29 |
| mordred | morgan_: but that test is "run nodepool against a devstack and make sure it reaches happiness" - which is a bit heavyweight :) | 21:29 |
| morgan_ | not what we want here | 21:30 |
| morgan_ | we can run a cross-gate if needed | 21:30 |
| *** diazjf has joined #openstack-keystone | 21:30 | |
| mordred | morgan_: that said- a patch to shade that depends-on the keystoneauth patch and that removes the TaskManager from shade and replaces it with the one from ksa _should_ get exercised by gate-shade-dsvm-functional-libs-nv | 21:30 |
| mordred | yah | 21:30 |
| morgan_ | but, ... lets not worry about that until we convert shade to use ksa-tasks | 21:30 |
| mordred | yah. exactly | 21:30 |
| jamielennox | you can't depends-on a library | 21:31 |
| jamielennox | well, you can and it'll block zuul, but it isn't respected by devstack gate | 21:31 |
| *** diazjf has quit IRC | 21:31 | |
| stevemar | bknudson: given the way the tests have been refactored, are you going to continue with https://review.openstack.org/#/c/283822/ ? | 21:31 |
| morgan_ | jamielennox: hehe fair point | 21:33 |
| morgan_ | mordred: thnx. | 21:39 |
| *** diazjf has joined #openstack-keystone | 21:41 | |
| *** diazjf has quit IRC | 21:43 | |
| *** tobberyd_ has quit IRC | 21:49 | |
| stevemar | samueldmq: i think you can abandon https://review.openstack.org/#/c/345668/1 | 21:51 |
| *** guoshan has joined #openstack-keystone | 21:58 | |
| *** edmondsw has quit IRC | 22:02 | |
| *** guoshan has quit IRC | 22:03 | |
| *** nkinder has quit IRC | 22:11 | |
| *** woodburn has joined #openstack-keystone | 22:11 | |
| *** hyakuhei has joined #openstack-keystone | 22:13 | |
| *** nkinder has joined #openstack-keystone | 22:13 | |
| *** browne has quit IRC | 22:14 | |
| *** woodburn has left #openstack-keystone | 22:15 | |
| samueldmq | stevemar: you're correct | 22:17 |
| samueldmq | stevemar: btw, is anyone looking at creating an LDAP job ? | 22:17 |
| stevemar | samueldmq: probably not needed, i plan on fixing the one devstack already has | 22:18 |
| stevemar | samueldmq: so i call dibs on that one! :) | 22:18 |
| samueldmq | stevemar: kk | 22:19 |
| samueldmq | stevemar: I know devstack has some support to openldap | 22:19 |
| samueldmq | stevemar: but we will still need to populate LDAP & setup keystone to work with it. right ? | 22:20 |
| samueldmq | stevemar: let me know if you need help on that | 22:21 |
| stevemar | samueldmq: i started to dig into it in my spare time, should be alright | 22:22 |
| samueldmq | stevemar: perfect | 22:22 |
| openstackgerrit | Steve Martinelli proposed openstack/keystone: Force SQLite to properly deal with foreign keys https://review.openstack.org/126030 | 22:23 |
| *** diazjf has joined #openstack-keystone | 22:23 | |
| *** nkinder has quit IRC | 22:31 | |
| *** adriant has joined #openstack-keystone | 22:32 | |
| openstackgerrit | Steve Martinelli proposed openstack/keystone: WIP - Validate project exists and enabled directly https://review.openstack.org/378047 | 22:34 |
| *** dave-mccowan has quit IRC | 22:38 | |
| *** ayoung has quit IRC | 22:39 | |
| *** edtubill has quit IRC | 22:40 | |
| *** hyakuhei has quit IRC | 22:42 | |
| *** hyakuhei has joined #openstack-keystone | 22:42 | |
| *** hyakuhei has quit IRC | 22:42 | |
| *** hyakuhei has joined #openstack-keystone | 22:42 | |
| *** diazjf has quit IRC | 22:46 | |
| *** guoshan has joined #openstack-keystone | 22:52 | |
| *** jperry has quit IRC | 22:55 | |
| *** spzala has quit IRC | 22:56 | |
| *** edtubill has joined #openstack-keystone | 22:56 | |
| *** guoshan has quit IRC | 22:57 | |
| *** phalmos has quit IRC | 22:59 | |
| rodrigods | stevemar, around? | 23:02 |
| dstanek | rodrigods: working late? | 23:04 |
| rodrigods | dstanek, kinda | 23:04 |
| rodrigods | dstanek, we have another outreachy student :) | 23:04 |
| dstanek | oh, neat | 23:05 |
| *** lamt has quit IRC | 23:05 | |
| rodrigods | dstanek, her project is really aligned with stevemar is doing for LDAP | 23:06 |
| rodrigods | so we may focus on having something like that as her main goal | 23:06 |
| rodrigods | (LDAP testing) | 23:06 |
| *** edtubill has quit IRC | 23:11 | |
| mfisch | stevemar: I have an odd question or problems | 23:17 |
| mfisch | I just upgraded from M to N in my virtual environment and token creation didnt even blip | 23:17 |
| mfisch | not even during db sync | 23:17 |
| mfisch | was there just no major db changes? | 23:17 |
| mfisch | usually I'm down as soon as db_sync runs, Between db_sync & restart | 23:18 |
| mfisch | I guess this is a good problem to have | 23:18 |
| morgan_ | mfisch: there have been cases where token creation works between versions with old schemas | 23:20 |
| mfisch | sure | 23:20 |
| morgan_ | mfisch: usually, it is dumb luck | 23:20 |
| mfisch | Im used to otherwise | 23:20 |
| morgan_ | basically you're just not hitting aything that uses the new schema etc | 23:20 |
| morgan_ | so, congrats! | 23:20 |
| mfisch | #WINNING | 23:20 |
| morgan_ | i don't recommend banking on that working in any case | 23:21 |
| morgan_ | though | 23:21 |
| mfisch | L->M was 50 seconds downtime | 23:21 |
| mfisch | db_sync took a long time | 23:21 |
| mfisch | huh you guys removed the domain table | 23:22 |
| mfisch | ah makes sense given the commit message | 23:23 |
| openstackgerrit | Adrian Turjak proposed openstack/keystone: adding combined password and totp auth plugin https://review.openstack.org/343422 | 23:30 |
| openstackgerrit | Adrian Turjak proposed openstack/keystone: adding combined password and totp auth plugin https://review.openstack.org/343422 | 23:31 |
| openstackgerrit | Ron De Rose proposed openstack/keystone-specs: Extend user API to support federated attributes https://review.openstack.org/397410 | 23:31 |
| openstackgerrit | Ron De Rose proposed openstack/keystone-specs: Extend user API to support federated attributes https://review.openstack.org/397410 | 23:34 |
| openstackgerrit | Ron De Rose proposed openstack/keystone-specs: Extend user API to support federated attributes https://review.openstack.org/397410 | 23:36 |
| *** jdennis has quit IRC | 23:43 | |
| *** guoshan has joined #openstack-keystone | 23:47 | |
| *** ayoung has joined #openstack-keystone | 23:51 | |
| *** ChanServ sets mode: +v ayoung | 23:51 | |
| *** guoshan has quit IRC | 23:51 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!