| *** phalmos has joined #openstack-keystone | 00:00 | |
| *** david-lyle_ has joined #openstack-keystone | 00:00 | |
| dstanek | did gerrit shit the bed? | 00:04 |
|---|---|---|
| openstackgerrit | David Stanek proposed openstack/keystone master: Federated mapping doc improvements https://review.openstack.org/422853 | 00:05 |
| *** ravelar1 has joined #openstack-keystone | 00:05 | |
| *** ravelar1 has quit IRC | 00:05 | |
| dstanek | thar we go | 00:05 |
| gagehugo | it was loading pretty slowly | 00:06 |
| *** agrebennikov_ has quit IRC | 00:08 | |
| *** david-lyle has joined #openstack-keystone | 00:09 | |
| openstackgerrit | Gage Hugo proposed openstack/keystone-specs master: WIP - Add User/Project resource tags https://review.openstack.org/431785 | 00:12 |
| *** david-lyle has quit IRC | 00:20 | |
| *** adrian_otto has joined #openstack-keystone | 00:24 | |
| *** david-lyle_ has quit IRC | 00:25 | |
| *** hoangcx has joined #openstack-keystone | 00:41 | |
| *** ngupta has joined #openstack-keystone | 00:44 | |
| *** ngupta has quit IRC | 00:59 | |
| *** ngupta has joined #openstack-keystone | 01:00 | |
| *** thorst_ has joined #openstack-keystone | 01:03 | |
| *** ngupta has quit IRC | 01:04 | |
| *** thorst_ has quit IRC | 01:06 | |
| *** jamielennox is now known as jamielennox|away | 01:07 | |
| *** dave-mccowan has joined #openstack-keystone | 01:11 | |
| *** zhurong has joined #openstack-keystone | 01:13 | |
| *** jamielennox|away is now known as jamielennox | 01:21 | |
| *** tqtran has quit IRC | 01:23 | |
| *** liujiong has joined #openstack-keystone | 01:26 | |
| *** lucas_ has joined #openstack-keystone | 01:29 | |
| *** david-lyle_ has joined #openstack-keystone | 01:30 | |
| *** phalmos has quit IRC | 01:34 | |
| *** thorst_ has joined #openstack-keystone | 01:37 | |
| *** thorst_ has quit IRC | 01:38 | |
| *** guoshan has joined #openstack-keystone | 01:39 | |
| *** guoshan_ has joined #openstack-keystone | 01:50 | |
| *** guoshan has quit IRC | 01:51 | |
| *** zhurong has quit IRC | 01:52 | |
| *** MasterOfBugs has quit IRC | 01:53 | |
| *** david-lyle_ has quit IRC | 01:55 | |
| openstackgerrit | yuhui proposed openstack/keystone master: Remove the top line of little use https://review.openstack.org/431807 | 01:57 |
| *** adrian_otto has quit IRC | 01:58 | |
| *** zhurong has joined #openstack-keystone | 02:12 | |
| *** lucas_ has quit IRC | 02:23 | |
| *** zhurong has quit IRC | 02:25 | |
| *** zhurong has joined #openstack-keystone | 02:30 | |
| openstackgerrit | vegezcj proposed openstack/keystone master: Keystone ldap tree_dn does not support Chinese, encoding comment adding it to the top of the file Change-Id: I9e5d59dcc71c0561b1d68ea358abab20a047b577 https://review.openstack.org/430495 | 02:34 |
| *** zhurong has quit IRC | 02:38 | |
| *** thorst_ has joined #openstack-keystone | 02:38 | |
| *** lucas_ has joined #openstack-keystone | 02:43 | |
| openstackgerrit | yuhui proposed openstack/keystone master: Correct some type errors https://review.openstack.org/431846 | 02:45 |
| *** thorst_ has quit IRC | 02:48 | |
| *** thorst_ has joined #openstack-keystone | 02:48 | |
| *** zhurong has joined #openstack-keystone | 02:52 | |
| *** thorst_ has quit IRC | 02:53 | |
| *** harlowja has quit IRC | 02:53 | |
| *** chris_hultin|AWA is now known as chris_hultin | 02:54 | |
| *** lucas_ has quit IRC | 02:54 | |
| *** chris_hultin is now known as chris_hultin|AWA | 02:58 | |
| *** zhurong has quit IRC | 02:59 | |
| *** ngupta has joined #openstack-keystone | 02:59 | |
| *** thorst_ has joined #openstack-keystone | 03:09 | |
| *** thorst_ has quit IRC | 03:09 | |
| *** phalmos has joined #openstack-keystone | 03:19 | |
| *** nicolasbock has quit IRC | 03:28 | |
| *** edmondsw has joined #openstack-keystone | 03:31 | |
| *** lucas_ has joined #openstack-keystone | 03:32 | |
| *** jose-phillips has joined #openstack-keystone | 03:33 | |
| *** thorst_ has joined #openstack-keystone | 03:35 | |
| *** thorst_ has quit IRC | 03:35 | |
| *** edmondsw has quit IRC | 03:36 | |
| *** dave-mccowan has quit IRC | 03:42 | |
| *** tovin07 has quit IRC | 03:46 | |
| *** links has joined #openstack-keystone | 03:50 | |
| *** tovin07 has joined #openstack-keystone | 03:51 | |
| *** markvoelker has quit IRC | 03:56 | |
| *** markvoelker has joined #openstack-keystone | 03:58 | |
| *** guoshan_ has quit IRC | 04:12 | |
| *** david-lyle has joined #openstack-keystone | 04:12 | |
| *** jose-phillips has quit IRC | 04:12 | |
| *** tovin07 has quit IRC | 04:27 | |
| openstackgerrit | Steve Martinelli proposed openstack/keystone master: clean up mitaka release notes https://review.openstack.org/429177 | 04:32 |
| *** lucas_ has quit IRC | 04:37 | |
| openstackgerrit | Merged openstack/keystone master: Add --check to keystone-manage db_sync command https://review.openstack.org/416383 | 04:38 |
| *** ngupta has quit IRC | 04:40 | |
| *** ngupta has joined #openstack-keystone | 04:40 | |
| openstackgerrit | Steve Martinelli proposed openstack/keystone master: clean up newton release notes https://review.openstack.org/429071 | 04:42 |
| openstackgerrit | Steve Martinelli proposed openstack/keystone master: clean up mitaka release notes https://review.openstack.org/429177 | 04:42 |
| *** ngupta has quit IRC | 04:45 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone master: Updated from global requirements https://review.openstack.org/431886 | 04:45 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/python-keystoneclient master: Updated from global requirements https://review.openstack.org/431900 | 04:52 |
| *** jefrite has quit IRC | 04:59 | |
| *** dikonoor has joined #openstack-keystone | 05:00 | |
| *** prashkre has joined #openstack-keystone | 05:04 | |
| *** jefrite has joined #openstack-keystone | 05:06 | |
| davechen | stevemar: Is there a service outage if following rolling upgrade steps? | 05:07 |
| davechen | stevemar: for the credentials API | 05:08 |
| *** NikitaKonovalov has quit IRC | 05:08 | |
| davechen | stevemar: It makes me think there will be no service outage if using the rolling upgrade when I read it. - https://review.openstack.org/#/c/429071/4/releasenotes/notes/bp-credential-encryption-93dcb67b3508e91a.yaml | 05:09 |
| *** NikitaKonovalov has joined #openstack-keystone | 05:10 | |
| *** david-lyle has quit IRC | 05:27 | |
| openstackgerrit | yuhui proposed openstack/keystone master: Correct some type errors https://review.openstack.org/431846 | 05:33 |
| *** thorst_ has joined #openstack-keystone | 05:36 | |
| *** prashkre has quit IRC | 05:40 | |
| *** thorst_ has quit IRC | 05:41 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/ldappool master: Updated from global requirements https://review.openstack.org/431968 | 05:50 |
| *** ravelar has quit IRC | 05:55 | |
| *** lucas_ has joined #openstack-keystone | 05:57 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/oslo.policy master: Updated from global requirements https://review.openstack.org/432069 | 05:57 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/pycadf master: Updated from global requirements https://review.openstack.org/432080 | 05:58 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/python-keystoneclient master: Updated from global requirements https://review.openstack.org/431900 | 05:58 |
| *** tqtran has joined #openstack-keystone | 06:05 | |
| *** guoshan has joined #openstack-keystone | 06:08 | |
| *** tqtran has quit IRC | 06:10 | |
| *** Jack_I has joined #openstack-keystone | 06:11 | |
| *** lucas_ has quit IRC | 06:23 | |
| *** phalmos has quit IRC | 06:33 | |
| *** richm has quit IRC | 06:43 | |
| *** adriant has quit IRC | 06:44 | |
| *** martinlopes has quit IRC | 06:46 | |
| openstackgerrit | vegezcj proposed openstack/keystone master: Keystone ldap tree_dn does not support Chinese Change-Id: I9e5d59dcc71c0561b1d68ea358abab20a047b577 https://review.openstack.org/430495 | 06:59 |
| *** markvoelker has quit IRC | 07:02 | |
| *** markvoelker has joined #openstack-keystone | 07:02 | |
| *** rcernin has joined #openstack-keystone | 07:03 | |
| *** sonuk has joined #openstack-keystone | 07:06 | |
| *** markvoelker has quit IRC | 07:06 | |
| *** edmondsw has joined #openstack-keystone | 07:07 | |
| *** edmondsw has quit IRC | 07:11 | |
| sonuk | Hi all. can anyone help me ? keystone failing during installation. 'su -s /bin/sh -c "keystone-manage db_sync" keystone' command failing on ubuntu 16.04 logs:http://paste.openstack.org/show/598342/ | 07:11 |
| morgan | sonuk: that is not something i've seen before | 07:16 |
| morgan | sonuk: what version of openstack? | 07:16 |
| morgan | sonuk: or release of keystone? | 07:16 |
| sonuk | morgan: mitaka | 07:16 |
| morgan | sonuk: hmmm. looking more closely | 07:16 |
| morgan | oh that is odd. | 07:17 |
| morgan | i've never seen that before. | 07:17 |
| morgan | i know what causes that error (not this case of it) but... *blink* | 07:17 |
| sonuk | yep I am facing this issue :( | 07:18 |
| morgan | something is really weird because it's trying to create the migrate_version table | 07:18 |
| morgan | a suuuuper small table | 07:18 |
| morgan | silly question, is the server the mysql db running on out of disk space and/or has proper permissions to write the table data? | 07:19 |
| morgan | because i have no idea how the PK for the migrate version would be causing that issue, the table is exceptionally small | 07:19 |
| morgan | sonuk: i can check more closely tomorrow, it's late here and i need to sleep | 07:20 |
| sonuk | morgan: I have enough disk space I just checked. ok np. | 07:20 |
| morgan | but i will setup a VM and try out a few things, what version of linux and/or mysql are you running? | 07:20 |
| morgan | if you figure it out, def. say something here ;) I'm super curious what is going on. | 07:21 |
| morgan | if you haven't, i'll dig in a bit more tomrrow | 07:21 |
| morgan | feel free to open a bug on this one in lp | 07:21 |
| sonuk | morgan: sure. thanks. | 07:21 |
| morgan | bugs.launchpad.net/keystone | 07:22 |
| morgan | and let me know what the bug # is, so i can track progress | 07:22 |
| *** pcaruana has joined #openstack-keystone | 07:30 | |
| *** thorst_ has joined #openstack-keystone | 07:37 | |
| *** mnaser has quit IRC | 07:41 | |
| *** thorst_ has quit IRC | 07:42 | |
| *** afazekas has quit IRC | 07:43 | |
| openstackgerrit | vegezcj proposed openstack/keystone master: Keystone ldap tree_dn does not support Chinese Change-Id: I9e5d59dcc71c0561b1d68ea358abab20a047b577 https://review.openstack.org/430495 | 07:56 |
| *** markvoelker has joined #openstack-keystone | 08:03 | |
| *** markvoelker has quit IRC | 08:09 | |
| *** zzzeek has quit IRC | 09:00 | |
| *** zzzeek has joined #openstack-keystone | 09:03 | |
| *** thorst_ has joined #openstack-keystone | 09:38 | |
| *** thorst_ has quit IRC | 09:43 | |
| *** markvoelker has joined #openstack-keystone | 10:03 | |
| *** tqtran has joined #openstack-keystone | 10:08 | |
| *** tqtran has quit IRC | 10:12 | |
| *** liujiong has quit IRC | 10:15 | |
| *** openstackgerrit has quit IRC | 10:18 | |
| *** alex_xu has quit IRC | 10:21 | |
| *** guoshan has quit IRC | 10:25 | |
| *** alex_xu has joined #openstack-keystone | 10:26 | |
| *** edmondsw has joined #openstack-keystone | 10:43 | |
| *** hoangcx has quit IRC | 10:46 | |
| *** phalmos has joined #openstack-keystone | 10:47 | |
| *** edmondsw has quit IRC | 10:48 | |
| *** nicolasbock has joined #openstack-keystone | 11:05 | |
| *** guoshan has joined #openstack-keystone | 11:05 | |
| *** crinkle_ has joined #openstack-keystone | 11:11 | |
| *** crinkle has quit IRC | 11:12 | |
| *** richm has joined #openstack-keystone | 11:12 | |
| *** alex_xu has quit IRC | 11:18 | |
| *** alex_xu has joined #openstack-keystone | 11:22 | |
| *** thorst_ has joined #openstack-keystone | 11:39 | |
| *** thorst_ has quit IRC | 11:43 | |
| *** tesseract has joined #openstack-keystone | 11:50 | |
| *** guoshan has quit IRC | 11:51 | |
| *** raildo has joined #openstack-keystone | 11:52 | |
| *** guoshan has joined #openstack-keystone | 11:55 | |
| *** pbourke has quit IRC | 12:07 | |
| *** dave-mccowan has joined #openstack-keystone | 12:07 | |
| *** pbourke has joined #openstack-keystone | 12:08 | |
| *** edmondsw has joined #openstack-keystone | 12:32 | |
| *** dave-mccowan has quit IRC | 12:32 | |
| *** crinkle has joined #openstack-keystone | 12:32 | |
| *** dave-mccowan has joined #openstack-keystone | 12:33 | |
| *** thorst_ has joined #openstack-keystone | 12:33 | |
| *** crinkle_ has quit IRC | 12:34 | |
| *** edmondsw has quit IRC | 12:36 | |
| *** markvoelker has quit IRC | 12:46 | |
| *** markvoelker has joined #openstack-keystone | 12:46 | |
| *** phalmos has quit IRC | 12:47 | |
| dstanek | happy bug day! | 12:49 |
| *** phalmos has joined #openstack-keystone | 13:03 | |
| *** Dinesh_Bhor has quit IRC | 13:04 | |
| *** edmondsw has joined #openstack-keystone | 13:06 | |
| *** phalmos has quit IRC | 13:08 | |
| lbragstad | bug day! | 13:44 |
| *** guoshan has quit IRC | 13:45 | |
| *** guoshan has joined #openstack-keystone | 13:47 | |
| *** links has quit IRC | 13:55 | |
| *** guoshan has quit IRC | 13:56 | |
| *** spilla has joined #openstack-keystone | 13:58 | |
| *** lamt has joined #openstack-keystone | 14:02 | |
| *** sonuk_ has joined #openstack-keystone | 14:06 | |
| *** v1k0d3n has quit IRC | 14:06 | |
| *** v1k0d3n has joined #openstack-keystone | 14:07 | |
| *** sonuk has quit IRC | 14:10 | |
| *** sonuk has joined #openstack-keystone | 14:10 | |
| *** sonuk_ has quit IRC | 14:11 | |
| *** guoshan has joined #openstack-keystone | 14:13 | |
| samueldmq | morning, bug day! | 14:15 |
| samueldmq | I'd like to see a couple of eyes on https://review.openstack.org/#/q/status:open+project:openstack/python-keystoneclient+branch:master+topic:bug/1641674 | 14:15 |
| *** guoshan has quit IRC | 14:15 | |
| samueldmq | it's closing a bug, not really a defect, it's adding support for endpoint groups and filtering in ksc | 14:16 |
| *** guoshan has joined #openstack-keystone | 14:16 | |
| dolphm | so, a feature then | 14:16 |
| *** guoshan has quit IRC | 14:20 | |
| *** jperry has joined #openstack-keystone | 14:23 | |
| samueldmq | dolphm: agreed, just stating a LP bug was open | 14:24 |
| dstanek | moar features! | 14:27 |
| *** jperry has quit IRC | 14:28 | |
| *** jperry has joined #openstack-keystone | 14:28 | |
| *** lamt has quit IRC | 14:31 | |
| *** jose-phillips has joined #openstack-keystone | 14:32 | |
| *** dikonoor has quit IRC | 14:36 | |
| *** agrebennikov_ has joined #openstack-keystone | 14:37 | |
| *** pnavarro has joined #openstack-keystone | 14:42 | |
| *** ngupta has joined #openstack-keystone | 14:45 | |
| *** ngupta_ has joined #openstack-keystone | 14:45 | |
| *** ngupta has quit IRC | 14:49 | |
| *** v1k0d3n has quit IRC | 15:01 | |
| *** v1k0d3n has joined #openstack-keystone | 15:01 | |
| *** david-lyle has joined #openstack-keystone | 15:03 | |
| *** spzala has joined #openstack-keystone | 15:05 | |
| *** lucas_ has joined #openstack-keystone | 15:10 | |
| *** Yumeng has joined #openstack-keystone | 15:17 | |
| Yumeng | hi,all! Does anyone encounter this error:Authorization Failed: SSL exception connecting to https://Control0106:5000/v2.0/tokens: [Errno 1] _ssl.c:504: error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol | 15:18 |
| Yumeng | after I excute command: keystone --debug user-list | 15:19 |
| dstanek | Yumeng: are you serving ssl over port 5000? | 15:19 |
| Yumeng | yes | 15:20 |
| dstanek | have you tried to curl that url? | 15:20 |
| Yumeng | [root@Control0106 ~(keystone_admin)]$ curl https://Control0106:5000/v2.0/tokens curl: (35) SSL received a record that exceeded the maximum permissible length. | 15:21 |
| *** jose-phillips has quit IRC | 15:21 | |
| dstanek | Yumeng: now try to curl that same url but use http instead of https | 15:21 |
| *** ravelar has joined #openstack-keystone | 15:23 | |
| Yumeng | I have changed all endpoint from http to https, so there is no response when curl http | 15:25 |
| dstanek | Yumeng: it's just a test | 15:25 |
| Yumeng | here is the results of curl http :DEBUG:keystoneclient.session:Request returned failure status: 504 Authorization Failed: Gateway Timeout (HTTP 504) | 15:26 |
| dstanek | Yumeng: to me that indicates that it's not serving ssl | 15:27 |
| dstanek | Yumeng: what is listening on port 5000? | 15:27 |
| Yumeng | tcp 0 0 0.0.0.0:5000 0.0.0.0:* LISTEN 40081/haproxy | 15:28 |
| *** dims_ has quit IRC | 15:28 | |
| dstanek | is haproxy terminating the SSL connection or doe it just pass thru? | 15:29 |
| *** dims has joined #openstack-keystone | 15:33 | |
| Yumeng | sorry. I was not quite understand your question, could you pls rephrase more detaily? | 15:35 |
| *** jperry has quit IRC | 15:36 | |
| dstanek | Yumeng: what does port 5000 on haproxy forward to? | 15:36 |
| *** jperry has joined #openstack-keystone | 15:37 | |
| Yumeng | ok, i will try to check that again. Thanks very much | 15:38 |
| *** Mr_Smurf has quit IRC | 15:38 | |
| lbragstad | ravelar around? | 15:38 |
| ravelar | lbragstda | 15:38 |
| ravelar | ahh lol | 15:38 |
| lbragstad | ravelar we might have to look into this one - https://bugs.launchpad.net/keystone/+bug/1663627 | 15:38 |
| openstack | Launchpad bug 1663627 in OpenStack Identity (keystone) "Running db_sync --check against new installs fails" [Undecided,New] | 15:38 |
| lbragstad | looks like it was just opened | 15:39 |
| ravelar | lbragstad it is specifically happening on the call to upgrades.get_db_version | 15:40 |
| lbragstad | ravelar expand_version = upgrades.get_db_version(repo='expand_repo') | 15:40 |
| lbragstad | https://github.com/openstack/keystone/blob/d5ce8ea0ed6a3b9f748427d1b552fb88ad738545/keystone/cmd/cli.py#L460 | 15:41 |
| ravelar | right, all the way to db_version_control | 15:41 |
| lbragstad | ravelar yeah, working on recreating locally | 15:43 |
| ravelar | lbragstad alrighty, I'll adk for more info from the bug. DBMigrationError and get_db_version are part of what db_sync already used to prevent the user from doing weird things | 15:44 |
| lbragstad | ravelar it sounds like we need to make --check smart enough to recognize fresh databases | 15:44 |
| dstanek | Yumeng: np. i suspect that haproxy forwards to keystone and nothing is actually serving SSL traffic. | 15:45 |
| ravelar | lbragstad version 66? | 15:45 |
| lbragstad | ravelar yeah -= https://github.com/openstack/keystone/tree/d5ce8ea0ed6a3b9f748427d1b552fb88ad738545/keystone/common/sql/migrate_repo/versions | 15:46 |
| lbragstad | 66 is technically the *first* version | 15:47 |
| *** chris_hultin|AWA is now known as chris_hultin | 15:48 | |
| dstanek | lbragstad: ravelar: and that's only right now...the first version will change over time | 15:48 |
| lbragstad | dstanek yep | 15:49 |
| ravelar | lbragstad dstanek. hmm that shouldn't be touching migrate repo because of repo='expand_repo' | 15:49 |
| *** Yumeng has quit IRC | 15:49 | |
| ravelar | lbragstad dstanek unless the upgrades.py file that changed get_db_version somehow got overwritten to the original file where it only uses LEGACY_REPO aka the migrate_repo | 15:51 |
| lbragstad | ravelar dstanek updated - https://bugs.launchpad.net/keystone/+bug/1663627 | 15:52 |
| openstack | Launchpad bug 1663627 in OpenStack Identity (keystone) "Running db_sync --check against new installs fails" [Medium,Confirmed] | 15:52 |
| lbragstad | ravelar dstanek the problem is that we are looking for a version but the database is completely empty | 15:52 |
| lbragstad | there is no keystone.migrate_version table | 15:53 |
| *** dims has quit IRC | 15:55 | |
| *** dims has joined #openstack-keystone | 15:55 | |
| *** dims is now known as Guest12406 | 15:56 | |
| *** adrian_otto has joined #openstack-keystone | 16:00 | |
| lbragstad | ravelar this is what's getting raised - https://github.com/openstack/oslo.db/blob/master/oslo_db/sqlalchemy/migration.py#L155 | 16:00 |
| lbragstad | ravelar it's coming oslo_db | 16:00 |
| lbragstad | it's coming from oslo_db | 16:00 |
| *** mnaser has joined #openstack-keystone | 16:00 | |
| ravelar | lbragstad ahh, adding an exception catch and log to notify user of a fresh database install | 16:01 |
| lbragstad | ravelar yeah - something we could do there is probably suggest that the user needs to get there database under version control | 16:01 |
| lbragstad | http://cdn.pasteraw.com/tuvsgxmglg8278lfcwum2tow59wlodl for example - | 16:03 |
| lbragstad | ravelar we'd need to add a test for that somehow | 16:03 |
| odyssey4me | lbragstad ravelar Ideally it should provide a known return code too | 16:03 |
| odyssey4me | it's not really an error, but instead a known state - just like the others | 16:03 |
| lbragstad | odyssey4me ++ | 16:04 |
| ravelar | http://paste.openstack.org/show/598429/ | 16:04 |
| lbragstad | ravelar yeah - with status being set to something know that we can document | 16:04 |
| lbragstad | known* | 16:04 |
| *** Guest12406 has quit IRC | 16:05 | |
| *** rcernin has quit IRC | 16:06 | |
| *** lucas_ has quit IRC | 16:13 | |
| *** lucas_ has joined #openstack-keystone | 16:13 | |
| *** ngupta_ has quit IRC | 16:16 | |
| *** ngupta has joined #openstack-keystone | 16:17 | |
| *** adrian_otto1 has joined #openstack-keystone | 16:22 | |
| *** dims_ has joined #openstack-keystone | 16:24 | |
| *** adrian_otto has quit IRC | 16:25 | |
| *** adrian_otto1 has quit IRC | 16:27 | |
| *** lucas_ has quit IRC | 16:27 | |
| *** adrian_otto has joined #openstack-keystone | 16:28 | |
| *** afazekas has joined #openstack-keystone | 16:32 | |
| *** openstackgerrit has joined #openstack-keystone | 16:35 | |
| openstackgerrit | Richard Avelar proposed openstack/keystone master: Address db_sync check against new install https://review.openstack.org/432376 | 16:35 |
| *** aasthad has joined #openstack-keystone | 16:42 | |
| *** tesseract has quit IRC | 16:45 | |
| *** jose-phillips has joined #openstack-keystone | 16:47 | |
| *** pcaruana has quit IRC | 16:53 | |
| *** david-lyle has quit IRC | 16:53 | |
| *** lucas_ has joined #openstack-keystone | 16:58 | |
| *** dave-mccowan has quit IRC | 17:05 | |
| *** harlowja has joined #openstack-keystone | 17:05 | |
| *** harlowja has quit IRC | 17:05 | |
| *** harlowja has joined #openstack-keystone | 17:05 | |
| *** ngupta has quit IRC | 17:07 | |
| *** ngupta has joined #openstack-keystone | 17:07 | |
| *** jaugustine has joined #openstack-keystone | 17:19 | |
| *** jaugustine has quit IRC | 17:21 | |
| *** dikonoor has joined #openstack-keystone | 17:21 | |
| *** lamt has joined #openstack-keystone | 17:25 | |
| *** jaugustine has joined #openstack-keystone | 17:30 | |
| *** david-lyle has joined #openstack-keystone | 17:31 | |
| rderose | dstanek: around? | 17:34 |
| openstackgerrit | Steve Martinelli proposed openstack/keystone master: Correct some typo errors https://review.openstack.org/431846 | 17:41 |
| *** phalmos has joined #openstack-keystone | 17:50 | |
| openstackgerrit | Richard Avelar proposed openstack/keystone master: Address db_sync check against new install https://review.openstack.org/432376 | 17:51 |
| *** jose-phillips has quit IRC | 17:58 | |
| *** phalmos has quit IRC | 18:01 | |
| *** tqtran has joined #openstack-keystone | 18:03 | |
| *** jaosorior has joined #openstack-keystone | 18:03 | |
| *** adrian_otto has quit IRC | 18:11 | |
| lbragstad | for anyone interested in picking something up for office hours, it'd be good to get a fresh set of eyes on https://review.openstack.org/#/c/126030/ | 18:12 |
| *** lucas_ has quit IRC | 18:14 | |
| *** lucas_ has joined #openstack-keystone | 18:14 | |
| *** arunkant has joined #openstack-keystone | 18:19 | |
| *** phalmos has joined #openstack-keystone | 18:20 | |
| gagehugo | I'll take a look at it | 18:23 |
| lbragstad | gagehugo awesome - thank you | 18:23 |
| openstackgerrit | Merged openstack/keystone master: Deprecate (and emit message) AdminTokenAuthMiddleware https://review.openstack.org/427878 | 18:33 |
| *** MasterOfBugs has joined #openstack-keystone | 18:40 | |
| *** jaosorior has quit IRC | 19:00 | |
| *** jaosorior has joined #openstack-keystone | 19:05 | |
| *** jaugustine has quit IRC | 19:05 | |
| *** dikonoor has quit IRC | 19:07 | |
| lbragstad | dstanek rderose thoughts antwash thoughts? https://review.openstack.org/#/c/429047/9 | 19:14 |
| dstanek | lbragstad: looking | 19:14 |
| dstanek | lbragstad: i thought it was ok so i gave it a +1 to give you and ron time to look it over again | 19:15 |
| lbragstad | dstanek curious what you think of the caching approach? | 19:16 |
| lbragstad | dstanek is there a way we can invalidate the cache for those user? | 19:16 |
| lbragstad | users*? | 19:16 |
| dstanek | lbragstad: we probably should invalidate on update in general | 19:18 |
| lbragstad | dstanek we could somehow return a list of user ids from the sql implementation that the manager can then use to invalidate the cache? | 19:19 |
| lbragstad | (kinda of brute force, but it would make it so that we don't have to disable caching int he tests) | 19:20 |
| dstanek | that's a hard one because you also don't want to sit and spin on 1000s of memcache hits | 19:21 |
| dstanek | at that point you almost just want to invalidate the region | 19:22 |
| lbragstad | dstanek that too | 19:22 |
| * antwash is thinking... | 19:24 | |
| dstanek | lbragstad: the question is how dangerous is it to have stale data? how often with this operation actual occur? | 19:25 |
| lbragstad | dstanek that's a good question | 19:31 |
| lbragstad | dstanek the tricky part is that the cache time is configurable | 19:33 |
| *** lucas_ has quit IRC | 19:33 | |
| *** phalmos has quit IRC | 19:33 | |
| dstanek | what actually uses that value? | 19:34 |
| lbragstad | dstanek which value? | 19:35 |
| *** lucas_ has joined #openstack-keystone | 19:37 | |
| *** jaugustine has joined #openstack-keystone | 19:37 | |
| dstanek | lbragstad: default_project_id | 19:39 |
| lbragstad | dstanek it's used in the authentication calls to determine scope | 19:40 |
| *** pramodrj07 has joined #openstack-keystone | 19:41 | |
| lbragstad | the auth methods actually look at the default_project_id and do a bunch of validation on it when a user asks for a token | 19:41 |
| lbragstad | in this case, i think the validation would just fail resulting in an unscoped token anyway... | 19:41 |
| dstanek | antwash: ^ that would be a useful test to add | 19:42 |
| openstackgerrit | Merged openstack/keystone master: Use ostestr instead of the custom pretty_tox.sh https://review.openstack.org/431587 | 19:42 |
| openstackgerrit | Merged openstack/keystone master: Federated mapping doc improvements https://review.openstack.org/422853 | 19:42 |
| dstanek | lbragstad: jamielennox: is there any keystone work left for https://bugs.launchpad.net/keystone/+bug/1602081 | 19:50 |
| openstack | Launchpad bug 1602081 in OpenStack Identity (keystone) "Use oslo.context's policy dict" [High,In progress] - Assigned to Jamie Lennox (jamielennox) | 19:50 |
| dstanek | ? | 19:50 |
| *** david-lyle has quit IRC | 20:03 | |
| *** dave-mccowan has joined #openstack-keystone | 20:11 | |
| *** adrian_otto has joined #openstack-keystone | 20:17 | |
| *** ngupta_ has joined #openstack-keystone | 20:37 | |
| *** lucas_ has quit IRC | 20:37 | |
| rderose | lbragstad: looking... | 20:38 |
| lbragstad | rderose thanks! | 20:38 |
| *** Jack_I has quit IRC | 20:39 | |
| *** ngupta has quit IRC | 20:40 | |
| *** ngupta_ has quit IRC | 20:42 | |
| rderose | lbragstad antwash: I don't want to worry about invalidate the cache, as long deleting a project would result in an unscoped token | 20:43 |
| rderose | lbragstad antwash: not ideal, but just wanting to avoid making this more complicated | 20:43 |
| *** lucas_ has joined #openstack-keystone | 20:43 | |
| lbragstad | rderose it should result in an unscoped token | 20:44 |
| rderose | lbragstad: cool, then no risk with stale data | 20:45 |
| lbragstad | rderose yeah - antwash and I were just talking about it and we could clean up the current commit and address the caching things in a separate one | 20:46 |
| rderose | nice | 20:46 |
| lbragstad | that way we'd at least have the fix, and in the worst possible case the identity api would be return stale information for the max time of the identity cache | 20:47 |
| rderose | yep | 20:47 |
| openstackgerrit | Octave Orgeron proposed openstack/keystone master: Enables MySQL Cluster support for Keystone https://review.openstack.org/431229 | 20:48 |
| *** lamt has quit IRC | 20:48 | |
| *** lamt has joined #openstack-keystone | 20:52 | |
| *** gNantel has joined #openstack-keystone | 20:58 | |
| openstackgerrit | Richard Avelar proposed openstack/keystone master: Address db_sync check against new install https://review.openstack.org/432376 | 21:00 |
| *** ngupta has joined #openstack-keystone | 21:11 | |
| *** gNantel has quit IRC | 21:24 | |
| *** erlon has quit IRC | 21:25 | |
| *** spilla has quit IRC | 21:32 | |
| *** lx_ has joined #openstack-keystone | 21:33 | |
| openstackgerrit | Anthony Washington proposed openstack/keystone master: Clear the project ID from user information https://review.openstack.org/429047 | 21:34 |
| *** jaugustine has quit IRC | 21:39 | |
| *** chris_hultin is now known as chris_hultin|AWA | 21:42 | |
| *** lamt has quit IRC | 21:47 | |
| *** lamt has joined #openstack-keystone | 21:55 | |
| *** lucas_ has quit IRC | 21:56 | |
| *** lucas_ has joined #openstack-keystone | 22:01 | |
| *** thorst_ has quit IRC | 22:09 | |
| *** pnavarro has quit IRC | 22:09 | |
| *** dave-mccowan has quit IRC | 22:12 | |
| *** gyee has joined #openstack-keystone | 22:18 | |
| *** lucas_ has quit IRC | 22:18 | |
| *** spzala has quit IRC | 22:24 | |
| *** thorst_ has joined #openstack-keystone | 22:29 | |
| *** spzala has joined #openstack-keystone | 22:29 | |
| *** thorst_ has quit IRC | 22:34 | |
| openstackgerrit | Anthony Washington proposed openstack/keystone master: Clear the project ID from user information https://review.openstack.org/429047 | 22:38 |
| *** agrebennikov_ has quit IRC | 22:39 | |
| openstackgerrit | Merged openstack/keystone master: Correct some typo errors https://review.openstack.org/431846 | 22:47 |
| *** david-lyle has joined #openstack-keystone | 22:55 | |
| *** jperry has quit IRC | 22:55 | |
| *** ngupta has quit IRC | 22:58 | |
| *** jamielennox is now known as jamielennox|away | 22:58 | |
| openstackgerrit | Anthony Washington proposed openstack/keystone master: Clear the project ID from user information https://review.openstack.org/429047 | 23:02 |
| *** catintheroof has quit IRC | 23:03 | |
| *** david-lyle has quit IRC | 23:04 | |
| *** catintheroof has joined #openstack-keystone | 23:04 | |
| *** catintheroof has quit IRC | 23:08 | |
| *** jaosorior has quit IRC | 23:15 | |
| *** lamt has quit IRC | 23:16 | |
| *** lx_ has quit IRC | 23:23 | |
| lbragstad | dolphm just a heads up - but it sounds like the API WG might be having a session either monday or tuesday at the PTG that is going to discuss capabilities | 23:43 |
| lbragstad | dolphm i won't be getting in until wednesday, but if they do have that session then, do you think you or dstanek would be able to represent keystone in the RBAC side of the discussion (if that comes up)? | 23:43 |
| *** jamielennox|away is now known as jamielennox | 23:50 | |
| *** ngupta has joined #openstack-keystone | 23:58 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!