| *** browne has quit IRC | 00:13 | |
| *** lujinluo has joined #openstack-keystone | 00:35 | |
| lujinluo | Hi everyone, I am trying to do a zero downtime upgrade from N release to O release, following this ref <https://docs.openstack.org/developer/keystone/upgrading.html#upgrading-without-downtime>. But everytime when I upgraded one of the keystone nodes to O release, for the first 5 minutes, I will receive this erro <http://paste.openstack.org/show/608557/>, when I tried to update a user. However after about 5 | 00:41 |
|---|---|---|
| lujinluo | minutes, everything went fine. My configuration file is <http://paste.openstack.org/show/608558/>. Can anyone please let me know where I did wrong? thanks in advance | 00:41 |
| *** ducttape_ has quit IRC | 00:44 | |
| *** ducttape_ has joined #openstack-keystone | 00:45 | |
| *** zhurong has joined #openstack-keystone | 00:56 | |
| *** browne has joined #openstack-keystone | 01:01 | |
| *** ducttape_ has quit IRC | 01:04 | |
| *** browne has quit IRC | 01:05 | |
| *** zhurong has quit IRC | 01:13 | |
| *** ducttape_ has joined #openstack-keystone | 01:15 | |
| mordred | jamielennox: so - you know how I'm writing all these super long and dense documents about topics that mostly nobody really wants to read? | 01:27 |
| jamielennox | mordred: yea, i was supposed to review one the other day, but i lost the tab and couldn't find it | 01:27 |
| jamielennox | by couldn't find it, i didn't look overly hard | 01:27 |
| *** zhurong has joined #openstack-keystone | 01:28 | |
| mordred | jamielennox: I was working on another one today and it struck me that the only way to give someone a list of keystone auth methods is to point them at the setup.cfg for keystoneauth | 01:28 |
| mordred | jamielennox: oh - no worries - I'll link you to it again next time I'm in a position to hound you about that one and respond to any feedback you mighthave | 01:29 |
| jamielennox | and to a lesser degree: https://docs.openstack.org/developer/keystoneauth/plugin-options.html | 01:29 |
| mordred | yah | 01:29 |
| *** thorst has quit IRC | 01:30 | |
| mordred | I mean, that list of names _is_ the canonical name as far as os-client-config/clouds.yaml is concerned, so I have no interest in defining a different list of names | 01:30 |
| mordred | actually - maybe just pointing to that doc is the right choice | 01:31 |
| jamielennox | mordred: it's super easy to generate if you were thinking of putting them somewhere else | 01:31 |
| jamielennox | just don't try and manually maintain the list | 01:31 |
| jamielennox | i used to have a script, was like 3 lines | 01:32 |
| jamielennox | i've honestly never been too worried about it, because realistically if your provider didn't give you a clouds.yaml with exactly what they want then you probably want "password" | 01:33 |
| mordred | yah - totally don't want to maintain an alternate list - just sort of felt bad writing an explanation of the auth_type parameter which basically said "use the names of the keytoneauth plugins even if you're not using python" | 01:33 |
| mordred | jamielennox: (same here) | 01:33 |
| jamielennox | you want to define the param in a cross-project/language kind of way? | 01:34 |
| mordred | yah - this is part of "what do all these fields in clouds.yaml mean" | 01:35 |
| mordred | most of them are actually straightforward | 01:36 |
| jamielennox | so then i'd probably specify you probably want "password" and point to the doc for more advanced configurations | 01:37 |
| jamielennox | i think os-c-c will default to password if not specified anyway | 01:37 |
| openstackgerrit | ayoung proposed openstack/keystone master: Add is_admin_project check to policy https://review.openstack.org/257636 | 01:37 |
| mordred | jamielennox: oh - it definitely well | 01:38 |
| mordred | but the thing I was trying to write was text explaining what values are valid in auth_type and how they relate to the values in auth: | 01:39 |
| mordred | since, I mean, right now the answer from os-c-c's perspective is "keystoneauth!" :) | 01:39 |
| jamielennox | yea, fair enough | 01:39 |
| mordred | but that doesn't help describe it for someone writing an impl in another language | 01:40 |
| mordred | that said - maybe I should just start with "password" | 01:40 |
| mordred | and leave "there are also other plugins" as a note with a todo "explain better" | 01:40 |
| jamielennox | mordred: well as you say you can link to that page, and if you can't find a sufficient explanation of how the params relate to the plugins in ksa docs you can write one :) | 01:41 |
| mordred | jamielennox: ++ | 01:42 |
| jamielennox | ksa docs were never that great because there was a lot of reference to keystoneclient docs | 01:42 |
| jamielennox | that doesn't really matter any more and everyone is bad at keeping docs up to date, but me in particular | 01:43 |
| * mordred looks at self, quickly tries to hide | 01:44 | |
| *** chlong has quit IRC | 01:50 | |
| *** ducttape_ has quit IRC | 01:52 | |
| *** ducttape_ has joined #openstack-keystone | 01:54 | |
| *** phalmos has joined #openstack-keystone | 01:56 | |
| openstackgerrit | D G Lee proposed openstack/keystonemiddleware master: Remove log translations https://review.openstack.org/447841 | 01:59 |
| *** jamielennox is now known as jamielennox|away | 01:59 | |
| *** zhurong has quit IRC | 02:11 | |
| *** jamielennox|away is now known as jamielennox | 02:13 | |
| *** ducttape_ has quit IRC | 02:13 | |
| *** zhurong has joined #openstack-keystone | 02:23 | |
| *** Shunli has joined #openstack-keystone | 02:24 | |
| *** lamt has joined #openstack-keystone | 02:26 | |
| *** ducttape_ has joined #openstack-keystone | 02:27 | |
| *** mkrai has left #openstack-keystone | 02:27 | |
| *** thorst has joined #openstack-keystone | 02:30 | |
| *** markvoelker has quit IRC | 02:31 | |
| *** ducttape_ has quit IRC | 02:34 | |
| *** ducttape_ has joined #openstack-keystone | 02:36 | |
| *** lamt has quit IRC | 02:40 | |
| *** lamt has joined #openstack-keystone | 02:41 | |
| *** zhurong has quit IRC | 02:43 | |
| *** nicolasbock has quit IRC | 02:44 | |
| *** thorst has quit IRC | 02:50 | |
| *** lamt has quit IRC | 02:53 | |
| *** ayoung has quit IRC | 02:54 | |
| *** lamt has joined #openstack-keystone | 02:55 | |
| *** lamt has quit IRC | 02:56 | |
| *** rderose has joined #openstack-keystone | 02:57 | |
| *** lamt has joined #openstack-keystone | 02:58 | |
| *** lamt has quit IRC | 02:59 | |
| *** lamt has joined #openstack-keystone | 03:00 | |
| *** lamt has quit IRC | 03:05 | |
| *** lamt has joined #openstack-keystone | 03:07 | |
| *** lamt has quit IRC | 03:10 | |
| *** lamt has joined #openstack-keystone | 03:11 | |
| *** lamt has quit IRC | 03:13 | |
| *** prashkre has joined #openstack-keystone | 03:13 | |
| *** lamt has joined #openstack-keystone | 03:14 | |
| openstackgerrit | ayoung proposed openstack/keystone master: Add is_admin_project check to policy https://review.openstack.org/257636 | 03:18 |
| *** ducttape_ has quit IRC | 03:21 | |
| *** lamt has quit IRC | 03:22 | |
| *** lamt has joined #openstack-keystone | 03:23 | |
| *** rderose has quit IRC | 03:23 | |
| *** lamt has quit IRC | 03:24 | |
| *** dave-mccowan has quit IRC | 03:25 | |
| *** lamt has joined #openstack-keystone | 03:26 | |
| *** lamt has quit IRC | 03:27 | |
| *** lamt has joined #openstack-keystone | 03:28 | |
| *** zhurong has joined #openstack-keystone | 03:35 | |
| *** lamt has quit IRC | 03:40 | |
| *** lamt has joined #openstack-keystone | 03:41 | |
| *** lamt has quit IRC | 03:42 | |
| *** lamt has joined #openstack-keystone | 03:44 | |
| *** lamt has quit IRC | 03:45 | |
| *** thorst has joined #openstack-keystone | 03:47 | |
| *** Dinesh_Bhor has joined #openstack-keystone | 03:47 | |
| *** lamt has joined #openstack-keystone | 03:48 | |
| *** lamt has quit IRC | 03:48 | |
| *** lamt has joined #openstack-keystone | 03:50 | |
| *** lamt has quit IRC | 03:51 | |
| *** thorst has quit IRC | 03:51 | |
| *** lamt has joined #openstack-keystone | 03:54 | |
| *** lamt has quit IRC | 03:54 | |
| *** lamt has joined #openstack-keystone | 03:55 | |
| *** zhurong has quit IRC | 03:56 | |
| *** lamt has quit IRC | 03:57 | |
| *** hidekazu has joined #openstack-keystone | 03:58 | |
| *** lamt has joined #openstack-keystone | 03:58 | |
| *** hidekazu has quit IRC | 03:59 | |
| *** markvoelker has joined #openstack-keystone | 03:59 | |
| *** lamt has quit IRC | 04:00 | |
| *** lamt has joined #openstack-keystone | 04:01 | |
| *** links has joined #openstack-keystone | 04:05 | |
| *** aojea has joined #openstack-keystone | 04:19 | |
| *** aojea has quit IRC | 04:23 | |
| *** lamt has quit IRC | 04:33 | |
| *** mkrai_ has quit IRC | 04:54 | |
| *** lujinluo has quit IRC | 04:57 | |
| *** lamt has joined #openstack-keystone | 05:11 | |
| *** jdennis1 has joined #openstack-keystone | 05:15 | |
| *** jdennis has quit IRC | 05:17 | |
| *** ducttape_ has joined #openstack-keystone | 05:19 | |
| *** ducttape_ has quit IRC | 05:23 | |
| *** lamt has quit IRC | 05:27 | |
| *** gyee has quit IRC | 05:28 | |
| *** richm has quit IRC | 05:44 | |
| *** thorst has joined #openstack-keystone | 05:48 | |
| *** thorst has quit IRC | 05:53 | |
| *** lamt has joined #openstack-keystone | 05:57 | |
| *** lamt has quit IRC | 05:57 | |
| *** lamt has joined #openstack-keystone | 05:58 | |
| *** lamt has quit IRC | 05:58 | |
| openstackgerrit | zhengliuyang proposed openstack/keystone master: Quotation marks should be included in http url using curl https://review.openstack.org/458736 | 06:00 |
| *** zhurong has joined #openstack-keystone | 06:05 | |
| *** zsli_ has joined #openstack-keystone | 06:28 | |
| *** Shunli has quit IRC | 06:31 | |
| *** adriant has quit IRC | 06:35 | |
| *** lamt has joined #openstack-keystone | 06:38 | |
| *** zsli__ has joined #openstack-keystone | 06:48 | |
| *** aojea has joined #openstack-keystone | 06:50 | |
| *** lujinluo has joined #openstack-keystone | 06:50 | |
| *** lujinluo has quit IRC | 06:50 | |
| *** zsli_ has quit IRC | 06:51 | |
| *** voelzmo has joined #openstack-keystone | 06:52 | |
| *** lujinluo has joined #openstack-keystone | 06:52 | |
| *** lujinluo has quit IRC | 06:57 | |
| *** Shunli has joined #openstack-keystone | 06:59 | |
| *** zsli__ has quit IRC | 07:02 | |
| *** pcaruana has joined #openstack-keystone | 07:06 | |
| *** zhurong has quit IRC | 07:08 | |
| *** arturb has joined #openstack-keystone | 07:16 | |
| *** tesseract-RH has joined #openstack-keystone | 07:30 | |
| *** blake has joined #openstack-keystone | 07:45 | |
| *** thorst has joined #openstack-keystone | 07:49 | |
| *** zzzeek has quit IRC | 08:00 | |
| *** zzzeek has joined #openstack-keystone | 08:00 | |
| *** jamielennox is now known as jamielennox|away | 08:02 | |
| *** thorst has quit IRC | 08:09 | |
| *** blake has quit IRC | 08:11 | |
| *** Shunli has quit IRC | 08:12 | |
| *** Shunli has joined #openstack-keystone | 08:13 | |
| *** jamielennox|away is now known as jamielennox | 08:22 | |
| *** aojea has quit IRC | 08:43 | |
| openstackgerrit | ChangBo Guo(gcb) proposed openstack/oslo.policy master: Simplify message of exception PolicyNotAuthorized https://review.openstack.org/449470 | 09:03 |
| *** thorst has joined #openstack-keystone | 09:06 | |
| *** links has quit IRC | 09:07 | |
| *** rha has joined #openstack-keystone | 09:07 | |
| *** rha has quit IRC | 09:07 | |
| *** rha has joined #openstack-keystone | 09:07 | |
| *** thorst has quit IRC | 09:10 | |
| openstackgerrit | ChangBo Guo(gcb) proposed openstack/keystone master: Remove test_metadata_invalid_contact_type https://review.openstack.org/460873 | 09:11 |
| *** dkushwaha has left #openstack-keystone | 09:20 | |
| *** Shunli has quit IRC | 09:23 | |
| *** Shunli has joined #openstack-keystone | 09:24 | |
| *** mdavidson has joined #openstack-keystone | 09:25 | |
| *** links has joined #openstack-keystone | 09:25 | |
| *** gcb has joined #openstack-keystone | 09:29 | |
| *** Shunli has quit IRC | 09:30 | |
| *** aojea has joined #openstack-keystone | 09:31 | |
| *** jaosorior has joined #openstack-keystone | 09:52 | |
| *** edmondsw has joined #openstack-keystone | 09:55 | |
| *** edmondsw has quit IRC | 10:00 | |
| *** links has quit IRC | 10:01 | |
| *** zhurong has joined #openstack-keystone | 10:05 | |
| *** thorst has joined #openstack-keystone | 10:07 | |
| *** nicolasbock has joined #openstack-keystone | 10:08 | |
| *** thorst has quit IRC | 10:12 | |
| *** richm has joined #openstack-keystone | 10:14 | |
| *** links has joined #openstack-keystone | 10:19 | |
| *** ducttape_ has joined #openstack-keystone | 10:23 | |
| *** aloga has quit IRC | 10:27 | |
| *** ducttape_ has quit IRC | 10:27 | |
| *** mvk has quit IRC | 10:29 | |
| *** Shunli has joined #openstack-keystone | 10:39 | |
| *** aloga has joined #openstack-keystone | 10:40 | |
| *** Shunli has quit IRC | 10:45 | |
| openstackgerrit | ChangBo Guo(gcb) proposed openstack/keystone master: Fix keystone.tests.unit.test_backend_ldap.LDAPIdentity https://review.openstack.org/461273 | 10:52 |
| *** zhurong has quit IRC | 10:53 | |
| *** ayoung has joined #openstack-keystone | 10:56 | |
| *** raildo has joined #openstack-keystone | 11:00 | |
| *** prashkre has quit IRC | 11:01 | |
| *** mvk has joined #openstack-keystone | 11:03 | |
| openstackgerrit | ChangBo Guo(gcb) proposed openstack/keystone master: Fix test keystone.tests.unit.test_token_bind.BindTest https://review.openstack.org/461275 | 11:13 |
| openstackgerrit | Hemanth Nakkina proposed openstack/keystone master: Change url passed to oauth signature verifier to request url https://review.openstack.org/461736 | 11:15 |
| *** prashkre has joined #openstack-keystone | 11:30 | |
| *** gcb has quit IRC | 11:34 | |
| *** thorst has joined #openstack-keystone | 11:36 | |
| *** edmondsw has joined #openstack-keystone | 11:43 | |
| *** edmondsw has quit IRC | 11:47 | |
| *** gcb has joined #openstack-keystone | 11:51 | |
| *** dave-mccowan has joined #openstack-keystone | 12:06 | |
| *** afred312 has quit IRC | 12:06 | |
| *** lunarlamp has joined #openstack-keystone | 12:06 | |
| *** edmondsw has joined #openstack-keystone | 12:12 | |
| *** efried has quit IRC | 12:15 | |
| *** ducttape_ has joined #openstack-keystone | 12:21 | |
| *** lamt has quit IRC | 12:26 | |
| *** efried has joined #openstack-keystone | 12:28 | |
| *** ducttape_ has quit IRC | 12:37 | |
| *** lujinluo has joined #openstack-keystone | 12:45 | |
| *** lujinluo has quit IRC | 12:46 | |
| *** lujinluo has joined #openstack-keystone | 12:47 | |
| *** lujinluo has quit IRC | 12:49 | |
| *** lujinluo has joined #openstack-keystone | 12:50 | |
| breton | https://openstack-in-production.blogspot.ru/2017/05/migrating-to-keystone-fernet-tokens.html oh wow | 12:55 |
| *** catintheroof has joined #openstack-keystone | 12:55 | |
| *** lujinluo has quit IRC | 12:57 | |
| *** lujinluo has joined #openstack-keystone | 12:58 | |
| *** lujinluo has quit IRC | 13:01 | |
| *** lujinluo has joined #openstack-keystone | 13:01 | |
| *** lujinluo has quit IRC | 13:07 | |
| *** lujinluo has joined #openstack-keystone | 13:07 | |
| *** lujinluo has quit IRC | 13:08 | |
| *** lujinluo has joined #openstack-keystone | 13:08 | |
| *** lujinluo has quit IRC | 13:12 | |
| *** lujinluo has joined #openstack-keystone | 13:12 | |
| *** lujinluo has quit IRC | 13:12 | |
| *** lujinluo has joined #openstack-keystone | 13:13 | |
| *** chlong has joined #openstack-keystone | 13:13 | |
| *** links has quit IRC | 13:20 | |
| *** lujinluo has quit IRC | 13:22 | |
| *** phalmos has quit IRC | 13:22 | |
| *** lujinluo has joined #openstack-keystone | 13:24 | |
| *** lujinluo has quit IRC | 13:31 | |
| *** ducttape_ has joined #openstack-keystone | 13:39 | |
| *** ducttape_ has quit IRC | 13:39 | |
| *** ducttape_ has joined #openstack-keystone | 13:43 | |
| *** flaper87 has joined #openstack-keystone | 13:45 | |
| *** prashkre has quit IRC | 13:45 | |
| *** prashkre has joined #openstack-keystone | 13:46 | |
| lbragstad | breton that's pretty cool | 13:46 |
| *** openstackgerrit has quit IRC | 13:48 | |
| *** prajeesh-wrs has quit IRC | 13:49 | |
| *** thorst is now known as thorst_afk | 13:59 | |
| efried | mordred Thanks for the review. Looks like that change is merging. Remind me what happens now wrt new ksa point-release that I can pull into g-r? | 14:02 |
| *** arturb has quit IRC | 14:03 | |
| *** markvoelker has quit IRC | 14:04 | |
| *** lamt has joined #openstack-keystone | 14:07 | |
| johnthetubaguy | lbragstad: hey just wanted to see if you are in Boston next week? or if you know someone who is? | 14:09 |
| lbragstad | johnthetubaguy i will be in boston | 14:09 |
| johnthetubaguy | lbragstad: awesome, hope to see you there | 14:09 |
| johnthetubaguy | lbragstad: just wanted to check about these sessions: https://www.openstack.org/summit/boston-2017/summit-schedule/global-search?t=vm+and+baremetal | 14:10 |
| lbragstad | johnthetubaguy ah - yes | 14:10 |
| lbragstad | johnthetubaguy i need to start building my schedule | 14:10 |
| lbragstad | :) | 14:10 |
| * lbragstad bookmarks | 14:10 | |
| *** toddnni has quit IRC | 14:13 | |
| *** lucasxu has joined #openstack-keystone | 14:13 | |
| *** voelzmo has quit IRC | 14:16 | |
| *** phalmos has joined #openstack-keystone | 14:17 | |
| johnthetubaguy | lbragstad: sweet, trying to make sure we have lots of projects represented | 14:23 |
| lbragstad | ++ | 14:24 |
| *** voelzmo has joined #openstack-keystone | 14:24 | |
| *** voelzmo has quit IRC | 14:29 | |
| *** voelzmo has joined #openstack-keystone | 14:29 | |
| *** markvoelker has joined #openstack-keystone | 14:30 | |
| *** basilAB has quit IRC | 14:42 | |
| lbragstad | gcb i proposed an alternative to this test - https://review.openstack.org/#/c/460879/1 | 14:43 |
| *** vaishali has quit IRC | 14:43 | |
| *** topol has quit IRC | 14:43 | |
| *** stevemar has quit IRC | 14:43 | |
| *** dougshelley66 has quit IRC | 14:43 | |
| *** SamYaple_ has quit IRC | 14:44 | |
| *** peterstac has quit IRC | 14:44 | |
| *** luzC has quit IRC | 14:44 | |
| *** redrobot has quit IRC | 14:44 | |
| *** SamYaple has joined #openstack-keystone | 14:44 | |
| *** freerunner has quit IRC | 14:45 | |
| *** d34dh0r53 has quit IRC | 14:45 | |
| *** flaper87 has quit IRC | 14:45 | |
| *** jaosorior has quit IRC | 14:45 | |
| *** jmccrory has quit IRC | 14:45 | |
| *** pcaruana has quit IRC | 14:45 | |
| *** hugokuo has quit IRC | 14:47 | |
| *** lifeless has quit IRC | 14:47 | |
| *** cloudnull has quit IRC | 14:47 | |
| *** luzC has joined #openstack-keystone | 14:48 | |
| *** lifeless has joined #openstack-keystone | 14:48 | |
| *** hugokuo has joined #openstack-keystone | 14:48 | |
| *** clenimar has quit IRC | 14:48 | |
| *** cloudnull has joined #openstack-keystone | 14:49 | |
| *** jmccrory has joined #openstack-keystone | 14:51 | |
| *** pcaruana has joined #openstack-keystone | 14:51 | |
| *** d34dh0r53 has joined #openstack-keystone | 14:51 | |
| *** vryzhenkin has joined #openstack-keystone | 14:51 | |
| *** basilAB has joined #openstack-keystone | 14:51 | |
| *** redrobot has joined #openstack-keystone | 14:52 | |
| *** redrobot is now known as Guest92102 | 14:52 | |
| *** basilAB has quit IRC | 14:56 | |
| *** vaishali has joined #openstack-keystone | 14:56 | |
| *** basilAB has joined #openstack-keystone | 14:57 | |
| *** clenimar has joined #openstack-keystone | 14:57 | |
| *** jaosorior has joined #openstack-keystone | 14:58 | |
| *** openstackgerrit has joined #openstack-keystone | 15:05 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Remove illegal type checking of password_expires_days https://review.openstack.org/461819 | 15:05 |
| lbragstad | gcb ^ | 15:06 |
| lbragstad | gcb samueldmq that might be an alternate solution to https://review.openstack.org/#/c/460879/1 that still allows us to maintain the test while keeping the option type safe | 15:06 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Cleanup policy generation https://review.openstack.org/458666 | 15:08 |
| openstackgerrit | Merged openstack/keystoneauth master: Introduce keystoneauth1.loading.adapter https://review.openstack.org/460337 | 15:10 |
| *** flaper87 has joined #openstack-keystone | 15:12 | |
| *** chlong has quit IRC | 15:13 | |
| *** chlong has joined #openstack-keystone | 15:30 | |
| *** markvoelker has quit IRC | 15:47 | |
| *** peterstac has joined #openstack-keystone | 15:49 | |
| *** stevemar has joined #openstack-keystone | 15:50 | |
| *** dougshelley66 has joined #openstack-keystone | 15:50 | |
| *** rderose has joined #openstack-keystone | 15:51 | |
| *** vryzhenkin is now known as freerunner | 15:52 | |
| efried | Hey folks, what's the release process for ksa? I just got a change merged, wondering when I'll be able to pull it into g-r. | 15:52 |
| *** markvoelker has joined #openstack-keystone | 15:53 | |
| lbragstad | efried yeah - we can do a release | 15:58 |
| lbragstad | efried the release process for identity libraries is pretty lenient | 15:58 |
| efried | lbragstad Cool. The change in question is master: Introduce keystoneauth1.loading.adapter https://review.openstack.org/460337 | 15:58 |
| lbragstad | efried within the context of the change, is it waiting on anything else? | 15:59 |
| efried | It's my first keystone patch ;-) | 15:59 |
| lbragstad | efried woo! | 15:59 |
| * lbragstad hands efried a keystone sticker | 15:59 | |
| efried | Awww, thanks! | 15:59 |
| lbragstad | well done ;) | 15:59 |
| efried | There's a nova change waiting for it: https://review.openstack.org/#/c/458257/ | 15:59 |
| efried | But intra-keystone, it stands alone. | 16:00 |
| *** tesseract-RH has quit IRC | 16:01 | |
| *** pcaruana has quit IRC | 16:02 | |
| lbragstad | efried quickly looking over the change, but nothing was removed, right? | 16:03 |
| lbragstad | just adding new functionality? | 16:03 |
| efried | lbragstad Right. | 16:03 |
| lbragstad | efried done - https://review.openstack.org/#/c/461836/ | 16:04 |
| efried | Wow, awesome! Thanks lbragstad | 16:04 |
| *** chlong has quit IRC | 16:04 | |
| lbragstad | efried anytime, thanks for the ping | 16:05 |
| *** voelzmo has quit IRC | 16:05 | |
| efried | So lbragstad I just watch for this sucker to merge, then I can propose a g-r bump, and that should percolate magically to the projects (like nova) that use it? | 16:05 |
| lbragstad | efried yep | 16:06 |
| efried | noice. | 16:06 |
| lbragstad | automation for the win | 16:06 |
| lbragstad | amiright? | 16:06 |
| efried | +1 | 16:07 |
| *** rderose_ has joined #openstack-keystone | 16:09 | |
| *** rderose has quit IRC | 16:12 | |
| *** mvk has quit IRC | 16:21 | |
| *** aojea has quit IRC | 16:31 | |
| *** phalmos_ has joined #openstack-keystone | 16:31 | |
| *** phalmos has quit IRC | 16:34 | |
| *** ducttape_ has quit IRC | 16:34 | |
| *** spotz_ is now known as spotz | 16:35 | |
| *** ducttape_ has joined #openstack-keystone | 16:39 | |
| *** rderose_ has quit IRC | 16:41 | |
| *** rderose_ has joined #openstack-keystone | 16:43 | |
| *** sjain has joined #openstack-keystone | 16:44 | |
| *** rderose_ has quit IRC | 16:49 | |
| *** ducttape_ has quit IRC | 16:57 | |
| *** ducttape_ has joined #openstack-keystone | 16:57 | |
| *** lucasxu has quit IRC | 17:00 | |
| *** harlowja has quit IRC | 17:04 | |
| *** sjain has quit IRC | 17:08 | |
| *** ducttap__ has joined #openstack-keystone | 17:09 | |
| *** gyee has joined #openstack-keystone | 17:09 | |
| *** topol_ has joined #openstack-keystone | 17:09 | |
| *** mvk has joined #openstack-keystone | 17:10 | |
| *** erlon has joined #openstack-keystone | 17:11 | |
| spotz | lbragstad and all - asked this over on swift but you may know as it's more auth related. Does the username need to match the project name for them to function as _member_ and if they don't match need swiftoperator? No ACLs involved | 17:12 |
| *** ducttape_ has quit IRC | 17:12 | |
| lbragstad | spotz that's a good question - are you using the swift auth middleware? | 17:13 |
| spotz | lbragstad: Yeah it's a RDO allinone (Don't tell the guys it's not my install:)) | 17:14 |
| lbragstad | :) | 17:15 |
| lbragstad | i'm actually not too sure how the swift auth middleware handles those cases, but I wasn't aware of any logic to match usernames to projects names in order to assume the _member_ role | 17:16 |
| lbragstad | that's new to me | 17:16 |
| spotz | So if the username and parojectname match you can do stuff without swiftoperator, but if they don't match you need it | 17:17 |
| lbragstad | interesting | 17:18 |
| spotz | Hehe | 17:19 |
| spotz | lbradstad do seems like a user with the same name as the project acts as an admin in the project | 17:34 |
| lbragstad | ah | 17:35 |
| lbragstad | spotz did you find that in the code somewhere? | 17:35 |
| spotz | Nah a student poking around:) But think of the use of demo in the docs | 17:38 |
| *** lucasxu has joined #openstack-keystone | 17:56 | |
| *** phalmos_ has quit IRC | 17:58 | |
| *** browne has joined #openstack-keystone | 17:58 | |
| *** harlowja has joined #openstack-keystone | 18:00 | |
| *** browne has quit IRC | 18:02 | |
| *** chlong has joined #openstack-keystone | 18:03 | |
| *** prashkre has quit IRC | 18:06 | |
| *** spilla has joined #openstack-keystone | 18:09 | |
| *** voelzmo has joined #openstack-keystone | 18:09 | |
| *** browne has joined #openstack-keystone | 18:11 | |
| *** aojea has joined #openstack-keystone | 18:11 | |
| *** prashkre has joined #openstack-keystone | 18:12 | |
| *** ducttap__ has quit IRC | 18:12 | |
| *** aojea has quit IRC | 18:15 | |
| *** voelzmo has quit IRC | 18:15 | |
| *** browne has quit IRC | 18:16 | |
| *** voelzmo has joined #openstack-keystone | 18:16 | |
| *** jamielennox is now known as jamielennox|away | 18:22 | |
| gagehugo | lbragstad is there an etherpad for the summit for keystone things? | 18:29 |
| *** ducttape_ has joined #openstack-keystone | 18:29 | |
| lbragstad | gagehugo not yet - we have a couple sessions but I haven't created any sort of etherpad yet | 18:30 |
| gagehugo | ah ok, wasn't sure if I had missed one or not | 18:31 |
| *** rderose has joined #openstack-keystone | 18:38 | |
| *** browne has joined #openstack-keystone | 18:39 | |
| *** browne has quit IRC | 18:39 | |
| ayoung | lbragstad, edmondsw sorry I missed the meeting. Was wasting time elsewhere. One thing worth discussing | 18:39 |
| ayoung | the policy changes that edmondsw and I were discussion yesterday due to the is_admin project patch | 18:40 |
| *** agrebennikov has joined #openstack-keystone | 18:40 | |
| ayoung | namely, a bunch of our policy rules don't have scope on them at all, and they kindof need to. One thing I am not sure we can do, however, is write scope rules that cover either project or domain tokens | 18:41 |
| ayoung | we need those for the projects api | 18:41 |
| *** ducttap__ has joined #openstack-keystone | 18:41 | |
| *** ducttape_ has quit IRC | 18:41 | |
| *** phalmos has joined #openstack-keystone | 18:51 | |
| *** gyee has quit IRC | 18:56 | |
| *** jaosorior is now known as jaosorior_away | 19:00 | |
| *** rderose_ has joined #openstack-keystone | 19:01 | |
| *** voelzmo has quit IRC | 19:01 | |
| *** browne has joined #openstack-keystone | 19:02 | |
| *** rderose has quit IRC | 19:04 | |
| *** voelzmo has joined #openstack-keystone | 19:36 | |
| *** prashkre has quit IRC | 19:40 | |
| *** kencjohnston has joined #openstack-keystone | 19:45 | |
| *** markvoelker has quit IRC | 19:50 | |
| *** aojea has joined #openstack-keystone | 19:50 | |
| *** browne has quit IRC | 19:52 | |
| *** voelzmo_ has joined #openstack-keystone | 19:56 | |
| *** voelzmo has quit IRC | 19:58 | |
| *** browne has joined #openstack-keystone | 19:59 | |
| *** voelzmo_ has quit IRC | 20:01 | |
| *** gyee has joined #openstack-keystone | 20:04 | |
| *** raildo has quit IRC | 20:08 | |
| *** voelzmo has joined #openstack-keystone | 20:12 | |
| *** voelzmo has quit IRC | 20:13 | |
| *** ducttap__ has quit IRC | 20:22 | |
| *** ducttape_ has joined #openstack-keystone | 20:22 | |
| *** ducttape_ has quit IRC | 20:23 | |
| *** ducttape_ has joined #openstack-keystone | 20:24 | |
| *** afazekas is now known as fazekas|pto | 20:27 | |
| *** fazekas|pto is now known as afazekas|pto | 20:27 | |
| *** agrebennikov has quit IRC | 20:28 | |
| *** afred312 has joined #openstack-keystone | 20:28 | |
| *** Aqsam has joined #openstack-keystone | 20:32 | |
| *** markvoelker has joined #openstack-keystone | 20:32 | |
| *** markvoelker has quit IRC | 20:33 | |
| *** markvoelker has joined #openstack-keystone | 20:34 | |
| *** browne has quit IRC | 20:38 | |
| *** Aqsam has quit IRC | 20:38 | |
| *** nicodemus_ has joined #openstack-keystone | 20:47 | |
| nicodemus_ | hello | 20:48 |
| nicodemus_ | I'm trying to instantiate an openstack client with a keystone_adapter from keystoneauth1 | 20:48 |
| nicodemus_ | and for some reason, the client is ignoring the 'insecure' config, which means my keystone endpoints are SSL buth with a self-signed certificate | 20:49 |
| nicodemus_ | is there any way to configure the adapter to ignore the certificate's issuer (that is, like passing --insecure=true)? | 20:50 |
| *** ducttape_ has quit IRC | 20:52 | |
| *** ducttape_ has joined #openstack-keystone | 20:53 | |
| cmurphy | nicodemus_: I think you want verify=False for keystoneauth https://docs.openstack.org/developer/keystoneauth/api/keystoneauth1.html#module-keystoneauth1.session | 20:55 |
| *** browne has joined #openstack-keystone | 20:57 | |
| nicodemus_ | cmurphy, that might do the trick, i'm looking into it | 20:57 |
| nicodemus_ | thanks! | 20:57 |
| cmurphy | np | 20:58 |
| *** thorst_afk has quit IRC | 20:59 | |
| *** jamielennox|away is now known as jamielennox | 21:01 | |
| *** chlong has quit IRC | 21:01 | |
| *** catintheroof has quit IRC | 21:01 | |
| *** agrebennikov has joined #openstack-keystone | 21:02 | |
| *** sjain has joined #openstack-keystone | 21:03 | |
| *** agrebennikov has quit IRC | 21:06 | |
| *** agrebennikov has joined #openstack-keystone | 21:06 | |
| *** browne has quit IRC | 21:07 | |
| *** topol_ is now known as topol | 21:07 | |
| *** browne has joined #openstack-keystone | 21:10 | |
| *** chlong has joined #openstack-keystone | 21:16 | |
| *** thorst_afk has joined #openstack-keystone | 21:25 | |
| *** spilla has quit IRC | 21:26 | |
| *** thorst_afk has quit IRC | 21:29 | |
| *** adriant has joined #openstack-keystone | 21:30 | |
| *** aojea has quit IRC | 21:35 | |
| *** sjain has quit IRC | 21:37 | |
| *** ducttape_ has quit IRC | 21:40 | |
| *** nicodemus_ has quit IRC | 21:40 | |
| *** ducttape_ has joined #openstack-keystone | 21:40 | |
| *** clarkb has joined #openstack-keystone | 21:43 | |
| *** lucasxu has quit IRC | 21:51 | |
| *** ducttap__ has joined #openstack-keystone | 21:53 | |
| *** ducttape_ has quit IRC | 21:55 | |
| edmondsw | lbragstad I got through https://review.openstack.org/#/c/460344 and posted my comments | 21:59 |
| *** blake has joined #openstack-keystone | 22:04 | |
| *** erlon has quit IRC | 22:21 | |
| *** chlong has quit IRC | 22:22 | |
| *** phalmos has quit IRC | 22:28 | |
| *** phalmos has joined #openstack-keystone | 22:30 | |
| *** dave-mccowan has quit IRC | 22:31 | |
| *** agrebennikov has quit IRC | 22:35 | |
| *** dave-mccowan has joined #openstack-keystone | 22:49 | |
| *** browne has quit IRC | 22:50 | |
| *** browne has joined #openstack-keystone | 22:58 | |
| *** ducttap__ has quit IRC | 23:04 | |
| *** ducttape_ has joined #openstack-keystone | 23:09 | |
| rm_work | OK | 23:12 |
| rm_work | err, wrong channel | 23:13 |
| *** browne has quit IRC | 23:13 | |
| *** browne has joined #openstack-keystone | 23:14 | |
| *** rderose_ has quit IRC | 23:15 | |
| *** esp has joined #openstack-keystone | 23:17 | |
| *** browne has quit IRC | 23:19 | |
| *** browne has joined #openstack-keystone | 23:20 | |
| *** thorst_afk has joined #openstack-keystone | 23:21 | |
| *** catintheroof has joined #openstack-keystone | 23:23 | |
| *** catintheroof has quit IRC | 23:23 | |
| *** catintheroof has joined #openstack-keystone | 23:24 | |
| *** ducttape_ has quit IRC | 23:25 | |
| blake | Could I get someone to review a couple of bugs I filed? https://bugs.launchpad.net/keystoneauth/+bug/1687314 and https://bugs.launchpad.net/keystoneauth/+bug/1687316 | 23:29 |
| openstack | Launchpad bug 1687314 in keystoneauth "ADFSPassword plugin not registered in entrypoints" [Undecided,New] | 23:29 |
| openstack | Launchpad bug 1687316 in keystoneauth "ADFSPassword plugin unable to obtain scoped token" [Undecided,New] | 23:29 |
| *** ducttape_ has joined #openstack-keystone | 23:29 | |
| *** catintheroof has quit IRC | 23:29 | |
| blake | I have proposed fixes for both of these issues. I can update both bugs with that info if necessary | 23:30 |
| *** lamt has quit IRC | 23:30 | |
| *** catintheroof has joined #openstack-keystone | 23:31 | |
| *** ducttape_ has quit IRC | 23:34 | |
| *** browne has quit IRC | 23:44 | |
| *** thorst_afk has quit IRC | 23:46 | |
| *** catintheroof has quit IRC | 23:59 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!