Thursday, 2017-08-24

« Wednesday, 2017-08-23 Index Friday, 2017-08-25 »
*** rcernin has quit IRC00:12
*** aselius has quit IRC00:29
*** mjax has quit IRC00:32
*** mjax has joined #openstack-keystone00:32
*** mjax has quit IRC00:34
*** mjax has joined #openstack-keystone00:35
*** mjax has quit IRC00:36
*** masber has joined #openstack-keystone00:37
*** thorst_afk has joined #openstack-keystone00:45
*** thorst_afk has quit IRC00:49
*** Shunli has joined #openstack-keystone00:52
*** kbaegis has quit IRC00:53
*** kbaegis has joined #openstack-keystone00:54
*** rajalokan has joined #openstack-keystone00:55
*** rajalokan has quit IRC00:56
*** itlinux has joined #openstack-keystone00:57
*** rajalokan has joined #openstack-keystone00:57
*** rajalokan has joined #openstack-keystone00:58
*** rajalokan has quit IRC01:01
openstackgerritJeffrey Zhang proposed openstack/keystonemiddleware master: Fix memcache pool issue  https://review.openstack.org/49697201:07
openstackgerritJeffrey Zhang proposed openstack/keystonemiddleware master: Fix memcache pool issue  https://review.openstack.org/49697201:08
*** itlinux has quit IRC01:09
*** masber has quit IRC01:20
*** thorst_afk has joined #openstack-keystone01:23
*** dikonoor has joined #openstack-keystone01:29
*** kbaegis has quit IRC01:29
*** kbaegis has joined #openstack-keystone01:29
*** mjax has joined #openstack-keystone01:29
*** dave-mccowan has joined #openstack-keystone01:30
*** mjax has quit IRC01:31
*** guoshan has joined #openstack-keystone01:32
*** kbaegis has quit IRC01:34
*** aahh has quit IRC01:37
openstackgerritMerged openstack/keystone master: Ignore release notes for pike and master  https://review.openstack.org/49694301:44
*** thorst_afk has quit IRC01:46
openstackgerritliuxiaoyang proposed openstack/keystonemiddleware master: Add doc8 rule and check doc/source files  https://review.openstack.org/49697701:48
*** edmondsw has joined #openstack-keystone01:51
*** masber has joined #openstack-keystone01:51
*** zhurong has joined #openstack-keystone01:54
*** edmondsw has quit IRC01:55
*** dave-mccowan has quit IRC02:07
*** zxy has joined #openstack-keystone02:08
*** thorst_afk has joined #openstack-keystone02:19
*** thorst_afk has quit IRC02:19
*** dave-mccowan has joined #openstack-keystone02:23
*** markvoelker_ has quit IRC02:41
*** links has joined #openstack-keystone03:18
*** thorst_afk has joined #openstack-keystone03:20
*** thorst_afk has quit IRC03:25
*** dave-mccowan has quit IRC03:27
*** nicolasbock has quit IRC03:35
*** edmondsw has joined #openstack-keystone03:39
*** itlinux has joined #openstack-keystone03:42
*** edmondsw has quit IRC03:44
*** mjax has joined #openstack-keystone03:54
*** rmcall has quit IRC03:55
*** mjax has quit IRC03:57
*** rmcall has joined #openstack-keystone03:57
*** itlinux has quit IRC04:00
*** itlinux has joined #openstack-keystone04:02
*** thorst_afk has joined #openstack-keystone04:21
*** mkrcmari__ has joined #openstack-keystone04:22
*** thorst_afk has quit IRC04:26
*** gyee has quit IRC04:31
*** swain has quit IRC04:33
*** kbaegis has joined #openstack-keystone04:34
*** kbaegis has quit IRC04:38
*** markvoelker has joined #openstack-keystone04:42
*** mvk_ has joined #openstack-keystone04:45
*** mkrcmari__ has quit IRC04:49
*** itlinux has quit IRC04:54
*** zhurong has quit IRC04:58
*** zhurong has joined #openstack-keystone05:06
*** rcernin has joined #openstack-keystone05:11
*** markvoelker has quit IRC05:17
*** thorst_afk has joined #openstack-keystone05:22
*** thorst_afk has quit IRC05:26
*** rcernin has quit IRC05:27
*** edmondsw has joined #openstack-keystone05:28
*** edmondsw has quit IRC05:32
openstackgerritOpenStack Proposal Bot proposed openstack/keystone master: Updated from global requirements  https://review.openstack.org/49481905:50
openstackgerritOpenStack Proposal Bot proposed openstack/keystonemiddleware master: Updated from global requirements  https://review.openstack.org/49482105:50
*** zxy has quit IRC05:53
*** zxy has joined #openstack-keystone05:53
*** cfriesen_ has quit IRC06:11
*** rcernin has joined #openstack-keystone06:12
*** mvk has joined #openstack-keystone06:12
*** markvoelker has joined #openstack-keystone06:14
*** mvk_ has quit IRC06:16
*** johnjiui has joined #openstack-keystone06:19
*** pcaruana has joined #openstack-keystone06:21
*** kbaegis has joined #openstack-keystone06:22
*** thorst_afk has joined #openstack-keystone06:23
*** kbaegis has quit IRC06:27
*** thorst_afk has quit IRC06:27
*** aojea has joined #openstack-keystone06:39
*** markvoelker has quit IRC06:47
*** belmoreira has joined #openstack-keystone06:52
openstackgerritOpenStack Proposal Bot proposed openstack/oslo.policy master: Imported Translations from Zanata  https://review.openstack.org/49710806:56
*** josecastroleon has quit IRC07:00
*** Shunli has quit IRC07:02
*** zsli_ has joined #openstack-keystone07:02
*** aojea has quit IRC07:10
*** edmondsw has joined #openstack-keystone07:16
*** tesseract has joined #openstack-keystone07:20
*** edmondsw has quit IRC07:20
*** thorst_afk has joined #openstack-keystone07:24
*** thorst_afk has quit IRC07:28
*** markvoelker has joined #openstack-keystone07:44
*** tesseract-RH has joined #openstack-keystone07:49
*** tesseract-RH has quit IRC07:50
*** tesseract-RH has joined #openstack-keystone07:50
*** tesseract has quit IRC07:52
*** tesseract-RH has quit IRC08:01
*** tesseract-RH has joined #openstack-keystone08:02
*** kbaegis has joined #openstack-keystone08:10
*** kbaegis has quit IRC08:15
*** markvoelker has quit IRC08:16
*** aojea has joined #openstack-keystone08:22
*** thorst_afk has joined #openstack-keystone08:25
*** thorst_afk has quit IRC08:29
*** rmcall has quit IRC08:34
*** aojea has quit IRC08:50
*** dikonoo has joined #openstack-keystone08:58
*** dikonoor has quit IRC09:01
*** mvk has quit IRC09:03
*** edmondsw has joined #openstack-keystone09:04
*** mvk has joined #openstack-keystone09:07
*** edmondsw has quit IRC09:09
*** markvoelker has joined #openstack-keystone09:13
*** tesseract-RH has quit IRC09:18
*** mvk has quit IRC09:20
*** tesseract has joined #openstack-keystone09:23
*** thorst_afk has joined #openstack-keystone09:25
*** thorst_afk has quit IRC09:30
*** zsli_ has quit IRC09:33
*** aojea has joined #openstack-keystone09:39
*** markvoelker has quit IRC09:46
*** mjax has joined #openstack-keystone09:56
*** mjax has quit IRC09:57
*** kbaegis has joined #openstack-keystone09:59
*** kbaegis has quit IRC10:03
*** aojea has quit IRC10:04
*** ioggstream has joined #openstack-keystone10:04
*** guoshan has quit IRC10:19
*** kbaegis has joined #openstack-keystone10:24
*** thorst_afk has joined #openstack-keystone10:26
*** thorst_afk has quit IRC10:31
*** nicolasbock has joined #openstack-keystone10:33
*** edmondsw has joined #openstack-keystone10:52
*** nicolasbock has quit IRC10:54
*** edmondsw has quit IRC10:57
*** nicolasbock has joined #openstack-keystone11:08
*** ioggstream has quit IRC11:18
*** kbaegis has quit IRC11:20
*** raildo has joined #openstack-keystone11:22
*** kbaegis has joined #openstack-keystone11:26
*** thorst_afk has joined #openstack-keystone11:27
*** thorst_afk has quit IRC11:32
*** markvoelker has joined #openstack-keystone11:44
*** edmondsw has joined #openstack-keystone11:50
*** ioggstream has joined #openstack-keystone12:03
*** lwanderley has joined #openstack-keystone12:08
*** thorst_afk has joined #openstack-keystone12:16
*** markvoelker has quit IRC12:16
*** markvoelker has joined #openstack-keystone12:32
openstackgerritMonty Taylor proposed openstack/keystoneauth master: Don't use mutable defaults in allow arguments  https://review.openstack.org/49432012:50
openstackgerritMonty Taylor proposed openstack/keystoneauth master: Add method to get the api major version  https://review.openstack.org/49419312:50
openstackgerritMonty Taylor proposed openstack/keystoneauth master: Update discovery url normalization with catalog info  https://review.openstack.org/49419412:50
mordredcmurphy, lbragstad, samueldmq: ^^ updated those with tests12:51
mordred(also reordered them to put the simple mutable defaults one first)12:51
cmurphyoh yay12:51
*** kornicameister has quit IRC12:54
*** lwanderley has quit IRC12:59
*** lwanderley has joined #openstack-keystone13:01
*** catintheroof has joined #openstack-keystone13:02
*** kornicameister has joined #openstack-keystone13:06
openstackgerritMerged openstack/oslo.policy master: Imported Translations from Zanata  https://review.openstack.org/49710813:12
samueldmqmordred: nice!!13:12
mordredsamueldmq, cmurphy, efried: pushing up new version real quick with test updates based on efried review13:12
efriedmordred Thanks for that.13:13
*** lucasxu has joined #openstack-keystone13:15
openstackgerritMonty Taylor proposed openstack/keystoneauth master: Add method to get the api major version  https://review.openstack.org/49419313:15
openstackgerritMonty Taylor proposed openstack/keystoneauth master: Update discovery url normalization with catalog info  https://review.openstack.org/49419413:15
lbragstadmordred: nice13:30
*** lwanderley has quit IRC13:31
*** ducttape_ has quit IRC13:32
*** ducttape_ has joined #openstack-keystone13:33
*** dave-mccowan has joined #openstack-keystone13:33
*** jmlowe_ has quit IRC13:33
*** ducttape_ has quit IRC13:35
*** ducttape_ has joined #openstack-keystone13:40
*** edmondsw has quit IRC13:40
*** nkinder has joined #openstack-keystone13:40
*** links has quit IRC13:46
*** ducttape_ has quit IRC13:52
*** ducttape_ has joined #openstack-keystone13:52
*** edmondsw has joined #openstack-keystone13:56
*** lwanderley has joined #openstack-keystone14:04
*** ayoung has joined #openstack-keystone14:05
openstackgerritMonty Taylor proposed openstack/keystoneauth master: Fix docstring typo  https://review.openstack.org/49740014:09
mordredefried: ^^14:09
efriedmordred Hah!  +1 ;)14:09
*** jmlowe has joined #openstack-keystone14:12
*** rreimberg has joined #openstack-keystone14:16
*** gyee has joined #openstack-keystone14:17
rreimbergHi all, I need some help with a keystone configuration with docker. I installed the release 11.0.3 (ocata) in a container with python3.5 and it is getting an error to validate issued tokens when try to parse de expiration date with timezone information14:19
rreimbergI didn't found any type of configuration about timezone in issued_at and expires_at fields of token14:20
*** kbaegis has quit IRC14:21
rreimbergThe received error is "ValueError: Unable to parse date string '2017-08-24T15:22:13.000000UTC+00:00'"14:23
*** kbaegis has joined #openstack-keystone14:24
rreimbergI know this expires_at should be "2017-08-24T15:22:13.000000Z", but I don't know what piece of code is settings this timezone information in a datetime loaded from a timestamp saved in fernet token14:25
lbragstadrreimberg: the token expiration time is held in the payload of a fernet token - so it converted to and from a float in the token provider14:28
lbragstadassemble converts datetime strings to a float https://github.com/openstack/keystone/blob/master/keystone/token/providers/fernet/token_formatters.py#L36214:29
lbragstadand disassemble converts the float to a time string14:29
*** rbrndt has joined #openstack-keystone14:31
rreimberglbragstad: I think this convertion from float to time string don't apply the timezone information14:38
lbragstadrreimberg: that data is also touched here - https://github.com/openstack/keystone/blob/master/keystone/token/providers/common.py#L379-L38614:40
rreimberglbragstad: I think this dates are correctly defined and persisted, I mean, when I call API endpoint /v3/auth/tokens to authenticate with password method, the service returns the dates in right isoformat14:54
lbragstadrreimberg: so authenticate it working fine for you then14:55
lbragstadrreimberg: is this only an issue when you validate a token?14:55
*** dikonoo has quit IRC14:55
rreimbergBut, when I call any endpoint with issued token in X-Auth-Token the loaded information about expires_at has a UTC timezone, and application breaks when try parse it14:56
*** kbaegis has quit IRC15:00
rreimberglbragstad: this is Keystone error: https://pastebin.com/YEY7cY7a15:01
rreimberglbragstad: this is the Keystone error: https://pastebin.com/YEY7cY7a15:01
*** cfriesen_ has joined #openstack-keystone15:06
*** jistr|trng is now known as jistr15:09
*** johnjiui has quit IRC15:27
*** aselius has joined #openstack-keystone15:49
*** itlinux has joined #openstack-keystone15:53
*** belmoreira has quit IRC15:54
*** rcernin has quit IRC15:54
*** swain has joined #openstack-keystone15:55
*** pcaruana has quit IRC15:57
*** tesseract has quit IRC16:03
*** itlinux has quit IRC16:03
*** openstackgerrit has quit IRC16:04
*** links has joined #openstack-keystone16:06
*** lwanderley has quit IRC16:12
*** itlinux has joined #openstack-keystone16:13
lbragstadkmalloc: for the v2.0 removal bits - who do we need to make sure we talk to in denver?16:17
kmallocI think really the tempest folks16:21
kmallocSo we can make sure ci is in shape16:21
kmallocOtherwise, should be straightforward16:21
lbragstadkmalloc: ack - documenting it here https://etherpad.openstack.org/p/queens-ptg-keystone-deprecations16:21
*** ioggstream has quit IRC16:23
*** mvk has joined #openstack-keystone16:34
*** links has quit IRC16:38
*** lwanderley has joined #openstack-keystone17:05
*** mjax has joined #openstack-keystone17:10
*** mjax has quit IRC17:10
*** mjax has joined #openstack-keystone17:10
*** rbrndt has quit IRC17:26
*** rcernin has joined #openstack-keystone17:27
kmalloci would like to ditch oslo time_utils =/17:32
kmalloclbragstad: ugh i want to do the int-conversion bit for everything, the float stuff is wonky in the fernet tokens, i think we can lean on the same concepts with a token format revision, but the +00:00 is broken17:34
kmallocrreimberg: there is some form of issue, but the format shouln't be +00:00, not sure where that comes freom17:35
lbragstadrreimberg: what distribution are you using?17:35
kmalloclbragstad: man JWT is so much nicer than fernet....17:36
lbragstadkmalloc: i have it on the agenda for the ptg17:36
*** otleimat has joined #openstack-keystone17:39
*** openstackgerrit has joined #openstack-keystone17:40
openstackgerritMonty Taylor proposed openstack/keystoneauth master: Set self.allow to a dict if None is passed  https://review.openstack.org/49753117:40
mordredkmalloc: ^^17:41
kmallocmordred: all approved17:41
kmallocalso related: positional is gone from g-r17:41
kmallocwoo17:41
rreimberglbragstad: I'm using the release 11.0.317:42
*** catinthe_ has joined #openstack-keystone17:44
rreimbergkmalloc: lbragstad I found where this convertion occurs: https://github.com/openstack/keystone/blob/master/keystone/token/providers/fernet/token_formatters.py#L198-L19917:44
*** catintheroof has quit IRC17:45
rreimbergA time string like 2017-08-24T17:35:45.021345Z has the timezone information filled by iso8601 library used by oslo_utils.timeutils.parse_isotime17:46
rreimbergAfter it keystone.common.utils.isotime converts this datetime with timezone information in a time string like 2017-08-24T17:35:45.021345UTC+00:0017:48
rreimbergWhen keystone.token.provider.Manager._is_valid_token use iso8601.parse_isotime to compare the expires_at this lib raises an exception because this is a strange format17:50
mordredkmalloc: woot! positional is gone from ksa too yeah? have we cut a ksa release without positional yet?17:51
kmallocnot cut17:54
kmallocbut it is on the short-list17:54
kmallocrreimberg: looking at something related to that now17:54
mordredcool. I'd love a release with the above stack too - it allows us to remove a bunch of code in shade :)17:55
kmallocrreimberg: that's weird. it should error more often in CI and elsewhere if that was an endemic issue17:55
kmallocmordred: lets ask lbragstad to release ksa17:55
kmallocmordred: or one of us can propose release repo chance once that stack merges17:55
lbragstadyeah17:57
rreimbergkmalloc: In python3.5 a tzinfo.tzname(None) for a datetime with timezone.utc returns "UTC+00:00"17:58
lbragstadkmalloc: rreimberg i wonder if something with timeutils and oslo.time_utils changed?17:58
mordredkmalloc: ++17:59
kmallocrreimberg: we dealt with something like that in the past17:59
kmallocrreimberg: or oslo_utils just doesn't cover that case well17:59
lbragstadmordred: kmalloc if one of you get around to proposing the release before i do let me know17:59
kmalloci have a long-term fix that will move away from floats and to int only17:59
kmalloclbragstad: waiting for the current stack to merge17:59
rreimbergkmalloc: when keystone.common.utils.isotime receive a datetime with timezone information its return "UTC+00:00" suffix (https://github.com/openstack/keystone/blob/master/keystone/common/utils.py#L484)18:01
lbragstadkmalloc: that should be an opaque/backwards-compat change18:01
kmallockaisers: yeah it should18:01
kmallocs/kaisers/lbragstad18:02
rreimbergkmalloc: this suffix doesn't match with iso8601 regex: https://bitbucket.org/micktwomey/pyiso8601/src/f72a24982d914a02ad09e2452fc7fc66c08d27d5/iso8601/iso8601.py?at=default&fileviewer=file-view-default#iso8601.py-26:6818:02
kmalloclbragstad: but it normalizes our conversion to/from isotime18:02
lbragstadit's odd that this is happening on stable/ocata and we're just seeing it18:02
kmallocyeah that is what is bugging me18:02
kmallocthat it is happening in this one case.18:02
kmallocand not in CI18:02
lbragstad... i wonder if jwt gets us around the subsecond issues we have with the fernet spec18:03
kmallocmaybe18:03
kmalloci'd need to read the RFC to be sure18:03
kmallocit may not18:03
lbragstadbecause we leave the created at stuff up to the cryptography library and ferent18:04
lbragstadfernet*18:04
kmalloclbragstad: no it does not18:05
kmalloc NumericDate18:05
kmalloc      A JSON numeric value representing the number of seconds from18:05
kmalloc      1970-01-01T00:00:00Z UTC18:05
kmallocissued_at, expires_at, not_before, etc are all numericdates18:05
kmallocand NumericDate does not include subsecond precision18:05
kmalloceverything is fine *except* we would need more-precise issuedAt, i don't think we really want more precise issuedAt though18:07
lbragstadaha18:07
lbragstadstepping away real quick to grab lunch18:07
*** itlinux has quit IRC18:08
*** lwanderley has quit IRC18:22
*** lwanderley has joined #openstack-keystone18:24
*** rbrndt has joined #openstack-keystone18:26
*** jamesbenson has joined #openstack-keystone18:35
*** raildo has quit IRC18:35
openstackgerritMerged openstack/keystoneauth master: Don't use mutable defaults in allow arguments  https://review.openstack.org/49432018:49
*** raildo has joined #openstack-keystone18:49
*** zxy has quit IRC18:50
*** zxy has joined #openstack-keystone18:50
*** zxy has quit IRC18:53
*** zxy has joined #openstack-keystone18:54
*** rmcall has joined #openstack-keystone18:58
*** masber has quit IRC19:00
lbragstadQueens PTG schedule is available - https://etherpad.openstack.org/p/keystone-queens-ptg19:25
lbragstadlet me know if you see any issues19:25
*** ducttap__ has joined #openstack-keystone19:27
*** lwanderley has quit IRC19:28
*** ductta___ has joined #openstack-keystone19:29
*** ducttape_ has quit IRC19:30
openstackgerritMerged openstack/keystoneauth master: Add method to get the api major version  https://review.openstack.org/49419319:31
openstackgerritMerged openstack/keystoneauth master: Update discovery url normalization with catalog info  https://review.openstack.org/49419419:32
openstackgerritMerged openstack/keystoneauth master: Fix docstring typo  https://review.openstack.org/49740019:32
*** ducttap__ has quit IRC19:32
*** aojea has joined #openstack-keystone20:06
*** jmlowe has quit IRC20:09
*** rreimberg has quit IRC20:10
*** jmlowe has joined #openstack-keystone20:13
*** rreimberg has joined #openstack-keystone20:14
*** thorst_afk has quit IRC20:16
*** thorst_afk has joined #openstack-keystone20:19
*** raildo has quit IRC20:21
*** otleimat has quit IRC20:21
*** thorst_afk has quit IRC20:24
*** itlinux has joined #openstack-keystone20:30
*** lucasxu has quit IRC20:31
*** jmlowe has quit IRC20:32
*** otleimat has joined #openstack-keystone20:34
*** swain has quit IRC20:34
*** thorst_afk has joined #openstack-keystone20:36
*** ayoung has quit IRC20:38
*** jmlowe has joined #openstack-keystone20:41
*** edmondsw has quit IRC20:43
*** catinthe_ has quit IRC20:53
*** catintheroof has joined #openstack-keystone20:54
*** jmlowe has quit IRC20:54
*** catintheroof has quit IRC20:58
*** itlinux has quit IRC21:03
*** itlinux has joined #openstack-keystone21:05
*** rmcall has quit IRC21:07
*** rcernin has quit IRC21:19
*** dave-mccowan has quit IRC21:20
*** itlinux has quit IRC21:24
*** itlinux has joined #openstack-keystone21:25
openstackgerritGage Hugo proposed openstack/keystone-specs master: Update project-tags spec  https://review.openstack.org/48452921:36
openstackgerritGage Hugo proposed openstack/keystone-specs master: Update project-tags spec  https://review.openstack.org/48452921:38
*** jamesbenson has quit IRC21:46
*** aojea has quit IRC21:47
*** aojea has joined #openstack-keystone21:47
*** edmondsw has joined #openstack-keystone21:49
*** jamesbenson has joined #openstack-keystone21:50
*** ductta___ has quit IRC21:51
*** ducttape_ has joined #openstack-keystone21:51
*** aojea has quit IRC21:51
*** rreimberg has quit IRC21:52
openstackgerritMerged openstack/keystoneauth master: Set self.allow to a dict if None is passed  https://review.openstack.org/49753121:53
*** edmondsw has quit IRC21:54
*** jamesbenson has quit IRC21:54
*** catintheroof has joined #openstack-keystone21:59
*** edmondsw has joined #openstack-keystone22:52
cmurphymordred: kmalloc lbragstad proposed https://review.openstack.org/#/c/493644/ to release ksa22:52
*** rbrndt has quit IRC22:53
*** rbrndt has joined #openstack-keystone22:53
*** rbrndt has quit IRC22:53
*** itlinux has quit IRC23:00
mordred\o/23:14
*** catintheroof has quit IRC23:46
« Wednesday, 2017-08-23 Index Friday, 2017-08-25 »

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!