| *** catintheroof has joined #openstack-keystone | 00:19 | |
| *** thorst has joined #openstack-keystone | 00:20 | |
| *** Shunli has joined #openstack-keystone | 00:33 | |
| *** markvoelker has joined #openstack-keystone | 00:42 | |
| *** tonytan4ever has quit IRC | 00:51 | |
| *** zhurong has joined #openstack-keystone | 01:02 | |
| *** edmondsw has joined #openstack-keystone | 01:06 | |
| *** edmondsw has quit IRC | 01:10 | |
| *** panbalag has joined #openstack-keystone | 01:12 | |
| *** panbalag has left #openstack-keystone | 01:12 | |
| *** markvoelker has quit IRC | 01:15 | |
| *** thorst has quit IRC | 01:22 | |
| *** thorst has joined #openstack-keystone | 01:23 | |
| *** thorst has quit IRC | 01:35 | |
| *** catintheroof has quit IRC | 01:37 | |
| *** catintheroof has joined #openstack-keystone | 01:38 | |
| *** sapd has joined #openstack-keystone | 01:49 | |
| *** tonytan4ever has joined #openstack-keystone | 01:51 | |
| *** catintheroof has quit IRC | 01:57 | |
| *** thorst has joined #openstack-keystone | 02:36 | |
| *** itlinux has joined #openstack-keystone | 02:37 | |
| *** david-lyle has joined #openstack-keystone | 02:38 | |
| *** edmondsw has joined #openstack-keystone | 02:54 | |
| *** edmondsw has quit IRC | 02:58 | |
| *** zhurong has quit IRC | 03:08 | |
| *** zhurong has joined #openstack-keystone | 03:11 | |
| *** markvoelker has joined #openstack-keystone | 03:12 | |
| *** thorst has quit IRC | 03:17 | |
| *** tonytan4ever has quit IRC | 03:17 | |
| *** thorst has joined #openstack-keystone | 03:17 | |
| *** tonytan4ever has joined #openstack-keystone | 03:19 | |
| *** thorst has quit IRC | 03:24 | |
| *** itlinux has quit IRC | 03:30 | |
| *** Shunli has quit IRC | 03:35 | |
| *** markvoelker has quit IRC | 03:47 | |
| *** Dinesh_Bhor has joined #openstack-keystone | 04:14 | |
| *** thorst has joined #openstack-keystone | 04:25 | |
| *** links has joined #openstack-keystone | 04:25 | |
| *** thorst has quit IRC | 04:29 | |
| *** markvoelker has joined #openstack-keystone | 04:44 | |
| *** markvoelker has quit IRC | 05:17 | |
| *** zhurong has quit IRC | 05:21 | |
| *** thorst has joined #openstack-keystone | 05:25 | |
| *** Shunli has joined #openstack-keystone | 05:33 | |
| *** zsli_ has joined #openstack-keystone | 05:49 | |
| *** Shunli has quit IRC | 05:52 | |
| openstackgerrit | zhengliuyang proposed openstack/keystone master: Add more detailed notes in users api-ref https://review.openstack.org/506994 | 06:01 |
|---|---|---|
| *** zsli_ has quit IRC | 06:09 | |
| *** tonytan4ever has quit IRC | 06:12 | |
| *** markvoelker has joined #openstack-keystone | 06:14 | |
| *** zhurong has joined #openstack-keystone | 06:15 | |
| *** josecastroleon has joined #openstack-keystone | 06:33 | |
| *** rcernin has joined #openstack-keystone | 06:41 | |
| *** markvoelker has quit IRC | 06:48 | |
| *** thorst has quit IRC | 06:52 | |
| *** ioggstream has joined #openstack-keystone | 07:03 | |
| *** pcaruana has joined #openstack-keystone | 07:06 | |
| *** tonytan4ever has joined #openstack-keystone | 07:12 | |
| *** zhurong has quit IRC | 07:14 | |
| *** tonytan4ever has quit IRC | 07:16 | |
| *** tesseract has joined #openstack-keystone | 07:23 | |
| *** zhurong has joined #openstack-keystone | 07:32 | |
| openstackgerrit | zhengliuyang proposed openstack/keystone master: Correct type of projects and domains on federation https://review.openstack.org/507008 | 07:41 |
| *** markvoelker has joined #openstack-keystone | 07:45 | |
| *** thorst has joined #openstack-keystone | 07:49 | |
| *** Shunli has joined #openstack-keystone | 08:06 | |
| *** markvoelker has quit IRC | 08:18 | |
| *** zhurong has quit IRC | 08:32 | |
| *** adtpuntambekar has joined #openstack-keystone | 08:43 | |
| *** mvk has joined #openstack-keystone | 08:44 | |
| *** Shunli has quit IRC | 08:51 | |
| *** zhurong has joined #openstack-keystone | 08:51 | |
| *** thorst has quit IRC | 09:07 | |
| *** markvoelker has joined #openstack-keystone | 09:15 | |
| *** jaosorior has joined #openstack-keystone | 09:28 | |
| *** mvk has quit IRC | 09:28 | |
| *** ioggstream has quit IRC | 09:36 | |
| *** belmoreira has joined #openstack-keystone | 09:47 | |
| *** markvoelker has quit IRC | 09:48 | |
| *** adtpuntambekar has quit IRC | 09:52 | |
| *** mvk has joined #openstack-keystone | 09:57 | |
| *** nicolasbock has joined #openstack-keystone | 10:02 | |
| *** thorst has joined #openstack-keystone | 10:04 | |
| *** belmoreira has quit IRC | 10:06 | |
| *** nicolasbock has quit IRC | 10:12 | |
| *** zhurong has quit IRC | 10:21 | |
| *** zhurong has joined #openstack-keystone | 10:24 | |
| *** nicolasbock has joined #openstack-keystone | 10:24 | |
| *** markvoelker has joined #openstack-keystone | 10:45 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 10:58 | |
| *** AlexeyAbashkin has quit IRC | 11:00 | |
| *** thorst has quit IRC | 11:14 | |
| *** markvoelker has quit IRC | 11:18 | |
| *** clayton has quit IRC | 11:25 | |
| *** clayton has joined #openstack-keystone | 11:30 | |
| *** belmoreira has joined #openstack-keystone | 11:36 | |
| *** raildo has joined #openstack-keystone | 11:37 | |
| *** thorst has joined #openstack-keystone | 12:01 | |
| *** thorst_ has joined #openstack-keystone | 12:04 | |
| *** thorst has quit IRC | 12:05 | |
| *** edmondsw has joined #openstack-keystone | 12:09 | |
| *** jmlowe has quit IRC | 12:10 | |
| *** markvoelker has joined #openstack-keystone | 12:16 | |
| *** markvoelker has quit IRC | 12:23 | |
| *** markvoelker has joined #openstack-keystone | 12:24 | |
| *** belmoreira has quit IRC | 12:24 | |
| *** belmoreira has joined #openstack-keystone | 12:28 | |
| *** tonytan4ever has joined #openstack-keystone | 12:30 | |
| *** erlon has joined #openstack-keystone | 12:38 | |
| *** panbalag has joined #openstack-keystone | 12:44 | |
| *** panbalag has left #openstack-keystone | 12:45 | |
| *** zhurong has quit IRC | 12:50 | |
| *** belmoreira has quit IRC | 12:51 | |
| *** belmoreira has joined #openstack-keystone | 12:53 | |
| *** jistr is now known as jistr|mtg | 13:03 | |
| *** jmlowe has joined #openstack-keystone | 13:07 | |
| *** links has quit IRC | 13:23 | |
| openstackgerrit | Davanum Srinivas (dims) proposed openstack/oslo.policy master: External Policy hook should support SSL https://review.openstack.org/491783 | 13:25 |
| openstackgerrit | Davanum Srinivas (dims) proposed openstack/oslo.policy master: [WIP] Make http/https check rules as stevedore extensions https://review.openstack.org/507098 | 13:25 |
| *** josecastroleon has quit IRC | 13:25 | |
| *** josecastroleon has joined #openstack-keystone | 13:27 | |
| *** lbragstad has joined #openstack-keystone | 13:28 | |
| *** ChanServ sets mode: +o lbragstad | 13:28 | |
| *** jistr|mtg is now known as jistr | 13:29 | |
| openstackgerrit | Colleen Murphy proposed openstack/keystonemiddleware master: Fix mocked URLs for new keystoneauth discovery https://review.openstack.org/507101 | 13:31 |
| gagehugo | o/ | 13:36 |
| *** belmoreira has quit IRC | 13:37 | |
| lbragstad | o/ | 13:39 |
| *** dave-mccowan has joined #openstack-keystone | 13:41 | |
| *** spilla has joined #openstack-keystone | 13:57 | |
| *** chlong has joined #openstack-keystone | 13:57 | |
| *** belmoreira has joined #openstack-keystone | 14:00 | |
| *** superdan is now known as dansmith | 14:02 | |
| knikolla | o/ | 14:06 |
| *** panbalag has joined #openstack-keystone | 14:14 | |
| *** josecastroleon has quit IRC | 14:19 | |
| lbragstad | kmalloc: i tried to keep this as self contained as possible | 14:21 |
| lbragstad | kmalloc: https://review.openstack.org/#/c/504465/ | 14:21 |
| lbragstad | hrybacki: do you have a process in mind for the "Card Needs Fleshing Out" label in our trello board? | 14:27 |
| lbragstad | I would assume those labels should be removed after we do X? | 14:28 |
| hrybacki | lbragstad: ayo. Basically, filling out the definition of done, adding a description of the purpose of the card, linking necessary bits e.g. relevant specs | 14:34 |
| hrybacki | anyone in here ever mucked with custom networks on boot via cloud-init hooks? | 14:34 |
| lbragstad | hrybacki: ack - i'll go through and start doing that for the cards i can | 14:34 |
| lbragstad | hrybacki: if something still doesn't read right, ping me or add the label back to the card | 14:35 |
| hrybacki | lbragstad: ack. I'm happy to help as well. Ideally whoever took on the task would do the fleshing out with you coming behind to 'verify' things make sense to an external party | 14:35 |
| *** belmoreira has quit IRC | 14:38 | |
| *** panbalag has quit IRC | 14:38 | |
| *** belmoreira has joined #openstack-keystone | 14:40 | |
| *** jamesbenson has joined #openstack-keystone | 14:50 | |
| *** gyee has joined #openstack-keystone | 14:51 | |
| *** belmoreira has quit IRC | 14:54 | |
| openstackgerrit | Tin Lam proposed openstack/keystonemiddleware master: Fix gate error caused by mocked URLs https://review.openstack.org/504487 | 15:01 |
| *** links has joined #openstack-keystone | 15:09 | |
| *** links has quit IRC | 15:17 | |
| *** links has joined #openstack-keystone | 15:29 | |
| *** spilla has quit IRC | 15:30 | |
| kmalloc | lbragstad: | 15:31 |
| kmalloc | sec | 15:31 |
| kmalloc | mordred, fungi: https://review.openstack.org/#/c/504465/ getting the OK on this from you would be welcome (thisz is the v2.0 auth removal stuff) | 15:33 |
| *** pcaruana has quit IRC | 15:33 | |
| openstackgerrit | Thomas Duval proposed openstack/oslo.policy master: Modification to add additional information in the HTTPCheck request. https://review.openstack.org/498467 | 15:33 |
| *** pcaruana has joined #openstack-keystone | 15:34 | |
| kmalloc | lbragstad: +2 btw | 15:34 |
| mordred | kmalloc: yah - fine by me - shade currently uses newton clouds to test v2 anyway - and the plan for dealing with newton retirement is that dtroyer and I will make a simple job that installs an openstack from the mitaka openstack packages shipped with ubuntu-xenial | 15:35 |
| kmalloc | mordred: ++ | 15:35 |
| kmalloc | mordred: and long term we can write a translation layer (test-only) app for shade if needed | 15:35 |
| kmalloc | mordred: since you have a longer EOL timeframe for <supported thing> in shade than OSC | 15:36 |
| fungi | kmalloc: if mordred is good with it, i have nothing to add | 15:36 |
| kmalloc | fungi: it's mostly getting a couple TC Acks based upon the convos at the PTG | 15:36 |
| mordred | kmalloc: yah. although I bet we'll be able to do mitaka-based testing from xenial for a WHILE - so we can cross that bridge later | 15:36 |
| kmalloc | fungi: on record | 15:36 |
| kmalloc | fungi: i expect there wont be a lot of "oh this is scary" ;) | 15:36 |
| fungi | yup, i'm waiting for gertty to sync keystone so i can pull up that change ;) | 15:36 |
| lbragstad | i need to update the release notes there. | 15:36 |
| *** jmlowe has quit IRC | 15:37 | |
| mordred | kmalloc: I have responded on that review | 15:38 |
| kmalloc | mordred: ty | 15:38 |
| kmalloc | i'm going to be so very happy once these patches land. | 15:38 |
| kmalloc | there is a TON of cleanup that can be done once v2 is dead that is a lot easier | 15:38 |
| mordred | ++ | 15:41 |
| mordred | kmalloc: OH ... SOOOOOOOO | 15:41 |
| mordred | kmalloc: I'm going to have one request for you that I think you'll be ok with but just to make sure | 15:41 |
| kmalloc | mordred: oh i need to propose a new time for that meeting btw. i'll make sure axel can hit it as well | 15:41 |
| mordred | kmalloc: that is - we need to keep v2 auth consume support in ksa | 15:41 |
| kmalloc | oh sure. ask away | 15:41 |
| mordred | (and catalog consume support) | 15:41 |
| kmalloc | ksa can never lose that. | 15:41 |
| mordred | great | 15:42 |
| mordred | then we're set | 15:42 |
| kmalloc | it's an interface that is a contract in ksa | 15:42 |
| kmalloc | we will never break an interface short of a security issue in ksa | 15:42 |
| mordred | yup. I saw it that way too - but just thought dotting i's and crossing t's would be good here | 15:42 |
| *** jmlowe has joined #openstack-keystone | 15:44 | |
| *** aselius has joined #openstack-keystone | 15:44 | |
| *** rcernin has quit IRC | 15:48 | |
| kmalloc | mordred: i think we have that in the KSA docs fwiw | 15:49 |
| kmalloc | as well. | 15:49 |
| lbragstad | jamielennox: cmurphy lamt updated https://trello.com/c/CQeSTZgP/18-ksm-work with relevant information and justification for the checklist | 15:49 |
| *** sbezverk has quit IRC | 16:00 | |
| *** Dinesh_Bhor has quit IRC | 16:07 | |
| *** links has quit IRC | 16:10 | |
| *** itlinux has joined #openstack-keystone | 16:12 | |
| *** pcaruana has quit IRC | 16:15 | |
| *** itlinux has quit IRC | 16:15 | |
| rodrigods | lbragstad, "gate-tempest-dsvm-ldap-domain-specific-driver-ubuntu-xenial-nv" now running for new patches :) | 16:17 |
| *** itlinux has joined #openstack-keystone | 16:27 | |
| lbragstad | nice! | 16:29 |
| lbragstad | rodrigods: thanks for helping with that | 16:29 |
| rodrigods | lbragstad, soon we'll be able to make it voting | 16:31 |
| lbragstad | awesome | 16:31 |
| lbragstad | might be good to advertise that on the mailingl ist | 16:31 |
| * lbragstad runs to a meeting | 16:32 | |
| *** rob_d has joined #openstack-keystone | 16:33 | |
| rodrigods | lbragstad, ++ | 16:37 |
| *** mvk has quit IRC | 16:49 | |
| *** rob_d has quit IRC | 17:00 | |
| *** panbalag has joined #openstack-keystone | 17:00 | |
| *** sbezverk has joined #openstack-keystone | 17:09 | |
| *** masber has quit IRC | 17:10 | |
| *** chlong has quit IRC | 17:10 | |
| *** panbalag has left #openstack-keystone | 17:15 | |
| *** harlowja has joined #openstack-keystone | 17:20 | |
| *** mvk has joined #openstack-keystone | 17:27 | |
| *** chlong has joined #openstack-keystone | 17:28 | |
| *** adtpuntambekar has joined #openstack-keystone | 17:35 | |
| cfriesen | on an upgrade to newton would we expect the "aggregate_hosts" entries in the "nova" DB to get marked as deleted? or did we just leave them there on the assumption that the table wasn't big enough to be worth deleting the entries? | 17:39 |
| *** adtpuntambekar has left #openstack-keystone | 17:47 | |
| *** itlinux has quit IRC | 17:48 | |
| *** tesseract has quit IRC | 17:53 | |
| *** itlinux has joined #openstack-keystone | 17:59 | |
| openstackgerrit | Doug Hellmann proposed openstack/oslo.policy master: Modification to add additional information in the HTTPCheck request. https://review.openstack.org/498467 | 18:09 |
| *** rcernin has joined #openstack-keystone | 18:11 | |
| mwheckmann | Anyone here have some recommendations around a federation setup: I need to use our corp. IdP with Keystone. This part works really well, but we'd also like to support a lot of the delegation features in Horizon but most of that is built around the assumption that you are using multiple domains w/ domain admins. The problem is that Keystone doesn't support using a single IdP across multiple | 18:12 |
| mwheckmann | domains. | 18:12 |
| mwheckmann | The workaround for me is to simply not use domains and put all users/projects in a separate Federation only domain. That works, but I'd also like to create a separate "project_admin" role to allow users to create child projects. | 18:12 |
| mwheckmann | Is this a sensible workaround? Using Ocata BTW | 18:12 |
| *** jmlowe has quit IRC | 18:15 | |
| *** tonytan4ever_brb has joined #openstack-keystone | 18:25 | |
| *** tonytan4ever has quit IRC | 18:27 | |
| *** raildo has quit IRC | 18:34 | |
| *** aojea has quit IRC | 18:34 | |
| *** jamesbenson has quit IRC | 18:37 | |
| *** jamesbenson has joined #openstack-keystone | 18:40 | |
| *** raildo has joined #openstack-keystone | 18:42 | |
| *** aojea has joined #openstack-keystone | 18:45 | |
| *** aojea has quit IRC | 18:49 | |
| *** itlinux has quit IRC | 18:51 | |
| *** dave-mccowan has quit IRC | 18:56 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystonemiddleware master: Updated from global requirements https://review.openstack.org/500005 | 18:56 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/pycadf master: Updated from global requirements https://review.openstack.org/470137 | 19:05 |
| *** chlong has quit IRC | 19:06 | |
| *** jose-phillips has quit IRC | 19:08 | |
| *** aojea has joined #openstack-keystone | 19:08 | |
| *** jose-phillips has joined #openstack-keystone | 19:09 | |
| *** jose-phillips has quit IRC | 19:10 | |
| *** jose-phillips has joined #openstack-keystone | 19:13 | |
| *** lifeless has quit IRC | 19:14 | |
| *** lifeless has joined #openstack-keystone | 19:15 | |
| *** jmlowe has joined #openstack-keystone | 19:19 | |
| openstackgerrit | Davanum Srinivas (dims) proposed openstack/oslo.policy master: External Policy hook should support SSL https://review.openstack.org/491783 | 19:22 |
| openstackgerrit | Davanum Srinivas (dims) proposed openstack/oslo.policy master: [WIP] Make http/https check rules as stevedore extensions https://review.openstack.org/507098 | 19:22 |
| *** dave-mccowan has joined #openstack-keystone | 19:25 | |
| *** chlong has joined #openstack-keystone | 19:31 | |
| *** dave-mccowan has quit IRC | 19:32 | |
| *** dave-mccowan has joined #openstack-keystone | 19:33 | |
| *** panbalag has joined #openstack-keystone | 19:35 | |
| *** itlinux has joined #openstack-keystone | 19:35 | |
| *** jmlowe has quit IRC | 19:42 | |
| *** sapd_ has joined #openstack-keystone | 19:45 | |
| *** sapd has quit IRC | 19:49 | |
| *** jmlowe has joined #openstack-keystone | 19:50 | |
| openstackgerrit | ayoung proposed openstack/keystone master: Add is_admin_project check to policy for non scoped operations https://review.openstack.org/257636 | 19:53 |
| *** tonytan4ever_brb has quit IRC | 19:54 | |
| *** panbalag has quit IRC | 20:03 | |
| *** raildo has quit IRC | 20:03 | |
| *** chlong has quit IRC | 20:05 | |
| lbragstad | gagehugo: ping - you took notes on the refactor stuff at the PTG didn't you? | 20:06 |
| lbragstad | i remember whiteboarding a bunch but i'm not sure i saw an etherpad anywhere? | 20:07 |
| gagehugo | lbragstad uh which day was that? | 20:07 |
| lbragstad | thursday? | 20:07 |
| lbragstad | cc hrybacki ^ | 20:08 |
| gagehugo | was that the whiteboard stuff or that large paper easel thing? | 20:09 |
| lbragstad | i think it was all contained on the whiteboard | 20:09 |
| gagehugo | policy refactor? | 20:09 |
| lbragstad | i think it started as the deprecation/removal discussion and then we started talking about testing refactor | 20:09 |
| gagehugo | https://etherpad.openstack.org/p/queens-ptg-keystone-testing | 20:09 |
| lbragstad | oh | 20:10 |
| gagehugo | is that it? | 20:10 |
| lbragstad | i think so | 20:10 |
| *** rcernin has quit IRC | 20:11 | |
| lbragstad | gagehugo: i'm updating https://trello.com/c/8kmzO9wK/7-testing-refactor | 20:14 |
| lbragstad | gagehugo: is there anything i missed there? | 20:14 |
| * lbragstad is working on the description now | 20:14 | |
| gagehugo | lgtm so far | 20:15 |
| *** nicolasbock has quit IRC | 20:35 | |
| openstackgerrit | Davanum Srinivas (dims) proposed openstack/oslo.policy master: [WIP] Make http/https check rules as stevedore extensions https://review.openstack.org/507098 | 20:39 |
| *** jmlowe has quit IRC | 20:47 | |
| -openstackstatus- NOTICE: The infra team is bringing Zuul v3 online; expect service disruptions and please see https://docs.openstack.org/infra/manual/zuulv3.html for more information. | 20:50 | |
| *** itlinux has quit IRC | 20:56 | |
| *** edmondsw has quit IRC | 21:07 | |
| *** edmondsw has joined #openstack-keystone | 21:10 | |
| *** edmondsw has quit IRC | 21:14 | |
| *** thorst_ has quit IRC | 21:19 | |
| *** chlong has joined #openstack-keystone | 21:20 | |
| *** jmlowe has joined #openstack-keystone | 21:25 | |
| openstackgerrit | Davanum Srinivas (dims) proposed openstack/oslo.policy master: External Policy hook should support SSL https://review.openstack.org/491783 | 21:26 |
| openstackgerrit | Davanum Srinivas (dims) proposed openstack/oslo.policy master: [WIP] Make http/https check rules as stevedore extensions https://review.openstack.org/507098 | 21:26 |
| *** chlong has quit IRC | 21:27 | |
| *** chlong has joined #openstack-keystone | 21:28 | |
| *** aojea has quit IRC | 21:36 | |
| *** thorst has joined #openstack-keystone | 21:39 | |
| *** dave-mccowan has quit IRC | 21:43 | |
| *** thorst has quit IRC | 21:45 | |
| *** jose-phillips has quit IRC | 21:46 | |
| *** jose-phillips has joined #openstack-keystone | 21:47 | |
| *** jose-phillips has quit IRC | 21:48 | |
| *** jamesbenson has quit IRC | 21:59 | |
| *** jamesbenson has joined #openstack-keystone | 22:02 | |
| *** thorst has joined #openstack-keystone | 22:06 | |
| *** jamesbenson has quit IRC | 22:06 | |
| *** panbalag has joined #openstack-keystone | 22:26 | |
| *** edmondsw has joined #openstack-keystone | 22:42 | |
| *** dave-mccowan has joined #openstack-keystone | 22:44 | |
| *** edmondsw has quit IRC | 22:47 | |
| *** panbalag has quit IRC | 23:01 | |
| *** dave-mcc_ has joined #openstack-keystone | 23:05 | |
| *** dave-mccowan has quit IRC | 23:07 | |
| *** itlinux has joined #openstack-keystone | 23:36 | |
| *** gyee has quit IRC | 23:46 | |
| *** masber has joined #openstack-keystone | 23:48 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!