| *** david-lyle has quit IRC | 00:13 | |
| *** itlinux has joined #openstack-keystone | 00:39 | |
| *** linkmark has quit IRC | 00:45 | |
| openstackgerrit | ayoung proposed openstack/keystone master: Add is_admin_project check to policy for non scoped operations https://review.openstack.org/257636 | 00:52 |
|---|---|---|
| *** gyee has quit IRC | 01:12 | |
| *** edmondsw has quit IRC | 01:12 | |
| *** zhurong has joined #openstack-keystone | 01:19 | |
| *** itlinux has quit IRC | 01:19 | |
| *** phalmos has quit IRC | 01:20 | |
| openstackgerrit | Merged openstack/keystone master: Remove member role assignment https://review.openstack.org/523005 | 01:32 |
| *** Sandy619 has joined #openstack-keystone | 01:34 | |
| *** Sandy619 has quit IRC | 01:34 | |
| *** itlinux has joined #openstack-keystone | 01:45 | |
| *** david-lyle has joined #openstack-keystone | 01:48 | |
| openstackgerrit | wangxiyuan proposed openstack/keystone-specs master: Limits API https://review.openstack.org/455709 | 01:50 |
| *** Dinesh_Bhor has joined #openstack-keystone | 01:50 | |
| *** david-lyle has quit IRC | 02:00 | |
| *** ayoung has quit IRC | 02:12 | |
| *** rcernin has quit IRC | 02:12 | |
| *** rcernin has joined #openstack-keystone | 02:20 | |
| *** harlowja has quit IRC | 02:22 | |
| *** jra has joined #openstack-keystone | 02:31 | |
| *** edmondsw has joined #openstack-keystone | 02:33 | |
| jra | Hi all. I have a mandate to extend our YubiKey-based 2-factor authentication to OpenStack; reading I've done so far suggests the right way to do that is probably to write a keystone plugin. Can anyone offer advice on resources for getting started in that area? | 02:33 |
| *** annp has joined #openstack-keystone | 02:34 | |
| *** edmondsw has quit IRC | 02:37 | |
| wxy | jra: A new way to authenticate? | 02:47 |
| wxy | jra: You can start here: https://docs.openstack.org/keystone/latest/contributor/auth-plugins.html I guess | 02:48 |
| jra | wxy: Thanks, that's what I'm reading now. It seems almost too simple - most of the work appears to be done already in the base class | 02:49 |
| *** aselius has quit IRC | 02:52 | |
| wxy | jra: Yeah. I think you only need to rewrite the function "authenticate". What's your main problem now? | 02:54 |
| jra | wxy: Now I just need to write a thin interface to the yubiauth component, which takes a username and password+OTP credential pair and validates them against a specified identitity store (LDAP, typically) and a YubiKey OTP validation server | 02:56 |
| wxy | jra: So I think you need to add a new auth plugin called "YubiKey OTP" in Keystone. Then use "YubiKey OTP" and "password" auth methods together to authenticate | 02:59 |
| jra | wxy: the docs say you can't use multiple auth methods together - you can fall through from one to the next, but not combine them | 03:00 |
| jra | wxy: fortunately for my use case, yubiauth does both password and OTP validation | 03:00 |
| wxy | jra: yeah. The step is like: | 03:02 |
| wxy | for auth_method in all_auth_method: | 03:02 |
| wxy | auth_method.authenticate() | 03:02 |
| wxy | jra: emm. I got your scenario... | 03:03 |
| wxy | jra: The way I can provide is that you can rewrite the password auth method privately to support your requirement. But I'm not sure it can be accepted by Keystone Upstream. | 03:06 |
| jra | wxy: I see | 03:06 |
| *** itlinux has quit IRC | 03:10 | |
| *** itlinux has joined #openstack-keystone | 03:40 | |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Remove useless function https://review.openstack.org/526262 | 03:50 |
| *** threestrands has joined #openstack-keystone | 03:52 | |
| *** threestrands has quit IRC | 03:52 | |
| *** threestrands has joined #openstack-keystone | 03:52 | |
| *** dave-mccowan has quit IRC | 04:17 | |
| *** zhurong has quit IRC | 04:22 | |
| *** links has joined #openstack-keystone | 04:25 | |
| *** harlowja has joined #openstack-keystone | 04:39 | |
| *** jaosorior has joined #openstack-keystone | 04:49 | |
| *** Dinesh_Bhor has quit IRC | 05:00 | |
| *** itlinux has quit IRC | 05:10 | |
| *** jra has quit IRC | 05:14 | |
| *** zhurong has joined #openstack-keystone | 05:30 | |
| *** harlowja has quit IRC | 05:30 | |
| *** sticker has quit IRC | 05:32 | |
| *** daidv has quit IRC | 05:42 | |
| *** daidv has joined #openstack-keystone | 05:42 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 06:15 | |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Remove useless function https://review.openstack.org/526262 | 06:15 |
| *** AlexeyAbashkin has quit IRC | 06:26 | |
| *** threestrands has quit IRC | 06:32 | |
| *** sapd_ has joined #openstack-keystone | 06:32 | |
| *** sapd has quit IRC | 06:32 | |
| openstackgerrit | Merged openstack/keystone master: Reorganize api-ref:v3 groups https://review.openstack.org/525989 | 06:55 |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Expose a bug when authorize request token https://review.openstack.org/526295 | 07:09 |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Add schema check for authorize request token https://review.openstack.org/526296 | 07:09 |
| *** rcernin has quit IRC | 07:11 | |
| *** zhurong has quit IRC | 07:16 | |
| *** aojea has joined #openstack-keystone | 08:03 | |
| openstackgerrit | Merged openstack/oslo.policy master: Imported Translations from Zanata https://review.openstack.org/525887 | 08:06 |
| *** AlexeyAbashkin has joined #openstack-keystone | 08:07 | |
| *** aojea has quit IRC | 08:07 | |
| *** tesseract has joined #openstack-keystone | 08:15 | |
| *** rcernin has joined #openstack-keystone | 08:19 | |
| *** sapd_ has quit IRC | 08:24 | |
| *** sapd_ has joined #openstack-keystone | 08:26 | |
| *** linkmark has joined #openstack-keystone | 09:23 | |
| *** aojea has joined #openstack-keystone | 09:29 | |
| *** aojea has quit IRC | 09:33 | |
| *** Tahvok has quit IRC | 09:40 | |
| *** niraj_singh has joined #openstack-keystone | 09:40 | |
| *** nsingh has quit IRC | 09:41 | |
| *** andreaf has quit IRC | 09:42 | |
| *** andreaf has joined #openstack-keystone | 09:42 | |
| *** Tahvok has joined #openstack-keystone | 09:43 | |
| *** aojea has joined #openstack-keystone | 09:47 | |
| *** aojea has quit IRC | 09:53 | |
| *** annp has quit IRC | 09:55 | |
| *** gmann is now known as gmann_afk | 10:05 | |
| *** rcernin has quit IRC | 10:21 | |
| *** alex_xu has quit IRC | 10:24 | |
| *** alex_xu has joined #openstack-keystone | 10:25 | |
| *** daidv has quit IRC | 10:48 | |
| *** daidv has joined #openstack-keystone | 10:49 | |
| *** aojea has joined #openstack-keystone | 10:49 | |
| *** alex_xu has quit IRC | 10:50 | |
| *** alex_xu has joined #openstack-keystone | 10:51 | |
| *** aojea has quit IRC | 10:54 | |
| openstackgerrit | Merged openstack/python-keystoneclient master: Updated from global requirements https://review.openstack.org/523792 | 11:22 |
| *** raildo has joined #openstack-keystone | 11:52 | |
| *** aojea has joined #openstack-keystone | 12:05 | |
| *** aojea has quit IRC | 12:10 | |
| *** dave-mccowan has joined #openstack-keystone | 13:18 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone master: Updated from global requirements https://review.openstack.org/526377 | 13:25 |
| *** panbalag has joined #openstack-keystone | 13:39 | |
| *** panbalag has left #openstack-keystone | 13:40 | |
| openstackgerrit | david alles proposed openstack/keystone-specs master: Allow admin to specify project id on creation https://review.openstack.org/323499 | 13:54 |
| *** links has quit IRC | 14:01 | |
| *** McClymontS has joined #openstack-keystone | 14:05 | |
| *** aojea has joined #openstack-keystone | 14:06 | |
| *** ayoung has joined #openstack-keystone | 14:08 | |
| *** aojea has quit IRC | 14:10 | |
| *** AlexeyAbashkin has quit IRC | 14:12 | |
| *** aojea has joined #openstack-keystone | 14:15 | |
| *** spilla has joined #openstack-keystone | 14:28 | |
| *** edmondsw has joined #openstack-keystone | 14:30 | |
| *** McClymontS has quit IRC | 14:35 | |
| *** McClymontS has joined #openstack-keystone | 14:37 | |
| *** niraj_singh has quit IRC | 14:48 | |
| *** openstackgerrit has quit IRC | 14:48 | |
| *** tlbr has quit IRC | 14:48 | |
| *** timothyb89 has quit IRC | 14:48 | |
| *** lifeless has quit IRC | 14:48 | |
| *** mfisch has quit IRC | 14:48 | |
| *** afazekas has quit IRC | 14:48 | |
| *** breton has quit IRC | 14:48 | |
| *** MeltedLux has quit IRC | 14:48 | |
| *** clayton has quit IRC | 14:48 | |
| *** nkinder has quit IRC | 14:48 | |
| *** enriquetaso has quit IRC | 14:48 | |
| *** betherly has quit IRC | 14:48 | |
| *** mwhahaha has quit IRC | 14:48 | |
| *** fungi has quit IRC | 14:48 | |
| *** wxy has quit IRC | 14:48 | |
| *** charz has quit IRC | 14:48 | |
| *** robcresswell has quit IRC | 14:48 | |
| *** johnthetubaguy has quit IRC | 14:48 | |
| *** portdirect has quit IRC | 14:48 | |
| *** ChanServ has quit IRC | 14:48 | |
| *** raildo has quit IRC | 14:48 | |
| *** mvk has quit IRC | 14:48 | |
| *** slunkad_ has quit IRC | 14:48 | |
| *** eglute has quit IRC | 14:48 | |
| *** hugokuo has quit IRC | 14:48 | |
| *** dstanek has quit IRC | 14:48 | |
| *** errr has quit IRC | 14:48 | |
| *** d34dh0r53 has quit IRC | 14:48 | |
| *** vaishali has quit IRC | 14:48 | |
| *** Dave has quit IRC | 14:48 | |
| *** szaher has quit IRC | 14:48 | |
| *** Chealion has quit IRC | 14:48 | |
| *** BlackDex has quit IRC | 14:48 | |
| *** akrzos has quit IRC | 14:48 | |
| *** spotz has quit IRC | 14:48 | |
| *** aojea has quit IRC | 14:48 | |
| *** Tahvok has quit IRC | 14:48 | |
| *** lxnch_ has quit IRC | 14:48 | |
| *** jdennis has quit IRC | 14:48 | |
| *** jrist has quit IRC | 14:48 | |
| *** jose-phillips has quit IRC | 14:48 | |
| *** masber has quit IRC | 14:48 | |
| *** hoonetorg has quit IRC | 14:48 | |
| *** ianw has quit IRC | 14:48 | |
| *** zigo has quit IRC | 14:48 | |
| *** jhesketh has quit IRC | 14:48 | |
| *** daidv has quit IRC | 14:48 | |
| *** sapd_ has quit IRC | 14:48 | |
| *** adriant has quit IRC | 14:48 | |
| *** gmann_afk has quit IRC | 14:48 | |
| *** zhongjun has quit IRC | 14:48 | |
| *** knikolla has quit IRC | 14:48 | |
| *** tristanC has quit IRC | 14:48 | |
| *** efried has quit IRC | 14:48 | |
| *** vegarl has quit IRC | 14:48 | |
| *** dave-mccowan has quit IRC | 14:48 | |
| *** amito has quit IRC | 14:48 | |
| *** cmurphy has quit IRC | 14:48 | |
| *** melwitt has quit IRC | 14:48 | |
| *** kencjohnston has quit IRC | 14:48 | |
| *** oomichi_afk has quit IRC | 14:48 | |
| *** odyssey4me has quit IRC | 14:48 | |
| *** ayoung has quit IRC | 14:48 | |
| *** alex_xu has quit IRC | 14:48 | |
| *** jaosorior has quit IRC | 14:48 | |
| *** hemna has quit IRC | 14:48 | |
| *** NikitaKonovalov has quit IRC | 14:48 | |
| *** amrith has quit IRC | 14:48 | |
| *** aloga has quit IRC | 14:48 | |
| *** EmilienM has quit IRC | 14:48 | |
| *** brad[] has quit IRC | 14:48 | |
| *** chrome0 has quit IRC | 14:48 | |
| *** rybridges has quit IRC | 14:48 | |
| *** Krenair has quit IRC | 14:48 | |
| *** timburke has quit IRC | 14:48 | |
| *** freerunner has quit IRC | 14:48 | |
| *** andreykurilin has quit IRC | 14:48 | |
| *** DinaBelova has quit IRC | 14:48 | |
| *** timss has quit IRC | 14:48 | |
| *** MeltedLux has joined #openstack-keystone | 14:54 | |
| *** clayton has joined #openstack-keystone | 14:54 | |
| *** nkinder has joined #openstack-keystone | 14:54 | |
| *** enriquetaso has joined #openstack-keystone | 14:54 | |
| *** betherly has joined #openstack-keystone | 14:54 | |
| *** mwhahaha has joined #openstack-keystone | 14:54 | |
| *** fungi has joined #openstack-keystone | 14:54 | |
| *** wxy has joined #openstack-keystone | 14:54 | |
| *** charz has joined #openstack-keystone | 14:54 | |
| *** robcresswell has joined #openstack-keystone | 14:54 | |
| *** johnthetubaguy has joined #openstack-keystone | 14:54 | |
| *** portdirect has joined #openstack-keystone | 14:54 | |
| *** raildo has joined #openstack-keystone | 14:54 | |
| *** mvk has joined #openstack-keystone | 14:54 | |
| *** slunkad_ has joined #openstack-keystone | 14:54 | |
| *** errr has joined #openstack-keystone | 14:54 | |
| *** eglute has joined #openstack-keystone | 14:54 | |
| *** hugokuo has joined #openstack-keystone | 14:54 | |
| *** dstanek has joined #openstack-keystone | 14:54 | |
| *** d34dh0r53 has joined #openstack-keystone | 14:54 | |
| *** vaishali has joined #openstack-keystone | 14:54 | |
| *** d0ugal has quit IRC | 14:54 | |
| *** breton has joined #openstack-keystone | 14:54 | |
| *** afazekas has joined #openstack-keystone | 14:54 | |
| *** mfisch has joined #openstack-keystone | 14:54 | |
| *** lifeless has joined #openstack-keystone | 14:54 | |
| *** timothyb89 has joined #openstack-keystone | 14:54 | |
| *** tlbr has joined #openstack-keystone | 14:54 | |
| *** openstackgerrit has joined #openstack-keystone | 14:54 | |
| *** niraj_singh has joined #openstack-keystone | 14:54 | |
| *** panbalag has joined #openstack-keystone | 14:54 | |
| *** aojea has joined #openstack-keystone | 14:54 | |
| *** ayoung has joined #openstack-keystone | 14:54 | |
| *** dave-mccowan has joined #openstack-keystone | 14:54 | |
| *** alex_xu has joined #openstack-keystone | 14:54 | |
| *** daidv has joined #openstack-keystone | 14:54 | |
| *** Tahvok has joined #openstack-keystone | 14:54 | |
| *** sapd_ has joined #openstack-keystone | 14:54 | |
| *** jaosorior has joined #openstack-keystone | 14:54 | |
| *** adriant has joined #openstack-keystone | 14:54 | |
| *** lxnch_ has joined #openstack-keystone | 14:54 | |
| *** jdennis has joined #openstack-keystone | 14:54 | |
| *** gmann_afk has joined #openstack-keystone | 14:54 | |
| *** zhongjun has joined #openstack-keystone | 14:54 | |
| *** knikolla has joined #openstack-keystone | 14:54 | |
| *** tristanC has joined #openstack-keystone | 14:54 | |
| *** jrist has joined #openstack-keystone | 14:54 | |
| *** efried has joined #openstack-keystone | 14:54 | |
| *** jose-phillips has joined #openstack-keystone | 14:54 | |
| *** masber has joined #openstack-keystone | 14:54 | |
| *** aloga has joined #openstack-keystone | 14:54 | |
| *** vegarl has joined #openstack-keystone | 14:54 | |
| *** hoonetorg has joined #openstack-keystone | 14:54 | |
| *** ianw has joined #openstack-keystone | 14:54 | |
| *** zigo has joined #openstack-keystone | 14:54 | |
| *** EmilienM has joined #openstack-keystone | 14:54 | |
| *** Dave has joined #openstack-keystone | 14:54 | |
| *** szaher has joined #openstack-keystone | 14:54 | |
| *** Chealion has joined #openstack-keystone | 14:54 | |
| *** BlackDex has joined #openstack-keystone | 14:54 | |
| *** akrzos has joined #openstack-keystone | 14:54 | |
| *** jhesketh has joined #openstack-keystone | 14:54 | |
| *** spotz has joined #openstack-keystone | 14:54 | |
| *** hemna has joined #openstack-keystone | 14:54 | |
| *** NikitaKonovalov has joined #openstack-keystone | 14:54 | |
| *** amrith has joined #openstack-keystone | 14:54 | |
| *** brad[] has joined #openstack-keystone | 14:54 | |
| *** chrome0 has joined #openstack-keystone | 14:54 | |
| *** rybridges has joined #openstack-keystone | 14:54 | |
| *** Krenair has joined #openstack-keystone | 14:54 | |
| *** amito has joined #openstack-keystone | 14:54 | |
| *** cmurphy has joined #openstack-keystone | 14:54 | |
| *** melwitt has joined #openstack-keystone | 14:54 | |
| *** timburke has joined #openstack-keystone | 14:54 | |
| *** kencjohnston has joined #openstack-keystone | 14:54 | |
| *** freerunner has joined #openstack-keystone | 14:54 | |
| *** andreykurilin has joined #openstack-keystone | 14:54 | |
| *** oomichi_afk has joined #openstack-keystone | 14:54 | |
| *** DinaBelova has joined #openstack-keystone | 14:54 | |
| *** timss has joined #openstack-keystone | 14:54 | |
| *** odyssey4me has joined #openstack-keystone | 14:54 | |
| *** d0ugal has joined #openstack-keystone | 14:55 | |
| *** mtreinish has quit IRC | 14:55 | |
| cmurphy | \o | 14:55 |
| *** mtreinish has joined #openstack-keystone | 14:59 | |
| *** spilla has quit IRC | 14:59 | |
| *** spilla has joined #openstack-keystone | 14:59 | |
| *** aojea has quit IRC | 15:00 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone-specs master: Allow admin to specify project id on creation https://review.openstack.org/323499 | 15:05 |
| lbragstad | o/ | 15:05 |
| cmurphy | lbragstad: responded on the limits spec, sorry i wasn't around last night | 15:06 |
| lbragstad | cmurphy: no worries - i appreciate it | 15:07 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone-specs master: Allow admin to specify project id on creation https://review.openstack.org/323499 | 15:08 |
| lbragstad | cmurphy: the guys from orange are going to be looking to discuss ^ next week at the meeting | 15:09 |
| lbragstad | which won't really be possible this release, but they are trying to get ahead of the curve for rocky | 15:09 |
| lbragstad | (i just fixed up some of the formatting and doc failures) | 15:09 |
| cmurphy | lbragstad: i'm going on vacation next week | 15:14 |
| cmurphy | likely won't be at meetings | 15:14 |
| lbragstad | ack - enjoy you're time off! | 15:14 |
| lbragstad | your* | 15:14 |
| cmurphy | ty | 15:14 |
| lbragstad | doing anything fun? | 15:14 |
| cmurphy | going to sweden, hoping to see the northern lights :) | 15:15 |
| lbragstad | O.O | 15:15 |
| lbragstad | you should take a bunch of pictures | 15:15 |
| cmurphy | that is the plan | 15:15 |
| lbragstad | traveling by plane? | 15:15 |
| cmurphy | yep | 15:15 |
| lbragstad | nice | 15:15 |
| cmurphy | it's surprisingly hard to get to sweden from germany | 15:16 |
| lbragstad | yeah... i was about to ask if there was a train | 15:16 |
| *** ChanServ has joined #openstack-keystone | 15:16 | |
| *** barjavel.freenode.net sets mode: +o ChanServ | 15:16 | |
| *** d0ugal is now known as Guest27460 | 15:20 | |
| *** Guest27460 has quit IRC | 15:23 | |
| *** d0ugal has joined #openstack-keystone | 15:23 | |
| *** d0ugal has quit IRC | 15:23 | |
| *** d0ugal has joined #openstack-keystone | 15:23 | |
| *** itlinux has joined #openstack-keystone | 15:23 | |
| *** links has joined #openstack-keystone | 15:25 | |
| *** McClymontS has quit IRC | 15:37 | |
| *** itlinux has quit IRC | 15:41 | |
| *** McClymontS has joined #openstack-keystone | 15:48 | |
| *** itlinux has joined #openstack-keystone | 15:49 | |
| openstackgerrit | Matthew Edmonds proposed openstack/keystonemiddleware master: Expect paste.deploy and gnocchi/panko options https://review.openstack.org/515291 | 15:54 |
| *** itlinux has quit IRC | 15:54 | |
| *** links has quit IRC | 15:59 | |
| *** itlinux has joined #openstack-keystone | 15:59 | |
| edmondsw | lbragstad looks like we've been falling behind in deprecation cleanups... e.g. https://github.com/openstack/keystonemiddleware/blob/master/keystonemiddleware/auth_token/_auth.py#L43 | 15:59 |
| edmondsw | should I open a bug to track that, or... ? | 15:59 |
| edmondsw | another -> https://github.com/openstack/keystonemiddleware/blob/master/keystonemiddleware/auth_token/_auth.py#L72 | 16:00 |
| edmondsw | and https://github.com/openstack/keystonemiddleware/blob/master/keystonemiddleware/auth_token/_auth.py#L33 | 16:00 |
| cmurphy | poor keystonemiddleware | 16:01 |
| cmurphy | so forgotten | 16:01 |
| edmondsw | and that's just from the one file... | 16:01 |
| *** itlinux has quit IRC | 16:04 | |
| *** itlinux has joined #openstack-keystone | 16:06 | |
| lbragstad | yeah - you could probably open a bug | 16:09 |
| lbragstad | just one bug to update all of keystonemiddleware | 16:09 |
| lbragstad | should force us to look through everything in ksm | 16:09 |
| *** McClymontS has quit IRC | 16:13 | |
| *** McClymontS has joined #openstack-keystone | 16:15 | |
| edmondsw | lbragstad cmurphy https://bugs.launchpad.net/keystonemiddleware/+bug/1736985 | 16:16 |
| openstack | Launchpad bug 1736985 in keystonemiddleware "many things that were deprecated long ago were never removed" [Undecided,New] | 16:16 |
| *** aselius has joined #openstack-keystone | 16:23 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 16:24 | |
| edmondsw | also opened a devstack bug to stop *using* those things, which we'll have to fix before we can remove them from keystonemiddlware so we don't break the gate | 16:28 |
| edmondsw | linked it in the bug above | 16:28 |
| *** AlexeyAbashkin has quit IRC | 16:31 | |
| lbragstad | cool - thanks | 16:33 |
| *** itlinux has quit IRC | 16:50 | |
| *** McClymontS has quit IRC | 16:50 | |
| *** itlinux has joined #openstack-keystone | 16:53 | |
| breton | i like how all "Add scope_types" have -1 :p | 17:00 |
| cmurphy | lbragstad: is Pavlo one of the people involved in the project id spec or is this a coincidence? http://lists.openstack.org/pipermail/openstack-dev/2017-December/125290.html | 17:00 |
| *** aojea has joined #openstack-keystone | 17:01 | |
| *** panbalag has left #openstack-keystone | 17:01 | |
| *** panbalag has joined #openstack-keystone | 17:03 | |
| breton | hm | 17:05 |
| *** aojea has quit IRC | 17:06 | |
| breton | this is the second time i see a request like this | 17:06 |
| *** harlowja has joined #openstack-keystone | 17:08 | |
| breton | https://review.openstack.org/#/c/403866/ | 17:09 |
| breton | and http://lists.openstack.org/pipermail/openstack-dev/2016-December/thread.html#108466 | 17:09 |
| *** panbalag has left #openstack-keystone | 17:12 | |
| lbragstad | yeah - mirantis propsed this a while ago | 17:15 |
| lbragstad | but several parties are interested in it] | 17:15 |
| gagehugo | yeah it's come up here before | 17:20 |
| *** itlinux has quit IRC | 17:23 | |
| zzzeek | is there a plain "keystone" command line command anymore or is the onyl way to see what keystone has in its DB (beisdes looking in the database) to craft elaborate curl commands ? | 17:36 |
| *** gyee has joined #openstack-keystone | 17:37 | |
| breton | "openstack" cli | 17:37 |
| zzzeek | breton: OK like "openstack user list" right, ok | 17:50 |
| * zzzeek is trying to point keystone at an alternate DB and just needs to verify the API can receive data | 17:51 | |
| lbragstad | zzzeek: yeah - you should be able to point openstackclient to a keystone node and verify things that way - pending you've pointed keystone to the right database | 17:56 |
| zzzeek | lbragstad: thanks | 17:56 |
| lbragstad | something as simple as `openstack token issue` will exercise a bunch of things, too | 17:56 |
| lbragstad | (since it builds a token for you) | 17:56 |
| zzzeek | lbragstad: yeah really any command goes nuts w keystone api regardless.... but openstack project list, openstack role list, these are direct to keystone right | 17:57 |
| lbragstad | yep | 17:57 |
| zzzeek | lbragstad: thanks | 17:57 |
| lbragstad | zzzeek: no problem | 17:57 |
| *** aojea has joined #openstack-keystone | 18:02 | |
| *** mvk has quit IRC | 18:11 | |
| *** tesseract has quit IRC | 18:13 | |
| breton | can i don something like "auth in keystone2 using federation via keystone1" using openstack cli now? | 18:29 |
| cmurphy | breton: you mean keystone-to-keystone federation? yes | 18:31 |
| breton | cmurphy: how? | 18:31 |
| cmurphy | breton: https://review.openstack.org/#/c/513828/ | 18:31 |
| cmurphy | not sure if that's released yet | 18:32 |
| breton | cmurphy: nice, merged just 3 weeks ago! | 18:34 |
| *** itlinux has joined #openstack-keystone | 18:53 | |
| *** edmondsw has quit IRC | 19:00 | |
| *** itlinux has quit IRC | 19:14 | |
| *** itlinux has joined #openstack-keystone | 19:18 | |
| *** harlowja has quit IRC | 19:21 | |
| *** edmondsw has joined #openstack-keystone | 19:35 | |
| *** edmondsw has quit IRC | 19:39 | |
| lbragstad | breton: cmurphy i'll be proposing releases this week since it's queens-2, so if you can't use it yet, you should be able to soon | 19:40 |
| *** edmondsw has joined #openstack-keystone | 19:41 | |
| *** edmondsw has quit IRC | 19:45 | |
| *** edmondsw has joined #openstack-keystone | 19:52 | |
| cmurphy | lbragstad: this is in osc-lib | 19:53 |
| lbragstad | oh - nevermind then | 19:53 |
| lbragstad | i was assuming it was in a keystone controlled project | 19:54 |
| dtroyer | fwiw, I am trying to get an osc/osc-lib release out, currently hung up on some tests but hoping it'll be in the next week or so | 19:55 |
| dtroyer | lbragstad, breton ^^^ | 19:56 |
| *** edmondsw has quit IRC | 19:56 | |
| cmurphy | \o/ | 19:57 |
| *** edmondsw has joined #openstack-keystone | 19:58 | |
| *** edmondsw has quit IRC | 19:58 | |
| *** edmondsw has joined #openstack-keystone | 19:58 | |
| *** edmondsw has quit IRC | 20:02 | |
| *** edmondsw has joined #openstack-keystone | 20:07 | |
| *** edmondsw has quit IRC | 20:12 | |
| knikolla | breton: you can do it right now with clouds.yaml, if you can't wait for release. | 20:16 |
| knikolla | the bits for k2k merged a year ago, that just adds the cli/env options. | 20:17 |
| *** aojea has quit IRC | 20:21 | |
| *** panbalag has joined #openstack-keystone | 20:36 | |
| *** panbalag has quit IRC | 20:38 | |
| *** aojea has joined #openstack-keystone | 20:38 | |
| *** itlinux has quit IRC | 20:40 | |
| breton | knikolla: is there an example of clouds.yaml for it? | 20:43 |
| *** itlinux has joined #openstack-keystone | 20:59 | |
| *** ayoung has quit IRC | 21:00 | |
| knikolla | breton: http://paste.openstack.org/show/628389/ | 21:01 |
| knikolla | haven't tested it, but the service_provider and remote_project* options are global ones | 21:02 |
| knikolla | so it would look something like that | 21:02 |
| *** aojea has quit IRC | 21:02 | |
| *** aojea has joined #openstack-keystone | 21:02 | |
| *** spilla has quit IRC | 21:13 | |
| *** spilla has joined #openstack-keystone | 21:13 | |
| *** spilla has quit IRC | 21:13 | |
| *** McClymontS has joined #openstack-keystone | 21:14 | |
| *** aojea has quit IRC | 21:15 | |
| *** McClymontS has quit IRC | 21:15 | |
| *** aojea has joined #openstack-keystone | 21:16 | |
| *** linkmark has quit IRC | 21:18 | |
| *** gyee has quit IRC | 21:20 | |
| *** aojea has quit IRC | 21:20 | |
| *** aojea has joined #openstack-keystone | 21:21 | |
| *** spilla has joined #openstack-keystone | 21:30 | |
| lbragstad | gagehugo: are we going to try and squeeze the project tags client work into queens-2? | 21:34 |
| gagehugo | lbragstad I think the change is looking good | 21:35 |
| gagehugo | for ksc | 21:36 |
| gagehugo | osc will be queens-3 most likely | 21:36 |
| lbragstad | i pulled both down and reviewed them together | 21:36 |
| lbragstad | but i left my comments on the osc patch | 21:36 |
| gagehugo | I think I got osc *just* working to test against the server | 21:37 |
| gagehugo | it needs some tuning up | 21:37 |
| lbragstad | ok | 21:38 |
| lbragstad | i just noticed some things with updating all tags on a project when playing with both libraries | 21:38 |
| lbragstad | i'll pull a fresh env for ksc and test with the latest | 21:39 |
| *** sticker has joined #openstack-keystone | 21:39 | |
| *** panbalag has joined #openstack-keystone | 21:39 | |
| gagehugo | I think osc handles tags differently as well for other projects, syntax-wise if you look at the previous comments | 21:39 |
| *** panbalag has left #openstack-keystone | 21:40 | |
| *** aojea has quit IRC | 21:43 | |
| *** raildo has quit IRC | 21:43 | |
| *** slunkad_ has quit IRC | 21:43 | |
| *** eglute has quit IRC | 21:43 | |
| *** hugokuo has quit IRC | 21:43 | |
| *** dstanek has quit IRC | 21:43 | |
| *** errr has quit IRC | 21:43 | |
| *** d34dh0r53 has quit IRC | 21:43 | |
| *** vaishali has quit IRC | 21:43 | |
| *** aojea has joined #openstack-keystone | 21:48 | |
| *** raildo has joined #openstack-keystone | 21:48 | |
| *** slunkad_ has joined #openstack-keystone | 21:48 | |
| *** errr has joined #openstack-keystone | 21:48 | |
| *** eglute has joined #openstack-keystone | 21:48 | |
| *** hugokuo has joined #openstack-keystone | 21:48 | |
| *** dstanek has joined #openstack-keystone | 21:48 | |
| *** d34dh0r53 has joined #openstack-keystone | 21:48 | |
| *** vaishali has joined #openstack-keystone | 21:48 | |
| *** openstackgerrit has quit IRC | 21:48 | |
| *** threestrands has joined #openstack-keystone | 22:04 | |
| *** threestrands has quit IRC | 22:04 | |
| *** threestrands has joined #openstack-keystone | 22:04 | |
| *** rcernin has joined #openstack-keystone | 22:09 | |
| *** rcernin has quit IRC | 22:09 | |
| *** rcernin has joined #openstack-keystone | 22:09 | |
| lbragstad | gagehugo: i was able to recreate one of the things in the python-keystoneclient patch | 22:12 |
| lbragstad | i left a couple comments, otherwise it looks really good | 22:12 |
| gagehugo | aselius spilla ^ | 22:12 |
| gagehugo | lbragstad thanks! | 22:12 |
| lbragstad | no problem - thanks for the patch! | 22:12 |
| lbragstad | cmurphy: gagehugo samueldmq knikolla kmalloc is there anything you can think of that we need to get into queens-2? | 22:14 |
| gagehugo | I think I'm good | 22:15 |
| lbragstad | looks like most features will land between queens-2 and queens-3 | 22:15 |
| cmurphy | i can't think of anything | 22:19 |
| *** openstackgerrit has joined #openstack-keystone | 22:23 | |
| openstackgerrit | Merged openstack/oslo.policy master: add bandit to pep8 job https://review.openstack.org/524055 | 22:23 |
| lbragstad | gagehugo: https://review.openstack.org/#/c/526525/1 | 22:24 |
| gagehugo | lbragstad ack | 22:26 |
| lbragstad | gagehugo: if it happens, awesome. otherwise don't sweat it | 22:26 |
| lbragstad | it'd be a nice to have since we're doing a release | 22:26 |
| lbragstad | if not, we'll just catch it in queens-2 | 22:26 |
| lbragstad | queens-3* | 22:26 |
| gagehugo | rarora ^ | 22:33 |
| *** mvk has joined #openstack-keystone | 22:33 | |
| *** rcernin has quit IRC | 22:36 | |
| *** aojea has quit IRC | 22:36 | |
| *** raildo has quit IRC | 22:36 | |
| *** slunkad_ has quit IRC | 22:36 | |
| *** eglute has quit IRC | 22:36 | |
| *** hugokuo has quit IRC | 22:36 | |
| *** dstanek has quit IRC | 22:36 | |
| *** errr has quit IRC | 22:36 | |
| *** d34dh0r53 has quit IRC | 22:36 | |
| *** vaishali has quit IRC | 22:36 | |
| *** spilla has quit IRC | 22:40 | |
| *** rcernin has joined #openstack-keystone | 22:42 | |
| *** aojea has joined #openstack-keystone | 22:42 | |
| *** raildo has joined #openstack-keystone | 22:42 | |
| *** slunkad_ has joined #openstack-keystone | 22:42 | |
| *** errr has joined #openstack-keystone | 22:42 | |
| *** eglute has joined #openstack-keystone | 22:42 | |
| *** hugokuo has joined #openstack-keystone | 22:42 | |
| *** dstanek has joined #openstack-keystone | 22:42 | |
| *** d34dh0r53 has joined #openstack-keystone | 22:42 | |
| *** vaishali has joined #openstack-keystone | 22:42 | |
| *** raildo has quit IRC | 22:44 | |
| *** gyee has joined #openstack-keystone | 22:50 | |
| *** itlinux has quit IRC | 22:56 | |
| *** markvoelker has quit IRC | 23:03 | |
| *** aojea has quit IRC | 23:04 | |
| *** markvoelker has joined #openstack-keystone | 23:04 | |
| *** harlowja has joined #openstack-keystone | 23:07 | |
| openstackgerrit | Gage Hugo proposed openstack/keystone master: Make fernet utils and config more generic https://review.openstack.org/523200 | 23:11 |
| openstackgerrit | Merged openstack/keystoneauth master: Make none auth usable in CLI https://review.openstack.org/515730 | 23:41 |
| *** threestrands has quit IRC | 23:55 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!