*** lbragstad has quit IRC | 00:18 | |
*** dmellado has joined #openstack-keystone | 00:33 | |
*** d0ugal has quit IRC | 00:47 | |
*** oikiki has quit IRC | 00:48 | |
*** oikiki has joined #openstack-keystone | 00:48 | |
*** d0ugal has joined #openstack-keystone | 00:57 | |
*** nkinder has quit IRC | 00:57 | |
*** daidv has joined #openstack-keystone | 00:58 | |
*** Dave has quit IRC | 01:01 | |
*** gyee has quit IRC | 01:05 | |
*** panbalag has joined #openstack-keystone | 01:20 | |
*** panbalag has left #openstack-keystone | 01:20 | |
*** namnh has joined #openstack-keystone | 01:50 | |
*** lbragstad has joined #openstack-keystone | 01:56 | |
*** ChanServ sets mode: +o lbragstad | 01:56 | |
*** annp has joined #openstack-keystone | 02:02 | |
*** dklyle has joined #openstack-keystone | 02:17 | |
*** itlinux has joined #openstack-keystone | 02:18 | |
openstackgerrit | wangxiyuan proposed openstack/keystonemiddleware master: Remove kwargs_to_fetch_token https://review.openstack.org/513273 | 02:19 |
---|---|---|
*** david-lyle has quit IRC | 02:21 | |
*** zhongjun has joined #openstack-keystone | 02:27 | |
*** dave-mccowan has joined #openstack-keystone | 02:29 | |
openstackgerrit | Gage Hugo proposed openstack/keystone master: Handle empty token key files https://review.openstack.org/546785 | 02:55 |
*** dave-mccowan has quit IRC | 02:58 | |
*** andymccr has quit IRC | 03:00 | |
*** andymccr has joined #openstack-keystone | 03:03 | |
*** lbragstad has quit IRC | 03:04 | |
*** itlinux has quit IRC | 03:10 | |
*** oikiki has quit IRC | 03:11 | |
*** itlinux has joined #openstack-keystone | 03:37 | |
*** dave-mccowan has joined #openstack-keystone | 03:38 | |
*** d0ugal has quit IRC | 04:00 | |
*** dave-mccowan has quit IRC | 04:09 | |
*** bhagyashris has joined #openstack-keystone | 04:25 | |
*** d0ugal has joined #openstack-keystone | 04:27 | |
*** links has joined #openstack-keystone | 04:30 | |
*** rha has quit IRC | 06:07 | |
*** itlinux has quit IRC | 06:58 | |
*** rcernin has quit IRC | 07:20 | |
*** pcaruana has joined #openstack-keystone | 07:37 | |
*** AlexeyAbashkin has joined #openstack-keystone | 08:07 | |
*** threestrands_ has joined #openstack-keystone | 08:15 | |
*** threestrands_ has quit IRC | 08:15 | |
*** threestrands_ has joined #openstack-keystone | 08:15 | |
*** hoonetorg has quit IRC | 08:18 | |
*** tesseract has joined #openstack-keystone | 08:18 | |
*** threestrands has quit IRC | 08:18 | |
openstackgerrit | wangxiyuan proposed openstack/keystonemiddleware master: Add arguments for MemcacheClientPool init https://review.openstack.org/542133 | 08:28 |
openstackgerrit | wangxiyuan proposed openstack/keystonemiddleware master: Fix the AttributeError: __exit__ error https://review.openstack.org/542134 | 08:31 |
*** hoonetorg has joined #openstack-keystone | 08:35 | |
*** tbh_ has joined #openstack-keystone | 08:40 | |
*** annp has quit IRC | 09:14 | |
*** daidv has quit IRC | 09:14 | |
*** daidv has joined #openstack-keystone | 09:14 | |
*** annp has joined #openstack-keystone | 09:14 | |
*** threestrands_ has quit IRC | 09:37 | |
*** jaosorior has joined #openstack-keystone | 09:39 | |
*** links has quit IRC | 10:09 | |
*** links has joined #openstack-keystone | 10:10 | |
*** nixi_girl has joined #openstack-keystone | 10:15 | |
*** annp has quit IRC | 10:23 | |
*** cz2 is now known as swagnemite | 10:41 | |
*** nixi_girl has quit IRC | 10:42 | |
*** swagnemite is now known as cz2 | 10:50 | |
*** EmilienM has quit IRC | 10:59 | |
*** obre_ has quit IRC | 10:59 | |
*** links has quit IRC | 10:59 | |
*** mattoliverau has quit IRC | 10:59 | |
*** obre has joined #openstack-keystone | 10:59 | |
*** mattoliverau has joined #openstack-keystone | 11:00 | |
*** links has joined #openstack-keystone | 11:00 | |
*** EmilienM has joined #openstack-keystone | 11:00 | |
*** nixi_girl has joined #openstack-keystone | 11:02 | |
*** namnh has quit IRC | 11:03 | |
*** pcaruana has quit IRC | 11:07 | |
obre | Hi. What are really the difference between the public keyston api, and the admin api? | 11:08 |
obre | I am designing some iptables rules for our installation, and expected the public-api to be whats needed to be available for the keystone-clients used. | 11:09 |
obre | So i restricted access to the api at port 35357 to be only our management network. | 11:09 |
obre | But when a client then tries to do an "openstack keystone endpoint list" i end up with an error stating that the client cannot access my admin api. | 11:09 |
obre | so do general purpose clients use the admin API of keystone? | 11:10 |
obre | Or have I done something strange? | 11:10 |
*** Jack_Iv has joined #openstack-keystone | 11:19 | |
openstackgerrit | Nguyen Hung Phuong proposed openstack/keystonemiddleware master: Remove empty files https://review.openstack.org/546952 | 11:20 |
*** nixi_girl has quit IRC | 11:21 | |
*** eEbx- has joined #openstack-keystone | 11:25 | |
*** mattoliverau_ has joined #openstack-keystone | 11:27 | |
*** obre_ has joined #openstack-keystone | 11:28 | |
*** vegarl has joined #openstack-keystone | 11:28 | |
*** Faster-Fanboi_ has joined #openstack-keystone | 11:32 | |
*** eEbx has quit IRC | 11:34 | |
*** mattoliverau has quit IRC | 11:34 | |
*** cz2 has quit IRC | 11:34 | |
*** vegarl_ has quit IRC | 11:34 | |
*** obre has quit IRC | 11:34 | |
*** Faster-Fanboi has quit IRC | 11:34 | |
*** timss has quit IRC | 11:34 | |
*** cz2 has joined #openstack-keystone | 11:36 | |
*** timss has joined #openstack-keystone | 11:36 | |
*** jaosorior has quit IRC | 11:45 | |
*** jaosorior has joined #openstack-keystone | 11:45 | |
*** Jack_Iv has quit IRC | 11:47 | |
*** pcaruana has joined #openstack-keystone | 12:09 | |
*** raildo has joined #openstack-keystone | 12:10 | |
*** aloga_ has joined #openstack-keystone | 12:14 | |
*** aloga_ has quit IRC | 12:17 | |
*** aloga_ has joined #openstack-keystone | 12:17 | |
*** dave-mccowan has joined #openstack-keystone | 12:26 | |
*** links has quit IRC | 12:29 | |
*** Supun has joined #openstack-keystone | 12:34 | |
*** Jack_Iv has joined #openstack-keystone | 12:34 | |
*** Jack_Iv has quit IRC | 12:34 | |
openstackgerrit | Jose Castro Leon proposed openstack/keystone master: Allow to remove a group that has been deleted out-of-band from LDAP https://review.openstack.org/546969 | 12:35 |
*** aloga_ has quit IRC | 12:36 | |
openstackgerrit | Jose Castro Leon proposed openstack/keystone master: Allow to remove a group that has been deleted out-of-band from an LDAP server https://review.openstack.org/546969 | 12:37 |
*** aloga_ has joined #openstack-keystone | 12:38 | |
*** panbalag has joined #openstack-keystone | 12:40 | |
*** links has joined #openstack-keystone | 12:41 | |
*** wolsen has quit IRC | 12:50 | |
*** wolsen has joined #openstack-keystone | 12:51 | |
*** wxy has quit IRC | 12:52 | |
*** wxy has joined #openstack-keystone | 12:52 | |
*** hrybacki has quit IRC | 12:53 | |
*** Chealion has quit IRC | 12:53 | |
*** josecastroleon has joined #openstack-keystone | 12:54 | |
*** hrybacki has joined #openstack-keystone | 12:54 | |
*** Chealion has joined #openstack-keystone | 12:54 | |
*** mchlumsky has quit IRC | 12:59 | |
*** josecastroleon has quit IRC | 13:00 | |
*** josecastroleon has joined #openstack-keystone | 13:00 | |
*** mchlumsky has joined #openstack-keystone | 13:05 | |
*** betherly has quit IRC | 13:15 | |
*** betherly has joined #openstack-keystone | 13:15 | |
*** Supun has quit IRC | 13:21 | |
*** Supun has joined #openstack-keystone | 13:22 | |
*** mwhahaha has quit IRC | 13:54 | |
*** mwhahaha has joined #openstack-keystone | 13:56 | |
*** robcresswell has quit IRC | 13:57 | |
*** McClymontS has joined #openstack-keystone | 13:57 | |
*** robcresswell has joined #openstack-keystone | 14:00 | |
*** zhongjun has quit IRC | 14:01 | |
*** zhongjun has joined #openstack-keystone | 14:01 | |
*** jmlowe has quit IRC | 14:06 | |
*** nkinder has joined #openstack-keystone | 14:07 | |
*** lbragstad has joined #openstack-keystone | 14:10 | |
*** ChanServ sets mode: +o lbragstad | 14:10 | |
lbragstad | this is pretty cool in case anyone hasn't seen it yet - https://www.youtube.com/watch?v=Lt8EhrDg4lU&feature=youtu.be | 14:28 |
*** jmlowe has joined #openstack-keystone | 14:29 | |
*** dklyle has quit IRC | 14:39 | |
*** josecastroleon has quit IRC | 14:45 | |
*** josecastroleon has joined #openstack-keystone | 14:46 | |
*** r-daneel has joined #openstack-keystone | 14:46 | |
*** tbh_ has quit IRC | 14:50 | |
*** McClymontS has quit IRC | 14:52 | |
*** josecastroleon has quit IRC | 14:53 | |
*** cmurphy has quit IRC | 14:57 | |
*** josecastroleon has joined #openstack-keystone | 14:58 | |
*** links has quit IRC | 15:20 | |
lbragstad | well - rc2 is out the door | 15:42 |
lbragstad | nice work, team! | 15:42 |
*** josecastroleon has quit IRC | 15:46 | |
*** david-lyle has joined #openstack-keystone | 15:50 | |
knikolla | o/ | 15:54 |
knikolla | ooo a drag and drop interface for heat templates. awesome! | 15:59 |
*** itlinux has joined #openstack-keystone | 16:03 | |
lbragstad | yeah - that's pretty cool | 16:03 |
* knikolla spinning a devstack instance to try it out. | 16:04 | |
*** Supun has quit IRC | 16:05 | |
*** Supun has joined #openstack-keystone | 16:06 | |
*** d0ugal has quit IRC | 16:35 | |
*** d0ugal has joined #openstack-keystone | 16:40 | |
*** david-lyle is now known as dklyle | 16:42 | |
*** oikiki has joined #openstack-keystone | 16:43 | |
gagehugo | yay policy | 16:44 |
*** cmurphy has joined #openstack-keystone | 16:48 | |
*** dklyle has quit IRC | 16:56 | |
lbragstad | lol yeah - it was nice to see that | 16:57 |
*** Supun has quit IRC | 16:59 | |
*** david-lyle has joined #openstack-keystone | 17:01 | |
*** links has joined #openstack-keystone | 17:04 | |
*** Supun has joined #openstack-keystone | 17:07 | |
*** AlexeyAbashkin has quit IRC | 17:09 | |
*** gyee has joined #openstack-keystone | 17:25 | |
*** aloga_ has quit IRC | 17:26 | |
*** Suramya has joined #openstack-keystone | 17:29 | |
*** Supun has quit IRC | 17:36 | |
openstackgerrit | Gage Hugo proposed openstack/keystone master: Handle empty token key files https://review.openstack.org/546785 | 17:44 |
*** idlemind has quit IRC | 17:50 | |
*** Supun has joined #openstack-keystone | 17:55 | |
openstackgerrit | Suramya proposed openstack/keystone master: Consolidate Keystone docs: admin/identity-external-authentication.rst https://review.openstack.org/547087 | 17:58 |
*** dklyle has joined #openstack-keystone | 18:18 | |
*** david-lyle has quit IRC | 18:22 | |
*** chergd has joined #openstack-keystone | 18:27 | |
*** tesseract has quit IRC | 18:28 | |
*** lamt has quit IRC | 18:30 | |
*** openstackgerrit has quit IRC | 18:33 | |
*** AlexeyAbashkin has joined #openstack-keystone | 18:36 | |
*** openstackgerrit has joined #openstack-keystone | 18:38 | |
openstackgerrit | Suramya proposed openstack/keystone master: Consolidate Keystone docs: federated-identity.rst https://review.openstack.org/547102 | 18:38 |
*** AlexeyAbashkin has quit IRC | 18:40 | |
openstackgerrit | Suramya proposed openstack/keystone master: Consolidate Keystone docs: admin/identity-service-api-protection.rst https://review.openstack.org/547104 | 18:51 |
*** links has quit IRC | 19:11 | |
*** ayushin78 has joined #openstack-keystone | 19:32 | |
*** timburke_ is now known as timburke | 19:32 | |
*** ayushin78 has quit IRC | 19:33 | |
*** oikiki has quit IRC | 19:37 | |
*** oikiki has joined #openstack-keystone | 19:49 | |
*** raildo has quit IRC | 20:04 | |
*** Supun has quit IRC | 20:21 | |
*** jmlowe has quit IRC | 20:50 | |
*** r-daneel has quit IRC | 21:06 | |
*** r-daneel has joined #openstack-keystone | 21:06 | |
*** r-daneel_ has joined #openstack-keystone | 21:13 | |
*** r-daneel has quit IRC | 21:13 | |
*** r-daneel_ is now known as r-daneel | 21:13 | |
*** pcaruana has quit IRC | 21:37 | |
*** Suramya has quit IRC | 21:38 | |
*** LamT has joined #openstack-keystone | 21:40 | |
*** dave-mcc_ has joined #openstack-keystone | 21:47 | |
gagehugo | lbragstad is commit message supposed to be 70 or 80 chars, I get confused | 21:47 |
lbragstad | i thought it was supposed to be 70 characters | 21:47 |
lbragstad | but i also think that is a suggestion | 21:47 |
gagehugo | yeah I'm not sure | 21:48 |
gagehugo | I think my terminal wraps it for me automagically so I'm spoiled | 21:48 |
*** dave-mccowan has quit IRC | 21:49 | |
lbragstad | yeah - i should add that to my dotfiles | 22:00 |
lbragstad | gagehugo i'm not sure that assertValidKey assertion is right... | 22:03 |
lbragstad | or it's misleading | 22:03 |
*** r-daneel_ has joined #openstack-keystone | 22:05 | |
gagehugo | assertValidFernetKey()? | 22:05 |
gagehugo | oh no it's not | 22:05 |
lbragstad | it looks like its written to validate a single key | 22:05 |
lbragstad | but it accepts and assumes a list? | 22:06 |
lbragstad | i have a patch locally that fixes it if you want it | 22:06 |
*** r-daneel has quit IRC | 22:06 | |
*** r-daneel_ is now known as r-daneel | 22:06 | |
*** nixi_girl has joined #openstack-keystone | 22:08 | |
lbragstad | yeah - it only ever validates the first key in the list | 22:08 |
lbragstad | not all of them | 22:08 |
openstackgerrit | Lance Bragstad proposed openstack/keystone master: Make assertValidFernetKey assertion more robust https://review.openstack.org/547154 | 22:12 |
lbragstad | gagehugo ^ | 22:12 |
*** nixi_girl has quit IRC | 22:15 | |
openstackgerrit | Lance Bragstad proposed openstack/keystone master: Remove unnecessary config overrides from fernet tests https://review.openstack.org/547156 | 22:18 |
openstackgerrit | Lance Bragstad proposed openstack/keystone master: Remove unnecessary config overrides from fernet tests https://review.openstack.org/547156 | 22:22 |
*** itlinux has quit IRC | 22:30 | |
*** rcernin has joined #openstack-keystone | 22:38 | |
*** dave-mcc_ has quit IRC | 22:44 | |
gagehugo | lbragstad looking | 22:51 |
*** hoonetorg has quit IRC | 22:56 | |
*** idlemind has joined #openstack-keystone | 23:02 | |
*** jmlowe has joined #openstack-keystone | 23:08 | |
*** hoonetorg has joined #openstack-keystone | 23:11 | |
openstackgerrit | Lance Bragstad proposed openstack/keystone-specs master: Add specification for a capabilities API https://review.openstack.org/547162 | 23:13 |
gagehugo | lbragstad ah the keyrepo gets set in TestCase | 23:13 |
gagehugo | https://github.com/openstack/keystone/blob/master/keystone/tests/unit/core.py#L657-L663 | 23:13 |
gagehugo | so it's redundant in those cases | 23:14 |
lbragstad | yeah - even still.. i wonder if we still need it | 23:15 |
lbragstad | since we'll be queuing off the default configuration? | 23:15 |
lbragstad | which is always 3 | 23:15 |
lbragstad | i think the fernet utils stuff pulls the values from config | 23:16 |
lbragstad | ah - looks like keystone.tests.unit.token.test_fernet_provider.TestLoadKeys.test_non_numeric_files depends on it being set in the TestCase | 23:18 |
openstackgerrit | Lance Bragstad proposed openstack/keystone master: Remove unnecessary config overrides from fernet tests https://review.openstack.org/547156 | 23:19 |
lbragstad | fixed up the commit message ^ | 23:19 |
gagehugo | cool | 23:21 |
lbragstad | good call on the TestCase bit | 23:23 |
*** itlinux has joined #openstack-keystone | 23:29 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!