| *** jessegler has quit IRC | 00:06 | |
| *** rcernin has joined #openstack-keystone | 00:21 | |
| openstackgerrit | zhongshengping proposed openstack/oslo.policy master: Follow the new PTI for document build https://review.openstack.org/549088 | 00:26 |
|---|---|---|
| *** AlexeyAbashkin has joined #openstack-keystone | 00:32 | |
| *** odyssey4me has quit IRC | 00:34 | |
| *** odyssey4me has joined #openstack-keystone | 00:35 | |
| *** AlexeyAbashkin has quit IRC | 00:36 | |
| *** harlowja has quit IRC | 00:49 | |
| *** Dinesh_Bhor has joined #openstack-keystone | 00:49 | |
| *** david-lyle has joined #openstack-keystone | 01:02 | |
| *** itlinux has joined #openstack-keystone | 01:13 | |
| *** dtruong_ has joined #openstack-keystone | 01:14 | |
| *** dtruong has quit IRC | 01:17 | |
| *** oikiki has joined #openstack-keystone | 01:40 | |
| *** gongysh has joined #openstack-keystone | 01:44 | |
| ayoung | lbragstad, what if we made it a configurable if system implied project scope? So that people that want a global scope to manage everything can have it, and people that want to lock down that an operator needs a token scoped to a project can do that? | 01:47 |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Add yaml-loaded filesystem catalog backend https://review.openstack.org/483514 | 01:47 |
| ayoung | It feels like another inference rule, just like role implies role, but here it is scope implies scope. | 01:48 |
| *** oikiki has quit IRC | 01:49 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 01:52 | |
| *** oikiki has joined #openstack-keystone | 01:56 | |
| *** AlexeyAbashkin has quit IRC | 01:56 | |
| *** felipemonteiro has joined #openstack-keystone | 01:59 | |
| *** gongysh has quit IRC | 02:11 | |
| lbragstad | then can't they just not set enforce_scope and provide their own custom policies? | 02:33 |
| lbragstad | and they can maintain it | 02:33 |
| *** germs has quit IRC | 02:33 | |
| lbragstad | they get all of the old broken behavior | 02:33 |
| lbragstad | but we don't have to build that backdoor into our API | 02:34 |
| *** germs has joined #openstack-keystone | 02:35 | |
| *** germs has quit IRC | 02:35 | |
| *** germs has joined #openstack-keystone | 02:35 | |
| lbragstad | wxy: just fyi - i did get https://review.openstack.org/#/c/545450/ passing (finally), if you have any ideas on how to break that up or make it better, i'm all ears | 02:44 |
| wxy | lbragstad: cool. I'd liek to test and review it now. BTW, I have finished the limit description and catalog yaml backend patches last few days. | 02:46 |
| lbragstad | oh - nice | 02:47 |
| lbragstad | i'll review those tomorrow | 02:47 |
| lbragstad | eandersson: might be interested in the yaml catalog backend one | 02:47 |
| wxy | lbragstad: eandersson : it's here https://review.openstack.org/#/c/483514/ | 02:48 |
| lbragstad | awesome - i'll take a look at that tomorrow | 02:49 |
| *** dangtrinhnt has joined #openstack-keystone | 02:52 | |
| *** felipemonteiro has quit IRC | 02:52 | |
| *** jmlowe has joined #openstack-keystone | 02:52 | |
| *** oikiki has quit IRC | 02:56 | |
| *** itlinux has quit IRC | 02:56 | |
| *** oikiki has joined #openstack-keystone | 03:03 | |
| *** oikiki has quit IRC | 03:04 | |
| *** oikiki has joined #openstack-keystone | 03:09 | |
| *** itlinux has joined #openstack-keystone | 03:09 | |
| openstackgerrit | Adrian Turjak proposed openstack/keystone-specs master: Add spec for partial auth tokens https://review.openstack.org/553670 | 03:29 |
| *** r-daneel has quit IRC | 03:36 | |
| *** nicolasbock has quit IRC | 03:40 | |
| adriant | lbragstad: ^ | 03:47 |
| adriant | also kmalloc you'll probably also be interested | 03:47 |
| *** oikiki has quit IRC | 03:51 | |
| *** r-daneel has joined #openstack-keystone | 03:53 | |
| *** r-daneel_ has joined #openstack-keystone | 03:55 | |
| *** r-daneel has quit IRC | 03:57 | |
| *** r-daneel_ is now known as r-daneel | 03:57 | |
| openstackgerrit | zhongshengping proposed openstack/oslo.policy master: Follow the new PTI for document build https://review.openstack.org/549088 | 03:58 |
| *** oikiki has joined #openstack-keystone | 04:02 | |
| *** germs has quit IRC | 04:05 | |
| *** germs has joined #openstack-keystone | 04:05 | |
| *** germs has quit IRC | 04:05 | |
| *** germs has joined #openstack-keystone | 04:05 | |
| *** germs has quit IRC | 04:06 | |
| *** sapd has joined #openstack-keystone | 04:07 | |
| *** oikiki has quit IRC | 04:08 | |
| *** Dinesh_Bhor has quit IRC | 04:09 | |
| sapd | HI everyone. I'm have a problem with keystone (queens release) with LDAP backend. I have a LDAP Server It was integrated with keystone (juno), It stores user, project, role. But now, in recently release, there is an use case for store project and role in SQL Backend. How I can re-use this LDAP? please help me. | 04:09 |
| wxy | sapd, unfortunately, the LDAP backend for project and role have been removed a few releases ago. | 04:14 |
| wxy | sapd: in Mitaka I think. | 04:14 |
| wxy | sapd: you should migrate the project and role information in your LDAP to a SQL backend and rebuild the assignment. | 04:17 |
| sapd | wxy: I'm trying. I inserted a project record into table project. But When I type "openstack token issue", The error is can't find that project. | 04:19 |
| *** Dinesh_Bhor has joined #openstack-keystone | 04:21 | |
| *** links has joined #openstack-keystone | 04:32 | |
| wxy | sapd: and the project's domain is correct? | 04:32 |
| *** harlowja has joined #openstack-keystone | 04:35 | |
| sapd | wxy: Does kesytone now can't create /update on LDAP? | 04:36 |
| sapd | sorry typo: s/kesytone/keystone | 04:36 |
| eandersson | lbragstad, wxy I'll try to take a look tomorrow | 04:41 |
| eandersson | Still need to figure out if we should migrate to sql or yaml in the future :D | 04:43 |
| *** prometheanfire has joined #openstack-keystone | 04:56 | |
| prometheanfire | new oslo-db seems to hit keystone https://review.openstack.org/553002 | 04:56 |
| prometheanfire | consistantly | 04:56 |
| *** zhurong has joined #openstack-keystone | 05:18 | |
| *** harlowja has quit IRC | 05:22 | |
| *** Dinesh_Bhor has quit IRC | 06:00 | |
| wxy | sapd: yeah it's readonly | 06:01 |
| sapd | wxy: my customers credentials are stored in LDAP now :( | 06:02 |
| sapd | I want to migrate to new openstack cluster with latest version | 06:02 |
| *** oikiki has joined #openstack-keystone | 06:03 | |
| *** oikiki has quit IRC | 06:04 | |
| *** oikiki has joined #openstack-keystone | 06:06 | |
| *** germs has joined #openstack-keystone | 06:06 | |
| *** germs has quit IRC | 06:06 | |
| *** germs has joined #openstack-keystone | 06:06 | |
| *** germs has quit IRC | 06:11 | |
| wxy | prometheanfire: seems keystone missed testresources and testscenarios in test-requirements.txt after the patch: https://review.openstack.org/#/c/531577/ | 06:32 |
| *** AlexeyAbashkin has joined #openstack-keystone | 06:36 | |
| *** gongysh has joined #openstack-keystone | 06:43 | |
| *** jaosorior has joined #openstack-keystone | 06:50 | |
| *** AlexeyAbashkin has quit IRC | 06:51 | |
| *** sticker has quit IRC | 07:05 | |
| *** rcernin has quit IRC | 07:20 | |
| *** martinus__ has joined #openstack-keystone | 07:37 | |
| *** rodrigod` is now known as rodrigods | 07:43 | |
| *** itlinux has quit IRC | 07:46 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 07:50 | |
| *** zhurong has quit IRC | 07:56 | |
| cmurphy | prometheanfire: wxy i'm guessing we lost it in https://review.openstack.org/#/c/550842/ | 08:05 |
| *** oikiki has quit IRC | 08:06 | |
| *** germs has joined #openstack-keystone | 08:08 | |
| *** germs has quit IRC | 08:08 | |
| *** germs has joined #openstack-keystone | 08:08 | |
| cmurphy | wxy: you have a patch on the way or shall i? | 08:10 |
| wxy | cmurphy: no, i'm working on another bug. | 08:10 |
| cmurphy | wxy: kk | 08:11 |
| wxy | cmurphy: yeah, seems oslo.db just install keystone's test-requirements, instead of global one. | 08:11 |
| *** hoonetorg has quit IRC | 08:11 | |
| *** germs has quit IRC | 08:13 | |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Fix test erro under py3.6 https://review.openstack.org/553712 | 08:14 |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Fix assert test error under py3.6 https://review.openstack.org/553712 | 08:17 |
| *** hoonetorg has joined #openstack-keystone | 08:27 | |
| *** tesseract has joined #openstack-keystone | 08:30 | |
| openstackgerrit | Colleen Murphy proposed openstack/keystone master: Add testscenarios and testresources to test reqs https://review.openstack.org/553716 | 08:36 |
| cmurphy | prometheanfire: ^ though I kind of want to check in with mordred and the oslo.db people on it, I almost think removing those from oslo.db's requirements might have been wrong or else we're not supposed to be using oslo_db.sqlalchemy.test_fixtures | 08:38 |
| openstackgerrit | Nguyen Hai proposed openstack/keystone-specs master: Change keystone-specs webpage from oslosphinx to openstackdocstheme https://review.openstack.org/551974 | 08:57 |
| *** exarr has quit IRC | 09:03 | |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Fix assert test error under py3.6 https://review.openstack.org/553712 | 09:04 |
| *** jistr is now known as jistr|mtg | 09:24 | |
| openstackgerrit | Merged openstack/keystone master: Update links in README https://review.openstack.org/551685 | 09:32 |
| *** annp has joined #openstack-keystone | 09:47 | |
| openstackgerrit | Merged openstack/oslo.policy master: Update links in README https://review.openstack.org/551116 | 09:56 |
| *** germs has joined #openstack-keystone | 10:09 | |
| *** germs has quit IRC | 10:14 | |
| openstackgerrit | Merged openstack/keystoneauth master: Update links in README https://review.openstack.org/551694 | 10:17 |
| *** sapd has quit IRC | 10:18 | |
| openstackgerrit | Alvaro Lopez Garcia proposed openstack/keystone-specs master: OpenID Connect improved support https://review.openstack.org/373983 | 10:27 |
| *** andymccr_ is now known as andymccr | 10:27 | |
| openstackgerrit | Merged openstack/python-keystoneclient master: Update links in README https://review.openstack.org/551710 | 10:27 |
| *** nicolasbock has joined #openstack-keystone | 10:36 | |
| *** jistr|mtg is now known as jistr | 11:07 | |
| openstackgerrit | Merged openstack/keystonemiddleware master: Update home-page url https://review.openstack.org/547846 | 11:08 |
| *** mvk has quit IRC | 11:19 | |
| *** mvk has joined #openstack-keystone | 11:34 | |
| openstackgerrit | Merged openstack/keystone master: Use OSC in application credential documentation https://review.openstack.org/543644 | 12:00 |
| openstackgerrit | Merged openstack/keystone master: Fixing multi-region support in templated v3 catalog https://review.openstack.org/482364 | 12:00 |
| *** odyssey4me has quit IRC | 12:04 | |
| *** odyssey4me has joined #openstack-keystone | 12:04 | |
| *** raildo has joined #openstack-keystone | 12:05 | |
| *** germs has joined #openstack-keystone | 12:10 | |
| *** germs has quit IRC | 12:10 | |
| *** germs has joined #openstack-keystone | 12:10 | |
| *** edmondsw has joined #openstack-keystone | 12:12 | |
| *** germs has quit IRC | 12:14 | |
| *** annp has quit IRC | 12:24 | |
| *** panbalag has joined #openstack-keystone | 12:41 | |
| *** gongysh has quit IRC | 12:42 | |
| *** qbiNAMRR7 has joined #openstack-keystone | 12:45 | |
| *** gongysh has joined #openstack-keystone | 12:51 | |
| *** gongysh has quit IRC | 12:57 | |
| *** dave-mccowan has joined #openstack-keystone | 12:59 | |
| *** gyankum has joined #openstack-keystone | 13:02 | |
| *** dave-mcc_ has joined #openstack-keystone | 13:04 | |
| *** dave-mccowan has quit IRC | 13:04 | |
| *** BlackDex has quit IRC | 13:29 | |
| *** r-daneel has quit IRC | 13:34 | |
| *** felipemonteiro has joined #openstack-keystone | 13:44 | |
| *** david-lyle has quit IRC | 13:45 | |
| *** mvk has quit IRC | 13:55 | |
| knikolla | o/ | 13:56 |
| lbragstad | cmurphy: i assume we still need v | 13:56 |
| lbragstad | https://review.openstack.org/#/c/553716/1 | 13:56 |
| lbragstad | morning knikolla | 13:56 |
| *** links has quit IRC | 13:56 | |
| cmurphy | lbragstad: yeah it's for https://review.openstack.org/553002 | 13:57 |
| lbragstad | cool | 13:58 |
| lbragstad | thanks for digging into that cmurphy | 13:58 |
| cmurphy | was mostly wxy actually | 13:59 |
| *** BlackDex has joined #openstack-keystone | 14:02 | |
| lbragstad | wxy: cmurphy awesome - thanks to both of you then :) | 14:03 |
| hrybacki | lbragstad: I tried to send share a copy of our recording from Tuesday by email. BlueJeans has a wonky interface (surprise). Lemme know if that gets to you! | 14:03 |
| lbragstad | sounds good | 14:04 |
| *** germs has joined #openstack-keystone | 14:10 | |
| *** germs has quit IRC | 14:10 | |
| *** germs has joined #openstack-keystone | 14:10 | |
| *** germs has quit IRC | 14:15 | |
| lbragstad | the community goal doesn't say and gcb isn't online, but does anyone know if the goal requires *all* config options to be moved over? https://governance.openstack.org/tc/goals/rocky/enable-mutable-configuration.html | 14:15 |
| lbragstad | or just a specific few? | 14:15 |
| cmurphy | lbragstad: just debug logging | 14:15 |
| cmurphy | i thought it did say... | 14:15 |
| cmurphy | completion criteria - "Each project service could be turned on/off debug logging without restart" | 14:16 |
| lbragstad | ok - it referenced that as an example in the description - so i wasn't sure if it tended to be more inclusive than debug logging | 14:16 |
| jroll | yes, just debug | 14:17 |
| jroll | other options may get complicated :) | 14:17 |
| knikolla | oh, i like that! | 14:17 |
| lbragstad | yeah - that's what i was thinking | 14:17 |
| *** felipemonteiro_ has joined #openstack-keystone | 14:17 | |
| lbragstad | i also see that nova went through and implemented this for live migration options | 14:17 |
| lbragstad | which are also referenced in the goal | 14:18 |
| lbragstad | as examples | 14:18 |
| knikolla | i can take up the mutable debug option in keystone. | 14:18 |
| lbragstad | knikolla: that'd be awesome | 14:18 |
| gagehugo | o/ | 14:19 |
| knikolla | lbragstad: realized i didn't sign up for anything yet :) | 14:19 |
| lbragstad | knikolla: https://storyboard.openstack.org/#!/story/2001545 | 14:19 |
| lbragstad | ^ that should be tracking ownership | 14:19 |
| *** d0ugal has quit IRC | 14:19 | |
| *** felipemonteiro has quit IRC | 14:20 | |
| *** felipemonteiro__ has joined #openstack-keystone | 14:21 | |
| lbragstad | cc hrybacki ^ | 14:22 |
| *** dansmith is now known as superdan | 14:22 | |
| hrybacki | lbragstad: wonderful -- my question has been answered before I could ask it :) Thanks for jumping on that knikolla ! | 14:23 |
| openstackgerrit | Gage Hugo proposed openstack/keystone master: Fix tags and tags-any filter interaction https://review.openstack.org/553108 | 14:23 |
| lbragstad | at first glance - it looks relatively low impacting | 14:23 |
| lbragstad | if it's just contained to debug logging | 14:23 |
| *** r-daneel has joined #openstack-keystone | 14:23 | |
| lbragstad | as opposed to all configuration options | 14:23 |
| openstackgerrit | Colleen Murphy proposed openstack/keystone master: Add note to keystone-manage bootstrap doc https://review.openstack.org/553799 | 14:25 |
| cmurphy | i saw three different bug reports for this this week ^ lol | 14:25 |
| *** felipemonteiro_ has quit IRC | 14:25 | |
| hrybacki | congrats on the talk cmurphy | 14:25 |
| cmurphy | ty | 14:25 |
| *** gyankum has quit IRC | 14:29 | |
| lbragstad | didn't we have a developer doc for setting up federation with devstack? | 14:30 |
| cmurphy | i have a blog post | 14:30 |
| cmurphy | but never put it into the docs | 14:30 |
| lbragstad | hmm | 14:30 |
| lbragstad | i swear we had one for our docs at one point.. but i'm also not on my second cup of coffee, so i could be imagining things | 14:31 |
| lbragstad | cc rodrigods ^ | 14:31 |
| lbragstad | knikolla: just fyi - the release meeting starts in 29 minutes if you're interested | 14:32 |
| knikolla | lbragstad: thanks for the reminder! | 14:34 |
| *** aning_ has joined #openstack-keystone | 14:35 | |
| *** aning has quit IRC | 14:38 | |
| *** aning has joined #openstack-keystone | 14:40 | |
| prometheanfire | cmurphy: want to abandon that patch since they are adding it? we can skip this release of oslo.db in the mean time | 14:41 |
| cmurphy | prometheanfire: sure thing | 14:41 |
| gagehugo | lbragstad https://bugs.launchpad.net/heat/+bug/1738372 | 14:42 |
| openstack | Launchpad bug 1738372 in OpenStack Heat "ocata devstack checking out Heat master" [Undecided,New] | 14:42 |
| *** aning_ has quit IRC | 14:43 | |
| *** felipemonteiro__ has quit IRC | 14:43 | |
| *** felipemonteiro__ has joined #openstack-keystone | 14:44 | |
| gagehugo | think the issue is in heat's devstack plugin for ocata | 14:45 |
| lbragstad | gagehugo: oh - nice, thanks for updating! | 14:47 |
| gagehugo | that took me too long to figure out :( | 14:47 |
| *** links has joined #openstack-keystone | 14:48 | |
| *** BlackDex has quit IRC | 14:55 | |
| *** r-daneel has quit IRC | 15:01 | |
| *** r-daneel has joined #openstack-keystone | 15:01 | |
| *** nicolasbock has quit IRC | 15:05 | |
| *** melwitt is now known as jgwentworth | 15:08 | |
| *** BlackDex has joined #openstack-keystone | 15:16 | |
| *** aning_ has joined #openstack-keystone | 15:26 | |
| *** aning has quit IRC | 15:28 | |
| *** aning has joined #openstack-keystone | 15:32 | |
| *** links has quit IRC | 15:32 | |
| *** aning_ has quit IRC | 15:34 | |
| *** d0ugal has joined #openstack-keystone | 15:36 | |
| *** d0ugal has quit IRC | 15:36 | |
| *** d0ugal has joined #openstack-keystone | 15:36 | |
| *** dave-mcc_ is now known as dave-mccowan | 15:40 | |
| *** AlexeyAbashkin has quit IRC | 15:48 | |
| *** r-daneel has quit IRC | 15:53 | |
| *** gmann__ has joined #openstack-keystone | 15:55 | |
| *** wlmbasson_ has joined #openstack-keystone | 15:55 | |
| *** Exhar_ has joined #openstack-keystone | 15:57 | |
| *** vegarl_ has joined #openstack-keystone | 15:58 | |
| *** promethe1nfire has joined #openstack-keystone | 15:58 | |
| *** prometheanfire has quit IRC | 15:59 | |
| *** promethe1nfire is now known as prometheanfire | 15:59 | |
| *** andreykurilin_ has joined #openstack-keystone | 16:01 | |
| *** jistr_ has joined #openstack-keystone | 16:01 | |
| *** rodrigod` has joined #openstack-keystone | 16:01 | |
| *** szaher has quit IRC | 16:02 | |
| *** hugokuo_ has joined #openstack-keystone | 16:02 | |
| *** rodrigods has quit IRC | 16:03 | |
| *** lifeless has quit IRC | 16:03 | |
| *** mattoliverau has quit IRC | 16:03 | |
| *** Exhar has quit IRC | 16:03 | |
| *** wlmbasson has quit IRC | 16:03 | |
| *** gmann_ has quit IRC | 16:03 | |
| *** knikolla has quit IRC | 16:03 | |
| *** andreykurilin has quit IRC | 16:03 | |
| *** aloga has quit IRC | 16:03 | |
| *** jistr has quit IRC | 16:03 | |
| *** vegarl has quit IRC | 16:03 | |
| *** hugokuo has quit IRC | 16:03 | |
| *** timburke has quit IRC | 16:03 | |
| *** gmann__ is now known as gmann_ | 16:03 | |
| *** wlmbasson_ is now known as wlmbasson | 16:03 | |
| *** hugokuo_ is now known as hugokuo | 16:03 | |
| *** harlowja has joined #openstack-keystone | 16:03 | |
| *** timburke has joined #openstack-keystone | 16:04 | |
| *** dtruong_ has quit IRC | 16:04 | |
| *** jistr_ is now known as jistr | 16:04 | |
| *** dtruong has joined #openstack-keystone | 16:05 | |
| *** lifeless has joined #openstack-keystone | 16:05 | |
| *** spilla has joined #openstack-keystone | 16:05 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Mark the implied role API as stable https://review.openstack.org/550611 | 16:06 |
| *** knikolla has joined #openstack-keystone | 16:10 | |
| *** aloga has joined #openstack-keystone | 16:11 | |
| *** germs has joined #openstack-keystone | 16:11 | |
| *** germs has quit IRC | 16:11 | |
| *** germs has joined #openstack-keystone | 16:11 | |
| *** germs has quit IRC | 16:16 | |
| *** mattoliverau has joined #openstack-keystone | 16:18 | |
| *** felipemonteiro_ has joined #openstack-keystone | 16:35 | |
| *** felipemonteiro__ has quit IRC | 16:38 | |
| *** felipemonteiro_ has quit IRC | 16:42 | |
| *** d0ugal has quit IRC | 16:45 | |
| *** jdennis has quit IRC | 16:54 | |
| *** jdennis has joined #openstack-keystone | 16:57 | |
| *** harlowja has quit IRC | 17:05 | |
| *** gyee has joined #openstack-keystone | 17:05 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 17:17 | |
| *** AlexeyAbashkin has quit IRC | 17:22 | |
| *** jaosorior has quit IRC | 17:28 | |
| *** felipemonteiro_ has joined #openstack-keystone | 17:35 | |
| ayoung | jgr, lbragstad http://adam.younglogic.com/2018/03/generating-url-patterns/ we can prepopulat the URL patterns for whitelist at least for Nova and Keystone with existing tooling. | 17:37 |
| eandersson | lbragstad, would it be possible to back port the templated fix to at least queens? | 17:41 |
| lbragstad | eandersson: it does contain an interface change - https://review.openstack.org/#/c/482364/ | 17:42 |
| lbragstad | so i'm not sure how backportable that is since it's changing a contract | 17:42 |
| lbragstad | cc kmalloc | 17:42 |
| lbragstad | if that is a problem - we could revert the patch you had, and just keep the logic in keystone/catalog/backends/base.py and do the fix there | 17:43 |
| lbragstad | (so that we're not changing the interace) | 17:44 |
| eandersson | Ah I see | 17:44 |
| lbragstad | and that might be more backportable | 17:44 |
| eandersson | tbh we can just backport it manually as well | 17:44 |
| lbragstad | and then you can repropose the proper interface fix | 17:44 |
| eandersson | (for our deployoment) | 17:44 |
| eandersson | Since I doubt anyone else is using templated in it's current state :p | 17:44 |
| lbragstad | yeah - that's also true | 17:44 |
| *** oikiki has joined #openstack-keystone | 17:45 | |
| lbragstad | i don't think i've had to do a backport like this for a long time... | 17:45 |
| lbragstad | where it's actually changing the interface | 17:45 |
| eandersson | Either way, glad this is getting fixed (with yaml) | 17:50 |
| eandersson | Filebased catalog is so easy for deployments | 17:51 |
| openstackgerrit | Merged openstack/keystone master: Fix assert test error under py3.6 https://review.openstack.org/553712 | 17:56 |
| openstackgerrit | Merged openstack/keystone master: Add note to keystone-manage bootstrap doc https://review.openstack.org/553799 | 17:56 |
| *** rodrigod` has quit IRC | 17:57 | |
| *** rodrigod` has joined #openstack-keystone | 17:57 | |
| *** panbalag has quit IRC | 17:58 | |
| *** r-daneel has joined #openstack-keystone | 17:59 | |
| *** harlowja has joined #openstack-keystone | 18:01 | |
| *** harlowja_ has joined #openstack-keystone | 18:04 | |
| *** harlowja has quit IRC | 18:06 | |
| *** ayoung has quit IRC | 18:08 | |
| *** germs has joined #openstack-keystone | 18:12 | |
| *** germs has quit IRC | 18:12 | |
| *** germs has joined #openstack-keystone | 18:12 | |
| *** germs has quit IRC | 18:17 | |
| *** felipemonteiro__ has joined #openstack-keystone | 18:20 | |
| *** felipemonteiro_ has quit IRC | 18:23 | |
| *** oikiki has quit IRC | 18:31 | |
| *** felipemonteiro_ has joined #openstack-keystone | 18:32 | |
| *** felipemonteiro__ has quit IRC | 18:35 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 18:50 | |
| *** oikiki has joined #openstack-keystone | 18:53 | |
| openstackgerrit | Gage Hugo proposed openstack/keystone master: Refactor list_users and related functions https://review.openstack.org/553880 | 18:54 |
| *** felipemonteiro_ has quit IRC | 18:54 | |
| *** felipemonteiro_ has joined #openstack-keystone | 18:54 | |
| *** AlexeyAbashkin has quit IRC | 18:54 | |
| *** pcichy has joined #openstack-keystone | 18:59 | |
| *** tesseract has quit IRC | 19:00 | |
| *** felipemonteiro__ has joined #openstack-keystone | 19:13 | |
| *** felipemonteiro__ has quit IRC | 19:16 | |
| *** felipemonteiro__ has joined #openstack-keystone | 19:17 | |
| *** felipemonteiro_ has quit IRC | 19:17 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Add logging for xmlsec1 installation https://review.openstack.org/553592 | 19:23 |
| lbragstad | gyee: ^ | 19:23 |
| openstackgerrit | Nicolas Helgeson proposed openstack/keystone master: Extend comparator support for project list by tags https://review.openstack.org/523499 | 19:24 |
| lbragstad | in case you have a k2k environment still up to test that on | 19:24 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Add logging for xmlsec1 installation https://review.openstack.org/553592 | 19:26 |
| *** pcichy has quit IRC | 19:31 | |
| *** pcichy has joined #openstack-keystone | 19:31 | |
| *** pcichy has quit IRC | 19:34 | |
| *** r-daneel_ has joined #openstack-keystone | 19:45 | |
| *** r-daneel has quit IRC | 19:47 | |
| *** r-daneel_ is now known as r-daneel | 19:47 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 19:50 | |
| *** AlexeyAbashkin has quit IRC | 19:55 | |
| openstackgerrit | Adrian Turjak proposed openstack/keystone-specs master: Add spec for partial auth tokens https://review.openstack.org/553670 | 20:00 |
| *** felipemonteiro_ has joined #openstack-keystone | 20:10 | |
| *** germs has joined #openstack-keystone | 20:13 | |
| *** felipemonteiro__ has quit IRC | 20:14 | |
| *** germs has quit IRC | 20:18 | |
| gyee | lbragstad: thanks man! | 20:24 |
| openstackgerrit | Adrian Turjak proposed openstack/keystone-specs master: Add spec for partial auth tokens https://review.openstack.org/553670 | 20:25 |
| lbragstad | gyee: yessir | 20:26 |
| *** prometheanfire has left #openstack-keystone | 20:28 | |
| gyee | lbragstad: I'll test that patch later in the day. Working on the Ironic stuff right now. It's giving me headache. | 20:29 |
| *** oikiki has quit IRC | 20:35 | |
| adriant | lbragstad: I've cleaned up that spec a bit, but I hope it all makes sense :) | 20:41 |
| lbragstad | gyee: well - whenever you need a break, it'll be waiting for you | 20:41 |
| lbragstad | adriant: sounds good - i can take a look | 20:41 |
| adriant | if you think it is worth me doing so, I can try to attend the next Keystone team meeting as well | 20:41 |
| lbragstad | i need to queue up spec reviews for next week anyawy | 20:41 |
| lbragstad | sure - that might help people walk through it | 20:42 |
| lbragstad | we did move the meeting | 20:42 |
| lbragstad | so it's at 1600 utc | 20:42 |
| lbragstad | on tuesday now | 20:42 |
| adriant | I feel bad for how much MFA has stalled, so I hope with this spec we can actually get that work finished and useable :P | 20:42 |
| adriant | cool... that's like 4-5am my time, lemme check | 20:42 |
| adriant | 3am my time | 20:42 |
| adriant | hmm | 20:43 |
| *** oikiki has joined #openstack-keystone | 20:45 | |
| *** raildo has quit IRC | 20:47 | |
| *** oikiki has quit IRC | 20:51 | |
| *** panbalag has joined #openstack-keystone | 20:55 | |
| openstackgerrit | Nicolas Helgeson proposed openstack/keystone master: Extend comparator support for project list by tags https://review.openstack.org/523499 | 20:56 |
| lbragstad | adriant: :( | 20:57 |
| lbragstad | adriant: we could also just do it during office hours | 20:57 |
| lbragstad | which is like 16:00 - 19:00 | 20:58 |
| lbragstad | still early | 20:58 |
| lbragstad | but not as bad | 20:58 |
| lbragstad | iff that works for you, otherwise we can line up something else that's a better time frame | 20:58 |
| lbragstad | i'm happy to do either | 20:58 |
| *** dave-mccowan has quit IRC | 21:01 | |
| knikolla | lbragstad: the mutable-config option is going to be tricky for us. as we're not running through oslo.service and therefore don't get the notification on file change | 21:01 |
| lbragstad | hmmm | 21:02 |
| lbragstad | so we have a dependency on moving over to oslo.service | 21:02 |
| adriant | I'll have to see, I sometimes do stay up quite late for such upstream meetings. Just means I have to make my coworkers aware I'll mostly work from home., the spec itself is fairly self explanatory, and I can always field questions in the review, but chatting in person with everyone is always useful :) | 21:03 |
| *** edmondsw has quit IRC | 21:03 | |
| knikolla | lbragstad: i think that's not what we want. | 21:04 |
| lbragstad | adriant: totally your call, like i said, happy to organize a time with the team that works for your schedule | 21:04 |
| lbragstad | knikolla: we don't want to move to oslo.service? | 21:04 |
| *** felipemonteiro_ has quit IRC | 21:05 | |
| knikolla | lbragstad: AFAIK oslo.service is for running a service outside of a webserver like apache + mod_wsgi or uwsgi | 21:06 |
| jroll | you just need to handle SIGHUP somehow, oslo.service isn't a hard dependency here | 21:06 |
| jroll | (afaik) | 21:07 |
| jroll | yeah, there's an oslo.config method to reload config: https://docs.openstack.org/oslo.config/latest/reference/mutable.html#calling-mutate-config-files | 21:08 |
| jroll | there's oslo.service magic to catch HUP and call that, but keystone could do it on its own | 21:08 |
| knikolla | http://modwsgi.readthedocs.io/en/develop/configuration-directives/WSGIRestrictSignal.html | 21:09 |
| jroll | oh, interesting :/ | 21:10 |
| jroll | this feels like it should be raised on the ML, as one of the goals already completed was to enable running everything as a wsgi app :) | 21:10 |
| knikolla | yeah, agree | 21:11 |
| jroll | knikolla: I can send something if you aren't already | 21:15 |
| lbragstad | interesting | 21:15 |
| lbragstad | knikolla: good catch | 21:15 |
| *** oikiki has joined #openstack-keystone | 21:16 | |
| *** panbalag has quit IRC | 21:17 | |
| knikolla | jroll: please do, i was just wrapping up for the week. | 21:18 |
| jroll | cool, on it | 21:18 |
| knikolla | jroll: thanks :) | 21:19 |
| jroll | knikolla: no problem :) | 21:20 |
| lbragstad | jroll: thanks for being available for questions | 21:22 |
| jroll | lbragstad: I just try to be helpful in channels I mostly lurk in :) | 21:23 |
| lbragstad | jroll: you have a bunch of context on the goal, did ironic just go through some of this at all? | 21:25 |
| jroll | lbragstad: I think we did it while I was out of openstack, but I remember reading the code before that at some point | 21:26 |
| lbragstad | ah - that makes sense | 21:26 |
| *** AlexeyAbashkin has joined #openstack-keystone | 21:29 | |
| *** oikiki has quit IRC | 21:30 | |
| *** NM has quit IRC | 21:30 | |
| *** itlinux has joined #openstack-keystone | 21:31 | |
| *** AlexeyAbashkin has quit IRC | 21:34 | |
| *** d0ugal has joined #openstack-keystone | 21:47 | |
| *** d0ugal has quit IRC | 21:47 | |
| *** d0ugal has joined #openstack-keystone | 21:47 | |
| *** itlinux has quit IRC | 21:48 | |
| *** itlinux has joined #openstack-keystone | 22:03 | |
| *** aloga has quit IRC | 22:07 | |
| *** knikolla has quit IRC | 22:07 | |
| *** lifeless has quit IRC | 22:07 | |
| *** Krenair has quit IRC | 22:07 | |
| *** aloga has joined #openstack-keystone | 22:07 | |
| *** knikolla has joined #openstack-keystone | 22:07 | |
| *** lifeless has joined #openstack-keystone | 22:07 | |
| *** Krenair has joined #openstack-keystone | 22:07 | |
| *** lifeless has quit IRC | 22:08 | |
| *** lifeless has joined #openstack-keystone | 22:08 | |
| *** r-daneel has quit IRC | 22:08 | |
| *** d0ugal has quit IRC | 22:10 | |
| *** germs has joined #openstack-keystone | 22:14 | |
| *** germs has quit IRC | 22:14 | |
| *** germs has joined #openstack-keystone | 22:14 | |
| *** germs has quit IRC | 22:18 | |
| *** martinus__ has quit IRC | 22:20 | |
| *** NM has joined #openstack-keystone | 22:27 | |
| *** spilla has quit IRC | 22:44 | |
| *** superdan is now known as dansmith | 22:58 | |
| *** NM has quit IRC | 23:00 | |
| rodrigod` | fiy i'm submitting the native SAML project idea for this outreachy round | 23:06 |
| cmurphy | awesome | 23:07 |
| *** NM has joined #openstack-keystone | 23:08 | |
| rodrigod` | wanna comentor cmurphy? | 23:09 |
| *** rodrigod` is now known as rodrigods | 23:09 | |
| cmurphy | rodrigods: sure! | 23:10 |
| rodrigods | yay | 23:12 |
| *** NM has quit IRC | 23:18 | |
| *** Guest54 has joined #openstack-keystone | 23:23 | |
| *** oikiki has joined #openstack-keystone | 23:24 | |
| *** oikiki has quit IRC | 23:24 | |
| *** Guest54 has quit IRC | 23:24 | |
| *** NM has joined #openstack-keystone | 23:38 | |
| *** r-daneel has joined #openstack-keystone | 23:47 | |
| *** openstackgerrit has quit IRC | 23:48 | |
| *** jgwentworth is now known as melwitt | 23:48 | |
| *** r-daneel has quit IRC | 23:51 | |
| gyee | lbragstad: the xmlsec patch looks good! I've verified it in my dev env | 23:54 |
| *** gyee has quit IRC | 23:55 | |
| *** NM has quit IRC | 23:56 | |
| *** NM has joined #openstack-keystone | 23:57 | |
| *** NM has quit IRC | 23:58 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!