| *** germs has quit IRC | 00:00 | |
| *** spzala has quit IRC | 00:02 | |
| *** spzala has joined #openstack-keystone | 00:11 | |
| *** spzala has quit IRC | 00:15 | |
| *** spzala has joined #openstack-keystone | 00:22 | |
| *** spzala has quit IRC | 00:22 | |
| *** spzala has joined #openstack-keystone | 00:22 | |
| *** spzala has quit IRC | 00:23 | |
| *** spzala has joined #openstack-keystone | 00:26 | |
| *** spzala has quit IRC | 00:31 | |
| *** dave-mcc_ has joined #openstack-keystone | 01:02 | |
| *** namnh has joined #openstack-keystone | 01:17 | |
| *** spzala has joined #openstack-keystone | 01:42 | |
| *** sapd has joined #openstack-keystone | 01:43 | |
| *** spzala has quit IRC | 01:54 | |
| *** masuberu has quit IRC | 02:06 | |
| *** masuberu has joined #openstack-keystone | 02:06 | |
| *** spzala has joined #openstack-keystone | 02:10 | |
| *** spzala has quit IRC | 02:14 | |
| *** spzala has joined #openstack-keystone | 02:15 | |
| *** annp has joined #openstack-keystone | 02:16 | |
| *** spzala has quit IRC | 02:19 | |
| *** dklyle has joined #openstack-keystone | 02:41 | |
| *** dklyle has quit IRC | 03:00 | |
| *** masuberu has quit IRC | 03:06 | |
| *** masuberu has joined #openstack-keystone | 03:08 | |
| *** dangtrinhnt has quit IRC | 03:09 | |
| *** masber has joined #openstack-keystone | 03:15 | |
| *** masuberu has quit IRC | 03:18 | |
| *** rcernin has quit IRC | 03:31 | |
| *** rcernin has joined #openstack-keystone | 03:35 | |
| *** edmondsw has joined #openstack-keystone | 03:55 | |
| *** dave-mcc_ has quit IRC | 04:00 | |
| *** sonuk has quit IRC | 04:03 | |
| *** bhagyashris has joined #openstack-keystone | 04:10 | |
| *** jdennis has quit IRC | 04:33 | |
| *** jdennis has joined #openstack-keystone | 04:34 | |
| *** pooja_jadhav has joined #openstack-keystone | 04:47 | |
| *** spzala has joined #openstack-keystone | 04:58 | |
| *** spzala has quit IRC | 05:02 | |
| *** edmondsw has quit IRC | 05:03 | |
| *** edmondsw has joined #openstack-keystone | 05:03 | |
| *** edmondsw has quit IRC | 05:08 | |
| *** links has joined #openstack-keystone | 06:13 | |
| *** spzala has joined #openstack-keystone | 06:51 | |
| *** spzala has quit IRC | 06:55 | |
| *** tesseract has joined #openstack-keystone | 07:04 | |
| *** sapd has quit IRC | 07:13 | |
| *** rcernin has quit IRC | 07:19 | |
| *** pcaruana has joined #openstack-keystone | 07:25 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 07:36 | |
| *** pcichy has joined #openstack-keystone | 08:00 | |
| *** jaosorior has joined #openstack-keystone | 08:15 | |
| *** threestrands has quit IRC | 08:17 | |
| *** jaosorior has quit IRC | 08:32 | |
| *** Alexey_Abashkin has joined #openstack-keystone | 08:48 | |
| *** Alexey_Abashkin has quit IRC | 08:50 | |
| *** Alexey_Abashkin has joined #openstack-keystone | 08:50 | |
| *** AlexeyAbashkin has quit IRC | 08:51 | |
| *** sapd has joined #openstack-keystone | 08:53 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 08:54 | |
| *** Alexey_Abashkin has quit IRC | 08:54 | |
| *** Alexey_Abashkin has joined #openstack-keystone | 09:02 | |
| *** AlexeyAbashkin has quit IRC | 09:05 | |
| *** Alexey_Abashkin is now known as AlexeyAbashkin | 09:05 | |
| *** jaosorior has joined #openstack-keystone | 09:07 | |
| *** namnh has quit IRC | 09:22 | |
| *** namnh has joined #openstack-keystone | 09:23 | |
| *** annp has quit IRC | 09:26 | |
| *** annp has joined #openstack-keystone | 09:27 | |
| *** spzala has joined #openstack-keystone | 10:07 | |
| *** nicolasbock has joined #openstack-keystone | 10:09 | |
| *** spzala has quit IRC | 10:11 | |
| *** namnh has quit IRC | 10:17 | |
| *** pcichy has quit IRC | 10:22 | |
| *** pcaruana has quit IRC | 10:26 | |
| *** pcaruana has joined #openstack-keystone | 10:33 | |
| *** nicolasbock has quit IRC | 10:39 | |
| *** AlexeyAbashkin has quit IRC | 10:47 | |
| *** nicolasbock has joined #openstack-keystone | 10:50 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 10:51 | |
| *** hoonetorg has quit IRC | 11:03 | |
| *** hoonetorg has joined #openstack-keystone | 11:16 | |
| *** hoonetorg has quit IRC | 11:21 | |
| *** hoonetorg has joined #openstack-keystone | 11:39 | |
| *** edmondsw has joined #openstack-keystone | 11:47 | |
| *** pcaruana has quit IRC | 11:54 | |
| *** pcaruana has joined #openstack-keystone | 12:10 | |
| *** doxa has quit IRC | 12:10 | |
| *** raildo has joined #openstack-keystone | 12:17 | |
| *** martinus__ has joined #openstack-keystone | 12:22 | |
| *** jdennis has quit IRC | 12:27 | |
| *** jdennis has joined #openstack-keystone | 12:27 | |
| *** edmondsw has quit IRC | 12:37 | |
| *** rmascena has joined #openstack-keystone | 12:37 | |
| *** raildo has quit IRC | 12:40 | |
| *** spzala has joined #openstack-keystone | 12:42 | |
| *** panbalag has joined #openstack-keystone | 12:42 | |
| *** panbalag has left #openstack-keystone | 12:46 | |
| *** spzala has quit IRC | 12:46 | |
| *** dave-mccowan has joined #openstack-keystone | 12:49 | |
| *** spzala has joined #openstack-keystone | 12:52 | |
| *** spzala has quit IRC | 12:57 | |
| *** spzala has joined #openstack-keystone | 13:00 | |
| *** spzala has quit IRC | 13:05 | |
| *** spzala has joined #openstack-keystone | 13:05 | |
| *** spilla has joined #openstack-keystone | 13:07 | |
| *** spzala has quit IRC | 13:25 | |
| *** spzala has joined #openstack-keystone | 13:25 | |
| *** spzala has quit IRC | 13:25 | |
| *** spzala has joined #openstack-keystone | 13:26 | |
| *** spzala has quit IRC | 13:26 | |
| *** r-daneel has joined #openstack-keystone | 13:37 | |
| *** felipemonteiro_ has joined #openstack-keystone | 13:38 | |
| *** felipemonteiro__ has joined #openstack-keystone | 13:44 | |
| lbragstad | kmalloc: yeah - that's a good question | 13:46 |
|---|---|---|
| *** felipemonteiro_ has quit IRC | 13:47 | |
| *** r-daneel has quit IRC | 13:51 | |
| lbragstad | i'm not sure why Tripleo happen to hit that index, i haven't heard of that being reported anywhere else | 13:52 |
| lbragstad | unless it was how it was backported? | 13:52 |
| *** edmondsw has joined #openstack-keystone | 13:58 | |
| *** felipemonteiro_ has joined #openstack-keystone | 14:00 | |
| *** felipemonteiro__ has quit IRC | 14:00 | |
| *** spzala has joined #openstack-keystone | 14:04 | |
| *** felipemonteiro__ has joined #openstack-keystone | 14:20 | |
| *** felipemonteiro_ has quit IRC | 14:24 | |
| *** links has quit IRC | 14:30 | |
| *** jroll has quit IRC | 14:31 | |
| *** jroll has joined #openstack-keystone | 14:32 | |
| hrybacki | kmalloc: lbragstad so WRT https://review.openstack.org/#/c/563266/ | 14:35 |
| hrybacki | the reason why we hit it is because we backported it downstream to OSP10 (IIRC) w/o making it idempotent | 14:35 |
| hrybacki | OSP10 and 11 that is. In one of the placeholders for each release respectively | 14:36 |
| hrybacki | I'm not sure if this is a fix we would make upstream tbh. It may be something we need to carry downstream alone | 14:37 |
| lbragstad | i suppose we could do it either way | 14:37 |
| lbragstad | that's really why i wanted to make sure kmalloc looked at it | 14:37 |
| hrybacki | upstream would be nice but I'm also not trying to force our issues up here | 14:37 |
| hrybacki | yeah | 14:37 |
| hrybacki | IF any other folks carried it into their products in previous versions they may well run into the same issue so \_0_/ | 14:38 |
| lbragstad | sure | 14:38 |
| lbragstad | that's true | 14:38 |
| hrybacki | kmalloc's comment on the review confuses me. But I think that may be because he didn't have context when reviewing | 14:48 |
| *** Alexey_Abashkin has joined #openstack-keystone | 14:50 | |
| *** felipemonteiro__ has quit IRC | 14:51 | |
| *** felipemonteiro__ has joined #openstack-keystone | 14:51 | |
| *** r-daneel has joined #openstack-keystone | 14:53 | |
| *** AlexeyAbashkin has quit IRC | 14:54 | |
| *** Alexey_Abashkin is now known as AlexeyAbashkin | 14:54 | |
| *** felipemonteiro_ has joined #openstack-keystone | 15:09 | |
| *** felipemonteiro__ has quit IRC | 15:13 | |
| knikolla | o/ | 15:16 |
| hrybacki | o/ | 15:16 |
| gagehugo | o/ | 15:16 |
| *** pcaruana has quit IRC | 15:19 | |
| *** felipemonteiro_ has quit IRC | 15:20 | |
| *** felipemonteiro_ has joined #openstack-keystone | 15:20 | |
| *** dklyle has joined #openstack-keystone | 15:32 | |
| lbragstad | cmurphy: kmalloc i know we discussed this a bit - but wondering if either of you would want to leave comments on the review about the usecases - https://review.openstack.org/#/c/541903/6 | 15:45 |
| *** dklyle has quit IRC | 15:49 | |
| kmalloc | lbragstad: sure | 15:50 |
| kmalloc | hrybacki: oh, DONT BACKPORT MIGRATIONS | 15:51 |
| hrybacki | kmalloc: yeah, lesson learned ;) | 15:51 |
| kmalloc | hrybacki: if you do, you're liable to run into this. | 15:51 |
| kmalloc | honestly, that makes me want to -1 this change. | 15:51 |
| kmalloc | and say no, this is not meant to be idempotent, i dont want it to become "standard" to fix migrations because a vendor backported it poorly | 15:52 |
| kmalloc | even though I totally understand an am sympathetic to the situation ;) | 15:52 |
| hrybacki | kmalloc: either way we'll have to carry the fix downstream | 15:52 |
| kmalloc | i wouoldn't honestly mind all migrations being idempotent | 15:52 |
| kmalloc | so... let me start here: | 15:53 |
| hrybacki | that seems sensical | 15:53 |
| kmalloc | 1) i'll accept the fix if you're willing to propose and drive an initiative to make all migrations idempotent | 15:53 |
| kmalloc | (and get the rest of the cores to accept it+write the tests to prevent regressing | 15:53 |
| kmalloc | 2) i'll -1 it and it's carried downstream | 15:54 |
| hrybacki | so I'm happy to raise the idempotent migrations to the group | 15:54 |
| kmalloc | i don't expect you to fix all migrations in the history, just furture migrations and tests that act without manual changes (all future migrations would be caught in the new test) | 15:54 |
| hrybacki | but I'm not well versed enough speak with confidence as to what all that will entail | 15:54 |
| kmalloc | basically: you need to propose a spec / bring it up in the meeting. And you'll need to write a test that says "any migration after X we run multiple times to show it is idempotent" | 15:55 |
| hrybacki | regardless we'll have to backport this (downstream) further than it's maintained upstream. And I think that <-- is the larger issue we should try to think about. I'm sure other vendors run into this -- and not just with migration related changes | 15:55 |
| kmalloc | backporting migrations is hard. | 15:56 |
| kmalloc | doing it right that is | 15:56 |
| kmalloc | i would generally encourage the "just carry the fix downstream" | 15:56 |
| kmalloc | because the use case for idempotent migrations really is "supporting backports" | 15:56 |
| kmalloc | outside of upstream | 15:56 |
| * hrybacki nods | 15:56 | |
| kmalloc | totally unrelated... I have a picture for everyone to see. | 15:57 |
| * hrybacki nods | 15:57 | |
| * lbragstad bets it's of a dog | 15:57 | |
| kmalloc | https://usercontent.irccloud-cdn.com/file/kcVMJqSv/IMG_20180423_082244.jpg | 15:58 |
| hrybacki | I'm about to have our weekly mtg downstream. Will discuss and come back around. Thanks for your input kmalloc ! | 15:58 |
| lbragstad | nailed it | 15:58 |
| hrybacki | also omfg toocute | 15:58 |
| cmurphy | kmalloc: ^.^ | 15:58 |
| lbragstad | kmalloc: was that your weekend project? | 15:59 |
| kmalloc | https://photos.app.goo.gl/KgkInMCoiLR7cONn1 | 15:59 |
| kmalloc | lbragstad: hehe | 16:01 |
| gagehugo | the arf! blanket is very nice | 16:01 |
| kmalloc | gagehugo: yeah. it's her fav travel pillow (blanket) | 16:01 |
| kmalloc | in that car photo, she's so tired. she could barely keep her head up [not that you could see it from the photo] | 16:02 |
| lbragstad | lol - coffee tables make great hiding places | 16:02 |
| *** gyee has joined #openstack-keystone | 16:03 | |
| jroll | kmalloc: zomg, that car photo | 16:03 |
| * jroll feels obligated to also post puppy pics: https://i.imgur.com/Yswxtpy.jpg | 16:04 | |
| lbragstad | jroll: it that one yours?! | 16:05 |
| jroll | lbragstad: yep, brought him home a week-ish ago :D | 16:05 |
| *** lbragstad changes topic to "Talking dogs at the water cooler" | 16:05 | |
| lbragstad | jroll: whoa - what breed? | 16:06 |
| jroll | australian shepherd, half mini half standard. should end up around 30-40 lbs | 16:06 |
| lbragstad | that's like the perfect size | 16:06 |
| jroll | yeah, it will be | 16:07 |
| jroll | our other dog is about 50 pounds: https://imgur.com/W9prSCL.jpg | 16:08 |
| lbragstad | lol - i like the hanker chief | 16:08 |
| kmalloc | jroll: damn cute aussie | 16:08 |
| jroll | heh, thanks :) | 16:08 |
| kmalloc | jroll: aussies are too high energy (lol, so we got a shiba... wait wut!?) for our space. | 16:09 |
| jroll | lol | 16:09 |
| kmalloc | i just had to step away, she just peed in the house =/ 9wks, still learning the WHOLE house is her home and shouldn't be pee-central | 16:09 |
| jroll | yeah, I expect to spend lots of time running around outside | 16:09 |
| kmalloc | this weekend i did ~5mi with her | 16:09 |
| jroll | nice | 16:10 |
| kmalloc | she just doesn't stop (a lot of back-and-forth in front of the house, but my phones says it was 5mi) | 16:10 |
| kmalloc | she is learning what a vacuum cleaner is today (we have cleaners in for the first time since we got her) | 16:10 |
| kmalloc | she seems unconcerned | 16:10 |
| openstackgerrit | Merged openstack/keystone master: Update auth_uri option to www_authenticate_uri https://review.openstack.org/562279 | 16:10 |
| lbragstad | lol | 16:10 |
| openstackgerrit | Gage Hugo proposed openstack/keystone master: Add functional testing gate https://review.openstack.org/531014 | 16:11 |
| lbragstad | i will say i'm excited to get back into the spring/summer running routine with our dogs | 16:11 |
| *** pcaruana has joined #openstack-keystone | 16:13 | |
| openstackgerrit | Gage Hugo proposed openstack/keystone master: Add LDAP user-backed functional testing gate https://review.openstack.org/558940 | 16:15 |
| kmalloc | gagehugo: check with infra on the docker bit, they may want to mirror the repo directly | 16:16 |
| kmalloc | gagehugo: typically it is a nogo to rely on external sources not mirrored | 16:16 |
| *** lbragstad changes topic to "Rocky release schedule: https://releases.openstack.org/rocky/schedule.html | Meeting agenda: https://etherpad.openstack.org/p/keystone-weekly-meeting | Bugs that need triaging: http://bit.ly/2iJuN1h | Trello: https://trello.com/b/wmyzbFq5/keystone-rocky-roadmap" | 16:17 | |
| gagehugo | kmalloc ok | 16:17 |
| kmalloc | gagehugo: notably because i also can't endorse that as a voting change if we can't guarantee docker sources wont be down (we need pip, we neet apt, we don't need much else) | 16:18 |
| gagehugo | yeah that's a good point | 16:18 |
| gagehugo | don't wanna rely on docker being always up | 16:18 |
| kmalloc | exactly | 16:19 |
| kmalloc | there are some docker packages in ubuntu, if they aren't too old, they may be sufficient | 16:19 |
| kmalloc | but in the case we need more recent, we should talk with infra to mirror | 16:19 |
| gagehugo | yeah loci requires a more recent version, hopefully the ubuntu ones are good enough | 16:22 |
| * lbragstad breaks for lunch quick | 16:25 | |
| kmalloc | holy crap, man, gagehugo thanks for pointing me at loci | 16:28 |
| kmalloc | that is going to make my current project WAY easier | 16:28 |
| gagehugo | kmalloc :) | 16:28 |
| kmalloc | trying to setup an openstack control plane on my Nuc | 16:29 |
| kmalloc | (so, keystone, nova, neutron, cinder, glance) | 16:29 |
| *** edmondsw has quit IRC | 16:29 | |
| gagehugo | it's super useful | 16:31 |
| kmalloc | also... waiting for 18.04 to land (need to do some sizable upgrades) | 16:31 |
| kmalloc | honestly, i'd use RHEL 7.5 (or Cent 7.5 when it comes out) but its a but more work. | 16:31 |
| kmalloc | i plan to run my FreeIPA server on Cent though | 16:31 |
| gagehugo | hmm | 16:31 |
| kmalloc | once i have OpenStack running. | 16:31 |
| *** Alexey_Abashkin has joined #openstack-keystone | 16:31 | |
| kmalloc | and since 18.04 drops stable in like 4 days | 16:32 |
| gagehugo | oh yeah it does | 16:32 |
| gagehugo | forgot about that | 16:32 |
| kmalloc | looking forward to upgrading my FW server | 16:32 |
| *** AlexeyAbashkin has quit IRC | 16:34 | |
| *** Alexey_Abashkin is now known as AlexeyAbashkin | 16:34 | |
| gagehugo | kmalloc there's an openstack-loci channel too if you have any questions | 16:35 |
| kmalloc | nice | 16:35 |
| *** ayoung has joined #openstack-keystone | 16:38 | |
| ayoung | Do we have any regular Keystoners that are fluent in Mandarin Chinese? I am trying to figure out who to give props to for this site, and I can't deduce the author: http://www.cnblogs.com/multi-task/p/5553830.html | 16:42 |
| ayoung | Google Translate renders the Author's line as "Catcher in a Field of Wheat" which I assume is a play on "Catcher in the Rhye" And I see the name translated as Wheat Field Malt...which I am wondiner is a bad translation, or a pun. | 16:43 |
| *** AlexeyAbashkin has quit IRC | 16:59 | |
| *** jdennis has quit IRC | 17:02 | |
| *** jaosorior has quit IRC | 17:05 | |
| *** jdennis has joined #openstack-keystone | 17:08 | |
| *** pcichy has joined #openstack-keystone | 17:10 | |
| *** jdennis has quit IRC | 17:13 | |
| *** jdennis has joined #openstack-keystone | 17:17 | |
| *** mvk has quit IRC | 17:22 | |
| *** tesseract has quit IRC | 17:23 | |
| *** edmondsw has joined #openstack-keystone | 17:34 | |
| *** pcichy has quit IRC | 17:34 | |
| *** edmondsw has quit IRC | 17:37 | |
| *** edmondsw has joined #openstack-keystone | 17:37 | |
| *** jaosorior has joined #openstack-keystone | 17:49 | |
| kmalloc | ayoung: hm.. gyee know Cantonese right? i'm trying to think of the other folks who might know | 17:51 |
| kmalloc | ayoung: maybe gyee knows someone to help out | 17:52 |
| gyee | I can speak Cantonese, not so good with Mandarin though | 17:59 |
| *** r-daneel has quit IRC | 18:00 | |
| gyee | I can hear Mardarin and understand most of it, but just can't speak it very well :-) | 18:00 |
| *** r-daneel has joined #openstack-keystone | 18:01 | |
| ayoung | gyee, it is a reading problem in this case | 18:02 |
| ayoung | can you read the name off that blog? | 18:02 |
| ayoung | http://www.cnblogs.com/multi-task/p/5553830.html | 18:02 |
| ayoung | The Author did a good job specifying how to do things, and I'd like to properly cite | 18:02 |
| gyee | ayoung, author is 麦田 | 18:06 |
| gyee | translate to "wheat field" :-) | 18:06 |
| ayoung | Is that a common name? Is this "catcher in a a wheat field" a cross-language pun? | 18:07 |
| gyee | is the blogger's handle | 18:08 |
| ayoung | @gyee, yeah, Google translated that as Wheat Field Malt which I thought might be a beer reference | 18:08 |
| *** felipemonteiro__ has joined #openstack-keystone | 18:08 | |
| gyee | it's common for Chinese blogger to use a handle than the real name | 18:08 |
| ayoung | Of course. | 18:09 |
| ayoung | @gyee, I can find out whois info on the site, not sure if that maps close to the blogger here | 18:10 |
| * ayoung trying to walk that line of showing respect and yet not stalking | 18:11 | |
| *** felipemonteiro_ has quit IRC | 18:12 | |
| gyee | ayoung, you'll probably need to join the site, then leave a comment on the blog to ask the author to contact you | 18:13 |
| ayoung | @gyee, ah cool. I can try to do that. | 18:13 |
| kmalloc | ayoung: https://usercontent.irccloud-cdn.com/file/hcFYff0T/IMG_20180422_135911.jpg yah, she needs to be a mascot of some project | 18:18 |
| ayoung | +2A | 18:18 |
| kmalloc | ayoung: you'll meet her when you get out this way for the summit | 18:19 |
| kmalloc | let me know your travel booking so i can confirm my hotel dates. | 18:19 |
| ayoung | kmalloc, flying out on May 19 Saturday, staying with a friend that night. Drive up together on Sunday. Drive Back on Thrusday, fly out Friday morning. | 18:33 |
| ayoung | Let me see what hotel I booked... | 18:34 |
| ayoung | kmalloc, I'm at the Pan PAcific | 18:35 |
| *** harlowja has joined #openstack-keystone | 18:44 | |
| *** jaosorior has quit IRC | 18:55 | |
| hugokuo | morning guys. | 18:55 |
| hugokuo | Quick question about the keystonemiddleware. Does the latest one still support v2 auth API for Admin to fetching token before validating user's incoming token? | 18:56 |
| ayoung | hugokuo, um...lets see | 19:01 |
| ayoung | hugokuo, IIRC V2 is exposed as a token format, but the middleware should be using V3 | 19:02 |
| hugokuo | in `keystonemiddleware/auth_token/_identity.py` has keystoneclient.v2_0 lib imported. | 19:03 |
| hugokuo | I'm thinking about if there's any case the keystone server doesn't support v3 API or not fully functional v3 API version. | 19:04 |
| *** felipemonteiro__ has quit IRC | 19:06 | |
| *** felipemonteiro__ has joined #openstack-keystone | 19:07 | |
| hugokuo | ayoung: Do you mean if user send token that's fetched from Keystone v2.0 API, it should still working in latest keystonemiddleware? The keystonemiddlewaare's admin fetches admin token and validate user token via v3.0 API? | 19:07 |
| *** harlowja has quit IRC | 19:07 | |
| ayoung | hugokuo, so...we had to sustain doing a token validation via V2.0, but what I am not sure is if the service user can usethat...but why would you want to? | 19:08 |
| ayoung | a V2 tokebn can be validated by the V3 API...I know this is confusing | 19:08 |
| *** dklyle has joined #openstack-keystone | 19:11 | |
| ayoung | hugokuo, looking here https://github.com/openstack/keystonemiddleware/blob/master/keystonemiddleware/auth_token/_auth.py#L40 | 19:11 |
| ayoung | looks like it can be done...V2.0 is still referenced. | 19:12 |
| hrybacki | lbragstad et. all -- I've created the rocky m1 retro board: https://trello.com/b/PiJecAs4/keystone-rocky-m1-retrospective feel free to add cards anytime :) | 19:56 |
| *** spzala has quit IRC | 19:57 | |
| *** spzala has joined #openstack-keystone | 19:57 | |
| lbragstad | hrybacki: awesome - thanks | 19:58 |
| lbragstad | i'll be sure to take a crack at it sometime before tomorrow | 19:58 |
| hrybacki | lbragstad++ thanks! | 19:59 |
| *** spzala has quit IRC | 20:02 | |
| *** dave-mccowan has quit IRC | 20:14 | |
| *** spzala has joined #openstack-keystone | 20:17 | |
| lbragstad | hrybacki: kmalloc given the discussion this morning - do we want to mark this as invalid? | 20:18 |
| lbragstad | https://bugs.launchpad.net/keystone/+bug/1765830 | 20:18 |
| openstack | Launchpad bug 1765830 in OpenStack Identity (keystone) "migration from osp 10 -> 11 -> 12 fails because migration script 22 is not idempotent" [Undecided,In progress] - Assigned to Ade Lee (alee-3) | 20:18 |
| kmalloc | i think so. | 20:18 |
| kmalloc | but i'm willing to wait for hrybacki to come back | 20:18 |
| hrybacki | o/ | 20:19 |
| hrybacki | Right so, downstream aside I think kmalloc's spec proposal idea for all migrations moving forward being idempotent is a good one that should be followed through on | 20:19 |
| kmalloc | it's a LOT of extra work | 20:20 |
| kmalloc | to support exactly 1 case: poorly backported migrations | 20:20 |
| kmalloc | and data migrations is even harder to make idempotent | 20:20 |
| kmalloc | but i am happy to entertain the idea | 20:21 |
| hrybacki | I'm thinking about myself (and other vendors) that have SLAs that go back well past Upstream's master-3 | 20:22 |
| kmalloc | it could also have been solved with a different index | 20:22 |
| kmalloc | fwiw | 20:22 |
| kmalloc | use a different name, you'd double up the index but it would be fine in general and your new index could be dropped once the real migration lands | 20:23 |
| hrybacki | Sure. This incident in particular was my fault. I didn't test the upgrade path across multiple versions bc reasons | 20:25 |
| hrybacki | Does anyone remember why this particular bug wasn't backported upstream? | 20:26 |
| hrybacki | (back across the stable branches that is) | 20:26 |
| *** felipemonteiro__ has quit IRC | 20:29 | |
| *** mvk has joined #openstack-keystone | 20:45 | |
| lbragstad | hrybacki: that's a good question | 20:52 |
| lbragstad | it could have been that it wasn't perceived as being urgent https://bugs.launchpad.net/keystone/+bug/1523369/comments/8 | 20:53 |
| openstack | Launchpad bug 1523369 in OpenStack Identity (keystone) "clean a user's default project if the project has been deleted" [Wishlist,Fix released] - Assigned to Anthony Washington (anthony-washington) | 20:53 |
| *** idlemind has quit IRC | 20:59 | |
| hugokuo | ayoung: the only concern was someone still running a very old keystone server which has no v3 API. But if that's the case, they should upgrade the keystone instance anyway. | 21:01 |
| hugokuo | thanks for the confirmation. I'll perform some tests here. | 21:01 |
| *** spilla has quit IRC | 21:01 | |
| ayoung | hugokuo, yeah, that does not exist | 21:02 |
| ayoung | there is no Keystone out there that does not support V3 | 21:02 |
| *** spilla has joined #openstack-keystone | 21:02 | |
| ayoung | V3 went in Grizzly? | 21:03 |
| lbragstad | i believe so | 21:04 |
| ayoung | hugokuo, I think that is older than some of the Keystone devs | 21:05 |
| *** spilla has quit IRC | 21:07 | |
| *** spzala has quit IRC | 21:17 | |
| *** spzala has joined #openstack-keystone | 21:17 | |
| *** martinus__ has quit IRC | 21:17 | |
| *** spzala has quit IRC | 21:23 | |
| *** jdennis has quit IRC | 21:27 | |
| ayoung | https://wiki.openstack.org/wiki/ReleaseNotes/Grizzly#OpenStack_Identity_.28Keystone.29 | 21:28 |
| ayoung | 'The term "tenant" is now known as "project." ' | 21:28 |
| *** dklyle has quit IRC | 21:31 | |
| *** r-daneel_ has joined #openstack-keystone | 21:35 | |
| *** r-daneel has quit IRC | 21:36 | |
| *** r-daneel_ is now known as r-daneel | 21:36 | |
| *** rmascena__ has joined #openstack-keystone | 21:38 | |
| *** spzala has joined #openstack-keystone | 21:38 | |
| *** rmascena has quit IRC | 21:40 | |
| lbragstad | a lot of stuff happened in grizzly | 21:42 |
| *** spzala has quit IRC | 21:43 | |
| lbragstad | kmalloc: where does keystoneauth set all the headers? or where do we define those headers? | 21:48 |
| lbragstad | i'm shuffling through ksm but i'm not seeing where that happens | 21:49 |
| *** jdennis has joined #openstack-keystone | 21:51 | |
| kmalloc | lbragstad: uhm.... | 21:58 |
| kmalloc | I.am.not sure.withoit looking | 21:58 |
| lbragstad | no worries - i can dig into it | 22:00 |
| lbragstad | jay had a question here and i thought that was handled by ksm https://review.openstack.org/#/c/530509/3/oslo_context/context.py | 22:00 |
| *** jdennis has quit IRC | 22:08 | |
| *** jrist has quit IRC | 22:08 | |
| *** jdennis has joined #openstack-keystone | 22:09 | |
| *** jrist has joined #openstack-keystone | 22:12 | |
| *** jrist has quit IRC | 22:12 | |
| *** jrist has joined #openstack-keystone | 22:12 | |
| *** lbragstad has quit IRC | 22:18 | |
| *** dklyle has joined #openstack-keystone | 22:26 | |
| *** rcernin has joined #openstack-keystone | 22:31 | |
| kmalloc | oh lance disconnected | 22:35 |
| ayoung | hrybacki, alee__ I just commented on the "Idempotency" fix. Let me know if my comment makes sense. https://review.openstack.org/#/c/563266/1 | 22:38 |
| *** dklyle has quit IRC | 22:39 | |
| ayoung | But in general, lets not spend cycles making a fix idempotent until we need it. If we backport a fix to one of the reserved numbers in stable, as part of that backport, make the follow on migration Idempotent or a no-op. | 22:39 |
| kmalloc | lol hey ayoung you just responded as I was doing so | 22:40 |
| kmalloc | :P | 22:40 |
| kmalloc | ayoung: your stance is much the same as mine | 22:40 |
| *** threestrands has joined #openstack-keystone | 22:41 | |
| *** threestrands has quit IRC | 22:41 | |
| *** threestrands has joined #openstack-keystone | 22:41 | |
| kmalloc | ftr, and my general guidance was "unless we change how we do mirgations in general to support idempotency (ask the keystone team at the weekly meeting), we should not accept this fix | 22:41 |
| *** felipemonteiro__ has joined #openstack-keystone | 22:42 | |
| *** edmondsw has quit IRC | 22:43 | |
| *** felipemonteiro__ has quit IRC | 23:07 | |
| *** spzala has joined #openstack-keystone | 23:10 | |
| *** r-daneel has quit IRC | 23:21 | |
| *** spzala has quit IRC | 23:21 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!
