| *** gyee has quit IRC | 00:02 | |
| cmurphy | lbragstad: fyi i'll be traveling tomorrow...if you have spare time to send the update email that'd be super ;) | 00:02 |
|---|---|---|
| *** markvoelker has quit IRC | 00:05 | |
| *** jistr has quit IRC | 00:07 | |
| *** jistr has joined #openstack-keystone | 00:13 | |
| openstackgerrit | Merged openstack/keystone master: Remove unused assertions from test_v3.py https://review.openstack.org/566163 | 00:23 |
| *** dmellado has quit IRC | 00:31 | |
| *** d0ugal has quit IRC | 00:36 | |
| *** dmellado has joined #openstack-keystone | 00:38 | |
| *** edmondsw has joined #openstack-keystone | 00:53 | |
| *** dmellado has quit IRC | 00:59 | |
| *** d0ugal has joined #openstack-keystone | 01:03 | |
| *** edmondsw has quit IRC | 01:05 | |
| *** markvoelker has joined #openstack-keystone | 01:05 | |
| *** annp has joined #openstack-keystone | 01:16 | |
| *** edmondsw has joined #openstack-keystone | 01:18 | |
| *** dmellado has joined #openstack-keystone | 01:26 | |
| *** dmellado has quit IRC | 01:32 | |
| *** markvoelker has quit IRC | 01:40 | |
| *** dmellado has joined #openstack-keystone | 01:56 | |
| *** r-daneel has quit IRC | 02:06 | |
| *** dmellado has quit IRC | 02:09 | |
| *** dmellado has joined #openstack-keystone | 02:13 | |
| *** edmondsw has quit IRC | 02:18 | |
| *** rcernin has quit IRC | 02:19 | |
| *** rcernin has joined #openstack-keystone | 02:20 | |
| adriant | cmurphy, kmalloc, lbragstad: Any objections to me doing a patch that renames https://github.com/openstack/keystone/blob/master/keystone/common/token_utils.py#L36 and all the places it is used from TokenUtils to FernetUtils ? | 02:31 |
| adriant | I'd be using that exact same class for receipts and it doesn't make sense to keep calling it token utils at that stage | 02:32 |
| adriant | I'm also looking at what parts of the token/fernet code in the keystone/tokens/ I can also potentially move to common, but it doesn't look like too much. The for receipts is likely going to be VERY similar to keystone/tokens/ but simpler, and I'm not sure how much we can extract into a common place. | 02:34 |
| adriant | Unless something actually 'urgent' comes on the day, up I'm dedicating the latter half of every Friday to the receipt work until it's done. So hopefully I can have a review or two up for that soon. | 02:36 |
| *** markvoelker has joined #openstack-keystone | 02:37 | |
| adriant | HAH: https://github.com/openstack/keystone/commit/03ba867327fe950d3240fdbd6d207a8c0550e2c5 | 02:37 |
| adriant | well damn | 02:37 |
| adriant | I guess I'm just going to revert that patch pretty much | 02:37 |
| adriant | gagehugo: ^ | 02:37 |
| *** dmellado has quit IRC | 02:38 | |
| *** germs has quit IRC | 02:39 | |
| *** germs has joined #openstack-keystone | 02:40 | |
| lbragstad | adriant: yeah - there was a push to make the utils more generic so that we could essentially do other non-persistent token format using different encryption/signing mechansims | 03:06 |
| adriant | lbragstad: I totally get that, and when that patch came through no one knew we'd be reusing the fernet model for something other than tokens :) | 03:07 |
| adriant | I'll create a set of patches to be reviewed together, with that revert/renamed to fernet_utils as the first. | 03:08 |
| adriant | lbragstad: the alternative is call it something like crypto_utils ? | 03:09 |
| adriant | although what we have there right now is pretty specific to fernet | 03:10 |
| *** markvoelker has quit IRC | 03:10 | |
| *** dave-mccowan has quit IRC | 03:14 | |
| openstackgerrit | Adrian Turjak proposed openstack/keystone master: [WIP] Rename token_utils back to fernet_utils https://review.openstack.org/566208 | 03:15 |
| *** felipemonteiro__ has joined #openstack-keystone | 03:36 | |
| *** dmellado has joined #openstack-keystone | 03:39 | |
| *** felipemonteiro_ has joined #openstack-keystone | 03:39 | |
| *** felipemonteiro__ has quit IRC | 03:43 | |
| *** nicolasbock has quit IRC | 03:44 | |
| *** felipemonteiro_ has quit IRC | 03:45 | |
| lbragstad | i suppose we reuse them for credentials now too | 03:53 |
| lbragstad | we encrypt credentials at rest with fernet tokens | 03:53 |
| lbragstad | s/tokens/keys/ | 03:53 |
| * lbragstad is on the verge of passing out | 03:53 | |
| *** rcernin has quit IRC | 03:59 | |
| *** rcernin has joined #openstack-keystone | 04:00 | |
| *** edmondsw has joined #openstack-keystone | 04:00 | |
| *** germs has quit IRC | 04:02 | |
| *** germs has joined #openstack-keystone | 04:02 | |
| *** germs has quit IRC | 04:02 | |
| *** germs has joined #openstack-keystone | 04:02 | |
| *** gyankum has joined #openstack-keystone | 04:04 | |
| *** dmellado has quit IRC | 04:04 | |
| *** edmondsw has quit IRC | 04:05 | |
| *** markvoelker has joined #openstack-keystone | 04:08 | |
| *** r-daneel has joined #openstack-keystone | 04:10 | |
| *** r-daneel_ has joined #openstack-keystone | 04:35 | |
| *** r-daneel has quit IRC | 04:36 | |
| *** r-daneel_ is now known as r-daneel | 04:36 | |
| *** dmellado has joined #openstack-keystone | 04:39 | |
| *** markvoelker has quit IRC | 04:41 | |
| *** jaosorior has joined #openstack-keystone | 04:42 | |
| *** bhagyashris has quit IRC | 04:43 | |
| *** bhagyashris has joined #openstack-keystone | 04:43 | |
| *** ianw has quit IRC | 05:06 | |
| *** NobodyCam has quit IRC | 05:15 | |
| *** cz2 has quit IRC | 05:15 | |
| *** Chealion has quit IRC | 05:15 | |
| *** pas-ha has quit IRC | 05:15 | |
| *** hogepodge has quit IRC | 05:15 | |
| *** charz has quit IRC | 05:15 | |
| *** charz has joined #openstack-keystone | 05:15 | |
| *** Chealion has joined #openstack-keystone | 05:16 | |
| *** hogepodge has joined #openstack-keystone | 05:16 | |
| *** pas-ha has joined #openstack-keystone | 05:16 | |
| *** NobodyCam has joined #openstack-keystone | 05:16 | |
| *** cz2 has joined #openstack-keystone | 05:16 | |
| *** markvoelker has joined #openstack-keystone | 05:38 | |
| *** threestrands has quit IRC | 05:47 | |
| *** ianw has joined #openstack-keystone | 05:55 | |
| *** markvoelker has quit IRC | 06:11 | |
| *** pcichy has joined #openstack-keystone | 06:24 | |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: [WIP]Enable foreign keys for unit test https://review.openstack.org/558193 | 06:32 |
| *** martinus__ has joined #openstack-keystone | 06:41 | |
| *** pcaruana has joined #openstack-keystone | 06:43 | |
| *** r-daneel has quit IRC | 06:49 | |
| *** alex_xu has quit IRC | 06:50 | |
| *** alex_xu has joined #openstack-keystone | 06:51 | |
| *** dmellado has quit IRC | 07:01 | |
| *** rcernin has quit IRC | 07:05 | |
| *** markvoelker has joined #openstack-keystone | 07:08 | |
| *** tesseract has joined #openstack-keystone | 07:20 | |
| *** dmellado_ has joined #openstack-keystone | 07:24 | |
| *** jaosorior has quit IRC | 07:25 | |
| *** dmellado_ has quit IRC | 07:34 | |
| *** edmondsw has joined #openstack-keystone | 07:36 | |
| *** edmondsw has quit IRC | 07:41 | |
| *** markvoelker has quit IRC | 07:42 | |
| *** slunkad has quit IRC | 07:45 | |
| *** kukacz has quit IRC | 07:46 | |
| *** slunkad has joined #openstack-keystone | 07:49 | |
| openstackgerrit | Merged openstack/keystone master: Remove dead dependency injection code https://review.openstack.org/566168 | 07:49 |
| *** kukacz_ has joined #openstack-keystone | 07:55 | |
| *** dmellado_ has joined #openstack-keystone | 08:01 | |
| *** kukacz_ has quit IRC | 08:01 | |
| *** kukacz_ has joined #openstack-keystone | 08:01 | |
| *** pcichy has quit IRC | 08:05 | |
| *** pcichy has joined #openstack-keystone | 08:05 | |
| *** kukacz_ has quit IRC | 08:07 | |
| *** kukacz_ has joined #openstack-keystone | 08:11 | |
| *** dmellado_ has quit IRC | 08:11 | |
| *** kukacz_ has quit IRC | 08:14 | |
| *** kukacz_ has joined #openstack-keystone | 08:14 | |
| *** markvoelker has joined #openstack-keystone | 08:39 | |
| *** germs has quit IRC | 08:43 | |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Update IdP sql model https://review.openstack.org/559676 | 08:43 |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Fix the test for unique IdP https://review.openstack.org/563812 | 08:43 |
| *** germs has joined #openstack-keystone | 08:44 | |
| *** germs has quit IRC | 08:44 | |
| *** germs has joined #openstack-keystone | 08:44 | |
| *** lbragstad has quit IRC | 08:45 | |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Enable Foreign keys for sql backend unit test https://review.openstack.org/558029 | 08:45 |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Enable foreign keys for unit test https://review.openstack.org/558193 | 08:45 |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Fix db model inconsistency for FederatedUser https://review.openstack.org/566242 | 08:45 |
| *** lbragstad has joined #openstack-keystone | 08:45 | |
| *** ChanServ sets mode: +o lbragstad | 08:45 | |
| *** dmellado_ has joined #openstack-keystone | 08:50 | |
| *** pcichy has quit IRC | 09:01 | |
| *** markvoelker has quit IRC | 09:12 | |
| *** markvoelker has joined #openstack-keystone | 10:08 | |
| *** r-daneel has joined #openstack-keystone | 10:29 | |
| *** mvk has quit IRC | 10:30 | |
| *** markvoelker has quit IRC | 10:42 | |
| *** dave-mccowan has joined #openstack-keystone | 11:13 | |
| *** pcaruana has quit IRC | 11:27 | |
| *** raildo has joined #openstack-keystone | 11:37 | |
| *** markvoelker has joined #openstack-keystone | 11:39 | |
| *** pcaruana has joined #openstack-keystone | 11:39 | |
| *** jdennis has quit IRC | 11:39 | |
| *** nicolasbock has joined #openstack-keystone | 11:42 | |
| *** linkmark has quit IRC | 11:51 | |
| *** edmondsw has joined #openstack-keystone | 11:53 | |
| *** raildo has quit IRC | 11:54 | |
| *** annp has quit IRC | 11:57 | |
| *** pcaruana has quit IRC | 11:59 | |
| *** jistr is now known as jistr|mtg | 12:11 | |
| *** pcaruana has joined #openstack-keystone | 12:12 | |
| *** markvoelker has quit IRC | 12:12 | |
| *** markvoelker has joined #openstack-keystone | 12:24 | |
| *** mchlumsky has joined #openstack-keystone | 12:26 | |
| *** mchlumsky has quit IRC | 12:30 | |
| *** jistr|mtg is now known as jistr | 12:31 | |
| *** mchlumsky has joined #openstack-keystone | 12:32 | |
| *** slunkad has quit IRC | 12:45 | |
| *** raildo has joined #openstack-keystone | 12:51 | |
| *** felipemonteiro has joined #openstack-keystone | 12:55 | |
| *** jdennis has joined #openstack-keystone | 13:00 | |
| *** gyankum has quit IRC | 13:09 | |
| *** r-daneel has quit IRC | 13:16 | |
| *** eckesicle has joined #openstack-keystone | 13:26 | |
| *** slunkad has joined #openstack-keystone | 13:47 | |
| *** r-daneel has joined #openstack-keystone | 13:52 | |
| gagehugo | adriant go for it | 13:58 |
| *** r-daneel has quit IRC | 13:59 | |
| *** r-daneel has joined #openstack-keystone | 13:59 | |
| *** Guest46098 has quit IRC | 14:13 | |
| *** Guest46098 has joined #openstack-keystone | 14:13 | |
| *** melwitt is now known as jgwentworth | 14:15 | |
| *** pcichy has joined #openstack-keystone | 14:17 | |
| *** germs has quit IRC | 14:39 | |
| *** germs has joined #openstack-keystone | 14:40 | |
| *** germs has quit IRC | 14:40 | |
| *** germs has joined #openstack-keystone | 14:40 | |
| *** r-daneel has quit IRC | 14:45 | |
| *** jistr is now known as jistr|tpb | 14:49 | |
| *** r-daneel has joined #openstack-keystone | 14:52 | |
| *** dmellado_ is now known as dmellado | 14:57 | |
| *** gyankum has joined #openstack-keystone | 14:59 | |
| *** jistr|tpb is now known as jistr | 15:05 | |
| *** r-daneel has quit IRC | 15:06 | |
| *** r-daneel has joined #openstack-keystone | 15:06 | |
| *** pcaruana has quit IRC | 15:13 | |
| *** dave-mccowan has quit IRC | 15:20 | |
| hrybacki | lbragstad: so should I port our spec to keystone-specs? | 15:22 |
| hrybacki | also, what about the Patrole spec? | 15:22 |
| hrybacki | It already exists in keystone-specs so we could simply un-abandon it. Since we are really just aiming for PoC | 15:22 |
| *** fiddletwix has quit IRC | 15:22 | |
| *** pooja_jadhav has quit IRC | 15:24 | |
| *** sonuk has joined #openstack-keystone | 15:26 | |
| *** nicolasbock has quit IRC | 15:26 | |
| *** dave-mccowan has joined #openstack-keystone | 15:27 | |
| lbragstad | hrybacki: sure | 15:31 |
| lbragstad | maybe start a ml thread, too? | 15:31 |
| gagehugo | hrybacki patrole would be fine in keystone-specs imo | 15:31 |
| lbragstad | bits and pieces of both would make it into a community goal if we decided to propose it for Stein | 15:38 |
| lbragstad | because they are so tightly coupled | 15:38 |
| *** nicolasbock has joined #openstack-keystone | 15:40 | |
| lbragstad | ayoung: :) http://eavesdrop.openstack.org/irclogs/%23openstack-tc/%23openstack-tc.2018-05-04.log.html#t2018-05-04T15:23:19 | 15:42 |
| ayoung | lbragstad, I think I might need more coffee first... | 15:42 |
| ayoung | lbragstad, rip it all out and replace with istio? | 15:43 |
| ayoung | mnaser, and it is still assigned to me. | 15:43 |
| *** dansmith is now known as superdan | 15:45 | |
| kmalloc | What is patrole again? | 15:46 |
| ayoung | kmalloc, testing of policy | 15:46 |
| kmalloc | Ah | 15:47 |
| ayoung | kmalloc, scares the daylights out of me | 15:47 |
| ayoung | afraid it is going to end up locking us more in to the 968696 path | 15:47 |
| kmalloc | I am disinclined to support patrole (for similar reasons) until we've moved the needle on the current initiative | 15:47 |
| kmalloc | But, that said, long term we absolutely should use it | 15:48 |
| lbragstad | so make the patrole spec dependent on the default roles specification? | 15:48 |
| kmalloc | Or a similar thing. | 15:48 |
| kmalloc | lbragstad: ++ | 15:48 |
| kmalloc | Please. | 15:48 |
| kmalloc | I don't want us further locked in to the current state of the world | 15:48 |
| lbragstad | yeah - me either | 15:49 |
| kmalloc | We are actively trying to fix the issues, and we can say patrole is a great idea, we want to ensure we are t adding it just to derail the work we are doing | 15:49 |
| kmalloc | Aren't* | 15:49 |
| kmalloc | I like policy testing. I want us to do it. I don't want it to cause problems | 15:50 |
| kmalloc | ayoung: does that help alleviate concerns? | 15:51 |
| * lbragstad has a hard time saying "no" to more tests | 15:51 | |
| kmalloc | Because, if it doesn't I want to make sure we address it before we lock things into this direction. | 15:51 |
| ayoung | kmalloc, the fact that you see the effort the same way as I do? Yes, minimally. I'm afraid that we will have this implemented from the outside. | 15:51 |
| ayoung | Once we have scope enforced everywhere we should be OK | 15:52 |
| lbragstad | ayoung: ++ i agree | 15:52 |
| lbragstad | it would be a great way to lock things down once we actually do things right | 15:52 |
| lbragstad | and gate on it | 15:53 |
| *** gyee has joined #openstack-keystone | 16:00 | |
| kmalloc | +++++++++ | 16:01 |
| *** sonuk has quit IRC | 16:01 | |
| *** raildo has quit IRC | 16:02 | |
| *** raildo has joined #openstack-keystone | 16:04 | |
| *** germs has quit IRC | 16:08 | |
| *** EmilienM is now known as EvilienM | 16:09 | |
| *** r-daneel has quit IRC | 16:13 | |
| *** r-daneel has joined #openstack-keystone | 16:13 | |
| *** eckesicle has quit IRC | 16:15 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 16:43 | |
| * lbragstad runs to lunch | 16:53 | |
| *** mvk has joined #openstack-keystone | 16:58 | |
| *** tesseract has quit IRC | 17:09 | |
| *** itlinux has joined #openstack-keystone | 17:15 | |
| *** germs has joined #openstack-keystone | 17:18 | |
| *** germs has quit IRC | 17:18 | |
| *** germs has joined #openstack-keystone | 17:18 | |
| *** germs has quit IRC | 17:19 | |
| *** germs has joined #openstack-keystone | 17:19 | |
| *** pcaruana has joined #openstack-keystone | 17:54 | |
| *** pcichy has quit IRC | 18:13 | |
| openstackgerrit | Harry Rybacki proposed openstack/keystone-specs master: Define a set of basic default roles https://review.openstack.org/566377 | 18:27 |
| *** AlexeyAbashkin has quit IRC | 18:30 | |
| openstackgerrit | Harry Rybacki proposed openstack/keystone-specs master: Define a set of basic default roles https://review.openstack.org/566377 | 18:34 |
| *** gyankum has quit IRC | 18:49 | |
| *** pcaruana has quit IRC | 19:10 | |
| lbragstad | woo | 19:24 |
| hrybacki | lbragstad: I just noted that the forum sessions for default roles points to the original spec: https://www.openstack.org/summit/vancouver-2018/summit-schedule/events/21761/default-roles | 19:38 |
| hrybacki | I'll add a comment to the original spec but do you know if we can update ^^ ? | 19:38 |
| lbragstad | i think we might be able to, but that'd be a good question for ttx | 19:39 |
| hrybacki | lbragstad: btw, I can't abandon the original patch as you are the owner | 19:43 |
| lbragstad | done | 19:45 |
| hrybacki | lbragstad++ | 19:48 |
| hrybacki | tbh that kinda stung :P | 19:48 |
| openstackgerrit | Harry Rybacki proposed openstack/keystone-specs master: Define a set of basic default roles https://review.openstack.org/566377 | 19:49 |
| hrybacki | should be good now lbagstad XD | 19:49 |
| lbragstad | i dig it | 19:49 |
| lbragstad | hrybacki: looks good - just a few comments so that we can make the specification keystone specific for now | 20:06 |
| lbragstad | but we should stash some of those examples away for the time being because they will be useful when we write up a community goal. | 20:06 |
| hrybacki | lbragstad: ack, thank you for the sanity check. I'm jumping out a bit early today but will re-scope and adjust based on those comments tomorrow or Sunday | 20:07 |
| hrybacki | Have a great weekend all! | 20:07 |
| lbragstad | hrybacki: ack - let me know if you need a hand with anything | 20:08 |
| lbragstad | have a good weekend | 20:08 |
| *** raildo has quit IRC | 20:31 | |
| *** mchlumsky has quit IRC | 20:42 | |
| *** martinus__ has quit IRC | 21:01 | |
| *** deepika08 has joined #openstack-keystone | 21:05 | |
| lbragstad | cmurphy: i don't suppose you have the queries available for those google links do you? | 21:10 |
| lbragstad | our shortened google urls have stopped working :( | 21:11 |
| *** dave-mccowan has quit IRC | 21:19 | |
| *** felipemonteiro has quit IRC | 21:20 | |
| *** edmondsw has quit IRC | 21:47 | |
| *** itlinux has quit IRC | 21:47 | |
| *** edmondsw has joined #openstack-keystone | 21:47 | |
| *** brad[] has quit IRC | 21:50 | |
| *** edmondsw has quit IRC | 21:52 | |
| *** spilla has quit IRC | 22:05 | |
| *** r-daneel has quit IRC | 22:21 | |
| *** markvoelker has quit IRC | 22:29 | |
| *** brad[] has joined #openstack-keystone | 22:33 | |
| *** linkmark has joined #openstack-keystone | 22:52 | |
| *** deepika08 has quit IRC | 23:15 | |
| kmalloc | lbragstad: what laptop are you using these days? | 23:18 |
| lbragstad[m] | kmalloc: my x1 still | 23:41 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!