*** gyee has quit IRC | 00:02 | |
*** itlinux has joined #openstack-keystone | 00:59 | |
*** orange_julius has quit IRC | 01:03 | |
*** imacdonn has quit IRC | 01:18 | |
*** imacdonn has joined #openstack-keystone | 01:18 | |
*** Dinesh_Bhor has joined #openstack-keystone | 01:23 | |
*** felipemonteiro has quit IRC | 01:24 | |
openstackgerrit | wangxiyuan proposed openstack/oslo.limit master: Add limit check func https://review.openstack.org/596520 | 02:13 |
---|---|---|
openstackgerrit | Merged openstack/keystone-specs master: Move MFA receipt specification to Stein https://review.openstack.org/594129 | 02:24 |
openstackgerrit | Vishakha Agarwal proposed openstack/python-keystoneclient master: create() call in v3.regions.py is wrong https://review.openstack.org/594921 | 03:10 |
*** sapd1 has quit IRC | 03:16 | |
*** Dinesh_Bhor has quit IRC | 03:46 | |
openstackgerrit | wangxiyuan proposed openstack/oslo.limit master: Add limit check func https://review.openstack.org/596520 | 04:03 |
openstackgerrit | Vishakha Agarwal proposed openstack/keystone master: Use items() instead of iteritems() https://review.openstack.org/594929 | 04:26 |
*** Dinesh_Bhor has joined #openstack-keystone | 04:36 | |
*** fiddletwix has quit IRC | 05:06 | |
*** ykarel has joined #openstack-keystone | 06:01 | |
ykarel | Hi i am seeing a strange error with python3 + keystonemiddleware and oslo.config >= 6.3.0, detected in glance. Don't know if it's already known, i reported https://bugs.launchpad.net/keystonemiddleware/+bug/1789351 | 06:04 |
openstack | Launchpad bug 1789351 in oslo.config "Glance deployment with python3 + "keystone" paste_deploy flavor Fails" [Undecided,New] | 06:04 |
ykarel | larsks, any idea ^^ | 06:05 |
openstackgerrit | Vishakha Agarwal proposed openstack/keystone master: Incorrect use of translation _() https://review.openstack.org/596683 | 06:33 |
*** Dinesh_Bhor has quit IRC | 06:39 | |
*** pcaruana has joined #openstack-keystone | 06:39 | |
*** Dinesh_Bhor has joined #openstack-keystone | 07:01 | |
*** rcernin has quit IRC | 07:02 | |
*** dims has quit IRC | 07:08 | |
*** dims has joined #openstack-keystone | 07:10 | |
*** sapd1 has joined #openstack-keystone | 07:33 | |
*** andymccr has joined #openstack-keystone | 07:35 | |
*** ykarel is now known as ykarel|lunch | 07:43 | |
*** josecastroleon has joined #openstack-keystone | 08:30 | |
*** Dinesh_Bhor has quit IRC | 08:38 | |
*** ykarel|lunch is now known as ykarel | 08:40 | |
wxy-xiyuan | ykarel: hi, still online? | 08:51 |
ykarel | wxy-xiyuan, yes i am here | 08:52 |
wxy-xiyuan | I tried locally, can't reproduce. But your patch shows that devstack failed. it's a little strange. | 08:52 |
ykarel | wxy-xiyuan, u used USE_PYTHON=3? | 08:53 |
wxy-xiyuan | year, /usr/bin/python3.5 /usr/local/bin/glance-api --config-file=/etc/glance/glance-api.conf | 08:53 |
ykarel | wxy-xiyuan, and u set flavor=keystone? | 08:54 |
wxy-xiyuan | and ykarel year | 08:55 |
wxy-xiyuan | and oslo.config is 6.4.0 | 08:55 |
wxy-xiyuan | I wonder how "if self._conf.oslo_conf_obj != cfg.CONF" could raise ERROR: dictionary changed size during iteration | 08:56 |
wxy-xiyuan | ykarel: could you say more here about your debug? | 08:56 |
ykarel | wxy-xiyuan, yes it's raising, | 08:56 |
ykarel | wxy-xiyuan, can u share ur local.conf? how u reproduced | 08:57 |
ykarel | wxy-xiyuan, just above that line, import pdb;pdb.set_trace() | 08:57 |
ykarel | and then any comparison with cfg.CONF, like cfg.CONF == cfg.CONF, returns that Error | 08:58 |
ykarel | and if u see len(cfg.CONF.keys()) before and after it differs | 08:58 |
*** Dinesh_Bhor has joined #openstack-keystone | 08:59 | |
*** rcernin has joined #openstack-keystone | 08:59 | |
wxy-xiyuan | ykarel: I just start glance-api by hand in py3.5 with oslo.config==6.4.0 and flavor=keystone. I did not reinstall devstack. | 09:00 |
wxy-xiyuan | ykarel: glance and keystonemiddleware are both on master branch. | 09:01 |
openstackgerrit | Vishakha Agarwal proposed openstack/keystone master: Incorrect use of translation _() https://review.openstack.org/596683 | 09:02 |
ykarel | wxy-xiyuan, can u try installing glance with py3 in venv | 09:02 |
wxy-xiyuan | ykarel: let me try again. | 09:03 |
ykarel | wxy-xiyuan, ack | 09:03 |
wxy-xiyuan | ykarel: BTW, does this work in your env http://paste.openstack.org/show/728908/ or it will raise the error? | 09:04 |
ykarel | wxy-xiyuan, it works | 09:06 |
ykarel | the error i mentioned happens with the scenario i mentioned in bug | 09:07 |
wxy-xiyuan | ykarel: ok | 09:07 |
wxy-xiyuan | ykarel: still the same with venv. I'll download your devstack patch and re-install it locally to see what happend | 09:13 |
*** takamatsu has joined #openstack-keystone | 09:15 | |
ykarel | wxy-xiyuan, ack, btw local.conf and the steps that i used to get it locally:- http://paste.openstack.org/show/728909/ | 09:19 |
ykarel | wxy-xiyuan, let me know if u are able to reproduce | 09:19 |
ykarel | if not i can try again | 09:19 |
*** hoonetorg has quit IRC | 09:20 | |
*** rcernin has quit IRC | 09:47 | |
*** Emine has joined #openstack-keystone | 09:47 | |
*** Emine has quit IRC | 10:05 | |
*** Emine has joined #openstack-keystone | 10:10 | |
*** Emine has quit IRC | 10:14 | |
*** Emine has joined #openstack-keystone | 10:14 | |
*** zul has joined #openstack-keystone | 10:19 | |
*** nicolasbock has joined #openstack-keystone | 10:20 | |
*** Dinesh_Bhor has quit IRC | 10:23 | |
*** Dinesh_Bhor has joined #openstack-keystone | 10:27 | |
*** sapd1 has quit IRC | 10:51 | |
*** Dinesh_Bhor has quit IRC | 11:09 | |
*** Dinesh_Bhor has joined #openstack-keystone | 11:21 | |
*** Dinesh_Bhor has quit IRC | 11:24 | |
*** ducnv has joined #openstack-keystone | 11:29 | |
*** szaher has joined #openstack-keystone | 11:46 | |
ducnv | Hi folks, in [keystone_authtoken] section I see some options have been configured as 'project_domain_name = Default', 'user_domain_name = Default' (https://docs.openstack.org/glance/queens/install/install-ubuntu.html#install-and-configure-components) | 12:06 |
ducnv | But I didn't see them in `glance-api.conf` sample file | 12:07 |
ducnv | https://github.com/openstack/glance/blob/master/etc/glance-api.conf | 12:07 |
ducnv | Who can tell me these options belong to which namespace? | 12:07 |
ducnv | Thanks in advance. | 12:07 |
*** raildo has joined #openstack-keystone | 12:08 | |
*** Emine has quit IRC | 12:17 | |
*** Emine has joined #openstack-keystone | 12:21 | |
wxy-xiyuan | ducnv: these kind of options are registered dynamically into [keystone_authtoken] in when a service start, base on which auth_type the service using. | 12:32 |
wxy-xiyuan | ducnv: they are from keystoneauth lib. for example: https://github.com/openstack/keystoneauth/blob/ebe781a3ea0386d6ff088a84e8dde26e538b856d/keystoneauth1/loading/identity.py#L136 | 12:32 |
wxy-xiyuan | ducnv: so "list_opts" does not contain them. | 12:32 |
wxy-xiyuan | ykarel: have to leave now. my devstack env hit some problem. I'll keep looking this bug tomorrow | 12:37 |
ykarel | wxy-xiyuan, okk, let me know in case of any issue, Thanks | 12:38 |
ducnv | wxy-xiyuan, yes I got it, thanks a lot. | 12:52 |
*** Emine has quit IRC | 13:16 | |
*** Emine has joined #openstack-keystone | 13:40 | |
*** itlinux has quit IRC | 14:12 | |
lbragstad | am i unrealistic for making the policy deprecation cycle one release (e.g. change the default policy in N and remove the deprecated one in N+1)? | 14:17 |
gagehugo | hmm | 14:23 |
*** pcaruana has quit IRC | 14:29 | |
*** pcaruana has joined #openstack-keystone | 14:30 | |
*** r-daneel has joined #openstack-keystone | 14:39 | |
*** dolly has joined #openstack-keystone | 14:43 | |
dolly | When using 'openstack application credential list --debug' I see, 1 ) https://cloud.internal:13000 "POST /v3/auth/tokens HTTP/1.1" 201 10384 containing the token and the whole catalog, 2 ) REQ: curl -g -i -X GET https://cloud.internal:35357 -H "Accept: application/json" -H "User-Agent: openstacksdk/0.17.2 keystoneauth1/3.10.0 python-requests/2.19.1 CPython/2.7.15" | 14:44 |
dolly | Why does the second request go to the admin endpoint ? | 14:44 |
dolly | We don't have that available to our users. | 14:44 |
dolly | Using Queens | 14:45 |
*** markvoelker has joined #openstack-keystone | 14:45 | |
larsks | dolly: if you specify '--os-interface public' does it use the correct endpoint? | 14:48 |
*** fiddletwix has joined #openstack-keystone | 14:48 | |
*** fiddletwix has quit IRC | 14:49 | |
*** markvoelker has quit IRC | 14:49 | |
*** fiddletwix has joined #openstack-keystone | 14:50 | |
dolly | larsks, yes that seem to work! | 14:50 |
lbragstad | dolly: oh - nice... sorry i missed the ping in -dev | 14:52 |
lbragstad | i assume https://cloud.internal:35357 is listed as an admin endpoint in your catalog? | 14:53 |
dolly | yes exactly | 14:53 |
dolly | Not sure why it would grab the admin endpoint url though ? | 14:55 |
*** Martin_Ch has quit IRC | 14:55 | |
*** nicolasbock has quit IRC | 14:56 | |
*** nicolasbock has joined #openstack-keystone | 14:59 | |
larsks | dolly: you can the OS_INTERFACE environment variable to avoid setting that on the command line all the time. | 15:00 |
*** pcaruana has quit IRC | 15:00 | |
dolly | larsks, ok, I understand. Still curious though why I get the admin endpoint back ? same with openstack roles command ? | 15:00 |
larsks | Not sure about that. I've noticed that some commands just seem to prefer the admin endpoint. | 15:01 |
dolly | Seems a bit like a bug to me.. But yea, setting that env works so =) | 15:03 |
*** jroll has quit IRC | 15:05 | |
*** jroll has joined #openstack-keystone | 15:06 | |
*** itlinux has joined #openstack-keystone | 15:07 | |
lbragstad | it's likely left over from when the v2.0 api was in use | 15:15 |
lbragstad | v3 isn't deployed using two separate applications, so the concept of an admin and public endpoint for v3 is kind of moot | 15:16 |
lbragstad | is this rendering in chinese for anyone else? https://etherpad.openstack.org/p/keystone-weekly-meeting | 15:16 |
gagehugo | lbragstad lol yup | 15:17 |
lbragstad | looking at the timeline it looks like it changed yesterday? | 15:18 |
*** ykarel is now known as ykarel|away | 15:19 | |
gagehugo | that's what I see | 15:20 |
gagehugo | TIL what my last name in simplified chinese looks like | 15:22 |
*** ducnv_ has joined #openstack-keystone | 15:23 | |
*** wxy| has joined #openstack-keystone | 15:24 | |
*** gyee has joined #openstack-keystone | 15:27 | |
*** david-lyle has quit IRC | 15:33 | |
*** ducnv_ has quit IRC | 15:33 | |
*** ducnv_ has joined #openstack-keystone | 15:33 | |
*** dklyle has joined #openstack-keystone | 15:34 | |
*** ykarel|away has quit IRC | 15:36 | |
*** ykarel|away has joined #openstack-keystone | 15:37 | |
openstackgerrit | Merged openstack/keystone master: Add details and clarify examples on casing https://review.openstack.org/590477 | 15:38 |
*** jhesketh has quit IRC | 15:41 | |
*** jhesketh has joined #openstack-keystone | 15:41 | |
*** jistr is now known as jistr|call | 15:42 | |
*** ykarel|away has quit IRC | 15:42 | |
*** jistr|call is now known as jistr | 15:43 | |
*** hrybacki has joined #openstack-keystone | 16:01 | |
*** Emine has quit IRC | 16:02 | |
*** raildo has quit IRC | 16:03 | |
*** dave-mccowan has joined #openstack-keystone | 16:12 | |
*** raildo has joined #openstack-keystone | 16:13 | |
*** raildo has quit IRC | 16:15 | |
*** raildo has joined #openstack-keystone | 16:16 | |
openstackgerrit | Merged openstack/keystonemiddleware master: Handle DiscoveryFailure errors https://review.openstack.org/575214 | 16:21 |
*** raildo has quit IRC | 16:23 | |
*** raildo has joined #openstack-keystone | 16:23 | |
kmalloc | gagehugo: +2/+A https://review.openstack.org/#/c/596973/ | 16:29 |
gagehugo | kmalloc ty | 16:29 |
kmalloc | mordred: https://review.openstack.org/#/c/595980/ if there is no other way, i'll +2. | 16:30 |
*** wxy| has quit IRC | 16:35 | |
lbragstad | #startmeeting keystone-office-hours | 17:08 |
openstack | Meeting started Tue Aug 28 17:08:15 2018 UTC and is due to finish in 60 minutes. The chair is lbragstad. Information about MeetBot at http://wiki.debian.org/MeetBot. | 17:08 |
openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 17:08 |
*** openstack changes topic to " (Meeting topic: keystone-office-hours)" | 17:08 | |
*** ChanServ changes topic to "Rocky release schedule: https://releases.openstack.org/rocky/schedule.html | Meeting agenda: https://etherpad.openstack.org/p/keystone-weekly-meeting | Bugs that need triaging: http://bit.ly/2iJuN1h | Trello: https://trello.com/b/wmyzbFq5/keystone-rocky-roadmap !!NOTE!! This Channel is Logged ( https://tinyurl.com/OpenStackKeystone )" | 17:08 | |
openstack | The meeting name has been set to 'keystone_office_hours' | 17:08 |
openstackgerrit | Lance Bragstad proposed openstack/keystone master: Implement scope_type checking for credentials https://review.openstack.org/594547 | 17:13 |
openstackgerrit | Lance Bragstad proposed openstack/keystone master: Loosen the assertion for logging scope type warnings https://review.openstack.org/597186 | 17:13 |
openstackgerrit | Lance Bragstad proposed openstack/keystone master: Remove obsolete credential policies https://review.openstack.org/597187 | 17:13 |
lbragstad | ok - that *is* going to pass this time | 17:13 |
* lbragstad attempts jedi mind tricks on zuul | 17:13 | |
*** ducnv_ has quit IRC | 17:18 | |
*** raildo has quit IRC | 17:35 | |
*** raildo has joined #openstack-keystone | 17:38 | |
*** raildo_ has joined #openstack-keystone | 17:42 | |
*** raildo has quit IRC | 17:45 | |
*** raildo_ is now known as raildo | 17:46 | |
openstackgerrit | Andreas Jaeger proposed openstack/keystone master: import zuul job settings from project-config https://review.openstack.org/594440 | 17:51 |
*** markvoelker has joined #openstack-keystone | 17:51 | |
*** r-daneel_ has joined #openstack-keystone | 17:53 | |
*** r-daneel has quit IRC | 17:53 | |
*** r-daneel_ is now known as r-daneel | 17:53 | |
openstackgerrit | Andreas Jaeger proposed openstack/keystone-tempest-plugin master: import zuul job settings from project-config https://review.openstack.org/594458 | 17:55 |
*** r-daneel_ has joined #openstack-keystone | 18:31 | |
*** r-daneel has quit IRC | 18:32 | |
*** r-daneel_ is now known as r-daneel | 18:32 | |
*** markvoelker has quit IRC | 18:32 | |
*** markvoelker has joined #openstack-keystone | 18:33 | |
*** dave-mccowan has quit IRC | 18:36 | |
*** markvoelker has quit IRC | 18:37 | |
*** dave-mccowan has joined #openstack-keystone | 18:45 | |
lbragstad | kmalloc: i've worked through all the flask changes, including groups and federation | 19:07 |
openstackgerrit | sonu proposed openstack/keystone master: Drop support for ephemeral user type https://review.openstack.org/570706 | 19:07 |
*** markvoelker has joined #openstack-keystone | 19:19 | |
*** hoonetorg has joined #openstack-keystone | 19:22 | |
*** hoonetorg has quit IRC | 19:24 | |
*** dave-mccowan has quit IRC | 19:26 | |
gagehugo | kmalloc the domain config plumbing is "interesting" | 19:35 |
kmalloc | gagehugo: yeah :( | 19:40 |
kmalloc | lbragstad: thnx | 19:41 |
ildikov | lbragstad: hi, are you around? | 19:52 |
lbragstad | ildikov: i am | 19:52 |
lbragstad | what's up? | 19:52 |
ildikov | we did a little planning with the Edge Group today for the PTG and were wondering whether we could have the Keystone session on Tuesday 10am - 11:45am? | 19:53 |
ildikov | we have a generic requirements topic that would make sense to discuss first | 19:54 |
ildikov | and people also felt that 2 hours 45 minutes would be a little long | 19:54 |
ildikov | could that work for the Keystone team or it would mess up your agenda too much? | 19:55 |
*** raildo has quit IRC | 20:05 | |
ildikov | lbragstad: ^^ | 20:07 |
* lbragstad checks | 20:08 | |
lbragstad | ildikov: yeah - that won't be a problem | 20:09 |
lbragstad | the time slots are pretty generic and we break them down once we're happy with the overall grouping of topics | 20:09 |
ildikov | lbragstad: cool, sounds good | 20:10 |
lbragstad | ildikov: is anyone from that particular group interested in the full-fledged idp discussions? | 20:10 |
lbragstad | or was the time assessment only considering the "identity & edge architecture" bullets | 20:11 |
ildikov | lbragstad: identity & edge at this point | 20:13 |
lbragstad | ack | 20:13 |
lbragstad | i'll bump the second topic to 9 am then - just to make sure we slot the entire time slice for edge stuff | 20:13 |
ildikov | can give a heads up on the edge MLs once the schedule is roughly set | 20:13 |
lbragstad | sounds good | 20:13 |
ildikov | this is how ours looks like right now: https://etherpad.openstack.org/p/EdgeComputingGroupPTG4 | 20:13 |
lbragstad | cc knikolla ^ | 20:14 |
knikolla | awesome, bookmarking | 20:15 |
ildikov | lbragstad: thanks for being so flexible! | 20:15 |
lbragstad | no problem - thanks for keeping in touch about your schedule | 20:16 |
gagehugo | kmalloc what about grants? | 20:18 |
gagehugo | https://github.com/openstack/keystone/blob/master/keystone/assignment/routers.py#L100 | 20:18 |
*** itlinux has quit IRC | 20:31 | |
*** markvoelker has quit IRC | 21:05 | |
*** hoonetorg has joined #openstack-keystone | 21:36 | |
kmalloc | gagehugo: yep, you need to port all of the apis that start with /domains | 21:44 |
*** rcernin has joined #openstack-keystone | 21:46 | |
kmalloc | gagehugo: its what makes these not a ton of fun. | 21:50 |
*** mchlumsky has quit IRC | 21:58 | |
lbragstad | #endmeeting | 22:06 |
*** openstack changes topic to "Rocky release schedule: https://releases.openstack.org/rocky/schedule.html | Meeting agenda: https://etherpad.openstack.org/p/keystone-weekly-meeting | Bugs that need triaging: http://bit.ly/2iJuN1h | Trello: https://trello.com/b/wmyzbFq5/keystone-rocky-roadmap !!NOTE!! This Channel is Logged ( https://tinyurl.com/OpenStackKeystone )" | 22:06 | |
openstack | Meeting ended Tue Aug 28 22:06:22 2018 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 22:06 |
openstack | Minutes: http://eavesdrop.openstack.org/meetings/keystone_office_hours/2018/keystone_office_hours.2018-08-28-17.08.html | 22:06 |
openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/keystone_office_hours/2018/keystone_office_hours.2018-08-28-17.08.txt | 22:06 |
openstack | Log: http://eavesdrop.openstack.org/meetings/keystone_office_hours/2018/keystone_office_hours.2018-08-28-17.08.log.html | 22:06 |
*** r-daneel has quit IRC | 23:10 | |
gagehugo | kmalloc ack | 23:33 |
*** itlinux has joined #openstack-keystone | 23:53 | |
*** threestrands has joined #openstack-keystone | 23:54 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!