| *** felipemonteiro has joined #openstack-keystone | 00:00 | |
| *** felipemonteiro has quit IRC | 00:04 | |
| *** openstackgerrit has quit IRC | 00:09 | |
| *** felipemonteiro has joined #openstack-keystone | 00:10 | |
| *** felipemonteiro has quit IRC | 00:14 | |
| *** felipemonteiro has joined #openstack-keystone | 00:32 | |
| *** felipemonteiro has quit IRC | 00:34 | |
| *** felipemonteiro has joined #openstack-keystone | 00:56 | |
| *** felipemonteiro has quit IRC | 00:57 | |
| *** felipemonteiro has joined #openstack-keystone | 01:44 | |
| *** jmccrory has quit IRC | 01:54 | |
| *** jmccrory has joined #openstack-keystone | 01:57 | |
| *** lbragstad has joined #openstack-keystone | 02:08 | |
| *** ChanServ sets mode: +o lbragstad | 02:08 | |
| *** felipemonteiro has quit IRC | 02:29 | |
| *** lbragstad has quit IRC | 02:36 | |
| *** lbragstad has joined #openstack-keystone | 02:41 | |
| *** ChanServ sets mode: +o lbragstad | 02:41 | |
| *** pooja_jadhav has joined #openstack-keystone | 04:00 | |
| *** sapd1_ has quit IRC | 04:44 | |
| *** sapd1__ has joined #openstack-keystone | 04:44 | |
| *** shyamb has joined #openstack-keystone | 05:08 | |
| *** felipemonteiro has joined #openstack-keystone | 05:14 | |
| *** shyamb has quit IRC | 05:27 | |
| *** sapd1__ has quit IRC | 05:50 | |
| *** sapd1 has joined #openstack-keystone | 05:51 | |
| *** belmoreira has joined #openstack-keystone | 05:55 | |
| *** shyamb has joined #openstack-keystone | 06:00 | |
| *** felipemonteiro has quit IRC | 06:16 | |
| *** openstackgerrit has joined #openstack-keystone | 07:03 | |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: [wip] Domain level unified limit support https://review.openstack.org/602824 | 07:03 |
|---|---|---|
| *** rcernin has quit IRC | 07:11 | |
| *** shyamb has quit IRC | 08:02 | |
| *** shyamb has joined #openstack-keystone | 08:14 | |
| *** nick_kar has joined #openstack-keystone | 08:42 | |
| *** shyamb has quit IRC | 08:56 | |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: [wip] Domain level unified limit support https://review.openstack.org/602824 | 09:07 |
| *** shyamb has joined #openstack-keystone | 09:31 | |
| *** shyamb has quit IRC | 10:20 | |
| *** belmoreira has quit IRC | 10:22 | |
| *** shyamb has joined #openstack-keystone | 10:23 | |
| *** tobiash has joined #openstack-keystone | 10:36 | |
| *** dtantsur has joined #openstack-keystone | 10:36 | |
| dtantsur | hi folks! does this ring any bells? http://logs.openstack.org/18/602618/1/check/openstacksdk-functional-devstack-tips/02b87a9/controller/logs/screen-keystone.txt.gz?level=WARNING#_Sep_16_15_37_39_019932 | 10:36 |
| dtantsur | I highly suspect https://github.com/openstack/keystone/commit/296f20f0a7e26784b6414ddbe12e0218087a9f51 could cause it, the failure is around the flask code | 10:41 |
| dtantsur | okay, it seems that this call is missing from many resources: https://github.com/openstack/keystone/blob/master/keystone/server/flask/common.py#L940 | 10:45 |
| dtantsur | are you sure you did not forget some base implementation? | 10:46 |
| *** shyamb has quit IRC | 10:59 | |
| dtantsur | filed https://bugs.launchpad.net/keystone/+bug/1792913 | 11:03 |
| openstack | Launchpad bug 1792913 in OpenStack Identity (keystone) "Keystone HTTP 500: AttributeError: type object 'GroupsResource' has no attribute '_get_domain_id_from_token'" [Undecided,New] | 11:03 |
| *** shyamb has joined #openstack-keystone | 11:05 | |
| wxy-xiyuan | dtantsur: yeah, Felipe has a fix https://review.openstack.org/602808 | 11:11 |
| dtantsur | wxy-xiyuan: cool, thanks! created https://review.openstack.org/#/c/603098/ to test the fix | 11:17 |
| *** imacdonn has quit IRC | 11:18 | |
| *** imacdonn has joined #openstack-keystone | 11:19 | |
| dtantsur | I really wonder why the keystone CI did not catch the problem. | 11:19 |
| wxy-xiyuan | dtantsur: because the Keystone test code always contains "domain_id" in the request body when test creating group. So code won't go after https://github.com/openstack/keystone/blob/master/keystone/server/flask/common.py#L939 | 11:21 |
| dtantsur | yeah.. maybe worth adding an openstacksdk CI job? /me just thinking aloud | 11:21 |
| *** belmoreira has joined #openstack-keystone | 11:23 | |
| wxy-xiyuan | dtantsur: ++ maybe. | 11:24 |
| wxy-xiyuan | tempest missed the non-domain_id case as well. https://github.com/openstack/tempest/blob/f5b034da57b1fc531269e07ea7bc11247f624de4/tempest/api/identity/admin/v3/test_groups.py#L36 | 11:24 |
| *** felipemonteiro has joined #openstack-keystone | 11:33 | |
| lbragstad | o/ | 11:35 |
| *** felipemonteiro has quit IRC | 11:56 | |
| *** felipemonteiro has joined #openstack-keystone | 11:58 | |
| *** raildo has joined #openstack-keystone | 12:03 | |
| *** shyamb has quit IRC | 12:06 | |
| *** prashkre has joined #openstack-keystone | 12:16 | |
| *** felipemonteiro has quit IRC | 12:17 | |
| *** felipemonteiro has joined #openstack-keystone | 12:18 | |
| *** felipemonteiro has quit IRC | 12:21 | |
| *** felipemonteiro has joined #openstack-keystone | 12:27 | |
| *** prashkre has quit IRC | 12:40 | |
| *** raildo has quit IRC | 12:45 | |
| *** raildo has joined #openstack-keystone | 12:45 | |
| *** felipemonteiro has quit IRC | 12:52 | |
| *** felipemonteiro has joined #openstack-keystone | 12:57 | |
| johnthetubaguy | lbragstad: hey, hope you got home OK, just wondering if someone is already working on a summary of the federation discussions at the PTG, I missed those | 13:13 |
| *** felipemonteiro has quit IRC | 13:18 | |
| * cmurphy will work on something | 13:19 | |
| johnthetubaguy | cmurphy: awesome! | 13:25 |
| *** felipemonteiro has joined #openstack-keystone | 13:31 | |
| *** felipemonteiro has quit IRC | 13:33 | |
| *** belmorei_ has joined #openstack-keystone | 13:33 | |
| *** belmoreira has quit IRC | 13:33 | |
| hrybacki | o/ | 13:55 |
| *** mbeierl has joined #openstack-keystone | 14:03 | |
| lbragstad | johnthetubaguy we got some nice context on thursday morning | 14:03 |
| lbragstad | which is here - https://etherpad.openstack.org/p/keystone-stein-federation | 14:04 |
| johnthetubaguy | lbragstad: we have a few users wanting to go all in on federation soon, so just wanted to read through to see if we are seeing all the same things | 14:04 |
| lbragstad | oh - sure | 14:04 |
| johnthetubaguy | cool, found that | 14:05 |
| lbragstad | i think the gist of it was that we need to address those bugs | 14:05 |
| lbragstad | and then the "additional work items" were ultimately specifications | 14:05 |
| lbragstad | that we could start working on | 14:05 |
| johnthetubaguy | its the group membership and federated users, ideally moving to a time based lease so app creds and heat work | 14:05 |
| johnthetubaguy | yeah, stable uuids and things from the edge sessions seemed super interesting | 14:06 |
| johnthetubaguy | I know yankcrime has been looking at this in more detail than me, so hopefully we can help in some way to move things forward | 14:07 |
| lbragstad | ++ | 14:08 |
| lbragstad | we're certainly open to feedback, especially on the stuff that came up last week regarding the idp proxy bit | 14:09 |
| lbragstad | knikolla said he was going to try writing everything up as a series of specifications | 14:10 |
| johnthetubaguy | (our current plans are using keycloak as a central idp proxy) | 14:10 |
| johnthetubaguy | cool | 14:10 |
| *** mbeierl has quit IRC | 14:13 | |
| kmalloc | johnthetubaguy: and fwiw, it is likely keycloak will meet the needs of some other folks before we get keystone in shape to be the proxy | 14:18 |
| johnthetubaguy | kmalloc: +1, FWIW, its the group management self-service and self-service two factor enforcement that interests me the most | 14:20 |
| kmalloc | johnthetubaguy: yep | 14:21 |
| yankcrime | still early days for me on the keycloak stuff | 14:21 |
| kmalloc | johnthetubaguy: hopefully this week i'll have an example of keycloak and dex up for some evaluation for covering those gaps. | 14:21 |
| yankcrime | i've not yet bumped into anything that falls into the 'needs fixing in keystone' category | 14:21 |
| kmalloc | johnthetubaguy: and i expect within a year (provided we week moving forward) keystone could fill most of the needs of either. | 14:22 |
| kmalloc | s/week/we keep/ | 14:23 |
| gagehugo | o/ | 14:31 |
| *** belmorei_ has quit IRC | 14:43 | |
| *** belmoreira has joined #openstack-keystone | 14:45 | |
| *** mbeierl has joined #openstack-keystone | 14:46 | |
| *** _d34dh0r53_ is now known as d34dh0r53 | 14:54 | |
| hrybacki | gagehugo: kmalloc I'm taking swing at projects api this week fyi | 14:58 |
| *** bnemec has joined #openstack-keystone | 14:59 | |
| gagehugo | hrybacki: \o/ | 15:00 |
| * knikolla will not be in front of a pc for another hour | 15:05 | |
| knikolla | Hope everyone had a safe travel back | 15:05 |
| knikolla | (We’ve been using a convoluted keycloak proxy idp setup, so I’ll be happy to help to the extent of my knowledge) | 15:12 |
| openstackgerrit | Lance Bragstad proposed openstack/oslo.limit master: Render API reference documentation https://review.openstack.org/600264 | 15:19 |
| openstackgerrit | Lance Bragstad proposed openstack/oslo.limit master: Add a conceptual overview to docs https://review.openstack.org/600265 | 15:19 |
| openstackgerrit | Lance Bragstad proposed openstack/oslo.limit master: Allow ProjectClaims to support multiple resources https://review.openstack.org/600266 | 15:19 |
| openstackgerrit | Lance Bragstad proposed openstack/oslo.limit master: Ignore documentation builds https://review.openstack.org/603167 | 15:19 |
| kmalloc | hrybacki: okie | 15:24 |
| *** trident has quit IRC | 15:38 | |
| *** trident has joined #openstack-keystone | 15:39 | |
| lbragstad | knikolla wxy-xiyuan cmurphy kmalloc gagehugo hrybacki any preferences for when we should do the retrospective this week? | 15:41 |
| knikolla | lbragstad: doodle poll? | 15:42 |
| kmalloc | if it is tuesday or thursday, it has to be after 11am pacific | 15:42 |
| lbragstad | ++ yeah - i can throw one together | 15:42 |
| kmalloc | otherwise, short of a case of the conference ick (which I don't think can be shared via bluejeans :P) I am good with most times. | 15:43 |
| kmalloc | (aka, today is not my 1st choice, still feeling gross) | 15:43 |
| knikolla | Another good one is when2meet.com | 15:43 |
| knikolla | Same for not today | 15:44 |
| hrybacki | lbragstad: I think we can do most of it async and address items folks want to raise (rather than just be known) | 15:44 |
| kmalloc | as long as it doesn't require an account/sign-in knikolla :) | 15:44 |
| hrybacki | my schedule is not good until Friday | 15:44 |
| lbragstad | ack | 15:44 |
| knikolla | kmalloc: you can set up a per poll username/pass to edit your selection | 15:44 |
| lbragstad | that'll probably work better for wxy-xiyuan and cmurphy, too | 15:45 |
| hrybacki | I'll re-raise this at tomorrow's mtg | 15:45 |
| gagehugo | yeah not today, I also feel a tad gross | 15:46 |
| *** dklyle has quit IRC | 15:49 | |
| *** dklyle has joined #openstack-keystone | 15:50 | |
| *** belmoreira has quit IRC | 15:55 | |
| kmalloc | lbragstad: uh | 16:09 |
| kmalloc | lbragstad: next week is a giant question mark for me. | 16:09 |
| openstackgerrit | Lance Bragstad proposed openstack/oslo.limit master: Use openstackdocstheme for documentation https://review.openstack.org/600866 | 16:09 |
| kmalloc | lbragstad: chances are I can't commit to any time until the day of. | 16:09 |
| kmalloc | lbragstad: more dr. appointments and some big-deal things that could be any day that week | 16:09 |
| kmalloc | lbragstad: so, i have to decline all of next week options for the retro | 16:10 |
| lbragstad | kmalloc no worries - if it ends up being a bust for others too we can push it | 16:10 |
| lbragstad | the retro meeting is kinda tbd depending on the feedback (which is completely async anyway) | 16:10 |
| kmalloc | yeh | 16:11 |
| lbragstad | so long as people add their feedback, that'll be good | 16:12 |
| lbragstad | and we'll see if we even need to have a meeting | 16:12 |
| *** gyee has joined #openstack-keystone | 16:12 | |
| *** dtantsur is now known as dtantsur|afk | 16:54 | |
| *** prashkre has joined #openstack-keystone | 16:59 | |
| openstackgerrit | Andreas Jaeger proposed openstack/keystone master: Use templates for cover and lower-constraints https://review.openstack.org/600690 | 17:32 |
| *** david-lyle has joined #openstack-keystone | 17:54 | |
| *** dklyle has quit IRC | 17:57 | |
| *** AJaeger has joined #openstack-keystone | 18:04 | |
| openstackgerrit | Andreas Jaeger proposed openstack/keystone-tempest-plugin master: Rename keystone zuul jobs https://review.openstack.org/603198 | 18:05 |
| *** fiddletwix has quit IRC | 18:05 | |
| AJaeger | keystone tempest cores, a tiny cleanup for your consideration - helps to cleanup global job list. Thanks | 18:08 |
| *** openstackgerrit has quit IRC | 18:10 | |
| *** fiddletwix has joined #openstack-keystone | 18:16 | |
| *** fiddletwix has quit IRC | 18:22 | |
| *** felipemonteiro has joined #openstack-keystone | 19:23 | |
| *** felipemonteiro has quit IRC | 19:32 | |
| kmalloc | AJaeger: +2 from me, looks fine | 19:37 |
| AJaeger | kmalloc: thanks | 19:37 |
| AJaeger | kmalloc: left a comment - it's not just renaming, it's using "your" own keystone jobs | 19:37 |
| kmalloc | AJaeger: wfm. still +2 | 19:42 |
| AJaeger | thanks | 19:42 |
| *** felipemonteiro has joined #openstack-keystone | 19:46 | |
| ildikov | kmalloc: hi :) | 19:52 |
| ildikov | kmalloc: I pinged you to get back to federation testing a little | 19:53 |
| ildikov | kmalloc: we have this etherpad with a few test case ideas: https://etherpad.openstack.org/p/ECG_Keystone_Testing | 19:53 |
| ildikov | kmalloc: would be great to get some feedback and if there's any other effort in this area please add a pointer to that to the etherpad too | 19:54 |
| ildikov | knikolla: lbragstad: cmurphy: ^^ | 19:54 |
| lbragstad | oh - nice | 19:55 |
| hrybacki | kmalloc: where are the `api_bp` being populated for https://github.com/openstack/keystone/blob/master/keystone/api/__init__.py#L59-L81 ? Following a traceback from: https://github.com/openstack/keystone/blob/master/keystone/server/flask/application.py#L239-L241 | 19:55 |
| ildikov | lbragstad: the etherpad has all testing efforts in it so it's a bit messy, will do some cleanup when I get there :) | 19:56 |
| *** felipemonteiro has quit IRC | 20:01 | |
| *** prashkre has quit IRC | 20:10 | |
| *** prashkre has joined #openstack-keystone | 20:10 | |
| kmalloc | hrybacki: post a whole traceback? | 20:26 |
| *** lbragstad has quit IRC | 20:26 | |
| *** lbragstad has joined #openstack-keystone | 20:27 | |
| *** ChanServ sets mode: +o lbragstad | 20:27 | |
| hrybacki | kmalloc: https://paste.fedoraproject.org/paste/aFnfeXWdmaqGzHZEXcAC1Q -- all API tests are failing in the same manner -- I broke the app factory IIUC | 20:28 |
| kmalloc | hrybacki: look at the bottom of say: keystone.api.credentials see the "APIs = | 20:28 |
| * hrybacki slaps his forehead | 20:28 | |
| kmalloc | It's ok, blame flo (hurricanes suck) ^_^ | 20:29 |
| hrybacki | thanks kmalloc :P | 20:30 |
| * lbragstad just finished his TC report | 20:38 | |
| lbragstad | my brain is mush | 20:38 |
| *** prashkre has quit IRC | 21:06 | |
| *** raildo has quit IRC | 21:28 | |
| *** felipemonteiro has joined #openstack-keystone | 21:39 | |
| * knikolla just woke up from a longer than planned afternoon nap | 22:07 | |
| *** rcernin has joined #openstack-keystone | 22:08 | |
| *** openstackgerrit has joined #openstack-keystone | 22:11 | |
| openstackgerrit | Morgan Fainberg proposed openstack/keystone master: Properly normalize domain ids in flask https://review.openstack.org/603239 | 22:11 |
| kmalloc | lbragstad, knikolla: lovely bug reported by mordred fixed here ^ | 22:11 |
| kmalloc | https://bugs.launchpad.net/keystone/+bug/1793027 | 22:11 |
| openstack | Launchpad bug 1793027 in OpenStack Identity (keystone) "Flask doesn't normalize domains sanely in some cases" [Critical,In progress] - Assigned to Morgan Fainberg (mdrnstm) | 22:11 |
| lbragstad | acj | 22:12 |
| lbragstad | ack* | 22:12 |
| lbragstad | stepping out for a bit but i'm going to be on later | 22:12 |
| kmalloc | hrybacki: ^ that fix will impact "users" port to flask as wel | 22:13 |
| kmalloc | ll | 22:13 |
| *** felipemonteiro has quit IRC | 22:15 | |
| *** felipemonteiro has joined #openstack-keystone | 22:18 | |
| *** felipemonteiro has quit IRC | 22:34 | |
| *** felipemonteiro has joined #openstack-keystone | 22:44 | |
| *** spilla has joined #openstack-keystone | 22:50 | |
| *** spilla has quit IRC | 22:51 | |
| openstackgerrit | Felipe Monteiro proposed openstack/keystone master: fix: Include missing method in flask ResourceBase class https://review.openstack.org/602808 | 23:24 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!