| *** jamesmcarthur has joined #openstack-keystone | 00:04 | |
| *** jamesmcarthur has quit IRC | 00:20 | |
| *** ileixe has joined #openstack-keystone | 00:59 | |
| *** jamesmcarthur has joined #openstack-keystone | 01:07 | |
| *** jamesmcarthur has quit IRC | 01:19 | |
| *** jamesmcarthur has joined #openstack-keystone | 01:21 | |
| *** jamesmcarthur has quit IRC | 01:30 | |
| *** jamesmcarthur has joined #openstack-keystone | 01:42 | |
| *** jamesmcarthur has quit IRC | 01:57 | |
| *** irclogbot_1 has quit IRC | 02:19 | |
| *** jamesmcarthur has joined #openstack-keystone | 02:19 | |
| *** jamesmcarthur has quit IRC | 02:21 | |
| *** jamesmcarthur_ has joined #openstack-keystone | 02:21 | |
| *** edmondsw has quit IRC | 02:22 | |
| *** jamesmcarthur_ has quit IRC | 02:30 | |
| *** jamesmcarthur has joined #openstack-keystone | 02:34 | |
| *** jamesmcarthur has quit IRC | 02:39 | |
| *** ileixe has quit IRC | 02:45 | |
| *** jamesmcarthur has joined #openstack-keystone | 03:05 | |
| *** jamesmcarthur has quit IRC | 03:07 | |
| *** jamesmcarthur has joined #openstack-keystone | 03:09 | |
| *** jamesmcarthur has quit IRC | 03:12 | |
| cmurphy | fyi i'm afk most of today | 03:43 |
|---|---|---|
| *** edmondsw has joined #openstack-keystone | 04:01 | |
| *** jaosorior has joined #openstack-keystone | 04:39 | |
| *** jamesmcarthur has joined #openstack-keystone | 05:01 | |
| *** jamesmcarthur has quit IRC | 05:05 | |
| *** whoami-rajat has joined #openstack-keystone | 05:31 | |
| openstackgerrit | Merged openstack/keystone master: Add domain scope support for group policies https://review.openstack.org/643937 | 05:41 |
| openstackgerrit | Merged openstack/keystone master: Remove redundant policies from v3cloudsample https://review.openstack.org/647586 | 05:41 |
| *** jaosorior has quit IRC | 05:46 | |
| *** jaosorior has joined #openstack-keystone | 05:47 | |
| *** vishakha has joined #openstack-keystone | 06:01 | |
| *** elbragstad has quit IRC | 06:07 | |
| *** rcernin has quit IRC | 06:58 | |
| *** pcaruana has joined #openstack-keystone | 06:58 | |
| *** pcaruana has quit IRC | 07:02 | |
| *** pcaruana has joined #openstack-keystone | 07:02 | |
| *** awalende has joined #openstack-keystone | 07:08 | |
| *** awalende has quit IRC | 07:09 | |
| *** awalende has joined #openstack-keystone | 07:10 | |
| *** awalende has quit IRC | 07:10 | |
| *** awalende has joined #openstack-keystone | 07:11 | |
| *** awalende has quit IRC | 07:15 | |
| *** awalende has joined #openstack-keystone | 07:22 | |
| *** Dinesh_Bhor has quit IRC | 07:59 | |
| *** Dinesh_Bhor has joined #openstack-keystone | 08:03 | |
| *** phasespace has joined #openstack-keystone | 08:06 | |
| openstackgerrit | Rico Lin proposed openstack/keystoneauth master: Update auth plugin name list in document https://review.openstack.org/648920 | 08:31 |
| *** tkajinam has quit IRC | 08:34 | |
| *** xek has joined #openstack-keystone | 09:10 | |
| *** raildo has joined #openstack-keystone | 11:58 | |
| *** rcernin has joined #openstack-keystone | 12:19 | |
| *** elbragstad has joined #openstack-keystone | 12:31 | |
| *** ChanServ sets mode: +o elbragstad | 12:31 | |
| *** markvoelker has quit IRC | 12:32 | |
| *** jamesmcarthur has joined #openstack-keystone | 12:48 | |
| *** jamesmcarthur has quit IRC | 12:48 | |
| *** jamesmcarthur has joined #openstack-keystone | 12:48 | |
| *** mvkr has quit IRC | 12:49 | |
| *** jmlowe has quit IRC | 12:55 | |
| *** whoami-rajat has quit IRC | 13:00 | |
| *** elbragstad is now known as lbragstad | 13:02 | |
| *** whoami-rajat has joined #openstack-keystone | 13:05 | |
| lbragstad | kmalloc if you're around today - we might have to step through https://etherpad.openstack.org/p/keystone-stein-rc2-tracking | 13:16 |
| lbragstad | i unfortunately proposed most of them | 13:16 |
| *** mvkr has joined #openstack-keystone | 13:16 | |
| *** irclogbot_1 has joined #openstack-keystone | 13:26 | |
| lbragstad | cmurphy ack - i assume we'll just try and get as much of the rc2 etherpad as merged as possible? | 13:27 |
| lbragstad | and meeting up to talk about remaining work tomorrow | 13:27 |
| *** rcernin has quit IRC | 13:29 | |
| gagehugo | o/ | 13:34 |
| *** yan0s has joined #openstack-keystone | 13:37 | |
| *** jroll has quit IRC | 13:39 | |
| *** jroll has joined #openstack-keystone | 13:39 | |
| kmalloc | I will be here. | 13:42 |
| *** jamesmcarthur has quit IRC | 13:43 | |
| lbragstad | cool | 13:47 |
| lbragstad | it's early there | 13:47 |
| lbragstad | you should coffee first | 13:47 |
| *** jmlowe has joined #openstack-keystone | 13:55 | |
| *** vishakha has quit IRC | 13:55 | |
| *** jamesmcarthur has joined #openstack-keystone | 13:58 | |
| *** awalende has quit IRC | 14:01 | |
| *** awalende has joined #openstack-keystone | 14:01 | |
| *** awalende has quit IRC | 14:06 | |
| *** yan0s has quit IRC | 14:11 | |
| kmalloc | i plan to. | 14:19 |
| *** phasespace has quit IRC | 14:22 | |
| kmalloc | also, please remember today is a useless internet day. I'm so done with april fools. =/ | 14:24 |
| gagehugo | heh | 14:25 |
| *** yan0s has joined #openstack-keystone | 14:42 | |
| *** itlinux_ has quit IRC | 14:50 | |
| kmalloc | lbragstad: +2 on all of those. +A where there was another +2 | 14:58 |
| lbragstad | sweet | 15:00 |
| lbragstad | i think sean is still on PTG | 15:00 |
| lbragstad | PTO* | 15:00 |
| lbragstad | i might kick https://review.openstack.org/#/c/647587/ through since cmurphy has already approved it and you've looked at it, among others | 15:01 |
| kmalloc | i can do that | 15:02 |
| kmalloc | it | 15:02 |
| kmalloc | 's fine | 15:02 |
| kmalloc | ok 2 left, the one you -W'd and the one pending check | 15:04 |
| kmalloc | i'm ok pushing the check one through single-core once the check comes back ok | 15:04 |
| lbragstad | i updated | 15:05 |
| lbragstad | https://review.openstack.org/#/c/647586/8 needs to be backported, too | 15:06 |
| lbragstad | but it causes a merge conflict i haven't had time to grok yet | 15:06 |
| *** erus has joined #openstack-keystone | 15:16 | |
| *** itlinux has joined #openstack-keystone | 15:46 | |
| *** erus has quit IRC | 15:46 | |
| *** erus has joined #openstack-keystone | 15:47 | |
| *** yan0s has quit IRC | 15:54 | |
| *** awalende has joined #openstack-keystone | 16:01 | |
| *** awalende has quit IRC | 16:07 | |
| lbragstad | stepping away for a bit | 16:21 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: DRY: Remove redundant policies from policy.v3cloudsample.json https://review.openstack.org/622589 | 17:26 |
| *** zigo has quit IRC | 17:37 | |
| *** erus has quit IRC | 17:37 | |
| *** phasespace has joined #openstack-keystone | 17:38 | |
| *** erus has joined #openstack-keystone | 17:38 | |
| *** erus has quit IRC | 17:44 | |
| *** erus has joined #openstack-keystone | 17:44 | |
| *** mvkr has quit IRC | 18:01 | |
| *** jamesmcarthur has quit IRC | 18:15 | |
| *** jonher has quit IRC | 18:28 | |
| *** jonher has joined #openstack-keystone | 18:29 | |
| *** ayoung has joined #openstack-keystone | 18:36 | |
| ayoung | lbragstad, can I convince you to throw your support behind https://review.openstack.org/#/c/605169/10 | 18:36 |
| ayoung | I just had another customer call where that is going to be an issue. | 18:36 |
| ayoung | The only complaint that I think you had was the provider to provider call...can I convince you that it is actually the right thing to do here? | 18:37 |
| *** itlinux has quit IRC | 18:44 | |
| *** mvkr has joined #openstack-keystone | 18:48 | |
| lbragstad | i think there is someone working on the provider -> provider bit | 18:52 |
| *** itlinux has joined #openstack-keystone | 18:55 | |
| *** raildo has quit IRC | 19:13 | |
| *** raildo has joined #openstack-keystone | 19:20 | |
| *** jmlowe has quit IRC | 19:22 | |
| *** erus has quit IRC | 19:27 | |
| *** erus has joined #openstack-keystone | 19:28 | |
| *** spsurya has quit IRC | 19:36 | |
| *** jamesmcarthur has joined #openstack-keystone | 19:39 | |
| *** erus has quit IRC | 19:45 | |
| *** erus has joined #openstack-keystone | 19:45 | |
| *** awalende has joined #openstack-keystone | 20:03 | |
| *** erus has quit IRC | 20:03 | |
| openstackgerrit | Raildo Mascena proposed openstack/keystone master: [WIP]Fixing dn_to_id function for cases were id it's not in the DN https://review.openstack.org/649177 | 20:03 |
| *** erus has joined #openstack-keystone | 20:04 | |
| *** awalende has quit IRC | 20:07 | |
| *** Krenair has quit IRC | 20:22 | |
| *** xek has quit IRC | 20:22 | |
| *** jmlowe has joined #openstack-keystone | 20:26 | |
| *** whoami-rajat has quit IRC | 20:30 | |
| ayoung | lbragstad, so, why do you think provider-to-provider is a problem? | 20:37 |
| lbragstad | i don't think provider to provider is a problem, provider to provider is just fine in my opinion, but in that patch we're calling up from a backend to a provider | 20:38 |
| ayoung | Again, why is that a problem? | 20:40 |
| ayoung | lbragstad, If I squint, I can almost see it, but my gut says that this approach is the right approach. But I might be missing something you are seeing. | 20:43 |
| *** Guest95175 has joined #openstack-keystone | 20:44 | |
| ayoung | I didn't like the way the code looked when I pushed it up a level, which I take as reinforcing this structure. I understand not having, say, the DB backend of Assignment talking to the DB Backend of SQL, but I can't see how this is the same problem | 20:44 |
| *** Guest95175 is now known as Krenair | 20:44 | |
| lbragstad | https://bugs.launchpad.net/keystone/+bug/1563101 does a good job explaining it | 20:54 |
| openstack | Launchpad bug 1563101 in OpenStack Identity (keystone) "Remove backend dependency on core" [Medium,Fix released] - Assigned to Ron De Rose (ronald-de-rose) | 20:54 |
| *** itlinux has quit IRC | 20:58 | |
| *** itlinux has joined #openstack-keystone | 20:59 | |
| *** eglute has joined #openstack-keystone | 21:04 | |
| *** jamesmcarthur has quit IRC | 21:14 | |
| *** pcaruana has quit IRC | 21:17 | |
| cmurphy | o/ | 21:23 |
| *** Krenair has quit IRC | 21:26 | |
| *** jamesmcarthur has joined #openstack-keystone | 21:27 | |
| *** Krenair has joined #openstack-keystone | 21:28 | |
| ayoung | lbragstad, so the ID generator is a different beast. Maybe it should not be a driver. Blame henrynash for that | 21:31 |
| ayoung | but none of those issues apply here. | 21:31 |
| ayoung | I also think that his example is just plain wrong: of course the drivers should know about core. But the Core should not know about implementation details of the drivers. | 21:32 |
| ayoung | lbragstad, what if we stopped calling the id generator a driver, and called it directly? I'm not even sure what having it as a driver does for us | 21:33 |
| ayoung | except that someone out there wanted it as a cut point, I guess | 21:34 |
| lbragstad | ayoung i'm guess it was copy/pasta because we do drivers for everything | 21:34 |
| lbragstad | guessing* | 21:34 |
| ayoung | Nah, that was Henry, and it was for something he did not care to share | 21:34 |
| lbragstad | hmmm | 21:34 |
| ayoung | Love the dude, but sometimes he playued his cards a little close to his chest | 21:34 |
| ayoung | And I was willing to let him do it, because the rest of what he was doing was so great | 21:35 |
| ayoung | This is more a case of one component calling in to another. I think it is the right use of our component architecture | 21:35 |
| *** erus has quit IRC | 21:35 | |
| lbragstad | the way they are written, it's calling up a layer | 21:36 |
| *** samueldmq has joined #openstack-keystone | 21:36 | |
| *** erus has joined #openstack-keystone | 21:36 | |
| ayoung | I don't think of it as UP | 21:37 |
| ayoung | I think of them as modules, as drivers, and this lets the two abstractions vary independntendly | 21:37 |
| ayoung | or however you spell that word | 21:37 |
| ayoung | It does not specify WHCIH driver to use, it specifies that it should use the same driver configured else where | 21:38 |
| ayoung | I thnk that is the same way the LDAP code calls it, let me check | 21:38 |
| ayoung | https://review.openstack.org/#/c/605169/10/keystone/identity/shadow_backends/sql.py vs | 21:38 |
| * lbragstad has to run and be a dad | 21:39 | |
| lbragstad | i'll check back in though | 21:40 |
| *** lbragstad is now known as lbragstad_dad_mo | 21:40 | |
| lbragstad_dad_mo | ... | 21:40 |
| lbragstad_dad_mo | nevermind | 21:40 |
| *** lbragstad_dad_mo is now known as lbragstad | 21:40 | |
| *** itlinux has quit IRC | 21:43 | |
| *** itlinux has joined #openstack-keystone | 21:44 | |
| ayoung | ok...so it is already a backend to provider call | 21:44 |
| *** itlinux has quit IRC | 21:44 | |
| ayoung | keystone/identity/generator.py:33: _provides_api = 'id_generator_api' | 21:45 |
| ayoung | keystone/identity/mapping_backends/sql.py:76: public_id = self.id_generator_api.generate_public_ID( | 21:45 |
| ayoung | keystone/identity/mapping_backends/sql.py:76: public_id = self.id_generator_api.generate_public_ID( | 21:45 |
| ayoung | keystone/identity/mapping_backends/sql.py:76: public_id = self.id_generator_api.generate_public_ID( | 21:45 |
| ayoung | http://git.openstack.org/cgit/openstack/keystone/tree/keystone/identity/mapping_backends/sql.py#n76 | 21:45 |
| ayoung | sorry for the spam | 21:45 |
| ayoung | but the last link shows that the current mapping_backend calls into the id provider. My change is roughly the same. | 21:46 |
| ayoung | He just made it a class level variable, I called it directly inline | 21:46 |
| ayoung | aND NOW i GO DAD MODE! | 21:47 |
| ayoung | reprieve | 21:47 |
| ayoung | Commits now go into the Train release, right, not Stein? | 21:49 |
| cmurphy | right | 21:51 |
| *** raildo has quit IRC | 22:07 | |
| *** jamesmcarthur has quit IRC | 22:08 | |
| ayoung | cmurphy, you have a preference on https://review.openstack.org/#/c/605169/ | 22:12 |
| ayoung | I'd like to get that one and the domain id change in | 22:12 |
| cmurphy | the main sticking point is the driver/manager cross-calling? | 22:15 |
| cmurphy | is it hard to move the id_generator_api call to the manager? | 22:15 |
| cmurphy | you could have create_federated_user take a public_id parameter that is passed in from keystone/identity/core.py | 22:17 |
| cmurphy | oh i seee that's what the other patch did | 22:18 |
| cmurphy | i don't have a strong opinion either way but to be consistent with the ldap backend it would have to generate the id at authentication time in the mapped plugin | 22:26 |
| *** nikrin is now known as knikolla | 22:34 | |
| *** rcernin has joined #openstack-keystone | 22:40 | |
| *** tkajinam has joined #openstack-keystone | 22:56 | |
| *** itlinux has joined #openstack-keystone | 23:24 | |
| *** lbragstad has quit IRC | 23:54 | |
| *** openstackgerrit has quit IRC | 23:56 | |
| *** timburke has quit IRC | 23:58 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!