*** jamesmcarthur has joined #openstack-keystone | 00:01 | |
*** markvoelker has joined #openstack-keystone | 00:16 | |
*** rcernin_ has quit IRC | 00:41 | |
*** rcernin has joined #openstack-keystone | 00:41 | |
*** lbragstad has quit IRC | 00:48 | |
*** markvoelker has quit IRC | 00:49 | |
*** jamesmcarthur has quit IRC | 00:52 | |
*** gyee has quit IRC | 01:34 | |
*** jamesmcarthur has joined #openstack-keystone | 01:35 | |
*** jamesmcarthur has quit IRC | 01:37 | |
*** markvoelker has joined #openstack-keystone | 01:46 | |
*** whoami-rajat has joined #openstack-keystone | 02:09 | |
*** itlinux has joined #openstack-keystone | 02:17 | |
*** markvoelker has quit IRC | 02:20 | |
openstackgerrit | wangxiyuan proposed openstack/keystone master: [api-ref] Fix nocatalog description for unscoped token https://review.opendev.org/660902 | 02:58 |
---|---|---|
openstackgerrit | Vishakha Agarwal proposed openstack/keystone master: Remove deprecated admin_endpoint https://review.opendev.org/664246 | 03:02 |
*** vishakha has joined #openstack-keystone | 03:03 | |
*** bnemec has quit IRC | 03:07 | |
*** bnemec has joined #openstack-keystone | 03:08 | |
*** markvoelker has joined #openstack-keystone | 03:17 | |
*** markvoelker has quit IRC | 03:50 | |
*** markvoelker has joined #openstack-keystone | 04:47 | |
*** markvoelker has quit IRC | 05:21 | |
*** threestrands has joined #openstack-keystone | 05:52 | |
*** threestrands has quit IRC | 05:53 | |
*** markvoelker has joined #openstack-keystone | 06:18 | |
*** markvoelker has quit IRC | 06:51 | |
*** pcaruana has joined #openstack-keystone | 06:55 | |
openstackgerrit | Merged openstack/oslo.limit master: Sync Sphinx requirement https://review.opendev.org/662668 | 06:55 |
*** rcernin has quit IRC | 07:08 | |
*** tesseract has joined #openstack-keystone | 07:08 | |
*** markvoelker has joined #openstack-keystone | 07:48 | |
*** tkajinam has quit IRC | 08:05 | |
*** markvoelker has quit IRC | 08:22 | |
*** imacdonn has quit IRC | 08:38 | |
*** imacdonn has joined #openstack-keystone | 08:38 | |
*** rcernin has joined #openstack-keystone | 09:03 | |
*** markvoelker has joined #openstack-keystone | 09:19 | |
*** tobberydberg has quit IRC | 09:22 | |
*** tobberydberg has joined #openstack-keystone | 09:31 | |
*** markvoelker has quit IRC | 09:52 | |
*** pcaruana has quit IRC | 10:19 | |
openstackgerrit | Vishakha Agarwal proposed openstack/keystone master: Remove deprecated admin_endpoint https://review.opendev.org/664246 | 10:28 |
*** markvoelker has joined #openstack-keystone | 10:49 | |
*** pcaruana has joined #openstack-keystone | 11:09 | |
*** markvoelker has quit IRC | 11:21 | |
*** dave-mccowan has joined #openstack-keystone | 11:22 | |
*** rcernin has quit IRC | 11:43 | |
*** dave-mccowan has quit IRC | 12:05 | |
*** raildo has joined #openstack-keystone | 12:06 | |
*** jamesmcarthur has joined #openstack-keystone | 12:51 | |
*** jamesmcarthur has quit IRC | 13:02 | |
*** lbragstad has joined #openstack-keystone | 13:03 | |
*** markvoelker has joined #openstack-keystone | 13:18 | |
*** markvoelker has quit IRC | 13:23 | |
*** jamesmcarthur has joined #openstack-keystone | 13:26 | |
*** vishakha has quit IRC | 13:37 | |
*** mchlumsky has joined #openstack-keystone | 13:46 | |
*** markvoelker has joined #openstack-keystone | 13:53 | |
*** mchlumsky has quit IRC | 13:59 | |
*** pcaruana has quit IRC | 14:04 | |
openstackgerrit | Kristi Nikolla proposed openstack/keystone-specs master: Expiring Group Membership Through Mapping Rules https://review.opendev.org/604201 | 14:09 |
knikolla | cmurphy: expiring appcreds/users/groupmemberships. take 3. action. | 14:10 |
knikolla | i'm not entirely satisfied with how the spec turned out. | 14:10 |
knikolla | also didn't see you had made further comments, looking now. | 14:11 |
gagehugo | o/ | 14:27 |
cmurphy | milestone 1 checkin in 32 minutes in https://meet.jit.si/keystone-train-m-1 | 14:28 |
cmurphy | knikolla: cool, i'll have a look after the meeting | 14:28 |
*** dave-mccowan has joined #openstack-keystone | 14:29 | |
*** pcaruana has joined #openstack-keystone | 14:30 | |
*** pcaruana has quit IRC | 14:31 | |
*** pcaruana has joined #openstack-keystone | 14:31 | |
*** vishakha has joined #openstack-keystone | 14:42 | |
*** kklimonda has quit IRC | 14:47 | |
cmurphy | milestone 1 checkin in 10 minutes in https://meet.jit.si/keystone-train-m-1 | 14:50 |
*** itlinux has quit IRC | 14:55 | |
*** mchlumsky has joined #openstack-keystone | 14:59 | |
cmurphy | agenda: https://etherpad.openstack.org/p/keystone-train-M-1-review-planning-meeting | 15:00 |
bnemec | Will join when I can. Got pulled into a meeting that's right now. :-/ | 15:01 |
cmurphy | wxy-xiyuan: rodrigods will you be able to join ^ ? | 15:03 |
cmurphy | vishakha: are you coming back? | 15:05 |
vishakha | Sorry guys facing some network issues | 15:06 |
lbragstad | #link https://etherpad.openstack.org/p/keystone-train-M-1-review-planning-meeting | 15:07 |
openstackgerrit | Nathan Oyler proposed openstack/keystone master: Add cadf auditing to credentials https://review.opendev.org/664618 | 15:13 |
*** notq has joined #openstack-keystone | 15:15 | |
*** pcaruana has quit IRC | 15:17 | |
lbragstad | cmurphy gagehugo vishakha knikolla https://etherpad.openstack.org/p/keystone-internship-ideas | 15:19 |
notq | cmurphy: attempted to correct as asked, although given the conflict i'm guessing i got that wrong. | 15:19 |
lbragstad | cmurphy gagehugo vishakha knikolla https://review.opendev.org/#/c/615180/ | 15:27 |
kmalloc | Oh woopse! I thought it was post meeting today | 15:32 |
lbragstad | cmurphy https://bugs.launchpad.net/keystone/+bug/1829574 | 15:33 |
openstack | Launchpad bug 1829574 in OpenStack Identity (keystone) "Refactor API protection tests" [Low,Triaged] | 15:34 |
lbragstad | kmalloc pinging you here even though i know you might be on a plane, but i'm wondering if we can sit down and go through https://bugs.launchpad.net/keystone/+bug/1829574 and my patch once you get settled? | 15:35 |
openstack | Launchpad bug 1829574 in OpenStack Identity (keystone) "Refactor API protection tests" [Low,Triaged] | 15:35 |
kmalloc | not on a plane | 15:35 |
lbragstad | aha - nevermind then ;) | 15:36 |
kmalloc | on the call now | 15:37 |
cmurphy | retrospective: https://etherpad.openstack.org/p/keystone-train-m-1-retrospective | 15:37 |
gagehugo | brb | 15:42 |
*** pcaruana has joined #openstack-keystone | 15:43 | |
lbragstad | go ahead vishakha | 15:43 |
*** pcaruana has quit IRC | 15:55 | |
kmalloc | lbragstad: tomorrow for those patches is best for sure... Will be more setup to look at everything at home. Will have a midday vet appointment (pupper hurt his paw and is limping) | 15:59 |
* cmurphy calls everybody back | 16:03 | |
lbragstad | kmalloc sweeet - ping me whenever | 16:03 |
kmalloc | yup. | 16:03 |
lbragstad | i'll set aside a couple hours to see if we can nail down out to use testresources | 16:03 |
kmalloc | you're Central timezone? | 16:04 |
lbragstad | yep | 16:04 |
kmalloc | cool | 16:04 |
bnemec | Hey, I can hear now! \o/ | 16:04 |
kmalloc | i might be up stupid early because jet lag. | 16:04 |
kmalloc | might work out well . | 16:04 |
lbragstad | ok - i usually get in around 6 AM PT | 16:05 |
vishakha | cmurphy lbragstad gagehugo knikolla mordred https://review.opendev.org/#/c/662690/ | 16:15 |
kmalloc | i will probably be working somewhere around then. depending on dog needs, we can do it early | 16:16 |
*** tesseract has quit IRC | 16:18 | |
lbragstad | cmurphy https://bugs.launchpad.net/keystone/+bugs?field.tag=default-roles | 16:20 |
lbragstad | cmurphy kmalloc https://review.opendev.org/#/c/554320/ | 16:25 |
openstackgerrit | Morgan Fainberg proposed openstack/keystone master: Add yaml-loaded filesystem catalog backend https://review.opendev.org/483514 | 16:27 |
*** kklimonda has joined #openstack-keystone | 16:32 | |
*** jamesmcarthur has quit IRC | 16:32 | |
kmalloc | my network crashed, it looks like | 16:35 |
kmalloc | family's house internet isn't super awesome sometimes. | 16:35 |
lbragstad | i'm going to disable my camera to see if that helps | 16:36 |
*** whoami-rajat has quit IRC | 16:38 | |
kmalloc | i can't even reload the page | 16:39 |
*** jdwidari has joined #openstack-keystone | 16:42 | |
bnemec | I had a similar problem earlier. | 16:42 |
gagehugo | cmurphy: end of the cycle | 16:43 |
cmurphy | gagehugo: okay | 16:43 |
gagehugo | mic stopped working I guess | 16:43 |
bnemec | gagehugo: I can hear you | 16:44 |
gagehugo | hmm | 16:44 |
lbragstad | so can i | 16:44 |
*** pcaruana has joined #openstack-keystone | 16:49 | |
kmalloc | as soon as i load the page, the page crashes now | 16:50 |
kmalloc | i'm going to call it here. | 16:50 |
kmalloc | i'll catch up with folks tomorow and beyond | 16:50 |
bnemec | Only 10 minutes left anyway | 16:50 |
gagehugo | ksm is done | 16:50 |
gagehugo | https://review.opendev.org/#/c/447139/ | 16:50 |
gagehugo | just defer it | 16:51 |
gagehugo | there's been a lack of reviewers on the security SIG side | 16:51 |
gagehugo | https://review.opendev.org/#/q/topic:keystone-vmt+(status:open+OR+status:merged) | 16:51 |
*** markvoelker has quit IRC | 16:53 | |
*** itlinux has joined #openstack-keystone | 16:57 | |
*** whoami-rajat has joined #openstack-keystone | 17:05 | |
cmurphy | if anyone has feedback on how that meeting went please feel free to let me know either here or in private | 17:09 |
cmurphy | thanks everyone for attending | 17:09 |
*** jamesmcarthur has joined #openstack-keystone | 17:10 | |
bnemec | I learned that you should make sure you close the window from your previous meeting before joining a new one. | 17:15 |
bnemec | Turns out web conferences don't like sharing audio hardware. | 17:15 |
lbragstad | lol | 17:22 |
lbragstad | makes sense | 17:22 |
*** dtruong has quit IRC | 17:24 | |
*** problem_v has quit IRC | 17:24 | |
*** jamesmcarthur has quit IRC | 17:26 | |
*** jamesmcarthur has joined #openstack-keystone | 17:26 | |
*** jdwidari has quit IRC | 17:30 | |
*** dtruong has joined #openstack-keystone | 17:50 | |
cmurphy | notq: i think when you did the amend you may have accidentally deleted the change-id in the commit message? | 17:59 |
cmurphy | that would cause a new one to be generated and then would submit a new review | 18:00 |
notq | sounds plausible. | 18:00 |
notq | i had a ton of python issues getting tox to run, then commit/merge issues so yesterday was a blur of yak shaving. | 18:01 |
notq | do I need to take any action at this point, or is the new review in the state it is in fine? | 18:04 |
cmurphy | notq: there's one more issue with it that i forgot to point out before, noted on the review | 18:05 |
cmurphy | i think we can go ahead and continue with the new one and you can abandon the original one | 18:05 |
notq | apologies for missing it | 18:05 |
notq | I played it after what I thought was the last function to actually delete something. The other functions just list, no? | 18:08 |
notq | in other functions, it tends to go after the final action that causes a delete, even if there are other actions afterwards. So that was my reasoning | 18:08 |
cmurphy | notq: lines 191 and 194 are actually invalidating the caches | 18:09 |
notq | fair enough. | 18:09 |
notq | process now, git commit, then squash that into the previous commit then review? Or git commit, review? | 18:10 |
cmurphy | notq: git add ; git commit --amend ; git review | 18:12 |
notq | danke. | 18:12 |
cmurphy | gern geschehen | 18:12 |
openstackgerrit | Nathan Oyler proposed openstack/keystone master: Add cadf auditing to credentials https://review.opendev.org/664618 | 18:13 |
*** pcaruana has quit IRC | 18:39 | |
*** ayoung has joined #openstack-keystone | 18:39 | |
ayoung | So what did I miss? | 18:39 |
*** jamesmcarthur has quit IRC | 18:40 | |
cmurphy | ayoung: we just did the m-1 check-in and went through all the stories in the cycle roadmap, i have you as the assignee for https://trello.com/c/MVuu6DbU/59-predictable-ids we were not sure what next steps are for that | 18:42 |
ayoung | Gonna kill that one | 18:42 |
ayoung | It would have been nice years ago, and it is a better way, but I don't have the time, and there is not the payoff | 18:42 |
ayoung | need to be able to sync Ids between hub and spoke, but that does not need predictable | 18:43 |
ayoung | I like the background image....headed to Hogwarts are we? | 18:43 |
cmurphy | you want to kill predictable ids? this is something many people have been asking for, i thought we were on track for it | 18:45 |
ayoung | Do thery want predicatble (Hashes) or specifiable (like we did for domain)? | 18:46 |
ayoung | I thought the interest went with the latter | 18:47 |
cmurphy | oath/verizon wants predictable ids for users and projects | 18:47 |
ayoung | Ah.... | 18:48 |
ayoung | its not a hard feature....lets see what I have submitted so far | 18:48 |
ayoung | https://review.opendev.org/#/c/651655/ roles | 18:49 |
openstackgerrit | ayoung proposed openstack/keystone master: Predictable IDs for Roles https://review.opendev.org/651655 | 18:49 |
ayoung | users I thought merged... | 18:49 |
cmurphy | users is fine but it was projects we were stuck on | 18:49 |
ayoung | https://review.opendev.org/#/c/605169/ | 18:50 |
ayoung | OK. | 18:50 |
ayoung | That should be relatively easy. THe issue is the changing of the project name | 18:50 |
ayoung | In the past we did things like that as a driver | 18:51 |
ayoung | swap the driver to get the behaviour. But we'd need a hook to say "with the hash-id driver, we make project name immutable" | 18:51 |
cmurphy | that would cause interop issues i think | 18:52 |
ayoung | That was the sticking point that lead us to discuss "sync the ids" instead | 18:52 |
openstackgerrit | Colleen Murphy proposed openstack/keystone master: Revert "Ignore boilerplate constants in autodoc" https://review.opendev.org/664668 | 18:54 |
openstackgerrit | Colleen Murphy proposed openstack/keystone master: Revert "Exclude constants from autodoc" https://review.opendev.org/664669 | 18:54 |
*** markvoelker has joined #openstack-keystone | 18:55 | |
*** dtruong has quit IRC | 18:58 | |
*** dtruong has joined #openstack-keystone | 18:59 | |
*** jamesmcarthur has joined #openstack-keystone | 18:59 | |
ayoung | So what do you want to do cmurphy ? | 19:00 |
*** jamesmcarthur has quit IRC | 19:01 | |
*** jamesmcarthur has joined #openstack-keystone | 19:03 | |
*** jamesmcarthur has quit IRC | 19:05 | |
*** jamesmcarthur has joined #openstack-keystone | 19:07 | |
cmurphy | my recollection from the ptg was that we wanted to go forward with predictable project ids first and settable project ids second, and kmalloc had an idea about using a kind of salt with a secondary immutable identifier to get around the problem with the mutable project name | 19:08 |
cmurphy | so i'd like to continue exploring that direction | 19:08 |
ayoung | Its also a non-backwards compat change | 19:11 |
ayoung | I think the CERN folks really want the ability to create an project with a pre-specified ID. I think that should be priority | 19:12 |
ayoung | it should also solve things for OATH | 19:12 |
ayoung | tell you what, let me code that up first, and we can continue the predictable convo | 19:12 |
cmurphy | okay | 19:13 |
*** jamesmcarthur has quit IRC | 19:15 | |
*** markvoelker has quit IRC | 19:29 | |
*** jamesmcarthur has joined #openstack-keystone | 19:34 | |
*** raildo has quit IRC | 19:39 | |
kmalloc | Flying soon, can catch up on this stuff tomorrow (cc ayoung) | 19:46 |
kmalloc | cmurphy: ^ | 19:46 |
ayoung | Roger that | 19:46 |
*** jamesmcarthur has quit IRC | 20:03 | |
*** jamesmcarthur has joined #openstack-keystone | 20:25 | |
*** markvoelker has joined #openstack-keystone | 20:26 | |
*** jamesmcarthur has quit IRC | 20:28 | |
*** joshualyle has joined #openstack-keystone | 20:42 | |
*** jamesmcarthur has joined #openstack-keystone | 20:53 | |
*** markvoelker has quit IRC | 20:59 | |
*** jamesmcarthur has quit IRC | 21:04 | |
*** itlinux has quit IRC | 21:07 | |
*** notq has quit IRC | 21:40 | |
cmurphy | this is concerning http://logs.openstack.org/62/663462/4/check/openstack-tox-py37/7d765be/job-output.txt.gz#_2019-06-11_01_19_53_429729 the mysql/postgresql opportunistic tests aren't being run for the py27, py36 or py37 jobs, only for the lower-constraints job | 21:43 |
clarkb | cmurphy: the log shows mysql and postgresql being installed and the setup script is running to add the openstack_citest database | 21:55 |
clarkb | so that bit at least appears to be working | 21:55 |
*** markvoelker has joined #openstack-keystone | 21:56 | |
cmurphy | clarkb: i think the pymysql driver isn't being installed | 21:56 |
cmurphy | oslo.db[fixtures,mysql,postgresql] in test-requirements.txt seems to not do the right thing | 21:57 |
bnemec | My browser is choking on that, but manually installing test-requirements.txt in a venv is pulling in pymysql and psycopg2. | 22:04 |
bnemec | Worth noting that there is no fixtures extra in oslo.db. Maybe it got removed at some point? | 22:04 |
cmurphy | it's because we have oslo.db in both requirements.txt and test-requirements.txt and the extras aren't listed in requirements.txt | 22:05 |
bnemec | That's annoying. | 22:06 |
bnemec | It looks like Nova is explicitly depending on those libraries instead of using the extras (despite what it says in the oslo.db setup.cfg). | 22:07 |
openstackgerrit | Colleen Murphy proposed openstack/keystone master: Switch order of precedence for unit test deps https://review.opendev.org/664712 | 22:07 |
cmurphy | lol ^ | 22:08 |
cmurphy | now to see if our postgresql tests actually work... | 22:08 |
bnemec | Great, now I have another cookiecutter change to propose. :-) | 22:08 |
* bnemec gets so hungry working on cookiecutter | 22:09 | |
*** rcernin has joined #openstack-keystone | 22:10 | |
clarkb | bnemec: its like 200MB of text | 22:14 |
clarkb | bnemec: I open those files with vim when firefox fails to | 22:14 |
bnemec | My laptop is still mad at me for opening that log file. Remind me next laptop refresh to get the one with all the memory. | 22:14 |
bnemec | Yeah, I was going to try that, but cmurphy fixed the problem first. :-) | 22:15 |
*** itlinux has joined #openstack-keystone | 22:15 | |
*** markvoelker has quit IRC | 22:30 | |
*** itlinux has quit IRC | 22:38 | |
openstackgerrit | Colleen Murphy proposed openstack/keystone master: Add user_id, external_id to access rules table https://review.opendev.org/663440 | 22:46 |
openstackgerrit | Colleen Murphy proposed openstack/keystone master: Add manager support for app cred access rules https://review.opendev.org/663462 | 22:46 |
openstackgerrit | Colleen Murphy proposed openstack/keystone master: Add API changes for app cred access rules https://review.opendev.org/628168 | 22:46 |
*** whoami-rajat has quit IRC | 22:55 | |
*** tkajinam has joined #openstack-keystone | 23:04 | |
*** vishakha has quit IRC | 23:16 | |
*** markvoelker has joined #openstack-keystone | 23:26 | |
openstackgerrit | Colleen Murphy proposed openstack/keystone master: Add access rules to token validation https://review.opendev.org/631993 | 23:37 |
*** lbragstad has quit IRC | 23:41 | |
*** jamesmcarthur has joined #openstack-keystone | 23:58 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!