*** dave-mccowan has quit IRC | 00:13 | |
*** markvoelker has joined #openstack-keystone | 00:22 | |
*** markvoelker has quit IRC | 00:27 | |
*** gyee has quit IRC | 00:38 | |
*** awalende has joined #openstack-keystone | 01:01 | |
*** dave-mccowan has joined #openstack-keystone | 01:03 | |
*** awalende has quit IRC | 01:05 | |
*** izza_ has joined #openstack-keystone | 01:15 | |
izza_ | Hi,can anybody here help me pls...i'm testing rally heat(scenario: create_stack_scale) and i'm encountering below error: ***heat-engine***** 2019-06-13 18:27:19,809.809 1 ERROR heat.engine.service ResourceFailure: resources.asg: HEAT-E99001 Service nova is not available for resource type OS::Nova::Server, reason: Authentication cannot be scoped to multiple targets. Pick one of: project, domain, trust or unscoped 2019-06-13 | 01:16 |
---|---|---|
izza_ | ***Rally Logs*** TimeoutException: Rally tired waiting 3600.00 seconds for Stack <Stack {u'parent': None, u'disable_rollback': True, u'description': u'No description', u'parameters': {u'OS::project_id': u'53ae40faef3d47938019d7eded6dc4d2', u'OS::stack_id': u'ba39558d-63f7-43de-9a7f-aee7e325f623', u'OS::stack_name': u's_rally_c10f9daf_7eSBDfas', u'image': u'cirros-0.4.0-x86_64-disk', u'scaling_adjustment': u'1', u'flavor': | 01:16 |
*** markvoelker has joined #openstack-keystone | 01:23 | |
*** rcernin has quit IRC | 01:27 | |
*** rcernin has joined #openstack-keystone | 01:27 | |
*** markvoelker has quit IRC | 01:29 | |
*** adriant has quit IRC | 01:35 | |
lbragstad | izza_ that error doesn't look keystone-specific, but i'd try the rally folks (#openstack-rally) | 01:36 |
lbragstad | it appears heat is having an issue talking to nova | 01:37 |
lbragstad | have you checked the nova and heat logs directly? | 01:37 |
*** adriant has joined #openstack-keystone | 01:55 | |
*** dmellado_ has joined #openstack-keystone | 03:08 | |
*** dmellado has quit IRC | 03:08 | |
*** dmellado_ is now known as dmellado | 03:08 | |
*** liushuo has joined #openstack-keystone | 03:17 | |
liushuo | "it was decided to imply relationships between them. The 'admin' role implies 'member' which implies 'reader'." | 03:18 |
liushuo | is there any doc to explain how it works? | 03:18 |
*** liushuo_ has quit IRC | 03:19 | |
izza_ | lbragstad the openstack-rally folks told me to ask keystone folks..hehehe | 03:20 |
izza_ | lbragstad - im not seeing error on nova..but on heat..here's my error | 03:20 |
izza_ | ResourceFailure: resources.asg: HEAT-E99001 Service nova is not available for resource type OS::Nova::Server, reason: Authentication cannot be scoped to multiple targets. Pick one of: project, domain, trust or unscoped | 03:21 |
*** ayoung has quit IRC | 03:22 | |
*** mugsie has quit IRC | 03:22 | |
*** mkrai has quit IRC | 03:22 | |
*** ab-a has quit IRC | 03:22 | |
izza_ | lbragstad - any comment on this docs https://ask.openstack.org/en/question/85499/problem-authentication-cannot-be-scoped-to-multiple-targets/ | 03:22 |
*** szaher has quit IRC | 03:22 | |
*** kklimonda has quit IRC | 03:22 | |
*** mvkr has quit IRC | 03:22 | |
*** mgagne has quit IRC | 03:22 | |
*** aning has quit IRC | 03:22 | |
*** dasp has quit IRC | 03:22 | |
*** d34dh0r53 has quit IRC | 03:22 | |
*** jenglisch has quit IRC | 03:25 | |
*** markvoelker has joined #openstack-keystone | 03:25 | |
*** jenglisch has joined #openstack-keystone | 03:27 | |
*** markvoelker has quit IRC | 03:29 | |
*** ayoung has joined #openstack-keystone | 03:38 | |
*** mugsie has joined #openstack-keystone | 03:38 | |
*** mkrai has joined #openstack-keystone | 03:38 | |
*** ab-a has joined #openstack-keystone | 03:38 | |
*** szaher has joined #openstack-keystone | 03:38 | |
*** kklimonda has joined #openstack-keystone | 03:38 | |
*** mvkr has joined #openstack-keystone | 03:38 | |
*** mgagne has joined #openstack-keystone | 03:38 | |
*** aning has joined #openstack-keystone | 03:38 | |
*** dasp has joined #openstack-keystone | 03:38 | |
*** d34dh0r53 has joined #openstack-keystone | 03:38 | |
*** irclogbot_2 has quit IRC | 03:41 | |
*** irclogbot_0 has joined #openstack-keystone | 03:42 | |
*** dave-mccowan has quit IRC | 03:49 | |
*** dasp has quit IRC | 03:58 | |
*** dasp has joined #openstack-keystone | 04:21 | |
*** markvoelker has joined #openstack-keystone | 04:25 | |
*** markvoelker has quit IRC | 04:30 | |
*** lbragstad has quit IRC | 04:43 | |
*** whoami-rajat has joined #openstack-keystone | 04:47 | |
*** shyamb has joined #openstack-keystone | 04:58 | |
*** pcaruana has joined #openstack-keystone | 05:09 | |
*** shyamb has quit IRC | 05:12 | |
*** shyamb has joined #openstack-keystone | 05:12 | |
*** markvoelker has joined #openstack-keystone | 05:26 | |
*** markvoelker has quit IRC | 05:31 | |
liushuo | i find doc: http://specs.openstack.org/openstack/keystone-specs/specs/keystone/rocky/define-default-roles.html | 06:12 |
*** shyamb has quit IRC | 06:24 | |
*** markvoelker has joined #openstack-keystone | 06:27 | |
*** markvoelker has quit IRC | 06:31 | |
*** takamatsu has joined #openstack-keystone | 06:34 | |
openstackgerrit | Vishakha Agarwal proposed openstack/keystone master: Drop use git.openstack.org for tox deps https://review.opendev.org/665313 | 06:49 |
*** shyamb has joined #openstack-keystone | 06:52 | |
*** shyamb has quit IRC | 07:00 | |
*** shyamb has joined #openstack-keystone | 07:03 | |
*** tesseract has joined #openstack-keystone | 07:08 | |
*** awalende has joined #openstack-keystone | 07:10 | |
*** awalende has quit IRC | 07:10 | |
*** awalende has joined #openstack-keystone | 07:10 | |
*** awalende has quit IRC | 07:11 | |
*** awalende has joined #openstack-keystone | 07:12 | |
*** rcernin has quit IRC | 07:22 | |
*** markvoelker has joined #openstack-keystone | 07:28 | |
*** shyamb has quit IRC | 07:28 | |
*** shyamb has joined #openstack-keystone | 07:29 | |
*** markvoelker has quit IRC | 07:35 | |
*** shyamb has quit IRC | 07:47 | |
*** izza_ has quit IRC | 07:49 | |
*** tkajinam has quit IRC | 08:38 | |
*** imacdonn has quit IRC | 08:39 | |
*** imacdonn has joined #openstack-keystone | 08:39 | |
*** shyamb has joined #openstack-keystone | 08:49 | |
*** shyamb has quit IRC | 09:32 | |
*** shyamb has joined #openstack-keystone | 10:20 | |
*** markvoelker has joined #openstack-keystone | 10:33 | |
*** markvoelker has quit IRC | 10:37 | |
*** xek has joined #openstack-keystone | 11:09 | |
*** jaosorior has joined #openstack-keystone | 11:20 | |
*** raildo has joined #openstack-keystone | 11:20 | |
*** markvoelker has joined #openstack-keystone | 11:33 | |
*** shyamb has quit IRC | 11:37 | |
*** liushuo_ has joined #openstack-keystone | 11:37 | |
*** markvoelker has quit IRC | 11:38 | |
*** liushuo has quit IRC | 11:39 | |
*** shyamb has joined #openstack-keystone | 11:43 | |
openstackgerrit | Merged openstack/keystone master: Add cadf auditing to credentials https://review.opendev.org/664618 | 11:50 |
*** ayoung has quit IRC | 11:54 | |
*** xek has quit IRC | 12:02 | |
*** xek has joined #openstack-keystone | 12:02 | |
*** xek has quit IRC | 12:04 | |
*** jaosorior has quit IRC | 12:09 | |
*** xek has joined #openstack-keystone | 12:09 | |
*** awalende has quit IRC | 12:10 | |
*** awalende has joined #openstack-keystone | 12:13 | |
*** shyamb has quit IRC | 12:16 | |
*** shyam89 has joined #openstack-keystone | 12:16 | |
*** liushuobj__ has joined #openstack-keystone | 12:25 | |
*** dave-mccowan has joined #openstack-keystone | 12:28 | |
*** liushuo_ has quit IRC | 12:28 | |
*** shyam89 has quit IRC | 12:30 | |
*** markvoelker has joined #openstack-keystone | 12:34 | |
*** dave-mccowan has quit IRC | 12:35 | |
*** liushuo_ has joined #openstack-keystone | 12:38 | |
*** xek has quit IRC | 12:39 | |
*** markvoelker has quit IRC | 12:39 | |
*** xek has joined #openstack-keystone | 12:39 | |
*** liushuobj__ has quit IRC | 12:41 | |
*** liushuo has joined #openstack-keystone | 12:47 | |
*** liushuo_ has quit IRC | 12:49 | |
*** lbragstad has joined #openstack-keystone | 12:59 | |
*** awalende has quit IRC | 13:13 | |
*** awalende has joined #openstack-keystone | 13:13 | |
*** awalende has quit IRC | 13:14 | |
*** awalende has joined #openstack-keystone | 13:14 | |
*** awalende has quit IRC | 13:16 | |
*** awalende has joined #openstack-keystone | 13:16 | |
*** awalende has quit IRC | 13:20 | |
*** awalende has joined #openstack-keystone | 13:21 | |
openstackgerrit | Lance Bragstad proposed openstack/keystone master: Implement system scope and default roles for token API https://review.opendev.org/665231 | 13:25 |
*** mchlumsky has joined #openstack-keystone | 13:31 | |
*** markvoelker has joined #openstack-keystone | 13:35 | |
*** markvoelker has quit IRC | 13:40 | |
*** awalende_ has joined #openstack-keystone | 13:48 | |
*** awalende has quit IRC | 13:51 | |
*** awalende_ has quit IRC | 13:52 | |
*** whoami-rajat has quit IRC | 13:57 | |
*** awalende has joined #openstack-keystone | 14:22 | |
*** awalende has quit IRC | 14:26 | |
*** ayoung has joined #openstack-keystone | 14:35 | |
*** ayoung has quit IRC | 14:35 | |
*** dklyle has quit IRC | 14:42 | |
*** dklyle has joined #openstack-keystone | 14:42 | |
*** bnemec has joined #openstack-keystone | 14:48 | |
*** bnemec is now known as beekneemech | 15:11 | |
*** markvoelker has joined #openstack-keystone | 15:37 | |
*** raildo has quit IRC | 15:40 | |
*** raildo has joined #openstack-keystone | 15:40 | |
*** markvoelker has quit IRC | 15:41 | |
*** raildo has quit IRC | 15:49 | |
*** raildo has joined #openstack-keystone | 15:49 | |
*** jamesmcarthur has joined #openstack-keystone | 15:56 | |
*** takamatsu has quit IRC | 16:07 | |
openstackgerrit | Lance Bragstad proposed openstack/keystone master: Update unified limit documentation https://review.opendev.org/664933 | 16:42 |
*** lbragstad is now known as lbragstad_runnin | 17:04 | |
openstackgerrit | Merged openstack/keystone master: Add flake8 ignore list to fast8 script https://review.opendev.org/663444 | 17:06 |
*** markvoelker has joined #openstack-keystone | 17:38 | |
openstackgerrit | ayoung proposed openstack/keystone master: Explicit Project ID https://review.opendev.org/664746 | 17:40 |
*** ayoung has joined #openstack-keystone | 17:40 | |
*** lbragstad_runnin is now known as lbragstad | 17:43 | |
*** markvoelker has quit IRC | 17:43 | |
*** jaosorior has joined #openstack-keystone | 18:16 | |
*** jamesmcarthur_ has joined #openstack-keystone | 18:17 | |
*** jaosorior has quit IRC | 18:18 | |
*** tesseract has quit IRC | 18:18 | |
*** jamesmcarthur has quit IRC | 18:21 | |
*** jamesmcarthur_ has quit IRC | 18:24 | |
*** jdennis has quit IRC | 18:38 | |
*** markvoelker has joined #openstack-keystone | 18:39 | |
*** markvoelker has quit IRC | 18:44 | |
*** jamesmcarthur has joined #openstack-keystone | 19:02 | |
*** pcaruana has quit IRC | 19:39 | |
*** jamesmcarthur has quit IRC | 19:41 | |
*** jamesmcarthur has joined #openstack-keystone | 19:42 | |
*** jamesmcarthur has quit IRC | 19:44 | |
*** jamesmcarthur has joined #openstack-keystone | 19:44 | |
*** joshualyle has quit IRC | 19:53 | |
openstackgerrit | Lance Bragstad proposed openstack/oslo.limit master: WIP: Rewrite oslo.limit https://review.opendev.org/665465 | 19:57 |
lbragstad | cc johnthetubaguy ^ that's going to need more work | 20:00 |
*** jamesmcarthur has quit IRC | 20:00 | |
lbragstad | but - i'm trying to port some of what you and wxy-xiyuan have done | 20:00 |
lbragstad | and removing the context manager and verification functionality, for now | 20:00 |
lbragstad | that should probably be its own commit | 20:01 |
lbragstad | cc melwitt ^ | 20:01 |
johnthetubaguy | cool, that seems good | 20:01 |
lbragstad | i think the following chain makes sense | 20:01 |
lbragstad | 1.) remove context manager stuff and verification logic | 20:01 |
lbragstad | 2.) introduce common exception and opts | 20:01 |
lbragstad | 3.) wire up SKD connection as an attribute of the enforcer | 20:02 |
lbragstad | 4.) implement base enforcer | 20:02 |
lbragstad | at least as an abstract class | 20:02 |
lbragstad | 5.) implement flat enforcement | 20:02 |
johnthetubaguy | SKD connection? | 20:02 |
lbragstad | yeah - openstacksdk so that oslo.limit can query keystone for limits | 20:03 |
johnthetubaguy | ah, SDK, got it | 20:03 |
lbragstad | oh - yeah.. sorry sdk* | 20:03 |
johnthetubaguy | no worries, just couldn't translate | 20:03 |
johnthetubaguy | I think that makes sense, chain wise | 20:04 |
lbragstad | ok | 20:04 |
lbragstad | but a super basic interface is what we want, right? | 20:04 |
johnthetubaguy | +1 | 20:04 |
*** jamesmcarthur has joined #openstack-keystone | 20:04 | |
johnthetubaguy | walk before we can run or something | 20:04 |
lbragstad | sure | 20:04 |
*** jamesmcarthur has quit IRC | 20:05 | |
*** joshualyle has joined #openstack-keystone | 20:07 | |
*** joshualyle has quit IRC | 20:10 | |
ayoung | OK...I give up. Where did we hide json_home now? | 20:16 |
lbragstad | ayoung what request are you making? | 20:17 |
ayoung | specifically where do I need to add the explicit_project_id field | 20:17 |
ayoung | I did not add it for explicit_domain_id either | 20:17 |
ayoung | keystone/api/projects.py | 20:18 |
ayoung | goes right in the api file now...got it | 20:18 |
lbragstad | the json home stuff is in keystone/api/_shared/json_home_relations.py | 20:18 |
ayoung | but there is no project_id in there...is that where I should be adding explicit_project_id? | 20:20 |
ayoung | Do I really need to add it? | 20:21 |
lbragstad | i'm missing something i think | 20:40 |
*** markvoelker has joined #openstack-keystone | 20:41 | |
*** raildo has quit IRC | 20:42 | |
*** markvoelker has quit IRC | 20:45 | |
*** mchlumsky has quit IRC | 20:56 | |
*** joshualyle has joined #openstack-keystone | 21:40 | |
*** joshualyle has quit IRC | 21:45 | |
*** joshualyle has joined #openstack-keystone | 22:01 | |
*** xek has quit IRC | 22:03 | |
*** joshualyle has quit IRC | 22:06 | |
*** joshualyle has joined #openstack-keystone | 22:14 | |
*** joshualyle has quit IRC | 22:18 | |
*** markvoelker has joined #openstack-keystone | 22:42 | |
*** markvoelker has quit IRC | 22:47 | |
*** joshualyle has joined #openstack-keystone | 23:11 | |
*** joshualyle has quit IRC | 23:15 | |
*** joshualyle has joined #openstack-keystone | 23:25 | |
*** joshualyle has quit IRC | 23:29 | |
*** markvoelker has joined #openstack-keystone | 23:43 | |
*** markvoelker has quit IRC | 23:48 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!