*** gyee has quit IRC | 00:15 | |
*** rcernin has quit IRC | 00:25 | |
*** rcernin has joined #openstack-keystone | 00:27 | |
*** lbragstad has quit IRC | 00:49 | |
*** markvoelker has joined #openstack-keystone | 01:02 | |
*** rcernin_ has joined #openstack-keystone | 01:05 | |
*** rcernin has quit IRC | 01:06 | |
*** lbragstad has joined #openstack-keystone | 01:07 | |
*** lbragstad has quit IRC | 01:20 | |
*** markvoelker has quit IRC | 01:22 | |
*** liushuo_ has joined #openstack-keystone | 01:22 | |
*** liushuobj__ has quit IRC | 01:25 | |
*** ayoung has joined #openstack-keystone | 01:35 | |
*** spsurya has joined #openstack-keystone | 01:39 | |
*** jamesmcarthur has joined #openstack-keystone | 02:47 | |
*** ayoung has quit IRC | 03:12 | |
*** jamesmcarthur has quit IRC | 03:35 | |
openstackgerrit | Vishakha Agarwal proposed openstack/keystone master: Fix E731 flake8 https://review.opendev.org/666264 | 03:35 |
---|---|---|
*** vishakha has joined #openstack-keystone | 03:40 | |
*** jamesmcarthur has joined #openstack-keystone | 03:42 | |
*** jamesmcarthur has quit IRC | 03:47 | |
*** whoami-rajat has joined #openstack-keystone | 03:47 | |
*** jamesmcarthur has joined #openstack-keystone | 03:55 | |
openstackgerrit | zhenmei proposed openstack/keystone master: Fix create nonlocal user issue https://review.opendev.org/661183 | 04:08 |
*** dave-mccowan has quit IRC | 04:25 | |
*** jamesmcarthur has quit IRC | 04:26 | |
*** jamesmcarthur has joined #openstack-keystone | 04:34 | |
*** liushuo_ has quit IRC | 04:39 | |
*** liushuo_ has joined #openstack-keystone | 04:39 | |
*** liushuo_ has quit IRC | 04:46 | |
*** liushuo_ has joined #openstack-keystone | 04:46 | |
*** liushuobj__ has joined #openstack-keystone | 04:50 | |
*** vishalmanchanda has joined #openstack-keystone | 04:51 | |
*** liushuo_ has quit IRC | 04:53 | |
*** liushuo_ has joined #openstack-keystone | 05:00 | |
*** liushuobj__ has quit IRC | 05:03 | |
*** jamesmcarthur has quit IRC | 05:04 | |
*** joshualyle has joined #openstack-keystone | 05:10 | |
*** jamesmcarthur has joined #openstack-keystone | 05:16 | |
*** jamesmcarthur has quit IRC | 05:21 | |
*** jamesmcarthur has joined #openstack-keystone | 05:27 | |
openstackgerrit | 王婷婷 proposed openstack/keystone master: 试验 https://review.opendev.org/666489 | 05:31 |
*** jamesmcarthur has quit IRC | 05:31 | |
*** jamesmcarthur has joined #openstack-keystone | 05:47 | |
*** jamesmcarthur has quit IRC | 05:52 | |
*** liushuobj__ has joined #openstack-keystone | 05:54 | |
*** liushuo_ has quit IRC | 05:58 | |
*** liushuo_ has joined #openstack-keystone | 06:08 | |
openstackgerrit | Vishakha Agarwal proposed openstack/keystone master: Remove [signing] config https://review.opendev.org/659434 | 06:09 |
*** liushuobj__ has quit IRC | 06:12 | |
*** liushuo has joined #openstack-keystone | 06:13 | |
*** joshualyle has quit IRC | 06:13 | |
*** liushuo_ has quit IRC | 06:13 | |
*** pcaruana has joined #openstack-keystone | 06:15 | |
*** jamesmcarthur has joined #openstack-keystone | 06:20 | |
*** jamesmcarthur has quit IRC | 06:30 | |
*** jamesmcarthur has joined #openstack-keystone | 06:45 | |
*** dancn has joined #openstack-keystone | 06:49 | |
*** jamesmcarthur has quit IRC | 06:52 | |
*** liushuo_ has joined #openstack-keystone | 06:54 | |
*** josecastroleon has joined #openstack-keystone | 06:58 | |
*** liushuo has quit IRC | 06:58 | |
*** dancn has quit IRC | 07:06 | |
*** rcernin_ has quit IRC | 07:06 | |
*** tesseract has joined #openstack-keystone | 07:07 | |
*** trident has quit IRC | 07:08 | |
*** trident has joined #openstack-keystone | 07:10 | |
*** liushuobj__ has joined #openstack-keystone | 07:21 | |
*** jamesmcarthur has joined #openstack-keystone | 07:21 | |
*** markvoelker has joined #openstack-keystone | 07:22 | |
*** dancn has joined #openstack-keystone | 07:23 | |
*** liushuo_ has quit IRC | 07:24 | |
*** jamesmcarthur has quit IRC | 07:33 | |
*** awalende has joined #openstack-keystone | 07:37 | |
*** awalende has quit IRC | 07:41 | |
*** jamesmcarthur has joined #openstack-keystone | 07:44 | |
*** jamesmcarthur has quit IRC | 07:48 | |
*** jamesmcarthur has joined #openstack-keystone | 07:50 | |
*** markvoelker has quit IRC | 07:50 | |
*** dklyle has quit IRC | 07:52 | |
*** jamesmcarthur has quit IRC | 07:57 | |
*** jamesmcarthur has joined #openstack-keystone | 07:58 | |
*** awalende has joined #openstack-keystone | 07:59 | |
*** awalende has quit IRC | 07:59 | |
*** awalende has joined #openstack-keystone | 08:00 | |
*** awalende has quit IRC | 08:04 | |
*** liushuo_ has joined #openstack-keystone | 08:06 | |
*** liushuobj__ has quit IRC | 08:10 | |
*** tkajinam has quit IRC | 08:16 | |
*** liushuo_ has quit IRC | 08:24 | |
*** liushuo_ has joined #openstack-keystone | 08:24 | |
*** liushuobj__ has joined #openstack-keystone | 08:32 | |
*** liushuo_ has quit IRC | 08:36 | |
*** liushuo_ has joined #openstack-keystone | 08:41 | |
*** imacdonn has quit IRC | 08:41 | |
*** imacdonn has joined #openstack-keystone | 08:41 | |
*** liushuobj__ has quit IRC | 08:44 | |
*** markvoelker has joined #openstack-keystone | 08:47 | |
*** liushuobj__ has joined #openstack-keystone | 08:50 | |
*** markvoelker has quit IRC | 08:52 | |
*** liushuo has joined #openstack-keystone | 08:53 | |
*** liushuo_ has quit IRC | 08:53 | |
*** jamesmcarthur has quit IRC | 08:55 | |
*** liushuobj__ has quit IRC | 08:55 | |
*** jamesmcarthur has joined #openstack-keystone | 08:59 | |
*** jamesmcarthur has quit IRC | 09:08 | |
*** jamesmcarthur has joined #openstack-keystone | 09:18 | |
*** jamesmcarthur has quit IRC | 09:36 | |
*** jamesmcarthur has joined #openstack-keystone | 09:45 | |
*** markvoelker has joined #openstack-keystone | 09:48 | |
*** liushuo_ has joined #openstack-keystone | 09:51 | |
*** markvoelker has quit IRC | 09:53 | |
*** liushuo has quit IRC | 09:55 | |
*** liushuobj__ has joined #openstack-keystone | 09:57 | |
*** jamesmcarthur has quit IRC | 10:00 | |
*** liushuo_ has quit IRC | 10:01 | |
*** liushuo_ has joined #openstack-keystone | 10:04 | |
*** liushuobj__ has quit IRC | 10:08 | |
*** liushuobj__ has joined #openstack-keystone | 10:21 | |
*** liushuo_ has quit IRC | 10:25 | |
openstackgerrit | Vishakha Agarwal proposed openstack/keystone master: Remove [signing] config https://review.opendev.org/659434 | 10:29 |
*** liushuo_ has joined #openstack-keystone | 10:30 | |
*** liushuo_ has quit IRC | 10:32 | |
*** liushuo has joined #openstack-keystone | 10:33 | |
*** liushuobj__ has quit IRC | 10:33 | |
*** jamesmcarthur has joined #openstack-keystone | 10:45 | |
*** trident has quit IRC | 10:47 | |
*** trident has joined #openstack-keystone | 10:48 | |
*** markvoelker has joined #openstack-keystone | 10:49 | |
*** jamesmcarthur has quit IRC | 10:50 | |
*** jamesmcarthur has joined #openstack-keystone | 10:50 | |
*** markvoelker has quit IRC | 10:54 | |
*** jamesmcarthur has quit IRC | 11:06 | |
*** jamesmcarthur has joined #openstack-keystone | 11:09 | |
*** liushuo_ has joined #openstack-keystone | 11:20 | |
*** liushuo has quit IRC | 11:23 | |
*** dancn has quit IRC | 11:44 | |
*** chandra_keystone has joined #openstack-keystone | 11:47 | |
chandra_keystone | Hi team | 11:47 |
chandra_keystone | i am facing build issue for v15.0.0 , while using tox -egenconfig command it fails with `ERROR: Could not find a version that satisfies the requirement requests===2.22.0 (from -c https://git.openstack.org/cgit/openstack/requirements/ plain/upper-constraints.txt` | 11:48 |
chandra_keystone | Any help on this? | 11:48 |
*** markvoelker has joined #openstack-keystone | 11:50 | |
*** dancn has joined #openstack-keystone | 11:54 | |
*** markvoelker has quit IRC | 11:54 | |
*** jistr is now known as jistr|lunch | 12:08 | |
*** ayoung has joined #openstack-keystone | 12:11 | |
*** raildo has joined #openstack-keystone | 12:18 | |
*** liushuo_ has quit IRC | 12:21 | |
*** liushuo_ has joined #openstack-keystone | 12:21 | |
*** jamesmcarthur has quit IRC | 12:42 | |
openstackgerrit | Chason Chan proposed openstack/keystone master: [doc] Fix the incorrect command https://review.opendev.org/666554 | 12:44 |
openstackgerrit | Chason Chan proposed openstack/keystone master: [doc] Fix the incorrect command https://review.opendev.org/666554 | 12:47 |
*** markvoelker has joined #openstack-keystone | 12:50 | |
*** jistr|lunch is now known as jistr | 12:55 | |
*** pcaruana has quit IRC | 13:00 | |
*** pcaruana has joined #openstack-keystone | 13:00 | |
*** lbragstad has joined #openstack-keystone | 13:16 | |
*** markvoelker has quit IRC | 13:20 | |
lbragstad | o/ | 13:25 |
*** spsurya has quit IRC | 13:29 | |
openstackgerrit | Corey Bryant proposed openstack/keystone master: Enable LDAP _dn_to_id() for non-default ID attrs https://review.opendev.org/666575 | 13:30 |
*** jistr is now known as jistr|call | 13:31 | |
johnthetubaguy | lbragstad: been looking through things | 13:44 |
lbragstad | johnthetubaguy yep - looking at your comments now | 13:45 |
johnthetubaguy | lbragstad: from those oslo.limits patches, only real thing is the callback, its not really defined yet I guess, but I expected a list of resources to count as well | 13:45 |
lbragstad | so - the thing returned from the callback wouldn't contain all resources owned by the service? | 13:46 |
johnthetubaguy | so... I am not sure | 13:47 |
johnthetubaguy | right now, for Nova I think we could do that | 13:47 |
johnthetubaguy | but if users didn't limit the total number of instances, we could technically skip that DB call | 13:48 |
johnthetubaguy | as right now we do one DB call, and one API call to placement, per project | 13:48 |
johnthetubaguy | in theory if you don't limit on any of those, things, we could skip both calls | 13:48 |
lbragstad | so - placement is what holds all the ram/vcpu information per project? | 13:48 |
johnthetubaguy | yeah | 13:49 |
lbragstad | ok | 13:49 |
johnthetubaguy | api_db holds the info to get the instance count | 13:49 |
johnthetubaguy | doing a separate call for each resource is bad too right, don't want to call placement each time and throw away half the info | 13:49 |
lbragstad | right | 13:50 |
lbragstad | so the callback needs to accept a project_id and a list of resources to return, ideally? | 13:50 |
johnthetubaguy | I think so | 13:50 |
lbragstad | ok | 13:50 |
*** jistr|call is now known as jistr | 13:50 | |
johnthetubaguy | but... I hadn't really thought too much about just returning all the resources | 13:51 |
lbragstad | so - that list of resources is going to get passed into Enforcer.enforce() and then to the callback | 13:51 |
johnthetubaguy | yeah, that felt a bit strange, but yet | 13:51 |
johnthetubaguy | s/yet/yes/ | 13:51 |
lbragstad | ok | 13:51 |
johnthetubaguy | lbragstad: otherwise though, it all looks spot on | 13:53 |
lbragstad | alright - i'll see if i can work that in somewhere | 13:54 |
johnthetubaguy | before you do that though... | 13:54 |
johnthetubaguy | it does create some odd situations, like what happens when resources are missing on either site | 13:54 |
johnthetubaguy | either side | 13:54 |
johnthetubaguy | if you return all resources... and we pass in no resources, its clear you just want to check the limits for all resources | 13:55 |
lbragstad | on the keystone side and on the placement side? | 13:55 |
johnthetubaguy | hmm, totally didn't explain that properly | 13:55 |
johnthetubaguy | so service wants to do the recheck, so sends empty list of resources to oslo.limit | 13:56 |
johnthetubaguy | or should it try to enumerate all known resources it wants you to check | 13:56 |
johnthetubaguy | I think sending empty to mean "no extra resources required, check we are over any limit" makes good sense there | 13:56 |
*** whoami-rajat has quit IRC | 13:56 | |
lbragstad | enforce(self, project_id, filter_resources=None) then? | 13:57 |
johnthetubaguy | yeah, that is an option I guess, return all when filter_resources=None | 13:57 |
lbragstad | calling enforce(project_id) return all possible resources associated to the service, or that the service is responsible for | 13:57 |
johnthetubaguy | yeah, that is nice | 13:58 |
johnthetubaguy | you know, we said keep it simple, lets go for your approach to start with | 13:58 |
lbragstad | calling enforce(project_id, filter_resources=['cores', 'ram_mb']) only gives you those specific usages back | 13:58 |
johnthetubaguy | then worry about this for a v1.1 | 13:58 |
*** vishakha has quit IRC | 13:59 | |
johnthetubaguy | that is attractive though... | 14:00 |
johnthetubaguy | lbragstad: maybe we just say the callback doesn't need to implement filter_resources, its there if you can / want to improve efficiency | 14:01 |
lbragstad | yeah - i was just going to say, it doesn't really make things that hard for oslo.limit | 14:01 |
lbragstad | it's just a pass through | 14:02 |
lbragstad | it just makes things more difficult for the people implementing the callback | 14:02 |
johnthetubaguy | cool, that sounds like it should work | 14:02 |
johnthetubaguy | well, I was thinking the callback need to implement that, it could just always return all resources, which should work | 14:02 |
johnthetubaguy | oops "callback doesn't need to" | 14:03 |
lbragstad | right - it could | 14:03 |
lbragstad | but performance might be terrible | 14:03 |
johnthetubaguy | yeah | 14:03 |
lbragstad | i'm not sure how terrible... | 14:03 |
johnthetubaguy | it depends I guess | 14:03 |
johnthetubaguy | nova wise, we have two sources, if you need to visit both sources reducing the set of things to return makes little difference | 14:04 |
johnthetubaguy | maybe cinder, it would have to count volumes and snapshots, say | 14:04 |
johnthetubaguy | if you only check volumes, then that is just one table to count on | 14:04 |
* johnthetubaguy waves hands around | 14:04 | |
johnthetubaguy | meh, seems good anyways | 14:05 |
lbragstad | yeah - it's an option | 14:05 |
*** dave-mccowan has joined #openstack-keystone | 14:10 | |
*** dancn has quit IRC | 14:10 | |
mloza | cmurphy: 'keystone-manage credential_setup --keystone-user keystone --keystone-group keystone' broke application credentials | 14:12 |
mloza | Getting tons of 'Credential could not be decrypted. Please contact the administrator: CredentialEncryptionError: Credential could not be decrypted. Please contact the administrator' | 14:17 |
*** jamesmcarthur has joined #openstack-keystone | 14:22 | |
openstackgerrit | Lance Bragstad proposed openstack/oslo.limit master: Add skeleton enforce() method to Enforcer https://review.opendev.org/665711 | 14:23 |
openstackgerrit | Lance Bragstad proposed openstack/oslo.limit master: Add ksa connection logic https://review.opendev.org/666085 | 14:23 |
openstackgerrit | Lance Bragstad proposed openstack/oslo.limit master: Flush out basic enforcer and model relationship https://review.opendev.org/666444 | 14:23 |
lbragstad | johnthetubaguy the tests need cleanup - but that should contain what we just talked about ^ | 14:23 |
lbragstad | the doc strings for the usage_callback should include an example of the relationship with filter_resources, too | 14:24 |
johnthetubaguy | lbragstad: cool, thanks | 14:25 |
lbragstad | yep | 14:25 |
*** rouk has joined #openstack-keystone | 14:31 | |
cmurphy | mloza: application credentials are unrelated to the credentials that use that key repository (sorry it's a confusing name) | 14:37 |
cmurphy | credentials could not have been working before without that key repository so they can't be more broken now | 14:37 |
rouk | cmurphy: both the pre-fix and post-fix generate the same number of different errors, it didnt actually break anything, spoke too soon. | 14:43 |
openstackgerrit | Lance Bragstad proposed openstack/keystone master: Update misleading comment about fernet credential encryption https://review.opendev.org/666600 | 14:53 |
openstackgerrit | Lance Bragstad proposed openstack/keystonemiddleware master: Fix bandit warning https://review.opendev.org/666608 | 15:08 |
lbragstad | ^ that can probably be rolled into the previous commit to remove PKI/PKIZ stuff | 15:09 |
lbragstad | if anyone wants to do that, otherwise i can, i just didn't want to step on toes | 15:09 |
cmurphy | i don't think that's related to the pki removal | 15:10 |
cmurphy | but looks like we can do that instead of https://review.opendev.org/#/c/666446/ | 15:10 |
openstackgerrit | Lance Bragstad proposed openstack/keystonemiddleware master: Fix bandit warning https://review.opendev.org/666608 | 15:10 |
lbragstad | rebased on master | 15:10 |
cmurphy | cool | 15:11 |
openstackgerrit | Lance Bragstad proposed openstack/keystone master: Update misleading comment about fernet credential encryption https://review.opendev.org/666600 | 15:13 |
*** pcaruana has quit IRC | 15:14 | |
*** dklyle has joined #openstack-keystone | 15:16 | |
openstackgerrit | Merged openstack/ldappool master: Sync Sphinx requirement https://review.opendev.org/666046 | 15:24 |
*** jamesmcarthur has quit IRC | 15:36 | |
*** gyee has joined #openstack-keystone | 15:45 | |
*** jamesmcarthur has joined #openstack-keystone | 15:53 | |
*** kklimonda_ has joined #openstack-keystone | 15:55 | |
*** masayukig_ has joined #openstack-keystone | 15:55 | |
*** jamesmcarthur has quit IRC | 15:56 | |
*** jamesmcarthur has joined #openstack-keystone | 15:56 | |
*** dasp_ has joined #openstack-keystone | 15:57 | |
*** aning_ has joined #openstack-keystone | 15:57 | |
*** pcaruana has joined #openstack-keystone | 16:02 | |
*** kklimonda has quit IRC | 16:03 | |
*** masayukig has quit IRC | 16:03 | |
*** Horrorcat has quit IRC | 16:03 | |
*** dasp has quit IRC | 16:03 | |
*** szaher has quit IRC | 16:03 | |
*** mvkr has quit IRC | 16:03 | |
*** aning has quit IRC | 16:03 | |
*** kklimonda_ is now known as kklimonda | 16:03 | |
*** masayukig_ is now known as masayukig | 16:03 | |
*** szaher has joined #openstack-keystone | 16:09 | |
*** mvkr has joined #openstack-keystone | 16:10 | |
*** Horrorcat has joined #openstack-keystone | 16:27 | |
openstackgerrit | Merged openstack/keystone master: [api-ref] Fix nocatalog description for unscoped token https://review.opendev.org/660902 | 16:30 |
openstackgerrit | Merged openstack/keystoneauth master: Allow setting retry counts for Adapter via configuration options https://review.opendev.org/666287 | 16:46 |
*** whoami-rajat has joined #openstack-keystone | 17:09 | |
*** tesseract has quit IRC | 17:14 | |
*** tesseract has joined #openstack-keystone | 17:15 | |
openstackgerrit | Raildo Mascena proposed openstack/keystone master: Fixing dn_to_id function for cases were id is not in the DN https://review.opendev.org/649177 | 17:31 |
*** tesseract has quit IRC | 17:59 | |
*** tesseract has joined #openstack-keystone | 18:01 | |
*** jamesmcarthur has quit IRC | 18:06 | |
*** cburgess has joined #openstack-keystone | 18:07 | |
*** jamesmcarthur has joined #openstack-keystone | 18:07 | |
*** cburgess has quit IRC | 18:07 | |
*** jamesmcarthur has quit IRC | 18:12 | |
*** jamesmcarthur has joined #openstack-keystone | 18:12 | |
openstackgerrit | Corey Bryant proposed openstack/keystone master: Enable LDAP _dn_to_id() for non-default ID attrs https://review.opendev.org/666575 | 18:13 |
*** spotz has quit IRC | 18:14 | |
*** jamesmcarthur_ has joined #openstack-keystone | 18:17 | |
*** jamesmcarthur has quit IRC | 18:17 | |
*** jamesmcarthur_ has quit IRC | 18:22 | |
*** jamesmcarthur has joined #openstack-keystone | 18:23 | |
*** spotz has joined #openstack-keystone | 18:37 | |
*** tesseract has quit IRC | 18:37 | |
*** tesseract has joined #openstack-keystone | 18:38 | |
*** jamesmcarthur has quit IRC | 18:42 | |
*** jamesmcarthur has joined #openstack-keystone | 18:51 | |
openstackgerrit | Merged openstack/keystonemiddleware master: Fix bandit warning https://review.opendev.org/666608 | 18:59 |
*** jamesmcarthur has quit IRC | 19:01 | |
*** jamesmcarthur has joined #openstack-keystone | 19:14 | |
*** markvoelker has joined #openstack-keystone | 19:20 | |
*** jamesmcarthur has quit IRC | 19:22 | |
*** whoami-rajat has quit IRC | 19:39 | |
*** markvoelker has quit IRC | 19:40 | |
openstackgerrit | Colleen Murphy proposed openstack/keystonemiddleware master: Remove Diablo compatibility tests https://review.opendev.org/666668 | 19:40 |
*** vishalmanchanda has quit IRC | 19:52 | |
*** pcaruana has quit IRC | 20:45 | |
*** lbragstad has quit IRC | 21:27 | |
*** gyee has quit IRC | 21:34 | |
*** markvoelker has joined #openstack-keystone | 21:37 | |
*** markvoelker has quit IRC | 21:42 | |
*** david-lyle has joined #openstack-keystone | 22:01 | |
*** dklyle has quit IRC | 22:01 | |
*** david-lyle is now known as dklyle | 22:01 | |
*** hoonetorg has quit IRC | 22:23 | |
*** ayoung has quit IRC | 22:30 | |
*** tesseract has quit IRC | 22:35 | |
*** hoonetorg has joined #openstack-keystone | 22:37 | |
*** markvoelker has joined #openstack-keystone | 22:38 | |
*** markvoelker has quit IRC | 22:43 | |
*** dklyle has quit IRC | 23:02 | |
*** rcernin has joined #openstack-keystone | 23:11 | |
openstackgerrit | Colleen Murphy proposed openstack/keystone master: [WIP] Add immutable resource option for roles https://review.opendev.org/666739 | 23:20 |
*** tkajinam has joined #openstack-keystone | 23:21 | |
*** markvoelker has joined #openstack-keystone | 23:39 | |
*** markvoelker has quit IRC | 23:43 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!