*** imacdonn has quit IRC | 01:11 | |
*** imacdonn has joined #openstack-keystone | 01:12 | |
*** adriant has joined #openstack-keystone | 01:49 | |
*** whoami-rajat has joined #openstack-keystone | 02:26 | |
*** rcernin has quit IRC | 04:17 | |
*** new_student1411 has joined #openstack-keystone | 04:45 | |
*** shyamb has joined #openstack-keystone | 04:52 | |
*** tkajinam has quit IRC | 04:54 | |
*** tkajinam has joined #openstack-keystone | 04:55 | |
*** shyamb has quit IRC | 04:57 | |
*** shyamb has joined #openstack-keystone | 05:04 | |
*** rcernin has joined #openstack-keystone | 05:10 | |
*** tkajinam_ has joined #openstack-keystone | 05:25 | |
*** tkajinam has quit IRC | 05:27 | |
*** rcernin has quit IRC | 05:41 | |
*** shyamb has quit IRC | 05:49 | |
*** new_student1411 has quit IRC | 05:55 | |
*** rcernin has joined #openstack-keystone | 05:58 | |
*** Pavan has joined #openstack-keystone | 05:59 | |
Pavan | Can i give role base access. like aws IAM (instance can access only s3 single bucket) | 06:00 |
---|---|---|
*** shyamb has joined #openstack-keystone | 06:24 | |
openstackgerrit | Qiu Fossen proposed openstack/oslo.policy master: Add Python 3 Train unit tests https://review.opendev.org/669259 | 06:28 |
openstackgerrit | Qiu Fossen proposed openstack/oslo.policy master: Add Python 3 Train unit tests https://review.opendev.org/669259 | 06:38 |
*** dancn has joined #openstack-keystone | 06:47 | |
openstackgerrit | wangxiyuan proposed openstack/keystone master: Drop limit columns https://review.opendev.org/657187 | 06:59 |
*** jaosorior has joined #openstack-keystone | 07:02 | |
*** xek has joined #openstack-keystone | 07:06 | |
*** hoonetorg has quit IRC | 07:16 | |
*** tesseract has joined #openstack-keystone | 07:21 | |
*** shyamb has quit IRC | 07:23 | |
*** hoonetorg has joined #openstack-keystone | 07:29 | |
*** rcernin has quit IRC | 07:45 | |
*** rcernin has joined #openstack-keystone | 08:02 | |
*** xek has quit IRC | 08:10 | |
*** tkajinam_ has quit IRC | 08:11 | |
openstackgerrit | Merged openstack/keystone master: Incorrect behavior of validate_password method https://review.opendev.org/668861 | 08:12 |
openstackgerrit | Merged openstack/keystone master: Revert "Ignore boilerplate constants in autodoc" https://review.opendev.org/664668 | 08:12 |
openstackgerrit | Merged openstack/keystone master: Revert "Exclude constants from autodoc" https://review.opendev.org/664669 | 08:12 |
*** shyamb has joined #openstack-keystone | 08:35 | |
*** rcernin has quit IRC | 08:49 | |
*** rcernin has joined #openstack-keystone | 09:05 | |
*** jistr has quit IRC | 09:07 | |
*** new_student1411 has joined #openstack-keystone | 09:11 | |
*** jistr has joined #openstack-keystone | 09:14 | |
*** rcernin has quit IRC | 09:16 | |
*** jaosorior has quit IRC | 09:36 | |
*** shyamb has quit IRC | 10:15 | |
*** xek has joined #openstack-keystone | 10:36 | |
*** shyamb has joined #openstack-keystone | 10:51 | |
*** whoami-rajat has quit IRC | 11:06 | |
openstackgerrit | Merged openstack/keystone master: Drop limit columns https://review.opendev.org/657187 | 11:06 |
*** trident has quit IRC | 11:10 | |
*** trident has joined #openstack-keystone | 11:14 | |
*** shyamb has quit IRC | 11:14 | |
*** shyamb has joined #openstack-keystone | 11:41 | |
*** openstackgerrit has quit IRC | 12:04 | |
*** whoami-rajat has joined #openstack-keystone | 12:19 | |
*** xek has quit IRC | 12:26 | |
*** xek_ has joined #openstack-keystone | 12:26 | |
*** tesseract has quit IRC | 12:52 | |
*** tesseract has joined #openstack-keystone | 12:54 | |
*** shyamb has quit IRC | 12:55 | |
*** shyamb has joined #openstack-keystone | 12:55 | |
*** Pavan has quit IRC | 13:15 | |
*** shyamb has quit IRC | 13:25 | |
*** raildo has joined #openstack-keystone | 13:26 | |
*** trident has quit IRC | 13:41 | |
*** openstackgerrit has joined #openstack-keystone | 13:47 | |
openstackgerrit | Jose Castro Leon proposed openstack/keystone master: Allow to filter endpoint groups by name https://review.opendev.org/658359 | 13:47 |
*** ayoung has joined #openstack-keystone | 13:49 | |
*** dancn has quit IRC | 14:05 | |
*** tesseract-RH has joined #openstack-keystone | 15:08 | |
*** xek_ has quit IRC | 15:09 | |
*** tesseract has quit IRC | 15:10 | |
*** gyee has joined #openstack-keystone | 15:28 | |
*** jdennis has quit IRC | 15:29 | |
*** jamesmcarthur has joined #openstack-keystone | 15:30 | |
gyee | kmalloc, cmurphy, so for X.509 tokenless, looks like we can eliminate the trusted_issuer option in keystone.conf. We can enforce that in the mapping instead. | 16:45 |
cmurphy | gyee: cool | 16:47 |
gyee | cmurphy, question on the mapping, when map to a project, where does the project domain specified? https://docs.openstack.org/keystone/pike/advanced-topics/federation/mapping_combinations.html#auto-provisioning | 16:48 |
cmurphy | gyee: "Projects will be created within the domain associated with the Identity Provider. | 16:52 |
cmurphy | " | 16:52 |
gyee | oh, so we can't map it to an existing local project? | 16:54 |
cmurphy | I am not sure | 16:55 |
cmurphy | knikolla: ^ | 16:55 |
*** jamesmcarthur has quit IRC | 16:58 | |
*** tesseract-RH has quit IRC | 17:01 | |
*** whoami-rajat has quit IRC | 17:06 | |
kmalloc | gyee: nice | 17:34 |
*** mloza has quit IRC | 17:35 | |
gyee | I think there's a bug in mapping as well. Seem like if I have multiple rules and only one rule yield a valid user, that user's being ignored. | 17:42 |
gyee | This is weird. Mapped_properties still has multiple users, but only one of them has a none empty user name. I would expect we filter out the empty ones. | 17:44 |
openstackgerrit | caoyuan proposed openstack/oslo.policy master: Move doc related modules to doc/requirements.txt https://review.opendev.org/669427 | 17:52 |
openstackgerrit | Corey Bryant proposed openstack/oslo.limit master: Add Python 3 Train unit tests https://review.opendev.org/669461 | 18:45 |
openstackgerrit | Corey Bryant proposed openstack/oslo.policy master: Add Python 3 Train unit tests https://review.opendev.org/610122 | 18:55 |
openstackgerrit | Colleen Murphy proposed openstack/keystone master: Add user_id, external_id to access rules table https://review.opendev.org/663440 | 19:12 |
openstackgerrit | Colleen Murphy proposed openstack/keystone master: Add manager support for app cred access rules https://review.opendev.org/663462 | 19:12 |
openstackgerrit | Colleen Murphy proposed openstack/keystone master: Add API changes for app cred access rules https://review.opendev.org/628168 | 19:12 |
openstackgerrit | Colleen Murphy proposed openstack/keystone master: Expose access rules as its own API https://review.opendev.org/668238 | 19:12 |
openstackgerrit | Colleen Murphy proposed openstack/keystone master: Add access rules to token validation https://review.opendev.org/631993 | 19:12 |
openstackgerrit | Merged openstack/keystone master: Update test cases for os-pki revoke API https://review.opendev.org/668654 | 20:05 |
*** raildo has quit IRC | 20:13 | |
*** jamesmcarthur has joined #openstack-keystone | 21:46 | |
*** jamesmcarthur has quit IRC | 22:12 | |
*** jamesmcarthur has joined #openstack-keystone | 22:12 | |
*** jistr has quit IRC | 22:24 | |
*** jistr has joined #openstack-keystone | 22:24 | |
*** jamesmcarthur has quit IRC | 22:33 | |
*** dklyle has quit IRC | 22:36 | |
*** jamesmcarthur has joined #openstack-keystone | 22:48 | |
*** sapd1 has quit IRC | 23:05 | |
*** jamesmcarthur has quit IRC | 23:05 | |
*** jamesmcarthur has joined #openstack-keystone | 23:06 | |
*** jamesmcarthur has quit IRC | 23:32 | |
*** jdennis has joined #openstack-keystone | 23:40 | |
openstackgerrit | Colleen Murphy proposed openstack/pycadf master: Removes temporary fix for doc generation https://review.opendev.org/669543 | 23:41 |
openstackgerrit | Colleen Murphy proposed openstack/pycadf master: Add Python 3 Train unit tests https://review.opendev.org/667757 | 23:42 |
cmurphy | been a while since that lib has seen any love ^ | 23:42 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!