| adriant | hah, I look away for a bit and kmalloc merges all my patches | 00:15 |
|---|---|---|
| kmalloc | >.> | 00:15 |
| kmalloc | <.< | 00:15 |
| adriant | I was totally gonna fix that typo :P | 00:16 |
| * adriant isn't fussed at all | 00:16 | |
| adriant | I guess I should start planning out the SDK, OSC, and Horizon work! | 00:16 |
| kmalloc | also don't forget to propose a release of KSA | 00:19 |
| adriant | will do | 00:20 |
| *** markvoelker has joined #openstack-keystone | 00:24 | |
| *** gyee has quit IRC | 00:40 | |
| *** markvoelker has quit IRC | 00:51 | |
| *** markvoelker has joined #openstack-keystone | 00:52 | |
| *** markvoelker has quit IRC | 01:01 | |
| *** markvoelker has joined #openstack-keystone | 01:05 | |
| *** markvoelker has quit IRC | 01:11 | |
| *** markvoelker has joined #openstack-keystone | 01:16 | |
| *** spsurya has joined #openstack-keystone | 01:29 | |
| openstackgerrit | Merged openstack/keystoneauth master: add support for auth_receipts and multi-method auth https://review.opendev.org/675049 | 01:44 |
| adriant | ! | 02:01 |
| * adriant opens gin | 02:01 | |
| adriant | wait, it's too early for that :P | 02:01 |
| adriant | mordred: I'll hop over to the sdks channel and we can organise a time and the work on the SDK and OSC (what is the OSC irc channel, sdks?) | 02:02 |
| adriant | and now I need to bug Horizon people | 02:02 |
| *** markvoelker has quit IRC | 03:10 | |
| *** altlogbot_2 has quit IRC | 03:16 | |
| *** altlogbot_1 has joined #openstack-keystone | 03:17 | |
| *** markvoelker has joined #openstack-keystone | 03:55 | |
| *** markvoelker has quit IRC | 04:00 | |
| *** markvoelker has joined #openstack-keystone | 04:50 | |
| *** tkajinam has quit IRC | 04:53 | |
| *** tkajinam has joined #openstack-keystone | 04:54 | |
| *** markvoelker has quit IRC | 04:54 | |
| *** tkajinam has quit IRC | 05:00 | |
| *** tkajinam has joined #openstack-keystone | 05:05 | |
| *** jaosorior has joined #openstack-keystone | 05:16 | |
| *** tkajinam has quit IRC | 05:31 | |
| *** markvoelker has joined #openstack-keystone | 05:35 | |
| *** markvoelker has quit IRC | 05:41 | |
| *** tkajinam has joined #openstack-keystone | 06:04 | |
| *** tkajinam has quit IRC | 06:49 | |
| *** tkajinam has joined #openstack-keystone | 07:00 | |
| *** d34dh0r53 has quit IRC | 07:07 | |
| *** cloudnull has quit IRC | 07:08 | |
| *** cloudnull has joined #openstack-keystone | 07:08 | |
| *** d34dh0r53 has joined #openstack-keystone | 07:10 | |
| *** jaosorior has quit IRC | 07:23 | |
| *** jawad_axd has joined #openstack-keystone | 07:26 | |
| *** ivve has joined #openstack-keystone | 07:53 | |
| *** jaosorior has joined #openstack-keystone | 08:17 | |
| *** markvoelker has joined #openstack-keystone | 08:20 | |
| *** markvoelker has quit IRC | 08:25 | |
| openstackgerrit | Merged openstack/keystone master: Add support for previous TOTP windows https://review.opendev.org/647655 | 08:40 |
| openstackgerrit | Rabi Mishra proposed openstack/keystoneauth master: Allow initializing session with connection retries https://review.opendev.org/676648 | 08:43 |
| *** tkajinam has quit IRC | 08:47 | |
| openstackgerrit | Jens Harbott (frickler) proposed openstack/keystone master: Update cli docs https://review.opendev.org/676659 | 09:16 |
| *** jawad_axd has quit IRC | 09:29 | |
| openstackgerrit | Jens Harbott (frickler) proposed openstack/keystone master: Update broken link https://review.opendev.org/676662 | 09:46 |
| *** markvoelker has joined #openstack-keystone | 10:36 | |
| *** markvoelker has quit IRC | 10:41 | |
| *** jaosorior has quit IRC | 11:18 | |
| *** markvoelker has joined #openstack-keystone | 11:40 | |
| *** jaosorior has joined #openstack-keystone | 11:58 | |
| *** raildo has joined #openstack-keystone | 12:06 | |
| *** jdennis has quit IRC | 13:11 | |
| knikolla | cmurphy: i'll have to request an extension for expiring group memberships after all. i'd like to get feedback on some implementation details during next week's meeting. | 14:25 |
| cmurphy | knikolla: okay | 14:30 |
| cmurphy | knikolla: 1 week? | 14:31 |
| knikolla | cmurphy: yup, sounds good! thanks | 14:31 |
| cmurphy | no problem | 14:32 |
| cmurphy | sent an email | 14:38 |
| *** jdennis has joined #openstack-keystone | 14:49 | |
| cmurphy | welp we hardcoded the bad trust behavior into tempest https://logs.opendev.org/28/676528/1/check/tempest-full/2839eec/testr_results.html.gz | 14:55 |
| *** gyee has joined #openstack-keystone | 14:57 | |
| gagehugo | oh boy | 15:10 |
| *** dave-mccowan has joined #openstack-keystone | 15:22 | |
| *** dave-mccowan has quit IRC | 15:30 | |
| kmalloc | cmurphy: resource options could use another week as well. i should have stuff up today, but i might need another couple days for say role options. | 15:33 |
| kmalloc | cmurphy: lets see how today goes, we can submit the email tomorrow if needed. | 15:33 |
| cmurphy | kmalloc: okay, standing by | 15:33 |
| kmalloc | cmurphy: also... trust stuff in tempest, i'm not surprised. | 15:34 |
| kmalloc | tempest often encodes/tests for behavior we have...not always behavior we want | 15:34 |
| cmurphy | the problem is tempest assumes that because it's running as the admin user that it should be able to do whatever it wants | 15:34 |
| cmurphy | but the code is meant to explicitly forbid that | 15:34 |
| cmurphy | though that is stupid too | 15:34 |
| *** ivve has quit IRC | 15:35 | |
| kmalloc | oh it is. but tempest is testing for known behavior | 15:35 |
| kmalloc | which... uhg. | 15:35 |
| kmalloc | esp. in this case | 15:35 |
| kmalloc | i would classify this as a security bug | 15:35 |
| kmalloc | tbh | 15:35 |
| cmurphy | yeah i agree | 15:35 |
| cmurphy | i guess i should stop being lazy and file an actual bug in lp | 15:36 |
| *** Ben78 has joined #openstack-keystone | 15:36 | |
| kmalloc | public security* | 15:37 |
| cmurphy | ya | 15:37 |
| *** markvoelker has quit IRC | 15:44 | |
| *** markvoelker has joined #openstack-keystone | 15:48 | |
| *** markvoelker has quit IRC | 16:02 | |
| cmurphy | https://bugs.launchpad.net/keystone/+bug/1840288 | 16:02 |
| openstack | Launchpad bug 1840288 in OpenStack Identity (keystone) "Trusts GET API leaks existence information to unauthorized users" [High,Triaged] | 16:02 |
| *** jdennis has quit IRC | 16:03 | |
| *** markvoelker has joined #openstack-keystone | 16:11 | |
| openstackgerrit | Rabi Mishra proposed openstack/keystone master: Add retry for DBDeadlock in credential delete https://review.opendev.org/676733 | 16:19 |
| *** jdennis has joined #openstack-keystone | 16:22 | |
| *** jdennis has quit IRC | 16:48 | |
| prometheanfire | ping re https://bugs.launchpad.net/keystone/+bug/1839393 | 16:55 |
| openstack | Launchpad bug 1839393 in OpenStack Identity (keystone) "oauthlib===3.1.0 fails tests (requirements update)" [Low,Triaged] | 16:55 |
| openstackgerrit | Colleen Murphy proposed openstack/keystone master: Don't reveal trust existence to unauthorized users https://review.opendev.org/676528 | 17:00 |
| *** jdennis has joined #openstack-keystone | 17:09 | |
| openstackgerrit | Colleen Murphy proposed openstack/keystone master: Add federated support for get user https://review.opendev.org/448730 | 17:16 |
| openstackgerrit | Colleen Murphy proposed openstack/keystone master: Add federated support for creating a user https://review.opendev.org/448755 | 17:16 |
| openstackgerrit | Colleen Murphy proposed openstack/keystone master: Add federated support for updating a user https://review.opendev.org/448765 | 17:16 |
| ildikov | cmurphy: morning, will you be available tomorrow morning for the edge hacking stuff? | 17:32 |
| cmurphy | ildikov: i can join the call if you ping me, i won't stay on the phone if i'm not needed | 17:34 |
| ildikov | Sure, that’s what I had in mind | 17:34 |
| ildikov | StarlingX is using K8s now and they have some Keystone feedback on the integration side which would be an interesting topic to discuss | 17:35 |
| cmurphy | sure, i would love to hear it | 17:36 |
| ildikov | Cool, will ping if Greg makes it to the call tomorrow! | 17:51 |
| openstackgerrit | Colleen Murphy proposed openstack/keystone master: Don't reveal trust existence to unauthorized users https://review.opendev.org/676528 | 18:07 |
| *** ivve has joined #openstack-keystone | 18:10 | |
| *** spsurya has quit IRC | 18:53 | |
| *** vesper11 has quit IRC | 19:30 | |
| openstackgerrit | Colleen Murphy proposed openstack/keystone master: Don't reveal trust existence to unauthorized users https://review.opendev.org/676528 | 20:41 |
| openstackgerrit | Colleen Murphy proposed openstack/keystone master: Add federated support for get user https://review.opendev.org/448730 | 20:52 |
| openstackgerrit | Colleen Murphy proposed openstack/keystone master: Add federated support for creating a user https://review.opendev.org/448755 | 20:52 |
| openstackgerrit | Colleen Murphy proposed openstack/keystone master: Add federated support for updating a user https://review.opendev.org/448765 | 20:52 |
| *** vesper11 has joined #openstack-keystone | 20:52 | |
| *** Ben78 has quit IRC | 20:54 | |
| *** markvoelker has quit IRC | 21:29 | |
| *** raildo has quit IRC | 21:30 | |
| *** trident has quit IRC | 22:03 | |
| *** markvoelker has joined #openstack-keystone | 22:05 | |
| *** markvoelker has quit IRC | 22:09 | |
| *** trident has joined #openstack-keystone | 22:10 | |
| *** markvoelker has joined #openstack-keystone | 22:11 | |
| *** markvoelker has quit IRC | 22:40 | |
| *** prometheanfire has quit IRC | 22:42 | |
| *** ivve has quit IRC | 22:46 | |
| *** tkajinam has joined #openstack-keystone | 23:00 | |
| *** markvoelker has joined #openstack-keystone | 23:45 | |
| *** markvoelker has quit IRC | 23:50 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!