Friday, 2024-09-27

*** mhen_ is now known as mhen01:12
opendevreviewOpenStack Proposal Bot proposed openstack/keystone master: Imported Translations from Zanata  https://review.opendev.org/c/openstack/keystone/+/93066303:01
opendevreviewAntonia Gaete proposed openstack/keystone master: Add JSON Schema to `endpoints` and validation decorators to endpoints resource.  https://review.opendev.org/c/openstack/keystone/+/92785614:39
cardoemnaser: https://github.com/Homebrew/homebrew-core/pull/192049 btw15:15
opendevreviewArtem Goncharov proposed openstack/keystone master: Add JsonSchema to `credentials`  https://review.opendev.org/c/openstack/keystone/+/92332416:02
opendevreviewMerged openstack/keystone master: Add JsonSchema validation framework  https://review.opendev.org/c/openstack/keystone/+/92306716:05
opendevreviewMerged openstack/keystone master: Prevent circlular imports in keystone.api  https://review.opendev.org/c/openstack/keystone/+/92635116:05
opendevreviewMerged openstack/keystoneauth master: typing: Make abstract method actually abstract  https://review.opendev.org/c/openstack/keystoneauth/+/92880716:17
opendevreviewMerged openstack/keystoneauth master: typing: Synchronise overridden method signatures  https://review.opendev.org/c/openstack/keystoneauth/+/92880816:17
opendevreviewMerged openstack/keystoneauth master: typing: Add variable for auth plugin opts  https://review.opendev.org/c/openstack/keystoneauth/+/92880916:21
opendevreviewMerged openstack/keystoneauth master: typing: Resolve remaining initial issues  https://review.opendev.org/c/openstack/keystoneauth/+/92881016:21
opendevreviewMerged openstack/keystoneauth master: Enable mypy  https://review.opendev.org/c/openstack/keystoneauth/+/92881116:34
opendevreviewMerged openstack/keystoneauth master: discover: Expand use of kwargs  https://review.opendev.org/c/openstack/keystoneauth/+/92881216:34
opendevreviewMerged openstack/keystoneauth master: discover: Rework normalization  https://review.opendev.org/c/openstack/keystoneauth/+/92881316:34
opendevreviewStephen Finucane proposed openstack/keystoneauth master: typing: Annotate keystoneauth1.discover  https://review.opendev.org/c/openstack/keystoneauth/+/92881418:05
opendevreviewStephen Finucane proposed openstack/keystoneauth master: typing: Annotate keystoneauth1.plugin  https://review.opendev.org/c/openstack/keystoneauth/+/93076218:05
opendevreviewStephen Finucane proposed openstack/keystoneauth master: typing: Annotate keystoneauth1.session  https://review.opendev.org/c/openstack/keystoneauth/+/93076318:05
opendevreviewStephen Finucane proposed openstack/keystoneauth master: trivial: Consistent f prefixes  https://review.opendev.org/c/openstack/keystoneauth/+/93076418:05
opendevreviewStephen Finucane proposed openstack/keystoneauth master: typing: Annotate keystoneauth1.adapter  https://review.opendev.org/c/openstack/keystoneauth/+/93076518:05
opendevreviewStephen Finucane proposed openstack/keystoneauth master: typing: Annotate keystoneauth1._fair_semaphore  https://review.opendev.org/c/openstack/keystoneauth/+/93076618:05
opendevreviewStephen Finucane proposed openstack/keystoneauth master: typing: Annotate various plugin modules  https://review.opendev.org/c/openstack/keystoneauth/+/93076718:05
opendevreviewStephen Finucane proposed openstack/keystoneauth master: typing: Annotate keystoneauth1._utils  https://review.opendev.org/c/openstack/keystoneauth/+/93076818:05
opendevreviewStephen Finucane proposed openstack/keystoneauth master: typing: Annotate keystoneauth1.exceptions  https://review.opendev.org/c/openstack/keystoneauth/+/93076918:05
opendevreviewStephen Finucane proposed openstack/keystoneauth master: typing: Annotate keystoneauth1.access.service_catalog  https://review.opendev.org/c/openstack/keystoneauth/+/93077018:05
opendevreviewStephen Finucane proposed openstack/keystoneauth master: typing: Annotate keystoneauth1.access.service_providers  https://review.opendev.org/c/openstack/keystoneauth/+/93077118:05
opendevreviewStephen Finucane proposed openstack/keystoneauth master: access: Add more helper attributes to AccessInfoV3  https://review.opendev.org/c/openstack/keystoneauth/+/93077218:05
opendevreviewStephen Finucane proposed openstack/keystoneauth master: access: Remove use of _missingproperty wrapper  https://review.opendev.org/c/openstack/keystoneauth/+/93077318:06
opendevreviewStephen Finucane proposed openstack/keystoneauth master: typing: Annotate keystoneauth1.access.access  https://review.opendev.org/c/openstack/keystoneauth/+/93077418:06
cardoegtema: so I wanna come back to some of those OIDC docs patches. I've abandoned the old ones and I'm starting new. I've got https://review.opendev.org/c/openstack/keystone/+/929315 as the first one. This is something that has bitten me 4 years ago when I first messed with federation. And it's bitten me again cause I forgot exactly what was up.18:36
cardoe I understand at the PTG there's a plan to change the federation logic. I heard something similar previously when I tried to make docs and example changes.18:36
cardoeI really care about having the docs today reflect what the code does today (and frankly for the past 4 years).18:36
JayFI wonder if keystone has a policy around doc backporting18:37
cardoeI'm happy to improve the docs when the behavior changes.18:37
JayFif you did this in Ironic we'd probably backport it on request to fix up the old docs too18:37
cardoeBut I think it's a detriment to welcoming new users and people to have the documentation be wrong.18:37
cardoeAlready 2 others in the channel have spoken up about how they've had to do stuff outside of the upstream tree to work around it.18:38
cardoeSo clearly there's a user demand for this to function. How many users tried with just the docs and failed and just gave up and said OpenStack sucks and walked away if there were at least 2 that went and made out of tree patches and modules?18:39
gtemacardoe, my "issue" with your doc change is that there many installations deployed and working without changes you describe. It is always an issue on how you set up in general and eventually deployment tool you use while the doc is in basics correct (it worked for me perfectly fine few times already)18:53
gtemaMy intention is to make it all working out of box and reduce amount of possible bombs without changing document with what worked for you but will break others18:55
cardoeSo this one change I've proposed literally does nothing except explain what the settings are. There's only TWO "breaking" changes about my wording.19:07
cardoe1) The part that says X is Y in the OpenID Connect spec. Well it literally uses a name for something that doesn't exist in the spec at all. So I fixed it to use the correct thing from the spec.19:07
JayFIt'd be nice to have some of this chatter about the PR contents in gerrit19:08
JayFso it's not limited to folks awake/watching IRC19:08
cardoe2) the docs (and the code require) that list fields in the token be transmitted in a string-ified header with the separator being a ; except the example in the docs tells mod_auth_oidc to use a comma. So it literally fails.19:09
cardoeGood point JayF. I'm happy to expand in my commit messages.19:13
d34dh0r53Thanks cardoe19:22
cardoed34dh0r53: I just wanna help. And just trying to figure out how to best do that.19:28
cardoeIt just bubbled up again to me today because someone was asking about OIDC internally.19:39
opendevreviewAntonia Gaete proposed openstack/keystone master: Add JSON Schema to `endpoints` and validation decorators to endpoints resource.  https://review.opendev.org/c/openstack/keystone/+/92785620:42
opendevreviewAntonia Gaete proposed openstack/keystone master: Add JSON Schema to `endpoint groups` and validation decorators to endpoint groups resource.  https://review.opendev.org/c/openstack/keystone/+/92968620:56

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!