| opendevreview | Dr. Jens Harbott proposed openstack/openstacksdk master: Skip disabling compute service https://review.opendev.org/c/openstack/openstacksdk/+/936016 | 11:56 |
|---|---|---|
| frickler | gtema: ^^ seems there is another slightly destructive test ... :-( | 11:58 |
| gtema | Damn | 12:13 |
| frickler | well I'll be glad if it really turns out to be this and not some weird, deep nova issue | 12:20 |
| stephenfin | M0weng[m]: Sorry, I forgot about the limits thing | 16:20 |
| M0weng[m] | No worries :D I'll let you know if I figure it out with the local keystone setup | 16:21 |
| stephenfin | wdym but "local" setup? | 16:21 |
| stephenfin | As in, running on your localhost rather than in DevStack? | 16:21 |
| stephenfin | If so, you can do that but I never have. Instead, I tend to make changes on the devstack VM and see what happens there | 16:22 |
| stephenfin | DevStack installs all projects into '/opt/stack' by default. You'll find e.g. the keystone repo there and can modify things as you see fit. When you've made a modification, you need to restart the relevant service with systemctl. | 16:23 |
| M0weng[m] | Ohh I think I misunderstood... where in devstack would I make those changes? I tried modifying the code in /opt/stack and it didn't make any difference | 16:23 |
| M0weng[m] | Ohhh I forgot to restart it haha | 16:24 |
| M0weng[m] | That would make sense | 16:24 |
| M0weng[m] | Ok cool thank you, I'll try that :D | 16:24 |
| stephenfin | Ah, that'd do it :) For Keystone you want 'systemctl restart devstack@keystone.service' | 16:24 |
| stephenfin | Also, everything uses mysql. You hopefully set a password in your local.conf. If so, you can run the 'mysql' CLI with e.g. 'mysql -ppassword' | 16:25 |
| stephenfin | M0weng[m]: When I do that, I see the following for the 'limit' table: https://paste.openstack.org/show/b0i8rWQDsNJhS2K7nd8X/ | 16:26 |
| stephenfin | So I'm not really sure what's going on without further investigation | 16:26 |
| opendevreview | Merged openstack/openstacksdk master: Skip disabling compute service https://review.opendev.org/c/openstack/openstacksdk/+/936016 | 16:26 |
| M0weng[m] | stephenfin: Yeah I'm getting the same result 😔 | 16:31 |
| stephenfin | Hmm, I think there might be a bug in keystone. When I apply the following patch https://paste.openstack.org/show/bIis4CjDiJZJv3McQIIm/ | 16:40 |
| stephenfin | I see the following in the logs https://paste.openstack.org/show/badFhL59v9AZ37S4iSkN/ | 16:41 |
| stephenfin | So it's attempting to filter on two project IDs at the same time. One of those is the one I passed via '--project-id' but idk where the other one is coming from | 16:43 |
| stephenfin | Adding more debug logging gives me the following SQL query which proves that https://paste.openstack.org/show/bWmfbv6KcjTfnp5VKaGN/ | 16:43 |
| opendevreview | Merged openstack/keystoneauth master: Allow passing None for username in v2.Password (redux) https://review.opendev.org/c/openstack/keystoneauth/+/935897 | 16:52 |
| frickler | stephenfin: is ^^ enough to warrant another release or do you have more fixes in the pipeline? | 17:08 |
| stephenfin | nope, let's cut a release | 17:12 |
| stephenfin | there are a few other patches up there but nothing is urgent | 17:13 |
| stephenfin | M0weng[m]: Looks like it's expected behavior https://github.com/openstack/keystone/blob/3e056ba8bd62dd16f941b05dd238a2a380642de7/keystone/tests/unit/test_limits.py#L1241-L1248 | 17:59 |
| stephenfin | M0weng[m]: So if you want to list against a different role, you need to use a system-scoped token. You can get one of those by using 'devstack-system-admin' instead of 'devstack-admin' | 18:02 |
| stephenfin | We should probably add a check that the token is system-scoped or the project_id field matches that in the token in OSC, given the absence of one in keystone | 18:03 |
| stephenfin | https://bugs.launchpad.net/keystone/+bug/2089403 | 18:03 |
| M0weng[m] | Ohhhh ok, that makes sense! | 18:03 |
| stephenfin | very poor API design IMO but now we know | 18:03 |
| M0weng[m] | Thank you for the help! :D | 18:03 |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!