Monday, 2013-10-28

*** markwash has quit IRC00:00
*** morazi has joined #openstack-dev00:01
*** freedomhui has quit IRC00:04
*** SumitNaiksatam has quit IRC00:04
*** SumitNaiksatam has joined #openstack-dev00:06
*** rongze has joined #openstack-dev00:09
*** Chicago has joined #openstack-dev00:10
*** senk has quit IRC00:12
*** tserong has joined #openstack-dev00:12
*** quade has joined #openstack-dev00:13
*** rongze has quit IRC00:13
*** colinmcnamara has joined #openstack-dev00:13
*** bknudson has quit IRC00:14
*** ericw has joined #openstack-dev00:15
*** che-arne has quit IRC00:16
*** ArcTanSusan has joined #openstack-dev00:17
*** xarses has quit IRC00:19
*** matsuhashi has joined #openstack-dev00:19
*** buzztroll has joined #openstack-dev00:21
*** kpavel has joined #openstack-dev00:22
*** buzztroll has quit IRC00:26
*** shakayumi has joined #openstack-dev00:26
*** kpavel has quit IRC00:30
*** matsuhashi has quit IRC00:31
*** matsuhashi has joined #openstack-dev00:32
*** matsuhashi has quit IRC00:37
*** michchap has quit IRC00:41
*** michchap has joined #openstack-dev00:42
*** ericw has quit IRC00:46
*** SergeyLukjanov has joined #openstack-dev00:47
*** SergeyLukjanov has quit IRC00:49
*** matsuhashi has joined #openstack-dev00:49
*** nosnos has joined #openstack-dev00:52
*** markwash has joined #openstack-dev00:58
*** quade has quit IRC01:00
*** freedomhui has joined #openstack-dev01:03
*** markwash has quit IRC01:05
*** rongze has joined #openstack-dev01:10
*** dims has quit IRC01:11
*** rongze has quit IRC01:14
*** freedomhui has quit IRC01:16
*** dkranz has quit IRC01:21
*** rongze has joined #openstack-dev01:22
*** buzztroll has joined #openstack-dev01:22
*** yamahata has joined #openstack-dev01:24
*** rongze has quit IRC01:26
*** sdake has quit IRC01:26
*** buzztroll has quit IRC01:27
*** diist has joined #openstack-dev01:27
*** alexpilotti has quit IRC01:28
*** sthaha has joined #openstack-dev01:30
*** Mandell has quit IRC01:39
*** buzztroll has joined #openstack-dev01:39
*** guohliu has joined #openstack-dev01:39
*** Mandell has joined #openstack-dev01:39
*** danwent has joined #openstack-dev01:43
*** shakayum_ has joined #openstack-dev01:43
*** Mandell has quit IRC01:44
*** shakayumi has quit IRC01:45
*** senk has joined #openstack-dev01:46
*** markwash has joined #openstack-dev01:46
*** bingbu has joined #openstack-dev01:47
*** senk has left #openstack-dev01:47
*** michchap has quit IRC01:53
*** ericw has joined #openstack-dev01:53
*** delta0 has joined #openstack-dev01:54
*** freedomhui has joined #openstack-dev01:55
*** michchap has joined #openstack-dev01:55
*** johnpur has joined #openstack-dev01:56
*** johnpur has quit IRC01:56
*** sdake has joined #openstack-dev02:00
*** dims has joined #openstack-dev02:01
*** freedomhui has quit IRC02:02
*** pmathews has joined #openstack-dev02:02
diistHey guys, I'm quite new here! I deployed DevStack, created a few instances and played with them for a bit. I'm now looking at the doc and browsing through the different projects, there are quite a few of them! Ultimately I want to contribute do the code but what do you think would be an "easy" way to get started, is one of the project noob-friendly? Thanks02:05
*** pablosan has quit IRC02:06
*** Mandell has joined #openstack-dev02:06
*** rongze has joined #openstack-dev02:07
*** faramir has joined #openstack-dev02:07
*** rongze has quit IRC02:08
*** rongze has joined #openstack-dev02:09
*** rongze has quit IRC02:09
*** rongze has joined #openstack-dev02:09
*** rcleere has joined #openstack-dev02:12
*** ljjjustin has joined #openstack-dev02:14
*** guohliu has quit IRC02:15
*** lnxnut has quit IRC02:20
*** giroro_ has quit IRC02:22
*** buzztroll has quit IRC02:23
*** Ruetobas has joined #openstack-dev02:24
*** buzztroll has joined #openstack-dev02:24
*** Ruetobas has quit IRC02:28
*** buzztroll has quit IRC02:28
*** Ruetobas has joined #openstack-dev02:28
*** freedomhui has joined #openstack-dev02:32
*** guohliu has joined #openstack-dev02:32
*** bingbu has quit IRC02:32
*** morazi has quit IRC02:34
*** michchap has quit IRC02:36
*** stevemar has joined #openstack-dev02:36
*** ljjjustin has quit IRC02:37
*** ljjjustin has joined #openstack-dev02:37
*** xchu has joined #openstack-dev02:39
*** ayoung has joined #openstack-dev02:40
*** vipul has quit IRC02:41
*** paragan has joined #openstack-dev02:42
*** vipul has joined #openstack-dev02:42
*** dims has quit IRC02:43
*** gimps has quit IRC02:43
*** diist has quit IRC02:46
*** gimps has joined #openstack-dev02:47
*** paragan has quit IRC02:49
*** ericw has quit IRC02:49
*** bingbu has joined #openstack-dev02:49
*** matsuhashi has quit IRC02:53
*** erkules_ has joined #openstack-dev02:53
*** matsuhashi has joined #openstack-dev02:53
*** erkules has quit IRC02:55
*** matsuhashi has quit IRC02:58
*** neelashah has joined #openstack-dev02:58
*** riskable has quit IRC02:58
*** quade has joined #openstack-dev03:01
*** guohliu has quit IRC03:05
*** guohliu has joined #openstack-dev03:05
*** paragan has joined #openstack-dev03:05
*** paragan has joined #openstack-dev03:05
*** buzztroll has joined #openstack-dev03:08
*** matsuhashi has joined #openstack-dev03:09
*** dolphm has joined #openstack-dev03:11
*** vipul is now known as vipul-away03:14
*** dolphm has quit IRC03:16
*** gyee has joined #openstack-dev03:16
*** gyee has quit IRC03:16
*** guohliu has quit IRC03:21
*** Levin_22 has joined #openstack-dev03:22
*** neelashah has quit IRC03:26
*** buzztroll has quit IRC03:28
*** buzztroll has joined #openstack-dev03:29
*** stevemar has quit IRC03:29
*** guohliu has joined #openstack-dev03:33
*** buzztroll has quit IRC03:33
*** jecarey has joined #openstack-dev03:34
*** quade has quit IRC03:34
*** nati_ueno has quit IRC03:40
*** lnxnut has joined #openstack-dev03:40
*** nati_ueno has joined #openstack-dev03:40
*** gimps has quit IRC03:41
*** gimps has joined #openstack-dev03:44
*** nati_ueno has quit IRC03:46
*** buzztroll has joined #openstack-dev03:49
*** Mandell has quit IRC03:56
*** Mandell has joined #openstack-dev03:57
*** harlowja has quit IRC03:58
*** bingbu has quit IRC04:00
*** fifieldt has joined #openstack-dev04:01
*** Mandell has quit IRC04:02
*** changbl has joined #openstack-dev04:02
*** sumanth has joined #openstack-dev04:03
*** stevemar has joined #openstack-dev04:04
*** stevemar has quit IRC04:04
*** llu has quit IRC04:04
*** stevemar has joined #openstack-dev04:05
*** lnxnut has quit IRC04:06
*** lnxnut has joined #openstack-dev04:06
*** sumanth has quit IRC04:08
*** primeministerp has quit IRC04:08
*** lnxnut has quit IRC04:11
*** bingbu has joined #openstack-dev04:13
*** dripton_ has quit IRC04:13
*** shakayum_ is now known as shakayumi04:13
*** jecarey has quit IRC04:13
*** delta0 has left #openstack-dev04:14
*** buzztroll has quit IRC04:14
*** buzztroll has joined #openstack-dev04:14
*** yamahata has quit IRC04:16
*** matsuhashi has quit IRC04:17
*** yamahata has joined #openstack-dev04:17
*** rcleere has quit IRC04:18
*** sdake has quit IRC04:18
*** buzztroll has quit IRC04:19
*** matsuhashi has joined #openstack-dev04:20
*** sumanth has joined #openstack-dev04:21
*** Mandell has joined #openstack-dev04:22
*** matsuhashi has quit IRC04:23
*** ArcTanSusan has quit IRC04:23
*** kumaranvram has joined #openstack-dev04:25
*** pmathews has quit IRC04:27
*** zaneb has quit IRC04:27
*** zaneb has joined #openstack-dev04:28
*** matsuhashi has joined #openstack-dev04:28
*** Levin_22 has quit IRC04:30
*** primeministerp has joined #openstack-dev04:33
*** zaneb has quit IRC04:34
*** rongze has quit IRC04:35
*** chandankumar has joined #openstack-dev04:38
*** diist has joined #openstack-dev04:40
*** yamahata has quit IRC04:40
*** zaneb has joined #openstack-dev04:41
*** ArcTanSusan has joined #openstack-dev04:44
*** reed has quit IRC04:49
*** haomaiwa_ has joined #openstack-dev04:52
*** ljjjustin has quit IRC04:53
*** diist has quit IRC04:53
*** haomaiwang has quit IRC04:53
*** vipul-away is now known as vipul04:54
*** ljjjustin has joined #openstack-dev04:55
*** neoXsys has joined #openstack-dev04:58
*** colinmcnamara has quit IRC05:00
*** llu has joined #openstack-dev05:01
*** vartom11 has joined #openstack-dev05:06
*** ArcTanSusan has quit IRC05:11
*** stevemar has quit IRC05:14
*** nati_ueno has joined #openstack-dev05:15
*** yamahata has joined #openstack-dev05:22
*** mihgen has joined #openstack-dev05:24
*** nshaikh has joined #openstack-dev05:24
*** buzztroll has joined #openstack-dev05:25
*** rohitk has joined #openstack-dev05:28
*** buzztroll has quit IRC05:30
*** erkules_ is now known as erkules05:34
*** rongze has joined #openstack-dev05:35
*** YorikSar has quit IRC05:35
*** jamielennox|away is now known as jamielennox05:36
*** buzztroll has joined #openstack-dev05:37
*** neoXsys has quit IRC05:37
*** nosnos_ has joined #openstack-dev05:37
*** nosnos has quit IRC05:37
*** rongze has quit IRC05:39
*** SergeyLukjanov has joined #openstack-dev05:44
*** kumaranvram has quit IRC05:46
*** kumaranvram has joined #openstack-dev05:48
*** vartom11 has quit IRC05:48
*** paragan has quit IRC05:56
*** matsuhashi has quit IRC05:56
*** matsuhashi has joined #openstack-dev05:57
*** denis_makogon has joined #openstack-dev06:01
*** paragan has joined #openstack-dev06:03
*** buzztroll has quit IRC06:04
*** buzztroll has joined #openstack-dev06:04
*** danwent has quit IRC06:06
*** buzztroll has quit IRC06:08
*** buzztroll has joined #openstack-dev06:09
*** rushiagr has joined #openstack-dev06:14
*** prekarat has joined #openstack-dev06:14
*** prekarat1 has joined #openstack-dev06:15
*** davidhadas_ has quit IRC06:16
*** Nikolay_St has joined #openstack-dev06:16
*** zyluo has joined #openstack-dev06:17
*** prekarat has quit IRC06:19
*** faramir has quit IRC06:25
*** kushal has joined #openstack-dev06:27
*** kushal has joined #openstack-dev06:27
*** rongze has joined #openstack-dev06:32
*** mihgen has quit IRC06:33
*** faramir has joined #openstack-dev06:35
*** yeylon_ has quit IRC06:36
*** YorikSar has joined #openstack-dev06:41
*** danwent has joined #openstack-dev06:43
*** mirrorbox has quit IRC06:43
*** mirrorbox has joined #openstack-dev06:43
*** paragan has quit IRC06:48
*** buzztroll has quit IRC06:53
*** buzztroll has joined #openstack-dev06:54
*** paragan has joined #openstack-dev06:56
*** vipul is now known as vipul-away06:57
*** zbitter has joined #openstack-dev06:57
*** freedomhui has quit IRC06:58
*** zaneb has quit IRC07:01
*** davidhadas has joined #openstack-dev07:01
*** matsuhashi has quit IRC07:02
*** matsuhashi has joined #openstack-dev07:02
*** amotoki has joined #openstack-dev07:03
*** nosnos_ has quit IRC07:05
*** doron_afk has joined #openstack-dev07:05
*** vartom11 has joined #openstack-dev07:05
*** nosnos has joined #openstack-dev07:05
*** matsuhashi has quit IRC07:07
*** matsuhashi has joined #openstack-dev07:07
*** belmoreira has joined #openstack-dev07:10
*** sridevi has joined #openstack-dev07:10
*** ljjjustin has quit IRC07:10
*** faramir has quit IRC07:12
*** avishay has joined #openstack-dev07:14
*** eglynn_ is now known as eglynn-bank-holi07:14
*** bashok has joined #openstack-dev07:15
*** mrunge has joined #openstack-dev07:15
*** ben_duyujie has joined #openstack-dev07:16
*** asalkeld is now known as asalkeld_afk07:20
*** ljjjustin has joined #openstack-dev07:21
*** mindpixel has joined #openstack-dev07:23
*** MaxV has joined #openstack-dev07:24
*** mihgen has joined #openstack-dev07:25
*** mindpixel has quit IRC07:25
*** mindpixel has joined #openstack-dev07:26
*** mrunge has quit IRC07:26
*** danwent has quit IRC07:27
*** MaxV has quit IRC07:28
*** ljjjustin has quit IRC07:28
*** mihgen has quit IRC07:29
*** mindpixel has quit IRC07:30
*** Mandell has quit IRC07:31
*** davidhadas_ has joined #openstack-dev07:32
*** kushal has quit IRC07:32
*** jamielennox is now known as jamielennox|away07:32
*** davidhadas_ has quit IRC07:32
*** zyluo has quit IRC07:32
*** buzztroll has quit IRC07:33
*** davidhadas has quit IRC07:33
*** davidhadas has joined #openstack-dev07:34
*** kpavel has joined #openstack-dev07:34
*** mihgen has joined #openstack-dev07:37
*** avishayb has joined #openstack-dev07:39
*** DinaBelova has joined #openstack-dev07:44
*** marekd|away is now known as marekd07:53
*** xingchao has joined #openstack-dev07:55
*** freedomhui has joined #openstack-dev07:57
*** freedomhu has joined #openstack-dev07:59
*** freedomhui has quit IRC07:59
*** zbitter has quit IRC08:01
*** giulivo has joined #openstack-dev08:01
*** flaper87|afk is now known as flaper8708:01
*** ben_duyujie has quit IRC08:02
*** davidhadas_ has joined #openstack-dev08:02
*** davidhadas has quit IRC08:02
*** rongze has quit IRC08:02
*** boden has joined #openstack-dev08:03
*** haomaiwa_ has quit IRC08:03
*** giulivo has quit IRC08:04
*** xingchao has quit IRC08:04
*** AnilV4 has joined #openstack-dev08:04
*** exed has joined #openstack-dev08:05
*** giulivo has joined #openstack-dev08:06
*** rushiagr has quit IRC08:06
*** rushiagr2 has joined #openstack-dev08:06
*** nati_ueno has quit IRC08:09
*** Chicago has quit IRC08:09
*** matsuhashi has quit IRC08:09
*** nati_ueno has joined #openstack-dev08:09
*** larsbutler has joined #openstack-dev08:09
*** matsuhashi has joined #openstack-dev08:10
*** Chicago has joined #openstack-dev08:10
*** matsuhas_ has joined #openstack-dev08:12
*** tkammer_ has joined #openstack-dev08:12
*** matsuhashi has quit IRC08:13
*** mindpixel has joined #openstack-dev08:13
*** nati_ueno has quit IRC08:13
*** mindpixel has joined #openstack-dev08:16
*** yeylon_ has joined #openstack-dev08:17
*** yamahata has quit IRC08:19
*** MaxV has joined #openstack-dev08:20
*** mindpixel has quit IRC08:21
*** marun has joined #openstack-dev08:22
mirrorboxis that something wrong with the cinder's check-grenade-devstack-vm job on zuul?08:22
mirrorboxI've noticed it failed even for unrelated changes08:22
*** che-arne has joined #openstack-dev08:24
*** kumaranvram has quit IRC08:25
*** boris-42 has quit IRC08:28
*** sushils has joined #openstack-dev08:29
*** kpavel has quit IRC08:29
mirrorboxhttps://jenkins01.openstack.org/job/check-grenade-devstack-vm/08:30
*** che-arne has quit IRC08:32
*** corXi_ has joined #openstack-dev08:33
*** haomaiwang has joined #openstack-dev08:34
*** kumaranvram has joined #openstack-dev08:36
*** neoXsys has joined #openstack-dev08:38
*** xqueralt has joined #openstack-dev08:39
*** kumaranvram has quit IRC08:41
*** BrianYuan has joined #openstack-dev08:41
*** kumaranvram has joined #openstack-dev08:42
*** alexpilotti has joined #openstack-dev08:43
*** exed has quit IRC08:46
*** marun has quit IRC08:47
*** denis_makogon has quit IRC08:49
*** safchain has joined #openstack-dev08:50
*** exed has joined #openstack-dev08:50
*** Shaan7 has quit IRC08:53
*** ilyashakhat has quit IRC08:53
*** rongze has joined #openstack-dev08:56
*** BrianYuan has quit IRC08:57
*** xingchao has joined #openstack-dev08:57
*** romcheg has joined #openstack-dev08:59
*** DinaBelova has quit IRC09:02
*** prekarat1 has quit IRC09:03
*** prekarat has joined #openstack-dev09:04
*** rushiagr3 has joined #openstack-dev09:05
*** rushiagr3 is now known as rushiagr09:05
*** zaneb has joined #openstack-dev09:05
*** rushiagr2 has quit IRC09:06
*** marun has joined #openstack-dev09:06
*** rushiagr has quit IRC09:07
*** faramir has joined #openstack-dev09:09
*** rushiagr has joined #openstack-dev09:09
*** yassine has joined #openstack-dev09:12
*** kushal has joined #openstack-dev09:13
*** ilyashakhat has joined #openstack-dev09:13
*** martyntaylor has joined #openstack-dev09:17
*** danpb has joined #openstack-dev09:18
*** kpavel has joined #openstack-dev09:19
*** ljjjustin has joined #openstack-dev09:19
*** fbo_away is now known as fbo09:23
*** faramir has quit IRC09:27
*** ljjjustin has quit IRC09:32
*** bingbu has quit IRC09:32
*** boris-42 has joined #openstack-dev09:36
*** sergmelikyan has joined #openstack-dev09:36
*** saschpe has quit IRC09:36
*** faramir has joined #openstack-dev09:40
*** saschpe has joined #openstack-dev09:40
*** che-arne has joined #openstack-dev09:40
*** exed has quit IRC09:41
*** belmoreira has quit IRC09:42
*** belmoreira has joined #openstack-dev09:43
*** xchu has quit IRC09:47
*** bvandenh has quit IRC09:49
*** prekarat has quit IRC09:50
*** SergeyLukjanov has quit IRC09:50
*** SergeyLukjanov has joined #openstack-dev09:51
*** rongze has quit IRC09:52
*** exed has joined #openstack-dev09:52
*** DinaBelova has joined #openstack-dev09:54
*** JordanP has joined #openstack-dev09:54
*** matsuhas_ has quit IRC09:58
*** matsuhashi has joined #openstack-dev09:59
*** matsuhashi has quit IRC10:03
*** irimi has joined #openstack-dev10:05
*** irimi has quit IRC10:06
*** rongze has joined #openstack-dev10:06
*** irimi has joined #openstack-dev10:07
*** prekarat has joined #openstack-dev10:10
*** pcm_ has joined #openstack-dev10:10
*** davidhadas_ has quit IRC10:12
*** pcm_ has quit IRC10:12
*** mrunge has joined #openstack-dev10:12
*** pcm_ has joined #openstack-dev10:12
*** pixelb has joined #openstack-dev10:13
*** mrunge has quit IRC10:18
*** mrunge has joined #openstack-dev10:20
*** mrunge has quit IRC10:20
*** mrunge has joined #openstack-dev10:20
*** mrunge_ has joined #openstack-dev10:21
*** mrunge has quit IRC10:21
*** faramir has joined #openstack-dev10:27
*** mrunge_ is now known as mrunge10:30
*** mrunge has quit IRC10:30
*** mrunge has joined #openstack-dev10:30
*** xingchao has quit IRC10:33
*** paragan has quit IRC10:35
*** rongze has quit IRC10:36
*** faramir has quit IRC10:37
*** amotoki has quit IRC10:37
*** avishayb has quit IRC10:39
*** mrunge has quit IRC10:46
*** mrunge has joined #openstack-dev10:46
*** davidhadas has joined #openstack-dev10:48
*** shardy has joined #openstack-dev10:50
*** belmoreira has quit IRC10:52
*** nosnos has quit IRC10:53
*** nosnos has joined #openstack-dev10:54
*** belmoreira has joined #openstack-dev10:56
*** nosnos has quit IRC10:58
*** RScottCoyle has joined #openstack-dev11:05
*** romcheg1 has joined #openstack-dev11:07
*** avishayb has joined #openstack-dev11:08
*** rkukura has quit IRC11:10
*** guohliu has quit IRC11:10
*** RScottCoyle has quit IRC11:11
*** romcheg has quit IRC11:12
*** mrunge has quit IRC11:13
*** flaper87 is now known as flaper87|afk11:15
*** DinaBelova has quit IRC11:20
ekarlso-fifieldt: ping mr :)11:24
*** drewlander has joined #openstack-dev11:24
*** mrunge has joined #openstack-dev11:24
*** viktors has joined #openstack-dev11:25
*** neeti has joined #openstack-dev11:26
*** exed has quit IRC11:27
*** davidhadas has quit IRC11:30
*** davidhadas has joined #openstack-dev11:31
*** FunnyLookinHat has joined #openstack-dev11:33
*** dims has joined #openstack-dev11:34
*** rohitk has quit IRC11:37
*** xingchao has joined #openstack-dev11:40
*** adalbas has joined #openstack-dev11:46
*** dstanek has joined #openstack-dev11:46
*** xingchao_ has joined #openstack-dev11:48
*** davidhadas has quit IRC11:49
*** neeti has quit IRC11:49
*** rohitk has joined #openstack-dev11:49
*** davidhadas has joined #openstack-dev11:50
*** dstanek has quit IRC11:51
*** xingchao has quit IRC11:52
*** dstanek has joined #openstack-dev11:52
*** luisg has quit IRC11:54
*** luisg has joined #openstack-dev11:54
*** dkranz has joined #openstack-dev11:57
*** sgordon has joined #openstack-dev11:59
*** sgordon has joined #openstack-dev11:59
*** avishay has quit IRC12:00
*** larsbutler has quit IRC12:00
*** doron_afk is now known as doron12:07
*** Shaan7 has joined #openstack-dev12:08
*** asalkeld_afk is now known as asalkeld_zzz12:11
*** sridevi has quit IRC12:13
*** prekarat has quit IRC12:13
*** slagle has joined #openstack-dev12:15
*** exed has joined #openstack-dev12:17
*** dprince has joined #openstack-dev12:18
*** brianr has joined #openstack-dev12:18
*** belmoreira has quit IRC12:18
*** vladikr has joined #openstack-dev12:21
*** alaski has joined #openstack-dev12:24
*** alaski has quit IRC12:25
*** doron is now known as doron_afk12:25
*** rongze has joined #openstack-dev12:25
*** alaski has joined #openstack-dev12:26
*** dolphm has joined #openstack-dev12:28
*** dolphm has quit IRC12:28
*** dolphm has joined #openstack-dev12:28
*** doron_afk is now known as doron12:30
*** sahid has joined #openstack-dev12:31
*** sahid has quit IRC12:32
*** mindpixel has joined #openstack-dev12:33
*** doron is now known as doron_afk12:34
*** thomasem has joined #openstack-dev12:36
*** larsbutler has joined #openstack-dev12:37
*** mindpixel has quit IRC12:38
*** shakayumi has quit IRC12:42
*** slagle has quit IRC12:44
*** bpokorny has joined #openstack-dev12:45
*** radez_g0n3 is now known as radez12:45
*** neelashah has joined #openstack-dev12:46
*** flaper87|afk is now known as flaper8712:47
*** xqueralt has quit IRC12:49
*** litong has joined #openstack-dev12:49
*** irimi has quit IRC12:50
*** mindpixel has joined #openstack-dev12:50
*** irimi has joined #openstack-dev12:51
*** drewlander has quit IRC12:52
*** kumaranvram has quit IRC12:53
*** matrohon has joined #openstack-dev12:54
*** yamahata has joined #openstack-dev12:55
*** topol has joined #openstack-dev12:55
*** erkules has quit IRC12:55
*** anteaya has joined #openstack-dev12:55
*** slagle has joined #openstack-dev12:55
*** lnxnut has joined #openstack-dev12:57
*** dbalog has joined #openstack-dev12:57
*** sahid has joined #openstack-dev12:57
*** pixelb has quit IRC12:58
*** avishay has joined #openstack-dev12:59
*** sahid has quit IRC13:00
*** sahid has joined #openstack-dev13:00
*** riskable has joined #openstack-dev13:00
*** zul has quit IRC13:02
*** xqueralt has joined #openstack-dev13:02
*** ericw has joined #openstack-dev13:03
*** achampio1 has quit IRC13:03
*** lnxnut has quit IRC13:04
*** dripton has joined #openstack-dev13:04
*** lnxnut has joined #openstack-dev13:04
*** zul has joined #openstack-dev13:05
*** lnxnut has quit IRC13:05
*** lnxnut has joined #openstack-dev13:06
*** glenng has joined #openstack-dev13:06
*** larsbutler has quit IRC13:06
*** ruhe has joined #openstack-dev13:06
*** mindpixel has quit IRC13:07
*** Alexei_987 has joined #openstack-dev13:08
*** glenng has quit IRC13:08
*** lnxnut has quit IRC13:10
*** larsbutler has joined #openstack-dev13:10
*** lnxnut has joined #openstack-dev13:10
*** ashwini has joined #openstack-dev13:10
*** chandankumar has quit IRC13:12
*** paragan has joined #openstack-dev13:13
*** morazi has joined #openstack-dev13:13
*** belmoreira has joined #openstack-dev13:14
*** lnxnut has quit IRC13:15
*** romcheg has joined #openstack-dev13:15
*** dvarga has joined #openstack-dev13:16
*** rgerganov has joined #openstack-dev13:17
*** annegentle has joined #openstack-dev13:18
*** kevinconway has joined #openstack-dev13:18
*** romcheg1 has quit IRC13:19
*** b3nt_pin has joined #openstack-dev13:20
*** b3nt_pin is now known as beagles13:20
*** guohliu has joined #openstack-dev13:20
*** bashok has quit IRC13:21
*** mriedem has joined #openstack-dev13:22
*** glenng has joined #openstack-dev13:22
*** SergeyLukjanov has joined #openstack-dev13:23
*** erkules has joined #openstack-dev13:23
*** larsbutler has quit IRC13:24
*** READ10 has joined #openstack-dev13:25
*** kbringard has joined #openstack-dev13:25
*** jgriffith has quit IRC13:26
*** xingchao_ has quit IRC13:26
*** jgriffith has joined #openstack-dev13:26
*** xingchao has joined #openstack-dev13:26
*** SergeyLukjanov has quit IRC13:28
*** SergeyLukjanov has joined #openstack-dev13:28
*** joesavak has joined #openstack-dev13:29
*** jayg|g0n3 is now known as jayg13:30
*** ashwini has left #openstack-dev13:31
*** xingchao has quit IRC13:31
*** xingchao has joined #openstack-dev13:31
*** max_lobur has quit IRC13:36
*** drewlander has joined #openstack-dev13:36
*** bogdando has quit IRC13:36
marekdHi all, I have a question concerning Keystone, V3  extensions and backend tests. What I need to do right now is to make an extension stored in a SQL database. One of the attributes stored in the SQL will be a FK pointing to the domain.id . What I did was extending file keystone/tests/test_sql_migrate_extensions.  There I have my own class inheriting from test_sql_upgrade.SqlMigrateBase. Unfortunately the test fails because it's called before the databas13:36
*** burt has joined #openstack-dev13:39
*** sthaha has quit IRC13:40
*** eharney has joined #openstack-dev13:40
*** gordc has joined #openstack-dev13:41
*** lbragstad has joined #openstack-dev13:41
*** rushiagr has quit IRC13:42
*** shakayumi has joined #openstack-dev13:43
*** exed has quit IRC13:43
*** RScottCoyle has joined #openstack-dev13:45
*** aeperezt has joined #openstack-dev13:45
*** jaypipes has joined #openstack-dev13:45
*** larsbutler has joined #openstack-dev13:45
*** topol has quit IRC13:47
*** rkukura has joined #openstack-dev13:47
*** SergeyLukjanov has quit IRC13:47
*** xingchao has quit IRC13:48
*** alunduil has quit IRC13:49
*** xingchao has joined #openstack-dev13:49
*** achampion has joined #openstack-dev13:49
*** vijendar has joined #openstack-dev13:53
*** nati_ueno has joined #openstack-dev13:54
*** SergeyLukjanov has joined #openstack-dev13:54
*** rushiagr has joined #openstack-dev13:54
*** hemanth_ has joined #openstack-dev13:55
*** xingchao has quit IRC13:56
*** xingchao has joined #openstack-dev13:56
*** exed has joined #openstack-dev13:57
*** DinaBelova has joined #openstack-dev13:57
tellesnobregahi, i created new tables for nova, but im getting a shadow_"table_name" doesnt exist13:59
*** beekneemech is now known as bnemec14:00
*** vartom11 has quit IRC14:00
*** shakayumi has quit IRC14:00
tellesnobregaall the tables should have a shadow table? what is the point of a shadow table? and how can i work around this?14:00
*** burt has quit IRC14:00
*** nati_ueno has quit IRC14:00
*** alop has joined #openstack-dev14:01
*** jecarey has joined #openstack-dev14:01
*** nati_ueno has joined #openstack-dev14:01
*** xingchao has quit IRC14:01
*** avishayb has quit IRC14:01
*** FunnyLookinHat has quit IRC14:02
*** boris-42 has quit IRC14:02
*** b3nt_pin has joined #openstack-dev14:02
*** spzala has joined #openstack-dev14:03
*** tmclaugh[work] has joined #openstack-dev14:04
*** noslzzp has joined #openstack-dev14:05
*** yamahata has quit IRC14:05
*** nati_ueno has quit IRC14:05
*** stevemar has joined #openstack-dev14:06
*** yamahata has joined #openstack-dev14:06
*** bknudson has joined #openstack-dev14:07
*** djoreilly has joined #openstack-dev14:07
notmynamettx: looks like there isn't a swift tag on the sched summit page?14:07
*** mindpixel has joined #openstack-dev14:10
*** ameade has joined #openstack-dev14:11
*** avishayb has joined #openstack-dev14:12
*** jecarey has quit IRC14:12
*** jecarey has joined #openstack-dev14:13
*** ruhe has quit IRC14:14
*** blues-man has joined #openstack-dev14:14
*** jecarey has quit IRC14:14
*** jecarey has joined #openstack-dev14:14
dolphmnotmyname: have you used pushed to sched recently?14:14
fifieldtekarlso-, hello14:14
notmynamedolphm: just did14:15
dolphmnotmyname: if that was your first time, wait a bit... the sync doesn't seem to be immediate14:16
notmynamekk14:16
*** tris has quit IRC14:16
*** tris has joined #openstack-dev14:16
notmyname...and I just realized that there are a bunch of swift sessions in the conference the same day as all the tech design sessions14:16
dolphmnotmyname: although, http://icehousedesignsummit.sched.org/overview/type/swift14:16
dolphmnotmyname: may not be too late to fix that! hit the scheduling thread asap14:17
*** jrwren has joined #openstack-dev14:17
*** JordanP has quit IRC14:18
*** max_lobur has joined #openstack-dev14:18
*** bogdando has joined #openstack-dev14:19
*** b3nt_pin has quit IRC14:20
*** beagles has quit IRC14:21
*** b3nt_pin has joined #openstack-dev14:21
*** jimfehlig has joined #openstack-dev14:21
*** b3nt_pin is now known as beagles14:21
ttxnotmyname: it's autocreated when you push sessions14:22
notmynamettx: ok :-)14:22
*** ruhe has joined #openstack-dev14:23
*** markmcclain has joined #openstack-dev14:24
*** nermina has joined #openstack-dev14:24
*** SergeyLukjanov is now known as _SergeyLukjanov14:24
notmynamettx: dolphm: I'll tackle scheduling a little later this morning. I need to talk to some others in the office first14:24
*** topol has joined #openstack-dev14:24
*** _SergeyLukjanov has quit IRC14:24
*** fifieldt has quit IRC14:24
*** senk has joined #openstack-dev14:25
*** johnthetubaguy1 has joined #openstack-dev14:25
*** alunduil has joined #openstack-dev14:26
*** rcleere has joined #openstack-dev14:26
*** johnthetubaguy1 is now known as johnthetubaguy14:27
*** datsun180b has joined #openstack-dev14:27
*** che-arne has quit IRC14:28
*** radez is now known as radez_g0n314:28
*** macjack has joined #openstack-dev14:30
*** senk has quit IRC14:30
*** KurtMartin has joined #openstack-dev14:30
*** esheffield has joined #openstack-dev14:31
*** JordanP has joined #openstack-dev14:32
*** sumanthns has joined #openstack-dev14:34
*** rongze has quit IRC14:34
*** rongze has joined #openstack-dev14:34
*** rongze has quit IRC14:35
*** rongze has joined #openstack-dev14:35
*** senk has joined #openstack-dev14:36
*** SergeyLukjanov has joined #openstack-dev14:36
*** prad_ has joined #openstack-dev14:36
*** davidhadas_ has joined #openstack-dev14:37
*** radez_g0n3 is now known as radez14:38
*** davidhadas has quit IRC14:39
*** che-arne has joined #openstack-dev14:40
*** davidhadas_ has quit IRC14:41
*** KurtMartin has quit IRC14:42
*** FunnyLookinHat has joined #openstack-dev14:43
*** beagles has quit IRC14:44
*** yamahata has quit IRC14:47
*** avishay has quit IRC14:47
*** vipul-away is now known as vipul14:48
*** mrodden has joined #openstack-dev14:53
*** gimps_ has joined #openstack-dev14:53
*** b3nt_pin has joined #openstack-dev14:53
*** jecarey_ has joined #openstack-dev14:55
*** tanisdl has joined #openstack-dev14:56
*** b3nt_pin is now known as beagles14:57
*** jecarey has quit IRC14:57
*** senk has quit IRC14:58
*** senk has joined #openstack-dev14:58
*** ameade has quit IRC14:58
*** ameade has joined #openstack-dev14:58
*** senk has quit IRC14:58
*** ameade has quit IRC14:59
*** senk has joined #openstack-dev14:59
*** YorikSar is now known as YorikSar_AFK14:59
*** ameade has joined #openstack-dev14:59
*** Ryan_Lane has quit IRC15:00
*** senk has left #openstack-dev15:01
*** doron_afk is now known as doron15:01
*** sumanth has quit IRC15:01
*** bvandenh has joined #openstack-dev15:02
*** nati_ueno has joined #openstack-dev15:03
*** bknudson has quit IRC15:03
*** danwent has joined #openstack-dev15:03
*** ameade has quit IRC15:05
*** ameade has joined #openstack-dev15:05
*** changbl has quit IRC15:06
*** doron is now known as doron_afk15:06
*** doron_afk is now known as doron15:07
*** galstrom_zzz is now known as galstrom15:07
jrwrento whomever recommented the mailing list: it changed the List-Id: in mail headers breaking the most common wait to filter mailing list messages.15:07
*** doron is now known as doron_afk15:09
*** doron_afk is now known as doron15:09
*** reed has joined #openstack-dev15:10
*** SergeyLukjanov has quit IRC15:10
*** Mandell has joined #openstack-dev15:11
*** exed has quit IRC15:12
*** doron is now known as doron_afk15:13
*** doron_afk is now known as doron15:13
*** bswartz has quit IRC15:15
*** JordanP has quit IRC15:18
*** yeylon_ has quit IRC15:18
*** bknudson has joined #openstack-dev15:19
*** jruzicka has joined #openstack-dev15:19
*** tanisdl has quit IRC15:19
*** pmathews has joined #openstack-dev15:20
larsbutlerhi all, keystone testing question:15:21
larsbutlerI'm trying to run coverage with `tox -e cover`15:21
*** carl_baldwin has joined #openstack-dev15:22
larsbutlerand I get this error: http://paste.openstack.org/show/50060/15:22
larsbutlerany idea what might be wrong?15:22
larsbutler(this is on the latest keystone master version)15:22
*** pmathews has quit IRC15:23
larsbutler(otherwise, tests are running fine, with the exception of py33)15:23
*** epim has joined #openstack-dev15:23
*** pmathews has joined #openstack-dev15:23
*** nkinder has joined #openstack-dev15:23
*** markmcclain has quit IRC15:23
*** changbl has joined #openstack-dev15:24
*** colinmcnamara has joined #openstack-dev15:24
*** kbrierly has joined #openstack-dev15:24
dolphmdstanek: ^ bug?15:24
larsbutlermorning dolphm :)15:25
dolphmlarsbutler: o/15:25
dolphmlarsbutler: i can repro that with "python setup.py testr --testr-args=--coverage"15:26
*** devoid has joined #openstack-dev15:26
larsbutlerdolphm: okay15:26
*** zaitcev has joined #openstack-dev15:27
larsbutlerdolphm: shall I file a bug in LP?15:28
*** sarob has quit IRC15:28
*** rohitk has quit IRC15:28
dolphmlarsbutler: sure15:28
dolphmlarsbutler: thanks!15:28
larsbutlerdolphm: will do15:28
*** sarob has joined #openstack-dev15:28
*** JordanP has joined #openstack-dev15:30
dolphmlarsbutler: try running "python setup.py testr --coverage" directly, in a venv if you need to15:30
*** herndon has joined #openstack-dev15:30
larsbutlerdolphm: okay15:30
*** mlavalle has joined #openstack-dev15:30
*** mlavalle has quit IRC15:30
larsbutlerdolphm: yeah, that seems to be okay15:31
*** SergeyLukjanov has joined #openstack-dev15:31
dolphme.g., .tox/cover/bin/python setup.py testr --coverage15:31
*** vijendar has quit IRC15:31
*** Mandell has quit IRC15:31
*** carl_baldwin has quit IRC15:31
*** RScottCoyle_ has joined #openstack-dev15:31
dolphmlarsbutler: i suspect that's what tox.ini should be running, if that produces coverage results as expected15:31
*** Mandell has joined #openstack-dev15:31
*** davidhadas has joined #openstack-dev15:31
larsbutlerdolphm: okay, it's running now… I'll let you know if the coverage is properly reported15:32
*** yamahata has joined #openstack-dev15:33
*** sarob has quit IRC15:33
*** bswartz has joined #openstack-dev15:33
*** kushal has quit IRC15:33
*** nshaikh has left #openstack-dev15:34
*** KurtMartin has joined #openstack-dev15:34
dstanekdolphm: you around?15:34
*** RScottCoyle has quit IRC15:34
*** doron is now known as doron_afk15:35
dstanekdolphm, larsbutler: i actually have a commit somewhere to fix the converage issue15:36
*** yassine has quit IRC15:36
*** safchain has quit IRC15:36
larsbutlerdstanek: nice! If you submit a patch, I'll be happy to review it15:36
*** Mandell has quit IRC15:36
larsbutlerdstanek, dolphm: bug report here: https://bugs.launchpad.net/keystone/+bug/124553915:37
*** rushiagr has quit IRC15:37
uvirtbotLaunchpad bug 1245539 in keystone "Error running test coverage: "no such option: --coverage"" [Undecided,New]15:37
dolphmdstanek: i don't see it in gerrit, if that's what you meant15:37
larsbutlerah :)15:37
dolphmlarsbutler: danke!15:37
dstanekdolphm: if it's not there i'll get it there - i may not have pushed since it changes the tox.ini and i have at least one review up there for that already15:38
*** devoid has left #openstack-dev15:38
larsbutlerdolphm: confirmed, the corrected command works and appears to produce meaningful coverage reports15:38
dstaneki've been trying to limit the number of things i have up there since it takes some effort to keep rebasing them and for people to keep rereviewing them15:38
*** bvandenh has quit IRC15:39
dstanekdolphm, larsbutler: i put the option inside of the quotes instead of where it belonged15:39
dolphmdstanek: ++15:39
dstanekfound it in a stash: http://paste.openstack.org/show/50063/15:40
*** ruhe has quit IRC15:40
dstaneki'll create a proper commit message and push15:40
*** carl_baldwin has joined #openstack-dev15:40
*** chuck_ has joined #openstack-dev15:41
*** bvandenh has joined #openstack-dev15:41
*** carl_baldwin has quit IRC15:43
*** bvandenh has quit IRC15:44
dstanekdolphm: i found this config file test_associate_project_endpoint_extension.conf and i think the test using it should fail15:45
larsbutlerdstanek: in master, there are two copies of the same command in tox.ini: https://github.com/openstack/keystone/blob/master/tox.ini#L15 and https://github.com/openstack/keystone/blob/master/tox.ini#L2515:45
*** krotscheck has joined #openstack-dev15:45
ttxkrotscheck: #openstack-infra15:45
krotscheckAwesome, thanks15:46
*** bvandenh has joined #openstack-dev15:46
dstaneklarsbutler: they are not the same15:47
* larsbutler looks again15:47
*** krotscheck has quit IRC15:47
larsbutlerdstanek: ah, you're right. my bad15:47
dstaneklarsbutler: https://review.openstack.org/54140 - see if that works for you15:48
* larsbutler looks15:48
reedg'day15:48
dstaneki'm pretty sure i have one more tox.ini patch laying around, but i don't think it deals with coverage15:49
larsbutlerdstanek: okay, running tests; seems okay so far15:49
larsbutlerdstanek: once it is finished, I'll give a +115:49
*** sdake has joined #openstack-dev15:50
*** alop has quit IRC15:50
*** pablosan has joined #openstack-dev15:51
dstanekdolphm: but it doesn't fail and that worries me15:51
*** bvandenh has quit IRC15:51
larsbutlerdstanek: you mean it doesn't fail the jenkins build?15:51
*** safchain has joined #openstack-dev15:51
*** yassine has joined #openstack-dev15:52
dstaneklarsbutler: the config refers to a class that doesn't exist and doesn't fail15:53
*** ruhe has joined #openstack-dev15:53
*** comay has joined #openstack-dev15:53
dstaneki was hacking on the tests and uncovered it when it started to fail on me15:53
jgriffithdevananda: ping15:54
devanandajgriffith: pong15:54
*** vijendar has joined #openstack-dev15:54
*** sarob has joined #openstack-dev15:55
jgriffithdevananda: the ironic sessions seem to overlap with cinder15:55
*** vijendar has quit IRC15:55
jgriffithdevananda: I'd *really* like to be at your ironic disk/volumes session15:55
devanandajgriffith: indeed15:55
jgriffithdevananda: not sure when your blocks are15:55
jgriffithdevananda: cinder is Thurs afternoon and Friday15:55
devanandajgriffith: i have only thurs afternoon15:55
jgriffithdevananda: crums15:56
*** vijendar has joined #openstack-dev15:56
*** Chicago has quit IRC15:56
*** boris-42 has joined #openstack-dev15:56
jgriffithdevananda: I also have a general session presentation during that slot15:56
*** matiu has quit IRC15:56
jgriffithdevananda: Guess I'll see if we can do some swapping of Cinder somewhere15:57
*** sridevi has joined #openstack-dev15:57
devanandajgriffith: ack.15:57
devanandathat reminds me15:57
*** fabio_ has joined #openstack-dev15:57
*** KeithSharp has joined #openstack-dev15:57
devanandarussellb: any chance you could move a few of your tuesday sessions around so the ones that are super interesting to us tripleo folk don't overlap quite so much?15:57
*** fabio_ is now known as fabiog15:57
*** isd has quit IRC15:58
fabiogayoung: regarding #link https://review.openstack.org/#/c/46771/21 I am not so sure what actions should I take to address your id concern, please explain15:59
devanandarussellb: particularly i'm looking at the scheduler design session, conductor tasks, and (maybe) project structure15:59
*** lsmola has joined #openstack-dev15:59
*** exed has joined #openstack-dev16:00
*** ruhe has quit IRC16:01
*** Ruetobas has quit IRC16:01
*** rongze has quit IRC16:01
*** rongze has joined #openstack-dev16:01
*** jecarey_ has quit IRC16:03
*** Ruetobas has joined #openstack-dev16:03
*** changlp has quit IRC16:03
*** chihhsin has quit IRC16:03
*** bknudson has quit IRC16:04
*** mrodden1 has joined #openstack-dev16:06
*** rongze has quit IRC16:06
*** bknudson has joined #openstack-dev16:06
*** mindpixel has quit IRC16:07
*** jecarey has joined #openstack-dev16:07
*** mrodden has quit IRC16:07
*** Ruetobas has quit IRC16:08
*** avishayb has quit IRC16:08
*** changlp has joined #openstack-dev16:08
*** RScottCoyle__ has joined #openstack-dev16:09
*** doron_afk is now known as doron16:09
*** gyee has joined #openstack-dev16:09
kpaveldansmith: hi Dan, regarding your review of https://review.openstack.org/#/c/46649/11, do you think it would be better to return it to the simple "magic string" solution?16:10
*** marun has quit IRC16:10
dansmithkpavel: better, yes. Not sure if that will have other complications, but definitely better than what you have16:11
dansmithkpavel: if you can go back to that method, then I can look at that and see if there's any other issues16:11
kpaveldansmith: thanks, i will16:11
dansmithcool16:12
*** doron is now known as doron_afk16:12
larsbutlerdstanek, dolphm: out of curiosity, is the openstack CI running (keystone or other projects) tests with coverage? I'm assuming the answer is no16:12
*** rongze has joined #openstack-dev16:12
*** nati_ueno has quit IRC16:12
*** KeithSharp has quit IRC16:13
*** RScottCoyle_ has quit IRC16:13
*** nati_ueno has joined #openstack-dev16:13
dolphmlarsbutler: https://jenkins.openstack.org/search/?q=coverage&max=20016:14
dolphmlarsbutler: last run for keystone was august 6th?16:15
*** changlp has quit IRC16:15
*** Ruetobas has joined #openstack-dev16:15
dolphmlarsbutler: certainly pre-testr, but i don't know why the job would have been stopped16:15
*** doron_afk has quit IRC16:15
larsbutlerdolphm: interesting16:15
*** matiu has joined #openstack-dev16:16
bknudsondolphm: "Coverage.py warning: No data was collected"16:16
*** alop has joined #openstack-dev16:17
*** nati_ueno has quit IRC16:17
*** jcoufal has joined #openstack-dev16:18
*** amerine has quit IRC16:18
*** chuck_ has quit IRC16:18
*** jruzicka has quit IRC16:18
*** nermina has quit IRC16:19
*** DinaBelova has quit IRC16:20
*** nermina has joined #openstack-dev16:20
*** esheffield_ has joined #openstack-dev16:20
*** nikhil has joined #openstack-dev16:20
*** venkatesh has joined #openstack-dev16:21
*** mlavalle has joined #openstack-dev16:22
larsbutlerdolphm: I can file another bug to investigate why the coverage job stopped. Good idea?16:23
*** sarob has quit IRC16:23
dolphmlarsbutler: always :)16:23
ttxdhellmann, jgriffith: around ?16:23
larsbutlerfunny, it seems like this is the case with all of the jobs… they all stopped on August 6th16:24
*** sarob has joined #openstack-dev16:24
larsbutlerat least, that's the case with many, including keystone and nova16:24
*** Artpicre has joined #openstack-dev16:25
*** kenperkins has joined #openstack-dev16:25
*** ben_duyujie has joined #openstack-dev16:26
*** paragan has quit IRC16:26
dstaneklarsbutler: maybe the people in -infra know what happened16:26
*** jruzicka has joined #openstack-dev16:27
larsbutlerdstanek: good idea16:27
*** mrunge has quit IRC16:28
*** thingee_zzz is now known as thingee16:28
*** venkatesh has quit IRC16:28
*** esheffield_ has quit IRC16:28
*** nikhil has quit IRC16:28
*** ygbo has joined #openstack-dev16:29
*** hemnafk is now known as hemna16:29
*** e0ne has joined #openstack-dev16:31
*** alop has quit IRC16:31
*** chandankumar has joined #openstack-dev16:32
*** corXi_ has quit IRC16:33
*** markmcclain has joined #openstack-dev16:34
*** moted has joined #openstack-dev16:34
*** burt has joined #openstack-dev16:34
*** jpeeler has quit IRC16:35
*** jpeeler has joined #openstack-dev16:35
*** blentz has quit IRC16:36
*** blentz has joined #openstack-dev16:36
*** guohliu has quit IRC16:36
*** epim has quit IRC16:36
larsbutlerdstanek: so apparently the coverage jobs are running, for example, on https://jenkins01.openstack.org/job/keystone-coverage/127/console16:36
*** singhs has joined #openstack-dev16:36
*** thedodd has quit IRC16:37
*** buzztroll has joined #openstack-dev16:38
*** sarob has quit IRC16:38
*** adalbas has quit IRC16:39
*** sarob has joined #openstack-dev16:40
*** chandankumar has quit IRC16:40
*** nagyz has joined #openstack-dev16:43
nagyzhey16:43
*** buzztroll has quit IRC16:43
nagyzin the identity drivers, should LOG.warning()/log.DEBUG() work at all? :)16:43
*** buzztroll has joined #openstack-dev16:43
*** rongze has quit IRC16:44
*** narmitag has joined #openstack-dev16:44
*** narmitag has left #openstack-dev16:45
*** narmitag has joined #openstack-dev16:45
*** belmoreira has quit IRC16:46
*** narmitag has quit IRC16:47
*** macjack has quit IRC16:47
*** sarob has quit IRC16:47
*** guohliu has joined #openstack-dev16:48
dstaneknagyz: what do you mean?16:48
*** angdraug has joined #openstack-dev16:49
nagyzwell, even when setting debug and verbose to True in keystone's config, when I add a log.WARNING("blahblah") to anywhere in the code I don't see it in the log16:49
nagyzand neither I see any log output from either the sql identity backend or the ldap identity backend at all16:49
dstaneknagyz: what file are you trying to edit? also i think warning should be lowercased16:50
nagyztrying to edit /keystone/identity/backends/ldap.py16:50
*** lnxnut has joined #openstack-dev16:51
dolphmnagyz: do you have a logging.conf ? that would be overriding debug / verbose in keystone.conf16:51
*** vipul has quit IRC16:53
dstaneknagyz: LOG is definitely defined there so i would expect LOG.warning() to show up unless like dolphm said you override the logging configuration16:53
*** armax has joined #openstack-dev16:53
*** zhikunliu has joined #openstack-dev16:53
nagyzI'm using the default supplied with ubuntu's cloud repo - but tried to change the log levels to DEBUG everywhere there instead of the defaults16:53
*** vipul has joined #openstack-dev16:54
nagyzI added a LOG.debug("stuff") right to the first line in authenticate()16:54
*** romcheg has quit IRC16:54
nagyztrying to figure out actually what's wrong with my ldap setup, but I cannot see any debug output from the ldap identity code - that's why I added a few of me own debug lines there to no avail16:54
dstaneknagyz: are you sure it's using that backend?16:55
*** lnxnut has quit IRC16:55
*** chandankumar has joined #openstack-dev16:56
morganfainbergdolphm, i've been trying to chase down the oddities with https://review.openstack.org/#/c/53050/16:56
nagyzyes, triple-checked, and keystone user-list works16:56
morganfainbergdolphm, i think we have some bad/incorrect tests going on here.16:56
*** lnxnut has joined #openstack-dev16:56
*** sahid has quit IRC16:56
dstanekmorganfainberg: i've been working on a change to the v3 tests that fixes some of the isses16:57
dolphmmorganfainberg: i'd rather see tests organized into unit / functional / integration first :(16:57
dstanekmorganfainberg: it's actually a mess16:57
morganfainbergdstanek, yes it is16:57
dstanekdolphm: ++16:57
*** alunduil has quit IRC16:57
*** markmcclain has quit IRC16:57
morganfainbergdstanek, i think we have some "it works by accident" stuff going on16:57
*** harlowja has joined #openstack-dev16:57
dstanekmorganfainberg: yes, actually there is a config file with an invalid class specified; so i would expect the test to fail16:58
morganfainbergdolphm, i was going to say i wanted to get back to KVS refactor and circle back to that one either in HK or after since it's less time-drivin16:58
*** nermina has joined #openstack-dev16:58
dstanekmorganfainberg: but it doesn't and i suspect it's because the load_backend method is called over and over again16:58
morganfainbergdstanek, it also the test_associate_project doesn't actually load that class, since it was wedged into setup_database16:58
morganfainbergdstanek, instead of how oauth is setup16:59
dstanekmorganfainberg: i don't what to push to gerrit yet, but i can push to github for you to take a peek if you are interested16:59
russellbdevananda: hmm, let me take a look and see what i can do16:59
morganfainbergdstanek, no worries, no rush.  i just wanted to raise the flag that we have a mess.16:59
jgriffithttx: dhellmann ping016:59
*** tanisdl has joined #openstack-dev16:59
dolphmdstanek: git-review --wip <-- doesn't exist but it should17:00
morganfainbergdolphm, ++++++++++++++++++17:00
morganfainbergdstanek, dolphm, i think some of the cleanup is going to need moving the important teardown stuff into the addCleanup mechanism.17:01
dstanekmorganfainberg: https://github.com/dstanek/keystone/tree/fix-all-the-tests17:01
*** changlp has joined #openstack-dev17:01
dolphmhaha17:01
*** terriyu has quit IRC17:01
dstanekmorganfainberg: still working on making that last commit actually work for everything17:01
dstaneki think there are just a handful of failing tests17:02
dolphmreminds me of termie's trust-no-one branch17:02
*** chihhsin has joined #openstack-dev17:02
*** jlabocki has joined #openstack-dev17:02
*** aspiers has quit IRC17:03
*** twoputt has joined #openstack-dev17:03
*** 16WABCWLK has joined #openstack-dev17:03
*** ramishra has joined #openstack-dev17:04
*** neelashah has quit IRC17:04
*** ramishra has quit IRC17:04
nagyzdstanek, is there any way to disable the logging filter? or any guide that talks about logging.conf17:05
morganfainbergdstanek, ideally (if possible) move the override config for the endpoint_filtering test to work like the oauth configs.  having the override in setup_database wont do anything useful nor test the catalog_sql backend17:05
nagyzI do see some DEBUG entries in the log tho, from dogpile and routers.middleware17:05
dstanekdolphm: does that mean you'd want me to rename my system directory? https://review.openstack.org/#/c/53208/17:05
*** markwash has quit IRC17:05
morganfainbergdstanek, provided by endpoint filtering that is.17:06
*** Ryan_Lane has joined #openstack-dev17:07
dstanekmorganfainberg: not sure what you mean. with my changes that config is not loaded and the tests fail because the class doesn't exist17:08
*** guohliu has quit IRC17:08
morganfainbergdstanek, ah, ok.17:08
*** Ryan_Lane has quit IRC17:08
morganfainbergdstanek, it's a bad implementation to wedge into setup_database though.   the override should be defined in setUp()17:08
morganfainbergerm17:08
morganfainbergsorry17:08
morganfainbergin setup_config17:08
morganfainberger crap17:08
morganfainbergsorry17:08
morganfainberg.config_files()17:08
ayoungfabiog, well, first of all, make the intention clear.  If the idea of Shared secret is to be a better mechanism for a user to have multiple passwords, and rotate through them, it seems to fall down with the ID field17:09
*** carl_baldwin has joined #openstack-dev17:09
morganfainbergdstanek, i swear i know the code i am talking about :P17:09
*** sridevi has quit IRC17:09
dstanekmorganfainberg: i agree; that top commit is really to stop loading data multiple times for all of the v3 tests17:09
dstanekmorganfainberg: there will be more commits to clean other things17:09
dstaneki think that is commit #4 on the branch17:10
ayoungfabiog, for example, a user can't go "userid = "XXXX"  "PW ID = "XXXX"  "Password = "XXXXX"  in a request, and certainly can'17:10
morganfainbergdstanek, ahh17:10
ayoungt with basic-auth17:10
fabiogayoung: I added this description in the latest patch:17:10
*** terriyu has joined #openstack-dev17:11
fabiogThe shared-secret authentication method is intended to be used for service to service authentication. It supports multiple credentials enabling secret rotations without service interruption.17:11
morganfainbergdstanek, cool17:11
dstaneknagyz: there is an option, i believe log-config, that allows you to specify a file to override the logging config; if you are not setting it I don't think you are using it17:11
morganfainbergdstanek, and i was wrong oauth doesn't do it, PKI token provider does: https://github.com/openstack/keystone/blob/master/keystone/tests/test_v3_auth.py#L9817:11
*** markmcclain has joined #openstack-dev17:12
*** mihgen has quit IRC17:12
*** carl_baldwin has quit IRC17:12
*** yassine has quit IRC17:12
nagyzdstanek, no, that's not set.17:12
*** marios_ has quit IRC17:13
morganfainbergdolphm, so with that said, since dstanek is killing it with tests (and is awesome for doing so), I'm going to get back to KVS and domain cleanup since i want to hit that stuff as early as possible.17:13
*** carl_baldwin has joined #openstack-dev17:13
*** marios has joined #openstack-dev17:13
nagyzdstanek, so with debug=True, verbose=True, logging not set this is ALL the debug output I get for request (which tries to authenticate): http://pastebin.com/LwGWf61H17:13
fabiogayoung: so you want also to add the user_id to the request with the credential_id, or you want to change the password authentication method?17:13
nagyzI belive I should get a lot more output...17:13
*** sergmelikyan has quit IRC17:14
*** marios has quit IRC17:14
*** marios has joined #openstack-dev17:14
*** esheffield_ has joined #openstack-dev17:15
*** nikhil|afk has joined #openstack-dev17:15
*** Ryan_Lane has joined #openstack-dev17:15
*** venkatesh has joined #openstack-dev17:16
*** DinaBelova has joined #openstack-dev17:16
*** amerine has joined #openstack-dev17:16
*** vipul is now known as vipul-away17:16
*** SumitNaiksatam has quit IRC17:17
*** ruhe has joined #openstack-dev17:17
*** ruhe has quit IRC17:17
*** danpb has quit IRC17:17
ayoungfabiog, I don't really want tyo do any of this.  I see the value of multple passwords, but not completely sold on it.  I need to  understand how the mechanism is going to work.  I don't want a parallel password scheme from the current one we have, so if we are going to use this share-dsecret approach, it has to work cleanly with the current auth17:17
*** alunduil has joined #openstack-dev17:17
ayoungIdeally, that means it would have the same semantics as Basic-Auth17:17
*** jruzicka has quit IRC17:18
*** mlavalle has quit IRC17:18
ayoungfabiog, having a user-definedn identifier on the password seems strange, probably a case of overapplying the rules for unique identifiers in openstack17:19
*** isd has joined #openstack-dev17:19
ayoungfabiog, why should service-to-service be any different than user-to-service?17:20
*** buzztroll has quit IRC17:20
*** buzztroll has joined #openstack-dev17:20
*** neelashah has joined #openstack-dev17:20
*** exed has quit IRC17:21
fabiogayoung: is not different, it is just requiring a higher level of automation, not having a person involved17:21
fabiogayoung: the shared secret is an extension17:21
fabiogand if we think we can collapse it into the current password later on, I am sure we can think about it17:22
ayoungfabiog, there are much better mechanisms than symetric shared secrets for that.  Do we really need this>17:22
*** kpavel has quit IRC17:22
*** zaneb has quit IRC17:22
fabiogayoung: well, this is a mechanism that several vendors already have and I think it is valuable17:23
*** blues-man has left #openstack-dev17:23
*** blues-man has quit IRC17:23
*** flaper87 is now known as flaper87|afk17:23
*** krotscheck has joined #openstack-dev17:24
ayoungfabiog, I think it is probably a mistake17:24
*** spzala has quit IRC17:24
ayoungfabiog, we already have too many OS specific security mechanisms17:24
ayoungThis one feels really wrong.  I can see it, though, if it is a fix for the current  password mechanism17:25
ayoungnot as an additional mechanism17:25
*** vipul-away is now known as vipul17:25
ayoungfabiog, why should a user be able to have more than one password active at a time?17:25
*** marekd is now known as marekd|away17:26
fabiogayoung: because in this way can change it without disruption. I can have services sending the updated password and other using the old one17:26
ayoungfabiog, so never more than two, right?17:27
ayoungold and new17:27
fabiogayoung: it would be unlikely, unless you use different credentials for different regions, which could be a use case17:27
fabiog(not sure ..)17:27
*** markmcclain has quit IRC17:27
*** yassine has joined #openstack-dev17:27
*** carl_baldwin has quit IRC17:28
ayoungfabiog, I assume you want a workflow like this:  send new password to keystone,  send new password to server, ensure service is using new password, delete old17:28
morganfainbergfabiog, isn't this really just an alternate to the EC2 compatible key-pair (ayoung, why is it named such?... it's not a keypair...)17:28
fabiogmorganfainberg: yes it is17:28
morganfainbergfabiog, it feels ... like almost completely duplicated effort.17:28
morganfainbergfabiog, is there a reason the keypair couldn't be used instead?17:29
*** galstrom is now known as galstrom_zzz17:30
fabiogmorganfainberg, originally the proposal was called access-key and secret-key which is a key pair concept17:30
*** ayoung has quit IRC17:30
*** yassine has quit IRC17:30
fabiogbut since it really uses the credentials, it was re-named shared-secret17:30
*** romcheg has joined #openstack-dev17:31
*** chandankumar has quit IRC17:31
*** ayoung has joined #openstack-dev17:31
ayoungsorry, dropped there, did I miss anything?17:31
*** markmcclain has joined #openstack-dev17:32
fabiogayoung: just commenting on morganfainberg, that this proposal was based on a key-pair concept17:32
fabiogbut it was later requested to be changed as a credential shared-secret17:33
*** changlp has quit IRC17:33
*** chihhsin_ has joined #openstack-dev17:33
*** chihhsin has quit IRC17:33
*** amerine has quit IRC17:35
*** Ryan_Lane has quit IRC17:35
*** changlp has joined #openstack-dev17:35
*** zhikunliu has quit IRC17:36
ayoungfabiog, I'd be much happier with it if it were a Key pair17:37
*** djoreilly has quit IRC17:37
ayoungfabiog, the idea of multiple passwords is OK, too17:38
dolphmayoung: nothing about it looks like "key-pair" to me-- it's just password rotation17:38
ayoungbut I just would want it to tie in with the existing auth mechanisms, not a new onw17:38
fabiogayoung: but what is the difference? the credential_id and secret are arbitrary strings17:38
stevemarayoung: ping17:38
ayoungdolphm, in its currrent incarnation, I agree.  But the same rules of rotation apply for keypairs and shared-secret.   I can see the deisrre for a mechanism to do multiple for rotations purposes for both17:39
dolphmayoung: ++ there's no reason why a Password auth plugin couldn't back to the /v3/credentials persistance17:39
ayoungdolphm, that would be a good thing, I think17:39
*** fbo is now known as fbo_away17:39
ayoungdolphm, then again,  I'd say it should get out of the request and be basic-auth, too.17:40
ayoungrequest-body17:40
*** SumitNaiksatam has joined #openstack-dev17:41
ayoungdolphm, and...going even further, I would say we want to wean people off of shared secret passwords altogether17:41
dolphmayoung: agree17:41
*** reed has quit IRC17:41
gyeeayoung, dolphm, shared secret and passwords are a bit different17:42
*** burt has quit IRC17:42
gyeewe only store the salted hash of the password in the backend17:42
*** galstrom_zzz is now known as galstrom17:43
*** MaxV has quit IRC17:43
dolphmgyee: aren't you using ldap anyway?17:43
*** tkammer_ has quit IRC17:43
gyeealso, you can shared the same password among services and expected to do rolling upgrade17:43
gyeeyou can't17:43
gyeedolphm, we can integrate with LDAP17:43
stevemarayoung: give me a pong when you're free :O17:43
*** MaxV has joined #openstack-dev17:44
gyeebut it doesn't have to be LDAP17:44
morganfainbergayoung, ++ on getitng people off shared secret17:44
devanandadhellmann: ping17:44
*** markwash has joined #openstack-dev17:44
*** rongze has joined #openstack-dev17:44
dolphmgyee: i'm not sure who's going to appreciate an password-rotation implementation that doesn't hash passwords17:44
gyeedolphm, we don't dictate security, we simply facilitate it :)17:45
*** ygbo has quit IRC17:45
ayounggyee, passwords are shared secrets.  They are currently the only implementation we have of them.  Unless you count the KDS work.  Please don't tell me that you think there should be even another one beyond that.17:45
dolphmgyee: in this case, you're discouraging it17:45
ayoungAnd...if you really want shared secrets, you should look at the KDS implementation17:45
*** JordanP has quit IRC17:45
gyeeayoung, I don't need something hot and heavy, just a simple mechanism17:46
gyeeif we want to allow multiple active password mechanism, that's fine with me17:46
ayounggyee, I knew you were going to say that.  Time to schedule your public flogging17:46
*** msmedved`afk is now known as msmedved17:47
* msmedved returns (Auto-away after 30 mins idle [2d 0h 46m 47s]) (total away time: 2d 0h 46m 47s)17:47
gyeeayoung, this ain't Singapore17:47
*** irimi has quit IRC17:47
dolphmmsmedved: consider turning that off?17:47
*** jvrbanac has joined #openstack-dev17:48
*** MaxV has quit IRC17:48
gyeepassword reset will be fun though as you require both old and new password17:48
gyeewhich one to reset? :)17:48
*** reed has joined #openstack-dev17:48
*** aspiers has joined #openstack-dev17:48
stevemarayoung: \o/17:49
dolphmgyee: i wouldn't call that a "reset"17:49
morganfainbergdolphm, ++17:49
fabiogdolphm, ayoung: having multiple passwords active at the same time is not counter intuitive?17:49
morganfainbergthat isn't really a reset17:49
gyeedolphm, how do we handle rolling upgrade?17:49
nagyzso could it be that dogpile eats up all the identity driver log messages?17:49
nagyzI've been chasing this for hours now and have no idea what I'm doing wrong17:49
msmedveddolphm, ok, sorry about that17:49
dolphmfabiog: that's exactly what you're asking for, afaict17:49
dolphmmsmedved: i just don't think it benefits anyone in the channel17:49
*** exed has joined #openstack-dev17:50
morganfainbergfabiog, gyee, wouldn't this almost be better as trusts?17:50
gyeeI need to have two password/shared-secret active, do the rolling upgrade, then revoke the old one17:50
*** dolphm is now known as dolphm_afk17:50
gyeeif you can solve this with the current password framework, I am good with that17:51
morganfainbergauthorize exactly what you want to be allowed, for a given user/etc.  if you need to roll the upgrade, make a new trust, roll to that...17:51
*** sarob has joined #openstack-dev17:51
*** mlavalle has joined #openstack-dev17:51
dhellmannjgriffith: pong17:51
dhellmanndevananda: pong17:51
gyeemorganfainberg, trust deals with delegation17:51
morganfainberggyee, and you're looking for stict authn17:52
morganfainberg?17:52
morganfainbergstrictly*17:52
gyeemorganfainberg, correct, authn17:52
*** msmedved has quit IRC17:52
*** msmedved has joined #openstack-dev17:52
*** rongze has quit IRC17:53
devanandadhellmann: for the thursday sched change, what works better?17:53
ayounggyee, of course not.  If it were Singapore, it would be caning17:53
gyeeheh17:53
gyeeI can't tell the difference17:53
gyeeequally painful17:54
dhellmanndevananda: I could make the early afternoon slots work, but not the late afternoon17:54
devanandadhellmann: i could move cinder-for-ironic to the 2:40 slot. not sure if that's better for jgriffith though?17:55
ayoungHong Kong was a British Colony.  Cat-o-9-tails was the preferred means of discipline17:55
*** freedomhu has quit IRC17:56
morganfainberggyee, so i'm just trying to see if we can make something a bit more generic... so we don't need this more nad more mechanisms to solve the same general problem17:56
ayoungfabiog, I am OK with the concept of rotations.  We see the same thing with X509 renewals17:56
*** Kupo24z has joined #openstack-dev17:56
morganfainbergayoung, ++ rotations isn't a bad idea.17:56
dhellmanndevananda: Do you and jgriffith want to work that out and let me know?17:57
ayoungfabiog, but it needs to be secure, and it needs to tie in with the existing mechanisms in a clean way.  I think the API you have is pretty close, but we need to close the loops17:57
fabiogayoung: so what changes are required to the shared-secret?17:57
ayoungSo, first, it needs to be a tie in with the existing password mechanisms17:57
nagyzdstanek, any ideas?17:57
ayoungsecond, if there is going to be an ID, it needs to be scoped to the user17:57
ayoungand I am not certain that we need the id17:58
ayoungit cannot be used in any communications, or we have just added a new mechanism17:58
*** e0ne has quit IRC17:58
fabiogayoung: you mean creadential_id?17:58
gyeeayoung, id is already scoped to the user17:58
gyeecredential have user_id in it17:58
*** e0ne has joined #openstack-dev17:58
ayounggyee, the create api had a user supplied ID in it.17:58
gyeeayoung, correct, user_id is mandatory in credential_ref17:59
*** jvrbanac has quit IRC17:59
ayounggyee, I can see an argument for the id being there so that a user can come by later and say "disable pw  #4"17:59
gyeesure, you can disable password with ID 417:59
*** dolphm_a_ has joined #openstack-dev18:00
devanandadhellmann: let's see what jgriffith says. i can be flexible with rearrangign the ironic sessions within my slots, except for the 5:20 wrap-up.18:00
gyeedolphm_a_, what's up with the _a_? :)18:00
morganfainberggyee, afk? maybe18:00
*** mihgen has joined #openstack-dev18:00
gyeeah18:00
*** alunduil has quit IRC18:01
*** singhs has quit IRC18:01
dhellmanndevananda: yeah, I have already shuffled some so I'm running out of room to do more. Those afternoon slots do work, though.18:01
morganfainbergayoung, it almost seems like all password auth should be backed by credential backend in this case?18:01
gyeemorganfainberg, ayoung, the method name can't be password then18:01
gyeesince we need id/password instead of username/password18:01
*** nikhil|afk is now known as nikhil_18:02
tellesnobregahi, while running nova tests, where can i find the sqlite db?18:02
*** dolphm___ has joined #openstack-dev18:02
*** nikhil_ is now known as Guest9588918:02
morganfainberggyee, it would be potentially doable to compare against all creddentials for the user with type "password" but... i am unsure if that isn't far too expensive to even consider18:02
ayounggyee, hmmm...I see how you ended up there....but not sure I really want us to support it18:02
*** mihgen has quit IRC18:03
*** Guest95889 is now known as nikhil|afk18:03
*** dolphm_a_ has quit IRC18:03
*** e0ne has quit IRC18:03
*** dolphm_afk has quit IRC18:03
ayounggyee, so...instead of of a user having userid/password they will have multiple  crednetial_ids/shared-secrets18:04
gyeemorganfainberg, yeah, perf could be an issue as authn is a high requency call18:04
gyeefrequency18:04
ayoungnah, it would be cheap enough18:04
ayoungfilter by userid first18:04
morganfainbergayoung, unless they had ~1000s of credentials for a user...but i'd argue at that point... make a second user or 1018:05
ayoungmorganfainberg, even then I suspect it would not really be an issue, but we could always limit the number of creds to prevent a DOS of that sort18:05
gyeeayoung, I am OK with 3 active ones18:06
ayoungbut interesting that credntial_id/shared-secret would work with basic-auth18:06
morganfainbergalternatively, it would be possible to seed the IDs for the credential in a sane way and use that in lieu of the user_id. since credential id maps to user_id.  if using "username" or "user_id" you'd compare against all possible creds for the user?18:06
nagyzdo you guys see any debug log output in keystone.conf from any of your identity drivers?18:06
nagyzthe "deepest" i see the calls are dogpile +sqlalchemy, but nothing directly from the driver18:06
ayoungnagyz, I use an integrated debugger18:06
*** mrpink has joined #openstack-dev18:07
*** hemanth_ has quit IRC18:07
ayoungnagyz, the logging stuff is kindof weird.  Do you see a log call that should be triggered, but is not?18:07
*** singhs has joined #openstack-dev18:08
nagyzI added a LOG.debug() (tried critical, info, whatever you can think of) into the beginning of authenticate() in the ldap backend, yet not seeing this in any of the keystone logs18:08
morganfainbergnagyz, if you have caching enabled, it is possible the debug from the assignment backend wouldn't be called if it is cached.18:08
Kupo24zHey All, have a new bug; can someone confirm weither or not its working as intended? https://bugs.launchpad.net/nova/+bug/124559518:08
uvirtbotLaunchpad bug 1245595 in nova "Resize with LVM Restores from Image; Clears All Data" [Undecided,New]18:08
morganfainbergbut only assignment18:08
*** amcrn has joined #openstack-dev18:08
ayoungfabiog, gyee, so, it is not an API issue, but the passwords and shared-secrets should both be securely stored18:08
gyeeayoung, morganfainberg, so we are OK with using the password mechanism with credential_id/password in the payload?18:08
ayounggyee, well, i think it is OK.  Some details still to be worked out18:08
morganfainberggyee, i think that is fair, but we should seed the credential id or salt it with something we can always identify it is a cred id vs user_iud18:09
*** martyntaylor has quit IRC18:09
morganfainberggyee, i also think we need to only store salted hashes (same as password)18:09
gyeemorganfainbert, it would be the same mechanism as passwords18:09
*** 16WABCWLK is now known as twoputt_18:09
nagyzmorganfainberg, can I just set cache=False to counter this if this is indeed happening?18:09
morganfainberggyee, aye18:09
gyeesalt + 1000 round of hash18:09
morganfainbergnagyz, [cache] section of the config, enabled = False18:09
morganfainbergnagyz, but disabled should be the default18:09
ayoungmorganfainberg, we can add "credential_id" to the password mechanisms if we really want....I just don't really want to add any more mechanisms like this at all.18:10
nagyzok, it's indeed disabled, but just to be sure I set it to false.18:10
*** misterpink has quit IRC18:10
morganfainbergayoung, i'd rather not make credential_id specific.  i'd rather be able to use either cred_id or user_id or username18:10
ayounggyee, I assume that this would not be "either/or"18:10
gyeeayoung, that also means we need to change dolphm's password reset API18:10
gyeefor password reset, user will need to specify *which password* to reset18:10
morganfainbergayoung, if it came to that.18:10
ayounggyee, no...18:11
nagyzthis is ALL the output getting added to keystone.log using the ldap identity driver with debugging enabled: http://pastebin.com/CPsTPXNN18:11
gyeeor it has to be two operations18:11
ayounggyee, password reset could work with this mechanism just fine18:11
gyee1) create new password, and 2) revoke old password18:11
ayoungpassword reset could do that in one call18:11
morganfainbergayoung, ++18:11
gyeeayoung, I am confused, we are storing passwords in credentials no?18:11
gyeeif I read you guys correctly18:12
morganfainberggyee, yes, but standard password reset call could do it in one call.18:12
gyeeare we not changing password auth plugin to use credentials backend?18:12
nagyzthere must be a way to get back the nice ldap debugging like in grizzly...18:12
dstanekayoung, gyee, morganfainberg: does what you are talking about affect https://review.openstack.org/#/c/52456/18:12
nagyzcause this is useless for debugging right now :)18:12
*** jvrbanac has joined #openstack-dev18:13
ayoungdstanek, yeah...potentially18:13
gyeedstanek, yes18:13
morganfainbergnagyz, you're running it under eventlet, right? can you put a paste up of your config?18:13
dstanekk, i should probably pay attention then :-)18:13
gyeemorganfainberg, how do we know "which password" to reset?18:13
ayoungnagyz, do you still get that with caching turned off?18:13
ayounggyee, password is linked to user18:13
ayoungso if a user changes a password, they are assuming they have one and only one18:13
gyeea user can have multiple passwords under this proposal18:13
gyeewe can't assume anything18:14
ayounggyee, we would have a different API for multiple passwords if your approach goes through18:14
dstanekgyee: do ou hae a link to the proposal?18:14
nagyzayoung, yes, caching disabled.18:14
nagyzmorganfainberg, guess so. default ubuntu. :) let me put my paste conf somewher18:14
gyeeayoung, different APIs?18:14
ayounggyee, "change the password that matched the one you passed in"18:14
gyeeayoung, which if I have multiple matches18:14
morganfainberggyee, what ayoung said, i was assuming the use of changing the password that matched the "old one" in that case.18:14
ayoungnagyz, your trace showed dogpile as the last thing called18:14
bknudsonmordred: On https://launchpad.net/openstack -- "Mailing list" is out of date -- http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev18:15
gyeesame shared secret with different ID18:15
morganfainbergayoung, dogpile always logs something.18:15
nagyzayoung, exactly; but this happens even with the SQL identity backend, where I do see the queries from sqlalchemy, but not a single log line from the sql identity driver itself18:15
morganfainbergayoung, it has some lock magic regardless if it is on or off.  low impact18:15
gyeemorganfainberg, I can have multiple credentials with different credential_id18:15
ayoungnagyz, you have debugging turned on in the log?18:15
gyeeAPI allows that18:15
morganfainberggyee, oh i see, same credential "foobar111" with id 1, and someone else uses18:16
morganfainberg"foobar111" with id 2318:16
morganfainbergwhich would it reset.18:16
morganfainbergah18:16
*** ruhe has joined #openstack-dev18:16
nagyzayoung, log_config is not set in the keystone.conf, but just to be sure I changed the levels to DEBUG in /etc/keystone/logging.conf that ships with the ubuntu package18:16
ayoungmorganfainberg, but the credentials should be scoped to the user.18:16
gyeemorganfainberg, correct, same user can have multiple passwords (of the same string) but with different IDs18:16
morganfainbergayoung, what gyee just said.18:17
morganfainbergayoung, i see the issue.18:17
gyeeonly credential_id is globally unique18:17
*** MaxV has joined #openstack-dev18:17
*** adalbas has joined #openstack-dev18:17
dstanekwhat it the usecase for mulitple passwords - it sounds odd hearing about it for the first time18:17
ayoungbut there is an interesting question:  can a user have multiple shared-secrets that have the same secret value?18:17
ayoungdstanek, rotation18:17
gyeeayoung, yes, API allows that18:17
ayoungdstanek, assume a service reads password out of a config file18:17
ayoungdstanek, admin user changes password, and there is a race condition on the next request18:18
morganfainbergnagyz, debug = true in the config as well?18:18
nagyzyep18:18
nagyzand verbose=True just to be sure.18:18
ayoungdstanek, old password is still in the config file18:18
*** KurtMartin has quit IRC18:18
morganfainbergnagyz, and this is eventlet not httpd right?18:18
morganfainbergnagyz (using keystone-all to start keystone)18:18
dstanekayoung: so we'd want the old one to work for some period of time?18:18
ayoungneed to kill -HUP type changes to reread config file meanwhile, service is still chugging along, and tries to perform operation18:18
nagyzmorganfainberg, yes.18:19
morganfainbergdstanek, aye.18:19
*** yaguang has joined #openstack-dev18:19
ayoungdstanek, yep18:19
gyeedstanek, yes, for password rotation and rolling upgrade18:19
morganfainbergactually... that is another interesting enhancement.... make credentials possible to be time-limited....18:19
*** KurtMartin has joined #openstack-dev18:19
morganfainbergsome other discussion later on that though18:19
ayoungnagyz, how did you deploy?18:19
dstanekinteresting...does that open us up to security issues? say a password is changed because it is compromised18:19
morganfainbergdstanek, you'd revoke/disable that password immidiately18:19
*** SergeyLukjanov is now known as _SergeyLukjanov18:19
nagyzayoung, apt-get install keystone :-) from the ubuntu cloud repo for havana.18:19
*** bauzas has quit IRC18:20
morganfainbergdstanek, explicitly, and get everything updated directly18:20
nagyzayoung, this is the package version, if it's any indication: 1:2013.2~rc4-0ubuntu1~cloud018:20
*** _SergeyLukjanov has quit IRC18:20
nagyznot sure why it's rc4, not the final...18:20
ayoungnagyz, I'm a Red Hat guy...don't much uyes that, so a few more questions for you18:20
*** pixelb has joined #openstack-dev18:20
*** DinaBelova has quit IRC18:21
ayoungnagyz, when you turned on debugging, how did you restart the server?18:21
nagyzservice keystone restart, which essentially stops keystone-all and restart it under the right user18:21
nagyzI can try stop, start, but would be shocked if there were a difference18:21
morganfainbergnagyz, can you verifty the process was actually stopped/started?18:21
ayoungnagyz, ok...and it is unlikely that there are multiple config files, either, so you probably edited the right one18:21
morganfainbergnagyz, upstart gets cranky sometimes18:22
nagyzwhen I do a restart I do see keystone dumping the current settigns to the log file18:22
ayounglogging is further controlled by logging.conf18:22
gyeenagyz, run keystone with ltrace and you can see which conf file it is loading18:22
ayounghttps://github.com/openstack/keystone/blob/master/etc/logging.conf.sample is the one we ship with18:22
gyeejust look for the open sys calls18:22
*** DinaBelova has joined #openstack-dev18:22
nagyzayoung, even with logging_conf not set?18:22
nagyzer, log_config18:22
ayoungbut there is nothing in there that would affect this anyway18:22
ayoungnagyz, well,  I guess not.18:23
ayoungnagyz, hmmm,  so you are using LDAP, right?18:23
*** chihhsin_ has quit IRC18:23
*** devoid has joined #openstack-dev18:23
nagyztrying to. :)18:23
*** devoid has left #openstack-dev18:23
nagyzafter a bit of hacking I have the suse hybrid driver working with havana, which allows me to do a keystone user-list18:24
nagyzbut even with the pure ldap driver I do not see the ldap queries18:24
nagyzor any output from the ldap driver.18:24
dstanekhas the mulitple credentials idea been discussed in a etherpad or blueprint yet?18:24
*** chihhsin has joined #openstack-dev18:24
nagyzopen("/etc/keystone/keystone.conf", O_RDONLY) = 318:24
nagyzit's opening the right config.18:24
ayoungnagyz, is there any indication that the LDAP driver is doing the right thing?18:25
gyeedstanek, not yeah, this is something as the result of shared-secret extension18:25
tellesnobregahi, i created some tables on nova but im getting this error when testing the version migration Failed to migrate to version 228 on engine Engine(sqlite://) can anyone help me?18:25
*** safchain has quit IRC18:25
*** ruhe has quit IRC18:25
nagyzayoung, with tcpdump I can see traffic going out to the ldaps port for the ldap server18:25
morganfainbergnagyz, if you could post a paste of your config it might be easier to eyeball and make sure nothing is explicitly missing (leave out passwords of course)18:26
nagyzsure, let me get a paste somewhere18:26
ayoungnagyz, cool...so it really is just a problem with logging, and not something swallowing the calls18:26
nagyzayoung, I think so too.18:26
dstanekgyee: it sounds like i would not want my review merged because i would rather only deal with a credentials resource18:26
ayoungnagyz, and you are getting decent logging elsewhere, just not the drivers, no?18:26
gyeedstanek, yeah, we need go iron out the details18:27
morganfainbergayoung, he is seeing router.middleware stuff, sqlalchemy, and dogpile18:27
morganfainbergayoung. http://pastebin.com/CPsTPXNN18:27
morganfainbergand some wsgi stuff18:27
morganfainberg(info/warning)18:27
*** singhs has quit IRC18:27
nagyzayoung, yep18:27
gyeedstanek, we may need credential_id/old_password/new_password in order to do reset18:27
ayoungnagyz, OK,  I think that is cuz we log nothing18:27
ayoungnagyz, look here18:27
ayounghttps://github.com/openstack/keystone/blob/master/keystone/identity/backends/ldap.py18:28
ayoungthe only LOG message is in user-list18:28
nagyzif I add a LOG.debug() myself to the beginning of authenticate, that gets swallowed too18:28
gyeedstanek, but usability may suffer as user normally won't remember credential_id18:28
*** Mandell has joined #openstack-dev18:29
*** singhs has joined #openstack-dev18:29
nagyzhere's the config I'm running: http://pastebin.com/HESTAnt818:29
*** MaxV has quit IRC18:29
nagyz(the other un-related thing would be that if I change "enabled" via keystone command line utils for a user, and it's coming from a read-only LDAP server, where will keystone save that, if at all.)18:30
*** romcheg has quit IRC18:30
*** sushils has quit IRC18:31
dstanekgyee: they would be able to get a list of credentials right? if so usability isn't too much worse18:31
ayoungnagyz, do you see any logging at the startup?18:31
nagyzayoung, yeah I do see keystone dumping the settings for each option18:31
*** SergeyLukjanov has joined #openstack-dev18:31
ayoungnagyz, actually, there should be a good bit of logging https://github.com/openstack/keystone/blob/master/keystone/common/ldap/core.py18:31
gyeedstanek, list of credentials in the UI? are you going to show the naked passwords?18:31
ayoungnagyz, for example, every simplebind should get logged in a debug setup18:32
nagyzayoung, I used to have these logs with grizzly in the past. just not since I reinstalled and wanted to use havana.18:32
nagyzthose are exactly what I'd like to see18:32
nagyzto see why I cannot authenticate users :)18:32
ayoungnagyz, I believe you.  We just haven't fielded this problem yet18:32
ayoungtrying to figure out if it is us or you18:32
nagyzsure18:32
nagyzI'm happy to help in any way I can18:32
morganfainbergoh ... i wonder18:32
*** amcrn has left #openstack-dev18:33
morganfainbergayoung, if logging.conf is loaded at all, it overrides everything else, no matter what.18:33
nagyz(hah, the ibm host masking doesn't work when I log in via pure v6)18:33
morganfainbergnagyz, is logging.conf being loaded at all?18:33
nagyzhow could I verify that, besides checking log_config?18:33
nagyz2013-10-28 19:31:33.664 22575 DEBUG keystone-all [-] log_config                     = None log_opt_values /usr/lib/python2.7/dist-packages/oslo/config/cfg.py:194118:34
morganfainbergok that should be fine.18:34
nagyzshould deafult_log_levels change "keystone" to "DEBUG" instead of "INFO" with debug=True?18:34
ayoungmorganfainberg, smells like a side effect of the switch over to oslo logging18:34
ayoungis there some assumption we were making that is no longer true>?18:34
dstanekgyee: no, but i would assume if there can be multiple passwords that you'd allow then to have a description18:34
morganfainbergayoung, aye18:34
*** dolphm___ has quit IRC18:35
*** MaxV has joined #openstack-dev18:35
gyeedstanek, there's no description field in credential_ref today18:35
morganfainbergayoung, i'm spinning up a ubuntu vm now... but going to need to run to a meeting for 10-15 mins in a sec18:35
*** nikhil|afk is now known as nikhil__18:35
*** galstrom is now known as galstrom_zzz18:35
dstanekgyee: if there is no list how will a user know what passwords they have?18:36
gyeedstanek, that's my concern with this proposal18:36
*** exed has quit IRC18:36
gyeethe usability aspect18:36
ayounggyee, honestly, I would rather get automated users off of passwords and deal with a key rotation extension than add a new credential type for shared secret18:37
*** changbl has quit IRC18:37
ayoungnagyz, I'm guessing that we broke something  in the log config18:37
gyeeayoung, that's what the current proposal is dealing with18:38
nagyzayoung, is there an easy "hack" that I could apply to see if that's indeed the case?18:38
ayounggyee, changing everything over to PKI?18:38
ayoungnagyz, so what I am tracking down is the config path right now18:38
gyeeayoung, no, shared-secret18:38
ayounggyee, and that sucks18:38
ayoungnagyz, it used to be in keystone/common/config/py18:39
ayoungbut now it is in18:39
gyeeayoung, like I said, we don't dictate security, we simple facilitate it18:39
gyeesecurity is a process, Keystone is a tool :)18:39
*** aeperezt has quit IRC18:39
ayounghttps://github.com/openstack/keystone/blob/master/keystone/openstack/common/log.py18:39
ayounggyee, but if you can go back to the powers that be and say "the Keystone team said No"  what happens?18:40
nagyzas a quick fix, can't I set it to log to syslog?18:40
ayoungnagyz, you can do anything you like.  I'm notcertain yet what is going wrong18:41
nagyzsure I can I meant if that would/could help :)18:41
ayoungnagyz, I suspect not18:42
ayoungnagyz, since you are getting some logging in the current incarnation, lets not change too much at once18:42
ayoungnagyz, ok,  so you suggested change18:42
ayoungdefault_log_levels[keystone]=DEBUG18:42
ayoungnagyz, I suspect that is correct, at least in intention18:42
*** ben_duyujie has quit IRC18:43
gyeeayoung, I am perfectly fine with "No" as long as we have legitimate reasons18:43
gyeeforce ppl to use PKI is not a good reason18:43
gyeethough I am a big fan of PKI, but I don't dictate PKI18:43
ayounggyee, supporting an additional password mech in Keystone is not a good idea18:43
nagyzayoung, just adding that to keystone.conf works?18:44
ayounggyee, so, if you can come in with a way to make it work cleanly with the existing, I'd be far more likely to go along with it18:44
ayoungnagyz, no idea18:44
nagyzI mean is that the place I should modify it?18:44
nagyzhah :)18:44
ayoungnagyz, not sure the format18:44
ayoungnagyz, let me see if I can find some documentaion18:44
gyeeayoung, we just discuss that multiple password route and its not usable it the current form18:45
gyeepassword reset is an issue18:45
ayounggyee, ...really hard for me to get behind this proposal18:45
*** novas0x2a|laptop has joined #openstack-dev18:46
*** lucasagomes has joined #openstack-dev18:46
ayounggyee, I like the idea of PKI for service users.18:46
ayounggyee, and I can certainly get behind a rotation API for PKI18:47
*** lucasagomes has left #openstack-dev18:47
*** thedodd has joined #openstack-dev18:47
*** dolphm_afk has joined #openstack-dev18:47
gyeeayoung, I just submited a proposal for PKI auth18:48
ayounggyee, you mean rotation for the credentials API as a PKI auth mechanism?18:48
*** rongze has joined #openstack-dev18:49
gyeeayoung, no , right now just cert authorization18:49
ayoungdhellmann, can you tell me how I can change the default log level for a single service using the oslo config for oslo debug?18:49
ayoungs!debug!log!18:49
ayoungnagyz, it is a list option.  and I am not certain what the format is to change just a single value for that list18:50
ayoungnagyz, it might be that it can be overridden by a different value, too18:50
*** changbl has joined #openstack-dev18:51
*** romcheg has joined #openstack-dev18:51
*** aeperezt has joined #openstack-dev18:51
nagyzayoung, google told me that it's a nova.conf option, but trying to apply it in keystone.conf doesn't work18:52
*** dolphm_afk has quit IRC18:52
ayoungnagyz, so, one option is to edit the source18:52
nagyzI'm fine with that.18:52
ayoungnota gret option, but worth trying.  Just keep the original around18:52
nagyzwould this be keystone/openstack/common/log.py then?18:53
nagyzlet me see18:53
*** mihgen has joined #openstack-dev18:53
ayoungnagyz, yeah18:53
nagyz2013-10-28 19:53:45.362 27098 DEBUG keystone-all [-] default_log_levels             = ['amqplib=WARN', 'sqlalchemy=WARN', 'boto=WARN', 'suds=INFO', 'keystone=DEBUG', 'eventlet.wsgi.server=WARN'] log_opt_values /usr/lib/python2.7/dist-packages/oslo/config/cfg.py:194118:53
nagyzlet's see.18:53
nagyzand voila18:54
nagyzI see my LDAP debug18:54
*** yaguang has quit IRC18:54
nagyzso basically debug=True doesn't propagate into default_log_levels in oslo18:54
morganfainbergnagyz, ah18:54
*** larsbutler has quit IRC18:54
morganfainbergayoung, it was, infact, an artifact of common logging18:55
*** rongze has quit IRC18:55
*** kpavel has joined #openstack-dev18:56
*** jergerber has joined #openstack-dev18:56
fabiogstevemar and dolphm: can you please let me know if the changes in #link:https://review.openstack.org/#/c/53046/ are good?18:56
*** freedomhui has joined #openstack-dev18:57
*** xqueralt has quit IRC18:57
stevemarfabiog: yes sir18:57
fabiogstevemar: I said "please" ;-)18:58
stevemarfabiog: sir, yes i noticed that, sir18:58
morganfainbergfabiog, stevemar, would it even be possible to have an extension w/o a controller/router?18:58
nagyzso two related questions: does anybody know what happened to suse's hybrid identity driver?18:58
stevemarmorganfainberg, yep you can18:58
nagyzI'd like to have the service accounts locally in mysql, but the users should come from ldap.18:58
morganfainbergstevemar, i mean... would it _actually_ be able to do anything?18:59
morganfainberg:P18:59
fabiogmorganfainberg: if the extension does not have new API18:59
*** crobertsrh has joined #openstack-dev18:59
stevemarmorganfainberg: https://github.com/openstack/keystone/tree/master/keystone/contrib/admin_crud18:59
fabiogmorganfainberg: the OS-SHARED-SECRET would not need that18:59
fabiogbecause is a plug-in for token provider18:59
morganfainbergstevemar, bad example, put router in core.py there (old)18:59
fabiogso no need for routers18:59
morganfainbergfabiog, if it was developed in-tree it would go in keystone/token/providers19:00
stevemarmorganfainberg, yeah, but in the docs we are calling it out to make sure its a new file19:00
morganfainbergfabiog, (i'm playing devils advocate, not really complaining)19:00
fabiogmorganfainberg, right, but as an extension it would be in the contrib folder19:00
gyeemorganfainberg, stevemar, fabiog, extension != API extension19:01
gyeewe need to distinguish that19:01
*** freedomhui has quit IRC19:01
morganfainberggyee, that is the point i was getting to19:01
nagyzmorganfainberg, should I open a bug?19:02
stevemarmaybe the docs should have that distinction :)19:02
*** Alexei_987 has quit IRC19:02
morganfainbergnagyz, about? the logging?19:02
nagyzyes19:02
*** dolphm_afk has joined #openstack-dev19:02
*** Alexei_987 has joined #openstack-dev19:02
morganfainbergnagyz, likely we should get documentation fixed for that19:02
gyeestevemar, agree19:02
*** buzztroll has quit IRC19:02
morganfainbergnagyz, it is worth doing so for that.19:02
nagyzmorganfainberg, I had to hack the source to get it working... doesn't sound like a docu tweak19:02
fabiogstevemar: I will add a sentence, saying that extensions implementing API extensions must have the routers and controllers19:02
*** markmcclain has quit IRC19:02
morganfainbergoh what source? in common/openstack?19:02
nagyzyeah19:02
nagyzthe log.py file19:03
*** jsavak has joined #openstack-dev19:03
morganfainbergwell.  we _shouldn't_ change that directly19:03
nagyzto manually change default_log_levels["keystone"]19:03
*** joesavak has quit IRC19:03
nagyzyes, but when keystone is started up with debug=True, then default_log_levels["keystone"] should be DEBUG, right?19:03
nagyzinstead of INFO19:03
morganfainbergsince that is sync'd from oslo, but yes.  def. open a bug, and tag it as havana-backport-potential19:03
*** buzztroll has joined #openstack-dev19:03
nagyzsure thing.19:03
morganfainbergnagyz, actually wait a sec19:04
*** joesavak has joined #openstack-dev19:04
morganfainbergnagyz, if you set in the config default_log_levels = keystone=DEBUG did it work?19:04
nagyzI can try that.19:05
morganfainbergit should be a viable config option19:05
morganfainbergit is something we should fix, but i am looking for ease of use.19:06
nagyzno, that doesn't help19:07
nagyzhmm19:07
nagyzinteresting.19:07
*** dims has quit IRC19:07
nagyzwait a set, let me retest it.19:07
fabiogstevemar: pushed the changes19:08
*** jsavak has quit IRC19:08
nagyzyep19:08
*** jvrbanac has quit IRC19:08
*** aeperezt has quit IRC19:08
nagyz2013-10-28 20:07:52.613 29934 DEBUG keystone-all [-] default_log_levels             = ['amqplib=WARN', 'sqlalchemy=WARN', 'boto=WARN', 'suds=INFO', 'keystone=INFO', 'eventlet.wsgi.server=WARN'] log_opt_values /usr/lib/python2.7/dist-packages/oslo/config/cfg.py:194119:08
nagyzdoesn't change it19:08
fabiogmorganfainberg: now there is a distinction when is mandatory to use routers and controllers19:08
*** boden_ has joined #openstack-dev19:09
nagyzmorganfainberg, ok, actually, that does fixes it.19:09
nagyzI added it under [default] with just "log_levels = ...", and that didn't fix it, then I realized I missed the "default" from there19:09
*** dims has joined #openstack-dev19:10
*** boden has quit IRC19:10
nagyzadded it as a comment19:11
nagyzhttps://bugs.launchpad.net/keystone/+bug/124562919:11
uvirtbotLaunchpad bug 1245629 in keystone "keystone is ignoring debug=True" [Undecided,New]19:11
nagyzoh, nice. :)19:11
morganfainbergnagyz, thanks!19:13
morganfainbergthis might just be a doc "fix"19:13
morganfainbergbut we should def. fix "Debug"19:13
morganfainbergin the config19:13
nagyzis it possible to mesh-up multiple identity drivers?19:13
nagyzor let's say I do the work, would it be something worthwile?19:13
*** rainya has quit IRC19:13
nagyz*worthwhile19:13
*** otherwiseguy has quit IRC19:13
morganfainbergnagyz, you mean, have a store for SQL for users, and a separate store for some ldap users?19:13
nagyzor take any number of identity servers and try them in order until a user is found in any of them19:14
nagyzbut yeah19:14
morganfainbergnagyz, we have that partially working in havana19:14
*** melwitt has joined #openstack-dev19:14
dolphm_afkmorganfainberg: nagyz: what caused this?19:14
morganfainbergit is on the roadmap for icehouse for full support.19:14
morganfainbergdolphm_afk, artifact of moving to common logging19:14
dolphm_afkmorganfainberg: that was forever ago!19:14
*** dolphm_afk is now known as dolphm19:14
morganfainbergkeystone is set to INFO level by default in the oslo.config log.py file (as it should be()19:15
*** alunduil has joined #openstack-dev19:15
*** DinaBelova has quit IRC19:15
morganfainbergwe might have picked up a "change" in a subsequent sync19:15
nagyzmorganfainberg, but isn't it something easy to implement with a mesh-up driver? it just implements a dummy Identity interface and for each call that it gets it proxies them to the other drivers19:15
nagyzor what am I missing?19:15
dolphmmorganfainberg: we moved to oslo.config 1.2 final right around h319:15
nagyzdolphm, I have no idea what caused this, just this bit me in the ass today :)19:15
morganfainbergdolphm, and did we get a subsequent sync of the log.py file?19:15
morganfainbergdolphm, i am going to check in a moment19:15
morganfainbergbut the way to "enable debug" in ekystone is different now.19:16
morganfainbergbecause of that.19:16
morganfainbergdolphm, https://github.com/openstack/keystone/blob/master/keystone/openstack/common/log.py#L134 is the line that caused the issue.19:17
morganfainbergdolphm, this came with the normal sync of oslo logging.19:18
dolphmdamn, that's annoying19:18
*** DinaBelova has joined #openstack-dev19:19
morganfainbergdolphm, so we can either look at hacking debug=True in the config to "do the right thing" again, or document this new method19:19
morganfainbergdolphm, ++ yes.19:19
morganfainbergannoying19:19
nagyzmorganfainberg, so any idea about this mesh-up? :-) if it can be achieved with the havana codebase currently.19:20
nagyzI cannot change our corporate LDAP server19:20
morganfainbergnagyz, so what is the exact behavior you're looking for?19:20
*** jvrbanac has joined #openstack-dev19:20
morganfainbergnagyz, i want to be sure to direct you down the right path19:21
nagyzmorganfainberg, have the service users in local sql while all the normal users in ldap19:21
ayoungstevemar, BTW, that is what you get for asking politely....ignored for an hour or so...what is up?19:21
*** bauzas has joined #openstack-dev19:22
ayoungnagyz, can you log that as a bug?19:22
nagyzayoung, already did: https://bugs.launchpad.net/keystone/+bug/124562919:22
uvirtbotLaunchpad bug 1245629 in keystone "keystone is ignoring debug=True" [Undecided,New]19:22
*** DinaBelova has quit IRC19:22
ayoungnagyz, just saw that...I should finish catching up before typing19:22
nagyz:-)19:22
nagyzmy first (potentially correct) bug! \o/19:23
morganfainbergnagyz. nice!!19:23
* nagyz is also going to the summit to lurk around19:23
*** jcoufal has quit IRC19:24
ayoungnagyz, so, I suspect that the change should not be setting "default_log_levels"  but, as you would expect, the log levle for keystone itself.19:24
morganfainbergnagyz, awesome!  it should be a good summit19:24
*** johnthetubaguy has quit IRC19:24
morganfainbergayoung, aye.19:24
*** jcoufal has joined #openstack-dev19:24
morganfainbergnagyz, so wrt the hybrid approach.  i've done some of this work (for my company), it's... kind of a dirty hack and i've not looked at porting it to havana.  in I, it wont be an issue for me19:25
*** Shaan7 has quit IRC19:25
*** singhs has quit IRC19:26
*** KurtMartin has quit IRC19:26
nagyzmorganfainberg, https://github.com/SUSE-Cloud/keystone-hybrid-backend19:26
nagyzthis actually does it.19:26
nagyzbut it doesn't work with havana19:26
nagyzand I'm not sure why exactly19:26
morganfainbergnagyz, this is similar to what i did, i just use some magic in the user attributes (json blob) to identify19:26
nagyzI'm fine with scanning sql first and then ldap19:27
morganfainbergnagyz, thats pretty much what i did.19:27
*** burt has joined #openstack-dev19:27
ayoungnagyz, yuck19:27
morganfainbergnagyz, but it is suboptimal19:27
*** MaxV has quit IRC19:27
ayoungnagyz, you don't need that19:27
nagyzayoung, I'm open to solutions19:27
ayoungnagyz, LDAP Identity bakcend, SQl Assignments backend19:28
*** MaxV has joined #openstack-dev19:28
morganfainbergnagyz, i was going to suggest getting all users into LDAP would be the best course19:28
ayoungnagyz, read only LDAP,19:28
morganfainbergnagyz, what ayoung said.19:28
morganfainbergit's far better if you can do that19:28
*** terriyu_ has joined #openstack-dev19:28
ayoungno automatic project creationg, which is ugly anyways19:28
nagyzayoung, morganfainberg, I agree but as this is our global corporate LDAP server I cannot add users to it19:29
*** martine has joined #openstack-dev19:29
nagyzso I must have local users :(19:29
nagyzI could add "fake" users but the process takes around 3-4 days...19:29
nagyz:)19:29
morganfainbergnagyz, to LDAP?19:29
*** SumitNaiksatam_ has joined #openstack-dev19:29
nagyzyes.19:29
*** kdbrierly has joined #openstack-dev19:29
*** dstufft has quit IRC19:29
*** romcheg1 has joined #openstack-dev19:29
*** SumitNaiksatam has quit IRC19:29
*** SumitNaiksatam_ is now known as SumitNaiksatam19:30
morganfainbergnagyz, that really is the best approach.  lest ugly cruft you'll need to rip-out later19:30
*** dstufft has joined #openstack-dev19:30
nagyzor if someone can point me to an easy tutorial on having a local ldap server which mirrors a specific part of the tree to the external ldap server (in terms of queries, binds), that'd help19:30
*** terriyu has quit IRC19:30
*** terriyu_ is now known as terriyu19:30
*** LinuxJedi_ has joined #openstack-dev19:30
*** KurtMartin has joined #openstack-dev19:30
nagyzbut last I checked, it was horrifyingly hard to set up with openldap19:30
*** alunduil has quit IRC19:31
*** mnaser has quit IRC19:31
*** nati_ueno has joined #openstack-dev19:31
*** romcheg has quit IRC19:31
*** yamahata has quit IRC19:31
*** kmartin has quit IRC19:31
*** jeblair has quit IRC19:31
*** LinuxJedi has quit IRC19:31
*** janisg has quit IRC19:31
*** uvirtbot has quit IRC19:32
morganfainbergnagyz, i haven't done that actually.19:32
*** yamahata has joined #openstack-dev19:32
*** mirrorbox has quit IRC19:32
*** nkinder has quit IRC19:32
*** martine is now known as martine_19:32
*** chandankumar has joined #openstack-dev19:32
*** MaxV has quit IRC19:32
*** kbrierly has quit IRC19:33
*** max_lobur has quit IRC19:33
*** iamben_tw has quit IRC19:33
*** iamben_t1 has joined #openstack-dev19:33
*** jeblair has joined #openstack-dev19:33
*** alunduil has joined #openstack-dev19:33
*** romcheg1 is now known as romcheg19:33
nagyzmorganfainberg, ok, but in theory, is there anything against writing such a "proxy" identity driver?19:33
nagyzapart from it being ugly.19:33
*** max_lobur has joined #openstack-dev19:33
*** davidhadas has quit IRC19:34
*** markwash_ has joined #openstack-dev19:34
*** mtreinish has quit IRC19:35
morganfainbergnagyz, no nothing that says don't do it.19:35
morganfainbergnagyz, i really wish i could point at the per-domain stuff and say it was ready19:36
*** markwash has quit IRC19:36
*** markwash_ is now known as markwash19:36
*** AndreaRosa has quit IRC19:36
*** AndreaRosa has joined #openstack-dev19:37
*** mnaser has joined #openstack-dev19:37
nagyzthat's fine. :)19:37
nagyzit doesn't look much work to hack it together19:37
nagyzif I just proxy all the calls to the sql identity driver and then to the ldap one19:38
morganfainbergnagyz, doable./19:39
*** nkinder has joined #openstack-dev19:39
*** fabiog has quit IRC19:39
morganfainbergnagyz, but if you could get users into LDAP it would be far better19:39
*** mtreinish has joined #openstack-dev19:40
nagyzyes, will initiate the process tomorrow19:40
*** kmartin has joined #openstack-dev19:41
dolphmmorganfainberg: nagyz: related- https://bugs.launchpad.net/keystone/+bug/124551019:41
*** janisg has joined #openstack-dev19:41
dolphmto the oslo.config issue19:41
ayoungnagyz, so,  set up a local domain for the service users and then an LDAP domain for the LDAP users.  I think it will support your needs19:41
dolphmmorganfainberg: nagyz: actually, maybe not19:42
ayoungnagyz, that is what we are working towards19:42
nagyzayoung, yes, but it doesn't work with havana, correct?19:42
*** luisbg` has joined #openstack-dev19:42
ayoungnagyz, we have some issues with multiple LDAP servers, but it should work for just a single one19:42
*** galstrom_zzz is now known as galstrom19:42
stevemarayoung: that'll be the last time i ask nicely :)19:43
ayoungnagyz, so long as all userids are unique you should be fine.19:43
morganfainbergayoung, would still have major issues with domain scoping.  it's not really functional, my cleanup patchset didn't get in =/19:43
ayoungmorganfainberg, hmmm19:43
stevemarayoung: got time to talk about federated identity stuff?19:43
ayoungstevemar, yea19:43
morganfainbergayoung, it really isn't viable until icehouse.19:43
* ayoung goes to get some more caffeine19:43
stevemari got joesavak available too, for a whopping 18 minutes19:43
morganfainbergdolphm, that is an issue (use_syslog) with legacy syslog support and logging.conf syslog support19:44
joesavak1619:44
joesavak;)19:44
morganfainbergdolphm, it's... inelegant to say the least.19:44
morganfainbergdolphm, i think19:45
ayoungmorganfainberg, even if the LDAP domain is the default domain?19:45
stevemarayoung: q1) how do you want the api specs split up?19:45
*** gmoro has quit IRC19:45
morganfainbergayoung, it _might_ work./  but the service users wont be able to do a number of things.  not sure what effect it will have19:45
ayoungstevemar, joesavak I think it should be:19:45
morganfainbergayoung, really, it19:45
ayoungone extension for registering an IDP19:45
morganfainberg's likely to produce wildly undefined behavior19:46
tellesnobregawhen creating new tables, do i need to create them anywhere else other than the migration file so i can test it? or on the test the table should be created by itself?19:46
ayoungone extension for mapping19:46
tellesnobregaautomatically by the migration19:46
ayoungunless we are 100%commited to linking Idp and mapping together19:46
ayoungnot sure if we are19:46
*** luisbg` has quit IRC19:46
*** drewlander has quit IRC19:46
ayoungthen...each of the protocols should have their own extension19:46
stevemarayoung: both should exist under /contrib?19:47
*** luisbg` has joined #openstack-dev19:47
ayoungSAML, openid-connect ,whatever19:47
ayoungstevemar, yeah19:47
ayoungstevemar, everything starts under contrib these days19:47
joesavakayoung OS-FED-IDP (CRUD IDP + upload public key); OS-FED-MAP (from:to - link is IDP/Protocol from IDP to mapping); OS-FED-SAML for authN19:47
morganfainbergayoung, it might be worth an attempt to try it in that configuration.  i'm just not confident that weird stuff wont happen.19:47
stevemarjoesavak... thanks, was just going to write that19:47
morganfainbergin either case.  food time here.  be back in a bit (and back to reviewing code)19:47
ayoungjoesavak, that looks right19:47
joesavakcool. Some pushback is OS-FED-SAML19:48
ayoungjoesavak, so, since each protocol requires code, we should be able to enumerate protocols, but not add them19:48
joesavakperhaps having it OS-FED-AUTH instead19:48
ayoungdrop FED19:48
ayoungOS-IDP, OS-MAP OS-SAML19:48
joesavakOk19:48
stevemarwhat about AUTH?19:48
ayoungjoesavak, I think Federation is a core term19:48
ayoungauth-saml?19:48
*** noslzzp has quit IRC19:48
stevemarthats better19:48
*** nermina has quit IRC19:49
ayoungsure19:49
joesavak+1 OS-AUTH-SAML; OS=-AUTH-OPENID?19:49
*** luisbg has quit IRC19:49
stevemarcool19:49
ayoungjoesavak, sounds right19:49
stevemarwe can split it out19:49
stevemarayoung: q2: #link https://review.openstack.org/#/c/51980/6/openstack-identity-api/v3/src/markdown/identity-api-v3-os-fed-idp-ext.md19:49
stevemaryou want the protocol data dropped from IDP?19:50
ayoungThe ideas the are all falling under FEderation are, if I percieve clearly, really fundamental to Keystone long term.  Lets not add a layer of indirection for stuff that is alreayd correclty isolated.19:50
*** MaxV has joined #openstack-dev19:50
ayoungso, for example,  no mechanism=federated19:50
*** luisbg` is now known as luisbg19:51
*** luisbg has quit IRC19:51
*** luisbg has joined #openstack-dev19:51
stevemarayoung: referring to the 'federated' method in auth?19:51
joesavakStill need to be able to sniff out what protocol an idp supports19:51
ayoungstevemar, not dropped, but rather we can only enumerated protocols that have code plugins19:51
*** rongze has joined #openstack-dev19:51
ayoungjoesavak, right.  I think we need to be able to enuermate protocols, but it should be based on a plugin19:51
ayoungwe should not be registering protocols on the fly, though19:52
*** mihgen has quit IRC19:52
ayoungso 1.  create an IdP.  2 Add Protocols to it...19:52
*** noslzzp has joined #openstack-dev19:52
joesavakyup. So if i support OS-AUTH-SAML, then I can add the SAML protcol to an idp19:52
*** athomas has joined #openstack-dev19:52
ayoungjoesavak, the URL needs to be linked to the tuple idp,protocol19:52
stevemarthat seems alright to me19:52
joesavakYup19:53
ayoungsince it might be a separate server...technically IdP is a protocolo specific term, but we are making it a common item in order to conceptually link 2 IdPs that really have the same datasource behind them.19:53
stevemarayoung: is there a specific term you had in mind instead of "federated" for the auth method?19:54
ayoungstevemar, yeah..the actual protocol used19:54
*** luisbg has quit IRC19:54
ayoungSAML,  openid....19:54
*** luisbg has joined #openstack-dev19:54
*** luisbg has joined #openstack-dev19:54
stevemarm'okay19:54
ayoungstevemar, we just need to document how multistage protocols should act19:55
ayoungthat really is part of core...but it can be in its own doc for now, and the SAML doc can reference it.19:55
*** willingc has joined #openstack-dev19:55
stevemarayoung: well, for now, we only want to support the last stage19:55
*** matiu_ has joined #openstack-dev19:56
stevemarayoung: it's docced in our use case that we only need the last one19:56
stevemarjoesavak: i have that right?19:56
*** rongze has quit IRC19:56
ayoungstevemar, and...I'd be ok with punting on the multi-stage thing, but I suspect dchadwick will not19:56
joesavakstevemar - yes - we want to say "phase" t hough19:56
stevemarayoung: that is tbd then i guess ;)19:56
joesavakand be able to indicate at the POST OS-FED-SAML/tokens call has the "phase"="push19:57
joesavakor something like that19:57
*** gmoro has joined #openstack-dev19:57
*** freedomhui has joined #openstack-dev19:57
ayoungstevemar, joesavak so I would document it in the SAML document for now, and we can extract it out into core when we get another multi-stage protocol to support19:57
ayoungso..how does one go about skipping the first couple of phases of SAML?19:58
nagyzayoung, morganfainberg thanks for the help19:58
* ayoung is afraid he knows the answer and won't like it19:58
*** romcheg has left #openstack-dev19:58
joesavakdoc'd here ayoung19:58
joesavakhttps://etherpad.openstack.org/p/federation-flows19:58
joesavakyou'd push it to the client19:58
nagyzI'm going to implement the hybrid approach tomorrow and then hopefully this can go live wednesday. :)19:58
ayoungnagyz, I want you to know that I am reading the Two Towers to my son.  I keep reading your Nick as Nazgul.19:58
nagyzhehe :)19:59
joesavakgotta run (meeting) be back in an hour19:59
nagyzwe just finished watching the return of the king extended version (4 and a half hours!) with my girlfriend19:59
nagyzlast weekend19:59
nagyzit was awesome.19:59
*** aeperezt has joined #openstack-dev19:59
*** matiu has quit IRC19:59
ayoungnagyz, I hope you read the book first19:59
nagyzyep, I did19:59
winkayoung: oh my, how many hours is that, roughly? :)20:00
nagyzand I usually use the easier to pronounce nick "zoltan", but that's not registered to me on freenode... :)20:00
ayoungnagyz, so...you see us discussing SAML.  It turns out there is an Apache module for SAML called mod_mellon....20:00
nagyzwhy would SAML work in my case? wouldn't I need a federated identity service first on top of LDAP for that?20:00
ayoungnagyz, no20:01
ayoungnagyz, mellon....20:01
*** mrodden1 has quit IRC20:01
*** mrodden has joined #openstack-dev20:01
ayounghttp://www.explainxkcd.com/wiki/index.php?title=1218:_Doors_of_Durin20:01
nagyzah20:01
nagyz:D20:01
ayoungYeah, someone is an even larger geek than I20:02
*** freedomhui has quit IRC20:02
*** emagana has joined #openstack-dev20:02
*** rkukura has quit IRC20:02
nagyz:)20:02
*** luisbg has quit IRC20:02
nagyzso have a good day/night, whatever it is in your timezone guys20:02
*** noslzzp has quit IRC20:03
ayoungCan't figure out how Zoltan could  be taken already.  Not like it is the most common name in a fairly tech savvy country or anything20:03
nagyztalk to you later, I think I'll come back often now that I should contribute some code too... :)20:03
ayounggnight...20:03
ayoungnagyz, that would be great20:03
nagyzfinally joined ibm-stackers a few weeks ago20:03
*** LinuxJedi_ is now known as LinuxJedi20:03
nagyzbut was busy traveling20:03
*** sarob has quit IRC20:03
nagyznight!20:04
*** nagyz has quit IRC20:04
*** luisbg has joined #openstack-dev20:04
*** luisbg has joined #openstack-dev20:04
*** nermina has joined #openstack-dev20:04
*** buzztroll has quit IRC20:04
*** RScottCoyle__ has quit IRC20:05
ayoungjoesavak, have you just converted SAML into a Bearer token?20:05
*** noslzzp has joined #openstack-dev20:05
*** sarob has joined #openstack-dev20:05
morganfainbergdolphm, stevemar, what is the .mailmap file for?  /me is confused20:05
*** radez is now known as radez_g0n320:06
dolphmmorganfainberg: contributor analytics, afaik20:06
*** buzztroll has joined #openstack-dev20:06
morganfainbergdolphm, oh.  i see.  *shrug* sure thing (noticed it is fairly... uhm... small compared to the number of contributors)20:06
ayoungmorganfainberg, https://www.kernel.org/pub/software/scm/git/docs/git-shortlog.html20:07
morganfainbergayoung, ah thanks.20:07
ayoungmorganfainberg, its for once I get fired and can't use my redhat email anymore20:07
morganfainbergayoung, LOL20:07
morganfainbergoh20:08
dolphmmorganfainberg: it effectively operates cross-project20:08
morganfainberggyee, ping.20:08
morganfainbergdolphm, sure.  just hadn't looked closely and saw someone add something to it in another commit20:08
morganfainbergdolphm, cool20:08
isdayoung: I'm working on the issue I talked to you about a few days ago. I'm having a hard time finding a reasonable way to abstract the exception conversion code; the way the arguments get converted doesn't have much of a pattern. So far the best I've come up with involves passing a lambda to the decorator, which I'm not happy with. Do you have any thoughts on the matter?20:08
stevemarmorganfainberg, i really don't know20:08
morganfainbergstevemar, ^20:08
stevemarmorganfainberg, yeah, reading now, was afk20:08
ayoungisd, give it up and spend your time doing something that makes you feel more fulfilled?20:10
*** noslzzp has quit IRC20:11
ayoungisd, might I suggest a career in piracy?20:11
ayoungYou'd make a great Dread Pirate...oh, wait, sorry, wrong movie.20:11
ayoungisd, I need more context20:11
*** athomas has quit IRC20:12
*** markmcclain has joined #openstack-dev20:12
isdayoung: https://bugs.launchpad.net/keystone/+bug/124381220:14
*** dolphm_ has joined #openstack-dev20:14
ayoungisd, how many variations are there?  Instead of a lambda, what would happen if you needed multiple decorators?20:15
*** dprince has quit IRC20:15
*** achampion has quit IRC20:16
isdayoung: 3 or 4 - two of the variants are pretty close, might be able to be done with just an extra parameter. but there are only 6 methods in the first place...20:18
*** dolphm has quit IRC20:18
*** marios has quit IRC20:19
*** marios has joined #openstack-dev20:19
ayoungisd, could it be something done in the exceptions themselves?20:19
*** dolphm_ has quit IRC20:19
*** buzztroll has quit IRC20:20
*** changbl has quit IRC20:21
*** romcheg has joined #openstack-dev20:21
*** jcoufal has quit IRC20:22
*** kmartin has quit IRC20:23
*** boden_ has quit IRC20:23
*** vkmc has joined #openstack-dev20:24
*** vkmc has quit IRC20:24
*** vkmc has joined #openstack-dev20:24
isdayoung: I don't see how; the arguments aren't passed in to the thing that generates the exception.20:25
*** rudrarugge has joined #openstack-dev20:25
*** mrodden has quit IRC20:25
*** vipul has quit IRC20:26
*** Alexei_987 has left #openstack-dev20:27
*** buzztroll has joined #openstack-dev20:27
gyeemorganfainberg, here, sorry I was afk20:27
*** vipul has joined #openstack-dev20:27
*** sarob has quit IRC20:33
*** sarob has joined #openstack-dev20:34
*** dubsquared has joined #openstack-dev20:34
*** dubsquared has quit IRC20:34
*** dubsquared has joined #openstack-dev20:34
*** matiu_ has quit IRC20:35
*** vijendar has quit IRC20:36
*** changbl has joined #openstack-dev20:36
*** dvarga has quit IRC20:37
*** kmartin has joined #openstack-dev20:37
*** ericloo has joined #openstack-dev20:37
*** sarob has quit IRC20:39
*** denis_makogon has joined #openstack-dev20:39
*** buzztroll has quit IRC20:39
*** lsmola has quit IRC20:40
*** changbl has quit IRC20:40
*** noslzzp has joined #openstack-dev20:41
ayounggyee, I like20:41
*** mrunge has joined #openstack-dev20:41
*** stevemar has quit IRC20:41
*** safchain has joined #openstack-dev20:42
ayounggyee, so mod_ssl or mod_nss, client cert, external...right?20:42
*** sarob has joined #openstack-dev20:42
*** epopt37 has quit IRC20:44
*** comay has quit IRC20:45
*** mrunge has quit IRC20:45
*** davidhadas has joined #openstack-dev20:45
*** alunduil has quit IRC20:46
*** matiu_ has joined #openstack-dev20:47
*** matiu_ has quit IRC20:47
*** matiu_ has joined #openstack-dev20:47
gyeeayoung, yes20:49
gyee1) client using two way SSL authenticate to Apache/Keystone20:50
ayounggyee, BTW  you need this: https://review.openstack.org/#/c/52732/120:50
gyee2) Apache set the SSL_* in the request environ20:50
*** lsmola has joined #openstack-dev20:50
*** otherwiseguy has joined #openstack-dev20:50
ayounggyee, we are documenting the env vars for this20:50
gyee3) Keystone middleware translate them into auth_context20:50
gyeeayoung, yes http://httpd.apache.org/docs/2.2/mod/mod_ssl.html20:51
ayounghttp://www.freeipa.org/page/Environment_Variables#X.509_Authentication20:51
ayounggyee, not just....don't forget about NSS20:51
gyeei.e map SSL_CLIENT_S_DN_CN to username20:51
gyeeOU to project20:52
gyeeO to domain20:52
gyeebut all configurable20:52
*** rongze has joined #openstack-dev20:52
gyeeSSL_CLIENT_S_DN_CN is set by Apache20:52
ayounggyee, so dchadwick thought we could using the mapping blueprint to implement20:52
gyeeayoung, sure, its all internal changes20:53
ayounggyee, and CERN is doing this kind of thing already.  I think this is the right approach20:53
gyeeayoung, yeah, I figure this is a no brainer20:54
ayounglet me address the comments and resubmit my patch on it20:54
*** isd has quit IRC20:54
*** matiu_ has quit IRC20:54
*** salv-orlando_ has joined #openstack-dev20:54
*** rkukura has joined #openstack-dev20:55
*** luhrs1 has joined #openstack-dev20:55
*** moted_ has joined #openstack-dev20:56
*** rongze has quit IRC20:56
*** lbragstad1 has joined #openstack-dev20:57
*** twoputt__ has joined #openstack-dev20:57
*** twoputt has quit IRC20:57
*** salv-orlando has quit IRC20:57
*** KurtMartin has quit IRC20:57
*** moted has quit IRC20:57
*** lbragstad has quit IRC20:57
*** salv-orlando_ is now known as salv-orlando20:57
*** moted_ is now known as moted20:57
*** che-arne has quit IRC20:57
*** KurtMartin has joined #openstack-dev20:57
*** epopt37 has joined #openstack-dev20:58
*** chandankumar has quit IRC20:58
*** chandankumar has joined #openstack-dev20:58
*** jsavak has joined #openstack-dev20:59
*** chandankumar has quit IRC21:01
*** sushils has joined #openstack-dev21:01
*** carl_baldwin has joined #openstack-dev21:01
*** chandankumar has joined #openstack-dev21:02
*** changbl has joined #openstack-dev21:02
*** mlavalle has left #openstack-dev21:02
*** joesavak has quit IRC21:02
*** gimps_ has quit IRC21:02
*** mrodden has joined #openstack-dev21:03
*** jamielennox|away is now known as jamielennox21:04
*** bswartz has quit IRC21:04
morganfainberggyee, i forgot what i was going to ask you...... i think21:04
aspierslifeless: currently fixtures.FakeLogger() allows a choice of format string, but the new handler always has a Formatter() instance. Would it make sense to allow the constructor to accept a formatter class (or instance) as a parameter, in order to be more flexible?21:04
*** willingc has quit IRC21:04
lifelessaspiers: if you need it sure, though since it's a test - the point is you're going to introspect the output - so I'm not sure why you'd want different formatters?21:05
aspierslifeless: because I just spent two hours trying to figure out where messages like "1 -> 2" come from in the nova unit tests :)21:05
lifelessaspiers: ouch21:06
aspierslifeless: if they'd been preceded by migrate.versioning.api or whatever, I'd have understood straight away21:06
aspiersin fairness, I should have guessed anyway, but hey, I'm still a newb :)21:07
*** crobertsrh is now known as _crobertsrh21:08
aspierslifeless: so I was wondering if passing in a nova.openstack.common.log.ContextFormatter might address that21:08
*** beagles has quit IRC21:08
*** thomasem has quit IRC21:08
aspiersmaybe that's overkill?21:08
lifelessaspiers: maybe ... not really for me to say21:08
lifelessfrom a Fixtures perspective i'm happy for it to be more flexible.21:09
lifelessSuggest a patch21:09
aspiersok, thanks!21:09
*** yamahata has quit IRC21:09
*** eharney has quit IRC21:09
*** mrpink has quit IRC21:09
*** yamahata has joined #openstack-dev21:09
*** comay has joined #openstack-dev21:11
*** misterpink has joined #openstack-dev21:13
*** martyntaylor has joined #openstack-dev21:13
*** beagles has joined #openstack-dev21:13
*** asalkeld_zzz is now known as asalkeld21:14
*** misterpink has quit IRC21:15
aspierslifeless: hmm actually FakeLogger(format='%(levelname)s %(name)s %(message)s') is probably good enough for now, but I'll suggest a patch to fixtures if I change my mind21:16
lifelessaspiers: ok :)21:16
*** misterpink has joined #openstack-dev21:18
*** fbo_away is now known as fbo21:19
*** jayg is now known as jayg|g0n321:22
devanandajgriffith: ping21:25
jgriffithdevananda: pong21:26
devanandajgriffith: i can shuffle my three middle slots easily21:26
devanandajgriffith: does taht help you at all?21:26
jgriffithdevananda: you mean shuffle within the block you have?21:27
jgriffithdevananda: I think we overlap arleady don't we?21:27
devanandayes, within my block on thurs21:27
devanandajgriffith: yae, our thursdays are a complete overlap21:27
jgriffithdevananda: :(21:27
devanandajgriffith: and i _only_ have thursday21:27
jgriffithdevananda: so no matter what it's a matter of me skipping a Cinder session21:28
jgriffithdevananda: but that's doable, the 5:20 thing I can't skip21:28
devanandaunless someone else swaps with one of those21:28
*** mrodden1 has joined #openstack-dev21:28
jgriffithdevananda: sounds like there's no need for you to juggle anything around any more than you already have21:28
devanandak k21:29
*** polfilm has joined #openstack-dev21:29
jgriffithdevananda: I'd like to swap my block out with neutron if possible, but not looking promising21:29
devanandajgriffith: well, let me know if there's anything else i can do21:30
*** jhesketh has joined #openstack-dev21:30
*** mrodden has quit IRC21:31
jgriffithdevananda: appreciate it!!21:31
*** buzztroll has joined #openstack-dev21:32
*** glenng has quit IRC21:33
*** dkranz has quit IRC21:34
*** kui has joined #openstack-dev21:34
*** dubsquared has quit IRC21:34
*** litong has quit IRC21:35
*** sgordon has quit IRC21:35
*** twoputt__ has quit IRC21:38
kuilifeless: I have summitted new patch for testtools,  here it is: https://github.com/testing-cabal/testtools/pull/6021:38
*** twoputt_ has quit IRC21:38
*** buzztroll has quit IRC21:38
kuilifeless: Would you review it please ?21:39
*** buzztroll has joined #openstack-dev21:39
*** jayahn has joined #openstack-dev21:39
*** buzztrol_ has joined #openstack-dev21:40
*** dubsquared has joined #openstack-dev21:41
lifelesskui: will do shortly, thanks for pinging me21:41
kuilifeless:  :)21:41
*** ruhe has joined #openstack-dev21:41
*** buzztrol_ has quit IRC21:42
*** buzztrol_ has joined #openstack-dev21:42
*** yeylon_ has joined #openstack-dev21:42
*** mriedem has quit IRC21:43
*** ruhe has quit IRC21:43
*** buzztroll has quit IRC21:43
*** martyntaylor has left #openstack-dev21:44
*** thomasem has joined #openstack-dev21:44
*** thomasem has quit IRC21:45
*** luhrs1 has quit IRC21:45
*** thomasem has joined #openstack-dev21:45
*** che-arne has joined #openstack-dev21:46
*** buzztrol_ has quit IRC21:47
*** martine_ has quit IRC21:47
*** bauzas has quit IRC21:48
*** lbragstad1 has quit IRC21:48
*** jsavak has quit IRC21:49
*** donaldh_ has joined #openstack-dev21:51
*** singhs has joined #openstack-dev21:51
*** rongze has joined #openstack-dev21:52
*** pcm_ has quit IRC21:52
*** morazi has quit IRC21:52
*** dbalog has left #openstack-dev21:53
*** anniec has joined #openstack-dev21:55
*** uaberme has joined #openstack-dev21:56
*** rongze has quit IRC21:57
*** nermina has quit IRC21:57
*** matiu has joined #openstack-dev21:57
*** topol has quit IRC21:58
*** danwent has quit IRC22:00
*** kpavel has quit IRC22:00
*** bpokorny has quit IRC22:01
*** danwent has joined #openstack-dev22:06
*** kbringard has quit IRC22:06
*** nermina has joined #openstack-dev22:06
*** thomasem has quit IRC22:08
*** burt has quit IRC22:09
*** lnxnut_ has joined #openstack-dev22:14
*** armax has left #openstack-dev22:14
*** kui has quit IRC22:14
*** galstrom is now known as galstrom_zzz22:14
dstanekjamielennox: hi22:15
*** edmund has joined #openstack-dev22:15
*** gordc has quit IRC22:16
*** rgerganov_ has joined #openstack-dev22:17
*** FunnyLookinHat has quit IRC22:17
*** lnxnut has quit IRC22:18
*** rcleere has quit IRC22:18
*** kevinconway has quit IRC22:19
*** mnaser has quit IRC22:19
*** kevinconway has joined #openstack-dev22:19
jamielennoxdstanek: im sort of around, give me 15 min22:21
*** rgerganov has quit IRC22:21
dstanekjamielennox: np22:21
*** mnaser has joined #openstack-dev22:21
morganfainbergayoung, ping22:22
jamielennoxmorganfainberg: same call as me, 15 min22:23
morganfainbergjamielennox, yeah not a rush, figured i'd run something by him before implementing it.22:24
morganfainbergjamielennox, thanks :)22:24
*** otherwiseguy has quit IRC22:25
dstanekmorganfainberg: i'm going to submit serveral reviews that begin to fix our tests22:27
morganfainbergdstanek, i shall look for them.22:27
*** beagles has quit IRC22:28
*** vladikr has quit IRC22:29
reedDaviey, do you want to be the MC for the lightning talks in Hong Kong again?22:29
*** dubsquared has quit IRC22:30
*** carl_baldwin has quit IRC22:30
*** carl_baldwin has joined #openstack-dev22:30
*** alunduil has joined #openstack-dev22:32
*** alunduil has quit IRC22:32
*** alunduil has joined #openstack-dev22:33
*** prad_ has quit IRC22:33
*** neelashah has quit IRC22:34
*** pmathews has quit IRC22:35
*** pmathews has joined #openstack-dev22:36
*** bknudson has left #openstack-dev22:38
*** SumitNaiksatam has quit IRC22:38
*** mihgen has joined #openstack-dev22:39
*** lsmola has quit IRC22:40
*** datsun180b has quit IRC22:41
*** twoputt has joined #openstack-dev22:43
*** twoputt_ has joined #openstack-dev22:43
*** dims has quit IRC22:43
morganfainbergjamielennox, are you heartset on a decorator for the cache test skip? or would the same mechanism as skip_if_no_ipv6 be sufficient? (just call self.skip_if_cache_disabled() in the test)22:44
morganfainbergjamielennox, both aren't hard to implement, the decorator is a little more indirect.22:44
*** macjack has joined #openstack-dev22:44
morganfainbergjamielennox, ah nvm, going w/ the decorator route.22:44
*** adalbas has quit IRC22:44
jamielennoxisnt ipv6 a decorator already? it should probably be22:44
morganfainbergnope22:45
morganfainbergit's called as self.skip_if_no_ipv6() within the test22:45
jamielennoxyou can do skip test without self, a decorator would be good there22:45
*** xarses has joined #openstack-dev22:45
morganfainbergjamielennox, yeah22:45
morganfainbergi just need to dig up the right exception22:46
*** jecarey has quit IRC22:49
*** donaldh_ has quit IRC22:49
*** nkinder has quit IRC22:51
*** jimfehlig has quit IRC22:51
*** rongze has joined #openstack-dev22:53
*** lnxnut_ has quit IRC22:54
*** lnxnut has joined #openstack-dev22:55
*** sumanthns has quit IRC22:55
*** bswartz has joined #openstack-dev22:55
*** dims has joined #openstack-dev22:55
jamielennoxdstanek: sorry, that went longer than i expected22:58
*** lnxnut has quit IRC22:59
*** rongze has quit IRC22:59
*** DennyZhang has joined #openstack-dev22:59
*** twoputt has quit IRC23:00
*** romcheg has left #openstack-dev23:01
*** twoputt_ has quit IRC23:01
*** sarob_ has joined #openstack-dev23:02
*** sarob_ has quit IRC23:02
*** achampion has joined #openstack-dev23:02
*** DennyZhang has quit IRC23:02
*** eglynn-bank-holi has quit IRC23:03
*** sarob_ has joined #openstack-dev23:03
*** pmathews has quit IRC23:04
*** kmartin has quit IRC23:06
*** sarob has quit IRC23:06
*** sarob_ has quit IRC23:07
*** safchain has quit IRC23:08
*** mihgen has quit IRC23:09
*** vladan has quit IRC23:09
*** carl_baldwin has quit IRC23:10
*** mihgen has joined #openstack-dev23:11
*** achampio1 has joined #openstack-dev23:12
*** vladan has joined #openstack-dev23:12
*** jvrbanac has quit IRC23:13
*** twoputt has joined #openstack-dev23:13
*** twoputt_ has joined #openstack-dev23:13
*** achampion has quit IRC23:14
*** colinmcnamara has quit IRC23:14
*** rgerganov_ has quit IRC23:14
*** colinmcnamara has joined #openstack-dev23:14
*** colinmcnamara has quit IRC23:19
*** herndon has quit IRC23:19
*** colinmcnamara has joined #openstack-dev23:22
*** colinmcnamara has quit IRC23:23
*** vkmc has quit IRC23:24
*** uaberme has quit IRC23:26
*** cyeoh_ is now known as cyeoh23:29
*** mihgen has quit IRC23:29
dstanekjamielennox: np, i was just going to tell you what i found in regards to your tests issue23:31
*** colinmcnamara has joined #openstack-dev23:31
jamielennoxdstanek: you solved it?23:31
*** rgerganov_ has joined #openstack-dev23:31
dstanekjamielennox: i don't think so, but i did identify a bunch of issues with our tests23:32
dstanekjamielennox: the biggest problem was our use of setup23:32
jamielennoxdstanek: there are a lot of issues with our tests23:32
dstanekjamielennox: i plan on fixing them all!23:32
jamielennoxthis was part of the reason to seperate things out, see if we can have a structural seperation between v3 and v223:32
jamielennoxremove all of the crap that is just not really used23:33
*** b3nt_pin has joined #openstack-dev23:33
*** colinmcnamara has quit IRC23:33
jamielennoxdstanek: if you want them you're welcome to it, it's been on my list for ages23:33
jamielennoxi even proposed a bunch of seperation ages ago, when it was much easier23:34
dstanekjamielennox: i'm also tired of the 300 second test runs :-)23:34
jamielennoxright23:34
dstanekjamielennox: this is the big one that may have been causing issues https://review.openstack.org/#/c/54210/23:34
jamielennoxdo you know what the cause is then? best i could see is that somewhere a new instance of the controller was being created23:35
dstaneki have 4 more patches to fix up that fix more stuff in the tests23:35
dstanekjamielennox: we call load_backends() several times during the course of a single test23:35
dstanekwe also load the same data serveral time during the same test23:36
jamielennoxyep, i was chasing that down23:36
jamielennoxbut to the best i could see we were at least completely overriding the old setup and i couldn't find anywhere the old reference would be called from23:36
dstanekjamielennox: so far removing some of that duplicate work took off about 10% of the total time23:36
jamielennoxwow, didn't expect that much23:36
jamielennoxhey, fixtures! you are pretty much attacking my TODO list23:37
*** kdbrierly has quit IRC23:37
jamielennoxnow to get rid of mox all together23:38
*** SergeyLukjanov is now known as _SergeyLukjanov23:38
*** _SergeyLukjanov has quit IRC23:38
*** spzala has joined #openstack-dev23:39
morganfainbergdstanek, NICE 10% savings is big23:39
morganfainbergdstanek, i'll look over your patches a bit later on, just had an emergency here i need to address :(23:40
*** edmund has quit IRC23:40
*** mrodden1 has quit IRC23:40
*** sushils has quit IRC23:41
*** jergerber has quit IRC23:42
dstanekjamielennox, morganfainberg: my runs were a little over 300 seconds before so every % helps23:42
jamielennoxdstanek: i'm not a fan of the rest.py file name, call if restful_test_case.py or something and then from import RestfulTestCase from tests/__init__23:42
dstanekmorganfainberg: np23:42
*** nati_uen_ has joined #openstack-dev23:43
*** MaxV has quit IRC23:43
*** jhesketh_ has joined #openstack-dev23:43
*** vkmc has joined #openstack-dev23:43
dstanekjamielennox: i was thinking that it may eventually into a rest package with fixtures, matches and other things related to rest tests23:43
*** MaxV has joined #openstack-dev23:44
*** jhesketh has quit IRC23:45
jamielennoxthat's an awesome start23:45
*** b3nt_pin is now known as beagles23:45
jamielennoxdstanek: out of interest do you know if you rebase my change onto those if it will run?23:46
jamielennoxi can check that, but i thought you might have tried already23:46
*** nati_ueno has quit IRC23:46
dstanekjamielennox: i have not tried, but i suspect they still may have trouble23:47
*** beagles has quit IRC23:47
*** yamahata has quit IRC23:47
dstanekjamielennox: i'm still debugging a case where the fixtures are getting run at least twice23:47
jamielennoxright, it stops 1 load_backend but i don't think it will solve the issue23:47
*** denis_makogon has quit IRC23:47
*** b3nt_pin has joined #openstack-dev23:48
*** b3nt_pin is now known as beagles23:48
*** MaxV has quit IRC23:48
*** SergeyLukjanov has joined #openstack-dev23:48
dstanekjamielennox: after i get these last few things figured out i'll try your patch23:51
*** pixelb has quit IRC23:54
*** rongze has joined #openstack-dev23:56
*** hemna is now known as hemnafk23:56
*** SumitNaiksatam has joined #openstack-dev23:57

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!