Friday, 2014-01-24

stevemardstanek, could you take a looksy at: https://review.openstack.org/#/c/67645/ when you have a chance (tomorrow is cool too)00:00
morganfainbergayoung, likely should call the provider vs. bypassing if it should.00:00
*** doug-fish has joined #openstack-dev00:00
ayoungyeah00:00
morganfainbergayoung, the pipeline...or at least a smush of provider and token api is needed badly00:01
morganfainbergthey duplicate too much functionality00:01
dstanekstevemar: sure thing - i can do it in a few minutes00:02
*** nkinder has joined #openstack-dev00:02
devoidayoung, do you know the extent of policy.json support that keystone's v2 api supports?00:02
*** jokke_ has joined #openstack-dev00:02
*** Hritcu has quit IRC00:02
morganfainbergdevoid, not really at all supported.  V2 makes explicit checks against is_admin.00:02
ayoungdevoid, that sounds like a loaded question00:03
devoidayoung, it is.00:03
ayoungmorganfainberg, that too00:03
morganfainbergdevoid, v3 is where policy.json gets used.00:03
devoidissue is keystoneclient doesn't support v300:03
morganfainbergdevoid, also note, V2 API is deprecated as of Icehouse00:03
morganfainbergdevoid, it sure does00:03
devoidand openstackclient isn't supported yet.00:03
ayoungactually, python-keystoneclient does, its the CLI that doesn't make it easy00:03
devoidayoung, yea thats what I mean00:04
ayoungactually, its more complicated than that, but I am heads down debugging00:04
morganfainbergayoung, true, the CLi isn't "pretty" for V300:04
*** doug-fish2 has joined #openstack-dev00:04
ayoungmorganfainberg, its the V2 V3 interop story that is really our problem.00:04
morganfainbergayoung, yesssssssss00:04
morganfainbergayoung, shoo, back to debugging ;)00:04
ayoungand...I posted a fix for that, but the purists siad "NOOOO!"00:05
morganfainbergayoung, ^_^00:05
jokke_;)00:05
ayounghttps://review.openstack.org/#/c/62801/00:05
devoid" $ keystone tenant-list " send a GET /v3/tenants ? Shouldn't it be GET /v3/projects ?00:05
ayoungyep00:06
morganfainbergdevoid, if it's doing that, it's a bug.00:06
morganfainbergdevoid, /v3/tenants that is00:06
*** derekh has joined #openstack-dev00:06
morganfainbergjamielennox|away, aw you're away00:07
ayoungmorganfainberg, he'll be gone until Monday night our time.00:07
morganfainbergayoung, ah00:07
*** xarses has joined #openstack-dev00:07
morganfainbergayoung, good to know00:07
ayoungMaybe I can sneak through that change before he gets back.00:08
*** doug-fish has quit IRC00:08
morganfainbergayoung, LOL00:08
ayoungdolph hates the idea too00:08
morganfainbergdstanek, i'll address your comments in the auth plugin refactor00:08
*** tqtran has joined #openstack-dev00:08
*** gokrokve has quit IRC00:08
ayoungmaybe I should go back to the earlier versions of the patch that make no attempt to solve it for anything but Keystone, and hardcode to chopping off V2.0 only00:09
*** gokrokve has joined #openstack-dev00:09
*** buzztroll has quit IRC00:09
*** bfschott has joined #openstack-dev00:09
*** tqtran1 has quit IRC00:11
*** smurugesan has quit IRC00:11
*** benrodrigue has quit IRC00:12
*** rnirmal has quit IRC00:12
morganfainbergdstanek, but i hsve a serious question... should i just write code to work around the methods= config and magic options?00:13
morganfainbergdstanek, i at least think i can do it...but i don't like it00:13
*** gokrokve has quit IRC00:13
morganfainbergi much prefer the single option00:13
*** willingc has joined #openstack-dev00:14
*** buzztroll has joined #openstack-dev00:14
morganfainbergayoung, that might not be a bad approach.00:14
morganfainbergayoung, *shrug*00:14
ayoungyeah...except that Nova and the other APIs are going to need the same logic00:14
ayoungseems unfair to keep the goodies to ourselves00:14
*** achampion has joined #openstack-dev00:15
bknudsonayoung: the other apis seem to have a different endpoint for each version already00:15
ayoungbknudson, but do they have an interop story?00:16
*** salv-orlando has quit IRC00:16
ayoungIE...they get the endpoint from the service catalog00:16
ayoungand the endpoint has the version attached to it00:16
bknudsonayoung: I don't know what their plans are00:16
ayoungwhat if some people need v1 and some need v200:16
*** salv-orlando has joined #openstack-dev00:16
ayoungCHOP ALL THE URLS!00:16
*** TravT has joined #openstack-dev00:17
dtroyerayoung: I'm working on a more general API discovery that what Jamie already has… with some hard-coded bits for legacy URLs00:17
ayoungdtroyer, and when you have that done we'll have world pieces00:17
bknudsondtroyer: in keystoneclient?00:17
ayoungdtroyer, I know, I stole the same regex that you did and from the same place00:17
ayounghe-who-must-not-be-named-in-irc00:18
dtroyerbknudson: to start, but to be pulled out with the session and httpclient eventually00:18
ayoungdtroyer, please look at that review I just posted and tell me if it is sane00:18
ayounghttps://review.openstack.org/#/c/62801/00:18
ayoungdtroyer, ^^00:18
*** sushils has joined #openstack-dev00:18
dtroyerayoung: 62801?  that's not the way I want to handle it00:18
*** spzala has quit IRC00:19
*** flaper87 is now known as flaper87|afk00:19
dtroyerI'm trying to find a way to work with and without the versions…compute and the others that bury the version before a project ID make it hard though00:19
*** marun has joined #openstack-dev00:19
dtroyerso those come later...00:19
morganfainbergdtroyer, personally i just don't like the number, i mean 62801, it's unlucky *duck*00:19
ayoungheh00:19
dtroyerthat zip code isn't too far from here...00:20
morganfainbergdtroyer, hehe00:20
dtroyeroh, well, IL, farther than I thought00:20
ayoungCentral Illinois?00:20
ayounghttp://www.city-data.com/zips/62801.html00:20
jokke_dtroyer: uuh, you're living in some first world country. Zip codes and everything ;)00:20
ayoungCentralia, IL 6280100:21
dtroyerwe're 64152...00:21
ayoungTMI00:21
devoidnot sure 52801 would fix my problem since clients would need to update.00:21
dtroyerflyover country FTW!00:21
devoid*62801, but I'll drive there tonight if we get something merged in ;)00:22
*** willingc has quit IRC00:22
*** carl_baldwin has quit IRC00:22
bknudsondevoid: the keystone CLI will continue to use the v2 api, so not sure how this helps?00:23
*** henrynash has joined #openstack-dev00:24
devoidbknudson, well atm if I deploy both the CLI won't work because of version negotiation.00:24
dtroyerit also directly affects OSC though, same problem but I'm solving it myself00:24
*** Gordonz has quit IRC00:24
bknudsondtroyer: what is the status of OSC for icehouse? I don't know what we say about how "supported" it is.00:24
bknudsonseems like packagers are not including it.00:25
devoid"OpenStackClient is considered to be alpha release quality as of the 0.2 release"00:25
dtroyerbknudson: as far as being usable, it's really good on Identity thanks to youse guys, mostly stevemar00:25
*** pmathews has quit IRC00:26
ayoungUgh...I have to change the code in controller that fetches and unpacks the token....and it gets it in a different format from the provider  than from the driver?00:26
dtroyeri release 0.3 not too long ago, I'm still not ready to say things will not change (commands, options, etc) but it'll be really close to what is there now00:26
morganfainbergayoung, yesh.  that is why i am thinking a smush of token_api and token_provider_api is almost 100% needed at this point00:26
*** anniec has quit IRC00:26
bknudsondtroyer: so one change we might want to make is have devstack use it rather than keystone...00:27
*** matsuhashi has joined #openstack-dev00:27
bknudsonany issues with that?00:27
ayoungdevoid, https://review.openstack.org/#/c/62801/ only would solve the issue for Keystone (modulo the tenant vs project bug fix) what else would you need?00:27
devoidhttps://bugs.launchpad.net/keystone/+bug/127210300:28
devoidhttps://bugs.launchpad.net/keystone/+bug/127208600:28
dstanekmorganfainberg: what do you mean by work around?00:28
dtroyerbknudson: I played with that a while back, we could probably do a lot of it now though.00:28
devoidwait that last one was not needed00:28
morganfainbergdstanek, not do [auth] plugins, just leave things as they are00:28
dtroyerit's already installed by devstack00:28
morganfainbergdstanek, do the other work (no ondemand loading etc)00:28
morganfainbergdstanek, jsut keep [auth] methods=<things> and <thing>=<class name>00:29
bknudsondtroyer: ok, sounds like you don't have any fundamental reason to not use it with devstack so we can use identity v3 for setup00:29
devoidhttps://bugs.launchpad.net/python-keystoneclient/+bug/127209700:29
*** dvarga has joined #openstack-dev00:29
morganfainbergdstanek, i can clearly see how to make it work now.  a break helps.  bknudson, ^ is it worth adding a new config option? or just... being smarter about loading the plugins etc and avoiding on-demand ick00:30
dtroyerthe only thing we may want to wait for is the discovery, then we can remove the version from devstacks auth_url00:30
dstanekmorganfainberg: why would you not want the plugins-like behavior? i'd still want the method=<things> to be able to have classes in it00:30
dtroyerand I have a working implementation of that, just needs some cleaning up00:30
bknudsonmorganfainberg: I would prefer it if we could fix the problem by not adding a new config option.00:30
morganfainbergdstanek, well, i can't determine if keystone.thing.thing is the auth method or a class name w/o a separate option00:30
morganfainbergdstanek, so, either we specify methods and have magic options per method, or we use a new option that can take class names as a list00:31
morganfainbergbknudson, i figured, thats why i was asking00:31
morganfainbergbknudson, a break from staring at it helps see what would be needed to make it work with the direction i'm trying to take the tests.00:31
dstanekmorganfainberg: can't you try the import and it it doesn't work look for a magic option?00:31
morganfainbergdstanek, no, methods= is a list of "methods" those then make magic options for the class names00:32
dstanekmorganfainberg: or "if '.' in option" checks00:32
morganfainbergdstanek, what if i wanted to call my method keystone.auth.plugins.password00:32
morganfainbergdstanek, but have that load mywacky.auth.plugin00:33
*** jergerber has quit IRC00:33
bknudsonmorganfainberg: It sounds like we're in agreement that the on-demand -> on-startup is a better option? if so might want to split that change out.00:33
dstanekmorganfainberg: can you have an option 'keystone.auth.plugins.password'?00:33
morganfainbergdstanek, i know, contrived, but i'd rather not give windows for non-determinstic behavior00:33
morganfainbergbknudson, absolutely00:33
morganfainbergbknudson, i will do that in either case.00:33
*** joesavak has quit IRC00:33
morganfainbergbknudson, i just am seeing if we want to keep the other logic at all before i make it another patchset or just drop it00:33
dstanekmorganfainberg: was there a reason it was originally written to need the dynamic options?00:34
*** dvarga has quit IRC00:34
*** anniec has joined #openstack-dev00:34
morganfainbergdstanek, i think it's because there was a desire to be able to specify the method independantly of the class00:35
*** rcleere has quit IRC00:35
morganfainbergdstanek, but looking at the token code... that wouldn't work00:35
morganfainbergbknudson, oh gah, yeah specifying something that is not the proper method for password or token would be broken it looks like00:36
morganfainbergbknudson, where method = 'token' or 'password' respetively00:36
bknudsonmorganfainberg: that's great... so each one has to be exactly what it is (including external)00:36
*** DennyZhang has quit IRC00:36
morganfainbergbknudson, external is referenced elsewhere explicitly00:36
morganfainbergbknudson, but external doesn't have the same issue00:36
bknudsonmorganfainberg: not as pluggable as it seems.00:37
morganfainbergbknudson, yep.00:37
morganfainbergbknudson, wow, just noticed that00:37
bknudsonmorganfainberg: it's going to take an entire book to explain those config options.00:37
morganfainbergbknudson, i think it already does :P00:38
bknudsonthis is why you write the docs first00:38
morganfainbergbknudson, lol00:38
*** dave_tucker is now known as dave_tucker_zzz00:39
*** markmcclain has quit IRC00:39
*** marun has quit IRC00:39
morganfainbergbknudson, i think the more i look at it, the more i think the intention was the plugins option i wrote00:39
*** mrodden has quit IRC00:39
morganfainbergbknudson, but ... i can't be 100% sure, nor do i want to break people using the system we currently have00:40
bknudsonmorganfainberg: was dstanek's suggestion that the methods= could be the list of plugins?00:40
dstanekbknudson: yeah00:40
bknudsonand if it's a plugin rather than a name then don't lookup the other option?00:40
bknudsonI like that.00:41
morganfainbergbknudson, yeah i could do that, but what if someone wants to make their method something... silly, e.g. keystone.auth.plugins.password00:41
morganfainbergbknudson, i'm ok if we say that is dumb and don't support it00:41
bknudson"that is dumb and don't support it"00:41
dstanekmorganfainberg: can you have options with . in it?00:41
morganfainbergdstanek, pretty sure you can00:41
morganfainbergdstanek, config parser is... silly flexible00:41
bknudsonyou probably can't have an option with = in it.00:42
morganfainbergbknudson, ++00:42
bknudsonso start with = ? or end with =?00:42
bknudsonalthough that would be dumb too00:42
morganfainbergbknudson, yeah00:42
morganfainbergbknudson, but you can have values with = in it00:42
*** doug-fish2 has quit IRC00:42
morganfainbergjust not keys.00:42
bknudsonright so you'd do method=keystone.auth.plugins.password=00:43
*** browne has joined #openstack-dev00:43
bknudsonagain, just a proposal, not suggesting we do that.00:43
morganfainbergbknudson, i veto that support based on the fact that i'd need to take a shower after writing it00:43
morganfainbergbknudson, i think  if the method has a '.' in it, we treat it as importable00:43
morganfainbergbknudson, otherwise we lookup the magic options00:44
morganfainbergbknudson, and i'm going to enforce that if method attribute exists on a plugin it will need to always match (like what we have) and warn if it doesn't exist.00:45
*** colinmcnamara has quit IRC00:45
morganfainbergbknudson, rather than trying to address further configurability00:45
bknudsonmorganfainberg: sounds good.00:45
morganfainbergdstanek, ^ bknudson, sound good?00:45
*** markwash has quit IRC00:46
morganfainbergbknudson, and this still provides us with good cleanup direction.00:46
dstanekmorganfainberg: i think that works00:46
dstanekCONF.register_opt(cfg.StrOpt('dumb.option'), group='auth')00:47
*** mikeoutland has quit IRC00:47
dstanekmorganfainberg: that doesn't seem to work ^00:47
morganfainbergdstanek, ok. so we're good00:47
dstanekmorganfainberg: can't access CONF.auth.dumb.option00:47
morganfainbergdstanek, i also think CONF.register_opt(cfg.StrOpt('dumb-option'), group='auth') wasn't working 100% of the time00:47
morganfainbergsince how would you reference it?00:48
morganfainbergwell getattr?00:48
dstanekmorganfainberg: the interpreter would get the value of dumb and subtract option from it00:49
morganfainbergCONF.auth.dumb-option also doesn't really work.00:49
morganfainbergyeah00:49
*** buzztroll has quit IRC00:49
bknudsonlike getattr(CONF.auth, 'dumb-option') ?00:50
morganfainbergbknudson, this also should resolve the conflict in sample.conf since i don't need to change that.00:50
morganfainbergbknudson, merge conflict00:50
*** mikeoutland has joined #openstack-dev00:50
morganfainbergbknudson, i think that is the only way... if it even works00:50
bknudsonmorganfainberg: you want me to restore my other cleanup changes?00:50
dstanekmorganfainberg: yeah you'd have to probably CONF.auth.get() to get to them00:50
morganfainbergbknudson, hm.. probably a good idea00:50
morganfainbergbknudson, i'm still based on your don't conf on import stuff though, seems like the right place to put this.00:51
*** buzztroll has joined #openstack-dev00:51
morganfainbergbknudson, maybe that'll merge soon™00:51
*** HT_Sergio has quit IRC00:51
bknudsonmorganfainberg: it's in the queue at least00:51
morganfainbergbknudson, ++00:52
bknudsongets kicked out every time it gets near the top00:52
morganfainbergbknudson, that makes me sad :(00:52
*** markwash has joined #openstack-dev00:54
*** xmltok has quit IRC00:56
*** henrynash has quit IRC00:57
*** comay has quit IRC00:57
bknudsonmorganfainberg: when I run "tox -e py27 test_auth", it fails with a weird 401 Unauth error from keystone.tests.test_v3_auth.TestAuthJSON.test_auth_with_bind_token00:58
morganfainbergbknudson, on the patchset i posted? or on master?00:58
bknudsonmorganfainberg: this is on master00:58
morganfainbergbknudson, huh, test isolation issue maybe?00:58
bknudsonmorganfainberg: it looks like the problem is essentially what you're looking at fixing here.00:59
morganfainbergbknudson, hehe fun.00:59
bknudsonmorganfainberg: because it looks like the auth plugins are not correct.00:59
morganfainbergbknudson, yeah, i'm unwinding a little mess here.00:59
bknudsonthere's no external plugin when expected.00:59
morganfainbergbknudson, *facepalm* doh!01:00
*** zaitcev has quit IRC01:01
*** mikeoutland has quit IRC01:02
*** erkrnt1 has joined #openstack-dev01:04
*** erkrnt has quit IRC01:04
*** devoid has quit IRC01:05
*** markmcclain has joined #openstack-dev01:05
*** erkrnt1 has quit IRC01:05
*** doug_shelley66 has quit IRC01:07
*** doug_shelley66 has joined #openstack-dev01:07
*** morazi has quit IRC01:07
*** TravT has quit IRC01:09
*** nelsnelson has quit IRC01:09
*** anniec has quit IRC01:11
*** fpatwa has joined #openstack-dev01:15
*** fpatwa has joined #openstack-dev01:16
*** dstanek is now known as dstanekafk01:16
*** anniec has joined #openstack-dev01:16
*** krotscheck has quit IRC01:17
*** mszilagyi has quit IRC01:17
*** alex_xu has joined #openstack-dev01:17
*** dstanekafk has quit IRC01:17
*** tkay has quit IRC01:18
*** fpatwa has quit IRC01:20
*** xarses has quit IRC01:21
*** anniec has quit IRC01:21
*** radez_g0n3 has quit IRC01:22
*** bhargav has quit IRC01:22
*** sthaha has joined #openstack-dev01:25
*** salv-orlando has quit IRC01:26
*** tqtran has quit IRC01:26
*** tkay has joined #openstack-dev01:26
*** JordanRinke has quit IRC01:27
*** xuhanp has joined #openstack-dev01:27
*** salv-orlando has joined #openstack-dev01:27
*** JordanRinke has joined #openstack-dev01:27
*** ChanServ changes topic to "OpenStack development || Support is in #openstack"01:28
*** mgagne has quit IRC01:29
*** mgagne1 has joined #openstack-dev01:29
*** mgagne1 has joined #openstack-dev01:29
*** alop has quit IRC01:29
*** giroro_ has joined #openstack-dev01:31
*** blamar_ has joined #openstack-dev01:31
*** mrodden has joined #openstack-dev01:32
*** RajeshMohan has quit IRC01:32
*** Ruetobas has quit IRC01:32
*** RajeshMohan has joined #openstack-dev01:33
*** novas0x2a|laptop has quit IRC01:33
*** beagles has quit IRC01:33
*** morganfainberg has quit IRC01:33
*** morganfainberg has joined #openstack-dev01:33
*** b3nt_pin has joined #openstack-dev01:33
*** blamar has quit IRC01:34
*** blamar_ is now known as blamar01:34
*** networkstatic has joined #openstack-dev01:35
*** tkay has quit IRC01:35
*** nosnos has joined #openstack-dev01:35
*** bdpayne has quit IRC01:36
*** anniec has joined #openstack-dev01:36
*** derekh has quit IRC01:38
*** carlp has quit IRC01:40
*** ArxCruz has quit IRC01:41
*** kushal has quit IRC01:41
*** jhesketh has quit IRC01:41
*** jhesketh has joined #openstack-dev01:41
*** morganfainberg is now known as morganfainberg|z01:43
*** epim has quit IRC01:50
*** sweston has joined #openstack-dev01:53
*** xingchao has joined #openstack-dev01:53
*** sweston has quit IRC01:53
*** sweston has joined #openstack-dev01:55
*** galstrom_zzz is now known as galstrom01:57
*** jcooley_ has joined #openstack-dev01:57
*** neelashah1 has joined #openstack-dev02:00
*** jcooley_ has quit IRC02:00
*** jcooley_ has joined #openstack-dev02:02
*** asalkeld has quit IRC02:03
*** xarses has joined #openstack-dev02:03
*** ramishra has joined #openstack-dev02:04
*** neelashah1 has quit IRC02:04
*** neelashah has joined #openstack-dev02:05
*** radez_g0n3 has joined #openstack-dev02:07
*** obondarev has quit IRC02:09
*** DynamiteXXL has quit IRC02:10
*** obondarev has joined #openstack-dev02:10
*** jasondotstar has quit IRC02:11
*** radez_g0n3 has quit IRC02:11
*** radez_g0n3 has joined #openstack-dev02:13
*** erkrnt has joined #openstack-dev02:14
*** jp_at_hp has quit IRC02:16
*** jcooley_ has quit IRC02:17
*** browne has quit IRC02:18
*** jcooley_ has joined #openstack-dev02:18
*** anniec has quit IRC02:18
*** jcooley_ has quit IRC02:19
*** theanalyst has quit IRC02:22
*** ytwu has joined #openstack-dev02:22
*** tdruiva has joined #openstack-dev02:22
*** cnesa has quit IRC02:24
*** spzala has joined #openstack-dev02:24
*** ytwu1 has quit IRC02:25
*** anniec has joined #openstack-dev02:26
*** markwash has quit IRC02:26
*** SumitNaiksatam has quit IRC02:27
*** Mandell has quit IRC02:28
*** eharney has quit IRC02:30
*** _cjones_ has quit IRC02:30
*** lbragstad has joined #openstack-dev02:30
*** praneshp has quit IRC02:30
*** asalkeld has joined #openstack-dev02:31
*** xuhanp has quit IRC02:33
*** glenng has quit IRC02:34
stevemarbknudson, ping02:35
bknudsonstevemar: what's up?02:35
*** jcooley_ has joined #openstack-dev02:35
*** dstanek has joined #openstack-dev02:35
stevemarbknudson, just wanted to give you a heads up that i'm playing with devstack and osc now02:35
bknudsonstevemar: I was going to ask you about https://review.openstack.org/#/c/64955/02:35
bknudsonstevemar: ok, I'll take it off my list.02:36
stevemarbknudson, working on replacing all the calls to keystoneclient02:36
bknudsonstevemar: easy?02:36
dstanekstevemar: just added another comment on that last review02:36
stevemarbknudson, mehh... it's acting funny02:36
bknudsonstevemar: I haven't looked at it much... can you create a kind of translation function or something...02:37
bknudsonlike create_user xxx xxx02:37
*** fpatwa has joined #openstack-dev02:37
bknudsoncalls either "keytone user-create" or "openstack create user"02:37
stevemarbknudson, it's easy enough to just replace them out-right02:37
stevemarbknudson, it's for the initial setup part of keystone, that makes calls with ADMIN token to create the endpoints and service that is causing some problems02:38
*** ramishra has quit IRC02:38
bknudsonstevemar: because of OSC limitation or V3?02:39
*** angdraug has quit IRC02:39
stevemarbknudson, not sure yet, when i said 'playing' earlier, it's only been about 20 minutes :)02:39
lbragstadayoung: ping?02:40
bknudsonstevemar: https://review.openstack.org/#/c/64955/ -- was wondering if you could take a quick look at that.02:40
stevemarbknudson, lookin02:41
*** ramishra has joined #openstack-dev02:42
*** eharney has joined #openstack-dev02:43
*** pablosan has quit IRC02:43
*** browne has joined #openstack-dev02:43
stevemarbknudson, looks good, as you said, needs a test and a bug though02:44
*** markmcclain has quit IRC02:44
*** ramishra has quit IRC02:44
bknudsonstevemar: ok. I wasn't sure what the effect would be... might be obvious when I try to write or update a test.02:44
*** ramishra_ has joined #openstack-dev02:44
stevemarbknudson, but yeah, definitely correct to use the ref, like you said, normalize_dict isn't being used atm02:45
*** galstrom is now known as galstrom_zzz02:45
*** epim has joined #openstack-dev02:46
*** ramishra_ has quit IRC02:46
*** ramishra has joined #openstack-dev02:46
*** xuhanp has joined #openstack-dev02:47
*** erkules_ has joined #openstack-dev02:49
*** jcooley_ has quit IRC02:49
*** emagana has quit IRC02:51
*** erkules has quit IRC02:51
*** ramishra has quit IRC02:52
*** yamahata has quit IRC02:52
*** sweston has quit IRC02:52
*** ramishra has joined #openstack-dev02:53
*** sweston has joined #openstack-dev02:55
*** SumitNaiksatam has joined #openstack-dev02:56
*** alop has joined #openstack-dev02:57
*** sweston_ has joined #openstack-dev02:57
*** dstufft has quit IRC02:58
ayounglbragstad, I'm headed to get dinner and then home...something quick?02:58
lbragstadayoung: oh, np. just wanted to give you a heads up. The notifications stuff for trusts merged,02:59
*** ramishra has quit IRC02:59
*** dstufft has joined #openstack-dev02:59
*** epim has quit IRC02:59
*** thomasem has joined #openstack-dev02:59
ayounglbragstad, thanks.  I'll rebase.  Let me see if my other deps are in02:59
lbragstadso, you should be able to pick up those changes and switch it to include the namespace for the trust extension02:59
*** sweston has quit IRC02:59
*** praneshp has joined #openstack-dev02:59
ayoungOh For f-!@#$%^&* sake03:00
ayounghttps://review.openstack.org/#/c/68233/03:00
lbragstad:) ?03:00
ayoungnothing quite like waiting 2 days for a gate job that fails on a transient error03:00
lbragstadayoung: I've seen that one a lot03:00
ayoungreverify...03:01
lbragstaddo you have the bug number?03:01
ayounglooking03:01
* lbragstad is digging in the rechecks page03:02
*** dstufft_ has joined #openstack-dev03:02
*** markmcclain has joined #openstack-dev03:02
ayounghttps://code.launchpad.net/bugs/126598903:02
ayoungpretty sure03:02
ayoungor Bug 1266094: check_grenade_dsvm failed - aggregates tests failed03:03
*** gokrokve has joined #openstack-dev03:03
*** thomasem has quit IRC03:03
lbragstadayoung: https://bugs.launchpad.net/grenade/+bug/125900303:03
lbragstad^ ?03:03
ayoungmaybe03:04
*** sweston_ has quit IRC03:04
*** markmcclain has quit IRC03:04
*** sweston has joined #openstack-dev03:04
ayoung[ERROR] /opt/stack/new/devstack/exercises/volumes.sh:162 Volume ex-vol-9180a712 not created03:04
ayounglooks like it03:04
*** alop has quit IRC03:05
*** dstufft has quit IRC03:05
*** armax has quit IRC03:05
lbragstad/opt/stack/new/devstack/exercises/volumes.sh:162:die03:05
ayoungdie die die03:07
ayoungOK...food.  Tis late here.03:07
*** markmcclain has joined #openstack-dev03:07
lbragstadayoung: sounds good03:07
*** ayoung is now known as ayoung-omnomnom03:07
*** sweston has quit IRC03:08
*** jasdeepH has joined #openstack-dev03:09
*** dstufft_ is now known as dstufft03:10
*** sweston has joined #openstack-dev03:10
*** ramishra has joined #openstack-dev03:11
*** praneshp has quit IRC03:11
*** matsuhashi has quit IRC03:14
*** melwitt has quit IRC03:15
*** jasdeepH has quit IRC03:15
*** ramishra has quit IRC03:16
*** galstrom_zzz is now known as galstrom03:17
*** ramishra has joined #openstack-dev03:18
*** galstrom is now known as galstrom_zzz03:19
*** galstrom_zzz is now known as galstrom03:19
*** fpatwa has quit IRC03:21
*** ramishra has quit IRC03:22
*** ramishra_ has joined #openstack-dev03:22
*** doug_shelley66 has quit IRC03:22
*** xchu has joined #openstack-dev03:25
lbragstadbknudson: ping?03:25
*** sweston has quit IRC03:25
lbragstadbknudson: why wouldn't you want to raise an error if you're adding a user to a project and the user doesn't exist? https://review.openstack.org/#/c/54647/9/keystone/tests/test_backend.py03:25
*** sweston has joined #openstack-dev03:26
*** mriedem has quit IRC03:27
*** topshare has joined #openstack-dev03:27
*** ramishra_ has quit IRC03:29
*** carl_baldwin has joined #openstack-dev03:30
*** jokke__ has joined #openstack-dev03:31
*** paragan has joined #openstack-dev03:32
*** sweston_ has joined #openstack-dev03:32
*** erkules_ is now known as erkules03:32
*** clayb has quit IRC03:33
*** sballe has quit IRC03:33
*** ramishra has joined #openstack-dev03:33
*** sballe has joined #openstack-dev03:34
*** jokke_ has quit IRC03:34
*** sweston has quit IRC03:35
*** xuhanp has quit IRC03:36
*** oubiwann has quit IRC03:37
*** praneshp has joined #openstack-dev03:38
*** sweston has joined #openstack-dev03:38
*** salv-orlando has quit IRC03:40
*** ramishra_ has joined #openstack-dev03:40
*** ramishra has quit IRC03:41
*** sweston_ has quit IRC03:41
*** comay has joined #openstack-dev03:42
*** ramishra has joined #openstack-dev03:42
*** ramishra_ has quit IRC03:42
*** aditirav has joined #openstack-dev03:44
*** yaguang has joined #openstack-dev03:45
*** ramishra has quit IRC03:46
*** ramishra_ has joined #openstack-dev03:46
*** galstrom is now known as galstrom_zzz03:47
*** thuc_ has joined #openstack-dev03:49
*** praneshp has quit IRC03:49
*** bfschott has quit IRC03:49
*** ramishra_ has quit IRC03:51
*** ramishra has joined #openstack-dev03:51
*** buzztroll has quit IRC03:53
*** xuhanp has joined #openstack-dev03:53
*** ramishra has quit IRC03:54
*** ramishra_ has joined #openstack-dev03:54
*** sballe has quit IRC03:56
bknudsonlbragstad: we do want to but we can't, because it's not guaranteed that there's a user in the identity backend.04:00
lbragstadahh04:01
*** ramishra_ has quit IRC04:01
*** pmathews has joined #openstack-dev04:01
*** alop has joined #openstack-dev04:02
*** spzala has quit IRC04:03
*** eharney has quit IRC04:03
*** ramishra has joined #openstack-dev04:08
*** carl_baldwin has quit IRC04:09
*** gokrokve has quit IRC04:09
*** gokrokve has joined #openstack-dev04:09
*** carl_baldwin has joined #openstack-dev04:11
*** carl_baldwin has quit IRC04:12
*** jcooley_ has joined #openstack-dev04:13
*** jcooley_ has quit IRC04:13
*** asalkeld has quit IRC04:13
*** carl_baldwin has joined #openstack-dev04:13
*** alop has quit IRC04:13
*** topshare has quit IRC04:13
*** gokrokve has quit IRC04:13
*** jcooley_ has joined #openstack-dev04:13
*** Nikolay_St has joined #openstack-dev04:13
*** rraja has joined #openstack-dev04:15
*** gokrokve has joined #openstack-dev04:16
*** anniec has quit IRC04:17
*** taps has quit IRC04:17
*** harlowja is now known as harlowja_away04:19
*** pmathews has quit IRC04:20
*** jasdeepH has joined #openstack-dev04:20
*** jasdeepH has quit IRC04:20
*** gyee has quit IRC04:20
*** sweston has quit IRC04:20
*** anniec has joined #openstack-dev04:22
*** sweston has joined #openstack-dev04:22
*** rcleere has joined #openstack-dev04:25
*** asalkeld has joined #openstack-dev04:26
*** aditirav has quit IRC04:28
*** ramishra_ has joined #openstack-dev04:29
*** ramishra has quit IRC04:29
*** anniec has quit IRC04:29
*** aditirav has joined #openstack-dev04:29
*** sweston has quit IRC04:29
*** sweston has joined #openstack-dev04:30
*** ramishra_ has quit IRC04:34
*** ramishra has joined #openstack-dev04:34
*** pmyers has left #openstack-dev04:34
*** pmyers has joined #openstack-dev04:35
*** browne has quit IRC04:35
*** changbl has joined #openstack-dev04:35
*** sweston_ has joined #openstack-dev04:36
*** pmathews has joined #openstack-dev04:36
*** faramir has joined #openstack-dev04:38
*** matsuhashi has joined #openstack-dev04:39
*** alex_klimov has joined #openstack-dev04:39
*** sweston has quit IRC04:40
*** markmcclain has quit IRC04:40
*** alex_klimov has quit IRC04:40
*** bdpayne has joined #openstack-dev04:43
*** sumanthns has joined #openstack-dev04:45
*** ramishra has quit IRC04:45
*** ramishra has joined #openstack-dev04:46
*** fpatwa has joined #openstack-dev04:48
*** arnaud__ has quit IRC04:48
*** arnaud has quit IRC04:48
*** rods has quit IRC04:51
*** edmund1 has quit IRC04:51
*** tkay has joined #openstack-dev04:52
*** fpatwa has quit IRC04:52
*** coolsvap has joined #openstack-dev04:59
*** rods has joined #openstack-dev05:00
*** neoXsys has quit IRC05:01
*** Mandell has joined #openstack-dev05:01
*** yamahata has joined #openstack-dev05:02
*** ramishra has quit IRC05:02
*** alop has joined #openstack-dev05:02
*** mikeoutland has joined #openstack-dev05:05
*** tkay has quit IRC05:07
*** alop has quit IRC05:07
*** ramishra has joined #openstack-dev05:08
*** sweston_ has quit IRC05:08
*** fpatwa has joined #openstack-dev05:08
*** tkay has joined #openstack-dev05:09
*** mrodden1 has joined #openstack-dev05:12
*** mrodden has quit IRC05:12
*** sweston has joined #openstack-dev05:14
*** sweston_ has joined #openstack-dev05:17
*** ramishra has quit IRC05:17
*** ramishra has joined #openstack-dev05:17
*** vkozhukalov has joined #openstack-dev05:18
*** doug_shelley66 has joined #openstack-dev05:19
*** sweston has quit IRC05:20
*** jecarey has quit IRC05:22
*** SergeyLukjanov_ is now known as SergeyLukjanov05:22
*** yamahata has quit IRC05:23
*** yamahata has joined #openstack-dev05:23
*** doug_shelley66 has quit IRC05:24
*** tkay has quit IRC05:24
*** mikeoutland has quit IRC05:26
*** rdas has joined #openstack-dev05:27
*** tkay has joined #openstack-dev05:34
*** aeperezt has quit IRC05:35
*** topshare has joined #openstack-dev05:36
*** grapsus_1 has joined #openstack-dev05:36
*** shadower_ has joined #openstack-dev05:36
*** ala_ has quit IRC05:36
*** grapsus__ has quit IRC05:36
*** shadower has quit IRC05:36
*** dosaboy has quit IRC05:36
*** ala_ has joined #openstack-dev05:36
*** ogelbukh has quit IRC05:36
*** max_lobur_afk has quit IRC05:36
*** lari_ has quit IRC05:36
*** lari_ has joined #openstack-dev05:36
*** dosaboy has joined #openstack-dev05:37
*** sumansn_ has joined #openstack-dev05:37
*** ogelbukh has joined #openstack-dev05:37
*** max_lobur_afk has joined #openstack-dev05:37
*** ramishra has quit IRC05:38
*** ramishra_ has joined #openstack-dev05:38
*** sumanthns has quit IRC05:39
*** fpatwa has quit IRC05:39
*** ramishra_ has quit IRC05:42
*** ramishra has joined #openstack-dev05:42
*** csd_ has joined #openstack-dev05:42
*** ramishra has quit IRC05:46
*** ramishra_ has joined #openstack-dev05:46
*** gokrokve has quit IRC05:47
*** rohitk has joined #openstack-dev05:47
*** gokrokve has joined #openstack-dev05:48
*** tkay has quit IRC05:48
*** yamahata has quit IRC05:50
*** yamahata has joined #openstack-dev05:50
*** mikeoutland has joined #openstack-dev05:51
*** amotoki_zzz is now known as amotoki05:51
*** thuc_ has quit IRC05:51
*** thuc has joined #openstack-dev05:52
*** gokrokve has quit IRC05:53
*** ramishra_ has quit IRC05:53
*** ramishra has joined #openstack-dev05:55
*** thuc has quit IRC05:56
*** nshaikh has joined #openstack-dev05:57
*** ig1 has joined #openstack-dev05:59
*** ig has quit IRC05:59
*** ramishra has quit IRC06:00
*** Hritcu has joined #openstack-dev06:00
*** ramishra has joined #openstack-dev06:00
*** mikeoutland has quit IRC06:01
*** sweston has joined #openstack-dev06:02
*** alop has joined #openstack-dev06:03
*** topshare has quit IRC06:03
*** mrda is now known as mrda_away06:03
*** praneshp has joined #openstack-dev06:04
*** carl_baldwin has quit IRC06:04
*** Hritcu has quit IRC06:04
*** sweston_ has quit IRC06:06
*** otherwiseguy has quit IRC06:06
*** stevemar has quit IRC06:06
*** sweston has quit IRC06:08
*** yeylon_ has joined #openstack-dev06:08
*** sweston has joined #openstack-dev06:08
*** sweston has quit IRC06:08
*** alop has quit IRC06:13
*** jcooley_ has quit IRC06:13
*** Sumeniac2 has joined #openstack-dev06:13
*** Sumeniac has quit IRC06:14
*** praneshp_ has joined #openstack-dev06:14
*** gokrokve has joined #openstack-dev06:14
*** csaba|afk is now known as csaba06:16
*** praneshp has quit IRC06:17
*** praneshp_ is now known as praneshp06:17
*** Hritcu has joined #openstack-dev06:21
*** anniec has joined #openstack-dev06:22
*** mikeoutland has joined #openstack-dev06:25
*** anniec_ has joined #openstack-dev06:25
*** sthaha has quit IRC06:26
*** anniec has quit IRC06:27
*** anniec_ is now known as anniec06:27
*** SergeyLukjanov is now known as SergeyLukjanov_06:29
*** buzztroll has joined #openstack-dev06:32
*** ramishra_ has joined #openstack-dev06:33
*** amcrn has quit IRC06:34
*** otherwiseguy has joined #openstack-dev06:34
*** fpatwa has joined #openstack-dev06:34
*** rraja has quit IRC06:34
*** ramishra has quit IRC06:36
*** neeti has joined #openstack-dev06:38
*** fpatwa has quit IRC06:38
*** alex_klimov has joined #openstack-dev06:39
*** yamahata has quit IRC06:40
*** ctracey has quit IRC06:40
*** mikeoutland has quit IRC06:41
*** otherwiseguy has quit IRC06:43
*** rraja has joined #openstack-dev06:46
*** bdpayne has quit IRC06:49
*** tkay has joined #openstack-dev06:50
*** csd_ has quit IRC06:52
*** ramishra_ has quit IRC06:52
*** ramishra has joined #openstack-dev06:52
*** vkozhukalov has quit IRC06:55
*** yamahata has joined #openstack-dev06:56
*** buzztroll has quit IRC06:58
*** rods has quit IRC07:01
*** odyssey4me has joined #openstack-dev07:01
*** erkrnt has quit IRC07:02
*** jprovazn_ has joined #openstack-dev07:04
*** ramishra_ has joined #openstack-dev07:07
*** ramishra_ has quit IRC07:07
*** jcooley_ has joined #openstack-dev07:07
*** yolanda_ has joined #openstack-dev07:08
*** YorikSar has quit IRC07:08
*** ramishra has quit IRC07:08
*** sumansn__ has joined #openstack-dev07:08
*** pschaef has joined #openstack-dev07:09
*** sumansn_ has quit IRC07:10
*** alop has joined #openstack-dev07:10
*** garyk has quit IRC07:11
*** jcooley_ has quit IRC07:12
*** jcooley_ has joined #openstack-dev07:14
*** marios|gone is now known as marios07:14
*** NikitaKonovalov_ is now known as NikitaKonovalov07:16
*** alop has quit IRC07:16
*** DinaBelova_ is now known as DinaBelova07:18
*** ctracey has joined #openstack-dev07:18
*** jcooley_ has quit IRC07:18
*** Drankis has joined #openstack-dev07:19
*** ramishra has joined #openstack-dev07:20
*** pmathews has quit IRC07:21
*** SergeyLukjanov_ is now known as SergeyLukjanov07:22
*** ramishra has quit IRC07:26
*** ramishra has joined #openstack-dev07:26
*** fpatwa has joined #openstack-dev07:27
*** eharney has joined #openstack-dev07:27
*** mrunge has joined #openstack-dev07:28
*** ramishra has quit IRC07:28
*** ramishra_ has joined #openstack-dev07:28
*** ramishra_ has quit IRC07:31
*** ramishra has joined #openstack-dev07:31
*** fpatwa has quit IRC07:32
*** ramishra has quit IRC07:32
*** ramishra has joined #openstack-dev07:32
*** afazekas has joined #openstack-dev07:32
*** tkay has quit IRC07:33
*** csaba is now known as csaba|afk07:33
*** rraja has quit IRC07:34
*** lsmola_ has joined #openstack-dev07:35
*** Nikolay_St has quit IRC07:38
*** ramishra_ has joined #openstack-dev07:38
*** SergeyLukjanov is now known as SergeyLukjanov_a07:39
*** ramishra has quit IRC07:39
*** SergeyLukjanov_a is now known as SergeyLukjanov_07:40
*** matsuhashi has quit IRC07:42
*** nosnos has quit IRC07:43
*** dstanek has quit IRC07:44
*** YorikSar has joined #openstack-dev07:46
*** ramishra has joined #openstack-dev07:48
*** anniec has quit IRC07:48
*** ramishra_ has quit IRC07:49
*** s2r2_ has joined #openstack-dev07:49
*** SergeyLukjanov_ is now known as SergeyLukjanov07:49
*** tkay has joined #openstack-dev07:51
*** vartom1111111115 has joined #openstack-dev07:55
*** ramishra_ has joined #openstack-dev07:56
*** ramishra has quit IRC07:57
*** tkay has quit IRC07:57
*** ramishra has joined #openstack-dev08:00
*** sergmelikyan has quit IRC08:00
*** ramishra_ has quit IRC08:00
*** bauzas has joined #openstack-dev08:01
*** jcooley_ has joined #openstack-dev08:02
*** mancdaz_away is now known as mancdaz08:02
*** topshare has joined #openstack-dev08:02
*** dkuffner has joined #openstack-dev08:02
*** topshare has quit IRC08:02
*** topshare has joined #openstack-dev08:03
*** buzztroll has joined #openstack-dev08:04
*** romcheg has joined #openstack-dev08:04
*** florentflament has joined #openstack-dev08:05
*** jcoufal has joined #openstack-dev08:05
*** MaxV has joined #openstack-dev08:05
*** gokrokve has quit IRC08:08
*** buzztroll has quit IRC08:08
*** gokrokve has joined #openstack-dev08:08
*** buzztroll has joined #openstack-dev08:09
*** ramishra has quit IRC08:10
*** ramishra_ has joined #openstack-dev08:10
*** e0ne has joined #openstack-dev08:11
*** gokrokve has quit IRC08:12
*** xgsa has joined #openstack-dev08:13
*** alop has joined #openstack-dev08:13
*** buzztroll has quit IRC08:13
*** topshare has quit IRC08:15
*** ramishra_ has quit IRC08:15
*** ramishra has joined #openstack-dev08:15
*** flaper87|afk is now known as flaper8708:15
*** fbo is now known as fbo_away08:18
*** ramishra has quit IRC08:18
*** ramishra_ has joined #openstack-dev08:18
*** jtomasek has joined #openstack-dev08:18
*** alop has quit IRC08:18
*** topshare has joined #openstack-dev08:20
*** fpatwa has joined #openstack-dev08:21
*** ramishra_ has quit IRC08:22
*** ramishra has joined #openstack-dev08:22
*** mancdaz is now known as mancdaz_away08:22
*** rushiagr has quit IRC08:23
*** fpatwa has quit IRC08:26
*** giulivo has joined #openstack-dev08:26
*** vkozhukalov has joined #openstack-dev08:27
*** xqueralt has joined #openstack-dev08:27
*** MaxV has quit IRC08:28
*** rushiagr has joined #openstack-dev08:32
*** ig1 has quit IRC08:32
*** Nikolay_St has joined #openstack-dev08:32
*** ramishra has quit IRC08:33
*** ramishra has joined #openstack-dev08:35
*** jcooley_ has quit IRC08:36
*** nacim has joined #openstack-dev08:38
*** Apsu has quit IRC08:39
*** ifarkas has joined #openstack-dev08:40
*** jistr has joined #openstack-dev08:40
*** cyeoh has quit IRC08:41
*** ramishra_ has joined #openstack-dev08:42
*** ramishra has quit IRC08:42
*** Apsu has joined #openstack-dev08:42
*** cyeoh has joined #openstack-dev08:42
*** ramishra has joined #openstack-dev08:44
*** djoreilly has joined #openstack-dev08:47
*** ramishra_ has quit IRC08:48
*** ramishr__ has joined #openstack-dev08:48
*** ygbo has joined #openstack-dev08:48
*** claxton has joined #openstack-dev08:50
*** teran has joined #openstack-dev08:50
*** ramishra has quit IRC08:51
*** teran_ has quit IRC08:52
praneshpanyone ol?08:53
praneshpI have a question about havana08:53
*** corXi has joined #openstack-dev08:53
praneshpthey seem to do network and disk alloc in parallel, is there a way to set it back to the legacy method?08:53
*** JordanP has joined #openstack-dev08:54
*** yassine has joined #openstack-dev08:54
*** henrynash has joined #openstack-dev08:55
*** fbo_away is now known as fbo08:59
*** xga has joined #openstack-dev08:59
*** mancdaz_away is now known as mancdaz08:59
*** ramishr__ has quit IRC09:00
*** teran_ has joined #openstack-dev09:00
*** ramishra has joined #openstack-dev09:01
*** jpich has joined #openstack-dev09:02
*** yassine has quit IRC09:03
*** yassine has joined #openstack-dev09:03
*** yassine has quit IRC09:04
*** teran has quit IRC09:04
*** yassine has joined #openstack-dev09:04
*** MaxV has joined #openstack-dev09:05
*** yassine has quit IRC09:05
*** yassine has joined #openstack-dev09:06
*** ndipanov_gone is now known as ndipanov09:06
*** yassine has quit IRC09:06
*** ramishra_ has joined #openstack-dev09:06
*** eharney has quit IRC09:07
*** yassine has joined #openstack-dev09:07
*** ramishra has quit IRC09:07
*** yassine has quit IRC09:07
*** eharney has joined #openstack-dev09:08
*** yassine has joined #openstack-dev09:08
*** yassine has quit IRC09:09
*** yassine has joined #openstack-dev09:10
*** yassine has quit IRC09:12
*** Nikolay_St has quit IRC09:12
*** yassine has joined #openstack-dev09:12
*** ramishra_ has quit IRC09:12
*** I159 has joined #openstack-dev09:13
*** eharney has quit IRC09:14
*** Nikolay_St has joined #openstack-dev09:14
*** MaxV has quit IRC09:14
*** alop has joined #openstack-dev09:14
*** fpatwa has joined #openstack-dev09:15
*** safchain has joined #openstack-dev09:16
*** MaxV has joined #openstack-dev09:17
*** yassine has quit IRC09:17
*** yassine has joined #openstack-dev09:17
*** teran_ has quit IRC09:20
*** alop has quit IRC09:20
*** teran has joined #openstack-dev09:20
*** fpatwa has quit IRC09:20
*** eglynn has joined #openstack-dev09:21
*** neoXsys has joined #openstack-dev09:21
*** JordanP has quit IRC09:22
*** jcooley_ has joined #openstack-dev09:26
*** derekh has joined #openstack-dev09:27
*** sahid has joined #openstack-dev09:28
*** jcooley_ has quit IRC09:28
*** jcooley_ has joined #openstack-dev09:29
*** julienvey has joined #openstack-dev09:29
*** shardy_afk is now known as shardy09:31
*** SergeyLukjanov is now known as SergeyLukjanov_a09:31
*** athomas has quit IRC09:32
*** SergeyLukjanov_a is now known as SergeyLukjanov_09:32
*** yassine has quit IRC09:33
*** yassine has joined #openstack-dev09:33
*** jcooley_ has quit IRC09:35
*** danpb has joined #openstack-dev09:35
*** JordanP has joined #openstack-dev09:37
*** yassine has quit IRC09:37
*** yassine has joined #openstack-dev09:38
*** paragan has quit IRC09:39
*** yassine has quit IRC09:39
*** yassine has joined #openstack-dev09:40
*** neoXsys has quit IRC09:41
*** tdruiva has quit IRC09:42
*** rraja has joined #openstack-dev09:42
*** yassine has quit IRC09:42
*** DinaBelova is now known as DinaBelova_09:42
*** yassine has joined #openstack-dev09:42
*** mmagr has joined #openstack-dev09:43
*** sushils has quit IRC09:47
*** salv-orlando has joined #openstack-dev09:49
*** neoXsys has joined #openstack-dev09:53
*** johnthetubaguy has joined #openstack-dev09:55
*** mkerrin has joined #openstack-dev09:55
*** krast has quit IRC09:55
*** chandankumar_ has quit IRC09:56
*** aditirav_ has joined #openstack-dev09:58
*** athomas has joined #openstack-dev09:58
*** aditirav__ has joined #openstack-dev09:58
*** BobBallAway is now known as BobBall09:59
*** jasondotstar has joined #openstack-dev10:01
*** aditirav has quit IRC10:01
*** aditirav__ is now known as aditirav10:01
*** belmoreira has joined #openstack-dev10:01
*** aditirav_ has quit IRC10:02
*** xchu has quit IRC10:03
*** redhat has quit IRC10:05
*** redhat has joined #openstack-dev10:06
*** martyntaylor has joined #openstack-dev10:06
*** marekd|away is now known as marekd10:08
*** DinaBelova_ is now known as DinaBelova10:10
*** fpatwa has joined #openstack-dev10:10
*** ramishra has joined #openstack-dev10:10
*** max_lobur_afk is now known as max_lobur10:11
*** AMike has quit IRC10:11
*** bvandenh has joined #openstack-dev10:12
*** kolesovdv has joined #openstack-dev10:13
*** aditirav has quit IRC10:13
*** fpatwa has quit IRC10:14
*** aditirav has joined #openstack-dev10:15
*** alop has joined #openstack-dev10:16
*** akrivoka has joined #openstack-dev10:18
*** jcooley_ has joined #openstack-dev10:20
*** ijw has quit IRC10:22
*** iartarisi has joined #openstack-dev10:24
*** jcooley_ has quit IRC10:25
*** alop has quit IRC10:25
*** EmilienM has quit IRC10:32
*** EmilienM has joined #openstack-dev10:32
*** claxton has quit IRC10:32
*** sushils has joined #openstack-dev10:35
*** asalkeld has quit IRC10:38
*** praneshp has quit IRC10:41
*** feleouet has joined #openstack-dev10:50
*** xuhanp has quit IRC10:50
*** DinaBelova is now known as DinaBelova_10:54
*** s2r2_ has quit IRC10:55
*** s2r2_ has joined #openstack-dev10:55
*** fbo has quit IRC10:55
*** dachary has quit IRC10:55
*** fbo has joined #openstack-dev10:55
*** teran has quit IRC10:56
*** dachary has joined #openstack-dev10:57
*** neoXsys has quit IRC10:59
*** mindpixel has joined #openstack-dev11:02
*** claxton has joined #openstack-dev11:02
*** jokke__ has quit IRC11:04
*** neoXsys has joined #openstack-dev11:04
*** fpatwa has joined #openstack-dev11:04
*** jokke_ has joined #openstack-dev11:05
*** fpatwa has quit IRC11:08
*** yaguang has quit IRC11:13
*** jcooley_ has joined #openstack-dev11:15
*** neoXsys has quit IRC11:15
*** pcm_ has joined #openstack-dev11:18
*** jcooley_ has quit IRC11:19
*** pcm_ has quit IRC11:19
*** ramishra has quit IRC11:20
*** ramishra_ has joined #openstack-dev11:20
*** pcm_ has joined #openstack-dev11:20
*** alop has joined #openstack-dev11:23
*** ramishra has joined #openstack-dev11:23
*** ramishra_ has quit IRC11:25
*** ArxCruz has joined #openstack-dev11:26
*** ita_ has joined #openstack-dev11:26
*** jp_at_hp has joined #openstack-dev11:27
*** lucasagomes has joined #openstack-dev11:27
*** alop has quit IRC11:28
*** lucasagomes has quit IRC11:28
*** lucasagomes has joined #openstack-dev11:28
*** teran has joined #openstack-dev11:33
*** teran has quit IRC11:33
*** teran has joined #openstack-dev11:33
*** yamahata has quit IRC11:33
*** doug_shelley66 has joined #openstack-dev11:38
*** uaberme has joined #openstack-dev11:40
*** jasondotstar has quit IRC11:40
*** akrivoka has quit IRC11:41
*** rfolco has joined #openstack-dev11:41
*** Nikolay_St has quit IRC11:42
*** sirushti has quit IRC11:43
*** Nikolay_St has joined #openstack-dev11:43
*** ramishra has quit IRC11:44
*** ramishra has joined #openstack-dev11:45
*** sirushti has joined #openstack-dev11:45
*** pavol has joined #openstack-dev11:47
*** ramishra has quit IRC11:47
*** ramishra has joined #openstack-dev11:48
*** Nikolay_St has quit IRC11:48
*** _ruhe is now known as ruhe11:49
*** NikitaKonovalov is now known as NikitaKonovalov_11:49
*** tdruiva has joined #openstack-dev11:51
tellesnobregahenrynash: hi, in this new policy.json can i get the project_id from the user object?11:53
*** coolsvap_away has joined #openstack-dev11:54
*** pschaef has quit IRC11:55
*** coolsvap has quit IRC11:55
*** Nikolay_St has joined #openstack-dev11:55
*** dkuffner has quit IRC11:58
*** coolsvap_away has quit IRC11:58
*** MaxV has quit IRC12:01
*** dave_tucker_zzz is now known as dave_tucker12:01
*** Erethon has joined #openstack-dev12:01
*** uaberme has quit IRC12:04
*** fpatwa has joined #openstack-dev12:05
*** claxton has quit IRC12:05
henrynashtellesnobrega: well, that depends…which project_id do you mean?  do you mean the default project id?12:05
henrynashtellesnobrega: remember, nowadays there isn't really a relationship between a user and a project other than the fact that they might have some number of roles (or group roles) on it12:06
*** pixelb has joined #openstack-dev12:06
tellesnobregahenrynash: i'm trying to create a project_admin rule, and i would like to have it deleting a user (from the project that it is admin), this is just for testing, but when i create a rule "identity:delete_user": "rule:admin_required and project_id:%(target.user.project_id)s", i always get a forbidden output12:08
*** e0ne has quit IRC12:08
*** jcooley_ has joined #openstack-dev12:09
*** e0ne has joined #openstack-dev12:09
*** dave_tucker is now known as dave_tucker_zzz12:10
*** ramishra_ has joined #openstack-dev12:10
*** tdruiva has quit IRC12:11
henrynashtellesnobrega: so I think you misunderstanding the relationship between a user and project.  Once upon a time there was a concept of adding/removing users from a project.  That's really gone now (although the old api is still supported).  What you have now is assigning a role for a user on a project (and being able to remove that role)12:11
*** tdruiva has joined #openstack-dev12:11
*** fpatwa has quit IRC12:12
henrynashtellesnobrega: so there is no one-to-one relationship you can check when removing a user….they mat have many roles on many different projects12:12
*** tdruiva has quit IRC12:12
*** tdruiva_ has joined #openstack-dev12:12
*** jruzicka has joined #openstack-dev12:12
tellesnobregahenrynash: i see, so the operations that a project_admin should have are only around assigning and removing roles to a user on its project12:13
tellesnobrega??12:13
henrynashtellesnobrega: yes12:13
*** dkuffner has joined #openstack-dev12:13
*** ramishra has quit IRC12:13
henrynashtellesnobrega: the only thing there is for a user is an optional "default_project_id" - which does actually give them any role - just is a shortcut for authentication that if you don't give a project id as a scoping, then it will auto scope to the default project id12:14
henrynashtellesnobrega: i.e. the token you get will be auto scoped to the default project id12:14
*** akrivoka has joined #openstack-dev12:15
henrynashtellesnobrega: default_project_id is available to check on the user object, but I don't think it's what you want12:15
*** claxton has joined #openstack-dev12:18
*** jcooley_ has quit IRC12:18
*** FunnyLookinHat has joined #openstack-dev12:21
*** cnesa has joined #openstack-dev12:22
*** claxton has quit IRC12:22
*** rods has joined #openstack-dev12:23
*** Nikolay_St has quit IRC12:24
*** alop has joined #openstack-dev12:24
tellesnobregahenrynash: thanks. This rule service_role: "role:service" what is the point of this, just to separate the services from "normal" users?12:28
*** alop has quit IRC12:28
*** ramishra_ has quit IRC12:29
henrynashtellesnobrega: yes, I think so12:29
*** feleouet has quit IRC12:30
*** matrohon has quit IRC12:30
*** chandankumar_ has joined #openstack-dev12:31
*** MaxV has joined #openstack-dev12:31
*** theanalyst has joined #openstack-dev12:34
*** chandankumar_ has quit IRC12:34
*** demontiesantos has joined #openstack-dev12:35
*** dave_tucker_zzz is now known as dave_tucker12:35
*** markmc has joined #openstack-dev12:36
*** colinmcnamara has joined #openstack-dev12:36
*** MaxV has quit IRC12:36
*** fpatwa has joined #openstack-dev12:40
*** fpatwa has joined #openstack-dev12:40
*** dave_tucker is now known as dave_tucker_zzz12:41
*** gmurphy has left #openstack-dev12:44
flaper87sdague: around ?12:45
*** fpatwa has quit IRC12:45
*** rohitk has quit IRC12:46
sdagueflaper87: yep12:46
flaper87sdague: https://review.openstack.org/#/c/68629/ I found a bug in the last change I submitted re glance stores. Also, I think there's something wrong with iniset_multiline. I'll dig more into that and fix in a follow-up patch12:46
*** I159 has quit IRC12:46
*** diakunchikov has quit IRC12:46
*** diakunchikov has joined #openstack-dev12:46
sdagueflaper87: ok, cool12:47
flaper87sdague: I was wondering if you could take a look there today. that patch is blocking the work on the "remove the default stores" glance12:47
flaper87sdague: sorry for pinging for reviews12:47
flaper87:(12:47
*** I159 has joined #openstack-dev12:47
flaper87sdague: thanks :)12:47
sdagueflaper87: yeh, no prob, fixes like that I'm happy to have12:48
*** Drankis has quit IRC12:49
flaper87sdague: cool12:49
flaper87sdague: Also, I wanted to know if you had any suggestion as to how dig more into this issue http://logs.openstack.org/99/65499/4/check/gate-glance-python26/f18865b/console.html12:49
flaper87I set up a local ubuntu precise hoping to replicate the same environment12:50
flaper87but I can't replicate the issue12:50
*** artom has joined #openstack-dev12:50
flaper87and the issue is kinda weird because it complains about trying to create a table with TINYINT whatsoever but the step failing shouldn't be creating  any table. Furthermore, the migration is to add a BigInt field12:51
flaper87anyway, if you've any suggestion it would be nice, otherwise I'll figure that out myself12:51
flaper87it would be really cool if I could get access to the vm running the job12:52
*** xga_ has joined #openstack-dev12:54
*** mrunge has quit IRC12:54
*** grapsus_1 has quit IRC12:55
*** networkstatic has quit IRC12:55
*** networkstatic has joined #openstack-dev12:55
sdagueflaper87: you have boolean columns?12:55
*** achampion has quit IRC12:55
*** networkstatic has quit IRC12:56
sdagueTINYINT is typically what gets used for booleans12:56
*** NikitaKonovalov_ is now known as NikitaKonovalov12:56
flaper87sdague: yup, that I know, however, it should fail at the very biginning of the test :/12:56
*** sgordon has joined #openstack-dev12:58
sdagueflaper87: yeh, I don't know. I don't know that much about the glance internals. And because it's still nose you can't do the run until fail thing12:59
flaper87sdague: kk, np! I'll figure it out12:59
*** DinaBelova_ is now known as DinaBelova13:00
*** SergeyLukjanov_ is now known as SergeyLukjanov13:01
*** matrohon has joined #openstack-dev13:01
*** feleouet has joined #openstack-dev13:01
*** SergeyLukjanov is now known as SergeyLukjanov_13:02
*** SergeyLukjanov_ is now known as SergeyLukjanov13:03
*** jcooley_ has joined #openstack-dev13:04
*** aspiers has quit IRC13:05
*** MaxV has joined #openstack-dev13:05
*** NikitaKonovalov is now known as NikitaKonovalov_13:06
*** NikitaKonovalov_ is now known as NikitaKonovalov13:06
*** eglynn is now known as eglynn-lunch13:07
*** ruhe is now known as _ruhe13:07
*** jcooley_ has quit IRC13:08
*** sumansn__ has quit IRC13:09
*** dave_tucker_zzz is now known as dave_tucker13:09
*** vartom1111111116 has joined #openstack-dev13:09
*** prad has joined #openstack-dev13:10
*** xga_ has quit IRC13:11
*** SergeyLukjanov is now known as SergeyLukjanov_13:11
*** utlemming has quit IRC13:11
*** vartom1111111115 has quit IRC13:13
*** vartom1111111116 has quit IRC13:16
*** mugsie has quit IRC13:17
*** _ruhe is now known as ruhe13:18
*** mugsie has joined #openstack-dev13:19
*** johnthetubaguy1 has joined #openstack-dev13:21
*** johnthetubaguy has quit IRC13:21
*** utlemming has joined #openstack-dev13:23
*** NikitaKonovalov is now known as NikitaKonovalov_13:23
*** SergeyLukjanov_ is now known as SergeyLukjanov13:24
*** vladikr has joined #openstack-dev13:25
*** alop has joined #openstack-dev13:25
*** sweston has joined #openstack-dev13:26
*** NikitaKonovalov_ is now known as NikitaKonovalov13:26
*** sweston has quit IRC13:26
*** jdob has joined #openstack-dev13:27
*** ayoung has joined #openstack-dev13:28
*** kbrierly has quit IRC13:30
*** alop has quit IRC13:30
*** ijw has joined #openstack-dev13:32
*** jasondotstar has joined #openstack-dev13:32
*** thomasem has joined #openstack-dev13:33
*** theanalyst has quit IRC13:34
*** mindpixel has quit IRC13:34
*** mfink has quit IRC13:39
*** thomasem_ has joined #openstack-dev13:41
*** aditirav has quit IRC13:42
*** ArxCruz has quit IRC13:42
*** ArxCruz has joined #openstack-dev13:42
*** dhellmann has quit IRC13:42
*** alaski has quit IRC13:43
*** westmaas has quit IRC13:43
*** medberry has quit IRC13:43
*** _0x44 has quit IRC13:43
*** tdruiva_ has quit IRC13:43
*** nrs_ has quit IRC13:43
*** jeremyb has quit IRC13:43
*** iamben_tw has quit IRC13:43
*** davidlenwell has quit IRC13:43
*** _cerberus_ has quit IRC13:43
*** dolphm has quit IRC13:43
*** davidlenwell has joined #openstack-dev13:43
*** haneef_ has quit IRC13:43
*** faulteh has quit IRC13:43
*** belliott has quit IRC13:43
*** hdd has quit IRC13:43
*** blamar has quit IRC13:43
*** shane-wang_away has quit IRC13:43
*** soren has quit IRC13:43
*** thomasem has quit IRC13:44
*** BillStokes has quit IRC13:44
*** lexano has quit IRC13:44
*** Samos123 has quit IRC13:44
*** MarkAtwood_ has joined #openstack-dev13:44
*** mkollaro has joined #openstack-dev13:44
*** hughsaunders has quit IRC13:44
*** comstud has quit IRC13:44
*** andreaf has joined #openstack-dev13:44
*** MarkAtwood has quit IRC13:44
*** rfolco has quit IRC13:44
*** yamahata_ has quit IRC13:44
*** haneef_ has joined #openstack-dev13:44
*** alaski has joined #openstack-dev13:44
*** doug_shelley66 has quit IRC13:44
*** westmaas has joined #openstack-dev13:45
*** _0x44 has joined #openstack-dev13:45
*** BStokes has quit IRC13:45
*** abramley has quit IRC13:45
*** jeremyb has joined #openstack-dev13:45
*** rushiagr has quit IRC13:45
*** rektide has quit IRC13:45
*** soren has joined #openstack-dev13:45
*** iamben_tw has joined #openstack-dev13:45
*** soren has quit IRC13:45
*** soren has joined #openstack-dev13:45
*** anderstj has quit IRC13:45
*** asselin has quit IRC13:45
*** rektide has joined #openstack-dev13:45
*** harlowja_away has quit IRC13:45
*** muehsi has quit IRC13:46
*** doug-fish has joined #openstack-dev13:46
*** asadoughi has quit IRC13:46
*** swaT30 has quit IRC13:46
*** tdruiva has joined #openstack-dev13:46
*** anderstj has joined #openstack-dev13:46
*** Lumiere has quit IRC13:46
*** doug_shelley66 has joined #openstack-dev13:46
*** AnilV4 has quit IRC13:47
*** RajeshMohan has quit IRC13:47
*** Tross1 has joined #openstack-dev13:47
*** Tross has quit IRC13:47
*** blamar has joined #openstack-dev13:47
*** _cerberus_ has joined #openstack-dev13:47
*** jtomasek has quit IRC13:47
*** RajeshMohan has joined #openstack-dev13:48
*** utlemming has quit IRC13:48
*** aspiers has joined #openstack-dev13:48
*** hughsaunders has joined #openstack-dev13:48
*** thouveng has quit IRC13:49
*** swaT30 has joined #openstack-dev13:49
*** belliott has joined #openstack-dev13:49
*** BillStokes has joined #openstack-dev13:49
*** achampion has joined #openstack-dev13:49
*** dhellmann has joined #openstack-dev13:49
*** dolphm has joined #openstack-dev13:49
*** utlemming has joined #openstack-dev13:50
*** yamahata_ has joined #openstack-dev13:50
*** asselin has joined #openstack-dev13:50
*** faulteh has joined #openstack-dev13:50
*** Lumiere has joined #openstack-dev13:50
*** gilliard has quit IRC13:50
*** rushiagr has joined #openstack-dev13:50
*** abramley has joined #openstack-dev13:50
*** gilliard has joined #openstack-dev13:50
*** BStokes has joined #openstack-dev13:50
*** DinaBelova is now known as DinaBelova_13:50
*** mmagr has quit IRC13:51
*** comstud has joined #openstack-dev13:51
*** redhat has quit IRC13:51
*** mmagr has joined #openstack-dev13:51
*** nrs_ has joined #openstack-dev13:52
*** yeylon_ has quit IRC13:52
*** DinaBelova_ is now known as DinaBelova13:52
*** bswartz has quit IRC13:52
*** haomaiwang has quit IRC13:53
*** haomaiwang has joined #openstack-dev13:53
*** thuc has joined #openstack-dev13:54
*** eglynn-lunch is now known as eglynn-really-lu13:55
*** gongysh has joined #openstack-dev13:55
*** mfink has joined #openstack-dev13:55
*** rfolco has joined #openstack-dev13:56
*** gsamfira has joined #openstack-dev13:56
*** hdd has joined #openstack-dev13:56
*** haomaiwa_ has joined #openstack-dev13:57
*** eglynn-really-lu is now known as eglynn13:57
*** lexano has joined #openstack-dev13:57
*** xchu has joined #openstack-dev13:57
*** rkukura has left #openstack-dev13:57
*** jcooley_ has joined #openstack-dev13:58
*** morazi has joined #openstack-dev13:58
*** haomaiwang has quit IRC13:59
*** AnilV4 has joined #openstack-dev13:59
*** mfer has joined #openstack-dev14:00
*** jtomasek has joined #openstack-dev14:00
*** utlemming has quit IRC14:00
*** lbragstad has quit IRC14:01
*** jcooley_ has quit IRC14:02
*** dims has quit IRC14:02
zigottx: I got problems running the olso.rootwrap unit tests.14:03
zigoI get:     from oslo.rootwrap import cmd14:03
zigoImportError: No module named rootwrap14:03
zigoFull dump here:14:04
*** utlemming has joined #openstack-dev14:04
*** rkukura has joined #openstack-dev14:04
zigohttp://paste.debian.net/78141/14:04
zigottx: Could you help?14:04
*** xga has quit IRC14:05
*** benrodrigue has joined #openstack-dev14:05
*** dims has joined #openstack-dev14:05
*** changbl has quit IRC14:06
*** kevinconway has joined #openstack-dev14:06
*** SergeyLukjanov is now known as SergeyLukjanov_14:07
*** morazi has quit IRC14:07
*** eharney has joined #openstack-dev14:07
*** morazi has joined #openstack-dev14:08
*** jayg|g0n3 is now known as jayg14:08
*** galstrom_zzz is now known as galstrom14:08
*** SergeyLukjanov_ is now known as SergeyLukjanov14:09
*** galstrom is now known as galstrom_zzz14:10
*** rdas has quit IRC14:11
*** theanalyst has joined #openstack-dev14:11
*** nmagnezi has joined #openstack-dev14:12
*** muehsi has joined #openstack-dev14:13
*** glenng has joined #openstack-dev14:14
*** akrivoka has quit IRC14:14
*** akrivoka has joined #openstack-dev14:15
*** kbrierly has joined #openstack-dev14:16
*** johnthetubaguy1 is now known as johnthetubaguy14:17
*** JuanMO_ has joined #openstack-dev14:18
*** JordanP has quit IRC14:18
*** b3nt_pin is now known as beagles14:18
ttxzigo: o/14:18
zigoHi! :)14:18
zigottx: Any idea why I can't make the unit test to work? :)14:19
*** jdurgin has quit IRC14:19
ttxzigo: yes, that would be that missing __init__.py file14:19
ttxThe fix is in the git repo already14:19
ttxjust haven't cut a new release yet14:19
zigottx: Oh ok, which tag?14:19
ttxI need to clean up the doc first14:19
*** mriedem has joined #openstack-dev14:19
*** haralambiev has joined #openstack-dev14:20
ttxbecause doc says you should not use the lib and go through the binary... while in the end we just had the binaries (entrey points) shipped in cinder/nova and those using the lib14:20
zigottx: I can cherry-pick the fix, and upload that first ...14:20
*** ita_ is now known as silent-night14:20
*** milki has quit IRC14:20
*** haralambiev has left #openstack-dev14:21
*** sballe has joined #openstack-dev14:21
*** xqueralt has quit IRC14:21
ttxzigo: with http://git.openstack.org/cgit/openstack/oslo.rootwrap/commit/?id=4c499d366429f68ff29c7a2f93553b06f3697405 that should just work14:21
zigoThanks a lot! :)14:21
zigooh, indeed, easy inough! :)14:22
zigoenough14:22
*** xqueralt has joined #openstack-dev14:22
ttxzigo: also don't feel like you need to install oslo-rootwrap binary or the etc/ stuff. Those should disappear in 1.114:22
zigoWell, I just do what setup.py does.14:22
zigoIf later it removes it, fine for me! :)14:23
ttxzigo: short story: I thought we would migrate all *-rootwrap to use oslo-rootwrap, but that crates an upgrade nightmare downstream14:23
*** krish has joined #openstack-dev14:23
ttxit's way more simpler to keep the *-rootwrap and have them use the lib14:23
ttxthat way the upgrade is seamless14:24
*** JordanP has joined #openstack-dev14:24
zigoOh ok.14:24
ttxso that's what we recently did for nova and cinder14:24
*** READ10 has joined #openstack-dev14:24
ttxthey keep the entrey point, config file, filter definition... we just have the common code reused in oslo.rootwrap14:24
ttxNow I just need to align the doc to that way of using it :)14:25
zigoOk.14:25
*** mjfork has quit IRC14:25
*** nmagnezi has quit IRC14:25
*** mjfork has joined #openstack-dev14:26
*** browne has joined #openstack-dev14:27
*** faramir has quit IRC14:27
*** dprince has joined #openstack-dev14:28
*** radez_g0n3 is now known as radez14:28
*** Erethon has left #openstack-dev14:29
*** rods1 has joined #openstack-dev14:29
*** demontiesantos has quit IRC14:29
*** jecarey has joined #openstack-dev14:29
*** rods has quit IRC14:30
*** krish has quit IRC14:31
*** thuc has quit IRC14:31
*** kris_h has joined #openstack-dev14:31
*** thuc has joined #openstack-dev14:32
*** jdurgin has joined #openstack-dev14:33
*** gongysh has quit IRC14:34
*** vrovachev has quit IRC14:34
*** lbragstad has joined #openstack-dev14:34
*** vrovachev has joined #openstack-dev14:35
*** dvarga has joined #openstack-dev14:36
*** thuc has quit IRC14:36
*** I159 has quit IRC14:37
*** kris_h is now known as krish14:37
*** krish is now known as kris14:38
*** I159 has joined #openstack-dev14:38
*** kris is now known as kkh14:38
*** kkh has left #openstack-dev14:38
*** milki has joined #openstack-dev14:39
*** demontiesantos has joined #openstack-dev14:40
*** dbalog has joined #openstack-dev14:40
*** SergeyLukjanov is now known as SergeyLukjanov_14:41
ayoungMismatchError: 'OS-TRUST:trust' is not 'OS-TRUST:trust'  What?14:41
*** SergeyLukjanov_ is now known as SergeyLukjanov14:41
henrynashdolphm: thanks for fixing up the filtering patch…did some sneak in ahead due to the re-verify maybe?14:41
ayounghenrynash, doesn't matter.   Never gone merge14:42
dolphmayoung: unicode / string?14:42
ayoungNothing is ever going to merge ever again14:42
dolphmhenrynash: of course - i left a comment pointing to a minor conflict with one of brant's patches14:43
ayoungdolphm, no clue...14:43
dolphmayoung: idps and mapping merged over night14:43
*** nkinder has quit IRC14:43
ayoungdolphm, mirage14:43
henrynashdolphm: thx14:43
*** burt1 has joined #openstack-dev14:43
*** peristeri has joined #openstack-dev14:43
*** armax has joined #openstack-dev14:44
*** FunnyLookinHat has quit IRC14:47
*** galstrom_zzz is now known as galstrom14:50
*** SergeyLukjanov is now known as SergeyLukjanov_14:51
*** jcooley_ has joined #openstack-dev14:52
*** sahid has quit IRC14:53
*** bswartz has joined #openstack-dev14:53
*** jpomero has joined #openstack-dev14:54
*** ppetit has joined #openstack-dev14:55
*** sahid has joined #openstack-dev14:56
*** redhat has joined #openstack-dev14:56
*** jcooley_ has quit IRC14:57
*** odyssey4me has quit IRC14:59
*** Gordonz has joined #openstack-dev14:59
*** Gordonz has quit IRC15:01
*** Gordonz has joined #openstack-dev15:01
*** dstanek has joined #openstack-dev15:01
*** Gordonz has quit IRC15:01
*** artom has quit IRC15:01
*** toabctl has quit IRC15:02
*** xga has joined #openstack-dev15:03
*** alexpilotti has joined #openstack-dev15:03
*** artom has joined #openstack-dev15:03
*** vijendar has joined #openstack-dev15:04
*** toabctl has joined #openstack-dev15:04
*** xchu has quit IRC15:04
*** toabctl has quit IRC15:05
*** toabctl has joined #openstack-dev15:05
*** alex_klimov has quit IRC15:05
*** aeperezt has joined #openstack-dev15:05
*** neeti has quit IRC15:05
*** neeti has joined #openstack-dev15:06
*** Nikolay_St has joined #openstack-dev15:07
*** neeti has quit IRC15:07
*** jgrimm has joined #openstack-dev15:08
*** tdruiva has quit IRC15:08
*** mgagne1 has quit IRC15:09
*** otherwiseguy has joined #openstack-dev15:09
*** fpatwa has joined #openstack-dev15:10
*** mgagne has joined #openstack-dev15:10
*** CaptTofu has joined #openstack-dev15:11
*** fpatwa has quit IRC15:11
*** fpatwa has joined #openstack-dev15:11
*** vijendar has quit IRC15:11
*** vartom1111111116 has joined #openstack-dev15:12
*** terrylhowe has joined #openstack-dev15:12
*** akrivoka has quit IRC15:12
*** akrivoka has joined #openstack-dev15:13
*** dvarga_ has joined #openstack-dev15:15
*** carlp has joined #openstack-dev15:15
*** ron-slc_ has quit IRC15:15
*** dvarga has quit IRC15:16
*** fpatwa has quit IRC15:16
*** stevemar has joined #openstack-dev15:18
*** tongli has joined #openstack-dev15:18
*** SergeyLukjanov_ is now known as SergeyLukjanov15:19
*** cmyster has joined #openstack-dev15:20
*** jgrimm has quit IRC15:22
*** clayb has joined #openstack-dev15:23
*** tmclaugh[work] has joined #openstack-dev15:25
*** alop has joined #openstack-dev15:27
bknudsondolphm: I'm going to rebase 56333 "build auth context from middleware" ... failing to merge.15:31
dolphmbknudson: thanks -- ping me when there's a new patchset?15:31
*** xingchao has quit IRC15:31
*** nkinder has joined #openstack-dev15:31
*** FunnyLookinHat has joined #openstack-dev15:31
dolphmayoung: i love your keystone-core shortcut ... i'm going to abuse that a lot and i'm sorry15:33
ayoungThat is why we cleared out the list15:33
*** jgrimm has joined #openstack-dev15:34
bknudsondolphm: https://review.openstack.org/#/c/56333/ is up15:35
bknudsongyee: ^15:35
*** alop has quit IRC15:35
dstanekdolphm: ayoung: what's the keystone-core shortcut?15:36
ayoungdstanek, when doing a review, add review keystone-core15:36
ayoungreviewer15:36
dolphmdstanek: in gerrit, instead of adding individual reviewers to a review, you can add entire groups15:36
*** jlabocki has quit IRC15:36
dstanekah, that's nifty15:36
dolphmdstanek: thankfully the openstack-cla group is somehow excluded ;)15:36
ayoung there is also a keystone-ptl group, which is just dolphm15:36
*** lucasagomes is now known as lucas-hungry15:37
*** vartom1111111116 has quit IRC15:37
stevemarthat is very handy..15:37
*** tdruiva has joined #openstack-dev15:38
*** dvarga_ has quit IRC15:40
*** dvarga has joined #openstack-dev15:40
*** rossella_s has quit IRC15:40
bknudsondstanek: we need to wait for jenkins to pass before approving.15:41
dstanekbknudson: did i just go that again?15:41
bknudsonhttps://review.openstack.org/#/c/43257/15:41
bknudsondstanek: oh, it did pass.15:41
bknudsonI saw dolphm's comment on path set 55.15:41
dstanekbknudson: :-) i wrote a greasemonkey script to warn me of such offenses... i'm still debugging it, but i thought maybe it wasn't working15:42
dolphmbknudson: jenkins +1'd15:42
*** vkozhukalov has quit IRC15:43
*** ihrachys has quit IRC15:44
*** dhouck_ has joined #openstack-dev15:44
*** jeremyb has quit IRC15:44
*** jeremyb has joined #openstack-dev15:44
*** AlexF_ has joined #openstack-dev15:44
*** afazekas has quit IRC15:45
dstanekis port 35357 meant to be SSL protected?15:46
*** asadoughi has joined #openstack-dev15:46
*** jcooley_ has joined #openstack-dev15:46
stevemardstanek, you will forever question all approvals now15:46
*** galstrom is now known as galstrom_zzz15:47
*** tdruiva has quit IRC15:47
dstanekstevemar: after the hackathon i already do :-)  that's why i wrote the plugin15:47
*** alop has joined #openstack-dev15:49
*** redhat has quit IRC15:50
*** jcooley_ has quit IRC15:51
*** galstrom_zzz is now known as galstrom15:51
*** matrohon has quit IRC15:53
ayoungdolphm,    something is wrong with the matcher code  from assertIs.   OSTRUSTtrust   works fine, but   MismatchError: 'OS-TRUST-trust' is not 'OS-TRUST-trust'      MismatchError: 'OSTRUST:trust' is not 'OSTRUST:trust'15:54
*** jergerber has joined #openstack-dev15:54
*** jergerber has quit IRC15:55
dstanekayoung: do you want assertIs or assertEqual?15:55
*** jergerber has joined #openstack-dev15:55
ayoungdstanek, I didn't write the test15:55
ayoungshould be assertEqual  though15:55
*** colinmcnamara has quit IRC15:55
*** grapsus_ has joined #openstack-dev15:55
lbragstaddstanek: assertIs is for object comparison right?15:56
dolphmboth should be "OS-TRUST:trust" anyway15:56
*** alop has quit IRC15:56
dolphmayoung: i'm guessing they're it's unicode vs string though15:56
ayoungnope15:56
ayoungboth string15:56
dolphms/they're//15:56
ayounglooked in the debugger15:57
*** henrynash has quit IRC15:57
ayoungthe two string are identical,  I think it is doing an object identity comparison that is failing15:57
dstaneklbragstad: i would assume it's identity like 'is'; rather than equality15:57
dolphmayoung: of what object? how do i reproduce?15:57
*** kolesovdv has quit IRC15:57
*** oubiwann has joined #openstack-dev15:57
ayoungdolphm, I'll post the patch to github.  1 sec15:57
dolphmlbragstad: object *identity* comparison15:58
*** martyntaylor has left #openstack-dev15:58
*** ramishra has joined #openstack-dev15:58
dolphmayoung: i don't want the whole patch, i want a snippet to demonstrate the bug15:58
*** dshulyak has quit IRC15:58
dolphmayoung: boil it down :)15:58
therveayoung, Python caches small strings, so sometimes "is" works15:59
therveBut you shouldn't rely on it of course15:59
dstanekdolphm: did you see my port ? above?15:59
bknudsondstanek: everything should be ssl protected15:59
bknudsonhow do you trust your data wasn't tampered with?15:59
ayounghttps://github.com/admiyo/keystone/commit/c579c3b84c96a20ebd9606de4e76bb1b000b31fe15:59
dstaneksomeone made an interesting http/https workaround for client discovery https://review.openstack.org/#/c/67474/1/keystoneclient/generic/client.py15:59
*** henrynash has joined #openstack-dev15:59
ayoungdolphm, ^^ see the changes in16:00
*** colinmcnamara has joined #openstack-dev16:00
*** beagles is now known as beagles_brb16:00
ayoungkeystone.trust.core.py16:00
ayoungand16:00
*** NikitaKonovalov is now known as NikitaKonovalov_16:00
ayoungkeystonet.test/test_notifications16:00
*** giroro_ has quit IRC16:01
*** gokrokve has joined #openstack-dev16:01
ayoungtherve, that sounds like what I am seeing.  Is it a length thing?  I thought it might have to do with the embedded chararcters16:01
therveayoung, Both, maybe?16:01
*** changbl has joined #openstack-dev16:02
dolphmdstanek: why insecure=True?16:02
*** emagana has joined #openstack-dev16:02
ayoungdolphm, changing to assertEqual fixes the test.  I think assertIs is the wrong semantics for _assertLastNotify16:02
dolphmdstanek: your port?16:03
*** Ruetobas has joined #openstack-dev16:03
*** jcooley_ has joined #openstack-dev16:03
ayoungstevemar, any reason to use assertIs vs assertEqual in test_notifications.py   _assertLastNotify?  Looks like it succeeds due to luck, not design16:04
dstanekdolphm: insecure=True i think will not verify the cert... and i'm pretty sure that's one of the deperecated args16:04
*** jcooley_ has quit IRC16:05
*** alop has joined #openstack-dev16:05
lbragstadstevemar: https://github.com/openstack/keystone/blob/master/keystone/tests/test_notifications.py#L181-L18516:05
*** redhat has joined #openstack-dev16:05
*** emagana has quit IRC16:05
dolphmayoung: https://review.openstack.org/#/c/68947/16:05
*** jcooley_ has joined #openstack-dev16:05
*** jmontemayor has joined #openstack-dev16:05
ayoungdolphm, that is fine..I'm already in an unrebaseable scenario, what is one more patch.16:06
dolphmdstanek: yeah, i don't see why it's jumping to True without the user explicitly specifying --insecure16:06
*** coolsvap has joined #openstack-dev16:06
*** ramishra has quit IRC16:06
*** gordc has joined #openstack-dev16:07
*** pablosan has joined #openstack-dev16:07
dolphmayoung: you can make the same change in your own patch, and by the time your patch lands, it won't be a change anymore16:07
*** ramishra has joined #openstack-dev16:07
*** benrodrigue has quit IRC16:07
ayoung ++16:07
dolphm#ultralazy16:07
*** tdruiva has joined #openstack-dev16:07
*** dolphm is now known as dolphm_food16:07
*** Ruetobas has quit IRC16:08
*** yamahata has joined #openstack-dev16:08
*** AlexF_ has quit IRC16:09
*** artom has quit IRC16:10
*** jcooley_ has quit IRC16:10
*** benrodrigue has joined #openstack-dev16:11
*** xgsa has quit IRC16:11
*** Nikolay_St has quit IRC16:11
*** jcooley_ has joined #openstack-dev16:12
*** ifarkas has quit IRC16:13
*** Ruetobas has joined #openstack-dev16:13
ayoung git for-each-ref --sort=-committerdate refs/heads/16:14
ayoungsort git branches by date16:14
*** kushal has joined #openstack-dev16:14
*** alexpilotti_ has joined #openstack-dev16:14
*** willingc has joined #openstack-dev16:14
*** alexpilotti has quit IRC16:16
*** alexpilotti_ is now known as alexpilotti16:16
therveayoung, It needs to be valid python identifiers. I'm not sure about the length actually16:16
therve(thus why adding a "-" makes a difference)16:16
ayoungtherve, and the : too16:17
ayoungthanks, that makes sense16:17
*** markmcclain has joined #openstack-dev16:17
*** pmathews has joined #openstack-dev16:18
*** vrovachev has left #openstack-dev16:18
*** AbyssOne__ has joined #openstack-dev16:18
*** markmcclain1 has joined #openstack-dev16:19
*** markmcclain1 has quit IRC16:19
*** markmcclain has quit IRC16:19
*** markmcclain has joined #openstack-dev16:20
*** Mandell has quit IRC16:20
*** nshaikh has left #openstack-dev16:21
*** pmathews has quit IRC16:21
*** pmathews has joined #openstack-dev16:21
*** ramishra_ has joined #openstack-dev16:22
*** jog0 is now known as flashgordon16:22
*** jcoufal has quit IRC16:23
*** buzztroll has joined #openstack-dev16:24
*** NikitaKonovalov_ is now known as NikitaKonovalov16:25
*** ramishra has quit IRC16:25
*** gokrokve has quit IRC16:26
*** willingc has quit IRC16:28
*** michchap has quit IRC16:28
*** kenperkins has joined #openstack-dev16:29
*** ctracey is now known as ctracey|away16:29
*** michchap has joined #openstack-dev16:29
*** dkuffner has quit IRC16:29
*** tanisdl has joined #openstack-dev16:29
bknudsondo you think keystone should allow adding endpoints that are not URLs?16:30
bknudsonthis is what the tests are creating: 'url': '2e9c05d3c66c4ea3b1fe7b086824fa56'16:30
*** vartom1111111116 has joined #openstack-dev16:30
bknudsonwhich is a "relative" url, I guess.16:30
tellesnobregahi, im trying to make a call to check_grants (as described in policy), i think that the url is  HEAD host:port/v3/projects/​{project_id}​/users/​{user_id}​/roles/​{role_id}​ is this right?16:30
*** ramishra has joined #openstack-dev16:30
*** oubiwann has left #openstack-dev16:30
*** ramishra_ has quit IRC16:31
*** taps has joined #openstack-dev16:31
*** mmagr has quit IRC16:31
bknudsontellesnobrega: there is no check_grants16:32
bknudsontellesnobrega: there's a check_grant16:32
tellesnobregabknudson: sorry, i put an extra s there16:32
bknudsontellesnobrega: http://git.openstack.org/cgit/openstack/keystone/tree/keystone/assignment/controllers.py#n52816:32
*** thuc has joined #openstack-dev16:33
*** corXi has quit IRC16:33
*** riskable has quit IRC16:33
*** NikitaKonovalov is now known as NikitaKonovalov_16:33
bknudsontellesnobrega: http://git.openstack.org/cgit/openstack/keystone/tree/keystone/assignment/routers.py#n8416:33
*** l_a_m has quit IRC16:33
bknudsontellesnobrega: policy.json could use better documentation16:33
*** michchap has quit IRC16:33
bknudsonit's on my list.16:34
tellesnobregabknudson: thanks16:34
*** vartom1111111116 has quit IRC16:34
*** lucas-hungry is now known as lucasagomes16:35
*** edmund has joined #openstack-dev16:35
*** pschaef has joined #openstack-dev16:36
*** Gordonz has joined #openstack-dev16:36
tellesnobregabknudson: im trying to run this command, but when i put the role_id it outputs resource not found16:36
bknudsontellesnobrega: not sure what the problem might be ... check the logs16:36
tellesnobregabknudson: ok. thanks16:37
*** SergeyLukjanov is now known as SergeyLukjanov_16:37
*** belmoreira has quit IRC16:37
*** AlexF_ has joined #openstack-dev16:38
*** ramishra has quit IRC16:39
*** ala_ has quit IRC16:39
*** xga_ has joined #openstack-dev16:40
*** neelashah has quit IRC16:41
*** xga has quit IRC16:41
*** DinaBelova is now known as DinaBelova_16:41
*** Artpicre has quit IRC16:41
*** YorikSar has quit IRC16:42
*** ramishra has joined #openstack-dev16:42
*** AnilV4 has quit IRC16:42
*** gokrokve has joined #openstack-dev16:43
*** beagles_brb is now known as beagles16:44
*** bauzas has quit IRC16:44
*** Artpicre has joined #openstack-dev16:44
*** SumitNaiksatam has quit IRC16:45
*** mikeoutland has joined #openstack-dev16:45
dstanekbknudson: you're really rocking out the patches16:46
*** ramishra has quit IRC16:46
*** russellb is now known as rustlebee16:46
*** ramishra has joined #openstack-dev16:46
*** tdruiva has quit IRC16:46
*** benrodrigue has quit IRC16:46
bknudsondstanek: see a problem fix a problem16:46
bknudsondstanek: I'm waiting on your patches to fix all testing issues.16:47
*** tdruiva has joined #openstack-dev16:47
dstanekbknudson: i don't know about all of the issues, but i've started working on a bunch of cleanup things16:48
*** gokrokve has quit IRC16:49
*** tdruiva has quit IRC16:49
bknudsondstanek: could you check https://review.openstack.org/#/c/56333/ quick and get it back in the queue?16:49
*** colinmcnamara has quit IRC16:50
bknudsondstanek: I had to rebase due to a merge conflict16:50
*** dprince has quit IRC16:50
*** mikeoutland has quit IRC16:51
*** benrodrigue has joined #openstack-dev16:51
*** ramishra has quit IRC16:51
*** ramishra has joined #openstack-dev16:51
*** ramishra_ has joined #openstack-dev16:52
*** ramishra has quit IRC16:52
dstanekbknudson: sure, looking now16:52
*** cmyster has quit IRC16:53
*** xga_ has quit IRC16:53
*** yamahata has quit IRC16:53
*** devoid has joined #openstack-dev16:54
*** pschaef has quit IRC16:56
*** neelashah has joined #openstack-dev16:57
dstanekayoung: i don't think jenkins checked dolphm'm assertEqual patch16:57
*** jcooley_ has quit IRC16:57
ayoungahhhh!16:57
*** ramishra_ has quit IRC16:57
ayoungOur tooling is getting in the way of progress dstanek16:57
dstanekayoung: i don't understand why it doesn't wait for approval and jenkins before proceeding16:58
ayoungin this case the risk is that check fails (due to a temporal) and dumps the approval queue>16:58
*** ron-slc has joined #openstack-dev16:58
ayoung?16:58
*** ramishra has joined #openstack-dev16:59
*** e0ne has quit IRC17:00
*** david-lyle is now known as david-lyle_17:00
dstanekayoung: i think so17:00
*** e0ne has joined #openstack-dev17:00
*** ppetit has quit IRC17:00
*** antigluk has quit IRC17:01
*** neelashah has quit IRC17:01
ayoungdstanek, I'm feeling bitter enough right now that I'm finding it hard to get worked up about it. I can't post my patches for review due to unmerged dependencies. There are patches I need that would get rebased17:02
*** SumitNaiksatam has joined #openstack-dev17:02
ayoungif I were to post them17:02
*** marun has joined #openstack-dev17:03
*** I159 has quit IRC17:04
*** ruhe is now known as _ruhe17:04
*** xmltok has joined #openstack-dev17:04
*** d0ugal has quit IRC17:04
*** e0ne has quit IRC17:04
*** david-lyle has joined #openstack-dev17:05
*** hartsocks has joined #openstack-dev17:05
*** artom has joined #openstack-dev17:05
*** fpatwa has joined #openstack-dev17:05
*** bnemec is now known as beekneemech17:06
*** d0ugal has joined #openstack-dev17:06
*** d0ugal has quit IRC17:06
*** d0ugal has joined #openstack-dev17:06
*** ramishra_ has joined #openstack-dev17:06
*** ramishra has quit IRC17:06
*** pschaef has joined #openstack-dev17:07
*** dvarga is now known as dvarga|away17:08
*** dvarga|away is now known as dvarga17:08
*** ctracey|away is now known as ctracey17:09
*** godara has joined #openstack-dev17:09
*** AlexF_ has quit IRC17:11
*** xga has joined #openstack-dev17:11
*** ramishra_ has quit IRC17:13
*** florentflament has quit IRC17:13
*** dolphm_food is now known as dolphm17:13
ayoungdstanek, dolphm I'm switching to github for code reviews until the dependencies I need merge17:13
ayounghttps://github.com/admiyo/keystone/commits/revocation17:14
*** johnthetubaguy has quit IRC17:14
dolphmayoung: i think you need to take the day off lol17:15
*** thomasem_ has left #openstack-dev17:15
ayoungdolphm, I would if I thought it would be enough time for the gate to progress17:15
dolphmayoung: it's cold here, you should take a cold day too17:15
ayoungits pretty cold here today too.,17:15
ayoungI'm guessing colder than it is in SA17:15
*** sweston has joined #openstack-dev17:16
dolphmayoung: it's supposedly 28 F right now but i'm too scared to go outside and verify17:16
*** angdraug has joined #openstack-dev17:16
*** DinaBelova_ is now known as DinaBelova17:16
*** SergeyLukjanov_ is now known as SergeyLukjanov17:17
*** krotscheck has joined #openstack-dev17:17
*** s2r2_ has quit IRC17:18
*** d0ugal has quit IRC17:19
*** sweston has quit IRC17:21
mhunotmyname, do you have a minute to talk about swift erasure code ?17:21
*** jmontemayor has quit IRC17:21
*** jmontemayor has joined #openstack-dev17:22
ayoungdolphm, twas 17 here last I checked, and my wife just gave me the Doe eyes along with a request that I run out and pick us up lunch17:22
*** MaxV has quit IRC17:24
*** csd_ has joined #openstack-dev17:24
*** bdpayne has joined #openstack-dev17:24
*** rnirmal has joined #openstack-dev17:26
*** sweston has joined #openstack-dev17:26
notmynamemhu: what's up?17:26
*** networkstatic has joined #openstack-dev17:27
*** colinmcnamara has joined #openstack-dev17:27
*** JordanP has quit IRC17:27
mhunotmyname, that would be my question actually :) I wanted to know what's going on with ec17:27
mhuI am about to play with the branch on a devstack, so I was wondering how advanced the branch was17:27
notmynamemhu: heh. great question. I'm actually in the process of writing up a full blog post on that very topic17:27
notmynamemhu: the high-level picture is first to get multi-ring storage policies working, then get EC working17:28
*** xga has quit IRC17:28
*** sjmc7 has joined #openstack-dev17:29
notmynamemhu: the current feature/ec branch is pretty good. it's lacking one feature (to resolve a migration edge case) before it can be merged into master. you can run it today (not in prod) to have multiple replication storage policies17:29
mhunotmyname, glad to hear about the blog post, all the info in could find online was pretty dated17:29
*** ygbo has quit IRC17:29
*** safchain has quit IRC17:30
*** fpatwa has quit IRC17:30
mhunotmyname, I haven't checked the branch thoroughly yet, is there any doc in there I can refer to for configuration and the likes ?17:30
*** markmcclain has quit IRC17:31
*** browne has quit IRC17:31
jaypipesmarun: simple reminder... restore https://review.openstack.org/#/c/66969/ :)17:31
*** sweston has quit IRC17:31
jaypipesayoung: yeah... it's 8 degrees here. went out for breakfast. hit a pothole and flattened both front tires. fun.17:31
*** mikemar10 has joined #openstack-dev17:32
*** jistr has quit IRC17:32
notmynamemhu: ya, the config files are well documented, and I think the source docs have been updated too17:32
*** xqueralt has quit IRC17:33
mhunotmyname, thanks a lot, I am looking forward to the blog post ! Got an ETA for it ?17:33
notmynamemhu: early next week, I hope (I've already written 2 others this week, so I've been told it should wait ;-)17:34
*** gokrokve has joined #openstack-dev17:34
ayoungjaypipes, "I think that's about the worst thing I've ever heard. [pause].How marvelous. "17:34
*** jp_at_hp has quit IRC17:34
*** yamahata has joined #openstack-dev17:35
mhunotmyname :)17:37
*** jmontemayor has quit IRC17:37
jaypipesayoung: :)17:37
marunjaypipes: ack17:37
*** mikeoutland has joined #openstack-dev17:37
*** martyntaylor has joined #openstack-dev17:37
*** doug-fish has quit IRC17:37
*** jmontemayor has joined #openstack-dev17:37
jaypipesayoung: BTW, I totally hear you about the "Doe eyes" comment.17:37
ayounghttp://picayune.uclick.com/comics/ch/1987/ch870629.gif17:38
*** fbo is now known as fbo_away17:38
*** emagana has joined #openstack-dev17:38
*** doug-fish has joined #openstack-dev17:38
jaypipeslol17:38
*** galstrom is now known as galstrom_zzz17:39
*** _cjones_ has joined #openstack-dev17:39
*** tkay has joined #openstack-dev17:40
*** DinaBelova is now known as DinaBelova_17:41
*** SergeyLukjanov is now known as SergeyLukjanov_a17:42
*** DinaBelova_ is now known as DinaBelova17:42
*** SergeyLukjanov_a is now known as SergeyLukjanov_17:43
*** galstrom_zzz is now known as galstrom17:43
devoidkeystone, ayoung, is there someplace where v2.0 vs v3 and policy.json caveats are documented?17:43
*** jpich has quit IRC17:44
*** jmontemayor has quit IRC17:45
*** yassine has quit IRC17:46
*** topol has joined #openstack-dev17:46
marunjaypipes: on the topic of that patch, the goals is to separate out tests that would require a devstack-configured system to run.  Not really strictly functional in that regard.  Do you have any suggestion as to how to better structure things?  Is there any advantage to separating functional tests out of the unit test tree if they don't have system dependencies?17:48
*** ndipanov has quit IRC17:49
*** jmontemayor has joined #openstack-dev17:49
dolphmlbragstad: your -1/comments were replied to in https://review.openstack.org/#/c/68116/17:49
*** tdruiva has joined #openstack-dev17:49
lbragstaddolphm: thanks,17:50
*** jhesketh has quit IRC17:50
*** harlowja has joined #openstack-dev17:51
*** marun has quit IRC17:52
*** jnoller has joined #openstack-dev17:52
*** derekh has quit IRC17:52
*** browne has joined #openstack-dev17:53
lbragstaddolphm: https://review.openstack.org/#/c/68116/ LGTM, my comments were pretty minor :)17:53
dolphmdstanek: ^ there's a bunch of py33 fixes on that bp ^ if you have time :)17:53
jnollerhe;;p17:54
jnollerhello, even17:54
*** jhesketh_ has quit IRC17:55
dstanekdolphm: shore17:57
*** DinaBelova is now known as DinaBelova_17:57
dolphmlbragstad: similar, https://review.openstack.org/#/c/67469/17:58
*** vkozhukalov has joined #openstack-dev17:58
dolphmlbragstad: although we can definitely do the one import thing -- i'll work on that right now17:58
*** xarses has quit IRC17:59
lbragstaddolphm: https://review.openstack.org/#/c/67469/3/keystone/common/base64utils.py you mean that comment?18:00
lbragstadI think the rest of my comments relate to import placement, which I think he addressed.18:00
*** michchap has joined #openstack-dev18:01
dstanekdolphm: six.iteritems looks ugly18:01
*** yolanda_ has quit IRC18:02
*** emagana has quit IRC18:02
dolphmdstanek: lol six is ugly18:03
dolphmuseful but ugly18:03
*** yamahata has quit IRC18:03
*** yamahata has joined #openstack-dev18:03
dolphmlbragstad: yes, i addressed that in the latest patchset18:04
*** AlexF_ has joined #openstack-dev18:04
dolphmlbragstad: the second import (from six import moves) was literally only used on one line in each file18:04
*** mikeoutland has quit IRC18:04
*** dprince has joined #openstack-dev18:04
*** michchap has quit IRC18:04
lbragstaddolphm:  gotcha, reviewing.18:05
*** amerine_ has joined #openstack-dev18:05
*** brownelj has joined #openstack-dev18:05
*** amerine has quit IRC18:06
*** lbragstad is now known as lbragstad-lunch18:06
bknudsonNow we're getting Hyper-V CI on our patches.18:07
lbragstad-lunch^ I just saw that too18:07
jaypipesdolphm: have a moment to help with the PUT /regions/{region_id} fix?18:07
dolphmjaypipes: sure18:07
jaypipesdolphm: so I've been following the exampe of the identity providers patch. Let me push some code for you to see...18:08
dolphmdstanek: i don't know six well enough to know if there's a simpler way to do this ... but this patch is super awkward https://review.openstack.org/#/c/68568/18:09
dolphmjaypipes: k18:09
*** markmc has quit IRC18:09
*** mfink has quit IRC18:10
jaypipesdolphm: https://review.openstack.org/#/c/68981/18:10
jaypipesdolphm: link to the error that is coming up is in the comment...18:10
jaypipeshttp://paste.openstack.org/show/61840/18:10
*** MaxV has joined #openstack-dev18:10
*** mfink has joined #openstack-dev18:11
jaypipesdolphm: been trying to figure it out by placing log messages in the create_region_with_id message, but I never see any of the log messages anywhere, so I'm not sure that the method is even being execute.18:11
jaypipesexecuted..18:11
*** mkollaro has quit IRC18:11
dstanekdolphm: commented on that one18:11
stevemardolphm, doesnt six have some urllib support?18:12
dolphmjaypipes: give me a minute to play with it18:12
*** BullSherd has joined #openstack-dev18:12
jaypipesdolphm: no prob.18:12
*** BullSherd has left #openstack-dev18:12
dolphmstevemar: the commit message suggests it's not sufficient, somehow?18:12
*** SergeyLukjanov_ is now known as SergeyLukjanov18:12
*** YorikSar has joined #openstack-dev18:12
*** mikeoutland has joined #openstack-dev18:12
*** markmcclain has joined #openstack-dev18:12
dstanekstevemar: yes, 'from six.moves import urllib'18:13
*** sweston has joined #openstack-dev18:14
stevemardstanek ++ thats what i was thinking, i'm using it in keystoneclient for oauth stuff18:14
*** harlowja has quit IRC18:14
dolphmjaypipes: POST /regions wasn't in the spec, right?18:15
*** sushils has quit IRC18:15
jaypipesdolphm: I believe it was, yes... lemme double-check.18:15
jaypipesdolphm: yes it was: https://github.com/openstack/identity-api/blob/master/openstack-identity-api/v3/src/markdown/identity-api-v3.md#create-region-post-regions18:16
dstanekdolphm: i don't see what they can't properly stub it - i'll probably give it a try after the reivew that i am on18:16
*** sushils has joined #openstack-dev18:16
*** emagana has joined #openstack-dev18:16
*** harlowja has joined #openstack-dev18:16
jaypipesfrom night.moves import seger.18:16
*** AlexF_ has quit IRC18:17
*** morganfainberg|z is now known as morganfainberg18:17
morganfainbergooh did brant's fixes merge?18:18
morganfainbergsome of*18:18
dolphmmorganfainberg: a plethora of18:18
*** utlemming has quit IRC18:18
morganfainbergdolphm, yay!18:18
jaypipesheh. plethora.18:18
*** sweston has quit IRC18:18
* jaypipes remembers Three Amigos.18:19
morganfainbergdolphm, now i can get back to massaging the config opt stuff.18:19
*** mkerrin has quit IRC18:19
morganfainbergdolphm, and get some code in that would otherwise be unhappy.18:19
*** dvarga is now known as dvarga|away18:19
*** dvarga|away is now known as dvarga18:19
*** zaitcev has joined #openstack-dev18:19
*** Mandell has joined #openstack-dev18:20
*** sushils has quit IRC18:20
*** galstrom is now known as galstrom_zzz18:20
*** gimps_ has joined #openstack-dev18:20
*** eglynn is now known as eglynn-afk18:20
*** gimps_ has quit IRC18:21
dolphmjaypipes: looks like a problem with the test? i can hit the controller using curl18:22
jaypipesdolphm: hmm... k. let me unwind all the helpers in the test case.18:23
*** dhellmann is now known as dhellmann_18:23
*** tdruiva_ has joined #openstack-dev18:25
*** tdruiva has quit IRC18:25
*** mdomsch has joined #openstack-dev18:25
*** spzala has joined #openstack-dev18:26
*** galstrom_zzz is now known as galstrom18:26
*** DinaBelova_ is now known as DinaBelova18:26
dolphmjaypipes: region description should also be optional (sql backend is defaulting it to non-nullable)18:26
*** arnaud has joined #openstack-dev18:27
*** arnaud__ has joined #openstack-dev18:27
*** sweston has joined #openstack-dev18:27
*** utlemming has joined #openstack-dev18:28
dolphmjaypipes: is there a key on description?18:30
*** amcrn has joined #openstack-dev18:30
jaypipesdolphm: test_v3.RestfulTestCase.new_ref() method sets description to not-null.18:31
jaypipesdolphm: but, that is a separate issue from the test failure here, I think?18:31
jaypipesdolphm: BTW, description is optional -- the driver sets description == id if not supplied, IIRC18:32
*** tdruiva_ has quit IRC18:33
jaypipesdolphm: no, that's not true... description is not set to ID on null attr.18:33
jaypipesdolphm: I will file a separate bug about that.18:33
jaypipesdolphm: but I'm a bit stumped why this test infrastructure is returning a 404 for the PUT /regions/{region_id} call :(18:34
*** networkstatic has quit IRC18:34
*** networkstatic has joined #openstack-dev18:35
*** crank has quit IRC18:36
*** ijw has quit IRC18:37
jaypipesdolphm: https://bugs.launchpad.net/keystone/+bug/1272459 -- feel free to prioritize and triage it.18:37
*** iartarisi has quit IRC18:37
jaypipesdolphm: think I found the problem...18:39
*** max_lobur is now known as max_lobur_afk18:39
*** marekd is now known as marekd|away18:41
dolphmjaypipes: what is it?18:42
*** pschaef has quit IRC18:42
*** lbragstad-lunch has quit IRC18:43
jaypipesdolphm: meh, didn't work... I had noticed that the create_region driver call accepted a region_id and a region_ref, but never used the region_id parameter at all..18:45
jaypipesdolphm: but after fixing that, still getting the same error.18:46
jaypipesfixing == removing the unused parameter and ensuring that region_ref contained an id key.18:46
*** alex_xu has quit IRC18:46
*** xarses has joined #openstack-dev18:47
*** msmedved has quit IRC18:47
*** alex_xu has joined #openstack-dev18:47
*** markwash has joined #openstack-dev18:48
*** nati_ueno has joined #openstack-dev18:50
jaypipesdolphm: so if I change the implementation of the controller's create_region_with_id() method to this:18:51
jaypipes    @controller.protected()18:51
jaypipes    def create_region_with_id(self, context, region_id, region):18:51
jaypipes        """Specialized route target for PUT /regions/{region_id}."""18:51
jaypipes        raise ValueError("screw this")18:51
*** tdruiva has joined #openstack-dev18:51
jaypipesdolphm: I still get a NotFound exception raised, not a ValueError...18:51
jaypipesdolphm: I can't seem to understand how to debug this stuff...18:52
jaypipesit's like the controller isn't even called.18:52
dolphmjaypipes: that's basically what i did as well18:52
jaypipesdolphm: :(18:52
dolphmjaypipes: but with curl i can hit it just fine18:52
jaypipesdolphm: so it's the testing "framework"?18:52
dolphmjaypipes: seems to be18:52
jaypipesguh.18:52
dstanekdhellmann_: ping me when you are around18:55
*** mgagne1 has joined #openstack-dev18:56
ctraceyayoung, dolphm - is it intentional that ec2-creds cannot be created with SERVICE_TOKEN auth?18:56
*** mgagne has quit IRC18:56
*** e0ne has joined #openstack-dev18:56
ctraceyohai jaypipes ! :)18:56
dolphmctracey: i believe so -- doesn't it use the token for context?18:56
morganfainbergctracey, see lots more people here that can answer ;)18:56
*** Artpicre has quit IRC18:56
morganfainbergdolphm, ctracey, I believe dolph is correct18:57
*** msmedved has joined #openstack-dev18:57
ctraceydolphm, not sure....I can grok the code18:57
*** godara has quit IRC18:57
morganfainbergSERVICE_TOKEN is a special case magic token, ec2 creds iirc need to be attached to a user18:57
*** Artpicre has joined #openstack-dev18:57
dolphmjaypipes: i'm getting a different error now18:58
ctraceymorganfainberg, yes...i am trying to create ec2-creds in a bootstrap scenario18:58
ctraceyspecifically from the Chef cookbooks18:58
*** jasondotstar has quit IRC18:59
ctraceyso i thought it a bit odd that I can create users, roles, whatnot, but not create creds for the user.18:59
*** akrivoka has quit IRC18:59
*** mgagne1 is now known as mgagne18:59
dolphmjaypipes: bad refactor on my side :P18:59
morganfainbergctracey, are you getting a specific error?19:01
morganfainbergctracey, i am looking at the code but without knowing more about the response you're getting...19:02
ayoungctracey, almost certainly19:02
*** gokrokve_ has joined #openstack-dev19:02
*** comstud is now known as bearhands19:02
*** jprovazn_ has quit IRC19:02
morganfainbergoh, i think i found a bug in hacking.19:02
morganfainbergisn't that cool.19:03
*** dave_tucker is now known as dave_tucker_zzz19:03
*** msmedved has quit IRC19:03
ayoungwhat is a SERVICE_TOKEN?19:03
dolphmayoung: OS_TOKEN19:03
morganfainbergayoung, special magic admin token?19:03
morganfainbergbootstrap19:03
ayoungI thought that was an admin_token19:04
*** julienvey_ has joined #openstack-dev19:04
*** godara has joined #openstack-dev19:04
morganfainbergoh, am i wrong?19:04
* morganfainberg might be wrong.19:04
ayoungOh..isthat the envvar name for it?19:04
dolphmmorganfainberg: you're just making an assumption which is probably accurate19:04
ayoungnah, you are probably rightand Iam just lost19:04
* morganfainberg is often wrong.19:04
morganfainbergdolphm, well you know what happens with assumptions.19:04
jaypipeshi ctracey!19:04
*** beagles is now known as seagulls19:04
dolphmSERVICE_TOKEN is the deprecated name for OS_TOKEN, which is typically used with keystone.conf [DEFAULT] admin_token for bootstrapping19:04
*** morganfainberg is now known as needscoffee19:04
jaypipesdolphm: so you found something? or red herring?19:05
dolphmjaypipes: red herring at the moment19:05
ayoungyeah, can't use the for an ec2, wouldn't have a user to pull the data out of19:05
*** gokrokve has quit IRC19:05
ayoungctracey, OS_TOKEN and its ilk are not associated with a user object out of the identity back end19:05
*** amerine_ is now known as amerine19:06
ayoungIt doesn't really have ilk, I just like the word19:06
*** emagana has quit IRC19:06
*** praneshp has joined #openstack-dev19:06
*** athomas has quit IRC19:07
*** dstanek has quit IRC19:07
*** dstanek has joined #openstack-dev19:07
*** tdruiva has quit IRC19:08
*** gokrokve has joined #openstack-dev19:08
ctraceyayoung, im confused tho...user-id is a parameter19:09
ayoungignored19:09
ayoungctracey, user-id is not coming from the token19:09
ayoungwhich api are you calling>19:09
ayoung?19:09
ctracey2.019:09
ctraceyi guess what im getting at...19:10
ctraceyis that as admin with SERVICE_TOKEN auth, i cannot create ec2-creds for a "monitoring" user19:10
ctraceybut...19:10
ctraceywith standard admin auth, I can19:10
*** lbragstad has joined #openstack-dev19:10
ctraceythe error being Invalid creds19:11
*** praneshp has quit IRC19:11
ctraceythat seems off, no?19:11
*** jcooley_ has joined #openstack-dev19:11
branenjust did a stack and got "Table 'keystone.endpoint' doesn't exist" any ideas? thanks19:11
ctraceyayoung, happy to dig on it and fix if necessary...just wondering if this doesnt make sense19:11
*** gokrokve_ has quit IRC19:12
ayoungwhat is the API you are calling ctracey (I'll walk you through what is happening)19:12
ctraceyayoung, 2.019:12
ayoungnot version, the call.19:12
ayounghttp://host:35357/v2.0 ....19:12
ctraceyi will need to drop into debug mode19:13
ctraceythis is all client driven19:13
ayounghow CLI?19:13
dolphmjaypipes: given that the error message is very specific (Region not found...) ... something has to be raising a RegionNotFound somewhere19:13
ctraceykeystone  ec2-credentials-create --user-id <user-id> --tenant-id <tenant-id>19:13
ayoungOK, lets start there19:13
ayoungrun it with the debug flag and you can see the API in the output19:13
ctraceyayoung, yeah....happy to dig on it19:14
*** romcheg has quit IRC19:14
ctraceyjust asking about the expected behavior19:14
*** tdruiva has joined #openstack-dev19:15
dolphmjaypipes: which appears to be the _get_region() in the sql driver19:15
*** vijendar has joined #openstack-dev19:15
*** david-lyle has quit IRC19:15
*** tdruiva has quit IRC19:16
ayoungctracey, I have no idea.   The whole EC2 thing is a mystery to me.  Since you woke me up, I'm going to make you suffer through my learning curve.  Cue the  diabolical laughter19:16
*** markmcclain1 has joined #openstack-dev19:16
*** markmcclain1 has quit IRC19:16
*** danpb has quit IRC19:16
*** marun has joined #openstack-dev19:16
*** markmcclain1 has joined #openstack-dev19:16
ctraceyayoung, I can take a look at it...id be happy to grok through this code19:16
ctraceyfwiw: http://paste.openstack.org/show/61848/19:16
ayoungctracey, I know where it is going to end up...I can get you there faster19:16
*** nkinder has quit IRC19:17
ayounghttp://127.0.0.1:35357/v2.0/users/d14631241ec04744b0592e840d2ab783/credentials/OS-EC219:17
ctraceyWARNING: Bypassing authentication using a token & endpoint (authentication credentials are being ignored).19:17
*** xmltok has quit IRC19:17
ctraceyso seems to be by design19:17
*** hemnafk is now known as hemna_19:17
*** msmedved has joined #openstack-dev19:17
ayoungOK so you would need to find a router that matches that.  Ordinarily, something that starts with /users  would be in identity, but you can see it is not there....19:17
ayounghttps://github.com/openstack/keystone/blob/master/keystone/identity/routers.py19:18
jaypipesdolphm: right... but it never even gets to the driver...19:18
jaypipesdolphm: it doesn't seem to be even executing the controller's create_region_by_id() method.19:18
ayoungctracey, the OS-EC2 is a hint, though, that it is an extension, and those live in contrib19:18
ctraceyayoung, no rush....ill take a look and let you know where I end up19:18
ayoungctracey, nope, you must now suffer19:18
*** yolanda_ has joined #openstack-dev19:18
ctraceynope...suffering is not an option19:18
ayounghttps://github.com/openstack/keystone/blob/master/keystone/contrib/ec2/routers.py19:18
*** markmcclain has quit IRC19:18
ayoungline 43219:19
ayoung4319:19
ayoungPOST  so19:19
*** emagana has joined #openstack-dev19:19
ctraceyyeah, this i know19:19
ayounghttps://github.com/openstack/keystone/blob/master/keystone/contrib/ec2/routers.py#L3319:19
ayoungkewl, not everyone does...take it from there to controller19:19
ctraceyi shall19:19
ctraceybut it looks like that warning is the reason19:20
ctraceyso, I will dig up the history on that19:20
ayounghmmmm19:20
ayounghttps://github.com/openstack/keystone/blob/master/keystone/contrib/ec2/controllers.py#L15119:21
*** dims has quit IRC19:21
ayoungif you set OS_TOKEN isAdmin would be true19:21
ayoungand it would skip the user_id check19:21
ayoungself._assert_identity(context, user_id)19:21
ayoungDo you get any logging?19:21
ayoungisAdmin comes from keystone/common/controller.py  but I think it is origianlly set by wsgi.py19:22
ctraceyayoung, yes I do...this is a vagrant instance19:23
jaypipesdolphm: the problem is the @controller.protected() decorator.19:23
ctraceycan do whatever i like :)19:23
*** dhellmann_ is now known as dhellmann19:24
*** msmedved has quit IRC19:24
ayounghmmm...seems this controller has defnied is_admin itself19:24
*** MaxV has quit IRC19:25
dkranzayoung: I am trying to replay variants of stuff with curl using the output of nova --debug but the huge certs screw up shell navigation19:25
*** xga has joined #openstack-dev19:25
*** martyntaylor has left #openstack-dev19:25
dkranzayoung: Is there a known way to deal with this?19:25
ayoungdkranz, is that curl the web tool or curl the programming langugage19:25
dolphmjaypipes: how so?19:25
dkranzayoung: the web tool :)19:25
stevemardtroyer, ping19:25
*** praneshp has joined #openstack-dev19:26
ayoungdkranz, usually I do TOKEN=$(keystone token-get | awk '/ id / {print $4}  and then $TOKEN in the script19:26
dkranzayoung: ok, thanks. That is just what I'm looking for.19:26
*** sahid has quit IRC19:27
stevemarbknudson, did you take a look at devstack work, to migrate to openstackclient last night by any chance?19:27
*** mfink has quit IRC19:27
ayounghttps://github.com/openstack/keystone/blob/master/keystone/contrib/ec2/controllers.py#L271 ctracey19:27
bknudsonstevemar: I didn't look at it at all.19:27
jaypipesdolphm: remove the controller.protected() decorator and re-run test.19:27
*** mfink has joined #openstack-dev19:27
jaypipesdolphm: gets past the put() call. (and then dies because apparently the return from a PUT call is not the same as a POST call.19:28
stevemarbknudson, hmm okay, know much about devstack/lib/keystone?19:28
jaypipesat least according to webtest...19:28
dolphmjaypipes: oooh it's trying to do it's terrible introspection thing with get_member_from_driver i bet19:28
ayoungkeystone/common/wsgi.py:259:19:28
bknudsonstevemar: I've looked at it a couple of times.19:28
*** marun has quit IRC19:29
bknudsonstevemar: https://review.openstack.org/#/c/68530/19:29
dolphmjaypipes: rather than unprotecting the controller, comment out get_member_from_driver in __init__19:29
*** xga has quit IRC19:29
stevemarbknudson, i've been migrating a few of the other files under lib, to openstackclient commands, but the ones in lib/keystone are proving to be stubborn19:29
*** FunnyLookinHat has quit IRC19:29
*** nkinder has joined #openstack-dev19:29
*** jcooley_ has quit IRC19:30
*** marun has joined #openstack-dev19:30
jaypipesdolphm: gotcha. then you get this?19:30
jaypipes    self.assertEqual(region_id, r['id'])19:30
jaypipesTypeError: 'TestResponse' object has no attribute '__getitem__'19:30
bknudsonstevemar: any particular commands?19:30
stevemarbknudson, any of the commands under create_keystone_accounts19:30
bknudsonstevemar: seems like you know more about the unified CLI than I do...19:30
jaypipesdolphm: not that for some reason the TestResponse returned by a PATCH call returns a dict-like thing... but strangely, not when PUT is used :(19:31
jaypipess/not that/note that19:31
ayounghttps://github.com/openstack/keystone/blob/master/keystone/middleware/core.py#L69   ctracey that is where it all stems from19:31
stevemarbknudson, i know the syntax for them, but whenever i run the command, it always fails :\19:31
*** kushal has quit IRC19:31
bknudsonstevemar: does unified CLI not support "keystone tenant-create" ?19:31
ayoungthat middleware would be triggered by your paste-api pipeline19:31
stevemarbknudson, no, it would be "openstack project create"19:32
bknudsonstevemar: ok, use that instead of tenant-create.19:32
*** nati_ueno has quit IRC19:32
ayounghttps://github.com/openstack/keystone/blob/master/etc/keystone-paste.ini#L6   in the pipe line at   https://github.com/openstack/keystone/blob/master/etc/keystone-paste.ini#L6619:32
stevemarbknudson, i do that in the other files, like cinder and nova, and they work19:32
stevemarbut the keystone ones aren't19:32
ayoungso...yeah, you should be able to use an admin token to create an ec2 credential.  Is the user a valid user ctracey ?19:33
stevemarbknudson, i think it's cause I don't have a keystone service set up yet? it should be using the ADMIN_TOKEN right?19:33
dhellmanndstanek: pong19:33
dstanekdhellmann: hi19:34
*** sushils has joined #openstack-dev19:34
bknudsonstevemar: do you get an error? anything in the keystone log?19:34
dstanekdhellmann: i was just wondering about py3kcompat.urlutils vs. six.move.urllib - any reason we rolled our own?19:35
dhellmanndstanek: how can I help?19:35
bknudsonstevemar: the only way you can create the admin user before the admin user exists is to use the admin token.19:35
*** nati_ueno has joined #openstack-dev19:35
*** galstrom is now known as galstrom_zzz19:35
dhellmanndstanek: the six thing didn't exist when we made our own, and we were in a rush (guessing about the last part)19:35
dolphmjaypipes: test is passing with this diff http://pasteraw.com/oycoqmjgpe2jumx39pgr9lowfqle1la19:35
stevemarbknudson, let me get you a fresh error, 1 sec19:35
dhellmanndstanek: I would love to eliminate it19:35
dstanekdhellmann: do you have a patch to change policy.py would be accepted?19:36
*** ociuhandu_ has joined #openstack-dev19:36
dstanekdhellmann: that's good to hear19:36
ctraceyayoung, yeah...the user is being used elsewhere19:36
dhellmanndstanek: you'd have to make sure we require a version of six that includes the needed piece first, but yeah, I don't see any issue with it19:36
ctraceyayoung, gonna report and fix this over the weekend19:36
*** ociuhandu_ has left #openstack-dev19:36
*** kushal has joined #openstack-dev19:36
*** msmedved has joined #openstack-dev19:36
*** jasondotstar has joined #openstack-dev19:36
ayoungctracey, I'll probably -2 it.  You shouldn't be using an OS_TOKEN to do anything more than set up Keystone19:37
jaypipesdolphm: yeah, I got it now...19:37
dolphmjaypipes: i'd rather only have one policy entry for create_region though -- i don't see any use case for distinguishing between PUT and POST there19:37
ctraceyayoung, that is what i am doing19:37
ayoungctracey, and why are you trying to create an ec2 with an admin token instead of a user token?19:38
ctraceyin the Chef cookbooks we have a registration recipe19:38
ctraceythat registration recipe allows one to create ec2 creds19:38
dstanekdhellmann: i could easily change the oslo requirements.txt, but how would the other projects know they needed to upgrade?19:38
*** crank has joined #openstack-dev19:38
bknudsonmaybe we could get rid of admin token entirely -- use keystone-manage to create a user directly19:39
*** gokrokve has quit IRC19:39
bknudsonan admin user19:39
jaypipesdolphm: how do I do that?19:39
dolphmjaypipes: i'm working on it19:39
dolphmjaypipes: (not sure yet)19:39
ctraceyi dont really care what the mechanism is...long as it is consistent. this used to work.19:39
*** markmcclain1 has quit IRC19:39
jaypipesdolphm: well, https://review.openstack.org/#/c/68981/ should now pass everything.19:39
dhellmanndstanek: you need to change the requirements in the openstack/requirements repository19:40
stevemarbknudson, just "Could not find user, admin"19:40
dolphmjaypipes: might have to cheat and support POST /regions {"region": {"id": "can-specify-it-here-too"}}19:40
stevemarlet me try and stop it after the initial call19:40
dhellmanndstanek: and then sync those changes to oslo-incubator19:40
ayoungctracey, set up keystone, create an admin user, disable ec2 token, and do everything as that admin user19:40
bknudsonstevemar: then it's probably not using the admin token19:40
bknudsonstevemar: is OSC trying to get a token?19:40
ayoungec2 creds are a blight, but that is a different rant19:40
ctraceyayoung, yes... this is possible. but what im getting at is that it should be consistent.19:41
ctraceyit's currently not19:41
ayoungctracey, I'm going to fire up keystone here in a second and see what I see19:41
stevemarbknudson, likely yes, but i'm wondering how does keystoneclient do it?19:41
ayoungI use the admin token for debugging a lot, so I know it works in general,  but this might be a bit off19:41
dtroyerstevemar: yo…catching up...19:42
bknudsonstevemar: if you provide a token then it shouldn't try to get a new token.19:42
*** enqae has joined #openstack-dev19:42
dtroyerstevemar: it's possible OSC doesn't handle token flow auth correctly19:42
*** ociuhandu_ has joined #openstack-dev19:42
*** enqae has quit IRC19:42
dstanekdhellmann: thanks for the info - i'll start looking into it19:42
dhellmanndstanek: ping me if you run into trouble19:43
stevemarhmm19:43
stevemardtroyer, bknudson i could specifically call out to use the token in create_keystone_accounts and see if that works19:44
dstanekdhellmann: it looks like the version in the requirements.txt does have urllib support - no need to update to the latest for it19:45
bknudsonstevemar: does --os-token <token> work?19:45
bknudsonstevemar: set <token> to the admin token19:46
dhellmanndstanek: cool19:46
stevemarbknudson, sec19:47
*** ociuhandu_ has quit IRC19:47
*** ociuhandu_ has joined #openstack-dev19:47
ayoungInvalid OpenStack Identity credentials.19:48
ayoungOK...why....19:48
stevemarbknudson, i messed something up, gonna be more than a sec19:48
ayoung ctracey trust_id = self._get_trust_id_for_request(context)19:49
ayoungthat checks the token passed in and looks for a trust in it.19:49
*** cmyster has joined #openstack-dev19:49
*** nacim has quit IRC19:49
ayoungyou could throw that check into the is_not_admin case19:50
*** ociuhandu_ has quit IRC19:50
bknudsonayoung: that line was added 4 days ago.19:50
dolphmjaypipes: i'll probably propose a subsequent patch or two, but this uses one policy entry for both create operations, tests for 201 Created, and a few other little things http://pasteraw.com/hmh2nnwy157fvy5dfv7xjys6a6i228719:50
bknudsonhttps://github.com/openstack/keystone/blame/master/keystone/contrib/ec2/controllers.py#L15619:51
ayoungbknudson, did it take that long to merge?19:51
ayoungthat was reviewed a while back19:51
*** willingc has joined #openstack-dev19:51
ayoung2013-12-20  sounds about right19:51
bknudsonayoung: https://review.openstack.org/#/c/66445/19:52
bknudsonayoung: well, it changed in that... not sure if that changed the behavior wrt admin token.19:53
*** harlowja is now known as harlowja_away19:53
ayoungbknudson, fairly certain it was the linked change that prevents admin token.  Question is whether we want to start allowing it or not.  It used to be allowed, and it looks like Chef was (ab)using it19:54
*** denis_makogon_ has joined #openstack-dev19:54
*** ociuhandu_ has joined #openstack-dev19:54
bknudsonayoung: it's probably the follow-on that did it -- https://review.openstack.org/#/c/66446/2/keystone/credential/controllers.py19:55
bknudsonchanged create_credential19:55
bknudsonlooks like create_credential didn't care about trust.19:56
ayoungbknudson, there was a security hole that this plugged19:56
ayoungif you used a trust, you could end up with a token as the trustor via an ec219:56
*** marun has quit IRC19:57
*** godara has quit IRC19:57
*** ociuhandu_ has quit IRC19:57
bknudsonayoung: so trust_id can be none... seems pretty easy to continue to support admin token.19:57
*** godara has joined #openstack-dev19:58
ayoungYep19:59
ayoungJust tested19:59
*** jcooley_ has joined #openstack-dev19:59
*** pixelb has quit IRC19:59
ctraceyayoung, it wasnt abusing it...we are in a bootstrap context that is all20:00
*** ociuhandu_ has joined #openstack-dev20:00
ctraceyi am happy to change the Chef code to address it20:00
*** mmoya has quit IRC20:00
ayoungctracey, ec2 cred creation is not something that should be done in bootstrap20:00
ayoungif it does not Have to be done with an admin token, it shouldn't be done with an admin token.  Its like running a program as root20:01
ctraceyis that objective or subjective?20:01
*** djoreilly has quit IRC20:01
ayoungctracey, you aren't running Windows 95 are you?20:01
*** needscoffee is now known as needscoffee|z20:01
*** otherwiseguy has quit IRC20:01
ayoungctracey, I reject that as a false dichotomy.  It is a statement valid for the valuesystem of most systemadministrators.  Quality judgements are where subject meets object20:02
*** mmoya has joined #openstack-dev20:02
jaypipesdolphm: that patch above adds a controller.protected() on list_regions... that should not be there (anyone should be able to list regions)20:02
*** michchap has joined #openstack-dev20:02
*** romcheg has joined #openstack-dev20:03
dolphmjaypipes: agree, but that should still be enforced by policy.json20:03
*** jmontemayor has quit IRC20:03
jaypipesdolphm: oh I see, you manually added rule entries in policy.json for list and get as callable without admin rights.20:03
*** athomas has joined #openstack-dev20:04
jaypipesdolphm: k, gimme a few and I'll push a patch change.20:04
ctraceyas I have said a number of times, I will either push a fix to keystone (if appropriate) or adjust the Chef recipes.20:04
ctraceythanks20:04
*** xmltok has joined #openstack-dev20:04
*** jecarey has quit IRC20:04
ayoungctracey, there more I think about that code, the less I like letting and admin token bypass it....20:05
*** mmoya has quit IRC20:05
*** jmontemayor has joined #openstack-dev20:05
*** novas0x2a|laptop has joined #openstack-dev20:05
*** pixelb has joined #openstack-dev20:05
bknudsonayoung: are there a lot of functions where we should explicitly deny admin token? -- we could have a decorator or add to protected(no_admin_token=True)20:05
dolphmjaypipes: i was about to push this up seperately20:06
dolphmjaypipes: opened https://bugs.launchpad.net/keystone/+bug/1272496 and https://bugs.launchpad.net/keystone/+bug/127250120:06
bknudsonayoung: at least we could have a more obvious error if they use the admin token.20:06
*** michchap has quit IRC20:07
ayoung bknudson policy.json should handle it in the future20:07
ayoungbut ec2 v2 is not using that20:07
*** rfolco has quit IRC20:07
*** zzelle has joined #openstack-dev20:07
dolphmjaypipes: https://review.openstack.org/#/c/69002/20:07
*** emagana has quit IRC20:08
*** vkozhukalov has quit IRC20:08
*** ociuhandu_ has quit IRC20:08
*** godara has quit IRC20:09
dolphmjaypipes: patchset 2 reverses this change ... https://review.openstack.org/#/c/69002/1/keystone/catalog/backends/sql.py20:10
stevemarbknudson, the token flow, is not as much fun as the uname/pass flow .. on either client :(20:10
dolphmjaypipes: i meant to ask you what was intended there ^ ? most (all?) driver return NotFound and let the managers re-cast exceptions appropriately, and the docs in the sql driver seem to expect NotFound (which RegionNotFound is an instance of, obviously)20:11
bknudsonstevemar: I wouldn't expect much "flow" for token... you just store what they give you and use that on the request.20:11
*** emagana has joined #openstack-dev20:12
*** prad has quit IRC20:12
dolphmtopol: i assigned the CADF bp to you the other day -- i figured you knew better than I who was actually going to work on it?20:13
*** mlavalle has joined #openstack-dev20:13
stevemardolphm not me, not me, not me20:13
* stevemar fingers crossed20:13
topoldolphm, yes I saw that. That's fine.  I figured I could work out splitting the work20:13
*** pavol has quit IRC20:14
topolstevemar, its not you. Will be Tom from my China team helping to get that done20:14
*** rwsu has quit IRC20:14
stevemarbknudson, theres some funny business with urls too20:14
stevemartopol, cool!20:14
*** dstanek has quit IRC20:14
*** dstanek has joined #openstack-dev20:15
bknudsonstevemar: if you pass a token in then you also have to pass the endpoint... otherwise it doesn't know where the endpoint is.20:15
topoldolphm, its lots to do so we just keep doing it in chunks?  I want to first add in the CADF notification on top of Lance's existing Keystone notification work. I will start looking at this this weekend20:16
stevemarbknudson, auth_url stays too though?20:16
bknudsonstevemar: you don't really need an auth_url if you're not going to auth.20:16
jaypipesdolphm: nothing more than a mistake/oversight on my end.20:17
dolphmtopol: feel free to re-assign the bp as appropriate... i just wanted to make sure there was a name on it for now20:17
jaypipesdolphm: thx much for your follow up patch.20:17
dolphmjaypipes: of course20:18
topoldolphm, will do. thanks stevemar Im looking in your direction..... JUST KIDDING20:18
stevemartopol: what's a keystone, what's a cadf? bad choice in looking here20:19
topoldolphm, stevemar just fyi, henrynash took an awful picture of me on the Rackspace slide. My wife and daughter laughed their heads off.  Next hackathon I want a new hackathon appointed photographer20:19
*** dstufft has quit IRC20:19
topolno way I can look that bad. no way20:19
dolphmhenrynash: let me know when the poster prints are ready, i'd like to have them in the keystone room in atlanta20:20
*** dstufft has joined #openstack-dev20:20
*** rwsu has joined #openstack-dev20:20
dolphmcommunity spirit and all20:20
*** yolanda_ has quit IRC20:20
*** teran_ has joined #openstack-dev20:20
topoldolphm, how I managed to do two thumbs up at the end of the ride I don't know.  It was brutal20:21
dolphmjaypipes: mind if i push a patchset on your review? you forgot to update catalog.core.Driver interface for create_region20:22
*** melwitt has joined #openstack-dev20:22
*** teran has quit IRC20:23
*** yeylon_ has joined #openstack-dev20:23
dolphmjaypipes: e.g. http://pasteraw.com/gi6wo7d0k97fbep1mnyrth9spvtcd0x20:24
*** praneshp has quit IRC20:24
jaypipesdolphm: not at all, go for it.20:24
dolphmjaypipes: done20:24
*** dstufft_ has joined #openstack-dev20:25
lbragstaddolphm: jaypipes I'm getting this on a fresh devstack and wondering if it might have something to do with the regions patch that went up a few days ago? http://paste.openstack.org/show/61850/20:25
*** terrylhowe has quit IRC20:25
lbragstaddb-version is 3720:26
dolphmlbragstad: is it really a fresh devstack? that table is created in migration 3720:26
topoldolphm, stevemar, henrynash photo tweeted for your amusement. you need a good laugh20:26
lbragstad/opt/stack/keystone$ ./bin/keystone-manage db_version20:26
lbragstad3720:26
lbragstaddolphm: ^20:26
stevemarlbragstad, i think you are hitting the same thing i did20:26
lbragstadI just pulled devstack20:26
dolphmlbragstad: maybe db_sync 36 and then db_sync again? (cc- stevemar... is that the bug we ran into as well?)20:27
dolphmstevemar: what was the fix we had to use20:27
stevemardolphm, git clean -... crazy options20:27
dolphm-xdfi20:27
stevemaror just rm -rf everything except .gitkeep under tests/tmp20:27
stevemarlbragstad, ^20:27
dolphm-i is interactive, which you may not need... but i leave untracked changes in my repo on purpose20:27
*** nati_ueno has quit IRC20:28
*** dstufft has quit IRC20:28
*** jamespage_ has joined #openstack-dev20:29
*** dstufft_ is now known as dstufft20:30
lbragstaddolphm: stevemar thanks! that did it (rm /tmp/test.db tmp/test.db.pristine)20:31
*** krotscheck has quit IRC20:32
devoidso what's the correct way to run with multiple keystone endpoints for both v3 and v2.0?20:34
*** epim has joined #openstack-dev20:34
*** jruzicka has quit IRC20:34
*** hartsocks has quit IRC20:35
*** sweston has quit IRC20:36
*** bswartz has quit IRC20:37
*** jasondotstar has quit IRC20:37
*** ijw has joined #openstack-dev20:38
ayoungctracey https://review.openstack.org/#/c/69007/  please add yourself as a reviewer, as I can't deduce your reviewer id20:38
*** jmontemayor has quit IRC20:38
*** lucasagomes has quit IRC20:40
*** pcm__ has joined #openstack-dev20:40
*** jmontemayor has joined #openstack-dev20:40
*** krotscheck has joined #openstack-dev20:40
*** jasondotstar has joined #openstack-dev20:40
*** godara has joined #openstack-dev20:41
*** praneshp has joined #openstack-dev20:41
*** ijw has quit IRC20:42
*** DinaBelova is now known as DinaBelova_20:42
*** CaptTofu has quit IRC20:43
*** teran_ has quit IRC20:43
*** mgagne has quit IRC20:43
*** pcm_ has quit IRC20:44
*** tellesnobrega has left #openstack-dev20:44
*** tellesnobrega has joined #openstack-dev20:44
*** radez is now known as radez_g0n320:44
*** galstrom_zzz is now known as galstrom20:44
*** needscoffee|z is now known as morganfainberg20:45
devoidalso what sets is_admin context?20:45
*** dbalog has quit IRC20:45
*** jcooley_ has quit IRC20:46
devoidis it set to true on the 5000 interface always, or only when a user connects with admin_required policy enforced?20:46
*** dvarga has quit IRC20:46
*** terrylhowe has joined #openstack-dev20:46
ayoungdevoid, AdminToken middleware in keystone/middleware/core.py20:47
ayoungdevoid, it should not be in the public pipeline20:48
*** JuanMO_ has quit IRC20:48
*** jcooley_ has joined #openstack-dev20:48
devoidayoung, thanks. so it's safe to expose the 5000 interface if I remove that middleware?20:49
ayoungit is never safe20:49
*** sahid has joined #openstack-dev20:49
ayoungjust thinking about attracts zombies20:49
ayoungahhh!20:49
devoidreally?20:49
*** otherwiseguy has joined #openstack-dev20:49
*** csd_ has quit IRC20:50
*** SumitNaiksatam has quit IRC20:50
*** yolanda_ has joined #openstack-dev20:50
ayoungdevoid, test it.  Don't take my word for anything.  I lie.  I forget.  I make things up.  If you do it and it is insecure and your response is ayoung said it was ok I will find you and laugh at you.  Very loudly.20:50
dolphmmorganfainberg: one of your last comments on this review was that jenkins would -1 until some other stuff has landed. jenkins +1'd a couple hours ago https://review.openstack.org/#/c/68551/20:51
*** SumitNaiksatam has joined #openstack-dev20:51
devoidayoung, I will say that there isn't much documentation about keystone20:52
devoidand aside from reading all of the code and perfectly understanding it, there's no way to "test it" completely20:53
*** mikeoutland has quit IRC20:53
*** _ruhe is now known as ruhe20:53
*** jcooley_ has quit IRC20:54
*** CaptTofu has joined #openstack-dev20:54
*** nacim has joined #openstack-dev20:54
ayoungdevoid, devoid I am now assigning Keystone documentation bugs to you and notifying annegentle20:56
*** nacim has quit IRC20:56
*** nacim has joined #openstack-dev20:57
*** emagana_ has joined #openstack-dev20:57
devoidayoung, I'm happy to help with documentation. It just means I'll be back here asking dumb questions more. ;)20:57
annegentleayoung: devoid do you know of good starter doc on domains and groups? Want to add to the ops guide20:57
*** jcooley_ has joined #openstack-dev20:57
*** emagana has quit IRC20:57
ayoungannegentle, the api-doc20:58
*** fpatwa has joined #openstack-dev20:58
ayounghttps://github.com/openstack/identity-api/blob/master/openstack-identity-api/v3/src/markdown/identity-api-v3.md#groups-v3groups20:58
ayoungand https://github.com/openstack/identity-api/blob/master/openstack-identity-api/v3/src/markdown/identity-api-v3.md#domains-v3domains20:58
annegentleayoung: thanks. I'll add to http://docs.openstack.org/trunk/openstack-ops/content/projects_users.html20:59
*** safchain has joined #openstack-dev20:59
*** safchain has quit IRC20:59
*** mmoya has joined #openstack-dev21:00
*** yolanda_ has quit IRC21:00
*** jcooley_ has quit IRC21:00
*** SumitNaiksatam_ has joined #openstack-dev21:00
*** mfink has quit IRC21:00
devoidannegentle, is openstack-ops guide superceeding admin-guide-cloud ?21:00
*** SumitNaiksatam has quit IRC21:00
*** SumitNaiksatam_ is now known as SumitNaiksatam21:00
ayoungdolphm, we should schedule an IRC  chat "meet the Keystone developers"  where we answer questions about Keystone.  annegentle could lurk and cull the answers into a new dev guide21:01
*** colinmcnamara has quit IRC21:01
topolbknudson did your pin arrive in the mail yet?21:02
bknudsontopol: I'll check21:02
*** michchap has joined #openstack-dev21:03
dolphmayoung: is that not the keystone meeting?21:03
*** michchap has quit IRC21:03
ayoungdolphm, heh21:03
*** seagulls has quit IRC21:03
ayoungdolphm, maybe do it a community panel at the Summit?21:04
*** michchap has joined #openstack-dev21:04
*** bvandenh has quit IRC21:04
bknudsontopol: I had a letter postmarked from TX but it was a wedding invitation21:05
*** marun has joined #openstack-dev21:05
topolbknudson, my guess is it will arive tomorrow or mon. I sent it Tuesday. Will come from NC21:05
*** yamahata has quit IRC21:06
*** dvarga has joined #openstack-dev21:07
*** harlowja_away is now known as harlowja21:07
*** vartom1111111116 has joined #openstack-dev21:07
*** michchap has quit IRC21:08
*** noslzzp has quit IRC21:08
*** krotscheck has quit IRC21:10
*** demontiesantos has quit IRC21:11
*** praneshp has quit IRC21:11
*** jcooley_ has joined #openstack-dev21:12
*** yeylon_ has quit IRC21:12
*** jcooley_ has quit IRC21:12
*** noslzzp has joined #openstack-dev21:12
*** bdpayne has quit IRC21:13
morganfainbergayoung, community panel @ the summit sounds like a good idea21:13
*** topol has quit IRC21:14
ayoung"Meet the Key Stoners."21:14
lbragstadbknudson: taking another look at this, the config generator is going to group opts for kds in here as well. thoughts? https://review.openstack.org/#/c/67595/1/etc/keystone.conf.sample21:15
*** praneshp has joined #openstack-dev21:15
*** praneshp has quit IRC21:16
bknudsonlbragstad: do we need separate config files for keystone and kds?21:16
lbragstadright now they are separate21:16
ayoungbknudson, yes21:16
lbragstadhttps://github.com/openstack/keystone/blob/master/etc/kds.conf.sample#L1121:16
ayoungkds is going to split off from Keystone21:16
bknudsonlbragstad: let's keep them separate then... so having kds config options in keystone.conf is not correct.21:16
ayoungvery not correct21:16
lbragstadok, I can go through and mark those.21:17
bknudsonlbragstad: fix the config generator21:17
*** praneshp has joined #openstack-dev21:17
bknudsonlbragstad: should be able to use the config generator to make the kds file too.21:17
*** bdpayne has joined #openstack-dev21:18
bknudsontemplate-based catalogs seem to be broken now.21:21
dolphmlbragstad: bknudson: ayoung: morganfainberg: i'm probably going to look into splitting kds into it's own repo next week, so we can ship icehouse without releasing them as a single thing, and have to support that for a year21:21
bknudsondolphm: I think that's the way to go.21:22
ayoungdolphm, ++++++21:22
ayoungplus21:22
*** dave_tucker_zzz is now known as dave_tucker21:22
*** dprince has quit IRC21:22
ayoungdolphm, while you are at it, can you create its own api repo?21:22
*** ociuhandu_ has joined #openstack-dev21:22
bknudsonI thought openstack was moving to a single api repo?21:23
ayoungGod I hope not21:23
*** jecarey has joined #openstack-dev21:23
ayoungbknudson, that would be a de zas ter21:23
dolphmayoung: sure21:23
ayoungdolphm, ++21:24
dolphmbknudson: yeah, i wasn't a fan of that idea21:24
bknudsondolphm: ayoung: reason you don't like single API repo?21:24
bknudsonnot just because we've got middleware in there.21:24
*** djoreilly has joined #openstack-dev21:24
ayoungif you do a commit, and then you want to split it up into smaller pieces, how do you hold on to the commit message?  Is there somewhere that it goes if you do git reset --soft HEAD~221:25
dolphmbknudson: because we use ours differently than other projects, who couldn't care less about theirs21:25
ayoungbknudson, I don't want non-core approving Keystone APIs21:25
*** ociuhandu_ has quit IRC21:26
ayounghttp://koji.fedoraproject.org/koji/buildinfo?buildID=493718   Fedora is now packaging KDS21:26
dolphmbknudson: there was another suggestion to move it into the project implementation repo, which i don't personally have an issue with... but it also eliminates the separation between api and implementation that the separate repos were originally intended to create, and it's a separation that we have fully utilized21:26
bknudsondolphm: ayoung: would it be ok if there was a single API repo for the "boring" stuff (just wrappers around REST) and a separate one for "interesting" stuff?21:26
dolphmi.e. swapping the implementation out for keystonelite during essex21:26
dolphmbknudson: i'd like an openstack-api-conventions repo to dictate high level api design and consistency21:27
ayoungbknudson, I could see a refactoring to a central set of coding standards for Writing APIs, but...it would be a bloodfest getting agreement21:27
*** mrodden1 is now known as mrodden21:27
dolphmayoung: that's what gerrit is for21:28
ayoungdolphm, Bloodfests in general?21:28
bknudsonLOL21:28
dolphmayoung: ... next on ESPN2 ...21:29
*** thuc has quit IRC21:29
bknudsonyou might get agreement that they're written in python.21:29
ayoungbknudson, APIs no way21:29
ayoungAPIs are REST apis21:29
*** thuc has joined #openstack-dev21:30
*** galstrom is now known as galstrom_zzz21:30
*** colinmcnamara has joined #openstack-dev21:31
bknudsonIt would be nice if we could have a defined format for the error document21:31
*** amcrn_ has joined #openstack-dev21:31
*** amcrn has quit IRC21:32
*** amcrn_ is now known as amcrn21:32
*** djoreilly has quit IRC21:32
ayoungI lied, Fedora not doing KDS yet.21:32
*** achampion has quit IRC21:32
*** changbl has quit IRC21:33
*** sgordon has quit IRC21:33
*** ruhe is now known as _ruhe21:33
*** mfink has joined #openstack-dev21:34
lbragstaddolphm: so, when you split KDS out into its own repo, we will be taking it all out of contrib right?21:34
*** thuc has quit IRC21:34
ayounglbragstad, yep21:34
*** yeylon_ has joined #openstack-dev21:36
*** thuc has joined #openstack-dev21:37
*** csd_ has joined #openstack-dev21:37
*** mikeoutland has joined #openstack-dev21:37
openstackstatusNOTICE: Zuul is ignoring some enqueue events; fix in progress21:39
*** ChanServ changes topic to "Zuul is ignoring some enqueue events; fix in progress"21:39
*** ociuhandu_ has joined #openstack-dev21:39
*** SergeyLukjanov is now known as SergeyLukjanov_21:39
dtroyerstevemar: still having problems with OSC in DevStack?  I just did this quickly and it seems happy:  https://github.com/dtroyer/devstack/commit/7bf5f12d987d04c9d5b60fda2f2619757f94018521:40
*** jasondotstar has quit IRC21:41
*** tmclaugh[work] has quit IRC21:41
*** romcheg has left #openstack-dev21:42
*** mfink has quit IRC21:43
*** teran has joined #openstack-dev21:43
*** fpatwa has quit IRC21:43
*** jdob has quit IRC21:43
*** erkrnt has joined #openstack-dev21:46
*** ociuhandu_ has quit IRC21:47
*** sahid has quit IRC21:49
*** sahid has joined #openstack-dev21:49
*** silent-night has quit IRC21:51
*** stevemar has quit IRC21:52
openstackstatusNOTICE: Zuul is restarting to pick up a bug fix21:55
*** ChanServ changes topic to "Zuul is restarting to pick up a bug fix"21:55
*** gordc has quit IRC21:56
*** epim has quit IRC21:59
*** changbl has joined #openstack-dev21:59
*** dave_tucker is now known as dave_tucker_zzz22:00
*** praneshp has quit IRC22:00
*** rods1 has quit IRC22:01
*** julienvey_ has quit IRC22:01
*** dave_tucker_zzz is now known as dave_tucker22:01
*** sweston has joined #openstack-dev22:02
*** sahid has quit IRC22:02
*** sweston has quit IRC22:03
*** jamespage_ has quit IRC22:03
*** vartom1111111116 has quit IRC22:04
*** michchap has joined #openstack-dev22:04
*** pcm__ has quit IRC22:04
*** michchap has quit IRC22:04
*** julienvey_ has joined #openstack-dev22:04
*** pcm_ has joined #openstack-dev22:04
*** michchap has joined #openstack-dev22:04
*** glenng has quit IRC22:06
*** ArxCruz has quit IRC22:06
*** benrodrigue has quit IRC22:06
*** artom has quit IRC22:07
*** praneshp has joined #openstack-dev22:08
*** shardy is now known as shardy_afk22:08
*** peristeri has quit IRC22:08
*** benrodrigue has joined #openstack-dev22:09
*** michchap has quit IRC22:09
*** ArxCruz has joined #openstack-dev22:09
*** xmltok has quit IRC22:10
*** xmltok has joined #openstack-dev22:10
*** dbalog has joined #openstack-dev22:10
*** vladikr has quit IRC22:12
*** rollerj has joined #openstack-dev22:12
*** mfer has quit IRC22:13
*** athomas has quit IRC22:14
*** denis_makogon_ has quit IRC22:16
*** changbl has quit IRC22:16
*** yeylon_ has quit IRC22:17
*** branen has quit IRC22:17
*** willingc has quit IRC22:17
*** hartsocks has joined #openstack-dev22:17
*** jcooley_ has joined #openstack-dev22:19
*** marun has quit IRC22:24
*** fpatwa has joined #openstack-dev22:24
*** armax has quit IRC22:24
*** tongli has quit IRC22:26
*** redhat has quit IRC22:26
*** kevinconway has quit IRC22:26
*** Makdaam_ has quit IRC22:27
*** eglynn-afk has quit IRC22:28
*** fpatwa has quit IRC22:28
*** jcooley_ has quit IRC22:29
*** doug-fish has quit IRC22:29
*** Makdaam has joined #openstack-dev22:30
*** changbl has joined #openstack-dev22:31
*** willingc has joined #openstack-dev22:31
*** willingc has quit IRC22:31
*** gyee has joined #openstack-dev22:31
*** willingc has joined #openstack-dev22:33
*** bswartz has joined #openstack-dev22:34
bknudsonmorganfainberg: here's how messed up the tests are ... tox -e py27 keystone.tests.test_backend_kvs.KvsIdentity.test_user_crud22:35
bknudsonOperationalError: (OperationalError) no such table: credential u'DELETE FROM credential WHERE credential.user_id = ?' ('7e9a4df2bb7d482086022f46984f1c6b',)22:35
_cjones_Any Ceilometer people here today for a general question? I'm curious as to the status of Alarm/Alerting functionality in Ceilometer.22:35
*** ociuhandu_ has joined #openstack-dev22:36
bknudsonThe kvs identity tests need the database for credential stuff that happens.22:36
*** hartsocks has left #openstack-dev22:36
*** ociuhandu_ has left #openstack-dev22:36
*** kfox1111 has joined #openstack-dev22:36
kfox1111What is the status of keystone groups in havana?22:37
kfox1111The keystone client doesn't seem to have commands to work with them.22:37
*** ijw has joined #openstack-dev22:37
*** mrodden1 has joined #openstack-dev22:38
*** READ10 has quit IRC22:38
*** mrodden has quit IRC22:38
*** tanisdl has quit IRC22:38
*** cmyster has quit IRC22:39
brownekfox1111: the openstackclient has support for keystone groups22:39
*** jasdeepH has joined #openstack-dev22:39
browneopenstackclient is to replace the nova, cinder, keystone, etc clients22:39
*** jasdeepH has quit IRC22:39
*** nkinder has quit IRC22:39
bknudsonNoReferencedTableError: Foreign key associated with column 'group.domain_id' could not find table 'domain' with which to generate a foreign key to target column 'id'22:41
*** praneshp has quit IRC22:41
bknudsontables in the identity backend are referencing tables in the assignment backend???22:41
*** nkinder has joined #openstack-dev22:41
*** giulivo has quit IRC22:41
*** ijw has quit IRC22:42
lbragstadbknudson: about the config generator stuff, I still have to do some investigating, but it doesn't pick up any of the config opts for keystone/common/config.py, which is pretty much everything for keystone22:42
lbragstadsince that is where the majority of the keystone config opts are..22:43
bknudsonlbragstad: why not?22:43
lbragstadbknudson: not sure, I have to dig into the tool a little more. Seems to pick up everything for keystone/openstack/common/* just fine, so everything we have in keystone from Oslo gets config opts generated.22:44
notmynameayoung: I just got a test-requirements update patch from jenkins (https://review.openstack.org/#/c/63714/). Why is the keystoneclient version bumped?22:44
*** mriedem has quit IRC22:46
kfox1111browne: Cool. I'll give it a try. One other question. If you add roles to groups to users, does getting a role list for a user work properly in the v2 api too?22:46
brownekfox1111: no, v2 api knows nothing about group role grants22:47
kfox1111bummer. ok, thanks.22:48
bknudsonnotmyname: the tests for some projects were failing because of the change to the config options in the auth_token middleware.22:48
kfox1111hmm... If I get a token with the v2 api and pass it to a service configured to a v3 api, does the group role stuff work, or do I need to use the v3 api everywhere?22:49
bknudsonnotmyname: https://bugs.launchpad.net/nova/+bug/126861422:49
*** praneshp has joined #openstack-dev22:50
*** gsamfira has quit IRC22:50
*** fpatwa has joined #openstack-dev22:50
*** lbragstad has quit IRC22:51
kfox1111just trying to figure out if I need to wait for icehouse before I can use it.22:52
*** epim has joined #openstack-dev22:52
ayoungnotmyname, I no not.  Git blame, and read the commit message22:53
notmynameayoung: thanks. looks like bknudson has the answer :-)22:54
kfox1111hmm... I'm not even sure what version cinder is using...22:54
*** crank has quit IRC22:56
*** bdpayne_ has joined #openstack-dev22:56
*** crank has joined #openstack-dev22:57
*** bdpayne has quit IRC22:58
*** CaptTofu has quit IRC22:58
*** kbrierly has quit IRC22:58
*** ChanServ changes topic to "OpenStack development || Support is in #openstack"22:58
kfox1111Do you need to tell it a version, or does it guess based on stuff inside the token?22:59
*** armax has joined #openstack-dev23:01
brownekfox1111: i can't remember if intermixing token versions should work.23:01
flashgordonharlowja: ping23:01
harlowjaflashgordon hi there23:01
flashgordonso about https://review.openstack.org/#/c/68988/3/tools/fix-imports23:02
*** burt1 has quit IRC23:02
harlowjak23:02
flashgordonbesides thinking copyright ownership lines are silly23:02
harlowjaya ya23:02
kfox1111ok. thanks.23:02
*** david-lyle has joined #openstack-dev23:02
flashgordonthere isn't much value in hiding something like that patch in tools23:02
flashgordonhow is someone supposed to run it?23:02
*** bdpayne has joined #openstack-dev23:03
*** ociuhandu_ has joined #openstack-dev23:04
harlowjadownload it?23:04
*** mikeoutland has quit IRC23:04
*** AlexF_ has joined #openstack-dev23:04
harlowjaflashgordon where should it go?23:04
*** bdpayne_ has quit IRC23:04
*** mikeoutland has joined #openstack-dev23:04
flashgordonharlowja: download it bah23:04
flashgordonthe current workflow is:23:04
flashgordonpip install hacking23:04
*** michchap has joined #openstack-dev23:04
flashgordonwhich gives you the flake8 binary23:05
*** michchap has quit IRC23:05
harlowjasure23:05
flashgordonwhich does enforcment23:05
flashgordonI see two options23:05
harlowjato me its a nice helper tool23:05
flashgordon1) focus on import order and make hacking print out the full import ordering on any import failure23:05
*** michchap has joined #openstack-dev23:05
flashgordonharlowja: it is a nice helper tool but in a useless place23:05
*** nkinder has quit IRC23:05
flashgordonfor the average dev23:05
harlowjaaverage dev not know how to download files?? ;)23:06
flashgordonor 2) work on a full binary that get installed when doing 'pip install hacking'23:06
*** gongysh has joined #openstack-dev23:06
*** erkrnt has quit IRC23:06
flashgordonthat is something like https://pypi.python.org/pypi/autopep8/23:06
flashgordontools is a ghetto for code23:06
flashgordon2nd class citizen and whatnot23:06
*** erkrnt has joined #openstack-dev23:07
harlowjasure, i'm fine with 2nd class, lol23:07
flashgordonharlowja: I am not23:07
flashgordonif we do this we do it right23:07
flashgordonFWIW I agree that something like this is very useful and want to make sure its easily usable23:07
*** jergerber has quit IRC23:07
harlowjasure, but perfection doesn't come with first commit :-P23:07
flashgordontrue but a tools file23:08
*** vijendar has quit IRC23:08
harlowjaok, so should it go under somewhere else?23:08
flashgordona binary23:08
flashgordoncmd23:08
harlowjak23:08
flashgordonand furthermore this should get a ML thread first23:08
*** vijendar has joined #openstack-dev23:09
harlowjareally?23:09
flashgordonif do a binary I think we should aim for autohacking23:09
*** browne has quit IRC23:09
flashgordonala autopep823:09
flashgordonlimiting this to imports seems arbitrary .. not saying it must do all on first pass23:09
harlowjathat seems like a bigger goal, out of the scope i can devote to23:09
flashgordonfair enough23:09
*** che-arne has joined #openstack-dev23:09
*** tkay has quit IRC23:09
flashgordonthats why ML thread23:09
flashgordonI wonder if we can do a autopep8 plugin or something like that23:09
flashgordonetc23:09
*** tkay has joined #openstack-dev23:10
*** michchap has quit IRC23:10
harlowjanot sure, seems reasonable23:10
flashgordonthere are some design decisions that we need to sort through23:10
flashgordonI have a hunch there is demand for this23:10
flashgordonso I wanna lay a proper groudnwork for it23:10
harlowjasure sure, don't overcomplicate it to much, it will just die as a baby if u do :-P23:10
flashgordonfirst patch doesn't have to have everything in place but shoud go in right direction23:11
*** topol has joined #openstack-dev23:11
*** jtomasek has quit IRC23:11
flashgordonharlowja: what am I overcomplecating?23:11
harlowjai just am weary of to much groundwork == to much politics == nothing ever happens23:12
harlowjathats all23:12
*** topol has quit IRC23:12
flashgordonharlowja: if you want to lay out the groundwork yourself (maybe just some notes in commit msg or w/e)  Iam fine with that23:12
*** ociuhandu_ has quit IRC23:12
flashgordonthisseems too much like a one off script right now23:12
flashgordonand I want a binary23:12
*** topol has joined #openstack-dev23:12
harlowjabinary is fair i think23:12
flashgordonwith tests23:13
harlowjasure23:13
*** michchap has joined #openstack-dev23:13
harlowjawill do23:14
*** AlexF_ has quit IRC23:14
flashgordonharlowja: cool can you move that into a WIP23:14
harlowjak23:14
flashgordonso the ML thing is more of a heads up -doesn't have to be right away23:14
harlowjanp23:14
harlowjai can send that out23:14
flashgordonmaybe when things are a little more solid, but I think others will help out23:14
harlowjaas long as it doesn't rathole (this seems to happen more often than not sometimes on the ML)23:14
harlowja*makes me sad sometimes*23:15
harlowjaha23:15
flashgordonI would prefer an email that says: look at this cool thing  Iam doing, anyone want to help future work. vs who do I do this23:15
harlowjasgreed23:15
harlowja*agreed23:15
flashgordonso it doesn't rathole23:15
flashgordoncool, thanks23:15
harlowjanp23:15
*** AlexF_ has joined #openstack-dev23:16
*** andreaf has quit IRC23:17
*** alexpilotti has quit IRC23:18
kfox1111browne: I'm not seeing how to do the keystone group stuff in openstackclient. Know what the command looks like?23:19
*** morazi has quit IRC23:20
*** AlexF_ has quit IRC23:21
*** eharney has quit IRC23:25
*** topol has quit IRC23:25
*** Gordonz has quit IRC23:25
flashgordonharlowja: btw when I did the nova import ordering I wrote a script like that23:25
harlowja:)23:25
flashgordonand submitted some autowritten patches23:26
flashgordonthen I was afraid of autowritting patches and deleted the code23:26
harlowja;)23:26
flashgordonit was scary to submit a few hundred lines that I didn't even write23:26
harlowjaya, i can beleive that23:26
harlowjato me i can never sometimes remember the ordering rules23:26
harlowjaso figure it out once, on failure, just run this :)23:27
harlowjaif i am having brainfart where i can't remember, lol23:27
*** doug_shelley66 has quit IRC23:27
flashgordonharlowja: you and me both23:27
_cjones_annegentle: I have some documentation on groups based on stuff that is on ayoungs blog.23:27
*** praneshp has quit IRC23:28
*** doug_shelley66 has joined #openstack-dev23:28
*** changbl has quit IRC23:28
_cjones_s/groups/domains23:29
annegentle_cjones_: want to just email it to me?23:29
annegentle_cjones_: or are you patching23:29
*** epim has quit IRC23:30
*** vijendar has quit IRC23:30
*** vijendar has joined #openstack-dev23:30
_cjones_annegentle: https://gist.github.com/badgerj/2a1d77349bb7784e54f223:30
*** vijendar has quit IRC23:31
_cjones_It's a bit rough around the edges as I was just doing a POC here. If you don't mind, could you let me know of any mistakes, errors, ommisions if you go through the exercise?23:32
*** MarkAtwood_ has quit IRC23:32
*** praneshp has joined #openstack-dev23:33
*** julienvey_ has quit IRC23:33
*** rods has joined #openstack-dev23:34
annegentle_cjones_: I thought v3 was available with grizzly, but probably no one ran it then23:35
*** bdpayne has quit IRC23:41
*** dvarga is now known as dvarga|away23:42
*** dvarga|away is now known as dvarga23:42
*** fpatwa has quit IRC23:45
*** dvarga is now known as dvarga|away23:47
*** dvarga|away is now known as dvarga23:47
*** faramir has joined #openstack-dev23:50
morganfainbergbknudson, hrm?23:51
kfox1111The v3 keystone api for adding a role to a project group does not seem to be working. its 404'ing.23:52
morganfainbergbknudson, yes credential is _only_ sql.  i am fairly certain i made it so we always loaded SQL for those.23:52
bknudsonmorganfainberg: https://review.openstack.org/#/c/69065/23:52
*** rnirmal has quit IRC23:52
bknudsonmorganfainberg: try running test_backend_kvs by itself... it doesn't load the database for the credentials backend.23:53
morganfainbergbknudson, huh. you know i caught the restful ones.23:53
morganfainbergbknudson, but missed the kvs specific one23:54
morganfainbergbknudson, sorry :(23:54
morganfainbergbknudson, yeah, i see it now.23:54
bknudsonmorganfainberg: it's really any test that does load_backends... since that's going to load the credentials backend, too23:54
*** willingc has quit IRC23:54
*** benrodrigue has quit IRC23:54
morganfainbergbknudson, aye.23:55
bknudsonmorganfainberg: https://review.openstack.org/#/c/69065/ could probably use some more work if the rest tests are doing things correctly already.23:55
*** sjmc7 has quit IRC23:55
morganfainbergbknudson, i think we'll catch that cleanup as we stop calling load_backends more than once23:55
*** dvarga is now known as dvarga|away23:55
*** dvarga|away is now known as dvarga23:55
morganfainbergbknudson, we really should be calling load_backends a single time, once per test.23:55
morganfainbergbknudson, at that point you could ensure that all the deps are loaded as expected (inc. credential sql)23:56
morganfainbergbknudson, right now i can't seem to resolve the issues with loading plugins the way we discussed yesterday23:56
bknudsonmorganfainberg: I don't think the kvs tests call load_backends more than once... but the fixes to make sure that it's only called once will make things a lot cleaner.23:57
morganfainbergbknudson, load_backends isn't called in all cases is the issue23:57
bknudsonmorganfainberg: yikes!23:57
*** xchu has joined #openstack-dev23:57
morganfainbergbknudson, yeah. it's part of what i'm trying to resolve with the "call it once, and only once"23:58
*** ociuhandu_ has joined #openstack-dev23:58
morganfainbergbasically, throw an exception if it is called more than once or if it wasn't called23:58
*** praneshp has quit IRC23:58
*** dvarga has quit IRC23:58
*** tdruiva has joined #openstack-dev23:59
morganfainbergbknudson, but i need to solve this auth plugin thing first so i can move on to cleaning up config files in tests and then LDAP and then finally load_backends.23:59
*** ctracey is now known as ctracey|away23:59
morganfainbergbknudson, though... maybe i could just shuffle around the ldap tests so config changes (file changes) always occur in setUp() to get to the one use load_backends earlier23:59

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!