| *** zzzeek has quit IRC | 00:02 | |
| *** gyee has quit IRC | 00:07 | |
| *** marcoemorais has quit IRC | 00:21 | |
| *** praneshp has quit IRC | 00:22 | |
| *** RicoLin has joined #openstack-keystone | 00:48 | |
| *** praneshp has joined #openstack-keystone | 00:58 | |
| *** dimsum_ has joined #openstack-keystone | 00:59 | |
| *** aix has quit IRC | 00:59 | |
| *** dims_ has joined #openstack-keystone | 01:01 | |
| *** dimsum_ has quit IRC | 01:04 | |
| *** dims_ has quit IRC | 01:08 | |
| *** dimsum_ has joined #openstack-keystone | 01:08 | |
| *** dimsum_ has quit IRC | 01:12 | |
| *** praneshp_ has joined #openstack-keystone | 01:21 | |
| *** praneshp has quit IRC | 01:23 | |
| *** praneshp_ is now known as praneshp | 01:23 | |
| *** diegows has quit IRC | 01:23 | |
| *** stevemar has joined #openstack-keystone | 01:57 | |
| *** stevemar has quit IRC | 02:00 | |
| *** stevemar has joined #openstack-keystone | 02:01 | |
| openstackgerrit | Steve Martinelli proposed a change to openstack/keystone-specs: Fix a small rst error in hierarchical multitenancy https://review.openstack.org/116423 | 02:12 |
|---|---|---|
| openstackgerrit | A change was merged to openstack/keystone-specs: Fix rst issues in hierarchical multitenancy https://review.openstack.org/115411 | 02:13 |
| *** dimsum_ has joined #openstack-keystone | 02:15 | |
| openstackgerrit | Steve Martinelli proposed a change to openstack/identity-api: Remove unnecessary unscores in endpoint policy markdown https://review.openstack.org/116424 | 02:24 |
| *** mitz has quit IRC | 02:26 | |
| *** harlowja is now known as harlowja_away | 02:27 | |
| *** RicoLin has quit IRC | 02:36 | |
| *** Haneef_ has quit IRC | 02:37 | |
| stevemar | womp womp | 02:57 |
| *** richm has quit IRC | 03:00 | |
| *** dimsum_ has quit IRC | 03:06 | |
| *** zzzeek has joined #openstack-keystone | 03:18 | |
| *** zzzeek has quit IRC | 03:37 | |
| *** chandankumar has joined #openstack-keystone | 03:43 | |
| *** chandankumar has quit IRC | 03:45 | |
| *** chandankumar has joined #openstack-keystone | 03:45 | |
| *** _elmiko has quit IRC | 04:15 | |
| *** browne has joined #openstack-keystone | 04:16 | |
| *** browne has quit IRC | 04:20 | |
| *** harlowja_away has quit IRC | 04:32 | |
| *** praneshp has quit IRC | 04:45 | |
| *** praneshp has joined #openstack-keystone | 04:46 | |
| *** praneshp_ has joined #openstack-keystone | 04:52 | |
| *** praneshp has quit IRC | 04:55 | |
| *** praneshp_ is now known as praneshp | 04:55 | |
| *** chandankumar has quit IRC | 05:12 | |
| *** amirosh has joined #openstack-keystone | 05:19 | |
| *** chandankumar has joined #openstack-keystone | 05:21 | |
| *** amirosh has quit IRC | 05:31 | |
| *** amirosh has joined #openstack-keystone | 05:32 | |
| *** amirosh has quit IRC | 05:36 | |
| *** zzzeek has joined #openstack-keystone | 06:03 | |
| *** zzzeek has quit IRC | 06:04 | |
| *** jorge_munoz has joined #openstack-keystone | 06:05 | |
| openstackgerrit | OpenStack Proposal Bot proposed a change to openstack/keystone: Imported Translations from Transifex https://review.openstack.org/111920 | 06:06 |
| *** jorge_munoz has quit IRC | 06:08 | |
| *** jorge_munoz has joined #openstack-keystone | 06:09 | |
| *** jorge_munoz has quit IRC | 06:13 | |
| *** jorge_munoz has joined #openstack-keystone | 06:18 | |
| *** jorge_munoz has quit IRC | 06:21 | |
| *** ukalifon1 has joined #openstack-keystone | 06:22 | |
| *** stevemar has quit IRC | 06:38 | |
| *** ukalifon1 has quit IRC | 06:41 | |
| *** jorge_munoz has joined #openstack-keystone | 06:41 | |
| *** jorge_munoz has quit IRC | 06:43 | |
| *** ukalifon has joined #openstack-keystone | 06:47 | |
| *** zeridon has joined #openstack-keystone | 07:00 | |
| zeridon | good morning everyone | 07:01 |
| zeridon | can i bother you with a small idea floating in my head | 07:02 |
| *** jorge_munoz has joined #openstack-keystone | 07:02 | |
| zeridon | How feasible is to use/abuse keystone outside of openstack? Can i use it just as auth provider for some service (i like the token stuff)? | 07:03 |
| *** jorge_munoz has quit IRC | 07:04 | |
| *** jorge_munoz has joined #openstack-keystone | 07:05 | |
| *** praneshp has quit IRC | 07:09 | |
| *** jorge_munoz has quit IRC | 07:11 | |
| *** jorge_munoz has joined #openstack-keystone | 07:28 | |
| *** jorge_munoz has quit IRC | 07:33 | |
| *** jorge_munoz has joined #openstack-keystone | 07:36 | |
| *** jorge_munoz has quit IRC | 07:42 | |
| *** jorge_munoz has joined #openstack-keystone | 09:22 | |
| *** jorge_munoz has quit IRC | 09:26 | |
| *** ukalifon has quit IRC | 09:39 | |
| *** henrynash has joined #openstack-keystone | 09:39 | |
| *** henrynash has quit IRC | 09:41 | |
| *** henrynash has joined #openstack-keystone | 10:01 | |
| *** Clabbe has quit IRC | 10:04 | |
| *** Clabbe has joined #openstack-keystone | 10:09 | |
| *** xianghui has quit IRC | 10:41 | |
| *** chandankumar has quit IRC | 10:58 | |
| *** afazekas has joined #openstack-keystone | 11:06 | |
| *** chandankumar has joined #openstack-keystone | 11:11 | |
| *** xianghui has joined #openstack-keystone | 11:32 | |
| *** jamielennox|away has quit IRC | 11:35 | |
| *** jamielennox|away has joined #openstack-keystone | 11:36 | |
| *** morganfainberg_Z has quit IRC | 11:37 | |
| *** morganfainberg has joined #openstack-keystone | 12:08 | |
| *** diegows has joined #openstack-keystone | 12:12 | |
| *** morganfainberg has quit IRC | 12:14 | |
| *** morganfainberg has joined #openstack-keystone | 12:14 | |
| *** chandankumar has quit IRC | 12:31 | |
| *** dimsum_ has joined #openstack-keystone | 13:18 | |
| *** dimsum_ has joined #openstack-keystone | 13:19 | |
| *** dimsum_ is now known as dims | 13:19 | |
| *** dims has quit IRC | 13:23 | |
| *** morganfainberg has quit IRC | 13:45 | |
| *** morganfainberg has joined #openstack-keystone | 14:07 | |
| *** dims has joined #openstack-keystone | 14:09 | |
| *** dims has quit IRC | 14:12 | |
| *** chandankumar has joined #openstack-keystone | 14:33 | |
| *** dims has joined #openstack-keystone | 15:03 | |
| *** amirosh has joined #openstack-keystone | 15:09 | |
| *** dims has quit IRC | 15:17 | |
| *** cjellick_ has joined #openstack-keystone | 15:24 | |
| *** cjellick has quit IRC | 15:28 | |
| *** ukalifon1 has joined #openstack-keystone | 15:34 | |
| *** dims has joined #openstack-keystone | 15:36 | |
| *** dims has quit IRC | 15:40 | |
| openstackgerrit | A change was merged to openstack/keystone: Sync Py2 and Py3 requirements files https://review.openstack.org/115678 | 15:42 |
| *** dims has joined #openstack-keystone | 15:42 | |
| *** amirosh has quit IRC | 15:43 | |
| *** amirosh has joined #openstack-keystone | 15:44 | |
| *** dims has quit IRC | 15:46 | |
| *** dims has joined #openstack-keystone | 15:46 | |
| *** amirosh has quit IRC | 15:48 | |
| *** dims has quit IRC | 15:51 | |
| openstackgerrit | Brant Knudson proposed a change to openstack/keystone: Identity API server proof of concept (WIP) https://review.openstack.org/116464 | 16:15 |
| *** diegows has quit IRC | 16:20 | |
| *** ukalifon1 has quit IRC | 16:33 | |
| openstackgerrit | A change was merged to openstack/keystone: Standardizing the Federation Process https://review.openstack.org/105597 | 16:42 |
| *** praneshp has joined #openstack-keystone | 17:20 | |
| *** stevemar has joined #openstack-keystone | 17:27 | |
| *** __afazekas has quit IRC | 17:31 | |
| stevemar | anyone else online :) | 17:31 |
| *** praneshp_ has joined #openstack-keystone | 17:47 | |
| boris-42 | stevemar you are not alone lol | 17:47 |
| stevemar | boris-42, excellent, lots of reviews to do | 17:48 |
| *** praneshp has quit IRC | 17:48 | |
| *** praneshp_ is now known as praneshp | 17:48 | |
| boris-42 | stevemar hm?) | 17:49 |
| stevemar | boris-42, https://review.openstack.org/#/q/status:open+project:openstack/keystone+branch:master+topic:bp/json-home,n,z | 17:49 |
| stevemar | and https://review.openstack.org/#/q/status:open+project:openstack/keystone+branch:master+topic:bp/non-persistent-tokens,n,z | 17:49 |
| boris-42 | stevemar heh and my is kicked off | 17:51 |
| boris-42 | stevemar https://review.openstack.org/#/c/103368/ =( | 17:51 |
| boris-42 | stevemar I was working on this stuff 1 year =( | 17:51 |
| *** praneshp has quit IRC | 17:56 | |
| boris-42 | stevemar so I am filling some kind of sadness | 18:06 |
| *** praneshp has joined #openstack-keystone | 18:28 | |
| stevemar | boris-42, the patch seems close, do you disagree with not making it default? | 18:36 |
| boris-42 | stevemar nope I can even agree to turn it off in config | 18:37 |
| *** dims has joined #openstack-keystone | 18:37 | |
| boris-42 | stevemar but I disagree with making it fully optional (decency to osprofiler) | 18:37 |
| boris-42 | stevemar and remove it from pipe | 18:37 |
| boris-42 | stevemar cause if we remove all that stuff it will be really unusable and nobody will use it | 18:38 |
| boris-42 | stevemar btw this is demo http://boris-42.github.io/ngk.html | 18:38 |
| boris-42 | stevemar what can be get from CLI | 18:38 |
| boris-42 | stevemar in 2 short commands | 18:38 |
| stevemar | boris-42, i think the only change from a user perspective will be to add it to the paste pipeline, change the config option to enabled=True, and then done | 18:40 |
| stevemar | then you can run the commands | 18:40 |
| boris-42 | stevemar and believe me nobody will do that | 18:40 |
| stevemar | i think that's what dolphm is proposing.... (maybe i am not reading the comments correctly) | 18:40 |
| stevemar | really? | 18:40 |
| boris-42 | stevemar yep | 18:40 |
| stevemar | it's 2 extra steps? | 18:41 |
| boris-42 | stevemar yep | 18:41 |
| boris-42 | =( | 18:41 |
| stevemar | we do that for all our extensions :( | 18:41 |
| boris-42 | that's the sandess | 18:41 |
| boris-42 | I can do that stuff | 18:41 |
| stevemar | none of the extensions are in the paste pipeline by default | 18:41 |
| boris-42 | stevemar heh but why this should be extension? | 18:41 |
| stevemar | (except for trusts, but that's a long story) | 18:41 |
| boris-42 | stevemar I mean it will be in all projects | 18:41 |
| boris-42 | stevemar in all pipe lines | 18:42 |
| boris-42 | and it can be run in production =) | 18:42 |
| boris-42 | stevemar btw how do you test (in gates extensions) ? | 18:42 |
| stevemar | boris-42, because maybe not everyone wants it in production, it not essential | 18:42 |
| stevemar | (that's the only reason i can think of) | 18:43 |
| *** dims is now known as dimsum | 18:43 | |
| *** dimsum is now known as dimsum_ | 18:43 | |
| boris-42 | stevemar I mean let me just point you on one line of code | 18:43 |
| stevemar | sure | 18:43 |
| boris-42 | stevemar if you disable osprofiler by default | 18:44 |
| boris-42 | stevemar via keystone.conf | 18:44 |
| boris-42 | stevemar https://github.com/stackforge/osprofiler/blob/master/osprofiler/web.py#L98-L99 | 18:44 |
| boris-42 | stevemar this will be all that does osprofiler middleware | 18:45 |
| boris-42 | stevemar no performance, no security impact nothing | 18:45 |
| *** dimsum_ has quit IRC | 18:45 | |
| *** dimsum_ has joined #openstack-keystone | 18:45 | |
| boris-42 | stevemar so is there any way to convince people that this can be exception from rules? | 18:47 |
| stevemar | boris-42, it just proceeds with the request | 18:48 |
| stevemar | boris-42, i don't know, depends on dolphm, | 18:48 |
| stevemar | boris-42, you might have better luck by not including it by default, and then proposing another change to enable it | 18:49 |
| stevemar | at least it's in there, rather than not | 18:49 |
| boris-42 | stevemar so one change without change in api-paste.in | 18:49 |
| boris-42 | stevemar okay I will restore patches and try one more time | 18:50 |
| boris-42 | who knows | 18:50 |
| *** dimsum_ has quit IRC | 18:50 | |
| stevemar | :) | 18:50 |
| stevemar | boris-42, yeah, move osprofiler to test-requirements too.... so it's not necessary | 18:50 |
| stevemar | but question for you | 18:50 |
| boris-42 | stevemar sure, it's actually necessary | 18:51 |
| stevemar | how do nova/other projects consume osprofiler? | 18:51 |
| boris-42 | stevemar I can expalin=) | 18:51 |
| boris-42 | stevemar so actually there are 2 patches | 18:51 |
| boris-42 | stevemar in every project | 18:51 |
| boris-42 | stevemar https://review.openstack.org/#/c/114856/ | 18:51 |
| boris-42 | stevemar this is for python-client | 18:52 |
| *** ukalifon1 has joined #openstack-keystone | 18:52 | |
| boris-42 | so basically you can put any amount of trace points in code | 18:52 |
| boris-42 | stevemar take a look at section "4 ways to add a new trace point" | 18:52 |
| boris-42 | stevemar https://github.com/stackforge/osprofiler | 18:52 |
| boris-42 | stevemar so when you basically run "client --profile SECRET_HMAC_KEY any_command" | 18:53 |
| boris-42 | stevemar you are activating profiling stuff, and that command prints trace_id | 18:53 |
| stevemar | interesting, cinder is now depending on it, i see that patch is approved | 18:54 |
| boris-42 | stevemar using osprofiler (that uses ceilometer client) you can retrieve trace information and build such kind of http://boris-42.github.io/ngk.html | 18:54 |
| *** praneshp_ has joined #openstack-keystone | 18:54 | |
| boris-42 | stevemar cinder and glance | 18:54 |
| boris-42 | stevemar for now | 18:54 |
| boris-42 | stevemar and I think heat guys are pretty excited as well | 18:54 |
| boris-42 | stevemar nova as weill is ok but they want bureaucracy =) | 18:55 |
| stevemar | hehe, i see that! | 18:55 |
| stevemar | this patch is hilarious | 18:55 |
| stevemar | https://review.openstack.org/#/c/103825/ | 18:55 |
| *** praneshp has quit IRC | 18:55 | |
| *** praneshp_ is now known as praneshp | 18:55 | |
| stevemar | so many +1s | 18:55 |
| boris-42 | stevemar ya I tried to find different cores and ptl | 18:55 |
| boris-42 | stevemar as I said I was working on osprofiler for 1 year | 18:56 |
| boris-42 | stevemar to align it between different people projects deployers opreators=) | 18:56 |
| boris-42 | so it took a lot of time | 18:56 |
| stevemar | boris-42, i think if other projects depend on it, and deploy it by default, and include it in requirements.txt, then it'll be OK for keystone... | 18:56 |
| stevemar | but like i said, depend on our PTL :) | 18:57 |
| boris-42 | stevemar ya | 18:57 |
| boris-42 | stevemar okay I'll split my patch 2 seprated | 18:57 |
| boris-42 | stevemar one without changes in pipe lines | 18:57 |
| stevemar | boris-42, thanks! yeah, try and address all the comments, at least we can land the code | 18:57 |
| stevemar | and then appeal for enabling it by default | 18:58 |
| boris-42 | stevemar and I'll turn it off | 18:58 |
| boris-42 | stevemar by default | 18:58 |
| stevemar | yep | 18:58 |
| boris-42 | stevemar no I am going actually to turn it off | 18:58 |
| boris-42 | stevemar in all *.conf | 18:58 |
| boris-42 | stevemar so it willb e simple to crate new argument in devstack | 18:58 |
| stevemar | makes sense i think | 18:58 |
| boris-42 | stevemar for developers like PROFILING=TRUE | 18:58 |
| *** ukalifon1 has quit IRC | 18:59 | |
| boris-42 | stevemar btw | 19:03 |
| boris-42 | stevemar what means "This needs translation hints" | 19:03 |
| boris-42 | stevemar https://review.openstack.org/#/c/103368/16/keystone/common/profiler.py | 19:03 |
| *** ukalifon has joined #openstack-keystone | 19:06 | |
| *** amirosh has joined #openstack-keystone | 19:14 | |
| stevemar | boris-42, it means to wrap the msg in _() | 19:15 |
| openstackgerrit | Boris Pavlovic proposed a change to openstack/keystone: Integrate OSprofiler in Keystone https://review.openstack.org/103368 | 19:16 |
| openstackgerrit | Boris Pavlovic proposed a change to openstack/keystone: Integrate OSprofiler in Keystone https://review.openstack.org/103368 | 19:18 |
| *** ukalifon has quit IRC | 19:22 | |
| boris-42 | stevemar hm but it is already? | 19:32 |
| boris-42 | stevemar in any case going to left a lot of comments =) | 19:36 |
| stevemar | boris-42, thanks for not giving up on the patch :) | 19:44 |
| *** amirosh has quit IRC | 19:54 | |
| *** amirosh has joined #openstack-keystone | 19:54 | |
| *** praneshp_ has joined #openstack-keystone | 19:58 | |
| *** amirosh has quit IRC | 19:59 | |
| *** praneshp has quit IRC | 20:01 | |
| *** praneshp_ is now known as praneshp | 20:01 | |
| boris-42 | stevemar I left a lot of comment on patch set 16 https://review.openstack.org/#/c/103368 | 20:19 |
| boris-42 | stevemar I hope dolphm will be happy | 20:20 |
| openstackgerrit | Boris Pavlovic proposed a change to openstack/python-keystoneclient: Add shell --profile option to tirgger osprofiler from CLI https://review.openstack.org/114856 | 20:29 |
| *** HenryG has quit IRC | 20:52 | |
| *** HenryG has joined #openstack-keystone | 20:52 | |
| *** henrynash has quit IRC | 20:55 | |
| *** henrynash has joined #openstack-keystone | 20:58 | |
| openstackgerrit | A change was merged to openstack/keystone-specs: Move openID Connect support to Kilo release https://review.openstack.org/113666 | 21:01 |
| openstackgerrit | Boris Pavlovic proposed a change to openstack/python-keystoneclient: Add shell --profile option to tirgger osprofiler from CLI https://review.openstack.org/114856 | 21:03 |
| openstackgerrit | Steve Martinelli proposed a change to openstack/identity-api: Remove unnecessary dashes in endpoint policy markdown https://review.openstack.org/116424 | 21:04 |
| *** henrynash has quit IRC | 21:06 | |
| *** swartulv has joined #openstack-keystone | 21:38 | |
| openstackgerrit | Steve Martinelli proposed a change to openstack/identity-api: API documentation for Hierarchical Multitenancy https://review.openstack.org/111355 | 21:39 |
| openstackgerrit | Steve Martinelli proposed a change to openstack/identity-api: API documentation for Hierarchical Multitenancy https://review.openstack.org/111355 | 21:43 |
| *** dimsum_ has joined #openstack-keystone | 21:58 | |
| *** dimsum_ has quit IRC | 22:04 | |
| *** dimsum_ has joined #openstack-keystone | 22:05 | |
| *** dimsum_ has quit IRC | 22:10 | |
| *** stevemar has quit IRC | 22:14 | |
| *** dimsum_ has joined #openstack-keystone | 23:04 | |
| *** stevemar has joined #openstack-keystone | 23:09 | |
| *** dimsum_ has quit IRC | 23:24 | |
| *** dimsum_ has joined #openstack-keystone | 23:25 | |
| *** dimsum_ has quit IRC | 23:29 | |
| *** diegows has joined #openstack-keystone | 23:35 | |
| *** dimsum_ has joined #openstack-keystone | 23:49 | |
| *** dimsum_ is now known as dims | 23:49 | |
| *** dims is now known as Guest74822 | 23:50 | |
| *** Guest74822 has quit IRC | 23:52 | |
| *** jorge_munoz has joined #openstack-keystone | 23:56 | |
| *** stevemar has quit IRC | 23:57 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!