| nkinder | stevemar: your patch works, but I have some review feedback | 00:00 |
|---|---|---|
| *** andreaf has quit IRC | 00:01 | |
| *** andreaf has joined #openstack-keystone | 00:01 | |
| stevemar | nkinder, neato! i'll look at it soon | 00:01 |
| stevemar | ah nice bug nkinder we do do a domain lookup eh | 00:03 |
| nkinder | stevemar: yep, unfortunately | 00:05 |
| nkinder | stevemar: that's one of the things that should probably be adjusted in your patch too | 00:05 |
| stevemar | nkinder, so group show and project show should probably be update too? | 00:08 |
| nkinder | stevemar: yeah, I think so (for consistency at least) | 00:08 |
| nkinder | stevemar: a cloud admin might want to grant 'admin' to a group from a domain to allow them to be the domain admins | 00:09 |
| nkinder | I'm not really sure that there is a use-case for project, but I can't see why it would be a bad thing | 00:09 |
| stevemar | ++ for consistency | 00:10 |
| stevemar | okay, i might get to that in a bit | 00:10 |
| openstackgerrit | A change was merged to openstack/keystone: Add an XML code directive to a shibboleth example https://review.openstack.org/125535 | 00:11 |
| openstackgerrit | A change was merged to openstack/keystone: Use openstackclient examples in configuration documentation https://review.openstack.org/124270 | 00:12 |
| nkinder | stevemar: doh! closes-bug vs. resolves-bug bites me again | 00:15 |
| nkinder | we use resolves-bug internally for some things | 00:15 |
| openstackgerrit | A change was merged to openstack/keystone: Remove deprecated TemplatedCatalog class https://review.openstack.org/125708 | 00:17 |
| openstackgerrit | A change was merged to openstack/keystone: Update 'Configuring Services' documentation https://review.openstack.org/123933 | 00:17 |
| bknudson | does the latest keystone cache the endpoints in the catalog? if not, seems like something we should be doing since it's used to put the catalog in the token | 00:19 |
| *** gyee has quit IRC | 00:20 | |
| stevemar | nkinder, ahh that explains it | 00:24 |
| *** ncoghlan has joined #openstack-keystone | 00:27 | |
| *** tqtran has quit IRC | 00:32 | |
| *** NM has joined #openstack-keystone | 00:36 | |
| *** ncoghlan is now known as ncoghlan_afk | 00:37 | |
| *** amcrn has quit IRC | 00:38 | |
| *** harlowja_ has quit IRC | 00:40 | |
| *** harlowja has joined #openstack-keystone | 00:41 | |
| *** ncoghlan_afk is now known as ncoghlan | 00:42 | |
| *** Guest69465 is now known as mfisch | 00:47 | |
| *** mfisch is now known as Guest67039 | 00:48 | |
| *** ncoghlan is now known as ncoghlan_afk | 00:56 | |
| *** dguitarbite has quit IRC | 00:56 | |
| *** gokrokve has joined #openstack-keystone | 00:56 | |
| *** _cjones_ has quit IRC | 01:02 | |
| *** _cjones_ has joined #openstack-keystone | 01:03 | |
| *** _cjones_ has quit IRC | 01:07 | |
| *** ncoghlan_afk is now known as ncoghlan | 01:24 | |
| *** marcoemorais has quit IRC | 01:25 | |
| *** dimsum_ has quit IRC | 01:35 | |
| *** dimsum_ has joined #openstack-keystone | 01:36 | |
| *** dimsum_ has quit IRC | 01:40 | |
| *** david-lyle has quit IRC | 01:48 | |
| *** andreaf has quit IRC | 01:50 | |
| *** andreaf has joined #openstack-keystone | 01:50 | |
| *** andreaf has quit IRC | 01:50 | |
| *** andreaf has joined #openstack-keystone | 01:51 | |
| *** gokrokve_ has joined #openstack-keystone | 01:52 | |
| *** jamielennox has joined #openstack-keystone | 01:53 | |
| *** gokrokve has quit IRC | 01:55 | |
| *** diegows has quit IRC | 01:56 | |
| *** gokrokve_ has quit IRC | 01:56 | |
| *** NM has quit IRC | 01:59 | |
| nkinder | stevemar: what part of the IPA automation were you interested in? Setting up Keystone to use IPA, setting up IPA itself, or both? | 02:01 |
| *** jwy has quit IRC | 02:02 | |
| *** lhcheng has quit IRC | 02:13 | |
| *** bknudson has quit IRC | 02:13 | |
| *** lhcheng has joined #openstack-keystone | 02:13 | |
| *** _cjones_ has joined #openstack-keystone | 02:14 | |
| openstackgerrit | David Stanek proposed a change to openstack/keystone: Fixes a spelling error in hacking tests https://review.openstack.org/119461 | 02:14 |
| *** NM has joined #openstack-keystone | 02:14 | |
| *** _cjones_ has quit IRC | 02:18 | |
| *** lhcheng has quit IRC | 02:18 | |
| *** amerine has quit IRC | 02:18 | |
| *** amerine has joined #openstack-keystone | 02:19 | |
| *** amerine has quit IRC | 02:21 | |
| *** dguitarbite has joined #openstack-keystone | 02:21 | |
| *** amerine has joined #openstack-keystone | 02:21 | |
| openstackgerrit | gordon chung proposed a change to openstack/keystonemiddleware: Adding audit middleware to keystonemiddleware https://review.openstack.org/102958 | 02:23 |
| *** alex_xu has joined #openstack-keystone | 02:27 | |
| *** amerine has quit IRC | 02:28 | |
| *** amerine has joined #openstack-keystone | 02:29 | |
| *** NM has quit IRC | 02:35 | |
| *** NM has joined #openstack-keystone | 02:41 | |
| *** harlowja is now known as harlowja_away | 02:44 | |
| morganfainberg | nkinder, either tomorrow or thurs night to meetup in person | 02:47 |
| nkinder | morganfainberg: tomorrow works better for me, but I can make either of them work | 02:48 |
| morganfainberg | nkinder, once i sync up w/ gyee and the HP folks I'll let ya know | 02:48 |
| nkinder | sounds good | 02:48 |
| morganfainberg | i'm leaning towards tomorrow | 02:48 |
| morganfainberg | if at all possible | 02:48 |
| *** sunrenjie6 has joined #openstack-keystone | 02:49 | |
| *** NM has quit IRC | 02:53 | |
| *** stevemar has quit IRC | 02:53 | |
| *** stevemar has joined #openstack-keystone | 02:54 | |
| fifieldt | ok, morganfainberg - let me wake up a bit and get back to you | 03:09 |
| remote_morgan_ | Sure. I'm hopping on a plane. Will be at the hotel in a couple hrs. | 03:12 |
| remote_morgan_ | fifieldt: will ping you when I'm there | 03:12 |
| stevemar | nkinder, primarily setting up IPA | 03:26 |
| stevemar | but i | 03:26 |
| stevemar | but i'll take both | 03:26 |
| *** oomichi has joined #openstack-keystone | 03:28 | |
| *** wwriverrat1 has joined #openstack-keystone | 03:29 | |
| *** cjellick has quit IRC | 03:31 | |
| *** oomichi has quit IRC | 03:38 | |
| *** miqui has quit IRC | 03:44 | |
| *** andreaf has quit IRC | 03:46 | |
| *** andreaf has joined #openstack-keystone | 03:47 | |
| *** marcoemorais has joined #openstack-keystone | 04:14 | |
| *** gokrokve has joined #openstack-keystone | 04:15 | |
| *** marcoemorais1 has joined #openstack-keystone | 04:16 | |
| *** gokrokve has quit IRC | 04:18 | |
| *** gokrokve has joined #openstack-keystone | 04:18 | |
| *** marcoemorais has quit IRC | 04:19 | |
| *** dimsum_ has joined #openstack-keystone | 04:26 | |
| *** dimsum_ has quit IRC | 04:30 | |
| *** marcoemorais1 has quit IRC | 04:38 | |
| *** marcoemorais has joined #openstack-keystone | 04:46 | |
| *** ncoghlan is now known as ncoghlan_afk | 04:53 | |
| *** gokrokve_ has joined #openstack-keystone | 05:01 | |
| *** ukalifon1 has joined #openstack-keystone | 05:01 | |
| *** gokrokve has quit IRC | 05:04 | |
| *** gokrokve_ has quit IRC | 05:06 | |
| *** swamireddy has joined #openstack-keystone | 05:10 | |
| *** Kui has quit IRC | 05:13 | |
| *** ajayaa has joined #openstack-keystone | 05:15 | |
| *** gokrokve has joined #openstack-keystone | 05:15 | |
| *** Kui has joined #openstack-keystone | 05:16 | |
| *** andreaf has quit IRC | 05:20 | |
| *** andreaf has joined #openstack-keystone | 05:20 | |
| *** gokrokve has quit IRC | 05:27 | |
| *** gokrokve has joined #openstack-keystone | 05:27 | |
| openstackgerrit | Sergey Kraynev proposed a change to openstack/python-keystoneclient: Using correct keyword for region in v3 https://review.openstack.org/118383 | 05:27 |
| *** jamielennox has quit IRC | 05:29 | |
| *** HenryG_ has joined #openstack-keystone | 05:29 | |
| *** HenryG has quit IRC | 05:30 | |
| *** lhcheng has joined #openstack-keystone | 05:31 | |
| *** gokrokve has quit IRC | 05:32 | |
| *** jamielennox has joined #openstack-keystone | 05:40 | |
| *** afazekas has joined #openstack-keystone | 05:50 | |
| *** lhcheng has quit IRC | 05:50 | |
| *** lhcheng_ has joined #openstack-keystone | 05:53 | |
| *** ncoghlan_afk is now known as ncoghlan | 06:01 | |
| *** lhcheng_ has quit IRC | 06:05 | |
| *** stevemar has quit IRC | 06:06 | |
| *** dimsum_ has joined #openstack-keystone | 06:15 | |
| *** ajayaa has quit IRC | 06:16 | |
| *** dimsum_ has quit IRC | 06:20 | |
| *** ajayaa has joined #openstack-keystone | 06:29 | |
| *** oomichi has joined #openstack-keystone | 06:34 | |
| *** shakamunyi has joined #openstack-keystone | 06:35 | |
| *** r1chardj0n3s is now known as r1chardj0n3s_afk | 06:37 | |
| *** k4n0 has joined #openstack-keystone | 07:08 | |
| *** shakamunyi has quit IRC | 07:18 | |
| *** shakamunyi has joined #openstack-keystone | 07:19 | |
| morganfainberg | fifieldt, ping just got to the hotel | 07:26 |
| morganfainberg | fifieldt, if you're around. if not I can talk to you tomorrow sometime. | 07:26 |
| *** andreaf has quit IRC | 07:32 | |
| *** andreaf has joined #openstack-keystone | 07:32 | |
| *** Krast has joined #openstack-keystone | 07:38 | |
| *** ncoghlan has quit IRC | 07:42 | |
| *** andreaf has quit IRC | 07:58 | |
| *** andreaf has joined #openstack-keystone | 07:58 | |
| *** amdl has left #openstack-keystone | 08:04 | |
| *** henrynash has joined #openstack-keystone | 08:07 | |
| *** jistr has joined #openstack-keystone | 08:10 | |
| *** jistr has quit IRC | 08:12 | |
| *** jistr has joined #openstack-keystone | 08:20 | |
| *** shakamunyi has quit IRC | 08:24 | |
| *** kevinbenton has quit IRC | 08:28 | |
| *** kevinbenton has joined #openstack-keystone | 08:36 | |
| *** marcoemorais has quit IRC | 08:44 | |
| *** shakamunyi has joined #openstack-keystone | 08:50 | |
| *** nellysmitt has joined #openstack-keystone | 08:52 | |
| *** Krast has quit IRC | 08:52 | |
| *** shakamunyi has quit IRC | 08:55 | |
| *** Krast has joined #openstack-keystone | 09:01 | |
| *** Krast has quit IRC | 09:04 | |
| *** Krast has joined #openstack-keystone | 09:05 | |
| *** andreaf has quit IRC | 09:14 | |
| *** andreaf has joined #openstack-keystone | 09:14 | |
| *** alex_xu has quit IRC | 09:21 | |
| fifieldt | sorry morganfainberg, I was in a meeting | 09:35 |
| *** oomichi has quit IRC | 09:36 | |
| *** jaosorior has joined #openstack-keystone | 09:44 | |
| *** shakamunyi has joined #openstack-keystone | 09:51 | |
| *** shakamunyi has quit IRC | 09:55 | |
| *** aix has joined #openstack-keystone | 10:00 | |
| *** jistr has quit IRC | 10:17 | |
| *** Krast has quit IRC | 10:22 | |
| *** jistr has joined #openstack-keystone | 10:22 | |
| *** amakarov_away is now known as amakarov | 10:28 | |
| *** diegows has joined #openstack-keystone | 10:49 | |
| *** dimsum_ has joined #openstack-keystone | 10:54 | |
| *** dimsum_ has quit IRC | 10:55 | |
| *** dimsum_ has joined #openstack-keystone | 10:55 | |
| *** openstack has joined #openstack-keystone | 14:12 | |
| afaranha | good to know, I can test the Rest API without login many times a day | 14:13 |
| *** openstackstatus has joined #openstack-keystone | 14:14 | |
| *** ChanServ sets mode: +v openstackstatus | 14:14 | |
| ajayaa | Hi Guys. Just a quick question. If I am installing a fresh keystone manually and I run db_sync ,would it create any roles on the mysql? | 14:17 |
| ajayaa | ayoung, ^^ | 14:18 |
| ayoung | ajayaa, is this a trick question? | 14:18 |
| ajayaa | nope. | 14:18 |
| ayoung | OK, I give up. Wouild it? | 14:18 |
| ajayaa | ayoung, I don't know. I just thought I would ask than try it or dig into code. | 14:19 |
| ayoung | ajayaa, any emprical? | 14:19 |
| ayoung | empirical...did you try it out? | 14:19 |
| ajayaa | ayoung, I didn't try. Just asking. | 14:20 |
| dstanek | i don't think it will create any test data | 14:21 |
| dstanek | ajayaa: ^ | 14:21 |
| ajayaa | Thanks. | 14:21 |
| dstanek | ajayaa: that's why in devstack they have scripts to populate the various services with test data | 14:21 |
| ayoung | ajayaa, we used to create a _member_ role, but that migration was collapsed, and we do not do so now | 14:22 |
| ayoung | so it depends on what version you are running whether or not you get that role. Master will not create a role, I believe. | 14:22 |
| ayoung | But I would have to look to confirm | 14:22 |
| ayoung | cuz we all know: | 14:22 |
| ajayaa | dstanek, Even I thought the same. But there is someone in management to whom I should say with 100% surity that keystone does not come with any default role. | 14:22 |
| ayoung | I lie, I make things up | 14:22 |
| ayoung | asking me is certainly not "100% surity" | 14:23 |
| ayoung | its like, 5%. Maybe 8. | 14:23 |
| ajayaa | ayoung, You are a core. You should ne at least 99% | 14:23 |
| ajayaa | ;) | 14:23 |
| ayoung | it just droppped to 4.2% | 14:23 |
| ajayaa | lol. | 14:24 |
| dstanek | ajayaa: well, i'm not 100% sure, but i can say that i've not seen anything that indicates we have test data outside of tests | 14:25 |
| ajayaa | dstanek, ayoung, I will verify it. :) | 14:25 |
| ajayaa | dstanek, ayoung, Is it a good idea to use domains in a prod setup? | 14:26 |
| ayoung | ajayaa, you need Keystone V3 everywhere for domains. Yes, it is a good idea, but I have no idea how well tested that is...it kindof scares me since we are basically banking on v3 and domains | 14:27 |
| ajayaa | As of now domains don't provide any functionality other than just containers for projects. | 14:27 |
| *** henrynash has joined #openstack-keystone | 14:27 | |
| ajayaa | ayoung, neutron, nova don't work with domains as well. | 14:27 |
| ajayaa | I mean domain-scoped tokens. | 14:27 |
| bknudson | domain-scoped tokens have no use outside of keystone | 14:28 |
| ajayaa | If other projects don't understand domains and let you do operations on them, then what's the point of domains? | 14:28 |
| ajayaa | For e.g. I would like to do quota enforcement on a domain. | 14:28 |
| ajayaa | But nova does not understand domains. | 14:29 |
| ajayaa | I mean there is no nova api call to do that. | 14:29 |
| ajayaa | Please correct me If I am wrong or trying to use domains in way that it was not designed to be used. | 14:30 |
| rodrigods | ajayaa, the quota enforcement is being implemented for hierarchical projects | 14:30 |
| rodrigods | maybe this concept will address your issues | 14:30 |
| ajayaa | rodrigods, I agree. Now we are making a decision on whether to use domains or not. | 14:31 |
| ajayaa | My opinion to our management is we shouldn't use it because of the above stated reasons. | 14:31 |
| ajayaa | Please let me know of the benefits of using domains. | 14:32 |
| rodrigods | ajayaa, the biggest one, that i know, is regarding user management | 14:32 |
| rodrigods | and its implications, like, federation | 14:33 |
| ajayaa | LDAP and sql multi-domain. | 14:33 |
| rodrigods | another one =) | 14:33 |
| ajayaa | federation, that's an area I haven't delve into yet. | 14:33 |
| ajayaa | rodrigods, anyway when the hierarchical projects comes into place, it would render domains useless. They will be there just for backward compatibility. | 14:35 |
| rodrigods | ajayaa, not so fast =) | 14:35 |
| rodrigods | domains will remain as users container | 14:35 |
| ajayaa | rodrigods, I know. | 14:36 |
| rodrigods | but you will be able to do "domain-like" stuff in other components, i hope | 14:36 |
| rodrigods | at least, we have this quota part being already implemented | 14:36 |
| *** wanda_ has joined #openstack-keystone | 14:36 | |
| raildo | ajayaa, we implement domain quota driver in Nova: https://blueprints.launchpad.net/nova/+spec/domain-quota-driver | 14:37 |
| ajayaa | If I recall correctly it is being developed as a part of oslo! | 14:37 |
| raildo | But they are not like the idea about include domains in Nova | 14:37 |
| ajayaa | raildo, Exactly. I have the same concern regarding other components. | 14:38 |
| raildo | ajayaa, ++ | 14:38 |
| ajayaa | Even if nova accepts domains other projects might not choose to do so. | 14:38 |
| rodrigods | ajayaa, yes, this is the advantage of hierarchical projects in my point of view | 14:39 |
| ajayaa | raildo, We need some consensus on whether it is going to be used by other projects or not. | 14:39 |
| ajayaa | If not then, we should clearly mention in the docs that domains are just for user management. | 14:40 |
| *** swamireddy has quit IRC | 14:40 | |
| raildo | in other moment, the community decided that domains will just work in Keystone | 14:41 |
| ajayaa | ayoung, dstanek ^^ | 14:42 |
| ajayaa | I am sure you have better things to do. But please advise on domains. | 14:42 |
| ajayaa | raildo, Can you please give the link to that discussion? | 14:44 |
| raildo | ajayaa, hahaha I like the idea of domains, just think it is not being used to all its potential. | 14:44 |
| *** shakamunyi has joined #openstack-keystone | 14:44 | |
| dolphm | ajayaa: domain-based quotas are one of the very, very few places where it makes sense for another core openstack project to be domain-aware | 14:45 |
| raildo | ajayaa, this was discussed in #openstack-nova , i believe that don't have log for this | 14:45 |
| dolphm | ajayaa: i only see use cases for domains within the umbrella of AAA (which includes quotas, and auditing, and thus ceilometer) | 14:46 |
| *** topol has quit IRC | 14:46 | |
| ajayaa | dolphm, Can those areas be worked on? | 14:46 |
| dolphm | ajayaa: i'm not sure what you're asking | 14:46 |
| ajayaa | dolphm, Would it be possible to convince other components to operate in domains? | 14:47 |
| dolphm | ajayaa: i don't think you're understanding my statement - the only use case where it makes sense to incldue domains are the places where domains have already been introduced. i do not think there is any use case to introduce domains anywhere new at this point, at least not anywhere that i am aware of. | 14:48 |
| ajayaa | If hierarchical projects is the ultimate goal, why would any project accept to support domains? | 14:48 |
| dolphm | ajayaa: do you mean "any service" instead of "any project" in that question? | 14:49 |
| ajayaa | dolphm, yes | 14:49 |
| *** stevemar has joined #openstack-keystone | 14:49 | |
| dolphm | ajayaa: well, they wouldn't support domains. if they support hierarchical projects, and domains become just a top-level project, then they would support domains / top-level projects implicitly | 14:50 |
| dolphm | they wouldn't support "domains" *explicitly*, at least. there'd be no reason to do so | 14:50 |
| *** shakamunyi has quit IRC | 14:50 | |
| *** wwriverrat1 has quit IRC | 14:51 | |
| ajayaa | dolphm, If we are not doing LDAP integration or federation, Would you recommend keystone v3 without domains? | 14:53 |
| tellesnobrega | is anyone here on mountain time? | 14:53 |
| ajayaa | keystone v3, because of roles support. | 14:53 |
| tellesnobrega | can you please tell me what time is it in MST? we have a meeting and we are not sure what time it is because of the time difference | 14:54 |
| ajayaa | 7:54 am | 14:55 |
| ajayaa | Wednesday, 8 October 2014 | 14:55 |
| ajayaa | Mountain Standard Time (MST) | 14:55 |
| *** henrynash has quit IRC | 14:57 | |
| *** joesavak has quit IRC | 15:01 | |
| ajayaa | dolphm, I don't see support for quota in domain level in nova at least. At least this is a rea which needs work. | 15:02 |
| tellesnobrega | thanks ajayaa | 15:02 |
| dolphm | tellesnobrega: for future reference https://www.google.com/?gws_rd=ssl#q=current+mst+time | 15:03 |
| dolphm | tellesnobrega: but i also believe we might be in Daylist Time, not Standard Time, so it might actually be MDT that you're looking for? https://www.google.com/?gws_rd=ssl#q=current+mdt+time | 15:04 |
| dolphm | tellesnobrega: if you search for Mountain Time, it matches MDT https://www.google.com/?gws_rd=ssl#q=current+mountain+time | 15:05 |
| tellesnobrega | dolphm, thanks.. i looked it up and google showed the wrogn time | 15:05 |
| tellesnobrega | i was making sure | 15:05 |
| tellesnobrega | google mountain time and it showed 8:54 | 15:05 |
| tellesnobrega | i guess its summer savings | 15:06 |
| tellesnobrega | well | 15:06 |
| tellesnobrega | thanks | 15:06 |
| dolphm | tellesnobrega: i believe 8:54 was correct | 15:06 |
| dolphm | tellesnobrega: it's now 9:06 though | 15:06 |
| *** pc-m has joined #openstack-keystone | 15:06 | |
| dolphm | tellesnobrega: i'm one timezone off, and it's 10:06 here | 15:06 |
| tellesnobrega | ajayaa, told me it was 7:54 | 15:06 |
| tellesnobrega | it is solved | 15:07 |
| tellesnobrega | the meeting started and im confused with timezones now | 15:07 |
| dolphm | tellesnobrega: that was correct for Mountain Standard Time, but most/all of the Mountain timezone is actually on Mountain Daylight Time right now (summer savings, as you said) | 15:07 |
| tellesnobrega | lol | 15:07 |
| dolphm | timezones are dumb | 15:07 |
| tellesnobrega | agreed | 15:08 |
| ajayaa | dolphm, As you said in AAA, quota is also included. But I can't enforce quota across domains as of now. | 15:09 |
| dolphm | ajayaa: raildo is working on that right? | 15:09 |
| ajayaa | dolphm, Looking at the blueprint it seems it is on hold since icehouse. | 15:12 |
| ajayaa | raildo ? | 15:12 |
| ajayaa | ^^ | 15:12 |
| *** cjellick has joined #openstack-keystone | 15:15 | |
| *** shakamunyi has joined #openstack-keystone | 15:15 | |
| *** wanda_ has left #openstack-keystone | 15:22 | |
| *** richm has joined #openstack-keystone | 15:25 | |
| *** andreaf has quit IRC | 15:25 | |
| *** joesavak has joined #openstack-keystone | 15:30 | |
| *** thedodd has joined #openstack-keystone | 15:31 | |
| samuelmz | ajayaa, dolphm raildo is having a meeting right now . | 15:31 |
| ayoung | nkinder, you were talking about trying to wireshark or tcpdump the keystone server...I was just trying that with ssldump | 15:34 |
| ayoung | https://blogs.oracle.com/jyrivirkki/entry/using_ssldump worked well enough to get me the key, but then I got: | 15:34 |
| ayoung | hmac.c(106): OpenSSL internal error, assertion failed: j <= (int)sizeof(ctx->key) | 15:34 |
| ajayaa | samuelmz, thanks | 15:36 |
| *** lufix has joined #openstack-keystone | 15:40 | |
| *** gokrokve has quit IRC | 15:41 | |
| *** andreaf has joined #openstack-keystone | 15:46 | |
| *** ajayaa has quit IRC | 15:51 | |
| *** _cjones_ has joined #openstack-keystone | 15:53 | |
| *** mewald has quit IRC | 15:55 | |
| *** andreaf has quit IRC | 15:57 | |
| *** k4n0 has quit IRC | 16:00 | |
| openstackgerrit | Alexander Makarov proposed a change to openstack/keystone: Trust redelegation https://review.openstack.org/126897 | 16:00 |
| openstackgerrit | Alexander Makarov proposed a change to openstack/keystone: Trust redelegation https://review.openstack.org/126897 | 16:09 |
| *** bdossant has quit IRC | 16:10 | |
| *** ajayaa has joined #openstack-keystone | 16:10 | |
| *** packet has joined #openstack-keystone | 16:11 | |
| *** lhcheng has joined #openstack-keystone | 16:11 | |
| *** gokrokve has joined #openstack-keystone | 16:14 | |
| *** andreaf has joined #openstack-keystone | 16:14 | |
| *** jaosorior has left #openstack-keystone | 16:15 | |
| *** jaosorior has joined #openstack-keystone | 16:15 | |
| dstanek | we've had so many things merge that all of my patches are way out of date | 16:15 |
| openstackgerrit | David Stanek proposed a change to openstack/keystone: WIP: Force SQLite to properly deal with foreign keys https://review.openstack.org/126030 | 16:18 |
| openstackgerrit | David Stanek proposed a change to openstack/keystone: Fixes endpoint_filter tests https://review.openstack.org/126029 | 16:18 |
| openstackgerrit | David Stanek proposed a change to openstack/keystone: Remove database setup duplication https://review.openstack.org/126734 | 16:18 |
| dstanek | anyone got a few seconds to +A me here: https://review.openstack.org/#/c/119461/ | 16:19 |
| dstanek | i never feel comfortable doing that on my own stuff | 16:20 |
| *** andreaf has quit IRC | 16:21 | |
| *** andreaf has joined #openstack-keystone | 16:22 | |
| *** jistr has quit IRC | 16:22 | |
| morganfainberg | morning | 16:24 |
| morganfainberg | dstanek, looking now | 16:24 |
| morganfainberg | dolphm, done | 16:24 |
| morganfainberg | erm dstanek done | 16:24 |
| dstanek | morganfainberg: thx | 16:24 |
| *** tqtran has joined #openstack-keystone | 16:26 | |
| *** tqtran has left #openstack-keystone | 16:26 | |
| morganfainberg | dstanek, force SQLite to do FKs? is that even possible? :P | 16:28 |
| *** marcoemorais has joined #openstack-keystone | 16:28 | |
| dstanek | morganfainberg: only in a newer SQLite | 16:29 |
| morganfainberg | ah | 16:29 |
| dstanek | morganfainberg: that's how i found some of the endpoint filter bugs | 16:29 |
| morganfainberg | can we make SQLite go away instead? (I feel it's largely the same as eventlet) | 16:29 |
| * morganfainberg is only partly serious | 16:29 | |
| dstanek | it would be really awesome if our unit tests didn't actually use SQL at all - then it would go away for day to day development | 16:30 |
| dstanek | we are a long way off there thought | 16:30 |
| *** gokrokve has quit IRC | 16:33 | |
| *** gokrokve has joined #openstack-keystone | 16:33 | |
| *** NM has quit IRC | 16:36 | |
| *** amcrn has joined #openstack-keystone | 16:36 | |
| *** lhcheng has quit IRC | 16:37 | |
| *** lhcheng has joined #openstack-keystone | 16:38 | |
| *** thedodd has quit IRC | 16:39 | |
| lbragstad | morganfainberg: re: functional testing/tempest: looks like there is going to be some in depth discussions at the summit around the process/procedure for pull the functional tests out of Tempest | 16:39 |
| rodrigods | morganfainberg, I need you =) | 16:40 |
| morganfainberg | lbragstad, yeah figured | 16:40 |
| rodrigods | +2 at dolphm patch | 16:40 |
| morganfainberg | rodrigods, link? going to be hit/miss the rest of the week since I'm going to be in meetings | 16:40 |
| lbragstad | morganfainberg: so, I'll just have to be patient until the summit :) | 16:40 |
| morganfainberg | yeah | 16:41 |
| rodrigods | morganfainberg, https://review.openstack.org/#/c/126697/ | 16:41 |
| rodrigods | +2 +A, actually | 16:41 |
| morganfainberg | rodrigods, +3 | 16:42 |
| rodrigods | morganfainberg, thanks! | 16:43 |
| *** lhcheng has quit IRC | 16:43 | |
| *** andreaf has quit IRC | 16:44 | |
| *** shakamunyi has quit IRC | 16:46 | |
| *** lhcheng has joined #openstack-keystone | 16:48 | |
| *** sigmavirus24 is now known as sigmavirus24_awa | 16:52 | |
| *** lhcheng has quit IRC | 16:56 | |
| *** lhcheng_ has joined #openstack-keystone | 16:58 | |
| *** NM has joined #openstack-keystone | 17:01 | |
| *** jraim has joined #openstack-keystone | 17:03 | |
| *** zzzeek has joined #openstack-keystone | 17:03 | |
| *** amakarov is now known as amakarov_away | 17:08 | |
| *** Guest67039 is now known as mfisch | 17:10 | |
| *** mfisch is now known as Guest72593 | 17:11 | |
| *** ajayaa has quit IRC | 17:13 | |
| *** marekd is now known as marekd|away | 17:13 | |
| *** aix has quit IRC | 17:15 | |
| *** browne has joined #openstack-keystone | 17:17 | |
| *** andreaf has joined #openstack-keystone | 17:17 | |
| *** HenryG is now known as HenryG_afk | 17:20 | |
| *** lhcheng_ has quit IRC | 17:23 | |
| *** lhcheng has joined #openstack-keystone | 17:24 | |
| *** andreaf has quit IRC | 17:25 | |
| *** andreaf has joined #openstack-keystone | 17:26 | |
| *** wwriverrat has joined #openstack-keystone | 17:27 | |
| *** wwriverrat has left #openstack-keystone | 17:28 | |
| *** lhcheng has quit IRC | 17:28 | |
| *** david-lyle has joined #openstack-keystone | 17:32 | |
| *** andreaf has quit IRC | 17:34 | |
| *** lhcheng has joined #openstack-keystone | 17:40 | |
| *** lhcheng has quit IRC | 17:44 | |
| *** HenryG_afk is now known as HenryG | 17:44 | |
| *** lhcheng has joined #openstack-keystone | 17:44 | |
| *** vhoward has left #openstack-keystone | 17:45 | |
| *** jsavak has joined #openstack-keystone | 17:46 | |
| *** henrynash has joined #openstack-keystone | 17:47 | |
| *** lhcheng has quit IRC | 17:49 | |
| *** joesavak has quit IRC | 17:49 | |
| *** david-lyle has quit IRC | 17:57 | |
| samuelmz | lbragstad, ping | 17:59 |
| *** gokrokve has quit IRC | 17:59 | |
| *** jwy has joined #openstack-keystone | 17:59 | |
| *** gokrokve has joined #openstack-keystone | 17:59 | |
| *** mewald has joined #openstack-keystone | 18:04 | |
| *** browne has quit IRC | 18:05 | |
| *** sigmavirus24_awa is now known as sigmavirus24 | 18:06 | |
| *** dimsum_ has quit IRC | 18:06 | |
| *** dimsum_ has joined #openstack-keystone | 18:06 | |
| *** thedodd has joined #openstack-keystone | 18:10 | |
| *** dimsum_ has quit IRC | 18:11 | |
| *** harlowja_away is now known as harlowja | 18:14 | |
| *** _cjones_ has quit IRC | 18:16 | |
| *** _cjones_ has joined #openstack-keystone | 18:16 | |
| *** _cjones_ has quit IRC | 18:21 | |
| *** _cjones_ has joined #openstack-keystone | 18:21 | |
| *** afazekas has quit IRC | 18:23 | |
| *** jaosorior has quit IRC | 18:23 | |
| *** jaosorior has joined #openstack-keystone | 18:29 | |
| *** david-lyle has joined #openstack-keystone | 18:31 | |
| *** jsavak has quit IRC | 18:31 | |
| *** joesavak has joined #openstack-keystone | 18:32 | |
| jwy | hi, i have a question about authenticating with a client, from horizon | 18:34 |
| jwy | i'm trying to create an instance of the congress client from horizon, starting on line 65 here: https://review.openstack.org/#/c/123912/4/contrib/horizon/congress.py. the congress client uses keystoneclient.adapter.LegacyJsonAdapter here: https://github.com/stackforge/python-congressclient/blob/master/congressclient/v1/client.py#L52. but i get "ValueError: Circular reference detected". can i change my code to make it work, or does the client need to be w | 18:34 |
| *** gyee has joined #openstack-keystone | 18:41 | |
| *** dimsum_ has joined #openstack-keystone | 18:43 | |
| *** thedodd has quit IRC | 18:47 | |
| *** mewald has quit IRC | 18:49 | |
| *** aix_ has joined #openstack-keystone | 18:50 | |
| *** cjellick has quit IRC | 18:56 | |
| *** amcrn has quit IRC | 18:57 | |
| *** jistr has joined #openstack-keystone | 18:59 | |
| *** david-lyle has quit IRC | 19:04 | |
| *** mewald has joined #openstack-keystone | 19:05 | |
| *** thedodd has joined #openstack-keystone | 19:07 | |
| dstanek | jwy: you should post your traceback somewhere | 19:17 |
| raildo | dolphm, sorry I had to go out and just came back now | 19:19 |
| raildo | dolphm, i worked with the implementation of domain quota driver and the API | 19:20 |
| dolphm | raildo: do you still have an interest in merging it somewhere? | 19:20 |
| *** _cjones_ has quit IRC | 19:21 | |
| raildo | dolphm, sure! | 19:21 |
| raildo | dolphm, I have the code ready on github | 19:21 |
| *** _cjones_ has joined #openstack-keystone | 19:21 | |
| *** _cjones_ has quit IRC | 19:26 | |
| jwy | dstanek: thanks for the suggestion. i had just updated my devstack and get a different error now, "Recoverable error: The service catalog is empty", with no traceback | 19:26 |
| htruta | I think tellesnobrega may know something about the domain quota driver code | 19:28 |
| tellesnobrega | dolphm, i worked with raildo on the implementation, we have it on our git | 19:28 |
| tellesnobrega | we would love to have it merged | 19:28 |
| *** mewald has left #openstack-keystone | 19:35 | |
| *** lhcheng has joined #openstack-keystone | 19:36 | |
| openstackgerrit | A change was merged to openstack/keystone: Fixes a spelling error in hacking tests https://review.openstack.org/119461 | 19:37 |
| *** jsavak has joined #openstack-keystone | 19:47 | |
| *** joesavak has quit IRC | 19:49 | |
| *** lhcheng has quit IRC | 19:52 | |
| *** _cjones_ has joined #openstack-keystone | 19:52 | |
| *** lhcheng has joined #openstack-keystone | 19:52 | |
| *** Guest72593 is now known as mfisch | 19:53 | |
| *** mfisch is now known as Guest6813 | 19:53 | |
| openstackgerrit | David Stanek proposed a change to openstack/keystone: Adds missing log hints for level E/I/W https://review.openstack.org/118883 | 19:54 |
| openstackgerrit | David Stanek proposed a change to openstack/keystone: Extends hacking check for logging to verify i18n hints https://review.openstack.org/118884 | 19:54 |
| openstackgerrit | David Stanek proposed a change to openstack/keystone: Fixes aggressive use of translation hints https://review.openstack.org/125233 | 19:54 |
| *** Guest6813 is now known as mfisch | 19:54 | |
| *** mfisch has quit IRC | 19:54 | |
| *** mfisch has joined #openstack-keystone | 19:55 | |
| *** lhcheng has quit IRC | 19:56 | |
| *** topol has joined #openstack-keystone | 19:59 | |
| *** _cjones_ has quit IRC | 20:03 | |
| *** nellysmi_ has quit IRC | 20:03 | |
| *** marcoemorais has quit IRC | 20:03 | |
| *** _cjones_ has joined #openstack-keystone | 20:03 | |
| *** marcoemorais has joined #openstack-keystone | 20:03 | |
| *** marcoemorais has quit IRC | 20:04 | |
| *** marcoemorais has joined #openstack-keystone | 20:05 | |
| *** jistr has quit IRC | 20:08 | |
| *** r1chardj0n3s_afk is now known as r1chardj0n3s | 20:12 | |
| *** lufix has quit IRC | 20:16 | |
| openstackgerrit | Brant Knudson proposed a change to openstack/keystonemiddleware: Refactor extract class for signing directory https://review.openstack.org/122281 | 20:23 |
| openstackgerrit | Brant Knudson proposed a change to openstack/keystonemiddleware: Refactor auth_token revocation list members to new class https://review.openstack.org/102403 | 20:23 |
| *** thedodd has quit IRC | 20:23 | |
| *** thedodd has joined #openstack-keystone | 20:28 | |
| *** jaosorior has quit IRC | 20:33 | |
| *** cjellick has joined #openstack-keystone | 20:37 | |
| *** wwriverrat has joined #openstack-keystone | 20:38 | |
| *** wwriverrat has left #openstack-keystone | 20:39 | |
| *** amcrn has joined #openstack-keystone | 20:40 | |
| zzzeek | hey morganfainberg : I’ve fleshed out https://review.openstack.org/#/c/125181/. I’ve identified four distinct advantages to using decorators vs. context managers | 20:45 |
| *** dimsum_ has quit IRC | 20:45 | |
| *** dimsum_ has joined #openstack-keystone | 20:45 | |
| *** topol has quit IRC | 20:47 | |
| *** dimsum_ has quit IRC | 20:49 | |
| *** lhcheng has joined #openstack-keystone | 21:08 | |
| *** lhcheng has quit IRC | 21:08 | |
| *** marcoemorais has quit IRC | 21:09 | |
| *** marcoemorais has joined #openstack-keystone | 21:10 | |
| *** raildo has quit IRC | 21:10 | |
| *** lhcheng_ has joined #openstack-keystone | 21:13 | |
| *** Kui has joined #openstack-keystone | 21:15 | |
| *** gokrokve has quit IRC | 21:16 | |
| *** richm has quit IRC | 21:20 | |
| *** jsavak has quit IRC | 21:21 | |
| *** cds has joined #openstack-keystone | 21:25 | |
| *** marcoemorais has quit IRC | 21:25 | |
| remote_morgan_ | zzzeek: cool. Will make sure to read it. | 21:27 |
| openstackgerrit | Brant Knudson proposed a change to openstack/keystone: pki/ssl_setup configurable digest https://review.openstack.org/117366 | 21:27 |
| openstackgerrit | Brant Knudson proposed a change to openstack/keystone: Change the default digest for pki/ssl_setup to sha256 https://review.openstack.org/117367 | 21:27 |
| *** marcoemorais has joined #openstack-keystone | 21:27 | |
| *** Ugallu has quit IRC | 21:29 | |
| *** cjellick has quit IRC | 21:29 | |
| *** cjellick has joined #openstack-keystone | 21:32 | |
| mgagne | I'm having issues with PKI tokens and openstack clients. When passing a pre-authorized token to a client (like neutronclient), it will try to contact keystone (/v2.0/tokens/{tokenId}/endpoints) to fetch the endpoints associated to the token. As it happens that a PKI token grows as you add regions/endpoints, the URL becomes too long for keystone to handle properly and I'm getting HTTP Request URI too long errors. How can I address this | 21:32 |
| *** wwriverrat has joined #openstack-keystone | 21:33 | |
| *** cjellick has quit IRC | 21:35 | |
| *** wwriverrat has quit IRC | 21:35 | |
| *** lhcheng_ has quit IRC | 21:35 | |
| *** cjellick has joined #openstack-keystone | 21:36 | |
| *** gokrokve has joined #openstack-keystone | 21:36 | |
| *** wwriverrat has joined #openstack-keystone | 21:37 | |
| openstackgerrit | Brant Knudson proposed a change to openstack/keystonemiddleware: Delete unused examples/pki/certs/middleware.pem https://review.openstack.org/122277 | 21:38 |
| *** saipandi has quit IRC | 21:38 | |
| *** gokrokve has quit IRC | 21:40 | |
| *** gokrokve has joined #openstack-keystone | 21:40 | |
| *** thiagop has quit IRC | 21:40 | |
| *** radez is now known as radez_g0n3 | 21:42 | |
| *** henrynash has quit IRC | 21:49 | |
| *** stevemar has quit IRC | 21:53 | |
| *** packet has quit IRC | 21:55 | |
| nkinder | remote_morgan_: any word on meeting up later? | 21:59 |
| *** sigmavirus24 is now known as sigmavirus24_awa | 21:59 | |
| remote_morgan_ | nkinder: looks like it's tomorrow. | 22:00 |
| nkinder | remote_morgan_: ok | 22:00 |
| *** nellysmitt has joined #openstack-keystone | 22:00 | |
| remote_morgan_ | nkinder: was the time that worked the best for gyee etc as well. | 22:00 |
| *** thedodd has quit IRC | 22:00 | |
| nkinder | remote_morgan_: I'll get the details from you tomorrow | 22:01 |
| *** wwriverrat has quit IRC | 22:01 | |
| remote_morgan_ | Need to see if thingiee will be joining as well | 22:01 |
| remote_morgan_ | Ok will get details over to you tomorrow morning. | 22:01 |
| *** marcoemorais1 has joined #openstack-keystone | 22:03 | |
| *** marcoemorais has quit IRC | 22:03 | |
| *** marcoemorais1 has quit IRC | 22:04 | |
| *** rwsu has quit IRC | 22:05 | |
| *** marcoemorais has joined #openstack-keystone | 22:05 | |
| *** nellysmitt has quit IRC | 22:05 | |
| *** packet has joined #openstack-keystone | 22:07 | |
| *** gordc has quit IRC | 22:08 | |
| *** packet has quit IRC | 22:10 | |
| *** nkinder has quit IRC | 22:10 | |
| *** rkofman has quit IRC | 22:12 | |
| *** rkofman has joined #openstack-keystone | 22:13 | |
| *** wwriverrat has joined #openstack-keystone | 22:14 | |
| *** rwsu has joined #openstack-keystone | 22:17 | |
| *** flwang1 has joined #openstack-keystone | 22:17 | |
| flwang1 | greetings, may I know how to let a user can add new user for current tenant? cheers | 22:17 |
| flwang1 | for now, I'm trying to create a new role: "manager" and change the policy file to let the manager role have the permissions for users operations | 22:20 |
| flwang1 | but seems it doesn't work, any suggestion will be appreciated | 22:20 |
| *** wwriverrat has left #openstack-keystone | 22:20 | |
| *** NM has quit IRC | 22:20 | |
| openstackgerrit | Brant Knudson proposed a change to openstack/keystonemiddleware: Refactor auth_token revocation list members to new class https://review.openstack.org/102403 | 22:21 |
| *** shakamunyi has joined #openstack-keystone | 22:21 | |
| flwang1 | another question is how to leverage the 'ResellerAdmin' role, I googled but didn't find useful info | 22:22 |
| *** zzzeek has quit IRC | 22:25 | |
| *** thedodd has joined #openstack-keystone | 22:25 | |
| *** nkinder has joined #openstack-keystone | 22:27 | |
| *** thedodd has quit IRC | 22:34 | |
| *** shakamunyi has quit IRC | 22:35 | |
| *** ayoung has quit IRC | 22:40 | |
| *** amcrn has quit IRC | 22:54 | |
| openstackgerrit | Brant Knudson proposed a change to openstack/keystonemiddleware: Change occurrences of keystone to identity server https://review.openstack.org/127062 | 22:55 |
| *** lhcheng has joined #openstack-keystone | 22:57 | |
| *** andreaf has joined #openstack-keystone | 22:57 | |
| *** andreaf has quit IRC | 22:59 | |
| openstackgerrit | David Stanek proposed a change to openstack/python-keystoneclient: Removes temporary fix for doc generation https://review.openstack.org/121667 | 23:00 |
| *** andreaf has joined #openstack-keystone | 23:00 | |
| openstackgerrit | Brant Knudson proposed a change to openstack/keystonemiddleware: Change tenant to project https://review.openstack.org/127066 | 23:02 |
| *** marcoemorais has quit IRC | 23:03 | |
| *** marcoemorais has joined #openstack-keystone | 23:03 | |
| *** marcoemorais has quit IRC | 23:04 | |
| *** andreaf has quit IRC | 23:05 | |
| *** marcoemorais has joined #openstack-keystone | 23:05 | |
| *** andreaf has joined #openstack-keystone | 23:05 | |
| *** amcrn has joined #openstack-keystone | 23:07 | |
| *** wwriverrat has joined #openstack-keystone | 23:11 | |
| *** wwriverrat has left #openstack-keystone | 23:12 | |
| *** jorge_munoz has quit IRC | 23:13 | |
| *** andreaf has quit IRC | 23:18 | |
| *** andreaf has joined #openstack-keystone | 23:33 | |
| openstackgerrit | Brant Knudson proposed a change to openstack/keystonemiddleware: Change admin user to service user. https://review.openstack.org/127075 | 23:33 |
| *** gokrokve has quit IRC | 23:37 | |
| openstackgerrit | Brant Knudson proposed a change to openstack/keystonemiddleware: Fix reference to middleware architecture doc https://review.openstack.org/127078 | 23:40 |
| *** marcoemorais has quit IRC | 23:42 | |
| *** raildo has joined #openstack-keystone | 23:48 | |
| *** marcoemorais has joined #openstack-keystone | 23:49 | |
| *** dimsum_ has joined #openstack-keystone | 23:50 | |
| *** dimsum_ has quit IRC | 23:54 | |
| *** nkinder has quit IRC | 23:55 | |
| openstackgerrit | Brant Knudson proposed a change to openstack/python-keystoneclient: Remove middleware architecture doc https://review.openstack.org/127081 | 23:56 |
| *** marcoemorais has quit IRC | 23:58 | |
| *** marcoemorais1 has joined #openstack-keystone | 23:58 | |
| *** marcoemorais1 has quit IRC | 23:58 | |
| *** marcoemorais has joined #openstack-keystone | 23:59 | |
| *** raildo has quit IRC | 23:59 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!