| *** openstack has joined #openstack-keystone | 16:01 | |
| *** david-ly_ is now known as david-lyle | 16:08 | |
| *** chrisshattuck has quit IRC | 16:08 | |
| *** chrisshattuck has joined #openstack-keystone | 16:10 | |
| *** henrynash has quit IRC | 16:14 | |
| *** henrynash_ has joined #openstack-keystone | 16:14 | |
| *** ChanServ sets mode: +v henrynash_ | 16:14 | |
| *** jungleboyj has quit IRC | 16:15 | |
| *** openstackstatus has joined #openstack-keystone | 16:17 | |
| *** ChanServ sets mode: +v openstackstatus | 16:17 | |
| openstackgerrit | Boris Bobrov proposed openstack/keystone: Fix transaction issue in 44->43 downgrade. https://review.openstack.org/144321 | 16:18 |
|---|---|---|
| openstackgerrit | Boris Bobrov proposed openstack/keystone: Fix transaction issue in 44->43 downgrade. https://review.openstack.org/144321 | 16:20 |
| *** stevemar has joined #openstack-keystone | 16:23 | |
| *** ChanServ sets mode: +v stevemar | 16:23 | |
| openstackgerrit | Brant Knudson proposed openstack/keystonemiddleware: Correct incorrect rst in docstrings https://review.openstack.org/141924 | 16:32 |
| openstackgerrit | ZhiQiang Fan proposed openstack/keystone: Enable hacking rule H302 https://review.openstack.org/139878 | 16:55 |
| *** zzzeek has joined #openstack-keystone | 17:04 | |
| *** andreaf has joined #openstack-keystone | 17:09 | |
| *** samueldmq has quit IRC | 17:17 | |
| *** raildo has joined #openstack-keystone | 17:22 | |
| *** _cjones_ has joined #openstack-keystone | 17:25 | |
| *** samueldmq has joined #openstack-keystone | 17:29 | |
| openstackgerrit | Boris Bobrov proposed openstack/keystone: Fix migration 42 downgrade. https://review.openstack.org/144331 | 17:34 |
| openstackgerrit | Boris Bobrov proposed openstack/keystone: Fix migration 42 downgrade https://review.openstack.org/144331 | 17:35 |
| openstackgerrit | henry-nash proposed openstack/keystone: Split roles into their own backend within assignments. https://review.openstack.org/144239 | 17:35 |
| openstackgerrit | Boris Bobrov proposed openstack/keystone: Fix transaction issue in 44->43 downgrade https://review.openstack.org/144321 | 17:35 |
| *** nellysmi_ has quit IRC | 17:39 | |
| bknudson | I was looking at the jenkins failures in keystonemiddleware -- looks like https://review.openstack.org/#/c/144162/ and https://review.openstack.org/#/c/144161/ are needed (devstack fixes) | 17:41 |
| *** _cjones_ has quit IRC | 17:46 | |
| *** _cjones_ has joined #openstack-keystone | 17:46 | |
| *** raildo has quit IRC | 17:54 | |
| *** amerine has joined #openstack-keystone | 17:54 | |
| *** hdd has joined #openstack-keystone | 18:02 | |
| *** dims_ has quit IRC | 18:08 | |
| *** dims has joined #openstack-keystone | 18:08 | |
| *** hdd has quit IRC | 18:16 | |
| *** hdd has joined #openstack-keystone | 18:22 | |
| *** jamiec has quit IRC | 18:22 | |
| *** jamiec has joined #openstack-keystone | 18:23 | |
| *** nellysmitt has joined #openstack-keystone | 18:26 | |
| *** rushiagr is now known as rushiagr_away | 18:39 | |
| *** lhcheng has joined #openstack-keystone | 18:42 | |
| *** pcaruana has quit IRC | 19:00 | |
| *** lhcheng_ has joined #openstack-keystone | 19:00 | |
| *** chrisshattuck has quit IRC | 19:00 | |
| *** nellysmitt has quit IRC | 19:01 | |
| *** lhcheng has quit IRC | 19:03 | |
| *** dtroyer has quit IRC | 19:08 | |
| *** abhirc has joined #openstack-keystone | 19:09 | |
| openstackgerrit | Alexander Makarov proposed openstack/keystone: Trust redelegation https://review.openstack.org/126897 | 19:11 |
| stevemar | bknudson, looks like its just us today | 19:15 |
| openstackgerrit | Alexander Makarov proposed openstack/keystone: Group role revocation invalidates all user tokens https://review.openstack.org/141854 | 19:16 |
| bknudson | stevemar: we'll never get anything done this way | 19:16 |
| bknudson | all hands on deck | 19:16 |
| stevemar | well, at least theres no sense of emergency yet | 19:17 |
| stevemar | unless you think being unable to merge into KSM and KSC as an emergency | 19:17 |
| *** amakarov is now known as amakarov_away | 19:17 | |
| *** dtroyer has joined #openstack-keystone | 19:25 | |
| dolphm | stevemar: i'm here too, but staring at stable/* | 19:29 |
| stevemar | dolphm, you're alive | 19:29 |
| dolphm | I SURVIVED SOME HOLIDAYS | 19:30 |
| bknudson | I just hope stable/* isn't staring back at you. | 19:30 |
| dolphm | bknudson: icehouse is making me uncomfortable | 19:33 |
| *** afaranha has joined #openstack-keystone | 19:45 | |
| *** hdd has quit IRC | 19:48 | |
| stevemar | dolphm, in what way? | 19:53 |
| dolphm | stevemar: it's staring back at me, and pointing at FAILED builds | 19:53 |
| stevemar | dolphm, most of the problems for the stable builds have been new releases of libraries that caused gate failures :( | 19:55 |
| dolphm | stevemar: yeah... but i don't *think* that's the case here | 19:56 |
| dolphm | i also can't quite reproduce the failure that keystone is seeing | 19:56 |
| dolphm | but even if i could, several other projects are failing right now as well, anyway | 19:56 |
| bknudson | dolphm: which failure? | 19:56 |
| dolphm | http://lists.openstack.org/pipermail/openstack-stable-maint/2014-December/thread.html | 19:56 |
| dolphm | bknudson: the last 4 or 5 keystone failures there ^ are the same | 19:56 |
| dolphm | "Could not find a version that satisfies the requirement keyring<2.0,>=1.6.1,>=2.1" | 19:57 |
| *** lhcheng_ is now known as lhcheng | 19:57 | |
| bknudson | why do we even have keyring in the requirements. | 19:58 |
| dolphm | bknudson: keystoneclient uses it | 19:59 |
| bknudson | dolphm: there was some discussion around a change to how the version lists are handled lately. | 19:59 |
| dolphm | bknudson: i would think you'd be able to reproduce with ... http://pasteraw.com/8tn8910nc3ukijrwcsvq62jhk050dzk | 19:59 |
| bknudson | dolphm: I think there was a change for sqlalchemy... | 19:59 |
| dolphm | bknudson: in master though, right? | 20:00 |
| dolphm | bknudson: i seem to remember that from a couple weeks ago | 20:00 |
| bknudson | dolphm: I think that had to be backported. | 20:01 |
| bknudson | dolphm: http://git.openstack.org/cgit/openstack/requirements/commit/global-requirements.txt?id=f02eb22ad8a5a18835f5755c619a25fbf24a2453 | 20:01 |
| bknudson | master has keyring>=2.1,!=3.3 | 20:02 |
| dolphm | i wonder which version of pip stable/icehouse builds are using | 20:03 |
| stevemar | dolphm, neat, the openid connect author commented on the commit: https://github.com/openstack/keystone/commit/4e12e19c87d3e0c66ca1aab238398be23b6c1553#commitcomment-9110183 :P | 20:03 |
| *** raildo has joined #openstack-keystone | 20:04 | |
| dolphm | bknudson: REPRODUCED! :D | 20:04 |
| bknudson | dolphm: with a different pip? | 20:05 |
| bknudson | or setuptools? | 20:05 |
| dolphm | stevemar: mod auth openid author? | 20:05 |
| stevemar | yep | 20:05 |
| dolphm | bknudson: yeah, so stable/icehouse uses pbr>=0.6,<1.0, which gets you pbr 0.10.7 | 20:05 |
| stevemar | dolphm, well, mod_auth_openidc if you want to be accurate | 20:05 |
| *** raildo has quit IRC | 20:11 | |
| dolphm | bknudson: so i reproduced but now i'm unsure as to why i couldn't reproduce before | 20:11 |
| dolphm | repro- | 20:13 |
| dolphm | $ mkvirtualenv icehouse && pip install --upgrade "pbr>=0.6,<1.0" && pip --version && pip install --upgrade "keyring<2.0,>=1.6.1,>=2.1" --index=http://pypi.dfw.openstack.org/simple/ ; deactivate && rmvirtualenv icehouse | 20:13 |
| dolphm | so pip 6.0.3, release on christmas eve, is probably what breaks us... | 20:16 |
| bknudson | .tox/pep8/bin/pip install --upgrade "pbr>=0.6,<1.0" && .tox/pep8/bin/pip install --upgrade "keyring<2.0,>=1.6.1,>=2.1" | 20:17 |
| bknudson | and I get the error too | 20:17 |
| bknudson | I don't have a mkvirtualenv command | 20:17 |
| dolphm | it's from virtualenvwrapper | 20:17 |
| dolphm | recommended if you go through virtualenv's like candy | 20:18 |
| *** fifieldt has quit IRC | 20:24 | |
| *** fifieldt has joined #openstack-keystone | 20:24 | |
| *** nellysmitt has joined #openstack-keystone | 20:28 | |
| *** kpavel has joined #openstack-keystone | 20:30 | |
| bknudson | dolphm: https://review.openstack.org/#/c/144182/ | 20:31 |
| dolphm | i was just about to do the same | 20:31 |
| dolphm | but was filing a bug first :) | 20:32 |
| kpavel | Hi, i have extremely long term instance deployment with Heat. Can you point me to keystone configs that should be done to support it? Currently i'm experiencing some token expiration issues. Thanks. | 20:32 |
| dolphm | bknudson: thanks for the link! | 20:36 |
| dolphm | kpavel: run keystone-manage token_flush on a frequent cron job if you're not already. other than that, it's hard to make recommendations without know what the issue you're seeing is | 20:38 |
| bknudson | dolphm: it seems to be failing jenkins for other reasons... there's another problem where setuptools is getting reinstalled or something. | 20:38 |
| dolphm | bknudson: yeah | 20:38 |
| bknudson | infra folks are looking at it. | 20:38 |
| dolphm | bknudson: just hit recheck since it was 3 days ago | 20:38 |
| bknudson | dolphm: I think https://review.openstack.org/#/c/144347/ is trying to fix that. | 20:39 |
| *** afaranha has quit IRC | 20:41 | |
| *** diegows has quit IRC | 20:42 | |
| kpavel | dolphm: Currently what i see from heat-engine is "StackValidationFailed: Property error : WebServer: ImageId The request you have made requires authentication." | 20:43 |
| dolphm | kpavel: and i assume auth is being provided but rejected? | 20:44 |
| kpavel | dolphm: "keystoneclient.v3.client [^[[00;36m-] ^[[01;35mAuthorization failed.^[[00m ^[[00;33mfrom (pid=24009) get_raw_token_from_identity_service /opt/stack/python-keystoneclient/keystoneclient/v3/client.py:269" | 20:44 |
| kpavel | dolphm: From keystone loge i see: "WARNING keystone.middleware.core [^[[00;36m-] ^[[01;35mRBAC: Invalid token^[[00m" | 20:45 |
| *** diegows has joined #openstack-keystone | 20:58 | |
| *** nellysmitt has quit IRC | 21:02 | |
| *** gordc has quit IRC | 21:02 | |
| *** gordc has joined #openstack-keystone | 21:03 | |
| *** andreaf has quit IRC | 21:07 | |
| *** andreaf has joined #openstack-keystone | 21:07 | |
| openstackgerrit | henry-nash proposed openstack/keystone: Split roles into their own backend within assignments. https://review.openstack.org/144239 | 21:41 |
| openstackgerrit | henry-nash proposed openstack/keystone: Split roles into their own backend within assignments. https://review.openstack.org/144239 | 21:47 |
| *** chrisshattuck has joined #openstack-keystone | 21:55 | |
| *** spligak has joined #openstack-keystone | 22:06 | |
| *** diegows has quit IRC | 22:09 | |
| *** chrisshattuck has quit IRC | 22:18 | |
| *** nellysmitt has joined #openstack-keystone | 22:26 | |
| *** diegows has joined #openstack-keystone | 22:27 | |
| *** nellysmitt has quit IRC | 22:30 | |
| *** afaranha has joined #openstack-keystone | 22:56 | |
| *** diegows has quit IRC | 22:56 | |
| *** gordc has quit IRC | 23:03 | |
| *** andreaf has quit IRC | 23:18 | |
| *** andreaf has joined #openstack-keystone | 23:19 | |
| *** kpavel has quit IRC | 23:24 | |
| *** dims_ has joined #openstack-keystone | 23:25 | |
| *** dims has quit IRC | 23:28 | |
| *** dims_ has quit IRC | 23:39 | |
| *** dims__ has joined #openstack-keystone | 23:50 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!