*** bknudson has joined #openstack-keystone | 00:00 | |
*** ChanServ sets mode: +v bknudson | 00:00 | |
openstackgerrit | Brant Knudson proposed openstack/python-keystoneclient: Correct failures for check H238 https://review.openstack.org/146337 | 00:02 |
---|---|---|
*** bknudson1 has joined #openstack-keystone | 00:03 | |
*** bknudson has quit IRC | 00:05 | |
*** samueldmq_ has joined #openstack-keystone | 00:15 | |
openstackgerrit | Merged openstack/keystone: Fix incorrect filter test name https://review.openstack.org/147354 | 00:15 |
*** EmilienM is now known as EmilienM|afk | 00:15 | |
openstackgerrit | Merged openstack/python-keystoneclient: Add generic auth plugin documentation https://review.openstack.org/141680 | 00:16 |
openstackgerrit | Ian Cordasco proposed openstack/python-keystoneclient: Configure TCP Keep-Alive for all Sessions https://review.openstack.org/147707 | 00:24 |
*** zzzeek has quit IRC | 00:24 | |
*** david-lyle has joined #openstack-keystone | 00:25 | |
openstackgerrit | Samuel de Medeiros Queiroz proposed openstack/keystone: Improve List Role Assignments Filters Performance https://review.openstack.org/137202 | 00:27 |
*** ayoung has quit IRC | 00:37 | |
*** abhirc has joined #openstack-keystone | 00:38 | |
*** rodrigod` is now known as rodrigods | 00:41 | |
*** dims has quit IRC | 00:46 | |
*** LinstatSDR has joined #openstack-keystone | 00:46 | |
*** tellesnobrega_ has joined #openstack-keystone | 00:50 | |
*** henrynash has joined #openstack-keystone | 00:53 | |
*** ChanServ sets mode: +v henrynash | 00:53 | |
*** zzzeek has joined #openstack-keystone | 00:59 | |
*** david-lyle has quit IRC | 01:08 | |
*** zzzeek has quit IRC | 01:13 | |
openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone: Updated from global requirements https://review.openstack.org/147028 | 01:14 |
*** richm has quit IRC | 01:17 | |
*** gyee has joined #openstack-keystone | 01:17 | |
*** ChanServ sets mode: +v gyee | 01:17 | |
*** Guest97735 is now known as mfisch | 01:20 | |
*** mfisch has joined #openstack-keystone | 01:20 | |
*** gyee has quit IRC | 01:25 | |
*** david-lyle has joined #openstack-keystone | 01:26 | |
*** stevemar has joined #openstack-keystone | 01:27 | |
*** ChanServ sets mode: +v stevemar | 01:27 | |
*** DaveChen has joined #openstack-keystone | 01:28 | |
*** dims has joined #openstack-keystone | 01:29 | |
DaveChen | samueldmq: hi | 01:31 |
DaveChen | samueldmq_: hi Samuel, | 01:32 |
*** boris-42 has quit IRC | 01:33 | |
*** openstack has joined #openstack-keystone | 01:34 | |
samueldmq_ | DaveChen, hi :) | 01:40 |
*** ayoung has joined #openstack-keystone | 01:41 | |
*** ChanServ sets mode: +v ayoung | 01:41 | |
*** dims has quit IRC | 01:42 | |
*** dims has joined #openstack-keystone | 01:42 | |
*** dims has quit IRC | 01:43 | |
*** LinstatSDR has quit IRC | 01:46 | |
DaveChen | samueldmq_: may just want to ask you a question, but I think I have sorted it out. :) | 01:46 |
*** dims has joined #openstack-keystone | 01:50 | |
openstackgerrit | ayoung proposed openstack/keystone-specs: Dynamic Policy Overview https://review.openstack.org/147651 | 01:56 |
*** gyee has joined #openstack-keystone | 02:00 | |
*** ChanServ sets mode: +v gyee | 02:00 | |
*** david-lyle has quit IRC | 02:01 | |
*** gyee has quit IRC | 02:07 | |
*** dims has quit IRC | 02:29 | |
*** _cjones_ has quit IRC | 02:33 | |
*** erkules_ has joined #openstack-keystone | 02:38 | |
*** tellesnobrega_ has quit IRC | 02:38 | |
openstackgerrit | ayoung proposed openstack/keystone: Unscoped to Scoped only https://review.openstack.org/142591 | 02:40 |
openstackgerrit | ayoung proposed openstack/keystone: Explicit Unscoped https://review.openstack.org/142521 | 02:40 |
*** erkules has quit IRC | 02:41 | |
*** stevemar has quit IRC | 02:41 | |
*** david-lyle has joined #openstack-keystone | 02:42 | |
*** david-lyle has quit IRC | 02:42 | |
*** stevemar has joined #openstack-keystone | 02:42 | |
*** ChanServ sets mode: +v stevemar | 02:42 | |
samueldmq_ | DaveChen, yep, feel free to ask any questions you have | 02:45 |
samueldmq_ | DaveChen, will be glad if I can help :) | 02:45 |
samueldmq_ | henrynash, ping | 02:45 |
*** Sanchit has quit IRC | 02:45 | |
samueldmq_ | henrynash, I submitted the code for list role assignments refactoring | 02:47 |
*** harlowja is now known as harlowja_away | 02:57 | |
*** LinstatSDR has joined #openstack-keystone | 03:03 | |
openstackgerrit | ZhiQiang Fan proposed openstack/python-keystoneclient: Enable hacking rule F821 https://review.openstack.org/134096 | 03:05 |
openstackgerrit | ZhiQiang Fan proposed openstack/python-keystoneclient: Fixes bootstrap tests https://review.openstack.org/147618 | 03:05 |
*** grantbow has quit IRC | 03:07 | |
openstackgerrit | Merged openstack/keystone: Move sql specific filter test code into test_backend_sql https://review.openstack.org/147358 | 03:09 |
*** swartulv has joined #openstack-keystone | 03:11 | |
*** grantbow has joined #openstack-keystone | 03:14 | |
*** lhcheng has quit IRC | 03:27 | |
*** lhcheng has joined #openstack-keystone | 03:27 | |
*** lhcheng has quit IRC | 03:31 | |
*** topol has joined #openstack-keystone | 03:40 | |
*** ChanServ sets mode: +v topol | 03:40 | |
*** chrisshattuck has joined #openstack-keystone | 03:50 | |
*** chrisshattuck has quit IRC | 03:51 | |
*** chrisshattuck has joined #openstack-keystone | 03:52 | |
*** chrisshattuck has joined #openstack-keystone | 03:59 | |
*** chrisshattuck has quit IRC | 04:09 | |
*** rushiagr_away is now known as rushiagr | 04:11 | |
*** samueldmq_ has quit IRC | 04:14 | |
*** fifieldt__ has joined #openstack-keystone | 04:16 | |
*** chrisshattuck has joined #openstack-keystone | 04:17 | |
*** dvorak has left #openstack-keystone | 04:31 | |
*** chrisshattuck has quit IRC | 04:33 | |
*** boris-42 has joined #openstack-keystone | 04:43 | |
*** chrisshattuck has joined #openstack-keystone | 04:47 | |
*** lhcheng has joined #openstack-keystone | 04:53 | |
*** abhirc has quit IRC | 05:06 | |
*** lhcheng has quit IRC | 05:25 | |
*** ajayaa has joined #openstack-keystone | 05:26 | |
*** lhcheng has joined #openstack-keystone | 05:30 | |
*** erkules_ is now known as erkules | 05:37 | |
stevemar | lhcheng, thanks for reminding me that OS_DEFAULT_DOMAIN exists :P | 05:39 |
lhcheng | stevemar: ah I didn't notice that, but I know we need to read that from a constant/one source :P | 05:41 |
lhcheng | good stuff | 05:42 |
stevemar | lhcheng, can't believe i hadn't thought of that earlier *shakes head* | 05:50 |
*** lhcheng has quit IRC | 05:53 | |
*** lhcheng has joined #openstack-keystone | 05:54 | |
*** LinstatSDR has quit IRC | 05:57 | |
*** lhcheng has quit IRC | 05:58 | |
*** chrisshattuck has quit IRC | 06:00 | |
*** chrisshattuck has joined #openstack-keystone | 06:02 | |
*** rushiagr is now known as rushiagr_away | 06:05 | |
openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone: Imported Translations from Transifex https://review.openstack.org/145135 | 06:08 |
*** rushiagr_away is now known as rushiagr | 06:08 | |
*** chrisshattuck has quit IRC | 06:17 | |
openstackgerrit | wanghong proposed openstack/keystone: do parameter check before updating endpoint_group https://review.openstack.org/146040 | 06:36 |
*** Qlawy_ is now known as Qlawy | 06:37 | |
*** Qlawy has quit IRC | 06:37 | |
*** Qlawy has joined #openstack-keystone | 06:37 | |
morganfainberg | stevemar, ping | 07:11 |
stevemar | morganfainberg, pong | 07:11 |
morganfainberg | stevemar, need to ask you some questions re: federation | 07:11 |
stevemar | ? | 07:11 |
stevemar | yes | 07:11 |
stevemar | thats the answer | 07:11 |
morganfainberg | stevemar, can you come up with a list - specifically if you were to define the minimum viable deployment (versions, requirements, etc) to setup a keystone SP | 07:12 |
morganfainberg | that will consume k2k federation saml | 07:12 |
morganfainberg | trying to put together some definitive lists. | 07:12 |
stevemar | including library versions? | 07:13 |
morganfainberg | stevemar, ideally | 07:13 |
morganfainberg | well, i mean if it's pulled in as dep by effect of XXX == version blah, i'm happy | 07:14 |
morganfainberg | you don'ty need to do implied libs | 07:14 |
morganfainberg | stevemar, i have some notes from gyee_, but trying to make sure i have a clear list from those who've spent time on the federation stuff | 07:16 |
stevemar | slap what you have from gyee onto an etherpad, i'll add to it | 07:17 |
stevemar | i think marek and i have notes | 07:17 |
morganfainberg | i'm trying to get kindof a minimum viable product description together, so if someone is to ask "i want to run a keystone SP and consume keystone-2-keystone federation saml" we have some direction to give :) | 07:17 |
stevemar | plus, i can ask some guys who recently did it | 07:17 |
stevemar | SP should be easier... | 07:17 |
morganfainberg | let me fwd. email can do etherpad tomorrow. i'm exaughsted | 07:17 |
morganfainberg | yeah. | 07:17 |
stevemar | SP should just be vanilla keystone run under apache with mod_shib | 07:18 |
morganfainberg | i'll need to do the same for the IDP side, but SP is the data i want to make clear first | 07:18 |
*** chlong has quit IRC | 07:20 | |
morganfainberg | email sent | 07:20 |
morganfainberg | will come from my @hp email | 07:20 |
morganfainberg | ideally if you could once-over that list tomorrow sometime that'd be great (if not we can catchup @ midcycle) | 07:22 |
stevemar | morganfainberg, very likely tomorrow | 07:23 |
morganfainberg | yah not expecting tonight at all | 07:25 |
morganfainberg | just want to get it tomorrow if possible :) | 07:25 |
*** topol has quit IRC | 07:30 | |
*** jamielennox is now known as jamielennox|away | 07:42 | |
*** swartulv has quit IRC | 07:44 | |
*** swartulv has joined #openstack-keystone | 07:46 | |
*** Miouge has joined #openstack-keystone | 07:54 | |
Miouge | How can I use keystone as a backend for apache2 (to replace auth_basic on an existing webapp) ? | 07:58 |
marekd | Miouge: you want to use Keystone for authenticating your webapp ? | 08:01 |
saltsa | what's the default database keystones uses when nothing is configured? | 08:02 |
Miouge | marekd: yes so so either using apache_auth_ or just chaging the auth backend in the webapp. Google gives info on how to install keystone but I have hard time finding an example | 08:08 |
Miouge | Well maybe this http://docs.openstack.org/developer/python-keystoneclient/using-api-v3.html#authenticating-using-sessions is what I was looking for :) | 08:11 |
marekd | ok | 08:15 |
*** stevemar has quit IRC | 08:17 | |
*** oomichi has quit IRC | 08:18 | |
*** morganfainberg has quit IRC | 08:21 | |
*** alex_xu_ has quit IRC | 08:21 | |
*** morganfainberg has joined #openstack-keystone | 08:21 | |
*** ChanServ sets mode: +v morganfainberg | 08:21 | |
*** alex_xu has joined #openstack-keystone | 08:22 | |
*** dtantsur|afk is now known as dtantsur | 08:22 | |
*** rwsu has quit IRC | 08:40 | |
*** afazekas_ has joined #openstack-keystone | 08:40 | |
*** Guest39600 is now known as jell | 08:41 | |
openstackgerrit | Abhishek Talwar proposed openstack/python-keystoneclient: User-password-update accepts blank as password https://review.openstack.org/147399 | 08:44 |
*** dtantsur is now known as dtantsur|brb | 08:46 | |
*** nellysmitt has joined #openstack-keystone | 08:48 | |
*** henrynash has quit IRC | 08:52 | |
openstackgerrit | Marek Denis proposed openstack/keystone: Identify groups by name/domain in mapping rules. https://review.openstack.org/139013 | 09:02 |
openstackgerrit | Marek Denis proposed openstack/keystone: Implements whitelist and blacklist mapping rules https://review.openstack.org/142573 | 09:07 |
*** jaosorior has joined #openstack-keystone | 09:07 | |
*** jistr has joined #openstack-keystone | 09:19 | |
*** avozza is now known as zz_avozza | 09:35 | |
*** zz_avozza is now known as avozza | 09:35 | |
*** Guest49876 is now known as d0ugal | 09:36 | |
*** d0ugal has quit IRC | 09:36 | |
*** d0ugal has joined #openstack-keystone | 09:36 | |
*** avozza is now known as zz_avozza | 09:36 | |
*** zz_avozza is now known as avozza | 09:37 | |
openstackgerrit | Marek Denis proposed openstack/keystone-specs: Visual Page for WebSSO https://review.openstack.org/133529 | 09:45 |
*** david-lyle has joined #openstack-keystone | 09:46 | |
*** wanghong is now known as wanghong_away | 09:47 | |
*** avozza is now known as zz_avozza | 09:48 | |
openstackgerrit | Marek Denis proposed openstack/keystone: Multiple IdP authentication URL https://review.openstack.org/142743 | 09:52 |
openstackgerrit | Merged openstack/keystone: Fix migration 42 downgrade https://review.openstack.org/144331 | 10:01 |
*** david-lyle has quit IRC | 10:08 | |
*** aix has joined #openstack-keystone | 10:54 | |
*** ajayaa has quit IRC | 10:59 | |
*** ajayaa has joined #openstack-keystone | 10:59 | |
baffle | What is the recommended method to not having everything break due to AUTHTOKEN being over 8k? Fix everything that the token passes, so that 8k+ tokens are allowed? New keystoneclient-libraries that doesn't request the catalogue? Switching to UUID? Shortening the API endpoints FQDNs? | 11:17 |
*** david-lyle has joined #openstack-keystone | 11:17 | |
baffle | (Yesterday I added an extra endpoint + role to all users, resulting in lots of failed services. "openstack server list" would just explode due to header length) | 11:19 |
*** tellesnobrega_ has joined #openstack-keystone | 11:33 | |
samueldmq | morning | 11:41 |
*** amakarov_away is now known as amakarov | 11:42 | |
*** dtantsur|brb is now known as dtantsur | 11:48 | |
*** tellesnobrega_ has quit IRC | 11:52 | |
*** dims__ has joined #openstack-keystone | 11:53 | |
*** henrynash has joined #openstack-keystone | 12:03 | |
*** ChanServ sets mode: +v henrynash | 12:03 | |
*** aix has quit IRC | 12:23 | |
openstackgerrit | Rodrigo Duarte proposed openstack/keystone-specs: New query params to retrieve the project hierarchy https://review.openstack.org/135309 | 12:24 |
rodrigods | small spec ^ (would be nice to have a feedback before midcycle so we could send its implementation before it :) ) | 12:25 |
*** henrynash has quit IRC | 12:32 | |
*** henrynash has joined #openstack-keystone | 12:40 | |
*** ChanServ sets mode: +v henrynash | 12:40 | |
openstackgerrit | Alexander Makarov proposed openstack/keystone: Group role revocation invalidates all user tokens https://review.openstack.org/141854 | 12:46 |
*** rushiagr is now known as rushiagr_away | 12:48 | |
*** afaranha_ has quit IRC | 12:49 | |
samueldmq | henrynash, replied your comment on review #137202, thx | 12:56 |
henrynash | samueldmq:…..I’m actually starting from the bottom review and working back up now…so will get back to it in the end | 12:58 |
*** toddnni has quit IRC | 12:58 | |
samueldmq | henrynash, great | 13:00 |
*** toddnni has joined #openstack-keystone | 13:00 | |
openstackgerrit | Marco Fargetta proposed openstack/keystone: Multiple IdP authentication URL https://review.openstack.org/142743 | 13:00 |
*** ayoung has quit IRC | 13:04 | |
*** EmilienM|afk is now known as EmilienM | 13:05 | |
openstackgerrit | Rodrigo Duarte proposed openstack/keystone-specs: New query params to retrieve the project hierarchy https://review.openstack.org/135309 | 13:06 |
*** afazekas_ has quit IRC | 13:07 | |
openstackgerrit | Marco Fargetta proposed openstack/keystone: Multiple IdP authentication URL https://review.openstack.org/142743 | 13:08 |
*** david-lyle has quit IRC | 13:11 | |
openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone: Updated from global requirements https://review.openstack.org/147028 | 13:17 |
*** aix has joined #openstack-keystone | 13:18 | |
*** ajayaa has quit IRC | 13:20 | |
*** afazekas_ has joined #openstack-keystone | 13:21 | |
*** dtantsur has left #openstack-keystone | 13:21 | |
*** nellysmitt has quit IRC | 13:22 | |
*** nellysmitt has joined #openstack-keystone | 13:23 | |
*** nellysmitt has quit IRC | 13:29 | |
*** ayoung has joined #openstack-keystone | 13:31 | |
*** ChanServ sets mode: +v ayoung | 13:31 | |
*** nellysmitt has joined #openstack-keystone | 13:31 | |
*** henrynash has quit IRC | 13:33 | |
*** gordc has joined #openstack-keystone | 13:40 | |
*** henrynash has joined #openstack-keystone | 13:45 | |
*** ChanServ sets mode: +v henrynash | 13:45 | |
*** rushiagr_away is now known as rushiagr | 13:46 | |
openstackgerrit | Marco Fargetta proposed openstack/keystone: Multiple IdP authentication URL https://review.openstack.org/142743 | 13:51 |
openstackgerrit | Marek Denis proposed openstack/keystone-specs: Visual Page for WebSSO https://review.openstack.org/133529 | 13:53 |
*** Miouge_ has joined #openstack-keystone | 13:56 | |
*** Miouge has quit IRC | 13:59 | |
*** Miouge_ is now known as Miouge | 13:59 | |
openstackgerrit | ayoung proposed openstack/keystone-specs: New query params to retrieve the project hierarchy https://review.openstack.org/135309 | 14:03 |
*** afazekas_ has quit IRC | 14:04 | |
ayoung | rodrigods, took my name off the spec so I could feel OK giving it a +2 | 14:04 |
openstackgerrit | Marco Fargetta proposed openstack/keystone: Multiple IDP authentication URL https://review.openstack.org/142743 | 14:05 |
*** henrynash has quit IRC | 14:07 | |
rodrigods | ayoung, ++ thanks | 14:07 |
ayoung | rodrigods, it probably requires a spec change. | 14:09 |
ayoung | make that | 14:09 |
ayoung | and API change | 14:09 |
ayoung | an API change | 14:09 |
rodrigods | ayoung, can send as follow up patch, ok? | 14:10 |
ayoung | yeah | 14:10 |
rodrigods | ayoung, cool | 14:11 |
*** dims__ is now known as dimsum__ | 14:13 | |
*** richm has joined #openstack-keystone | 14:15 | |
openstackgerrit | Rodrigo Duarte proposed openstack/keystone-specs: New query params to retrieve the project hierarchy https://review.openstack.org/135309 | 14:17 |
rodrigods | ayoung, fixed some nits ^ | 14:17 |
*** mattfarina has joined #openstack-keystone | 14:18 | |
openstackgerrit | Samuel de Medeiros Queiroz proposed openstack/keystone-specs: New query params to retrieve the project hierarchy https://review.openstack.org/135309 | 14:19 |
*** afazekas_ has joined #openstack-keystone | 14:19 | |
*** diegows has quit IRC | 14:23 | |
*** afaranha has joined #openstack-keystone | 14:26 | |
*** radez_g0` is now known as radez_g0n3 | 14:34 | |
*** wpf has quit IRC | 14:34 | |
*** joesavak has joined #openstack-keystone | 14:35 | |
*** radez_g0n3 is now known as radez | 14:37 | |
*** stevemar has joined #openstack-keystone | 14:37 | |
*** ChanServ sets mode: +v stevemar | 14:37 | |
*** wpf has joined #openstack-keystone | 14:39 | |
samueldmq | why is gerrit too slow now? :/ | 14:52 |
samueldmq | I can't even open some reviews | 14:53 |
openstackgerrit | Rodrigo Duarte proposed openstack/keystone-specs: New query params to retrieve the project hierarchy https://review.openstack.org/135309 | 14:53 |
openstackgerrit | Rodrigo Duarte proposed openstack/keystone-specs: API spec for subtree_ids and parents_ids params https://review.openstack.org/147871 | 14:53 |
*** nellysmitt has quit IRC | 14:58 | |
*** zz_avozza is now known as avozza | 15:04 | |
*** henrynash has joined #openstack-keystone | 15:10 | |
*** ChanServ sets mode: +v henrynash | 15:10 | |
*** jimbaker` is now known as jimbaker | 15:11 | |
*** abhirc has joined #openstack-keystone | 15:25 | |
*** henrynash has quit IRC | 15:27 | |
*** topol has joined #openstack-keystone | 15:33 | |
*** ChanServ sets mode: +v topol | 15:33 | |
*** jorge_munoz has joined #openstack-keystone | 15:40 | |
*** avozza is now known as zz_avozza | 15:44 | |
dstanek | samueldmq: i'm not noticing an issue; is it still slow for you? | 15:46 |
*** rushiagr is now known as rushiagr_away | 15:47 | |
rodrigods | dstanek, samueldmq, really slow here | 15:48 |
rodrigods | :( | 15:48 |
dstanek | hmm...very odd | 15:48 |
*** wpf1 has joined #openstack-keystone | 15:59 | |
*** xxj has quit IRC | 16:02 | |
*** xxj has joined #openstack-keystone | 16:02 | |
*** wpf has quit IRC | 16:03 | |
*** henrynash has joined #openstack-keystone | 16:08 | |
*** ChanServ sets mode: +v henrynash | 16:08 | |
*** chrisshattuck has joined #openstack-keystone | 16:11 | |
*** stevemar has quit IRC | 16:15 | |
*** Miouge has quit IRC | 16:19 | |
openstackgerrit | Rodrigo Duarte proposed openstack/keystone-specs: API spec for subtree_ids and parents_ids params https://review.openstack.org/147871 | 16:20 |
openstackgerrit | Rodrigo Duarte proposed openstack/keystone-specs: New query params to retrieve the project hierarchy https://review.openstack.org/135309 | 16:20 |
*** Miouge has joined #openstack-keystone | 16:21 | |
*** dimsum__ has quit IRC | 16:25 | |
*** dimsum__ has joined #openstack-keystone | 16:28 | |
samueldmq | dstanek, it's better now :) | 16:31 |
*** dims_ has joined #openstack-keystone | 16:32 | |
*** aslaen has joined #openstack-keystone | 16:36 | |
aslaen | Hello..Is it possible to log all keystone authentication requests, and if they were successful or failed? Similiar to Linux auth.log | 16:36 |
*** dimsum__ has quit IRC | 16:37 | |
*** zz_avozza is now known as avozza | 16:38 | |
*** mhu has joined #openstack-keystone | 16:40 | |
*** Guest29310 is now known as redrobot | 16:41 | |
*** lhcheng has joined #openstack-keystone | 16:43 | |
openstackgerrit | Rodrigo Duarte proposed openstack/keystone-specs: API spec for subtree_ids and parents_ids params https://review.openstack.org/147871 | 16:43 |
openstackgerrit | Rodrigo Duarte proposed openstack/keystone-specs: New query params to retrieve the project hierarchy https://review.openstack.org/135309 | 16:43 |
rodrigods | henrynash, ^ found a typo :( | 16:43 |
*** _cjones_ has joined #openstack-keystone | 16:44 | |
rodrigods | ayoung, ^ looks like it is the final version :) | 16:44 |
ayoung | Sure it is | 16:44 |
henrynash | rodigods: re-applied :-) | 16:45 |
*** tellesnobrega_ has joined #openstack-keystone | 16:46 | |
*** rwsu has joined #openstack-keystone | 16:47 | |
rodrigods | henrynash, thx! | 16:47 |
*** radez is now known as radez_g0n3 | 16:49 | |
*** xxj has quit IRC | 16:51 | |
*** junhongl has quit IRC | 16:51 | |
*** wpf1 has quit IRC | 16:51 | |
*** jistr has quit IRC | 16:52 | |
*** afazekas_ has quit IRC | 16:56 | |
*** tellesnobrega_ has quit IRC | 16:59 | |
*** rwsu has quit IRC | 17:00 | |
*** abhirc has quit IRC | 17:00 | |
*** raildo has joined #openstack-keystone | 17:01 | |
openstackgerrit | ayoung proposed openstack/keystone: Unscoped to Scoped only https://review.openstack.org/142591 | 17:05 |
*** gyee has joined #openstack-keystone | 17:06 | |
*** ChanServ sets mode: +v gyee | 17:06 | |
*** LinstatSDR has joined #openstack-keystone | 17:18 | |
henrynash | ayoung: is there a api spec change patch for the explicit unscoped code patch? | 17:18 |
*** aslaen has left #openstack-keystone | 17:18 | |
*** rwsu has joined #openstack-keystone | 17:19 | |
morganfainberg | Mornin. | 17:20 |
samueldmq | morning :) | 17:20 |
morganfainberg | Slow start | 17:20 |
raildo | hey :) | 17:20 |
morganfainberg | Post late flight | 17:20 |
morganfainberg | But :) now... Coffee | 17:21 |
*** LinstatSDR has quit IRC | 17:21 | |
morganfainberg | henrynash: good question I didn't see one | 17:21 |
raildo | morganfainberg, and after, can you review the specs about HMT? :D | 17:23 |
*** wpf1 has joined #openstack-keystone | 17:23 | |
*** junhongl has joined #openstack-keystone | 17:23 | |
morganfainberg | raildo: I have a bunch of email status to send out, but post coffee and post emails, yes. | 17:24 |
raildo | morganfainberg, sure, no problem :) | 17:24 |
*** dims_ has quit IRC | 17:26 | |
henrynash | ayoung, morganfainberg: ok, found spec…had already merged…sorrry | 17:29 |
ayoung | henrynash, happens to me all the time. | 17:29 |
ayoung | henrynash, I wish there was someway to future-proof the links to the specs. Linking to the reviews seems wrong | 17:29 |
henrynash | ayoung: it megred in juno..that’s waht confused me! | 17:29 |
*** dimsum__ has joined #openstack-keystone | 17:30 | |
dstanek | bknudson1: your refactoring patch for keystone-all is fantastic | 17:35 |
samueldmq | henrynash, as I think we have agreed before ... are you working on the tests split for the new role manager? or can I still do it? | 17:36 |
amakarov | lbragstad, samueldmq, hello! Please look at the fix: https://review.openstack.org/#/c/141854/ We resolved a test collision there | 17:38 |
lbragstad | amakarov: cool, thanks! | 17:39 |
lbragstad | amakarov: added it to my queue | 17:39 |
amakarov | lbragstad, do you have some kind of scheduler for the queue? Can you share it with me? :) | 17:40 |
samueldmq | amakarov, sure, will take a look soon, thanks | 17:40 |
lbragstad | amakarov: my scheduler is a mess ;) | 17:41 |
* amakarov googling "mess" | 17:41 | |
henrynash | samueldmq: was plannig to, but not started yet | 17:41 |
henrynash | samueldmq: but if you want to take it…go right ahead! | 17:42 |
samueldmq | henrynash cool, I am just applying your first comments on the role assignments chain and then will start it | 17:45 |
samueldmq | henrynash, thanks | 17:45 |
henrynash | samueldmq: no…thank you :-) | 17:46 |
samueldmq | henrynash, :-) | 17:46 |
samueldmq | henrynash, since they're in the same assignment umbrella | 17:46 |
samueldmq | henrynash, I will keep the same test_v3_assignment file, and put real assignment vs role in different classes | 17:47 |
samueldmq | henrynash, are you ok with it? or would you prefer to create a separate file? | 17:47 |
rodrigods | samueldmq, henrynash separate files would be nice :) | 17:48 |
henrynash | samuelsmq: My gut feel actually says separate file for role management….are test files are SO big….anything to make the smaller…but if you prefer to keep them together, I wouldn’t block it | 17:48 |
samueldmq | henrynash, k, will mull it :) | 17:50 |
*** rwsu has quit IRC | 17:51 | |
rodrigods | where is stevemar :( would be great if https://review.openstack.org/#/c/135309/ was approved today | 17:51 |
henrynash | rodigods: he might +2 it, but wouldn’t +A it anway….we don’t like to have only cores from the same company push through any patch (we both work for IBM) | 17:53 |
rodrigods | henrynash, ++ just concerned about his comments (hope if he is ok with my reply) | 17:54 |
rodrigods | ayoung added a +2 earlier as well | 17:55 |
*** abhirc has joined #openstack-keystone | 17:55 | |
*** rwsu has joined #openstack-keystone | 17:58 | |
*** Miouge has quit IRC | 18:00 | |
*** zzzeek has joined #openstack-keystone | 18:07 | |
bknudson1 | dstanek: we'll see if the refactoring helps going forward. | 18:12 |
*** tellesnobrega_ has joined #openstack-keystone | 18:17 | |
*** Miouge has joined #openstack-keystone | 18:17 | |
*** harlowja_away is now known as harlowja | 18:18 | |
openstackgerrit | Brant Knudson proposed openstack/keystone: Refactor keystone-all and http/keystone https://review.openstack.org/62275 | 18:26 |
openstackgerrit | Merged openstack/keystone: Updated from global requirements https://review.openstack.org/147028 | 18:26 |
*** aix has quit IRC | 18:32 | |
*** amakarov is now known as amakarov_away | 18:35 | |
openstackgerrit | Brant Knudson proposed openstack/keystonemiddleware: Add python-memcached to test-requirements https://review.openstack.org/146332 | 18:36 |
*** stevemar has joined #openstack-keystone | 18:38 | |
*** ChanServ sets mode: +v stevemar | 18:38 | |
rodrigods | stevemar, ping... can you check the reply to your comment in https://review.openstack.org/#/c/135309/ ? | 18:42 |
stevemar | rodrigods, i am looking at it now, but I don't see the reply to my comment :) | 18:42 |
stevemar | rodrigods, ugh, nvm i see it | 18:43 |
*** tellesnobrega_ has quit IRC | 18:43 | |
stevemar | rodrigods, +2 | 18:45 |
rodrigods | stevemar, thx! | 18:46 |
raildo | stevemar, thanks :) | 18:47 |
*** henrynash has quit IRC | 18:48 | |
rodrigods | ayoung, ping... can you revisit https://review.openstack.org/#/c/135309/ whenever you have a moment? :) | 18:49 |
*** tellesnobrega_ has joined #openstack-keystone | 18:58 | |
*** _cjones_ has quit IRC | 18:59 | |
*** radez_g0n3 is now known as radez | 18:59 | |
*** _cjones_ has joined #openstack-keystone | 19:01 | |
ayoung | rodrigods, +A | 19:03 |
*** avozza is now known as zz_avozza | 19:05 | |
openstackgerrit | Merged openstack/keystone-specs: New query params to retrieve the project hierarchy https://review.openstack.org/135309 | 19:06 |
rodrigods | ayoung, thanks! planning to send the patch implementing it on Monday | 19:08 |
raildo | rodrigods, ++ :) | 19:08 |
ayoung | raildo, did you see my Domain is a Projects patch? | 19:11 |
ayoung | https://review.openstack.org/#/c/143763/ I think I want to rework the tests. | 19:12 |
raildo | ayoung, yes, I'll implement the sql migration on monday | 19:12 |
ayoung | raildo, rock on. | 19:12 |
*** rwsu has quit IRC | 19:15 | |
*** dims_ has joined #openstack-keystone | 19:16 | |
*** dimsum__ has quit IRC | 19:19 | |
*** zz_avozza is now known as avozza | 19:20 | |
*** xxj has joined #openstack-keystone | 19:22 | |
*** avozza is now known as zz_avozza | 19:31 | |
*** rwsu has joined #openstack-keystone | 19:32 | |
*** gabriel-bezerra has quit IRC | 19:34 | |
*** tellesnobrega_ has quit IRC | 19:35 | |
stevemar | morganfainberg, did ya get that etherpad goin? | 19:40 |
breton | bknudson1: heya, could you please have a look at https://review.openstack.org/#/c/146497/ ? It addresses the same issue you fixed in https://review.openstack.org/#/c/145795/ | 19:40 |
openstackgerrit | ayoung proposed openstack/keystone: Explicit Unscoped https://review.openstack.org/142521 | 19:43 |
*** gabriel-bezerra has joined #openstack-keystone | 19:47 | |
morganfainberg | stevemar: not yet. Just finished status reports and emails. Was going to do that shortly. | 19:50 |
morganfainberg | stevemar: I also asked gyee to backport the SAML assertion bugfix to Juno | 19:51 |
stevemar | morganfainberg, nice call | 19:53 |
stevemar | it's simple enough | 19:53 |
*** _cjones_ has quit IRC | 19:53 | |
morganfainberg | stevemar: https://etherpad.openstack.org/p/Keystone_sp_mvp | 19:54 |
stevemar | morganfainberg, thanks dude | 19:55 |
morganfainberg | stevemar: that is the data right from gyee's email | 19:55 |
stevemar | morganfainberg, i asked around, we could only come up with another comment or two | 19:55 |
morganfainberg | Great. Thanks. | 19:55 |
morganfainberg | Means we have a good list :) | 19:55 |
morganfainberg | We'll work on the idp side list next week. | 19:55 |
stevemar | morganfainberg, added a bit, probably obvious, but whatever | 20:01 |
morganfainberg | stevemar: don't assume obvious. ;) | 20:06 |
morganfainberg | If it isn't on that etherpad it might be missed. ;) | 20:07 |
morganfainberg | And if we're writing docs based on a list, missing obvious is bad ;) | 20:08 |
*** radez is now known as radez_g0n3 | 20:12 | |
openstackgerrit | ayoung proposed openstack/keystone: Explicit Unscoped https://review.openstack.org/142521 | 20:14 |
*** radez_g0n3 is now known as radez | 20:15 | |
openstackgerrit | ayoung proposed openstack/keystone: Unscoped to Scoped only https://review.openstack.org/142591 | 20:17 |
openstackgerrit | ayoung proposed openstack/keystone: Unscoped to Scoped only https://review.openstack.org/142591 | 20:18 |
*** raildo has quit IRC | 20:21 | |
*** rushiagr_away is now known as rushiagr | 20:22 | |
*** zz_avozza is now known as avozza | 20:23 | |
*** diegows has joined #openstack-keystone | 20:23 | |
*** _cjones_ has joined #openstack-keystone | 20:23 | |
gyee | morganfainberg, did you send out a rough schedule for the meetup? | 20:32 |
morganfainberg | gyee, nope | 20:32 |
morganfainberg | dolphm, what time are we meant to start on Monday? | 20:32 |
morganfainberg | / when is the space ours ;) | 20:32 |
gyee | I presume there's a good coffee shop near by? | 20:32 |
*** avozza is now known as zz_avozza | 20:32 | |
morganfainberg | gyee, yeah there is a decent one | 20:32 |
gyee | nice! | 20:33 |
morganfainberg | stevemar, and I went there the first day last time iirc... | 20:33 |
morganfainberg | or was that someone else... i thought it was stevemar | 20:33 |
morganfainberg | dude... | 20:33 |
morganfainberg | https://vine.co/v/OjqeYWWpVWK | 20:33 |
stevemar | morganfainberg, t'was me | 20:33 |
morganfainberg | OMG | 20:33 |
morganfainberg | ^^ that | 20:33 |
stevemar | yowza | 20:34 |
morganfainberg | hitting a basketball court with a rocket from ~60mi up. | 20:34 |
morganfainberg | 1st attempt | 20:34 |
morganfainberg | soooooo close | 20:34 |
gyee | wth? | 20:34 |
morganfainberg | SpaceX trying to land 1st stage rocket after separation | 20:34 |
stevemar | using boosters instead of the ol chute | 20:35 |
gyee | ah | 20:35 |
stevemar | hoping to re-use the boosters, instead of tossing them out :P | 20:35 |
morganfainberg | so they can do better recovery/refuel and have it ready for the next trip instead of what the old space program used which was dunk it in the ocean and tear it down and refurb | 20:35 |
morganfainberg | yeah | 20:35 |
morganfainberg | for a 1st attempt.. THAT IS AMAZING | 20:35 |
morganfainberg | i think someone said it's like hitting a dart board from 500m away | 20:36 |
stevemar | a friend of mine just started to work at spaceX, hope that wasn't him who wrote the code :P | 20:36 |
morganfainberg | and missing because the fin was 1/100th of mm off | 20:36 |
morganfainberg | stevemar, spacex views this as a success afaict | 20:36 |
morganfainberg | stevemar, they HIT the barge | 20:36 |
morganfainberg | stevemar, that is huge! | 20:37 |
stevemar | yeah, it's just the sheer amount of kablamo is weird | 20:37 |
morganfainberg | it's a rocket | 20:37 |
morganfainberg | i mean.. dude... | 20:37 |
morganfainberg | you know they use rocket fuel for those things right? :P | 20:37 |
stevemar | hehe | 20:37 |
stevemar | rocket fuel in rockets, novel concept | 20:37 |
morganfainberg | SpaceX, one of those companies i dreamed of working for for quite a while. | 20:38 |
openstackgerrit | Samuel de Medeiros Queiroz proposed openstack/keystone: Improve creation of expected assignments in tests https://review.openstack.org/144544 | 20:38 |
openstackgerrit | Samuel de Medeiros Queiroz proposed openstack/keystone: Refactor check of targets and actors on RoleV3 https://review.openstack.org/144702 | 20:38 |
openstackgerrit | Samuel de Medeiros Queiroz proposed openstack/keystone: Check for invalid filtering on v3/role_assignments https://review.openstack.org/144703 | 20:38 |
openstackgerrit | Samuel de Medeiros Queiroz proposed openstack/keystone: Refactor role assignment assertions https://review.openstack.org/144543 | 20:38 |
openstackgerrit | Samuel de Medeiros Queiroz proposed openstack/keystone: Fixes 'OS-INHERIT:inherited_to' info in tests https://review.openstack.org/144542 | 20:38 |
* morganfainberg wonders if they use OpenStack..and if it would be possible to use that connection for a tour >.> | 20:38 | |
morganfainberg | <.< | 20:38 |
gyee | they are located in so cal? | 20:39 |
morganfainberg | gyee, yeah hawthorn | 20:39 |
morganfainberg | not the launch sites. | 20:39 |
morganfainberg | but main campus | 20:39 |
openstackgerrit | Yuriy Taraday proposed openstack/keystone: Add a module to work with LDAP filters and DNs https://review.openstack.org/117484 | 20:41 |
*** henrynash has joined #openstack-keystone | 20:44 | |
*** ChanServ sets mode: +v henrynash | 20:44 | |
*** _cjones_ has quit IRC | 20:54 | |
*** _cjones_ has joined #openstack-keystone | 20:54 | |
*** stevemar has quit IRC | 21:00 | |
*** carlosmarin1 has joined #openstack-keystone | 21:03 | |
*** jsavak has joined #openstack-keystone | 21:06 | |
*** gordc has quit IRC | 21:06 | |
*** joesavak has quit IRC | 21:09 | |
*** gabriel-bezerra has quit IRC | 21:15 | |
*** samueldmq has quit IRC | 21:15 | |
*** tellesnobrega has quit IRC | 21:15 | |
*** afaranha has quit IRC | 21:15 | |
*** zz_avozza is now known as avozza | 21:23 | |
openstackgerrit | Brant Knudson proposed openstack/keystone: Change oslo.config to oslo_config https://review.openstack.org/145250 | 21:24 |
*** gabriel-bezerra has joined #openstack-keystone | 21:28 | |
*** tellesnobrega has joined #openstack-keystone | 21:28 | |
*** samueldmq has joined #openstack-keystone | 21:28 | |
*** afaranha has joined #openstack-keystone | 21:29 | |
*** mhu has quit IRC | 21:30 | |
openstackgerrit | Merged openstack/pycadf: Updated from global requirements https://review.openstack.org/146705 | 21:31 |
*** mhu has joined #openstack-keystone | 21:31 | |
*** radez is now known as radez_g0n3 | 21:41 | |
*** nkinder_away has quit IRC | 21:44 | |
*** jorge_munoz has quit IRC | 21:46 | |
*** nkinder_away has joined #openstack-keystone | 21:47 | |
*** gabriel-bezerra has quit IRC | 21:49 | |
*** afaranha has quit IRC | 21:49 | |
*** samueldmq has quit IRC | 21:49 | |
*** tellesnobrega has quit IRC | 21:50 | |
*** gordc has joined #openstack-keystone | 21:54 | |
*** carlosmarin1 has quit IRC | 21:56 | |
*** avozza is now known as zz_avozza | 21:57 | |
*** jorge_munoz has joined #openstack-keystone | 21:58 | |
*** carlosmarin1 has joined #openstack-keystone | 21:58 | |
*** gordc has quit IRC | 22:00 | |
*** jorge_munoz has quit IRC | 22:00 | |
*** afaranha has joined #openstack-keystone | 22:00 | |
*** gabriel-bezerra has joined #openstack-keystone | 22:00 | |
*** samueldmq has joined #openstack-keystone | 22:00 | |
*** tellesnobrega has joined #openstack-keystone | 22:01 | |
*** junhongl has quit IRC | 22:01 | |
*** xxj has quit IRC | 22:02 | |
*** wpf1 has quit IRC | 22:02 | |
*** jorge_munoz has joined #openstack-keystone | 22:04 | |
ayoung | morganfainberg, to generate the new sample config: do I need something from pip? | 22:04 |
morganfainberg | ayoung, tox -esample_config i think | 22:05 |
ayoung | morganfainberg, when I ran that it changes 2K+ lines | 22:05 |
ayoung | I think whatever it calls is out of date | 22:05 |
morganfainberg | ayoung, have you updated your venv? | 22:05 |
morganfainberg | there was a new oslo.config generator | 22:05 |
ayoung | nope...but what do I need to update | 22:05 |
ayoung | oslo-config? | 22:05 |
morganfainberg | ayoung, i'd re-build the venv | 22:06 |
morganfainberg | not try and figure out what to update | 22:06 |
morganfainberg | sample_config is a separate venv i think | 22:06 |
ayoung | is there some fast way to do that? -r take s 4 evr | 22:06 |
morganfainberg | uhm, source .tox/<venv>/bin/activate | 22:06 |
morganfainberg | pip -U -r requirements.txt -r test-requirements.txt | 22:06 |
morganfainberg | probably a little faster than -r | 22:07 |
*** wpf1 has joined #openstack-keystone | 22:07 | |
ayoung | OK...maybe we can make a comparable tox option instead of -r in the future | 22:07 |
ayoung | tox -U? | 22:07 |
morganfainberg | ayoung, thats adding functionality to tox, that is a lot more work than fixing something in our tox.ini | 22:07 |
ayoung | yeah, I figured... | 22:08 |
ayoung | not going to drop everything and make that happen right now | 22:08 |
morganfainberg | i did some templating fixes and i think it took ~2months-3months to land | 22:08 |
ayoung | actually already started the -r | 22:08 |
morganfainberg | and the fix for tox to work (>1.6) in openstack [fix a regression] was 6mo to land | 22:08 |
morganfainberg | we almost ditched tox iirc | 22:09 |
ayoung | I've grown to not despise it | 22:09 |
ayoung | OK..time to pickup the kids and be a dad. See you on Sunday? | 22:10 |
*** xxj has joined #openstack-keystone | 22:11 | |
*** junhongl has joined #openstack-keystone | 22:11 | |
*** mattfarina has quit IRC | 22:11 | |
*** topol has quit IRC | 22:17 | |
*** EmilienM is now known as EmilienM|afk | 22:26 | |
*** mhu has quit IRC | 22:35 | |
*** mhu has joined #openstack-keystone | 22:36 | |
*** dims_ has quit IRC | 22:40 | |
*** ayoung has quit IRC | 22:42 | |
*** carlosmarin1 has quit IRC | 23:03 | |
*** jaosorior has quit IRC | 23:03 | |
*** carlosmarin1 has joined #openstack-keystone | 23:06 | |
*** zz_avozza is now known as avozza | 23:07 | |
*** avozza is now known as zz_avozza | 23:08 | |
*** jsavak has quit IRC | 23:10 | |
openstackgerrit | Brant Knudson proposed openstack/keystone: Change oslo.utils to oslo_utils https://review.openstack.org/148019 | 23:16 |
*** henrynash has quit IRC | 23:17 | |
*** openstackgerrit has quit IRC | 23:19 | |
*** zz_avozza is now known as avozza | 23:19 | |
*** openstackgerrit has joined #openstack-keystone | 23:19 | |
*** carlosmarin1 has quit IRC | 23:21 | |
openstackgerrit | Brant Knudson proposed openstack/keystone: Change oslo.utils to oslo_utils https://review.openstack.org/148019 | 23:33 |
openstackgerrit | Brant Knudson proposed openstack/keystone: Change oslo.config to oslo_config https://review.openstack.org/145250 | 23:33 |
openstackgerrit | Brant Knudson proposed openstack/keystone: Change oslo.utils to oslo_utils https://review.openstack.org/148019 | 23:39 |
openstackgerrit | Brant Knudson proposed openstack/keystone: Change oslo.config to oslo_config https://review.openstack.org/145250 | 23:39 |
*** abhirc has quit IRC | 23:40 | |
*** dimsum__ has joined #openstack-keystone | 23:41 | |
*** dimsum__ has quit IRC | 23:47 | |
*** zzzeek has quit IRC | 23:47 | |
*** avozza is now known as zz_avozza | 23:49 | |
*** zzzeek has joined #openstack-keystone | 23:49 | |
*** jorge_munoz has quit IRC | 23:50 | |
openstackgerrit | guang-yee proposed openstack/keystone-specs: X.509 SSL certificate authentication https://review.openstack.org/105913 | 23:52 |
openstackgerrit | Brant Knudson proposed openstack/keystone: Change oslo.config to oslo_config https://review.openstack.org/145250 | 23:55 |
openstackgerrit | Brant Knudson proposed openstack/keystone: Change oslo.serialization to oslo_serialization https://review.openstack.org/148025 | 23:55 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!