| *** carlosmarin has joined #openstack-keystone | 00:03 | |
| *** carlosmarin has quit IRC | 00:09 | |
| openstackgerrit | Jamie Lennox proposed openstack/python-keystoneclient: Cleanup exceptions https://review.openstack.org/142243 | 00:16 |
|---|---|---|
| *** henrynash has joined #openstack-keystone | 00:35 | |
| *** ChanServ sets mode: +v henrynash | 00:35 | |
| *** dimsum__ has joined #openstack-keystone | 01:04 | |
| *** dimsum__ has quit IRC | 01:07 | |
| *** dimsum__ has joined #openstack-keystone | 01:08 | |
| *** henrynash has quit IRC | 01:22 | |
| *** oomichi has joined #openstack-keystone | 01:24 | |
| *** avozza is now known as zz_avozza | 01:35 | |
| *** dimsum__ has quit IRC | 01:37 | |
| *** abhirc has joined #openstack-keystone | 02:14 | |
| *** erkules_ has joined #openstack-keystone | 02:35 | |
| *** erkules has quit IRC | 02:37 | |
| *** HenryG has joined #openstack-keystone | 02:44 | |
| *** lhcheng has joined #openstack-keystone | 02:55 | |
| *** dimsum__ has joined #openstack-keystone | 03:07 | |
| *** dimsum__ has quit IRC | 03:11 | |
| *** rushiagr_away is now known as rushiagr | 03:20 | |
| *** samueldmq_ has quit IRC | 03:22 | |
| *** lhcheng_ has joined #openstack-keystone | 03:27 | |
| *** lhcheng has quit IRC | 03:27 | |
| *** lhcheng_ has quit IRC | 03:31 | |
| *** lhcheng has joined #openstack-keystone | 03:38 | |
| *** abhirc has quit IRC | 03:41 | |
| *** lhcheng has quit IRC | 03:54 | |
| *** abhirc has joined #openstack-keystone | 03:55 | |
| *** chrisshattuck has joined #openstack-keystone | 03:55 | |
| *** abhirc has quit IRC | 03:58 | |
| openstackgerrit | Jamie Lennox proposed openstack/python-keystoneclient: Add flag to append project_id to catalog URL https://review.openstack.org/148166 | 04:06 |
| *** tellesnobrega_ has joined #openstack-keystone | 04:16 | |
| *** rushiagr is now known as rushiagr_away | 04:17 | |
| *** tellesnobrega_ has quit IRC | 04:24 | |
| *** rushiagr_away is now known as rushiagr | 04:27 | |
| *** rushiagr is now known as rushiagr_away | 04:48 | |
| *** MasterPiece has joined #openstack-keystone | 04:51 | |
| *** chrisshattuck has quit IRC | 05:01 | |
| *** pcaruana has quit IRC | 05:32 | |
| *** rushiagr_away is now known as rushiagr | 05:37 | |
| *** KanagarajM has joined #openstack-keystone | 05:51 | |
| *** stevemar has joined #openstack-keystone | 05:51 | |
| *** ChanServ sets mode: +v stevemar | 05:51 | |
| *** esmute has quit IRC | 05:51 | |
| *** jbonjean has quit IRC | 05:53 | |
| *** esmute has joined #openstack-keystone | 05:53 | |
| *** lhcheng has joined #openstack-keystone | 06:05 | |
| *** rushiagr is now known as rushiagr_away | 06:09 | |
| *** MasterPiece has quit IRC | 06:10 | |
| *** zz_avozza is now known as avozza | 06:17 | |
| *** MasterPiece has joined #openstack-keystone | 06:17 | |
| *** alex_xu has quit IRC | 06:21 | |
| *** diegows has quit IRC | 06:34 | |
| *** dimsum__ has joined #openstack-keystone | 06:44 | |
| *** stevemar has quit IRC | 06:44 | |
| *** dimsum__ has quit IRC | 06:49 | |
| *** avozza is now known as zz_avozza | 06:49 | |
| *** Miouge has joined #openstack-keystone | 07:05 | |
| *** chlong has quit IRC | 07:10 | |
| *** jxxxxx has joined #openstack-keystone | 07:27 | |
| *** afazekas_ has joined #openstack-keystone | 07:29 | |
| *** pcaruana has joined #openstack-keystone | 07:42 | |
| *** jaosorior has joined #openstack-keystone | 07:43 | |
| *** Krast has joined #openstack-keystone | 07:47 | |
| *** Krast has quit IRC | 07:47 | |
| *** MasterPiece has quit IRC | 08:07 | |
| *** MasterPiece has joined #openstack-keystone | 08:19 | |
| *** nellysmitt has joined #openstack-keystone | 08:26 | |
| *** oomichi has quit IRC | 08:28 | |
| *** jamielennox is now known as jamielennox|away | 08:34 | |
| *** zz_avozza is now known as avozza | 08:51 | |
| *** krykowski has joined #openstack-keystone | 08:53 | |
| *** lhcheng has quit IRC | 09:00 | |
| *** MasterPiece has quit IRC | 09:11 | |
| *** MasterPiece has joined #openstack-keystone | 09:19 | |
| *** krykowski has quit IRC | 09:22 | |
| *** jistr has joined #openstack-keystone | 09:24 | |
| *** krykowski has joined #openstack-keystone | 09:28 | |
| openstackgerrit | takehirokaneko proposed openstack/keystone: Adds a validation param "max_username_size". https://review.openstack.org/128504 | 09:44 |
| *** krykowski has quit IRC | 09:49 | |
| *** afazekas_ is now known as afazekas | 09:51 | |
| *** alex_xu has joined #openstack-keystone | 09:58 | |
| *** krykowski has joined #openstack-keystone | 10:14 | |
| *** dimsum__ has joined #openstack-keystone | 10:19 | |
| *** dimsum__ has quit IRC | 10:24 | |
| *** avozza is now known as zz_avozza | 10:30 | |
| *** lhcheng has joined #openstack-keystone | 10:31 | |
| *** nellysmi_ has joined #openstack-keystone | 10:34 | |
| *** MasterPiece has quit IRC | 10:35 | |
| *** nellysmitt has quit IRC | 10:35 | |
| *** lhcheng has quit IRC | 10:38 | |
| *** aix has joined #openstack-keystone | 10:43 | |
| *** samueldmq_ has joined #openstack-keystone | 11:03 | |
| *** samueldmq_ has quit IRC | 11:07 | |
| *** KanagarajM has quit IRC | 11:13 | |
| *** nellysmitt has joined #openstack-keystone | 11:32 | |
| *** nellysmi_ has quit IRC | 11:36 | |
| *** krykowski has quit IRC | 11:43 | |
| *** zz_avozza is now known as avozza | 11:44 | |
| *** avozza is now known as zz_avozza | 11:45 | |
| *** zz_avozza is now known as avozza | 11:46 | |
| *** krykowski has joined #openstack-keystone | 11:46 | |
| openstackgerrit | Marco Fargetta proposed openstack/keystone-specs: IDP ID registration and validation https://review.openstack.org/148229 | 11:47 |
| baffle | Hi, I noticed ayoung had opend and closed https://bugs.launchpad.net/keystone/+bug/1399768 -- I see the same error, I can't even run the query manually.. Am I missing something? Engine, charset and colum types seems to match. :-/ | 11:57 |
| *** raildo has joined #openstack-keystone | 11:59 | |
| samueldmq | baffle, hi | 12:01 |
| samueldmq | baffle, let me take a look :) | 12:01 |
| samueldmq | samueldmq, are you on ubuntu? | 12:01 |
| samueldmq | baffle, oops, ^ | 12:02 |
| baffle | samueldmq: Yeah. | 12:02 |
| baffle | I run MariaDB with Galera. | 12:02 |
| samueldmq | baffle, try running `find . -name "*.pyc" -exec rm -rf {} \;` | 12:02 |
| samueldmq | baffle, he told there this could be due to old .pyc files | 12:03 |
| samueldmq | baffle, this should solve your issue | 12:03 |
| baffle | samueldmq: I deleted the .pyc files from the migration script allready. | 12:03 |
| baffle | samueldmq: But I get the same error when I try to run the query manually from the mysql client as well. | 12:03 |
| *** viktors has quit IRC | 12:06 | |
| samueldmq | baffle, well, maybe a good idea is to ask ayoung later on the day | 12:07 |
| baffle | samueldmq: Just for giggles, I deleted all compiled python, no change. Query is still the same, and matches the migration script. | 12:07 |
| *** josecastroleon_ has joined #openstack-keystone | 12:08 | |
| samueldmq | baffle, I would think previous runs could be messed up db consistency | 12:08 |
| samueldmq | baffle, and now you can't run it, even deleting .pyc files | 12:08 |
| samueldmq | baffle, but you may wait for ayoung, I think he can help you out | 12:09 |
| *** krykowski has quit IRC | 12:09 | |
| baffle | samueldmq: Guess that is the best option. Even if I drop the "endpoint_group" table, wich is created as step 1 in migrate 002, nothing changes. It gets recreated when I try to run the migration, but fails on the second table with the same error. :) | 12:10 |
| baffle | Engine is identical, charset is identical.. The column type seems to match.. I'm really confused, none of the typical 150-error scenarios seems to apply. :) | 12:11 |
| *** josecastroleon has quit IRC | 12:11 | |
| openstackgerrit | Marek Denis proposed openstack/keystone-specs: Visual Page for WebSSO https://review.openstack.org/133529 | 12:12 |
| *** josecastroleon has joined #openstack-keystone | 12:17 | |
| baffle | Hmm, innodb engine status: Cannot find an index in the referenced table where the referenced columns appear as the first columns, or column types in the table and the referenced table do not match for constraint. Note that the internal storage type of ENUM and SET changed in tables created with >= InnoDB-4.1.12, and such columns in old tables cannot be referenced by such columns in new tables. See http://dev.mysql.com/doc/refman/5.5/en/innodb- | 12:20 |
| *** dimsum__ has joined #openstack-keystone | 12:20 | |
| *** josecastroleon_ has quit IRC | 12:21 | |
| *** lhcheng has joined #openstack-keystone | 12:21 | |
| baffle | Is it just that id in endpoint_group is not set as primary key, thus has no index? | 12:21 |
| baffle | Testing. | 12:21 |
| baffle | Yup. | 12:22 |
| baffle | That was it. | 12:22 |
| baffle | Added a comment to the launchpad bug. | 12:25 |
| baffle | Guess noone is using endpoint filtering. 8) | 12:25 |
| *** dimsum__ has quit IRC | 12:25 | |
| *** lhcheng has quit IRC | 12:26 | |
| baffle | This in turns means that 500-errors I got when Heat tried to delete a project probably is fixed. 8( | 12:26 |
| openstackgerrit | Marco Fargetta proposed openstack/keystone-specs: IDP ID registration and validation https://review.openstack.org/148229 | 12:27 |
| samueldmq | baffle, thanks for adding a comment there, let's see others views | 12:29 |
| baffle | Heh, due to those errors, people were not able to delete stack, because Keystone would return 500 when you tried to delete the project.. But it would actually delete the project, just fail because it couldn't update the endpoint_filters due to failed migration.. Wich in turn means that the next call to delete stack in heat would fail because project is missing.. | 12:35 |
| baffle | Superduperfix: insert into keystone.project (id,name,extra,description,enabled,domain_id) values ('<missing_heat_domain_project_id>','YAY','{}','YAY','1','<heat_domain>'); | 12:36 |
| *** afaranha has quit IRC | 12:42 | |
| *** amakarov_away is now known as amakarov | 12:49 | |
| *** htruta has joined #openstack-keystone | 12:52 | |
| *** krykowski has joined #openstack-keystone | 12:56 | |
| *** tziom has quit IRC | 13:13 | |
| *** bjornar has joined #openstack-keystone | 13:14 | |
| openstackgerrit | Marek Denis proposed openstack/keystone: Multiple IDP authentication URL https://review.openstack.org/142743 | 13:15 |
| *** EmilienM|afk is now known as EmilienM | 13:22 | |
| *** avozza is now known as zz_avozza | 13:23 | |
| *** zz_avozza is now known as avozza | 13:23 | |
| *** abhirc has joined #openstack-keystone | 13:27 | |
| *** dimsum__ has joined #openstack-keystone | 13:35 | |
| openstackgerrit | Bob Thyne proposed openstack/keystone-specs: Endpoint enforcement in Keystone Middleware https://review.openstack.org/148257 | 13:36 |
| *** dimsum__ has quit IRC | 13:40 | |
| *** dimsum__ has joined #openstack-keystone | 13:41 | |
| *** dimsum__ is now known as dims | 13:43 | |
| *** MasterPiece has joined #openstack-keystone | 13:44 | |
| *** dims is now known as Guest45832 | 13:44 | |
| *** gordc has joined #openstack-keystone | 13:51 | |
| *** nellysmitt has quit IRC | 13:52 | |
| *** nellysmitt has joined #openstack-keystone | 13:53 | |
| *** Guest45832 is now known as dims__ | 13:57 | |
| marekd | jamielennox|away: it's been away for a while and i made some changes (yet still have some concerns) - do you fancy looking at it again? https://review.openstack.org/#/c/130564/11..12/keystoneclient/contrib/auth/v3/federation.py | 13:57 |
| *** diegows has joined #openstack-keystone | 13:59 | |
| openstackgerrit | Bob Thyne proposed openstack/keystone-specs: Endpoint enforcement in Keystone Middleware https://review.openstack.org/148257 | 14:01 |
| openstackgerrit | Bogun Dmitriy proposed openstack/keystone: FIX multiple SQL backend usage validation https://review.openstack.org/138113 | 14:05 |
| openstackgerrit | Bob Thyne proposed openstack/keystone-specs: Endpoint enforcement in Keystone Middleware https://review.openstack.org/148257 | 14:05 |
| *** diegows has quit IRC | 14:08 | |
| *** sriram has joined #openstack-keystone | 14:12 | |
| openstackgerrit | henry-nash proposed openstack/keystone: Refactor filter and sensitivity tests in prepartion for LDAP support https://review.openstack.org/147551 | 14:12 |
| openstackgerrit | henry-nash proposed openstack/keystone: Enable filtering in LDAP backend for listing entities https://review.openstack.org/147612 | 14:13 |
| *** nkinder has quit IRC | 14:14 | |
| *** henrynash has joined #openstack-keystone | 14:14 | |
| *** ChanServ sets mode: +v henrynash | 14:14 | |
| openstackgerrit | henry-nash proposed openstack/keystone: Enable filtering in LDAP backend for listing entities https://review.openstack.org/147612 | 14:19 |
| *** Miouge has quit IRC | 14:28 | |
| *** henrynash has quit IRC | 14:35 | |
| *** krykowski has quit IRC | 14:36 | |
| dstanek | mid-cycling today! | 14:36 |
| raildo | dstanek, are you in mid-cycle? | 14:40 |
| anteaya | morning folks | 14:44 |
| raildo | morganfainberg, hey, i want to know if you can set the milestone for the BP related to HMT: https://blueprints.launchpad.net/keystone/+spec/hierarchical-multitenancy-improvements and https://blueprints.launchpad.net/keystone/+spec/reseller | 14:44 |
| anteaya | I am in San Antonio and will be joining y'all after I finish my 1500 utc meeting | 14:44 |
| morganfainberg | Mornin! | 14:45 |
| morganfainberg | anteaya: cool! | 14:45 |
| raildo | Or only after the specs are approved.. | 14:45 |
| samueldmq | morning | 14:45 |
| morganfainberg | raildo: a core needs to set the milestone or it will be untagged automatically. Well priority must be set too. | 14:46 |
| morganfainberg | raildo: let me set that now and mark it blocked until spec approves. | 14:46 |
| samueldmq | morganfainberg, so the hackathon starts today :) | 14:46 |
| morganfainberg | samueldmq: yes | 14:46 |
| raildo | morganfainberg, ok | 14:46 |
| anteaya | what is the parking situation by the mid-cycle location, does anyone know? parking here is different than I expected | 14:47 |
| anteaya | here being either texas or san antonio, I don't know yet | 14:47 |
| *** MasterPiece has quit IRC | 14:47 | |
| morganfainberg | anteaya: I am parked at the hotel and walking to geekdom. | 14:48 |
| *** krykowski has joined #openstack-keystone | 14:48 | |
| *** lhcheng has joined #openstack-keystone | 14:50 | |
| dstanek | 10 til 9 and just about half the seats are filled | 14:51 |
| anteaya | ah, I am downtown | 14:52 |
| anteaya | oh cool you are two blocks away | 14:56 |
| anteaya | yay! | 14:56 |
| anteaya | I must be thinking of cinder sprint | 14:56 |
| *** EmilienM is now known as EmilienM|afk | 14:57 | |
| *** nkinder has joined #openstack-keystone | 15:05 | |
| *** MasterPiece has joined #openstack-keystone | 15:10 | |
| *** henrynash has joined #openstack-keystone | 15:15 | |
| *** ChanServ sets mode: +v henrynash | 15:15 | |
| *** topol has joined #openstack-keystone | 15:19 | |
| *** ChanServ sets mode: +v topol | 15:19 | |
| samueldmq | henrynash, ping | 15:22 |
| henrynash | hi | 15:22 |
| samueldmq | henrynash, hi :) | 15:22 |
| samueldmq | henrynash, what are your plans for hackathon? | 15:22 |
| *** timcline has joined #openstack-keystone | 15:22 | |
| samueldmq | henrynash, are you considering evolve domain-roles ? get it approved, start impl? | 15:22 |
| *** jbonjean has joined #openstack-keystone | 15:24 | |
| *** stevemar has joined #openstack-keystone | 15:24 | |
| *** ChanServ sets mode: +v stevemar | 15:24 | |
| *** radez_g0n3 is now known as radez | 15:25 | |
| henrynash | yep, want to get it approved at the midcycle meetup | 15:25 |
| *** bknudson has joined #openstack-keystone | 15:29 | |
| *** ChanServ sets mode: +v bknudson | 15:29 | |
| *** krykowski has quit IRC | 15:30 | |
| samueldmq | henrynash, nice. I'll be here, feel free to ping me if you have something to me to be done :) | 15:31 |
| henrynash | ok, thx | 15:31 |
| *** krykowski has joined #openstack-keystone | 15:33 | |
| *** MasterPiece has quit IRC | 15:33 | |
| *** erkules_ is now known as erkules | 15:37 | |
| *** timcline has quit IRC | 15:45 | |
| *** timcline has joined #openstack-keystone | 15:45 | |
| *** rushiagr_away is now known as rushiagr | 15:47 | |
| *** jorge_munoz has joined #openstack-keystone | 15:48 | |
| *** tellesnobrega has quit IRC | 15:52 | |
| stevemar | morganfainberg, from last hackathon-ish https://review.openstack.org/#/c/110858/ | 15:52 |
| stevemar | marekd, ? | 15:53 |
| lbragstad | All: etherpad for discussions regarding the Kilo Hackathon - https://etherpad.openstack.org/p/keystone-kilo-hackathon | 16:00 |
| *** zzzeek has joined #openstack-keystone | 16:01 | |
| *** krykowski has quit IRC | 16:02 | |
| *** jorge_munoz has quit IRC | 16:05 | |
| *** chrisshattuck has joined #openstack-keystone | 16:05 | |
| *** tellesnobrega has joined #openstack-keystone | 16:06 | |
| *** EmilienM|afk is now known as EmilienM | 16:08 | |
| bknudson | we already have a https://etherpad.openstack.org/p/kilo-keystone-midcycle | 16:11 |
| *** jorge_munoz has joined #openstack-keystone | 16:12 | |
| openstackgerrit | Cyril Roelandt proposed openstack/python-keystoneclient: Print an error message when no tenant is specified https://review.openstack.org/148305 | 16:12 |
| *** timcline has quit IRC | 16:13 | |
| *** timcline has joined #openstack-keystone | 16:39 | |
| *** timcline_ has joined #openstack-keystone | 16:40 | |
| *** timcline has quit IRC | 16:43 | |
| *** dims__ has quit IRC | 16:45 | |
| *** dims__ has joined #openstack-keystone | 16:45 | |
| stevemar | ethpad realness~ https://etherpad.openstack.org/p/keystone-kilo-hackathon | 16:46 |
| openstackgerrit | henry-nash proposed openstack/keystone: Enable filtering in LDAP backend for listing entities https://review.openstack.org/147612 | 16:48 |
| *** timcline_ has quit IRC | 16:53 | |
| *** timcline has joined #openstack-keystone | 16:53 | |
| *** sriram has quit IRC | 16:55 | |
| *** sriram has joined #openstack-keystone | 16:56 | |
| *** rwsu has joined #openstack-keystone | 16:59 | |
| *** Tahmina has joined #openstack-keystone | 17:04 | |
| samueldmq | do not use this, it's the evil etherpad (like the evil brant version) | 17:05 |
| samueldmq | lol | 17:05 |
| stevemar | samueldmq, ;) | 17:07 |
| samueldmq | stevemar, haha :) | 17:07 |
| samueldmq | dstanek, ping - do we have a spec for functional testing? | 17:09 |
| *** _cjones_ has joined #openstack-keystone | 17:09 | |
| dstanek | samueldmq: https://review.openstack.org/#/c/147608/1/specs/kilo/functional-testing.rst | 17:09 |
| samueldmq | dstanek, thanks | 17:10 |
| samueldmq | dstanek, just one question, why do we need devstack if we just want keystone running (and not all services) | 17:11 |
| samueldmq | dstanek, ? | 17:11 |
| dstanek | samueldmq: because it's not just keystone - it's keystone + apache, keystone + openldap, keystone + pysaml2 (Idp), keystone + postgres, etc. | 17:12 |
| dstanek | samueldmq: devstack is the language to explain the testing requiremets | 17:12 |
| samueldmq | dstanek, aah get it, I thought we were deploying all services, sorry | 17:12 |
| samueldmq | dstanek, ++ makes sense | 17:13 |
| samueldmq | dstanek, boris also left a comment on the spec, he thinks a complete devstack would be deployed as well | 17:14 |
| anteaya | devstack-gate sets the parameters for how your devstack is set up for your tests including which services are activated: http://git.openstack.org/cgit/openstack-infra/devstack-gate/tree/README.rst | 17:15 |
| dstanek | samueldmq: we would be deploying a full devstack, but only starting services defined in the local.conf | 17:15 |
| dstanek | samueldmq: see https://review.openstack.org/#/c/139137/3/dsvm/federation/devstack/local.conf | 17:15 |
| dstanek | samueldmq: i'm working on an update now so i'll try to clarify the intent | 17:16 |
| samueldmq | anteaya, dstanek ++ | 17:16 |
| samueldmq | dstanek, nice thx | 17:16 |
| dstanek | anteaya: the job we add to project-config should allow us to describe wha services we need to run...at least that's my understanding | 17:17 |
| dstanek | anteaya: is that not the case? | 17:18 |
| anteaya | dstanek: yes, that is where devstack-gate comes in | 17:18 |
| dstanek | anteaya: ok, :-) you had me nervous for a second | 17:18 |
| openstackgerrit | Steve Martinelli proposed openstack/keystone-specs: IDP ID registration and validation https://review.openstack.org/148229 | 17:18 |
| anteaya | so in project-config you create builders for your jobs | 17:18 |
| anteaya | and can set variables that devstack-gate scripts know about | 17:19 |
| anteaya | for instance here are the builders for horizon jobs: http://git.openstack.org/cgit/openstack-infra/project-config/tree/jenkins/jobs/horizon.yaml | 17:20 |
| anteaya | or for horizon specific jobs | 17:20 |
| *** afazekas has quit IRC | 17:20 | |
| stevemar | dstanek, i know you love the browns and all, but it's an awful etherpad color | 17:21 |
| anteaya | then you specify specific jobs in http://git.openstack.org/cgit/openstack-infra/project-config/tree/jenkins/jobs/projects.yaml | 17:21 |
| anteaya | dstanek: have I clarified or made it worse? | 17:22 |
| samueldmq | dstanek, I was planning to create a keystone/tests/functional | 17:23 |
| samueldmq | dstanek, and then tests in keystone/tests would be classified either in /functional or /unit | 17:23 |
| samueldmq | dstanek, would have something like this http://paste.openstack.org/show/158927/ | 17:24 |
| samueldmq | dstanek, test_v3_* would go to /functional, where direct calls to the managers would be removed | 17:24 |
| dstanek | samueldmq: yes, that is in my spec | 17:24 |
| *** avozza is now known as zz_avozza | 17:25 | |
| dstanek | samueldmq: in the spec i separate the configurations needed to run tests from the tests themselves | 17:25 |
| *** aslaen has joined #openstack-keystone | 17:26 | |
| openstackgerrit | David Stanek proposed openstack/keystone-specs: Spec for adding functional testing support https://review.openstack.org/147608 | 17:27 |
| *** EmilienM is now known as EmilienM|afk | 17:27 | |
| samueldmq | dstanek, yep, just saw that .. so those I said would go to tests/functional/standard | 17:28 |
| dstanek | samueldmq: yes, i think so | 17:28 |
| samueldmq | dstanek, let me know if you need a hand on this :) | 17:28 |
| samueldmq | dstanek, I could start removing direct calls to the manager in test_v3_* | 17:29 |
| dstanek | samueldmq: absolutely - i would love to have people trying to patch out on a new devstack and letting me know why it won't work and/or what to do to make it better | 17:29 |
| openstackgerrit | henry-nash proposed openstack/keystone-specs: Enable the storing of domain specific configuration in SQL. https://review.openstack.org/123238 | 17:29 |
| samueldmq | dstanek, nice, will test your patch | 17:30 |
| samueldmq | henrynash, have a min to talk about assignment/resource tests splits ? | 17:31 |
| *** Tahmina has quit IRC | 17:32 | |
| *** sriram has joined #openstack-keystone | 17:32 | |
| *** timcline has quit IRC | 17:32 | |
| openstackgerrit | Steve Martinelli proposed openstack/keystone-specs: IDP ID registration and validation https://review.openstack.org/148229 | 17:32 |
| *** timcline has joined #openstack-keystone | 17:39 | |
| dstanek | does anyone what what the heck this is actually doing? http://git.openstack.org/cgit/openstack/neutron/tree/tox.ini#n38 | 17:40 |
| *** afaranha has joined #openstack-keystone | 17:52 | |
| anteaya | dstanek: marun set up functional testing for neutron | 17:52 |
| anteaya | he might be a good person to chat with | 17:53 |
| stevemar | rodrigods, ping | 17:54 |
| morganfainberg | rodrigods, ping - re oslo.policy on pypi | 17:55 |
| morganfainberg | rodrigods, did you register the pypi project as hidden? | 17:55 |
| morganfainberg | raildo, ^ | 17:55 |
| morganfainberg | raildo, if you can get rodrigods to take a look. trying to finalize the graduation | 17:55 |
| samueldmq | morganfainberg, will get him :) | 17:56 |
| morganfainberg | samueldmq, thanks! | 17:56 |
| samueldmq | np | 17:56 |
| *** gyee_ has joined #openstack-keystone | 17:57 | |
| raildo | morganfainberg, ok, he is not here right now, but i'll talk with him. | 17:58 |
| rodrigods | morganfainberg, stevemar hey | 17:59 |
| lbragstad | https://wiki.openstack.org/wiki/Meetings/KeystoneMeeting | 17:59 |
| stevemar | rodrigods, heyooo - look up ^ did you register the oslo.polocy pypi project as hidden? | 17:59 |
| rodrigods | stevemar, not that I'm aware of | 17:59 |
| rodrigods | it doesn't appear right now because it doesn't have any packages | 18:00 |
| stevemar | hmm, anteaya any idea whats going? | 18:00 |
| stevemar | rodrigods, anyway you can check if it's hidden? | 18:00 |
| rodrigods | stevemar, just a sec | 18:00 |
| anteaya | pypi knows about registered namespaces that don't have any packages | 18:01 |
| anteaya | project creation requires that we confirm pypi registration but we prefer that there are no packages | 18:01 |
| gordc | stevemar: any opinion/update on this: https://bugs.launchpad.net/pycadf/+bug/1397938 i'd like to have release with deprecated audit middleware asap | 18:01 |
| anteaya | package creation should happen with the publish-to-pypi job | 18:02 |
| rodrigods | anteaya, default pipit register command or openstack has a specific one? | 18:02 |
| stevemar | gordc, bah, just release then, i'm still on the fence about that, do you mind doing another release just for that bug? | 18:02 |
| rodrigods | anteaya, I can delete it if I created it wrong | 18:03 |
| stevemar | gordc, can you approve my other patch | 18:03 |
| stevemar | the hacking change https://review.openstack.org/#/c/146757/ | 18:03 |
| gordc | stevemar: done | 18:04 |
| stevemar | gordc, thanks boss | 18:04 |
| anteaya | rodrigods: I don't know I have never registered one myself | 18:04 |
| morganfainberg | rodrigods, i think you just need to update it to not be hidden | 18:04 |
| gordc | i think it's ok to have multiple releases. neither change is breaking so we probably don't even need to touch requirements | 18:04 |
| anteaya | I tell project creators to register on pypi then I search pypi and pypi tells me that it knows about it, so then I can approve the project creation patch | 18:05 |
| anteaya | I am not sure what interface/command combination folks use | 18:05 |
| rodrigods | anteaya, ok, just receiving an error from pypi when I try to edit the package | 18:07 |
| rodrigods | trying to make it work here | 18:08 |
| *** pcaruana has quit IRC | 18:08 | |
| marekd | morganfainberg: stevemar: in fact we will need different parameters names to lookup remote_id for every protocol. This may be different for SAML2 and OIDC and sadly we are trying to support all of them in parallel. | 18:08 |
| anteaya | rodrigods: okay, let me know when you have something or if you need more assistance | 18:10 |
| *** timcline has quit IRC | 18:10 | |
| samueldmq | henrynash, just saw you decided we need a spec for list role assignments filter performance | 18:10 |
| samueldmq | henrynash, will write one | 18:10 |
| anteaya | if need be we can consult richard jones who I believe should know something about pypi | 18:10 |
| *** tellesnobrega_ has joined #openstack-keystone | 18:10 | |
| samueldmq | bknudson, ping - how you usually to to test migrations on test_sql_upgrade ? | 18:12 |
| *** atiwari has joined #openstack-keystone | 18:13 | |
| samueldmq | bknudson, since by default it runs on sqlite, in which most of migrations are skipped | 18:13 |
| henrynash | samuledms: yes, it was considerd that we should get everyone to comment on issues like performance, or how ldap vs sql might operated etc. | 18:13 |
| samueldmq | henrynash, ++ | 18:14 |
| rodrigods | anteaya, can you check it now? Had to upload a package in order to it appear | 18:14 |
| henrynash | samuledmq: use test_sql_livetest | 18:14 |
| anteaya | rodrigods: you shouldn't have to upload anything | 18:14 |
| anteaya | but I will check | 18:14 |
| henrynash | samueldmq: you set env prams to say which DB to run against | 18:14 |
| rodrigods | anteaya, ok | 18:14 |
| samueldmq | henrynash, so in this case I set ENABLE_LIVE_MYSQL_TEST to true | 18:15 |
| anteaya | I can confirm it, thanks rodrigods https://pypi.python.org/pypi/oslo.policy/7c9db3c | 18:15 |
| henrynash | samueldmq: yes | 18:15 |
| samueldmq | henrynash, great! thanks | 18:16 |
| rodrigods | anteaya, great! anything that might need to be fixed? | 18:16 |
| henrynash | samueldmq: and there are specific DB confids in tests/config_files | 18:16 |
| anteaya | rodrigods: no, I don't think so | 18:17 |
| henrynash | samueldmq: e.g. backend_mysql.conf | 18:17 |
| rodrigods | anteaya, great, thanks! | 18:17 |
| anteaya | I don't know the internals of the pypi regisration process so I don't know what you did compared to what others do | 18:17 |
| anteaya | regardless the patch is approved | 18:17 |
| dstanek | anteaya: how much do you know about devstack-gate? i have a quick question about the hooks | 18:18 |
| anteaya | dstanek: I can look and figure stuff out | 18:19 |
| anteaya | dstanek: do ask and I do the best I can | 18:19 |
| dstanek | anteaya: part 1 is https://review.openstack.org/#/c/139137/3/dsvm/federation/devstack-gate/pre_test_hook.sh - is this still (if it was ever) the way to drop in my custom devstack configuration during a gate run? | 18:21 |
| dstanek | anteaya: i guess that is more of a devstack question, but still a question on if that's the right hook | 18:21 |
| * anteaya looks | 18:21 | |
| anteaya | right, let me take a peek and see if I can offer an opinion | 18:22 |
| dstanek | anteaya: great thanks | 18:22 |
| dstanek | anteaya: from what i can tell devstack doesn't allow you to add to it's lookup paths so you have to force your stuff into its directory structure | 18:23 |
| samueldmq | henrynash, so I need to config the db by myself? and set the connection there? | 18:24 |
| samueldmq | henrynash, or do the test env does it by itself? | 18:24 |
| henrynash | samuledms: you have to set it….since it doesn’t know how your local SQL DB is set up | 18:24 |
| henrynash | (or just set it up with the params that are in backend_mysql.conf by defalt)!!!! | 18:24 |
| *** EmilienM|afk is now known as EmilienM | 18:24 | |
| samueldmq | henrynash, great! thx | 18:25 |
| *** rushiagr is now known as rushiagr_away | 18:25 | |
| anteaya | dstanek: can I encourage you to take a look at how neutron invokes its test hooks? http://git.openstack.org/cgit/openstack-infra/project-config/tree/jenkins/jobs/neutron-functional.yaml | 18:25 |
| bknudson | samueldmq: the sqlite tests run on every commit so can at least touch some of the code to ensure there's no syntax errors. There are also live tests. | 18:26 |
| dstanek | anteaya: i initially based my spec on what i learned from neutron, osc and the nova functional etherpad - i think they are all missing this particular aspect | 18:27 |
| dstanek | anteaya: we can quickly chat before lunch or on the way | 18:27 |
| anteaya | sure, let's talk | 18:28 |
| openstackgerrit | Morgan Fainberg proposed openstack/keystone-specs: Endpoint enforcement in Keystone Middleware https://review.openstack.org/148257 | 18:29 |
| openstackgerrit | Steve Martinelli proposed openstack/keystone: Add a domain to federated users https://review.openstack.org/110858 | 18:29 |
| openstackgerrit | Steve Martinelli proposed openstack/keystone: Add a domain to federated users https://review.openstack.org/110858 | 18:32 |
| *** gyee_ has quit IRC | 18:33 | |
| openstackgerrit | David Stanek proposed openstack/keystone-specs: Spec for adding functional testing support https://review.openstack.org/147608 | 18:33 |
| *** henrynash has quit IRC | 18:34 | |
| *** jorge_munoz has quit IRC | 18:34 | |
| *** lhcheng has quit IRC | 18:34 | |
| *** bknudson has quit IRC | 18:36 | |
| *** atiwari has quit IRC | 18:36 | |
| *** openstackgerrit has quit IRC | 18:37 | |
| *** openstackgerrit has joined #openstack-keystone | 18:37 | |
| openstackgerrit | Merged openstack/pycadf: upgrade hacking to 0.10.0 https://review.openstack.org/146757 | 18:38 |
| *** topol has quit IRC | 18:38 | |
| *** aix has quit IRC | 18:41 | |
| *** Nakato has quit IRC | 18:44 | |
| *** Nakato has joined #openstack-keystone | 18:46 | |
| *** nkinder has quit IRC | 19:06 | |
| *** ljfisher has joined #openstack-keystone | 19:07 | |
| *** nkinder has joined #openstack-keystone | 19:18 | |
| samueldmq | dstanek, does tox tests use a different env from .venv? | 19:25 |
| samueldmq | dstanek, I installed and activated .venv, but when I run live tests I get source 'ImportError: No module named MySQLdb' | 19:26 |
| samueldmq | dstanek, I've installed this module as well (I can `import MySQLdb` from python) | 19:26 |
| samueldmq | dstanek, any idea? | 19:26 |
| *** rm_work|away is now known as rm_work | 19:27 | |
| openstackgerrit | Raildo Mascena de Sousa Filho proposed openstack/keystone-specs: Reseller https://review.openstack.org/139824 | 19:28 |
| breton | samueldmq: it uses .tox afaik | 19:30 |
| breton | should not it install dependencies by itself? | 19:30 |
| * breton does ./run_tests.sh | 19:30 | |
| samueldmq | breton, hmm.. yep, .tox I think as well | 19:31 |
| samueldmq | breton, and it install requirements from test-requirements, and the package I want is not there by default, it doesnt install it | 19:32 |
| samueldmq | breton, makes sense, thanks | 19:32 |
| *** lhcheng has joined #openstack-keystone | 19:35 | |
| *** lhcheng has quit IRC | 19:40 | |
| *** tellesnobrega_ has quit IRC | 19:41 | |
| gordc | morganfainberg: stevemar: just an fyi, i released pycadf 0.7.0... (in case something breaks randomly). | 19:43 |
| *** nkinder has quit IRC | 19:43 | |
| *** nkinder has joined #openstack-keystone | 19:43 | |
| *** tellesnobrega_ has joined #openstack-keystone | 19:54 | |
| *** lhcheng has joined #openstack-keystone | 20:12 | |
| *** topol has joined #openstack-keystone | 20:13 | |
| *** ChanServ sets mode: +v topol | 20:13 | |
| *** atiwari has joined #openstack-keystone | 20:15 | |
| *** bknudson has joined #openstack-keystone | 20:16 | |
| *** ChanServ sets mode: +v bknudson | 20:16 | |
| *** henrynash has joined #openstack-keystone | 20:17 | |
| *** ChanServ sets mode: +v henrynash | 20:17 | |
| dstanek | samueldmq: i have not tested with live tests - right now i don't have any functional tests hooked up - getting some of the live tests rigged up would probably be a good idea | 20:17 |
| *** topol has quit IRC | 20:18 | |
| *** topol has joined #openstack-keystone | 20:19 | |
| *** topol is now known as Guest40356 | 20:19 | |
| *** gyee_ has joined #openstack-keystone | 20:19 | |
| *** ayoung has joined #openstack-keystone | 20:20 | |
| *** ChanServ sets mode: +v ayoung | 20:20 | |
| *** bknudson has quit IRC | 20:20 | |
| *** timcline has joined #openstack-keystone | 20:20 | |
| *** Guest40356 has quit IRC | 20:20 | |
| *** bknudson has joined #openstack-keystone | 20:21 | |
| *** ChanServ sets mode: +v bknudson | 20:21 | |
| *** jorge_munoz has joined #openstack-keystone | 20:22 | |
| *** jistr has quit IRC | 20:23 | |
| openstackgerrit | Morgan Fainberg proposed openstack/keystone-specs: Endpoint enforcement in Keystone Middleware https://review.openstack.org/148257 | 20:23 |
| samueldmq | dstanek, k thanks | 20:24 |
| openstackgerrit | Morgan Fainberg proposed openstack/keystone: DO NOT MERGE: StrictABC Prototype https://review.openstack.org/148354 | 20:27 |
| *** timcline has quit IRC | 20:29 | |
| *** timcline has joined #openstack-keystone | 20:30 | |
| openstackgerrit | Merged openstack/keystone-specs: Endpoint enforcement in Keystone Middleware https://review.openstack.org/148257 | 20:31 |
| *** thedodd has joined #openstack-keystone | 20:38 | |
| *** tellesnobrega_ has quit IRC | 20:42 | |
| *** topol has joined #openstack-keystone | 20:46 | |
| *** ChanServ sets mode: +v topol | 20:46 | |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Internal notifications for cleanup domain https://review.openstack.org/125521 | 20:49 |
| *** marg7175 has joined #openstack-keystone | 20:52 | |
| *** atiwari has quit IRC | 20:57 | |
| *** gyee_ has quit IRC | 21:03 | |
| *** zz_avozza is now known as avozza | 21:05 | |
| *** gyee_ has joined #openstack-keystone | 21:13 | |
| rodrigods | morganfainberg, oslo.policy ready: http://git.openstack.org/cgit/openstack/oslo.policy https://review.openstack.org/#/admin/projects/openstack/oslo.policy :) | 21:14 |
| *** gyee_ has quit IRC | 21:15 | |
| *** tellesnobrega_ has joined #openstack-keystone | 21:16 | |
| *** gyee_ has joined #openstack-keystone | 21:19 | |
| *** gyee_ has quit IRC | 21:19 | |
| *** gyee has joined #openstack-keystone | 21:20 | |
| *** ChanServ sets mode: +v gyee | 21:20 | |
| openstackgerrit | David Stanek proposed openstack/keystone-specs: Spec for adding functional testing support https://review.openstack.org/147608 | 21:22 |
| *** atiwari has joined #openstack-keystone | 21:23 | |
| *** radez is now known as radez_g0n3 | 21:23 | |
| *** gyee has quit IRC | 21:27 | |
| anteaya | http://ci.openstack.org/third_party.html | 21:27 |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Internal notifications for cleanup domain https://review.openstack.org/125521 | 21:29 |
| *** atiwari has quit IRC | 21:33 | |
| *** raildo_ has joined #openstack-keystone | 21:34 | |
| openstackgerrit | ayoung proposed openstack/keystone-specs: functional testing support https://review.openstack.org/147608 | 21:35 |
| *** atiwari has joined #openstack-keystone | 21:36 | |
| *** gyee has joined #openstack-keystone | 21:39 | |
| *** ChanServ sets mode: +v gyee | 21:39 | |
| *** atiwari has quit IRC | 21:40 | |
| *** atiwari has joined #openstack-keystone | 21:40 | |
| *** diegows has joined #openstack-keystone | 21:41 | |
| *** radez_g0n3 is now known as radez | 21:41 | |
| *** atiwari has quit IRC | 21:49 | |
| openstackgerrit | Merged openstack/keystonemiddleware: Correct failures for check E122 https://review.openstack.org/146355 | 21:51 |
| *** lsmola_ has quit IRC | 21:55 | |
| openstackgerrit | Samuel de Medeiros Queiroz proposed openstack/keystone: Adds inherited column to RoleAssignment PK https://review.openstack.org/142472 | 22:00 |
| samueldmq | henrynash, bknudson ^ | 22:00 |
| samueldmq | that took me some time, but I got it :) | 22:00 |
| samueldmq | henrynash, bknudson could you please review it once you get some time? thanks | 22:01 |
| *** samueldmq is now known as samueldmq-away | 22:02 | |
| henrynash | samueldmq: will do - thanks!!! | 22:02 |
| *** nkinder has quit IRC | 22:02 | |
| openstackgerrit | Brant Knudson proposed openstack/keystonemiddleware: Enforce check F821 and H304 https://review.openstack.org/146356 | 22:03 |
| *** nkinder has joined #openstack-keystone | 22:04 | |
| openstackgerrit | henry-nash proposed openstack/keystone-specs: Enable the storing of domain specific configuration in SQL. https://review.openstack.org/123238 | 22:05 |
| breton | henrynash: hey, I've found this today: https://wiki.openstack.org/wiki/OutreachProgramForWomen/Ideas#Keystone_-_Implementation_of_Attribute_and_Graph_Based_Access_Control_Model_.28AGBAC.29_for_Openstack . Is the work on that public? | 22:05 |
| *** nellysmitt has quit IRC | 22:05 | |
| henrynash | breton: well it’s still under development…and will result in a proof of concept | 22:06 |
| henrynash | breton: Tahmina Ahmed is the person running with this, I’m her mentor | 22:07 |
| henrynash | breton: a spec shoul dbe avilable end of this week, beginning of next | 22:07 |
| *** lsmola_ has joined #openstack-keystone | 22:08 | |
| breton | henrynash: awesome. Interesting to have a look. The spec will go to review.o.o, right? | 22:10 |
| *** samueldmq has joined #openstack-keystone | 22:12 | |
| henrynash | breton: it will be reviewed, but this is not going to be suggested for keyston core….at least not any tiem soon | 22:12 |
| breton | ok, understood | 22:13 |
| openstackgerrit | henry-nash proposed openstack/keystone-specs: Enable the storing of domain specific configuration in SQL. https://review.openstack.org/123238 | 22:18 |
| openstackgerrit | henry-nash proposed openstack/keystone-specs: Enable the storing of domain specific configuration in SQL. https://review.openstack.org/123238 | 22:21 |
| *** sriram has quit IRC | 22:21 | |
| marekd | lhcheng: https://github.com/openstack/python-keystoneclient/tree/master/keystoneclient/contrib/auth/v3 the auth plugins for saml2 federation are here. | 22:28 |
| lhcheng | marekd: thanks! Does it require additional config to use this on python-novaclient? | 22:33 |
| marekd | it's a matter of configuring what auth plugin you want to use and some required params.... | 22:34 |
| marekd | novaclient has nothing to do here..... | 22:34 |
| marekd | once you get a scoped token | 22:34 |
| marekd | anyclient can use it. | 22:34 |
| *** rwsu has quit IRC | 22:35 | |
| *** rwsu has joined #openstack-keystone | 22:36 | |
| *** rwsu has quit IRC | 22:36 | |
| *** atiwari has joined #openstack-keystone | 22:36 | |
| *** atiwari has quit IRC | 22:41 | |
| *** atiwari has joined #openstack-keystone | 22:43 | |
| *** nkinder has quit IRC | 22:44 | |
| *** dims__ has quit IRC | 22:44 | |
| *** raildo_ has quit IRC | 22:50 | |
| *** dims__ has joined #openstack-keystone | 22:51 | |
| openstackgerrit | henry-nash proposed openstack/keystone-specs: Enable the storing of domain specific configuration in SQL. https://review.openstack.org/123238 | 22:52 |
| *** packet has joined #openstack-keystone | 22:59 | |
| dstanek | bknudson: this is the review i was talking about yesterday https://review.openstack.org/#/c/117484/ | 23:02 |
| bknudson | dstanek: It's on my review list. | 23:03 |
| dstanek | bknudson: have fun with it - line 604 of https://review.openstack.org/#/c/117484/14/keystone/assignment/backends/ldap.py makes it harder to read from my non-LDAP using experience | 23:06 |
| bknudson | dstanek: it's nice that you don't need to remember to ldap.filter.escape_filter_chars() the value. | 23:07 |
| *** chlong has joined #openstack-keystone | 23:10 | |
| *** tellesnobrega_ has quit IRC | 23:12 | |
| *** tellesnobrega_ has joined #openstack-keystone | 23:17 | |
| *** gordc has quit IRC | 23:20 | |
| *** samueldmq has quit IRC | 23:20 | |
| *** jamielennox|away is now known as jamielennox | 23:21 | |
| *** thedodd has quit IRC | 23:22 | |
| *** oomichi has joined #openstack-keystone | 23:22 | |
| *** zzzeek has quit IRC | 23:42 | |
| *** diegows has quit IRC | 23:45 | |
| *** afazekas has joined #openstack-keystone | 23:46 | |
| *** jorge_munoz has quit IRC | 23:48 | |
| *** timcline has quit IRC | 23:49 | |
| *** gyee has quit IRC | 23:50 | |
| *** EmilienM is now known as EmilienM|afk | 23:52 | |
| *** afazekas has quit IRC | 23:55 | |
| *** chrisshattuck has quit IRC | 23:57 | |
| ayoung | jamielennox, pleaser remove workflow -1 on https://review.openstack.org/#/c/107333/5 | 23:58 |
| jamielennox | ayoung: heh - mostly given up on that one | 23:59 |
| jamielennox | done | 23:59 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!