| *** marekd-mobile has quit IRC | 00:00 | |
| *** dimsum__ has quit IRC | 00:04 | |
| *** _cjones_ has quit IRC | 00:07 | |
| *** AndroUser2 has joined #openstack-keystone | 00:07 | |
| openstackgerrit | Rodrigo Duarte proposed openstack/keystonemiddleware: Avoid passing str to datetime.timedelta https://review.openstack.org/162347 | 00:09 |
|---|---|---|
| *** tqtran_afk has joined #openstack-keystone | 00:11 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone: Updated from global requirements https://review.openstack.org/162350 | 00:15 |
| morganfainberg | rodrigods, ^ that one you just proposed. how does that interact with the one by jamielennox|away https://review.openstack.org/#/c/161962/ | 00:16 |
| rodrigods | morganfainberg, wasn't aware about that one... should I rebase mine above his? | 00:18 |
| morganfainberg | rodrigods, just make sure you're looking at that one as well | 00:18 |
| rodrigods | morganfainberg, k | 00:18 |
| *** tqtran_afk is now known as tqtran | 00:18 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/python-keystoneclient: Updated from global requirements https://review.openstack.org/162355 | 00:22 |
| rodrigods | morganfainberg, seems unrelated to me | 00:23 |
| rodrigods | and jamielennox|away change looks good to me :) | 00:23 |
| morganfainberg | rodrigods, i hadn't looked just making sure it wasn't addressed in that one just due to some restructuring | 00:23 |
| rodrigods | morganfainberg, ok, mine it is a one liner converting a conf to int before passing to the datetime lib | 00:24 |
| *** david-lyle is now known as david-lyle_afk | 00:25 | |
| *** markvoelker has quit IRC | 00:25 | |
| openstackgerrit | Merged openstack/keystone: Use oslo.policy instead of incubated version https://review.openstack.org/148624 | 00:25 |
| *** dimsum__ has joined #openstack-keystone | 00:31 | |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Move cryptography to test-requirements.txt https://review.openstack.org/162360 | 00:31 |
| *** dims_ has joined #openstack-keystone | 00:32 | |
| morganfainberg | huh | 00:32 |
| morganfainberg | db2 is still reporting | 00:32 |
| bknudson | morganfainberg: wait until its token expires. | 00:32 |
| morganfainberg | bknudson, also i disagree with putting things like that in test-requires | 00:32 |
| bknudson | maybe have to kill the ssh connectoin | 00:32 |
| morganfainberg | i really do not want to say "oh go install stuff" to use things if we can avoid it | 00:33 |
| morganfainberg | is there a reason besides | 00:33 |
| morganfainberg | "it's not the default" you're advocating moving it? | 00:33 |
| bknudson | morganfainberg: the only reason is for consistency | 00:33 |
| morganfainberg | bknudson, i'd prefer to move the consistency the otherway personally | 00:33 |
| morganfainberg | knowing magic things to install to enable features is bad experience imo | 00:34 |
| morganfainberg | or needing to figure it all out | 00:34 |
| bknudson | I'll just note that packagers like us don't use requirements.txt | 00:34 |
| morganfainberg | sure | 00:34 |
| bknudson | I don't know who would. | 00:34 |
| morganfainberg | but a lot of packagers do base requirements for something on what is in requirements.txt | 00:34 |
| morganfainberg | look there first and see what they should include | 00:35 |
| bknudson | they should get active in the community so they know what's going on. | 00:35 |
| *** AndroUser2 has quit IRC | 00:35 | |
| *** dimsum__ has quit IRC | 00:36 | |
| morganfainberg | msgpack-python also needs to be moved then | 00:36 |
| *** EmilienM is now known as EmilienM|afk | 00:36 | |
| morganfainberg | and in theory evenetlet should be moved [see slippery slope] | 00:36 |
| morganfainberg | ;) | 00:36 |
| bknudson | we can move eventlet since it's deprecated. | 00:37 |
| morganfainberg | i'd like to get to a point where we could package up providers like fernet into something we can load w/ stevedore | 00:37 |
| morganfainberg | then if you want to install it, it's isolated code - easy to get deps clear for it | 00:37 |
| bknudson | morganfainberg: I think dhellmann made a start at it. | 00:37 |
| morganfainberg | bknudson, he did. but we'd also need to split it into another repo because $setuptools | 00:38 |
| bknudson | moar repos! | 00:38 |
| morganfainberg | honestly, i'd be ok with that. | 00:38 |
| morganfainberg | make token providers separate from the main repo. | 00:38 |
| bknudson | it'll be a full time job just approving proposal bots | 00:38 |
| morganfainberg | haha | 00:39 |
| *** _cjones_ has joined #openstack-keystone | 00:39 | |
| morganfainberg | anyway. i'll voice my opinion on that review. i wont block it though. | 00:39 |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Move Fernet requirements to test-requirements.txt https://review.openstack.org/162360 | 00:40 |
| morganfainberg | bknudson, ok comment posted. | 00:42 |
| *** jorge_munoz has joined #openstack-keystone | 00:42 | |
| bknudson | even DB2 CI is against this one. | 00:42 |
| morganfainberg | bknudson, i thnk we could also move keystoneclient to test-requirements since it's only used for CMS in pki tokens | 00:43 |
| morganfainberg | which si also not the default | 00:43 |
| bknudson | morganfainberg: it's used by revocation list signing, too. | 00:44 |
| bknudson | it's used all over the place. | 00:44 |
| * morganfainberg would move ldap to requirements.txt too tbh | 00:44 | |
| morganfainberg | and ldappool. | 00:45 |
| morganfainberg | and python-memcache [wince] | 00:45 |
| bknudson | morganfainberg: I told our packagers to add ldappool to rpm deps and they complained because it's not in requirements.txt | 00:46 |
| morganfainberg | i'd like to see test-requirements only be a place for things that are for running tests, not run-time configurations. | 00:46 |
| morganfainberg | so lets move it! :) | 00:46 |
| morganfainberg | lets move the consistency the otherway | 00:46 |
| bknudson | morganfainberg: I'm trying to teach them a lesson. | 00:46 |
| morganfainberg | i actually agree that if it is used at runtime it should be in requirements...even if that isn't the default deployment mode. /shrug | 00:47 |
| bknudson | I'd be fine with it... as long as we're consistent. | 00:47 |
| morganfainberg | bknudson, fair enough and i agree we should be consistent | 00:47 |
| bknudson | I think there was some discussion in -oslo today... see if I can find it. | 00:47 |
| morganfainberg | sounds good. | 00:47 |
| bknudson | 2015-03-06T20:41:07 <lifeless> so the pip upstream folk actually don't like what we do with requirements | 00:48 |
| bknudson | http://eavesdrop.openstack.org/irclogs/%23openstack-oslo/%23openstack-oslo.2015-03-06.log | 00:48 |
| bknudson | 2015-03-06T20:42:51 <lifeless> I'll follow up on the list on Monday | 00:48 |
| bknudson | something to look forward to | 00:49 |
| morganfainberg | bknudson, so i think the answer is split the backends up | 00:49 |
| morganfainberg | bknudson, in a smart way. | 00:49 |
| morganfainberg | separate repos and stevedore loading | 00:49 |
| bknudson | that would also force us to have an ABI | 00:50 |
| morganfainberg | because i'd say that as an application, if it is runtime-requirement, we'd meet the _hard_requires requirement here | 00:50 |
| morganfainberg | even if it's not the default runtime requirement | 00:50 |
| morganfainberg | we're not a lib where we do "import X" and hope it works | 00:50 |
| morganfainberg | and i do agree if it was keystone-lib, we'd not cram everything into it | 00:51 |
| morganfainberg | bknudson, yes it would... and to be honest, we *should* have an ABI | 00:51 |
| bknudson | that would make gyee happy | 00:51 |
| morganfainberg | bknudson, would it make you unhappy? or are you more ambivalent about that? | 00:52 |
| morganfainberg | or would you be happy with it? | 00:52 |
| * morganfainberg could see this as a serious effort for Liberty. | 00:52 | |
| bknudson | has to think about it. | 00:53 |
| bknudson | it's definitely got its merits. | 00:53 |
| morganfainberg | let me know what you think. i wont push for that kind of change yet. i'm mulling over my thoughts for liberty still ;) | 00:53 |
| bknudson | any other project do this that you know of? | 00:53 |
| morganfainberg | neutron and their drivers | 00:53 |
| morganfainberg | most are afaik being punted out of tree. | 00:53 |
| bknudson | do they consider them all "integrated" | 00:53 |
| morganfainberg | today yes | 00:53 |
| morganfainberg | tomorrow no | 00:53 |
| morganfainberg | but that is because the drivers are maintained by $company_who_wrote_them | 00:54 |
| bknudson | so we'd have release 1.0 of identity sql backend? | 00:54 |
| morganfainberg | yes | 00:54 |
| gyee | sorry what are we talking about? ABI? | 00:54 |
| bknudson | gyee: splitting all the backends out to their own repos. | 00:54 |
| morganfainberg | gyee, yes. possibly formalizing the interface so we could split the drivers out of the tree into their own repos | 00:55 |
| gyee | amen brother! | 00:55 |
| gyee | I have to spend a day or two refactoring our mongo drivers everytime we do a pull | 00:55 |
| bknudson | upstream it! | 00:55 |
| gyee | because we keep changing the @#$!@ interface | 00:55 |
| morganfainberg | bknudson, i think we'd need to spend some time and make sure we are happy with the ABI | 00:56 |
| gyee | bknudon, can't, we have account life cycle management logic in there too | 00:56 |
| morganfainberg | bknudson, that is totally doable. it wouldn't be awful, but it would mean ensuring we pay down the tech debt. | 00:56 |
| bknudson | that would be a good thing by itself. | 00:56 |
| gyee | I would need to separate those out | 00:56 |
| bknudson | gyee: make that a plugin. | 00:57 |
| gyee | to us, user is directly tight to an account | 00:57 |
| morganfainberg | bknudson, i also think i'd want to re-design how the caching layer works if we do that, move to something like how dogpile allows proxies. | 00:57 |
| gyee | tied | 00:57 |
| bknudson | use notifications | 00:57 |
| morganfainberg | with a formal ABI gyee could split that logic out and load it in where needed, since his team would own the mongo driver [in stackforge?] | 00:57 |
| gyee | right | 00:58 |
| gyee | also need to strip out the PII encryption layer | 00:58 |
| morganfainberg | so they could have hooks for themselves. it would be an easier sell rather than "well good luck maintaining this" | 00:58 |
| morganfainberg | since they could focus on making the split rather than keeping up w/ keystone's interfaces | 00:58 |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Move pysaml to requirements.txt for py3 https://review.openstack.org/162363 | 00:59 |
| gyee | I've got a feeling that stuff won't stablize till we straighten the role interfaces | 00:59 |
| gyee | role and assignment | 01:00 |
| morganfainberg | gyee, each backend would need a formal ABI. | 01:00 |
| gyee | that backend is most unstable right now | 01:00 |
| morganfainberg | gyee, so identity and token might be easy to formalize | 01:00 |
| morganfainberg | where resource and assignment takes a bit mroe work | 01:00 |
| gyee | morganfainberg, yes | 01:00 |
| bknudson | resources. | 01:00 |
| morganfainberg | bknudson, ack. | 01:00 |
| bknudson | it takes me a while to find that stuff now. | 01:01 |
| morganfainberg | bknudson, yeah i've had to remap in my head where htings live | 01:01 |
| morganfainberg | :( | 01:01 |
| gyee | bknudson, I spent a better part of this week refactoring the mongo drivers for resource :( | 01:01 |
| gyee | welcome to my world | 01:01 |
| bknudson | that's what happens when it's not upstream. | 01:01 |
| * gyee is crying | 01:02 | |
| bknudson | gyee: I was in SF a couple of weeks ago for the OSSG meetup. | 01:02 |
| bknudson | nice weather there | 01:02 |
| morganfainberg | bknudson, anyway think about the ABI and then splitting. let me know what your mulling comes up with. i'm slowly moving toward the thought that it could be a very good focus for a cycle to cleanup interfaces like that. | 01:03 |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Remove useless comment from requirements.txt https://review.openstack.org/162364 | 01:03 |
| morganfainberg | bknudson, LOL ^ "duh" keystone dependencies... | 01:04 |
| gyee | bknudson, there was a street fair at SF Chinatown for the lunar new year festival | 01:04 |
| bknudson | ok, that's it for messing with requirements.txt for a while. | 01:04 |
| bknudson | gyee: there was also going to be some kind of world's fair thing? | 01:05 |
| bknudson | also, someone drowned in the bay. | 01:05 |
| gyee | bknudson, yeah, that happens way too often, sadly | 01:05 |
| morganfainberg | gyee, we have the cherry blossoms blooming at the gardens here in Pasadena | 01:06 |
| bknudson | don't drink out of it. | 01:06 |
| morganfainberg | gyee, its... kinda spring-like. | 01:06 |
| gyee | nice, weather is in the 70s right now | 01:07 |
| bknudson | don't tell ayoung about your weather. | 01:07 |
| *** markvoelker has joined #openstack-keystone | 01:08 | |
| *** samueldmq_ has quit IRC | 01:11 | |
| *** markvoelker has quit IRC | 01:12 | |
| *** markvoelker has joined #openstack-keystone | 01:15 | |
| *** tqtran has quit IRC | 01:18 | |
| *** markvoelker has quit IRC | 01:20 | |
| *** jorge_munoz has quit IRC | 01:44 | |
| *** rwsu is now known as rwsu-afk | 01:46 | |
| *** sigmavirus24 is now known as sigmavirus24_awa | 01:47 | |
| *** gyee has quit IRC | 01:52 | |
| *** _cjones_ has quit IRC | 01:55 | |
| *** dims_ has quit IRC | 02:02 | |
| *** erkules_ has joined #openstack-keystone | 02:06 | |
| *** erkules has quit IRC | 02:09 | |
| ayoung | richm, sorry, just swa your message. I'm good; I'm wokring with devstack, so I have the version I need on the server. I was trying to run it from my laptop, and that is Fedora standard openstack client. | 02:09 |
| ayoung | $ openstack identity provider list | 02:11 |
| ayoung | /usr/lib/python2.7/site-packages/novaclient/v1_1/__init__.py:30: UserWarning: Module novaclient.v1_1 is deprecated (taken as a basis for novaclient.v2). The preferable way to get client class or object you can find in novaclient.client module. | 02:11 |
| ayoung | warnings.warn("Module novaclient.v1_1 is deprecated (taken as a basis for " | 02:11 |
| ayoung | ERROR: openstack Unknown command ['identity', 'provider', 'list'] | 02:11 |
| richm | ayoung: yep - known issue | 02:12 |
| ayoung | richm, any worjk around? | 02:12 |
| ayoung | --os-identity-api-version=3 ? | 02:13 |
| richm | ayoung: I do this on my testing vms: sed -i '/^warnings.warn/,/^$/d' /usr/lib/python2.7/site-packages/novaclient/v1_1/__init__.py | 02:13 |
| ayoung | richm, I think I need to pass the above value and I'm good. | 02:13 |
| richm | ok | 02:13 |
| ayoung | richm, yeah, the dfefault is v2.0 | 02:14 |
| ayoung | on devstack, this works: | 02:14 |
| richm | ayoung: as you have found out - puppet will wipe out pip packages and replace them with rpms | 02:14 |
| ayoung | -sh-4.3$ export OS_USERNAME=admin | 02:14 |
| ayoung | -sh-4.3$ openstack --os-identity-api-version=3 identity provider list | 02:14 |
| richm | you can also use export OS_IDENTITY_API_VERSION=3 | 02:14 |
| *** browne has quit IRC | 02:14 | |
| ayoung | richm, ah...well, I;m not surprised, but that is not what happend here | 02:14 |
| richm | if you only want to use v3 | 02:14 |
| ayoung | I'm actually very close to getting sssd tested using federation | 02:15 |
| richm | excellent | 02:15 |
| ayoung | {"error": {"message": "Could not find federated protocol kerberos for Identity Provider: sssd", "code": 404, "title": "Not Found"}} | 02:16 |
| ayoung | richm, so I think I can make this all work nicely within the Kerberos client plugin | 02:17 |
| ayoung | I'm passing the following JSON for an unscoped token request: | 02:17 |
| *** markvoelker has joined #openstack-keystone | 02:17 | |
| ayoung | '{ "auth": { "identity": { "methods": ["kerberos"], "kerberos":{"identity_provider":"sssd", "protocol":"kerberos"}}, "scope": { "unscoped": { } } } }' | 02:17 |
| ayoung | now I need a mapping.... | 02:17 |
| *** devlaps has joined #openstack-keystone | 02:18 | |
| *** stevemar has joined #openstack-keystone | 02:18 | |
| *** ChanServ sets mode: +v stevemar | 02:18 | |
| *** markvoelker has quit IRC | 02:21 | |
| *** davechen has joined #openstack-keystone | 02:28 | |
| ayoung | richm, ERROR: openstack {u'mapping': {u'rules': [{u'local': [{u'user': {u'name': u'{0}'}}, {u'group': {u'id': u'0cd5e9'}}], u'remote': [{u'type': u'UserName'}, {u'type': u'orgPersonType', u'not_any_of': [u'Contractor', u'Guest']}]}]}} is not of type 'array' | 02:32 |
| ayoung | that is using the one from the example. | 02:32 |
| ayoung | http://specs.openstack.org/openstack/keystone-specs/api/v3/identity-api-v3-os-federation-ext.html#create-a-mapping | 02:33 |
| richm | ayoung: hmm - never used that api | 02:37 |
| ayoung | richm, I suspect it has something to do with reading the JSON from the file. Probably some format. I'll try straight curl next | 02:38 |
| *** kaisers has joined #openstack-keystone | 02:38 | |
| *** kaisers1 has quit IRC | 02:40 | |
| *** kaisers1 has joined #openstack-keystone | 02:56 | |
| *** kaisers has quit IRC | 02:56 | |
| *** Nakato has quit IRC | 03:01 | |
| *** r-daneel_ has quit IRC | 03:02 | |
| *** morganfainberg has quit IRC | 03:02 | |
| *** dimsum__ has joined #openstack-keystone | 03:03 | |
| *** kaisers has joined #openstack-keystone | 03:05 | |
| *** kaisers1 has quit IRC | 03:06 | |
| *** r-daneel_ has joined #openstack-keystone | 03:07 | |
| *** dimsum__ has quit IRC | 03:08 | |
| openstackgerrit | Merged openstack/keystone: Remove useless comment from requirements.txt https://review.openstack.org/162364 | 03:13 |
| *** richm has quit IRC | 03:14 | |
| *** davechen has quit IRC | 03:15 | |
| *** markvoelker has joined #openstack-keystone | 03:18 | |
| *** markvoelker has quit IRC | 03:23 | |
| *** devlaps has quit IRC | 03:26 | |
| *** Nakato has joined #openstack-keystone | 03:27 | |
| openstackgerrit | Steve Martinelli proposed openstack/keystone: Crosslink to other sites that are owned by Keystone https://review.openstack.org/161490 | 03:30 |
| openstackgerrit | Steve Martinelli proposed openstack/keystone: Add documentation for key terms and basic authenticating https://review.openstack.org/152018 | 03:32 |
| *** iamjarvo has joined #openstack-keystone | 03:32 | |
| *** morganfainberg has joined #openstack-keystone | 03:40 | |
| *** ChanServ sets mode: +v morganfainberg | 03:40 | |
| *** trey has quit IRC | 03:43 | |
| *** r-daneel_ has quit IRC | 03:44 | |
| *** r-daneel_ has joined #openstack-keystone | 03:45 | |
| *** trey has joined #openstack-keystone | 03:47 | |
| *** r-daneel_ has quit IRC | 03:51 | |
| *** spandhe has quit IRC | 03:59 | |
| openstackgerrit | Steve Martinelli proposed openstack/keystone: Crosslink to other sites that are owned by Keystone https://review.openstack.org/161490 | 04:08 |
| *** spandhe has joined #openstack-keystone | 04:12 | |
| *** charz has quit IRC | 04:16 | |
| *** hugokuo has quit IRC | 04:16 | |
| *** markvoelker has joined #openstack-keystone | 04:19 | |
| *** charz has joined #openstack-keystone | 04:20 | |
| openstackgerrit | Merged openstack/keystone: Remove policy parsing exception https://review.openstack.org/158562 | 04:22 |
| openstackgerrit | Merged openstack/keystone: Remove incubated version of oslo policy https://review.openstack.org/157158 | 04:22 |
| *** hugokuo has joined #openstack-keystone | 04:24 | |
| *** markvoelker has quit IRC | 04:25 | |
| *** lhcheng has quit IRC | 04:26 | |
| openstackgerrit | Merged openstack/keystone: Cleanup policy related tests https://review.openstack.org/158561 | 04:31 |
| *** jamiec has quit IRC | 04:39 | |
| *** jamiec has joined #openstack-keystone | 04:39 | |
| *** hugokuo has quit IRC | 04:47 | |
| *** charz has quit IRC | 04:47 | |
| *** Viswanath has joined #openstack-keystone | 04:53 | |
| *** Viswanath has quit IRC | 04:56 | |
| *** lhcheng has joined #openstack-keystone | 05:06 | |
| *** dguerri`afk has quit IRC | 05:11 | |
| *** spandhe has quit IRC | 05:12 | |
| *** dguerri has joined #openstack-keystone | 05:13 | |
| *** markvoelker has joined #openstack-keystone | 05:20 | |
| *** markvoelker has quit IRC | 05:26 | |
| *** iamjarvo has quit IRC | 05:33 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone: Imported Translations from Transifex https://review.openstack.org/162386 | 06:03 |
| *** iamjarvo has joined #openstack-keystone | 06:03 | |
| *** iamjarvo has quit IRC | 06:10 | |
| *** markvoelker has joined #openstack-keystone | 06:22 | |
| *** markvoelker has quit IRC | 06:26 | |
| *** dimsum__ has joined #openstack-keystone | 06:41 | |
| *** dimsum__ has quit IRC | 06:46 | |
| *** charz has joined #openstack-keystone | 06:59 | |
| *** hugokuo has joined #openstack-keystone | 07:04 | |
| *** markvoelker has joined #openstack-keystone | 07:23 | |
| *** spandhe has joined #openstack-keystone | 07:26 | |
| *** markvoelker has quit IRC | 07:27 | |
| *** spandhe has quit IRC | 07:57 | |
| *** markvoelker has joined #openstack-keystone | 08:24 | |
| *** lhcheng has quit IRC | 08:28 | |
| *** stevemar has quit IRC | 08:28 | |
| *** markvoelker has quit IRC | 08:29 | |
| *** Akshik has joined #openstack-keystone | 08:55 | |
| *** lhcheng has joined #openstack-keystone | 09:00 | |
| *** markvoelker has joined #openstack-keystone | 09:25 | |
| *** markvoelker has quit IRC | 09:31 | |
| *** henrynash has joined #openstack-keystone | 09:34 | |
| *** ChanServ sets mode: +v henrynash | 09:34 | |
| *** samueldmq_ has joined #openstack-keystone | 09:56 | |
| samueldmq_ | good morning :) | 10:07 |
| samueldmq_ | henrynash, ping - you around ? | 10:07 |
| *** lhcheng has quit IRC | 10:07 | |
| henrynash | samueldmq: hi | 10:07 |
| samueldmq_ | henrynash, hi, just a quick discussion :) | 10:08 |
| henrynash | sure | 10:08 |
| samueldmq_ | henrynash, regarding your comment on https://review.openstack.org/#/c/142472/ | 10:08 |
| samueldmq_ | henrynash, where I should create copy-tables for SQLite, etc | 10:08 |
| samueldmq_ | henrynash, I created the tables, not a big work .. but I have a question regarding migration | 10:09 |
| samueldmq_ | s/migration/downgrade | 10:09 |
| henrynash | you can just create them in the normal place, call it “assignment-temp” or something like that | 10:09 |
| henrynash | and then rename at the end | 10:10 |
| samueldmq_ | henrynash, yes, that's simple | 10:10 |
| henrynash | (or rename first and then create the new table with the correct name…which is maybe better) | 10:10 |
| samueldmq_ | henrynash, my question is: if after upgrading I have both inherited and non-inherited assignments (fits the new constraint) | 10:11 |
| henrynash | did dinf one of the examples where we did this before? | 10:11 |
| samueldmq_ | henrynash, how can I downgrade? | 10:11 |
| henrynash | (did you find one…) | 10:11 |
| samueldmq_ | henrynash, yeah, I saw 044 and it was a pretty copy-paste-adapt :D | 10:11 |
| henrynash | :-) | 10:12 |
| henrynash | ok, so on downgrade.... | 10:12 |
| henrynash | ….two choices: | 10:12 |
| henrynash | a) you just drop the inherited assinments on teh floor | 10:12 |
| henrynash | b) you expand out the inherited assignments to the projects that would have got them | 10:12 |
| henrynash | a) is best I think | 10:13 |
| henrynash | …since if a customer then re-upgraded (as they surely will at some point), then yuo’d end up with lots of dreict roels to clean up | 10:13 |
| henrynash | in general we do not try and presrve data that uses “future” concepts across a downgrade | 10:14 |
| samueldmq_ | henrynash, in fact we could have any of inherited or not at first (before migration) | 10:15 |
| samueldmq_ | henrynash, but this is a good rule | 10:15 |
| samueldmq_ | henrynash, but I agree, but we could be softer with inherited assignments | 10:16 |
| samueldmq_ | henrynash, just droping those in whose there is a conflict with a non-inherited assignment (opting to stay with the non-inherited) | 10:16 |
| samueldmq_ | henrynash, in other hand; this would harder the script, instead of just droping inherited assignments ... | 10:17 |
| henrynash | OH…sorry - I thought we were taling about where we first enabled inheritance…this is the PK thing, right | 10:18 |
| *** dimsum__ has joined #openstack-keystone | 10:18 | |
| henrynash | in that case, yes, we need to drop one of them | 10:19 |
| henrynash | I would agree, that we should drop an inherited one if there is a direct one that clashes | 10:19 |
| samueldmq_ | henrynash, great! | 10:20 |
| samueldmq_ | henrynash, so that is not so hard to do for sqlite, where we copy content from one table to another | 10:20 |
| samueldmq_ | henrynash, but how to do so in mysql, etc? where my script just modify hte constraint? | 10:20 |
| henrynash | one idea….isn’t there a patch somewhere to add time stampd to this table? If that does merge, I guess youcould drop the newest one | 10:21 |
| samueldmq_ | henrynash, will the dbms just fail when changing the constraint? | 10:21 |
| samueldmq_ | henrynash, I dont know what will be the behavior | 10:21 |
| henrynash | hmm, good point….yes, it should fail since there is a constraint error… | 10:22 |
| henrynash | you may need to do a copy table ANYWAY | 10:22 |
| henrynash | to get the desired (and consistent) behaviour | 10:22 |
| samueldmq_ | henrynash, yes, OR drop clshing assignments before adding the constraint | 10:22 |
| henrynash | samueldmq: yes, you could do that….tru…pre-process the table | 10:23 |
| samueldmq_ | henrynash, do a copy table anyway would be safer | 10:23 |
| henrynash | I think so | 10:23 |
| samueldmq_ | henrynash, if we fail in the middle of the migration, we wont loose data | 10:23 |
| *** dimsum__ has quit IRC | 10:23 | |
| samueldmq_ | henrynash, great! thanks | 10:24 |
| *** markvoelker has joined #openstack-keystone | 10:26 | |
| *** Akshik_ has joined #openstack-keystone | 10:31 | |
| *** markvoelker has quit IRC | 10:32 | |
| samueldmq_ | henrynash, well, regarding the patch to add timestamp, I think it will add NOW to all existing entries | 10:33 |
| samueldmq_ | henrynash, if so, maybe droping the newest wont be the best approach (since normally the operator will do both upgrades) | 10:33 |
| samueldmq_ | henrynash, so let's keep the table copy and then transfer data | 10:33 |
| samueldmq_ | henrynash, thanks, have a nice weekend | 10:34 |
| *** Akshik has quit IRC | 10:34 | |
| henrynash | np, thanks | 10:34 |
| *** Akshik_ has quit IRC | 10:40 | |
| *** henrynash has quit IRC | 10:40 | |
| *** markvoelker has joined #openstack-keystone | 11:28 | |
| *** markvoelker has quit IRC | 11:32 | |
| *** markvoelker has joined #openstack-keystone | 12:29 | |
| *** markvoelker has quit IRC | 12:33 | |
| *** dims_ has joined #openstack-keystone | 12:53 | |
| *** toddnni has quit IRC | 13:00 | |
| *** toddnni has joined #openstack-keystone | 13:00 | |
| *** dims_ has quit IRC | 13:01 | |
| *** markvoelker has joined #openstack-keystone | 13:30 | |
| *** markvoelker has quit IRC | 13:35 | |
| *** chlong has joined #openstack-keystone | 13:39 | |
| *** topol has joined #openstack-keystone | 13:48 | |
| *** ChanServ sets mode: +v topol | 13:48 | |
| *** topol_ has joined #openstack-keystone | 13:49 | |
| *** ChanServ sets mode: +v topol_ | 13:49 | |
| *** topol has quit IRC | 13:49 | |
| *** topol_ is now known as topol | 13:49 | |
| *** abhirc has joined #openstack-keystone | 14:20 | |
| *** markvoelker has joined #openstack-keystone | 14:31 | |
| *** markvoelker has quit IRC | 14:36 | |
| *** markvoelker has joined #openstack-keystone | 14:44 | |
| *** samueldmq_ has quit IRC | 15:25 | |
| *** angular_mike has joined #openstack-keystone | 15:26 | |
| *** angular_mike is now known as ff_guy | 15:26 | |
| *** abhirc has quit IRC | 15:50 | |
| *** abhirc has joined #openstack-keystone | 15:51 | |
| *** Akshik has joined #openstack-keystone | 15:52 | |
| *** samueldmq_ has joined #openstack-keystone | 15:52 | |
| *** abhirc has quit IRC | 15:56 | |
| *** sudorandom has quit IRC | 16:01 | |
| *** henrynash has joined #openstack-keystone | 16:22 | |
| *** ChanServ sets mode: +v henrynash | 16:22 | |
| *** EmilienM|afk is now known as EmilienM | 16:24 | |
| *** Akshik has quit IRC | 16:29 | |
| *** r-daneel_ has joined #openstack-keystone | 16:32 | |
| *** sudorandom has joined #openstack-keystone | 16:34 | |
| *** henrynash has quit IRC | 16:39 | |
| *** markvoelker has quit IRC | 16:45 | |
| *** r-daneel_ has quit IRC | 17:02 | |
| *** abhirc has joined #openstack-keystone | 17:05 | |
| *** abhirc_ has joined #openstack-keystone | 17:09 | |
| *** abhirc has quit IRC | 17:09 | |
| *** r-daneel_ has joined #openstack-keystone | 17:10 | |
| openstackgerrit | mariam john proposed openstack/pycadf: Add api_audit_map.conf for Trove project https://review.openstack.org/162415 | 17:13 |
| openstackgerrit | mariam john proposed openstack/pycadf: Add api_audit_map.conf for Trove project https://review.openstack.org/162415 | 17:15 |
| *** _cjones_ has joined #openstack-keystone | 17:18 | |
| *** stevemar has joined #openstack-keystone | 17:19 | |
| *** ChanServ sets mode: +v stevemar | 17:19 | |
| *** dimsum__ has joined #openstack-keystone | 17:21 | |
| *** _cjones_ has quit IRC | 17:21 | |
| *** _cjones_ has joined #openstack-keystone | 17:22 | |
| openstackgerrit | Rodrigo Duarte proposed openstack/keystone: Mirror domain entries to project table https://review.openstack.org/161408 | 17:25 |
| openstackgerrit | Rodrigo Duarte proposed openstack/keystone: Add is_domain field in Project Table https://review.openstack.org/157427 | 17:25 |
| *** dimsum__ has quit IRC | 17:25 | |
| openstackgerrit | Rodrigo Duarte proposed openstack/keystone: WIP: Bye bye domain table https://review.openstack.org/161854 | 17:25 |
| openstackgerrit | Rodrigo Duarte proposed openstack/keystone: Honor domain operations in project table https://review.openstack.org/143763 | 17:25 |
| openstackgerrit | Rodrigo Duarte proposed openstack/keystone: Change project name constraint https://review.openstack.org/158372 | 17:25 |
| *** iamjarvo has joined #openstack-keystone | 17:28 | |
| *** ff_guy has quit IRC | 17:33 | |
| *** dimsum__ has joined #openstack-keystone | 17:34 | |
| *** erkules_ is now known as erkules | 17:42 | |
| *** markvoelker has joined #openstack-keystone | 17:44 | |
| *** markvoelker has quit IRC | 17:49 | |
| *** dhellmann has quit IRC | 17:51 | |
| *** dhellmann has joined #openstack-keystone | 17:52 | |
| *** dhellmann has quit IRC | 17:54 | |
| *** dhellmann has joined #openstack-keystone | 17:54 | |
| *** iamjarvo has quit IRC | 17:59 | |
| *** dhellmann has quit IRC | 18:06 | |
| *** dhellmann has joined #openstack-keystone | 18:07 | |
| *** dhellmann has quit IRC | 18:14 | |
| *** dhellmann has joined #openstack-keystone | 18:14 | |
| *** Viswanath has joined #openstack-keystone | 18:14 | |
| *** chlong has quit IRC | 18:15 | |
| *** Viswanath has quit IRC | 18:17 | |
| *** dimsum__ has quit IRC | 18:21 | |
| *** dimsum__ has joined #openstack-keystone | 18:21 | |
| *** dimsum__ has quit IRC | 18:22 | |
| *** _cjones_ has quit IRC | 18:39 | |
| *** henrynash has joined #openstack-keystone | 18:39 | |
| *** ChanServ sets mode: +v henrynash | 18:39 | |
| *** markvoelker has joined #openstack-keystone | 18:45 | |
| openstackgerrit | Steve Martinelli proposed openstack/pycadf: Clean up pycadf's doc landing page https://review.openstack.org/162422 | 18:48 |
| *** markvoelker has quit IRC | 18:51 | |
| *** sigmavirus24_awa is now known as sigmavirus24 | 18:55 | |
| openstackgerrit | Steve Martinelli proposed openstack/pycadf: add a new set of release notes https://review.openstack.org/162427 | 18:58 |
| dstanek | yay, cadf! go stevemar go | 18:59 |
| stevemar | dstanek, just cleaning up some doc :) | 19:00 |
| stevemar | dstanek, i realized that some parts are really thorough, and some are one liners... | 19:00 |
| openstackgerrit | Steve Martinelli proposed openstack/pycadf: Remove empty _templates folder https://review.openstack.org/162428 | 19:01 |
| *** henrynash has quit IRC | 19:14 | |
| *** topol has quit IRC | 19:17 | |
| openstackgerrit | Steve Martinelli proposed openstack/pycadf: Add a section for audit maps https://review.openstack.org/162429 | 19:20 |
| *** dimsum__ has joined #openstack-keystone | 19:22 | |
| openstackgerrit | Steve Martinelli proposed openstack/pycadf: Fix formatting error for geolocation note https://review.openstack.org/162430 | 19:25 |
| stevemar | dstanek, there we go, all done | 19:26 |
| stevemar | now to fix the 8 bugs on my plate | 19:26 |
| openstackgerrit | Steve Martinelli proposed openstack/pycadf: add a new set of release notes https://review.openstack.org/162427 | 19:27 |
| *** dimsum__ has quit IRC | 19:27 | |
| openstackgerrit | Steve Martinelli proposed openstack/pycadf: Remove empty _templates folder https://review.openstack.org/162428 | 19:28 |
| openstackgerrit | Steve Martinelli proposed openstack/pycadf: Fix formatting error for geolocation note https://review.openstack.org/162430 | 19:28 |
| openstackgerrit | Steve Martinelli proposed openstack/pycadf: Add a section for audit maps https://review.openstack.org/162429 | 19:28 |
| *** dimsum__ has joined #openstack-keystone | 19:39 | |
| *** dimsum__ has quit IRC | 19:44 | |
| *** spandhe has joined #openstack-keystone | 19:46 | |
| *** markvoelker has joined #openstack-keystone | 19:47 | |
| *** markvoelker has quit IRC | 19:53 | |
| *** stevemar has quit IRC | 19:53 | |
| *** dimsum__ has joined #openstack-keystone | 19:59 | |
| openstackgerrit | Merged openstack/pycadf: Updated from global requirements https://review.openstack.org/162251 | 20:14 |
| *** mattfarina has joined #openstack-keystone | 20:30 | |
| dstanek | stevemar: nice, i'll take a look a little later | 20:30 |
| *** mattfarina has quit IRC | 20:30 | |
| *** markvoelker has joined #openstack-keystone | 20:49 | |
| *** iamjarvo has joined #openstack-keystone | 20:50 | |
| *** iamjarvo has quit IRC | 20:50 | |
| *** dimsum__ has quit IRC | 20:50 | |
| *** iamjarvo has joined #openstack-keystone | 20:50 | |
| *** markvoelker has quit IRC | 20:55 | |
| *** dimsum__ has joined #openstack-keystone | 20:58 | |
| *** dimsum__ has quit IRC | 21:02 | |
| *** dimsum__ has joined #openstack-keystone | 21:10 | |
| *** henrynash has joined #openstack-keystone | 21:15 | |
| *** ChanServ sets mode: +v henrynash | 21:15 | |
| *** stevemar has joined #openstack-keystone | 21:19 | |
| *** ChanServ sets mode: +v stevemar | 21:19 | |
| *** spandhe has quit IRC | 21:19 | |
| *** sigmavirus24 is now known as sigmavirus24_awa | 21:44 | |
| dstanek | tokens are killing me | 21:50 |
| *** markvoelker has joined #openstack-keystone | 21:51 | |
| *** stevemar has quit IRC | 21:55 | |
| *** markvoelker has quit IRC | 21:57 | |
| *** topol has joined #openstack-keystone | 22:05 | |
| *** ChanServ sets mode: +v topol | 22:05 | |
| *** samueldmq_ is now known as samueldmq_away | 22:10 | |
| *** iamjarvo has quit IRC | 22:12 | |
| *** dimsum__ has quit IRC | 22:24 | |
| *** iamjarvo has joined #openstack-keystone | 22:37 | |
| *** iamjarvo has quit IRC | 22:42 | |
| *** dimsum__ has joined #openstack-keystone | 22:43 | |
| *** markvoelker has joined #openstack-keystone | 22:53 | |
| *** dimsum__ has quit IRC | 22:56 | |
| *** markvoelker has quit IRC | 22:57 | |
| *** dimsum__ has joined #openstack-keystone | 23:01 | |
| *** henrynash has quit IRC | 23:25 | |
| *** chlong has joined #openstack-keystone | 23:32 | |
| *** topol has quit IRC | 23:46 | |
| *** lhcheng has joined #openstack-keystone | 23:53 | |
| *** markvoelker has joined #openstack-keystone | 23:54 | |
| *** markvoelker has quit IRC | 23:58 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!