Friday, 2015-04-10

bknudsonkeystonemiddleware is still not happy00:04
bknudsonpkg_resources.ContextualVersionConflict: (keystonemiddleware 1.4.0 (/opt/stack/new/keystonemiddleware), Requirement.parse('keystonemiddleware<1.4.0,>=1.0.0'), set(['ceilometer']))00:06
*** edmondsw has quit IRC00:08
openstackgerritEric Brown proposed openstack/keystone: Move httpd under keystone root folder  https://review.openstack.org/17224500:13
*** g2` has quit IRC00:21
*** zzzeek has quit IRC00:23
*** _cjones_ has quit IRC00:23
*** g2` has joined #openstack-keystone00:25
*** raildo has quit IRC00:26
*** jamielennox|away is now known as jamielennox00:28
*** _cjones_ has joined #openstack-keystone00:31
jamielennoxmorganfainberg: that's fine - i don't mind00:31
bknudsonjamielennox: http://logs.openstack.org/20/172220/1/check/gate-python-keystoneclient-python26/e009e40/console.html#_2015-04-10_00_02_03_505 -- any idea?00:32
jamielennoxbknudson: whoa, i haven't seen that00:33
jamielennoxbknudson: that's a unit test thing - so requests mock?00:34
bknudsonI'm not seeing a new requests released.00:34
bknudsonjamielennox: here's the change: https://review.openstack.org/#/c/172220/00:34
jamielennoxno new requests version...00:34
bknudsonfailed pretty hard.00:34
jamielennoxthat's interesting - it's capping requests but that should be more reliable - will see if i can replicate00:36
*** alex_xu has quit IRC00:42
*** alex_xu has joined #openstack-keystone00:45
*** tqtran has quit IRC00:50
bknudsonstable/juno keystoneclient worked fine for me.00:52
jamielennoxbknudson: i pip installed it into a new venv and it worked fine, ran with tox and got the failure00:54
bknudsonI've got requests==2.6.0 whereas the job had requests==2.2.100:54
bknudsonoh, that job is capping requests at 2.2.100:54
bknudsony, requests==2.2.1 fails for me.00:55
bknudsonwonder where they got 2.2.1 from?00:55
bknudsonrequests>=2.1.0,!=2.4.0,<=2.2.100:56
bknudsonreally don't have to worry about !=2.4.0 there!00:56
bknudsonmaybe it's just 2.2.1 was broken.00:59
jamielennoxthe diff between installing via pip and installing via tox is ridiculous01:01
jamielennoxpip is dumb01:01
bknudsonjamielennox: I tried .tox/py27/bin/pip install -U "requests==2.3.0"01:03
bknudsonand that passed for me.01:03
bknudsonmaybe change g-r to !=2.2.1,<=2.3.001:04
bknudsonrequests>=2.1.0,!=2.2.1,<=2.3.001:04
jamielennoxwtf, it's jar the module is a list ..01:05
*** alexsyip has quit IRC01:06
jamielennoxno, my bad01:06
*** _cjones_ has quit IRC01:07
bknudsonjamielennox: https://review.openstack.org/#/c/172252/01:12
jamielennoxbknudson: i don't know01:13
bknudsonI don't either.01:13
jamielennoxhttps://github.com/openstack/python-keystoneclient/blob/master/keystoneclient/tests/unit/v3/test_auth_saml2.py#L62101:13
bknudsonthat's current...01:14
openstackgerritMerged openstack/keystone-specs: Move reseller spec for Liberty release  https://review.openstack.org/17092601:14
jamielennoxthat's the first time i've seen a need for requests-mock and cookies, but it looks like the test is doing the wrong thing01:14
jamielennoxbut why it works for others i have no idea01:14
bknudsonwhat the?01:14
jamielennox[object()] - i don't even know what that's supposed to mean01:15
bknudsonjamielennox: that's on master...01:16
bknudsonbut this test is supposedly running on stable/juno?01:16
jamielennoxsure, but i found that when git review -d the patch in question01:16
jamielennoxthat should set up the branch correctly01:17
bknudsonoh, it just moved.01:17
jamielennoxhttps://github.com/openstack/python-keystoneclient/blob/stable/juno/keystoneclient/tests/v3/test_auth_saml2.py#L62001:18
bknudsonjamielennox: that's weird.01:19
bknudsonI mean self.session.session.cookies = [object()] is weird.01:20
jamielennoxright - i don't even know what that is supposed to mean, why would you need that01:21
bknudsonrequests==2.1.0 doesn't work either.01:21
jamielennoxi don't know if it's really requets's fault01:23
bknudsonjamielennox: fix the test instead?01:23
bknudsonthink you know how to fix it?01:24
jamielennoxbknudson: no idea01:24
*** lhcheng has quit IRC01:26
bknudsonthis code does self.session.session.cookies = [] all over the place.01:27
jamielennoxi think that's the bad assumption01:28
jamielennoxbknudson: so session.cookies is not a list01:29
bknudsonin any release?01:29
jamielennoxthere's a function there that does cookiejar_from_dict01:29
bknudsonI wonder how it works with newer requests?01:29
* bknudson starts pdb01:29
jamielennoxand returns what is a cookiejar object01:29
* bknudson is getting hungry01:29
ayounghttp://www.kuro5hin.org/story/2002/9/15/01845/117901:31
jamielennoxi've no idea how this ever worked01:31
ayoung"Hello and welcome to Monsterpiece Theatre. I Alistair Cookie. As you know, many site use HTTP Cookie for keep track of browser session. Today we are seeing how HTTP Cookie work. "01:31
bknudsonI tried changing = [] to .clear() and still fails.01:31
ayoung"Here is simple code for handling cookie with simple CGI. CGI is written in C. Because C is for cookie! That good enough for me"01:31
*** samueldmq has joined #openstack-keystone01:36
bknudsonjamielennox: maybe the comment is saying that requests_mock doesn't issue cookies properly.01:37
jamielennoxbknudson: requests-mock doesn't do anything about cookies01:37
jamielennoxpositive or negative01:37
jamielennoxi forget exactly but couldn't we replicate it by setting headers?01:38
bknudsoncookies are passed around in headers.01:38
bknudsonthe newer version of requests must allow assignment on cookies.01:39
bknudsonwhereas the older version just reassigned.01:39
jamielennoxwell it's about the mock return, so it should be possible to just return it as a header01:40
bknudsonoh, no that didn't work either... must have been some other behavior change.01:40
jamielennoxi had to consult wikipedia for remembering how to do cookies01:41
jamielennoxbut if we just return a "Set-Cookie: abc=xyz" header it should work just fine01:41
bknudsonself.session.session.cookies = mock.MagicMock() seemed to work01:42
jamielennoxthat's a little bit scary,01:42
jamielennoxeverything you do with a magicmock returns a true01:43
bknudsonjamielennox: https://review.openstack.org/#/c/172256/01:46
jamielennoxman cookiejar sucks01:47
*** iamjarvo has joined #openstack-keystone01:49
*** ashleighfarnham has joined #openstack-keystone01:53
*** erkules_ has joined #openstack-keystone01:55
*** erkules has quit IRC01:57
jamielennoxbknudson: i'd like to see what marekd wants to do there - i can't actually tell what the point is there but i'd prefer to actually set a cookie if we know what it will be01:59
*** dims_ has quit IRC02:07
*** browne has quit IRC02:12
*** samueldmq has quit IRC02:14
bknudsonjamielennox: it would be best to have a real fix in master.02:21
*** topol has joined #openstack-keystone02:22
*** ChanServ sets mode: +v topol02:22
*** zzzeek has joined #openstack-keystone02:24
*** harlowja is now known as harlowja_away02:26
*** sdake has joined #openstack-keystone02:26
*** ashleighfarnham has quit IRC02:38
*** browne has joined #openstack-keystone02:44
*** ashleighfarnham has joined #openstack-keystone02:48
*** ozialien has joined #openstack-keystone02:50
*** sdake_ has joined #openstack-keystone02:54
*** sdake has quit IRC02:57
*** zzzeek has quit IRC03:03
*** richm has quit IRC03:06
*** trey has quit IRC03:06
*** dims_ has joined #openstack-keystone03:08
*** trey has joined #openstack-keystone03:10
*** dims_ has quit IRC03:13
*** zzzeek has joined #openstack-keystone03:18
*** zzzeek has quit IRC03:18
*** gyee has quit IRC03:19
*** ozialien has quit IRC03:26
*** ozialien has joined #openstack-keystone03:26
*** ozialien has quit IRC03:26
*** markvoelker has quit IRC03:35
*** ashleighfarnham has quit IRC03:35
*** ayoung has quit IRC03:57
*** markvoelker has joined #openstack-keystone04:06
*** stevemar has joined #openstack-keystone04:07
*** ChanServ sets mode: +v stevemar04:07
*** alexsyip has joined #openstack-keystone04:07
*** iamjarvo has quit IRC04:12
*** markvoelker has quit IRC04:12
*** jbonjean has quit IRC04:14
*** jbonjean has joined #openstack-keystone04:23
*** sdake_ has quit IRC04:27
*** ajayaa has joined #openstack-keystone04:44
*** sluo_wfh has joined #openstack-keystone04:46
*** sluo_wfh has quit IRC04:46
*** lhcheng has joined #openstack-keystone04:46
*** ChanServ sets mode: +v lhcheng04:46
*** sdake has joined #openstack-keystone05:14
*** sdake has quit IRC05:14
*** sdake has joined #openstack-keystone05:14
*** sdake_ has joined #openstack-keystone05:25
*** sdake has quit IRC05:29
*** iamjarvo_ has joined #openstack-keystone05:31
*** stevemar has quit IRC05:32
*** afazekas has joined #openstack-keystone05:36
*** iamjarvo_ has quit IRC05:42
*** sdake_ has quit IRC05:55
*** lhcheng has quit IRC05:55
*** dims_ has joined #openstack-keystone06:00
*** topol has quit IRC06:06
bigjoolsdoes anyone have kerberos auth working on Ubuntu?06:08
*** dims_ has quit IRC06:08
*** markvoelker has joined #openstack-keystone06:09
*** markvoelker has quit IRC06:14
*** alexsyip has quit IRC06:15
*** lhcheng has joined #openstack-keystone06:24
*** ChanServ sets mode: +v lhcheng06:24
*** ishant has joined #openstack-keystone06:25
*** _cjones_ has joined #openstack-keystone06:26
*** lhcheng has quit IRC06:28
*** _cjones_ has quit IRC06:29
*** ishant has quit IRC06:34
*** lhcheng has joined #openstack-keystone06:36
*** ChanServ sets mode: +v lhcheng06:36
*** tobberydberg has joined #openstack-keystone06:38
*** ishant has joined #openstack-keystone06:40
*** ishant has quit IRC06:44
*** ishant has joined #openstack-keystone06:44
*** lhcheng has quit IRC06:45
*** iamjarvo has joined #openstack-keystone07:06
ekarlso,07:07
*** markvoelker has joined #openstack-keystone07:10
*** markvoelker has quit IRC07:15
*** iamjarvo has quit IRC07:16
*** jamielennox is now known as jamielennox|away07:20
*** bdossant has joined #openstack-keystone07:31
*** davechen has joined #openstack-keystone07:43
*** browne has quit IRC07:50
openstackgerritDave Chen proposed openstack/keystone: Minor change in the docstring  https://review.openstack.org/17232908:05
*** jistr has joined #openstack-keystone08:11
*** markvoelker has joined #openstack-keystone08:11
*** markvoelker has quit IRC08:16
*** krykowski has joined #openstack-keystone08:22
*** zz_avozza is now known as avozza08:55
openstackgerritDavid Charles Kennedy proposed openstack/keystone: Move endpoint catalog filtering to default driver  https://review.openstack.org/16767509:00
*** jaosorior has joined #openstack-keystone09:03
*** markvoelker has joined #openstack-keystone09:12
*** markvoelker has quit IRC09:17
openstackgerritCyril Roelandt proposed openstack/python-keystoneclient: Print an error message when no tenant is specified  https://review.openstack.org/14830509:25
*** _cjones_ has joined #openstack-keystone09:30
*** _cjones_ has quit IRC09:34
*** dims_ has joined #openstack-keystone09:43
*** davechen has left #openstack-keystone09:50
*** dims_ has quit IRC09:56
*** dims_ has joined #openstack-keystone09:57
*** dims_ has quit IRC10:07
*** avozza is now known as zz_avozza10:08
*** iamjarvo has joined #openstack-keystone10:12
*** markvoelker has joined #openstack-keystone10:13
*** erkules_ is now known as erkules10:14
*** erkules has joined #openstack-keystone10:14
*** markvoelker has quit IRC10:17
*** dims_ has joined #openstack-keystone10:19
*** iamjarvo has quit IRC10:22
*** amakarov_away is now known as amakarov10:30
*** mtreinish has quit IRC10:40
*** mtreinish has joined #openstack-keystone10:45
*** iamjarvo has joined #openstack-keystone10:49
*** ozialien has joined #openstack-keystone10:52
*** ozialien has quit IRC10:54
*** iamjarvo has quit IRC10:59
*** viktors|afk is now known as viktors11:11
*** markvoelker has joined #openstack-keystone11:13
*** iamjarvo has joined #openstack-keystone11:17
*** markvoelker has quit IRC11:18
*** iamjarvo has quit IRC11:27
*** iamjarvo has joined #openstack-keystone11:34
*** fifieldt has quit IRC11:42
*** iamjarvo has quit IRC11:44
*** aix has quit IRC11:48
*** browne has joined #openstack-keystone11:52
*** iamjarvo has joined #openstack-keystone11:55
*** iamjarvo has quit IRC11:55
*** iamjarvo has joined #openstack-keystone11:56
*** dims_ has quit IRC12:04
*** dims_ has joined #openstack-keystone12:04
*** iamjarvo has quit IRC12:04
*** dims_ has quit IRC12:05
*** markvoelker has joined #openstack-keystone12:11
*** aix has joined #openstack-keystone12:13
*** raildo has joined #openstack-keystone12:16
*** krtaylor has quit IRC12:23
*** ishant has quit IRC12:26
*** sdake has joined #openstack-keystone12:31
*** sdake_ has joined #openstack-keystone12:32
*** bknudson has quit IRC12:33
*** sdake has quit IRC12:36
*** gordc has joined #openstack-keystone12:37
*** markvoelker has quit IRC12:43
*** markvoelker has joined #openstack-keystone12:44
*** ajayaa has quit IRC12:44
*** sdake_ has quit IRC12:47
*** krtaylor has joined #openstack-keystone12:52
*** bknudson has joined #openstack-keystone12:56
*** ChanServ sets mode: +v bknudson12:56
*** ozialien has joined #openstack-keystone13:00
*** zz_avozza is now known as avozza13:04
*** browne has quit IRC13:07
*** browne has joined #openstack-keystone13:09
*** ozialien has quit IRC13:12
*** richm has joined #openstack-keystone13:14
*** edmondsw has joined #openstack-keystone13:18
*** avozza is now known as zz_avozza13:25
*** iamjarvo_ has joined #openstack-keystone13:27
*** iamjarvo_ has quit IRC13:27
*** iamjarvo_ has joined #openstack-keystone13:27
*** iamjarvo_ has quit IRC13:32
*** csoukup has joined #openstack-keystone13:37
*** ajayaa has joined #openstack-keystone13:42
*** jistr has quit IRC13:49
openstackgerritOpenStack Proposal Bot proposed openstack/keystone: Updated from global requirements  https://review.openstack.org/17213913:50
*** jistr has joined #openstack-keystone13:56
*** ayoung has joined #openstack-keystone13:56
*** ChanServ sets mode: +v ayoung13:56
*** iamjarvo has joined #openstack-keystone14:04
*** iamjarvo has quit IRC14:05
*** iamjarvo has joined #openstack-keystone14:05
*** iamjarvo has quit IRC14:05
*** iamjarvo has joined #openstack-keystone14:06
*** iamjarvo has quit IRC14:06
*** iamjarvo has joined #openstack-keystone14:07
*** iamjarvo has quit IRC14:07
*** iamjarvo has joined #openstack-keystone14:08
*** iamjarvo has quit IRC14:08
*** iamjarvo has joined #openstack-keystone14:09
*** iamjarvo has quit IRC14:09
*** iamjarvo has joined #openstack-keystone14:09
*** mattamizer has joined #openstack-keystone14:10
*** iamjarvo has quit IRC14:10
*** iamjarvo has joined #openstack-keystone14:11
openstackgerritRodrigo Duarte proposed openstack/keystone-specs: API changes for Reseller  https://review.openstack.org/15300714:11
*** iamjarvo has quit IRC14:11
*** iamjarvo has joined #openstack-keystone14:12
*** iamjarvo has quit IRC14:12
openstackgerritRodrigo Duarte proposed openstack/keystone-specs: API changes for Reseller  https://review.openstack.org/15300714:12
*** iamjarvo has joined #openstack-keystone14:12
*** iamjarvo has quit IRC14:13
*** mestery is now known as mestery_afk14:13
*** iamjarvo has joined #openstack-keystone14:13
*** mattamizer has quit IRC14:16
*** carlosmarin has joined #openstack-keystone14:24
*** samueldmq has joined #openstack-keystone14:24
*** jorge_munoz has joined #openstack-keystone14:29
htrutabknudson: could you take a look at https://review.openstack.org/#/c/116081/ ?14:37
bknudsonhtruta: it's on my list.14:37
htrutabknudson: ok. thanks14:37
*** iamjarvo has quit IRC14:40
*** dims_ has joined #openstack-keystone14:41
*** viktors has quit IRC14:45
lbragstaddolphm: I signed us up for the brown bag in vancouver http://openstack.prov12n.com/vbrownbag-techtalks-in-vancouver/?awesm=awe.sm_p8ZHg I set our availability for Monday, since I'm not sure how busy T-Th will be with design sessions.14:46
*** sdake_ has joined #openstack-keystone14:49
*** dims_ is now known as dimsum__14:57
*** sdake has joined #openstack-keystone14:58
*** zzzeek has joined #openstack-keystone15:00
*** krykowski has quit IRC15:01
*** sdake_ has quit IRC15:02
*** mestery_afk is now known as mestery15:06
*** iamjarvo has joined #openstack-keystone15:08
*** rwsu has quit IRC15:09
*** topol has joined #openstack-keystone15:11
*** ChanServ sets mode: +v topol15:11
*** samueldmq has quit IRC15:20
*** iamjarvo has quit IRC15:22
*** mattamizer has joined #openstack-keystone15:23
*** adrian_otto has joined #openstack-keystone15:25
*** adrian_otto has left #openstack-keystone15:26
*** krtaylor has quit IRC15:27
*** obedmr has joined #openstack-keystone15:27
*** krtaylor has joined #openstack-keystone15:28
*** thedodd has joined #openstack-keystone15:28
*** lhcheng has joined #openstack-keystone15:39
*** ChanServ sets mode: +v lhcheng15:39
*** afazekas has quit IRC15:40
*** ozialien has joined #openstack-keystone15:40
*** iamjarvo has joined #openstack-keystone15:42
-openstackstatus- NOTICE: gerrit has been restarted to address a hung event stream. change events between 15:00 and 15:43 utc which were lost will need to be rechecked or have approval workflow votes reapplied for zuul to act on them15:44
*** bdossant has quit IRC15:47
*** tobberydberg has quit IRC15:47
*** ozialien has quit IRC15:47
*** gyee has joined #openstack-keystone15:48
*** ChanServ sets mode: +v gyee15:48
*** rwsu has joined #openstack-keystone15:51
*** browne has quit IRC15:55
*** _cjones_ has joined #openstack-keystone15:59
lbragstadmorganfainberg: this one just came through, thoughts on status? https://bugs.launchpad.net/keystone/+bug/144266316:01
openstackLaunchpad bug 1442663 in Keystone "Kilo domain config rest feature does not uniformly reload domain configurations" [Medium,New]16:01
*** dimsum__ has quit IRC16:05
morganfainberglbragstad, i think that is expected16:05
lbragstadmorganfainberg: ok, just curious if that was something we should in this release or not16:06
lbragstadbecause of the u-x aspect16:06
morganfainbergcan't be fixed in kilo afaik16:06
lbragstadmorganfainberg: is that behavior documented?16:06
*** jistr has quit IRC16:06
morganfainberglets ping henrynash16:06
lbragstadhen<tab><tab><tab><tab>...16:07
*** dims_ has joined #openstack-keystone16:07
morganfainbergbut i think it is documented16:07
lbragstadok16:07
*** dims_ is now known as dimsum___16:08
*** dimsum___ is now known as dimsum_16:08
*** iamjarvo has quit IRC16:12
*** ashleighfarnham has joined #openstack-keystone16:12
raildomorganfainberg, morning :)16:15
raildomorganfainberg, reseller spec is in liberty, later we can talk about the topic branch16:16
*** sdake_ has joined #openstack-keystone16:16
*** zz_avozza is now known as avozza16:17
*** sdake has quit IRC16:20
amakarovHi all! I have one frightened customer here: Aren't we going to deprecate domains in the near future?16:22
amakarovI mean I hope we are not :)16:23
raildoamakarov, We are not deprecating domain, we are just changing how  we storage, and providing a new way to create a project and a domain in a single entity , but we don't intend remove domains.16:25
amakarovraildo, thank you for clarification!16:27
raildoamakarov, np :)16:27
*** lsmola_ has quit IRC16:28
lhchengraildo: if we're still having the same api to support domains, what's the value of moving it to single entity in the backend?16:28
amakarovraildo, btw will you optimize tree storage somehow? I've seen a comment suggesting nested set already :) (my voice is still for materialized path)16:29
amakarovlhcheng, afaik it's conceptual: you can 'sell' a project which can be easily converted to a domain with subprojects, namespace etc.16:30
*** ihrachyshka has joined #openstack-keystone16:31
ihrachyshkabknudson, hey!16:31
ihrachyshkabknudson, I have a question on keystone context16:31
raildolhcheng, first of all, domain will be a feature of projects, so we can control this better as a single entity,16:31
ihrachyshkabknudson, in devstack, we set logging_context_format_string for keystone, but afaik it relies on oslo.context being used, and I don't see that keystone uses any oslo context module. I saw you removed the file from the tree. Is logging_context_format_string setting even needed in devstack now?16:32
raildolhcheng, the other useful feature is provide a dual token(a token with project and domain scope) for a project with is_domain feature, so if I have just one entity, I can control better the assignments and do this easier.16:33
bknudsonihrachyshka: I don't think keystone uses logging_context_format_string.16:33
ihrachyshkabknudson, neither me, but since I'm far from keystone, I want to check first16:33
ihrachyshka(with keystone devs)16:33
raildolhcheng, the other argument is make the data consistency, If I have two tables, when I create/update/delete a project with is_domain I have to do this in both tables.16:34
lhchengraildo: tbh, I still feel like we could achieve this by having domain hierarchy. Mixing two entitys into single entity scares me a bit.16:35
*** tqtran has joined #openstack-keystone16:36
raildolhcheng, I agree its more simple to implement just a domain hierarchy, when we talk that a domain is a feature of project, its more normal see this in one project hierarchy with some projects with is_domain in the top16:37
lhchengraildo: we'll also add complexity to the code16:37
lhchengit is already complex enough with the handling of the parent_id (hierarchy)16:38
lhchengraildo: heh I guess depends on the perspective, for me the normal thing is domain hierarchy. :) Since that how we implemented it before for reseller.16:39
raildolhcheng, In this first moment this can be true but I believe that in the future, its more complex keep this two tables working together...16:40
raildoas you said, depends on the perspective... for me it's more simple control just one hierarchy16:41
*** browne has joined #openstack-keystone16:42
lhchengraildo: could be..  many people have already looked at this, if the community thinks this is the right way, I support it.  :)16:42
raildolhcheng, but I'm always open to discuss this , I don't want to implement just what I want, but what we think that is better for Keystone(and for OpenStack as well) :)16:45
raildolhcheng, we can do this in a lot of ways, sometimes it's little complicate to find the best way for everyone16:45
*** iamjarvo has joined #openstack-keystone16:46
*** iamjarvo has quit IRC16:46
*** iamjarvo has joined #openstack-keystone16:46
*** iamjarvo has quit IRC16:47
*** iamjarvo has joined #openstack-keystone16:47
lhchengraildo: well, you can't implement just what you want since it is opensource :P what I mean is this approach is the result of the consensus after being reviewed. Maybe there are some cases when this would be better.16:51
raildolhcheng, ++16:51
*** lhcheng_ has joined #openstack-keystone16:55
*** lhcheng has quit IRC16:57
ayoungmorganfainberg, so...I think I like where K2K is taking us.16:59
*** packet has joined #openstack-keystone17:00
openstackgerritDavid J Hu proposed openstack/python-keystoneclient: Access Info Formatter  https://review.openstack.org/17251417:01
openstackgerritAlexander Makarov proposed openstack/keystonemiddleware: Fix s3_token middleware parsing insecure option  https://review.openstack.org/17251617:15
amakarovayoung, hi! are you here?17:16
*** lhcheng_ is now known as lhcheng17:23
*** ChanServ sets mode: +v lhcheng17:23
ayoungamakarov, I'm always here  Except when I am not.17:26
amakarovayoung, I have a question about patch ^^17:27
amakarovI've abandoned it, need to delete17:27
ayoungamakarov, the s3 patch you just proposed?17:27
amakarov++17:27
ayoungamakarov, leave it as abandonded is fine17:27
ayoungnothing gets forgotten17:27
amakarovayoung, it's exposed17:28
openstackgerritMerged openstack/keystone: Tests use common base class  https://review.openstack.org/16785017:31
*** ayoung has quit IRC17:32
*** ayoung has joined #openstack-keystone17:36
*** ChanServ sets mode: +v ayoung17:36
*** jaosorior has quit IRC17:42
*** mestery has quit IRC17:43
*** mestery has joined #openstack-keystone17:43
*** harlowja_away is now known as harlowja17:44
*** ozialien has joined #openstack-keystone17:46
*** boris-42 has joined #openstack-keystone17:53
*** ihrachyshka has quit IRC17:57
*** ashleighfarnham has quit IRC17:58
*** lhcheng has quit IRC18:00
*** lhcheng has joined #openstack-keystone18:00
*** ChanServ sets mode: +v lhcheng18:00
*** lhcheng has quit IRC18:01
*** lhcheng has joined #openstack-keystone18:02
*** ChanServ sets mode: +v lhcheng18:02
bknudsoncongrats to morganfainberg btw.18:09
morganfainbergOh god did I end up PTL again? :P. ;)18:09
bknudson100% of the vote.18:10
morganfainbergCrap, need to campaign harder for the other guy next time.18:10
morganfainberg;)18:10
morganfainbergSo, FYI I'm going to be mostly afk today. We won't be doing a ksm or ksc cut before stable branch is cut18:14
*** ozialien has quit IRC18:14
bknudsonsounded like ttx is blocking releases now18:14
morganfainbergSo ksm and ksc are pretty locked in for kilo. This is to try and not make lives worse. We will need to evaluate bug fixes for backport18:14
morganfainbergI could have pushed but reality is it is a bigger risk than needed.18:15
morganfainbergBreaking the gate / making everyone's lives miserable is a bigger problem18:16
ayoungmorganfainberg, you need to take the  Sherman pledge now.18:16
morganfainbergAnd neither ksc nor ksm are wildly out of date.18:16
morganfainbergSince we have been releasing consistently.18:16
bknudsonthe list of changes in neutronclient was scary...18:16
bknudsonthey must not have released at all.18:16
morganfainbergYeah.18:16
morganfainbergSo we will keep with the regular cadence in liberty so it shouldn't ever leave us more than minor bit behind when stable branches are cut18:17
ayoungmorganfainberg, ++18:18
bknudsonmight want to put a standing item on the meeting agenda for releasing.18:18
morganfainbergSounds good.18:18
bknudsonif there's anything useful18:18
bknudsonseems like client is going to become more active18:19
morganfainbergAlso this cycle I am going to be delegating more stuff to more people where I can. I figure I've been reasonably good but need to be better.18:19
ayoungmorganfainberg, we could do what the Navy does.  If you are going to be the commander of a ship, you posting prior to that is as the Executive Officer (Second in command) so that when we have eleections, we don't elelct the current PTL, but rather the Next one.18:19
ayoungmorganfainberg, also, if we split the repos more fine grained, we could have a separate repo commander for each;  Id, assignment, client, middleware, and whatever else we come up with18:20
morganfainbergayoung: we can do that mostly, but we can't prevent folks from running and putting a monkey wrench in those works.18:20
ayoungmorganfainberg, if that happens, it probably means the XO person was a F)*(&^ up anyway18:21
morganfainbergayoung: that is actually a plan, more people empowered to really manage the code base.18:21
morganfainbergAnyway. I need to check out for today and the weekend.18:22
ayoungmorganfainberg, sounds good.  BTW...I think we can use the K2K approach to finally get a plan to solve the delegation problem18:22
morganfainbergI have a presentation to build and need to be unplugged a bit.18:22
ayoungmorganfainberg, here's a thought for you, you can mull over...18:22
morganfainbergayoung: cool. And saw your msg about k2k earlier.18:23
ayoungwhen nova goes to talk to glance,  it looks at the token it has, and says "will this let me talk to glance" and, if not, goes to keystone to get a new token18:23
lbragstadbknudson: I'm addressing comments on https://review.openstack.org/#/c/157890/ but it will require changes to keystone.sample.conf, do you want me to generate a new config as a separate patch?18:23
ayoungmorganfainberg, its a degenerate case of the K2K18:23
*** ozialien has joined #openstack-keystone18:23
ayoungwhenever we jump a boundary, go back to Keystone.18:23
ayoungif necessary18:23
bknudsonlbragstad: for some reason we've switched to not regenerating the sample config in the patch.18:23
bknudsonI don't care one way or the other.18:24
lbragstadbknudson: ok, that's fine. I'll stick with the pattern and propose a separate patch for it.18:24
*** aix has quit IRC18:24
*** samueldmq has joined #openstack-keystone18:24
bknudsonlbragstad: or you can skip generating the config and do that when the change merges.18:25
ayoungmorganfainberg, and, since we are talking "smart clients" when osc goes to run "list vms"  for a specific nova, it can know to request a token with only that nova endpoint in the catalog18:25
lbragstadbknudson: ok18:25
ayoung getting endpoint binding of tokens in place seems likely now18:25
ayoungwe make it so a user can request a token scoped to a specific endpoint...18:25
ayoungmorganfainberg, you get the general gist18:25
openstackgerritLance Bragstad proposed openstack/keystone: Use choices in config.py  https://review.openstack.org/15789018:26
openstackgerritLance Bragstad proposed openstack/keystone: Update keystone.sample.conf  https://review.openstack.org/17253218:26
ayoungK2K then becomes a "scale up" solution for the bigger jumps18:26
ayoungmorganfainberg, so the MOC case, where they want to have Nova owned by one org and Cinder owned by another would be K2K18:27
*** ozialien has quit IRC18:27
openstackgerritLance Bragstad proposed openstack/keystone: Update keystone.sample.conf  https://review.openstack.org/17253218:27
openstackgerritLance Bragstad proposed openstack/keystone: Use choices in config.py  https://review.openstack.org/15789018:27
*** iamjarvo has quit IRC18:32
*** amakarov is now known as amakarov_away18:37
morganfainbergayoung: sounds about right.18:40
ayoungmorganfainberg, glad to hear it.  I 'll write it up more thoroughly for Summit discussion18:41
morganfainbergayoung: ok I'm checking out for the weekend.18:41
*** mattamizer has quit IRC18:41
* morganfainberg goes to deal with doctors and the like.18:41
openstackgerritRaildo Mascena de Sousa Filho proposed openstack/keystone: Add domain_id checking in create_project  https://review.openstack.org/15994418:42
*** alexsyip has joined #openstack-keystone18:48
*** iamjarvo has joined #openstack-keystone18:48
*** iamjarvo has quit IRC18:49
*** tobberydberg has joined #openstack-keystone18:49
*** iamjarvo has joined #openstack-keystone18:49
openstackgerritRodrigo Duarte proposed openstack/keystone: Fix signed_saml2_assertion.xml tests fixture  https://review.openstack.org/17253518:51
openstackgerritRodrigo Duarte proposed openstack/keystone: Add openstack_project_domain to assertion  https://review.openstack.org/17253618:51
*** tobberydberg has quit IRC18:53
openstackgerritRaildo Mascena de Sousa Filho proposed openstack/keystone: Add is_domain field in Project Table  https://review.openstack.org/15742718:56
*** mattfarina has joined #openstack-keystone19:07
ayoungjdennis, I am trying to build my own RPMS for Keystone.  The workflow on the RDO site assumes I am working with an upstream git repo, but I want to build out of my own.  Is there a tool that helps when packaging RPMs?   https://www.rdoproject.org/packaging/rdo-packaging.html19:31
*** samueldmq has quit IRC19:32
*** iamjarvo has quit IRC19:36
jdennisayoung: not that I'm aware of, what I do is build a tarball in my git repo (e.g. make dist or whatever is supported). Then using the existing spec file and substitute my tarball, adjusting the versions as appropriate19:38
ayoungjdennis, thanks.  It helps to have you confirm that19:38
ayoungjdennis, how about keeping all the files in the fedoro dist-git repo in sync with the rpm build dir?19:38
ayoungjdennis, or do you just copy them by hand?19:39
jdennisayoung: maybe there is a tool, if there is I'm not aware of it19:39
ayoungjdennis, thanks19:40
jdennisayoung: not exactly sure of your question, but specifically what I do is copy my handmade tarball over into a fedora git repo of the appropriate branch, locally edit the spec file,19:41
jdennisthen 'fedpkg srpm', then 'fedpkg scratch-build xxx.src.rpm' to build it, or 'fedpkg local', when I'm done playing around I do a 'git reset --hard' to set things back19:42
ayoungjdennis, I know you can run rpm -b -whatever  openstack-keystone.spec from the local dir.  There are a handful of other Sources that need to be put in, _topdir/SOURCES19:42
ayoungdoes fedpkg do all that?19:42
ayoungAh, that does a Koji build, doesn't it?19:44
jdennisayoung: you lost me, SOURCES aren't part of an rpm normally19:44
jdennisit's a fedpkg ism19:44
ayoungjdennis, I've been building RPMS using rpmbuild, which requires this rid layout: BUILD  BUILDROOT  RPMS  SOURCES  SPECS  SRPMS19:45
ayoungand then the tarball and the patches go in SOURCES19:45
ayoungplus any customer files we have in the RPM, which looks like a few19:45
ayoungdaemon_notify.sh    openstack-keystone.init       openstack-keystone-sample-data  openstack-keystone.spec    openstack-keystone.upstart keystone-dist.conf  openstack-keystone.logrotate  openstack-keystone.service      openstack-keystone.sysctl19:45
jdennisayoung: ok, now I'm with you, fedpkg srpm handles all that, it builds an srpm for you which you then build19:47
ayoungjdennis, ah...builds that locally?  Not via Koji?19:47
jdennisall this presumes there is an existing fedora package19:47
ayoungYes, existing package19:47
jdennisfedpkg can build locally (fedpkg local) or in koji, if you say 'fedpkg build' it builds rpms for release by the package maintainer, but if you don't want a released RPM19:49
jdennisthen do a scratch build, i.e. 'fedpkg scratch-build --srpm xxx.src.rpm' produced by a prior 'fedpkg srpm' command19:49
*** iamjarvo has joined #openstack-keystone19:50
*** iamjarvo has quit IRC19:50
openstackgerritRaildo Mascena de Sousa Filho proposed openstack/keystone: Add domain_id checking in create_project  https://review.openstack.org/15994419:51
openstackgerritRaildo Mascena de Sousa Filho proposed openstack/keystone: Add is_domain field in Project Table  https://review.openstack.org/15742719:51
*** iamjarvo has joined #openstack-keystone19:51
openstackgerritRodrigo Duarte proposed openstack/keystone: Add openstack_project_domain to assertion  https://review.openstack.org/17253619:52
*** gordc has quit IRC19:53
*** gordc has joined #openstack-keystone19:53
*** csoukup has quit IRC19:56
*** topol has quit IRC20:01
openstackgerrithenry-nash proposed openstack/python-keystoneclient: Support domain-specific configuration management  https://review.openstack.org/16808920:20
*** mattfarina has quit IRC20:21
*** mestery has quit IRC20:24
openstackgerritRodrigo Duarte proposed openstack/keystone: Add openstack_user_domain to assertion  https://review.openstack.org/17256220:24
openstackgerritRaildo Mascena de Sousa Filho proposed openstack/keystone: Honor domain operations in project table  https://review.openstack.org/14376320:31
openstackgerritRaildo Mascena de Sousa Filho proposed openstack/keystone: Remove domain table references  https://review.openstack.org/16593620:31
openstackgerritRaildo Mascena de Sousa Filho proposed openstack/keystone: Change project name constraint  https://review.openstack.org/15837220:31
openstackgerritRodrigo Duarte proposed openstack/keystone: Add openstack_user_domain to assertion  https://review.openstack.org/17256220:33
*** mestery has joined #openstack-keystone20:33
*** boris-42 has quit IRC20:38
mfischhey keystoners, is anyone around to discuss logging?20:41
mfischspecifically why important things like removing a user or tenant are logged at the same level as the load balancer check I have20:41
mfischwhich in turn means I raise the level so that I dont see the load balancer checks20:41
mfischI'm wondering if I can tweak some individual components so I get useful logging, like user added/deleted, but not when my LB check hits20:42
openstackgerritRaildo Mascena de Sousa Filho proposed openstack/keystone: Bye Bye Domain Table  https://review.openstack.org/16185420:42
openstackgerritRaildo Mascena de Sousa Filho proposed openstack/keystone: Restrict inherited role assignments to subdomains  https://review.openstack.org/16418020:43
openstackgerritRaildo Mascena de Sousa Filho proposed openstack/keystone: List projects filtering by is_domain flag  https://review.openstack.org/15839820:46
*** lhcheng has quit IRC20:53
*** lhcheng has joined #openstack-keystone20:54
*** ChanServ sets mode: +v lhcheng20:54
*** raildo has quit IRC21:03
*** mestery has quit IRC21:07
*** mestery has joined #openstack-keystone21:08
*** rdo has quit IRC21:09
*** rdo has joined #openstack-keystone21:11
*** tqtran is now known as tqtran_afk21:12
*** mestery_ has joined #openstack-keystone21:22
*** mestery has quit IRC21:25
*** mestery_ is now known as mestery21:26
*** iamjarvo has quit IRC21:30
*** adrian_otto has joined #openstack-keystone21:34
adrian_ottoHey keystone bretheren21:34
adrian_ottoI notices that our devstack centos7 gate is failing on what looks like an LDAPc dependency. Our best guess is that's related to keystone somehow, as Solum certainly does not use it. Soes keystone use this gate setup at all? http://logs.openstack.org/64/172564/1/check/gate-solum-devstack-dsvm-centos7/836ba74/logs/devstacklog.txt.gz#_2015-04-10_20_59_22_45021:36
bknudsonadrian_otto: keystone doesn't have any ldap in its requirements.txt -- http://git.openstack.org/cgit/openstack/keystone/tree/requirements.txt21:38
bknudsonit's in test-requirements.txt21:38
adrian_ottohttp://git.openstack.org/cgit/openstack/keystone/tree/test-requirements.txt#n1921:39
adrian_ottothat's the one that I thought might be the cause21:39
bknudsonI thought I'd find an install of an ldap-dev package in devstack but I don't see it -- http://git.openstack.org/cgit/openstack-dev/devstack/tree/lib/ldap21:41
*** stevemar has joined #openstack-keystone21:48
*** ChanServ sets mode: +v stevemar21:48
adrian_ottoI took a quick look at the devstack jobs that keystone patches run21:49
adrian_ottoand I don't see a centos7 one in there.21:49
*** gordc has quit IRC21:55
*** harlowja is now known as harlowja_away21:58
*** carlosmarin has quit IRC22:04
*** tqtran_afk is now known as tqtran22:06
*** stevemar has quit IRC22:07
SpamapSmorganfainberg: arg. Another annoying thing about using the decorator approach with dogpile.cache: No way to put logic in that says "don't cache this!"22:07
SpamapSmorganfainberg: I actually have to add _another_ decorator which would do that. :-P22:08
morganfainbergYes there is logic for that.22:09
*** tobberydberg has joined #openstack-keystone22:09
SpamapSmorganfainberg: is that already available?22:09
morganfainbergShould_cache_fn for the cache_on_arguments22:09
*** bknudson has quit IRC22:09
morganfainbergBasically should_cache is an fn that is passed the resulting value from the wrapped function. It returns true/false. If true, cache22:10
SpamapSgah right ok so a decorator in parameter disguise. ;)22:10
morganfainbergIt's part of the args you can pass to cache_on_arguments. Better than a spare decorator :P22:10
*** ajayaa has quit IRC22:10
SpamapSmorganfainberg: agree :)22:11
SpamapSmorganfainberg: though yet another piece of code that is 100% specific to my class, that must be defined outside my class. :-/22:14
*** thedodd has quit IRC22:15
morganfainbergYeah. =/22:16
SpamapSmorganfainberg: feels like impedance mismatch. I'm interested more now in your metaclass idea.22:17
SpamapSmorganfainberg: you know python. Why would this raise a NameError on import: http://paste.ubuntu.com/10795239/22:18
SpamapSnever mind22:18
SpamapS_ missing22:18
SpamapSmorganfainberg: stand down ;)22:18
* morganfainberg goes back to trying to ignore IRC today.22:19
*** harlowja_away is now known as harlowja22:21
*** lhcheng_ has joined #openstack-keystone22:31
*** lhcheng has quit IRC22:31
*** lhcheng_ has quit IRC22:32
*** lhcheng has joined #openstack-keystone22:32
*** ChanServ sets mode: +v lhcheng22:32
*** markvoelker has quit IRC22:40
*** tobberydberg has quit IRC22:55
*** EmilienM is now known as EmilienM|afk22:56
openstackgerritMerged openstack/keystone: Mark some strings for translation  https://review.openstack.org/16707222:58
*** obedmr has quit IRC23:03
*** avozza is now known as zz_avozza23:09
*** zz_avozza is now known as avozza23:10
*** gyee has quit IRC23:26
*** edmondsw has quit IRC23:28
*** avozza is now known as zz_avozza23:29
*** alexsyip has quit IRC23:30
*** markvoelker has joined #openstack-keystone23:39
*** zz_avozza is now known as avozza23:41
openstackgerritRodrigo Duarte proposed openstack/keystone: Fix signed_saml2_assertion.xml tests fixture  https://review.openstack.org/17253523:52
openstackgerritRodrigo Duarte proposed openstack/keystone: Add openstack_project_domain to assertion  https://review.openstack.org/17253623:52
openstackgerritRodrigo Duarte proposed openstack/keystone: Add openstack_user_domain to assertion  https://review.openstack.org/17256223:52

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!