Saturday, 2015-05-02

lhchengmorganfainberg: I'll follow-up with you on the driver interface on monday, got stuck on meeting and the horizon session size cleanup00:20
*** atiwari has quit IRC00:20
*** samueldmq has joined #openstack-keystone00:31
morganfainberglhcheng: no worries00:33
*** sigmavirus24_awa is now known as sigmavirus2400:34
lhchengmorganfainberg: btw, I got the horizon session size down by 75% :)00:34
morganfainbergnice00:34
lhcheng34% is due to bad code that slipped in, and 41% is related to storing too much keystone info in the session00:35
morganfainbergfun00:35
samueldmqlhcheng, great work00:39
samueldmqlhcheng, does this make horizon work with v3 with signed cookies ?00:40
lhchengsamueldmq: yes, it will :)00:40
samueldmqlhcheng, at least for devstack, small deployments00:40
samueldmqlhcheng, oh, great !00:40
lhchengwith plenty of space available :)00:40
samueldmqlhcheng,do you have a patch up for this ?00:41
lhchengsamueldmq: still WIP: https://review.openstack.org/#/c/179419/ but that should reduce the size 31%00:42
samueldmqlhcheng, nice thanks; will take a look00:43
samueldmqmorganfainberg, keystone,nova,cinder,glance,swift,neutron00:43
lhchengsamueldmq: there are some cleanup needed in horizon side too00:43
samueldmqmorganfainberg, any other to have a 'core' functional devstack with v3 ?00:43
morganfainbergsamueldmq: look at what is run in http://logs.openstack.org/22/173122/2/check/check-tempest-dsvm-neutron-full/bf02243/00:44
morganfainbergthat is what i'm targeting00:44
morganfainbergbasically00:44
samueldmqmorganfainberg, k looking00:47
samueldmqlhcheng, so with that patch you doesnt store the sc in the token ?00:48
lhchengsamueldmq: correct00:48
samueldmqlhcheng, and then retrieve it when creating user?00:49
samueldmqlhcheng, it means sc is not being stored in the session ?00:49
lhchengsamueldmq: yes, the sc is not stored in session anymore00:49
samueldmqlhcheng, oh .. and how do we cache it ?00:49
*** ankita_wagh has quit IRC00:50
*** zzzeek has quit IRC00:50
lhchengsamueldmq: the sc will then be retrieved when recreating the user object, so the result is one extra keystone call per page reload00:50
lhchengsamueldmq: the caching will be step 2, likely leverage the caching feature already available in django and store in there00:51
samueldmqlhcheng, so we will use horizon server caching (django) for the sc00:51
samueldmqlhcheng, and cookies for the rest00:52
*** packet has joined #openstack-keystone00:52
lhchengsamueldmq: it will be optional00:52
*** packet has quit IRC00:52
samueldmqlhcheng, I would like it as default :p00:52
samueldmqlhcheng, imo it's better tahn having one more request per page load00:53
*** sigmavirus24 is now known as sigmavirus24_awa00:53
lhchengsamueldmq: I like to avoid additional dependencies for horizon in devstack, keeping it simple00:53
samueldmqlhcheng, but the django caching is already available with django, isnt it ?00:54
lhchengsamueldmq: caching configuration, not the caching server00:55
samueldmqlhcheng, ++ so we still would need to put a backend there , such as memcached, right ?00:56
lhchengsamueldmq: for production, the deployer likely already have one00:56
lhchengsamueldmq: but for devstack, I like it to keep it simple. same reason why we want signed cookies as default :)00:57
samueldmqlhcheng, k makes sense; but you plan to put your solution as default then00:57
samueldmqlhcheng, needing keystone calls for every reload00:58
lhchengsamueldmq: yes, and deployer have the option to use caching if they want to.00:58
samueldmqlhcheng, nice and then it will be documented:00:59
samueldmqlhcheng, v2 works as today00:59
jamielennoxbknudson: i left a comment on https://review.openstack.org/#/c/166543/ without a +/- 1 as i'm not sure what you are doing is intentional or not00:59
samueldmqlhcheng, v3 needs a additional call to keystone if not using cached backend00:59
samueldmqlhcheng, the other option is to use cached backend and then v3 works as v2, no need of additional queries01:00
lhchengsamueldmq: no, it would be the same behavior for v2 and v3.01:00
*** trey has quit IRC01:00
samueldmqlhcheng, the additional calls if not using cached backend01:01
samueldmqlhcheng, makes sense to me ... you can add me as reviewer of those patches if you want :)01:02
lhchengeven for v2, the cookie size can hit the limit if there are many openstack service endpoint registered.01:02
lhchengsamueldmq: sure01:02
samueldmqlhcheng, ++ so yes, then it makes still more sense01:02
*** browne has quit IRC01:04
*** trey has joined #openstack-keystone01:08
samueldmqjamielennox, hi01:10
samueldmqjamielennox, I run a default devstack and most of test pass (only 7 failing)01:11
samueldmqjamielennox, some of them because even in v3 mode, tempest tries to use /v2/tenants01:11
samueldmqjamielennox, others I got timeout, so nothing related to v3 auth support01:12
samueldmqjamielennox, I am going to setup a more complete devstack and try against it01:12
samueldmqwith neutron and swift01:13
samueldmqmorganfainberg, so looks that also adds sahara,ceilometer and heat01:15
openstackgerritMerged openstack/keystoneauth: Don't return default for domain in v2 accessinfo  https://review.openstack.org/17952201:16
jamielennoxsamueldmq: I'm surprised that tempest is the issue there01:17
jamielennoxsamueldmq: the places i'm aware of failure are those on the list01:17
jamielennoxlike for example glance talking to cinder01:17
jamielennoxand heat still uses v2 credentials for auth_token middleware01:18
jamielennoxbut that's a great start01:18
samueldmqjamielennox, :)01:18
samueldmqjamielennox, I will share the tempest results with you, give me a minute01:18
*** lhcheng has quit IRC01:19
morganfainbergsamueldmq: yes. basically we need to cover *everything* we can with v3 only01:21
morganfainbergsamueldmq: so we can mark v2 as deprecated.01:22
richmjamielennox: have you converted glance to use keystone_authtoken?01:23
jamielennoxrichm: i think so..?01:23
*** ayoung has quit IRC01:23
jamielennoxdoes it not work?01:23
richmI've got glance api and glance registry working - glance cache looks a bit different though - do you remember converting glance cache?01:24
samueldmqmorganfainberg, k got it, will dig more on this, thanks01:25
samueldmqjamielennox, the paste is big01:25
samueldmqjamielennox, Could not submit your paste because your paste contains spam.01:25
samueldmqPlease fill out the CAPTCHA to proceed:01:26
samueldmqhehe01:26
jamielennoxrichm: for auth_token there generally isn't work required for each service - the exceptions there being zaqar, swift and to an extent heat01:26
jamielennoxnot knowing glance very well i dont think glance cache would use auth_token - auth_token does token auth and so it generally only protects the -api services01:27
jamielennoxsamueldmq: i'm probably not going to do anything on it today anyway, i think the goal should be to get it set up as an experimental job then we can just work through that01:28
samueldmqjamielennox, yes I will start with the experimental job01:28
richmjamielennox: Did you have to do anything in glance cache to make it use the [keystone_authtoken] section as in http://www.jamielennox.net/blog/2015/02/23/v3-authentication-with-auth-token-middleware/01:28
samueldmqjamielennox, I think we have a good start with this first execution01:28
jamielennoxrichm: i just replied to your email on that01:29
samueldmqjamielennox, I just wanted to make sure how to set it up correctly, etc01:29
samueldmqjamielennox, to not submit a job without having tested anything01:29
samueldmqjamielennox, http://paste.openstack.org/show/214682/01:29
samueldmqjamielennox, nvm, it cut the paste01:30
samueldmqthis one is ok http://www2.lsd.ufcg.edu.br/~samuel/tempest-full-without-identity-v2-tests.out01:30
samueldmqjamielennox, morganfainberg to start, you want an experimental job for which project ?01:31
jamielennoxrichm: hmm, i've done everything for devstack - and it looks like devstack still sets up glance cache the old way: https://github.com/openstack-dev/devstack/blob/master/lib/glance#L20001:31
jamielennoxi don't know why that is01:32
richmjamielennox: yeah, that's what I see on my rdo kilo install01:32
jamielennoxsamueldmq: umm, i've really got no idea which project01:32
jamielennoxrichm: i'll have to have a look at glance cache and see if it's using those options - are you seeing an error if you change it?01:33
samueldmqjamielennox, I think the ideal would be all of them :p01:33
richmjamielennox: no, just finished puppet-izing glance api and glance registry and saw that glance cache was doing things the old way01:33
jamielennoxsamueldmq: right01:33
samueldmqjamielennox, so we could work on wherever needs work, and run the checks01:33
richmI will see if I can just slap a keystone_authtoken section in there01:33
jamielennoxrichm: give me a few seconds to grep through the glance code and i'll do a devstack patch to swap that over. The gate should tell us if it's all god01:34
jamielennoxsamueldmq: you can ask on infra if that's possible01:34
samueldmqjamielennox, k will do, need to go afk for a bit, will keep you updated01:34
jamielennoxsamueldmq: otherwise maybe devstack? or tempest?01:34
samueldmqthanks01:34
samueldmqjamielennox, yeah, otherwise devstack and tempest would be good, will discuss with them01:35
samueldmqjamielennox, thanks01:35
*** dimsum__ has quit IRC01:35
jamielennoxrichm: so there's v2 auth happening in glance there somewhere: https://github.com/openstack/glance/blob/master/glance/registry/client/v2/api.py#L4001:37
jamielennoxbut it's not taking it from the auth_token section so it shouldn't affect that01:38
jamielennoxrichm: yea - so those options in devstack are not being put into the keystone_authtoken section, so glance is doing it's own internal authentication to keystone there for some reason01:39
jamielennoxi haven't update that yet - that's the first time i've seen those options01:40
jamielennoxrichm: if you find more options like that please add them to https://trello.com/b/5qivasNp/keystone-v301:40
*** omkarjoshi has quit IRC02:04
richmjamielennox: ok02:07
*** boris-42 has quit IRC02:08
*** _cjones_ has quit IRC02:21
*** Ephur has quit IRC02:31
*** _cjones_ has joined #openstack-keystone02:33
openstackgerritMerged openstack/keystoneauth: Copy missed test_fixtures from keystoneclient  https://review.openstack.org/17952502:35
openstackgerritMerged openstack/keystoneauth: Add endpoint and service ids to fixtures  https://review.openstack.org/17952602:37
*** alex_xu has quit IRC02:39
morganfainbergjamielennox: new ksm on Monday for kilo to cut the spammy log line.02:41
jamielennoxmorganfainberg: sounds good02:41
morganfainbergjamielennox: go enjoy your weekend!02:41
morganfainbergLol.02:41
*** ankita_wagh has joined #openstack-keystone02:42
jamielennoxheh - yea, crappy weather out02:42
*** ankita_wagh has quit IRC02:42
*** alex_xu has joined #openstack-keystone02:43
morganfainbergjamielennox: and I need to schedule client work session at the summit. Do we want 1 client and 1 middleware? Or 1 for both? Or ?02:43
*** ankita_wagh has joined #openstack-keystone02:43
jamielennoxmorganfainberg: what do you want to do in the session?02:43
jamielennoxi'm trying to push some features but in terms of future work?02:43
morganfainbergWork sessions are the small groups so it'll be mostly core and devs02:44
morganfainbergSo we could talk about future plans/design things. Push code through / specs.02:44
morganfainbergEtc02:44
morganfainbergIt's very free-form02:44
morganfainbergThink about it this weekend. I'll bug you on my Monday.02:45
morganfainbergSo I can finish the design session planning.02:45
*** richm has quit IRC02:50
jamielennoxmorganfainberg: ok, sounds good - there's a few things around how i want this policy and auth plugin stuff to work02:50
*** _cjones_ has quit IRC02:51
jamielennoxotherwise i'll just line up all my old reviews and assign them out02:51
*** spandhe has quit IRC02:53
*** samueldmq has quit IRC03:04
*** lhcheng has joined #openstack-keystone03:08
*** ChanServ sets mode: +v lhcheng03:08
*** alex_xu has quit IRC03:15
*** alex_xu has joined #openstack-keystone03:18
*** browne has joined #openstack-keystone03:20
*** lhcheng has quit IRC03:30
*** markvoelker has joined #openstack-keystone03:40
*** ankita_wagh has quit IRC03:45
*** markvoelker_ has joined #openstack-keystone03:50
*** markvoelker has quit IRC03:51
*** _cjones_ has joined #openstack-keystone03:51
*** ankita_wagh has joined #openstack-keystone04:02
*** ankita_w_ has joined #openstack-keystone04:03
*** ankita_wagh has quit IRC04:06
*** _cjones_ has quit IRC04:15
*** gokrokve has joined #openstack-keystone04:27
*** _cjones_ has joined #openstack-keystone04:46
*** _cjones_ has quit IRC04:48
*** _cjones_ has joined #openstack-keystone04:51
*** _cjones_ has quit IRC04:52
*** ankita_w_ has quit IRC04:57
*** ankita_wagh has joined #openstack-keystone04:58
*** omkarjoshi has joined #openstack-keystone05:02
*** omkarjoshi has quit IRC05:04
*** gokrokve_ has joined #openstack-keystone05:11
*** gokrokve_ has quit IRC05:12
*** gokrokve_ has joined #openstack-keystone05:13
*** gokrokve has quit IRC05:15
*** gokrokve_ has quit IRC05:17
*** ayoung has joined #openstack-keystone05:35
*** ChanServ sets mode: +v ayoung05:35
*** ayoung has quit IRC05:37
*** gokrokve has joined #openstack-keystone05:42
*** gokrokve has quit IRC05:43
*** gokrokve has joined #openstack-keystone05:44
openstackgerritOpenStack Proposal Bot proposed openstack/keystone: Imported Translations from Transifex  https://review.openstack.org/17933106:05
*** josecastroleon has joined #openstack-keystone06:13
*** josecastroleon has quit IRC06:14
*** henrynash has joined #openstack-keystone06:15
*** ChanServ sets mode: +v henrynash06:15
openstackgerritJamie Lennox proposed openstack/python-keystoneclient: Prompt for password on CLI if not provided  https://review.openstack.org/17360506:21
openstackgerritJamie Lennox proposed openstack/python-keystoneclient: A Default CLI plugin  https://review.openstack.org/17956306:21
*** spandhe has joined #openstack-keystone06:22
*** e0ne has joined #openstack-keystone06:30
*** e0ne has quit IRC06:34
*** browne has quit IRC06:58
*** henrynash has quit IRC07:06
*** openstackgerrit has quit IRC07:06
*** openstackgerrit has joined #openstack-keystone07:07
*** ankita_w_ has joined #openstack-keystone07:26
*** ankita_wagh has quit IRC07:29
*** ankita_w_ has quit IRC07:30
*** ajayaa has joined #openstack-keystone07:34
*** spandhe has quit IRC07:54
*** dimsum__ has joined #openstack-keystone07:59
*** dimsum__ has quit IRC08:04
*** boris-42 has joined #openstack-keystone08:46
*** ir2ivps8 has quit IRC09:46
*** henrynash has joined #openstack-keystone10:08
*** ChanServ sets mode: +v henrynash10:08
*** dimsum__ has joined #openstack-keystone10:51
*** dimsum__ has quit IRC10:56
*** henrynash has quit IRC11:16
*** samueldmq has joined #openstack-keystone11:32
*** dimsum__ has joined #openstack-keystone12:17
*** josecastroleon has joined #openstack-keystone12:44
*** samueldmq has quit IRC12:46
*** josecastroleon has quit IRC12:49
*** zzzeek has joined #openstack-keystone12:49
*** emagana has joined #openstack-keystone13:25
*** markvoelker_ has quit IRC13:34
*** markvoelker has joined #openstack-keystone13:35
*** markvoelker_ has joined #openstack-keystone13:35
*** markvoelker has quit IRC13:40
openstackgerritBrant Knudson proposed openstack/keystone: Use short names for drivers  https://review.openstack.org/16662213:47
openstackgerritBrant Knudson proposed openstack/keystone: Update sample config file  https://review.openstack.org/17186013:52
openstackgerritBrant Knudson proposed openstack/keystone: Remove unnecessary oauth_api check  https://review.openstack.org/17760313:53
openstackgerritBrant Knudson proposed openstack/keystone: De-duplicate auth methods  https://review.openstack.org/17760413:53
openstackgerritBrant Knudson proposed openstack/keystone: Use [] where a value is required  https://review.openstack.org/17190713:53
openstackgerritBrant Knudson proposed openstack/keystone: Remove support for loading auth plugin by class  https://review.openstack.org/17190613:53
*** boris-42 has quit IRC14:48
*** emagana has quit IRC14:57
*** ajayaa has quit IRC15:05
*** dimsum__ has quit IRC15:24
*** zzzeek has quit IRC15:42
*** markvoelker_ has quit IRC15:46
*** dimsum__ has joined #openstack-keystone15:47
*** zzzeek has joined #openstack-keystone16:10
*** zzzeek has quit IRC16:28
*** henrynash has joined #openstack-keystone16:44
*** ChanServ sets mode: +v henrynash16:44
*** gokrokve_ has joined #openstack-keystone16:44
*** gokrokve has quit IRC16:47
*** dimsum__ has quit IRC16:58
dstanekjamielennox: i have a falcon POC that i can commit and push for you to take a look at17:04
dstanekjamielennox: i just saw your email on the list about it17:04
dstanekhmmm...i think that there was one last thing for me to do there, but i can't quite remember17:10
*** wwwjfy has quit IRC17:11
*** iamjarvo has joined #openstack-keystone17:19
*** iamjarvo_ has joined #openstack-keystone17:20
*** iamjarvo has quit IRC17:24
*** ankita_wagh has joined #openstack-keystone17:26
*** iamjarvo has joined #openstack-keystone17:30
*** iamjarvo has quit IRC17:30
*** iamjarvo has joined #openstack-keystone17:31
*** iamjarvo has quit IRC17:31
*** iamjarvo has joined #openstack-keystone17:31
*** iamjarvo has quit IRC17:33
*** iamjarvo_ has quit IRC17:33
*** henrynash has quit IRC17:36
*** iamjarvo has joined #openstack-keystone17:38
*** hogepodge has quit IRC17:50
*** e0ne has joined #openstack-keystone17:54
*** gokrokve has joined #openstack-keystone18:01
*** boris-42 has joined #openstack-keystone18:01
*** gokrokve has quit IRC18:03
*** gokrokve has joined #openstack-keystone18:03
*** gokrokve_ has quit IRC18:04
*** gokrokve_ has joined #openstack-keystone18:06
*** hogepodge has joined #openstack-keystone18:09
*** gokrokve has quit IRC18:10
*** e0ne has quit IRC18:10
*** henrynash has joined #openstack-keystone18:25
*** ChanServ sets mode: +v henrynash18:25
*** spandhe has joined #openstack-keystone18:35
*** spandhe_ has joined #openstack-keystone18:38
*** spandhe has quit IRC18:40
*** spandhe_ is now known as spandhe18:40
*** lhcheng has joined #openstack-keystone18:45
*** ChanServ sets mode: +v lhcheng18:45
*** gokrokve_ has quit IRC18:50
*** gokrokve has joined #openstack-keystone18:51
*** samueldmq has joined #openstack-keystone18:51
*** gokrokve has quit IRC18:55
*** iamjarvo has quit IRC19:17
*** josecastroleon has joined #openstack-keystone19:18
*** iamjarvo has joined #openstack-keystone19:19
*** henrynash has quit IRC19:19
*** henrynash has joined #openstack-keystone19:20
*** ChanServ sets mode: +v henrynash19:20
*** gokrokve has joined #openstack-keystone19:23
*** josecastroleon has quit IRC19:23
*** lhcheng has quit IRC19:25
*** gokrokve_ has joined #openstack-keystone19:46
*** gokrokve has quit IRC19:48
*** gokrokve_ has quit IRC19:50
*** gokrokve has joined #openstack-keystone19:50
*** e0ne has joined #openstack-keystone19:53
*** iamjarvo has quit IRC20:18
*** markvoelker has joined #openstack-keystone20:21
*** markvoelker has quit IRC20:25
*** spandhe has quit IRC20:29
*** spandhe has joined #openstack-keystone20:29
*** zzzeek has joined #openstack-keystone20:32
*** spandhe has quit IRC20:33
*** e0ne has quit IRC20:34
*** boris-42 has quit IRC20:38
*** zzzeek has quit IRC20:49
samueldmqwe have 4 external plugins deprecated since Icehouse at https://github.com/openstack/keystone/blob/master/keystone/auth/plugins/external.py#L11120:50
samueldmqI think it's time to they go away20:51
*** gokrokve_ has joined #openstack-keystone20:57
*** stevemar has joined #openstack-keystone20:57
*** ChanServ sets mode: +v stevemar20:57
*** gokrokve has quit IRC21:00
*** gokrokve_ has quit IRC21:02
*** stevemar has quit IRC21:11
*** markvoelker has joined #openstack-keystone21:21
*** markvoelker has quit IRC21:25
*** e0ne has joined #openstack-keystone21:29
*** samueldmq has quit IRC21:29
*** boris-42 has joined #openstack-keystone21:37
*** e0ne has quit IRC21:38
*** markvoelker has joined #openstack-keystone22:22
*** gokrokve has joined #openstack-keystone22:24
*** markvoelker has quit IRC22:27
*** trey has quit IRC22:52
*** trey has joined #openstack-keystone22:54
*** dimsum__ has joined #openstack-keystone22:57
*** dimsum__ has quit IRC23:02
*** dims_ has joined #openstack-keystone23:02
*** emagana has joined #openstack-keystone23:08
*** markvoelker has joined #openstack-keystone23:23
*** markvoelker has quit IRC23:28
*** gokrokve_ has joined #openstack-keystone23:32
*** gokrokve has quit IRC23:34
*** emagana has quit IRC23:36
*** emagana has joined #openstack-keystone23:36
*** emagana has quit IRC23:40
*** lhcheng has joined #openstack-keystone23:53
*** ChanServ sets mode: +v lhcheng23:53
*** dguerri is now known as _dguerri23:58

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!