| *** dimsum__ has quit IRC | 00:03 | |
| *** mylu has quit IRC | 00:11 | |
| *** shoutm has quit IRC | 00:18 | |
| *** sdake has joined #openstack-keystone | 00:19 | |
| *** mylu has joined #openstack-keystone | 00:21 | |
| *** shoutm has joined #openstack-keystone | 00:21 | |
| *** mylu has quit IRC | 00:22 | |
| *** shadower has joined #openstack-keystone | 00:23 | |
| *** geoffarnold is now known as geoffarnoldX | 00:27 | |
| *** ankita_wagh has joined #openstack-keystone | 00:35 | |
| *** ankita_wagh has quit IRC | 00:40 | |
| *** dsirrine has joined #openstack-keystone | 00:43 | |
| *** dimsum__ has joined #openstack-keystone | 00:48 | |
| *** ankita_wagh has joined #openstack-keystone | 01:03 | |
| *** erhudy1 has quit IRC | 01:12 | |
| *** ankita_w_ has joined #openstack-keystone | 01:18 | |
| *** ankita_wagh has quit IRC | 01:21 | |
| *** shoutm has quit IRC | 01:23 | |
| *** shoutm has joined #openstack-keystone | 01:28 | |
| mordred | jamielennox: https://review.openstack.org/221131 | 01:30 |
|---|---|---|
| mordred | jamielennox: that defers validation from occ to ksa and also just darned-well always creates an auth plugin | 01:30 |
| jamielennox | :) | 01:30 |
| jamielennox | mordred: so why do you need to convert to dest manually? | 01:31 |
| jamielennox | oh, you're registering things with the option.name | 01:32 |
| mordred | jamielennox: I do not use any of the option objects- so I don't get any of the option processing magic | 01:34 |
| mordred | jamielennox: I need to go look at that whole thing - also make sure I'm using option.dest at the right times | 01:35 |
| jamielennox | for argparse as well? | 01:35 |
| mordred | I don't use argparse | 01:35 |
| *** mylu has joined #openstack-keystone | 01:36 | |
| mordred | it doesn't handle nested dicts particularly well I don't think | 01:36 |
| mordred | or, rather, I _do_ handle argparse - but I don't rely on it for any internal data | 01:36 |
| jamielennox | ok - i was under the impression for some reason that OCC had env and argparse handling as well | 01:37 |
| mordred | it does | 01:37 |
| *** mylu has quit IRC | 01:37 | |
| mordred | but argparse isn't the engine that handles it | 01:37 |
| mordred | it's one of the input formats | 01:37 |
| mordred | howeve r- I thnk I have an idea about how to possibly do things differently that might be able to leverage the argparse stuff | 01:38 |
| mordred | I'll give that a try after I land | 01:39 |
| jamielennox | mordred: thats what i'm wondering as well, if we could set like OCC values as OCC defaults | 01:39 |
| jamielennox | as argparse defaults | 01:39 |
| mordred | we overlay the argparse values already ... so that part works | 01:39 |
| jamielennox | no i'm not sure that would work | 01:39 |
| *** dimsum__ has quit IRC | 01:40 | |
| mordred | we get the arguments, then add values from an argparse namespace if one is given (osc hands us one) | 01:40 |
| mordred | but I think I can use the argparse options from ksa to do the auth dict processing | 01:40 |
| mordred | and cut out more of the code in occ | 01:41 |
| mordred | I just need to trial-run it | 01:41 |
| mordred | (there are some layers to unwind carefully now that ksa exists) | 01:42 |
| jamielennox | yea, i think KSA can do all this stuff, we just need to step through it slowly and figure out what we need to transfer into ksa so as not to break stuff | 01:45 |
| *** shoutm has quit IRC | 01:48 | |
| *** shoutm has joined #openstack-keystone | 01:50 | |
| bknudson | add tests | 01:51 |
| *** david-ly_ has joined #openstack-keystone | 01:51 | |
| *** bknudson has quit IRC | 01:52 | |
| *** david-lyle has quit IRC | 01:54 | |
| *** dsirrine has quit IRC | 02:10 | |
| *** spandhe has joined #openstack-keystone | 02:13 | |
| *** wanghua has joined #openstack-keystone | 02:30 | |
| wanghua | jamielennox:ping | 02:31 |
| *** davechen has joined #openstack-keystone | 02:31 | |
| openstackgerrit | Merged openstack/keystone: Updated from global requirements https://review.openstack.org/219493 | 02:32 |
| *** dimsum__ has joined #openstack-keystone | 02:40 | |
| *** dimsum__ has quit IRC | 02:46 | |
| jamielennox | wanghua: hey | 02:52 |
| wanghua | jamielennox: I want to use env['keystone.token_info'] to init a keystoneclient | 02:53 |
| *** shoutm_ has joined #openstack-keystone | 02:53 | |
| jamielennox | wanghua: yep, i thought it might have been you | 02:53 |
| wanghua | but I find the parameter auth you metioned in ml can not work | 02:54 |
| wanghua | :param auth: An auth plugin to use instead of the session one. (optional) | 02:54 |
| *** mylu has joined #openstack-keystone | 02:54 | |
| wanghua | :type auth: keystoneclient.auth.base.BaseAuthPlugin | 02:54 |
| wanghua | :param dict auth_ref: To allow for consumers of the client to manage their | 02:54 |
| wanghua | own caching strategy, you may initialize a client | 02:54 |
| wanghua | with a previously captured auth_reference (token). If | 02:54 |
| wanghua | there are keyword arguments passed that also exist in | 02:54 |
| wanghua | auth_ref, the value from the argument will take | 02:54 |
| jamielennox | yep | 02:54 |
| wanghua | precedence. | 02:54 |
| *** shoutm has quit IRC | 02:54 | |
| jamielennox | you can't use those together | 02:55 |
| jamielennox | however auth= has all the information that auth_ref provides internally | 02:55 |
| wanghua | ok, I will have a try | 02:56 |
| wanghua | I have another question | 02:56 |
| jamielennox | passing session/auth can change how keystoneclient operates, so if you are doing something like expecting client.project_id to exist it wont | 02:56 |
| wanghua | why keystone doesn't return catalog when auth with a token | 02:56 |
| jamielennox | when auth-ed with a token like it contacted keystone or you just provided it a token on __init__? | 02:57 |
| wanghua | I tested it by curl | 02:57 |
| wanghua | according to keystone api v3 docs | 02:58 |
| wanghua | when auth-ed with a password, it return catalog | 02:58 |
| *** dave-mcc_ has quit IRC | 02:58 | |
| wanghua | I wonder why it is different between the two case | 02:58 |
| jamielennox | that's weird - otherwise exactly the same? | 02:58 |
| jamielennox | did you provide a project_name/project_id ? | 02:58 |
| jamielennox | an unscoped token does not have a catalog | 02:59 |
| wanghua | http://developer.openstack.org/api-ref-identity-v3.html | 02:59 |
| wanghua | If I use a token to auth, I think the token should have the same scope with the previous token | 03:00 |
| *** mylu has quit IRC | 03:00 | |
| jamielennox | i think we tried to do that but there was a problem, from memory horizon does some stuff but i can't remember what | 03:00 |
| jamielennox | the main reason that you would use a token to get another token is for rescoping | 03:00 |
| jamielennox | so you would generally provide a new scope | 03:01 |
| wanghua | So if I have a token, how can I know the catalog | 03:01 |
| wanghua | There is no way? | 03:02 |
| jamielennox | you can validate, but you need a service token to do that | 03:02 |
| jamielennox | in general it shouldn't be a problem because you would never get a raw token from someone that hasn't gone through auth_token middleware | 03:02 |
| jamielennox | or come from CONF | 03:02 |
| *** shoutm_ has quit IRC | 03:03 | |
| wanghua | It makes sense | 03:03 |
| jamielennox | (you wouldn't put a token in CONF, you'd have the credentials and a token would be generated) | 03:03 |
| *** shoutm has joined #openstack-keystone | 03:03 | |
| wanghua | Why keystoneclient use username | 03:04 |
| wanghua | domain_name project_name have a underline | 03:05 |
| jamielennox | wanghua: it's really hard to read keystoneclient. We had a lot of backwards compatible options that we had to keep working so there are multiple ways to do something | 03:05 |
| jamielennox | in general all of that stuff is now handled by the session/auth plugin | 03:05 |
| jamielennox | and hopefully in next cycle we are going to do a keystoneclient v2 that removes all that old stuff | 03:05 |
| wanghua | Thank you for your help | 03:06 |
| jamielennox | wanghua: any time, let me know how you go | 03:06 |
| *** mylu has joined #openstack-keystone | 03:13 | |
| *** shoutm_ has joined #openstack-keystone | 03:22 | |
| *** humble_ has joined #openstack-keystone | 03:23 | |
| *** shoutm has quit IRC | 03:24 | |
| *** humble__ has joined #openstack-keystone | 03:24 | |
| *** wanghua has quit IRC | 03:25 | |
| *** humble_ has quit IRC | 03:27 | |
| *** lhcheng has joined #openstack-keystone | 03:27 | |
| *** ChanServ sets mode: +v lhcheng | 03:27 | |
| *** csoukup has joined #openstack-keystone | 03:34 | |
| *** shoutm_ has quit IRC | 03:46 | |
| *** adam_g` has left #openstack-keystone | 03:49 | |
| *** vivekd has joined #openstack-keystone | 03:54 | |
| *** jamielennox is now known as jamielennox|away | 03:56 | |
| *** mylu has quit IRC | 04:02 | |
| *** shoutm has joined #openstack-keystone | 04:03 | |
| *** dikonoor has joined #openstack-keystone | 04:14 | |
| *** vivekd has quit IRC | 04:17 | |
| *** btully has joined #openstack-keystone | 04:22 | |
| *** hrou has quit IRC | 04:35 | |
| *** vivekd has joined #openstack-keystone | 04:39 | |
| *** csoukup has quit IRC | 04:59 | |
| *** ankita_w_ has quit IRC | 05:06 | |
| *** csoukup has joined #openstack-keystone | 05:15 | |
| *** csoukup has quit IRC | 05:19 | |
| *** mflobo1 has joined #openstack-keystone | 05:22 | |
| *** josecastroleon1 has joined #openstack-keystone | 05:22 | |
| *** josecastroleon has quit IRC | 05:23 | |
| *** ankita_wagh has joined #openstack-keystone | 05:30 | |
| *** shoutm_ has joined #openstack-keystone | 05:31 | |
| *** shoutm has quit IRC | 05:34 | |
| *** spandhe has quit IRC | 05:36 | |
| *** Nirupama has joined #openstack-keystone | 05:38 | |
| *** ankita_wagh has quit IRC | 05:48 | |
| *** mflobo1 has left #openstack-keystone | 06:04 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone: Imported Translations from Transifex https://review.openstack.org/220779 | 06:08 |
| *** ParsectiX has joined #openstack-keystone | 06:21 | |
| *** mflobo has joined #openstack-keystone | 06:27 | |
| *** mflobo has left #openstack-keystone | 06:27 | |
| *** josecastroleon has joined #openstack-keystone | 06:29 | |
| *** josecastroleon1 has quit IRC | 06:30 | |
| *** btully has quit IRC | 06:42 | |
| *** lsmola has joined #openstack-keystone | 06:47 | |
| *** pnavarro has joined #openstack-keystone | 06:55 | |
| *** pnavarro is now known as pnavarro|mtg | 06:58 | |
| *** fifieldt has joined #openstack-keystone | 07:13 | |
| *** Tedster has quit IRC | 07:26 | |
| *** Tedster has joined #openstack-keystone | 07:27 | |
| *** Guest32267 is now known as d0ugal | 07:32 | |
| *** d0ugal has joined #openstack-keystone | 07:32 | |
| *** pnavarro|mtg has quit IRC | 07:45 | |
| davechen | jamielennox|away: ping? | 07:46 |
| davechen | keystonemiddleware gating has blocked us for several days, these failure testcase could be reproduced in my local env. | 07:49 |
| davechen | Have checked the change in KSM and KC in the past several days, didn't found anything relevant with this failure, the failure looks really weird. | 07:50 |
| davechen | but possibly relevant with keystoneclient, I did some change in the keystoneclient, these testcase could be passed in my side (https://review.openstack.org/#/c/220736). | 07:52 |
| davechen | but I am not quite understand why lib of requests throw the exception defined in keystoneclient, any idea from anyone? | 07:54 |
| *** dikonoor has quit IRC | 07:55 | |
| *** chlong has quit IRC | 07:56 | |
| openstackgerrit | Merged openstack/keystone: Imported Translations from Transifex https://review.openstack.org/220779 | 08:16 |
| openstackgerrit | David Charles Kennedy proposed openstack/keystone: Move endpoint catalog filtering to default driver https://review.openstack.org/167675 | 08:26 |
| openstackgerrit | David Charles Kennedy proposed openstack/keystone: Omit services with no endpoint from token response https://review.openstack.org/176383 | 08:27 |
| *** jistr has joined #openstack-keystone | 08:30 | |
| *** exploreshaifali has joined #openstack-keystone | 08:31 | |
| *** pnavarro has joined #openstack-keystone | 08:40 | |
| *** humble_ has joined #openstack-keystone | 08:44 | |
| *** humble__ has quit IRC | 08:48 | |
| *** aix has quit IRC | 08:53 | |
| *** humble__ has joined #openstack-keystone | 09:07 | |
| *** humble_ has quit IRC | 09:10 | |
| *** wuhg has quit IRC | 09:11 | |
| *** kiran-r has joined #openstack-keystone | 09:11 | |
| *** e0ne has joined #openstack-keystone | 09:16 | |
| *** aix has joined #openstack-keystone | 09:18 | |
| *** afazekas_ has joined #openstack-keystone | 09:22 | |
| *** afazekas_ has quit IRC | 09:22 | |
| *** afazekas_ has joined #openstack-keystone | 09:23 | |
| *** lhcheng has quit IRC | 09:32 | |
| *** e0ne has quit IRC | 09:41 | |
| *** sdake has quit IRC | 09:42 | |
| *** dimsum__ has joined #openstack-keystone | 09:46 | |
| *** jlvillal has quit IRC | 09:50 | |
| *** jlvillal has joined #openstack-keystone | 09:50 | |
| *** ParsectiX has quit IRC | 09:50 | |
| *** dims_ has joined #openstack-keystone | 09:50 | |
| *** davechen has left #openstack-keystone | 09:54 | |
| *** dimsum__ has quit IRC | 09:55 | |
| *** shoutm_ has quit IRC | 09:57 | |
| *** e0ne has joined #openstack-keystone | 09:57 | |
| *** humble_ has joined #openstack-keystone | 10:06 | |
| *** humble__ has quit IRC | 10:10 | |
| *** ParsectiX has joined #openstack-keystone | 10:17 | |
| *** humble_ has quit IRC | 10:21 | |
| *** jlvillal has quit IRC | 10:22 | |
| *** _kiran_ has joined #openstack-keystone | 10:29 | |
| *** kiran-r has quit IRC | 10:30 | |
| *** aix has quit IRC | 10:35 | |
| *** aix has joined #openstack-keystone | 10:36 | |
| *** shoutm has joined #openstack-keystone | 10:39 | |
| *** claudiub has joined #openstack-keystone | 10:57 | |
| *** ParsectiX has quit IRC | 11:01 | |
| *** jlvillal has joined #openstack-keystone | 11:03 | |
| *** thole3 has joined #openstack-keystone | 11:06 | |
| *** samueldmq has joined #openstack-keystone | 11:09 | |
| samueldmq | morning | 11:09 |
| *** pnavarro is now known as pnavarro|lunch | 11:11 | |
| *** _kiran_ is now known as kiran-r | 11:11 | |
| thole3 | I am running an OpenStack on Ubuntu 14.04 - and my keystone.log is flodding with the error: "WARNING RBAC: Invalid token" and "WARNING The request you have made requires authentication." Anybody know why this is happening? | 11:12 |
| *** ParsectiX has joined #openstack-keystone | 11:29 | |
| *** doug-fish has joined #openstack-keystone | 11:31 | |
| *** gordc has joined #openstack-keystone | 11:31 | |
| *** dobson has quit IRC | 11:39 | |
| *** dobson has joined #openstack-keystone | 11:45 | |
| *** jecarey has quit IRC | 11:56 | |
| *** e0ne has quit IRC | 12:01 | |
| *** e0ne has joined #openstack-keystone | 12:04 | |
| *** doug-fish has quit IRC | 12:08 | |
| *** doug-fish has joined #openstack-keystone | 12:10 | |
| *** eandersson has joined #openstack-keystone | 12:11 | |
| *** raildo-afk is now known as raildo | 12:12 | |
| *** amakarov_away is now known as amakarov | 12:13 | |
| *** Nirupama has quit IRC | 12:14 | |
| *** dave-mccowan has joined #openstack-keystone | 12:18 | |
| *** dsirrine has joined #openstack-keystone | 12:19 | |
| *** markvoelker has joined #openstack-keystone | 12:19 | |
| *** markvoelker has quit IRC | 12:20 | |
| *** markvoelker has joined #openstack-keystone | 12:20 | |
| *** chlong has joined #openstack-keystone | 12:22 | |
| *** daemontool_ has quit IRC | 12:23 | |
| *** e0ne has quit IRC | 12:26 | |
| *** shoutm has quit IRC | 12:39 | |
| *** edmondsw has joined #openstack-keystone | 12:41 | |
| *** vivekd_ has joined #openstack-keystone | 12:42 | |
| *** daemontool_ has joined #openstack-keystone | 12:42 | |
| *** vivekd has quit IRC | 12:44 | |
| *** vivekd_ is now known as vivekd | 12:44 | |
| *** ParsectiX has quit IRC | 13:00 | |
| *** erhudy has joined #openstack-keystone | 13:01 | |
| *** Chandan_p has joined #openstack-keystone | 13:03 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: Remove padding from Fernet tokens https://review.openstack.org/220242 | 13:07 |
| *** e0ne has joined #openstack-keystone | 13:08 | |
| *** pnavarro|lunch is now known as pnavarro | 13:08 | |
| *** marzif has joined #openstack-keystone | 13:09 | |
| *** ParsectiX has joined #openstack-keystone | 13:09 | |
| *** marzif has quit IRC | 13:10 | |
| lbragstad | dstanek: fixed the merge conflict on the padding patch ^ | 13:10 |
| *** geoffarnoldX is now known as geoffarnold | 13:11 | |
| *** marzif has joined #openstack-keystone | 13:11 | |
| *** woodster_ has joined #openstack-keystone | 13:13 | |
| *** ayoung has joined #openstack-keystone | 13:14 | |
| *** ChanServ sets mode: +v ayoung | 13:14 | |
| *** jecarey has joined #openstack-keystone | 13:14 | |
| *** dsirrine has quit IRC | 13:15 | |
| *** btully has joined #openstack-keystone | 13:15 | |
| *** hrou has joined #openstack-keystone | 13:16 | |
| *** geoffarnold has quit IRC | 13:22 | |
| *** daemontool_ has quit IRC | 13:22 | |
| *** marzif has quit IRC | 13:23 | |
| *** marzif_ has joined #openstack-keystone | 13:23 | |
| *** marzif_ has quit IRC | 13:26 | |
| *** marzif_ has joined #openstack-keystone | 13:26 | |
| *** exploreshaifali has quit IRC | 13:27 | |
| *** bknudson has joined #openstack-keystone | 13:28 | |
| *** ChanServ sets mode: +v bknudson | 13:28 | |
| *** marzif has joined #openstack-keystone | 13:29 | |
| *** marzif_ has quit IRC | 13:29 | |
| *** tellesnobrega is now known as tellesnobrega_af | 13:31 | |
| *** tellesnobrega_af is now known as tellesnobrega | 13:34 | |
| *** jsavak has joined #openstack-keystone | 13:37 | |
| *** dsirrine has joined #openstack-keystone | 13:38 | |
| *** kiran-r has quit IRC | 13:40 | |
| *** jsavak has quit IRC | 13:47 | |
| *** jsavak has joined #openstack-keystone | 13:48 | |
| *** rbak has joined #openstack-keystone | 13:50 | |
| *** rbak has quit IRC | 13:50 | |
| *** r-daneel has joined #openstack-keystone | 13:57 | |
| *** ParsectiX has quit IRC | 13:59 | |
| *** richm has joined #openstack-keystone | 14:00 | |
| *** jistr is now known as jistr|call | 14:01 | |
| *** thole3 has quit IRC | 14:02 | |
| *** marzif_ has joined #openstack-keystone | 14:03 | |
| *** marzif has quit IRC | 14:03 | |
| *** marzif_ has quit IRC | 14:11 | |
| *** marzif has joined #openstack-keystone | 14:11 | |
| *** sigmavirus24_awa is now known as sigmavirus24 | 14:11 | |
| dstanek | i hate booking travel | 14:18 |
| *** jistr|call is now known as jistr | 14:20 | |
| *** csoukup has joined #openstack-keystone | 14:21 | |
| morgan | dstanek: ping - | 14:23 |
| dstanek | morgan: pong | 14:23 |
| morgan | dstanek: mind chairing the meeting today? | 14:24 |
| *** jasonsb has quit IRC | 14:24 | |
| morgan | Travelling and cant do it / might be spotty | 14:24 |
| dstanek | sure, np | 14:24 |
| morgan | #notmyplan | 14:24 |
| dstanek | just having fun choosing the best of the terrible cle->nrt options | 14:26 |
| *** dims_ has quit IRC | 14:26 | |
| *** dimsum__ has joined #openstack-keystone | 14:27 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: Remove padding from Fernet tokens https://review.openstack.org/220242 | 14:30 |
| *** raildo is now known as raildo-afk | 14:34 | |
| *** raildo-afk is now known as raildo | 14:37 | |
| *** vivekd has quit IRC | 14:37 | |
| *** phalmos has joined #openstack-keystone | 14:46 | |
| *** ayoung_ has joined #openstack-keystone | 14:48 | |
| *** phalmos_ has joined #openstack-keystone | 14:49 | |
| *** phalmos has quit IRC | 14:51 | |
| *** Chandan_p has quit IRC | 14:51 | |
| *** david-ly_ is now known as david-lyle | 14:53 | |
| *** geoffarnold has joined #openstack-keystone | 14:55 | |
| *** zzzeek has joined #openstack-keystone | 14:57 | |
| *** fifieldt has quit IRC | 15:00 | |
| *** geoffarnold is now known as geoffarnoldX | 15:04 | |
| *** geoffarnoldX is now known as geoffarnold | 15:04 | |
| *** andrearosa has quit IRC | 15:10 | |
| *** geoffarnold is now known as geoffarnoldX | 15:12 | |
| *** geoffarnoldX is now known as geoffarnold | 15:12 | |
| *** jsavak has quit IRC | 15:14 | |
| *** jsavak has joined #openstack-keystone | 15:23 | |
| *** dims_ has joined #openstack-keystone | 15:25 | |
| *** jsavak has quit IRC | 15:27 | |
| *** topol has joined #openstack-keystone | 15:28 | |
| *** ChanServ sets mode: +v topol | 15:28 | |
| *** afazekas_ has quit IRC | 15:28 | |
| *** jsavak has joined #openstack-keystone | 15:28 | |
| *** bradjones has joined #openstack-keystone | 15:28 | |
| *** bradjones has quit IRC | 15:28 | |
| *** bradjones has joined #openstack-keystone | 15:28 | |
| *** dimsum__ has quit IRC | 15:29 | |
| *** dobson has quit IRC | 15:36 | |
| *** dobson has joined #openstack-keystone | 15:39 | |
| openstackgerrit | Tom Cocozzello proposed openstack/keystone: Ensure request variables have corresponding mappings https://review.openstack.org/217340 | 15:41 |
| *** devlaps has joined #openstack-keystone | 15:43 | |
| *** jsavak has quit IRC | 15:55 | |
| *** jasonsb has joined #openstack-keystone | 15:56 | |
| *** jsavak has joined #openstack-keystone | 15:58 | |
| *** r-daneel has quit IRC | 15:58 | |
| *** diazjf has joined #openstack-keystone | 16:00 | |
| *** gyee has joined #openstack-keystone | 16:03 | |
| *** shoutm has joined #openstack-keystone | 16:03 | |
| *** ChanServ sets mode: +v gyee | 16:03 | |
| dolphm | dstanek: there's a 787 from denver | 16:05 |
| dolphm | but there's conflicting reports on whether it has wifi | 16:05 |
| *** sdake_ has joined #openstack-keystone | 16:06 | |
| *** phalmos_ has quit IRC | 16:08 | |
| dstanek | dolphm: got booked flying through msp | 16:08 |
| *** Guest36360 has quit IRC | 16:09 | |
| *** doug-fis_ has joined #openstack-keystone | 16:09 | |
| *** doug-fish has quit IRC | 16:09 | |
| lbragstad | dstanek: nice, i think i'm going through msp, too | 16:10 |
| dstanek | lbragstad: which flight? | 16:10 |
| lbragstad | dstanek: Delta Flight 584 | 16:11 |
| *** jistr has quit IRC | 16:11 | |
| *** shoutm has quit IRC | 16:13 | |
| dstanek | lbragstad: nice. me too. 10/24 @ 12:50 - seat 26j | 16:13 |
| lbragstad | dstanek: 28h! | 16:14 |
| *** pnavarro has quit IRC | 16:22 | |
| *** diazjf has quit IRC | 16:25 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone: Updated from global requirements https://review.openstack.org/221392 | 16:27 |
| *** phalmos has joined #openstack-keystone | 16:28 | |
| *** diazjf has joined #openstack-keystone | 16:30 | |
| *** ankita_wagh has joined #openstack-keystone | 16:30 | |
| *** dims_ has quit IRC | 16:31 | |
| *** dimsum__ has joined #openstack-keystone | 16:32 | |
| *** Guest60469 is now known as mgagne | 16:40 | |
| *** mgagne has joined #openstack-keystone | 16:40 | |
| *** doug-fis_ has quit IRC | 16:41 | |
| *** ayoung has quit IRC | 16:52 | |
| *** ayoung_ has quit IRC | 16:53 | |
| *** e0ne has quit IRC | 16:56 | |
| *** diazjf has quit IRC | 16:57 | |
| *** aix has quit IRC | 16:58 | |
| *** jdennis1 has joined #openstack-keystone | 16:59 | |
| *** doug-fish has joined #openstack-keystone | 17:00 | |
| *** jdennis has quit IRC | 17:01 | |
| *** richm has quit IRC | 17:02 | |
| *** tsymanczyk has joined #openstack-keystone | 17:03 | |
| *** harlowja has joined #openstack-keystone | 17:03 | |
| *** ankita_wagh has quit IRC | 17:05 | |
| *** afazekas_ has joined #openstack-keystone | 17:05 | |
| *** diazjf has joined #openstack-keystone | 17:05 | |
| *** eandersson has quit IRC | 17:07 | |
| amakarov | dolphm, greetings! I wonder, aren't we going to run keystone using uwsgi? We've just moved to Apache and almost immediately ran into this issue: https://github.com/GrahamDumpleton/mod_wsgi/issues/81 | 17:08 |
| amakarov | It fails on "graceful" with segfault 0_o | 17:09 |
| *** jsavak has quit IRC | 17:10 | |
| *** ayoung has joined #openstack-keystone | 17:13 | |
| *** ChanServ sets mode: +v ayoung | 17:13 | |
| dstanek | amakarov: that is the future plans yes. to support uswgi. the bug you linked to is mod_wsgi though | 17:13 |
| *** ayoung_ has joined #openstack-keystone | 17:13 | |
| *** lhcheng has joined #openstack-keystone | 17:13 | |
| *** ChanServ sets mode: +v lhcheng | 17:13 | |
| *** lhcheng has quit IRC | 17:13 | |
| *** lhcheng has joined #openstack-keystone | 17:14 | |
| *** ChanServ sets mode: +v lhcheng | 17:14 | |
| amakarov | dstanek, thanks! I'll try to convince my colleagues here to use it instead of mod_wsgi (just after I convinced everybody that mod_wsgi is better than eventlet -_- ) | 17:15 |
| *** richm has joined #openstack-keystone | 17:16 | |
| dstanek | amakarov: realistically Keystone should run behind either. now that traveling is over for me maybe i can continue my flask work. | 17:16 |
| amakarov | dstanek, why flask? why not bottle? ) | 17:17 |
| dstanek | amakarov: you could say why now X, where X in one of thousands for frameworks :-) Flask has a great ecosystem and is not bound to builtin libraries like Django. | 17:18 |
| *** sdake_ has quit IRC | 17:19 | |
| gyee | dstanek, flask and mod_wsgi are two different animal right? I mean you still need mod_wsgi to run flask in apache right? | 17:19 |
| amakarov | dstanek, good luck with that then! I hope it'll ease things a bit :) | 17:20 |
| amakarov | gyee, right. As for now it would be nice to know Community preference in this matter as I want to try out something other than mod_wsgi | 17:22 |
| morgan | gyee: yes | 17:22 |
| amakarov | mod_wsgi is official devstack out-of-the-box solution | 17:22 |
| morgan | Flask replaces the wsgi.py file | 17:22 |
| gyee | I see | 17:23 |
| *** stevemar has joined #openstack-keystone | 17:23 | |
| *** ChanServ sets mode: +v stevemar | 17:23 | |
| morgan | And routes. | 17:23 |
| *** jsavak has joined #openstack-keystone | 17:23 | |
| *** afazekas_ has quit IRC | 17:24 | |
| amakarov | morgan, and pipeline architecture | 17:24 |
| gyee | amakarov, we run into segfault once with Apache on hLinux, but otherwise, its been stable | 17:25 |
| gyee | amakarov, just make sure you have the latest patches | 17:26 |
| morgan | amakarov: ++ | 17:27 |
| amakarov | gyee, we've reproduced this issue and it seems very persistent :) Yes - we're looking for latest patches right now. | 17:27 |
| dstanek | gyee: yes, sorry walked away to get coffee | 17:28 |
| *** lsmola has quit IRC | 17:29 | |
| gyee | do mo dstanek son | 17:30 |
| *** shaleh has joined #openstack-keystone | 17:31 | |
| *** ankita_wagh has joined #openstack-keystone | 17:32 | |
| *** jsavak has quit IRC | 17:34 | |
| *** exploreshaifali has joined #openstack-keystone | 17:42 | |
| *** sdake has joined #openstack-keystone | 17:44 | |
| lhcheng | stevemar: when you get the chance: https://review.openstack.org/#/c/219041/ :) | 17:44 |
| *** e0ne has joined #openstack-keystone | 17:47 | |
| dstanek | we need a blame for the wiki page | 17:48 |
| morgan | Hah | 17:48 |
| *** henrynash has joined #openstack-keystone | 17:56 | |
| *** ChanServ sets mode: +v henrynash | 17:56 | |
| dstanek | henrynash: jumping ahead to your versioning questions...i don't think you need a new version for your change since we didn't release with the current version yet | 17:57 |
| henrynash | dstanek: hi..yes? | 17:57 |
| henrynash | dstanek: morgan suggested that the versions are frozen at liberty-3 | 17:58 |
| henrynash | dstanek: hence first part of my question.... | 17:58 |
| dstanek | henrynash: i would agree that we probably shouldn't be changing APIs late in the game, but i don't know that i'd want a new version | 17:59 |
| *** doug-fis_ has joined #openstack-keystone | 17:59 | |
| henrynash | dtsanek: in terms of *how* to do this….(when the really are released)….should I be creating a second driver file (e.g. sql9) or a new class in the same file? | 17:59 |
| dstanek | henrynash: also only one version should be loaded in stevedore | 17:59 |
| dstanek | henrynash: new class in the same file | 17:59 |
| *** doug-fi__ has joined #openstack-keystone | 18:00 | |
| dstanek | unless things get super big | 18:00 |
| stevemar | meeting time, its meeting time! | 18:00 |
| henrynash | dtsanek: which one does steveadore load? | 18:00 |
| stevemar | the best time of dat | 18:00 |
| stevemar | day | 18:00 |
| *** aix has joined #openstack-keystone | 18:01 | |
| *** doug-fish has quit IRC | 18:01 | |
| *** r-daneel has joined #openstack-keystone | 18:02 | |
| *** mriedem has joined #openstack-keystone | 18:02 | |
| mriedem | stevemar: is translation something that keystoneclient cares about? | 18:03 |
| mriedem | i think i know why keystoneclient doesn't have any translations | 18:03 |
| *** doug-fis_ has quit IRC | 18:03 | |
| stevemar | mriedem: i saw that ksc has it set up, but no .po files | 18:04 |
| stevemar | mriedem: i assume thats because we are trying to use osc as our cli | 18:05 |
| mriedem | stevemar: it's because the translation-jobs template isn't in the list of jobs to run for python-keystoneclient in project-config | 18:06 |
| mriedem | easy fix, but i was wondering if (1) it's going to work and (2) if anyone cares | 18:06 |
| mriedem | (1) because the wiki for enabling a project for translations says to use the project name as the domain, but keystoneclient uses 'keystoneclient' rather than python-keystoneclient | 18:06 |
| mriedem | and i'm assuming the proposal bot / script assumes a certain structure given the project name | 18:07 |
| stevemar | mriedem: yep, i noticed that with osc, we needed to create a python-openstackclient directory along side openstackclient, it looks ugly, but *meh* | 18:07 |
| *** jsavak has joined #openstack-keystone | 18:08 | |
| stevemar | mriedem: as for (2), i assume no one cares until we get yelled at, then everyone cares | 18:08 |
| stevemar | it doesn't cost much to setup the job, so i'm for it | 18:09 |
| stevemar | even for clients | 18:09 |
| mriedem | stevemar: http://git.openstack.org/cgit/openstack-infra/project-config/tree/jenkins/scripts/common_translation_update.sh#n38 | 18:09 |
| mriedem | looks like it expects the project name in the director structure | 18:09 |
| mriedem | so yeah, probably busted | 18:09 |
| mriedem | if people aren't against it, i could make the change in keystoneclient and push the job in project-config | 18:10 |
| mriedem | or one of bknudson's minions could do it | 18:10 |
| mriedem | i'll at least start with a bug | 18:10 |
| *** browne has joined #openstack-keystone | 18:11 | |
| bknudson | mriedem: put it on the squad backlog | 18:11 |
| stevemar | mriedem: good call, i'm sure one of the minions could tackle this | 18:11 |
| mriedem | bknudson: i'd rather just fix it myself | 18:11 |
| bknudson | then we'll talk about it at the daily standup | 18:11 |
| *** madhu_ak has joined #openstack-keystone | 18:12 | |
| *** jsavak has quit IRC | 18:12 | |
| *** spandhe has joined #openstack-keystone | 18:14 | |
| mriedem | https://bugs.launchpad.net/python-keystoneclient/+bug/1493484 | 18:14 |
| openstack | Launchpad bug 1493484 in python-keystoneclient "i18n is enabled but there are no translations" [Undecided,New] | 18:14 |
| *** david8hu has joined #openstack-keystone | 18:23 | |
| *** sdake_ has joined #openstack-keystone | 18:26 | |
| *** e0ne has quit IRC | 18:29 | |
| *** sdake has quit IRC | 18:29 | |
| *** jsavak has joined #openstack-keystone | 18:29 | |
| *** openstackgerrit has quit IRC | 18:31 | |
| *** openstackgerrit has joined #openstack-keystone | 18:32 | |
| dolphm | stevemar: when did /websso support land? kilo? | 18:33 |
| stevemar | dolphm: *nod* | 18:35 |
| *** sdake_ is now known as sdake | 18:40 | |
| stevemar | lhcheng: https://review.openstack.org/#/c/212977/ *poke* | 18:40 |
| * lhcheng looking | 18:41 | |
| * lhcheng *pokes* stevemar with https://review.openstack.org/#/c/219041/ | 18:41 | |
| stevemar | lhcheng: you've got yourself a deal | 18:42 |
| *** zzzeek_ has joined #openstack-keystone | 18:42 | |
| *** zzzeek has quit IRC | 18:43 | |
| *** zzzeek_ is now known as zzzeek | 18:43 | |
| *** sdake_ has joined #openstack-keystone | 18:47 | |
| *** sdake has quit IRC | 18:49 | |
| *** djc_ has joined #openstack-keystone | 18:55 | |
| *** amakarov is now known as amakarov_away | 19:00 | |
| htruta | so, as I was saying, if the FFE isn't reasonable, I suggest we decide a cut point at the reseller chain that does not break people | 19:00 |
| *** doug-fi__ has quit IRC | 19:00 | |
| *** doug-fish has joined #openstack-keystone | 19:01 | |
| dstanek | htruta: try to merge part of it? | 19:01 |
| htruta | dstanek: part of it is already merged | 19:01 |
| htruta | I'd suggest a few more parts :P | 19:01 |
| *** doug-fish has quit IRC | 19:01 | |
| *** doug-fish has joined #openstack-keystone | 19:02 | |
| *** doug-fish has quit IRC | 19:02 | |
| dstanek | htruta: what's the risk vs. reward on it? | 19:02 |
| *** doug-fish has joined #openstack-keystone | 19:02 | |
| htruta | dstanek: the risk would be breaking something, which I think we won't | 19:03 |
| *** jsavak has quit IRC | 19:03 | |
| raildo | dstanek:the next 3-4 patches will don't brake anything... | 19:03 |
| htruta | the reward would be a much more mature functionality when we achieve M | 19:03 |
| *** jsavak has joined #openstack-keystone | 19:03 | |
| htruta | and less work to do | 19:03 |
| dstanek | htruta: :-) every developer says that. | 19:03 |
| htruta | dstanek: true. hehe. but we're not allowing nothing at the controller layer | 19:04 |
| htruta | but sure, breaking is always possible | 19:04 |
| raildo | dstanek: I think that the reward will be have reseller in the begin of M... and with this, we will have more time to work with reseller as experimental in this release | 19:05 |
| dstanek | so, i haven't really looked at this since i asked for the massive patches to be split up, but the problem i was having there was that there was lots of code changing domains and projects in ways i didn't (and still don't) quite understand the impart of | 19:05 |
| henrynash | htruta: I think it is really hard to justify merging any more in a freeze period, just to get ahead in the next release | 19:06 |
| htruta | dstanek: the stuff that modify domains behaviour itself is ahead of the cut I'm suggesting | 19:08 |
| henrynash | htruta: in a freeze period (if we have one) we have to really NEED it now..... | 19:08 |
| djc_ | Hi. I am running into a problem with the dashboard using keystone version3 (multi-domains -- mysql & AD). When in the dashboard, I get the error message "Error: Unauthorized: Unable to retrieve group list." when trying to select 'Users' and 'Groups' under the Identity tab. Here is my keystone log. https://gist.github.com/anonymous/c7c1c546218f39f86c3a | 19:08 |
| *** jsavak has quit IRC | 19:09 | |
| htruta | henrynash: I see... | 19:09 |
| *** jsavak has joined #openstack-keystone | 19:10 | |
| *** ankita_wagh has quit IRC | 19:10 | |
| dstanek | henrynash: ++ | 19:10 |
| henrynash | djc_: is this a liberty milestone releae you are running | 19:11 |
| henrynash | morganfainberg, dstanek: thinking about the bug fix I was disussing in the meeting that needs to add three new driver methods to the domain confg backend….I just relaised that the domain config backend is experimental….so a) should we be versioning it anyway, and b) perhaps we don’t need to consider an FFE in that case to fix the big? | 19:11 |
| henrynash | (fix the bug) | 19:11 |
| david-lyle | djc_: a question more appropriate for #openstack-horizon, but the problem is on the last line, you are overflowing the signed-cookie capacity, for v3 you should really use a different session engine | 19:12 |
| *** ankita_wagh has joined #openstack-keystone | 19:12 | |
| dstanek | freeze periods are also a great time to work on bugs! 293 of them to go! | 19:12 |
| dstanek | henrynash: that is a great question. | 19:12 |
| lhcheng | djc_: "Total Cookie size for user_id: xxxxxxxx is 6227B >= 4093B. You need to configure file-based or database-backed sessions instead of cookie-based sessions: http://docs.openstack.org/developer/horizon/topics/deployment.html#session-storage" | 19:12 |
| htruta | dstanek: sure it is :) | 19:12 |
| lhcheng | djc_: you have to use db or memcache django session backend if you're going to run on keystone v3. | 19:13 |
| djc_ | lhcheng Is this set in the /etc/openstack-dashboard/local_settings. | 19:13 |
| lhcheng | djc_: http://docs.openstack.org/developer/horizon/topics/deployment.html#session-storage | 19:14 |
| djc_ | david-lyle I wasn't sure where to post this since my error message was in the keysone log. | 19:14 |
| lhcheng | djc_: if you have further question, feel fee to jump to the #openstack-horizon room | 19:15 |
| david-lyle | djc_: no worries, but you seem to be looking at horizon_error.log. keystone would not emit such an error | 19:15 |
| david-lyle | either way session engine configuration will make the pain go away ;) | 19:16 |
| djc_ | lhcheng Thanks. I appreciate your help. | 19:16 |
| djc_ | david-lyle Thanks. | 19:16 |
| *** samuel-dmq has joined #openstack-keystone | 19:20 | |
| *** samueldmq has quit IRC | 19:22 | |
| openstackgerrit | henry-nash proposed openstack/keystone: Relax newly imposed sql driver restriction for domain config https://review.openstack.org/191976 | 19:22 |
| ayoung_ | henrynash, if I were to backtrack and suggest that inherited roles go into the tokens...what would we need to add to be able to do domain scoped roles? | 19:23 |
| ayoung_ | would it be an attributed of the role...and those roles would not then end up in the token? | 19:23 |
| *** samuel-dmq has quit IRC | 19:24 | |
| henrynash | ayoung_: so how I had (narrowly, I admit) imagained it….if the role was a “role group”, then the group would be exanded at token generation, puting the actual roles into the token….and “role group” could be inherted roles, domain roles or however we define this | 19:25 |
| ayoung_ | henrynash, so role-groups would be a new abstraction.. | 19:26 |
| ayoung_ | that works, | 19:26 |
| henrynash | ayoung_: that was my original idea, yes, which never itself gets a token | 19:27 |
| henrynash | ...gets into a token | 19:27 |
| ayoung_ | henrynash, so, if we go the role inference working first, it gives us the mechanism to do role-groups, doesn't it? | 19:27 |
| ayoung_ | say we make it so admin implies member... | 19:27 |
| henrynash | role inference being? | 19:27 |
| ayoung_ | and both would end up in the token | 19:27 |
| henrynash | oh right | 19:27 |
| * ayoung_ avoiding the work inheritance | 19:28 | |
| ayoung_ | henrynash, we can make "how do you resolve the inheritance" a configurable strategy: token, policy, separate call, whatever | 19:28 |
| ayoung_ | and start with "token" | 19:28 |
| henrynash | so I guess that’s a different abstarction that would get “expanded” at token generation time, but no less valid | 19:29 |
| ayoung_ | henrynash, defining the inference is one API, expanding it...might change over time | 19:29 |
| ayoung_ | in the token is the simplest for today | 19:29 |
| henrynash | ayoung: that has indeed always been my argument…start “pre token” first | 19:29 |
| henrynash | ayoung: and in the end you have to push it into the other side we we blow our token sizes again if peopel really srat using this | 19:30 |
| ayoung_ | henrynash, deal...will work on a POC and associated specs to support that. We can then have something tangible to discuss in tokyo | 19:30 |
| *** jsavak has quit IRC | 19:30 | |
| *** jsavak has joined #openstack-keystone | 19:31 | |
| ayoung_ | henrynash, and, when we get to that level, we should have the policy stuff far enough along that we can switch "expand in token" to "expand in policy" if needs be | 19:31 |
| henrynash | ayoung_: I also think the conceptual API model is the real thing we need to work on….get that right and we’ll be in godo shape | 19:31 |
| openstackgerrit | Tom Cocozzello proposed openstack/python-keystoneclient: Move pot file for traslation https://review.openstack.org/221473 | 19:31 |
| ayoung_ | henrynash, cool. I think we have a plan | 19:31 |
| henrynash | ayoung_: yep, there’ll probably be competing solutions to the token/policy evaluation side…and we can continue our arguements there! | 19:32 |
| *** aix has quit IRC | 19:32 | |
| *** jsavak has quit IRC | 19:32 | |
| *** jsavak has joined #openstack-keystone | 19:33 | |
| ayoung_ | henrynash, then...we add in a parameter to token-create that says :only this (sub) role in the token | 19:33 |
| ayoung_ | so an admin can request a member-only token for example | 19:33 |
| henrynash | ayoung_: or we somehow add a role scope into the token, etc. etc.... | 19:33 |
| ayoung_ | henrynash, yeah, trying to think practially, within the constriants of fernet. Adding a single field for roleid. | 19:34 |
| *** mriedem has left #openstack-keystone | 19:34 | |
| henrynash | ayoung_: and I think fernet may be teh fly in this ointment…. | 19:35 |
| ayoung_ | henrynash, nah, it will work; if you have a single id, you just start with that, and then add all the roles that implies upon token vlaidation | 19:35 |
| ayoung_ | validation | 19:35 |
| ayoung_ | so if A->B->C->D and you havea token with C validate gets {C,D} | 19:36 |
| henrynash | ok…looks like time to talk in Tokyo! | 19:36 |
| ayoung_ | henrynash, I want to have a demo by then...I want this to be "real" for M. Not just talk like Dynamic policy | 19:37 |
| *** jsavak has quit IRC | 19:44 | |
| *** jsavak has joined #openstack-keystone | 19:45 | |
| *** jsavak has quit IRC | 19:48 | |
| *** sdake_ is now known as sdake | 19:49 | |
| *** henrynash has quit IRC | 19:52 | |
| *** Tedster has quit IRC | 19:54 | |
| *** jecarey has quit IRC | 19:56 | |
| stevemar | we need a non-ibmer here please: https://review.openstack.org/#/c/221473/ its super simple | 20:01 |
| *** jsavak has joined #openstack-keystone | 20:03 | |
| *** dimsum__ is now known as dims | 20:03 | |
| *** geoffarnold has quit IRC | 20:04 | |
| *** dims is now known as Guest80071 | 20:04 | |
| *** Guest80071 is now known as dims__ | 20:08 | |
| *** djc_ has quit IRC | 20:09 | |
| *** topol has quit IRC | 20:22 | |
| *** ayoung_ has quit IRC | 20:23 | |
| *** ayoung has quit IRC | 20:24 | |
| bknudson | stevemar: oops, maybe not as simple as it looks. | 20:24 |
| bknudson | the renaming part was simple. | 20:24 |
| *** jasonsb has quit IRC | 20:27 | |
| *** jasonsb has joined #openstack-keystone | 20:30 | |
| *** doug-fis_ has joined #openstack-keystone | 20:30 | |
| *** exploreshaifali has quit IRC | 20:31 | |
| openstackgerrit | Matthew Edmonds proposed openstack/keystonemiddleware: only make token invalid when it really is https://review.openstack.org/217373 | 20:32 |
| *** doug-fi__ has joined #openstack-keystone | 20:33 | |
| *** raildo is now known as raildo-afk | 20:34 | |
| *** doug-fish has quit IRC | 20:34 | |
| *** tiny-hands has joined #openstack-keystone | 20:35 | |
| *** doug-fis_ has quit IRC | 20:35 | |
| *** doug-fi__ has quit IRC | 20:37 | |
| *** ekarlso has quit IRC | 20:38 | |
| stevemar | bknudson: oh really? | 20:43 |
| *** raildo-afk is now known as raildo | 20:44 | |
| *** ankita_wagh has quit IRC | 20:46 | |
| *** jecarey has joined #openstack-keystone | 20:50 | |
| *** ayoung has joined #openstack-keystone | 20:53 | |
| *** ChanServ sets mode: +v ayoung | 20:53 | |
| *** ayoung_ has joined #openstack-keystone | 20:53 | |
| *** raildo is now known as raildo-afk | 20:56 | |
| *** ekarlso has joined #openstack-keystone | 20:57 | |
| *** ekarlso has quit IRC | 20:57 | |
| *** ekarlso has joined #openstack-keystone | 20:57 | |
| *** geoffarnold has joined #openstack-keystone | 20:58 | |
| lbragstad | morgan: can this land if it's adding a requirement? https://review.openstack.org/#/c/218511/ | 21:00 |
| morgan | Looking. | 21:00 |
| *** ankita_wagh has joined #openstack-keystone | 21:01 | |
| *** aix has joined #openstack-keystone | 21:01 | |
| morgan | I'd like to have rel managment weigh in | 21:02 |
| morgan | Dhellmann and/or ttx | 21:02 |
| morgan | And/or lifeless | 21:02 |
| lifeless | lookin | 21:03 |
| lifeless | has keystone forked yet? If not I think thats fine since its already a global req | 21:03 |
| morgan | lifeless: if you dont mind just commenting on the review ill unblock/approve it | 21:04 |
| *** jsavak has quit IRC | 21:04 | |
| stevemar | lbragstad: lifeless should be fine to land, its a global req | 21:04 |
| morgan | lifeless: i figure your ack is good for me but i defer to you, doug, and ttx wrt to that :) | 21:05 |
| lbragstad | lifeless: stevemar cool, thanks | 21:05 |
| lifeless | commented | 21:05 |
| morgan | lifeless: tyvm sir | 21:05 |
| *** jsavak has joined #openstack-keystone | 21:05 | |
| *** henrynash has joined #openstack-keystone | 21:07 | |
| *** ChanServ sets mode: +v henrynash | 21:07 | |
| morgan | lbragstad: unblocked +2. | 21:08 |
| morgan | Feel free to approve those as needed/available | 21:08 |
| boltR | does keystone allow for project-specific roles? | 21:08 |
| morgan | stevemar: ^cc | 21:08 |
| *** marzif has quit IRC | 21:09 | |
| *** marzif has joined #openstack-keystone | 21:09 | |
| *** ayoung has quit IRC | 21:09 | |
| *** ayoung_ has quit IRC | 21:09 | |
| stevemar | boltR: you're gonna have to elaborate :) | 21:10 |
| boltR | let's say i want a project admin role | 21:10 |
| boltR | could i have it issued and removed if the user switches between projects? | 21:10 |
| boltR | in horizon | 21:10 |
| boltR | sorry it looks like roles are based on projects as well | 21:16 |
| *** sdake_ has joined #openstack-keystone | 21:16 | |
| *** sdake has quit IRC | 21:20 | |
| *** doug-fish has joined #openstack-keystone | 21:23 | |
| *** doug-fish has quit IRC | 21:24 | |
| *** doug-fish has joined #openstack-keystone | 21:25 | |
| *** mylu has joined #openstack-keystone | 21:25 | |
| *** doug-fish has quit IRC | 21:29 | |
| *** tiny-hands has quit IRC | 21:31 | |
| *** doug-fish has joined #openstack-keystone | 21:37 | |
| *** henrynash has quit IRC | 21:37 | |
| *** devlaps has quit IRC | 21:38 | |
| *** claudiub has quit IRC | 21:40 | |
| openstackgerrit | Matthew Edmonds proposed openstack/keystonemiddleware: only make token invalid when it really is https://review.openstack.org/217373 | 21:41 |
| *** ayoung has joined #openstack-keystone | 21:41 | |
| *** ChanServ sets mode: +v ayoung | 21:41 | |
| *** ayoung_ has joined #openstack-keystone | 21:42 | |
| *** darrenc_ is now known as darrenc | 21:47 | |
| *** diazjf has left #openstack-keystone | 21:50 | |
| *** jamielennox|away is now known as jamielennox | 21:51 | |
| ekarlso | morgan: is the authlib stuff far off ? | 21:51 |
| morgan | ekarlso: it was released | 21:52 |
| morgan | 1.0 | 21:52 |
| ekarlso | morgan: oh, when ? | 21:52 |
| morgan | Last week | 21:53 |
| morgan | It should be in g-r too | 21:53 |
| ekarlso | kewl ! | 21:53 |
| *** sdake_ is now known as sdake | 21:55 | |
| *** erretres has joined #openstack-keystone | 21:56 | |
| *** edmondsw has quit IRC | 21:57 | |
| *** woodster_ has quit IRC | 21:59 | |
| stevemar | morgan: we released KSA? | 22:00 |
| stevemar | maaaaan | 22:00 |
| stevemar | i miss one day! | 22:00 |
| *** doug-fish has quit IRC | 22:00 | |
| *** Ephur has joined #openstack-keystone | 22:01 | |
| jamielennox | bknudson: i've been a bit out the last few days but am reading the meeting log, do you know what keystoneclient broken to affect middleware? | 22:02 |
| *** sdake_ has joined #openstack-keystone | 22:02 | |
| bknudson | jamielennox: no, I haven't had a chance to look into it enough | 22:02 |
| jamielennox | bknudson: ok, i'll get into it today | 22:03 |
| bknudson | jamielennox: you are the greatest! | 22:03 |
| jamielennox | lol | 22:03 |
| jamielennox | sigmavirus24: can you have a look at https://review.openstack.org/#/c/211686/ | 22:04 |
| jamielennox | sigmavirus24: i'm good with whatever you say there | 22:04 |
| *** sdake has quit IRC | 22:05 | |
| sigmavirus24 | jamielennox: they discussed it during the meeting | 22:10 |
| sigmavirus24 | since all y'all want to support windows, that's fine | 22:10 |
| bknudson | keystone loves windows | 22:10 |
| sigmavirus24 | urllib3 doesn't have ioctl support yet, but I have designs for it | 22:10 |
| sigmavirus24 | and the author is in agreement with those designs | 22:10 |
| *** bknudson has quit IRC | 22:11 | |
| sigmavirus24 | Just comes down to finding time to work on this stuff since I don't care about it outside of work | 22:11 |
| stevemar | is ksc going to get bumped in g-r? | 22:11 |
| stevemar | morgan: lifeless ^ ? | 22:11 |
| sigmavirus24 | And work isn't paying me to work on upstream things anymore | 22:11 |
| jamielennox | sigmavirus24: ok, i didn't see your response there | 22:11 |
| sigmavirus24 | not for now there | 22:11 |
| sigmavirus24 | jamielennox: I hadn't replied there | 22:11 |
| jamielennox | sigmavirus24: :( | 22:11 |
| stevemar | sigmavirus24: i can fix that | 22:11 |
| sigmavirus24 | *not for now at least | 22:11 |
| jamielennox | stevemar: do you want to hold out for the TODO->NOTE thing or i just +A? | 22:12 |
| stevemar | jamielennox: i'm +A on it, you can do it if you want | 22:12 |
| stevemar | TODO->NOTE is so minimal | 22:12 |
| jamielennox | stevemar: right | 22:13 |
| jamielennox | +Aed | 22:13 |
| stevemar | \o/ | 22:13 |
| *** mylu has quit IRC | 22:18 | |
| openstackgerrit | Merged openstack/keystone: Correct docstring for common.authorization https://review.openstack.org/213752 | 22:18 |
| *** jsavak has quit IRC | 22:18 | |
| *** jasonsb has quit IRC | 22:20 | |
| openstackgerrit | Merged openstack/keystone: Build oslo.context RequestContext https://review.openstack.org/218511 | 22:21 |
| *** richm has quit IRC | 22:21 | |
| *** diazjf has joined #openstack-keystone | 22:23 | |
| *** jasonsb has joined #openstack-keystone | 22:24 | |
| *** r-daneel has quit IRC | 22:26 | |
| *** alex_xu has quit IRC | 22:28 | |
| *** ayoung_ has quit IRC | 22:29 | |
| *** ayoung has quit IRC | 22:29 | |
| *** stevemar has quit IRC | 22:29 | |
| *** sigmavirus24 is now known as sigmavirus24_awa | 22:30 | |
| *** zzzeek has quit IRC | 22:30 | |
| *** alex_xu has joined #openstack-keystone | 22:30 | |
| *** zzzeek has joined #openstack-keystone | 22:30 | |
| *** jecarey has quit IRC | 22:31 | |
| *** gordc has quit IRC | 22:31 | |
| *** mylu has joined #openstack-keystone | 22:32 | |
| *** richm has joined #openstack-keystone | 22:35 | |
| *** ankita_w_ has joined #openstack-keystone | 22:38 | |
| *** ankita_wagh has quit IRC | 22:38 | |
| *** hrou has quit IRC | 22:48 | |
| *** ankita_wagh has joined #openstack-keystone | 22:51 | |
| *** ankita___ has joined #openstack-keystone | 22:52 | |
| *** ankita_w_ has quit IRC | 22:55 | |
| *** ankita_wagh has quit IRC | 22:56 | |
| *** browne has quit IRC | 22:59 | |
| lhcheng | dstanek, gyee: found the patch when the middleware test started failing - https://github.com/openstack/python-keystoneclient/commit/26534dadb1d0be00b87b632a038839ab1c18cfe4#diff-222bc2648a0b397493b3512e7b3440de | 23:03 |
| lhcheng | it seems like we used to have "ConnectionError = ConnectionRefused" in the exceptions.py | 23:03 |
| lhcheng | adding the line back seems to have fixed the test failure: https://github.com/openstack/python-keystoneclient/blob/0ecf9b1ab5177fc42d16b4a57e8522769433b156/keystoneclient/exceptions.py#L36 | 23:06 |
| *** stevemar has joined #openstack-keystone | 23:07 | |
| *** ChanServ sets mode: +v stevemar | 23:07 | |
| *** csoukup has quit IRC | 23:08 | |
| openstackgerrit | Merged openstack/python-keystoneclient: Fixes missing socket attribute error during init_poolmanager https://review.openstack.org/211686 | 23:09 |
| dstanek | lhcheng: yeah, that''l probably be a problem :-) | 23:14 |
| dolphm | is there a launchpad project to track bugs in openstack/requirements ? | 23:18 |
| breton | regarding yesterdays mod_wsgi discussuin | 23:23 |
| breton | https://github.com/GrahamDumpleton/mod_wsgi/issues/81 | 23:23 |
| breton | oh, right, it was already posted. | 23:25 |
| jamielennox | lhcheng: we did used to have that, i didn't know it had been removed - it should be added back | 23:25 |
| *** erretres has quit IRC | 23:26 | |
| gyee | lhcheng, good work man! | 23:26 |
| jamielennox | i'm surprised that broke auth_token but | 23:26 |
| lhcheng | jamielennox: I think it is because in our tests, we're raising the error ConnectionError, but we're catching ConnectionRefused. | 23:27 |
| lhcheng | https://github.com/openstack/keystonemiddleware/blob/2970c5b635d8af788ea0e10233b4799cd02853e0/keystonemiddleware/tests/unit/auth_token/test_auth_token_middleware.py#L1523 | 23:27 |
| *** chlong has quit IRC | 23:27 | |
| jamielennox | lhcheng: ergh, this was a result of trying to standardize all the exceptions in oslo so there is now multi layers of compat problems | 23:28 |
| *** chlong has joined #openstack-keystone | 23:28 | |
| jamielennox | lhcheng: good find, if you can put up a patch we can fast approve it | 23:29 |
| jamielennox | get a new release out soon | 23:29 |
| lhcheng | jamielennox: will do | 23:29 |
| lhcheng | do I need to open a bug for this? | 23:29 |
| gyee | there was a similar issuer awhile back with redefining oslo common exceptions | 23:30 |
| jamielennox | lhcheng: i think there is one | 23:30 |
| jamielennox | gyee: yea, this was where it came from | 23:30 |
| lhcheng | jamielennox: okay, I'll look it up | 23:30 |
| *** shaleh has quit IRC | 23:30 | |
| jamielennox | lhcheng: https://bugs.launchpad.net/python-keystoneclient/+bug/1492600 | 23:30 |
| openstack | Launchpad bug 1492600 in python-keystoneclient "Session._send_request(...) doesnt catch the exception properly" [Critical,In progress] - Assigned to Dave Chen (wei-d-chen) | 23:30 |
| gyee | wow, so this is the second time we had this issue now | 23:30 |
| jamielennox | gyee: i really hated that oslo apiclient thing | 23:31 |
| gyee | jamielennox, no disagreement here :) | 23:31 |
| openstackgerrit | Merged openstack/keystone: Updated from global requirements https://review.openstack.org/221392 | 23:33 |
| *** ayoung has joined #openstack-keystone | 23:38 | |
| *** ChanServ sets mode: +v ayoung | 23:38 | |
| *** ayoung_ has joined #openstack-keystone | 23:38 | |
| *** jasonsb has quit IRC | 23:41 | |
| openstackgerrit | Lin Hua Cheng proposed openstack/python-keystoneclient: Adding back exception mapping for ConnectionError https://review.openstack.org/221543 | 23:42 |
| *** hrou has joined #openstack-keystone | 23:44 | |
| *** phalmos has quit IRC | 23:47 | |
| *** shoutm has joined #openstack-keystone | 23:49 | |
| *** browne has joined #openstack-keystone | 23:50 | |
| *** mylu has quit IRC | 23:50 | |
| *** mylu has joined #openstack-keystone | 23:51 | |
| *** mylu_ has joined #openstack-keystone | 23:55 | |
| *** mylu has quit IRC | 23:55 | |
| openstackgerrit | Craige McWhirter proposed openstack/python-keystoneclient-kerberos: Use stevedore.sphinxext to populate a new page listing all available drivers. https://review.openstack.org/221547 | 23:56 |
| *** woodster_ has joined #openstack-keystone | 23:57 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!