| *** spandhe has joined #openstack-keystone | 00:06 | |
| *** gus_ is now known as gus | 00:07 | |
| *** chlong has joined #openstack-keystone | 00:10 | |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Refactor: Don't hard code the error code https://review.openstack.org/198623 | 00:22 |
|---|---|---|
| *** shadower has quit IRC | 00:23 | |
| *** shadower has joined #openstack-keystone | 00:23 | |
| stevemar | bknudson: oof, thats a lot of re-write | 00:24 |
| bknudson | stevemar: and it's incomplete. | 00:25 |
| stevemar | bknudson: missing some tests i guess? | 00:25 |
| stevemar | i'm okay with that | 00:25 |
| stevemar | follow on patch could fix that | 00:26 |
| bknudson | stevemar: there are a lot of references to HTTP error codes that aren't changed. | 00:26 |
| *** ericksonsantos has quit IRC | 00:30 | |
| *** ericksonsantos has joined #openstack-keystone | 00:35 | |
| *** rdo has quit IRC | 00:50 | |
| *** rdo has joined #openstack-keystone | 00:52 | |
| openstackgerrit | Merged openstack/keystoneauth: Move session loading tests into loading section https://review.openstack.org/222016 | 00:52 |
| *** spandhe_ has joined #openstack-keystone | 00:53 | |
| *** spandhe has quit IRC | 00:54 | |
| *** spandhe_ is now known as spandhe | 00:54 | |
| *** chlong has quit IRC | 01:02 | |
| stevemar | bknudson: thanks for reviewing the policy patch | 01:08 |
| *** openstackgerrit has quit IRC | 01:16 | |
| *** openstackgerrit has joined #openstack-keystone | 01:17 | |
| openstackgerrit | Merged openstack/oslo.policy: remove deprecation text for policy_dirs option https://review.openstack.org/222466 | 01:25 |
| *** davechen has joined #openstack-keystone | 01:31 | |
| davechen | bknudson: thanks so much for helping fixing so many grammar issue in the patch (https://review.openstack.org/#/c/198623/) :) | 01:33 |
| *** davechen1 has joined #openstack-keystone | 01:42 | |
| *** davechen has quit IRC | 01:45 | |
| *** chlong has joined #openstack-keystone | 01:53 | |
| *** davechen has joined #openstack-keystone | 01:58 | |
| openstackgerrit | Merged openstack/keystone: Refactor: Don't hard code the error code https://review.openstack.org/198623 | 01:58 |
| *** davechen1 has quit IRC | 02:00 | |
| *** geoffarnold is now known as geoffarnoldX | 02:01 | |
| *** mylu has joined #openstack-keystone | 02:06 | |
| *** jamielennox|away is now known as jamielennox | 02:14 | |
| *** mylu has quit IRC | 02:15 | |
| stevemar | davechen: we're happy to help | 02:16 |
| *** mylu has joined #openstack-keystone | 02:17 | |
| *** dimsum__ has quit IRC | 02:17 | |
| *** tobe has joined #openstack-keystone | 02:24 | |
| *** tobe has quit IRC | 02:24 | |
| davechen | stevemar: :) | 02:26 |
| davechen | stevemar: for that patch, still need to replace 2xx and 500xx, change is huge somehow. | 02:27 |
| stevemar | davechen: yeah, i figured there were more to replace but its all good | 02:28 |
| jamielennox | mordred: by a quick look on github heatclient should support session | 02:28 |
| davechen | stevemar: if we get those done, these will be a standard for the new testcases. :) | 02:28 |
| stevemar | davechen: yep, thats the hope | 02:29 |
| davechen | jamielennox: bug 1494327 is imported by this commits (https://review.openstack.org/#/c/216579). | 02:29 |
| openstack | bug 1494327 in keystonemiddleware "DuplicateOptError intermittently breaks UT" [High,In progress] https://launchpad.net/bugs/1494327 - Assigned to Dave Chen (wei-d-chen) | 02:29 |
| *** csoukup has joined #openstack-keystone | 02:30 | |
| jamielennox | mordred: endpoint_type looks broken | 02:30 |
| jamielennox | davechen: yea i came to that conclusion as well. i have no idea why | 02:31 |
| *** csoukup has quit IRC | 02:31 | |
| jamielennox | well i have some idea but i don't know why it would show up now or why it worked before | 02:31 |
| davechen | there might be more easy way to address this bug by just remove username from the conf, but this is not flexible, and it not allowed us to register these conf with the new values. | 02:31 |
| davechen | so, i do some change to unregister those effected conf options after testcases. | 02:32 |
| jamielennox | it's not the coffee that's broken it's the test in that review. it instantiates two copies of auth_token and they are registering different plugins on a global object | 02:32 |
| jamielennox | code - typing on phone | 02:33 |
| davechen | oslo-config allow the conf options with the same value but not allow to register with the new value, you have given the new value in the testcase, so, it's broken. | 02:33 |
| davechen | i think it is not make sense that all of the testcase and maybe the testcase in the future should keep using the default. | 02:35 |
| *** markvoelker has joined #openstack-keystone | 02:43 | |
| *** Nirupama has joined #openstack-keystone | 02:44 | |
| *** sdake has joined #openstack-keystone | 02:44 | |
| *** mylu has quit IRC | 02:46 | |
| *** markvoelker has quit IRC | 02:48 | |
| *** stevemar has quit IRC | 02:51 | |
| davechen | jamielennox: it instantiates two copies of auth_token, but they are using the same ConfigOpts | 02:51 |
| *** dave-mccowan has quit IRC | 02:52 | |
| *** stevemar has joined #openstack-keystone | 02:52 | |
| *** ChanServ sets mode: +v stevemar | 02:52 | |
| jamielennox | right, one time send to register the password plugin, one time the v3 password plugin and the help text for username is different so it fails | 02:53 |
| *** sdake_ has joined #openstack-keystone | 02:56 | |
| davechen | and not just usename, in my test user_id also cause the failure. | 02:56 |
| davechen | jamielennox: that means it will also fail some testcase before that commit, but not such frequently. | 02:57 |
| *** sdake has quit IRC | 02:59 | |
| jamielennox | i don't know how that test case changed others, i think there is some problems in how CONF is being reused | 03:00 |
| davechen | jamielennox: looked into the oslo-config, it just refuse to register the different value for the same option, but okay if the reuse it with the same value. | 03:01 |
| davechen | code is here, https://github.com/openstack/oslo.config/blob/master/oslo_config/cfg.py#L572-L574 | 03:03 |
| *** geoffarnoldX is now known as geoffarnold | 03:04 | |
| *** mylu has joined #openstack-keystone | 03:05 | |
| davechen | jamielennox: IMO, your testcase is not the root cause, it just make the issue happened more frequent, such as the different user_id, and password used in the V2/V3 plugin can also cause the failure. | 03:05 |
| *** sdake has joined #openstack-keystone | 03:06 | |
| jamielennox | davechen: yep, so it should allow you to register the exact same options multiple times, but it won't let you register two different options with the same name | 03:06 |
| jamielennox | in this case we have two different plugins registering a username option | 03:06 |
| bknudson | why doesn't it fail every time? | 03:07 |
| davechen | jamielennox: agreed, but should allow in our testcase | 03:07 |
| jamielennox | and yes i don't think that patch is the actual problem, it's just more complex than most of the other test s | 03:07 |
| jamielennox | bknudson: it has been for me when trying it, but I've no idea what changed to make it start | 03:08 |
| bknudson | does this test need to be complex? | 03:08 |
| davechen | bknudson: I cannot figure out the reason. | 03:08 |
| bknudson | if you can recreate it set a breakpoint | 03:08 |
| *** sdake_ has quit IRC | 03:09 | |
| jamielennox | bknudson: so there is some state contamination going on, of you run each test individually it's fine | 03:09 |
| *** roxanagh_ has quit IRC | 03:09 | |
| jamielennox | so breakpoints become harder | 03:09 |
| bknudson | seems like the config fixture should be creating a fresh config every time | 03:09 |
| davechen | sure, run each test individually is fine | 03:10 |
| jamielennox | i would have thought so | 03:10 |
| davechen | bknudson: config fixture has already did this, but these conf opitons is registered out of config fixture. | 03:11 |
| davechen | so, it will not been unregistered after the test. | 03:11 |
| bknudson | if you run the tests serially it might fail every time. | 03:12 |
| bknudson | maybe the tests need to be run in the same worker | 03:12 |
| davechen | bknudson: in my dugging (set breakpoint), it fail every time. | 03:12 |
| davechen | *debugging. | 03:13 |
| bknudson | the steps to recreate should be put in the bug report if they're not there already | 03:13 |
| jamielennox | oh, that's right, because auth_token registers it's options in __init__ rather than load because people have different CONF objects | 03:14 |
| davechen | bknudson: run in the same worker doesn't fix the issue, they are using the same ConfigOpts, so it will not be allowed to register with different value for the same option. | 03:14 |
| davechen | bknudson: will do. | 03:15 |
| davechen | believe me, username is not the only option that cause the failure, but we cannot clean all of these options since they are used widly in the testcases. | 03:17 |
| *** fifieldt has joined #openstack-keystone | 03:18 | |
| *** dimsum__ has joined #openstack-keystone | 03:20 | |
| *** sdake_ has joined #openstack-keystone | 03:20 | |
| *** mylu has quit IRC | 03:22 | |
| *** mylu has joined #openstack-keystone | 03:23 | |
| *** sigmavirus24_awa has quit IRC | 03:23 | |
| *** sdake has quit IRC | 03:24 | |
| *** eglute has quit IRC | 03:25 | |
| *** ayoung has quit IRC | 03:26 | |
| *** dolphm has quit IRC | 03:27 | |
| *** d34dh0r53 has quit IRC | 03:27 | |
| *** erhudy1 has quit IRC | 03:28 | |
| *** dolphm has joined #openstack-keystone | 03:29 | |
| *** d34dh0r53 has joined #openstack-keystone | 03:29 | |
| *** links has joined #openstack-keystone | 03:29 | |
| *** eglute has joined #openstack-keystone | 03:29 | |
| *** ayoung has joined #openstack-keystone | 03:31 | |
| *** ChanServ sets mode: +v ayoung | 03:31 | |
| *** sigmavirus24_awa has joined #openstack-keystone | 03:32 | |
| *** btully has joined #openstack-keystone | 03:35 | |
| *** dimsum__ has quit IRC | 03:39 | |
| *** btully has quit IRC | 03:40 | |
| *** lhcheng has joined #openstack-keystone | 03:48 | |
| *** ChanServ sets mode: +v lhcheng | 03:48 | |
| *** sdake has joined #openstack-keystone | 03:49 | |
| *** sdake_ has quit IRC | 03:52 | |
| *** ayoung has quit IRC | 04:01 | |
| *** chlong has quit IRC | 04:02 | |
| *** geoffarnold is now known as geoffarnoldX | 04:06 | |
| *** spandhe has quit IRC | 04:25 | |
| *** lhcheng has quit IRC | 04:31 | |
| *** jasonsb has joined #openstack-keystone | 04:39 | |
| *** dimsum__ has joined #openstack-keystone | 04:39 | |
| *** geoffarnoldX is now known as geoffarnold | 04:40 | |
| *** pcaruana has quit IRC | 04:43 | |
| *** markvoelker has joined #openstack-keystone | 04:45 | |
| *** dimsum__ has quit IRC | 04:46 | |
| stevemar | hmm, theres no way to get a catalog without authenticating eh | 04:47 |
| stevemar | i wonder if theres a way to uniquely define each "cloud" / openstack deployment | 04:48 |
| stevemar | hostname and IP address could work, but theres gonna be a bunch of 10.0.1.y's and 127.0.0.1's | 04:48 |
| *** markvoelker has quit IRC | 04:49 | |
| *** btully has joined #openstack-keystone | 04:50 | |
| *** lhcheng has joined #openstack-keystone | 04:52 | |
| *** ChanServ sets mode: +v lhcheng | 04:52 | |
| *** chlong has joined #openstack-keystone | 05:03 | |
| *** mylu has quit IRC | 05:04 | |
| *** jasonsb has quit IRC | 05:09 | |
| *** jerrygb has quit IRC | 05:12 | |
| *** hrou has quit IRC | 05:13 | |
| *** mylu has joined #openstack-keystone | 05:14 | |
| *** links has quit IRC | 05:16 | |
| *** sdake_ has joined #openstack-keystone | 05:17 | |
| *** links has joined #openstack-keystone | 05:17 | |
| *** roxanagh_ has joined #openstack-keystone | 05:18 | |
| *** mylu has quit IRC | 05:19 | |
| *** sdake has quit IRC | 05:20 | |
| *** urulama has joined #openstack-keystone | 05:23 | |
| *** chlong has quit IRC | 05:30 | |
| *** links has quit IRC | 05:31 | |
| *** geoffarnold is now known as geoffarnoldX | 05:43 | |
| *** links has joined #openstack-keystone | 05:44 | |
| *** chlong has joined #openstack-keystone | 05:45 | |
| *** roxanagh_ has quit IRC | 05:48 | |
| *** roxanagh_ has joined #openstack-keystone | 05:48 | |
| *** roxanagh_ has quit IRC | 05:57 | |
| *** topol has quit IRC | 05:57 | |
| *** roxanagh_ has joined #openstack-keystone | 05:58 | |
| *** roxanagh_ has quit IRC | 06:02 | |
| *** chlong has quit IRC | 06:06 | |
| *** chlong has joined #openstack-keystone | 06:09 | |
| *** chlong has quit IRC | 06:11 | |
| *** chlong has joined #openstack-keystone | 06:11 | |
| *** _cjones_ has joined #openstack-keystone | 06:15 | |
| *** _cjones_ has quit IRC | 06:17 | |
| *** _cjones_ has joined #openstack-keystone | 06:17 | |
| *** pnavarro has joined #openstack-keystone | 06:27 | |
| *** ParsectiX has joined #openstack-keystone | 06:27 | |
| *** ankita_wagh has joined #openstack-keystone | 06:27 | |
| *** nakamura has quit IRC | 06:42 | |
| *** hidekazu has joined #openstack-keystone | 06:43 | |
| *** markvoelker has joined #openstack-keystone | 06:45 | |
| *** markvoelker has quit IRC | 06:50 | |
| *** lsmola has joined #openstack-keystone | 06:52 | |
| *** pcaruana has joined #openstack-keystone | 06:53 | |
| *** roxanagh_ has joined #openstack-keystone | 06:59 | |
| *** henrynash has joined #openstack-keystone | 07:00 | |
| *** ChanServ sets mode: +v henrynash | 07:00 | |
| *** roxanagh_ has quit IRC | 07:04 | |
| *** pnavarro has quit IRC | 07:14 | |
| *** pnavarro has joined #openstack-keystone | 07:14 | |
| *** ankita_wagh has quit IRC | 07:18 | |
| *** ankita_wagh has joined #openstack-keystone | 07:19 | |
| *** ankita_wagh has quit IRC | 07:24 | |
| *** drjones has joined #openstack-keystone | 07:25 | |
| *** btully has quit IRC | 07:26 | |
| *** _cjones_ has quit IRC | 07:28 | |
| *** drjones has quit IRC | 07:29 | |
| *** lhcheng has quit IRC | 07:30 | |
| *** _cjones_ has joined #openstack-keystone | 07:30 | |
| *** drjones has joined #openstack-keystone | 07:31 | |
| *** _cjones_ has quit IRC | 07:35 | |
| *** drjones has quit IRC | 07:35 | |
| *** stevemar has quit IRC | 07:41 | |
| *** boris-42 has joined #openstack-keystone | 07:52 | |
| openstackgerrit | Merged openstack/keystone: Get method's class name in a python3-compatible way https://review.openstack.org/158777 | 07:52 |
| *** chlong has quit IRC | 07:53 | |
| *** fhubik has joined #openstack-keystone | 07:57 | |
| *** jistr has joined #openstack-keystone | 08:18 | |
| *** roxanagh_ has joined #openstack-keystone | 08:18 | |
| *** roxanagh_ has quit IRC | 08:23 | |
| *** dimsum__ has joined #openstack-keystone | 08:44 | |
| *** markvoelker has joined #openstack-keystone | 08:46 | |
| *** fhubik is now known as fhubik_brb | 08:47 | |
| *** markvoelker has quit IRC | 08:51 | |
| *** e0ne has joined #openstack-keystone | 08:51 | |
| *** dimsum__ has quit IRC | 08:51 | |
| *** fhubik_brb is now known as fhubik | 08:53 | |
| *** tobe has joined #openstack-keystone | 08:56 | |
| *** henrynash has quit IRC | 08:56 | |
| *** tobe has quit IRC | 08:56 | |
| *** vivekd has joined #openstack-keystone | 08:57 | |
| *** e0ne has quit IRC | 09:03 | |
| *** samueldmq has joined #openstack-keystone | 09:13 | |
| *** e0ne has joined #openstack-keystone | 09:16 | |
| *** lhcheng has joined #openstack-keystone | 09:18 | |
| *** ChanServ sets mode: +v lhcheng | 09:18 | |
| *** katkapilatova has joined #openstack-keystone | 09:22 | |
| *** lhcheng has quit IRC | 09:23 | |
| *** aix has quit IRC | 09:37 | |
| openstackgerrit | Hidekazu Nakamura proposed openstack/keystone: Update development environment set up doc https://review.openstack.org/223020 | 09:41 |
| *** henrynash has joined #openstack-keystone | 09:48 | |
| *** ChanServ sets mode: +v henrynash | 09:48 | |
| *** davechen has left #openstack-keystone | 09:52 | |
| *** EinstCrazy has joined #openstack-keystone | 09:59 | |
| *** roxanagh_ has joined #openstack-keystone | 10:07 | |
| *** dimsum__ has joined #openstack-keystone | 10:11 | |
| *** henrynash has quit IRC | 10:11 | |
| *** roxanagh_ has quit IRC | 10:12 | |
| *** martinus__ has joined #openstack-keystone | 10:16 | |
| *** openstackgerrit has quit IRC | 10:16 | |
| *** openstackgerrit has joined #openstack-keystone | 10:17 | |
| *** henrynash has joined #openstack-keystone | 10:19 | |
| *** ChanServ sets mode: +v henrynash | 10:19 | |
| *** fhubik is now known as fhubik_brb | 10:19 | |
| *** fhubik_brb is now known as fhubik | 10:30 | |
| mordred | jamielennox: but heatclient/v1/client.py class Client has a required arg "endpoint" | 10:32 |
| jamielennox | mordred: is it morning there already | 10:33 |
| mordred | jamielennox: (I mean http.common construct_http_client | 10:33 |
| mordred | jamielennox: I'm in Germany at the moment :) | 10:33 |
| jamielennox | ah | 10:33 |
| mordred | jamielennox: oh - so - actually, you're right - I see the SessionClient | 10:34 |
| jamielennox | yea, it should be based on session being in kwargs, but i haven't tried it for a while | 10:35 |
| mordred | jamielennox: I missed the _ in the construct_http_client and instead looked at the one without a _ | 10:35 |
| mordred | that's much better | 10:35 |
| jamielennox | there's two? these are so bad | 10:35 |
| mordred | jamielennox: not really - looking at it against I just suck a lot | 10:36 |
| mordred | jamielennox: ok. I fixed the shade patch. it looks much better now - thanks for the eyeballs | 10:41 |
| *** shoutm has joined #openstack-keystone | 10:47 | |
| *** markvoelker has joined #openstack-keystone | 10:47 | |
| *** henrynash has quit IRC | 10:49 | |
| *** e0ne has quit IRC | 10:49 | |
| *** markvoelker has quit IRC | 10:51 | |
| *** henrynash has joined #openstack-keystone | 10:53 | |
| *** ChanServ sets mode: +v henrynash | 10:53 | |
| *** bapalm has quit IRC | 10:58 | |
| *** jacorob has quit IRC | 10:58 | |
| *** mgagne has quit IRC | 10:58 | |
| *** Guest18499 has quit IRC | 10:58 | |
| *** jacorob has joined #openstack-keystone | 10:58 | |
| *** blewis has joined #openstack-keystone | 10:58 | |
| *** blewis is now known as Guest60363 | 10:59 | |
| *** chlong has joined #openstack-keystone | 11:00 | |
| *** bapalm has joined #openstack-keystone | 11:01 | |
| *** mgagne has joined #openstack-keystone | 11:01 | |
| *** mgagne is now known as Guest12514 | 11:01 | |
| *** lhcheng has joined #openstack-keystone | 11:08 | |
| *** ChanServ sets mode: +v lhcheng | 11:08 | |
| *** aix has joined #openstack-keystone | 11:10 | |
| *** lhcheng has quit IRC | 11:13 | |
| *** samueldmq has quit IRC | 11:14 | |
| *** mylu has joined #openstack-keystone | 11:21 | |
| *** henrynash has quit IRC | 11:23 | |
| *** mylu has quit IRC | 11:26 | |
| *** martinus__ has quit IRC | 11:26 | |
| *** e0ne has joined #openstack-keystone | 11:28 | |
| *** gordc has joined #openstack-keystone | 11:30 | |
| *** boris-42 has quit IRC | 11:30 | |
| *** jistr is now known as jistr|biab | 11:30 | |
| *** lhcheng has joined #openstack-keystone | 11:32 | |
| *** ChanServ sets mode: +v lhcheng | 11:32 | |
| *** dave-mccowan has joined #openstack-keystone | 11:36 | |
| *** lhcheng has quit IRC | 11:36 | |
| *** dikonoor has joined #openstack-keystone | 11:41 | |
| dikonoor | bknudson:Hi bknudson | 11:42 |
| dikonoor | bknudson:This is about https://bugs.launchpad.net/oslo.db/+bug/1374497 | 11:42 |
| openstack | Launchpad bug 1374497 in oslo.db juno "change in oslo.db "ping" handling is causing issues in projects that are not using transactions" [High,Fix released] - Assigned to Mike Bayer (zzzeek) | 11:42 |
| dikonoor | bknudson : This bug has a comment from you that says - "There's a fix in oslo.db. The work to update Keystone will be part of a spec or blueprint to use new features in oslo.db once they're ready. I don't think it's worth keeping a bug open." | 11:43 |
| dikonoor | bknudson : Do you know if where i can find this spec | 11:44 |
| *** chlong_ has joined #openstack-keystone | 11:44 | |
| *** e0ne has quit IRC | 11:46 | |
| *** shoutm has quit IRC | 11:47 | |
| *** markvoelker has joined #openstack-keystone | 11:48 | |
| *** chlong_ has quit IRC | 11:48 | |
| *** e0ne has joined #openstack-keystone | 11:52 | |
| *** iurygregory has joined #openstack-keystone | 11:52 | |
| *** iurygregory_ has joined #openstack-keystone | 11:52 | |
| *** iurygregory_ has quit IRC | 11:52 | |
| *** iurygregory has quit IRC | 11:52 | |
| *** markvoelker has quit IRC | 11:52 | |
| *** iurygregory has joined #openstack-keystone | 11:53 | |
| *** iurygregory has quit IRC | 11:53 | |
| *** iurygregory_ has joined #openstack-keystone | 11:53 | |
| *** iurygregory_ is now known as iurygregory | 11:54 | |
| *** roxanagh_ has joined #openstack-keystone | 11:56 | |
| *** Nirupama has quit IRC | 11:57 | |
| *** EinstCrazy has quit IRC | 11:57 | |
| *** e0ne has quit IRC | 11:59 | |
| *** vivekd_ has joined #openstack-keystone | 11:59 | |
| *** vivekd has quit IRC | 12:01 | |
| *** vivekd_ is now known as vivekd | 12:01 | |
| *** roxanagh_ has quit IRC | 12:01 | |
| *** e0ne has joined #openstack-keystone | 12:01 | |
| *** raildo-afk is now known as raildo | 12:11 | |
| *** openstackgerrit has quit IRC | 12:16 | |
| *** openstackgerrit has joined #openstack-keystone | 12:17 | |
| *** vivekd has quit IRC | 12:18 | |
| *** markvoelker has joined #openstack-keystone | 12:24 | |
| *** jistr|biab is now known as jistr | 12:24 | |
| *** henrynash has joined #openstack-keystone | 12:26 | |
| *** ChanServ sets mode: +v henrynash | 12:26 | |
| *** edmondsw has joined #openstack-keystone | 12:31 | |
| *** doug-fish has joined #openstack-keystone | 12:33 | |
| *** toddnni has quit IRC | 12:36 | |
| bknudson | dikonoor: keystone is already using oslo.db. | 12:37 |
| dikonoor | bknudson:I was running into a similar error | 12:40 |
| *** toddnni has joined #openstack-keystone | 12:41 | |
| *** toddnni has quit IRC | 12:46 | |
| dikonoor | bknudson: could you point me to the patch / review | 12:47 |
| bknudson | dikonoor: the patch is in the bug : https://review.openstack.org/#/c/124466/ | 12:47 |
| *** dimsum__ has quit IRC | 12:48 | |
| *** dims has joined #openstack-keystone | 12:48 | |
| *** dguerri` is now known as dguerri | 12:49 | |
| *** dguerri is now known as dguerri` | 12:50 | |
| dikonoor | bknudson:thanks | 12:51 |
| *** fhubik is now known as fhubik_brb | 12:52 | |
| *** dguerri` has quit IRC | 12:54 | |
| *** ninag has joined #openstack-keystone | 12:59 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: Consolidate the fernet provider issue_v2_token() https://review.openstack.org/197647 | 13:01 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: Consolidate the fernet provider validate_v3_token() https://review.openstack.org/196877 | 13:01 |
| *** iurygregory has left #openstack-keystone | 13:04 | |
| *** hrou has joined #openstack-keystone | 13:07 | |
| *** samueldmq has joined #openstack-keystone | 13:09 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: Additional documentation for services https://review.openstack.org/211184 | 13:10 |
| samueldmq | morning | 13:12 |
| *** raildo is now known as raildo-afk | 13:13 | |
| *** openstackgerrit has quit IRC | 13:16 | |
| *** raildo-afk is now known as raildo | 13:16 | |
| *** openstackgerrit has joined #openstack-keystone | 13:17 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: Add caching to get_catalog https://review.openstack.org/215212 | 13:18 |
| *** raildo is now known as raildo-afk | 13:25 | |
| *** jecarey has joined #openstack-keystone | 13:25 | |
| *** fhubik_brb is now known as fhubik | 13:28 | |
| *** jsavak has joined #openstack-keystone | 13:29 | |
| *** sdake_ is now known as sdake | 13:30 | |
| *** raildo-afk is now known as raildo | 13:35 | |
| *** toddnni has joined #openstack-keystone | 13:41 | |
| *** r-daneel has joined #openstack-keystone | 13:47 | |
| *** toddnni has quit IRC | 13:49 | |
| *** shoutm has joined #openstack-keystone | 13:52 | |
| *** boris-42 has joined #openstack-keystone | 13:59 | |
| *** sigmavirus24_awa is now known as sigmavirus24 | 14:00 | |
| *** jsavak has quit IRC | 14:03 | |
| *** zzzeek has joined #openstack-keystone | 14:04 | |
| *** links has quit IRC | 14:04 | |
| *** jsavak has joined #openstack-keystone | 14:05 | |
| *** richm has joined #openstack-keystone | 14:06 | |
| *** ParsectiX has quit IRC | 14:09 | |
| *** btully has joined #openstack-keystone | 14:09 | |
| *** amakarov_away is now known as amakarov | 14:12 | |
| *** EinstCrazy has joined #openstack-keystone | 14:14 | |
| *** roxanagh_ has joined #openstack-keystone | 14:16 | |
| *** slberger has joined #openstack-keystone | 14:17 | |
| *** david-lyle has quit IRC | 14:19 | |
| *** toddnni has joined #openstack-keystone | 14:19 | |
| *** ChanServ sets mode: +o dolphm | 14:20 | |
| *** roxanag__ has joined #openstack-keystone | 14:21 | |
| *** roxanagh_ has quit IRC | 14:22 | |
| *** iurygregory has joined #openstack-keystone | 14:24 | |
| *** lsmola has quit IRC | 14:27 | |
| *** katkapilatova has quit IRC | 14:27 | |
| *** aix has quit IRC | 14:27 | |
| *** pcaruana has quit IRC | 14:27 | |
| *** fhubik has quit IRC | 14:27 | |
| *** jorge_munoz has joined #openstack-keystone | 14:27 | |
| *** jistr has quit IRC | 14:27 | |
| *** sdake has quit IRC | 14:36 | |
| *** geoffarnoldX is now known as geoffarnold | 14:36 | |
| *** roxanag__ has quit IRC | 14:38 | |
| *** aix has joined #openstack-keystone | 14:39 | |
| *** lsmola has joined #openstack-keystone | 14:40 | |
| *** pcaruana has joined #openstack-keystone | 14:40 | |
| *** roxanagh_ has joined #openstack-keystone | 14:40 | |
| *** jistr has joined #openstack-keystone | 14:41 | |
| *** katkapilatova has joined #openstack-keystone | 14:41 | |
| *** pnavarro is now known as pnavarro|afk | 14:43 | |
| *** jsavak has quit IRC | 14:45 | |
| *** jsavak has joined #openstack-keystone | 14:46 | |
| *** jsavak has quit IRC | 14:49 | |
| *** jsavak has joined #openstack-keystone | 14:50 | |
| *** tonytan4ever has joined #openstack-keystone | 14:50 | |
| *** thiagop has joined #openstack-keystone | 14:52 | |
| *** roxanagh_ has quit IRC | 14:53 | |
| *** thiagop has quit IRC | 14:58 | |
| openstackgerrit | Merged openstack/keystone: Use /auth/projects in tests https://review.openstack.org/217266 | 15:05 |
| *** jerrygb has joined #openstack-keystone | 15:06 | |
| *** david-lyle has joined #openstack-keystone | 15:06 | |
| *** shoutm has quit IRC | 15:11 | |
| *** thiagop has joined #openstack-keystone | 15:12 | |
| *** phalmos has joined #openstack-keystone | 15:14 | |
| lbragstad | dolphm: quick question you had on the patch for revocation events and the comparison to fernet timestamps. The last few failures here are because the POST token operation is happening in the same second as the revocation event - https://review.openstack.org/#/c/195780/ | 15:15 |
| lbragstad | I thought https://review.openstack.org/#/c/216236/4 was suppose to help address that? | 15:15 |
| *** stevemar has joined #openstack-keystone | 15:16 | |
| *** ChanServ sets mode: +v stevemar | 15:16 | |
| dolphm | lbragstad: it causes those tokens to be revoked, intentionally, by using <= instead of < | 15:16 |
| dolphm | lbragstad: the tempest test should be updated to sleep for 1.0 seconds, then? | 15:16 |
| *** nkinder has joined #openstack-keystone | 15:17 | |
| *** pcaruana has quit IRC | 15:19 | |
| lbragstad | dolphm: for some reason I was thinking the fix was in removing subsecond precision from revocation events, but then I started look at the data, and it doesn't have it anyway | 15:20 |
| dolphm | lbragstad: in the revocation event? | 15:20 |
| lbragstad | dolphm: right, or at least when I look at the data (i'm using sql) | 15:20 |
| dolphm | lbragstad: i think we write subsecond precision to the db, but mysql discards it | 15:21 |
| dolphm | (5.5 truncates) | 15:21 |
| lbragstad | ++ | 15:21 |
| lbragstad | yeah, i think that's right | 15:21 |
| dolphm | http://dev.mysql.com/doc/refman/5.6/en/fractional-seconds.html | 15:21 |
| dolphm | 5.6.4 is the magic version number | 15:21 |
| dolphm | 'mysql-server' installs 5.5.44 in ubuntu 14.04 right now, unless you specify 'mysql-server-56', in which case you get 5.6.19 | 15:23 |
| dolphm | but as of a couple releases ago, neutron would fail catastrophically with 5.6.* because of it's inability to perform transactions correctly, iirc, so 5.6 isn't (or, wasn't_ an option for devstack | 15:24 |
| dolphm | lbragstad: ^ | 15:24 |
| lbragstad | makes sense | 15:24 |
| lbragstad | so, one fix might be to introduce a higher sql version number? | 15:25 |
| dolphm | lbragstad: to fix keystone alone, yes | 15:25 |
| lbragstad | because then revocation events would have subsecond precision; while fernet tokens would still be rounded to the second | 15:25 |
| lbragstad | dolphm: apt-get upgrade mysql-server just gave me version 5.6.25 | 15:30 |
| *** phalmos has quit IRC | 15:30 | |
| *** aix has quit IRC | 15:31 | |
| dolphm | lbragstad: ah, actually.... either morgan or bknudson pointed out that if fernet tokens have truncated precision and revocation events have subsecond precision, then a fernet token quickly issued after a revocation event is effectively issued in the past, so mysql-server version won't help that case :-/ | 15:31 |
| lbragstad | dolphm: oh... good point | 15:32 |
| dolphm | lbragstad: in the real world, that behavior is errs on the side of security though, so i suppose i'm still inclined to slow the tempest test down | 15:32 |
| bknudson | tokens should all work the same way | 15:33 |
| bknudson | so if fernet is seconds-precision then make all providers to the second | 15:33 |
| lbragstad | is mtreinish around? | 15:33 |
| morgan | bknudson: ++ | 15:33 |
| *** kfox1111_away is now known as kfox1111 | 15:33 | |
| *** woodster_ has joined #openstack-keystone | 15:33 | |
| *** phalmos has joined #openstack-keystone | 15:34 | |
| *** diazjf has joined #openstack-keystone | 15:35 | |
| *** ankita_wagh has joined #openstack-keystone | 15:45 | |
| morgan | dolphm: I am ok with revocation events being issue-1 second or having a 1second window where a token is "in the past" and automatically invalid (this second option is better from a security standpoint) cc lbragstad | 15:47 |
| lbragstad | morgan: wouldn't that be revoke_map['issued_at'] + 1 | 15:48 |
| lbragstad | ? | 15:48 |
| *** haneef has quit IRC | 15:48 | |
| lbragstad | with the removal of subsecond precision | 15:49 |
| morgan | lbragstad: either round up or down | 15:49 |
| morgan | Both are fine | 15:49 |
| morgan | Round up is more secure | 15:49 |
| lbragstad | morgan: right | 15:49 |
| morgan | So I recommend that. | 15:50 |
| *** katkapilatova has left #openstack-keystone | 15:50 | |
| morgan | Just make sure to truncate the microseconds or not use sub second=true | 15:50 |
| dolphm | i don't like mysql's datetime support | 15:52 |
| *** EinstCrazy has quit IRC | 15:54 | |
| *** jistr has quit IRC | 15:55 | |
| *** jsavak has quit IRC | 15:57 | |
| bknudson | can computers really do things in less than a second? | 15:57 |
| bknudson | can't imagine why anyone would need sub-second precision. | 15:57 |
| *** jsavak has joined #openstack-keystone | 15:58 | |
| morgan | bknudson: subsecond is guaranteed within a single system to be accurate but drift prevents coordination across multiple systems. Unless you have some crazy $$$$ rtc chip | 16:00 |
| morgan | It was useful for guaranteeing unique information in the tokens (pki hack) and not much else | 16:01 |
| *** openstackgerrit has quit IRC | 16:01 | |
| bknudson | that's a good point if you're running multiple keystones you'd get tokens issued at random times. | 16:01 |
| *** openstackgerrit has joined #openstack-keystone | 16:02 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: Remove subsecond precision from revocation events https://review.openstack.org/223202 | 16:04 |
| *** Guest12514 is now known as mgagne | 16:05 | |
| *** mgagne has joined #openstack-keystone | 16:05 | |
| *** geoffarnold is now known as geoffarnoldX | 16:06 | |
| *** jsavak has quit IRC | 16:06 | |
| *** jsavak has joined #openstack-keystone | 16:06 | |
| bknudson | http://docs.oracle.com/cd/E19253-01/816-4557/setup-192/index.html -- says the default max clock skew is 300 seconds | 16:07 |
| bknudson | would be difficult to handle 300 seconds difference in token issuance | 16:07 |
| bknudson | the tokens could be considered expired on one system the moment they're issued on another. | 16:08 |
| *** geoffarnoldX is now known as geoffarnold | 16:10 | |
| *** stevemar has quit IRC | 16:11 | |
| *** jsavak has quit IRC | 16:11 | |
| *** stevemar has joined #openstack-keystone | 16:11 | |
| *** ChanServ sets mode: +v stevemar | 16:11 | |
| *** jsavak has joined #openstack-keystone | 16:11 | |
| *** stevemar has quit IRC | 16:16 | |
| *** jerrygb has quit IRC | 16:19 | |
| dolphm | bknudson: SECONDS, jeezus | 16:21 |
| *** ebalduf_ has joined #openstack-keystone | 16:22 | |
| *** gyee has joined #openstack-keystone | 16:24 | |
| *** ChanServ sets mode: +v gyee | 16:24 | |
| lbragstad | dolphm: what, specifically, don't you like about mysql's datetime support? | 16:27 |
| dolphm | lbragstad: it's less consistent than it's decimal support :) | 16:27 |
| *** Ephur has joined #openstack-keystone | 16:29 | |
| *** aix has joined #openstack-keystone | 16:33 | |
| *** phalmos has quit IRC | 16:35 | |
| *** ankita_wagh has quit IRC | 16:39 | |
| *** dikonoor has quit IRC | 16:40 | |
| lbragstad | dolphm: less consistent? | 16:41 |
| lbragstad | dolphm: i'm sorry, i'm not that familiar, just trying to gather some context | 16:41 |
| morgan | lbragstad: datetime objects in MySQL are wonky | 16:42 |
| morgan | They have changed and behave in strange ways when you don't use MySQL to generate them. | 16:42 |
| lbragstad | morgan: are there some docs on this? | 16:42 |
| morgan | There are. | 16:43 |
| morgan | Somewhere | 16:43 |
| * lbragstad pokes Google | 16:43 | |
| morgan | But version to version datetime has changed | 16:43 |
| morgan | Example subsecond support | 16:44 |
| *** _cjones_ has joined #openstack-keystone | 16:44 | |
| lbragstad | morgan: https://dev.mysql.com/doc/refman/5.0/en/using-date.html ? | 16:49 |
| morgan | lbragstad: yes. But just experience shows it has been odd | 16:49 |
| *** edmondsw has quit IRC | 16:54 | |
| *** jsavak has quit IRC | 16:55 | |
| *** tonytan4ever has quit IRC | 16:55 | |
| *** jsavak has joined #openstack-keystone | 16:56 | |
| *** tonytan4ever has joined #openstack-keystone | 17:09 | |
| *** ankita_wagh has joined #openstack-keystone | 17:09 | |
| openstackgerrit | Alexander Makarov proposed openstack/keystone: Check datetime string to validate is a string https://review.openstack.org/223228 | 17:20 |
| *** Ephur has quit IRC | 17:23 | |
| *** e0ne has quit IRC | 17:23 | |
| *** csoukup has joined #openstack-keystone | 17:24 | |
| lbragstad | dolphm: morgan ok - so i found a few resources; http://blog.client9.com/2010/02/19/dont-waste-time-with-python-mysql-and.html and http://billauer.co.il/blog/2009/03/mysql-datetime-epoch-unix-time/ | 17:24 |
| *** edmondsw has joined #openstack-keystone | 17:24 | |
| morgan | lbragstad: the easiest solution really is to just use seconds | 17:24 |
| morgan | lbragstad: it is the lowest common denominator | 17:25 |
| *** pnavarro|afk has quit IRC | 17:25 | |
| lbragstad | but those mainly deal with *creating* the timestamp with SQL. Just checking that would never really be the case with Keystone because we'd (or Fernet) would always be the ones creating the timestamp | 17:25 |
| lbragstad | morgan: I agree, have you heard of any issues where SQL messes with the precision of timestamps created by other things? | 17:27 |
| *** stevemar has joined #openstack-keystone | 17:27 | |
| *** ChanServ sets mode: +v stevemar | 17:27 | |
| morgan | Yes. Former versions of mysql | 17:27 |
| morgan | Subsecond was truncated | 17:27 |
| morgan | But it won't change the data itself | 17:28 |
| morgan | If you generate a datetime object that will be consistent. And we don't care if subsecond a are added back in as they'd be .000000 | 17:28 |
| morgan | Since we don't supply them in the new model | 17:29 |
| lbragstad | specific to revocation events once subsecond precision is removed... | 17:29 |
| morgan | It isnt hard to make it all consistent | 17:32 |
| morgan | If we just drop subsecond everywhere we should be good | 17:32 |
| *** tonytan4ever has quit IRC | 17:34 | |
| *** jproulx has joined #openstack-keystone | 17:36 | |
| *** jsavak has quit IRC | 17:37 | |
| *** jsavak has joined #openstack-keystone | 17:37 | |
| *** phalmos has joined #openstack-keystone | 17:50 | |
| openstackgerrit | venkatamahesh proposed openstack/keystone: Fix the http link for JSON schema https://review.openstack.org/217319 | 17:51 |
| openstackgerrit | Eric Brown proposed openstack/keystone: Update man pages with liberty version and dates https://review.openstack.org/223238 | 17:52 |
| *** kiran-r has joined #openstack-keystone | 17:54 | |
| *** kiran-r has quit IRC | 17:54 | |
| *** ninag has quit IRC | 17:55 | |
| *** samueldmq has quit IRC | 17:56 | |
| *** ninag has joined #openstack-keystone | 18:00 | |
| *** mylu has joined #openstack-keystone | 18:00 | |
| *** harlowja has quit IRC | 18:00 | |
| *** tonytan4ever has joined #openstack-keystone | 18:01 | |
| jproulx | Having syntax issues (i think) writing a policy.json rule: | 18:01 |
| jproulx | "proj_admin": "role:proj_admin and project_id:%(target.project.id)s" | 18:01 |
| jproulx | If I leave it at role it does what I want trying to add project_id it stops, can anyone seem my probably obvious blunder? | 18:01 |
| *** harlowja has joined #openstack-keystone | 18:02 | |
| *** jsavak has quit IRC | 18:03 | |
| *** jsavak has joined #openstack-keystone | 18:04 | |
| *** lhcheng has joined #openstack-keystone | 18:05 | |
| *** ChanServ sets mode: +v lhcheng | 18:05 | |
| *** lhcheng_ has joined #openstack-keystone | 18:06 | |
| *** lhcheng has quit IRC | 18:10 | |
| *** ninag has quit IRC | 18:11 | |
| *** r-daneel has quit IRC | 18:15 | |
| *** openstackgerrit has quit IRC | 18:16 | |
| *** mylu has quit IRC | 18:16 | |
| *** openstackgerrit has joined #openstack-keystone | 18:17 | |
| *** mylu has joined #openstack-keystone | 18:17 | |
| *** r-daneel has joined #openstack-keystone | 18:18 | |
| edmondsw | morgan, do you know if anyone is working on adding keystone v3 support to refstack? Just discovered it only supports keystone v2.0 | 18:21 |
| morgan | edmondsw: no idea | 18:22 |
| morgan | First I've heard about this gap | 18:22 |
| edmondsw | k... thought you'd probably want to know anyway | 18:22 |
| edmondsw | I should be more specific... refstack-client | 18:23 |
| edmondsw | no #openstack-refstack irc channel? | 18:23 |
| *** e0ne has joined #openstack-keystone | 18:24 | |
| edmondsw | oh, it's #refstack | 18:25 |
| *** david-lyle has quit IRC | 18:29 | |
| *** doug-fis_ has joined #openstack-keystone | 18:32 | |
| *** doug-fis_ has quit IRC | 18:32 | |
| *** doug-fis_ has joined #openstack-keystone | 18:32 | |
| *** sdake has joined #openstack-keystone | 18:33 | |
| *** doug-fish has quit IRC | 18:34 | |
| *** sdake_ has joined #openstack-keystone | 18:36 | |
| *** sdake has quit IRC | 18:39 | |
| *** dims_ has joined #openstack-keystone | 18:50 | |
| *** dims has quit IRC | 18:52 | |
| stevemar | edmondsw: yep, it only does v2 tests i think | 18:57 |
| stevemar | mfisch: yo, did i end up sending you an email about your paste? | 18:57 |
| edmondsw | stevemar, morgan, it won't even connect, so can't do anything. But catherineD says it's in the works | 18:58 |
| stevemar | mfisch: if i didn't, it looks cool, really re-enforces the need to tweak it just a bit | 18:58 |
| mfisch | stevemar: no email | 18:58 |
| stevemar | edmondsw: yeah, i'm chatting with her now-ish, but i think shes looking at it from an 'upload the results', cause you need to authN to upload test results, i think? | 18:59 |
| mfisch | stevemar: this is a background thing for me to maintain my sanity dealing with data center stuff. I think the filtering at your end would be key | 18:59 |
| stevemar | mfisch: well, i'll say it here, your pastie was cool! | 18:59 |
| stevemar | mfisch: yep | 18:59 |
| edmondsw | stevemar, she asked me to open a bug for "not supporting V3 when fetching the Keystone ID being used as Cloud Provider ID"... whatever that means | 19:00 |
| mfisch | stevemar: My next thing is to get it to handle rabbit going away without dying, that is complicated but there's a nice example from the pika guys | 19:01 |
| *** jsavak has quit IRC | 19:01 | |
| *** jproulx has left #openstack-keystone | 19:02 | |
| *** doug-fis_ has quit IRC | 19:02 | |
| *** doug-fish has joined #openstack-keystone | 19:02 | |
| *** Ephur has joined #openstack-keystone | 19:04 | |
| *** jsavak has joined #openstack-keystone | 19:08 | |
| edmondsw | stevemar, refstack bug is https://bugs.launchpad.net/refstack/+bug/1495671 | 19:08 |
| openstack | Launchpad bug 1495671 in refstack "not supporting V3 when fetching the Keystone ID being used as Cloud Provider ID" [Undecided,New] | 19:08 |
| *** mylu has quit IRC | 19:14 | |
| *** mylu has joined #openstack-keystone | 19:15 | |
| stevemar | edmondsw: looks like refstack is meeting now in #openstack-meeting-alt | 19:18 |
| *** samueldmq has joined #openstack-keystone | 19:18 | |
| *** devlaps has joined #openstack-keystone | 19:18 | |
| *** jsavak has quit IRC | 19:18 | |
| *** jsavak has joined #openstack-keystone | 19:19 | |
| *** pnavarro|afk has joined #openstack-keystone | 19:29 | |
| openstackgerrit | Alexander Makarov proposed openstack/keystone: Check datetime string to validate is a string https://review.openstack.org/223228 | 19:29 |
| *** amakarov is now known as amakarov_away | 19:30 | |
| *** david-lyle has joined #openstack-keystone | 19:34 | |
| *** e0ne has quit IRC | 19:36 | |
| *** mylu has quit IRC | 19:41 | |
| *** mylu has joined #openstack-keystone | 19:41 | |
| *** stevemar has quit IRC | 19:43 | |
| *** stevemar has joined #openstack-keystone | 19:43 | |
| *** ChanServ sets mode: +v stevemar | 19:43 | |
| *** pnavarro|afk has quit IRC | 19:44 | |
| *** ninag has joined #openstack-keystone | 19:44 | |
| *** mylu has quit IRC | 19:46 | |
| *** stevemar has quit IRC | 19:48 | |
| *** lhcheng_ is now known as lhcheng | 19:50 | |
| *** ChanServ sets mode: +v lhcheng | 19:50 | |
| *** e0ne has joined #openstack-keystone | 19:50 | |
| *** jsavak has quit IRC | 19:53 | |
| *** stevemar has joined #openstack-keystone | 19:53 | |
| *** ChanServ sets mode: +v stevemar | 19:53 | |
| *** jsavak has joined #openstack-keystone | 19:57 | |
| *** stevemar has quit IRC | 19:57 | |
| *** stevemar_ has joined #openstack-keystone | 19:58 | |
| *** ChanServ sets mode: +v stevemar_ | 19:58 | |
| *** stevemar_ has quit IRC | 19:58 | |
| *** stevemar has joined #openstack-keystone | 19:58 | |
| *** ChanServ sets mode: +v stevemar | 19:58 | |
| *** mylu has joined #openstack-keystone | 20:02 | |
| *** Guest30379 has quit IRC | 20:02 | |
| dstanek | damn...looks like i need to dist-upgrade at some point | 20:03 |
| *** tsymanczyk has joined #openstack-keystone | 20:06 | |
| *** jsavak has quit IRC | 20:06 | |
| bknudson | dstanek: cattle > pets | 20:06 |
| *** tsymanczyk is now known as Guest85927 | 20:06 | |
| *** jsavak has joined #openstack-keystone | 20:07 | |
| *** e0ne has quit IRC | 20:07 | |
| *** mylu has quit IRC | 20:07 | |
| dstanek | bknudson: unfortunately i can't treat my daughter's desktop at cattle yet. i need a nas or something | 20:08 |
| bknudson | dstanek: I've got a synology diskstation. it's small and has worked great so far | 20:09 |
| *** tonytan4ever has quit IRC | 20:09 | |
| bknudson | just give her a rackspace account | 20:09 |
| *** samueldmq has quit IRC | 20:09 | |
| bknudson | if she needs something it's just nova boot | 20:10 |
| *** boris-42 has quit IRC | 20:10 | |
| dstanek | i wonder if i can do remote desktop and make her workstation a dump terminal. | 20:11 |
| *** mylu has joined #openstack-keystone | 20:11 | |
| *** dims has joined #openstack-keystone | 20:14 | |
| *** jasonsb has joined #openstack-keystone | 20:14 | |
| *** ankita_wagh has quit IRC | 20:16 | |
| *** dims_ has quit IRC | 20:16 | |
| *** mylu has quit IRC | 20:17 | |
| *** csoukup has quit IRC | 20:19 | |
| *** med_ has quit IRC | 20:20 | |
| *** mfisch has quit IRC | 20:20 | |
| *** mfisch has joined #openstack-keystone | 20:20 | |
| *** med_ has joined #openstack-keystone | 20:20 | |
| bknudson | that would make backups easy just use snapshot | 20:20 |
| *** med_ is now known as Guest47766 | 20:20 | |
| *** mfisch is now known as Guest15777 | 20:20 | |
| *** Guest47766 is now known as medberry | 20:22 | |
| *** medberry has quit IRC | 20:22 | |
| *** medberry has joined #openstack-keystone | 20:22 | |
| *** openstackgerrit has quit IRC | 20:31 | |
| *** ankita_wagh has joined #openstack-keystone | 20:31 | |
| *** openstackgerrit has joined #openstack-keystone | 20:32 | |
| *** edmondsw has quit IRC | 20:34 | |
| *** mylu has joined #openstack-keystone | 20:35 | |
| *** mylu has quit IRC | 20:37 | |
| *** mylu has joined #openstack-keystone | 20:37 | |
| *** boris-42 has joined #openstack-keystone | 20:40 | |
| *** devananda has left #openstack-keystone | 20:41 | |
| *** thiagop has quit IRC | 20:41 | |
| *** ericksonsantos has quit IRC | 20:41 | |
| *** mylu has quit IRC | 20:41 | |
| *** iurygregory has quit IRC | 20:42 | |
| openstackgerrit | Dolph Mathews proposed openstack/keystonemiddleware: Refactor _v3_to_v2_catalog() https://review.openstack.org/223291 | 20:45 |
| stevemar | dolphm: yes, calling it "region" was very annoying | 20:46 |
| stevemar | but it was out of scope for the patch | 20:46 |
| *** Guest85927 has quit IRC | 20:50 | |
| *** raildo is now known as raildo-afk | 20:53 | |
| *** urulama has quit IRC | 20:53 | |
| *** urulama has joined #openstack-keystone | 20:54 | |
| *** tellesnobrega is now known as tellesnobrega_af | 20:54 | |
| morgan | dolphm: generally +2 on that fix, +1 because I'd like to smash that TODO into something a bit less obtuse. | 20:56 |
| *** e0ne has joined #openstack-keystone | 20:59 | |
| *** thiagop has joined #openstack-keystone | 21:00 | |
| *** thiagop has quit IRC | 21:05 | |
| *** henrynash has quit IRC | 21:05 | |
| *** ericksonsantos has joined #openstack-keystone | 21:06 | |
| *** SheenaG has joined #openstack-keystone | 21:07 | |
| *** gabriel-bezerra has quit IRC | 21:08 | |
| *** tellesnobrega_af is now known as tellesnobrega | 21:08 | |
| *** tsymancz1k has joined #openstack-keystone | 21:09 | |
| *** jasonsb has quit IRC | 21:10 | |
| *** jsavak has quit IRC | 21:12 | |
| *** Guest15777 is now known as mfisch | 21:14 | |
| *** mfisch has quit IRC | 21:14 | |
| *** mfisch has joined #openstack-keystone | 21:14 | |
| mfisch | stevemar: https://github.com/matthewfischer/keystone_logging/blob/master/listen.py | 21:14 |
| mfisch | will keep working on it here as time permits | 21:14 |
| *** fifieldt_ has joined #openstack-keystone | 21:15 | |
| *** fifieldt has quit IRC | 21:18 | |
| *** thiagop has joined #openstack-keystone | 21:19 | |
| *** devlaps has quit IRC | 21:20 | |
| *** gabriel-bezerra has joined #openstack-keystone | 21:20 | |
| *** iurygregory has joined #openstack-keystone | 21:23 | |
| stevemar | mfisch: we should really add the name of the entity and the domain name (if its a group/user/project) | 21:25 |
| mfisch | stevemar: right now I'm going to work on making it not barf if the rabbit connection drops | 21:25 |
| mfisch | its complicated of course because its rabbit | 21:25 |
| stevemar | :( | 21:25 |
| mfisch | https://pika.readthedocs.org/en/0.10.0/examples/asynchronous_consumer_example.html | 21:25 |
| stevemar | i don't know enough about rabbit, i leave that bit up to oslo.messaging | 21:25 |
| mfisch | rabbit is the most dangerous part of our infra | 21:26 |
| mfisch | anything goes wrong on any node and everything breaks | 21:26 |
| stevemar | ugh | 21:26 |
| mfisch | Id rather lose a core switch | 21:26 |
| stevemar | that sounds awful | 21:26 |
| mfisch | hence my motivation for you to filter the token validations at the source | 21:26 |
| stevemar | i had no idea it was that bad | 21:26 |
| mfisch | its a lynchpin | 21:26 |
| mfisch | openstack is using it smarter now in K so its not as bad | 21:27 |
| mfisch | also we know more | 21:27 |
| *** mylu has joined #openstack-keystone | 21:27 | |
| stevemar | good to hear it's gotten better | 21:28 |
| mfisch | stevemar: also I welcome patches on that code ;) | 21:31 |
| stevemar | mfisch: i will probably tinker with the keystone side of things (adding names and giving you an option to pick what events you want published) | 21:33 |
| mfisch | perfect | 21:33 |
| stevemar | i've got a few grunts looking for work | 21:33 |
| mfisch | I cant imagine anyone wants to log token validates | 21:33 |
| mfisch | unless you are selling hard drives | 21:34 |
| stevemar | lol | 21:34 |
| stevemar | maybe that was ambitious on our part | 21:34 |
| stevemar | we're helping to promote cross-business needs | 21:34 |
| *** stevemar has quit IRC | 21:37 | |
| mfisch | maybe it would be useful for a crude measure of api activity | 21:38 |
| mfisch | there's better ways | 21:38 |
| *** mylu has quit IRC | 21:45 | |
| *** openstackgerrit has quit IRC | 21:46 | |
| *** mylu has joined #openstack-keystone | 21:46 | |
| *** openstackgerrit has joined #openstack-keystone | 21:47 | |
| *** tqtran has joined #openstack-keystone | 21:51 | |
| *** ninag has quit IRC | 21:56 | |
| *** doug-fish has quit IRC | 21:56 | |
| *** doug-fish has joined #openstack-keystone | 21:56 | |
| *** doug-fish has quit IRC | 21:58 | |
| *** doug-fish has joined #openstack-keystone | 21:58 | |
| *** doug-fish has quit IRC | 21:59 | |
| *** doug-fish has joined #openstack-keystone | 21:59 | |
| *** mylu has quit IRC | 22:00 | |
| *** mylu has joined #openstack-keystone | 22:01 | |
| *** e0ne has quit IRC | 22:04 | |
| *** doug-fish has quit IRC | 22:04 | |
| *** e0ne has joined #openstack-keystone | 22:09 | |
| morgan | mfisch: yeah uhhhh rabbit | 22:09 |
| morgan | mfisch: /me wont take credit for this but... imap as a replacement for rabbit ... it would scale! | 22:10 |
| mfisch | wait like the email protocol? | 22:10 |
| morgan | mfisch: yes | 22:11 |
| morgan | mfisch: think about it. Fanout is easy, delivery/marking "read" is easy | 22:11 |
| mfisch | reply-all | 22:11 |
| morgan | mfisch: can do secure auth.. can even do secure sending | 22:11 |
| *** dims has quit IRC | 22:11 | |
| morgan | mfisch: and scales masssssssively | 22:11 |
| mfisch | so instead of rabbitmq I have to run sendmail | 22:12 |
| morgan | eh, i wouldn't use sendmail but something that can do it | 22:12 |
| mfisch | maybe google would host it for me | 22:12 |
| morgan | but even then sendmail is a known beast and managing/maintaining it is a "solved" problem | 22:12 |
| mfisch | I dont have enough beer to discuss this | 22:12 |
| *** e0ne has quit IRC | 22:12 | |
| morgan | drink beer, discuss with mordred in tokyo | 22:13 |
| *** doug-fish has joined #openstack-keystone | 22:13 | |
| *** diazjf has left #openstack-keystone | 22:13 | |
| *** dave-mccowan has quit IRC | 22:14 | |
| morgan | mfisch: let the whole thing stew on the back burner. it's actually pretty entertaining to think of what can be done with imap ;) | 22:14 |
| *** slberger has left #openstack-keystone | 22:15 | |
| *** ninag has joined #openstack-keystone | 22:15 | |
| mordred | what did I do? | 22:15 |
| morgan | mordred: imap | 22:16 |
| mordred | YES IMAP | 22:16 |
| mordred | sendmail isn't the thing - what you want is cyrus IMAPd - which is easy to run small-scale for single-node deployments, but can cluster to massive size (it's what fastmail runs) | 22:16 |
| mordred | you don't actually need to send email | 22:17 |
| morgan | mordred: you know what is interesting... we could use email as a inter->region transport | 22:17 |
| mordred | you can connect over IMAP port and inject messages of arbitrary payloads (headers not needed) | 22:17 |
| mordred | morgan: yah | 22:17 |
| *** shaleh has joined #openstack-keystone | 22:17 | |
| mordred | morgan: turns out this is a system that is TOTALLY understood | 22:17 |
| *** doug-fish has quit IRC | 22:17 | |
| morgan | and it's a solved problem to scale it pretty massively | 22:17 |
| mordred | yup | 22:17 |
| mordred | all that remains is to prove it out | 22:18 |
| morgan | the more I think about it the more I want to do it. | 22:18 |
| *** hrou has quit IRC | 22:20 | |
| *** ninag has quit IRC | 22:20 | |
| openstackgerrit | Merged openstack/keystone: Move TestClient to test_versions https://review.openstack.org/218584 | 22:28 |
| *** shaleh has left #openstack-keystone | 22:28 | |
| *** jecarey has quit IRC | 22:29 | |
| *** gordc has quit IRC | 22:30 | |
| *** mylu has quit IRC | 22:30 | |
| *** stevemar has joined #openstack-keystone | 22:37 | |
| *** ChanServ sets mode: +v stevemar | 22:37 | |
| *** shadower has quit IRC | 22:37 | |
| *** stevemar has quit IRC | 22:40 | |
| *** erhudy1 has joined #openstack-keystone | 22:46 | |
| *** sdake has joined #openstack-keystone | 22:58 | |
| *** sdake_ has quit IRC | 23:02 | |
| *** dave-mccowan has joined #openstack-keystone | 23:04 | |
| *** markvoelker has quit IRC | 23:06 | |
| *** ankita_wagh has quit IRC | 23:15 | |
| openstackgerrit | Brant Knudson proposed openstack/keystonemiddleware: auth_token tests use clean config https://review.openstack.org/223338 | 23:18 |
| *** david-lyle has quit IRC | 23:20 | |
| *** hrou has joined #openstack-keystone | 23:21 | |
| *** mylu has joined #openstack-keystone | 23:22 | |
| *** geoffarnold is now known as geoffarnoldX | 23:22 | |
| *** zzzeek has quit IRC | 23:24 | |
| *** markvoelker has joined #openstack-keystone | 23:39 | |
| mordred | morgan: I just got my citycloud account working | 23:40 |
| mordred | morgan: they are running keystone v3 | 23:40 |
| morgan | nice | 23:40 |
| mordred | ok. they win for best flavor names | 23:40 |
| mordred | "16C-32GB-200GB" | 23:40 |
| morgan | huh, that just makes too much sense | 23:41 |
| morgan | is ... that allowed? | 23:41 |
| *** shoutm has joined #openstack-keystone | 23:45 | |
| *** stevemar has joined #openstack-keystone | 23:49 | |
| *** ChanServ sets mode: +v stevemar | 23:49 | |
| *** SheenaG has quit IRC | 23:50 | |
| *** ankita_wagh has joined #openstack-keystone | 23:51 | |
| *** dsirrine has quit IRC | 23:53 | |
| *** samueldmq has joined #openstack-keystone | 23:55 | |
| *** phalmos has quit IRC | 23:59 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!