| *** itlinux has quit IRC | 00:03 | |
| *** EinstCrazy has quit IRC | 00:03 | |
| *** shadower has quit IRC | 00:23 | |
| *** shadower has joined #openstack-keystone | 00:23 | |
| *** mylu_ has quit IRC | 00:27 | |
| *** browne has joined #openstack-keystone | 00:29 | |
| *** btully has quit IRC | 00:35 | |
| *** mylu has joined #openstack-keystone | 00:38 | |
| *** su_zhang has quit IRC | 00:40 | |
| *** chlong has joined #openstack-keystone | 00:42 | |
| *** mylu has quit IRC | 00:42 | |
| *** mylu has joined #openstack-keystone | 00:44 | |
| *** dimsum__ has joined #openstack-keystone | 00:45 | |
| *** diegows has quit IRC | 00:46 | |
| *** dimsum__ has quit IRC | 00:47 | |
| *** mylu has quit IRC | 00:56 | |
| *** mylu has joined #openstack-keystone | 00:56 | |
| *** EinstCrazy has joined #openstack-keystone | 00:57 | |
| *** mylu_ has joined #openstack-keystone | 00:58 | |
| *** geoffarnold is now known as geoffarnoldX | 01:00 | |
| *** mylu has quit IRC | 01:01 | |
| *** ankita_wagh has joined #openstack-keystone | 01:02 | |
| *** btully has joined #openstack-keystone | 01:05 | |
| *** roxanaghe has quit IRC | 01:11 | |
| *** roxanaghe has joined #openstack-keystone | 01:12 | |
| *** stevemar has joined #openstack-keystone | 01:16 | |
| *** ChanServ sets mode: +v stevemar | 01:16 | |
| *** roxanaghe has quit IRC | 01:17 | |
| *** telemonster has quit IRC | 01:28 | |
| *** telemonster has joined #openstack-keystone | 01:28 | |
| *** davechen has joined #openstack-keystone | 01:35 | |
| *** davechen1 has joined #openstack-keystone | 01:39 | |
| *** mylu_ has quit IRC | 01:41 | |
| *** davechen has quit IRC | 01:41 | |
| *** dimsum__ has joined #openstack-keystone | 01:45 | |
| *** mylu has joined #openstack-keystone | 01:47 | |
| *** csoukup has joined #openstack-keystone | 01:57 | |
| *** dimsum__ has quit IRC | 02:00 | |
| *** c_soukup has joined #openstack-keystone | 02:01 | |
| *** csoukup has quit IRC | 02:04 | |
| *** su_zhang has joined #openstack-keystone | 02:06 | |
| *** EinstCrazy has quit IRC | 02:09 | |
| *** itlinux has joined #openstack-keystone | 02:14 | |
| *** EinstCrazy has joined #openstack-keystone | 02:19 | |
| *** csoukup_ has joined #openstack-keystone | 02:19 | |
| *** c_soukup has quit IRC | 02:22 | |
| *** EinstCrazy has quit IRC | 02:34 | |
| *** ankita_wagh has quit IRC | 02:38 | |
| openstackgerrit | Tony Wang proposed openstack/keystone: .coveragerc change due to release of coverage 4.0 https://review.openstack.org/225535 | 02:55 |
|---|---|---|
| *** dimsum__ has joined #openstack-keystone | 03:01 | |
| *** su_zhang has quit IRC | 03:05 | |
| *** mylu has quit IRC | 03:05 | |
| *** dimsum__ has quit IRC | 03:08 | |
| *** mylu has joined #openstack-keystone | 03:21 | |
| *** EinstCrazy has joined #openstack-keystone | 03:22 | |
| *** geoffarnoldX is now known as geoffarnold | 03:24 | |
| *** mylu has quit IRC | 03:26 | |
| *** KarthikB has joined #openstack-keystone | 03:27 | |
| *** itlinux has quit IRC | 03:29 | |
| *** wwwjfy has joined #openstack-keystone | 03:34 | |
| *** ankita_wagh has joined #openstack-keystone | 03:42 | |
| *** geoffarnold is now known as geoffarnoldX | 03:45 | |
| *** ankita_wagh has quit IRC | 04:04 | |
| *** EinstCrazy has quit IRC | 04:06 | |
| *** lhcheng has joined #openstack-keystone | 04:10 | |
| *** ChanServ sets mode: +v lhcheng | 04:10 | |
| *** su_zhang has joined #openstack-keystone | 04:11 | |
| *** mylu has joined #openstack-keystone | 04:22 | |
| *** lhcheng has quit IRC | 04:24 | |
| *** mylu has quit IRC | 04:27 | |
| *** Nirupama has joined #openstack-keystone | 04:42 | |
| *** itlinux has joined #openstack-keystone | 05:03 | |
| *** dimsum__ has joined #openstack-keystone | 05:05 | |
| *** browne has quit IRC | 05:07 | |
| *** dimsum__ has quit IRC | 05:11 | |
| *** browne has joined #openstack-keystone | 05:11 | |
| *** roxanaghe has joined #openstack-keystone | 05:15 | |
| *** roxanaghe has quit IRC | 05:19 | |
| *** csoukup_ has quit IRC | 05:36 | |
| *** itlinux has quit IRC | 05:36 | |
| *** henrynash has joined #openstack-keystone | 05:50 | |
| *** ChanServ sets mode: +v henrynash | 05:50 | |
| *** KarthikB has quit IRC | 05:52 | |
| *** urulama has joined #openstack-keystone | 05:53 | |
| *** ankita_wagh has joined #openstack-keystone | 05:56 | |
| wwwjfy | Hi, coverage released 4.0 recently, which fails some tests due to configuration difference. as tonyb suggested, I committed https://review.openstack.org/#/c/225535/ to fix .coveragerc. | 05:59 |
| wwwjfy | please help to review and tell me if I'm doing wrong. | 05:59 |
| tonyb | wwwjfy: You have the Depends-on wrong. 215870 should 'Depends-On: I21b69ae6f0131c000f85cc353d092bd37d03b631' and 225535 shoudl be a stand alone change. | 06:02 |
| tonyb | that 225535 can be merged at any point that it's okay BUT 215870 will have to wait until 225535 is in. | 06:02 |
| tonyb | wwwjfy: dos that make sense? | 06:03 |
| wwwjfy | tonyb: right. I was feeling weird writing that, but I followed your words (though I read in a wrong way :). fixing that | 06:05 |
| tonyb | wwwjfy: Cool. Sorry I wasn't more clear | 06:05 |
| *** stevemar has quit IRC | 06:05 | |
| openstackgerrit | Tony Wang proposed openstack/keystone: .coveragerc change due to release of coverage 4.0 https://review.openstack.org/225535 | 06:06 |
| wwwjfy | well, definitely my problem, I'm improving my English. thanks for your help :) | 06:07 |
| *** ParsectiX has joined #openstack-keystone | 06:08 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone: Imported Translations from Zanata https://review.openstack.org/224242 | 06:08 |
| openstackgerrit | Tony Wang proposed openstack/keystone: Show v3 endpoints in v2 endpoint list https://review.openstack.org/215870 | 06:09 |
| *** e0ne has joined #openstack-keystone | 06:10 | |
| tonyb | wwwjfy: the dependancies look right. I can confirm that 215870 is being test "on top" of 225535. | 06:11 |
| tonyb | wwwjfy: if you go to http://status.openstack.org/zuul/ and put 215870,225535 in the filter you can monitor them | 06:12 |
| wwwjfy | got it | 06:12 |
| *** lsmola has joined #openstack-keystone | 06:13 | |
| *** e0ne has quit IRC | 06:14 | |
| *** rajesht has joined #openstack-keystone | 06:14 | |
| *** wwwjfy has quit IRC | 06:17 | |
| *** wwwjfy has joined #openstack-keystone | 06:18 | |
| tonyb | wwwjfy: python34 passed on 215870 :) | 06:18 |
| rajesht | hi cores | 06:19 |
| rajesht | could you please review patch https://review.openstack.org/#/c/210365/ | 06:19 |
| rajesht | it needs one more +2 | 06:19 |
| rajesht | thanks in advance | 06:19 |
| wwwjfy | tonyb: nice. Thanks~ | 06:20 |
| *** topol has quit IRC | 06:20 | |
| *** _afazekas has joined #openstack-keystone | 06:20 | |
| *** mylu has joined #openstack-keystone | 06:25 | |
| *** _afazekas has quit IRC | 06:26 | |
| *** mylu has quit IRC | 06:29 | |
| *** wwwjfy has quit IRC | 06:29 | |
| *** wwwjfy has joined #openstack-keystone | 06:30 | |
| *** pnavarro has joined #openstack-keystone | 06:34 | |
| *** su_zhang has quit IRC | 06:48 | |
| *** ParsectiX has quit IRC | 07:00 | |
| *** roxanaghe has joined #openstack-keystone | 07:03 | |
| *** e0ne has joined #openstack-keystone | 07:06 | |
| *** roxanaghe has quit IRC | 07:08 | |
| *** dimsum__ has joined #openstack-keystone | 07:08 | |
| *** jamielennox is now known as jamielennox|away | 07:09 | |
| *** dimsum__ has quit IRC | 07:13 | |
| *** chlong has quit IRC | 07:17 | |
| *** ParsectiX has joined #openstack-keystone | 07:21 | |
| *** ParsectiX has quit IRC | 07:30 | |
| *** ankita_wagh has quit IRC | 07:30 | |
| *** ParsectiX has joined #openstack-keystone | 07:31 | |
| *** pnavarro has quit IRC | 07:34 | |
| *** pnavarro has joined #openstack-keystone | 07:34 | |
| *** browne has quit IRC | 07:44 | |
| *** hrou has quit IRC | 07:55 | |
| *** fhubik has joined #openstack-keystone | 07:56 | |
| *** fhubik is now known as fhubik_brb | 08:05 | |
| *** su_zhang has joined #openstack-keystone | 08:06 | |
| *** ParsectiX has quit IRC | 08:09 | |
| *** su_zhang has quit IRC | 08:10 | |
| *** fhubik_brb is now known as fhubik | 08:15 | |
| *** ParsectiX has joined #openstack-keystone | 08:19 | |
| *** fhubik is now known as fhubik_brb | 08:25 | |
| *** mylu has joined #openstack-keystone | 08:26 | |
| *** mylu has quit IRC | 08:30 | |
| *** urulama has quit IRC | 08:31 | |
| *** urulama has joined #openstack-keystone | 08:31 | |
| *** svasheka has quit IRC | 08:33 | |
| *** svasheka has joined #openstack-keystone | 08:38 | |
| *** fhubik_brb is now known as fhubik | 08:43 | |
| *** chlong has joined #openstack-keystone | 08:43 | |
| *** e0ne has quit IRC | 08:46 | |
| *** roxanaghe has joined #openstack-keystone | 08:52 | |
| *** boris-42 has quit IRC | 08:53 | |
| *** aix has quit IRC | 08:54 | |
| *** roxanaghe has quit IRC | 08:58 | |
| *** pnavarro has quit IRC | 08:59 | |
| *** josecastroleon has joined #openstack-keystone | 09:06 | |
| *** ParsectiX has quit IRC | 09:15 | |
| *** boris-42 has joined #openstack-keystone | 09:24 | |
| *** aix has joined #openstack-keystone | 09:25 | |
| *** fhubik is now known as fhubik_brb | 09:26 | |
| *** markvoelker has quit IRC | 09:27 | |
| *** fhubik_brb is now known as fhubik | 09:30 | |
| *** rob_d has quit IRC | 09:33 | |
| *** ParsectiX has joined #openstack-keystone | 09:34 | |
| *** katkapilatova has joined #openstack-keystone | 09:38 | |
| *** davechen1 has left #openstack-keystone | 09:43 | |
| *** dimsum__ has joined #openstack-keystone | 09:47 | |
| *** pnavarro has joined #openstack-keystone | 09:51 | |
| *** e0ne has joined #openstack-keystone | 09:58 | |
| *** kiran-r has joined #openstack-keystone | 10:03 | |
| zigo | I'm having issues with keystoneclient always trying to use the SERVICE_TOKEN, while auth with openstackclient works. | 10:19 |
| zigo | I know keystoneclient cli is deprecated, though it doesn't seem like openstackclient supports using SERVICE_TOKEN at all. | 10:20 |
| zigo | Or am I missing something? | 10:20 |
| odyssey4me | zigo I saw a conversation fly by that is the user/password are set then osc will prefer it above any other setting | 10:22 |
| odyssey4me | I think it was preferred even if the token is passed on the CLI | 10:22 |
| odyssey4me | don't quote me on it - it's just a vague memory :) | 10:23 |
| zigo | Thanks. | 10:23 |
| *** mylu has joined #openstack-keystone | 10:26 | |
| *** urulama has quit IRC | 10:27 | |
| *** urulama has joined #openstack-keystone | 10:28 | |
| *** markvoelker has joined #openstack-keystone | 10:28 | |
| *** EinstCrazy has joined #openstack-keystone | 10:28 | |
| *** mylu has quit IRC | 10:31 | |
| *** markvoelker has quit IRC | 10:32 | |
| *** ParsectiX has quit IRC | 10:32 | |
| *** roxanaghe has joined #openstack-keystone | 10:40 | |
| *** roxanaghe has quit IRC | 10:46 | |
| *** rajesht_ has joined #openstack-keystone | 10:46 | |
| *** ParsectiX has joined #openstack-keystone | 10:49 | |
| *** rajesht has quit IRC | 10:50 | |
| *** wwwjfy has quit IRC | 11:02 | |
| *** bradjones has joined #openstack-keystone | 11:05 | |
| *** bradjones has quit IRC | 11:05 | |
| *** bradjones has joined #openstack-keystone | 11:05 | |
| *** bradjones has quit IRC | 11:08 | |
| *** bradjones has joined #openstack-keystone | 11:08 | |
| *** bradjones has quit IRC | 11:08 | |
| *** bradjones has joined #openstack-keystone | 11:08 | |
| *** doug-fish has joined #openstack-keystone | 11:11 | |
| *** bradjones has quit IRC | 11:14 | |
| *** bradjones has joined #openstack-keystone | 11:14 | |
| *** bradjones has quit IRC | 11:14 | |
| *** bradjones has joined #openstack-keystone | 11:14 | |
| *** fhubik is now known as fhubik_brb | 11:16 | |
| *** amakarov has joined #openstack-keystone | 11:22 | |
| *** urulama has quit IRC | 11:25 | |
| *** urulama has joined #openstack-keystone | 11:25 | |
| *** markvoelker has joined #openstack-keystone | 11:29 | |
| *** markvoelker has quit IRC | 11:33 | |
| *** gordc has joined #openstack-keystone | 11:41 | |
| * zigo fixed it all and is now using openstackclient only. | 11:50 | |
| *** roxanaghe has joined #openstack-keystone | 11:51 | |
| *** pnavarro has quit IRC | 11:54 | |
| *** roxanaghe has quit IRC | 11:57 | |
| *** iurygregory has joined #openstack-keystone | 11:57 | |
| *** topol has joined #openstack-keystone | 12:01 | |
| *** ChanServ sets mode: +v topol | 12:01 | |
| *** jaosorior has joined #openstack-keystone | 12:02 | |
| *** nicodemos has joined #openstack-keystone | 12:05 | |
| *** pnavarro has joined #openstack-keystone | 12:06 | |
| *** markvoelker has joined #openstack-keystone | 12:11 | |
| *** fhubik_brb is now known as fhubik | 12:14 | |
| *** jecarey has quit IRC | 12:20 | |
| *** wwwjfy has joined #openstack-keystone | 12:22 | |
| zigo | Is there a way to make the keystone-mange db_sync being less verbose? | 12:22 |
| *** topol_ has joined #openstack-keystone | 12:24 | |
| *** ChanServ sets mode: +v topol_ | 12:24 | |
| *** topol has quit IRC | 12:27 | |
| zigo | The --no-verbose option has no effect. :( | 12:29 |
| *** edmondsw has joined #openstack-keystone | 12:31 | |
| *** urulama has quit IRC | 12:33 | |
| *** urulama has joined #openstack-keystone | 12:34 | |
| bknudson | zigo: do you have debug=True in your keystone.conf? | 12:37 |
| zigo | no | 12:37 |
| zigo | In fact, --no-verbose even made keystone-manage fail ... :( | 12:38 |
| bknudson | --no-verbose isn't a recognized option on my system | 12:38 |
| bknudson | with --verbose it just says "No handlers could be found for logger" | 12:38 |
| zigo | Then the doc here is wrong: http://docs.openstack.org/developer/keystone/man/keystone-manage.html | 12:39 |
| zigo | Oh, my bad ... | 12:39 |
| zigo | --noverbose, without space !!! | 12:39 |
| zigo | I mean, --noverbose and not --no-verbose. | 12:39 |
| * zigo tries again | 12:39 | |
| bknudson | I get the same result "No handlers could be found" | 12:40 |
| zigo | That's IMO unrelated. | 12:41 |
| zigo | Working ! :) | 12:42 |
| bknudson | there's no output now? | 12:43 |
| *** e0ne has quit IRC | 12:44 | |
| zigo | Right. | 12:45 |
| openstackgerrit | Henrique Truta proposed openstack/keystone: Prevents creating is_domain=True projects in v2 https://review.openstack.org/224876 | 12:46 |
| *** dimsum__ has quit IRC | 12:47 | |
| zigo | Though I get a: No handlers could be found for logger "oslo_config.cfg" | 12:47 |
| zigo | (which doesn't seem to be problematic) | 12:47 |
| *** dimsum__ has joined #openstack-keystone | 12:47 | |
| *** dimsum__ is now known as dims | 12:48 | |
| *** dims is now known as Guest31942 | 12:49 | |
| *** Guest31942 is now known as dims__ | 12:49 | |
| openstackgerrit | Alexander Makarov proposed openstack/keystone: Move region configuration to a critical section https://review.openstack.org/222173 | 12:52 |
| *** geoffarnoldX is now known as geoffarnold | 13:01 | |
| *** exploreshaifali has joined #openstack-keystone | 13:07 | |
| *** jsavak has joined #openstack-keystone | 13:11 | |
| *** EinstCrazy has quit IRC | 13:11 | |
| openstackgerrit | Henrique Truta proposed openstack/keystone: Filters is_domain=True in v2 get_project_by_name https://review.openstack.org/224842 | 13:15 |
| *** mfisch has quit IRC | 13:18 | |
| *** mfisch has joined #openstack-keystone | 13:19 | |
| *** mfisch is now known as Guest61243 | 13:19 | |
| *** raildo-afk is now known as raildo | 13:19 | |
| *** amoturi has joined #openstack-keystone | 13:21 | |
| openstackgerrit | Henrique Truta proposed openstack/keystone: Refactor: _expand_ref() in resource/controllers.py https://review.openstack.org/196729 | 13:26 |
| *** hrou has joined #openstack-keystone | 13:26 | |
| *** woodster_ has joined #openstack-keystone | 13:33 | |
| *** richm has joined #openstack-keystone | 13:34 | |
| *** roxanaghe has joined #openstack-keystone | 13:38 | |
| *** Nirupama has quit IRC | 13:40 | |
| *** jsavak has quit IRC | 13:42 | |
| *** jsavak has joined #openstack-keystone | 13:42 | |
| *** roxanaghe has quit IRC | 13:44 | |
| *** richm has quit IRC | 13:45 | |
| *** r-daneel has joined #openstack-keystone | 13:46 | |
| *** e0ne has joined #openstack-keystone | 13:47 | |
| ayoung | dstanek, how do we create tables for unit tests these days? Should not adding a class RoleTable(sql.ModelBase, sql.DictBase) to keystone/assignement/role_backends/sql.py be enough? I man, I also have a migration... | 13:51 |
| *** topol_ has quit IRC | 13:51 | |
| ayoung | ah..it IS the migration...we've gone back and forth on that enough...and I had pluralized... | 13:53 |
| *** su_zhang has joined #openstack-keystone | 13:53 | |
| dstanek | ayoung: :-) | 13:53 |
| *** sdake has joined #openstack-keystone | 13:57 | |
| *** doug-fish has quit IRC | 13:57 | |
| *** richm has joined #openstack-keystone | 13:59 | |
| *** david-ly_ is now known as david-lyle | 14:01 | |
| dhellmann | morgan: what's the plan for stable releases of keystoneauth, do you want a stable/liberty branch? | 14:01 |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Enable hardcoded_bind_all_interfaces Bandit test https://review.openstack.org/225690 | 14:01 |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Enable password_config_option_not_marked_secret Bandit test https://review.openstack.org/225691 | 14:01 |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Enable subprocess_without_shell_equals_true Bandit test https://review.openstack.org/225692 | 14:01 |
| *** geoffarnold is now known as geoffarnoldX | 14:02 | |
| *** fhubik is now known as fhubik_brb | 14:02 | |
| *** fhubik_brb is now known as fhubik | 14:03 | |
| *** jlvillal has joined #openstack-keystone | 14:05 | |
| *** ParsectiX has quit IRC | 14:09 | |
| *** e0ne has quit IRC | 14:10 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: Add caching to get_catalog https://review.openstack.org/215212 | 14:10 |
| *** ParsectiX has joined #openstack-keystone | 14:10 | |
| *** ParsectiX has quit IRC | 14:11 | |
| *** jecarey has joined #openstack-keystone | 14:11 | |
| ayoung | dstanek, nope...not there yet | 14:13 |
| *** e0ne has joined #openstack-keystone | 14:14 | |
| ayoung | dstanek, how are tables created for SQL based unit tests these days? | 14:14 |
| *** slberger has joined #openstack-keystone | 14:14 | |
| ayoung | dhellmann, what do *I* want, what does morgan want, or what does jamielennox want? Not sure they are all the same thing | 14:15 |
| ayoung | Right now, I don't know who is actually using keystoneauth, if anyone | 14:15 |
| dstanek | ayoung: any SQA models that are imported before we create the database will be created. | 14:15 |
| *** kiran-r has quit IRC | 14:15 | |
| morgan | dhellmann: we do stable branches the same as anything rlae | 14:15 |
| morgan | Else* | 14:15 |
| ayoung | dstanek, so, like the role table is created from the keystone/assignement/role_backends/sql.py code, right? | 14:16 |
| morgan | dhellmann: just to keep it easy/consistent | 14:16 |
| *** KarthikB has joined #openstack-keystone | 14:16 | |
| dstanek | ayoung: actually they don't need to be imported | 14:16 |
| dstanek | ayoung: http://git.openstack.org/cgit/openstack/keystone/tree/keystone/tests/unit/ksfixtures/database.py#n54 | 14:16 |
| morgan | dhellmann: unless you have another recommendation | 14:16 |
| *** pnavarro is now known as pnavarro|off | 14:17 | |
| dhellmann | ayoung: I don't have time for cute today, so I asked the PTL. | 14:17 |
| ayoung | dstanek, ok, so adding an additional table definition in keystone/assignement/role_backends/sql.py | 14:17 |
| *** csoukup has joined #openstack-keystone | 14:17 | |
| dhellmann | morgan: nope, just double checking, ty | 14:17 |
| ayoung | dhellmann, that was actually just my way of waking up the PTL... | 14:17 |
| morgan | dhellmann: np | 14:17 |
| dhellmann | ayoung: ah, k | 14:18 |
| ayoung | dhellmann, and, also of seeing that jamnielennox is not here, but he's the driving force as you know | 14:18 |
| dhellmann | ayoung: sorry, lots of time pressure today | 14:18 |
| ayoung | dhellmann, NP. I have thick skin...just wanted to make sure you got a usable answer.... | 14:19 |
| ayoung | I wouild have said the same thing, but wanted it to be authoritative | 14:19 |
| *** doug-fish has joined #openstack-keystone | 14:20 | |
| morgan | I feel icky today :( | 14:20 |
| ayoung | morgan, I went for a 28 mile bike ride yesterday. I feel good, but can barely stand. | 14:21 |
| morgan | ayoung: i did a 25km bike ride. But it was 100 degrees out (not including the reflected heat from the ground) | 14:22 |
| morgan | This is why i feel icky | 14:22 |
| *** david-lyle has quit IRC | 14:22 | |
| ayoung | morgan, wow...that is warm. I think we've seen the last of >100degrees in New England for the year...although a late heat wave is not unusualy | 14:23 |
| morgan | We are looking at another week+ of this forcasted | 14:23 |
| morgan | :( | 14:23 |
| morgan | It's been pretty awful | 14:24 |
| *** browne has joined #openstack-keystone | 14:24 | |
| morgan | Wasn't bad speed wise, ~50 minutes or so | 14:24 |
| *** david-lyle has joined #openstack-keystone | 14:26 | |
| openstackgerrit | Monty Taylor proposed openstack/keystone: Change ignore-errors to ignore_errors https://review.openstack.org/225739 | 14:28 |
| openstackgerrit | Monty Taylor proposed openstack/keystoneauth: Change ignore-errors to ignore_errors https://review.openstack.org/225740 | 14:28 |
| openstackgerrit | Monty Taylor proposed openstack/keystoneauth-saml2: Change ignore-errors to ignore_errors https://review.openstack.org/225741 | 14:28 |
| openstackgerrit | Monty Taylor proposed openstack/keystonemiddleware: Change ignore-errors to ignore_errors https://review.openstack.org/225742 | 14:28 |
| *** pnavarro|off has quit IRC | 14:28 | |
| *** topol has joined #openstack-keystone | 14:34 | |
| *** ChanServ sets mode: +v topol | 14:34 | |
| *** diazjf has joined #openstack-keystone | 14:37 | |
| ayoung | dstanek, what do we have to do to pick up a Class as being a table? | 14:38 |
| ayoung | dstanek, could it be that the table has no 'extra' field on it and we still are assuming that as the default | 14:39 |
| dstanek | ayoung: your table isn't being created at all? | 14:40 |
| ayoung | dstanek, the error is (sqlite3.OperationalError) no such table: inferred_role [SQL: u'SELECT inferred_role.prior_role_id AS inferred_role_prior_role_id, inferred_role.inferred_role_id AS inferred_role_inferred_role_id \nFROM inferred_role \nWHERE inferred_role.prior_role_id = ?'] [parameters: (u'048b478037f74d27848ce5abb809557d',)] | 14:40 |
| dstanek | ayoung: is it a subsclass of SQA's Model? | 14:40 |
| ayoung | class InferredRoleTable(sql.ModelBase, sql.DictBase): | 14:41 |
| ayoung | right above: class RoleTable(sql.ModelBase, sql.DictBase): | 14:41 |
| ayoung | "Extra" column on all tables is dumb...needs to go away | 14:41 |
| dstanek | ayoung: very strange. if it's in a module that already has models then it should be fine. can you post the code so i can play with it? | 14:42 |
| *** geoffarnoldX is now known as geoffarnold | 14:43 | |
| ayoung | dstanek, sure...I'll make a branch on github | 14:43 |
| *** zzzeek has joined #openstack-keystone | 14:45 | |
| openstackgerrit | Merged openstack/python-keystoneclient: Updated from global requirements https://review.openstack.org/225232 | 14:47 |
| *** geoffarnold has quit IRC | 14:47 | |
| *** doug-fish has quit IRC | 14:48 | |
| openstackgerrit | Olivier Pilotte proposed openstack/keystone: Accepts Group IDs from the IdP without domain https://review.openstack.org/210581 | 14:48 |
| *** dsirrine has joined #openstack-keystone | 14:51 | |
| openstackgerrit | Monty Taylor proposed openstack/python-keystoneclient: Change ignore-errors to ignore_errors https://review.openstack.org/225815 | 14:53 |
| openstackgerrit | Monty Taylor proposed openstack/python-keystoneclient-kerberos: Change ignore-errors to ignore_errors https://review.openstack.org/225816 | 14:53 |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Enable try_except_pass Bandit test https://review.openstack.org/225738 | 14:56 |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Enable subprocess_without_shell_equals_true Bandit test https://review.openstack.org/225692 | 14:56 |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Enable Bandit 0.13.2 tests https://review.openstack.org/225347 | 14:56 |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Enable hardcoded_bind_all_interfaces Bandit test https://review.openstack.org/225690 | 14:56 |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Enable password_config_option_not_marked_secret Bandit test https://review.openstack.org/225691 | 14:56 |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Bring bandit config up-to-date https://review.openstack.org/194417 | 14:56 |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Update bandit blacklist_calls config https://review.openstack.org/225327 | 14:56 |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Update bandit blacklist_imports config https://review.openstack.org/225341 | 14:56 |
| openstackgerrit | Brant Knudson proposed openstack/keystone: federation.idp use correct subprocess https://review.openstack.org/225340 | 14:56 |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Clean up bandit profiles https://review.openstack.org/225304 | 14:56 |
| *** EinstCrazy has joined #openstack-keystone | 14:57 | |
| *** jorge_munoz has quit IRC | 14:58 | |
| *** EinstCrazy has quit IRC | 14:59 | |
| *** albertom has quit IRC | 14:59 | |
| ayoung | dstanek, https://github.com/admiyo/keystone/tree/inferred-roles | 15:00 |
| *** phalmos has joined #openstack-keystone | 15:01 | |
| *** doug-fish has joined #openstack-keystone | 15:01 | |
| *** devlaps has joined #openstack-keystone | 15:02 | |
| *** albertom has joined #openstack-keystone | 15:05 | |
| openstackgerrit | Matthew Edmonds proposed openstack/keystonemiddleware: only make token invalid when it really is https://review.openstack.org/217373 | 15:05 |
| *** doug-fish has quit IRC | 15:06 | |
| *** thiagop has joined #openstack-keystone | 15:07 | |
| *** jorge_munoz has joined #openstack-keystone | 15:11 | |
| *** fhubik has quit IRC | 15:13 | |
| *** devlaps has quit IRC | 15:19 | |
| *** urulama has quit IRC | 15:22 | |
| *** stevemar has joined #openstack-keystone | 15:22 | |
| *** ChanServ sets mode: +v stevemar | 15:22 | |
| *** urulama has joined #openstack-keystone | 15:22 | |
| stevemar | que pasa keystoners! | 15:23 |
| *** katkapilatova has left #openstack-keystone | 15:24 | |
| lbragstad | stevemar: nada | 15:24 |
| stevemar | lbragstad: bueno | 15:24 |
| henrynash | bknudson: I made the fixes recommended to https://review.openstack.org/#/c/191976/18 - maybe you could take a look? | 15:25 |
| morgan | henrynash: how close is the last bp attached to the rc milestone? | 15:26 |
| *** geoffarnold has joined #openstack-keystone | 15:27 | |
| morgan | Because if we cant close it today i need to punt it to mitaka | 15:27 |
| morgan | henrynash: https://launchpad.net/keystone/+milestone/liberty-rc1 | 15:27 |
| morgan | Similar for all open bugs | 15:27 |
| henrynash | morgan: my bad, that bp is done. I’ll mark it as so | 15:28 |
| morgan | ^ dolphm dstanek ayoung jamielennox|away stevemar gyee marekd topol | 15:28 |
| ayoung | stevemar, Todo esta bien, pero nuestra pruebas correan demasedo lento | 15:28 |
| henrynash | morgan: the one bi fix I have is that one above https://review.openstack.org/#/c/191976/18 | 15:28 |
| morgan | We want to cut rc1 tomorrow | 15:28 |
| *** devlaps has joined #openstack-keystone | 15:28 | |
| *** roxanaghe has joined #openstack-keystone | 15:28 | |
| morgan | So unless it is a release blocker i am punting the bug (there may only be one release blocking bug afaict) | 15:29 |
| morgan | henrynash: is this really a release blocker? | 15:30 |
| henrynash | moragn: it means we can’t create service domains via the API | 15:30 |
| henrynash | morgan: if I cn’t get it in today, I agree let’s punt | 15:30 |
| *** ChanServ sets mode: +o morgan | 15:31 | |
| *** morgan changes topic to "Keystone RC this week. Check open bugs https://launchpad.net/keystone/+milestone/liberty-rc1 and review code" | 15:32 | |
| ayoung | <clippy> Henry Nash, it looks like you are trying to do a distributed transaction. Perhaps I can help</clippy> | 15:32 |
| morgan | lbragstad: ^ websso docs can we land them today? | 15:33 |
| lbragstad | morgan: they already have one +2 - https://review.openstack.org/#/c/218353/ | 15:34 |
| morgan | Ok looking now maybe i can +A | 15:34 |
| lbragstad | morgan: lhcheng has been helping me a lot with those | 15:34 |
| ayoung | henrynash, I really want to try that in devstack. Running it against a sqlite doesn't count | 15:35 |
| henrynash | ayoung: ok! | 15:35 |
| morgan | lbragstad: that was an easy +2/+A | 15:36 |
| lbragstad | morgan: thanks! | 15:36 |
| morgan | lbragstad: https://review.openstack.org/#/c/167675/ | 15:39 |
| *** itlinux has joined #openstack-keystone | 15:39 | |
| *** EinstCrazy has joined #openstack-keystone | 15:40 | |
| *** exploreshaifali has quit IRC | 15:41 | |
| *** roxanaghe has quit IRC | 15:43 | |
| morgan | stevemar marekd: https://review.openstack.org/#/c/175980/ can you work on getting that cleaned up today? | 15:43 |
| morgan | henrynash: ok so plz review https://review.openstack.org/#/c/167675/ today as well (cc dstanek ) | 15:44 |
| morgan | henrynash: and we shall see if we can land yours. That and the one I just linked to stevemar should cover rc bugs | 15:45 |
| *** stevemar has quit IRC | 15:51 | |
| *** doug-fish has joined #openstack-keystone | 15:55 | |
| *** stevemar has joined #openstack-keystone | 15:57 | |
| *** ChanServ sets mode: +v stevemar | 15:57 | |
| *** diazjf has quit IRC | 15:59 | |
| mordred | morgan: Shrews has just discovered that the doc strings in ksa point at modules that do not exist | 16:00 |
| mordred | http://git.openstack.org/cgit/openstack/keystoneauth/tree/keystoneauth1/session.py#n65 | 16:00 |
| dstanek | morgan: taking a look | 16:01 |
| *** diazjf has joined #openstack-keystone | 16:01 | |
| *** stevemar has quit IRC | 16:02 | |
| *** gyee has joined #openstack-keystone | 16:02 | |
| *** ChanServ sets mode: +v gyee | 16:02 | |
| morgan | mordred: doh | 16:02 |
| mordred | :) | 16:02 |
| morgan | mordred: at least that is easy to fix | 16:02 |
| mordred | yah | 16:02 |
| *** alejandrito has joined #openstack-keystone | 16:03 | |
| *** phalmos has quit IRC | 16:10 | |
| *** su_zhang has quit IRC | 16:11 | |
| *** phalmos has joined #openstack-keystone | 16:14 | |
| *** KarthikB has quit IRC | 16:15 | |
| *** EinstCrazy has quit IRC | 16:15 | |
| henrynash | lbragstad: any chance you could do the honors on: https://review.openstack.org/#/c/191976/ (you have +2d before, and I think we are ready for +A as well) | 16:26 |
| *** jaosorior has quit IRC | 16:27 | |
| *** wwwjfy has quit IRC | 16:27 | |
| *** esp has left #openstack-keystone | 16:35 | |
| *** stevemar has joined #openstack-keystone | 16:37 | |
| *** ChanServ sets mode: +v stevemar | 16:37 | |
| *** KarthikB has joined #openstack-keystone | 16:37 | |
| *** ankita_wagh has joined #openstack-keystone | 16:40 | |
| henrynash | morgan: yep, will review https://review.openstack.org/#/c/167675/ in a couple of hours time… | 16:41 |
| *** e0ne has quit IRC | 16:41 | |
| morgan | henrynash: if your patchsets merge plz tag them to rc1 | 16:41 |
| henrynash | morgan: will do | 16:41 |
| morgan | The bug that is* ;) | 16:42 |
| *** henrynash has quit IRC | 16:44 | |
| *** browne has quit IRC | 16:47 | |
| *** chlong has quit IRC | 16:50 | |
| *** doug-fish has quit IRC | 16:54 | |
| *** doug-fish has joined #openstack-keystone | 16:55 | |
| *** jsavak has quit IRC | 16:56 | |
| *** _cjones_ has joined #openstack-keystone | 16:56 | |
| *** jsavak has joined #openstack-keystone | 16:57 | |
| *** KarthikB has quit IRC | 16:57 | |
| *** geoffarnold is now known as geoffarnoldX | 16:58 | |
| *** roxanaghe has joined #openstack-keystone | 16:58 | |
| *** geoffarnoldX is now known as geoffarnold | 16:58 | |
| openstackgerrit | Merged openstack/keystonemiddleware: Cleanup a few auth_token comments https://review.openstack.org/224970 | 17:01 |
| *** chlong has joined #openstack-keystone | 17:02 | |
| *** esp has joined #openstack-keystone | 17:02 | |
| *** KarthikB has joined #openstack-keystone | 17:09 | |
| *** su_zhang has joined #openstack-keystone | 17:09 | |
| *** jsavak has quit IRC | 17:11 | |
| *** jsavak has joined #openstack-keystone | 17:11 | |
| *** devlaps has quit IRC | 17:12 | |
| *** itlinux has quit IRC | 17:13 | |
| openstackgerrit | Merged openstack/keystoneauth: Change ignore-errors to ignore_errors https://review.openstack.org/225740 | 17:16 |
| *** diazjf has quit IRC | 17:20 | |
| *** diazjf has joined #openstack-keystone | 17:20 | |
| *** wwwjfy has joined #openstack-keystone | 17:24 | |
| *** e0ne has joined #openstack-keystone | 17:24 | |
| *** jorge_munoz has quit IRC | 17:24 | |
| *** thedodd has joined #openstack-keystone | 17:28 | |
| openstackgerrit | Alexander Makarov proposed openstack/keystone: Unified delegation driver https://review.openstack.org/209600 | 17:28 |
| *** aix has quit IRC | 17:29 | |
| *** browne has joined #openstack-keystone | 17:33 | |
| *** wwwjfy has quit IRC | 17:37 | |
| openstackgerrit | Alexander Makarov proposed openstack/keystone: Unified delegation model https://review.openstack.org/208488 | 17:40 |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Update bandit blacklist_calls config https://review.openstack.org/225327 | 17:41 |
| ayoung | OK...had to get "run devstack from ansible" set up...been meaning to do that for a while...and Henrynash is gone. | 17:41 |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Update bandit blacklist_imports config https://review.openstack.org/225341 | 17:41 |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Enable Bandit 0.13.2 tests https://review.openstack.org/225347 | 17:41 |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Enable hardcoded_bind_all_interfaces Bandit test https://review.openstack.org/225690 | 17:42 |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Enable password_config_option_not_marked_secret Bandit test https://review.openstack.org/225691 | 17:42 |
| *** richm has quit IRC | 17:43 | |
| ayoung | gyee, have the courage of your convictions: +2 or don't review. +1 on a long lived patch set is worthless. i can see it early on for "this needs more eyeballs" but at 27 revisions...+2 the damn thing | 17:46 |
| *** harlowja has joined #openstack-keystone | 17:46 | |
| ayoung | if you upgrade yours, I'll A+ https://review.openstack.org/#/c/167675/27 | 17:46 |
| *** amoturi has left #openstack-keystone | 17:50 | |
| gyee | ayoung, David Kennedy is also HP, so I can't +2 right? | 17:50 |
| *** lhcheng has joined #openstack-keystone | 17:50 | |
| *** ChanServ sets mode: +v lhcheng | 17:50 | |
| gyee | I also did some cleanup on that patch earlier | 17:52 |
| ayoung | gyee, you can +2 | 17:53 |
| ayoung | gyee, so what | 17:54 |
| ayoung | +2 but don't +A | 17:54 |
| *** zaytsev-eug has joined #openstack-keystone | 17:55 | |
| ayoung | gyee, so long as one company doesn't railroad through a change, I think we've met the intention | 17:55 |
| gyee | ayoung, alrighty then, | 17:56 |
| gyee | k, bknudson beat me to it | 17:56 |
| gyee | lemme update :) | 17:56 |
| gyee | bknudson, want to join me for a Fugu dinner at Tokyo? :) | 17:57 |
| *** richm has joined #openstack-keystone | 17:57 | |
| ayoung | bknudson, you sure that class TestCatalogAPISQL(unit.TestCase): to class TestCatalogAPISQL(tests.TestCase): was not related. It looks right to me | 17:58 |
| bknudson | ayoung: why did it need to change? | 17:59 |
| bknudson | there's nothing in the commit message that said why the change needed to be made | 17:59 |
| ayoung | yeah...I misread that. Didn't realize it was an alias for unit....changes like that are usually to pick up different scaffolding | 18:00 |
| ayoung | self.endpoint_filter_api = endpoint_filter.Manager() actually looks right; you often need to preprecate those things to have the tests run | 18:01 |
| bknudson | I just went through and fixed all these -- https://github.com/openstack/keystone/commit/93b7f956258657c29816714cbf60360b585f4d3d | 18:01 |
| bknudson | so I don't want to see that undone for no reason | 18:01 |
| ayoung | the unit->tests changes seems strange | 18:01 |
| ayoung | ah..so he had an older copy, and rebase reverted the cahnge | 18:01 |
| ayoung | change | 18:01 |
| *** jsavak has quit IRC | 18:01 | |
| *** doug-fis_ has joined #openstack-keystone | 18:01 | |
| gyee | ayoung, can you help a brother out on this one too? https://review.openstack.org/#/c/177661/ | 18:02 |
| ayoung | gyee, looking | 18:02 |
| bknudson | gyee: might as well eat fugu | 18:02 |
| *** jsavak has joined #openstack-keystone | 18:02 | |
| morgan | Gyee you can +2 hp. But you cant +2/+A if the submitter is hp and the other core is also hp (prevents hp submitter, and 2 hp core from landing code) | 18:03 |
| *** doug-fi__ has joined #openstack-keystone | 18:03 | |
| gyee | morgan, k, sounds good, I need to update the patch per bknudson | 18:04 |
| morgan | So the rule is at least one core +2 from a company that is separate from the submitter | 18:04 |
| *** doug-f___ has joined #openstack-keystone | 18:04 | |
| ayoung | gyee, I had that half reviewed for a while...Done. | 18:05 |
| *** spandhe has joined #openstack-keystone | 18:05 | |
| gyee | morgan, I also helped babysitting it along so that was why I only +1 | 18:05 |
| *** doug-fish has quit IRC | 18:05 | |
| openstackgerrit | ayoung proposed openstack/keystonemiddleware: Enforce endpoint constraint https://review.openstack.org/177661 | 18:05 |
| *** tonytan4ever has joined #openstack-keystone | 18:05 | |
| ayoung | I made the change dave suggested | 18:05 |
| gyee | ayoung, thanks! | 18:06 |
| *** doug-fis_ has quit IRC | 18:06 | |
| *** doug-fi__ has quit IRC | 18:08 | |
| *** mylu has joined #openstack-keystone | 18:11 | |
| openstackgerrit | Matthew Edmonds proposed openstack/keystonemiddleware: only make token invalid when it really is https://review.openstack.org/217373 | 18:17 |
| *** amakarov is now known as amakarov_away | 18:21 | |
| *** mylu has quit IRC | 18:22 | |
| *** jorge_munoz has joined #openstack-keystone | 18:23 | |
| *** mylu has joined #openstack-keystone | 18:25 | |
| *** zaytsev-eug has quit IRC | 18:26 | |
| *** zaytsev-eug has joined #openstack-keystone | 18:27 | |
| *** henrynash has joined #openstack-keystone | 18:28 | |
| *** ChanServ sets mode: +v henrynash | 18:28 | |
| dstanek | ayoung: sorry, got caught up in some other stuff i am working on .. trying to test your changes now | 18:29 |
| *** tonytan4ever has quit IRC | 18:30 | |
| *** mylu has quit IRC | 18:33 | |
| *** mylu has joined #openstack-keystone | 18:33 | |
| dstanek | ayoung: getting several http://paste.openstack.org/show/473102/ | 18:34 |
| ayoung | dstanek, thisd is WIP code...ignore the LDAP tests, as I did not implement the function for the LDAP driver | 18:34 |
| dstanek | k | 18:35 |
| dstanek | just waiting for the tests to finish | 18:35 |
| ayoung | its the SQL backend I care about here...should be creating the table for inferred roles | 18:35 |
| henrynash | lbragstad: ping (sorry to hassle) | 18:35 |
| lbragstad | henrynash: o/ | 18:35 |
| henrynash | lbragstad: just wondered if you had time to look at : https://review.openstack.org/#/c/191976/ and hopefully +A (since you and +2ed it in the past) | 18:37 |
| henrynash | lbragstad: trying to get it in today for RC1 | 18:37 |
| ayoung | henrynash, still trying to setup devstack to test | 18:37 |
| *** wwwjfy has joined #openstack-keystone | 18:38 | |
| dstanek | ayoung: yep, that fails on my devstack. i'll start digging in | 18:38 |
| *** carlosmarin has joined #openstack-keystone | 18:39 | |
| lbragstad | henrynash: looking, my previous comments were minor | 18:39 |
| henrynash | lbragstad: thx | 18:39 |
| *** wwwjfy has quit IRC | 18:41 | |
| openstackgerrit | Merged openstack/python-keystoneclient-kerberos: Change ignore-errors to ignore_errors https://review.openstack.org/225816 | 18:43 |
| *** su_zhang has quit IRC | 18:45 | |
| *** su_zhang has joined #openstack-keystone | 18:49 | |
| *** tonytan4ever has joined #openstack-keystone | 18:49 | |
| *** jsavak has quit IRC | 18:49 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystonemiddleware: Updated from global requirements https://review.openstack.org/224621 | 18:55 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/python-keystoneclient-kerberos: Updated from global requirements https://review.openstack.org/224673 | 18:59 |
| *** su_zhang has quit IRC | 19:00 | |
| *** jsavak has joined #openstack-keystone | 19:02 | |
| *** gabriel-bezerra has quit IRC | 19:02 | |
| *** carlosmarin has left #openstack-keystone | 19:03 | |
| *** bradjones has quit IRC | 19:04 | |
| openstackgerrit | Steve Martinelli proposed openstack/keystone: Update the examples used for the trusted_dasboard option https://review.openstack.org/225987 | 19:06 |
| stevemar | lhcheng: dstanek ^ i think you guys were involved in that initial change ^ | 19:07 |
| *** gabriel-bezerra has joined #openstack-keystone | 19:10 | |
| *** zaytsev-eug has quit IRC | 19:11 | |
| *** doug-f___ has quit IRC | 19:15 | |
| *** doug-fish has joined #openstack-keystone | 19:16 | |
| *** doug-fish has quit IRC | 19:16 | |
| *** doug-fish has joined #openstack-keystone | 19:17 | |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Add unit tests for token_to_auth_context https://review.openstack.org/213797 | 19:17 |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Add user domain info to federated fernet tokens https://review.openstack.org/213742 | 19:18 |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Add user_domain_id, project_domain_id to auth context https://review.openstack.org/213792 | 19:18 |
| openstackgerrit | Brant Knudson proposed openstack/keystone: More info in RequestContext https://review.openstack.org/213595 | 19:18 |
| dolphm | stevemar: relaying question: does keystone + OIDC support the authorization code flow? | 19:18 |
| *** jsavak has quit IRC | 19:19 | |
| stevemar | dolphm: answering relaying question | 19:19 |
| stevemar | dolphm: the plugin that is in KSC just does the password flow | 19:19 |
| stevemar | dolphm: with that said, i've proposed to migrate that over to KSA, and additionally include the authorization code flow!!! https://review.openstack.org/#/c/224993/ | 19:19 |
| dolphm | oh fancy pants | 19:20 |
| stevemar | we have a fellow that tested it out recently with google and CLI, and it worked for him \o/ | 19:20 |
| openstackgerrit | Merged openstack/python-keystoneclient-kerberos: Updated from global requirements https://review.openstack.org/224673 | 19:20 |
| *** richm has quit IRC | 19:20 | |
| *** jsavak has joined #openstack-keystone | 19:20 | |
| stevemar | dolphm: i did it in 1 patch, since the new code was maybe +30 lines | 19:20 |
| stevemar | there is a fair bit of refactoring to make it a common class, but i'd appreciate reviews | 19:21 |
| *** ankita_wagh has quit IRC | 19:21 | |
| dolphm | stevemar: is this dependent on anything in liberty / mitaka? | 19:21 |
| stevemar | dolphm: no? | 19:21 |
| *** ankita_wagh has joined #openstack-keystone | 19:21 | |
| stevemar | dolphm: what are you thinking? | 19:21 |
| stevemar | dolphm: just the federation bits in general | 19:22 |
| dolphm | stevemar: thinking keystone stable/kilo deployed with an OIDC config for authz code flow + whatever version of keystoneauth that will ship with this to consume | 19:22 |
| dolphm | stevemar: err, hrm | 19:23 |
| stevemar | dolphm: stable/kilo running on the server side, and keystone auth on a client side should be fine | 19:23 |
| dolphm | stevemar: you're just saying we have no client-side support for the authz flow - nothing needs to change on the service side in stable/kilo? | 19:23 |
| stevemar | dolphm: correct, the changes to server side will be in your apache config | 19:24 |
| dolphm | that's more interesting then | 19:25 |
| openstackgerrit | Merged openstack/python-keystoneclient: Change ignore-errors to ignore_errors https://review.openstack.org/225815 | 19:25 |
| *** itlinux has joined #openstack-keystone | 19:26 | |
| *** ankita_wagh has quit IRC | 19:26 | |
| dolphm | stevemar: anything obviously wrong here? http://cdn.pasteraw.com/39t7co71xub62m38lqjydn1lzobmyqh | 19:27 |
| dolphm | stevemar: this is in devstack, fwiw | 19:28 |
| dolphm | running against http://keycloak.jboss.org/ | 19:28 |
| stevemar | dolphm: let me look at an example someone sent me | 19:29 |
| stevemar | dolphm: here's the config we were using: http://paste.openstack.org/show/473177/ and code: http://paste.openstack.org/show/473178/ | 19:35 |
| stevemar | dolphm: maybe change authType to oauth20 instead, i think you get more user info that way | 19:36 |
| stevemar | its better for auth code flow... something about it was important | 19:37 |
| *** richm has joined #openstack-keystone | 19:38 | |
| dolphm | stevemar: hmm, okay | 19:39 |
| *** wwwjfy has joined #openstack-keystone | 19:40 | |
| openstackgerrit | guang-yee proposed openstack/keystone: Move endpoint catalog filtering to default driver https://review.openstack.org/167675 | 19:42 |
| ayoung | stevemar, so https://review.openstack.org/#/c/224993/ does not incur any new dependencies? | 19:44 |
| *** wwwjfy has quit IRC | 19:45 | |
| *** slberger1 has joined #openstack-keystone | 19:46 | |
| *** slberger has quit IRC | 19:46 | |
| *** mylu has quit IRC | 19:49 | |
| *** slberger has joined #openstack-keystone | 19:50 | |
| *** slberger1 has quit IRC | 19:50 | |
| *** amoturi has joined #openstack-keystone | 19:53 | |
| ayoung | Diff against versions is useles.. | 19:54 |
| dstanek | ayoung: somehow you just cause all the crazy stuff | 19:59 |
| dstanek | i have no idea what's happening yet, but it looks like you are doing everything right | 19:59 |
| *** e0ne has quit IRC | 19:59 | |
| *** e0ne has joined #openstack-keystone | 20:00 | |
| *** mylu has joined #openstack-keystone | 20:01 | |
| henrynash | lbragstad: let me know if there are any questions you need answering… | 20:02 |
| lbragstad | henrynash: will do | 20:03 |
| *** jsavak has quit IRC | 20:06 | |
| *** jsavak has joined #openstack-keystone | 20:07 | |
| stevemar | ayoung: nope, no new dependencies | 20:08 |
| stevemar | its just straight json and rest calls | 20:08 |
| *** su_zhang has joined #openstack-keystone | 20:09 | |
| *** mylu has quit IRC | 20:10 | |
| *** mylu has joined #openstack-keystone | 20:10 | |
| *** mylu has quit IRC | 20:10 | |
| openstackgerrit | Steve Martinelli proposed openstack/keystoneauth: add openid connect plugins https://review.openstack.org/224993 | 20:11 |
| stevemar | dolphm: ayoung: cleaned up the commit msg a bit... ^ | 20:11 |
| *** mylu has joined #openstack-keystone | 20:11 | |
| *** amoturi has left #openstack-keystone | 20:12 | |
| *** su_zhang has quit IRC | 20:13 | |
| *** csoukup has quit IRC | 20:18 | |
| *** maxabidi has joined #openstack-keystone | 20:21 | |
| *** nicodemos has quit IRC | 20:22 | |
| *** itlinux has quit IRC | 20:22 | |
| henrynash | gyee: is it correct that one of the two changes to use iteritems in https://review.openstack.org/#/c/167675/28/keystone/catalog/backends/sql.py is still included as a change? | 20:22 |
| *** doug-fish has quit IRC | 20:26 | |
| *** tsymancz2k is now known as tsymanczyk | 20:27 | |
| gyee | henrynash, yeah, this is weird, I made the change, but the uploaded patch is different | 20:28 |
| gyee | let me see what's going on | 20:28 |
| *** e0ne has quit IRC | 20:29 | |
| *** tonytan4ever has quit IRC | 20:32 | |
| *** jsavak has quit IRC | 20:34 | |
| *** jsavak has joined #openstack-keystone | 20:34 | |
| dstanek | gyee: come on! you can do it! | 20:35 |
| gyee | dstanek, yeah, I am trying to see wth's going on with my dev env | 20:35 |
| *** topol has quit IRC | 20:35 | |
| *** topol has joined #openstack-keystone | 20:36 | |
| *** ChanServ sets mode: +v topol | 20:36 | |
| gyee | all I did was switched my email over to hpe.com after the amend | 20:36 |
| dstanek | gyee: did you forget to add the changes? | 20:37 |
| *** su_zhang has joined #openstack-keystone | 20:37 | |
| gyee | I added the changes, then do git commit -a --amend --author ".." to update my email | 20:38 |
| gyee | changing employer is not fun :) | 20:39 |
| dstanek | that algorithm in there drives me crazy | 20:39 |
| *** topol has quit IRC | 20:40 | |
| gyee | dstanek, what the sql.joinedload() statement? | 20:40 |
| *** markvoelker has quit IRC | 20:41 | |
| dstanek | no the fitering | 20:41 |
| dstanek | i have no idea what the query difference is - that would be nice for the commit message :-) | 20:41 |
| gyee | yeah, that's Mr. Kennedy's work, I'll let him answer that question | 20:41 |
| dstanek | is he here? | 20:42 |
| dstanek | we definitely shouldn't merge if nobody knows what it does :-) | 20:42 |
| gyee | he's in UK timezone | 20:43 |
| gyee | I'll ask him to add a comment there | 20:44 |
| *** tonytan4ever has joined #openstack-keystone | 20:44 | |
| *** urulama has quit IRC | 20:44 | |
| *** urulama has joined #openstack-keystone | 20:45 | |
| *** jsavak has quit IRC | 20:46 | |
| *** jsavak has joined #openstack-keystone | 20:47 | |
| dstanek | gyee: (untested), but this is what i was thinking about replacing the algorithm with http://paste.fedoraproject.org/269877/raw/ | 20:48 |
| *** mylu has quit IRC | 20:48 | |
| *** mylu has joined #openstack-keystone | 20:48 | |
| gyee | dstanek, nice, lot less code, the existing unit tests should cover it I think | 20:49 |
| dstanek | tested in that it passes the tests, but i haven't really reasoned about it yet.... | 20:49 |
| *** ankita_wagh has joined #openstack-keystone | 20:49 | |
| gyee | btw, is there option in oslo_db to log the query time? | 20:49 |
| * EmilienM | 20:49 | |
| gyee | dims__? | 20:50 |
| *** pumaranikar has joined #openstack-keystone | 20:52 | |
| henrynash | morgan: https://review.openstack.org/#/c/191976/ is gating | 20:55 |
| *** pumaranikar has quit IRC | 20:57 | |
| *** aix has joined #openstack-keystone | 20:57 | |
| *** pumaranikar has joined #openstack-keystone | 20:57 | |
| openstackgerrit | Merged openstack/keystone: Change ignore-errors to ignore_errors https://review.openstack.org/225739 | 20:58 |
| *** doug-fish has joined #openstack-keystone | 20:59 | |
| *** jsavak has quit IRC | 21:01 | |
| *** itlinux has joined #openstack-keystone | 21:02 | |
| *** raildo is now known as raildo-afk | 21:02 | |
| *** pumaranikar has quit IRC | 21:03 | |
| dstanek | gyee: you also removed David as the author | 21:03 |
| *** topol has joined #openstack-keystone | 21:04 | |
| *** ChanServ sets mode: +v topol | 21:04 | |
| gyee | dstanek, this is not good | 21:05 |
| gyee | so I updated my launchpad email to hpe.com | 21:06 |
| bknudson | gate is unblocked! | 21:06 |
| gyee | but I can't push patch till I also update the author email to hpe.com as well | 21:06 |
| gyee | but by doing so it changed the original author | 21:06 |
| bknudson | use co-authored-by | 21:07 |
| gyee | bknudson, git review won't let me push patch till the email matches | 21:07 |
| bknudson | gyee: put david as the co-author | 21:08 |
| gyee | bknudson, k, I like your suggestion | 21:08 |
| gyee | dstanek, btw, looking at the doc http://docs.sqlalchemy.org/en/rel_0_9/orm/loading_relationships.html | 21:09 |
| gyee | joinedload() is eager loading while join() is lazy loading | 21:09 |
| gyee | so joinedload() load everything at once, with an alias table | 21:09 |
| dstanek | lazy as in goes back to the database everytime for a subquery? | 21:09 |
| gyee | maybe it will grab the cursor? | 21:10 |
| dstanek | so yeah, it would be nice to know why that change was made | 21:11 |
| dstanek | gyee: the first paragraph here is exactly what i though http://docs.sqlalchemy.org/en/rel_0_9/orm/loading_relationships.html#using-loader-strategies-lazy-loading-eager-loading | 21:12 |
| dstanek | not sure why we'd want lazy in this case | 21:12 |
| *** r-daneel has quit IRC | 21:14 | |
| *** stevemar has quit IRC | 21:19 | |
| *** stevemar has joined #openstack-keystone | 21:20 | |
| *** ChanServ sets mode: +v stevemar | 21:20 | |
| *** markvoelker has joined #openstack-keystone | 21:20 | |
| *** ankita_w_ has joined #openstack-keystone | 21:23 | |
| *** stevemar has quit IRC | 21:24 | |
| *** ankita___ has joined #openstack-keystone | 21:24 | |
| *** ankita_wagh has quit IRC | 21:25 | |
| *** ankita_wagh has joined #openstack-keystone | 21:26 | |
| *** ankita___ has quit IRC | 21:26 | |
| *** ankita_w_ has quit IRC | 21:27 | |
| openstackgerrit | Merged openstack/keystonemiddleware: Updated from global requirements https://review.openstack.org/224621 | 21:35 |
| *** hrou has quit IRC | 21:41 | |
| *** wwwjfy has joined #openstack-keystone | 21:44 | |
| *** jecarey has quit IRC | 21:46 | |
| *** topol has quit IRC | 21:47 | |
| *** wwwjfy has quit IRC | 21:47 | |
| *** doug-fis_ has joined #openstack-keystone | 21:47 | |
| *** thiagop has quit IRC | 21:47 | |
| *** doug-fis_ has quit IRC | 21:48 | |
| *** topol has joined #openstack-keystone | 21:48 | |
| *** ChanServ sets mode: +v topol | 21:48 | |
| *** henrynash has quit IRC | 21:49 | |
| *** topol has quit IRC | 21:50 | |
| *** doug-fish has quit IRC | 21:50 | |
| *** tsymancz1k has quit IRC | 21:52 | |
| *** tsymanczyk has quit IRC | 21:53 | |
| *** tsymancz1k has joined #openstack-keystone | 21:58 | |
| *** topol has joined #openstack-keystone | 22:02 | |
| *** ChanServ sets mode: +v topol | 22:02 | |
| *** tsymancz2k has joined #openstack-keystone | 22:03 | |
| *** topol has quit IRC | 22:05 | |
| *** dsirrine has quit IRC | 22:05 | |
| *** alejandrito has quit IRC | 22:05 | |
| *** lhcheng_ has joined #openstack-keystone | 22:07 | |
| *** lhcheng has quit IRC | 22:07 | |
| *** tsymancz1k has quit IRC | 22:15 | |
| *** tsymancz2k has quit IRC | 22:15 | |
| *** jorge_munoz has quit IRC | 22:15 | |
| *** tsymancz1k has joined #openstack-keystone | 22:15 | |
| *** mylu has quit IRC | 22:16 | |
| *** stevemar has joined #openstack-keystone | 22:16 | |
| *** ChanServ sets mode: +v stevemar | 22:16 | |
| *** mylu has joined #openstack-keystone | 22:16 | |
| *** slberger has left #openstack-keystone | 22:17 | |
| *** mylu has quit IRC | 22:19 | |
| *** gordc has quit IRC | 22:19 | |
| *** itlinux has quit IRC | 22:19 | |
| *** stevemar has quit IRC | 22:20 | |
| *** topol has joined #openstack-keystone | 22:20 | |
| *** ChanServ sets mode: +v topol | 22:20 | |
| *** zaytsev-eug has joined #openstack-keystone | 22:21 | |
| *** tonytan4ever has quit IRC | 22:21 | |
| *** jorge_munoz has joined #openstack-keystone | 22:25 | |
| *** su_zhang has quit IRC | 22:27 | |
| *** diazjf has left #openstack-keystone | 22:27 | |
| *** jorge_munoz has quit IRC | 22:27 | |
| *** su_zhang has joined #openstack-keystone | 22:27 | |
| *** topol has quit IRC | 22:28 | |
| *** KarthikB has quit IRC | 22:29 | |
| *** mylu has joined #openstack-keystone | 22:30 | |
| *** tsymancz3k has joined #openstack-keystone | 22:30 | |
| *** mylu has quit IRC | 22:31 | |
| *** topol has joined #openstack-keystone | 22:31 | |
| *** ChanServ sets mode: +v topol | 22:31 | |
| *** mylu has joined #openstack-keystone | 22:31 | |
| *** itlinux has joined #openstack-keystone | 22:33 | |
| *** mylu has quit IRC | 22:34 | |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Enable subprocess_without_shell_equals_true Bandit test https://review.openstack.org/225692 | 22:34 |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Enable try_except_pass Bandit test https://review.openstack.org/225738 | 22:34 |
| *** su_zhang_ has joined #openstack-keystone | 22:36 | |
| *** dims__ has quit IRC | 22:37 | |
| *** thedodd has quit IRC | 22:37 | |
| *** mylu has joined #openstack-keystone | 22:37 | |
| *** su_zhang has quit IRC | 22:38 | |
| *** topol has quit IRC | 22:39 | |
| *** mylu has quit IRC | 22:39 | |
| *** mylu has joined #openstack-keystone | 22:39 | |
| *** mylu has quit IRC | 22:44 | |
| *** mylu has joined #openstack-keystone | 22:46 | |
| openstackgerrit | guang-yee proposed openstack/keystone: Move endpoint catalog filtering to default driver https://review.openstack.org/167675 | 22:46 |
| *** wwwjfy has joined #openstack-keystone | 22:47 | |
| *** mylu has quit IRC | 22:47 | |
| *** markvoelker has quit IRC | 22:48 | |
| *** wwwjfy has quit IRC | 22:52 | |
| *** mylu has joined #openstack-keystone | 22:57 | |
| *** mylu has quit IRC | 22:58 | |
| *** mylu has joined #openstack-keystone | 22:59 | |
| *** aix has quit IRC | 23:02 | |
| *** mylu has quit IRC | 23:02 | |
| *** mylu has joined #openstack-keystone | 23:02 | |
| *** mylu has quit IRC | 23:03 | |
| *** su_zhang has joined #openstack-keystone | 23:03 | |
| *** mylu has joined #openstack-keystone | 23:03 | |
| *** su_zhang_ has quit IRC | 23:06 | |
| *** mylu has quit IRC | 23:08 | |
| *** su_zhang has quit IRC | 23:09 | |
| *** su_zhang has joined #openstack-keystone | 23:10 | |
| *** edmondsw has quit IRC | 23:13 | |
| *** itlinux has quit IRC | 23:14 | |
| *** itlinux has joined #openstack-keystone | 23:17 | |
| *** zaytsev-eug has quit IRC | 23:17 | |
| *** dims has joined #openstack-keystone | 23:17 | |
| *** dims has quit IRC | 23:23 | |
| *** jamielennox|away is now known as jamielennox | 23:23 | |
| *** dims has joined #openstack-keystone | 23:23 | |
| gyee | dstanek, add the sql statements here https://review.openstack.org/#/c/167675/29/keystone/catalog/backends/sql.py | 23:30 |
| *** mylu has joined #openstack-keystone | 23:33 | |
| *** mylu has quit IRC | 23:35 | |
| *** mylu has joined #openstack-keystone | 23:36 | |
| *** dims has quit IRC | 23:39 | |
| *** mylu has quit IRC | 23:40 | |
| *** dims has joined #openstack-keystone | 23:40 | |
| *** dims_ has joined #openstack-keystone | 23:43 | |
| *** itlinux has quit IRC | 23:43 | |
| *** dims has quit IRC | 23:45 | |
| *** roxanagh_ has joined #openstack-keystone | 23:45 | |
| *** ankita_wagh has quit IRC | 23:47 | |
| *** mylu has joined #openstack-keystone | 23:47 | |
| *** wwwjfy has joined #openstack-keystone | 23:50 | |
| *** phalmos has quit IRC | 23:53 | |
| *** wwwjfy has quit IRC | 23:54 | |
| *** markvoelker has joined #openstack-keystone | 23:56 | |
| *** EinstCrazy has joined #openstack-keystone | 23:59 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!