| *** zzzeek has quit IRC | 00:04 | |
| *** roxanagh_ has quit IRC | 00:07 | |
| *** sirushti has quit IRC | 00:07 | |
| *** roxanagh_ has joined #openstack-keystone | 00:14 | |
| *** ankita_wagh has quit IRC | 00:21 | |
| *** shadower has quit IRC | 00:23 | |
| *** shadower has joined #openstack-keystone | 00:23 | |
| *** gyee has quit IRC | 00:27 | |
| *** _fortis has quit IRC | 00:33 | |
| *** d0ugal has quit IRC | 00:35 | |
| *** d0ugal has joined #openstack-keystone | 00:40 | |
| *** d0ugal is now known as Guest65853 | 00:40 | |
| *** kfox1111 is now known as kfox1111_away | 00:42 | |
| *** richm has quit IRC | 00:45 | |
| *** _fortis has joined #openstack-keystone | 00:45 | |
| *** hrou has joined #openstack-keystone | 00:46 | |
| *** edmondsw has quit IRC | 00:46 | |
| *** _hrou_ has quit IRC | 00:48 | |
| *** jecarey has joined #openstack-keystone | 00:48 | |
| *** boris-42 has quit IRC | 00:49 | |
| *** roxanagh_ has quit IRC | 00:58 | |
| *** sdake has joined #openstack-keystone | 01:03 | |
| *** mylu has joined #openstack-keystone | 01:05 | |
| *** su_zhang has quit IRC | 01:13 | |
| *** csoukup has joined #openstack-keystone | 01:22 | |
| *** roxanagh_ has joined #openstack-keystone | 01:26 | |
| *** davechen has joined #openstack-keystone | 01:30 | |
| *** davechen1 has joined #openstack-keystone | 01:37 | |
| *** davechen has quit IRC | 01:40 | |
| *** davechen has joined #openstack-keystone | 01:43 | |
| *** davechen1 has quit IRC | 01:46 | |
| *** roxanagh_ has quit IRC | 01:47 | |
| *** kiran-r has joined #openstack-keystone | 01:49 | |
| *** lhcheng_ has quit IRC | 01:49 | |
| *** kiran-r has quit IRC | 01:50 | |
| *** kiran-r has joined #openstack-keystone | 01:51 | |
| *** kiranr has joined #openstack-keystone | 01:52 | |
| *** davechen1 has joined #openstack-keystone | 01:55 | |
| *** davechen has quit IRC | 01:57 | |
| *** kiran-r has quit IRC | 01:59 | |
| *** mylu has quit IRC | 02:01 | |
| openstackgerrit | Stanislaw Pitucha proposed openstack/pycadf: Add event name https://review.openstack.org/227082 | 02:01 |
|---|---|---|
| *** roxanagh_ has joined #openstack-keystone | 02:03 | |
| *** mylu has joined #openstack-keystone | 02:06 | |
| *** sdake has quit IRC | 02:06 | |
| *** mylu has quit IRC | 02:07 | |
| *** mylu has joined #openstack-keystone | 02:08 | |
| *** mylu has quit IRC | 02:09 | |
| *** mylu_ has joined #openstack-keystone | 02:09 | |
| *** spandhe has quit IRC | 02:13 | |
| *** morgan changes topic to "Mitaka Development Cycle Open! Great Job Everyone! | All Liberty Feature Freeze -2 Holds Should be clear" | 02:15 | |
| openstackgerrit | Dave Chen proposed openstack/keystone: Refactor: Don't hard code the error code https://review.openstack.org/224545 | 02:18 |
| *** mylu_ has quit IRC | 02:23 | |
| *** mylu has joined #openstack-keystone | 02:24 | |
| *** hidekazu has joined #openstack-keystone | 02:25 | |
| openstackgerrit | Stanislaw Pitucha proposed openstack/pycadf: Fix event example https://review.openstack.org/227087 | 02:26 |
| openstackgerrit | Dave Chen proposed openstack/keystone: Declares expected_status in method signatures https://review.openstack.org/226744 | 02:27 |
| openstackgerrit | Dave Chen proposed openstack/keystone: Fixes the way v3_admin is called to match its def https://review.openstack.org/226745 | 02:27 |
| openstackgerrit | Dave Chen proposed openstack/keystone: Fixes v3_authenticate_token calls - no default https://review.openstack.org/226746 | 02:27 |
| *** mylu has quit IRC | 02:28 | |
| *** lhcheng has joined #openstack-keystone | 02:28 | |
| *** ChanServ sets mode: +v lhcheng | 02:28 | |
| *** r-daneel has quit IRC | 02:33 | |
| *** roxanagh_ has quit IRC | 02:35 | |
| *** roxanagh_ has joined #openstack-keystone | 02:35 | |
| *** woodster_ has quit IRC | 02:39 | |
| *** mylu has joined #openstack-keystone | 02:40 | |
| *** roxanagh_ has quit IRC | 02:43 | |
| *** roxanagh_ has joined #openstack-keystone | 02:43 | |
| *** ankita_wagh has joined #openstack-keystone | 02:45 | |
| *** ankita_wagh has quit IRC | 02:46 | |
| *** ankita_wagh has joined #openstack-keystone | 02:46 | |
| *** ericksonsantos has quit IRC | 02:47 | |
| *** gabriel-bezerra has quit IRC | 02:47 | |
| *** iurygregory has quit IRC | 02:47 | |
| mfisch | stevemar: nice W tonight | 02:50 |
| mfisch | sad news on CADF though, I had to pull it | 02:50 |
| *** akanksha_ has joined #openstack-keystone | 02:52 | |
| *** lhcheng has quit IRC | 02:52 | |
| openstackgerrit | Steve Martinelli proposed openstack/keystone: Uses constants for 5XX http status codes in tests https://review.openstack.org/226747 | 02:53 |
| *** ericksonsantos has joined #openstack-keystone | 02:53 | |
| *** iurygregory has joined #openstack-keystone | 02:53 | |
| *** gabriel-bezerra has joined #openstack-keystone | 02:53 | |
| *** mylu has quit IRC | 02:54 | |
| stevemar | mfisch: it was a nice W | 02:54 |
| stevemar | mfisch: oh no? wha happen? | 02:54 |
| mfisch | stevemar: its out automation, it introduced a circular dep | 02:54 |
| *** mylu has joined #openstack-keystone | 02:54 | |
| stevemar | any takers on https://review.openstack.org/#/c/224545/ <-- ayoung dstanek jamielennox dolphm | 02:54 |
| mfisch | keystone now needs rabbit, rabbit runs on control, control requires keystone | 02:54 |
| stevemar | oh | 02:55 |
| stevemar | thats nobueno | 02:55 |
| mfisch | keystone doesnt just say "oh well" without rabbit | 02:55 |
| morgan | stevemar... I might need some help on CADF things. | 02:55 |
| mfisch | it gets pretty pissed | 02:55 |
| morgan | stevemar: very soon. | 02:55 |
| ayoung | keystone needs some way to send notifications | 02:55 |
| morgan | ayoung: yes. | 02:55 |
| stevemar | morgan: well now you have mfisch for cadf too, he's an expert now | 02:55 |
| mfisch | lol | 02:55 |
| ayoung | if not rabbit, then QPID or some other messaging service...Were going to be testing with Proton and Qpid here shortly | 02:56 |
| morgan | stevemar: ooooooh voluntold! | 02:56 |
| mfisch | I like that term | 02:56 |
| morgan | stevemar: you have learned well. | 02:56 |
| stevemar | morgan: see, i'm all ready for ptl! | 02:56 |
| stevemar | hehe | 02:56 |
| mfisch | is the election over? | 02:56 |
| morgan | mfisch: the only other better one has been voluntossingunderthebus | 02:57 |
| morgan | mfisch: no, Friday | 02:57 |
| morgan | mfisch: 23:59 UTC (~4pm i think Pacific) | 02:57 |
| mfisch | I'm in Steamboat then, no openstack, only fun stuff | 02:57 |
| *** roxanagh_ has quit IRC | 02:58 | |
| * morgan is legitimately curious who's going to be the next PTL | 02:58 | |
| ayoung | morgan, you think you are curious.... | 02:58 |
| *** mylu has quit IRC | 02:58 | |
| morgan | I don't think it's a foregone conclusion | 02:59 |
| morgan | ayoung: It's ok, mostly it's so I know who to give the final words of wisdom to. | 02:59 |
| ayoung | morgan, how much conversation do you think about the end of voting time tomorrow? | 02:59 |
| morgan | before abdicating and tossing them to the wolves^w^w^w^w^whelping them into the role | 03:00 |
| *** csoukup has quit IRC | 03:00 | |
| morgan | ayoung: voting time got extended to Friday | 03:00 |
| ayoung | I read that as Whelping them... | 03:00 |
| morgan | ayoung: http://lists.openstack.org/pipermail/openstack-dev/2015-September/075297.html | 03:01 |
| morgan | so 5pm my time on friday | 03:01 |
| *** roxanagh_ has joined #openstack-keystone | 03:01 | |
| morgan | Darn it. was hoping to have Friday to relax already :P | 03:02 |
| ayoung | 1900 Hours Eastern if I can do simple math. | 03:02 |
| morgan | I still have to pay attention to the RC stuff until it's announced | 03:02 |
| morgan | Fri 7:59 PM | 03:02 |
| morgan | for your time | 03:02 |
| ayoung | World clock has it at 4 AM in London now...5 hour time difference | 03:03 |
| ayoung | Or is that not UTC? | 03:04 |
| morgan | http://www.timeanddate.com/worldclock/fixedtime.html?iso=20150925T2359 this is when it ends | 03:04 |
| morgan | 2359 on Friday UTC | 03:04 |
| morgan | so, 1659 mine, 1959 yours | 03:04 |
| ayoung | 5 O Clock will have never been so sweet | 03:05 |
| morgan | sadly it means I'm probably on the hook until sometime september 28 | 03:06 |
| *** mylu has joined #openstack-keystone | 03:09 | |
| mfisch | stevemar: is there a way to distinguish between getting a token and validating one with cadf? | 03:10 |
| *** lhcheng has joined #openstack-keystone | 03:10 | |
| *** ChanServ sets mode: +v lhcheng | 03:10 | |
| ayoung | stevemar, Im on it | 03:10 |
| davechen1 | stevemar, ayoung: thanks for reviewing this patch (https://review.openstack.org/#/c/224545/), cannot wait to see who is the next PTL. :) | 03:15 |
| ayoung | davechen1, that was mindnumbing | 03:18 |
| stevemar | mfisch: i don't fully grok what you're asking | 03:19 |
| mfisch | stevemar: is the authenticate event for getting a token? | 03:20 |
| *** davechen1 is now known as davechen | 03:20 | |
| mfisch | for some reason I thought you said it was on token validation | 03:20 |
| davechen | ayoung: i feel guilty, there is a lot of code changed but pretty straightforward. | 03:21 |
| ayoung | mfisch, they are two different API calls | 03:22 |
| ayoung | they should emit two different notifications | 03:22 |
| *** mylu has quit IRC | 03:22 | |
| mfisch | I agree | 03:22 |
| mfisch | just trying to figure out which is which from this table http://docs.openstack.org/developer/keystone/event_notifications.html | 03:23 |
| *** roxanagh_ has quit IRC | 03:25 | |
| ayoung | mfisch, never trust the docs. trust the code | 03:26 |
| *** su_zhang has joined #openstack-keystone | 03:27 | |
| *** sirushti has joined #openstack-keystone | 03:27 | |
| *** roxanagh_ has joined #openstack-keystone | 03:29 | |
| *** mylu has joined #openstack-keystone | 03:29 | |
| *** ankita_wagh has quit IRC | 03:29 | |
| ayoung | mfisch, I don't see notifications emitted for either | 03:29 |
| mfisch | odd | 03:30 |
| mfisch | I like the dont trust the docs line | 03:30 |
| ayoung | mfisch, If I really had to be sure, I would set up devstack with ceilomter and se what ceilometer actually rec'vs. I think that is the only listener registered for evetns from Keystone | 03:31 |
| *** kiran-r has joined #openstack-keystone | 03:31 | |
| ayoung | and with that..I'm headed to bed | 03:31 |
| mfisch | I've got my own listener now | 03:31 |
| mfisch | but its noisy, I'll try it in devstack with not much going on | 03:32 |
| stevemar | mfisch: oh - sry was doing other stuff | 03:32 |
| stevemar | mfisch: it happens when an authentication occurs | 03:32 |
| *** roxanagh_ has quit IRC | 03:33 | |
| stevemar | so even if it fails, its still emitted | 03:33 |
| mfisch | yep I'm capturing the outcome field | 03:33 |
| *** mylu has quit IRC | 03:33 | |
| *** roxanagh_ has joined #openstack-keystone | 03:34 | |
| stevemar | mfisch: so it happens when something hits /v3/auth | 03:34 |
| mfisch | makes sense | 03:35 |
| *** sirushti has quit IRC | 03:35 | |
| *** sirushti has joined #openstack-keystone | 03:35 | |
| mfisch | I need to figure out how I'm going to consume the events now | 03:35 |
| mfisch | im pretty bummed out | 03:35 |
| stevemar | mfisch: oh noes | 03:36 |
| davechen | stevemar, dstanek, ayoung: i am thinking there might still some changes needed besides the testcases itself, then we can say we have cleaned all of them in keystone? | 03:37 |
| davechen | the error code. | 03:37 |
| stevemar | davechen: propose a new patch :) | 03:37 |
| davechen | will estimate how many we need to change. | 03:37 |
| stevemar | davechen: let these ones merge though, since they are all gating | 03:37 |
| davechen | stevemar: sure. | 03:38 |
| *** kiran-r has quit IRC | 03:39 | |
| davechen | lhcheng: will you be in Tokyo next month? | 03:41 |
| lhcheng | davechen: I think so, I just applied for my visa yesterday. | 03:42 |
| lhcheng | davechen: did you got approved to go? | 03:42 |
| davechen | lhcheng: just applied, will it catch up? | 03:43 |
| davechen | lhcheng, stevemar: won't see you then, hope you have a good trip. | 03:43 |
| lhcheng | yeah, visa processing is just 5 days here | 03:43 |
| davechen | lhcheng: too quickly, it may need 1~2 months here, damn it. | 03:44 |
| lhcheng | davechen: that's weird. even in Manila, the Japanese visa processing is fast. Just a week. | 03:45 |
| lhcheng | maybe they need to send the application to a central embassy in China, that's why it takes so long? :( | 03:46 |
| davechen | lhcheng: i don't know, it needs even 1 month for the visa of Canada. | 03:46 |
| davechen | lhcheng: i am applying my visa to texas. | 03:47 |
| lhcheng | davechen: bummer on Japanese visa.. | 03:48 |
| *** KarthikB has joined #openstack-keystone | 03:48 | |
| lhcheng | davechen: During the ops mid-cycle they've been reminding people that if they haven't applied visa yet, it might be already too late for some. | 03:49 |
| *** topol has joined #openstack-keystone | 03:49 | |
| *** ChanServ sets mode: +v topol | 03:49 | |
| lhcheng | davechen: cool, when and where in Texas? | 03:49 |
| davechen | lhcheng: maybe in November. | 03:49 |
| davechen | lhcheng: seem more complicated for the L1 visa. | 03:50 |
| davechen | lcheng: just waiting... maybe longer than 1 month. | 03:50 |
| davechen | lhcheng: which state are you living? | 03:51 |
| lhcheng | oh L1 visa, yeah the process for that is a bit longer | 03:51 |
| *** roxanagh_ has quit IRC | 03:52 | |
| davechen | lhcheng: New york? | 03:52 |
| lhcheng | davechen: if you're doing some work in Texas, yeah L1 is necessary. | 03:52 |
| lhcheng | davechen: Bay area in California | 03:53 |
| davechen | lhcheng: where is California, is it far away from Texas. | 03:53 |
| lhcheng | davechen: just 23 hrs drive according to google maps lol | 03:54 |
| lhcheng | Sunnyvale, CA | 03:54 |
| davechen | lhcheng: lol. | 03:55 |
| *** Nirupama has joined #openstack-keystone | 03:55 | |
| dstanek | davechen: changes? you mean with status codes? | 03:56 |
| davechen | dstanek: yes, more place to do in keystone besides testcase I think. | 03:56 |
| lhcheng | davechen: I have a friend that did a road trip from West to East, might be interesting to do some day... | 03:57 |
| dstanek | davechen: yeah, i started by fixing wsgi and didn't get much past that | 03:57 |
| davechen | lhcheng: I am afraid I will be lost in US. and need you rescuse me out. :) | 03:57 |
| lhcheng | davechen: are you going to be in Austin Texas? | 03:58 |
| davechen | dstanek: the site of dstanek are working, not sure the exactly place. | 03:59 |
| davechen | lhcheng: the site of dstanek are working, not sure the exactly place. | 03:59 |
| dstanek | davechen: ? | 03:59 |
| lhcheng | davechen: maybe you meant dolphm's office? | 04:00 |
| *** mylu has joined #openstack-keystone | 04:00 | |
| davechen | dstanek: I will rotate to work in the site of Rackspace in Nov. | 04:00 |
| davechen | dstanek: may see you then. | 04:00 |
| dstanek | davechen: ah, i see. i'm only there a few times a year. | 04:00 |
| davechen | lhcheng: are they in the same place? | 04:00 |
| davechen | dstanek: you told me before, I hope I can aslo WFH in the future. | 04:01 |
| *** kiranr has quit IRC | 04:02 | |
| dstanek | davechen: dolphm is in the office a few times a week and i think lbragstad is there the majority of the time | 04:02 |
| lhcheng | davechen: dolph and lance are in San Antonio Texas, maybe you'll be heading in that office too | 04:02 |
| davechen | yep, yep. San Antonio Texas | 04:03 |
| *** hrou has quit IRC | 04:04 | |
| *** mylu has quit IRC | 04:04 | |
| *** topol has quit IRC | 04:07 | |
| *** topol has joined #openstack-keystone | 04:08 | |
| *** ChanServ sets mode: +v topol | 04:08 | |
| lhcheng | davechen: cool, at least you got your visa covered for the next summit ;) | 04:15 |
| *** rajesht__ has quit IRC | 04:21 | |
| openstackgerrit | Merged openstack/keystone: Refactor: Don't hard code the error code https://review.openstack.org/224545 | 04:37 |
| openstackgerrit | Merged openstack/keystone: Declares expected_status in method signatures https://review.openstack.org/226744 | 04:40 |
| openstackgerrit | Merged openstack/keystone: Fixes the way v3_admin is called to match its def https://review.openstack.org/226745 | 04:40 |
| openstackgerrit | Merged openstack/keystone: Fixes v3_authenticate_token calls - no default https://review.openstack.org/226746 | 04:42 |
| stevemar | lhcheng: you need a visa for japan? | 04:46 |
| stevemar | davechen: awww man, that's unfortunate :( | 04:47 |
| lhcheng | stevemar: yeah, I still don't have a US passport | 04:47 |
| stevemar | lhcheng: ohhh, i had no idea | 04:48 |
| *** ankita_wagh has joined #openstack-keystone | 04:49 | |
| *** roxanagh_ has joined #openstack-keystone | 04:51 | |
| *** fifieldt has joined #openstack-keystone | 04:52 | |
| openstackgerrit | Merged openstack/keystone: Uses constants for 5XX http status codes in tests https://review.openstack.org/226747 | 04:52 |
| *** sdake has joined #openstack-keystone | 04:55 | |
| *** roxanagh_ has quit IRC | 04:56 | |
| stevemar | lhcheng: you made me think I had forgotten a very critical step in my travel arrangements :) | 04:59 |
| *** mylu has joined #openstack-keystone | 05:00 | |
| davechen | stevemar: what's it? still don't have a Canada passport? :) | 05:04 |
| stevemar | davechen: i thought maybe i needed a visa for japan - but i don't :) | 05:04 |
| *** mylu has quit IRC | 05:05 | |
| *** ankita_wagh has quit IRC | 05:05 | |
| *** ankita_wagh has joined #openstack-keystone | 05:06 | |
| lhcheng | stevemar: hahah | 05:07 |
| lhcheng | stevemar: do you have plans to extend your stay in Japan? | 05:07 |
| stevemar | lhcheng: yep | 05:07 |
| stevemar | lhcheng: i'm thinking of getting there earlier, and staying for 3-4 extra nights | 05:07 |
| stevemar | then 3-4 extra nights in HK | 05:07 |
| *** kiran-r has joined #openstack-keystone | 05:08 | |
| davechen | stevemar: HK? I think you have been there before. | 05:08 |
| stevemar | davechen: yep, but wife wasn't been, so thinking about stopping there before home | 05:09 |
| stevemar | hasn't* | 05:09 |
| davechen | stevemar: more convinent to communicate in english. | 05:09 |
| lhcheng | stevemar: heading to Macau? | 05:09 |
| stevemar | davechen: for sure | 05:09 |
| lhcheng | stevemar: if you haven't to South Korea, that's closer | 05:09 |
| stevemar | lhcheng: nah, i went last time at the summit, i wasn't too impressed | 05:09 |
| lhcheng | stevemar: I would recommend South Korea instead of HK | 05:10 |
| stevemar | lhcheng: i wanted SK! but wife wanted HK over SK | 05:10 |
| davechen | stevemar: it take half hours if you want to stay in mainland China. | 05:10 |
| davechen | stevemar: from HK to mainland China. | 05:10 |
| *** kiran-r has quit IRC | 05:10 | |
| davechen | stevemar: so, your wife win. ;-) | 05:11 |
| stevemar | davechen: i don't think i have enough time for the visa for china :P | 05:11 |
| stevemar | davechen: she always wins | 05:11 |
| davechen | stevemar: don't know since never apply visa for china before. | 05:11 |
| stevemar | davechen: hehe, why would you! | 05:12 |
| davechen | stevemar: :) | 05:12 |
| davechen | lhcheng: have your ever been in Macau? | 05:12 |
| lhcheng | davechen: yeah, Guang, Lyle and I went there when we were in HK | 05:13 |
| davechen | lhcheng: I bet you need to take a lot of $. :) | 05:13 |
| lhcheng | davechen: lol | 05:13 |
| lhcheng | no didn't gamble | 05:13 |
| lhcheng | I don't have a good luck on gambling | 05:14 |
| davechen | lhcheng: is there anything else in Macau? | 05:14 |
| stevemar | davechen: not really | 05:14 |
| *** spandhe has joined #openstack-keystone | 05:15 | |
| davechen | small city, but grow more fater than HK. | 05:15 |
| *** roxanagh_ has joined #openstack-keystone | 05:15 | |
| lhcheng | davechen: they have this: https://en.wikipedia.org/wiki/Ruins_of_St._Paul's | 05:15 |
| stevemar | lhcheng: i went there, not much to see =\ | 05:16 |
| lhcheng | davechen: and this: https://en.wikipedia.org/wiki/Fortaleza_do_Monte | 05:16 |
| lhcheng | stevemar: yeah, it was just a facade. And it was so crowded | 05:17 |
| davechen | lhcheng: looks great! but just saw them in the TV show. Sigh! | 05:17 |
| lhcheng | stevemar: did you go to Lantau island to see the Buddha? | 05:17 |
| stevemar | lhcheng: yep, that was probably more fun than macau lol | 05:18 |
| stevemar | lots of hiking | 05:18 |
| *** roxanagh_ has quit IRC | 05:18 | |
| lhcheng | stevemar: I think I was with dolph and morgan that time, and Guang is our translator | 05:18 |
| morgan | I didn't go to macau | 05:19 |
| morgan | but I did go to lantau | 05:19 |
| davechen | crowded? have you ever got to Great Wall? | 05:19 |
| *** roxanagh_ has joined #openstack-keystone | 05:19 | |
| stevemar | davechen: i imagine that is *very* crowded | 05:20 |
| morgan | davechen: didn't make it outside of hk :( so no :( | 05:20 |
| *** spandhe_ has joined #openstack-keystone | 05:20 | |
| lhcheng | morgan: yeah, I mean for Lantau :) | 05:21 |
| davechen | you will be scared. :) | 05:21 |
| *** KarthikB has quit IRC | 05:21 | |
| lhcheng | davechen: did you try the Toboggan sled in Great wall? | 05:22 |
| *** spandhe has quit IRC | 05:22 | |
| *** spandhe_ is now known as spandhe | 05:22 | |
| davechen | lhcheng: no, cannot image, you tried before? | 05:23 |
| lhcheng | davechen: It wasn't that fun, too many people so had to go down slow :( | 05:23 |
| davechen | https://en.wikipedia.org/wiki/Kyoto, this city looks great. | 05:26 |
| *** lhcheng has quit IRC | 05:40 | |
| *** sdake has quit IRC | 05:40 | |
| *** roxanagh_ has quit IRC | 05:46 | |
| *** lhcheng has joined #openstack-keystone | 05:54 | |
| *** ChanServ sets mode: +v lhcheng | 05:54 | |
| *** annasort_ has joined #openstack-keystone | 05:58 | |
| *** annasort has quit IRC | 05:58 | |
| *** annasort_ is now known as annasort | 05:58 | |
| morgan | Kyoto is supposed to be amazing | 06:02 |
| davechen | morgan: yep, recommend you to go there although I have never been there before. :) | 06:03 |
| morgan | ^_^ | 06:05 |
| davechen | morgan: there are some ancient chinese building in the city where you will see how the old old China looks like. | 06:05 |
| morgan | oh cool | 06:05 |
| *** mylu has joined #openstack-keystone | 06:05 | |
| *** mylu has quit IRC | 06:09 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone: Imported Translations from Zanata https://review.openstack.org/226825 | 06:10 |
| *** su_zhang has quit IRC | 06:12 | |
| *** ParsectiX has joined #openstack-keystone | 06:22 | |
| *** markvoelker has quit IRC | 06:27 | |
| *** Ephur has quit IRC | 06:28 | |
| *** spandhe has quit IRC | 06:31 | |
| *** spandhe has joined #openstack-keystone | 06:31 | |
| *** boris-42 has joined #openstack-keystone | 06:34 | |
| *** henrynash has joined #openstack-keystone | 06:36 | |
| *** ChanServ sets mode: +v henrynash | 06:36 | |
| *** spandhe has quit IRC | 06:36 | |
| *** spandhe_ has joined #openstack-keystone | 06:36 | |
| *** roxanagh_ has joined #openstack-keystone | 06:47 | |
| *** flaper87 has quit IRC | 06:47 | |
| *** flaper87 has joined #openstack-keystone | 06:47 | |
| *** roxanagh_ has quit IRC | 06:52 | |
| *** browne has quit IRC | 07:07 | |
| *** stevemar has quit IRC | 07:20 | |
| *** stevemar has joined #openstack-keystone | 07:21 | |
| *** ChanServ sets mode: +v stevemar | 07:21 | |
| *** ParsectiX has quit IRC | 07:24 | |
| *** stevemar has quit IRC | 07:24 | |
| *** lhcheng has quit IRC | 07:26 | |
| *** markvoelker has joined #openstack-keystone | 07:28 | |
| *** ParsectiX has joined #openstack-keystone | 07:31 | |
| *** markvoelker has quit IRC | 07:33 | |
| *** kiranr has joined #openstack-keystone | 07:34 | |
| *** lhcheng has joined #openstack-keystone | 07:45 | |
| *** ChanServ sets mode: +v lhcheng | 07:45 | |
| *** Navid_ has joined #openstack-keystone | 07:46 | |
| *** xiaolidi has joined #openstack-keystone | 07:46 | |
| *** kiran-r has joined #openstack-keystone | 07:47 | |
| *** lhcheng has quit IRC | 07:50 | |
| *** jamielennox is now known as jamielennox|away | 07:53 | |
| *** pnavarro has joined #openstack-keystone | 07:57 | |
| *** mylu has joined #openstack-keystone | 08:06 | |
| *** Guest65853 is now known as d0ugal | 08:08 | |
| *** d0ugal has quit IRC | 08:08 | |
| *** d0ugal has joined #openstack-keystone | 08:08 | |
| *** jaosorior has joined #openstack-keystone | 08:09 | |
| *** mylu has quit IRC | 08:10 | |
| openstackgerrit | Merged openstack/keystone: Imported Translations from Zanata https://review.openstack.org/226825 | 08:11 |
| *** cloud_zhanglei has joined #openstack-keystone | 08:11 | |
| *** rm_work has quit IRC | 08:14 | |
| *** zeus has quit IRC | 08:14 | |
| *** mjb has quit IRC | 08:14 | |
| *** zeus has joined #openstack-keystone | 08:15 | |
| *** zeus is now known as Guest6879 | 08:15 | |
| *** rm_work has joined #openstack-keystone | 08:16 | |
| *** mjb has joined #openstack-keystone | 08:17 | |
| *** ankita_wagh has quit IRC | 08:28 | |
| *** spandhe_ has quit IRC | 08:40 | |
| *** shoutm has joined #openstack-keystone | 08:41 | |
| *** pnavarro has quit IRC | 08:43 | |
| *** lifeless has quit IRC | 08:49 | |
| *** amakarov_away is now known as amakarov | 08:50 | |
| *** pnavarro has joined #openstack-keystone | 08:51 | |
| *** lifeless has joined #openstack-keystone | 09:03 | |
| *** markvoelker has joined #openstack-keystone | 09:29 | |
| *** aix has quit IRC | 09:29 | |
| *** markvoelker has quit IRC | 09:34 | |
| *** lhcheng has joined #openstack-keystone | 09:34 | |
| *** ChanServ sets mode: +v lhcheng | 09:34 | |
| *** kiran-r has quit IRC | 09:37 | |
| *** lhcheng has quit IRC | 09:39 | |
| *** davechen has left #openstack-keystone | 09:54 | |
| *** kiranr has quit IRC | 10:02 | |
| *** aix has joined #openstack-keystone | 10:02 | |
| *** urulama has quit IRC | 10:03 | |
| *** urulama has joined #openstack-keystone | 10:04 | |
| *** mylu has joined #openstack-keystone | 10:07 | |
| *** akanksha_ has quit IRC | 10:08 | |
| *** mylu has quit IRC | 10:11 | |
| *** kiran-r has joined #openstack-keystone | 10:22 | |
| *** e0ne has joined #openstack-keystone | 10:23 | |
| *** e0ne has quit IRC | 10:24 | |
| *** henrynash has quit IRC | 10:28 | |
| *** EinstCrazy has joined #openstack-keystone | 10:34 | |
| *** cloud_zhanglei has quit IRC | 10:50 | |
| *** stevemar has joined #openstack-keystone | 10:52 | |
| *** ChanServ sets mode: +v stevemar | 10:52 | |
| *** stevemar has quit IRC | 10:55 | |
| *** ParsectiX has quit IRC | 11:02 | |
| *** doug-fish has joined #openstack-keystone | 11:12 | |
| samueldmq | morning all | 11:14 |
| *** ParsectiX has joined #openstack-keystone | 11:23 | |
| *** lhcheng has joined #openstack-keystone | 11:23 | |
| *** ChanServ sets mode: +v lhcheng | 11:23 | |
| *** lhcheng has quit IRC | 11:28 | |
| *** exploreshaifali has joined #openstack-keystone | 11:30 | |
| *** markvoelker has joined #openstack-keystone | 11:30 | |
| *** exploreshaifali has quit IRC | 11:32 | |
| *** markvoelker has quit IRC | 11:34 | |
| *** gordc has joined #openstack-keystone | 11:37 | |
| *** lhcheng has joined #openstack-keystone | 11:47 | |
| *** ChanServ sets mode: +v lhcheng | 11:47 | |
| *** roxanagh_ has joined #openstack-keystone | 11:50 | |
| *** lhcheng has quit IRC | 11:51 | |
| *** roxanagh_ has quit IRC | 11:55 | |
| *** doug-fish has quit IRC | 12:02 | |
| *** exploreshaifali has joined #openstack-keystone | 12:03 | |
| *** doug-fish has joined #openstack-keystone | 12:03 | |
| *** mylu has joined #openstack-keystone | 12:07 | |
| *** mylu has quit IRC | 12:12 | |
| *** exploreshaifali has quit IRC | 12:16 | |
| *** dims__ has quit IRC | 12:19 | |
| *** dims_ has joined #openstack-keystone | 12:20 | |
| *** Nirupama has quit IRC | 12:21 | |
| amakarov | samueldmq, hi! | 12:21 |
| *** raildo-afk is now known as raildo | 12:29 | |
| *** markvoelker has joined #openstack-keystone | 12:31 | |
| *** edmondsw has joined #openstack-keystone | 12:32 | |
| samueldmq | amakarov: hey, how are you doing ? | 12:34 |
| *** ParsectiX has quit IRC | 12:35 | |
| openstackgerrit | Alexander Makarov proposed openstack/keystone: Materialized path mixin for hierarchical models https://review.openstack.org/198418 | 12:36 |
| amakarov | samueldmq, I'm fine! ^^ :) | 12:36 |
| *** nicodemos has joined #openstack-keystone | 12:37 | |
| *** jamielennox|away is now known as jamielennox | 12:37 | |
| amakarov | samueldmq, I have a question for you about dynamic policy: do you have UI to edit it? | 12:37 |
| amakarov | horizon guys want to develop an editor based on Merlin project | 12:38 |
| amakarov | samueldmq, do you go to the summit? | 12:39 |
| *** kiran-r has quit IRC | 12:43 | |
| *** EinstCrazy has quit IRC | 12:46 | |
| *** stevemar has joined #openstack-keystone | 12:53 | |
| *** ChanServ sets mode: +v stevemar | 12:53 | |
| *** ParsectiX has joined #openstack-keystone | 12:55 | |
| *** stevemar has quit IRC | 12:57 | |
| *** ParsectiX has quit IRC | 12:58 | |
| *** ParsectiX has joined #openstack-keystone | 13:01 | |
| samueldmq | amakarov: cool, yes I am going to the summit | 13:05 |
| samueldmq | amakarov: we will be discussing dynamic policy there too, not sure we will get policy distributed from Keystone in openstack | 13:05 |
| *** richm has joined #openstack-keystone | 13:06 | |
| bknudson | quit focusing on keystone. put it in its own project. | 13:06 |
| *** doug-fish has quit IRC | 13:06 | |
| openstackgerrit | Jamie Lennox proposed openstack/keystonemiddleware: Don't cache signed tokens https://review.openstack.org/190941 | 13:06 |
| amakarov | bknudson, is there a name for that project already? | 13:07 |
| *** larsks has quit IRC | 13:07 | |
| bknudson | amakarov: no... for some reason everybody wants to put everything in keystone... probably so they don't have to come up with another name. | 13:07 |
| *** EinstCrazy has joined #openstack-keystone | 13:12 | |
| *** hrou has joined #openstack-keystone | 13:12 | |
| *** shoutm has quit IRC | 13:13 | |
| *** alejandrito has joined #openstack-keystone | 13:14 | |
| samueldmq | bknudson, amakarov: yes, that's an option, although we'd need to keep the role list synchronized with the other project | 13:18 |
| samueldmq | amakarov: is mirantis interested in dynamic policies? | 13:18 |
| amakarov | samueldmq, it offers a good UX and if augmented with good UI it'll be appreciated by customers' admins | 13:19 |
| amakarov | samueldmq, Timur sufiev wanted to contact you on this matter | 13:20 |
| amakarov | samueldmq, Timur Sufiev wanted to contact you on this matter | 13:20 |
| samueldmq | amakarov: is he from mirantis? | 13:20 |
| amakarov | yes, sitting just behind me :) | 13:21 |
| samueldmq | amakarov: nice | 13:21 |
| *** su_zhang has joined #openstack-keystone | 13:34 | |
| *** roxanagh_ has joined #openstack-keystone | 13:38 | |
| *** Navid__ has joined #openstack-keystone | 13:42 | |
| *** roxanagh_ has quit IRC | 13:43 | |
| *** Navid_ has quit IRC | 13:45 | |
| *** topol has quit IRC | 13:53 | |
| *** doug-fish has joined #openstack-keystone | 13:57 | |
| *** EinstCrazy has quit IRC | 13:57 | |
| *** zzzeek has joined #openstack-keystone | 13:58 | |
| openstackgerrit | Jamie Lennox proposed openstack/keystonemiddleware: More specific error checking https://review.openstack.org/227323 | 14:00 |
| openstackgerrit | Jamie Lennox proposed openstack/keystonemiddleware: Finally remove the global except handler https://review.openstack.org/227324 | 14:00 |
| *** geoffarnold has joined #openstack-keystone | 14:01 | |
| *** geoffarn_ has joined #openstack-keystone | 14:03 | |
| bknudson | jamielennox: Looks like a dup of https://review.openstack.org/#/c/217373/ & ? | 14:04 |
| jamielennox | bknudson: very similar - trying to solve the same problem it would seem | 14:06 |
| *** geoffarnold has quit IRC | 14:06 | |
| jamielennox | bknudson: i'm not sure why he's switching to serviceerrors in _identity | 14:07 |
| *** fhubik_brb has joined #openstack-keystone | 14:07 | |
| *** dims__ has joined #openstack-keystone | 14:11 | |
| jamielennox | bknudson: i don't see how the RevocationListError ever gets up to there though | 14:11 |
| *** j_king has quit IRC | 14:12 | |
| *** ParsectiX has quit IRC | 14:12 | |
| *** dims_ has quit IRC | 14:14 | |
| *** shoutm has joined #openstack-keystone | 14:16 | |
| *** tonytan4ever has joined #openstack-keystone | 14:19 | |
| *** amoturi has joined #openstack-keystone | 14:20 | |
| *** diazjf has joined #openstack-keystone | 14:21 | |
| *** KarthikB has joined #openstack-keystone | 14:22 | |
| *** marzif has joined #openstack-keystone | 14:26 | |
| *** jamielennox is now known as jamielennox|away | 14:26 | |
| *** jecarey has quit IRC | 14:29 | |
| *** pauloewerton has joined #openstack-keystone | 14:31 | |
| *** marzif_ has joined #openstack-keystone | 14:34 | |
| *** slberger has joined #openstack-keystone | 14:34 | |
| *** diazjf has quit IRC | 14:35 | |
| openstackgerrit | Alexander Makarov proposed openstack/keystone: Unified delegation model https://review.openstack.org/208488 | 14:36 |
| *** marzif has quit IRC | 14:37 | |
| openstackgerrit | Alexander Makarov proposed openstack/keystone: Unified delegation model https://review.openstack.org/208488 | 14:37 |
| *** jorge_munoz has joined #openstack-keystone | 14:39 | |
| *** EinstCrazy has joined #openstack-keystone | 14:40 | |
| *** su_zhang has quit IRC | 14:41 | |
| edmondsw | does the LDAP identity driver support AD domains/forests? | 14:51 |
| *** kiran-r has joined #openstack-keystone | 14:51 | |
| *** topol has joined #openstack-keystone | 14:53 | |
| *** ChanServ sets mode: +v topol | 14:53 | |
| bknudson | edmondsw: LDAP identity doesn't know anything about AD | 14:53 |
| bknudson | if AD uses standard LDAP then it'll work with keystone. | 14:53 |
| *** diazjf has joined #openstack-keystone | 14:54 | |
| edmondsw | it does... that I've tried. But I've never tried with domains/forests before | 14:54 |
| *** stevemar has joined #openstack-keystone | 14:54 | |
| *** ChanServ sets mode: +v stevemar | 14:54 | |
| morgan | bknudson: re translations. We will know next week if we need to backport | 14:56 |
| bknudson | morgan: so merge them? | 14:57 |
| morgan | bknudson: to the rc branch. Basically next PTL needs to talk to AJaeger, ttx, and clarkb next week | 14:57 |
| bknudson | (to master) | 14:57 |
| morgan | bknudson: i already approved the one to master last night | 14:57 |
| bknudson | next PTL is going to be busy | 14:57 |
| morgan | But yes | 14:57 |
| morgan | Go ahead and merge them to master. | 14:57 |
| *** browne1 has joined #openstack-keystone | 14:59 | |
| *** marzif_ has quit IRC | 15:03 | |
| *** fifieldt has quit IRC | 15:05 | |
| *** shoutm has quit IRC | 15:05 | |
| *** erhudy has joined #openstack-keystone | 15:06 | |
| *** marzif_ has joined #openstack-keystone | 15:07 | |
| *** geoffarn_ is now known as geoffarnoldX | 15:07 | |
| *** csoukup has joined #openstack-keystone | 15:08 | |
| *** KarthikB has quit IRC | 15:10 | |
| *** phalmos has joined #openstack-keystone | 15:10 | |
| dolphm | lbragstad: have you run this one against tempest w/ fernet? https://review.openstack.org/#/c/227015/ | 15:10 |
| *** jorge_munoz has quit IRC | 15:14 | |
| *** annasort has quit IRC | 15:17 | |
| *** annasort has joined #openstack-keystone | 15:17 | |
| *** marzif_ has quit IRC | 15:18 | |
| *** jorge_munoz has joined #openstack-keystone | 15:19 | |
| lbragstad | dolphm: no, I hit something strange...my results from yesterday's testing has changed... | 15:21 |
| *** annasort has quit IRC | 15:22 | |
| *** jorge_munoz has quit IRC | 15:24 | |
| dolphm | lbragstad: well yeah, they're transients...... right? | 15:24 |
| *** KarthikB has joined #openstack-keystone | 15:25 | |
| *** tonytan4ever has quit IRC | 15:26 | |
| *** kfox1111_away is now known as kfox1111 | 15:26 | |
| *** shoutm has joined #openstack-keystone | 15:28 | |
| *** jorge_munoz has joined #openstack-keystone | 15:29 | |
| *** lsmola has quit IRC | 15:32 | |
| dolphm | bknudson: just fyi, i'm -1'ing almost every patch related to bandit. every # nosec comment needs to be justified or this project is going to do more harm than good. | 15:36 |
| *** KarthikB has quit IRC | 15:36 | |
| bknudson | dolphm: ok, I'll add comments... or someone else can | 15:36 |
| *** geoffarnoldX is now known as geoffarn_ | 15:37 | |
| dolphm | bknudson: no, they shouldn't merge without comments. it's a terrible precedent to add a security tool and then blindly ignore absolutely everything it highlights just because the code already existed that way | 15:37 |
| *** fhubik_brb is now known as fhubik | 15:38 | |
| dolphm | bknudson: further, whenever someone proposes a real security vulnerability down the line, we'll all be used to seeing # nosec comments without any justification or thought put into it, and it'll merge, so bandit will have accomplished nothing. | 15:38 |
| bknudson | dolphm: someone else can update the patch set before it merges, too | 15:39 |
| dolphm | bknudson: if you have no intention of proposing anything other than busy work for everyone else to review, then i'd suggest abandoning the entire series. | 15:40 |
| dolphm | it's a complete waste of time as-is, for everyone | 15:40 |
| bknudson | dolphm: if people think the bandit scan is a waste of time I'll abandon it. | 15:43 |
| dolphm | bknudson: the project may not be, but this patch series certainly has no value | 15:43 |
| dolphm | bknudson: if anything, this patch series presents a security *risk* by feigning security | 15:44 |
| *** henrynash has joined #openstack-keystone | 15:44 | |
| *** ChanServ sets mode: +v henrynash | 15:44 | |
| bknudson | dolphm: if you think it's busy-work to have to document why the #nosec is used then we might as well abandon it... submitters will always have to figure out why they need to #nosec. | 15:45 |
| dolphm | bknudson: and the WHY should be documented in an inline comment for everyone | 15:45 |
| *** ParsectiX has joined #openstack-keystone | 15:47 | |
| *** _cjones_ has quit IRC | 15:51 | |
| *** KarthikB has joined #openstack-keystone | 15:52 | |
| *** annasort has joined #openstack-keystone | 15:52 | |
| *** wwwjfy has quit IRC | 15:56 | |
| *** kiran-r has quit IRC | 15:58 | |
| *** fhubik is now known as fhubik_brb | 15:59 | |
| *** thiagop has joined #openstack-keystone | 16:00 | |
| *** fhubik_brb is now known as fhubik | 16:02 | |
| *** marzif has joined #openstack-keystone | 16:03 | |
| *** pnavarro has quit IRC | 16:03 | |
| *** phalmos has quit IRC | 16:04 | |
| *** jaosorior has quit IRC | 16:05 | |
| *** jaosorior has joined #openstack-keystone | 16:06 | |
| *** jorge_munoz has quit IRC | 16:08 | |
| *** jorge_munoz has joined #openstack-keystone | 16:08 | |
| *** spandhe has joined #openstack-keystone | 16:09 | |
| *** _cjones_ has joined #openstack-keystone | 16:12 | |
| *** wwwjfy has joined #openstack-keystone | 16:13 | |
| *** phalmos has joined #openstack-keystone | 16:13 | |
| *** jorge_munoz has quit IRC | 16:13 | |
| *** pumaranikar has joined #openstack-keystone | 16:15 | |
| *** ankita_wagh has joined #openstack-keystone | 16:17 | |
| *** geoffarn_ has quit IRC | 16:18 | |
| *** ankita_wagh has quit IRC | 16:18 | |
| *** ankita_wagh has joined #openstack-keystone | 16:18 | |
| *** jorge_munoz has joined #openstack-keystone | 16:18 | |
| *** jorge_munoz has quit IRC | 16:19 | |
| *** c_soukup has joined #openstack-keystone | 16:20 | |
| *** markvoelker_ has joined #openstack-keystone | 16:21 | |
| *** wwwjfy_ has joined #openstack-keystone | 16:21 | |
| dstanek | bknudson: you around? | 16:21 |
| *** henrynash_ has joined #openstack-keystone | 16:22 | |
| *** ChanServ sets mode: +v henrynash_ | 16:22 | |
| *** henrynash has quit IRC | 16:24 | |
| *** henrynash_ is now known as henrynash | 16:24 | |
| *** afazekas has quit IRC | 16:24 | |
| *** markvoelker has quit IRC | 16:24 | |
| *** gabriel-bezerra has quit IRC | 16:24 | |
| *** wolsen has quit IRC | 16:24 | |
| *** x58 has quit IRC | 16:24 | |
| *** wwwjfy has quit IRC | 16:24 | |
| *** csoukup has quit IRC | 16:24 | |
| *** nicodemos has quit IRC | 16:24 | |
| *** david8hu has quit IRC | 16:24 | |
| *** afazekas has joined #openstack-keystone | 16:24 | |
| *** x58 has joined #openstack-keystone | 16:24 | |
| *** wolsen has joined #openstack-keystone | 16:24 | |
| *** david8hu has joined #openstack-keystone | 16:25 | |
| *** gabriel-bezerra has joined #openstack-keystone | 16:25 | |
| *** nicodemos has joined #openstack-keystone | 16:25 | |
| *** jorge_munoz has joined #openstack-keystone | 16:25 | |
| *** pushkaru has joined #openstack-keystone | 16:27 | |
| *** pumarani__ has joined #openstack-keystone | 16:27 | |
| *** roxanagh_ has joined #openstack-keystone | 16:27 | |
| *** pushkaru has left #openstack-keystone | 16:27 | |
| *** pumarani__ has quit IRC | 16:28 | |
| *** lhcheng has joined #openstack-keystone | 16:28 | |
| *** ChanServ sets mode: +v lhcheng | 16:28 | |
| *** spandhe_ has joined #openstack-keystone | 16:31 | |
| *** spandhe has quit IRC | 16:33 | |
| *** spandhe_ is now known as spandhe | 16:33 | |
| *** roxanagh_ has quit IRC | 16:33 | |
| *** EinstCrazy has quit IRC | 16:34 | |
| *** henrynash_ has joined #openstack-keystone | 16:34 | |
| *** ChanServ sets mode: +v henrynash_ | 16:34 | |
| *** henrynash has quit IRC | 16:35 | |
| *** henrynash_ is now known as henrynash | 16:35 | |
| *** fhubik has quit IRC | 16:42 | |
| openstackgerrit | Merged openstack/keystonemiddleware: Change ignore-errors to ignore_errors https://review.openstack.org/225742 | 16:43 |
| *** raildo is now known as raildo-afk | 16:45 | |
| *** raildo-afk is now known as raildo | 16:48 | |
| *** browne1 has quit IRC | 16:49 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: Consolidate the fernet provider validate_v3_token() https://review.openstack.org/196877 | 16:51 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: Consolidate the fernet provider issue_v2_token() https://review.openstack.org/197647 | 16:51 |
| *** mylu has joined #openstack-keystone | 16:53 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: Allow Fernet to return TokenNotFound https://review.openstack.org/219848 | 16:56 |
| lbragstad | dolphm: ^ | 16:56 |
| *** spandhe has quit IRC | 16:56 | |
| dolphm | lbragstad: did you address previous comments or just rebase? | 16:57 |
| lbragstad | dolphm: I just rebased... addressing the comments now | 16:57 |
| *** su_zhang has joined #openstack-keystone | 16:59 | |
| dolphm | lbragstad: https://review.openstack.org/#/c/219848/ needs a new commit message or to be merged into an underlying patch | 17:00 |
| openstackgerrit | Merged openstack/keystone: Correct comment to not be driver-specific https://review.openstack.org/226992 | 17:00 |
| lbragstad | dolphm: yeah, working on that now | 17:00 |
| lbragstad | dolphm: should have a bug associated to it - https://review.openstack.org/#/c/196877 | 17:01 |
| *** slberger1 has joined #openstack-keystone | 17:02 | |
| *** henrynash has quit IRC | 17:02 | |
| *** slberger has quit IRC | 17:03 | |
| *** marzif has quit IRC | 17:05 | |
| *** su_zhang has quit IRC | 17:05 | |
| *** marzif has joined #openstack-keystone | 17:05 | |
| *** su_zhang has joined #openstack-keystone | 17:05 | |
| lbragstad | dolphm: here is the bug - https://bugs.launchpad.net/keystone/+bug/1477600 | 17:06 |
| openstack | Launchpad bug 1477600 in Keystone kilo "Token Validation API returns 401 not 404 on invalid fernet token" [Medium,Fix committed] - Assigned to Dolph Mathews (dolph) | 17:06 |
| openstackgerrit | Merged openstack/pycadf: Fix event example https://review.openstack.org/227087 | 17:06 |
| bknudson | dstanek: I'm here. Where would I go? (lunch) | 17:06 |
| dstanek | bknudson: i try to stay out of people's private lives | 17:07 |
| *** su_zhang has quit IRC | 17:08 | |
| bknudson | oops, ossg meeting time. | 17:08 |
| *** su_zhang has joined #openstack-keystone | 17:08 | |
| bknudson | also, doing the oslo doc sprint if anyone's interested | 17:08 |
| *** su_zhang has quit IRC | 17:09 | |
| *** su_zhang has joined #openstack-keystone | 17:09 | |
| *** shoutm has quit IRC | 17:11 | |
| dstanek | bknudson: i was thinking of just duplicating the composites in the paste.ini to fix https://bugs.launchpad.net/keystone/+bug/1499462 | 17:15 |
| openstack | Launchpad bug 1499462 in Keystone "Apache/WSGI configuration requires editing keystone-paste.ini" [Undecided,New] | 17:15 |
| dstanek | bknudson: doing a quick test now just to see what would need to change if we just changes the existing names | 17:16 |
| bknudson | dstanek: it's strange we need that... devstack didn't | 17:16 |
| bknudson | dstanek: https://review.openstack.org/#/c/194729/ | 17:17 |
| *** nicodemos has quit IRC | 17:17 | |
| dstanek | bknudson: is there code somewhere that strips off keystone-wsgi? | 17:18 |
| bknudson | dstanek: here's what it's supposed to be calling http://git.openstack.org/cgit/openstack/keystone/tree/keystone/server/wsgi.py | 17:19 |
| bknudson | so since it passes 'admin' and 'main' those are the pipelines that should be used | 17:19 |
| dstanek | oh, wait...hmmm | 17:19 |
| bknudson | this is also what keystone.py did: http://git.openstack.org/cgit/openstack/keystone/tree/httpd/keystone.py | 17:20 |
| bknudson | except it calculated the name (admin or main) from the script name | 17:20 |
| *** spandhe has joined #openstack-keystone | 17:23 | |
| *** raildo is now known as raildo-afk | 17:24 | |
| dstanek | bknudson: i commented on the bug | 17:26 |
| bknudson | dstanek: you may be right that they copied the scripts instead of the ones generated by pbr | 17:27 |
| *** su_zhang has quit IRC | 17:29 | |
| morgan | ooh bknudson having +2 on oslo things... | 17:29 |
| morgan | this is a good thing ;) | 17:30 |
| *** exploreshaifali has joined #openstack-keystone | 17:33 | |
| *** raildo-afk is now known as raildo | 17:34 | |
| *** mylu has quit IRC | 17:38 | |
| openstackgerrit | Alexander Makarov proposed openstack/keystone: Unified delegation model https://review.openstack.org/208488 | 17:39 |
| openstackgerrit | Alexander Makarov proposed openstack/keystone: Unified delegation driver https://review.openstack.org/209600 | 17:39 |
| dstanek | morgan: ++ | 17:39 |
| *** pumaranikar has quit IRC | 17:39 | |
| bknudson | as if I don't have enough reviews to do! | 17:39 |
| *** browne has joined #openstack-keystone | 17:40 | |
| morgan | bknudson: you could run for TC while you're at it and PTL next cycle | 17:40 |
| morgan | bknudson: You have plenty of time for all that right? | 17:40 |
| bknudson | morgan: don't go thinking I'm a dhellmann. | 17:41 |
| *** geoffarnold has joined #openstack-keystone | 17:41 | |
| *** tonytan4ever has joined #openstack-keystone | 17:42 | |
| morgan | bknudson: hehe | 17:43 |
| chris_19 | another cache question | 17:48 |
| chris_19 | I thought I read somewhere that you didn't want to have the regular cache and the token backend cache on the same server. Is that true, or did I make that up in my head? | 17:49 |
| *** phalmos has quit IRC | 17:50 | |
| morgan | chris_19: you just don't want to use the memcache token driver at all | 17:50 |
| bknudson | chris_19: some people like to make the token cache large enough so they never swap out | 17:50 |
| * morgan looks forward to the day the memcache token driver dies. | 17:50 | |
| chris_19 | got it | 17:51 |
| chris_19 | so, the next question is, why not? | 17:51 |
| chris_19 | :) | 17:51 |
| morgan | chris_19: if you're using fernet - because you don't have to | 17:52 |
| morgan | chris_19: but if you're not using fernet because memcache is an inappropriate store for long-term data. While tokens are ephemeral, they need persistence. | 17:52 |
| *** aix has quit IRC | 17:52 | |
| chris_19 | i see | 17:52 |
| morgan | chris_19: and there is a whole mess of house keeping code that can't be made more efficient in that driver since we have no way to index / cross query | 17:53 |
| morgan | chris_19: so you have 2 issues, 1) horrible code to work around limitations of memcache/key-value-store [and that you have hard limits on the maximum number of tokens per user because of page-allocation sizes], and 2) it's the wrong technology for the job | 17:53 |
| chris_19 | morgan: hank you | 17:56 |
| morgan | one of the main reasons fernet was designed to be persistent-less was to avoid unbounded token table (SQL) or bad design/wrong technology (memcache) just to hold onto the token data for validations. Keystone has all of the info, lets use that instead of relying on persistence. Now... we could simply cache fernet token responses [easy] and alleviate some of the cost but still be able to reconstruct if there is a cache miss (I think we do | 17:56 |
| morgan | most of this). Some things can be improved on this front too | 17:56 |
| chris_19 | thank you, even | 17:56 |
| morgan | :) | 17:56 |
| *** slberger1 has quit IRC | 17:56 | |
| *** su_zhang has joined #openstack-keystone | 17:56 | |
| * morgan maaaaaay have spent a lot of time mucking around in the token subsystems | 17:56 | |
| *** slberger has joined #openstack-keystone | 17:59 | |
| *** spandhe has quit IRC | 17:59 | |
| *** pumaranikar has joined #openstack-keystone | 18:00 | |
| dstanek | wasn't there a want (maybe even a plan at some point) to get rid of domain scoped tokens? | 18:04 |
| chris_19 | wot | 18:05 |
| *** pumaranikar has quit IRC | 18:05 | |
| bknudson | dstanek: we're getting rid of domains | 18:06 |
| openstackgerrit | Alexander Makarov proposed openstack/keystone: Unified delegation driver https://review.openstack.org/209600 | 18:06 |
| chris_19 | why? | 18:08 |
| bknudson | hierarchical multitenancy projects takes over domain function | 18:08 |
| chris_19 | interesting | 18:09 |
| dstanek | bknudson: yeah, that's why i was wondering why we wanted to get rid of domain scoped tokens. even with HMT we seem to have them. | 18:10 |
| chris_19 | "That's going to require some changes" -understated coworker | 18:10 |
| *** su_zhang has quit IRC | 18:12 | |
| bknudson | it's going to take a while | 18:14 |
| *** tonytan4ever has quit IRC | 18:15 | |
| *** roxanagh_ has joined #openstack-keystone | 18:15 | |
| dstanek | so right now we scope to domain_id or project_id.... in the future we will scope to project_is and is_domain. so i wanted to see if that's also has the problems of domain scoped tokens. | 18:16 |
| *** arunkant_ has joined #openstack-keystone | 18:16 | |
| bknudson | dstanek: what problems does domain-scoped tokens have? | 18:18 |
| dstanek | bknudson: no idea, that's why i wanted to know if we did want to removed them. and if someone said yes i would have asked why :-) | 18:19 |
| dstanek | i remember hearing complaints about it at either a mid-cycle or summit | 18:19 |
| bknudson | people think you're supposed to be able to use them outside of keystone to work on any object in a project in the domain | 18:20 |
| *** tonytan4ever has joined #openstack-keystone | 18:20 | |
| morgan | bknudson: things like nova have no clue what a domain scope is | 18:20 |
| morgan | bknudson: pretty much nothing in openstack except keystone does | 18:20 |
| morgan | so the issue is you have a token that causes weird errors | 18:21 |
| bknudson | y, we didn't design it for other projects | 18:21 |
| *** roxanagh_ has quit IRC | 18:21 | |
| morgan | so with the move to just everything is projects | 18:21 |
| morgan | (is_domain is transparent outside of keystone), no more weird errors | 18:21 |
| morgan | or at least less weird errors | 18:21 |
| openstackgerrit | Eric Brown proposed openstack/keystone: Handle 16-char non-uuid user IDs in payload https://review.openstack.org/226121 | 18:22 |
| bknudson | that will be cleaner... we need to get this hmt stuff in | 18:23 |
| *** jorge_munoz has quit IRC | 18:23 | |
| * morgan is seeing side benefits of the cleanup that HMT brings... but some of the other HMT stuff is ... well... *shrug* | 18:23 | |
| raildo | :'( | 18:24 |
| *** pumaranikar has joined #openstack-keystone | 18:25 | |
| *** jorge_munoz has joined #openstack-keystone | 18:25 | |
| chris_19 | huh | 18:26 |
| *** su_zhang has joined #openstack-keystone | 18:29 | |
| *** phalmos has joined #openstack-keystone | 18:29 | |
| samueldmq | ayoung: ping o/ | 18:30 |
| samueldmq | ayoung: poicies ? what are the plans .. | 18:31 |
| samueldmq | tsufiev and amakarov suggested we could suggest a cross-project section at the summit | 18:31 |
| *** ParsectiX has quit IRC | 18:36 | |
| stevemar | dstanek: reviewing osc patches now? :) | 18:36 |
| dstanek | stevemar: i've started reviewing a couple different projects that i wanted to start submitting patches to | 18:37 |
| *** ParsectiX has joined #openstack-keystone | 18:37 | |
| *** r-daneel has joined #openstack-keystone | 18:37 | |
| dstanek | stevemar: i was thinking it would be nicer to participate a little before i started checking code at people | 18:37 |
| *** ankita_wagh has quit IRC | 18:37 | |
| morgan | dstanek: throw code! | 18:37 |
| morgan | dstanek: refactor everything! don't take suggestions to fix it... oh wait no not that | 18:38 |
| bknudson | we need to get rid of v2... it's getting too complicated to support it alongside the new v3 features. | 18:38 |
| stevemar | dstanek: i'll review any of your patches, i like you that much | 18:38 |
| dstanek | stevemar: thanks steve! | 18:38 |
| dstanek | morgan: some things i want to do may be frightening to people....this is going to be fun | 18:39 |
| morgan | bknudson: as soon as we have a v3-only gate job that works [with v2 disabled] we can 100% officially deprecate v2 | 18:39 |
| bknudson | halloween is coming up | 18:39 |
| morgan | bknudson: then it's just a waiting game | 18:40 |
| morgan | and documenting "how to turn V2 back on" | 18:40 |
| morgan | for longer tail support in deployments | 18:40 |
| morgan | also.. crap policy.json -> v3 policy.json needs a simple(ish) migration tool | 18:40 |
| morgan | that can take some inputs and provide a useful output unless someone has gone off and totally customized their policy which case *no warranty™* | 18:41 |
| morgan | but the gate job is the important part...and should be close (I think there is an ironic fix and then some general cleanup needed) | 18:41 |
| *** su_zhang has quit IRC | 18:43 | |
| *** ankita_wagh has joined #openstack-keystone | 18:45 | |
| *** amakarov is now known as amakarov_away | 18:47 | |
| *** pumaranikar has quit IRC | 18:49 | |
| *** pumaranikar has joined #openstack-keystone | 18:50 | |
| openstackgerrit | Andreas Jaeger proposed openstack/keystone: Cleanup of Translations https://review.openstack.org/227473 | 18:57 |
| *** aix has joined #openstack-keystone | 19:01 | |
| *** Ephur has joined #openstack-keystone | 19:02 | |
| *** grantbow has quit IRC | 19:06 | |
| *** doug-fish has quit IRC | 19:07 | |
| *** chris_19 has left #openstack-keystone | 19:07 | |
| *** grantbow has joined #openstack-keystone | 19:07 | |
| *** grantbow has quit IRC | 19:22 | |
| *** ParsectiX has quit IRC | 19:22 | |
| *** ankita_wagh has quit IRC | 19:23 | |
| *** grantbow has joined #openstack-keystone | 19:24 | |
| *** grantbow has joined #openstack-keystone | 19:24 | |
| dstanek | dolphm: if https://review.openstack.org/#/c/225373 doesn't merge will the bot keep proposing it? | 19:26 |
| bknudson | dstanek: if the bot keeps proposing the same change then it's broken | 19:27 |
| dolphm | dstanek: yeah, next time theres a new diff it'll use the same changeid | 19:27 |
| *** ParsectiX has joined #openstack-keystone | 19:27 | |
| dstanek | ok, didn't know if that one got abandoned if it would think the change still needs to be made and propose again | 19:28 |
| *** Navid__ has quit IRC | 19:28 | |
| bknudson | if it's abandoned then I'd expect it to be re-proposed | 19:28 |
| bknudson | with a new change-id | 19:29 |
| *** woodster_ has joined #openstack-keystone | 19:36 | |
| dstanek | bknudson: that was my fear. so not merging means i have to keep looking at if or have it show up again as a new review | 19:37 |
| dstanek | bknudson: not trying to pile -1s on your bandit reviews, but i'm going -1 them so i don't see them in next-review anymore | 19:37 |
| dolphm | dstanek: just downvote it until it submits a new patchset | 19:38 |
| dolphm | dstanek: for proposalbot ^ | 19:38 |
| dstanek | dolphm: ah, that's a good point - that's what i'm doing to the bandit reviews :-) | 19:39 |
| dolphm | dstanek: or, would this work? NOT label:Code-Review+0,self | 19:40 |
| *** grantbow has quit IRC | 19:42 | |
| dstanek | dolphm: i'm not even sure what that does :-) | 19:43 |
| *** grantbow has joined #openstack-keystone | 19:43 | |
| dolphm | dstanek: i was hoping it would filter out code reviews without votes (just ones with a comment) | 19:44 |
| *** henrynash has joined #openstack-keystone | 19:44 | |
| *** ChanServ sets mode: +v henrynash | 19:44 | |
| dolphm | dstanek: i can't get such a filter to work without a non-zero vote | 19:49 |
| *** alejandrito has quit IRC | 19:53 | |
| openstackgerrit | Joshua Harlow proposed openstack/oslo.policy: Add shields.io version/downloads links/badges into README.rst https://review.openstack.org/227518 | 19:56 |
| dolphm | dstanek: ooh, i think i got it https://review.openstack.org/#/dashboard/?Not+Commented+On=NOT+label:Code-Review%253C%253D0+AND+NOT+label:Code-Review%253E%253D0+AND+is:watched+AND+is:open,n,z | 19:57 |
| dolphm | dstanek: so if you leave a comment without voting it'll be dropped from that list | 19:57 |
| *** doug-fish has joined #openstack-keystone | 19:58 | |
| bknudson | dstanek: no problem. | 20:07 |
| *** su_zhang has joined #openstack-keystone | 20:07 | |
| ayoung | samueldmq, policies? You mean DYnamic policy? I'm going to purse getting the inferred roles working in Keystone itself first. We'll circle back around on policies over time, but I want to get more buy-in at the Tokyo summit | 20:08 |
| morgan | dolphm: can you make that query only work for reviews with the comments on the current patchset? [i admit i didn't look] | 20:09 |
| morgan | so new patchset = review pops back up | 20:09 |
| dolphm | morgan: that should be what it does by default | 20:09 |
| samueldmq | ayoung: okay, so no cross-proj session for now | 20:09 |
| dolphm | morgan: and you can't opt out of that behavior | 20:09 |
| *** jaosorior has quit IRC | 20:10 | |
| dolphm | morgan: are you seeing a different behavior? i only tested the query with a single review | 20:10 |
| ayoung | No, we want a cross-project session...did they put out the the signup for that yet? | 20:10 |
| samueldmq | ayoung: http://odsreg.openstack.org/ | 20:10 |
| morgan | dolphm: i haven't checked | 20:11 |
| *** su_zhang has quit IRC | 20:11 | |
| morgan | dolphm: but my last query that looked like that tended to show / not show if I had ever commented | 20:11 |
| ayoung | samueldmq, I'm suggesting one now./ Thanks | 20:11 |
| samueldmq | ayoung: ++ | 20:11 |
| samueldmq | tsufiev: amakarov_away cc ^ | 20:12 |
| *** jaosorior has joined #openstack-keystone | 20:12 | |
| *** jorge_munoz has quit IRC | 20:13 | |
| openstackgerrit | Henrique Truta proposed openstack/keystone: Manager support for projects acting as domains https://review.openstack.org/213448 | 20:13 |
| openstackgerrit | Henrique Truta proposed openstack/keystone: Add is_domain parameter to get_project_by_name https://review.openstack.org/210600 | 20:14 |
| slberger | is any one familiar with how fernet tokens interact with a token persistence backend like memcache? Like if say in the keystone.conf you set under [token] provider=fernet and driver=memcache. I would imagine not at all because they are non-persistent, but I am not sure. | 20:15 |
| ayoung | samueldmq, http://odsreg.openstack.org/cfp/details/12 | 20:15 |
| morgan | slberger: nothing is stored in the backend | 20:15 |
| morgan | slberger: fernet tokens bypass the persist-token-to-the-backend step | 20:16 |
| slberger | morgan, thats what I thought, so it should have no effect | 20:16 |
| *** KarthikB has quit IRC | 20:16 | |
| morgan | slberger: yeah, use SQL driver (default) though with fernet | 20:16 |
| morgan | slberger: (don't set the value) | 20:16 |
| slberger | morgan, any reason in particular as to why? | 20:17 |
| slberger | oo ok | 20:17 |
| morgan | slberger: less configs to set, less opportunity to get wonky | 20:17 |
| dolphm | and then you can run SELECT COUNT(*) FROM `token`; all day long and see zero results, it's really satisfying | 20:17 |
| morgan | dolphm: you can technically do that even with the memcache driver and uuid tokens | 20:17 |
| dolphm | shh | 20:17 |
| morgan | dolphm: *shiftyeyes* | 20:17 |
| slberger | morgan, dolphm, thanks | 20:18 |
| *** jorge_munoz has joined #openstack-keystone | 20:18 | |
| samueldmq | ayoung: nice | 20:19 |
| ayoung | samueldmq, I think I am going to really push for the split of the policy into role section and scope section. | 20:20 |
| samueldmq | ayoung: then two files ? | 20:23 |
| samueldmq | ayoung: the role section is what rbac really is | 20:24 |
| *** su_zhang has joined #openstack-keystone | 20:24 | |
| samueldmq | ayoung: i.e authz, however the scope section, I don't know what it is | 20:24 |
| openstackgerrit | Joshua Harlow proposed openstack/pycadf: Add shields.io version/downloads links/badges into README.rst https://review.openstack.org/227538 | 20:24 |
| *** diazjf has left #openstack-keystone | 20:25 | |
| *** c_soukup has quit IRC | 20:26 | |
| *** mylu has joined #openstack-keystone | 20:27 | |
| openstackgerrit | Henrique Truta proposed openstack/keystone: Change project name constraints https://review.openstack.org/158372 | 20:30 |
| openstackgerrit | Henrique Truta proposed openstack/keystone: Replicate domain info in projects table https://review.openstack.org/211170 | 20:30 |
| *** mylu has quit IRC | 20:30 | |
| *** gyee has joined #openstack-keystone | 20:34 | |
| *** ChanServ sets mode: +v gyee | 20:34 | |
| *** Navid__ has joined #openstack-keystone | 20:34 | |
| *** slDabbler has joined #openstack-keystone | 20:36 | |
| ayoung | samueldmq, scope is when you have to fetch a VM entry out of the database before you can check that the project on the token matches the project one the VM | 20:40 |
| ayoung | figuring out how to match scope is object by object. | 20:41 |
| *** exploreshaifali has quit IRC | 20:41 | |
| ayoung | we don;'t want people configuring that | 20:41 |
| *** mylu has joined #openstack-keystone | 20:46 | |
| *** mylu has quit IRC | 20:50 | |
| *** mylu has joined #openstack-keystone | 20:51 | |
| *** jgriffith has quit IRC | 20:51 | |
| *** mylu has quit IRC | 20:55 | |
| *** ParsectiX has quit IRC | 20:55 | |
| *** ParsectiX has joined #openstack-keystone | 20:56 | |
| *** raildo is now known as raildo-afk | 20:56 | |
| *** edmondsw has quit IRC | 21:02 | |
| roxanaghe | stevemar, I'm trying to setup a websso with saml in horizon, but it seems like after I choose the IDP from the drop-down list I' redirected to an url of the form: http://<idp_host>/dashboard/auth/login/None/auth/OS_FEDERATION/websso/saml?origin=http://<idp_host>/dashboard/auth/websso/ | 21:04 |
| roxanaghe | stevemar, I'm thinking I'm redirected to a wrong url, you have any idea why? | 21:05 |
| *** hrou has quit IRC | 21:07 | |
| *** roxanagh_ has joined #openstack-keystone | 21:09 | |
| dolphm | roxanaghe: definitely the wrong URL! there's a None in there for some reason... | 21:11 |
| *** phalmos has quit IRC | 21:14 | |
| *** roxanagh_ has quit IRC | 21:14 | |
| roxanaghe | dolphm, right... it seems like horizon doesn't seem to understand my federation protocol choice.. | 21:15 |
| dolphm | roxanaghe: any idea what the None is supposed to be? | 21:17 |
| *** ParsectiX has quit IRC | 21:17 | |
| dolphm | roxanaghe: i can't find any such URL documented anywhere | 21:18 |
| *** ParsectiX has joined #openstack-keystone | 21:18 | |
| roxanaghe | dolphm, basically the URL should be http://<idp_host>:5000/v3/auth/OS_FEDERATION/websso/saml?origin=http://<idp_host>/auth/websso/ | 21:18 |
| roxanaghe | I just don't know why I'm getting that dashboard junk and I'm not redirected to the :5000/v3 url | 21:19 |
| dolphm | roxanaghe: that's not even close... | 21:19 |
| roxanaghe | dolphm, I know :)) I practically followed this wiki http://docs.openstack.org/developer/keystone/extensions/websso.html but obviously something is not right.. | 21:20 |
| dolphm | stevemar: ping ^ | 21:21 |
| *** pauloewerton has quit IRC | 21:21 | |
| stevemar | roxanaghe: ohhhh i know that one | 21:22 |
| stevemar | dolphm: roxanaghe sorry, i was on a call | 21:22 |
| stevemar | roxanaghe: make sure you have the latest DOA installed | 21:22 |
| roxanaghe | stevemar, no worries | 21:22 |
| stevemar | https://pypi.python.org/pypi/django_openstack_auth | 21:22 |
| stevemar | it should be 2.0.0 | 21:22 |
| *** ParsectiX has quit IRC | 21:22 | |
| roxanaghe | stevemar, oh ok - is it in the latest devstack? | 21:22 |
| stevemar | check pip freeze, you probably have an old one | 21:22 |
| stevemar | should be, might it might not have auto updated for you | 21:23 |
| roxanaghe | stevemar, ok let me check | 21:23 |
| stevemar | roxanaghe: yeah, i encountered that a while ago, and lhcheng told me to update DOA :) | 21:23 |
| *** KarthikB has joined #openstack-keystone | 21:24 | |
| *** dims__ has quit IRC | 21:29 | |
| *** ayoung has quit IRC | 21:30 | |
| roxanaghe | stevemar, yay that worked, thanks :) | 21:31 |
| *** henrynash has quit IRC | 21:31 | |
| stevemar | roxanaghe: awesome! | 21:32 |
| *** pumaranikar has quit IRC | 21:32 | |
| lhcheng | roxanaghe: \o/ | 21:32 |
| roxanaghe | stevemar, I still have dashboard in there for the origin url.. even though that doesn't seem to matter..at least for now.. | 21:33 |
| roxanaghe | lhcheng: good fix :) | 21:33 |
| lhcheng | the /dashboard depends on which web context horizon is running | 21:34 |
| lhcheng | for devstack setup, horizon defaults to the /dashboard context | 21:34 |
| *** doug-fis_ has joined #openstack-keystone | 21:37 | |
| roxanaghe | lhcheng, ok so will I have a problem because my configured trusted_dashboard does not contain 'dashboard' in it? | 21:37 |
| lhcheng | roxanaghe: it used to be just "/" before.. | 21:40 |
| *** doug-fish has quit IRC | 21:40 | |
| *** x58 has quit IRC | 21:40 | |
| *** marzif has quit IRC | 21:40 | |
| *** x58 has joined #openstack-keystone | 21:40 | |
| lhcheng | roxanaghe: how do you access your horizon instance? the trusted_dashboard config must match that. | 21:41 |
| *** alejandrito has joined #openstack-keystone | 21:41 | |
| lhcheng | roxanaghe: what is the URL you use to access horizon? | 21:42 |
| roxanaghe | lhcheng, just http://host | 21:43 |
| roxanaghe | lhcheng and then it redirects me to http://hostname/dashboard/auth/login/?next=/dashboard/ | 21:44 |
| lhcheng | roxanaghe: ah there's a URL redirection setup on the horizon apache config. | 21:46 |
| lhcheng | for your trusted_dashboard config, add the /dashboard too | 21:47 |
| roxanaghe | lhcheng, oh I see the redirection config interesting :) | 21:48 |
| *** KarthikB has quit IRC | 21:48 | |
| lhcheng | It was added for backward compatability | 21:48 |
| lhcheng | :) | 21:48 |
| lhcheng | so users won't be surprised why http://<hostname>/ suddenly stopped working | 21:49 |
| *** spandhe has joined #openstack-keystone | 21:50 | |
| roxanaghe | lhcheng, so what's the recommended way to access horizon? | 21:50 |
| openstackgerrit | Eric Brown proposed openstack/keystone: Handle 16-char non-uuid user IDs in payload https://review.openstack.org/226121 | 21:51 |
| lhcheng | for devstack, http://<hostname>/dashboard | 21:51 |
| *** jlvillal has quit IRC | 21:51 | |
| *** dims_ has joined #openstack-keystone | 21:52 | |
| *** tonytan4ever has quit IRC | 21:54 | |
| *** e0ne has joined #openstack-keystone | 21:56 | |
| *** ankita_wagh has joined #openstack-keystone | 21:57 | |
| *** jlvillal has joined #openstack-keystone | 21:57 | |
| *** ankita_wagh has quit IRC | 21:58 | |
| *** ankita_wagh has joined #openstack-keystone | 21:59 | |
| *** doug-fis_ has quit IRC | 22:00 | |
| dolphm | lbragstad: got my first clean run of tempest without modifying tempest | 22:01 |
| lbragstad | dolphm: nice! | 22:01 |
| lbragstad | dolphm: any py27 failures? | 22:01 |
| dolphm | lbragstad: probably :P | 22:02 |
| dolphm | lbragstad: it seems we may have been modifying the wrong attribute in the revocation model http://cdn.pasteraw.com/nd590mzi05bddg1c0zzeg8ypz68dwk9 | 22:02 |
| dolphm | lbragstad: i'm running the tempest test repeatedly until it fails with this patch now, to ensure there's no transients | 22:03 |
| *** annasort has quit IRC | 22:04 | |
| lbragstad | good deal... so issued_before is the only one to change | 22:04 |
| *** topol has quit IRC | 22:04 | |
| dolphm | lbragstad: yes | 22:09 |
| *** doug-fish has joined #openstack-keystone | 22:10 | |
| dolphm | lbragstad: ugh *facepalm* this is really just getting us back to square one. | 22:11 |
| *** urulama has quit IRC | 22:11 | |
| *** ayoung has joined #openstack-keystone | 22:11 | |
| *** ChanServ sets mode: +v ayoung | 22:11 | |
| openstackgerrit | Merged openstack/oslo.policy: Add shields.io version/downloads links/badges into README.rst https://review.openstack.org/227518 | 22:12 |
| *** urulama has joined #openstack-keystone | 22:12 | |
| dolphm | lbragstad: shouldn't this patch re-introduce the security hole? tokens created shortly before a password change event will not be revoked now, right? | 22:13 |
| *** slberger has left #openstack-keystone | 22:16 | |
| *** e0ne has quit IRC | 22:17 | |
| *** hrou has joined #openstack-keystone | 22:19 | |
| *** pnavarro has joined #openstack-keystone | 22:20 | |
| *** gordc has quit IRC | 22:22 | |
| *** amoturi has left #openstack-keystone | 22:25 | |
| *** roxanaghe_ has joined #openstack-keystone | 22:29 | |
| *** stevemar has quit IRC | 22:30 | |
| *** roxanaghe has quit IRC | 22:31 | |
| *** su_zhang has quit IRC | 22:37 | |
| *** zzzeek has quit IRC | 22:40 | |
| *** roxanaghe has joined #openstack-keystone | 22:41 | |
| *** roxanaghe has quit IRC | 22:46 | |
| *** slDabbler has quit IRC | 22:54 | |
| *** pnavarro has quit IRC | 23:00 | |
| *** alejandrito has quit IRC | 23:03 | |
| *** markvoelker_ has quit IRC | 23:04 | |
| *** dims_ has quit IRC | 23:05 | |
| *** su_zhang has joined #openstack-keystone | 23:07 | |
| *** ayoung has quit IRC | 23:07 | |
| openstackgerrit | Merged openstack/keystone: Cleanup of Translations https://review.openstack.org/227473 | 23:23 |
| openstackgerrit | Joshua Harlow proposed openstack/pycadf: Include changelog/history in docs https://review.openstack.org/227585 | 23:29 |
| *** stevemar has joined #openstack-keystone | 23:31 | |
| *** ChanServ sets mode: +v stevemar | 23:31 | |
| harlowja | do u guys still want notifications about pycadf in here? | 23:32 |
| * harlowja noticed they weren't getting sent to oslo channel (fixed @ https://review.openstack.org/227586 ) | 23:32 | |
| harlowja | but i can remove from keystone channel if wanted to | 23:33 |
| *** stevemar has quit IRC | 23:33 | |
| morgan | harlowja: pycadf is part of Keystone | 23:33 |
| morgan | harlowja: and not oslo | 23:33 |
| harlowja | hmm | 23:33 |
| harlowja | odd | 23:33 |
| morgan | was by choice | 23:33 |
| harlowja | k | 23:34 |
| harlowja | https://wiki.openstack.org/wiki/Oslo#pyCADF maybe shouldn't be there? | 23:34 |
| morgan | since almost all the reviews were by the keystone team at the time | 23:34 |
| harlowja | idk | 23:34 |
| harlowja | lol, we are fixing up doc stuff for it anyway :-p | 23:34 |
| harlowja | https://etherpad.openstack.org/p/oslo-liberty-virtual-doc-sprint | 23:34 |
| morgan | sure. | 23:34 |
| morgan | i mean, I don't really have a vested interest | 23:34 |
| morgan | ;) | 23:34 |
| harlowja | :-P | 23:34 |
| morgan | Feel free to ask the next PTL if they want to continue to keep pycadf under keystone | 23:35 |
| harlowja | k | 23:35 |
| harlowja | fair nuff | 23:35 |
| harlowja | thx | 23:35 |
| harlowja | morgan u are supposed to review https://review.openstack.org/#/c/209661/ also, lol | 23:36 |
| harlowja | and/or http://odsreg.openstack.org/cfp/details/8 | 23:36 |
| harlowja | lol | 23:36 |
| harlowja | if i have to i'll bore everyone trying to explain paxos, raft, zab, lol | 23:37 |
| morgan | or you're going to have to .. you know it | 23:37 |
| morgan | :P | 23:37 |
| *** topol has joined #openstack-keystone | 23:38 | |
| *** ChanServ sets mode: +v topol | 23:38 | |
| morgan | unfortunately I have very little bandwidth to review that stuff... until a week or so out | 23:38 |
| *** erhudy has quit IRC | 23:39 | |
| *** agireud has quit IRC | 23:42 | |
| *** shoutm has joined #openstack-keystone | 23:45 | |
| *** lhcheng_ has joined #openstack-keystone | 23:53 | |
| *** topol has quit IRC | 23:54 | |
| *** nzeer has quit IRC | 23:55 | |
| *** ayoung has joined #openstack-keystone | 23:55 | |
| *** ChanServ sets mode: +v ayoung | 23:55 | |
| *** jamielennox|away is now known as jamielennox | 23:56 | |
| *** arunkant_ has quit IRC | 23:56 | |
| *** lhcheng has quit IRC | 23:56 | |
| *** mjb has quit IRC | 23:56 | |
| *** trey has quit IRC | 23:56 | |
| *** harlowja has quit IRC | 23:56 | |
| *** rm_work has quit IRC | 23:56 | |
| *** r-daneel has quit IRC | 23:57 | |
| *** darrenc has quit IRC | 23:57 | |
| *** gus has quit IRC | 23:57 | |
| *** briancline has quit IRC | 23:57 | |
| *** harlowja has joined #openstack-keystone | 23:57 | |
| *** darrenc_ has joined #openstack-keystone | 23:57 | |
| *** geoffarnold has quit IRC | 23:57 | |
| *** darrenc_ is now known as darrenc | 23:58 | |
| *** briancline has joined #openstack-keystone | 23:59 | |
| *** gus has joined #openstack-keystone | 23:59 | |
| *** r-daneel has joined #openstack-keystone | 23:59 | |
| *** trey has joined #openstack-keystone | 23:59 | |
| *** rm_work has joined #openstack-keystone | 23:59 | |
| *** nzeer has joined #openstack-keystone | 23:59 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!