*** mjb has joined #openstack-keystone | 00:00 | |
*** hidekazu has quit IRC | 00:01 | |
*** markvoelker has joined #openstack-keystone | 00:02 | |
*** su_zhang has quit IRC | 00:04 | |
*** dsirrine has quit IRC | 00:05 | |
*** jaosorior has quit IRC | 00:06 | |
*** jaosorior has joined #openstack-keystone | 00:06 | |
*** EinstCrazy has joined #openstack-keystone | 00:07 | |
*** wwwjfy_ is now known as wwwjfy | 00:08 | |
*** woodster_ has quit IRC | 00:09 | |
*** EinstCrazy has quit IRC | 00:10 | |
*** annasort has joined #openstack-keystone | 00:12 | |
*** spandhe has quit IRC | 00:13 | |
*** spandhe has joined #openstack-keystone | 00:15 | |
*** Navid__ has quit IRC | 00:17 | |
*** thiagop has quit IRC | 00:17 | |
*** dsirrine has joined #openstack-keystone | 00:20 | |
*** shadower has quit IRC | 00:23 | |
*** shadower has joined #openstack-keystone | 00:23 | |
*** shoutm has quit IRC | 00:23 | |
*** chlong has quit IRC | 00:25 | |
*** shoutm has joined #openstack-keystone | 00:25 | |
*** roxanaghe has joined #openstack-keystone | 00:29 | |
*** alejandrito has joined #openstack-keystone | 00:32 | |
*** roxanaghe has quit IRC | 00:34 | |
*** dims_ has joined #openstack-keystone | 00:35 | |
*** lhcheng_ has quit IRC | 00:40 | |
openstackgerrit | Jamie Lennox proposed openstack/keystoneauth: Allow fetching oslo.config Opts from plugins https://review.openstack.org/227611 | 00:41 |
---|---|---|
*** agireud has joined #openstack-keystone | 00:42 | |
*** zzzeek has joined #openstack-keystone | 00:47 | |
*** zzzeek has quit IRC | 00:47 | |
*** _cjones_ has quit IRC | 00:48 | |
openstackgerrit | Davanum Srinivas (dims) proposed openstack/pycadf: Add shields.io version/downloads links/badges into README.rst https://review.openstack.org/227619 | 00:57 |
*** dsirrine has quit IRC | 00:57 | |
*** stevemar has joined #openstack-keystone | 00:57 | |
*** ChanServ sets mode: +v stevemar | 00:57 | |
*** pumaranikar has joined #openstack-keystone | 00:58 | |
*** shoutm_ has joined #openstack-keystone | 01:00 | |
*** david-lyle has quit IRC | 01:01 | |
*** wwwjfy has quit IRC | 01:01 | |
*** wwwjfy has joined #openstack-keystone | 01:01 | |
*** alejandrito has quit IRC | 01:01 | |
*** shoutm has quit IRC | 01:02 | |
*** pumaranikar has quit IRC | 01:04 | |
*** browne has quit IRC | 01:06 | |
*** EinstCrazy has joined #openstack-keystone | 01:12 | |
*** r-daneel has quit IRC | 01:14 | |
*** jorge_munoz has quit IRC | 01:17 | |
*** spandhe has quit IRC | 01:17 | |
*** jorge_munoz has joined #openstack-keystone | 01:19 | |
*** gyee has quit IRC | 01:24 | |
*** jorge_munoz has quit IRC | 01:26 | |
*** chlong has joined #openstack-keystone | 01:28 | |
*** Daisy has joined #openstack-keystone | 01:31 | |
*** wwwjfy has quit IRC | 01:34 | |
*** richm has quit IRC | 01:40 | |
*** ankita_w_ has joined #openstack-keystone | 01:46 | |
*** davechen1 has joined #openstack-keystone | 01:50 | |
*** ankita_wagh has quit IRC | 01:50 | |
*** topol has joined #openstack-keystone | 01:55 | |
*** ChanServ sets mode: +v topol | 01:55 | |
*** topol has quit IRC | 01:59 | |
*** ankita_w_ has quit IRC | 02:03 | |
*** mylu has joined #openstack-keystone | 02:03 | |
Daisy | Hi, who could help me understand if python-keystoneclient is deprecated or not ? | 02:03 |
*** ankita_wagh has joined #openstack-keystone | 02:03 | |
*** shoutm_ has quit IRC | 02:04 | |
stevemar | Daisy: whats up? :) | 02:04 |
Daisy | Hi | 02:05 |
stevemar | the CLI is deprecated, the keystoneclient package is still going to be around to serve python bindings | 02:05 |
Daisy | I'm from I18n team. I want to understand if python-keystoneclient is deprecated or not. I want to know if you hope to have the keystone python client in the translation website or not ? | 02:06 |
*** mylu has quit IRC | 02:06 | |
*** spandhe has joined #openstack-keystone | 02:06 | |
Daisy | Will python-openstackclient be used instead of keystoneclient ? | 02:07 |
stevemar | Daisy: going forward we want users to only use openstackclient, not keystoneclient | 02:07 |
Daisy | ok. CLI is deprecated. | 02:08 |
stevemar | yup | 02:08 |
Daisy | So I think maybe keystoneclient could be removed from translation website. Because there will be no user facing messages there. | 02:08 |
Daisy | Thank you, stevemar | 02:12 |
*** shoutm has joined #openstack-keystone | 02:14 | |
*** mylu has joined #openstack-keystone | 02:15 | |
*** mylu has quit IRC | 02:15 | |
*** mylu has joined #openstack-keystone | 02:16 | |
*** roxanaghe has joined #openstack-keystone | 02:17 | |
*** jgriffith has joined #openstack-keystone | 02:18 | |
*** browne has joined #openstack-keystone | 02:21 | |
*** roxanaghe has quit IRC | 02:21 | |
*** mylu has quit IRC | 02:23 | |
*** mylu has joined #openstack-keystone | 02:24 | |
*** mylu has quit IRC | 02:25 | |
*** mylu has joined #openstack-keystone | 02:25 | |
*** mylu has quit IRC | 02:29 | |
*** mylu has joined #openstack-keystone | 02:29 | |
*** mylu has quit IRC | 02:33 | |
*** wwwjfy has joined #openstack-keystone | 02:38 | |
*** lhcheng has joined #openstack-keystone | 02:39 | |
*** ChanServ sets mode: +v lhcheng | 02:39 | |
stevemar | Daisy: sure, what do i need to do to remove it from the translation website? | 02:46 |
Daisy | No, you don' | 02:46 |
Daisy | You don't need to. | 02:46 |
Daisy | I will take care of it. | 02:46 |
Daisy | Thank you for the information. | 02:46 |
stevemar | Daisy: cool | 02:46 |
*** topol has joined #openstack-keystone | 02:48 | |
*** ChanServ sets mode: +v topol | 02:48 | |
*** Daisy_ has joined #openstack-keystone | 02:48 | |
*** Daisy has quit IRC | 02:51 | |
*** darrenc is now known as darrenc_afk | 02:54 | |
*** Daisy_ has quit IRC | 02:55 | |
*** Daisy has joined #openstack-keystone | 02:55 | |
*** mylu has joined #openstack-keystone | 03:01 | |
*** mylu has quit IRC | 03:06 | |
*** mylu has joined #openstack-keystone | 03:06 | |
*** annasort has quit IRC | 03:07 | |
*** ankita_wagh has quit IRC | 03:07 | |
*** dims_ has quit IRC | 03:08 | |
*** darrenc_afk is now known as darrenc | 03:12 | |
*** sdake has joined #openstack-keystone | 03:13 | |
*** ankita_wagh has joined #openstack-keystone | 03:16 | |
*** ankita_wagh has quit IRC | 03:17 | |
*** ankita_wagh has joined #openstack-keystone | 03:17 | |
*** Daisy_ has joined #openstack-keystone | 03:19 | |
*** ankita_wagh has quit IRC | 03:19 | |
*** ankita_wagh has joined #openstack-keystone | 03:19 | |
*** Daisy has quit IRC | 03:20 | |
*** Daisy_ is now known as Daisy | 03:20 | |
*** ankita_wagh has quit IRC | 03:21 | |
*** ankita_wagh has joined #openstack-keystone | 03:21 | |
*** ankita_wagh has quit IRC | 03:23 | |
*** ankita_wagh has joined #openstack-keystone | 03:23 | |
*** mylu has quit IRC | 03:24 | |
*** mylu has joined #openstack-keystone | 03:25 | |
*** lhcheng has quit IRC | 03:26 | |
*** mylu_ has joined #openstack-keystone | 03:26 | |
*** mylu_ has quit IRC | 03:26 | |
*** mylu_ has joined #openstack-keystone | 03:27 | |
*** markvoelker has quit IRC | 03:27 | |
*** mylu has quit IRC | 03:29 | |
*** mylu_ has quit IRC | 03:31 | |
*** mylu has joined #openstack-keystone | 03:31 | |
*** urulama has quit IRC | 03:36 | |
*** urulama has joined #openstack-keystone | 03:37 | |
bknudson | Daisy: there are user-facing messages in keystoneclient. they'd be displayed in the openstack cli | 03:41 |
Daisy | but cli is deprecated, right ? | 03:41 |
stevemar | bknudson: late night, i see the oslo team is working you hard now | 03:42 |
bknudson | Daisy: openstack cli is not deprecated | 03:42 |
bknudson | stevemar: we're sprinting, so no sleep | 03:42 |
Daisy | cli in keystoneclient is deprected ? | 03:42 |
bknudson | Daisy: yes, it is. | 03:42 |
Daisy | that's the answer. | 03:42 |
bknudson | the openstack cli is not deprecated, and it can display strings from keystoneclient | 03:43 |
Daisy | openstackclient is a project in translation website, and people could translate strings in openstackclient. Is that enough for keystone ? | 03:44 |
bknudson | Daisy: no. it might get strings from keystoneclient. | 03:44 |
*** ayoung has quit IRC | 03:44 | |
Daisy | oh, I didn't know that. | 03:45 |
bknudson | also, keystoneclient can be used by customer applications so they might want translated strings | 03:45 |
Daisy | ok. | 03:45 |
Daisy | stevemar: what's your point ? | 03:48 |
*** mylu has quit IRC | 03:48 | |
stevemar | Daisy: yeah, bknudson is correct, openstackclient still receives strings from keystoneclient, (it uses keystoneclient to perform the requests) | 03:49 |
Daisy | so it is valuable to put keystoneclient in the translation website. | 03:50 |
Daisy | stevemar and bknudson : will openstackclient uses keystoneclient forever, or do you have plan to change it in the future ? | 03:51 |
stevemar | Daisy: i think so, yes. it doesn't have too many strings, but there are some | 03:52 |
stevemar | Daisy: openstackclient will use keystoneclient for a while, but keystoneclient will remove it's shell: https://github.com/openstack/python-keystoneclient/blob/master/keystoneclient/v2_0/shell.py | 03:53 |
stevemar | which is where most of the translations are | 03:54 |
Daisy | keystoneclient will remove its shell to openstackclient ? | 03:54 |
Daisy | I mean, in the future, where does openstackclient get response messages to keystone command ? | 03:55 |
stevemar | Daisy: openstackclient will still call the python libraries in keystoneclient, so, it could still receive messages like: https://github.com/openstack/python-keystoneclient/blob/master/keystoneclient/v3/roles.py#L65-L71 | 03:55 |
Daisy | ok. | 03:56 |
Daisy | I will ask AJaeger to include keystoneclient in the translation projects. | 03:57 |
stevemar | Daisy: yes, but don't include the shell.py file, since we'll be removing that one, and that's where 90% of the translations are | 03:57 |
Daisy | :) | 03:59 |
Daisy | stevemar: it's not able to not include a single file. But when you are remove it, the translations will be removed automatically. | 03:59 |
Daisy | when you are going to remove it, stevemar ? | 04:00 |
Daisy | in M release ? | 04:00 |
stevemar | Daisy: some time in M | 04:00 |
stevemar | thats the goal! | 04:00 |
Daisy | ok. | 04:00 |
Daisy | Thank you, stevemar . I got what I want. | 04:00 |
stevemar | Daisy: would it help if we didn't mark the strings in shell.py as translation strings? | 04:01 |
openstackgerrit | Dave Chen proposed openstack/keystonemiddleware: update middlewarearchitecture.rst https://review.openstack.org/219162 | 04:01 |
stevemar | we just leave them with "" instead of _() | 04:01 |
Daisy | stevemar: no need to bother to do that. Keep your common way. | 04:02 |
Daisy | stevemar: I don't think keystoneclient will be translated very much before you move the shell file. | 04:03 |
Daisy | stevemar: we haven't set up the plan to translate those client projects yet. | 04:04 |
jamielennox | stevemar: we may as well remove it right? If we need to remove the shell file the only thing left is exception messages and they will move to KSA for ksc2 | 04:04 |
Daisy | stevemar: we are still in preparation. | 04:04 |
*** roxanaghe has joined #openstack-keystone | 04:05 | |
Daisy | stevemar: you don't need to bother to update _() to "". If you add new strings to shall, you may choose not mark them with _() if you want to delete shell sometime in M release. That would be helpful. | 04:05 |
stevemar | jamielennox: what about the one i linked a few lines back? | 04:06 |
*** hrou has quit IRC | 04:07 | |
Daisy | go for lunch now. | 04:07 |
jamielennox | stevemar: yea, they'd come from ksc, might argue though they should be different exceptions and that openstackclient should be writing the messages | 04:07 |
jamielennox | (i only just read the last few lines) | 04:08 |
jamielennox | :qa | 04:08 |
jamielennox | bah | 04:08 |
openstackgerrit | Dave Chen proposed openstack/keystonemiddleware: update middlewarearchitecture.rst https://review.openstack.org/219162 | 04:08 |
*** roxanaghe has quit IRC | 04:10 | |
openstackgerrit | Steve Martinelli proposed openstack/keystoneauth: Add shields.io version/downloads links/badges into README.rst https://review.openstack.org/227652 | 04:10 |
openstackgerrit | Steve Martinelli proposed openstack/keystonemiddleware: Add shields.io version/downloads links/badges into README.rst https://review.openstack.org/227653 | 04:12 |
*** Daisy has quit IRC | 04:12 | |
openstackgerrit | Steve Martinelli proposed openstack/python-keystoneclient: Add shields.io version/downloads links/badges into README.rst https://review.openstack.org/227654 | 04:13 |
*** jgriffith has quit IRC | 04:18 | |
openstackgerrit | Steve Martinelli proposed openstack/python-keystoneclient: auto-generate release history https://review.openstack.org/227655 | 04:20 |
*** hidekazu has joined #openstack-keystone | 04:21 | |
*** Navid__ has joined #openstack-keystone | 04:21 | |
openstackgerrit | Steve Martinelli proposed openstack/keystonemiddleware: auto-generate release history https://review.openstack.org/227656 | 04:23 |
stevemar | jamielennox: :q! | 04:24 |
stevemar | jamielennox: i thought you were trying to write some clever emoticon | 04:24 |
jamielennox | stevemar: not that cool, just bog standard multi-montior alt-tab mistakes | 04:25 |
stevemar | jamielennox: oh i realized it wasn't that, you're not *that* cool | 04:26 |
stevemar | hehe | 04:26 |
jamielennox | it's a low bar of cool - not sure the emphasis was required... | 04:26 |
*** cloud_zhanglei has joined #openstack-keystone | 04:27 | |
stevemar | jamielennox: true true | 04:27 |
openstackgerrit | Steve Martinelli proposed openstack/keystoneauth: auto-generate release history https://review.openstack.org/227657 | 04:27 |
*** markvoelker has joined #openstack-keystone | 04:27 | |
openstackgerrit | Steve Martinelli proposed openstack/keystoneauth: auto-generate release history https://review.openstack.org/227657 | 04:27 |
*** cloud_zhanglei has quit IRC | 04:28 | |
openstackgerrit | Steve Martinelli proposed openstack/keystoneauth: remove references to keystone CLI https://review.openstack.org/227658 | 04:31 |
stevemar | jamielennox: there you go, lots of easy ones for you to knock out | 04:32 |
*** markvoelker has quit IRC | 04:32 | |
jamielennox | stevemar: shields.io badges? | 04:34 |
stevemar | jamielennox: i had no idea what that was until today | 04:35 |
*** diazjf has joined #openstack-keystone | 04:35 | |
stevemar | but its the little thingy that says the amount of downloads and such | 04:35 |
*** csoukup has joined #openstack-keystone | 04:35 | |
jamielennox | yea - is that something we're doing? | 04:35 |
jamielennox | cause README.rst ends up on the github page and docs etc | 04:36 |
*** roxanaghe has joined #openstack-keystone | 04:36 | |
jamielennox | (i'm happy to just want to know if it's an all openstack thing or we're doing it ourselves) | 04:36 |
stevemar | jamielennox: the oslo guys did it to all their projects today during their doc sprint | 04:37 |
jamielennox | ok | 04:37 |
jamielennox | next question - ChangeLog is the one generated from git history right? | 04:38 |
jamielennox | by pbr | 04:38 |
jamielennox | we want that in docs/ | 04:38 |
jamielennox | ? | 04:38 |
*** su_zhang has joined #openstack-keystone | 04:46 | |
stevemar | jamielennox: yeah its just the commit msg | 04:46 |
stevemar | you can see how it is by pulling down and running tox -e docs | 04:46 |
stevemar | jamielennox: or click the jenkins docs job here; https://review.openstack.org/#/c/227585/ | 04:47 |
jamielennox | yea, it's just verbose and doesn't give you much actual info | 04:47 |
stevemar | looks like this http://docs-draft.openstack.org/85/227585/1/check/gate-pycadf-docs/943a3de//doc/build/html/history.html | 04:48 |
stevemar | yeah, i agree | 04:48 |
stevemar | jamielennox: for OSC we may not do it | 04:48 |
stevemar | jamielennox: but for KSC/KSA/KSM... there is nothing | 04:48 |
openstackgerrit | Dave Chen proposed openstack/keystonemiddleware: update middlewarearchitecture.rst https://review.openstack.org/219162 | 04:49 |
*** wwwjfy has quit IRC | 04:52 | |
*** roxanaghe has quit IRC | 04:57 | |
*** roxanaghe has joined #openstack-keystone | 04:58 | |
*** stevemar has quit IRC | 05:02 | |
*** stevemar has joined #openstack-keystone | 05:02 | |
*** ChanServ sets mode: +v stevemar | 05:02 | |
*** kiran-r has joined #openstack-keystone | 05:03 | |
*** kiran-r has quit IRC | 05:04 | |
*** stevemar has quit IRC | 05:04 | |
*** wwwjfy has joined #openstack-keystone | 05:07 | |
*** shoutm has quit IRC | 05:08 | |
*** ankita_w_ has joined #openstack-keystone | 05:09 | |
*** ankita_wagh has quit IRC | 05:11 | |
*** shoutm has joined #openstack-keystone | 05:14 | |
openstackgerrit | Merged openstack/pycadf: Add shields.io version/downloads links/badges into README.rst https://review.openstack.org/227619 | 05:14 |
*** roxanaghe has quit IRC | 05:18 | |
openstackgerrit | Dave Chen proposed openstack/keystonemiddleware: Configuration is outdated https://review.openstack.org/220545 | 05:19 |
*** diazjf has quit IRC | 05:22 | |
*** topol has quit IRC | 05:26 | |
*** topol has joined #openstack-keystone | 05:32 | |
*** ChanServ sets mode: +v topol | 05:32 | |
*** shoutm_ has joined #openstack-keystone | 05:45 | |
*** shoutm has quit IRC | 05:49 | |
*** csoukup has quit IRC | 05:55 | |
*** markvoelker has joined #openstack-keystone | 05:59 | |
*** ankita_w_ has quit IRC | 06:00 | |
*** openstackgerrit has quit IRC | 06:01 | |
*** openstackgerrit has joined #openstack-keystone | 06:02 | |
*** ankita_wagh has joined #openstack-keystone | 06:03 | |
*** lsmola has joined #openstack-keystone | 06:04 | |
*** markvoelker has quit IRC | 06:05 | |
*** lhcheng has joined #openstack-keystone | 06:08 | |
*** ChanServ sets mode: +v lhcheng | 06:08 | |
*** spandhe_ has joined #openstack-keystone | 06:11 | |
*** jamielennox is now known as jamielennox|away | 06:12 | |
*** Daisy has joined #openstack-keystone | 06:12 | |
*** spandhe has quit IRC | 06:13 | |
*** spandhe_ is now known as spandhe | 06:13 | |
*** StoneZhang has joined #openstack-keystone | 06:14 | |
*** harlowja has quit IRC | 06:19 | |
*** spandhe_ has joined #openstack-keystone | 06:19 | |
*** spandhe has quit IRC | 06:20 | |
*** spandhe_ is now known as spandhe | 06:20 | |
*** wwwjfy has quit IRC | 06:26 | |
*** wwwjfy has joined #openstack-keystone | 06:33 | |
*** urulama has quit IRC | 06:34 | |
*** urulama has joined #openstack-keystone | 06:35 | |
openstackgerrit | Ankit Agrawal proposed openstack/python-keystoneclient: Use dictionary literal for dictionary creation https://review.openstack.org/227690 | 06:48 |
openstackgerrit | Ankit Agrawal proposed openstack/python-keystoneclient: List creation could be rewritten as a list literal https://review.openstack.org/227691 | 06:48 |
*** browne1 has joined #openstack-keystone | 06:52 | |
*** browne has quit IRC | 06:52 | |
*** wwwjfy has quit IRC | 06:53 | |
*** ankita_wagh has quit IRC | 06:54 | |
*** wwwjfy has joined #openstack-keystone | 06:58 | |
*** su_zhang_ has joined #openstack-keystone | 06:58 | |
*** browne1 has quit IRC | 06:58 | |
*** su_zhang has quit IRC | 07:00 | |
*** mjb has quit IRC | 07:00 | |
*** rm_work has quit IRC | 07:00 | |
*** briancline has quit IRC | 07:00 | |
*** gus has quit IRC | 07:00 | |
openstackgerrit | Hidekazu Nakamura proposed openstack/keystone: Update development environment set up doc https://review.openstack.org/223020 | 07:01 |
*** mjb has joined #openstack-keystone | 07:01 | |
*** gus has joined #openstack-keystone | 07:02 | |
*** su_zhang_ has quit IRC | 07:13 | |
*** pnavarro has joined #openstack-keystone | 07:16 | |
openstackgerrit | Merged openstack/keystone: Fix typo in config help https://review.openstack.org/226888 | 07:21 |
*** ccard has quit IRC | 07:24 | |
*** Navid__ has quit IRC | 07:24 | |
openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone: Updating sample configuration file https://review.openstack.org/227702 | 07:25 |
*** ParsectiX has joined #openstack-keystone | 07:26 | |
*** spandhe has quit IRC | 07:27 | |
*** Navid__ has joined #openstack-keystone | 07:28 | |
*** lhcheng has quit IRC | 07:29 | |
*** e0ne has joined #openstack-keystone | 07:32 | |
*** Daisy_ has joined #openstack-keystone | 07:38 | |
*** Daisy has quit IRC | 07:40 | |
*** Daisy_ is now known as Daisy | 07:40 | |
*** rharwood has quit IRC | 07:41 | |
*** rharwood has joined #openstack-keystone | 07:47 | |
*** sdake has quit IRC | 07:53 | |
*** markvoelker has joined #openstack-keystone | 08:00 | |
*** fhubik has joined #openstack-keystone | 08:02 | |
*** stevemar has joined #openstack-keystone | 08:04 | |
*** ChanServ sets mode: +v stevemar | 08:04 | |
*** markvoelker has quit IRC | 08:05 | |
*** stevemar has quit IRC | 08:08 | |
*** exploreshaifali has joined #openstack-keystone | 08:09 | |
*** jaosorior has quit IRC | 08:10 | |
*** jaosorior has joined #openstack-keystone | 08:11 | |
*** openstackgerrit has quit IRC | 08:16 | |
*** openstackgerrit has joined #openstack-keystone | 08:17 | |
*** e0ne has quit IRC | 08:20 | |
*** exploreshaifali has quit IRC | 08:32 | |
*** shoutm_ has quit IRC | 08:39 | |
*** shoutm has joined #openstack-keystone | 08:41 | |
*** henrynash has joined #openstack-keystone | 08:49 | |
*** ChanServ sets mode: +v henrynash | 08:49 | |
*** Daisy_ has joined #openstack-keystone | 08:49 | |
*** Daisy has quit IRC | 08:51 | |
*** Daisy_ is now known as Daisy | 08:51 | |
*** csoukup has joined #openstack-keystone | 08:51 | |
*** csoukup has quit IRC | 08:56 | |
*** Daisy has quit IRC | 08:59 | |
openstackgerrit | Dave Chen proposed openstack/keystone: Using the right format to render the docstring correctly https://review.openstack.org/226225 | 09:00 |
openstackgerrit | henry-nash proposed openstack/keystone: Enable listing of role assignments in a project hierarchy https://review.openstack.org/208152 | 09:17 |
*** Navid__ has quit IRC | 09:17 | |
tsufiev | samueldmq, thanks, will try to attend the workshop (if it's held in Tokyo) | 09:17 |
openstackgerrit | Rajesh Tailor proposed openstack/keystone: Fix order of arguments in assertEqual https://review.openstack.org/226677 | 09:18 |
openstackgerrit | henry-nash proposed openstack/keystone: Rationalize list role assignment routing https://review.openstack.org/220335 | 09:18 |
tsufiev | samueldmq, do we have any chance to vote for this cross-project session? | 09:19 |
*** lsmola has quit IRC | 09:23 | |
samueldmq | morning | 09:29 |
samueldmq | tsufiev: nice; I don't know how that works (if we need to vote, etc) | 09:30 |
samueldmq | tsufiev: I will learn and tell you :) | 09:30 |
*** shoutm has quit IRC | 09:31 | |
tsufiev | samueldmq, yep, morning ) | 09:33 |
tsufiev | I guess ayoung knows, should ask him once he's here | 09:33 |
*** StoneZhang has quit IRC | 09:35 | |
*** lsmola has joined #openstack-keystone | 09:36 | |
davechen1 | samueldmq: good afternoon. :) | 09:37 |
davechen1 | samueldmq: will you have some session in the Tokyo? | 09:38 |
*** xiaolidi has quit IRC | 09:41 | |
*** dims__ has joined #openstack-keystone | 09:43 | |
*** davechen1 has left #openstack-keystone | 09:53 | |
*** dims__ has quit IRC | 09:54 | |
*** dims_ has joined #openstack-keystone | 09:55 | |
*** markvoelker has joined #openstack-keystone | 10:01 | |
*** stevemar has joined #openstack-keystone | 10:05 | |
*** ChanServ sets mode: +v stevemar | 10:05 | |
*** markvoelker has quit IRC | 10:06 | |
*** stevemar has quit IRC | 10:08 | |
*** briancline has joined #openstack-keystone | 10:15 | |
*** rm_work has joined #openstack-keystone | 10:15 | |
*** EinstCrazy has quit IRC | 10:19 | |
*** briancline has quit IRC | 10:22 | |
*** rm_work has quit IRC | 10:22 | |
*** fhubik is now known as fhubik_afk | 10:25 | |
*** fhubik_afk is now known as fhubik | 10:31 | |
*** fhubik is now known as fhubik_afk | 10:33 | |
*** fhubik_afk is now known as fhubik | 10:33 | |
*** fhubik is now known as fhubik_afk | 10:33 | |
openstackgerrit | Davanum Srinivas (dims) proposed openstack/oslo.policy: add auto-generated docs for config options https://review.openstack.org/227763 | 10:49 |
*** briancline has joined #openstack-keystone | 10:54 | |
*** rm_work has joined #openstack-keystone | 10:55 | |
*** e0ne has joined #openstack-keystone | 10:58 | |
*** pnavarro is now known as pnavarro|lunch | 10:59 | |
*** briancline has quit IRC | 11:00 | |
*** rm_work has quit IRC | 11:01 | |
*** kiran-r has joined #openstack-keystone | 11:06 | |
*** kiran-r has quit IRC | 11:18 | |
*** wwwjfy has quit IRC | 11:21 | |
*** hidekazu has quit IRC | 11:21 | |
*** fhubik_afk is now known as fhubik | 11:24 | |
openstackgerrit | henry-nash proposed openstack/keystone: Add API route for list role assignments for tree https://review.openstack.org/220452 | 11:24 |
*** amakarov_away is now known as amakarov | 11:33 | |
*** urulama has quit IRC | 11:41 | |
*** urulama has joined #openstack-keystone | 11:42 | |
*** markvoelker has joined #openstack-keystone | 11:47 | |
odyssey4me | is anyone around that can help me confirm how keystone_authtoken should be configured for services like nova, cinder, etc for liberty? | 11:50 |
odyssey4me | the auth_plugin changes are confusing me a little | 11:50 |
*** markvoelker has quit IRC | 11:52 | |
*** jaosorior has quit IRC | 11:56 | |
*** gordc has joined #openstack-keystone | 12:00 | |
*** henrynash has quit IRC | 12:03 | |
*** stevemar has joined #openstack-keystone | 12:06 | |
*** ChanServ sets mode: +v stevemar | 12:06 | |
*** stevemar has quit IRC | 12:09 | |
*** jaosorior has joined #openstack-keystone | 12:11 | |
*** alejandrito has joined #openstack-keystone | 12:13 | |
*** pnavarro|lunch is now known as pnavarro | 12:19 | |
*** mestery is now known as mestery_afk | 12:25 | |
*** tellesnobrega is now known as tellesnobrega_af | 12:27 | |
*** wwwjfy has joined #openstack-keystone | 12:27 | |
*** markvoelker has joined #openstack-keystone | 12:31 | |
*** EinstCrazy has joined #openstack-keystone | 12:33 | |
*** pauloewerton has joined #openstack-keystone | 12:33 | |
*** edmondsw has joined #openstack-keystone | 12:34 | |
*** alejandrito has quit IRC | 12:36 | |
*** agireud has quit IRC | 12:37 | |
*** alejandrito has joined #openstack-keystone | 12:38 | |
*** dims__ has joined #openstack-keystone | 12:42 | |
*** dims_ has quit IRC | 12:43 | |
*** rvba has quit IRC | 12:48 | |
*** rvba has joined #openstack-keystone | 12:48 | |
*** rvba has quit IRC | 12:48 | |
*** rvba has joined #openstack-keystone | 12:48 | |
*** dims__ has quit IRC | 12:53 | |
*** dims_ has joined #openstack-keystone | 12:54 | |
*** su_zhang has joined #openstack-keystone | 12:56 | |
*** shoutm has joined #openstack-keystone | 12:57 | |
*** chlong has quit IRC | 12:57 | |
*** richm has joined #openstack-keystone | 13:02 | |
*** zzzeek has joined #openstack-keystone | 13:03 | |
*** hrou has joined #openstack-keystone | 13:04 | |
*** tellesnobrega_af is now known as tellesnobrega | 13:08 | |
*** fhubik has quit IRC | 13:09 | |
*** jgriffith has joined #openstack-keystone | 13:10 | |
*** zzzeek has quit IRC | 13:10 | |
*** ParsectiX has quit IRC | 13:15 | |
*** ParsectiX has joined #openstack-keystone | 13:16 | |
*** ParsectiX has quit IRC | 13:16 | |
*** csoukup has joined #openstack-keystone | 13:17 | |
*** dsirrine has joined #openstack-keystone | 13:20 | |
*** dsirrine has quit IRC | 13:22 | |
*** dsirrine has joined #openstack-keystone | 13:22 | |
*** shoutm has quit IRC | 13:23 | |
*** thiagop has joined #openstack-keystone | 13:28 | |
*** mylu has joined #openstack-keystone | 13:31 | |
*** ParsectiX has joined #openstack-keystone | 13:33 | |
*** mylu has quit IRC | 13:34 | |
*** sdake has joined #openstack-keystone | 13:35 | |
*** pnavarro has quit IRC | 13:35 | |
*** mylu has joined #openstack-keystone | 13:35 | |
*** diazjf has joined #openstack-keystone | 13:36 | |
*** sdake_ has joined #openstack-keystone | 13:37 | |
*** EinstCrazy has quit IRC | 13:38 | |
*** sdake has quit IRC | 13:39 | |
*** mylu has quit IRC | 13:40 | |
*** mylu has joined #openstack-keystone | 13:40 | |
*** f13o has quit IRC | 13:41 | |
*** e0ne has quit IRC | 13:42 | |
*** e0ne has joined #openstack-keystone | 13:45 | |
*** mylu has quit IRC | 13:45 | |
*** exploreshaifali has joined #openstack-keystone | 13:54 | |
*** KarthikB has joined #openstack-keystone | 13:57 | |
*** dims_ is now known as dimsum__ | 14:01 | |
*** sdake has joined #openstack-keystone | 14:04 | |
*** marzif has joined #openstack-keystone | 14:04 | |
*** stevemar has joined #openstack-keystone | 14:06 | |
*** ChanServ sets mode: +v stevemar | 14:06 | |
*** sdake_ has quit IRC | 14:07 | |
dstanek | stevemar: what is shields.io? | 14:07 |
*** stevemar has quit IRC | 14:09 | |
*** topol has quit IRC | 14:10 | |
openstackgerrit | Julien Danjou proposed openstack/keystone: wsgi: fix base_url finding https://review.openstack.org/226464 | 14:11 |
*** fhubik has joined #openstack-keystone | 14:12 | |
*** ParsectiX has quit IRC | 14:14 | |
*** diazjf has quit IRC | 14:15 | |
*** browne has joined #openstack-keystone | 14:16 | |
*** stevemar has joined #openstack-keystone | 14:20 | |
*** ChanServ sets mode: +v stevemar | 14:20 | |
*** marzif has quit IRC | 14:22 | |
*** marzif has joined #openstack-keystone | 14:22 | |
*** slDabbler has joined #openstack-keystone | 14:22 | |
*** david-lyle has joined #openstack-keystone | 14:23 | |
*** jgriffith is now known as jgriffith_away | 14:25 | |
openstackgerrit | Henrique Truta proposed openstack/keystone: Replicate domain info in projects table https://review.openstack.org/211170 | 14:29 |
openstackgerrit | Henrique Truta proposed openstack/keystone: Change project name constraints https://review.openstack.org/158372 | 14:29 |
openstackgerrit | Henrique Truta proposed openstack/keystone: Add is_domain parameter to get_project_by_name https://review.openstack.org/210600 | 14:29 |
*** slberger has joined #openstack-keystone | 14:32 | |
*** jorge_munoz has joined #openstack-keystone | 14:34 | |
*** david-lyle has quit IRC | 14:35 | |
*** ayoung has joined #openstack-keystone | 14:35 | |
*** ChanServ sets mode: +v ayoung | 14:35 | |
*** fhubik has quit IRC | 14:38 | |
*** jgriffith_away is now known as jgriffith | 14:38 | |
*** henrynash has joined #openstack-keystone | 14:42 | |
*** ChanServ sets mode: +v henrynash | 14:42 | |
openstackgerrit | Alexander Makarov proposed openstack/keystonemiddleware: Move response status check to the call https://review.openstack.org/227883 | 14:47 |
openstackgerrit | Henrique Truta proposed openstack/keystone: Tests for projects acting as domains https://review.openstack.org/211219 | 14:48 |
*** boris-42 has quit IRC | 14:49 | |
openstackgerrit | Alexander Makarov proposed openstack/keystonemiddleware: Move response status check to the call https://review.openstack.org/227883 | 14:50 |
*** topol has joined #openstack-keystone | 14:52 | |
*** ChanServ sets mode: +v topol | 14:52 | |
*** e0ne has quit IRC | 14:54 | |
*** marzif has quit IRC | 14:58 | |
*** david-lyle has joined #openstack-keystone | 15:02 | |
*** roxanaghe has joined #openstack-keystone | 15:08 | |
*** exploreshaifali has quit IRC | 15:08 | |
*** marzif has joined #openstack-keystone | 15:09 | |
*** pnavarro has joined #openstack-keystone | 15:09 | |
*** kiranr has joined #openstack-keystone | 15:11 | |
*** browne1 has joined #openstack-keystone | 15:15 | |
*** browne has quit IRC | 15:15 | |
*** david-lyle has quit IRC | 15:18 | |
*** david-lyle has joined #openstack-keystone | 15:20 | |
*** roxanaghe has quit IRC | 15:23 | |
openstackgerrit | Steve Martinelli proposed openstack/keystoneauth: remove references to keystone CLI https://review.openstack.org/227658 | 15:23 |
*** urulama has quit IRC | 15:24 | |
stevemar | bknudson: dolphm ^ | 15:24 |
*** urulama has joined #openstack-keystone | 15:24 | |
*** kiran-r has joined #openstack-keystone | 15:26 | |
*** pnavarro has quit IRC | 15:27 | |
openstackgerrit | Merged openstack/keystone: Updating sample configuration file https://review.openstack.org/227702 | 15:28 |
*** e0ne has joined #openstack-keystone | 15:32 | |
*** krotscheck has quit IRC | 15:33 | |
*** roxanaghe has joined #openstack-keystone | 15:34 | |
*** krotscheck has joined #openstack-keystone | 15:34 | |
*** david-lyle has quit IRC | 15:34 | |
*** roxanaghe has quit IRC | 15:36 | |
*** roxanaghe has joined #openstack-keystone | 15:36 | |
*** kiran-r has quit IRC | 15:39 | |
*** roxanaghe has quit IRC | 15:40 | |
*** roxanaghe has joined #openstack-keystone | 15:40 | |
*** david-lyle has joined #openstack-keystone | 15:44 | |
ayoung | stevemar, here's a n00b doc http://adam.younglogic.com/2015/09/keystone-unit-tests/ | 15:45 |
stevemar | noob docs are the best docs ayoung | 15:48 |
ayoung | stevemar, its called "let me write this down so I have notes when I forget how to do this." | 15:48 |
stevemar | bknudson: looks like ksc gate is broken? | 15:48 |
*** david-lyle has quit IRC | 15:48 | |
stevemar | ayoung: thats why i do most of my docs | 15:48 |
bknudson | stevemar: what broke the ksc gate? | 15:49 |
bknudson | I must have been me. | 15:49 |
bknudson | It must have been me. | 15:49 |
bknudson | I was me. | 15:49 |
stevemar | bknudson: https://review.openstack.org/#/c/227654/ | 15:49 |
stevemar | py34 tests are borked? | 15:49 |
stevemar | DeprecationWarning: Constructing an HTTPClient instance without using a session is deprecated as of the 1.7.0 release and may be removed in the 2.0.0 release. | 15:50 |
bknudson | the change to deprecate a bunch of stuff went in a long time ago. | 15:50 |
*** gyee has joined #openstack-keystone | 15:51 | |
*** ChanServ sets mode: +v gyee | 15:51 | |
*** roxanaghe has quit IRC | 15:53 | |
bknudson | stevemar: when I run tox -e py34 locally the tests pass... will need to figure out why it doesn't work in gate test | 15:53 |
stevemar | could be an intermittent failure, that's sad pants | 15:53 |
*** jaosorior has quit IRC | 15:55 | |
dstanek | this is why we should just delete stuff and not deprecate it first :-) | 15:55 |
*** sdake_ has joined #openstack-keystone | 15:55 | |
bknudson | running those tests individually also passes locally | 15:56 |
dstanek | stevemar: i like the auto release notes hack | 15:56 |
*** geoffarnold has joined #openstack-keystone | 15:56 | |
*** slDabbler has left #openstack-keystone | 15:58 | |
*** sdake has quit IRC | 15:58 | |
*** roxanaghe has joined #openstack-keystone | 16:01 | |
*** raildo-afk is now known as raildo | 16:01 | |
openstackgerrit | Dolph Mathews proposed openstack/keystone: Issue revocation events for the previous second https://review.openstack.org/227015 | 16:03 |
bknudson | stevemar: https://review.openstack.org/#/c/227805/ passed earlier today. | 16:03 |
bknudson | oh, that was on juno | 16:03 |
*** henrynash has quit IRC | 16:07 | |
*** slberger1 has joined #openstack-keystone | 16:07 | |
*** slberger has quit IRC | 16:09 | |
*** marzif has quit IRC | 16:10 | |
*** marzif has joined #openstack-keystone | 16:10 | |
*** KarthikB has quit IRC | 16:11 | |
bknudson | these really should be failing since we want to catch use of deprecated function... | 16:12 |
bknudson | not sure why they're not failing in 2.7 or 3.4 locally | 16:12 |
openstackgerrit | Alexander Makarov proposed openstack/keystonemiddleware: Move response status check to the call https://review.openstack.org/227883 | 16:13 |
*** su_zhang has quit IRC | 16:14 | |
bknudson | maybe there's an issue fixed with resetting warnings | 16:18 |
bknudson | or filtering warnings in a new version of py34 | 16:18 |
bknudson | The following packages will be upgraded: python3.4 | 16:19 |
bknudson | this might get intersting | 16:19 |
*** KarthikB has joined #openstack-keystone | 16:26 | |
*** sdake_ is now known as sdake | 16:26 | |
*** _cjones_ has joined #openstack-keystone | 16:28 | |
*** EinstCrazy has joined #openstack-keystone | 16:30 | |
*** agireud has joined #openstack-keystone | 16:30 | |
openstackgerrit | Merged openstack/oslo.policy: add auto-generated docs for config options https://review.openstack.org/227763 | 16:32 |
*** lsmola has quit IRC | 16:32 | |
bknudson | I'm seeing the failures locally now that I upgraded. should be an easy fix. | 16:34 |
*** mylu has joined #openstack-keystone | 16:37 | |
*** ngupta has joined #openstack-keystone | 16:43 | |
*** ankita_wagh has joined #openstack-keystone | 16:48 | |
*** KarthikB has quit IRC | 16:48 | |
*** harlowja has joined #openstack-keystone | 16:49 | |
*** roxanaghe has quit IRC | 16:50 | |
* morgan watches the clock. | 16:50 | |
*** browne1 has quit IRC | 16:52 | |
*** ankita_wagh has quit IRC | 16:52 | |
*** e0ne has quit IRC | 16:52 | |
*** tonytan4ever has joined #openstack-keystone | 16:53 | |
*** roxanaghe has joined #openstack-keystone | 16:55 | |
*** mylu has quit IRC | 16:58 | |
*** roxanaghe has quit IRC | 17:00 | |
*** mylu has joined #openstack-keystone | 17:00 | |
*** KarthikB has joined #openstack-keystone | 17:00 | |
*** henrynash has joined #openstack-keystone | 17:01 | |
*** ChanServ sets mode: +v henrynash | 17:01 | |
*** marzif has quit IRC | 17:01 | |
*** su_zhang has joined #openstack-keystone | 17:03 | |
*** mylu has quit IRC | 17:06 | |
*** marzif has joined #openstack-keystone | 17:07 | |
amakarov | ayoung, hi! | 17:11 |
ayoung | amakarov, how goes it? | 17:11 |
amakarov | ayoung, fine! I have a question about delegations | 17:12 |
*** mylu has joined #openstack-keystone | 17:12 | |
ayoung | Fire 'way | 17:12 |
amakarov | If group is delegated a scope, should a member of this group be able to redelegate it? | 17:13 |
*** ankita_wagh has joined #openstack-keystone | 17:13 | |
ayoung | amakarov, yes, under normal circumstances. It might be something we want to restrict in some cases, though. | 17:14 |
dstanek | morgan: bored? | 17:14 |
morgan | dstanek: nope | 17:14 |
ayoung | amakarov, that is like the redelegation of trust stuff; | 17:15 |
morgan | dstanek: waiting for PTL election to end | 17:15 |
dstanek | lol | 17:15 |
ayoung | amakarov, if you don't want someone to redelegate it, I suspect that things will break. Trusts already have this need to do things for a user later on... | 17:15 |
dstanek | i have my acceptance and concession tweets ready to go | 17:15 |
ayoung | dstanek, both of mine have to be edited to remove the cuss words | 17:16 |
*** henrynash has quit IRC | 17:16 | |
dstanek | ayoung: no editing. they should feel authentic | 17:16 |
ayoung | dstanek, I'm thinking about what Heat is doing with the rotating PTL. We might want to adopt that | 17:17 |
morgan | dstanek: it's hard to read when they are #$%^%$%^^ $%#$%#$## %#%$#%#$%34 #%#$%$%%$## PTL #$##@@@!@$#%%^^ Thanks | 17:17 |
morgan | ayoung, ^ ;) | 17:18 |
dstanek | but at least you can feel the passion | 17:18 |
*** roxanaghe has joined #openstack-keystone | 17:18 | |
amakarov | ayoung, got it. I'm including 'transitive' flag into the model along with 'active' so that we can allow user to play the role but not redelegate it and vice versa | 17:18 |
ayoung | dstanek, this project has real impact. Its hard not to feel both proud of that and a little scared | 17:18 |
ayoung | amakarov, what about 'liveness'? | 17:19 |
ayoung | Doesn't that really cover it? | 17:19 |
ayoung | or 'active'? | 17:19 |
amakarov | ayoung, I think 'strict | 17:19 |
amakarov | ayoung, I think 'strict' is a better name for this )) | 17:19 |
ayoung | transitive is, I don't think, required unless it is 'active' right? | 17:19 |
ayoung | amakarov, or, more correctly, If I redelegate a role assignment that is not transitive and not active, then it should become active | 17:20 |
*** mylu has quit IRC | 17:21 | |
amakarov | if it's not transitive you cannot redelegate it | 17:21 |
amakarov | ayoung, maybe, rename 'transitive' to 'sealed'... | 17:21 |
*** mylu has joined #openstack-keystone | 17:21 | |
*** rm_work has joined #openstack-keystone | 17:24 | |
*** mylu has quit IRC | 17:24 | |
*** mylu has joined #openstack-keystone | 17:25 | |
*** mylu_ has joined #openstack-keystone | 17:26 | |
*** mylu has quit IRC | 17:26 | |
*** ngupta has quit IRC | 17:26 | |
*** mylu_ has quit IRC | 17:28 | |
*** mylu has joined #openstack-keystone | 17:28 | |
ayoung | Heym, would you look at that, I just coded an infininte loop. No wonder my unit test takes so long to finish | 17:29 |
morgan | snicker | 17:30 |
*** spandhe has joined #openstack-keystone | 17:34 | |
*** browne has joined #openstack-keystone | 17:35 | |
openstackgerrit | Tony Wang proposed openstack/keystone: Show v3 endpoints in v2 endpoint list https://review.openstack.org/215870 | 17:36 |
*** amakarov is now known as amakarov_away | 17:40 | |
*** kiranr has quit IRC | 17:42 | |
*** browne has quit IRC | 17:44 | |
*** raildo is now known as raildo-afk | 17:44 | |
*** browne has joined #openstack-keystone | 17:44 | |
*** wwwjfy has quit IRC | 17:44 | |
*** wwwjfy has joined #openstack-keystone | 17:45 | |
*** wwwjfy has quit IRC | 17:47 | |
dstanek | ayoung: this is what happens when you drink and code | 17:48 |
*** KarthikB has quit IRC | 18:06 | |
*** tonytan4ever has quit IRC | 18:16 | |
*** diazjf has joined #openstack-keystone | 18:18 | |
*** KarthikB has joined #openstack-keystone | 18:18 | |
*** mylu has quit IRC | 18:22 | |
*** mylu has joined #openstack-keystone | 18:22 | |
*** marzif has quit IRC | 18:24 | |
browne | I have an AD/ldap keystone question. So if I have an AD domain that has multiple domain controllers, is there a way I can configure keystone for that? would i have to use the multi-domain backend to accomplish this? sometimes these DC are just for redundancy | 18:25 |
*** tonytan4ever has joined #openstack-keystone | 18:25 | |
*** e0ne has joined #openstack-keystone | 18:31 | |
stevemar | browne: not entirely sure what you mean there... elaborate a bit? | 18:33 |
stevemar | multiple domain controllers? | 18:33 |
browne | stevemar: basically a AD with a forest | 18:33 |
stevemar | does that mean you want to specify multiple DNs/trees in the config? | 18:33 |
browne | usually that means multiple hostnames for each domain controller, and a single domain name | 18:33 |
browne | stevemar: ideally, multiple ldap urls could be specified in the config | 18:34 |
*** krotscheck has quit IRC | 18:34 | |
*** ngupta has joined #openstack-keystone | 18:34 | |
browne | from the microsoft docs: "Domains are units of replication. All of the domain controllers in a particular domain can receive changes and replicate those changes to all other domain controllers in the domain. Each domain in Active Directory is identified by a Domain Name System (DNS) domain name and requires one or more domain controllers" | 18:35 |
stevemar | browne: so one of our customer facing folks gave me the same input | 18:36 |
stevemar | keystone doesn't support that right now | 18:36 |
browne | so the issue in keystone is that i can't specify any redundancy if the domain is backed by multiple domain controllers. so ideally i could specify multiple hostnames in that ldap url | 18:36 |
stevemar | rigth | 18:36 |
*** krotscheck has joined #openstack-keystone | 18:36 | |
stevemar | i meant to send a mailing list note about that | 18:36 |
browne | stevemar: oh ok. i guess i can draft a blueprint. one of our customers expressed the need also | 18:37 |
stevemar | sounds like not a lot of implementation, but enough of a change to warrant a blueprint | 18:37 |
ayoung | Its autumn in New England. And that means its Apple Season. https://www.youtube.com/watch?v=JdkcOWBs4xg | 18:37 |
stevemar | the alternative is to use an apache config, since our ldap driver won't handle it | 18:37 |
ayoung | browne, Use FreeIPA, a trust, and the Federation approach | 18:38 |
browne | stevemar: but apache would just handle the authentication right? | 18:38 |
stevemar | browne: the only thing i couldn't figure out was, how do prioritize the bind for the different ldap entries | 18:38 |
stevemar | browne: you could federate things | 18:38 |
browne | are there any blogs or guidance on how to do that? | 18:39 |
ayoung | browne, yep... | 18:39 |
*** krotscheck has quit IRC | 18:39 | |
*** su_zhang has quit IRC | 18:39 | |
ayoung | browne, https://adam.younglogic.com/2014/05/keystone-federation-via-mod_lookup_identity/ | 18:39 |
ayoung | hey what happends to my formatting? | 18:39 |
stevemar | ayoung: hehe, cute | 18:39 |
*** krotscheck has joined #openstack-keystone | 18:40 | |
ayoung | stevemar, it is going to revolutionize my apple pie creation | 18:40 |
browne | ayoung: thanks, i'll take a look | 18:40 |
ayoung | browne, is your Keystone server registered with your AD already? | 18:40 |
*** marzif has joined #openstack-keystone | 18:40 | |
browne | yeah, we use Kilo, but we're not currently using apache2 | 18:40 |
stevemar | ayoung: you gotta go at a faster pace like this guy: http://www.wimp.com/peelingapples/ | 18:41 |
*** alejandrito has quit IRC | 18:42 | |
ayoung | stevemar, It was a first run. I used the slower, cordless drill. I have a corded one, that can spin faster. When I need to set up production, I'll up the technology | 18:42 |
ayoung | browne, OK, so I might be leading you astray here, but this is the future. | 18:43 |
stevemar | ayoung: i feel like theres a devops joke somewhere in there | 18:43 |
ayoung | stevemar, we'll let the eNovance guys turn it into an openstack reations gif | 18:43 |
ayoung | browne, do you have LDAP working at all thus far? | 18:43 |
browne | ayoung: yeah, ldap to the AD works fine. but it provides no redundancy in case that domain controller goes down | 18:44 |
ayoung | I think the short answer is, yes you do...the Federation will be no better | 18:44 |
ayoung | you need a load balance solution. Look at the presentation from GoDaddy | 18:44 |
ayoung | let me find it, it was from a couple summits ago | 18:45 |
browne | ayoung: ok, someone else mentioned using a LB solution | 18:45 |
ayoung | browne, https://www.openstack.org/summit/openstack-summit-atlanta-2014/session-videos/presentation/integrating-openstack-with-active-directory-because-ad-ldap | 18:45 |
browne | ayoung: thx | 18:45 |
openstackgerrit | Dolph Mathews proposed openstack/keystone: Test revocation race conditions https://review.openstack.org/227995 | 18:46 |
*** woodster_ has joined #openstack-keystone | 18:47 | |
ayoung | browne, they used HA Proxy | 18:47 |
ayoung | its at about the 19 minute mark | 18:47 |
openstackgerrit | Dolph Mathews proposed openstack/keystone: Test revocation race conditions https://review.openstack.org/227995 | 18:47 |
browne | ayoung: ok interesting. we already have ha proxy in this env | 18:47 |
*** diazjf1 has joined #openstack-keystone | 18:48 | |
ayoung | browne, note that none of this means I know anything about AD. I'll deny it till my last breath | 18:48 |
*** diazjf has quit IRC | 18:48 | |
browne | ayoung: ha, np | 18:48 |
morgan | browne: adam knows a ton about AD... (it's because AD really just acts like LDAP most of the time) but doesn't want that knowledge to hurt his street cred :P | 18:51 |
*** diazjf1 has quit IRC | 18:52 | |
morgan | browne: but shhh ;) | 18:52 |
ayoung | morgan Lies. AD != LDAP...that is what that whole presentation is about. | 18:52 |
morgan | ayoung: and it's true.. except where it's not | 18:52 |
morgan | AD is more like LDAP+/Kerberos+ | 18:52 |
morgan | with a funky schema | 18:53 |
*** _hrou_ has joined #openstack-keystone | 18:53 | |
ayoung | morgan, so, it looks like the FreeIPA team have one-way trusts working. That should make using IPA as the tie in to the existing LDAP a little easier. It means a host managed by IPA can use a service ticket from corporate LDAP, but not the other way around. | 18:53 |
morgan | nice! | 18:53 |
*** mylu has quit IRC | 18:54 | |
ayoung | morgan, yeah. I'd like to see it become part of the baseline openstack story. I think IPA is much more useful when focused on the host management side of things. | 18:54 |
morgan | seriously. IPA is a nice setup | 18:54 |
*** hrou has quit IRC | 18:55 | |
stevemar | we should really get this merged and into rc | 18:55 |
stevemar | https://review.openstack.org/#/c/215870/7 | 18:55 |
stevemar | the bug currently isn't targeted | 18:55 |
stevemar | it'll be super awkward for folks to not see any endpoints after setting up their cloud | 18:56 |
*** roxanaghe has quit IRC | 19:04 | |
openstackgerrit | Dolph Mathews proposed openstack/keystone: Test revocation race conditions https://review.openstack.org/227995 | 19:07 |
*** e0ne has quit IRC | 19:10 | |
*** diazjf has joined #openstack-keystone | 19:10 | |
*** lhcheng has joined #openstack-keystone | 19:14 | |
*** ChanServ sets mode: +v lhcheng | 19:14 | |
*** urulama has quit IRC | 19:15 | |
*** urulama has joined #openstack-keystone | 19:16 | |
dstanek | i love code philosophy. | 19:24 |
*** tonytan4ever has quit IRC | 19:28 | |
*** ankita_wagh has quit IRC | 19:28 | |
*** gordc has quit IRC | 19:31 | |
ayoung | dstanek, https://xkcd.com/442/ | 19:39 |
*** henrynash has joined #openstack-keystone | 19:45 | |
*** ChanServ sets mode: +v henrynash | 19:45 | |
*** henrynash has quit IRC | 19:46 | |
*** wwwjfy has joined #openstack-keystone | 19:46 | |
*** wwwjfy has quit IRC | 19:47 | |
*** su_zhang has joined #openstack-keystone | 19:47 | |
*** Navid_ has joined #openstack-keystone | 19:50 | |
openstackgerrit | Corey Bryant proposed openstack/python-keystoneclient: HTTPClient/region_name deprecation test updates https://review.openstack.org/228021 | 19:50 |
*** tonytan4ever has joined #openstack-keystone | 19:56 | |
openstackgerrit | Dolph Mathews proposed openstack/keystone: Test revocation race conditions https://review.openstack.org/227995 | 19:58 |
samueldmq | when are ptl voting results gonna be published? | 19:58 |
*** su_zhang_ has joined #openstack-keystone | 20:01 | |
*** su_zhang has quit IRC | 20:03 | |
*** albertom has quit IRC | 20:07 | |
*** marzif has quit IRC | 20:09 | |
*** alejandrito has joined #openstack-keystone | 20:11 | |
*** albertom has joined #openstack-keystone | 20:14 | |
stevemar | samueldmq: in 3 hrs and 45 minutes! | 20:15 |
*** urulama has quit IRC | 20:21 | |
*** urulama has joined #openstack-keystone | 20:22 | |
*** ankita_wagh has joined #openstack-keystone | 20:25 | |
*** su_zhang has joined #openstack-keystone | 20:26 | |
*** su_zhang_ has quit IRC | 20:30 | |
*** henrynash has joined #openstack-keystone | 20:31 | |
*** ChanServ sets mode: +v henrynash | 20:31 | |
*** pnavarro has joined #openstack-keystone | 20:32 | |
*** roxanaghe has joined #openstack-keystone | 20:38 | |
openstackgerrit | Dolph Mathews proposed openstack/keystone: Test revocation race conditions https://review.openstack.org/227995 | 20:38 |
*** alejandrito has quit IRC | 20:41 | |
samueldmq | stevemar: oh, nice! | 20:43 |
samueldmq | stevemar, dstanek, ayoung, good luck! :) | 20:43 |
ayoung | samueldmq, thanks. Glad to be the weakest of the candidates | 20:44 |
samueldmq | ayoung: ... | 20:44 |
*** alejandrito has joined #openstack-keystone | 20:46 | |
stevemar | ayoung: i genuinely have no idea what the result is going to be | 20:46 |
stevemar | but i do know that keystone will be in good hands either way :) | 20:47 |
ayoung | Same here | 20:47 |
tristanC | 3 hours left until the end of PTL elections, vote, vote, vote! | 20:48 |
ayoung | dstanek, I got the basics of that implied roles stuff working. | 20:49 |
ayoung | implied/inferred...I can't seem to give it a consistant name, but that thing | 20:49 |
*** diazjf has quit IRC | 20:50 | |
*** mylu has joined #openstack-keystone | 20:51 | |
samueldmq | yeah, either way keystone is on good hands, so I am sure I am not gonna rage-quit | 20:51 |
morgan | tristanC: you have no idea how much I'm looking forward to 3hrs from now | 20:52 |
*** ankita_wagh has quit IRC | 20:53 | |
*** henrynash has quit IRC | 20:54 | |
*** ankita_wagh has joined #openstack-keystone | 20:57 | |
openstackgerrit | Tom Cocozzello proposed openstack/keystone: Deprecate httpd/keystone.py https://review.openstack.org/221975 | 20:58 |
*** spandhe has quit IRC | 20:58 | |
*** mylu has quit IRC | 20:59 | |
*** mylu has joined #openstack-keystone | 21:00 | |
*** pnavarro has quit IRC | 21:01 | |
*** spandhe has joined #openstack-keystone | 21:02 | |
*** sdake has quit IRC | 21:05 | |
*** mylu has quit IRC | 21:08 | |
*** mylu has joined #openstack-keystone | 21:09 | |
*** mylu has quit IRC | 21:10 | |
*** mylu_ has joined #openstack-keystone | 21:10 | |
stevemar | morgan: lol | 21:11 |
morgan | stevemar wat? :P | 21:11 |
stevemar | morgan: your previous comment | 21:11 |
*** edmondsw has quit IRC | 21:11 | |
stevemar | morgan: just umm, suddenly make your laptop disappear | 21:12 |
stevemar | for 3 hrs | 21:12 |
morgan | I already went for a bike ride | 21:12 |
stevemar | and when you;re back online, everything is all good | 21:12 |
morgan | too bad it was 34C out and I could only squeeze in ~40mins out in the sun w/ 44oz of water | 21:12 |
morgan | 44oz of almost ice-cold water when I started | 21:14 |
*** lhcheng has quit IRC | 21:15 | |
*** openstackgerrit has quit IRC | 21:16 | |
*** openstackgerrit has joined #openstack-keystone | 21:17 | |
*** diazjf has joined #openstack-keystone | 21:18 | |
*** iurygregory has left #openstack-keystone | 21:21 | |
*** lhcheng has joined #openstack-keystone | 21:23 | |
*** ChanServ sets mode: +v lhcheng | 21:23 | |
*** lhcheng has quit IRC | 21:24 | |
*** pauloewerton has quit IRC | 21:25 | |
*** lhcheng has joined #openstack-keystone | 21:25 | |
*** ChanServ sets mode: +v lhcheng | 21:25 | |
*** lhcheng has quit IRC | 21:25 | |
*** dims_ has joined #openstack-keystone | 21:27 | |
*** dimsum__ has quit IRC | 21:28 | |
*** lhcheng has joined #openstack-keystone | 21:33 | |
*** ChanServ sets mode: +v lhcheng | 21:33 | |
*** lhcheng has quit IRC | 21:34 | |
*** stevemar has quit IRC | 21:38 | |
*** zzzeek has joined #openstack-keystone | 21:44 | |
*** topol has quit IRC | 21:48 | |
*** ngupta has quit IRC | 21:55 | |
*** geoffarnold is now known as geoffarnoldX | 21:56 | |
*** geoffarnoldX is now known as geoffarnold | 21:56 | |
*** geoffarnold is now known as geoffarnoldX | 21:56 | |
*** geoffarnoldX is now known as geoffarnold | 21:56 | |
*** jorge_munoz has quit IRC | 21:56 | |
*** tonytan4ever has quit IRC | 21:57 | |
*** spandhe has quit IRC | 21:57 | |
*** geoffarnold has quit IRC | 21:59 | |
*** geoffarnold has joined #openstack-keystone | 22:00 | |
*** geoffarnold has quit IRC | 22:00 | |
*** openstackgerrit has quit IRC | 22:01 | |
*** Kennan_Vacation2 has joined #openstack-keystone | 22:02 | |
*** openstackgerrit has joined #openstack-keystone | 22:02 | |
*** Kennan_Vacation has quit IRC | 22:02 | |
*** spandhe has joined #openstack-keystone | 22:02 | |
*** jlvillal has quit IRC | 22:06 | |
*** jlvillal has joined #openstack-keystone | 22:10 | |
openstackgerrit | Merged openstack/python-keystoneclient: HTTPClient/region_name deprecation test updates https://review.openstack.org/228021 | 22:14 |
*** mylu_ has quit IRC | 22:15 | |
*** _hrou_ has quit IRC | 22:15 | |
*** alejandrito has quit IRC | 22:16 | |
*** KarthikB has quit IRC | 22:17 | |
*** sirushti has quit IRC | 22:26 | |
openstackgerrit | Dolph Mathews proposed openstack/keystone: Test revocation race conditions https://review.openstack.org/227995 | 22:32 |
*** openstack has joined #openstack-keystone | 22:32 | |
dolphm | lbragstad: added a bunch of documentation on the approach ^ afk time | 22:34 |
*** slberger1 has left #openstack-keystone | 22:34 | |
*** spandhe has quit IRC | 22:35 | |
*** spandhe has joined #openstack-keystone | 22:35 | |
*** KarthikB has joined #openstack-keystone | 22:38 | |
*** stevemar has joined #openstack-keystone | 22:38 | |
*** ChanServ sets mode: +v stevemar | 22:38 | |
*** geoffarnold has joined #openstack-keystone | 22:39 | |
*** geoffarnold has quit IRC | 22:40 | |
*** geoffarn_ has joined #openstack-keystone | 22:40 | |
*** stevemar has quit IRC | 22:42 | |
*** albertom is now known as albertom[afk] | 22:43 | |
*** ankita_wagh has quit IRC | 22:46 | |
*** markvoelker has quit IRC | 22:46 | |
*** openstackstatus has quit IRC | 22:47 | |
*** openstack has joined #openstack-keystone | 22:47 | |
*** openstackstatus has joined #openstack-keystone | 22:48 | |
*** ChanServ sets mode: +v openstackstatus | 22:48 | |
*** dims_ has quit IRC | 22:50 | |
*** csoukup has quit IRC | 22:51 | |
*** roxanaghe has quit IRC | 22:57 | |
*** spandhe has quit IRC | 23:04 | |
*** ankita_wagh has joined #openstack-keystone | 23:10 | |
*** spandhe has joined #openstack-keystone | 23:10 | |
*** lhcheng has joined #openstack-keystone | 23:11 | |
*** ChanServ sets mode: +v lhcheng | 23:11 | |
*** spandhe has quit IRC | 23:13 | |
*** diazjf has quit IRC | 23:20 | |
*** roxanaghe has joined #openstack-keystone | 23:20 | |
*** dimsum__ has joined #openstack-keystone | 23:22 | |
*** dsirrine has quit IRC | 23:28 | |
*** lhcheng has quit IRC | 23:29 | |
*** spandhe has joined #openstack-keystone | 23:29 | |
*** boris-42 has joined #openstack-keystone | 23:31 | |
*** markvoelker has joined #openstack-keystone | 23:33 | |
*** lhcheng has joined #openstack-keystone | 23:33 | |
*** ChanServ sets mode: +v lhcheng | 23:33 | |
*** marzif has joined #openstack-keystone | 23:34 | |
*** gyee has quit IRC | 23:35 | |
*** zzzeek has quit IRC | 23:37 | |
*** ankita_wagh has quit IRC | 23:38 | |
*** hrou has joined #openstack-keystone | 23:39 | |
*** topol has joined #openstack-keystone | 23:43 | |
*** ChanServ sets mode: +v topol | 23:43 | |
*** dimsum__ has quit IRC | 23:44 | |
*** ankita_wagh has joined #openstack-keystone | 23:47 | |
*** dimsum__ has joined #openstack-keystone | 23:47 | |
*** sdake has joined #openstack-keystone | 23:49 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!