| *** pumaranikar has joined #openstack-keystone | 00:00 | |
| *** aginwala has quit IRC | 00:01 | |
| *** aginwala has joined #openstack-keystone | 00:04 | |
| openstackgerrit | Sean Perry proposed openstack/keystone: Use unit.new_project_ref consistently https://review.openstack.org/244523 | 00:04 |
|---|---|---|
| shaleh | stevemar: ^^^ comment updated, nothing else | 00:04 |
| *** lhcheng has quit IRC | 00:07 | |
| *** EinstCrazy has joined #openstack-keystone | 00:09 | |
| *** boris-42 has joined #openstack-keystone | 00:09 | |
| *** davechen has quit IRC | 00:10 | |
| *** pumaranikar has quit IRC | 00:13 | |
| *** openstackgerrit has quit IRC | 00:16 | |
| *** openstackgerrit has joined #openstack-keystone | 00:17 | |
| *** EinstCrazy has quit IRC | 00:19 | |
| *** diegows has quit IRC | 00:22 | |
| *** aginwala has quit IRC | 00:25 | |
| *** aginwala has joined #openstack-keystone | 00:33 | |
| *** aginwala has quit IRC | 00:37 | |
| *** liemmn has quit IRC | 00:42 | |
| *** aginwala has joined #openstack-keystone | 00:43 | |
| *** gildub has joined #openstack-keystone | 00:47 | |
| *** miyagishi_t has joined #openstack-keystone | 00:52 | |
| *** r-daneel has quit IRC | 00:55 | |
| *** EinstCrazy has joined #openstack-keystone | 01:00 | |
| *** NM has joined #openstack-keystone | 01:02 | |
| *** EinstCra_ has joined #openstack-keystone | 01:02 | |
| *** tellesnobrega_af is now known as tellesnobrega | 01:03 | |
| *** aginwala has quit IRC | 01:05 | |
| *** aginwala has joined #openstack-keystone | 01:06 | |
| *** EinstCrazy has quit IRC | 01:06 | |
| *** aginwala_ has joined #openstack-keystone | 01:06 | |
| *** jerrygb has quit IRC | 01:09 | |
| *** jerrygb has joined #openstack-keystone | 01:10 | |
| *** aginwala has quit IRC | 01:10 | |
| *** spandhe has quit IRC | 01:12 | |
| *** jerrygb has quit IRC | 01:14 | |
| *** shaleh has quit IRC | 01:22 | |
| *** ankita_wagh has quit IRC | 01:27 | |
| *** jgriffith_away is now known as jgriffith | 01:30 | |
| *** aginwala_ has quit IRC | 01:52 | |
| *** aginwala has joined #openstack-keystone | 01:55 | |
| *** jbell8 has joined #openstack-keystone | 01:56 | |
| *** richm has quit IRC | 01:59 | |
| openstackgerrit | Jamie Lennox proposed openstack/keystone: Perform middleware tests with webtest https://review.openstack.org/244440 | 02:00 |
| *** sahilsinha has joined #openstack-keystone | 02:04 | |
| sahilsinha | hello all - im having a pretty difficult time getting keystone to go with openid connect | 02:05 |
| sahilsinha | is there a canonical resource on the redirect uris and apache locations that need to be protected? | 02:06 |
| sahilsinha | mod_auth_oidc itself works and im successfully about to authn with my idp | 02:07 |
| stevemar | sahilsinha: theres some info here: http://docs.openstack.org/developer/keystone/federation/openidc.html | 02:08 |
| sahilsinha | stevemar: thanks - wondering if it updated recently because now there is a /redirect at the end of the uri | 02:16 |
| sahilsinha | im hoping i was just missing my callback template | 02:16 |
| *** spandhe has joined #openstack-keystone | 02:22 | |
| sahilsinha | i just get ridirected back to a 404 with my token | 02:24 |
| sahilsinha | from the idp | 02:24 |
| *** spandhe_ has joined #openstack-keystone | 02:25 | |
| *** spandhe has quit IRC | 02:27 | |
| *** spandhe_ is now known as spandhe | 02:27 | |
| *** btully has quit IRC | 02:28 | |
| *** david-ly_ has quit IRC | 02:36 | |
| *** tellesnobrega is now known as tellesnobrega_af | 02:36 | |
| *** mylu has joined #openstack-keystone | 02:38 | |
| *** aginwala has quit IRC | 02:39 | |
| *** dims has joined #openstack-keystone | 02:40 | |
| *** mylu has quit IRC | 02:42 | |
| *** ankita_wagh has joined #openstack-keystone | 02:44 | |
| *** jerrygb has joined #openstack-keystone | 02:44 | |
| sahilsinha | stevemar: is this you? https://gist.github.com/stevemart/4b41bd5437048a7fdfab | 02:51 |
| *** aginwala has joined #openstack-keystone | 02:56 | |
| *** ankita_wagh has quit IRC | 02:57 | |
| *** harshs has quit IRC | 03:08 | |
| *** jerrygb has quit IRC | 03:11 | |
| *** mylu has joined #openstack-keystone | 03:11 | |
| *** davechen has joined #openstack-keystone | 03:11 | |
| stevemar | sahilsinha: depends on who's asking ^_^ | 03:12 |
| *** jerrygb has joined #openstack-keystone | 03:13 | |
| stevemar | that stuff *may* be out of date | 03:13 |
| *** topol has joined #openstack-keystone | 03:16 | |
| *** ChanServ sets mode: +v topol | 03:16 | |
| *** dims has quit IRC | 03:17 | |
| *** davechen has quit IRC | 03:19 | |
| *** davechen has joined #openstack-keystone | 03:19 | |
| *** topol has quit IRC | 03:20 | |
| *** dims has joined #openstack-keystone | 03:22 | |
| mfisch | I know that this is going to agitate ayoung but mgmt is asking me if keystone has any password requirement options for mysql users like length, age, complexity etc. Don't see anything in config | 03:24 |
| stevemar | mfisch: they do not! | 03:25 |
| ayoung | mfisch, and it never will | 03:25 |
| ayoung | use a real tool | 03:25 |
| mfisch | yes thats what I told them | 03:25 |
| mfisch | you want to get out of the business of managing users and passwords | 03:25 |
| mfisch | stevemar will shed a tear for me I hope | 03:26 |
| ayoung | mfisch, don't you work for a real company with things like SOX compliance and all that? | 03:26 |
| mfisch | oh this is way worse than SOX | 03:26 |
| *** pcaruana has quit IRC | 03:27 | |
| mfisch | we dont use mysql for anything but service accounts atm | 03:27 |
| *** roxanaghe has quit IRC | 03:30 | |
| mfisch | stevemar: are you a Bills fan? | 03:31 |
| mfisch | thats like south Toronto right? | 03:31 |
| stevemar | mfisch: it definitely is | 03:31 |
| stevemar | but i also like the pats | 03:31 |
| stevemar | mfisch: i go to at least 1 bills game per year | 03:31 |
| mfisch | dont they play a couple in Toronto? | 03:31 |
| mfisch | I will be at Pats/Broncos on Sunday brrr | 03:32 |
| openstackgerrit | ayoung proposed openstack/oslo.policy: Convert Exceptions to failures. https://review.openstack.org/165908 | 03:33 |
| *** davechen1 has joined #openstack-keystone | 03:34 | |
| *** dims has quit IRC | 03:35 | |
| stevemar | mfisch: they stopped the 'bills-in-toronto' series a year or two ago, cause... http://mattenglish.kinja.com/the-bills-in-toronto-series-is-mercifully-over-1666162786 | 03:35 |
| stevemar | mfisch: i gotta say, this has been a tight game so far, the bills are keeping it close | 03:36 |
| *** davechen has quit IRC | 03:36 | |
| mfisch | whats Rogers | 03:36 |
| mfisch | is that your comcast or twc? | 03:37 |
| *** davechen has joined #openstack-keystone | 03:38 | |
| *** davechen1 has quit IRC | 03:41 | |
| stevemar | mfisch: essentially | 03:41 |
| stevemar | mfisch: rogers is the more evil of the two | 03:42 |
| stevemar | bell is the other one in our duopoly | 03:42 |
| *** davechen1 has joined #openstack-keystone | 03:45 | |
| stevemar | mfisch: did you see that 'inadvertent whistle'? | 03:45 |
| stevemar | that sooo would have been a TD | 03:45 |
| *** gildub has quit IRC | 03:46 | |
| *** davechen has quit IRC | 03:46 | |
| mfisch | ah no wife is around so we're watching something else for now | 03:48 |
| *** mylu has quit IRC | 03:48 | |
| *** mylu has joined #openstack-keystone | 03:49 | |
| *** mylu has quit IRC | 03:53 | |
| *** jbell8 has quit IRC | 03:54 | |
| *** mylu has joined #openstack-keystone | 03:58 | |
| *** david-lyle has joined #openstack-keystone | 04:08 | |
| *** aginwala has quit IRC | 04:09 | |
| *** gildub has joined #openstack-keystone | 04:16 | |
| *** sahilsinha has quit IRC | 04:17 | |
| davechen1 | marekd: this is ready to go - https://review.openstack.org/#/c/226225/ :) | 04:19 |
| davechen1 | marekd: Just in case you don't mind, I saw you help to review some days before. | 04:20 |
| *** ayoung has quit IRC | 04:20 | |
| *** jerrygb has quit IRC | 04:24 | |
| *** btully has joined #openstack-keystone | 04:29 | |
| stevemar | davechen1: is there a reason that is proposed against the follow up patch? | 04:34 |
| stevemar | err against the dependent patch? | 04:35 |
| stevemar | i think i am going to rebase it against master and push it through, bknudson already +2'ed it | 04:35 |
| openstackgerrit | Steve Martinelli proposed openstack/keystone: Using the right format to render the docstring correctly https://review.openstack.org/226225 | 04:37 |
| openstackgerrit | Steve Martinelli proposed openstack/keystone: Correct docstring warnings https://review.openstack.org/244333 | 04:38 |
| *** davechen1 is now known as davechen | 04:43 | |
| davechen | stevemar: emm, you meant brant's comment? | 04:44 |
| stevemar | davechen: just wondering why it was depending on the removal of endpoint_filter/core.py | 04:45 |
| davechen | stevemar: that's beacuse the there are many updated needed in endpoint_filter/core.py | 04:45 |
| davechen | stevemar: and now that the file was removed, there is no need to address it in endpoint_filter/core.py again. | 04:46 |
| davechen | or else, we should do some change and will removed again, my feeling it's not necessary. | 04:47 |
| stevemar | davechen: should be fine... i really wanted https://review.openstack.org/#/c/226225/17 to get merged, since it's changing a lot of files | 04:48 |
| davechen | stevemar: thanks you sir, this simply patch was hanging for two months :) | 04:49 |
| davechen | stevemar: now, you are stepping on the mine. | 04:50 |
| davechen | i need say sorry to all of the impacted patches. | 04:50 |
| davechen | need rebase again :( | 04:50 |
| stevemar | davechen: yeah :( | 04:50 |
| stevemar | davechen: the longer it lives, the more it'll impact | 04:51 |
| davechen | agreed. | 04:51 |
| davechen | so, i want to kill it asap. | 04:51 |
| davechen | stevemar: i am not quite sure if we need do these proposal. | 04:52 |
| stevemar | davechen: which proposals? | 04:52 |
| davechen | stevemar: it's useful somehow but trivial enough. | 04:53 |
| davechen | stevemar: the docstring change where i update bunches of patches. | 04:53 |
| davechen | bunches of files. | 04:53 |
| stevemar | yeah, i'd like to stop the churn of changes like that | 04:54 |
| davechen | stevemar: got it. | 04:55 |
| davechen | stevemar: i aware that and i will keep in mind. | 04:55 |
| *** jmccrory has quit IRC | 04:58 | |
| *** jmccrory has joined #openstack-keystone | 05:00 | |
| openstackgerrit | Jamie Lennox proposed openstack/keystoneauth: Allow prompting for password when CLI loading https://review.openstack.org/248524 | 05:09 |
| *** rcernin has joined #openstack-keystone | 05:15 | |
| *** Nirupama has joined #openstack-keystone | 05:28 | |
| *** andrey-mp has joined #openstack-keystone | 05:30 | |
| *** rcernin has quit IRC | 05:34 | |
| *** EinstCra_ has quit IRC | 05:37 | |
| *** EinstCrazy has joined #openstack-keystone | 05:37 | |
| *** davechen has left #openstack-keystone | 05:44 | |
| andrey-mp | hi Core, can someone review this - https://review.openstack.org/#/c/246844/ ? small fix that I need to do next changes in other project... | 05:46 |
| *** pcaruana has joined #openstack-keystone | 05:49 | |
| *** mylu has quit IRC | 05:56 | |
| *** mylu has joined #openstack-keystone | 05:56 | |
| *** roxanaghe has joined #openstack-keystone | 05:56 | |
| *** jbell8 has joined #openstack-keystone | 05:58 | |
| *** roxanaghe has quit IRC | 05:59 | |
| *** mylu has quit IRC | 06:01 | |
| *** mylu has joined #openstack-keystone | 06:10 | |
| *** rcernin has joined #openstack-keystone | 06:18 | |
| breton_ | stevemar: 19-21 of January? | 06:21 |
| stevemar | breton_: was it not clear? should i edit? | 06:21 |
| stevemar | breton_: but yes... that was one of my intended dates | 06:22 |
| *** andrey-mp has quit IRC | 06:26 | |
| breton_ | oh, I have not seen the mail yet | 06:27 |
| breton_ | because... | 06:28 |
| breton_ | stevemar: [Keystyone] is in mail subject | 06:28 |
| stevemar | FFS | 06:28 |
| *** pcaruana has quit IRC | 06:28 | |
| breton_ | and openstack-dev is the last in my queue to read. | 06:28 |
| stevemar | breton_: thanks for the heads up! | 06:31 |
| stevemar | i'm re-sending now | 06:31 |
| stevemar | stupid fat fingers :) | 06:31 |
| *** mylu has quit IRC | 06:32 | |
| breton_ | also please be careful with 27-29. FOSDEM in Europe is 30-31 and there will be some openstack day on the 29. | 06:32 |
| *** mylu has joined #openstack-keystone | 06:32 | |
| breton_ | I am surprised I don't see 25-27 though. | 06:32 |
| openstackgerrit | Merged openstack/keystone: Using the right format to render the docstring correctly https://review.openstack.org/226225 | 06:33 |
| stevemar | breton_: i can add that option | 06:33 |
| stevemar | i am the only one who voted so far | 06:33 |
| breton_ | yes, please do | 06:34 |
| stevemar | breton_: check it out again, see the new options? | 06:36 |
| *** mylu has quit IRC | 06:37 | |
| breton_ | yep, thanks | 06:37 |
| stevemar | breton_: thank you! | 06:38 |
| *** e0ne has joined #openstack-keystone | 06:40 | |
| *** EinstCrazy has quit IRC | 06:45 | |
| *** jaosorior has joined #openstack-keystone | 06:48 | |
| *** boris-42 has quit IRC | 06:48 | |
| *** EinstCrazy has joined #openstack-keystone | 06:49 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone: Updating sample configuration file https://review.openstack.org/249033 | 06:49 |
| *** spandhe has quit IRC | 06:49 | |
| *** aginwala has joined #openstack-keystone | 06:50 | |
| *** spandhe has joined #openstack-keystone | 06:51 | |
| *** josecastroleon has joined #openstack-keystone | 07:06 | |
| *** e0ne has quit IRC | 07:08 | |
| *** jgriffith is now known as jgriffith_away | 07:15 | |
| *** aginwala has quit IRC | 07:16 | |
| *** btully has quit IRC | 07:16 | |
| *** spandhe has quit IRC | 07:22 | |
| *** aginwala has joined #openstack-keystone | 07:26 | |
| *** mjb has quit IRC | 07:26 | |
| *** _zouyee has joined #openstack-keystone | 07:30 | |
| *** _zouyee has quit IRC | 07:30 | |
| *** mjb has joined #openstack-keystone | 07:33 | |
| *** jerrygb has joined #openstack-keystone | 07:37 | |
| *** _zouyee has joined #openstack-keystone | 07:39 | |
| *** _zouyee has quit IRC | 07:39 | |
| *** topol has joined #openstack-keystone | 07:39 | |
| *** ChanServ sets mode: +v topol | 07:39 | |
| *** urulama__ is now known as urulama | 07:40 | |
| *** topol has quit IRC | 07:41 | |
| *** jerrygb has quit IRC | 07:42 | |
| *** rharwood has quit IRC | 07:42 | |
| *** rharwood has joined #openstack-keystone | 07:43 | |
| *** jaosorior has quit IRC | 07:45 | |
| *** btully has joined #openstack-keystone | 07:51 | |
| *** btully has quit IRC | 07:56 | |
| *** rha has quit IRC | 08:03 | |
| *** gildub has quit IRC | 08:04 | |
| *** jerrygb has joined #openstack-keystone | 08:12 | |
| *** wuhg has joined #openstack-keystone | 08:13 | |
| *** jaosorior has joined #openstack-keystone | 08:15 | |
| *** jerrygb has quit IRC | 08:17 | |
| *** jaosorior has quit IRC | 08:21 | |
| *** jaosorior has joined #openstack-keystone | 08:22 | |
| *** fhubik has joined #openstack-keystone | 08:31 | |
| *** _zouyee has joined #openstack-keystone | 08:32 | |
| openstackgerrit | Daniele Pizzolli proposed openstack/keystone: Allow building doc using make latexpdf https://review.openstack.org/249065 | 08:33 |
| *** aginwala has quit IRC | 08:40 | |
| *** e0ne has joined #openstack-keystone | 08:49 | |
| *** fhubik is now known as fhubik_brb | 09:06 | |
| *** fhubik_brb is now known as fhubik | 09:07 | |
| *** fhubik is now known as fhubik_brb | 09:13 | |
| *** openstackgerrit has quit IRC | 09:16 | |
| *** openstackgerrit has joined #openstack-keystone | 09:17 | |
| *** akscram1 is now known as akscram | 09:20 | |
| *** rha has joined #openstack-keystone | 09:22 | |
| *** rha has quit IRC | 09:22 | |
| *** rha has joined #openstack-keystone | 09:22 | |
| *** fhubik_brb is now known as fhubik | 09:24 | |
| *** urulama has quit IRC | 09:26 | |
| *** urulama has joined #openstack-keystone | 09:27 | |
| *** fhubik is now known as fhubik_brb | 09:32 | |
| *** fhubik_brb is now known as fhubik | 09:34 | |
| *** jistr has joined #openstack-keystone | 09:44 | |
| *** EinstCrazy has quit IRC | 09:48 | |
| *** lhcheng has joined #openstack-keystone | 09:54 | |
| *** ChanServ sets mode: +v lhcheng | 09:54 | |
| *** woodster_ has quit IRC | 09:59 | |
| *** aix has joined #openstack-keystone | 10:05 | |
| lhcheng | raildo: ping | 10:09 |
| *** breton_ is now known as breton | 10:13 | |
| *** fhubik is now known as fhubik_brb | 10:20 | |
| *** urulama has quit IRC | 10:23 | |
| *** urulama has joined #openstack-keystone | 10:24 | |
| *** josecastroleon1 has joined #openstack-keystone | 10:34 | |
| *** tellesnobrega_af is now known as tellesnobrega | 10:34 | |
| *** josecastroleon has quit IRC | 10:35 | |
| *** fhubik_brb is now known as fhubik | 10:36 | |
| *** urulama has quit IRC | 11:02 | |
| *** urulama has joined #openstack-keystone | 11:02 | |
| *** dims has joined #openstack-keystone | 11:06 | |
| *** dgonzalez has joined #openstack-keystone | 11:08 | |
| *** EinstCrazy has joined #openstack-keystone | 11:08 | |
| *** EinstCrazy has quit IRC | 11:09 | |
| *** EinstCrazy has joined #openstack-keystone | 11:09 | |
| openstackgerrit | Merged openstack/keystone: deprecate `enabled` option for endpoint-policy extension https://review.openstack.org/247305 | 11:09 |
| *** rcernin is now known as rcernin|lunch | 11:13 | |
| *** aix has quit IRC | 11:14 | |
| *** aix has joined #openstack-keystone | 11:15 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone: Updating sample configuration file https://review.openstack.org/249033 | 11:15 |
| *** toddnni has quit IRC | 11:19 | |
| openstackgerrit | henry-nash proposed openstack/keystone-specs: Enable retrieval of default values of domain config options https://review.openstack.org/185650 | 11:19 |
| openstackgerrit | henry-nash proposed openstack/keystone-specs: Enable retrieval of default values of domain config options https://review.openstack.org/185650 | 11:22 |
| *** toddnni has joined #openstack-keystone | 11:22 | |
| openstackgerrit | henry-nash proposed openstack/keystone-specs: Enable retrieval of default values of domain config options https://review.openstack.org/185650 | 11:23 |
| *** Nirupama has quit IRC | 11:29 | |
| openstackgerrit | Merged openstack/keystone: Fix string conversion in s3 handler for python 2 https://review.openstack.org/246844 | 11:34 |
| *** daemontool has joined #openstack-keystone | 11:38 | |
| *** daemontool has quit IRC | 11:40 | |
| *** daemontool has joined #openstack-keystone | 11:40 | |
| *** zqfan_AFK is now known as zqfan | 11:41 | |
| *** josecastroleon1 has quit IRC | 11:42 | |
| *** LimorStotland has joined #openstack-keystone | 11:43 | |
| LimorStotland | hi all I have a question.... in the keystone log i see UserNotFound: Could not find user: mistral but the user exist in the DB and i can login to openstack with this user from horizon | 11:45 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone: Updating sample configuration file https://review.openstack.org/249033 | 11:45 |
| LimorStotland | is it connected to the fact the mistral works with keystone v3? | 11:45 |
| *** zqfan is now known as zqfan_AFK | 11:46 | |
| *** fhubik is now known as fhubik_brb | 11:46 | |
| openstackgerrit | Samuel de Medeiros Queiroz proposed openstack/keystone-specs: Enable retrieval of default values of domain config options https://review.openstack.org/185650 | 11:55 |
| flaper87 | jamielennox: hey, do you happen to be around? Can I bother you with a small review request on a Glance patch? https://review.openstack.org/#/c/241986/ | 12:04 |
| flaper87 | (or anyone, really) | 12:04 |
| flaper87 | especially the `trust_auth_ module | 12:04 |
| flaper87 | `trust_auth`* | 12:04 |
| *** daemontool has quit IRC | 12:08 | |
| *** josecastroleon has joined #openstack-keystone | 12:08 | |
| *** daemontool has joined #openstack-keystone | 12:09 | |
| *** _zouyee has quit IRC | 12:11 | |
| *** tellesnobrega is now known as tellesnobrega_af | 12:19 | |
| *** miyagishi_t has quit IRC | 12:20 | |
| jamielennox | flaper87: done | 12:20 |
| flaper87 | jamielennox: thank you | 12:22 |
| *** tellesnobrega_af is now known as tellesnobrega | 12:25 | |
| *** EinstCrazy has quit IRC | 12:26 | |
| *** EinstCrazy has joined #openstack-keystone | 12:28 | |
| *** alejandrito has joined #openstack-keystone | 12:34 | |
| *** fhubik_brb is now known as fhubik | 12:34 | |
| *** EinstCra_ has joined #openstack-keystone | 12:35 | |
| *** EinstCrazy has quit IRC | 12:35 | |
| *** rcernin|lunch is now known as rcernin | 12:36 | |
| *** diegows has joined #openstack-keystone | 12:40 | |
| *** wolsen has quit IRC | 12:41 | |
| *** pauloewerton has joined #openstack-keystone | 12:44 | |
| *** lhcheng_ has joined #openstack-keystone | 12:51 | |
| *** lhcheng has quit IRC | 12:51 | |
| *** gordc has joined #openstack-keystone | 12:59 | |
| openstackgerrit | Julien Danjou proposed openstack/keystone: eventlet: handle system that misses TCP_KEEPIDLE https://review.openstack.org/226773 | 13:06 |
| *** lhcheng_ has quit IRC | 13:09 | |
| *** LukeHinds has joined #openstack-keystone | 13:12 | |
| *** wolsen has joined #openstack-keystone | 13:14 | |
| *** lhcheng has joined #openstack-keystone | 13:20 | |
| *** ChanServ sets mode: +v lhcheng | 13:20 | |
| *** NM has joined #openstack-keystone | 13:21 | |
| *** daemontool has quit IRC | 13:22 | |
| *** doug-fish has joined #openstack-keystone | 13:30 | |
| *** jbell8 has quit IRC | 13:32 | |
| *** NM has quit IRC | 13:34 | |
| *** markvoelker has quit IRC | 13:35 | |
| marekd | jamielennox: here? | 13:35 |
| *** daemontool has joined #openstack-keystone | 13:39 | |
| iurygregory | marekd, now works for everything https://review.openstack.org/#/c/216821/ | 13:41 |
| *** thiagop has joined #openstack-keystone | 13:43 | |
| marekd | iurygregory: thanks. | 13:43 |
| iurygregory | marekd, you're welcome | 13:44 |
| marekd | iurygregory: i think it looks fine, however I hope you tried it in the fresh sstems :-) | 13:45 |
| marekd | systems | 13:45 |
| marekd | of course this does not fully configure federation, i hope we all agree on that. | 13:45 |
| iurygregory | marekd, i've tested in ubuntu server and centos ^^ | 13:46 |
| marekd | grreeat | 13:46 |
| iurygregory | marekd, yeah i can't configure the shibboleth attribute map on puppet-keystone | 13:46 |
| iurygregory | this is the missing part =/ | 13:46 |
| marekd | /etc/shibboleth/shibboleth2.xml too | 13:46 |
| iurygregory | yeah | 13:47 |
| iurygregory | can you +1? puppet-keystone will only configure things related to keystone (virtualhost and keystone.conf) | 13:47 |
| marekd | iurygregory: i just did! | 13:48 |
| iurygregory | Thanks man o/ | 13:48 |
| marekd | \o | 13:48 |
| *** fhubik is now known as fhubik_brb | 13:49 | |
| *** fhubik_brb is now known as fhubik | 13:50 | |
| *** fhubik is now known as fhubik_brb | 13:50 | |
| *** fhubik_brb is now known as fhubik | 13:53 | |
| *** ayoung has joined #openstack-keystone | 13:53 | |
| *** ChanServ sets mode: +v ayoung | 13:53 | |
| *** markvoelker has joined #openstack-keystone | 13:53 | |
| *** fhubik is now known as fhubik_brb | 13:54 | |
| *** fhubik_brb is now known as fhubik | 13:54 | |
| *** fhubik is now known as fhubik_brb | 13:54 | |
| *** daemontool has quit IRC | 13:56 | |
| *** daemontool has joined #openstack-keystone | 13:57 | |
| *** daemontool has quit IRC | 13:58 | |
| *** topol has joined #openstack-keystone | 13:58 | |
| *** ChanServ sets mode: +v topol | 13:58 | |
| *** daemontool has joined #openstack-keystone | 13:59 | |
| *** htruta has left #openstack-keystone | 13:59 | |
| *** htruta has joined #openstack-keystone | 13:59 | |
| *** jaosorior has quit IRC | 14:03 | |
| *** rcernin has quit IRC | 14:03 | |
| *** jaosorior has joined #openstack-keystone | 14:03 | |
| *** LimorStotland has left #openstack-keystone | 14:05 | |
| *** richm has joined #openstack-keystone | 14:08 | |
| *** jerrygb has joined #openstack-keystone | 14:23 | |
| *** mylu has joined #openstack-keystone | 14:23 | |
| *** nllrte has joined #openstack-keystone | 14:34 | |
| marekd | iurygregory: congrats.looks like patch is approved | 14:40 |
| *** NM has joined #openstack-keystone | 14:40 | |
| iurygregory | marekd, merged :D | 14:40 |
| iurygregory | thanks for your review =D | 14:40 |
| marekd | iurygregory: no problem | 14:41 |
| *** goodygum_ is now known as noqa_v_qoovnie | 14:44 | |
| *** jgriffith_away is now known as jgriffith | 14:47 | |
| *** pumaranikar has joined #openstack-keystone | 14:54 | |
| *** jerrygb has quit IRC | 14:56 | |
| *** jerrygb has joined #openstack-keystone | 14:57 | |
| *** davechen has joined #openstack-keystone | 15:00 | |
| *** jaosorior has quit IRC | 15:00 | |
| *** mylu has quit IRC | 15:01 | |
| *** mylu has joined #openstack-keystone | 15:02 | |
| *** boris-42 has joined #openstack-keystone | 15:02 | |
| *** jaosorior has joined #openstack-keystone | 15:02 | |
| openstackgerrit | Steve Martinelli proposed openstack/keystone: Remove example extension https://review.openstack.org/235574 | 15:03 |
| *** ajayaa has joined #openstack-keystone | 15:05 | |
| stevemar | bknudson: ^ you asked about that in a review | 15:05 |
| bknudson | stevemar: y, you can put closes-bug whatever the bug is | 15:06 |
| *** jasonsb has joined #openstack-keystone | 15:06 | |
| bknudson | stevemar: Closes-Bug: #1519244 | 15:07 |
| openstack | bug 1519244 in OpenStack Identity (keystone) "Allow building doc using make latexpdf" [Undecided,In progress] https://launchpad.net/bugs/1519244 - Assigned to Daniele Pizzolli (daniele-pizzolli) | 15:07 |
| openstackgerrit | Steve Martinelli proposed openstack/keystone: Remove example extension https://review.openstack.org/235574 | 15:07 |
| stevemar | yeah, just did | 15:07 |
| stevemar | now to get someone else to review it :P | 15:07 |
| bknudson | stevemar: Daniele Pizzolli should be interested | 15:08 |
| *** breitz has quit IRC | 15:08 | |
| *** breitz has joined #openstack-keystone | 15:08 | |
| *** dims_ has joined #openstack-keystone | 15:08 | |
| *** dims has quit IRC | 15:09 | |
| *** ahilsinhas has joined #openstack-keystone | 15:12 | |
| *** jerrygb has quit IRC | 15:15 | |
| *** jerrygb has joined #openstack-keystone | 15:16 | |
| *** btully has joined #openstack-keystone | 15:17 | |
| *** markvoelker has quit IRC | 15:18 | |
| *** markvoelker has joined #openstack-keystone | 15:18 | |
| lbragstad | xek updated your spec with a couple more questions | 15:24 |
| openstackgerrit | henry-nash proposed openstack/keystone-specs: Clarify project hierarchy and parent usage within the API https://review.openstack.org/200624 | 15:24 |
| lbragstad | xek are you pretty familiar with how nova does online migrations? | 15:24 |
| lbragstad | if so, I have questions :) | 15:24 |
| *** urulama has quit IRC | 15:24 | |
| *** urulama has joined #openstack-keystone | 15:25 | |
| openstackgerrit | henry-nash proposed openstack/keystone-specs: Clarify project hierarchy and parent usage within the API https://review.openstack.org/200624 | 15:26 |
| *** henrynash has joined #openstack-keystone | 15:27 | |
| *** ChanServ sets mode: +v henrynash | 15:27 | |
| *** jasonsb has quit IRC | 15:32 | |
| *** jerrygb has quit IRC | 15:33 | |
| *** slberger has joined #openstack-keystone | 15:38 | |
| *** mylu has quit IRC | 15:43 | |
| *** ajayaa has quit IRC | 15:46 | |
| *** jbell8 has joined #openstack-keystone | 15:49 | |
| *** EinstCra_ has quit IRC | 15:51 | |
| *** NM has quit IRC | 16:07 | |
| *** fhubik_brb is now known as fhubik | 16:07 | |
| *** ericksonsantos has joined #openstack-keystone | 16:07 | |
| samueldmq | henrynash: hi, do you have a moment to talk about https://review.openstack.org/#/c/200434 ? | 16:09 |
| henrynash | samueldmq: sure | 16:09 |
| samueldmq | henrynash: so, looks like deprecating the old extension + adding the new api (based on the extension, but with inherited logic fixed) isn't going to wokr | 16:11 |
| openstackgerrit | henry-nash proposed openstack/keystone-specs: Allow url-safe project and domain names to be optionally enforced https://review.openstack.org/248083 | 16:11 |
| samueldmq | henrynash: basically, what changes is htat, given the hierarchical prjects world, we need to evolve the inherited assignments | 16:12 |
| henrynash | samueldmq: I’m ok with that too | 16:12 |
| samueldmq | henrynash: but, we didn't do that in the same cycle as we introduced hierarchical projects | 16:12 |
| samueldmq | henrynash: so now we're in trouble | 16:12 |
| *** ajayaa has joined #openstack-keystone | 16:12 | |
| stevemar | notmorgan: regarding the topic of distrusting vs trusting: https://review.openstack.org/#/c/246749/ -- help a brother out? | 16:13 |
| stevemar | or lbragstad :) ^ | 16:14 |
| henrynash | samueldmq: not quite sure what you are angling for exactly.... | 16:15 |
| samueldmq | henrynash: the options I see are: i) we add a config option to change inherited behavior ii) add another completely new inherited param or iii) a third parameter to specify the type of inheritance | 16:15 |
| samueldmq | henrynash: i) is bad for interoperability | 16:15 |
| samueldmq | henrynash: ^ I am trying to list our alternatives, and the tradeoffs of each one | 16:16 |
| henrynash | samueldmq: brb | 16:16 |
| *** rcernin has joined #openstack-keystone | 16:16 | |
| samueldmq | henrynash: sure | 16:16 |
| *** urulama has quit IRC | 16:19 | |
| *** urulama has joined #openstack-keystone | 16:19 | |
| henrynash | samueldmq: to add to this, I’ve come across at least one customer that really likes the current inheritance model and doesn’t want u sto change it (and that’s for project hierarchy inheritance, not just domain->project) | 16:19 |
| openstackgerrit | Marek Denis proposed openstack/keystone-specs: Make keystone fully fledged SAML2 Service Provider https://review.openstack.org/244694 | 16:20 |
| henrynash | samueldmq: so I was mulling adding a second inherited prarm | 16:20 |
| samueldmq | henrynash: and I agree that can be useful in some cases | 16:20 |
| henrynash | anyway | 16:20 |
| openstackgerrit | Morgan Fainberg proposed openstack/keystoneauth: Add docstring validation https://review.openstack.org/230035 | 16:20 |
| samueldmq | henrynash: yes, a second inheritance parameter would be nice, and backwards compatible | 16:20 |
| henrynash | samueldmq: agreed | 16:20 |
| samueldmq | henrynash: perhaps it now becomes a naming problem :) | 16:21 |
| samueldmq | henrynash: since we need to find a very good name for assignments which apply to both current and children | 16:21 |
| raildo | lhcheng: ping, are you around? It's about Horizon impact with v2.0 deprecation | 16:21 |
| henrynash | samueldmq: ‘inherited_to_projects_and_the_nice_target_you_placed_the_assignment_on’ ? | 16:22 |
| notmorgan | stevemar: ^ yet another reason for that email. It's absurd for that policy with reno | 16:22 |
| openstackgerrit | Marek Denis proposed openstack/keystone-specs: Make keystone fully fledged SAML2 Service Provider https://review.openstack.org/244694 | 16:23 |
| *** NM has joined #openstack-keystone | 16:24 | |
| *** harshs has joined #openstack-keystone | 16:24 | |
| *** mylu has joined #openstack-keystone | 16:25 | |
| samueldmq | henrynash: haha, looks short enough for UX | 16:26 |
| *** navid_ has joined #openstack-keystone | 16:27 | |
| henrynash | samueldmq: so I think what we are saying is that is a multistep process…first make current API core, then look at additional fucntionality | 16:28 |
| *** lhcheng_ has joined #openstack-keystone | 16:29 | |
| *** dims_ has quit IRC | 16:30 | |
| *** josecastroleon has quit IRC | 16:31 | |
| *** lhcheng has quit IRC | 16:32 | |
| samueldmq | henrynash: that's what I am actually writing in my review there | 16:33 |
| samueldmq | henrynash: would be great to do it this way, if you agree :) | 16:33 |
| notmorgan | stevemar: https://review.openstack.org/#/c/245304/ | 16:33 |
| *** simondodsley has joined #openstack-keystone | 16:34 | |
| notmorgan | stevemar: if you could look at it. just a +1 is fine, but just making sure it makes sense to you until jamielennox wakes up | 16:35 |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Correct RoleNotFound usage https://review.openstack.org/248466 | 16:37 |
| samueldmq | henrynash: reviewed, hope it helps :) | 16:37 |
| stevemar | notmorgan: i'll look at it after gym, gotta make sure i'm alive to review | 16:38 |
| stevemar | notmorgan lhcheng_ need a non-ibm +2 here: https://review.openstack.org/#/c/248466/ | 16:38 |
| stevemar | notmorgan: hehe | 16:38 |
| openstackgerrit | Merged openstack/keystone: Updating sample configuration file https://review.openstack.org/249033 | 16:38 |
| *** aix has quit IRC | 16:40 | |
| notmorgan | stevemar: but... really is the gym going to make you alive? | 16:41 |
| * mordred is scared of stevemar | 16:41 | |
| *** daemontool has quit IRC | 16:43 | |
| *** daemontool has joined #openstack-keystone | 16:44 | |
| openstackgerrit | Merged openstack/keystoneauth: Allow saving and caching the plugin auth state https://review.openstack.org/245612 | 16:45 |
| *** dims has joined #openstack-keystone | 16:46 | |
| *** daemontool has quit IRC | 16:49 | |
| *** EinstCrazy has joined #openstack-keystone | 16:51 | |
| dstanek | henrynash: https://gist.github.com/dstanek/756337141e5e0066ebce | 16:51 |
| notmorgan | henrynash: so... i need to know what is really driving the use-case for the reseller stuff (since we seem to be back to where we were pre-summit) | 16:52 |
| notmorgan | henrynash: with some minor adjustments... but | 16:52 |
| *** fhubik is now known as fhubik_brb | 16:56 | |
| *** EinstCrazy has quit IRC | 16:56 | |
| openstackgerrit | Merged openstack/keystoneauth: Add load_from_options_getter to plugin loading https://review.openstack.org/222029 | 16:56 |
| *** e0ne has quit IRC | 16:58 | |
| *** diegows has quit IRC | 17:00 | |
| dstanek | *all*: some reading material for henrynash's topic - https://gist.github.com/dstanek/756337141e5e0066ebce | 17:01 |
| bknudson | dstanek: looks good to me. I think this should be proposed to the developer docs | 17:06 |
| openstackgerrit | Merged openstack/keystoneauth: Add documentation to Opt https://review.openstack.org/248522 | 17:07 |
| openstackgerrit | Merged openstack/keystoneauth: Tweak the way plugin attributes are loaded https://review.openstack.org/248523 | 17:07 |
| raildo | bknudson: ++ | 17:07 |
| *** fhubik_brb is now known as fhubik | 17:09 | |
| stevemar | dstanek: <3 the doc | 17:11 |
| *** ayoung has quit IRC | 17:13 | |
| *** dims has quit IRC | 17:18 | |
| *** dims_ has joined #openstack-keystone | 17:18 | |
| *** david-ly_ has joined #openstack-keystone | 17:19 | |
| *** david-l__ has joined #openstack-keystone | 17:23 | |
| *** david-ly_ has quit IRC | 17:23 | |
| *** david-lyle has quit IRC | 17:23 | |
| openstackgerrit | Tom Cocozzello proposed openstack/keystone: Improve code and comments in test_catalog https://review.openstack.org/248846 | 17:24 |
| openstackgerrit | Tom Cocozzello proposed openstack/keystone: Improve code and comments in test_catalog https://review.openstack.org/248846 | 17:25 |
| *** mylu has quit IRC | 17:26 | |
| *** harshs has quit IRC | 17:26 | |
| *** ayoung has joined #openstack-keystone | 17:26 | |
| *** ChanServ sets mode: +v ayoung | 17:26 | |
| *** mylu has joined #openstack-keystone | 17:26 | |
| *** jbell8 has quit IRC | 17:27 | |
| *** shaleh has joined #openstack-keystone | 17:29 | |
| *** david-l__ has quit IRC | 17:30 | |
| *** mylu has quit IRC | 17:31 | |
| *** roxanaghe has joined #openstack-keystone | 17:41 | |
| *** jbell8 has joined #openstack-keystone | 17:43 | |
| *** david-lyle has joined #openstack-keystone | 17:44 | |
| *** NM has quit IRC | 17:48 | |
| stevemar | notmorgan: you gonna be around for the meeting? | 17:50 |
| *** arunkant has quit IRC | 17:50 | |
| stevemar | or dstanek? | 17:50 |
| stevemar | i may need some help running it, the electrician said he will come any time tuesday and he's picking *now* | 17:50 |
| notmorgan | ask dstanek i maaaaay disappear any moment | 17:51 |
| *** arunkant has joined #openstack-keystone | 17:51 | |
| *** arunkant_ has joined #openstack-keystone | 17:52 | |
| dstanek | i'll be here stevemar, notmorgan | 17:56 |
| openstackgerrit | Merged openstack/keystone: Remove example extension https://review.openstack.org/235574 | 17:56 |
| *** aix has joined #openstack-keystone | 17:57 | |
| dstanek | stevemar: wow, lots of stuff for this meeting | 17:58 |
| marekd | too much i guess | 17:58 |
| dstanek | stevemar: do you want me to start/stop it and you can run while you are there or would you rather me just do the whole thing? | 17:58 |
| stevemar | dstanek: i can start it | 17:59 |
| dstanek | stevemar: you just have to be there to end it too. or -infra can probably do that if you have to bail | 17:59 |
| stevemar | ping ajayaa, amakarov, ayoung, breton, browne, davechen, david8hu, dolphm, dstanek, ericksonsantos, geoffarnold, gyee, henrynash, hogepodge, htruta, jamielennox, joesavak, lbragstad, lhcheng, marekd, morganfainberg, nkinder, raildo, rodrigods, roxanaghe, samueldmq, shaleh, stevemar, tsymanczyk, topol, vivekd, wanghong, claudiub, rderose, samleon, xek, MaxPC | 17:59 |
| stevemar | dstanek: thats fine | 18:00 |
| *** e0ne has joined #openstack-keystone | 18:01 | |
| *** david-lyle has quit IRC | 18:03 | |
| *** urulama has quit IRC | 18:04 | |
| *** jistr has quit IRC | 18:04 | |
| *** urulama has joined #openstack-keystone | 18:04 | |
| openstackgerrit | Diane Fleming proposed openstack/keystone-specs: missing new attribute about Token https://review.openstack.org/242719 | 18:04 |
| openstackgerrit | Diane Fleming proposed openstack/keystone-specs: missing attibute about Token https://review.openstack.org/242724 | 18:06 |
| openstackgerrit | Merged openstack/keystone: Add release notes for mitaka thus far https://review.openstack.org/246749 | 18:08 |
| *** jaosorior has quit IRC | 18:09 | |
| *** jaosorior has joined #openstack-keystone | 18:10 | |
| *** david-lyle has joined #openstack-keystone | 18:11 | |
| *** wasmum has joined #openstack-keystone | 18:11 | |
| *** ayoung has quit IRC | 18:12 | |
| *** ayoung has joined #openstack-keystone | 18:12 | |
| *** ChanServ sets mode: +v ayoung | 18:12 | |
| topol | o/ | 18:13 |
| stevemar | topol: go to -meeting! | 18:15 |
| *** jaosorior has quit IRC | 18:28 | |
| *** nllrte has quit IRC | 18:29 | |
| *** harshs has joined #openstack-keystone | 18:30 | |
| *** nllrte has joined #openstack-keystone | 18:42 | |
| *** spandhe has joined #openstack-keystone | 18:42 | |
| *** zqfan_AFK has quit IRC | 18:46 | |
| *** fhubik has quit IRC | 18:46 | |
| openstackgerrit | Merged openstack/keystoneauth: Add docstring validation https://review.openstack.org/230035 | 18:46 |
| shaleh | a quick grep of the tree finds only one commented 2.6 compatibility piece | 19:00 |
| shaleh | need to do more searching | 19:01 |
| shaleh | things like "pre 2.7" and the like | 19:01 |
| *** jerrygb has joined #openstack-keystone | 19:01 | |
| navid_ | marekd: I have a question about endpoint filtering, what is the criteria for filtering? | 19:01 |
| *** wuhg has quit IRC | 19:01 | |
| *** aginwala has joined #openstack-keystone | 19:02 | |
| marekd | navid_: one moment | 19:02 |
| ayoung | henrynash, I'm going to make the changes suggested in the meeting to the URL safe names spec. OK? | 19:02 |
| *** tellesnobrega is now known as tellesnobrega_af | 19:03 | |
| davechen | navid_: currently, it filter endpoint for s specific project. | 19:03 |
| dstanek | notmorgan: i don't think anyone really address my points in the distrusting model email :-( | 19:04 |
| notmorgan | dstanek: my response was to lbragstad respons | 19:05 |
| davechen | navid_: either from project_endpoint of from endpoint group project assocation. | 19:05 |
| notmorgan | dstanek: i didn't specifically address your points. | 19:05 |
| stevemar | dstanek: i distrust you all | 19:05 |
| notmorgan | davechen: i also have been trying to let the convo continue some before jumping back in. | 19:05 |
| dstanek | notmorgan: everyone is talking about developers and not the other issue | 19:05 |
| notmorgan | stevemar: i don't trust you or topol | 19:05 |
| notmorgan | stevemar: clearly | 19:05 |
| * dstanek rage quits because stevemar is mean | 19:05 | |
| davechen | notmorgan: sorry. :( | 19:06 |
| stevemar | dstanek: yes, one less person to give puppies to | 19:06 |
| notmorgan | dstanek: feel free to tag back in and refocus the convo that way. i think your points are good | 19:06 |
| notmorgan | davechen: :P | 19:06 |
| *** LukeHinds has quit IRC | 19:06 | |
| notmorgan | dstanek: i am happy we are having the convo on the ML though. its something we need to talk about in this community and if the result is a well defined (on each project) policy to how it is meant to be done - that is a win. but we need to be clear (I obviously want to go to the proposed model) | 19:07 |
| henrynash | ayoung: are there any changes? | 19:09 |
| breton | does the old model hamper us somehow? | 19:09 |
| ayoung | henrynash, just clarifications. I'll post a diff: | 19:09 |
| dstanek | notmorgan: i actually wouldn't mind the trusting model, but i want to make sure everyone thinks about it from all angles | 19:10 |
| *** alejandrito has quit IRC | 19:10 | |
| ayoung | henrynash, right now I have http://paste.fedoraproject.org/294092/92219144 | 19:10 |
| notmorgan | dstanek: but honestly, as long as we have a clear policy on this i think we'll be fine. and the perceived inproprieties can be dealt with. | 19:10 |
| dstanek | while i trust all of the cores in our group I don't trust all of your companies :-) or all the other companies out there... | 19:10 |
| tjcocozz | I didn't realize the meeting time changed :( stevemar you have some work for me about remove py26 code? | 19:10 |
| notmorgan | dstanek: i *think* it will be a couple times of showing noting is untoward and it wont be an issue again | 19:11 |
| notmorgan | dstanek: i am also personally inclined to trust the individuals (cores) to speak up to the PTL or the rest of the group if there is undue pressure | 19:11 |
| dstanek | notmorgan: that's not really the issue either | 19:12 |
| notmorgan | coming from the corp chain | 19:12 |
| henrynash | ayoung: I’m not sure we should we should be mentioned nested domains explciitely here…that’s for another spec | 19:12 |
| topol | so the avoid single company group think is an important issue | 19:12 |
| notmorgan | dstanek: meaning it can be headed off beforesomething lands | 19:12 |
| ayoung | henrynash, ok...I can X that | 19:12 |
| stevemar | tjcocozz: ha, np | 19:13 |
| dstanek | notmorgan: imagine if dolphm, lbragstad and I pushed through fernet (all cores agreed it was correct and good). another org can come in and say Rax pushed it through instead of technology X | 19:13 |
| notmorgan | topol: i don't think the group think issue is at play here - we either already have that or we have a healthy development community/practices - that is something we can continue to solve w/o it. | 19:13 |
| dstanek | now there is a PR/social (hard) problem | 19:13 |
| topol | dstanek EXACTLY | 19:13 |
| topol | its what dstanek said | 19:13 |
| henrynash | ayoung: sounds good | 19:14 |
| ayoung | henrynash, so just http://paste.fedoraproject.org/294101/48392444 | 19:14 |
| dstanek | so now my company and our team is taking heat because someone wants to make a headline at our expense | 19:14 |
| stevemar | tjcocozz: take your pick: https://bugs.launchpad.net/keystone/+bug/1519449 | 19:14 |
| openstack | Launchpad bug 1519449 in python-keystoneclient "Remove Python 2.6 Support" [Low,In progress] - Assigned to Keystone Drivers (keystone-drivers) | 19:14 |
| topol | again we can be flexible for smaller projects and no one seems to get upset | 19:14 |
| notmorgan | dstanek: and this is why i'm having the conversation in the open. | 19:14 |
| *** mylu has joined #openstack-keystone | 19:14 | |
| notmorgan | because we can use the conversation [if policy is changed] to help head that off | 19:14 |
| stevemar | dstanek: maybe the solution is to keep the distrustful policy on specs, but not for code? | 19:14 |
| notmorgan | actually i have a different view on specs | 19:15 |
| stevemar | i'd like specs to have a roll call | 19:15 |
| notmorgan | that i left out. this convo was really meant towards code review | 19:15 |
| dstanek | i'll put that example in the thread and see if we can get some comments on that. it's more than clear that people trust their developers | 19:15 |
| notmorgan | stevemar: that was my recommendation | 19:15 |
| dstanek | stevemar: sure | 19:15 |
| notmorgan | stevemar: roll-call, and PTL approves | 19:15 |
| henrynash | ayoung: mayeb just for calrity in line 14 rather than saying “will be disabled” maybe say “will be treated as being disabled” | 19:15 |
| topol | dstanek notmorgan I really felt the pain one time of being perceived of my company pushing something through.. Even though a previous patchset was +2 by another company we still got whooped | 19:16 |
| notmorgan | stevemar: kindof like the TC resolutions | 19:16 |
| stevemar | notmorgan: yep | 19:16 |
| dstanek | then do we need more of a formal policy that things should be tagged to a spec if they are a feature? | 19:16 |
| ayoung | henrynash, meaning that the "disabled" flag is not actually set in the database? | 19:16 |
| henrynash | ayoung: exactly | 19:16 |
| stevemar | tjcocozz: any questions about the bug? | 19:16 |
| stevemar | ask bknudson haha | 19:16 |
| * tjcocozz is looking now | 19:16 | |
| notmorgan | topol: and i think that is going to be an issue anyway. so i am in favor of trusting individuals. i also will point to the fact that core is independant of affiliation anytime someone asks | 19:16 |
| ayoung | henrynash, OK...I might add some words | 19:16 |
| henrynash | ayoung: ok | 19:16 |
| notmorgan | topol: if you change jobs/companies you're still core | 19:16 |
| dstanek | ...and then ther are the wishlist bugs that we say don't need specs | 19:16 |
| notmorgan | dstanek: i think we have a reasonable policy on that already | 19:17 |
| openstackgerrit | ayoung proposed openstack/keystone-specs: Allow url-safe project and domain names to be optionally enforced https://review.openstack.org/248083 | 19:17 |
| ayoung | notmorgan, oh, come on, when will a core ever change companies? | 19:18 |
| tjcocozz | stevemar, i guess i will need help removing the gate job but other than that it looks pretty strait foward | 19:18 |
| notmorgan | ayoung: never... ever... ever... ever... | 19:18 |
| stevemar | ayoung: how often do seasons change? | 19:18 |
| stevemar | :P | 19:18 |
| stevemar | or maybe as often as the wind changes direction? | 19:19 |
| topol | notmorgan. I agree. its just the perception. even in reality we know dstanek, dolphm, lbragstad didnt railroad fernet down our throats but if they all did it themselves people would percieve it that way | 19:19 |
| ayoung | I misspoke when I said I was one of the architects. I should have said "approvers" as I do remember the original conversation, but I don't remember who's idea it was. | 19:19 |
| notmorgan | topol: and i think this policy isn't saving us from that perception | 19:19 |
| topol | no worries ayoung. we don't vet your credit claims :-) | 19:20 |
| notmorgan | topol: it's a strawman in this case . | 19:20 |
| henrynash | ayoung, gyee: one of you want to up your +2 to +A ? | 19:20 |
| henrynash | ayoung, gyee: https://review.openstack.org/#/c/220335/ | 19:20 |
| ayoung | henrynash, will do | 19:20 |
| ayoung | henrynash, just a rebase, right? | 19:21 |
| henrynash | stevemar: are you ok now on: https://review.openstack.org/#/c/220452/ | 19:21 |
| topol | notmorgan the policy would have saved me when this blew up on us once | 19:21 |
| henrynash | ayoung: yes | 19:21 |
| *** mylu has quit IRC | 19:21 | |
| dstanek | notmorgan: maybe i've been through too much corporate training :) | 19:21 |
| notmorgan | topol: i actually don't think it would. | 19:21 |
| notmorgan | topol: i think it's a convientn place to point at, but it doesn't change much | 19:22 |
| stevemar | henrynash: i still think having two policies is bananas | 19:22 |
| topol | notmorgan, given a previous accusation of this I dedicated a resource to a project full time todo quality improvements to make amends. Which I'm glad I did. The person is doing a great job imporving that projects quality | 19:23 |
| henrynash | stevemar: you mean one for list assignment on a specific target and one for doing a whole tree? | 19:23 |
| topol | But still thats the impact I felt personally not having this policy | 19:23 |
| stevemar | henrynash: the fact that a query parameter needs a different policy call | 19:24 |
| topol | notmorgan, dstanek, being accused of a crime you didnt commit stinks... | 19:24 |
| henrynash | stevemar: so that’s an argument to do this a new API, rather than a query parameter… | 19:24 |
| dstanek | notmorgan, topol: it's true that there isn't a way to know if this policy would have helped in that situation, but i suspect it would have been more ammo to combat accusations | 19:25 |
| notmorgan | topol: sure. but we can also make the change, see that it doesn't work [this becomes a serious issue] and say it was an experiment and go back. | 19:25 |
| notmorgan | i don't think we're going to see higher incidences of this type of concern than we do today | 19:25 |
| notmorgan | honestly | 19:25 |
| notmorgan | mostly because we as cores *will* continue to ask for outside insight | 19:25 |
| stevemar | henrynash: and the policy for `list_role_assignments_for_tree` is the same for `list_role_assignments` | 19:25 |
| notmorgan | etc. | 19:26 |
| stevemar | (minus one or) | 19:26 |
| notmorgan | we are continuing with healthy development practices. it allows flexibility where it makes sense (lets just point out reno changes, 1 line bug fixes, i18n modifications [not the bot, but string changes], etc) there are many many many things we can easily say the benefits outweigh the detriments | 19:27 |
| notmorgan | especially if the specs still are more rigerous | 19:27 |
| topol | notmorgan, dstanek, in my scenario the fallout occurred much much later. A patch got in. It was buggy. The person left the company. So it fell through the cracks for a long time. And then when the project leads saw that all IBMer's pushed it in they were very upset at us. And frankly I really understood their point of view | 19:27 |
| notmorgan | with a rollcall type vote vs. a +2/+A | 19:27 |
| notmorgan | because the spec will still define the "do we want this" | 19:28 |
| topol | notmorgan. I agree the policy should be flexible. we have easier rules for pyacdf and heat translator | 19:28 |
| tjcocozz | stevemar, would you mind if I remove all the py2.6 projects from the gate? | 19:28 |
| stevemar | tjcocozz: only for the keystone projects | 19:28 |
| henrynash | stevemar: by default it is the same, but we are asuming different deploymetns woudl change this to whats suityed them..teh point being that I think we have to let them be different | 19:28 |
| topol | notmorgan, dstanek the question is how much more flexibility do you want/need and for which projects do you have concerns | 19:29 |
| notmorgan | topol: so, spec still more strict, but code review not? i think that tends to address the major concerns. | 19:29 |
| tjcocozz | stevemar, haha that makes sense. | 19:29 |
| tjcocozz | stevemar, working on it now | 19:29 |
| notmorgan | topol: i'd advocate for the full "trust" policy on all projects in OpenStack [specs being a project-by-project thing of course] | 19:29 |
| topol | notmorgan. possibly. but what if competing patch implementations? | 19:29 |
| *** ajayaa has quit IRC | 19:29 | |
| notmorgan | topol: PTL deconflict, same as today really | 19:29 |
| notmorgan | topol: and if people are bad actors... we have remediation plans outlined in the proposal | 19:30 |
| notmorgan | you *can* revert | 19:30 |
| notmorgan | you can strip core status | 19:30 |
| notmorgan | you can change policy back | 19:30 |
| notmorgan | until there is a reason to be distrustful, lets not be. | 19:30 |
| topol | what indemnifies me from PTL saying, this patch got in because of all IBMers. No one else understands it. IBM owns it, not the project? | 19:31 |
| notmorgan | topol: you elected the PTL | 19:31 |
| notmorgan | nothing indeminfies you from the PTL today saying topol and morgan wrote that as a cabal | 19:31 |
| topol | notmorgan PTL's can change every 6 months | 19:31 |
| notmorgan | and they own it | 19:31 |
| notmorgan | not the project | 19:31 |
| notmorgan | topol: and mostly the PTL is responsible for what happened on their watch | 19:32 |
| notmorgan | the subsequent PTLs may blame the PTLs for some things but typically aren't going to retroactively say "OMG BAD TOPOL" | 19:32 |
| notmorgan | topol: so again, i don't think this policy is buying us anything except a level of distrust / culture that we are doing the right thing with (discussing it in the open) | 19:34 |
| notmorgan | topol: s/that we/and that we/ | 19:34 |
| topol | notmorgan so I am pretty open to anything. If there was a new policy I would ask folks to be careful and only do the single company on non-controversy stuff. But I really think lbragstad, dolphm, and dstanek had good counterpoints | 19:34 |
| dstanek | topol: that's just rax trying to dictate development policy! | 19:34 |
| shaleh | heh | 19:35 |
| topol | dstanek, SMH :-) | 19:35 |
| *** henrynash has quit IRC | 19:35 | |
| notmorgan | dstanek: IBM. | 19:35 |
| notmorgan | dstanek: it's totally IBM dictating the policy... i mean they even have the PTL! :P | 19:35 |
| notmorgan | anyway i think some of this needs to end up continued on the ML thread | 19:36 |
| notmorgan | i am pleased this convo is happening both for keystone and other projects | 19:36 |
| *** navid_ has quit IRC | 19:36 | |
| stevemar | notmorgan: hey! i've been staying out of this convo for just that reason | 19:37 |
| dstanek | notmorgan: yep, and like i said i'd be fine either way. i'm just doing my duty to make sure all the issues are considered and maybe planned for | 19:37 |
| notmorgan | stevemar: ;) | 19:37 |
| notmorgan | dstanek: yar | 19:37 |
| stevemar | it'll look way too bait if i agree with it :( | 19:38 |
| notmorgan | stevemar: i also made it a point to send this email after I was done being PTL for a reason | 19:39 |
| stevemar | ah | 19:40 |
| topol | notmorgan, dstanek its a goodconversation to have. Will be intersting to see if a consensus can be achieved | 19:42 |
| topol | dstanek, and notmorgan I'm not religious either way on this | 19:43 |
| topol | whatever folks want I can make work | 19:43 |
| bknudson | tjcocozz: here's the -infra review for oslo libs: https://review.openstack.org/#/c/244275/ | 19:44 |
| topol | I just remember the butt whoopin I got the one time we let this happen. and darn it some other company did +2 a previous iterationof the patch :-) | 19:44 |
| shaleh | :-) | 19:44 |
| topol | branded, marked as theone who ran from bitter creek | 19:44 |
| bknudson | scarlet letter | 19:45 |
| *** dims has joined #openstack-keystone | 19:53 | |
| *** aginwala has quit IRC | 19:54 | |
| dstanek | tjcocozz: are you working on one of those 2.6 bugs? | 19:55 |
| tjcocozz | dstanek, yes! i am working on removing it from the gate | 19:55 |
| dstanek | tjcocozz: all of them? | 19:55 |
| *** dims_ has quit IRC | 19:56 | |
| dstanek | tjcocozz: i'm going to assign one of them to me to start attacking the code | 19:56 |
| tjcocozz | dstanek, all the projects listed in the bug | 19:56 |
| tjcocozz | dstanek, sounds good. hopefully i'm not stepping on peoples toes :) | 19:56 |
| dstanek | tjcocozz: nope, if you want to work on the code for one of them assign the bug to yourself. | 19:57 |
| tjcocozz | dstanek, sounds good. I do want to get this blue print up and running before i start jumping into more bugs, if thats okay | 19:59 |
| *** aginwala has joined #openstack-keystone | 20:00 | |
| openstackgerrit | Merged openstack/keystone: Correct RoleNotFound usage https://review.openstack.org/248466 | 20:03 |
| dstanek | tjcocozz: sure. You don't have to do any. Just want to be sure we're now duplicating efforts | 20:04 |
| davechen | tjcocozz, dstanek: i am going to look at keystoneclient, but i will check if there is anything already done before pushing a review. | 20:04 |
| tjcocozz | dstanek, that makes sense. you will see my review up there shortly. :-) | 20:05 |
| davechen | just go ahead, and don't care about this. | 20:06 |
| davechen | tjcocozz: cool, you are really fast. :) | 20:06 |
| tjcocozz | davechen, I choose the simple task to do :) | 20:07 |
| bknudson | davechen: tjcocozz is working on the -infra change to remove the py26 gate jobs. | 20:07 |
| bknudson | there's still work to do to remove the classifier from setup.cfg if it's there. | 20:07 |
| bknudson | and update tox.ini | 20:07 |
| bknudson | let me see if I can find an example from oslo... | 20:08 |
| davechen | bknudson: there was a aged patch i have abandoned to fix the tox.ini in keystoneclient. | 20:08 |
| davechen | bknudson: i think it's could be restored now. | 20:08 |
| bknudson | Here's an example of removing the classifier: https://review.openstack.org/#/c/246194/ | 20:09 |
| bknudson | and tox.ini cleanup: https://review.openstack.org/#/c/245475/ | 20:09 |
| dstanek | tjcocozz: you should comment on the bug that you are doing all of the gate stuff | 20:10 |
| *** mylu has joined #openstack-keystone | 20:10 | |
| dstanek | bknudson: we did this in keystone a few releases ago | 20:11 |
| dstanek | bknudson: and code cleanup | 20:11 |
| bknudson | davechen: if you can find it just restore the old change. was there another bug already? | 20:12 |
| tjcocozz | dstanek, working on that now | 20:12 |
| davechen | bknudson: no bug, it's about some dependency needed in KSC for py26. | 20:13 |
| bknudson | oh, nice... argparse maybe? | 20:13 |
| davechen | we abandone that since we still need support py26 at that time. | 20:13 |
| davechen | it's 'discover'. https://review.openstack.org/#/c/171540/ | 20:14 |
| davechen | but i need check if we have aready remove it. | 20:14 |
| kfox1111 | ran into maybe a snag.... just upgraded to liberty keystone with fernet tokens. | 20:15 |
| kfox1111 | everything seems to work except ceph rados gw. | 20:15 |
| kfox1111 | any known gotcha's there? :/ | 20:15 |
| kfox1111 | do admin tokens work with fernet ones? | 20:15 |
| *** mylu has quit IRC | 20:15 | |
| tjcocozz | stevemar, a core from openstack-infra wants you to take a look at my review to remove the py26 gate jobs for the projects. https://review.openstack.org/#/c/249400/ | 20:17 |
| stevemar | tjcocozz: coolio | 20:20 |
| tjcocozz | stevemar, thanks! | 20:21 |
| *** nllrte has quit IRC | 20:21 | |
| dstanek | unlike the server it doesn't look like we have any 2.6 specific hacks | 20:22 |
| openstackgerrit | David Stanek proposed openstack/keystonemiddleware: Remove py26 target from tox.ini https://review.openstack.org/249404 | 20:23 |
| *** navid_ has joined #openstack-keystone | 20:24 | |
| bknudson | I thought we would have removed py26 from keystonemiddleware at the same time we did keystone. | 20:25 |
| *** ayoung has quit IRC | 20:26 | |
| *** ayoung has joined #openstack-keystone | 20:26 | |
| *** ChanServ sets mode: +v ayoung | 20:26 | |
| *** navid__ has joined #openstack-keystone | 20:26 | |
| stevemar | bknudson: things slip through the cracks | 20:27 |
| stevemar | bknudson: can you do a check on https://review.openstack.org/#/c/220452/ for me, make sure i'm not crazy? | 20:27 |
| kfox1111 | any ideas on the rados gw + fernet thing? | 20:27 |
| stevemar | bknudson: i feel like that is a terrible idea | 20:27 |
| stevemar | kfox1111: gonna have to but lbragstad and dolphm about that stuff :( | 20:27 |
| openstackgerrit | Merged openstack/keystone: Rationalize list role assignment routing https://review.openstack.org/220335 | 20:28 |
| *** navid_ has quit IRC | 20:28 | |
| kfox1111 | k. | 20:28 |
| lbragstad | kfox1111 reading back | 20:28 |
| kfox1111 | know any reason why an admin_token wouldn't work with a fernet tokened keystone? | 20:29 |
| *** mylu has joined #openstack-keystone | 20:31 | |
| lbragstad | kfox1111 is your "admin" token the token defined in your config or is it a fernet token? | 20:32 |
| lbragstad | kfox1111 to my knowledge, that should work fine? | 20:32 |
| lbragstad | I haven't heard of any snags | 20:32 |
| kfox1111 | admin in the keystone and ceph. | 20:32 |
| openstackgerrit | David Stanek proposed openstack/keystoneauth: Remove Python 2.6 support https://review.openstack.org/249407 | 20:32 |
| bknudson | stevemar: it's implementing a blueprint, so didn't we agree to do this? | 20:32 |
| kfox1111 | i see a post followed by a get, | 20:33 |
| bknudson | stevemar: regarding https://review.openstack.org/#/c/220452/ | 20:33 |
| kfox1111 | and the get fails with a 411 response. | 20:33 |
| lbragstad | 411? | 20:33 |
| lbragstad | or 401? | 20:33 |
| kfox1111 | 172.20.32.65 - - [24/Nov/2015:12:30:37 -0800] "GET /v2.0/tokens/<biglongencodedthingy> HTTP/1.1" 411 238 "-" "-" | 20:34 |
| bknudson | 411 Length Required | 20:34 |
| bknudson | The server refuses to accept the request without a defined Content- Length. | 20:34 |
| kfox1111 | hmm.... | 20:35 |
| lbragstad | that doesn't seem fernet specific | 20:35 |
| kfox1111 | I am running it through apache. cloud apache be injecting some extra requirements? | 20:35 |
| kfox1111 | could | 20:35 |
| lbragstad | http://stackoverflow.com/questions/19227142/http-status-code-411-length-required | 20:35 |
| bknudson | I don't think keystone would generate that, so might come from apache or whatever keystone is running in | 20:36 |
| lbragstad | in keystone, we don't actually use 411 anywhere - https://github.com/openstack/keystone/blob/master/keystone/exception.py | 20:36 |
| kfox1111 | so this may be radosgw + apache'd keystone... | 20:37 |
| lbragstad | kfox1111 possibly | 20:38 |
| bknudson | stevemar: regarding https://review.openstack.org/#/c/220452/ , I guess it makes sense to have a separate policy line for the tree operation so that it can be admin-only. | 20:38 |
| *** e0ne has quit IRC | 20:38 | |
| bknudson | the alternative would be to add a bunch of features to the policy language | 20:38 |
| openstackgerrit | David Stanek proposed openstack/python-keystoneclient-kerberos: Remove Python 2.6 support https://review.openstack.org/249410 | 20:38 |
| lbragstad | kfox1111 but keystone shouldn't be discriminating your token format (admin vs fernet)... that should work | 20:38 |
| kfox1111 | k. | 20:38 |
| lbragstad | dstanek 's is on the python 2.6 purge! | 20:39 |
| dstanek | lbragstad: technically i'm on a volunteer day, but we're not doing anything right now (or for the next few hours) | 20:39 |
| lbragstad | dstanek open-source development counts as volunteering | 20:40 |
| lbragstad | :) | 20:40 |
| * dstanek thinks lbragstad is advocating giving his paychack to stockholders | 20:43 | |
| *** aginwala has quit IRC | 20:44 | |
| *** mylu has quit IRC | 20:44 | |
| dstanek | lbragstad: my wife and her friend run a charity; so i help them from time to time | 20:45 |
| lbragstad | dstanek nice, what are you guys doing today? | 20:45 |
| dstanek | lbragstad: earlier we were getting food bags delivered to schools. i think we have to go shopping in a little bit for a few hundred cans of soup/pasta/etc | 20:47 |
| dstanek | lbragstad: http://www.wkyc.com/story/news/local/lake-county/2015/10/06/lake-health-tripoint-medical-center-end-68-hours-of-hunger/73479684/ | 20:47 |
| lbragstad | dstanek that's awesome | 20:49 |
| bknudson | dstanek: it's strange the py26 job worked even when you removed the target -- https://review.openstack.org/#/c/249410/ | 20:51 |
| *** mylu has joined #openstack-keystone | 20:51 | |
| bknudson | ohh, there wasn't a special target for py26 | 20:52 |
| openstackgerrit | Dave Chen proposed openstack/python-keystoneclient: Removes discover from test-reqs https://review.openstack.org/249417 | 20:52 |
| lbragstad | we never had a specific env for py26, right? | 20:52 |
| lbragstad | navid__ here is the python 2.6 bug - https://bugs.launchpad.net/keystone/+bug/1519449 | 20:53 |
| openstack | Launchpad bug 1519449 in python-keystoneclient-kerberos "Remove Python 2.6 Support" [Low,In progress] - Assigned to David Stanek (dstanek) | 20:53 |
| dstanek | bknudson: then run the tests differently | 20:53 |
| dstanek | s/then/they/ | 20:53 |
| dstanek | bknudson: i've never really looked at their shell script before | 20:54 |
| *** NM has joined #openstack-keystone | 20:54 | |
| stevemar | dstanek: poke, you should rebase this patch: https://review.openstack.org/#/c/158442/8 | 20:57 |
| dstanek | stevemar: yeah, i started to yesterday after samueldmq had questions about it | 20:58 |
| dstanek | bknudson: you are right on the closes vs. partial | 20:58 |
| stevemar | closes actually closes it | 20:59 |
| dstanek | yeah, morgan said partial earlier and i didn't think about it | 20:59 |
| stevemar | notmorgan: so "deprecated-as-of-mitaka" means things we're *removing* in mitaka or *deprecating* in mitaka? | 20:59 |
| stevemar | or either :P | 21:00 |
| stevemar | referring to https://blueprints.launchpad.net/keystone/+spec/deprecated-as-of-mitaka | 21:00 |
| * stevemar is pretty sure he said partial | 21:00 | |
| stevemar | jusssayin | 21:00 |
| *** raildo is now known as raildo-afk | 21:01 | |
| *** lhcheng_ has quit IRC | 21:01 | |
| openstackgerrit | Dave Chen proposed openstack/python-keystoneclient: Removes discover from test-reqs https://review.openstack.org/171540 | 21:02 |
| *** navid__ has quit IRC | 21:02 | |
| notmorgan | stevemar: deprecated. You'd have removed-as-of-mitaka for removee | 21:04 |
| *** spandhe has quit IRC | 21:04 | |
| *** EinstCrazy has joined #openstack-keystone | 21:06 | |
| *** navid_ has joined #openstack-keystone | 21:06 | |
| dstanek | bknudson: yeah, i just looked at the script and i have to idea how it passed | 21:07 |
| stevemar | notmorgan: just saw that it was already created, thanks | 21:08 |
| *** mylu has quit IRC | 21:09 | |
| dstanek | bknudson: it's tox http://tox.readthedocs.org/en/latest/example/basic.html - you can use any of their available environments even if they are not listed in the tox.ini | 21:09 |
| dstanek | the list in tox.ini is basically what to run when you don't specify the environment | 21:09 |
| bknudson | magic | 21:09 |
| openstackgerrit | David Stanek proposed openstack/python-keystoneclient-kerberos: Remove Python 2.6 support https://review.openstack.org/249410 | 21:10 |
| openstackgerrit | David Stanek proposed openstack/keystonemiddleware: Remove py26 target from tox.ini https://review.openstack.org/249404 | 21:11 |
| *** jbell8 has quit IRC | 21:12 | |
| openstackgerrit | David Stanek proposed openstack/keystoneauth: Remove Python 2.6 support https://review.openstack.org/249407 | 21:12 |
| *** EinstCrazy has quit IRC | 21:12 | |
| navid_ | lbragstad: thanks | 21:13 |
| lbragstad | navid_ np! | 21:13 |
| *** pauloewerton has quit IRC | 21:13 | |
| dstanek | yay. last one for the 2.6 removal :-) | 21:14 |
| *** aginwala has joined #openstack-keystone | 21:19 | |
| *** henrynash has joined #openstack-keystone | 21:26 | |
| *** ChanServ sets mode: +v henrynash | 21:26 | |
| *** NM has quit IRC | 21:37 | |
| *** dims has quit IRC | 21:37 | |
| *** dims has joined #openstack-keystone | 21:38 | |
| *** NM has joined #openstack-keystone | 21:40 | |
| davechen | dstanek: you missed this, https://github.com/openstack/python-keystoneclient/blob/master/tox.ini#L4 | 21:40 |
| dstanek | davechen: no, i'm working on ksc now. haven't submitted a review yet | 21:43 |
| *** gordc has quit IRC | 21:45 | |
| davechen | dstanek: cool :) | 21:46 |
| shaleh | so what is the right way to draw reviewers in to +A my reviews? Do you all just add people as reviewers? | 21:47 |
| *** ayoung has quit IRC | 21:48 | |
| *** boris-42 has quit IRC | 21:48 | |
| dstanek | shaleh: there is no right way :-) i think people review they look at what's most important to them. if it's a critical bug fix then i'd probably add people to the review | 21:54 |
| shaleh | dstanek: good to know :-) | 21:55 |
| lbragstad | then again, everyone has a different perspective of what critical is ;) | 21:55 |
| dstanek | shaleh: if it's testing review then feel free to add me and i'll bug people when they start to block my testing work | 21:55 |
| shaleh | dstanek: shall do | 21:56 |
| shaleh | dstanek: I am sorry BTW. I am sure the churn I have been doing has not made your merges pleasant. | 21:57 |
| *** lhcheng has joined #openstack-keystone | 21:57 | |
| *** ChanServ sets mode: +v lhcheng | 21:57 | |
| *** aginwala has quit IRC | 21:58 | |
| *** shaleh is now known as shaleh|away | 21:59 | |
| *** topol has quit IRC | 22:00 | |
| dstanek | shaleh|away: not a big deal | 22:00 |
| *** aginwala has joined #openstack-keystone | 22:02 | |
| *** aginwala has quit IRC | 22:03 | |
| *** aginwala has joined #openstack-keystone | 22:05 | |
| *** jerrygb has quit IRC | 22:14 | |
| *** jerrygb has joined #openstack-keystone | 22:15 | |
| *** mylu has joined #openstack-keystone | 22:19 | |
| *** mylu has quit IRC | 22:23 | |
| *** nkinder has quit IRC | 22:25 | |
| *** navid_ has quit IRC | 22:27 | |
| *** mylu has joined #openstack-keystone | 22:28 | |
| kfox1111 | so, this may or may not be a keystone+apache issue... | 22:28 |
| kfox1111 | https://code.google.com/p/modwsgi/wiki/ChangesInVersion0300 mentions wsgi requiring a content_length. | 22:28 |
| dstanek | kfox1111: is one note being set? i would expect WebOb to actually do that for us | 22:30 |
| *** aginwala has quit IRC | 22:30 | |
| *** mylu has quit IRC | 22:30 | |
| *** aginwala has joined #openstack-keystone | 22:30 | |
| kfox1111 | not sure. trying to get a packet dump now to verify. | 22:31 |
| stevemar | dstanek: when you eventually create a patch for removing py26 support in keystone server, make a release note with it | 22:32 |
| kfox1111 | dstanek: here's a strace from swift to keystone: | 22:33 |
| kfox1111 | 32456 sendto(47, "GET /v2.0/tokens/<biglongencodedthinghere> HTTP/1.1\r\nHost: 172.20.32.64:5001\r\nAccept: */*\r\nTransfer-Encoding: chunked\r\nX-Auth-Token: <admintokenhere>\r\nExpect: 100-continue\r\n\r\n", 413, MSG_NOSIGNAL, NULL, 0) = 413 | 22:33 |
| kfox1111 | so it is doing the chunked thing like the wsgi3 spec mentions. | 22:33 |
| kfox1111 | no content-length. | 22:33 |
| kfox1111 | since there is no content though, I should probably be able to: WSGIChunkedRequest On ? | 22:34 |
| dstanek | kfox1111: that's the client request and not the server response | 22:34 |
| dstanek | kfox1111: i wouldn't expect a content-length there since the client isn't sending a body | 22:34 |
| *** mylu has joined #openstack-keystone | 22:34 | |
| kfox1111 | but I think its complaining about that? | 22:35 |
| notmyname | I also wouldn't expect a transfer-endcoding at all on a GET | 22:35 |
| kfox1111 | that's the get call that fails with the 411. | 22:35 |
| *** mylu has quit IRC | 22:36 | |
| dstanek | stevemar: we removed 2.6 support for server in Kilo | 22:36 |
| *** davechen has left #openstack-keystone | 22:37 | |
| dstanek | the "Except" header is also strange | 22:37 |
| stevemar | dstanek: d'oh | 22:38 |
| stevemar | we'll need a release note somewhere | 22:38 |
| dstanek | stevemar: no release not for kilo? | 22:39 |
| stevemar | dstanek: lemme check | 22:40 |
| stevemar | https://wiki.openstack.org/wiki/ReleaseNotes/Kilo#OpenStack_Identity_.28Keystone.29 | 22:40 |
| stevemar | nope | 22:40 |
| dstanek | stevemar: https://review.openstack.org/#/c/137120/ | 22:40 |
| kfox1111 | so, setting "WSGIChunkedRequest On" seems to have made it return a valid token. | 22:40 |
| kfox1111 | now, its not parsing the returned expire time. :/ | 22:41 |
| kfox1111 | "Keystone token parse error: access: token: Failed to parse ISO8601 expiration date from Keystone response." | 22:41 |
| kfox1111 | the expire date looks like: 2015-11-24T23:38:55.421231Z | 22:43 |
| *** aginwala has quit IRC | 22:43 | |
| *** urulama has quit IRC | 22:43 | |
| *** urulama has joined #openstack-keystone | 22:44 | |
| stevemar | dstanek: fantastic, i expect all the operators to read our patches :P | 22:44 |
| kfox1111 | is it the subsecond's that are not compliant? | 22:45 |
| *** mylu has joined #openstack-keystone | 22:46 | |
| dstanek | stevemar: if they don't then they are missing out! | 22:47 |
| kfox1111 | looks like its this: https://github.com/ceph/ceph/commit/136242b5612b8bbf260910b1678389361e86d22a | 22:47 |
| dstanek | this ksc lazy import stuff is throwing me for a loop | 22:48 |
| *** mylu has quit IRC | 22:48 | |
| *** mylu has joined #openstack-keystone | 22:48 | |
| stevemar | shaleh|away: churn is a necessary evil, i think we all like seeing things look better | 22:49 |
| *** doug-fis_ has joined #openstack-keystone | 22:49 | |
| stevemar | its cleaning up technical debt, not flashy work, but necessary | 22:49 |
| *** mylu_ has joined #openstack-keystone | 22:50 | |
| *** mylu has quit IRC | 22:52 | |
| *** doug-fish has quit IRC | 22:53 | |
| *** doug-fis_ has quit IRC | 22:53 | |
| kfox1111 | ok... looking for quick workarounds for now... | 22:54 |
| kfox1111 | with the v2 api and fernet tokens, will there be any negative impact if I just floor the v2 api token returned expire date? | 22:54 |
| *** aginwala has joined #openstack-keystone | 22:55 | |
| *** wuhg has joined #openstack-keystone | 22:57 | |
| kfox1111 | the keystone code's python, the radosgw, c++, so it will be much easier to work around for now in keystone if I can. | 22:57 |
| openstackgerrit | Steve Martinelli proposed openstack/keystone: Remove RequestBodySizeLimiter from middleware https://review.openstack.org/249469 | 22:57 |
| *** diazjf has joined #openstack-keystone | 22:58 | |
| *** simondodsley has quit IRC | 22:58 | |
| *** mylu_ has quit IRC | 22:59 | |
| *** mylu has joined #openstack-keystone | 23:00 | |
| *** topol has joined #openstack-keystone | 23:01 | |
| *** ChanServ sets mode: +v topol | 23:01 | |
| notmorgan | kfox1111: i can say I don't recommend doing that. | 23:01 |
| notmorgan | kfox1111: but there is nothing stopping you from doing it. | 23:01 |
| notmorgan | kfox1111: a lot of these choices were made for a number of reasons and the key bit is that we also want to keep everything consistent. You may run into odd edge cases we don't specifically handle | 23:02 |
| kfox1111 | well, at least at some point, keystone v2 was not subsecond accurate, because radosgw coded specifically against that assumption. | 23:03 |
| openstackgerrit | Steve Martinelli proposed openstack/keystone: Remove check_role_for_trust https://review.openstack.org/249472 | 23:03 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone: Updating sample configuration file https://review.openstack.org/249473 | 23:03 |
| *** harshs has quit IRC | 23:03 | |
| kfox1111 | so I'm just curious if there are any known gotcha's returning v2 to that behavior? | 23:03 |
| kfox1111 | (temporarily until I can get rados gw upgraded at some point) | 23:04 |
| *** doug-fish has joined #openstack-keystone | 23:04 | |
| *** NM has quit IRC | 23:04 | |
| *** topol has quit IRC | 23:05 | |
| kfox1111 | hmm.. I also remember something about fernet tokens not supporting subsecond accuracy anyway in liberty? | 23:07 |
| stevemar | dstanek: you going to put https://gist.github.com/dstanek/756337141e5e0066ebce in the dev docs? | 23:08 |
| dstanek | stevemar: yes | 23:08 |
| stevemar | or do i have to keep my chrome tab open :P | 23:08 |
| * stevemar joyously closes a chrome tab! | 23:08 | |
| stevemar | chrome is basically how i manage my todo's | 23:08 |
| *** doug-fish has quit IRC | 23:08 | |
| *** harshs has joined #openstack-keystone | 23:08 | |
| dstanek | stevemar: nope, i'll do it | 23:10 |
| *** boris-42 has joined #openstack-keystone | 23:10 | |
| *** diazjf has quit IRC | 23:11 | |
| *** spandhe has joined #openstack-keystone | 23:14 | |
| openstackgerrit | Steve Martinelli proposed openstack/keystone: Remove deprecated notification https://review.openstack.org/249475 | 23:15 |
| lbragstad | kfox1111 fernet tokens don't support subsecond accuracy due to the fernet spec | 23:18 |
| lbragstad | meaning that you can't get subsecond precision but all issued_at times of tokens will be .00000Z, for example | 23:18 |
| *** aginwala has quit IRC | 23:19 | |
| lbragstad | it will just truncate it because the timestamp is being cast to an integer instead of a float | 23:19 |
| *** henrynash has quit IRC | 23:20 | |
| openstackgerrit | Steve Martinelli proposed openstack/keystone: Remove deprecated notification event_type https://review.openstack.org/249475 | 23:23 |
| *** pumaranikar has quit IRC | 23:24 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystoneauth: Updated from global requirements https://review.openstack.org/249478 | 23:27 |
| *** dims_ has joined #openstack-keystone | 23:28 | |
| *** dims has quit IRC | 23:29 | |
| *** lhcheng_ has joined #openstack-keystone | 23:29 | |
| *** lhcheng has quit IRC | 23:30 | |
| notmorgan | kfox1111: ideally we would drop subsecond accuracy across the board | 23:32 |
| notmorgan | kfox1111: but there were questions on the best approach there | 23:32 |
| *** mylu_ has joined #openstack-keystone | 23:33 | |
| openstackgerrit | Steve Martinelli proposed openstack/keystone: Remove `extras` from token data https://review.openstack.org/249480 | 23:34 |
| stevemar | bknudson: just so you know, i plan on creating a single release note with all these small changes in there: https://review.openstack.org/#/q/status:open+project:openstack/keystone+branch:master+topic:bp/removed-as-of-mitaka,n,z | 23:34 |
| stevemar | i didn't want to unnecessarily cascase the patches | 23:34 |
| stevemar | cascade* | 23:34 |
| openstackgerrit | Merged openstack/keystoneauth: Remove Python 2.6 support https://review.openstack.org/249407 | 23:35 |
| openstackgerrit | Merged openstack/keystonemiddleware: Remove py26 target from tox.ini https://review.openstack.org/249404 | 23:35 |
| stevemar | ughhhhhhh do i really want to go through the effort of creating a patch to remove eventlet? | 23:35 |
| stevemar | that's going to be a lot of work | 23:35 |
| *** mylu has quit IRC | 23:36 | |
| *** aginwala has joined #openstack-keystone | 23:39 | |
| *** gildub has joined #openstack-keystone | 23:40 | |
| *** thiagop has quit IRC | 23:42 | |
| *** rcernin has quit IRC | 23:42 | |
| stevemar | yeah, this is not going to be easy | 23:49 |
| stevemar | our tests are very intertwined with eventlet | 23:49 |
| *** slberger has left #openstack-keystone | 23:52 | |
| notmorgan | stevemar: make devstack not configure eventlet to start | 23:52 |
| notmorgan | stevemar: i had a patch but had a -1 from you re: containerization things | 23:52 |
| stevemar | notmorgan: yeah, i am gonna sent a note about that to the ML soon | 23:52 |
| stevemar | did you get a chance to look at that? | 23:52 |
| stevemar | i sent you a google docs things | 23:52 |
| *** gildub has quit IRC | 23:53 | |
| notmorgan | stevemar: then there is a way we can standup a server with a fixture instead of needing to rely on eventlet | 23:53 |
| notmorgan | stevemar: no i didn't, i just abandoned the thing because it was a bit out of whack and needed to be reconsidered anyway | 23:54 |
| notmorgan | stevemar: but if you run apache in thread-worker you can do a single process in-container vs. pre-fork etc | 23:54 |
| *** EinstCrazy has joined #openstack-keystone | 23:56 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!