| openstackgerrit | henry-nash proposed openstack/keystone: Add support for strict url safe option on new projects and domains https://review.openstack.org/257376 | 00:13 |
|---|---|---|
| *** woodster_ has joined #openstack-keystone | 00:26 | |
| *** david-lyle has quit IRC | 00:40 | |
| *** rdo has quit IRC | 00:54 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: Shadow users: unified identity https://review.openstack.org/262045 | 00:55 |
| *** rdo has joined #openstack-keystone | 00:56 | |
| *** EinstCrazy has joined #openstack-keystone | 00:56 | |
| *** EinstCrazy has quit IRC | 00:56 | |
| *** EinstCrazy has joined #openstack-keystone | 00:56 | |
| *** jimbaker has quit IRC | 01:03 | |
| *** davechen has joined #openstack-keystone | 01:10 | |
| *** davechen1 has joined #openstack-keystone | 01:13 | |
| *** lhcheng has joined #openstack-keystone | 01:14 | |
| *** ChanServ sets mode: +v lhcheng | 01:14 | |
| *** markvoelker has joined #openstack-keystone | 01:14 | |
| *** davechen has quit IRC | 01:16 | |
| *** lhcheng has quit IRC | 01:19 | |
| *** davechen has joined #openstack-keystone | 01:21 | |
| *** davechen1 has quit IRC | 01:23 | |
| *** sigmavirus24 is now known as sigmavirus24_awa | 01:23 | |
| *** jasonsb has quit IRC | 01:29 | |
| *** david-lyle has joined #openstack-keystone | 01:49 | |
| davechen | notmorgan: hi sir! are you around | 01:52 |
| notmorgan | davechen: sortof | 01:53 |
| davechen | notmorgan: i will given some explaination about this patch - https://review.openstack.org/#/c/261205/ | 01:53 |
| davechen | i did the differeratiation based on the impl in the mod wsgi, some methods i list in the comments. | 01:54 |
| davechen | so, it's how mod wsgi handle with the header. | 01:54 |
| notmorgan | Right. But mod_wsgi is unhappy with text type right? | 01:55 |
| davechen | it's unappy about text type on python2 but require str on python3 | 01:55 |
| davechen | i will show another evidence about this. | 01:55 |
| davechen | we can control keystone to always use binary type in header, but we cannot control other third party lib | 01:56 |
| davechen | such as webob | 01:56 |
| davechen | where it use str 'application/x-www-form-urlencoded' for example in it's code | 01:57 |
| davechen | it's no possbile to enforce every lib to use byte as the header on python3 | 01:58 |
| davechen | this might be the reason why mod wsgi did this in this way. | 01:58 |
| davechen | take a look at these methods from mod wsgi pls: wsgi_convert_headers_to_bytes, wsgi_convert_string_to_bytes, wsgi_validate_header_value | 02:00 |
| davechen | my understanding all mod wsig needs is `str` type in header, it's six.bianry on python2 and it's six.text_type on python3. | 02:09 |
| *** woodster_ has quit IRC | 02:36 | |
| *** fawadkhaliq has joined #openstack-keystone | 02:54 | |
| *** david-lyle has quit IRC | 02:57 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: Shadow users: unified identity https://review.openstack.org/262045 | 02:58 |
| *** GB21 has joined #openstack-keystone | 03:15 | |
| *** fangxu has quit IRC | 03:18 | |
| *** jrist has quit IRC | 03:20 | |
| *** GB21 has quit IRC | 03:23 | |
| *** jasonsb has joined #openstack-keystone | 03:25 | |
| *** david-lyle has joined #openstack-keystone | 03:26 | |
| *** jrist has joined #openstack-keystone | 03:34 | |
| *** agireud has joined #openstack-keystone | 03:34 | |
| *** ccard_ has quit IRC | 03:35 | |
| openstackgerrit | Steve Martinelli proposed openstack/keystone: document the bootstrapping process https://review.openstack.org/259730 | 03:37 |
| openstackgerrit | Steve Martinelli proposed openstack/keystone: document the bootstrapping process https://review.openstack.org/259730 | 03:38 |
| openstackgerrit | henry-nash proposed openstack/keystone-specs: Clarify project hierarchy and parent usage within the API https://review.openstack.org/200624 | 03:38 |
| *** agireud has quit IRC | 03:43 | |
| *** agireud has joined #openstack-keystone | 03:45 | |
| *** david-lyle has quit IRC | 03:52 | |
| *** dave-mccowan has quit IRC | 03:57 | |
| *** markvoelker has quit IRC | 03:58 | |
| *** ccard_ has joined #openstack-keystone | 03:58 | |
| *** dims has quit IRC | 04:25 | |
| *** lhcheng has joined #openstack-keystone | 04:33 | |
| *** ChanServ sets mode: +v lhcheng | 04:33 | |
| *** dims has joined #openstack-keystone | 04:34 | |
| *** GB21 has joined #openstack-keystone | 04:37 | |
| *** lhcheng has quit IRC | 04:38 | |
| *** dims has quit IRC | 04:44 | |
| *** dims has joined #openstack-keystone | 04:52 | |
| *** henrynash has quit IRC | 04:54 | |
| *** fawadkhaliq has quit IRC | 04:56 | |
| *** markvoelker has joined #openstack-keystone | 04:58 | |
| *** markvoelker has quit IRC | 05:03 | |
| *** dims has quit IRC | 05:13 | |
| *** fawadkhaliq has joined #openstack-keystone | 05:21 | |
| *** nodir has joined #openstack-keystone | 05:21 | |
| *** dims has joined #openstack-keystone | 05:23 | |
| *** david-lyle has joined #openstack-keystone | 05:27 | |
| *** david-lyle has quit IRC | 05:58 | |
| *** markvoelker has joined #openstack-keystone | 06:00 | |
| *** markvoelker has quit IRC | 06:04 | |
| *** nodir has quit IRC | 06:08 | |
| *** jasonsb has quit IRC | 06:18 | |
| *** jasonsb has joined #openstack-keystone | 06:19 | |
| *** Nirupama has joined #openstack-keystone | 06:21 | |
| *** david-lyle has joined #openstack-keystone | 06:29 | |
| *** markvoelker has joined #openstack-keystone | 07:00 | |
| *** markvoelker has quit IRC | 07:05 | |
| *** agireud has quit IRC | 07:32 | |
| *** fawadk has joined #openstack-keystone | 07:33 | |
| *** fawadkhaliq has quit IRC | 07:36 | |
| *** fawadk has quit IRC | 07:50 | |
| *** shoutm has joined #openstack-keystone | 07:52 | |
| *** boris-42 has quit IRC | 08:03 | |
| *** fawadkhaliq has joined #openstack-keystone | 08:08 | |
| *** fawadkhaliq has quit IRC | 08:10 | |
| *** e0ne has joined #openstack-keystone | 08:10 | |
| *** fawadkhaliq has joined #openstack-keystone | 08:10 | |
| *** spandhe has quit IRC | 08:14 | |
| *** spandhe has joined #openstack-keystone | 08:15 | |
| *** spandhe has quit IRC | 08:20 | |
| *** spandhe has joined #openstack-keystone | 08:21 | |
| *** fangxu has joined #openstack-keystone | 08:23 | |
| *** fangxu has quit IRC | 08:28 | |
| *** fangxu has joined #openstack-keystone | 08:29 | |
| *** Nirupama has quit IRC | 08:30 | |
| *** xek_ is now known as xek | 08:33 | |
| *** Nirupama has joined #openstack-keystone | 08:46 | |
| openstackgerrit | Dave Chen proposed openstack/keystone: Enable `id`, `enabled` attributes filtering for list IdP API https://review.openstack.org/215041 | 08:49 |
| *** e0ne has quit IRC | 08:52 | |
| *** markvoelker has joined #openstack-keystone | 09:01 | |
| *** shoutm_ has joined #openstack-keystone | 09:03 | |
| *** shoutm has quit IRC | 09:03 | |
| *** markvoelker has quit IRC | 09:06 | |
| *** vgridnev has joined #openstack-keystone | 09:10 | |
| *** _zouyee has joined #openstack-keystone | 09:29 | |
| *** shoutm_ has quit IRC | 09:30 | |
| *** madhuri has joined #openstack-keystone | 09:30 | |
| *** agireud has joined #openstack-keystone | 09:33 | |
| *** agireud has quit IRC | 09:37 | |
| *** fawadkhaliq has quit IRC | 09:39 | |
| *** fawadkhaliq has joined #openstack-keystone | 09:39 | |
| *** Nirupama has quit IRC | 09:42 | |
| *** davechen has left #openstack-keystone | 09:54 | |
| *** Nirupama has joined #openstack-keystone | 09:57 | |
| *** madhuri has quit IRC | 09:59 | |
| *** urulama has quit IRC | 10:11 | |
| *** urulama has joined #openstack-keystone | 10:11 | |
| *** roxanaghe has joined #openstack-keystone | 10:14 | |
| *** roxanaghe has quit IRC | 10:15 | |
| *** e0ne has joined #openstack-keystone | 10:38 | |
| *** shoutm has joined #openstack-keystone | 10:44 | |
| *** markvoelker has joined #openstack-keystone | 10:47 | |
| *** markvoelker has quit IRC | 10:51 | |
| *** fawadkhaliq has quit IRC | 10:53 | |
| *** fawadkhaliq has joined #openstack-keystone | 10:53 | |
| *** shoutm_ has joined #openstack-keystone | 11:05 | |
| *** shoutm has quit IRC | 11:05 | |
| *** GB21 has quit IRC | 11:06 | |
| *** wanghua has quit IRC | 11:13 | |
| *** GB21 has joined #openstack-keystone | 11:15 | |
| *** urulama has quit IRC | 11:28 | |
| *** urulama has joined #openstack-keystone | 11:28 | |
| *** GB21 has quit IRC | 11:42 | |
| *** EinstCrazy has quit IRC | 11:43 | |
| *** e0ne has quit IRC | 12:04 | |
| *** e0ne_ has joined #openstack-keystone | 12:04 | |
| *** xek has quit IRC | 12:04 | |
| *** xek has joined #openstack-keystone | 12:05 | |
| *** david-lyle has quit IRC | 12:06 | |
| *** EinstCrazy has joined #openstack-keystone | 12:12 | |
| *** EinstCra_ has joined #openstack-keystone | 12:37 | |
| *** EinstCrazy has quit IRC | 12:40 | |
| *** _zouyee has quit IRC | 12:45 | |
| *** markvoelker has joined #openstack-keystone | 12:48 | |
| *** markvoelker has quit IRC | 12:52 | |
| *** Nirupama has quit IRC | 12:59 | |
| *** fawadkhaliq has quit IRC | 13:03 | |
| *** david-lyle has joined #openstack-keystone | 13:09 | |
| *** spandhe has quit IRC | 13:33 | |
| *** sudorandom has quit IRC | 13:36 | |
| *** cburgess has quit IRC | 13:38 | |
| *** trey has quit IRC | 13:38 | |
| *** markvoelker has joined #openstack-keystone | 13:48 | |
| *** markvoelker has quit IRC | 13:53 | |
| *** _zouyee has joined #openstack-keystone | 13:56 | |
| *** trey has joined #openstack-keystone | 13:58 | |
| *** sudorandom has joined #openstack-keystone | 13:58 | |
| *** cburgess has joined #openstack-keystone | 14:01 | |
| *** trey has quit IRC | 14:13 | |
| *** trey has joined #openstack-keystone | 14:14 | |
| *** fawadkhaliq has joined #openstack-keystone | 14:20 | |
| *** henrynash has joined #openstack-keystone | 14:23 | |
| *** ChanServ sets mode: +v henrynash | 14:23 | |
| *** urulama has quit IRC | 14:26 | |
| *** urulama has joined #openstack-keystone | 14:27 | |
| *** zqfan has quit IRC | 14:31 | |
| *** markvoelker has joined #openstack-keystone | 14:49 | |
| *** dave-mccowan has joined #openstack-keystone | 14:49 | |
| *** trey has quit IRC | 14:52 | |
| *** markvoelker has quit IRC | 14:54 | |
| *** rderose has joined #openstack-keystone | 14:54 | |
| *** _zouyee has quit IRC | 14:58 | |
| *** sigmavirus24_awa is now known as sigmavirus24 | 15:02 | |
| *** trey has joined #openstack-keystone | 15:02 | |
| *** vgridnev has quit IRC | 15:11 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: Shadow users: unified identity https://review.openstack.org/262045 | 15:14 |
| openstackgerrit | Alexander Makarov proposed openstack/keystone: Unified delegation SQL driver https://review.openstack.org/260686 | 15:14 |
| *** shoutm_ has quit IRC | 15:20 | |
| *** shoutm has joined #openstack-keystone | 15:21 | |
| *** rderose has quit IRC | 15:22 | |
| *** boris-42 has joined #openstack-keystone | 15:28 | |
| *** dslevin has joined #openstack-keystone | 15:29 | |
| *** vgridnev has joined #openstack-keystone | 15:32 | |
| *** alejandrito has joined #openstack-keystone | 15:45 | |
| *** PsionTheory has joined #openstack-keystone | 16:05 | |
| henrynash | davechen: ping | 16:06 |
| *** fawadkhaliq has quit IRC | 16:08 | |
| *** GB21 has joined #openstack-keystone | 16:10 | |
| *** vgridnev has quit IRC | 16:12 | |
| stevemar | henrynash: too late for davechen :( | 16:18 |
| henrynash | stevemar: oh, yes, right :-) | 16:19 |
| *** david-lyle has quit IRC | 16:21 | |
| *** GB21 has quit IRC | 16:27 | |
| *** shoutm_ has joined #openstack-keystone | 16:28 | |
| *** shoutm has quit IRC | 16:28 | |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Use ldap3 for DN comparison https://review.openstack.org/260721 | 16:30 |
| *** david-lyle has joined #openstack-keystone | 16:42 | |
| *** trevorj has joined #openstack-keystone | 16:47 | |
| trevorj | Hi everyone, I'm trying to bootstrap a new keystone deployment, but I'm having no luck using the admin_token usng the openstackclient. | 16:47 |
| trevorj | The liberty setup docs appear to be a bit out of date for Keystone 8.0.1 (ie stable/liberty branch) | 16:48 |
| trevorj | The openstack client is trying to get an auth token via a POST /v3/auth/tokens, which returns "Could not find token: (my admin_token)" | 16:48 |
| trevorj | When I manually do requests using X-Auth-Token, they work fine. | 16:48 |
| *** david-lyle has quit IRC | 16:48 | |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Correct DN/encoding in test https://review.openstack.org/260731 | 16:48 |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Use ldap3 for DN comparison https://review.openstack.org/260721 | 16:48 |
| *** markvoelker has joined #openstack-keystone | 16:50 | |
| shoutm_ | trevorj: I had the same error as you. Did you specify OS_AUTH_URL ? | 16:50 |
| *** shoutm_ is now known as shoutm | 16:50 | |
| trevorj | shoutm: Yeah, I did try that | 16:51 |
| shoutm | Seeing https://github.com/openstack/python-openstackclient, when we use openstackclient with OS_TOKEN, what you need is OS_URL | 16:52 |
| shoutm | not OS_AUTH_URL | 16:52 |
| trevorj | Yeah, I know, but the docs are incorrect. | 16:52 |
| *** e0ne_ is now known as e0ne | 16:52 | |
| trevorj | That or the authentication type selection is wrong | 16:52 |
| shoutm | it's a bug reported here https://bugs.launchpad.net/python-openstackclient/+bug/1484373 | 16:53 |
| openstack | Launchpad bug 1484373 in python-openstackclient "token_endpoint authentication no longer working in OSC" [Undecided,Incomplete] | 16:53 |
| trevorj | Yeah, that's what I was getting it | 16:53 |
| trevorj | s/it$/at/ | 16:53 |
| trevorj | So, how is any keystone deployment bootstrapped if you can't use token_endpoint authentication? | 16:53 |
| shoutm | I'm stuck at the same place | 16:54 |
| trevorj | I'm using openstackclient 2.0.0, which you'd think would have that fixed | 16:54 |
| trevorj | Since this was supposed to be in 1.6.3 ;) | 16:54 |
| *** markvoelker has quit IRC | 16:55 | |
| trevorj | shoutm: Well, since the client is what's broken, I'm just going to force it, I'll fork it and if you want I can send you my changes when I'm done | 16:55 |
| shoutm | thanks it will help me | 16:56 |
| stevemar | trevorj: can you confirm you are using os-client-config 1.13.0 as well? | 16:56 |
| stevemar | i think that may have broken it | 16:56 |
| trevorj | stevemar: yes I am: os-client-config==1.13.0 | 16:56 |
| stevemar | trevorj: what happens if you use os-client-config 1.12.0? | 16:56 |
| trevorj | stevemar: that works just great! | 16:58 |
| *** david-lyle has joined #openstack-keystone | 16:58 | |
| trevorj | stevemar: Thank you! | 16:58 |
| trevorj | shoutm: better fix, just install os-client-config 1.12.0 as stevemar suggested | 16:58 |
| trevorj | stevemar: Are there plans to get a hotfix release out to PyPi for this? | 16:59 |
| shoutm | trevorj: stevemar I could confirm it worked too with 1.12.0 :) | 16:59 |
| *** david-lyle has quit IRC | 16:59 | |
| trevorj | stevemar: I ask because I'm sure we're not the only people that will experience this with time | 17:00 |
| stevemar | shoutm: trevorj let me poke the OCC folks and see what they say, i can assign the bug to them | 17:00 |
| trevorj | And I don't want people to become disconcerted with openstack simply because they cannot bootstrap keystone | 17:00 |
| stevemar | of course | 17:00 |
| trevorj | stevemar: tyty! | 17:00 |
| stevemar | mordred: ^^ looks like https://github.com/openstack/os-client-config/commit/22d740b7007e1182c99370cb2629322384b17a14 may have borked osc | 17:01 |
| stevemar | trevorj: ah looks like they know: https://review.openstack.org/#/c/260092/ | 17:01 |
| stevemar | trevorj: shoutm https://review.openstack.org/#/c/260945/ | 17:02 |
| stevemar | it's a known issue then, phew | 17:02 |
| trevorj | Hot. | 17:02 |
| *** e0ne has quit IRC | 17:09 | |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Use ldap3 for DN comparison https://review.openstack.org/260721 | 17:10 |
| stevemar | bknudson_: in you're interested, i submitted patches to retire KSA-saml2: https://review.openstack.org/#/q/status:open+branch:master+topic:retire-ksa-saml2 | 17:11 |
| bknudson_ | great. I'm tired of reviewing patches in that repo | 17:11 |
| stevemar | bknudson_: next up is -kerberos | 17:12 |
| bknudson_ | we released -kerberos | 17:13 |
| stevemar | yeah :( | 17:13 |
| stevemar | i noted that in the meeting | 17:13 |
| stevemar | (for next week) | 17:13 |
| stevemar | the only project using it is django-openstack-auth-kerberos | 17:14 |
| stevemar | i tossed up a patch that adds deprecations to ksc-kerberos | 17:14 |
| bknudson_ | you and me both | 17:15 |
| stevemar | oh? | 17:15 |
| bknudson_ | https://review.openstack.org/#/c/253205/ | 17:15 |
| *** gissi_ has quit IRC | 17:16 | |
| stevemar | i'll abandon mine then | 17:16 |
| stevemar | i wonder if we really need to give a year before removing it... | 17:17 |
| bknudson_ | django-openstack-auth-kerberos would fail if we removed it | 17:18 |
| bknudson_ | Has django-openstack-auth-kerberos been changed to use keystoneauth now? | 17:18 |
| *** Guest84676 is now known as tsymanczyk | 17:18 | |
| stevemar | i think DOA-kerb is as equally unmaintained as KSC-kerb | 17:19 |
| stevemar | so... no | 17:19 |
| bknudson_ | so kerberos is in doa now? | 17:20 |
| stevemar | when DOA fully moves over to keystoneauth it'll have kerberos | 17:21 |
| stevemar | https://github.com/openstack/django-openstack-auth-kerberos has 2 releases :( | 17:22 |
| stevemar | and a whopping 8 commits | 17:22 |
| bknudson_ | 1 contributor | 17:23 |
| bknudson_ | and you can probably guess his name | 17:23 |
| openstackgerrit | Merged openstack/python-keystoneclient-kerberos: Removes MANIFEST.in as it is not needed explicitely by PBR https://review.openstack.org/258936 | 17:24 |
| *** shoutm_ has joined #openstack-keystone | 17:24 | |
| *** shoutm has quit IRC | 17:24 | |
| openstackgerrit | Merged openstack/python-keystoneclient-kerberos: Updated from global requirements https://review.openstack.org/251664 | 17:26 |
| stevemar | bknudson_: also this: https://review.openstack.org/#/c/258302/ | 17:26 |
| openstackgerrit | Merged openstack/python-keystoneclient-kerberos: Deprecate this package https://review.openstack.org/253205 | 17:27 |
| stevemar | bknudson_: the review queue for ksc-kerb is now empty, you can rest easy now, i'll be -2'ing any changes in there | 17:27 |
| *** shoutm_ has quit IRC | 17:28 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: Shadow users: unified identity https://review.openstack.org/262045 | 17:32 |
| bknudson_ | stevemar: couple of typos in the release notes. Want me to fix them? https://review.openstack.org/#/c/258302/1 | 17:35 |
| *** henrynash has quit IRC | 17:37 | |
| *** sigmavirus24 is now known as sigmavirus24_awa | 17:45 | |
| htruta | bknudson_, could you please take a look at https://review.openstack.org/#/c/248295/ ? | 17:47 |
| stevemar | bknudson_: sure, i'm heating up food, you can push it through if you want | 17:50 |
| stevemar | (and dealing with slow internet -- tethering from my phone since snowstorm affected my cable internet) | 17:51 |
| *** trevorjay has joined #openstack-keystone | 17:52 | |
| *** trevorj has quit IRC | 17:52 | |
| *** trevorjay is now known as trevorj | 17:52 | |
| *** fangxu has quit IRC | 17:53 | |
| tjcocozz | stevemar, sounds like a great excuse to take the day off :-) | 17:57 |
| stevemar | tjcocozz: i did take the day off! nothing to do though! | 17:57 |
| stevemar | not about to leave the home, it's crazy outside | 17:58 |
| tjcocozz | stevemar, yeah its pretty bad here too. we got roughly 8-10 inches | 17:59 |
| tjcocozz | stevemar, I woke up this morning to this guy sitting there rosting his tires for about 20 minutes, in front of my town home, till i went and helped push him out. | 18:00 |
| stevemar | tjcocozz: oof, that's a good dumping | 18:00 |
| stevemar | tsk tsk | 18:00 |
| stevemar | you gotta reverse first, then go forward | 18:00 |
| stevemar | noobies | 18:00 |
| tjcocozz | lol yeah. flooring it -> go no where | 18:01 |
| tjcocozz | no meeting today? | 18:02 |
| stevemar | tjcocozz: nah, we can meet next week, nothing urgent happening IMO | 18:03 |
| tjcocozz | stevemar, makes sense | 18:04 |
| *** david-lyle has joined #openstack-keystone | 18:14 | |
| *** jsavak has joined #openstack-keystone | 18:14 | |
| bknudson_ | htruta: it's on my list | 18:15 |
| *** e0ne has joined #openstack-keystone | 18:21 | |
| openstackgerrit | Brant Knudson proposed openstack/python-keystoneclient: remove keystoneclient.apiclient.exceptions https://review.openstack.org/258302 | 18:21 |
| *** PsionTheory has quit IRC | 18:23 | |
| openstackgerrit | Brant Knudson proposed openstack/python-keystoneclient: Cleanup release note https://review.openstack.org/262284 | 18:24 |
| *** david-lyle has quit IRC | 18:24 | |
| *** alejandrito has quit IRC | 18:24 | |
| htruta | bknudson_, cool. thanks | 18:25 |
| *** fangxu has joined #openstack-keystone | 18:26 | |
| openstackgerrit | Brant Knudson proposed openstack/python-keystoneclient: Cleanup release note https://review.openstack.org/262284 | 18:27 |
| *** henrynash has joined #openstack-keystone | 18:38 | |
| *** ChanServ sets mode: +v henrynash | 18:38 | |
| *** markvoelker has joined #openstack-keystone | 18:51 | |
| *** lhcheng has joined #openstack-keystone | 18:51 | |
| *** ChanServ sets mode: +v lhcheng | 18:51 | |
| *** lhcheng_ has joined #openstack-keystone | 18:53 | |
| *** jsavak has quit IRC | 18:56 | |
| *** markvoelker has quit IRC | 18:56 | |
| *** lhcheng has quit IRC | 18:56 | |
| *** sigmavirus24_awa is now known as sigmavirus24 | 19:04 | |
| *** sudorandom has quit IRC | 19:14 | |
| *** spandhe has joined #openstack-keystone | 19:14 | |
| *** sudorandom has joined #openstack-keystone | 19:16 | |
| *** spandhe_ has joined #openstack-keystone | 19:17 | |
| *** spandhe has quit IRC | 19:18 | |
| *** spandhe_ is now known as spandhe | 19:18 | |
| *** david-lyle has joined #openstack-keystone | 19:28 | |
| *** david-lyle has quit IRC | 19:33 | |
| *** david-lyle has joined #openstack-keystone | 19:33 | |
| stevemar | lhcheng_: around? | 19:39 |
| *** e0ne has quit IRC | 19:39 | |
| *** david-lyle has quit IRC | 19:42 | |
| *** david-lyle has joined #openstack-keystone | 19:43 | |
| stevemar | bknudson_: general FYI: https://review.openstack.org/#/q/topic:stop_using_oslo_inc | 19:51 |
| notmorgan | stevemar: shhhhhhhhhhhhh be very very quiet | 19:51 |
| notmorgan | stevemar: >.> | 19:51 |
| stevemar | notmorgan: :) | 19:51 |
| bknudson_ | wow | 19:51 |
| stevemar | bknudson_: we should be able to remove all that apiclient crap from keystone soon | 19:51 |
| *** markvoelker has joined #openstack-keystone | 19:51 | |
| bknudson_ | we're probably not going to be able to remove the code until the uses have been removed and the releases with the uses are eol | 19:52 |
| notmorgan | bknudson_: :( | 19:52 |
| bknudson_ | this is the same issue oslo.utils ran into | 19:52 |
| notmorgan | stevemar: ugh i can't find my launchpad password :( | 19:52 |
| * notmorgan sighs and considers a password reset :( | 19:53 | |
| stevemar | bknudson_: because someone might have a newer keystone and older client? | 19:53 |
| bknudson_ | stevemar: the unit tests on stable/* will fail since they use latest keystoneclient | 19:54 |
| bknudson_ | there was some discussion on -dev about this... | 19:54 |
| bknudson_ | http://lists.openstack.org/pipermail/openstack-dev/2015-December/081833.html | 19:55 |
| stevemar | bknudson_: i realized it would take a while when i tossed those patches up | 19:55 |
| stevemar | but better to get them out early | 19:55 |
| *** fangxu has quit IRC | 19:56 | |
| openstackgerrit | Brant Knudson proposed openstack/python-keystoneclient: Cleanup release note https://review.openstack.org/262284 | 19:56 |
| *** markvoelker has quit IRC | 19:56 | |
| stevemar | So clearly the deprecation process is not working as no one looks at the log messages and fix their own projects. | 19:56 |
| stevemar | bknudson_: dims summed it up ^ | 19:56 |
| notmorgan | stevemar: ... did you just pun off dims ' name? | 19:56 |
| bknudson_ | now I'm hungry | 19:57 |
| notmorgan | bknudson_: i know, right!? | 19:57 |
| stevemar | hehe | 19:57 |
| stevemar | that was not intentional :P | 19:57 |
| notmorgan | stevemar: suuuuuuure | 19:57 |
| bknudson_ | but yes, it's broken since it takes way too long to remove deprecated function. | 19:58 |
| stevemar | bknudson_: oh, there was also the broken stable/liberty branch of ksm :( https://review.openstack.org/#/c/261706/ | 20:02 |
| stevemar | i added ^ but i think it's overkill | 20:02 |
| bknudson_ | part of the problem is that these projects haven't switched to keystoneauth -- https://review.openstack.org/#/c/261806/1/tackerclient/shell.py | 20:03 |
| bknudson_ | people like writing code, I guess. | 20:04 |
| bknudson_ | using libraries is hard | 20:04 |
| stevemar | bknudson_: i figured the transition to ksa for most projects could be a two step process | 20:05 |
| stevemar | 1) get projects to not use apiclient exceptions, 2) remove apiclient from ksc, 3) transition from ksc to ksa for projects (notmorgan and mordred were looking at that anyway) | 20:05 |
| stevemar | feels like all i've done for the last 2 weeks is cleaning crap up -- trying to remove cruft from our own libraries, correct misuses of our library code and trying to prevent future osc breakages | 20:09 |
| *** david-lyle has quit IRC | 20:10 | |
| notmorgan | stevemar: stevemar ++ | 20:10 |
| openstackgerrit | henry-nash proposed openstack/keystone: Create V9 version of federation driver interface https://review.openstack.org/262307 | 20:12 |
| notmorgan | i am happy ksa doesn't have openstack-common stuff in it | 20:12 |
| notmorgan | because the whole <XXX>.openstack being "public" has been ugly in ksc | 20:13 |
| stevemar | notmorgan: agreed | 20:13 |
| openstackgerrit | Merged openstack/python-keystoneclient: remove keystoneclient.apiclient.exceptions https://review.openstack.org/258302 | 20:14 |
| *** alejandrito has joined #openstack-keystone | 20:16 | |
| openstackgerrit | henry-nash proposed openstack/keystone: Create V9 version of federation driver interface https://review.openstack.org/262307 | 20:16 |
| notmorgan | stevemar: https://review.openstack.org/#/c/260945/2 will need a release of OCC as well | 20:17 |
| stevemar | notmorgan: of course | 20:22 |
| notmorgan | stevemar: and i am waiting for confirmation that it is all "fixed" | 20:22 |
| notmorgan | also i am very happy that bootstrap landed. | 20:22 |
| notmorgan | as soon as devstack is converted, i plan to mark admin_token deprecated. | 20:22 |
| notmorgan | stevemar: i think https://review.openstack.org/#/c/256969/5 followup needs to just have a JSON output of the user/domain/project/etc | 20:23 |
| notmorgan | stevemar: and then we can evaluate adding in domain-scopes etc | 20:24 |
| notmorgan | if needed. | 20:24 |
| notmorgan | (to support v3cloud policy) | 20:24 |
| openstackgerrit | Merged openstack/keystoneauth-saml2: Remove the content of keystoneauth-saml2 https://review.openstack.org/261819 | 20:29 |
| stevemar | hooray! | 20:32 |
| albertom | hi guys | 20:32 |
| albertom | I updates to keystone 8.0.1 | 20:32 |
| albertom | how do i bootstrap now ? | 20:32 |
| albertom | NotFound: Could not find token: ADMIN (HTTP 404) (Request-ID: req-9f0c0907-50fa-4e7e-848f-70ca8ee7f09f) | 20:33 |
| albertom | I have admin_token = ADMIN in keystone.conf :P | 20:33 |
| stevemar | albertom: refer to my comments in #openstack :) | 20:34 |
| *** david-lyle has joined #openstack-keystone | 20:43 | |
| *** e0ne has joined #openstack-keystone | 20:44 | |
| stevemar | notmorgan: bknudson_ thoughts on finally removing the CLI bits from ksc? | 20:48 |
| notmorgan | stevemar: uh, +2 :P | 20:48 |
| stevemar | kill it with fire :) | 20:48 |
| bknudson_ | gotta do it sometime. | 20:48 |
| notmorgan | stevemar: >.> | 20:48 |
| bknudson_ | no time like the present | 20:48 |
| notmorgan | stevemar: i +2'd that and would love to see it die | 20:48 |
| notmorgan | albertom: there is a bug. | 20:49 |
| stevemar | release ksc 5.0.0 and holy crap everything is missing! | 20:49 |
| notmorgan | albertom: fix is proposed, just need to get a core on it and get it approved. | 20:49 |
| * notmorgan is avoiding pushing the change w/o a second pair of eyes | 20:49 | |
| notmorgan | and/or confirmation it will fix the issue | 20:49 |
| notmorgan | but... holiday | 20:49 |
| * notmorgan is tempted to go see the hateful eight today | 20:50 | |
| notmorgan | and mayyybe starwars | 20:50 |
| * notmorgan hasn't seen starwars yet :P | 20:50 | |
| *** ChanServ sets mode: +o notmorgan | 20:51 | |
| bknudson_ | star wars was disappointing. | 20:51 |
| bknudson_ | but it was at least interesting... didn't get bored | 20:51 |
| *** ChanServ changes topic to "~45 days until mitaka-2 is released! see blueprints and bugs at: https://launchpad.net/keystone/+milestone/mitaka-2 | Hey, go relax until 2016!" | 20:52 | |
| *** markvoelker has joined #openstack-keystone | 20:52 | |
| *** notmorgan sets mode: -o notmorgan | 20:52 | |
| notmorgan | >.> | 20:52 |
| notmorgan | <.< | 20:52 |
| notmorgan | ^_^ | 20:52 |
| breton | yeah, change that "~45 days" | 20:53 |
| breton | it is wrong almost always | 20:53 |
| breton | except when it's ~45 days. | 20:53 |
| stevemar | breton: ? | 20:54 |
| stevemar | breton: did i miss scrollback? your comment confused me | 20:54 |
| *** ChanServ sets mode: +o notmorgan | 20:54 | |
| *** notmorgan changes topic to "Relax until 2016! | Mitaka 2 soon! (check schedule) - see blueprints and bugs at: https://launchpad.net/keystone/+milestone/mitaka-2" | 20:54 | |
| *** notmorgan sets mode: -o notmorgan | 20:54 | |
| notmorgan | stevemar: don't worry i got it | 20:54 |
| notmorgan | stevemar: see topic | 20:55 |
| * notmorgan has to go run errands :( | 20:55 | |
| notmorgan | hey stevemar can you have someone poke at https://review.openstack.org/#/c/260945/ and confirm it "works" | 20:56 |
| * notmorgan would like to get that bug closed soon | 20:56 | |
| * notmorgan is happy to push it and do a release if we know it solves the issue | 20:56 | |
| *** markvoelker has quit IRC | 20:57 | |
| stevemar | hehe | 21:01 |
| stevemar | i guess i didn't update the topic for a while :P | 21:01 |
| stevemar | notmorgan: i can try to poke at it tonight | 21:01 |
| stevemar | notmorgan: i dont have people to poke at to do stuff for me :P | 21:01 |
| *** henrynash has quit IRC | 21:01 | |
| *** henrynash has joined #openstack-keystone | 21:02 | |
| *** ChanServ sets mode: +v henrynash | 21:02 | |
| notmorgan | Yeah that would be great. | 21:03 |
| openstackgerrit | Ron De Rose proposed openstack/keystone: Shadow users: unified identity https://review.openstack.org/262045 | 21:04 |
| *** jsavak has joined #openstack-keystone | 21:08 | |
| *** openstackgerrit has quit IRC | 21:17 | |
| *** openstackgerrit has joined #openstack-keystone | 21:17 | |
| *** jasonsb has quit IRC | 21:20 | |
| albertom | notmorgan: the patch worked for me so I have it a +1 :D | 21:23 |
| *** jsavak has quit IRC | 21:32 | |
| bknudson_ | I might have to switch to gertty | 21:38 |
| *** alejandrito has quit IRC | 21:41 | |
| *** dave-mccowan has quit IRC | 21:44 | |
| *** EinstCra_ has quit IRC | 21:48 | |
| *** EinstCrazy has joined #openstack-keystone | 21:48 | |
| *** markvoelker has joined #openstack-keystone | 21:53 | |
| *** markvoelker has quit IRC | 21:58 | |
| *** fangxu has joined #openstack-keystone | 22:00 | |
| lhcheng_ | stevemar: looking for me? | 22:26 |
| *** david-lyle has quit IRC | 22:28 | |
| *** david-lyle has joined #openstack-keystone | 22:36 | |
| *** fangxu has quit IRC | 22:41 | |
| tsymanczyk | If I want to fix a bug that I filed against keystone but the correct fix belongs in oslo_policy - what is the correct procedure? Should I file another bug against oslo.policy and link them? Or is it sufficient to fix it in oslo_policy and link back to the keystone bug? | 22:44 |
| bknudson_ | tsymanczyk: add oslo.policy to the bug report | 22:45 |
| bknudson_ | then you can remove keystone or mark it invalid in keystone | 22:45 |
| tsymanczyk | which of those would you prefer? the bug manifests in keystone. | 22:45 |
| bknudson_ | mark it invalid in keystone | 22:46 |
| tsymanczyk | will do. thanks. | 22:46 |
| *** david-lyle has quit IRC | 22:50 | |
| *** lhcheng_ has quit IRC | 22:58 | |
| *** fangxu has joined #openstack-keystone | 23:04 | |
| openstackgerrit | Timothy Symanczyk proposed openstack/oslo.policy: Don't crash on RoleCheck when roles not present https://review.openstack.org/262329 | 23:05 |
| mordred | stevemar: did you look at https://review.openstack.org/#/c/260945/ ? | 23:10 |
| mordred | stevemar: oh, wait. notmorgan already poked you | 23:10 |
| mordred | stevemar: ignore me :) | 23:10 |
| *** sigmavirus24 is now known as sigmavirus24_awa | 23:11 | |
| *** e0ne has quit IRC | 23:12 | |
| *** shoutm has joined #openstack-keystone | 23:46 | |
| *** shoutm has quit IRC | 23:46 | |
| *** shoutm has joined #openstack-keystone | 23:47 | |
| openstackgerrit | henry-nash proposed openstack/keystone: Create V9 version of federation driver interface https://review.openstack.org/262307 | 23:51 |
| *** markvoelker has joined #openstack-keystone | 23:54 | |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Escape DN in enabled query https://review.openstack.org/262334 | 23:54 |
| *** david-lyle has joined #openstack-keystone | 23:55 | |
| *** markvoelker has quit IRC | 23:59 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!