Wednesday, 2016-02-17

*** pushkaru has joined #openstack-keystone		00:00
*** shoutm has joined #openstack-keystone		00:00
*** mylu has joined #openstack-keystone		00:01
*** dims_ has quit IRC		00:03
SamYaple	ayoung: +1 for Kolla. whatever team makes that stuff makes amazing things happen!	00:10
openstackgerrit	Tin Lam proposed openstack/keystone: Removing H405 violations from keystone https://review.openstack.org/278190	00:11
ayoung	SamYaple, you tooting your own horn in the Keystone channel? Not that I disagree, mind you	00:11
SamYaple	:P	00:11
SamYaple	i said team	00:11
openstackgerrit	Merged openstack/keystone: Re-enable and undeprecate admin_token_auth https://review.openstack.org/280329	00:16
*** gyee_ has quit IRC		00:19
*** gyee has joined #openstack-keystone		00:20
*** ChanServ sets mode: +v gyee		00:20
openstackgerrit	Merged openstack/keystone: Modify rules in the v3 policy sample for domain specifc roles https://review.openstack.org/262078	00:20
*** mylu has quit IRC		00:21
openstackgerrit	Merged openstack/keystone: Trivial: Cleanup unused conf variables https://review.openstack.org/280752	00:23
*** ianw has joined #openstack-keystone		00:24
*** mylu has joined #openstack-keystone		00:26
openstackgerrit	OpenStack Proposal Bot proposed openstack/keystone: Updating sample configuration file https://review.openstack.org/280896	00:28
*** shoutm_ has joined #openstack-keystone		00:30
*** gildub has joined #openstack-keystone		00:31
*** shoutm has quit IRC		00:32
*** dims has joined #openstack-keystone		00:33
*** shoutm_ has quit IRC		00:36
openstackgerrit	OpenStack Proposal Bot proposed openstack/keystone: Updating sample configuration file https://review.openstack.org/280896	00:39
*** shoutm has joined #openstack-keystone		00:42
openstackgerrit	OpenStack Proposal Bot proposed openstack/keystone: Updating sample configuration file https://review.openstack.org/280896	00:43
*** dobson has quit IRC		00:43
*** mylu has quit IRC		00:45
edmondsw	jamielennox, what do you mean we can't have service users in the non-default domain? My product has them in a non-default domain...	00:45
jamielennox	edmondsw: and it works everywhere? nice! it's worked for keystonemiddleware, but i thought there were still a few places where it was v2 only	00:46
jamielennox	edmondsw: i've got a patch up to try and run gate jobs with that configuration	00:46
edmondsw	jamielennox been doing it for a few releases now	00:47
jamielennox	just to see who's still breaking but it's cool if you don't need it	00:47
*** mylu has joined #openstack-keystone		00:47
edmondsw	since at least juno	00:47
openstackgerrit	Thomas Hsiao proposed openstack/keystone: Create notification when invalid user name provided https://review.openstack.org/280994	00:47
edmondsw	maybe only things that we don't use are broken :)	00:47
notmorgan	bug 1	00:48
openstack	bug 1 in Ubuntu Malaysia LoCo Team "Microsoft has a majority market share" [Critical,In progress] https://launchpad.net/bugs/1 - Assigned to MFauzilkamil Zainuddin (apogee)	00:48
notmorgan	>.>	00:48
notmorgan	edmondsw: probably :P	00:48
*** mylu has quit IRC		00:49
*** mylu has joined #openstack-keystone		00:51
edmondsw	I should probably clarify that to make it work we had to set CONF.identity.default_domain_id to the name of the domain that has the service users	00:51
openstackgerrit	Thomas Hsiao proposed openstack/keystone: Create notification when invalid user name provided https://review.openstack.org/280994	00:52
*** dobson has joined #openstack-keystone		00:54
*** EinstCrazy has joined #openstack-keystone		00:55
openstackgerrit	Thomas Hsiao proposed openstack/keystone: Create notification when invalid user name provided https://review.openstack.org/280994	00:55
*** EinstCrazy has quit IRC		00:55
*** EinstCrazy has joined #openstack-keystone		00:55
*** mylu has quit IRC		00:56
*** mylu has joined #openstack-keystone		00:56
openstackgerrit	Thomas Hsiao proposed openstack/keystone: Create notification when invalid user name provided https://review.openstack.org/280994	00:58
*** doug-fish has quit IRC		01:01
*** rderose has joined #openstack-keystone		01:01
*** rderose has quit IRC		01:02
*** doug-fish has joined #openstack-keystone		01:02
*** EinstCrazy has quit IRC		01:11
*** EinstCrazy has joined #openstack-keystone		01:12
*** mylu has quit IRC		01:12
*** roxanaghe has quit IRC		01:16
*** davechen has joined #openstack-keystone		01:18
*** davechen1 has joined #openstack-keystone		01:24
*** su_zhang has quit IRC		01:26
*** spandhe has quit IRC		01:27
*** davechen has quit IRC		01:27
*** aginwala has quit IRC		01:29
*** ekarlso has quit IRC		01:30
*** _cjones_ has quit IRC		01:31
*** Ephur has quit IRC		01:32
*** sdake has quit IRC		01:36
*** doug-fish has quit IRC		01:44
*** aginwala has joined #openstack-keystone		01:44
*** doug-fish has joined #openstack-keystone		01:44
*** ekarlso has joined #openstack-keystone		01:45
*** doug-fis_ has joined #openstack-keystone		01:48
*** doug-fish has quit IRC		01:49
*** davechen1 is now known as davechen		01:51
*** doug-fis_ has quit IRC		01:52
*** mylu has joined #openstack-keystone		01:56
openstackgerrit	Merged openstack/keystone: wsgi: fix base_url finding https://review.openstack.org/226464	01:59
openstackgerrit	OpenStack Proposal Bot proposed openstack/keystone: Updating sample configuration file https://review.openstack.org/280896	02:02
stevemar	so notmorgan, what do you plan on doing with ksa/ksm?	02:02
notmorgan	stevemar: you mean before the release?	02:02
notmorgan	thing	02:02
*** dan_nguyen has quit IRC		02:03
notmorgan	might not be doable now that i'm looking at it	02:03
notmorgan	so, just go ahead and propose the tag	02:03
*** timcline has quit IRC		02:04
*** tqtran has quit IRC		02:12
*** edmondsw has quit IRC		02:12
*** timcline has joined #openstack-keystone		02:23
*** markvoelker has quit IRC		02:27
stevemar	notmorgan: okay, what was it?	02:33
*** doug-fish has joined #openstack-keystone		02:38
*** doug-fish has quit IRC		02:39
*** doug-fish has joined #openstack-keystone		02:40
openstackgerrit	Henrique Truta proposed openstack/keystone: Verify project unique constraints for projects acting as domains https://review.openstack.org/158372	02:41
gyee	stevemar, notmorgan, is keystoneauth working? I can't even run tox. Seem like its puking on pykerberos	02:42
*** shoutm has quit IRC		02:47
*** spandhe has joined #openstack-keystone		02:50
*** doug-fish has quit IRC		02:51
stevemar	gyee: ? nuke your tox directory .tox	02:52
stevemar	gyee: the CI is running fine	02:52
gyee	stevemar, I did	02:53
gyee	did a fresh clone and still not getting pykerberos to install	02:53
*** spandhe_ has joined #openstack-keystone		02:54
*** shoutm has joined #openstack-keystone		02:54
*** spandhe has quit IRC		02:55
*** spandhe_ is now known as spandhe		02:55
stevemar	gyee: i just cloned it and ran `$ tox`	02:56
stevemar	no complaints with py27 or py34	02:56
stevemar	gyee: releasesnotes and pep8 are fine too	02:56
* stevemar shrugs		02:56
gyee	stevemar, just make sure I am on the right one, https://github.com/openstack/keystoneauth.git right?	02:59
stevemar	gyee: yep	02:59
gyee	that's weird, let me rebuild my VM	02:59
gyee	stevemar, could me my local env, thanks for checking	02:59
*** opilotte\| has quit IRC		03:04
*** opilotte- has joined #openstack-keystone		03:04
*** shoutm_ has joined #openstack-keystone		03:07
*** shoutm has quit IRC		03:08
*** gyee has quit IRC		03:11
*** shoutm_ has quit IRC		03:13
*** shoutm has joined #openstack-keystone		03:15
*** dims has quit IRC		03:23
*** markvoelker has joined #openstack-keystone		03:27
*** x58 has quit IRC		03:31
*** mylu has quit IRC		03:32
*** markvoelker has quit IRC		03:33
*** mylu has joined #openstack-keystone		03:34
*** spandhe has quit IRC		03:36
*** spandhe_ has joined #openstack-keystone		03:36
*** spandhe has joined #openstack-keystone		03:45
*** spandhe_ has quit IRC		03:46
*** lhcheng has quit IRC		03:47
*** x58 has joined #openstack-keystone		03:48
*** shoutm_ has joined #openstack-keystone		03:48
*** shoutm has quit IRC		03:50
*** shoutm_ has quit IRC		03:53
*** shoutm has joined #openstack-keystone		03:53
*** x58 has quit IRC		03:59
*** x58 has joined #openstack-keystone		03:59
*** fawadkhaliq has joined #openstack-keystone		04:02
*** fawadkhaliq has quit IRC		04:03
*** shoutm_ has joined #openstack-keystone		04:10
*** ebalduf has joined #openstack-keystone		04:11
*** shoutm has quit IRC		04:13
openstackgerrit	ayoung proposed openstack/python-keystoneclient: Implied Roles https://review.openstack.org/280983	04:15
*** su_zhang has joined #openstack-keystone		04:17
*** lhcheng has joined #openstack-keystone		04:20
*** ChanServ sets mode: +v lhcheng		04:20
*** haneef_ has quit IRC		04:20
*** dave-mccowan has quit IRC		04:22
openstackgerrit	Steve Martinelli proposed openstack/keystone: handle unicode names for federated users https://review.openstack.org/279908	04:23
*** haneef_ has joined #openstack-keystone		04:23
ayoung	jamielennox, abouit a year ago we discussed this approach to building the client: https://review.openstack.org/#/c/82687/20/examples/scripts/initialize_keystone.py has anything progressed since then?	04:24
*** shoutm_ has quit IRC		04:24
*** shoutm has joined #openstack-keystone		04:24
*** spandhe has quit IRC		04:25
jamielennox	ayoung: i'm not sure what you are asking	04:27
ayoung	jamielennox, I want to create a client using env vars	04:27
jamielennox	ayoung: sure	04:28
ayoung	I need to test that the API adn client I wrote work in the real world	04:28
*** fawadkhaliq has joined #openstack-keystone		04:28
ayoung	so, is there an easy way to create a session assuming OS_*everything is an env var?	04:28
jamielennox	ayoung: here is something i use for testing that has an example: https://github.com/jamielennox/os-http/blob/master/os_http/shell.py	04:29
jamielennox	there are a lot of other flags in there you don't need	04:29
jamielennox	but you want	04:29
jamielennox	loading.register_session_argparse_arguments(parser)	04:29
jamielennox	loading.register_auth_argparse_arguments(parser, sys.argv[1:])	04:29
jamielennox	auth = loading.load_auth_from_argparse_arguments(opts)	04:29
jamielennox	session = loading.load_session_from_argparse_arguments(	04:29
jamielennox	opts,	04:29
jamielennox	auth=auth)	04:29
jamielennox	that's all been around for a long time, including in keystoneclient	04:31
*** su_zhang has quit IRC		04:31
ayoung	jamielennox, can I drop all the opts?	04:32
*** mylu has quit IRC		04:33
*** fawadk has joined #openstack-keystone		04:34
jamielennox	ayoung: sure, everything else is pretty much just to let me do testing	04:34
ayoung	ok, then I pass the session to the KC factory	04:34
jamielennox	yep, or just pass it to the versioned client	04:34
ayoung	keystone = keystone_v3.Client(session=session)	04:35
*** marekd has quit IRC		04:35
*** Nirupama has joined #openstack-keystone		04:35
*** fawadkhaliq has quit IRC		04:35
jamielennox	yep	04:35
*** marekd has joined #openstack-keystone		04:35
*** fawadk has quit IRC		04:39
*** links has joined #openstack-keystone		04:41
ayoung	jamielennox, in the client base.getid(prior_role) should take in the name field and give and id field, no?	04:44
ayoung	give an id field	04:45
jamielennox	ayoung: no, it takes in either an id string or an object with an id attr or a dict with an id key	04:45
jamielennox	ayoung: let's you do things like pass either a user object or user id as a user value	04:45
ayoung	jamielennox, ah, so if I only have the name of a role	04:45
*** mylu has joined #openstack-keystone		04:46
jamielennox	if you need the id then you have to look up the value	04:46
ayoung	is it kosher to assume that you have to do that>?	04:46
jamielennox	ayoung: more why would you expect to get a name rather than an id	04:46
ayoung	do our apis still look to see if something looks like a UUID	04:46
ayoung	jamielennox, with roles, the id is meaningless	04:46
jamielennox	i don't think so	04:47
ayoung	I kinda want to make the name and id the same	04:47
jamielennox	ayoung: right - but we still distinguish role name and role id	04:47
jamielennox	unless the API started accepting names	04:47
*** diazjf has joined #openstack-keystone		04:48
*** diazjf has quit IRC		04:48
ayoung	jamielennox, so, do we have a way to indicate that an api should accept a name instead of an id?	04:49
jamielennox	ayoung: no, not at client level	04:49
jamielennox	ayoung: OSC does some guessing on that	04:49
jamielennox	like if you give it a name it will look it up	04:49
*** jorge_munoz has quit IRC		04:50
ayoung	jamielennox, and for get, we use the id, so the only thing we can do is list, make a dictionary and then call..OK...	04:50
*** pushkaru has quit IRC		04:53
*** pushkaru has joined #openstack-keystone		04:53
*** links has quit IRC		04:57
*** pumarani__ has joined #openstack-keystone		04:57
*** pushkaru has quit IRC		04:57
*** shoutm has quit IRC		05:02
*** sileht has quit IRC		05:05
*** GB21 has joined #openstack-keystone		05:06
*** jasonsb has joined #openstack-keystone		05:12
*** fawadkhaliq has joined #openstack-keystone		05:15
*** shoutm has joined #openstack-keystone		05:18
*** sileht has joined #openstack-keystone		05:21
*** sdake has joined #openstack-keystone		05:27
*** markvoelker has joined #openstack-keystone		05:29
*** markvoelker has quit IRC		05:33
*** aginwala has quit IRC		05:35
*** jasonsb has quit IRC		05:42
*** maestro1 has joined #openstack-keystone		05:45
*** sdake has quit IRC		05:49
*** jaosorior has joined #openstack-keystone		05:52
*** jasonsb has joined #openstack-keystone		05:53
*** spandhe has joined #openstack-keystone		05:54
*** Sasi has joined #openstack-keystone		06:01
Sasi	Hi	06:01
Sasi	Does keystone support encrypted passwords?	06:02
Sasi	I want to configure the services with encrypted passwords	06:02
*** mylu has quit IRC		06:03
*** gildub has quit IRC		06:06
stevemar	Sasi: can you describe 'encrypted passwords' a bit more?	06:09
Sasi	sure, like for example if nova want to authenticate with keystone we will configure [keystone_authtoken] section right. There we will provide username, password. Here how it works if we provide encrypted password?	06:10
stevemar	Sasi: it won't work at all :)	06:10
Sasi	Oh is there any plan to implement such kind of feature?	06:11
*** patchbot has joined #openstack-keystone		06:16
*** notmyname has joined #openstack-keystone		06:16
notmyname	hello, patchbot	06:16
notmyname	notmorgan: ^	06:16
notmyname	patch 1234 patch 5678, but not patch foobar	06:17
patchbot	notmyname: https://review.openstack.org/#/c/1234/ - tempest - Removing link doctoring in test_images (MERGED)	06:17
patchbot	notmyname: https://review.openstack.org/#/c/5678/ - nova - Check that DescribeInstance works with deleted image (MERGED)	06:17
notmorgan	hi patchbot !	06:17
notmyname	alternatively, https://review.openstack.org/#/c/5678/	06:17
patchbot	notmyname: https://review.openstack.org/#/c/5678/ - nova - Check that DescribeInstance works with deleted image (MERGED)	06:17
notmorgan	notmyname: yay!	06:17
notmyname	notmorgan: let me know if you have questions or issues. it's running in a screen session on a server of mine. myself and timburke have commit rights	06:18
notmorgan	notmyname: cool. thnx :)	06:18
notmyname	and, of course, patches welcome ;-)	06:18
notmorgan	yup	06:18
*** jaosorior has quit IRC		06:19
notmyname	notmorgan: what meeting channel do you use? patchbot is in -meeting since that's what we use for swift	06:19
notmorgan	notmyname: -meeting	06:20
notmyname	ok	06:20
*** jaosorior has joined #openstack-keystone		06:20
notmyname	hmm...or it's supposed to be..	06:20
*** jaosorior has quit IRC		06:20
*** jaosorior has joined #openstack-keystone		06:21
notmyname	wow. patchbot has been kickbanned from -meeting	06:21
notmorgan	wow. thats probably a sign i wont be able to merge it into the main bot :(	06:21
notmyname	oh well	06:22
notmyname	anyway, have fun in here ;-)	06:22
notmorgan	i don't know why people are so against a bot reporting on that	06:22
notmyname	me neither. I find it terribly useful	06:22
notmorgan	anyway if it gets annoying to folks i'lllet yua know before a kickban occurs	06:22
notmyname	thanks :-)	06:22
notmorgan	since i'm op here, i doubt that'll happen	06:22
notmorgan	:P	06:23
* notmyname remembers when he had ops in most openstack channels		06:23
notmorgan	i had op in almost every channel on oftc when we considered the move	06:23
*** pumarani__ has quit IRC		06:23
notmyname	alas, the bureaucracy has prevailed ;-)	06:23
notmorgan	:P	06:23
*** pushkaru has joined #openstack-keystone		06:23
notmorgan	but then again... i might have created a bunch of those channels :P	06:23
notmyname	yeah. same here (but for freenode)	06:24
notmyname	it's late here. pm me if you have other questions/issues with patchbot	06:25
notmyname	good night	06:25
notmorgan	cheers	06:25
*** notmyname has left #openstack-keystone		06:25
*** spandhe has quit IRC		06:26
*** spandhe has joined #openstack-keystone		06:26
*** fawadkhaliq has quit IRC		06:27
*** fawadk has joined #openstack-keystone		06:27
*** tqtran has joined #openstack-keystone		06:29
*** ebalduf has quit IRC		06:29
*** fawadk has quit IRC		06:30
*** fawadkhaliq has joined #openstack-keystone		06:30
*** e0ne has joined #openstack-keystone		06:33
*** su_zhang has joined #openstack-keystone		06:36
*** Nakato has quit IRC		06:39
*** Nakato has joined #openstack-keystone		06:39
*** aginwala has joined #openstack-keystone		06:40
*** GB21 has quit IRC		06:41
*** spandhe has quit IRC		06:42
openstackgerrit	fengzhr proposed openstack/keystone: The name can be just white character except project and user https://review.openstack.org/272358	06:47
-openstackstatus- NOTICE: A problem with the mirror used for CI jobs in the rax-iad region has been corrected. Please recheck changes that recently failed jobs on nodes in rax-iad.		06:49
openstackgerrit	fengzhr proposed openstack/keystone: The name can be just white character except project and user https://review.openstack.org/272358	06:49
*** jasonsb has quit IRC		06:53
*** su_zhang has quit IRC		06:57
*** su_zhang has joined #openstack-keystone		07:00
openstackgerrit	Steve Martinelli proposed openstack/keystone: validate domain specific config option values https://review.openstack.org/281078	07:03
*** su_zhang has quit IRC		07:06
*** fawadk has joined #openstack-keystone		07:19
*** fawadkhaliq has quit IRC		07:20
openstackgerrit	Jamie Lennox proposed openstack/keystonemiddleware: Handle cache invalidate outside cache object https://review.openstack.org/268662	07:22
openstackgerrit	guang-yee proposed openstack/keystoneauth: Support TOTP auth plugin https://review.openstack.org/281086	07:27
*** markvoelker has joined #openstack-keystone		07:30
*** ianw has quit IRC		07:30
*** fawadkhaliq has joined #openstack-keystone		07:30
*** ianw has joined #openstack-keystone		07:30
*** fawadk has quit IRC		07:30
*** markvoelker has quit IRC		07:34
*** rcernin has joined #openstack-keystone		07:42
davechen	stevemar: leaved the comment on this patch - https://review.openstack.org/#/c/280542/	07:42
patchbot	davechen: https://review.openstack.org/#/c/280542/ - keystone - encode user id for notifications	07:42
stevemar	davechen: i'm confused how that is failing :\|	07:43
stevemar	davechen: look @ my previous comment, i'm very confused :\|	07:43
davechen	stevemar: the value passed should be unicode in your env.	07:44
davechen	stevemar: i guess, haven't setup the ldap to check that. :)	07:44
stevemar	davechen: more details here: https://bugs.launchpad.net/keystone/+bug/1545960	07:44
openstack	Launchpad bug 1545960 in OpenStack Identity (keystone) "authenticating with ldap user fails due to notification" [High,In progress] - Assigned to Steve Martinelli (stevemar)	07:44
stevemar	davechen: i think the test might be incorrect	07:44
stevemar	davechen: i think it's cause of: https://github.com/openstack/keystone/blob/master/keystone/common/sql/migrate_repo/versions/067_kilo.py#L205-L217	07:45
davechen	stevemar: it's kilo that you are using?	07:46
stevemar	davechen: nope, master branch	07:47
stevemar	davechen: i think when we retrieve the value from the database, it's encoded in utf8?	07:47
stevemar	davechen: whereas, in our tests, we aren't doing that	07:47
stevemar	davechen: i'll create another test like this: https://github.com/openstack/keystone/blob/master/keystone/tests/unit/test_backend_id_mapping_sql.py#L79-L83	07:48
stevemar	that actually uses the backend, to see if that fails	07:49
davechen	stevemar: i am pretty sure it's unicode when the data is retrieved from db.	07:49
*** su_zhang has joined #openstack-keystone		07:51
stevemar	davechen: yes, i think i managed to re-create it locally...	07:55
stevemar	davechen: the test is incorrect and doesn't test unicode, which comes back from the database	07:55
stevemar	i'll add a test	07:55
*** subscope has joined #openstack-keystone		07:56
*** e0ne has quit IRC		07:56
davechen	stevemar: yes, i can reproduce your issue if i change the value to unicode in the testcase.	07:56
davechen	stevemar: update the testcase to make sure it's okay if unicode is presented.	07:57
stevemar	davechen: yes sir!	07:58
*** shoutm has quit IRC		07:58
stevemar	davechen: the test passes...	07:58
*** shoutm has joined #openstack-keystone		07:58
stevemar	let me take out the fix to make sure the test fails now :)	07:58
davechen	stevemar: it should be, i tried it by myself. :)	07:59
*** su_zhang has quit IRC		08:03
openstackgerrit	Steve Martinelli proposed openstack/keystone: encode user id for notifications https://review.openstack.org/280542	08:04
stevemar	davechen: ^	08:04
*** henrynash has joined #openstack-keystone		08:06
*** ChanServ sets mode: +v henrynash		08:06
davechen	stevemar: the testcase should fail without the fix, right?	08:08
stevemar	davechen: yep! i tried that before submitting :)	08:08
stevemar	davechen: you are encouraged to do the same :)	08:08
davechen	stevemar: okay, let me try it again.	08:09
*** henrynash has quit IRC		08:10
davechen	stevemar: see it.	08:10
*** GB21 has joined #openstack-keystone		08:12
stevemar	davechen: hehe, i commented in the review too	08:13
davechen	stevemar: nice!	08:13
*** pushkaru has quit IRC		08:14
*** shoutm_ has joined #openstack-keystone		08:14
*** shoutm has quit IRC		08:15
*** maestro1 has quit IRC		08:15
*** GB21 has quit IRC		08:17
*** fawadkhaliq has quit IRC		08:19
*** fawadkhaliq has joined #openstack-keystone		08:20
*** tqtran has quit IRC		08:21
stevemar	davechen: good night, i'll see you in a few hours :)	08:29
davechen	stevemar: good night, boss!	08:32
*** pcaruana has joined #openstack-keystone		08:42
*** e0ne has joined #openstack-keystone		08:47
*** jdennis1 has joined #openstack-keystone		08:49
*** jdennis has quit IRC		08:50
*** fhubik has joined #openstack-keystone		08:55
*** fhubik is now known as fhubik_brb		09:05
*** fhubik_brb is now known as fhubik		09:07
*** aginwala has quit IRC		09:09
*** ccard__ has joined #openstack-keystone		09:09
*** mhickey has joined #openstack-keystone		09:11
*** ccard_ has quit IRC		09:12
*** maestro1 has joined #openstack-keystone		09:16
*** pnavarro has joined #openstack-keystone		09:17
*** maestro1 has left #openstack-keystone		09:17
*** Pandy has joined #openstack-keystone		09:18
*** GB21 has joined #openstack-keystone		09:19
*** rvba has quit IRC		09:26
*** bdossant has joined #openstack-keystone		09:26
*** rvba has joined #openstack-keystone		09:26
*** rvba has quit IRC		09:26
*** rvba has joined #openstack-keystone		09:26
*** Sasi has quit IRC		09:27
*** henrynash has joined #openstack-keystone		09:28
*** ChanServ sets mode: +v henrynash		09:28
*** markvoelker has joined #openstack-keystone		09:31
*** rha has quit IRC		09:34
*** markvoelker has quit IRC		09:35
*** mvk has joined #openstack-keystone		09:40
*** lhcheng has quit IRC		09:41
openstackgerrit	henry-nash proposed openstack/keystone: Add tests in preparation of projects acting as a domain https://review.openstack.org/272369	09:44
openstackgerrit	henry-nash proposed openstack/keystone: Add is_domain filter to v3 list_projects https://review.openstack.org/158398	09:44
*** errr_ has quit IRC		09:52
*** ramishra has quit IRC		09:52
*** yarkot has quit IRC		09:52
*** miguelgrinberg has quit IRC		09:52
*** skoude has quit IRC		09:52
*** briancurtin has quit IRC		09:52
*** boltR has quit IRC		09:52
*** ctracey has quit IRC		09:52
*** lifeless has quit IRC		09:52
*** _fortis has quit IRC		09:52
*** jraim has quit IRC		09:52
*** serverascode has quit IRC		09:52
*** navidp has quit IRC		09:52
*** david8hu has quit IRC		09:52
*** zhiyan has quit IRC		09:52
*** rmstar has quit IRC		09:52
*** redrobot has quit IRC		09:52
*** DinaBelova has quit IRC		09:52
*** smurke has quit IRC		09:52
*** blogan has quit IRC		09:52
*** afazekas has quit IRC		09:52
*** raorn has quit IRC		09:52
*** navidp has joined #openstack-keystone		09:52
*** afazekas has joined #openstack-keystone		09:52
*** raorn has joined #openstack-keystone		09:52
*** skoude has joined #openstack-keystone		09:52
*** redrobot has joined #openstack-keystone		09:52
*** rmstar has joined #openstack-keystone		09:52
*** david8hu has joined #openstack-keystone		09:52
*** lifeless has joined #openstack-keystone		09:53
*** blogan has joined #openstack-keystone		09:53
*** redrobot is now known as Guest53162		09:53
*** boltR has joined #openstack-keystone		09:53
*** miguelgrinberg has joined #openstack-keystone		09:53
*** errr_ has joined #openstack-keystone		09:53
*** DinaBelova has joined #openstack-keystone		09:53
*** davechen has left #openstack-keystone		09:56
*** kragniz has quit IRC		09:56
*** kragniz has joined #openstack-keystone		09:58
*** zhiyan has joined #openstack-keystone		09:58
openstackgerrit	Merged openstack/keystone: Modify implied roles to honor domain specific roles https://review.openstack.org/263064	09:59
openstackgerrit	Merged openstack/keystone: Modify rules for domain specific role assignments https://review.openstack.org/263549	10:00
*** ramishra has joined #openstack-keystone		10:01
*** jraim has joined #openstack-keystone		10:02
samueldmq	henrynash: so this means dsr bp now is Implemented!	10:03
samueldmq	^	10:03
*** jraim has quit IRC		10:03
*** ramishra has quit IRC		10:03
*** zhiyan has quit IRC		10:03
*** navidp has quit IRC		10:03
*** rcernin has quit IRC		10:03
*** Nirupama has quit IRC		10:03
*** johnthetubaguy has quit IRC		10:03
*** _fortis has joined #openstack-keystone		10:03
*** navidp has joined #openstack-keystone		10:03
*** Nirupama has joined #openstack-keystone		10:03
henrynash	samueldmq: yep!!!	10:03
henrynash	samueldmq: got some nits to clean up, will submit a new patch tonight/tomorrow to do that	10:04
samueldmq	henrynash: great!	10:04
*** rcernin has joined #openstack-keystone		10:04
henrynash	samueldmq: now for projects as a domain…	10:04
*** briancurtin has joined #openstack-keystone		10:05
samueldmq	henrynash: perfect, yes I am taking another look at that	10:05
henrynash	samueldmq: if you see ayoung on line, can you nudge him to reapply his +2 to https://review.openstack.org/#/c/264533/	10:05
patchbot	henrynash: https://review.openstack.org/#/c/264533/ - keystone - Allow project domain_id to be nullable at the mana...	10:05
*** johnthetubaguy has joined #openstack-keystone		10:05
samueldmq	henrynash: I think the 4 bfore 'Projects acting as domains' could merge already	10:05
samueldmq	henrynash: yes will do, I asked him tomorrow, will re-do today :)	10:06
*** serverascode has joined #openstack-keystone		10:06
henrynash	samueldmq: agreed, they are ready to go…gonna ping the cinder folks on how theure fix for quotas is coming on, now that er have merged the get_project policy patch	10:06
samueldmq	henrynash: I want those first 4 to merge today! :)	10:06
henrynash	samueldmq; more power to ya	10:06
openstackgerrit	OpenStack Proposal Bot proposed openstack/keystone: Updating sample configuration file https://review.openstack.org/280896	10:06
samueldmq	henrynash: ehhe :)	10:06
samueldmq	henrynash: tell me, how is the resolution on cinder side ?	10:06
samueldmq	henrynash: I remember the issue was that top-lvel projects (inside a domain) would have a parent_id, and they didn't before	10:07
*** ctracey has joined #openstack-keystone		10:07
openstackgerrit	OpenStack Proposal Bot proposed openstack/keystone: Updating sample configuration file https://review.openstack.org/280896	10:08
henrynash	samuedlmq: so not sure of the fix, but the current code in tempest assumes that the test parent_id==None will get them to teh top level reguakr project (which suddenly it won’t)	10:08
*** Nirupama has quit IRC		10:08
*** shoutm_ has quit IRC		10:08
*** sileht has quit IRC		10:08
*** jrist has quit IRC		10:08
*** patchbot has quit IRC		10:08
*** Anticimex has quit IRC		10:08
*** chlong has quit IRC		10:08
*** mordred has quit IRC		10:08
*** charz_ has quit IRC		10:08
*** nkinder has quit IRC		10:08
*** jlvillal has quit IRC		10:08
*** mordred has joined #openstack-keystone		10:08
*** Anticimex has joined #openstack-keystone		10:08
*** jrist has joined #openstack-keystone		10:08
*** nkinder has joined #openstack-keystone		10:08
*** shoutm has joined #openstack-keystone		10:08
*** chlong has joined #openstack-keystone		10:09
henrynash	samueldmq: the fix to that code would be quite easy (i.e. check if the parent is a domain, and that’s the real check)….but they said theyare re-doing the whole quotas…but needed to be able to do a get_project without project admin rights to implement it	10:09
*** Nirupama has joined #openstack-keystone		10:09
*** charz has joined #openstack-keystone		10:09
*** sileht has joined #openstack-keystone		10:09
*** mvk has quit IRC		10:09
samueldmq	henrynash: so that requires them to GET /projects/{parent_id} to see if it's a domain	10:10
*** patchbot has joined #openstack-keystone		10:11
henrynash	samueldmq: I assume so…not sure of their intended algorithm	10:12
henrynash	samueldmq: see my mail list thread” https://openstack.nimeyo.com/72594/openstack-keystone-cinder-horizon-projects-project-hierarchy	10:12
samueldmq	henrynash: yes you can if have a token scoped to the domain https://github.com/openstack/keystone/blob/master/etc/policy.json#L37	10:12
*** zhiyan has joined #openstack-keystone		10:12
*** ramishra has joined #openstack-keystone		10:12
samueldmq	henrynash: is tht the case ? want to make sure our policy allow them to do so	10:13
*** jraim has joined #openstack-keystone		10:13
* samueldmq 's lookin		10:13
*** jlvillal has joined #openstack-keystone		10:13
*** shoutm has quit IRC		10:28
*** shoutm has joined #openstack-keystone		10:30
*** mvk has joined #openstack-keystone		10:36
openstackgerrit	Merged openstack/keystone: Disable Admin tokens set to None https://review.openstack.org/280467	10:36
openstackgerrit	OpenStack Proposal Bot proposed openstack/keystone: Updating sample configuration file https://review.openstack.org/280896	10:38
*** baffle has quit IRC		10:48
*** dims has joined #openstack-keystone		10:49
*** nkinder has quit IRC		10:49
*** ctracey has quit IRC		10:49
*** serverascode has quit IRC		10:49
*** skoude has quit IRC		10:49
*** raorn has quit IRC		10:49
*** Pandy has quit IRC		10:49
*** mhickey has quit IRC		10:49
*** jdennis1 has quit IRC		10:49
*** jaosorior has quit IRC		10:49
*** dobson has quit IRC		10:49
*** DuncanT has quit IRC		10:49
*** lbragstad_ has quit IRC		10:49
*** crinkle has quit IRC		10:49
*** brad[] has quit IRC		10:49
*** huats_ has quit IRC		10:49
*** hockeynut has quit IRC		10:49
*** alex_xu has quit IRC		10:49
*** dolphm has quit IRC		10:49
*** xek has quit IRC		10:49
*** cloudnull has quit IRC		10:49
*** d34dh0r53 has quit IRC		10:49
*** darrenc has quit IRC		10:49
*** kfox1111 has quit IRC		10:49
*** gerhardq1x has quit IRC		10:49
*** odyssey4me has quit IRC		10:49
*** lbragstad_ has joined #openstack-keystone		10:49
*** dolphm has joined #openstack-keystone		10:49
*** gerhardqux has joined #openstack-keystone		10:49
*** ChanServ sets mode: +o dolphm		10:49
*** hockeynut has joined #openstack-keystone		10:49
*** raorn has joined #openstack-keystone		10:49
*** dobson has joined #openstack-keystone		10:49
*** mhickey has joined #openstack-keystone		10:49
*** cloudkiller has joined #openstack-keystone		10:49
*** xek has joined #openstack-keystone		10:50
*** jdennis has joined #openstack-keystone		10:50
*** brad[] has joined #openstack-keystone		10:50
*** Pandy has joined #openstack-keystone		10:50
*** huats_ has joined #openstack-keystone		10:50
*** huats_ has quit IRC		10:50
*** huats_ has joined #openstack-keystone		10:50
*** alex_xu has joined #openstack-keystone		10:50
*** nkinder has joined #openstack-keystone		10:50
*** odyssey4me has joined #openstack-keystone		10:50
*** yarkot has joined #openstack-keystone		10:50
*** d34dh0r53 has joined #openstack-keystone		10:51
*** smurke has joined #openstack-keystone		10:51
*** darrenc has joined #openstack-keystone		10:51
*** crinkle has joined #openstack-keystone		10:52
*** mariusv has quit IRC		10:53
*** jaosorior has joined #openstack-keystone		10:53
*** cloudkiller is now known as cloudnull		10:53
*** fhubik has quit IRC		10:54
*** dulek has quit IRC		10:54
*** dulek has joined #openstack-keystone		10:54
*** raildo-afk has quit IRC		10:54
*** kfox1111 has joined #openstack-keystone		10:54
*** Pandy has quit IRC		10:54
*** baffle has joined #openstack-keystone		10:55
*** skoude has joined #openstack-keystone		10:56
*** raildo-afk has joined #openstack-keystone		10:57
*** ctracey has joined #openstack-keystone		10:58
*** rudolfvriend has joined #openstack-keystone		10:58
*** serverascode has joined #openstack-keystone		11:01
*** DuncanT has joined #openstack-keystone		11:02
*** shoutm_ has joined #openstack-keystone		11:02
*** shoutm has quit IRC		11:03
*** rcernin has quit IRC		11:03
*** darrenc has quit IRC		11:04
*** d34dh0r53 has quit IRC		11:04
*** dobson has quit IRC		11:04
*** hockeynut has quit IRC		11:04
*** cloudnull has quit IRC		11:04
*** dolphm has quit IRC		11:04
*** gerhardqux has quit IRC		11:04
*** dims has quit IRC		11:04
*** ramishra has quit IRC		11:04
*** zhiyan has quit IRC		11:04
*** briancurtin has quit IRC		11:04
*** blogan has quit IRC		11:04
*** Guest53162 has quit IRC		11:04
*** subscope has quit IRC		11:04
*** haneef_ has quit IRC		11:04
*** BrAsS_mO- has quit IRC		11:04
*** andrewbogott has quit IRC		11:04
*** rodrigods has quit IRC		11:04
*** jed56 has quit IRC		11:04
*** wolsen has quit IRC		11:04
*** med_ has quit IRC		11:04
*** comstud has quit IRC		11:04
*** rm_work has quit IRC		11:04
*** mgagne has quit IRC		11:04
*** dtroyer has quit IRC		11:04
*** smcginnis has quit IRC		11:04
*** nonameentername has quit IRC		11:04
*** rdo has quit IRC		11:04
*** Daviey has quit IRC		11:04
*** gus has quit IRC		11:04
*** ryanpetrello has quit IRC		11:04
*** sigmavirus24_awa has quit IRC		11:04
*** lbragstad has quit IRC		11:04
*** Guest40848 has quit IRC		11:04
*** lbragstad_ is now known as lbragstad		11:04
*** darrenc has joined #openstack-keystone		11:04
*** BrAsS_mOnKeY has joined #openstack-keystone		11:04
*** dolphm has joined #openstack-keystone		11:04
*** ChanServ sets mode: +o dolphm		11:04
*** redrobot has joined #openstack-keystone		11:04
*** hockeynut has joined #openstack-keystone		11:04
*** mgagne has joined #openstack-keystone		11:04
*** smcginnis has joined #openstack-keystone		11:04
*** haneef_ has joined #openstack-keystone		11:04
*** blogan has joined #openstack-keystone		11:04
*** med_ has joined #openstack-keystone		11:04
*** dims has joined #openstack-keystone		11:04
*** Daviey has joined #openstack-keystone		11:04
*** redrobot is now known as Guest1856		11:04
*** med_ is now known as Guest5506		11:04
*** d34dh0r53 has joined #openstack-keystone		11:05
*** rodrigods has joined #openstack-keystone		11:05
*** dtroyer has joined #openstack-keystone		11:05
*** nonameentername has joined #openstack-keystone		11:05
*** dobson has joined #openstack-keystone		11:05
*** Guest40848 has joined #openstack-keystone		11:05
*** comstud has joined #openstack-keystone		11:05
*** wolsen has joined #openstack-keystone		11:05
*** ryanpetrello has joined #openstack-keystone		11:05
*** sigmavirus24_awa has joined #openstack-keystone		11:06
*** rm_work has joined #openstack-keystone		11:06
*** lbragstad_ has joined #openstack-keystone		11:06
*** _fortis has quit IRC		11:06
*** cloudkiller has joined #openstack-keystone		11:07
*** gus has joined #openstack-keystone		11:07
*** gildub has joined #openstack-keystone		11:08
*** rdo has joined #openstack-keystone		11:10
*** ramishra has joined #openstack-keystone		11:10
*** gerhardqux has joined #openstack-keystone		11:11
*** gildub has quit IRC		11:12
*** sileht has quit IRC		11:13
*** zhiyan has joined #openstack-keystone		11:16
*** andrewbogott has joined #openstack-keystone		11:16
*** sileht has joined #openstack-keystone		11:17
*** briancurtin has joined #openstack-keystone		11:17
*** jed56 has joined #openstack-keystone		11:18
*** rha has joined #openstack-keystone		11:20
*** _fortis has joined #openstack-keystone		11:20
*** ccard_ has joined #openstack-keystone		11:22
*** jeffDeville has joined #openstack-keystone		11:22
*** jeffDeville has left #openstack-keystone		11:22
*** ccard__ has quit IRC		11:25
*** cloudkiller is now known as cloudnull		11:29
*** markvoelker has joined #openstack-keystone		11:31
*** henrynash_ has joined #openstack-keystone		11:33
*** ChanServ sets mode: +v henrynash_		11:33
*** markvoelker has quit IRC		11:36
*** henrynash has quit IRC		11:36
*** henrynash_ is now known as henrynash		11:36
*** gerhardqux has quit IRC		11:39
*** lbragstad_ has quit IRC		11:39
*** crinkle has quit IRC		11:39
*** mvk has quit IRC		11:39
*** Nirupama has quit IRC		11:39
*** timcline has quit IRC		11:39
*** krotscheck has quit IRC		11:39
*** ktychkova has quit IRC		11:39
*** toddnni has quit IRC		11:39
*** john5223 has quit IRC		11:39
*** tobasco has quit IRC		11:39
*** notmorgan has quit IRC		11:39
*** lbragstad_ has joined #openstack-keystone		11:40
*** tobasco has joined #openstack-keystone		11:40
*** toddnni has joined #openstack-keystone		11:40
*** ktychkova has joined #openstack-keystone		11:40
*** notmorgan has joined #openstack-keystone		11:40
*** ChanServ sets mode: +o notmorgan		11:40
*** timcline has joined #openstack-keystone		11:40
*** mvk has joined #openstack-keystone		11:40
*** crinkle has joined #openstack-keystone		11:41
*** Nirupama has joined #openstack-keystone		11:42
*** krotscheck has joined #openstack-keystone		11:42
*** gerhardqux has joined #openstack-keystone		11:45
*** rcernin has joined #openstack-keystone		11:49
*** rha has quit IRC		11:50
*** haneef_ has quit IRC		11:50
*** smurke has quit IRC		11:50
*** ianw has quit IRC		11:50
*** EinstCrazy has quit IRC		11:50
*** mdavidson has quit IRC		11:50
*** spring_ has quit IRC		11:50
*** bapalm has quit IRC		11:50
*** sshen has quit IRC		11:50
*** zeus has quit IRC		11:50
*** bjornar has quit IRC		11:50
*** samueldmq has quit IRC		11:50
*** anteaya has quit IRC		11:50
*** Tridde_ has quit IRC		11:50
*** tsufiev has quit IRC		11:50
*** freerunner has quit IRC		11:50
*** david_cu has quit IRC		11:50
*** mfisch has quit IRC		11:50
*** timburke has quit IRC		11:50
*** Tridde has joined #openstack-keystone		11:50
*** bapalm has joined #openstack-keystone		11:50
*** haneef_ has joined #openstack-keystone		11:50
*** EinstCrazy has joined #openstack-keystone		11:50
*** zeus has joined #openstack-keystone		11:50
*** freerunner has joined #openstack-keystone		11:50
*** anteaya has joined #openstack-keystone		11:51
*** samueldmq has joined #openstack-keystone		11:51
*** zeus is now known as Guest10770		11:51
*** smurke has joined #openstack-keystone		11:51
*** spring_ has joined #openstack-keystone		11:51
*** rha has joined #openstack-keystone		11:52
*** mfisch has joined #openstack-keystone		11:52
*** mfisch is now known as Guest22953		11:52
*** timburke has joined #openstack-keystone		11:53
*** mdavidson has joined #openstack-keystone		11:53
*** sshen has joined #openstack-keystone		11:54
*** ianw has joined #openstack-keystone		11:56
*** doug-fish has joined #openstack-keystone		11:58
*** openstack has joined #openstack-keystone		12:02
*** asimov.freenode.net sets mode: +ns		12:02
-asimov.freenode.net- [freenode-info] please register your nickname...don't forget to auto-identify! http://freenode.net/faq.shtml#nicksetup		12:02
*** openstackstatus has joined #openstack-keystone		12:03
*** asimov.freenode.net sets mode: -o openstack		12:03
-asimov.freenode.net- *** Notice -- TS for #openstack-keystone changed from 1455710535 to 1377384024		12:03
*** asimov.freenode.net sets mode: +cgt-s		12:03
*** chlong has joined #openstack-keystone		12:03
*** dims has joined #openstack-keystone		12:03
*** raginbajin has joined #openstack-keystone		12:03
*** SpamapS has joined #openstack-keystone		12:03
*** wolsen has joined #openstack-keystone		12:03
*** alex_xu has joined #openstack-keystone		12:03
*** jasondotstar has joined #openstack-keystone		12:03
*** flaper87 has joined #openstack-keystone		12:03
*** Guest45178 has joined #openstack-keystone		12:03
*** pumaranikar has joined #openstack-keystone		12:03
*** fawadkhaliq has joined #openstack-keystone		12:03
*** pcaruana has joined #openstack-keystone		12:03
*** timcline has joined #openstack-keystone		12:03
*** topol_ has joined #openstack-keystone		12:03
*** SamYaple has joined #openstack-keystone		12:03
*** petertr7 has joined #openstack-keystone		12:03
*** sudorandom has joined #openstack-keystone		12:03
*** Guest40431 has joined #openstack-keystone		12:03
*** gsilvis has joined #openstack-keystone		12:03
*** dhellmann has joined #openstack-keystone		12:03
*** Guest46279 has joined #openstack-keystone		12:03
*** dancn has joined #openstack-keystone		12:03
*** bigjools has joined #openstack-keystone		12:03
*** mordred has joined #openstack-keystone		12:03
*** rvba has joined #openstack-keystone		12:03
*** mjb has joined #openstack-keystone		12:03
*** doug-fish has joined #openstack-keystone		12:03
*** ianw has joined #openstack-keystone		12:03
*** sshen has joined #openstack-keystone		12:03
*** mdavidson has joined #openstack-keystone		12:03
*** timburke has joined #openstack-keystone		12:03
*** Guest22953 has joined #openstack-keystone		12:03
*** rha has joined #openstack-keystone		12:03
*** spring_ has joined #openstack-keystone		12:03
*** smurke has joined #openstack-keystone		12:03
*** samueldmq has joined #openstack-keystone		12:03
*** anteaya has joined #openstack-keystone		12:03
*** freerunner has joined #openstack-keystone		12:03
*** Guest10770 has joined #openstack-keystone		12:03
*** EinstCrazy has joined #openstack-keystone		12:03
*** haneef_ has joined #openstack-keystone		12:03
*** bapalm has joined #openstack-keystone		12:03
*** Tridde has joined #openstack-keystone		12:03
*** rcernin has joined #openstack-keystone		12:03
*** gerhardqux has joined #openstack-keystone		12:03
*** krotscheck has joined #openstack-keystone		12:03
*** Nirupama has joined #openstack-keystone		12:03
*** crinkle has joined #openstack-keystone		12:03
*** mvk has joined #openstack-keystone		12:03
*** notmorgan has joined #openstack-keystone		12:03
*** ktychkova has joined #openstack-keystone		12:03
*** toddnni has joined #openstack-keystone		12:03
*** tobasco has joined #openstack-keystone		12:03
*** lbragstad_ has joined #openstack-keystone		12:03
*** henrynash has joined #openstack-keystone		12:03
*** ccard_ has joined #openstack-keystone		12:03
*** jed56 has joined #openstack-keystone		12:03
*** briancurtin has joined #openstack-keystone		12:03
*** sileht has joined #openstack-keystone		12:03
*** andrewbogott has joined #openstack-keystone		12:03
*** zhiyan has joined #openstack-keystone		12:03
*** ramishra has joined #openstack-keystone		12:03
*** rdo has joined #openstack-keystone		12:03
*** gus has joined #openstack-keystone		12:03
*** cloudnull has joined #openstack-keystone		12:03
*** rm_work has joined #openstack-keystone		12:03
*** sigmavirus24_awa has joined #openstack-keystone		12:03
*** ryanpetrello has joined #openstack-keystone		12:03
*** comstud has joined #openstack-keystone		12:03
*** Guest40848 has joined #openstack-keystone		12:03
*** dobson has joined #openstack-keystone		12:03
*** nonameentername has joined #openstack-keystone		12:03
*** dtroyer has joined #openstack-keystone		12:03
*** rodrigods has joined #openstack-keystone		12:03
*** d34dh0r53 has joined #openstack-keystone		12:03
*** Daviey has joined #openstack-keystone		12:03
*** Guest5506 has joined #openstack-keystone		12:03
*** blogan has joined #openstack-keystone		12:03
*** smcginnis has joined #openstack-keystone		12:03
*** mgagne has joined #openstack-keystone		12:03
*** hockeynut has joined #openstack-keystone		12:03
*** dolphm has joined #openstack-keystone		12:03
*** BrAsS_mOnKeY has joined #openstack-keystone		12:03
*** darrenc has joined #openstack-keystone		12:03
*** shoutm_ has joined #openstack-keystone		12:03
*** DuncanT has joined #openstack-keystone		12:03
*** serverascode has joined #openstack-keystone		12:03
*** rudolfvriend has joined #openstack-keystone		12:03
*** ctracey has joined #openstack-keystone		12:03
*** raildo-afk has joined #openstack-keystone		12:03
*** asimov.freenode.net sets mode: +ovo notmorgan henrynash dolphm		12:03
*** skoude has joined #openstack-keystone		12:03
*** baffle has joined #openstack-keystone		12:03
*** kfox1111 has joined #openstack-keystone		12:03
*** dulek has joined #openstack-keystone		12:03
*** jaosorior has joined #openstack-keystone		12:03
*** yarkot has joined #openstack-keystone		12:03
*** odyssey4me has joined #openstack-keystone		12:03
*** nkinder has joined #openstack-keystone		12:03
*** huats_ has joined #openstack-keystone		12:03
*** brad[] has joined #openstack-keystone		12:03
*** jdennis has joined #openstack-keystone		12:03
*** xek has joined #openstack-keystone		12:03
*** mhickey has joined #openstack-keystone		12:03
*** raorn has joined #openstack-keystone		12:03
*** lbragstad has joined #openstack-keystone		12:03
*** jlvillal has joined #openstack-keystone		12:03
*** jraim has joined #openstack-keystone		12:03
*** patchbot has joined #openstack-keystone		12:03
*** charz has joined #openstack-keystone		12:03
*** jrist has joined #openstack-keystone		12:03
*** Anticimex has joined #openstack-keystone		12:03
*** johnthetubaguy has joined #openstack-keystone		12:03
*** navidp has joined #openstack-keystone		12:03
*** kragniz has joined #openstack-keystone		12:03
*** DinaBelova has joined #openstack-keystone		12:03
*** errr_ has joined #openstack-keystone		12:03
*** miguelgrinberg has joined #openstack-keystone		12:03
*** boltR has joined #openstack-keystone		12:03
*** lifeless has joined #openstack-keystone		12:03
*** david8hu has joined #openstack-keystone		12:03
*** rmstar has joined #openstack-keystone		12:03
*** bdossant has joined #openstack-keystone		12:03
*** GB21 has joined #openstack-keystone		12:03
*** pnavarro has joined #openstack-keystone		12:03
*** e0ne has joined #openstack-keystone		12:03
*** Nakato has joined #openstack-keystone		12:03
*** marekd has joined #openstack-keystone		12:03
*** opilotte- has joined #openstack-keystone		12:03
*** ekarlso has joined #openstack-keystone		12:03
*** clayton has joined #openstack-keystone		12:03
*** wasmum- has joined #openstack-keystone		12:03
*** cburgess has joined #openstack-keystone		12:03
*** EmilienM has joined #openstack-keystone		12:03
*** tpeoples has joined #openstack-keystone		12:03
*** daemontool has joined #openstack-keystone		12:03
*** arunkant has joined #openstack-keystone		12:03
*** d0ugal has joined #openstack-keystone		12:03
*** tsymanczyk has joined #openstack-keystone		12:03
*** dmsimard has joined #openstack-keystone		12:03
*** agireud has joined #openstack-keystone		12:03
*** wanghua has joined #openstack-keystone		12:03
*** mkoderer__ has joined #openstack-keystone		12:03
*** ericksonsantos has joined #openstack-keystone		12:03
*** akscram has joined #openstack-keystone		12:03
*** openstackgerrit_ has joined #openstack-keystone		12:03
*** openstackgerrit has joined #openstack-keystone		12:03
*** BAKfr has joined #openstack-keystone		12:03
*** ngupta has joined #openstack-keystone		12:03
*** iurygregory has joined #openstack-keystone		12:03
*** dgonzalez has joined #openstack-keystone		12:03
*** andreaf has joined #openstack-keystone		12:03
*** tjcocozz has joined #openstack-keystone		12:03
*** hughsaunders has joined #openstack-keystone		12:03
*** stevemar has joined #openstack-keystone		12:03
*** ayoung has joined #openstack-keystone		12:03
*** bknudson_ has joined #openstack-keystone		12:03
*** Dave has joined #openstack-keystone		12:03
*** haneef has joined #openstack-keystone		12:03
*** jidar has joined #openstack-keystone		12:03
*** dstanek has joined #openstack-keystone		12:03
*** asimov.freenode.net sets mode: +ovvv stevemar ayoung bknudson_ dstanek		12:03
*** amakarov has joined #openstack-keystone		12:03
*** pkarikh has joined #openstack-keystone		12:03
*** mc_nair has joined #openstack-keystone		12:03
*** tristanC has joined #openstack-keystone		12:03
*** eglute has joined #openstack-keystone		12:03
*** BlackDex has joined #openstack-keystone		12:03
*** martinus__ has joined #openstack-keystone		12:03
*** jamielennox has joined #openstack-keystone		12:03
*** zigo has joined #openstack-keystone		12:03
*** adam_g has joined #openstack-keystone		12:03
*** mhu has joined #openstack-keystone		12:03
*** ChanServ has joined #openstack-keystone		12:03
*** asimov.freenode.net sets mode: +vo jamielennox ChanServ		12:03
*** asimov.freenode.net sets mode: +b *!awrbgh@197.123.75.191		12:03
*** asimov.freenode.net sets mode: +qq uvirtbot!@ uvirbot!@		12:03
*** asimov.freenode.net changes topic to "mitaka-3 feature freeze on FEB 29 - please prioritize reviews accordingly! \| Mitaka-3: https://launchpad.net/keystone/+milestone/mitaka-3"		12:03
*** smurke has quit IRC		12:04
*** bradjones has joined #openstack-keystone		12:04
*** bradjones has quit IRC		12:04
*** bradjones has joined #openstack-keystone		12:04
*** zzzeek has joined #openstack-keystone		12:04
*** mtreinish has joined #openstack-keystone		12:04
*** hugokuo has joined #openstack-keystone		12:04
*** tellesnobrega has joined #openstack-keystone		12:04
*** tsufiev has joined #openstack-keystone		12:04
*** bjornar has joined #openstack-keystone		12:04
*** hogepodge has joined #openstack-keystone		12:04
*** breton has joined #openstack-keystone		12:04
*** smurke has joined #openstack-keystone		12:04
*** trey has joined #openstack-keystone		12:04
*** x58 has joined #openstack-keystone		12:05
*** htruta has joined #openstack-keystone		12:06
*** sdake has joined #openstack-keystone		12:06
*** afazekas has joined #openstack-keystone		12:07
*** x58 has quit IRC		12:07
*** trey has quit IRC		12:07
*** hogepodge has quit IRC		12:07
*** trey has joined #openstack-keystone		12:07
*** tsymancz1k has joined #openstack-keystone		12:09
*** _fortis has joined #openstack-keystone		12:11
*** bdossant has quit IRC		12:11
*** bdossant has joined #openstack-keystone		12:11
*** mnaser has joined #openstack-keystone		12:12
*** clenimar has joined #openstack-keystone		12:14
*** Guest45178 has quit IRC		12:17
*** henrynash has quit IRC		12:18
*** dansmith has joined #openstack-keystone		12:20
*** dansmith is now known as Guest14304		12:20
*** mvk has quit IRC		12:24
*** rdo has quit IRC		12:24
*** gus has quit IRC		12:24
*** cloudnull has quit IRC		12:24
*** ryanpetrello has quit IRC		12:24
*** nonameentername has quit IRC		12:24
*** rodrigods has quit IRC		12:24
*** DuncanT has quit IRC		12:24
*** rudolfvriend has quit IRC		12:24
*** skoude has quit IRC		12:24
*** odyssey4me has quit IRC		12:24
*** nkinder has quit IRC		12:24
*** huats_ has quit IRC		12:24
*** Anticimex has quit IRC		12:24
*** kragniz has quit IRC		12:24
*** DinaBelova has quit IRC		12:24
*** boltR has quit IRC		12:24
*** Nakato has quit IRC		12:24
*** wasmum- has quit IRC		12:24
*** daemontool has quit IRC		12:24
*** d0ugal has quit IRC		12:24
*** iurygregory has quit IRC		12:24
*** dgonzalez has quit IRC		12:24
*** andreaf has quit IRC		12:24
*** stevemar has quit IRC		12:24
*** haneef has quit IRC		12:24
*** jidar has quit IRC		12:24
*** tristanC has quit IRC		12:24
*** BlackDex has quit IRC		12:24
*** jamielennox has quit IRC		12:24
*** zigo has quit IRC		12:24
*** adam_g has quit IRC		12:24
*** mhu has quit IRC		12:24
*** boltR has joined #openstack-keystone		12:25
*** huats_ has joined #openstack-keystone		12:25
*** huats_ has quit IRC		12:25
*** huats_ has joined #openstack-keystone		12:25
*** skoude has joined #openstack-keystone		12:25
*** odyssey4me has joined #openstack-keystone		12:25
*** dgonzalez has joined #openstack-keystone		12:25
*** rudolfvriend has joined #openstack-keystone		12:25
*** rodrigods has joined #openstack-keystone		12:25
*** Anticimex has joined #openstack-keystone		12:25
*** daemontool has joined #openstack-keystone		12:25
*** gus has joined #openstack-keystone		12:25
*** tristanC has joined #openstack-keystone		12:25
*** andreaf has joined #openstack-keystone		12:25
*** iurygregory has joined #openstack-keystone		12:25
*** rdo has joined #openstack-keystone		12:25
*** mhu has joined #openstack-keystone		12:25
*** Nakato has joined #openstack-keystone		12:25
*** cloudnull has joined #openstack-keystone		12:25
*** nonameentername has joined #openstack-keystone		12:25
*** ryanpetrello has joined #openstack-keystone		12:25
*** BlackDex has joined #openstack-keystone		12:25
*** mvk has joined #openstack-keystone		12:25
*** kragniz has joined #openstack-keystone		12:25
*** haneef has joined #openstack-keystone		12:25
*** DinaBelova has joined #openstack-keystone		12:25
*** adam_g has joined #openstack-keystone		12:25
*** stevemar has joined #openstack-keystone		12:25
*** adam_g has quit IRC		12:25
*** adam_g has joined #openstack-keystone		12:25
*** d0ugal has joined #openstack-keystone		12:25
*** mvk has quit IRC		12:25
*** mvk has joined #openstack-keystone		12:25
*** mariusv has joined #openstack-keystone		12:25
*** zigo has joined #openstack-keystone		12:26
*** nkinder has joined #openstack-keystone		12:26
*** mariusv is now known as Guest45229		12:26
*** jidar has joined #openstack-keystone		12:26
*** wasmum has joined #openstack-keystone		12:27
*** jamielennox has joined #openstack-keystone		12:30
*** ChanServ sets mode: +v jamielennox		12:30
*** navid_ has joined #openstack-keystone		12:32
*** dolphm_ has joined #openstack-keystone		12:32
*** ChanServ sets mode: +o dolphm_		12:32
*** raorn_ has joined #openstack-keystone		12:32
*** smcginnis has quit IRC		12:32
*** hockeynut has quit IRC		12:32
*** Guest5506 has quit IRC		12:32
*** dolphm has quit IRC		12:32
*** mgagne has quit IRC		12:32
*** yarkot has quit IRC		12:32
*** mhickey has quit IRC		12:32
*** raorn has quit IRC		12:32
*** jlvillal has quit IRC		12:32
*** jraim has quit IRC		12:32
*** patchbot has quit IRC		12:32
*** jrist has quit IRC		12:32
*** navidp has quit IRC		12:32
*** david8hu has quit IRC		12:32
*** miguelgrinberg has quit IRC		12:32
*** errr_ has quit IRC		12:32
*** rmstar has quit IRC		12:32
*** e0ne has quit IRC		12:32
*** EmilienM has quit IRC		12:32
*** tpeoples has quit IRC		12:32
*** agireud has quit IRC		12:32
*** wanghua has quit IRC		12:32
*** openstackgerrit_ has quit IRC		12:32
*** openstackgerrit has quit IRC		12:32
*** BAKfr has quit IRC		12:32
*** ngupta has quit IRC		12:32
*** dmsimard has quit IRC		12:32
*** tjcocozz has quit IRC		12:32
*** hughsaunders has quit IRC		12:32
*** ayoung has quit IRC		12:32
*** Dave has quit IRC		12:32
*** pkarikh has quit IRC		12:32
*** eglute has quit IRC		12:32
*** martinus__ has quit IRC		12:32
*** eglute_s has joined #openstack-keystone		12:32
*** mgagne_ has joined #openstack-keystone		12:32
*** mgagne_ has quit IRC		12:32
*** mgagne_ has joined #openstack-keystone		12:32
*** pkarikh_ has joined #openstack-keystone		12:32
*** dolphm_ is now known as dolphm		12:32
*** ayoung has joined #openstack-keystone		12:32
*** ChanServ sets mode: +v ayoung		12:32
*** smcginnis has joined #openstack-keystone		12:32
*** rmstar has joined #openstack-keystone		12:32
*** david8hu has joined #openstack-keystone		12:32
*** mhickey has joined #openstack-keystone		12:32
*** mhickey has quit IRC		12:32
*** mhickey has joined #openstack-keystone		12:32
*** errr has joined #openstack-keystone		12:32
*** e0ne has joined #openstack-keystone		12:32
*** jrist has joined #openstack-keystone		12:33
*** dmsimard has joined #openstack-keystone		12:33
*** Dave has joined #openstack-keystone		12:33
*** hughsaunders has joined #openstack-keystone		12:33
*** BAKfr has joined #openstack-keystone		12:33
*** openstackgerrit has joined #openstack-keystone		12:33
*** openstackgerrit_ has joined #openstack-keystone		12:33
*** med_ has joined #openstack-keystone		12:33
*** med_ is now known as Guest37570		12:33
*** patchbot has joined #openstack-keystone		12:34
*** jlvillal has joined #openstack-keystone		12:34
*** tjcocozz has joined #openstack-keystone		12:36
*** hockeynut has joined #openstack-keystone		12:36
*** miguelgrinberg has joined #openstack-keystone		12:36
*** mvk has quit IRC		12:36
*** EmilienM has joined #openstack-keystone		12:36
*** yarkot has joined #openstack-keystone		12:37
*** ngupta has joined #openstack-keystone		12:37
*** martinus__ has joined #openstack-keystone		12:37
*** agireud has joined #openstack-keystone		12:38
*** DuncanT has joined #openstack-keystone		12:41
openstackgerrit	Alexander Makarov proposed openstack/keystone: Enable support for posixGroups in LDAP https://review.openstack.org/258528	12:41
amakarov	bknudson_, ^	12:41
*** gordc has joined #openstack-keystone		12:42
openstackgerrit	Dave Chen proposed openstack/keystone: encode user id for notifications https://review.openstack.org/280542	12:42
*** mvk has joined #openstack-keystone		12:48
*** spandhe has joined #openstack-keystone		12:50
*** tpeoples has joined #openstack-keystone		12:51
*** jraim has joined #openstack-keystone		12:51
*** andrewbogott has quit IRC		12:53
*** dgonzalez has left #openstack-keystone		12:54
*** daemontool has quit IRC		12:55
*** BrAsS_mOnKeY has quit IRC		12:56
*** wanghua has joined #openstack-keystone		12:56
*** BrAsS_mOnKeY has joined #openstack-keystone		12:57
*** alejandrito has joined #openstack-keystone		13:02
htruta	ayoung: first patch of reseller phase 1. You've alredy +2 it before: https://review.openstack.org/#/c/264533/	13:03
patchbot	htruta: https://review.openstack.org/#/c/264533/ - keystone - Allow project domain_id to be nullable at the mana...	13:03
htruta	so, we have a patchbot now. cool	13:03
*** Guest10770 is now known as zeus`		13:04
*** zeus` is now known as zeus		13:04
*** zeus has quit IRC		13:04
*** zeus has joined #openstack-keystone		13:04
*** daemontool has joined #openstack-keystone		13:09
*** raildo-afk is now known as raildo		13:09
*** henrynash has joined #openstack-keystone		13:15
*** ChanServ sets mode: +v henrynash		13:15
*** fawadkhaliq has quit IRC		13:17
*** EinstCrazy has quit IRC		13:17
*** henrynash has quit IRC		13:20
*** dims_ has joined #openstack-keystone		13:20
*** dims has quit IRC		13:21
*** raildo is now known as raildo-afk		13:24
*** daemontool_ has joined #openstack-keystone		13:25
*** daemontool has quit IRC		13:29
*** markvoelker has joined #openstack-keystone		13:29
*** zeus has quit IRC		13:29
*** raildo-afk is now known as raildo		13:29
*** dims_ has quit IRC		13:29
*** ninag has joined #openstack-keystone		13:30
*** dave-mccowan has joined #openstack-keystone		13:33
*** zeus has joined #openstack-keystone		13:37
*** zeus is now known as Guest49728		13:37
*** Guest49728 is now known as zeus		13:38
*** zeus has quit IRC		13:38
*** zeus has joined #openstack-keystone		13:38
*** su_zhang has joined #openstack-keystone		13:42
*** fawadkhaliq has joined #openstack-keystone		13:42
*** doug-fish has quit IRC		13:44
*** dhellmann has quit IRC		13:44
*** dims has joined #openstack-keystone		13:45
*** dhellmann has joined #openstack-keystone		13:47
*** spandhe_ has joined #openstack-keystone		13:53
*** spandhe has quit IRC		13:55
*** spandhe_ is now known as spandhe		13:55
*** x58 has joined #openstack-keystone		14:00
*** hogepodge has joined #openstack-keystone		14:00
*** rodrigods has quit IRC		14:01
*** ChanServ sets mode: +o stevemar		14:01
*** rodrigods has joined #openstack-keystone		14:02
*** x58 is now known as Guest8151		14:02
*** spandhe has quit IRC		14:03
*** edmondsw has joined #openstack-keystone		14:04
*** LukeH has joined #openstack-keystone		14:06
*** spandhe has joined #openstack-keystone		14:06
*** LukeH has quit IRC		14:07
*** dims has quit IRC		14:09
*** dims has joined #openstack-keystone		14:10
*** ninag has quit IRC		14:10
*** ninag has joined #openstack-keystone		14:11
*** ayoung has quit IRC		14:12
*** ninag has quit IRC		14:15
*** ninag has joined #openstack-keystone		14:15
*** su_zhang has quit IRC		14:18
*** ninag has quit IRC		14:20
*** jaosorior has quit IRC		14:20
*** GB21 has quit IRC		14:21
*** jaosorior has joined #openstack-keystone		14:21
*** bdossant_ has joined #openstack-keystone		14:22
*** ninag has joined #openstack-keystone		14:23
*** jsavak has joined #openstack-keystone		14:23
*** Guest14304 is now known as dansmith		14:24
*** dansmith is now known as Guest84411		14:25
*** bdossant has quit IRC		14:26
*** Guest84411 is now known as dansmith		14:27
*** ninag has quit IRC		14:28
*** doug-fish has joined #openstack-keystone		14:28
*** ebalduf has joined #openstack-keystone		14:30
*** GB21 has joined #openstack-keystone		14:31
*** andrewbogott has joined #openstack-keystone		14:32
*** spandhe has quit IRC		14:33
*** andrewbogott has quit IRC		14:33
*** wanghua has quit IRC		14:34
*** dims_ has joined #openstack-keystone		14:35
*** dims has quit IRC		14:36
*** bdossant_ has quit IRC		14:36
*** slberger has joined #openstack-keystone		14:52
*** pushkaru has joined #openstack-keystone		14:53
*** flaper87 has quit IRC		14:54
*** flaper87 has joined #openstack-keystone		14:54
openstackgerrit	Raildo Mascena proposed openstack/keystone: Simplify repetitive unequal checks https://review.openstack.org/281305	14:57
*** GB21 has quit IRC		14:57
*** ebalduf has quit IRC		14:58
*** Guest22953 is now known as mfisch		14:58
*** shoutm has joined #openstack-keystone		14:59
*** mfisch is now known as Guest32940		14:59
*** shoutm has quit IRC		14:59
*** shoutm_ has quit IRC		14:59
*** josecastroleon has joined #openstack-keystone		15:00
*** dims_ has quit IRC		15:03
notmorgan	htruta: yep. i asked notmyname to add the patchbot to the channel	15:03
notmorgan	htruta: it seemed useful	15:03
*** spandhe has joined #openstack-keystone		15:04
*** dhellmann has quit IRC		15:05
*** dhellmann has joined #openstack-keystone		15:05
*** Nirupama has quit IRC		15:07
*** dims has joined #openstack-keystone		15:09
*** sigmavirus24_awa is now known as sigmavirus24		15:11
*** daemontool_ has quit IRC		15:16
*** tellesnobrega has left #openstack-keystone		15:16
*** shoutm has joined #openstack-keystone		15:21
*** jasonsb has joined #openstack-keystone		15:26
*** ChanServ sets mode: +v topol_		15:28
*** topol_ is now known as topol		15:28
*** timcline has quit IRC		15:29
*** sdake has quit IRC		15:35
*** sdake has joined #openstack-keystone		15:37
*** daemontool has joined #openstack-keystone		15:38
*** timcline has joined #openstack-keystone		15:42
*** timcline has quit IRC		15:43
*** timcline has joined #openstack-keystone		15:43
*** su_zhang has joined #openstack-keystone		15:43
*** ebalduf has joined #openstack-keystone		15:46
openstackgerrit	werner mendizabal proposed openstack/keystone: Time-based One-time Password https://review.openstack.org/274901	15:50
*** ninag has joined #openstack-keystone		15:51
*** andrewbogott has joined #openstack-keystone		15:55
*** andrewbogott has quit IRC		15:55
*** andrewbogott has joined #openstack-keystone		15:55
mc_nair	anyone here familiar with "projects acting as a domain at the top of the project hierarchy"? I'm trying to sift through http://lists.openstack.org/pipermail/openstack-dev/2016-February/086735.html and see it's implications to the Cinder Nested quota support	15:57
mc_nair	and I don't see Henry Nash on currently	15:57
smcginnis	mc_nair: He must be in Europe. I saw some discussion on here last night about it.	15:58
stevemar	smcginnis: he does live in the UK	15:58
*** annasort has joined #openstack-keystone		15:59
smcginnis	stevemar: Ah, thanks!	15:59
stevemar	mc_nair: smcginnis but samueldmq is familiar with it	15:59
mc_nair	stevemar: ah thanks	16:00
mc_nair	samueldmq - you have time to discuss a few things on ^^?	16:00
htruta	notmorgan: nice!	16:01
*** jsavak has quit IRC		16:02
*** phalmos has joined #openstack-keystone		16:03
*** jsavak has joined #openstack-keystone		16:03
*** daemontool has quit IRC		16:06
*** daemontool has joined #openstack-keystone		16:07
*** petertr7 is now known as petertr7_away		16:08
*** _cjones_ has joined #openstack-keystone		16:08
*** _cjones_ has quit IRC		16:08
*** daemontool_ has joined #openstack-keystone		16:12
*** Guest40431 is now known as jgriffith		16:12
*** jgriffith is now known as Guest2815		16:13
*** petertr7_away is now known as petertr7		16:13
*** daemontool has quit IRC		16:14
*** Guest2815 is now known as jgriffith		16:15
*** phalmos has quit IRC		16:17
navid_	:q	16:17
*** phalmos has joined #openstack-keystone		16:17
openstackgerrit	Brant Knudson proposed openstack/keystone: Move admin_token_auth before build_auth_context in sample paste.ini https://review.openstack.org/281372	16:20
*** shoutm has quit IRC		16:21
*** Guest46279 is now known as redrobot		16:22
*** daemontool__ has joined #openstack-keystone		16:24
openstackgerrit	Raildo Mascena proposed openstack/keystone: Avoid using `len(x)` to check if x is empty https://review.openstack.org/281374	16:25
*** daemontool_ has quit IRC		16:26
openstackgerrit	werner mendizabal proposed openstack/keystone: Time-based One-time Password https://review.openstack.org/274901	16:27
*** daemontool__ has quit IRC		16:28
*** jsavak has quit IRC		16:32
*** jsavak has joined #openstack-keystone		16:33
*** Guest32940 is now known as mfisch		16:34
*** mfisch has quit IRC		16:34
*** mfisch has joined #openstack-keystone		16:34
*** richm has joined #openstack-keystone		16:35
*** pcaruana has quit IRC		16:35
*** ebalduf has quit IRC		16:37
*** rm_work has quit IRC		16:37
*** rm_work has joined #openstack-keystone		16:37
samueldmq	stevemar: mc_nair hi I am here now	16:43
samueldmq	mc_nair: what's up?	16:44
*** mgagne_ is now known as mgagne		16:45
samueldmq	stevemar: may we update https://blueprints.launchpad.net/keystone/+spec/service-provider-filters ?	16:46
samueldmq	stevemar: so it disappear from our m-3 list (according to yesterday's discussion in the meeting)	16:47
mc_nair	samueldmq: so for projects acting as a domain at the top of the project hierarchy - does this mean that the parent_hierarchy of a project could change? (was reading over http://lists.openstack.org/pipermail/openstack-dev/2016-February/086762.html trying to see how it affects nested quotas)	16:48
mc_nair	samueldmq: also do you know which Cinder tempest tests were failing that are referred to in that thread?	16:49
*** su_zhang has quit IRC		16:49
samueldmq	mc_nair: yes, so the issue is basically a project that was only under a domain (had no parent project), now has	16:49
samueldmq	mc_nair: look at the logs of https://review.openstack.org/#/c/231289, you should be able to go from there	16:50
tjcocozz	bknudson_, Could you help me walk through more code? :)	16:50
samueldmq	tjcocozz: :)	16:50
bknudson_	tjcocozz: what's the code?	16:50
tjcocozz	bknudson_, keystoneclient	16:51
mc_nair	samueldmq: thanks, will start by poking through those and will almost certainly have questions for you ;)	16:51
bknudson_	tjcocozz: that's a lot of code	16:51
*** jbell8 has joined #openstack-keystone		16:51
samueldmq	mc_nair: please come and ask, I will be glad to help (having the answers myself or asking someone else)	16:51
tjcocozz	bknudson_, yeah it is it has to do with how find_resource assebles the url	16:51
bknudson_	tjcocozz: anything specific?	16:52
tjcocozz	bknudson_, I guess i am confused on how the users id is appended to the url. can i stop by your office?	16:53
bknudson_	tjcocozz: sure.	16:54
*** belmoreira has joined #openstack-keystone		16:54
bknudson_	anybody here can stop by my office any time.	16:54
tjcocozz	bknudson_, be over in 1 minute	16:54
notmorgan	TIL bknudson_ has an office.	16:54
bknudson_	notmorgan: stop by any time.	16:54
notmorgan	hehe	16:54
bknudson_	you might need a badge.	16:54
*** boris-42 has joined #openstack-keystone		16:55
samueldmq	stevemar: notmorgan: bknudson_: dstanek: so there is something related to reseller I'd liek to get your view on	16:56
stevemar	notmorgan: i can hook you up with a badge	16:56
stevemar	samueldmq: shoot	16:56
samueldmq	is it okay to change the return of an API ?	16:56
*** gyee has joined #openstack-keystone		16:56
*** ChanServ sets mode: +v gyee		16:56
samueldmq	projects that used to be in the top of a domain (so had no parents) now have, because domain became a project	16:57
notmorgan	stevemar: i have a badge... it's from a job i had like 5 years ago. think it will work? bknudson_ wasn't asserting it had t be an IBM one.	16:57
*** roxanaghe has joined #openstack-keystone		16:57
*** diazjf has joined #openstack-keystone		16:57
samueldmq	that change the API return, and break people who made p.parents==[] to verify root	16:57
bknudson_	samueldmq: please review the api stability guidelines: http://specs.openstack.org/openstack/api-wg/guidelines/evaluating_api_changes.html	16:57
samueldmq	bknudson_: perfect	16:57
openstackgerrit	Jeremy Stanley proposed openstack/keystone: DO NOT MERGE: testing bindep-based jobs https://review.openstack.org/281397	16:58
samueldmq	bknudson_: we have patches changing it, and I am not sure it's correct, I will look at that	16:58
* samueldmq alaways looks at DO NOT MERGE and DO NOT REVIEW patches		16:58
samueldmq	:-)	16:58
stevemar	:)	16:58
notmorgan	the change to the api data isn't really listed	16:59
bknudson_	what is fungi trying to hide.	16:59
notmorgan	sooo	16:59
samueldmq	hehe	16:59
notmorgan	it's somewhere between conditionally ok and not ok	16:59
stevemar	samueldmq: so before this, top level projects would have parent_id = None	16:59
samueldmq	notmorganChanging or removing a property in a resource representation.	17:00
samueldmq	notmorgan: "Changing or removing a property in a resource representation."	17:00
stevemar	and after this change, they'll have parent_id = (id of domain (default or otherwise))	17:00
notmorgan	samueldmq: we're not changing the property, removing it, or the represenation	17:00
samueldmq	notmorgan: but I guess this refers to change the property type, etc	17:00
notmorgan	yep	17:00
notmorgan	it's a change of the data itself.	17:00
samueldmq	++	17:00
samueldmq	stevemar: yes they did	17:00
stevemar	notmorgan: it's a change to the data	17:00
samueldmq	stevemar: yes, the domain they are within becomes a project, then a parent	17:01
notmorgan	stevemar: which isn't covered in the guidance	17:01
stevemar	i think it'll be confusing	17:01
openstackgerrit	Jeremy Stanley proposed openstack/python-keystoneclient: DO NOT MERGE: testing bindep-based jobs https://review.openstack.org/281413	17:01
notmorgan	i kindof want to merge that patch ^	17:01
stevemar	i'll think i am working on a subproject	17:01
samueldmq	stevemar: but may be acceptable since no one except cinder is having trouble with the change	17:01
mc_nair	samueldmq: well that's going to make it tougher to support NestedQuotas	17:02
samueldmq	stevemar: done, +2+A ^	17:02
mc_nair	cause now basically we need to check which Keystone version we're talking to in order to decide whether to interpret top most project as domain or real parent	17:02
*** su_zhang has joined #openstack-keystone		17:02
samueldmq	mc_nair: why? didn't you do it already ? v2 doesn't know about parent projects	17:03
samueldmq	mc_nair: you need to check you're using v3 anyways don't you ?	17:03
*** phalmos has quit IRC		17:03
notmorgan	uhm, a domain will still have no parent to the API	17:03
notmorgan	the top level project in a domain will have a parent	17:03
samueldmq	notmorgan: yes, and it hadn't before	17:04
notmorgan	if you're saing the top project is a domain today, your logic, is unfortunately wrong	17:04
samueldmq	notmorgan: so cinder needs to update the way they check if a project is top level, that's all	17:04
notmorgan	it's still a project	17:04
samueldmq	iirc the issue is that to change the quota of a child you need permission on the parent	17:05
samueldmq	before it had no parent so quota update was authorized	17:05
notmorgan	project parent_id will be it's domain_id	17:05
notmorgan	in the case of if it is a top level	17:05
samueldmq	now it has parent (the domain project) and the user hasn't authorization	17:05
samueldmq	so existing tests are failing	17:05
samueldmq	mc_nair: ^	17:05
notmorgan	you can simply check: parent == none or parent == domain_id	17:05
notmorgan	erm project_domain_id	17:05
samueldmq	notmorgan: ++ just switch from p.parents == [] to (p.domain_id == p.parent_id) right ?	17:06
mc_nair	samueldmq: so we do need to check if it's v3 in order to decide whether a project can even have a parent or not, but now basically there could be systems running older Keystone v3 where a top level parent will have no parent, and then with this change now a top level parent would be equal domain_id	17:06
mc_nair	sorry for slow responses, just trying to get up to speed on this	17:06
notmorgan	samueldmq: for multiple versions of keysotne: p.parents == [] or p.domain_id == p.parent_id	17:07
samueldmq	mc_nair: ^	17:07
mc_nair	notmorgan: ok that may solve the issue then	17:07
*** e0ne has quit IRC		17:07
notmorgan	mc_nair: yes. v2 projects should not have parents at all	17:07
notmorgan	ever	17:07
notmorgan	if it suddenly does we need to not do that for v2 interface.	17:07
notmorgan	or if we already do... ugh :(	17:08
samueldmq	I don't think we do, actually parent_id was being shown in v2 somewhen, but it has been fixed before hmt was released iirc	17:08
notmorgan	mc_nair: i would probably do "if not p.parents or (v3 and p.domain_id == p.parent_id)	17:09
notmorgan	will need v3 check somewhere in there.	17:09
mc_nair	notmorgan: ok - I'm following now. So basically with the changes, now top level project will have it's parent be the domain_id, but when we retrieve a project we'll still get a "domain_id" with it and can compare the parent with domain_id to check if it's top level project	17:09
notmorgan	yep	17:10
mc_nair	notmorgan: yea, we already have the v3 check	17:10
notmorgan	that should be the case	17:10
*** phalmos has joined #openstack-keystone		17:10
mc_nair	was just initially worried we wouldn't be able to differentiate between a parent project and a parent domain	17:10
mc_nair	but you've eased my fears	17:10
mc_nair	well some of them :)	17:10
notmorgan	also if you ever receive a project with no parent, it is in-fact a domain.	17:10
*** navid_ is now known as navidp		17:10
notmorgan	but it should also say "is_domain: True"	17:11
samueldmq	mc_nair: notmorgan: and actually this should ease things, because I suppose we want the domain admin to set the quotas of first level projects	17:11
*** su_zhang has quit IRC		17:12
*** pgbridge has joined #openstack-keystone		17:12
*** pnavarro has quit IRC		17:14
mc_nair	so fwiw, we have this in flight... https://review.openstack.org/#/c/274825/ which will make it so that you opt-into NestedQuotas instead of getting them by default (and also fixes a few other minor issues)	17:14
patchbot	mc_nair: https://review.openstack.org/#/c/274825/ - cinder - Split out NestedQuotas into a separate driver	17:14
*** petertr7 is now known as petertr7_away		17:15
mc_nair	I'll need to add a follow up once the domain acting as top level project lands (along the lines of what notmorgan pointed out) - which shouldn't be bad, I just need to make sure that change gets added	17:15
samueldmq	mc_nair: it will, but it will need cinder change to get merged	17:16
*** aginwala has joined #openstack-keystone		17:16
samueldmq	mc_nair: ans the gates will keep failing withouth the update from cinder	17:16
mc_nair	samueldmq: I'm taking a look at the logs now, but I think that the patch above will make it so it stops being blocked from merging	17:17
mc_nair	samueldmq: but not really in a good way, it would just make it so the NestedQuota driver isn't getting flexed by default (which I need to change)	17:17
samueldmq	mc_nair: cool so make nested quotas disabled by default	17:18
samueldmq	mc_nair: you want to make that the default for the release	17:18
samueldmq	mc_nair: or juts to make our patch pass	17:18
samueldmq	?	17:18
mc_nair	samueldmq: we wanted to not make nested quotas the default (at least until we're able to finish stabilizing the feature)	17:18
samueldmq	mc_nair: makes sense	17:19
samueldmq	mc_nair: was it released in L already ?	17:19
mc_nair	one of the big reasons we were disabling it, is because anytime we need to enforce a quota (e.g. create volume in Cinder) and we're using nested quotas with default quotas, we'd need to grab the project. Without the Keystone fix that recently merged it'd mean you basically couldn't do any ops in Cinder without pulling that latest policy.json file	17:20
mc_nair	samueldmq: yea :/ but it's got a lot of bugs and we're recommending avoiding it. So it's been a bit of a scramble trying to throw stuff in before Mitaka	17:21
samueldmq	mc_nair: ++	17:21
samueldmq	mc_nair: it will also help if we get more adoption next cycle from other projects like nova	17:22
*** mvk has quit IRC		17:23
*** mhickey has quit IRC		17:25
*** belmoreira has quit IRC		17:25
mc_nair	samueldmq: yea, my hope is that we can fix some of the issues this cycle for Cinder, then use this as a launching point for cross-project nested quota support	17:28
samueldmq	mc_nair: ++	17:29
openstackgerrit	werner mendizabal proposed openstack/keystone: Time-based One-time Password https://review.openstack.org/274901	17:30
samueldmq	mc_nair: I think we should be able to get the core logic for nest quota management as a common code (oslo) and each project should be able to plug it according to their databases	17:30
*** sigmavirus24 has quit IRC		17:30
samueldmq	mc_nair: but let's see how it goes	17:30
*** aginwala_ has joined #openstack-keystone		17:31
mc_nair	samueldmq: totally agree. We're just blazing ahead in a semi-out-of-control fashion in Cinder since this was released in Liberty :)	17:31
*** aginwala has quit IRC		17:32
*** andrewbogott has quit IRC		17:33
samueldmq	mc_nair: ++	17:33
samueldmq	mc_nair: good conversation, feel free to ask anything else you want/need	17:33
*** DuncanT has quit IRC		17:34
*** daemontool has joined #openstack-keystone		17:34
*** rudolfvriend has quit IRC		17:34
*** darrenc has quit IRC		17:34
*** Nakato has quit IRC		17:34
*** zigo has quit IRC		17:34
*** BrAsS_mOnKeY has quit IRC		17:34
*** yarkot has quit IRC		17:34
*** wasmum has quit IRC		17:34
*** mhu has quit IRC		17:34
mc_nair	samueldmq: yes, it was super helpful to me. I'll try to summarize this in a mailing list response. Main thing is I need to make sure to follow up with what notmorgan suggested and add-back the Tempest coverage once NestedQuotaDriver is not default before I get yelled at	17:35
*** jamielennox has quit IRC		17:35
*** hockeynut has quit IRC		17:35
*** errr has quit IRC		17:35
*** mgagne has quit IRC		17:35
*** eglute_s has quit IRC		17:35
*** raorn_ has quit IRC		17:35
*** ryanpetrello has quit IRC		17:35
*** BlackDex has quit IRC		17:35
*** lbragstad_ has quit IRC		17:35
*** d34dh0r53 has quit IRC		17:35
*** darrenc has joined #openstack-keystone		17:35
*** spandhe_ has joined #openstack-keystone		17:35
*** dtroyer has quit IRC		17:36
*** zigo has joined #openstack-keystone		17:36
*** Nakato has joined #openstack-keystone		17:37
*** spandhe has quit IRC		17:37
*** spandhe_ is now known as spandhe		17:37
*** aginwala_ has quit IRC		17:38
openstackgerrit	Roxana Gherle proposed openstack/keystone: Update websso doc with WEBSSO_KEYSTONE_URL option https://review.openstack.org/280974	17:38
*** DuncanT has joined #openstack-keystone		17:39
*** eglute has joined #openstack-keystone		17:39
*** hockeynut has joined #openstack-keystone		17:39
*** mgagne has joined #openstack-keystone		17:39
*** lbragstad_ has joined #openstack-keystone		17:39
*** ryanpetrello has joined #openstack-keystone		17:39
*** d34dh0r53 has joined #openstack-keystone		17:39
*** dtroyer has joined #openstack-keystone		17:39
*** mhu has joined #openstack-keystone		17:40
*** BrAsS_mOnKeY has joined #openstack-keystone		17:40
*** errr has joined #openstack-keystone		17:40
*** wasmum has joined #openstack-keystone		17:40
*** josecastroleon has quit IRC		17:41
*** josecastroleon has joined #openstack-keystone		17:42
*** sigmavirus24 has joined #openstack-keystone		17:42
*** raorn has joined #openstack-keystone		17:43
*** BlackDex has joined #openstack-keystone		17:43
*** jamielennox has joined #openstack-keystone		17:44
*** ChanServ sets mode: +v jamielennox		17:44
samueldmq	mc_nair: ++	17:44
*** andrewbogott has joined #openstack-keystone		17:45
*** lhcheng has joined #openstack-keystone		17:50
*** ChanServ sets mode: +v lhcheng		17:50
*** mylu has joined #openstack-keystone		17:50
*** browne has joined #openstack-keystone		17:53
*** lhcheng has quit IRC		17:55
*** daemontool_ has joined #openstack-keystone		17:55
*** e0ne has joined #openstack-keystone		17:57
*** su_zhang has joined #openstack-keystone		17:57
*** daemontool has quit IRC		17:57
*** su_zhang has quit IRC		17:57
*** su_zhang has joined #openstack-keystone		17:57
stevemar	where's ayoung today :O	17:58
*** edmondsw has quit IRC		18:00
samueldmq	ay<TAB><TAB><TAB><TAB><TAB><TAB><TAB>	18:01
samueldmq	arrgh	18:01
*** jsavak has quit IRC		18:05
notmorgan	stevemar: sleeping?	18:06
*** jsavak has joined #openstack-keystone		18:06
notmorgan	stevemar: so... going to bug you here to join in, samueldmq same, but i just got my tentative approval for the OSIC 66 baremetal nodes. so i can run a keystone test.	18:07
*** petertr7_away is now known as petertr7		18:07
notmorgan	how far do you think we can push keystone?	18:08
notmorgan	;)	18:08
*** woodster_ has joined #openstack-keystone		18:08
samueldmq	notmorgan: running the unit tests ? what's the current record in timing ? :)	18:09
notmorgan	not unit tests	18:09
notmorgan	put real load on keystone, scaled out	18:09
notmorgan	and look at how things are impacted when running sub-url vs. non-sub-url, and with ksm accepting auth-offload [basically the phase 1 policy thing]	18:09
notmorgan	and we have 66 bare metal nodes to carve up and use.	18:10
notmorgan	we will have*	18:10
samueldmq	notmorgan: oh wow that's great	18:10
notmorgan	will have it for 2-3 weeks	18:10
samueldmq	notmorgan: from ?	18:10
notmorgan	Rackspace and Intel, this is from the OSIC cluster of nodes	18:11
notmorgan	like i said, it was tentative approval, but i'll have details next week	18:11
notmorgan	and more formalized final approval	18:11
stevemar	fyi: dolphm notmorgan bknudson_ gyee dstanek jamielennox topol samueldmq looks like my releases are getting merged -- new versions for pycadf, keystoneauth, keystoneclient and keystonemiddleware. expect these to be the last ones for the mitaka release	18:11
samueldmq	notmorgan: cool, I'm crossing my fingers	18:12
*** josecastroleon has quit IRC		18:12
samueldmq	notmorgan: do you have all the scripts to generate load, etc ?	18:12
notmorgan	stevemar: OMG NO DONT DO THAT! i mean.. let me quickly push a "must have fix" as soon as the tag is pushed... i mean	18:12
stevemar	notmorgan: -_-	18:12
samueldmq	I mean, I think other tests like have been done already	18:12
notmorgan	samueldmq: nope. will need to create those. i am thinking something apachebench and/or rally related	18:12
notmorgan	samueldmq: i am thinking of using bifrost to image the nodes (bifrost = awesomeness for ironic)	18:13
samueldmq	notmorgan: cool, let me know if you need a hand; after this an next week I will have more time (too many reviews until there)	18:13
*** mylu has quit IRC		18:14
notmorgan	samueldmq: it wont be until march sometime	18:14
samueldmq	notmorgan: nice, an opportunity to learn lots of things	18:14
samueldmq	++	18:14
*** e0ne has quit IRC		18:15
notmorgan	:)	18:15
samueldmq	stevemar: ack on the releases	18:15
*** e0ne has joined #openstack-keystone		18:16
*** e0ne has quit IRC		18:17
gyee	stevemar, I too pray for pycadf :)	18:17
gyee	just kidding, it'll be alright	18:18
*** aginwala has joined #openstack-keystone		18:19
*** su_zhang has quit IRC		18:21
*** mylu has joined #openstack-keystone		18:21
*** su_zhang has joined #openstack-keystone		18:21
*** petertr7 is now known as petertr7_away		18:22
*** dan_nguyen has joined #openstack-keystone		18:22
*** jsavak has quit IRC		18:25
openstackgerrit	ayoung proposed openstack/python-keystoneclient: Implied Roles https://review.openstack.org/280983	18:26
*** ayoung has joined #openstack-keystone		18:27
*** ChanServ sets mode: +v ayoung		18:27
dstanek	stevemar: already seeing the emails!	18:27
ayoung	I'd like to point out that this is the standard for a client code review: https://review.openstack.org/#/c/280983/	18:28
patchbot	ayoung: https://review.openstack.org/#/c/280983/ - python-keystoneclient - Implied Roles	18:28
ayoung	See my comment showing you how to test it	18:28
samueldmq	ayoung: here you are ! :)	18:29
stevemar	ayoung: what are you saying about the standard? code + tests :)	18:30
stevemar	ayoung: you probably need a release note there too	18:30
ayoung	samueldmq, had to take my son to the dentist	18:30
samueldmq	ayoung: sure :)	18:30
ayoung	stevemar, for client? Yeah, probably. And documentation, and a speaking tour	18:31
samueldmq	ayoung: I got a request from henrynash to ask you to take a look at https://review.openstack.org/#/c/264533 again	18:31
samueldmq	ayoung: and its child one, you had +2ed them already	18:31
ayoung	samueldmq, I see 3 checkmarks on that reivew...was not quite 1/2 done	18:31
*** dan_nguyen has quit IRC		18:32
ayoung	stevemar, so, there are unit tests in the patch itself, but the review has how to test it live	18:32
ayoung	that needs to be something we put in a better location	18:33
samueldmq	ayoung: cool	18:33
samueldmq	ayoung: (on having it semi reviewed already)	18:33
stevemar	ayoung: was there ever an issue with the standard? IMO we barely have a standard for keystoneclient :P	18:33
ayoung	I had wanted to put these kind of code samples in python-keystoneclient/examples	18:33
ayoung	but last time I tried, people worried that they would bit-rot	18:33
stevemar	ayoung: that's where the effort into functional tests comes in	18:33
ayoung	stevemar, so, function tests need to be intheir own repo	18:34
ayoung	not in Keystone, and not in client	18:34
stevemar	we have a function test dir in keystoneclient https://github.com/openstack/python-keystoneclient/tree/master/keystoneclient/tests/functional	18:34
stevemar	but there are no tests there :(	18:35
samueldmq	stevemar: ayoung: it's on my TODO	18:35
stevemar	samueldmq: i know :)	18:35
ayoung	stevemar, because we need a way to set them up. I suggest Kolla	18:35
samueldmq	:)	18:35
stevemar	samueldmq: i appreciate you prioritizing mitaka-3 work items over it, no worries	18:35
samueldmq	stevemar: will add something there after things to review are more under-control	18:35
samueldmq	stevemar: exactly :)	18:35
stevemar	ayoung: they are setup: http://logs.openstack.org/83/280983/2/check/gate-keystoneclient-dsvm-functional/5780ab6/ they run the old tempest CLI tests	18:36
stevemar	my previous statement about "no tests" was a bit sarcastic	18:36
*** rcernin has quit IRC		18:36
stevemar	we have a grand total of 19 functional tests in keystoneclient: http://logs.openstack.org/83/280983/2/check/gate-keystoneclient-dsvm-functional/5780ab6/testr_results.html.gz	18:37
ayoung	stevemar, OK. Let me see if I can get those to run against Kolla	18:38
stevemar	ayoung: sure, no guarantees it'll work with kolla, this uses devstack to set things up	18:38
*** dan_nguyen has joined #openstack-keystone		18:38
ayoung	stevemar, devstack needs to die	18:39
ayoung	or at least get run in a venv	18:39
ayoung	you can;'t expect people to be pip installing packages on their dev boxes	18:40
ayoung	Kolla has some shortcomings, but they are solvable	18:40
*** jsavak has joined #openstack-keystone		18:42
*** mylu has quit IRC		18:43
*** lhcheng has joined #openstack-keystone		18:44
*** ChanServ sets mode: +v lhcheng		18:44
*** edmondsw has joined #openstack-keystone		18:45
bknudson_	ayoung: http://git.openstack.org/cgit/openstack-dev/devstack/tree/stackrc#n151 -- I haven't tried it	18:45
samueldmq	stevemar: https://review.openstack.org/#/c/243584 should be ready to go	18:46
stevemar	samueldmq: was just about to look at that	18:55
stevemar	samueldmq: i still don't like the block for "_only_allow_enabled_to_update_cascade"	18:55
*** doug-fis_ has joined #openstack-keystone		18:55
stevemar	gyee: you missed the child patches here: https://review.openstack.org/#/c/266989/6	18:56
patchbot	stevemar: patch 266989 - keystone - Use the driver to get limits	18:56
samueldmq	stevemar: so I also had doubts about that too	18:57
samueldmq	stevemar: discussed with tjcocozz at the midcycle	18:57
gyee	stevemar, sure, will take a look later, need to see a dentist and getting my teeth pulled today	18:57
samueldmq	stevemar: it needs to ensure only the enabled attribute is passed in the body	18:58
*** ninag has quit IRC		18:58
*** ninag has joined #openstack-keystone		18:59
stevemar	gyee: ouch, have fun	18:59
stevemar	everyone is seeing dentists today	18:59
*** doug-fish has quit IRC		18:59
*** ninag_ has joined #openstack-keystone		19:00
*** doug-fis_ has quit IRC		19:00
*** browne has quit IRC		19:01
*** browne has joined #openstack-keystone		19:02
*** ninag has quit IRC		19:03
*** doug-fish has joined #openstack-keystone		19:03
samueldmq	stevemar: and what you suggested is true in that code	19:04
stevemar	samueldmq: what did i suggest?	19:04
samueldmq	stevemar: if a parent is enabled and its children disabled, yo ucan simply cascade enabled	19:04
samueldmq	^	19:04
stevemar	nice	19:04
samueldmq	stevemar: yep, L328 is out of the if statement in L318	19:05
samueldmq	stevemar: we may add a test for that case, I can do as a followup if you agree	19:06
*** rcernin has joined #openstack-keystone		19:06
*** mylu has joined #openstack-keystone		19:07
*** doug-fish has quit IRC		19:07
*** lhcheng has quit IRC		19:08
*** josecastroleon has joined #openstack-keystone		19:08
*** ninag_ has quit IRC		19:10
*** ninag has joined #openstack-keystone		19:10
*** ninag has quit IRC		19:10
openstackgerrit	Merged openstack/keystone: Updating sample configuration file https://review.openstack.org/280896	19:11
*** doug-fish has joined #openstack-keystone		19:13
samueldmq	stevemar: I will add it now to that patch	19:15
stevemar	samueldmq: wait	19:15
stevemar	samueldmq: do a follow on, i'm about to approve	19:15
samueldmq	stevemar: cool	19:15
samueldmq	stevemar: thanks	19:16
samueldmq	htruta: ping	19:16
ayoung	Did the diff-ing in Gerrit between reviews get better?	19:17
samueldmq	htruta: https://review.openstack.org/#/c/243585/ and https://review.openstack.org/#/c/244248/ need updates, so they can be re-reviewed and eventually merged	19:17
patchbot	samueldmq: patch 243585 - keystone - API support for project cascade update	19:17
patchbot	samueldmq: patch 244248 - keystone - API support for project cascade delete	19:17
ayoung	I'm not seeing all the extraneeeeous changes now	19:18
samueldmq	htruta: so project-tree-deletion bp will be completed	19:18
samueldmq	ayoung: what was bad ?	19:18
ayoung	samueldmq, if you did a diff, and an unrelated commit came in, you would see that in the later file	19:18
ayoung	it made it unusable. But now	19:18
ayoung	https://review.openstack.org/#/c/264533/11..28	19:19
patchbot	ayoung: patch 264533 - keystone - Allow project domain_id to be nullable at the mana...	19:19
ayoung	its usable	19:19
*** lhcheng has joined #openstack-keystone		19:19
*** ChanServ sets mode: +v lhcheng		19:19
ayoung	not perfect..it might still bring in changes that don;'t come from your patches	19:19
samueldmq	ayoung: is that fixed ? like unrelated commits (merged) don't show in the diffs ?	19:19
*** lhcheng has quit IRC		19:19
ayoung	but not completely randome files...	19:19
samueldmq	ayoung: yes, they still do ++	19:19
ayoung	samueldmq, not fixed, but better	19:20
samueldmq	ayoung: ++	19:20
ayoung	test_sql_upgrade.py still has a lot of other in it	19:20
*** lhcheng has joined #openstack-keystone		19:20
*** ChanServ sets mode: +v lhcheng		19:20
ayoung	htruta, +A	19:21
samueldmq	ayoung: perfect, the one just below it is very very simple	19:22
samueldmq	ayoung: and you had +2ed too	19:22
ayoung	samueldmq, about to +a that one too	19:22
samueldmq	ayoung: awesome	19:22
ayoung	samueldmq, do you really want to hold back https://review.openstack.org/#/c/272369/13 ?	19:23
patchbot	ayoung: patch 272369 - keystone - Add tests in preparation of projects acting as a d...	19:23
ayoung	I think the issues will be dealt with uin follow on patches	19:24
ayoung	and that one lets the next one merge, too	19:24
ayoung	lets focus the effort on getting https://review.openstack.org/#/c/231289/52 done, including whatever test clean up is needed. Deal?	19:24
patchbot	ayoung: patch 231289 - keystone - Projects acting as domains	19:24
htruta	samueldmq: nice. Will do it	19:25
samueldmq	ayoung: ayoung	19:25
samueldmq	ayoung: https://review.openstack.org/#/c/272369/13/keystone/tests/unit/test_v3_resource.py	19:25
patchbot	samueldmq: patch 272369 - keystone - Add tests in preparation of projects acting as a d...	19:25
samueldmq	ayoung: see my question in lines 115-116	19:26
samueldmq	ayoung: the others can be addressed later, but I'd like to get a reply to that question at least	19:26
ayoung	htruta, the question is worth answering	19:26
ayoung	"So a top level project (is_domain) still has a parent_it and domain_id ? Where do they point to ? I thought parent_id should be None; isn't this the intent of https://review.openstack.org/#/c/264533"	19:26
htruta	ayoung: let me see	19:27
EmilienM	ayoung: hey, if you have 5 min today, I need your help on getting puppet-keystone working with latest keystone/master	19:27
ayoung	EmilienM, sure...I think everything merged that you needed	19:27
EmilienM	ayoung: I'm working on https://review.openstack.org/#/c/281273/	19:27
openstackgerrit	Steve Martinelli proposed openstack/keystone: API support for project cascade delete https://review.openstack.org/244248	19:27
patchbot	EmilienM: patch 281273 - puppet-openstack-integration - repos: bump RDO to latest OpenStack commit	19:27
ayoung	EmilienM, https://review.openstack.org/#/c/280467/ is in, and that should work for you. The earlier one was what you really needed, though	19:28
patchbot	ayoung: patch 280467 - keystone - Disable Admin tokens set to None (MERGED)	19:28
ayoung	https://review.openstack.org/#/c/280329/ EmilienM that one	19:28
patchbot	ayoung: patch 280329 - keystone - Re-enable and undeprecate admin_token_auth (MERGED)	19:28
*** petertr7_away is now known as petertr7		19:28
EmilienM	oh maybe my URL does not include that patch	19:28
htruta	ayoung: we don't actually have projects acting as domains with this patch. They'll have no domain_id or parent_id (only the null value stored)	19:29
EmilienM	ayoung: let me check my version of keystone	19:29
*** daemontool_ has quit IRC		19:30
ayoung	htruta, so that check should be that they == "<<null>>" or soemthing?	19:30
htruta	ayoung: we currently do not allow the creation of is_domain=True projects to avoid that type of inconsistency	19:30
*** daemontool_ has joined #openstack-keystone		19:30
htruta	ayoung: once the "Projects acting as domains" patch is merged, parent_id == domain_id == <<null>>	19:31
EmilienM	ayoung: ok... trying again with the latest version	19:31
ayoung	htruta, which should be the case in that test there now, right?	19:31
ayoung	htruta, ah, not yet	19:32
htruta	ayoung: sorry, which test?	19:32
htruta	ayoung: ah, ok	19:32
samueldmq	ayoung: htruta so yes, check assertIsNone for both parent_id and project_id for now	19:32
ayoung	htruta, https://review.openstack.org/#/c/272369/13/keystone/tests/unit/test_v3_resource.py	19:32
patchbot	ayoung: patch 272369 - keystone - Add tests in preparation of projects acting as a d...	19:32
samueldmq	?	19:32
stevemar	co author all the things: https://review.openstack.org/#/c/231289/52	19:32
patchbot	stevemar: patch 231289 - keystone - Projects acting as domains	19:32
samueldmq	stevemar: hehe	19:32
ayoung	stevemar, that should be the norm	19:32
*** jbell8 has quit IRC		19:33
stevemar	ayoung: maybe for some	19:33
ayoung	stevemar, for the big ones	19:33
*** fawadkhaliq has quit IRC		19:33
stevemar	samueldmq: is that patch needed for mitaka? ^	19:34
samueldmq	htruta: ayoung: If both are null, use assertIsNone for both	19:34
samueldmq	stevemar: yes it is, that is the last one	19:34
ayoung	samueldmq, I think he is trying to future proof the patch, though	19:35
samueldmq	stevemar: getting at it is my next step (it is a big one)	19:35
ayoung	because later, it will be "<<null>>"	19:35
htruta	samueldmq, ayoung, correct, will assertIsNone	19:35
htruta	ayoung: the <<null>> is not visible from the api... the API sees None	19:35
samueldmq	ayoung: what htruta said ^	19:35
ayoung	htruta, ah, ok, so still future proof that way	19:35
ayoung	cool. Make the change and we can get that one and the next one in	19:36
htruta	ayoung: the test is wip	19:36
*** pushkaru has quit IRC		19:36
htruta	ayoung: nice. will do	19:36
samueldmq	htruta: just change that ot None, other things can be addressed i na followup	19:36
samueldmq	htruta: can you do it now ? I will leave in a coule of mins	19:36
htruta	samueldmq: I'm on it right now	19:37
*** josecastroleon has quit IRC		19:38
openstackgerrit	Henrique Truta proposed openstack/keystone: Add tests in preparation of projects acting as a domain https://review.openstack.org/272369	19:41
htruta	samueldmq, ayoung: done	19:41
ayoung	https://review.openstack.org/#/c/272369/13..14/keystone/tests/unit/test_v3_resource.py samueldmq	19:42
patchbot	ayoung: patch 272369 - keystone - Add tests in preparation of projects acting as a d...	19:42
ayoung	htruta, cool. And the follow one already had 2 +2s	19:42
htruta	ayoung: will remember today as the reseller day	19:43
* htruta cries		19:43
ayoung	Its been a slog	19:43
ayoung	But we're not there yet...	19:43
htruta	ayoung: getting there!	19:44
ayoung	htruta, wanna rebase the follow on patch so samueldmq and I can re+2	19:44
ayoung	and make sure it flows in, too?	19:44
openstackgerrit	Samuel de Medeiros Queiroz proposed openstack/keystone: Add is_domain filter to v3 list_projects https://review.openstack.org/158398	19:44
samueldmq	ayoung: htruta: I pressed rebase button ^	19:45
htruta	samueldmq: you were faster than me	19:45
samueldmq	ayoung: htruta: approved too	19:45
*** htruta has left #openstack-keystone		19:45
samueldmq	ayoung: he was thrilled (htruta left)	19:46
samueldmq	ehhe	19:46
*** htruta has joined #openstack-keystone		19:46
ayoung	naIRColepsy	19:47
htruta	samueldmq: awesome!	19:47
*** su_zhang has quit IRC		19:47
samueldmq	htruta: ayoung: let's focus on the last one	19:47
samueldmq	htruta: and please submit a follwoup patch fixing the remaining things from other patches	19:47
ayoung	OK...let's let that rebase go through. I'm going to keep on the implied roles client patch work	19:47
*** jasonsb has quit IRC		19:48
samueldmq	htruta: and also API patches for project-tree-deletion	19:48
raildo	samueldmq: he removed the irc menu and doesn't know how adding back XD	19:48
samueldmq	htruta: you might need get help	19:48
samueldmq	raildo: ahah :) too much emotion for him	19:48
* samueldmq goes afk for a bit		19:50
htruta	lol	19:50
*** jbell8 has joined #openstack-keystone		19:53
*** sdake has quit IRC		19:54
*** sdake has joined #openstack-keystone		19:57
*** sdake has quit IRC		19:59
*** sdake has joined #openstack-keystone		19:59
*** petertr7 is now known as petertr7_away		20:01
*** jed56 has quit IRC		20:03
openstackgerrit	Raildo Mascena proposed openstack/keystone: API support for project cascade update https://review.openstack.org/243585	20:11
*** pnavarro has joined #openstack-keystone		20:14
*** gordc has quit IRC		20:15
*** su_zhang has joined #openstack-keystone		20:18
openstackgerrit	Alexander Makarov proposed openstack/keystone: Enable support for posixGroups in LDAP https://review.openstack.org/258528	20:19
amakarov	bknudson_, ^	20:19
*** petertr7_away is now known as petertr7		20:20
stevemar	amakarov: i'm looking too :)	20:20
bknudson_	amakarov: run pep8	20:20
amakarov	bknudson_, pep8: commands succeeded congratulations :)	20:21
bknudson_	if attr_name in('member', 'roleOccupant'): -- maybe it thinks it's a function call?	20:21
*** su_zhang has quit IRC		20:22
amakarov	bknudson_, hmm...	20:23
amakarov	In [1]: 'member' in('member', 'roleOccupant')	20:23
amakarov	Out[1]: True	20:23
amakarov	bknudson_, I'll fix it anyway	20:24
openstackgerrit	Alexander Makarov proposed openstack/keystone: Enable support for posixGroups in LDAP https://review.openstack.org/258528	20:24
mfisch	lhcheng: hello here	20:25
mfisch	hey keystoners, are versionless endpoints in the catalog supported?	20:25
mfisch	horizon seems to have an issue with them	20:25
*** amakarov is now known as amakarov_away		20:26
mfisch	lhcheng: I'll note that other services seem ok, nova, neutron etc	20:26
openstackgerrit	Merged openstack/keystone: Manager support for project cascade update https://review.openstack.org/243584	20:26
*** pleia2 has joined #openstack-keystone		20:26
openstackgerrit	Merged openstack/keystone: Allow project domain_id to be nullable at the manager level https://review.openstack.org/264533	20:27
openstackgerrit	Merged openstack/keystone: Verify project unique constraints for projects acting as domains https://review.openstack.org/158372	20:27
lhcheng	mfisch: horizon is passing the token + identity endpoint when making to the pyhton*-client for other services, since it passes the token I think it doesn't even use the identity endpoint at all. so it just works	20:29
*** daemontool__ has joined #openstack-keystone		20:29
*** daemontool_ has quit IRC		20:32
*** krotscheck is now known as krotscheck_dcm		20:34
*** jsavak has quit IRC		20:36
stevemar	bknudson_: what do you mean by "these can be combined" cc amakarov_away	20:36
*** jsavak has joined #openstack-keystone		20:38
mfisch	lhcheng: I also mean that nova itself works, not just horizon calling nova	20:38
stevemar	bknudson_: btw, different bug/patch, i figured out why i couldn't get my ldap working yesterday: https://review.openstack.org/#/c/280542/	20:38
patchbot	stevemar: patch 280542 - keystone - encode user id for notifications	20:38
lhcheng	mfisch: ah gotcha. btw, did you try if osc works too?	20:39
lhcheng	mfisch: osc calling keystone v3 operations.	20:40
*** kevinbenton has joined #openstack-keystone		20:41
mfisch	lhcheng: yes it works	20:41
stevemar	bknudson_: i think amakarov_away is away for the evening, i'll fix the nits and we can punt it through	20:41
bknudson_	I didn't realize my comments were nits.	20:42
*** annasort has quit IRC		20:44
EmilienM	ayoung: all works fine now thanks	20:44
stevemar	bknudson_: they are not	20:44
EmilienM	ayoung: https://review.openstack.org/#/c/281273/	20:44
patchbot	EmilienM: patch 281273 - puppet-openstack-integration - repos: bump RDO to latest OpenStack commit	20:44
ayoung	EmilienM, awesome	20:44
stevemar	bknudson_: poor choice of words, i was pulling down the patch and brain farted	20:44
stevemar	i mean they are easy to fix	20:44
lhcheng	mfisch: okay.. sounds like horizon bug then :\|	20:45
ayoung	EmilienM, reminds me, I need to do some Puppet-Keystone work. I need providers for the unsupported Federation calls	20:45
ayoung	when is the deadline for that?	20:45
mfisch	lhcheng: I will file it if you want	20:45
EmilienM	ayoung: what deadline?	20:45
*** mylu has quit IRC		20:45
EmilienM	ayoung: we are hippies, we don't have deadlines	20:45
lhcheng	mfisch: yes please	20:45
ayoung	release prior to Mitaka?	20:45
stevemar	ayoung: puppet plays by no rules, they have no deadlines :\|	20:45
EmilienM	only boring people have deadlines.	20:45
ayoung	EmilienM, guilty	20:45
EmilienM	oh sorry you have deadlines?	20:45
ayoung	Not willingly	20:46
* EmilienM joking		20:46
EmilienM	we'll cut stable/mitaka right after official release	20:46
kevinbenton	Hi, Nova currently communicates with neutron using admin credentials during port creation because it needs to populate fields hidden to normal users	20:46
EmilienM	if our CI is not broken	20:46
stevemar	EmilienM: i need to have deadlines for ayoung or he will keep proposing 10 things a day	20:46
ayoung	EmilienM, Keystone froze Development for Mitaka last June. Right now we are working on the unnamed Q release	20:46
*** mylu has joined #openstack-keystone		20:46
EmilienM	stevemar: I know, he's crazy.	20:46
ayoung	Deadline is in 10 minutes	20:46
kevinbenton	I'd like to de-escalate that communication	20:46
ayoung	kevinbenton, YEX!	20:46
ayoung	kevinbenton, service user !	20:47
ayoung	implied roles	20:47
ayoung	exclamation points.	20:47
ayoung	One	20:47
stevemar	bknudson_: sorry i offended you, here is a gift so we can continue to work together	20:47
kevinbenton	ayoung: how do implied roles work?	20:47
* stevemar hands bknudson_ a moose		20:47
ayoung	kevinbenton, what call does neutron make on the nova server	20:47
* bknudson_ hugs new moose		20:47
kevinbenton	ayoung: other way around	20:47
ayoung	kevinbenton, what is the call, then?	20:48
kevinbenton	ayoung: Nova does a port create or port update on Neutron	20:48
ayoung	kevinbenton, isn't there also a callback that has to be admin right now?	20:50
ayoung	when you create a vm, and attach it to a port, doens't neutron call "attach complete" or something	20:50
kevinbenton	ayoung: ah, yes, but that doesn't give me the willies as much as the escalation risk in the Nova to neutron call	20:51
ayoung	kevinbenton, so...we have a proposal	20:51
kevinbenton	ayoung: (because right now Nova has to guess neutrons policies)	20:51
ayoung	kevinbenton, https://review.openstack.org/#/c/245629/	20:51
patchbot	ayoung: patch 245629 - openstack-specs - A common policy scenario across all projects	20:51
mfisch	lhcheng: I will dig more before I file this bug	20:51
openstackgerrit	Steve Martinelli proposed openstack/keystone: Enable support for posixGroups in LDAP https://review.openstack.org/258528	20:52
*** gordc has joined #openstack-keystone		20:53
kevinbenton	ayoung: ok. I do see where the neutron callback can make use of a service admin type account	20:53
kevinbenton	ayoung: because on the Nova side there is no complex policy around jt	20:54
kevinbenton	ayoung: however, here is the issue on the Nova to neutron call	20:54
stevemar	bknudson_: ^	20:54
ayoung	kevinbenton, here is implied roles http://git.openstack.org/cgit/openstack/keystone-specs/tree/specs/mitaka/implied-roles.rst	20:54
kevinbenton	ayoung: I want to have the port request processed by the policy engine exactly if it has come from the regular user	20:55
ayoung	kevinbenton, "but not just"	20:55
ayoung	becasue you need access to fields that the normal user shouldnt touch	20:56
ayoung	this was the service + user token	20:56
kevinbenton	ayoung: exactly	20:56
ayoung	use case that came up a few summits ago	20:56
kevinbenton	ayoung: so I need the policy engine to be able to tell when it came from Nova and use that info in the one spot	20:57
kevinbenton	ayoung: but treat it like normal otherwise	20:57
ayoung	kevinbenton, why not just trust nova? Likethis	20:57
ayoung	1. Nova makes a HEAD call to see if the call is legal with the users token	20:57
ayoung	if not, Nova says No to the user (403)	20:57
ayoung	if it is OK, trust nova to make the right call later.	20:57
ayoung	But only Nova	20:58
kevinbenton	ayoung: that could work, but if we're willing to round trip we could just make the whole create call unprivileged, and then do a privileged port update on just the binding fields	20:58
*** ericksonsantos has quit IRC		20:59
ayoung	kevinbenton, also an option	20:59
ayoung	kevinbenton, I suspect the multiple round trips here will not be critical path performance wise	21:00
*** raildo is now known as raildo-afk		21:00
ayoung	kevinbenton, and the update call can still be done as a service user, not admin	21:00
kevinbenton	ayoung: just was wondering if Keystone has a notion of adding some type of 'authorized by' header or something, but it doesn't sound like that's the case	21:01
kevinbenton	ayoung: yes, we can definitely switch to service account for the stuff that needs privilege	21:02
openstackgerrit	Brant Knudson proposed openstack/keystone: Enable support for posixGroups in LDAP https://review.openstack.org/258528	21:02
kevinbenton	ayoung: neutron default policy allows service accounts so it's just a matter of an operator changing their conf file	21:03
bknudson_	stevemar: oops, didn't mean to push a new version... should be the same.	21:03
*** e0ne has joined #openstack-keystone		21:04
kevinbenton	ayoung: actually I just lied, neutron's is_adv_svc still isn't allowed to specify these fields by default	21:05
kevinbenton	So that's something I can visit separately	21:05
ayoung	kevinbenton, cool. Getting the standard set of roles definied is going to be key here	21:06
stevemar	bknudson_: in the mood for more ldap?	21:07
bknudson_	stevemar: sure	21:07
stevemar	bknudson_: https://review.openstack.org/#/c/276873/	21:07
patchbot	stevemar: patch 276873 - keystone - Adds user_description_attribute mapping support to...	21:07
*** jsavak has quit IRC		21:07
*** jsavak has joined #openstack-keystone		21:08
*** andrewbogott has quit IRC		21:14
*** andrewbogott has joined #openstack-keystone		21:14
*** lhcheng has quit IRC		21:29
*** Guest45229 is now known as mariusv		21:31
*** mariusv has quit IRC		21:32
*** mariusv has joined #openstack-keystone		21:32
*** su_zhang has joined #openstack-keystone		21:32
*** lhcheng has joined #openstack-keystone		21:34
*** ChanServ sets mode: +v lhcheng		21:34
*** lhcheng has quit IRC		21:34
*** mylu has quit IRC		21:36
*** mylu has joined #openstack-keystone		21:36
stevemar	bknudson_: want more bug related patches or you have your own plan?	21:39
bknudson_	stevemar: do you have a link?	21:39
stevemar	bknudson_: for sure: https://review.openstack.org/#/c/280542/	21:39
patchbot	stevemar: patch 280542 - keystone - encode user id for notifications	21:39
stevemar	bknudson_: it relates back to what we talked about yesterday	21:39
stevemar	bknudson_: davechen figured out that the ID we were testing before is different than the ID coming from the mapping_id backend	21:40
bknudson_	stevemar: shouldn't all the tests use six.text_type then?	21:41
*** lhcheng has joined #openstack-keystone		21:43
*** ChanServ sets mode: +v lhcheng		21:43
notmorgan	bknudson_: i thought so	21:44
notmorgan	stevemar: if patchbot gets annoying let me know i'll have it dropped but i think it's useful	21:45
stevemar	notmorgan: it's a bit annoying right now, but it's day 1, so i'll let it go	21:45
notmorgan	stevemar: also if we want to change it at all notmyname will accept pull requests	21:45
stevemar	bknudson_: i could tack on a follow-on	21:45
bknudson_	the patchbot should help since it's printing the project and commit message.	21:46
notmorgan	or maybe we only want it to respond when someone says patch XXXX	21:46
notmorgan	bknudson_: thats my thought :)	21:46
notmorgan	but anyway keep in mind if it	21:46
notmorgan	s too annoying we can have it dropped	21:46
stevemar	notmorgan: not to that level just yet :)	21:47
bknudson_	can it remember what patches it repoted recently?	21:47
notmorgan	bknudson_: not at the moment, but we could add a delay to report the same patch in a channel easily	21:47
notmorgan	bknudson_: its really basic now. or i think it's really basic didn't look too hard at the code yesterday	21:47
notmorgan	bknudson_: https://github.com/notmyname/Patches/blob/master/plugin.py	21:48
openstackgerrit	Ron De Rose proposed openstack/keystone: Shadow users - Separate user identities https://review.openstack.org/278570	21:49
*** aginwala has quit IRC		21:58
openstackgerrit	Eric Brown proposed openstack/keystone: Add back a bandit tox job https://review.openstack.org/281543	22:02
*** mylu has quit IRC		22:02
*** aginwala has joined #openstack-keystone		22:02
stevemar	bknudson_: patch for cleaning up the test_utils coming in 3... 2...	22:05
*** henrynash has joined #openstack-keystone		22:05
*** ChanServ sets mode: +v henrynash		22:05
*** sdake has quit IRC		22:05
breton	1?	22:06
openstackgerrit	David Stanek proposed openstack/keystone: Time-based One-time Password https://review.openstack.org/274901	22:06
openstackgerrit	Steve Martinelli proposed openstack/keystone: clean up test_resource_uuid https://review.openstack.org/281546	22:07
stevemar	breton: oNE ^	22:07
stevemar	1 second = 2 minutes	22:07
stevemar	deal with it shades	22:07
openstackgerrit	Eric Brown proposed openstack/keystonemiddleware: Add back a bandit tox job https://review.openstack.org/281548	22:08
*** amakarov has joined #openstack-keystone		22:09
openstackgerrit	Eric Brown proposed openstack/keystone: Add back a bandit tox job https://review.openstack.org/281543	22:09
*** mylu has joined #openstack-keystone		22:10
*** petertr7 is now known as petertr7_away		22:10
stevemar	dstanek: now to get some unlucky folks to look at: https://review.openstack.org/#/c/279908/	22:11
patchbot	stevemar: patch 279908 - keystone - handle unicode names for federated users	22:11
openstackgerrit	Eric Brown proposed openstack/python-keystoneclient: Add back a bandit tox job https://review.openstack.org/281549	22:11
dstanek	stevemar: should be a pretty easy review	22:12
dstanek	stevemar: i provided links for the assumption about header encoding too!	22:12
stevemar	dstanek: i had to change the condition upon when you decode	22:13
stevemar	dstanek: we have tests (that may not be legit), that shove in non-text stuff into the environment	22:13
dstanek	stevemar: and they are using the prefix?	22:13
openstackgerrit	Brant Knudson proposed openstack/keystone: encode user id for notifications https://review.openstack.org/280542	22:14
stevemar	dstanek: no prefix	22:14
dstanek	the code should have bailed a few lines up then. that's really odd. all of the tests ran fine on my version for 2 and 3	22:15
stevemar	dstanek: the tests were part of test_v3_federation	22:16
stevemar	dstanek: look at jenkins results for the previous patch	22:16
dstanek	stevemar: yeah, looking at the jenkins output now	22:16
*** jsavak has quit IRC		22:16
stevemar	if you want to close off a bug: https://review.openstack.org/#/c/280542/	22:16
patchbot	stevemar: patch 280542 - keystone - encode user id for notifications	22:16
stevemar	needs one more +2 :)	22:17
* stevemar is really trying to bring out bug count down this week!		22:17
stevemar	ayoung: i'm assuming you've got this bug covered.. https://bugs.launchpad.net/keystone/+bug/1546562	22:18
openstack	Launchpad bug 1546562 in OpenStack Identity (keystone) "deleting role with implied role fails" [Critical,Triaged]	22:18
*** pnavarro has quit IRC		22:19
ayoung	stevemar, yeah. I thought I had made the SQLtable delete work with a cascade, but I guess not	22:19
ayoung	stevemar, once I get the client test working again, I'm going to fix that one.	22:19
ayoung	might need to brute force it	22:19
stevemar	do what ya gotta do	22:19
stevemar	heading out for a while, be back on later tonight	22:20
*** jaosorior has quit IRC		22:21
*** daemontool__ has quit IRC		22:22
*** jaosorior has joined #openstack-keystone		22:22
dstanek	stevemar: added a question for you	22:22
notmorgan	stevemar: do you want me to rebase local cache stuff or not bother for inclusion into mitaka	22:24
jamielennox	stevemar: i thought you could create a user in your current domain based on a project scoped token?	22:24
notmorgan	jamielennox: there was some weird behavior around that iirc.	22:24
*** e0ne has quit IRC		22:27
*** sdake has joined #openstack-keystone		22:27
*** doug-fish has quit IRC		22:33
*** doug-fish has joined #openstack-keystone		22:34
*** doug-fish has quit IRC		22:34
*** gildub has joined #openstack-keystone		22:34
*** doug-fish has joined #openstack-keystone		22:34
dstanek	stevemar: yeah that test is suspect. i wonder why marekd added it	22:34
dstanek	stevemar: ah, there was a bug:1291981 looks like magic wsgi crap	22:36
roxanaghe	stevemar, bknudson_: I submitted https://review.openstack.org/#/c/281554/1 to stable/liberty - not sure if this one is a good candidate for backport so let me know what you think	22:37
patchbot	roxanaghe: patch 281554 - keystone (stable/liberty) - Make WebSSO trusted_dashboard hostname case-insens...	22:37
bknudson_	roxanaghe: closes a bug, so this is a good candidate for backport	22:38
roxanaghe	bknudson_, cool!	22:38
*** jbell8 has quit IRC		22:39
*** aginwala has quit IRC		22:39
*** alejandrito has quit IRC		22:42
*** jbell8 has joined #openstack-keystone		22:44
*** jbell8 has quit IRC		22:45
*** diazjf has quit IRC		22:48
*** aginwala has joined #openstack-keystone		22:48
arunkant	dims: there?	22:49
*** doug-fish has quit IRC		22:57
*** doug-fish has joined #openstack-keystone		22:57
*** jbell8 has joined #openstack-keystone		22:57
marekd	dstanek: what test?	22:59
*** phalmos has quit IRC		22:59
dstanek	marekd: it was a federation test checking what happens when the environment has crap in it. it fixes a bug, so it's a good test	23:00
marekd	dstanek: ah, this. i remember there were some problems with that. I can now sleep :-)	23:00
*** doug-fish has quit IRC		23:02
*** e0ne has joined #openstack-keystone		23:02
*** mylu has quit IRC		23:05
dstanek	marekd: yes, go to sleep!	23:05
openstackgerrit	ayoung proposed openstack/python-keystoneclient: Implied Roles https://review.openstack.org/280983	23:06
ayoung	henrynash, you especially ^^ as we are going to have to make that work for Domain specific	23:07
*** slberger has left #openstack-keystone		23:08
*** aginwala has quit IRC		23:10
*** aginwala has joined #openstack-keystone		23:10
*** sigmavirus24 is now known as sigmavirus24_awa		23:12
*** gordc has quit IRC		23:12
*** dims_ has joined #openstack-keystone		23:13
*** amakarov has quit IRC		23:14
*** dims has quit IRC		23:14
dims_	arunkant : pong, this is new territory, hence the caution :) hope you understand. not trying to be difficult	23:14
arunkant	dims_ , Its good to have the quick feedback. I posed comment to your recent reply	23:15
dims_	arunkant : so the idea is to make sure we get the same number of notifications from both sources, if we use the same driver or different drivers and try to see which combinations fail. specifically to see if the driver(s) handle 2 different configurations active at the same properly	23:17
*** Ephur has joined #openstack-keystone		23:18
*** sdake_ has joined #openstack-keystone		23:18
arunkant	dims_, yes..so with both 'messaging' and then nova with messaging + audit middleware with log have same 23 messages sent	23:19
dims_	arunkant : another thing was, we are probably better off to use transport_url instead of the driver. driver was for old style configurations i believe	23:19
dims_	so transport_url + topics from nova configuration and middleware configuration should both work (different urls and different topics)	23:19
*** sdake has quit IRC		23:20
dims_	and need to make sure we get the same set of messages if we use say log drivers for both	23:20
arunkant	'driver' is something which is exposed in oslo_messaging.Notifier interface	23:21
dims_	arunkant : get_notification_transport is a better thing to use	23:21
dims_	see suggested usage : https://github.com/openstack/oslo.messaging/blob/master/oslo_messaging/notify/notifier.py#L131	23:22
dims_	arunkant ^^	23:22
arunkant	dims_ : Okay..but still we need to specify driver (https://github.com/openstack/oslo.messaging/blob/master/oslo_messaging/notify/notifier.py#L134)	23:25
arunkant	dims_ : And that	23:25
arunkant	the part I am overriding to leverage different driver. Just trying to understand as that will be needed regardless of how transport is created.	23:26
dims_	arunkant : ha. ack	23:26
*** e0ne has quit IRC		23:27
dims_	if the nova notifcations driver is log and the trasnport is not configured then the user should be able to do that in the middleware	23:27
openstackgerrit	Brant Knudson proposed openstack/keystone: Stop using oslotest.BaseTestCase https://review.openstack.org/281579	23:29
arunkant	dims_ : In that case, it can still use standard oslo messaging setting. As it used when I switched audit middleware driver from log to messaging.	23:29
openstackgerrit	Ron De Rose proposed openstack/keystone: Shadow users - Separate user identities https://review.openstack.org/278570	23:30
arunkant	dims_ : Do you think there will be cases where service existing notification_driver is log and for audit they will want to use messaging.	23:31
dims_	arunkant : we have to allow for that possibility, yes	23:35
*** sdake_ has quit IRC		23:35
dims_	the other possibility is 2 totally different rabbitmq url(s) one for keystone middleware and one for nova notifications	23:36
dims_	which is more plausible	23:36
*** jbell8 has quit IRC		23:37
*** jbell8 has joined #openstack-keystone		23:38
arunkant	dims_: Okay. Does oslo messaging currently supports 2 rabbitmq configuration? I am not sure if we need to add this for audit middleware .	23:41
*** sdake has joined #openstack-keystone		23:41
*** jbell8 has quit IRC		23:41
*** sdake_ has joined #openstack-keystone		23:45
*** sdake has quit IRC		23:46
*** edmondsw has quit IRC		23:48
*** aginwala has quit IRC		23:51
*** alex_xu has quit IRC		23:53
*** alex_xu has joined #openstack-keystone		23:55
*** aginwala has joined #openstack-keystone		23:55
*** aginwala_ has joined #openstack-keystone		23:56
*** aginwala has quit IRC		23:56
*** shoutm has joined #openstack-keystone		23:56
*** aginwala_ has quit IRC		23:59

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!