| *** roxanaghe has quit IRC | 00:01 | |
| *** jorge_munoz has joined #openstack-keystone | 00:02 | |
| *** dims has joined #openstack-keystone | 00:06 | |
| *** markvoelker has quit IRC | 00:06 | |
| *** mylu has joined #openstack-keystone | 00:21 | |
| openstackgerrit | Merged openstack/keystone: Add release notes for projects acting as domains. https://review.openstack.org/287233 | 00:22 |
|---|---|---|
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone: Updating sample configuration file https://review.openstack.org/286565 | 00:24 |
| *** shaleh has quit IRC | 00:28 | |
| *** jorge_munoz has quit IRC | 00:36 | |
| *** berserk has joined #openstack-keystone | 00:38 | |
| berserk | With KILO, I am trying to add mutli domain support. Really what I am trying to do is use the local SQL DB for openstack and ldap for user access. I dont have the ability to manage the ldap to create the openstack service accounts and what not. I have horizon using v3 API so that it asks for a domain as well as shows the domain section in the portal. My issue is with keystone. When ever I set dom | 00:39 |
| berserk | ain_specific_drivers_enabled I get the following error: ERROR: openstack The Keystone domain-specific configuration has specified more than one SQL driver (only one is permitted): ['/etc/keystone/domains/keystone.Default.conf']. That error will happen whether the file is blank or as the SQL driver in it. I also did remove the catch all from the main config as well. Can anyone offer any guidance? | 00:39 |
| *** sdake_ has quit IRC | 00:41 | |
| *** rk4n has joined #openstack-keystone | 00:43 | |
| *** bjornar has quit IRC | 00:43 | |
| *** sdake has joined #openstack-keystone | 00:45 | |
| *** rk4n has quit IRC | 00:47 | |
| *** rk4n has joined #openstack-keystone | 00:49 | |
| *** roxanaghe has joined #openstack-keystone | 00:54 | |
| openstackgerrit | Merged openstack/keystone: add hints to list_services for templated backend https://review.openstack.org/286142 | 00:58 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone: Updating sample configuration file https://review.openstack.org/286565 | 01:00 |
| *** pgbridge has quit IRC | 01:07 | |
| *** dims has quit IRC | 01:08 | |
| *** berserk has quit IRC | 01:10 | |
| *** markvoelker has joined #openstack-keystone | 01:10 | |
| *** doug-fish has joined #openstack-keystone | 01:12 | |
| *** EinstCrazy has joined #openstack-keystone | 01:17 | |
| *** davechen has joined #openstack-keystone | 01:26 | |
| *** sdake_ has joined #openstack-keystone | 01:29 | |
| *** sdake_ has quit IRC | 01:30 | |
| *** sdake has quit IRC | 01:30 | |
| *** sdake_ has joined #openstack-keystone | 01:30 | |
| *** ninag has joined #openstack-keystone | 01:37 | |
| *** ninag has quit IRC | 01:37 | |
| *** lhcheng has quit IRC | 01:37 | |
| openstackgerrit | Merged openstack/keystone: Minor edits to the developing doc https://review.openstack.org/285120 | 01:38 |
| *** amit213 has joined #openstack-keystone | 01:41 | |
| *** rk4n has quit IRC | 01:42 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone: Updating sample configuration file https://review.openstack.org/286565 | 01:43 |
| *** spandhe has quit IRC | 01:45 | |
| *** spandhe has joined #openstack-keystone | 01:45 | |
| *** spandhe has quit IRC | 01:45 | |
| davechen | lbragstad: ping? | 01:47 |
| *** openstackgerrit has quit IRC | 01:47 | |
| *** openstackgerrit has joined #openstack-keystone | 01:47 | |
| davechen | lbragstad: what the token provider are you using? fernet or uuid? - https://review.openstack.org/#/c/277436/ | 01:48 |
| patchbot | davechen: patch 277436 - keystone - Return 404 instead of 401 for tokens w/o roles | 01:48 |
| davechen | lbragstad: i did the same thing as you, but return 401 when i try to verify it with fernet token. | 01:49 |
| *** sdake_ has quit IRC | 01:51 | |
| *** fawadkhaliq has quit IRC | 01:53 | |
| *** roxanaghe has quit IRC | 01:55 | |
| *** jasonsb has joined #openstack-keystone | 01:56 | |
| *** dims has joined #openstack-keystone | 01:59 | |
| *** jasonsb has quit IRC | 02:02 | |
| *** anush has joined #openstack-keystone | 02:03 | |
| *** doug-fis_ has joined #openstack-keystone | 02:16 | |
| *** xek_ has joined #openstack-keystone | 02:16 | |
| *** huats__ has joined #openstack-keystone | 02:17 | |
| *** gerhardq1x has joined #openstack-keystone | 02:18 | |
| *** alex_xu_ has joined #openstack-keystone | 02:21 | |
| *** BAKfr_ has joined #openstack-keystone | 02:22 | |
| *** odyssey4me_ has joined #openstack-keystone | 02:22 | |
| *** jrist_ has joined #openstack-keystone | 02:23 | |
| *** agireud has quit IRC | 02:23 | |
| *** mkoderer__ has quit IRC | 02:23 | |
| *** odyssey4me has quit IRC | 02:23 | |
| *** gerhardqux has quit IRC | 02:23 | |
| *** huats_ has quit IRC | 02:23 | |
| *** LZ has quit IRC | 02:23 | |
| *** sbezverk has quit IRC | 02:23 | |
| *** stevemar has quit IRC | 02:23 | |
| *** BAKfr has quit IRC | 02:23 | |
| *** bjornar__ has quit IRC | 02:23 | |
| *** clenimar has quit IRC | 02:23 | |
| *** alex_xu has quit IRC | 02:23 | |
| *** doug-fish has quit IRC | 02:23 | |
| *** jrist has quit IRC | 02:23 | |
| *** xek has quit IRC | 02:23 | |
| *** mkoderer___ has joined #openstack-keystone | 02:23 | |
| *** lunarlamp is now known as mariusv | 02:23 | |
| *** BAKfr_ is now known as BAKfr | 02:23 | |
| *** clenimar has joined #openstack-keystone | 02:24 | |
| *** sbezverk has joined #openstack-keystone | 02:24 | |
| *** bjornar__ has joined #openstack-keystone | 02:24 | |
| *** agireud has joined #openstack-keystone | 02:24 | |
| *** stevemar has joined #openstack-keystone | 02:24 | |
| *** spzala has joined #openstack-keystone | 02:24 | |
| *** doug-fis_ has quit IRC | 02:24 | |
| *** shoutm_ has joined #openstack-keystone | 02:24 | |
| *** roxanagh_ has joined #openstack-keystone | 02:24 | |
| *** LZ has joined #openstack-keystone | 02:26 | |
| *** doug-fish has joined #openstack-keystone | 02:27 | |
| *** shoutm has quit IRC | 02:27 | |
| *** spzala has quit IRC | 02:28 | |
| *** shoutm_ has quit IRC | 02:29 | |
| *** shoutm has joined #openstack-keystone | 02:35 | |
| *** ChanServ sets mode: +o stevemar | 02:39 | |
| stevemar | morgan: 115 now | 02:50 |
| stevemar | 2 more fix releases | 02:50 |
| stevemar | morgan: dstanek if you remove the incomplete and fix committed, it's actually down to 102 | 02:50 |
| stevemar | which is pretty damn awesome | 02:50 |
| *** jrist_ is now known as jrist | 02:52 | |
| *** jrist has quit IRC | 02:52 | |
| *** jrist has joined #openstack-keystone | 02:52 | |
| *** fangxu has quit IRC | 02:52 | |
| *** shoutm has quit IRC | 03:07 | |
| *** ThomasHsiao has quit IRC | 03:08 | |
| *** doug-fish has quit IRC | 03:10 | |
| *** browne has quit IRC | 03:11 | |
| *** spzala has joined #openstack-keystone | 03:17 | |
| *** shoutm has joined #openstack-keystone | 03:18 | |
| *** jraim_ has joined #openstack-keystone | 03:23 | |
| lbragstad | davechen I did the process I commented on with the fernet provider and got a 404 | 03:25 |
| *** gema_ has joined #openstack-keystone | 03:25 | |
| *** topol_ has joined #openstack-keystone | 03:25 | |
| *** dansmith_ has joined #openstack-keystone | 03:25 | |
| *** tjcocozz_ has joined #openstack-keystone | 03:25 | |
| *** spring_ has joined #openstack-keystone | 03:25 | |
| *** jraim has quit IRC | 03:26 | |
| *** dansmith has quit IRC | 03:26 | |
| *** gema has quit IRC | 03:26 | |
| *** topol has quit IRC | 03:26 | |
| *** miguelgrinberg has quit IRC | 03:26 | |
| *** tjcocozz has quit IRC | 03:26 | |
| *** spring__ has quit IRC | 03:26 | |
| *** mnaser has quit IRC | 03:26 | |
| *** clayton has quit IRC | 03:26 | |
| *** richm has quit IRC | 03:26 | |
| *** lennyb has quit IRC | 03:26 | |
| *** miguelgrinberg_ has joined #openstack-keystone | 03:26 | |
| *** miguelgrinberg_ is now known as miguelgrinberg | 03:26 | |
| *** jraim_ is now known as jraim | 03:26 | |
| *** dansmith_ is now known as dansmith | 03:27 | |
| *** woodster_ has quit IRC | 03:27 | |
| *** richm has joined #openstack-keystone | 03:27 | |
| *** lennyb has joined #openstack-keystone | 03:27 | |
| *** dansmith is now known as Guest60497 | 03:27 | |
| *** clayton has joined #openstack-keystone | 03:28 | |
| *** mnaser has joined #openstack-keystone | 03:28 | |
| *** links has joined #openstack-keystone | 03:29 | |
| *** spzala has quit IRC | 03:29 | |
| *** spring_ is now known as grassy | 03:31 | |
| openstackgerrit | Dave Chen proposed openstack/keystone: Switch to use `new_domain_ref` for testcases https://review.openstack.org/284510 | 03:31 |
| *** shoutm has quit IRC | 03:32 | |
| *** lennyb__ has joined #openstack-keystone | 03:35 | |
| *** lennyb has quit IRC | 03:40 | |
| *** dims has quit IRC | 03:48 | |
| *** shoutm has joined #openstack-keystone | 03:56 | |
| *** doug-fish has joined #openstack-keystone | 04:00 | |
| *** doug-fish has quit IRC | 04:05 | |
| *** browne has joined #openstack-keystone | 04:06 | |
| *** lhcheng has joined #openstack-keystone | 04:11 | |
| *** ChanServ sets mode: +v lhcheng | 04:11 | |
| *** woodster_ has joined #openstack-keystone | 04:20 | |
| *** marg7175_ has quit IRC | 04:21 | |
| *** shoutm has quit IRC | 04:24 | |
| openstackgerrit | Steve Martinelli proposed openstack/keystone: remove deprecated revoke_by_expiration function https://review.openstack.org/271135 | 04:25 |
| openstackgerrit | Merged openstack/keystone: IPV6 test unblacklist https://review.openstack.org/287339 | 04:34 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone: Updating sample configuration file https://review.openstack.org/286565 | 04:36 |
| *** mylu has quit IRC | 04:36 | |
| *** mylu has joined #openstack-keystone | 04:37 | |
| *** shoutm has joined #openstack-keystone | 04:38 | |
| *** roxanagh_ has quit IRC | 04:44 | |
| *** jasonsb has joined #openstack-keystone | 04:45 | |
| *** mylu has quit IRC | 04:48 | |
| *** fpatwa_ has joined #openstack-keystone | 04:53 | |
| *** mylu has joined #openstack-keystone | 04:56 | |
| *** dan_nguyen has quit IRC | 04:58 | |
| *** fpatwa_ has quit IRC | 05:15 | |
| *** alex_xu has joined #openstack-keystone | 05:18 | |
| *** roxanaghe has joined #openstack-keystone | 05:20 | |
| *** alex_xu_ has quit IRC | 05:21 | |
| *** shoutm_ has joined #openstack-keystone | 05:27 | |
| *** shoutm has quit IRC | 05:28 | |
| *** Nirupama has joined #openstack-keystone | 05:32 | |
| *** jdennis1 has joined #openstack-keystone | 05:35 | |
| *** jdennis has quit IRC | 05:35 | |
| *** kiran-r has joined #openstack-keystone | 05:37 | |
| *** alex_xu_ has joined #openstack-keystone | 05:50 | |
| *** fpatwa_ has joined #openstack-keystone | 05:51 | |
| *** alex_xu has quit IRC | 05:53 | |
| *** sdake has joined #openstack-keystone | 05:59 | |
| *** dave-mccowan has quit IRC | 06:01 | |
| *** sdake has quit IRC | 06:16 | |
| davechen | stevemar: looks like you hold a patch to remove eventlet relevant code. - https://review.openstack.org/#/c/249486/ | 06:18 |
| patchbot | davechen: patch 249486 - keystone - Remove eventlet support | 06:18 |
| stevemar | davechen: yep! | 06:18 |
| stevemar | davechen: i was hoping to do that in M | 06:18 |
| stevemar | davechen: but i think i will wait til N, just to make sure all operators are OK with that... | 06:19 |
| davechen | stevemar: so, this patch seems unneeded anymore - https://review.openstack.org/#/c/283078/ | 06:19 |
| patchbot | davechen: patch 283078 - keystone - Deprecate logger.WritableLogger | 06:19 |
| stevemar | davechen: doesn't hurt | 06:19 |
| davechen | code lgtm anymore. | 06:19 |
| davechen | okay, will push that through, i agree it's harmless. | 06:19 |
| *** sheel has joined #openstack-keystone | 06:20 | |
| stevemar | davechen: thank you sir | 06:20 |
| *** yarkot_ has joined #openstack-keystone | 06:21 | |
| *** woodster_ has quit IRC | 06:27 | |
| *** fpatwa_ has quit IRC | 06:29 | |
| *** amit213 has quit IRC | 06:33 | |
| *** subscope has joined #openstack-keystone | 06:35 | |
| *** richm has quit IRC | 06:35 | |
| *** mylu has quit IRC | 06:38 | |
| *** mylu has joined #openstack-keystone | 06:39 | |
| *** ChanServ sets mode: +v topol_ | 06:40 | |
| *** topol_ is now known as topol | 06:40 | |
| *** mylu_ has joined #openstack-keystone | 06:41 | |
| *** mylu has quit IRC | 06:44 | |
| *** dan_nguyen has joined #openstack-keystone | 06:47 | |
| *** dan_nguyen has quit IRC | 06:48 | |
| *** yarkot_ has quit IRC | 06:52 | |
| *** roxanaghe has quit IRC | 06:53 | |
| *** spandhe has joined #openstack-keystone | 06:54 | |
| *** mylu_ has quit IRC | 06:54 | |
| *** roxanaghe has joined #openstack-keystone | 06:55 | |
| *** amit213 has joined #openstack-keystone | 07:04 | |
| *** amit213 has quit IRC | 07:06 | |
| *** amit213 has joined #openstack-keystone | 07:08 | |
| *** amit213 has quit IRC | 07:10 | |
| *** jaosorior has joined #openstack-keystone | 07:15 | |
| *** amit213 has joined #openstack-keystone | 07:15 | |
| *** jasonsb has quit IRC | 07:16 | |
| *** amit213 has quit IRC | 07:18 | |
| *** prosun has quit IRC | 07:21 | |
| *** prosun has joined #openstack-keystone | 07:21 | |
| *** spandhe has quit IRC | 07:23 | |
| *** boris-42 has quit IRC | 07:34 | |
| *** boris-42 has joined #openstack-keystone | 07:35 | |
| stevemar | morgan: o/ | 07:36 |
| stevemar | topol: go home | 07:36 |
| stevemar | morgan: thanks for the bug triaging again ^_^ | 07:36 |
| *** amit213 has joined #openstack-keystone | 07:40 | |
| *** amit213 has quit IRC | 07:42 | |
| *** pcaruana has joined #openstack-keystone | 07:45 | |
| *** roxanaghe has quit IRC | 07:46 | |
| morgan | ? | 07:47 |
| *** jasonsb has joined #openstack-keystone | 07:47 | |
| *** EinstCra_ has joined #openstack-keystone | 07:52 | |
| *** jasonsb has quit IRC | 07:52 | |
| *** e0ne has joined #openstack-keystone | 07:55 | |
| *** EinstCrazy has quit IRC | 07:56 | |
| *** e0ne has quit IRC | 07:56 | |
| *** jed56 has joined #openstack-keystone | 07:57 | |
| stevemar | morgan: nothing else, just thanks | 07:58 |
| *** markvoelker has quit IRC | 08:03 | |
| *** wxy has joined #openstack-keystone | 08:06 | |
| *** EinstCra_ has quit IRC | 08:06 | |
| *** EinstCrazy has joined #openstack-keystone | 08:06 | |
| *** amit213 has joined #openstack-keystone | 08:09 | |
| *** amit213 has quit IRC | 08:13 | |
| *** neophy has joined #openstack-keystone | 08:14 | |
| *** amit213 has joined #openstack-keystone | 08:16 | |
| *** GB21 has joined #openstack-keystone | 08:17 | |
| *** amit213 has quit IRC | 08:18 | |
| *** amit213 has joined #openstack-keystone | 08:25 | |
| *** lhcheng has quit IRC | 08:26 | |
| *** henrynash has joined #openstack-keystone | 08:33 | |
| *** ChanServ sets mode: +v henrynash | 08:33 | |
| *** e0ne has joined #openstack-keystone | 08:36 | |
| *** browne has quit IRC | 08:37 | |
| *** e0ne has quit IRC | 08:38 | |
| *** henrynash has quit IRC | 08:42 | |
| *** henrynash has joined #openstack-keystone | 08:43 | |
| *** ChanServ sets mode: +v henrynash | 08:43 | |
| *** jasonsb has joined #openstack-keystone | 08:51 | |
| *** jasonsb has quit IRC | 08:55 | |
| *** petertr7_away has quit IRC | 09:03 | |
| *** markvoelker has joined #openstack-keystone | 09:03 | |
| *** petertr7_away has joined #openstack-keystone | 09:07 | |
| *** petertr7_away is now known as petertr7 | 09:07 | |
| *** jistr has joined #openstack-keystone | 09:17 | |
| *** EinstCrazy has quit IRC | 09:18 | |
| *** EinstCrazy has joined #openstack-keystone | 09:19 | |
| *** daemontool_ has joined #openstack-keystone | 09:19 | |
| *** josecastroleon has joined #openstack-keystone | 09:23 | |
| *** e0ne has joined #openstack-keystone | 09:24 | |
| *** mhickey has joined #openstack-keystone | 09:30 | |
| *** subscope has quit IRC | 09:38 | |
| *** belmoreira has joined #openstack-keystone | 09:51 | |
| *** grassy is now known as davechen_afk | 09:52 | |
| *** davechen has left #openstack-keystone | 09:52 | |
| *** openstackgerrit_ has joined #openstack-keystone | 09:53 | |
| *** e0ne has quit IRC | 10:00 | |
| *** openstackgerrit_ has quit IRC | 10:02 | |
| *** openstackgerrit_ has joined #openstack-keystone | 10:02 | |
| *** openstackgerrit_ has quit IRC | 10:02 | |
| *** boris-42 has quit IRC | 10:04 | |
| *** odyssey4me_ is now known as odyssey4me | 10:07 | |
| *** e0ne has joined #openstack-keystone | 10:10 | |
| *** EinstCrazy has quit IRC | 10:13 | |
| *** EinstCrazy has joined #openstack-keystone | 10:13 | |
| *** EinstCrazy has quit IRC | 10:18 | |
| *** raildo-afk is now known as raildo | 10:42 | |
| *** mvk has joined #openstack-keystone | 10:43 | |
| *** josecastroleon has quit IRC | 10:43 | |
| openstackgerrit | Kalaswan Datta proposed openstack/keystone: Clear the project ID from user information https://review.openstack.org/277707 | 10:45 |
| *** jasonsb has joined #openstack-keystone | 10:52 | |
| *** jasonsb has quit IRC | 10:57 | |
| *** doug-fish has joined #openstack-keystone | 11:00 | |
| *** GB21 has quit IRC | 11:00 | |
| *** alex_xu_ has quit IRC | 11:01 | |
| *** alex_xu has joined #openstack-keystone | 11:02 | |
| *** jed56 has quit IRC | 11:03 | |
| *** doug-fish has quit IRC | 11:05 | |
| *** Nirupama has quit IRC | 11:08 | |
| *** links has quit IRC | 11:08 | |
| *** Nirupama has joined #openstack-keystone | 11:09 | |
| *** links has joined #openstack-keystone | 11:10 | |
| *** raildo is now known as raildo-afk | 11:12 | |
| *** dims has joined #openstack-keystone | 11:14 | |
| *** neophy has quit IRC | 11:17 | |
| openstackgerrit | Merged openstack/keystone: Deprecate logger.WritableLogger https://review.openstack.org/283078 | 11:20 |
| openstackgerrit | Merged openstack/keystone: Return 404 instead of 401 for tokens w/o roles https://review.openstack.org/277436 | 11:22 |
| *** dims has quit IRC | 11:26 | |
| *** dims has joined #openstack-keystone | 11:27 | |
| *** jed56 has joined #openstack-keystone | 11:28 | |
| *** GB21 has joined #openstack-keystone | 11:31 | |
| *** mvk has quit IRC | 11:32 | |
| *** pece has joined #openstack-keystone | 11:34 | |
| *** tqtran has quit IRC | 11:42 | |
| *** fpatwa_ has joined #openstack-keystone | 11:50 | |
| *** EinstCrazy has joined #openstack-keystone | 11:55 | |
| *** dave-mccowan has joined #openstack-keystone | 11:56 | |
| *** mvk has joined #openstack-keystone | 11:59 | |
| *** openstackgerrit has quit IRC | 12:03 | |
| *** openstackgerrit has joined #openstack-keystone | 12:03 | |
| *** shoutm has joined #openstack-keystone | 12:05 | |
| *** shoutm_ has quit IRC | 12:09 | |
| *** doug-fish has joined #openstack-keystone | 12:19 | |
| openstackgerrit | Jens Rosenboom proposed openstack/keystoneauth: Swap the order of username deprecation https://review.openstack.org/287754 | 12:22 |
| *** rk4n has joined #openstack-keystone | 12:27 | |
| *** GB21 has quit IRC | 12:30 | |
| *** josecastroleon has joined #openstack-keystone | 12:30 | |
| *** doug-fish has quit IRC | 12:31 | |
| *** belmoreira has quit IRC | 12:31 | |
| *** belmoreira has joined #openstack-keystone | 12:31 | |
| *** doug-fish has joined #openstack-keystone | 12:34 | |
| *** jaosorior has quit IRC | 12:39 | |
| *** jaosorior has joined #openstack-keystone | 12:39 | |
| *** jaosorior has quit IRC | 12:39 | |
| *** jaosorior has joined #openstack-keystone | 12:40 | |
| *** gordc has joined #openstack-keystone | 12:41 | |
| *** pauloewerton has joined #openstack-keystone | 12:52 | |
| *** jdennis1 has quit IRC | 12:52 | |
| *** jdennis has joined #openstack-keystone | 12:52 | |
| *** jasonsb has joined #openstack-keystone | 12:54 | |
| *** jasonsb has quit IRC | 12:59 | |
| *** henrynash has quit IRC | 13:00 | |
| *** raildo-afk is now known as raildo | 13:11 | |
| *** fpatwa_ has quit IRC | 13:11 | |
| *** markvoelker has quit IRC | 13:11 | |
| *** markvoelker has joined #openstack-keystone | 13:11 | |
| *** sdake has joined #openstack-keystone | 13:14 | |
| *** Nirupama has quit IRC | 13:34 | |
| *** links has quit IRC | 13:34 | |
| *** kiran-r has quit IRC | 13:40 | |
| *** ninag has joined #openstack-keystone | 13:42 | |
| *** richm has joined #openstack-keystone | 13:43 | |
| *** edmondsw has joined #openstack-keystone | 13:48 | |
| *** kiran-r has joined #openstack-keystone | 13:50 | |
| *** anush has quit IRC | 13:52 | |
| openstackgerrit | Alexander Makarov proposed openstack/keystone: Closure table for HMT https://review.openstack.org/285521 | 13:53 |
| *** EinstCrazy has quit IRC | 13:55 | |
| *** EinstCrazy has joined #openstack-keystone | 13:56 | |
| *** henrynash has joined #openstack-keystone | 13:56 | |
| *** ChanServ sets mode: +v henrynash | 13:56 | |
| *** GB21 has joined #openstack-keystone | 13:58 | |
| *** jed56 has quit IRC | 14:03 | |
| *** kashyap has joined #openstack-keystone | 14:05 | |
| *** rodrigods has quit IRC | 14:06 | |
| *** rodrigods has joined #openstack-keystone | 14:06 | |
| *** GB21 has quit IRC | 14:11 | |
| *** mylu has joined #openstack-keystone | 14:14 | |
| *** links has joined #openstack-keystone | 14:15 | |
| *** mylu has quit IRC | 14:15 | |
| *** doug-fish has quit IRC | 14:17 | |
| *** GB21 has joined #openstack-keystone | 14:21 | |
| *** doug-fish has joined #openstack-keystone | 14:22 | |
| *** doug-fish has quit IRC | 14:24 | |
| *** doug-fish has joined #openstack-keystone | 14:24 | |
| lbragstad | morgan remember when we were having a discussion about the v3 validate token path and the v2.0 validate token path? | 14:25 |
| kashyap | ayoung: When you get a moment, any hints as to why I see this on instance boot? "The resource could not be found. (HTTP 404)". A relavant trace http://paste.openstack.org/show/489154/ | 14:28 |
| ayoung | kashyap, user id is bogus? | 14:28 |
| ayoung | or the token itself? | 14:29 |
| kashyap | ayoung: I see. I'm just looking a liberty Nova bug, and that trace is all I've got | 14:29 |
| kashyap | "Shit explodes, please figure it all out"- style bug report | 14:29 |
| kashyap | :-) | 14:29 |
| ayoung | kashyap, PEBCAK | 14:29 |
| kashyap | ayoung: Okay, I'm asking the reporter for more details, anyway. This is not sufficient | 14:30 |
| *** jsavak has joined #openstack-keystone | 14:30 | |
| * kashyap wrote this - https://wiki.openstack.org/wiki/BugFilingRecommendations long time ago. But hey, expecting someone to read docs is a bit too much I guess :-) | 14:30 | |
| *** links has quit IRC | 14:30 | |
| *** shoutm has quit IRC | 14:34 | |
| *** Guest60497 is now known as dansmith | 14:36 | |
| *** roxanaghe has joined #openstack-keystone | 14:40 | |
| *** roxanaghe has quit IRC | 14:40 | |
| *** knikolla has joined #openstack-keystone | 14:41 | |
| *** mylu has joined #openstack-keystone | 14:43 | |
| *** petertr7 is now known as petertr7_away | 14:48 | |
| *** petertr7_away is now known as petertr7 | 14:50 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: Add notifications to user/group membership https://review.openstack.org/287857 | 14:54 |
| *** GB21 has quit IRC | 14:55 | |
| lbragstad | stevemar I took a stab at https://bugs.launchpad.net/keystone/+bug/1552639 - and having your expert notification opinion would be awesome :) | 14:57 |
| openstack | Launchpad bug 1552639 in OpenStack Identity (keystone) "notification not generated on adding user to group" [Low,In progress] - Assigned to Lance Bragstad (lbragstad) | 14:57 |
| *** henrynash has quit IRC | 15:00 | |
| *** belmoreira has quit IRC | 15:01 | |
| *** henrynash has joined #openstack-keystone | 15:01 | |
| *** ChanServ sets mode: +v henrynash | 15:01 | |
| *** henrynash has quit IRC | 15:04 | |
| *** rcernin has joined #openstack-keystone | 15:04 | |
| *** EinstCrazy has quit IRC | 15:08 | |
| *** EinstCrazy has joined #openstack-keystone | 15:08 | |
| *** mylu has quit IRC | 15:08 | |
| *** frickler has joined #openstack-keystone | 15:11 | |
| *** fpatwa_ has joined #openstack-keystone | 15:11 | |
| *** spandhe has joined #openstack-keystone | 15:11 | |
| *** spandhe has quit IRC | 15:14 | |
| *** pushkaru has joined #openstack-keystone | 15:15 | |
| *** fpatwa_ has quit IRC | 15:16 | |
| stevemar | lbragstad: cool beans | 15:18 |
| *** sigmavirus24_awa is now known as sigmavirus24 | 15:18 | |
| lbragstad | stevemar henrynash had a good comment on that review | 15:19 |
| lbragstad | stevemar we currently don't support the ability to notify two entities in the payload, do we? | 15:20 |
| lbragstad | and in the cadf case - that would be sending the group ID, the user ID of the the user being added to the group, and the user information of the user that performed the operation, right? | 15:20 |
| openstackgerrit | Tin Lam proposed openstack/keystoneauth: Properly set ClientException message https://review.openstack.org/285757 | 15:21 |
| *** dikonoor has joined #openstack-keystone | 15:23 | |
| *** slberger has joined #openstack-keystone | 15:23 | |
| *** jasonsb has joined #openstack-keystone | 15:25 | |
| *** dikonoor has quit IRC | 15:25 | |
| *** dave-mccowan has quit IRC | 15:28 | |
| *** dave-mccowan has joined #openstack-keystone | 15:28 | |
| *** dan_nguyen has joined #openstack-keystone | 15:29 | |
| stevemar | MITAKA-3 RELEASE HAPPENED Y'ALL! | 15:30 |
| samueldmq | stevemar: \o/ | 15:30 |
| *** john5223 has joined #openstack-keystone | 15:32 | |
| *** mhickey has quit IRC | 15:34 | |
| samueldmq | morgan: marked 1367740 as duplicate; the other bug has been closed already | 15:34 |
| samueldmq | morgan: so that issue's been solved; thanks for cleaning things up :) | 15:35 |
| samueldmq | stevemar: dstanek: morgan: oh wait, https://bugs.launchpad.net/keystone teels me there are only 114 bugs | 15:36 |
| samueldmq | o/ | 15:36 |
| dstanek | samueldmq: that's still way too high | 15:36 |
| morgan | samueldmq: a bunch of incomplete marked bugs too | 15:37 |
| samueldmq | dstanek: yes, but much much better than we had a few months ago | 15:37 |
| samueldmq | morgan: ++ | 15:37 |
| morgan | I think we are at 100 ish. | 15:38 |
| morgan | And a good 50% are wishlist | 15:38 |
| morgan | So 50 bugs that need to be addressed | 15:38 |
| morgan | And 50 that would be nice but could wait a loong time | 15:39 |
| *** dan_nguyen has quit IRC | 15:39 | |
| samueldmq | morgan: great | 15:40 |
| *** yarkot_ has joined #openstack-keystone | 15:44 | |
| *** yarkot_ has quit IRC | 15:49 | |
| *** EinstCrazy has quit IRC | 15:50 | |
| *** EinstCrazy has joined #openstack-keystone | 15:50 | |
| *** henrynash has joined #openstack-keystone | 15:52 | |
| *** ChanServ sets mode: +v henrynash | 15:52 | |
| *** marg7175 has joined #openstack-keystone | 15:52 | |
| *** EinstCra_ has joined #openstack-keystone | 15:55 | |
| *** pece has quit IRC | 15:55 | |
| navidp | stevemar, I uploaded a new patch for osc auth migration https://review.openstack.org/#/c/276350/ | 15:56 |
| patchbot | navidp: patch 276350 - python-openstackclient - Moving authentication from keystoneclient to keyst... | 15:56 |
| *** kashyap has left #openstack-keystone | 15:56 | |
| *** EinstCrazy has quit IRC | 15:57 | |
| bknudson | now I get a warning: WARNING:test command found but not installed in testenv | 15:57 |
| *** anush has joined #openstack-keystone | 15:58 | |
| *** spzala has joined #openstack-keystone | 15:58 | |
| *** henrynash has quit IRC | 15:59 | |
| bknudson | maybe we need a different way to track wishlist bugs if it's too annoying to have them in launchpad? | 16:00 |
| *** EinstCra_ has quit IRC | 16:01 | |
| *** EinstCrazy has joined #openstack-keystone | 16:01 | |
| *** e0ne has quit IRC | 16:02 | |
| *** jsavak has quit IRC | 16:06 | |
| navidp | stevemar, if you have time can you look at this patch https://review.openstack.org/#/c/276350/ | 16:06 |
| patchbot | navidp: patch 276350 - python-openstackclient - Moving authentication from keystoneclient to keyst... | 16:06 |
| *** EinstCrazy has quit IRC | 16:06 | |
| *** rcernin has quit IRC | 16:06 | |
| *** jistr is now known as jistr|call | 16:08 | |
| *** permalac has joined #openstack-keystone | 16:12 | |
| *** browne has joined #openstack-keystone | 16:13 | |
| *** jsavak has joined #openstack-keystone | 16:25 | |
| *** jistr|call is now known as jistr | 16:26 | |
| *** ryanpetrello has quit IRC | 16:30 | |
| openstackgerrit | Alexander Makarov proposed openstack/keystone: Closure table for HMT https://review.openstack.org/285521 | 16:30 |
| morgan | bknudson: maybe launchpad is the issue :P | 16:31 |
| morgan | bknudson: reardless of the bug prio | 16:32 |
| *** pgbridge has joined #openstack-keystone | 16:32 | |
| *** jsavak has quit IRC | 16:32 | |
| *** jsavak has joined #openstack-keystone | 16:33 | |
| *** rk4n has quit IRC | 16:45 | |
| *** mhickey has joined #openstack-keystone | 16:46 | |
| *** petertr7 is now known as petertr7_away | 16:49 | |
| *** ryanpetrello has joined #openstack-keystone | 16:51 | |
| *** jorge_munoz has joined #openstack-keystone | 16:52 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: Add notifications to user/group membership https://review.openstack.org/287857 | 16:52 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: Add ability to send notifications for actors https://review.openstack.org/287977 | 16:52 |
| lbragstad | stevemar thoughts? https://review.openstack.org/#/q/status:open+project:openstack/keystone+branch:master+topic:bug/1552639 | 16:54 |
| *** woodster_ has joined #openstack-keystone | 16:55 | |
| bknudson | is there a new https://launchpad.net/keystone/+milestone/mitaka-3 for rc ? | 16:55 |
| bknudson | ah, https://launchpad.net/keystone/+milestone/mitaka-rc1 | 16:56 |
| *** spzala has quit IRC | 16:56 | |
| *** spzala has joined #openstack-keystone | 16:56 | |
| *** tellesnobrega is now known as tellesnobrega_af | 16:57 | |
| *** ninag has quit IRC | 16:57 | |
| *** shangxdy has joined #openstack-keystone | 16:57 | |
| *** tellesnobrega_af is now known as tellesnobrega | 16:57 | |
| stevemar | bknudson: was just gonna say.. -rc1 | 17:00 |
| *** stevemar changes topic to "mitaka-3 done, no more features (you missed your chance) until Newton | Tag bugs as rc-potential - fix more bugs! | https://launchpad.net/keystone/+milestone/mitaka-rc1" | 17:00 | |
| *** ninag has joined #openstack-keystone | 17:01 | |
| *** gyee has joined #openstack-keystone | 17:01 | |
| *** ChanServ sets mode: +v gyee | 17:01 | |
| *** doug-fish has quit IRC | 17:02 | |
| *** ninag_ has joined #openstack-keystone | 17:02 | |
| *** jaosorior has quit IRC | 17:04 | |
| *** ryanpetrello has quit IRC | 17:05 | |
| *** spzala has quit IRC | 17:05 | |
| *** ninag has quit IRC | 17:05 | |
| *** ryanpetrello has joined #openstack-keystone | 17:05 | |
| *** dan_nguyen has joined #openstack-keystone | 17:06 | |
| *** ninag_ has quit IRC | 17:06 | |
| *** petertr7_away is now known as petertr7 | 17:07 | |
| *** doug-fish has joined #openstack-keystone | 17:09 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: Refactor TestFernetTokenProvider unscoped token tests https://review.openstack.org/286906 | 17:12 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: Refactor TestFernetTokenProvider domain-scoped tests https://review.openstack.org/286907 | 17:12 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: Refactor TestFernetTokenProvider project-scoped tests https://review.openstack.org/286908 | 17:12 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: Refactor TestFernetTokenProvider trust-scoped tests https://review.openstack.org/286909 | 17:12 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: Remove TestFernetTokenProvider https://review.openstack.org/286910 | 17:12 |
| *** fpatwa_ has joined #openstack-keystone | 17:12 | |
| *** fpatwa_ has quit IRC | 17:16 | |
| *** shaleh has joined #openstack-keystone | 17:18 | |
| navidp | dstanek, yes I looked at montys patch | 17:18 |
| navidp | dstanek, what I tried to do is to keep current plugins offered by osc working instead of removing them and if we want to remove them, we can deprecate them, reove later. | 17:19 |
| *** petertr7 is now known as petertr7_away | 17:20 | |
| navidp | dstanek, for the service_catalog issue, In tests/v3/test_token.py there is no test checking token_issue from service_catlalog. | 17:21 |
| *** jaosorior has joined #openstack-keystone | 17:26 | |
| *** rderose has joined #openstack-keystone | 17:26 | |
| *** spandhe has joined #openstack-keystone | 17:33 | |
| *** pushkaru has quit IRC | 17:33 | |
| *** jistr has quit IRC | 17:33 | |
| dstanek | navidp: i took a quick look at that patch | 17:34 |
| dstanek | navidp: have you tried to reproduce the failure manually? | 17:34 |
| navidp | dstanek, not yet, but it seems like it is trying to call method which is removed in kas, so is should figure out if it is in different part of code. | 17:37 |
| navidp | I wanted to wirte a test, but it seems the mock service catalog is used, maybe there is other way to get token in ksa | 17:38 |
| navidp | dstanek, this ithink where it throws error https://github.com/openstack/python-openstackclient/blob/master/openstackclient/identity/v3/token.py#L175 | 17:40 |
| *** henrynash has joined #openstack-keystone | 17:46 | |
| *** ChanServ sets mode: +v henrynash | 17:46 | |
| *** lhcheng has joined #openstack-keystone | 17:46 | |
| *** ChanServ sets mode: +v lhcheng | 17:46 | |
| *** jasonsb has quit IRC | 17:47 | |
| *** rderose has quit IRC | 17:47 | |
| *** jsavak has quit IRC | 17:51 | |
| *** ninag has joined #openstack-keystone | 17:52 | |
| *** ninag_ has joined #openstack-keystone | 17:52 | |
| *** richm has quit IRC | 17:54 | |
| *** e0ne has joined #openstack-keystone | 17:55 | |
| *** ninag has quit IRC | 17:56 | |
| *** richm has joined #openstack-keystone | 17:58 | |
| *** rk4n has joined #openstack-keystone | 17:58 | |
| *** marg7175 has quit IRC | 17:58 | |
| *** marg7175 has joined #openstack-keystone | 18:01 | |
| *** henrynash has quit IRC | 18:01 | |
| *** mariusv has quit IRC | 18:05 | |
| *** jsavak has joined #openstack-keystone | 18:06 | |
| *** Ephur has joined #openstack-keystone | 18:12 | |
| *** anush has quit IRC | 18:14 | |
| *** anush has joined #openstack-keystone | 18:14 | |
| *** Ephur_ has joined #openstack-keystone | 18:16 | |
| *** permalac has quit IRC | 18:17 | |
| *** Ephur has quit IRC | 18:18 | |
| *** shangxdy has quit IRC | 18:18 | |
| *** anush has quit IRC | 18:23 | |
| *** marg7175_ has joined #openstack-keystone | 18:30 | |
| *** jaosorior has quit IRC | 18:31 | |
| *** marg7175 has quit IRC | 18:34 | |
| *** spandhe has quit IRC | 18:35 | |
| *** henrynash has joined #openstack-keystone | 18:37 | |
| *** ChanServ sets mode: +v henrynash | 18:37 | |
| *** daemontool_ has quit IRC | 18:38 | |
| *** kiran-r has quit IRC | 18:38 | |
| *** spandhe has joined #openstack-keystone | 18:42 | |
| *** petertr7_away is now known as petertr7 | 18:43 | |
| *** rcernin has joined #openstack-keystone | 18:44 | |
| openstackgerrit | guang-yee proposed openstack/keystoneauth: Support TOTP auth plugin https://review.openstack.org/281086 | 18:46 |
| *** gyee has quit IRC | 18:46 | |
| *** mhickey has quit IRC | 18:48 | |
| *** henrynash has quit IRC | 18:48 | |
| openstackgerrit | Alexander Makarov proposed openstack/keystone: Closure table for HMT https://review.openstack.org/285521 | 18:49 |
| openstackgerrit | Alexander Makarov proposed openstack/keystone: Closure table for HMT https://review.openstack.org/285521 | 18:51 |
| *** marg7175_ has quit IRC | 18:54 | |
| *** mvk has quit IRC | 18:57 | |
| *** e0ne has quit IRC | 18:57 | |
| *** pushkaru has joined #openstack-keystone | 18:58 | |
| *** neophy has joined #openstack-keystone | 18:58 | |
| *** marg7175 has joined #openstack-keystone | 19:00 | |
| *** jsavak has quit IRC | 19:05 | |
| *** jsavak has joined #openstack-keystone | 19:06 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: Add notifications to user/group membership https://review.openstack.org/287857 | 19:07 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: Add ability to send notifications for actors https://review.openstack.org/287977 | 19:07 |
| *** fangxu has joined #openstack-keystone | 19:09 | |
| *** spzala has joined #openstack-keystone | 19:10 | |
| *** fpatwa_ has joined #openstack-keystone | 19:13 | |
| *** rloo has joined #openstack-keystone | 19:13 | |
| *** spzala has quit IRC | 19:15 | |
| *** spzala has joined #openstack-keystone | 19:16 | |
| *** sheel has quit IRC | 19:17 | |
| *** rloo has left #openstack-keystone | 19:17 | |
| *** fpatwa_ has quit IRC | 19:17 | |
| *** spzala has quit IRC | 19:17 | |
| *** spzala has joined #openstack-keystone | 19:18 | |
| lbragstad | jorge_munoz had a quick comment here https://review.openstack.org/#/c/287413/1/keystone/revoke/core.py | 19:25 |
| patchbot | lbragstad: patch 287413 - keystone - Deprecated revocation functions | 19:25 |
| *** sdake_ has joined #openstack-keystone | 19:35 | |
| *** sdake has quit IRC | 19:35 | |
| *** bjornar has joined #openstack-keystone | 19:45 | |
| *** marg7175 has quit IRC | 19:49 | |
| *** fangxu has quit IRC | 19:51 | |
| *** browne has quit IRC | 19:53 | |
| *** boris-42 has joined #openstack-keystone | 19:55 | |
| *** ayoung has quit IRC | 19:56 | |
| *** anush has joined #openstack-keystone | 20:02 | |
| *** jsavak has quit IRC | 20:04 | |
| *** jsavak has joined #openstack-keystone | 20:04 | |
| *** phalmos has joined #openstack-keystone | 20:05 | |
| *** Ephur_ has quit IRC | 20:10 | |
| *** sdake_ has quit IRC | 20:11 | |
| *** sdake has joined #openstack-keystone | 20:12 | |
| *** breton has quit IRC | 20:16 | |
| *** slberger has quit IRC | 20:20 | |
| *** slberger1 has joined #openstack-keystone | 20:20 | |
| openstackgerrit | Jorge Munoz proposed openstack/keystone: Deprecated revocation functions https://review.openstack.org/287413 | 20:23 |
| *** dave-mccowan has quit IRC | 20:26 | |
| *** e0ne has joined #openstack-keystone | 20:32 | |
| *** ayoung has joined #openstack-keystone | 20:33 | |
| *** ChanServ sets mode: +v ayoung | 20:33 | |
| lbragstad | dolphm right now UUID tokens are validated with the information that was put into the database when they were created | 20:36 |
| dolphm | we were discussing in the wrong channel if anyone wants to catch up: http://cdn.pasteraw.com/ro8xxz1hhsit7igcvqyvqv5r3o677ri | 20:36 |
| lbragstad | so it is possible for uuid tokens to be validated with stale data | 20:36 |
| lbragstad | which is where the revocation events come into play for uuid tokens | 20:36 |
| lbragstad | in order for https://review.openstack.org/#/c/287413/2 to be removed before uuid tokens are removed - then uuid tokens need to follow the same validation approach that fernet takes (if i'm understanding everything correctly) | 20:37 |
| patchbot | lbragstad: patch 287413 - keystone - Deprecated revocation functions | 20:37 |
| lbragstad | it's essentially this comment - https://github.com/openstack/keystone/blob/e2ee0641922c46c5cd5f9b541865f45b63d7b78d/keystone/token/providers/common.py#L773-L780 | 20:38 |
| dolphm | prior to revocation events, we did the revocation list with valid=False in SQL, and a ton of querying whenever a revocation event occurred | 20:39 |
| *** spzala has quit IRC | 20:39 | |
| dolphm | super slow | 20:39 |
| dolphm | we can't go back to that | 20:39 |
| *** spzala has joined #openstack-keystone | 20:39 | |
| lbragstad | dolphm so what if we removed all the stuff that is shoved into extras when a uuid token is persisted? | 20:40 |
| lbragstad | and force keystone to rebuild the token reference when it validates a uuid token? | 20:41 |
| lbragstad | just like it does with a fernet token? | 20:41 |
| bknudson | uuid validation should be the same as fernet validation | 20:42 |
| bknudson | although I can see how a revocation event might not work correctly when the properties of the token change. | 20:43 |
| lbragstad | instead of relying on what was persisted in the database and assuming nothing changed (example, user gets a token, user is removed from project, user validates a token). | 20:43 |
| lbragstad | in ^ that case - we have to rely on revocation events because the token reference consists of stale data | 20:43 |
| lbragstad | data that *was* valid when the token was created. | 20:44 |
| *** spzala has quit IRC | 20:44 | |
| *** jsavak has quit IRC | 20:44 | |
| bknudson | what if you revoke a token with role = whatever | 20:45 |
| *** jsavak has joined #openstack-keystone | 20:45 | |
| bknudson | then the user roles change so they don't have role=whatever | 20:45 |
| bknudson | now all their old tokens are valid again | 20:45 |
| bknudson | because the user doesn't have the role anymore | 20:46 |
| *** alex_xu has quit IRC | 20:46 | |
| bknudson | maybe we don't support revoking all tokens with role = whatever? | 20:46 |
| lbragstad | bknudson we could issue a revoke by user id revocation event | 20:46 |
| bknudson | user id isn't going to change so we don't have to worry about that condition | 20:47 |
| *** rk4n has quit IRC | 20:48 | |
| lbragstad | bknudson so your case is - user gets a role on a project, user authenticates, user's role is removed, user validates and is 404'd, user's role is re-added and their original token is valid? | 20:48 |
| bknudson | lbragstad: I'd have to know what are the types of revocations we support to come up with an example | 20:49 |
| *** alex_xu has joined #openstack-keystone | 20:49 | |
| lbragstad | bknudson for starts we want to get rid of https://review.openstack.org/#/c/287413/2 | 20:49 |
| patchbot | lbragstad: patch 287413 - keystone - Deprecated revocation functions | 20:49 |
| *** doug-fis_ has joined #openstack-keystone | 20:49 | |
| *** doug-fish has quit IRC | 20:50 | |
| *** tqtran has joined #openstack-keystone | 20:50 | |
| *** anush has quit IRC | 20:51 | |
| *** dave-mccowan has joined #openstack-keystone | 20:51 | |
| bknudson | bknudson: right, based on that change server could check at time n and the resource isn't "live" and then it comes back "live" later and the token is back to valid | 20:51 |
| bknudson | strange, but I guess it's not going to lead to incorrect results | 20:51 |
| *** dave-mcc_ has joined #openstack-keystone | 20:54 | |
| *** e0ne has quit IRC | 20:54 | |
| *** gyee has joined #openstack-keystone | 20:55 | |
| *** ChanServ sets mode: +v gyee | 20:55 | |
| raildo | bknudson: about your comment on this patch, so we can just remove this code on mitaka, right? | 20:56 |
| morgan | bknudson: it should be "ok" | 20:56 |
| morgan | bknudson: but generally speaking that is a concern with any/all revocation things :( | 20:57 |
| *** dave-mccowan has quit IRC | 20:57 | |
| bknudson | I thought we might have a "revoke all tokens with this role before this time" (when someone disables a role) | 20:58 |
| morgan | bknudson: we do...-ish | 20:58 |
| dstanek | weird... getting "Couldn't find remote ref refs/changes/####/7" when trying to "git review -d" - has anyone seen that before? | 20:58 |
| morgan | bknudson: it's not particularly good | 20:58 |
| lbragstad | dstanek wrong repository | 20:58 |
| morgan | bknudson: it almost would be better to just revoke user/project combo, | 20:58 |
| bknudson | raildo: y, either remove the code or wait until n to remove the code | 20:59 |
| bknudson | no need to deprecate internal methods | 20:59 |
| bknudson | morgan: with the propsed change, there is no revoking user+project | 20:59 |
| raildo | bknudson: got it... thanks | 20:59 |
| lbragstad | bknudson morgan would we need to do that if we rebuild the token reference on validation? | 20:59 |
| *** e0ne has joined #openstack-keystone | 21:00 | |
| morgan | lbragstad: not as much | 21:00 |
| morgan | lbragstad: which is thankfully how fernet works | 21:00 |
| morgan | lbragstad: if we move uuid to the same mechanism it's less important EXCEPT when cached...which is a know "meh" | 21:00 |
| bknudson | why do we still need revoke by user_id in https://review.openstack.org/#/c/287413/2/keystone/revoke/core.py ? | 21:00 |
| patchbot | bknudson: patch 287413 - keystone - Deprecated revocation functions | 21:00 |
| morgan | bknudson: ^ cc | 21:00 |
| dstanek | lbragstad: hmm....it's not though :-( maybe i screwed something up and i just need a fresh clone | 21:01 |
| lbragstad | so we go from having a bunch of revocation events to having less than a bunch | 21:01 |
| bknudson | you can check if the user is enabled or deleted | 21:01 |
| morgan | bknudson: password change | 21:01 |
| lbragstad | dstanek strange | 21:01 |
| bknudson | morgan: ok, makes sense | 21:01 |
| morgan | bknudson: it's the only case where a revoke-by-user-id is aboslutely required. | 21:01 |
| lbragstad | yeah - then all revoke because role assignment stuff goes away | 21:01 |
| morgan | so, if we rebuild all the roles etc every time and the token body [like we should] most of the revokes don't matter ouside of the 300-600s cache | 21:02 |
| jorge_munoz | bknudson: So for deployers creating their now drivers, wouldn’t it be good to show the deprecation warning? | 21:04 |
| bknudson | jorge_munoz: deployers create their drivers using the driver interface, not the manager | 21:04 |
| bknudson | the driver interface is at line 242 in revoke/core.py | 21:05 |
| bknudson | the driver interface uses keystone.revoke.model.RevocationEvent , so if that's changing we'll need to warn driver implementations | 21:06 |
| lbragstad | the only other case would be if people were writing their own drivers (i.e. identity driver) and they were calling into the revocation manager from their driver. | 21:07 |
| lbragstad | that would be a possibility - not sure how likely but... | 21:07 |
| bknudson | the manager doesn't provide a stable interface. it's only the drivers | 21:08 |
| *** raildo is now known as raildo-afk | 21:08 | |
| bknudson | let's not make this harder on ourselves | 21:08 |
| jorge_munoz | bknudson: Ok, that makes sense. I’m all for just removing the code when it’s not longer being used. | 21:09 |
| *** rk4n has joined #openstack-keystone | 21:13 | |
| *** rk4n has quit IRC | 21:14 | |
| *** spzala has joined #openstack-keystone | 21:14 | |
| dolphm | lbragstad: drivers should not call back into managers, anyway | 21:14 |
| *** fpatwa_ has joined #openstack-keystone | 21:14 | |
| dolphm | dstanek: i threw this together, and then discovered that there are test which directly disagree with my commit message (feature deprecated in A for removal in A); what's the point? https://review.openstack.org/#/c/288127/ | 21:15 |
| patchbot | dolphm: patch 288127 - oslo.log - Validate the value of remove_in | 21:15 |
| *** e0ne has quit IRC | 21:17 | |
| *** e0ne has joined #openstack-keystone | 21:17 | |
| morgan | dolphm: uhm isn't in 0 meant to be "no plans for removal"? | 21:18 |
| morgan | that was my understanding of it | 21:18 |
| morgan | maybe it should be -1 | 21:18 |
| *** spzala has quit IRC | 21:18 | |
| *** fpatwa_ has quit IRC | 21:18 | |
| openstackgerrit | Brant Knudson proposed openstack/keystone: WIP - Generate swagger https://review.openstack.org/287499 | 21:19 |
| dstanek | dolphm: hmmm...and there's a test for that case? | 21:20 |
| dstanek | dolphm: A meaning 0 or some other number? | 21:21 |
| bknudson | if you paste http://paste.openstack.org/raw/489241/ into http://editor.swagger.io/#/ , you'll see some rendered docs generated from the server | 21:21 |
| bknudson | (collapse the errors it's still WIP) | 21:22 |
| bknudson | the other thing you can do is go to http://editor.swagger.io/#/ and generate a python client library from the swagger | 21:24 |
| *** pauloewerton has quit IRC | 21:24 | |
| *** fangxu has joined #openstack-keystone | 21:24 | |
| *** ayoung has quit IRC | 21:24 | |
| dstanek | dolphm: that failing test is just checking that the thing won't be removed because remove_in=0 | 21:25 |
| *** spzala has joined #openstack-keystone | 21:26 | |
| *** e0ne has quit IRC | 21:28 | |
| openstackgerrit | Michael Krotscheck proposed openstack/keystone: Consolidate configuration default overrides https://review.openstack.org/286291 | 21:28 |
| *** breton has joined #openstack-keystone | 21:28 | |
| *** tqtran has quit IRC | 21:31 | |
| *** dave-mcc_ has quit IRC | 21:31 | |
| *** e0ne has joined #openstack-keystone | 21:37 | |
| *** dave-mccowan has joined #openstack-keystone | 21:40 | |
| bknudson | here's an improved swagger doc with no errors (luckily we've already got the path vars from JSONHome): http://paste.openstack.org/raw/489246/ | 21:41 |
| *** spzala has quit IRC | 21:43 | |
| *** rcernin has quit IRC | 21:45 | |
| *** rk4n has joined #openstack-keystone | 21:46 | |
| *** rk4n has quit IRC | 21:46 | |
| openstackgerrit | Sean Perry proposed openstack/keystone: Adding 'domain_id' filter to list_user_projects() https://review.openstack.org/182569 | 21:53 |
| *** rk4n has joined #openstack-keystone | 21:53 | |
| *** fawadkhaliq has joined #openstack-keystone | 21:55 | |
| openstackgerrit | Trevor McCasland proposed openstack/keystone: Add and change max size validation parameters https://review.openstack.org/285393 | 21:56 |
| *** rk4n has quit IRC | 21:57 | |
| shaleh | bknudson: good work with the swagger stuff | 21:59 |
| bknudson | shaleh: thanks! we'll see if this gets anywhere. | 22:00 |
| shaleh | bknudson: first step is having it do something. Now people can bike shed. | 22:01 |
| openstackgerrit | Brant Knudson proposed openstack/keystone: WIP - Generate swagger https://review.openstack.org/287499 | 22:02 |
| lbragstad | dolphm ++ agreed, I'd like to think that we would discourage that case if we did something that broke someone | 22:03 |
| shaleh | bknudson: so will we need to add more HTTP codes to keystone/common/wsgi.py? What about expected failure codes? | 22:04 |
| bknudson | shaleh: yes, there's a lot of work to do. Figuring out the HTTP codes to improve the docs is one thing to do. | 22:05 |
| bknudson | also is to get a schema for input / output | 22:05 |
| bknudson | and other input / output parameters | 22:05 |
| shaleh | bknudson: so long term the idea is to have changes to the API docs reflected here in wsgi.py? | 22:06 |
| *** Ephur has joined #openstack-keystone | 22:06 | |
| *** yarkot_ has joined #openstack-keystone | 22:07 | |
| bknudson | shaleh: hopefully we can have the API docs in swagger | 22:07 |
| *** petertr7 is now known as petertr7_away | 22:07 | |
| bknudson | but of course everything in the API docs / spec now should be in our swagger definition | 22:07 |
| bknudson | the docs team is working on a tool to convert the WADLs that generates the API docs to swagger | 22:08 |
| *** spandhe has quit IRC | 22:08 | |
| bknudson | fairyslipper | 22:08 |
| bknudson | I'm not sure that's the best way to get our swagger doc... maybe we should generate it from keystone | 22:08 |
| *** henrynash has joined #openstack-keystone | 22:12 | |
| *** ChanServ sets mode: +v henrynash | 22:12 | |
| *** spandhe has joined #openstack-keystone | 22:13 | |
| *** yarkot_ has quit IRC | 22:16 | |
| shaleh | it is ugly grunt work in any direction | 22:19 |
| shaleh | (sorry, team meeting) | 22:19 |
| *** knikolla has quit IRC | 22:20 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: Add notifications to user/group membership https://review.openstack.org/287857 | 22:27 |
| *** edmondsw has quit IRC | 22:28 | |
| *** e0ne has quit IRC | 22:35 | |
| *** ayoung has joined #openstack-keystone | 22:36 | |
| *** ChanServ sets mode: +v ayoung | 22:36 | |
| *** ninag_ has quit IRC | 22:47 | |
| *** jorge_munoz has quit IRC | 22:55 | |
| *** ayoung has quit IRC | 22:55 | |
| *** jorge_munoz has joined #openstack-keystone | 22:55 | |
| *** sdake has quit IRC | 22:57 | |
| *** sdake has joined #openstack-keystone | 23:00 | |
| *** jsavak has quit IRC | 23:02 | |
| *** GB21 has joined #openstack-keystone | 23:09 | |
| *** sdake has quit IRC | 23:11 | |
| *** fpatwa_ has joined #openstack-keystone | 23:15 | |
| *** sdake has joined #openstack-keystone | 23:17 | |
| *** ayoung has joined #openstack-keystone | 23:18 | |
| *** ChanServ sets mode: +v ayoung | 23:18 | |
| *** fawadkhaliq has quit IRC | 23:18 | |
| *** fawadkhaliq has joined #openstack-keystone | 23:18 | |
| *** fpatwa_ has quit IRC | 23:19 | |
| *** fawadkhaliq has quit IRC | 23:21 | |
| *** fawadkhaliq has joined #openstack-keystone | 23:21 | |
| *** sdake has quit IRC | 23:22 | |
| *** ianw has quit IRC | 23:28 | |
| *** gordc has quit IRC | 23:29 | |
| openstackgerrit | Sean Perry proposed openstack/keystoneauth: Apply a heuristic for product name if a user_agent is not provided https://review.openstack.org/288175 | 23:30 |
| *** tqtran has joined #openstack-keystone | 23:30 | |
| openstackgerrit | Brant Knudson proposed openstack/keystone: WIP - Generate swagger https://review.openstack.org/287499 | 23:33 |
| *** neophy has quit IRC | 23:34 | |
| *** sdake has joined #openstack-keystone | 23:41 | |
| *** knikolla has joined #openstack-keystone | 23:44 | |
| *** knikolla has quit IRC | 23:51 | |
| *** ianw has joined #openstack-keystone | 23:59 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!