| *** mylu has quit IRC | 00:02 | |
| *** mylu has joined #openstack-keystone | 00:03 | |
| *** mylu has quit IRC | 00:05 | |
| *** mylu has joined #openstack-keystone | 00:06 | |
| *** mylu has quit IRC | 00:10 | |
| *** mylu has joined #openstack-keystone | 00:11 | |
| *** arunkant has quit IRC | 00:14 | |
| *** mylu has quit IRC | 00:16 | |
| *** mylu has joined #openstack-keystone | 00:18 | |
| *** dims has joined #openstack-keystone | 00:23 | |
| *** chem has quit IRC | 00:24 | |
| *** shaleh has quit IRC | 00:29 | |
| *** lhcheng has quit IRC | 00:30 | |
| *** mnaser has quit IRC | 00:31 | |
| *** mordred has quit IRC | 00:31 | |
| *** afazekas_ has quit IRC | 00:32 | |
| *** afazekas has joined #openstack-keystone | 00:32 | |
| *** mordred has joined #openstack-keystone | 00:32 | |
| *** dims has quit IRC | 00:32 | |
| *** jasonsb has joined #openstack-keystone | 00:37 | |
| *** timcline has joined #openstack-keystone | 00:38 | |
| *** markvoelker has joined #openstack-keystone | 00:40 | |
| *** mnaser has joined #openstack-keystone | 00:42 | |
| *** timcline has quit IRC | 00:42 | |
| *** sdake has joined #openstack-keystone | 00:55 | |
| *** mylu has quit IRC | 00:55 | |
| *** dims has joined #openstack-keystone | 00:56 | |
| *** mylu has joined #openstack-keystone | 01:00 | |
| jamielennox | stevemar: thanks for fixing up that bootstrap doc path | 01:02 |
|---|---|---|
| jamielennox | s/path/patch | 01:02 |
| *** sdake has quit IRC | 01:10 | |
| *** markvoelker has quit IRC | 01:14 | |
| *** yarkot_ has joined #openstack-keystone | 01:24 | |
| *** chlong has quit IRC | 01:26 | |
| *** EinstCrazy has joined #openstack-keystone | 01:32 | |
| *** yarkot_ has quit IRC | 01:33 | |
| *** woodster_ has quit IRC | 01:37 | |
| *** timcline has joined #openstack-keystone | 01:39 | |
| *** timcline has quit IRC | 01:43 | |
| *** woodster_ has joined #openstack-keystone | 01:57 | |
| *** dan_nguyen has quit IRC | 02:02 | |
| *** browne has quit IRC | 02:03 | |
| *** fawadkhaliq has quit IRC | 02:12 | |
| openstackgerrit | Colleen Murphy proposed openstack/keystone: Correct Hints class filter documentation https://review.openstack.org/292680 | 02:22 |
| *** tellesnobrega_af is now known as tellesnobrega | 02:33 | |
| *** dims has quit IRC | 02:38 | |
| *** timcline has joined #openstack-keystone | 02:40 | |
| *** tqtran has quit IRC | 02:42 | |
| *** browne has joined #openstack-keystone | 02:43 | |
| *** lhcheng has joined #openstack-keystone | 02:44 | |
| *** ChanServ sets mode: +v lhcheng | 02:44 | |
| *** timcline has quit IRC | 02:44 | |
| *** mylu has quit IRC | 02:47 | |
| *** EinstCrazy has quit IRC | 02:47 | |
| *** mylu has joined #openstack-keystone | 02:47 | |
| *** EinstCrazy has joined #openstack-keystone | 02:48 | |
| *** EinstCrazy has quit IRC | 02:50 | |
| *** mylu has quit IRC | 02:50 | |
| *** browne has quit IRC | 03:00 | |
| *** richm has quit IRC | 03:00 | |
| stevemar | jamielennox: np dude | 03:01 |
| *** doug-fish has joined #openstack-keystone | 03:03 | |
| *** fawadkhaliq has joined #openstack-keystone | 03:06 | |
| *** mylu has joined #openstack-keystone | 03:09 | |
| *** markvoelker has joined #openstack-keystone | 03:11 | |
| *** dave-mccowan has quit IRC | 03:17 | |
| *** lhcheng_ has joined #openstack-keystone | 03:26 | |
| *** tangchen has joined #openstack-keystone | 03:28 | |
| tangchen | Hi all, I have a question about keystone. Would you please help me with it ? | 03:29 |
| *** lhcheng has quit IRC | 03:29 | |
| tangchen | When I run keystone-manage db_sync, it gives me "AssertionError: There is no script for 44 version" | 03:29 |
| tangchen | keystone-manage db_version will print 43, not 44 | 03:29 |
| tangchen | Do you have any idea how to solve this problem ? | 03:29 |
| *** chlong has joined #openstack-keystone | 03:30 | |
| stevemar | tangchen: do you have old pyc files laying around? | 03:30 |
| tangchen | stevemar: Oh, maybe | 03:30 |
| tangchen | stevemar: So, let me try to cleanup all old pyc files in keystone. | 03:31 |
| stevemar | tangchen: yeah, likely that is the problem, or you are on a weird branch | 03:31 |
| *** mylu has quit IRC | 03:31 | |
| stevemar | but try pyc cleanup first | 03:31 |
| tangchen | stevemar: OK, one sec. :) | 03:32 |
| *** mylu has joined #openstack-keystone | 03:33 | |
| *** links has joined #openstack-keystone | 03:38 | |
| *** timcline has joined #openstack-keystone | 03:40 | |
| *** tellesnobrega is now known as tellesnobrega_af | 03:41 | |
| *** markvoelker has quit IRC | 03:44 | |
| *** timcline has quit IRC | 03:45 | |
| *** aswadr_ has joined #openstack-keystone | 03:46 | |
| tangchen | stevemar: I think the problem is resolved. Thanks, Steve. :) | 03:48 |
| stevemar | tangchen: np at all :) | 03:48 |
| *** ayoung has quit IRC | 03:57 | |
| morgan | stevemar: ah the life of a PTL | 04:01 |
| morgan | stevemar: i don't miss it | 04:01 |
| morgan | stevemar: ... i'm playing with TensorFlow | 04:01 |
| morgan | stevemar: it's fun. | 04:01 |
| stevemar | morgan: hehe, it's not so bad :) | 04:01 |
| morgan | stevemar: thinking about how to model things so i can try and creat a deep learning thing for fun | 04:02 |
| *** sdake has joined #openstack-keystone | 04:06 | |
| *** sdake_ has joined #openstack-keystone | 04:09 | |
| *** sdake has quit IRC | 04:11 | |
| *** sdake_ has quit IRC | 04:19 | |
| stevemar | morgan: we've got an extra fishbowl room for the summit, yay | 04:20 |
| *** mylu has quit IRC | 04:24 | |
| stevemar | bed time! | 04:27 |
| *** mylu has joined #openstack-keystone | 04:41 | |
| *** mylu has quit IRC | 04:42 | |
| *** mylu has joined #openstack-keystone | 04:48 | |
| *** woodster_ has quit IRC | 04:57 | |
| *** mylu has quit IRC | 04:57 | |
| *** mylu has joined #openstack-keystone | 04:58 | |
| *** mylu has quit IRC | 05:01 | |
| *** Nirupama has joined #openstack-keystone | 05:05 | |
| *** EinstCrazy has joined #openstack-keystone | 05:07 | |
| *** EinstCrazy has quit IRC | 05:09 | |
| *** EinstCrazy has joined #openstack-keystone | 05:09 | |
| openstackgerrit | Merged openstack/keystone: Release note cleanup https://review.openstack.org/292540 | 05:12 |
| *** sdake has joined #openstack-keystone | 05:16 | |
| *** roxanagh_ has quit IRC | 05:23 | |
| *** roxanagh_ has joined #openstack-keystone | 05:24 | |
| *** sdake has quit IRC | 05:33 | |
| *** roxanagh_ has quit IRC | 05:40 | |
| *** lhcheng has joined #openstack-keystone | 05:40 | |
| *** ChanServ sets mode: +v lhcheng | 05:40 | |
| *** roxanagh_ has joined #openstack-keystone | 05:41 | |
| *** markvoelker has joined #openstack-keystone | 05:41 | |
| *** lhcheng_ has quit IRC | 05:44 | |
| *** roxanagh_ has quit IRC | 05:45 | |
| *** lhcheng has quit IRC | 05:45 | |
| *** zzzeek has quit IRC | 05:49 | |
| *** zzzeek has joined #openstack-keystone | 05:50 | |
| *** furface has quit IRC | 05:51 | |
| *** jaosorior has joined #openstack-keystone | 05:57 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone: Imported Translations from Zanata https://review.openstack.org/292714 | 06:04 |
| *** furface has joined #openstack-keystone | 06:10 | |
| *** markvoelker has quit IRC | 06:14 | |
| *** LZ has quit IRC | 06:29 | |
| *** EinstCrazy has quit IRC | 06:33 | |
| *** roxanagh_ has joined #openstack-keystone | 06:42 | |
| *** lhcheng has joined #openstack-keystone | 06:43 | |
| *** ChanServ sets mode: +v lhcheng | 06:43 | |
| *** furface has quit IRC | 06:44 | |
| *** roxanagh_ has quit IRC | 06:51 | |
| *** lhcheng_ has joined #openstack-keystone | 06:59 | |
| *** lhcheng has quit IRC | 07:03 | |
| *** tesseract has joined #openstack-keystone | 07:13 | |
| *** tesseract is now known as Guest97519 | 07:13 | |
| *** fawadkhaliq has quit IRC | 07:30 | |
| *** lhcheng_ has quit IRC | 07:50 | |
| *** belmoreira has joined #openstack-keystone | 07:58 | |
| *** Guest97519 has quit IRC | 08:00 | |
| *** mhickey has joined #openstack-keystone | 08:01 | |
| *** tesseract has joined #openstack-keystone | 08:05 | |
| *** tesseract is now known as Guest91794 | 08:06 | |
| *** markvoelker has joined #openstack-keystone | 08:12 | |
| *** pnavarro has joined #openstack-keystone | 08:12 | |
| *** kaliya has joined #openstack-keystone | 08:25 | |
| *** pece has joined #openstack-keystone | 08:28 | |
| *** fawadkhaliq has joined #openstack-keystone | 08:31 | |
| *** chlong has quit IRC | 08:32 | |
| *** rk4n has joined #openstack-keystone | 08:33 | |
| *** rk4n has quit IRC | 08:35 | |
| *** bjornar has joined #openstack-keystone | 08:40 | |
| *** markvoelker has quit IRC | 08:44 | |
| *** Guest91794 has quit IRC | 08:45 | |
| *** kaliya has quit IRC | 08:45 | |
| *** rk4n has joined #openstack-keystone | 08:51 | |
| *** e0ne has joined #openstack-keystone | 08:57 | |
| *** Guest91794 has joined #openstack-keystone | 09:00 | |
| *** dulek has left #openstack-keystone | 09:03 | |
| *** jistr has joined #openstack-keystone | 09:20 | |
| *** rcernin has joined #openstack-keystone | 09:31 | |
| *** lhcheng has joined #openstack-keystone | 09:38 | |
| *** ChanServ sets mode: +v lhcheng | 09:38 | |
| *** lhcheng has quit IRC | 09:43 | |
| *** kaliya has joined #openstack-keystone | 09:59 | |
| *** e0ne has quit IRC | 10:08 | |
| *** e0ne has joined #openstack-keystone | 10:08 | |
| *** dave-mccowan has joined #openstack-keystone | 10:24 | |
| *** rodrigods has quit IRC | 10:35 | |
| *** rodrigods has joined #openstack-keystone | 10:36 | |
| *** markvoelker has joined #openstack-keystone | 10:42 | |
| *** dims has joined #openstack-keystone | 11:12 | |
| -openstackstatus- NOTICE: Gerrit is going to be restarted | 11:13 | |
| *** markvoelker has quit IRC | 11:15 | |
| *** dims has quit IRC | 11:20 | |
| *** dims has joined #openstack-keystone | 11:21 | |
| *** dims has quit IRC | 11:21 | |
| *** dims has joined #openstack-keystone | 11:21 | |
| -openstackstatus- NOTICE: Gerrit had to be restarted because was not responsive. As a consequence, some of the test results have been lost, from 08:30 UTC to 10:30 UTC approximately. Please recheck any affected jobs by this problem. | 11:33 | |
| -openstackstatus- NOTICE: Gerrit had to be restarted because was not responsive. As a consequence, some of the test results have been lost, from 09:30 UTC to 11:30 UTC approximately. Please recheck any affected jobs by this problem. | 11:35 | |
| *** kaliya has quit IRC | 11:42 | |
| *** jed56 has quit IRC | 11:43 | |
| *** kaliya has joined #openstack-keystone | 11:43 | |
| *** lhcheng has joined #openstack-keystone | 11:51 | |
| *** ChanServ sets mode: +v lhcheng | 11:51 | |
| *** lhcheng has quit IRC | 11:55 | |
| openstackgerrit | Alexander Makarov proposed openstack/keystone: Unified delegation model https://review.openstack.org/208488 | 12:01 |
| openstackgerrit | Alexander Makarov proposed openstack/keystone: Unified delegation assignment driver https://review.openstack.org/291318 | 12:01 |
| openstackgerrit | Alexander Makarov proposed openstack/keystone: Unified delegation trust driver https://review.openstack.org/291871 | 12:02 |
| *** belmoreira has quit IRC | 12:07 | |
| *** jaosorior has quit IRC | 12:08 | |
| *** jaosorior has joined #openstack-keystone | 12:09 | |
| *** jaosorior has quit IRC | 12:14 | |
| *** raildo-afk is now known as raildo | 12:16 | |
| *** pnavarro has quit IRC | 12:18 | |
| openstackgerrit | Alexander Makarov proposed openstack/keystone: Unified delegation assignment driver https://review.openstack.org/291318 | 12:20 |
| *** ayoung has joined #openstack-keystone | 12:23 | |
| *** ChanServ sets mode: +v ayoung | 12:23 | |
| *** urdak has joined #openstack-keystone | 12:24 | |
| *** dims has quit IRC | 12:25 | |
| *** dims has joined #openstack-keystone | 12:26 | |
| openstackgerrit | Alexander Makarov proposed openstack/keystone: Unified delegation trust driver https://review.openstack.org/291871 | 12:30 |
| urdak | hey guys, can someone please help me understand why is it not possible for a non-admin user to list services using a project scoped token by going to /v3/services (403 identity:list_services), when while acquiring this token we get them in the json response anyway? removing identity:list_services admin requirement from policy.json does not help. im using liberty | 12:31 |
| *** edmondsw has joined #openstack-keystone | 12:32 | |
| *** jaosorior has joined #openstack-keystone | 12:36 | |
| *** tangchen has quit IRC | 12:47 | |
| *** Nirupama has quit IRC | 12:48 | |
| *** gordc has joined #openstack-keystone | 12:50 | |
| *** ninag has joined #openstack-keystone | 12:53 | |
| *** markvoelker has joined #openstack-keystone | 12:53 | |
| *** richm has joined #openstack-keystone | 12:59 | |
| *** kaliya has quit IRC | 13:07 | |
| *** sdake has joined #openstack-keystone | 13:08 | |
| *** ig0r__ has joined #openstack-keystone | 13:19 | |
| *** ig0r_ has quit IRC | 13:22 | |
| *** ninag_ has joined #openstack-keystone | 13:23 | |
| *** chlong has joined #openstack-keystone | 13:25 | |
| openstackgerrit | Henrique Truta proposed openstack/keystone: Remove reference to keystoneclient CLI https://review.openstack.org/291889 | 13:25 |
| *** ninag has quit IRC | 13:26 | |
| *** ayoung has quit IRC | 13:26 | |
| *** mylu has joined #openstack-keystone | 13:30 | |
| *** mylu has quit IRC | 13:31 | |
| *** sdake has quit IRC | 13:38 | |
| *** ayoung has joined #openstack-keystone | 13:40 | |
| *** ChanServ sets mode: +v ayoung | 13:40 | |
| *** sigmavirus24_awa is now known as sigmavirus24 | 13:45 | |
| openstackgerrit | Alexander Makarov proposed openstack/keystone: Unified delegation trust driver https://review.openstack.org/291871 | 13:50 |
| *** urdak has quit IRC | 13:51 | |
| *** Guest41345 has quit IRC | 14:03 | |
| *** dan_nguyen has joined #openstack-keystone | 14:05 | |
| *** adelia has joined #openstack-keystone | 14:20 | |
| *** adelia has quit IRC | 14:20 | |
| *** sdake has joined #openstack-keystone | 14:25 | |
| *** Guest91794 has quit IRC | 14:31 | |
| *** mylu has joined #openstack-keystone | 14:33 | |
| *** dan_nguyen has quit IRC | 14:39 | |
| *** gema_ has quit IRC | 14:44 | |
| *** mylu has quit IRC | 14:53 | |
| *** jorge_munoz has joined #openstack-keystone | 14:54 | |
| *** mylu has joined #openstack-keystone | 14:57 | |
| -openstackstatus- NOTICE: Launchpad OpenID SSO is currently experiencing issues preventing login. The Launchpad team is working on the issue | 14:57 | |
| *** ChanServ changes topic to "Launchpad OpenID SSO is currently experiencing issues preventing login. The Launchpad team is working on the issue" | 14:57 | |
| *** mylu has quit IRC | 14:58 | |
| *** links has quit IRC | 14:59 | |
| stevemar | htruta: let's nuke the cli_examples file | 14:59 |
| stevemar | htruta: doesn't make sense to have it any longer | 14:59 |
| *** markvoelker has quit IRC | 15:00 | |
| htruta | stevemar: ++ changed the patch to delete it | 15:00 |
| htruta | stevemar: (I'm assuming "nuke" means something like that, only seen this in duke nukem) | 15:01 |
| stevemar | htruta: maybe make a separate patch that changes the text here: http://docs.openstack.org/developer/keystone/#related-identity-projects << "For CLI examples, refer to OpenStackClient." | 15:01 |
| *** jaosorior has quit IRC | 15:01 | |
| stevemar | htruta: look @ samueldmq's comments, he found a few spots where there are references to cli_examples.rst in other docs | 15:02 |
| htruta | stevemar: yes, samueldmq has commented that. | 15:02 |
| stevemar | htruta: but yeah, nuke == remove it :) | 15:02 |
| htruta | stevemar: it's your call whether we treat that in this patch or in a separate | 15:02 |
| *** roxanagh_ has joined #openstack-keystone | 15:02 | |
| *** mylu has joined #openstack-keystone | 15:02 | |
| htruta | I can do in the same if you prefer | 15:02 |
| *** real56 has joined #openstack-keystone | 15:03 | |
| stevemar | htruta: nah, just remove the references to cli_examples.rst in this patch | 15:03 |
| htruta | stevemar: ok | 15:05 |
| *** tesseract has joined #openstack-keystone | 15:06 | |
| *** roxanagh_ has quit IRC | 15:07 | |
| *** tesseract is now known as Guest71467 | 15:07 | |
| *** slberger has joined #openstack-keystone | 15:07 | |
| *** jaugustine has joined #openstack-keystone | 15:07 | |
| *** mylu has quit IRC | 15:07 | |
| *** mylu has joined #openstack-keystone | 15:11 | |
| *** pushkaru has joined #openstack-keystone | 15:21 | |
| *** jbell8 has joined #openstack-keystone | 15:25 | |
| *** ChanServ changes topic to "mitaka-3 done, no more features (you missed your chance) until Newton | Tag bugs as rc-potential - fix more bugs! | https://launchpad.net/keystone/+milestone/mitaka-rc1" | 15:30 | |
| -openstackstatus- NOTICE: Launchpad SSO is back to normal - happy hacking | 15:30 | |
| *** mylu has quit IRC | 15:31 | |
| *** mylu has joined #openstack-keystone | 15:32 | |
| *** chlong has quit IRC | 15:33 | |
| *** david8hu has quit IRC | 15:34 | |
| *** roxanaghe has quit IRC | 15:39 | |
| *** fawadkhaliq has quit IRC | 15:40 | |
| *** fawadkhaliq has joined #openstack-keystone | 15:40 | |
| stevemar | haven't looked at that in a while | 15:41 |
| *** mylu has quit IRC | 15:42 | |
| *** mylu has joined #openstack-keystone | 15:44 | |
| *** fawadkhaliq has quit IRC | 15:45 | |
| *** spzala has joined #openstack-keystone | 15:48 | |
| *** gyee has joined #openstack-keystone | 15:51 | |
| *** ChanServ sets mode: +v gyee | 15:51 | |
| *** mylu has quit IRC | 15:51 | |
| *** daemontool has joined #openstack-keystone | 15:51 | |
| *** mylu has joined #openstack-keystone | 15:56 | |
| *** roxanaghe has joined #openstack-keystone | 15:58 | |
| *** links has joined #openstack-keystone | 15:58 | |
| *** spzala has quit IRC | 16:01 | |
| *** bjornar has quit IRC | 16:02 | |
| *** spzala has joined #openstack-keystone | 16:02 | |
| *** spzala has quit IRC | 16:06 | |
| *** real56 has quit IRC | 16:07 | |
| *** dan_nguyen has joined #openstack-keystone | 16:08 | |
| *** ninag_ has quit IRC | 16:09 | |
| *** real56 has joined #openstack-keystone | 16:09 | |
| *** jasonsb has quit IRC | 16:09 | |
| *** jasonsb has joined #openstack-keystone | 16:10 | |
| *** jasonsb has quit IRC | 16:10 | |
| *** jbell8 has quit IRC | 16:12 | |
| *** jbell8 has joined #openstack-keystone | 16:12 | |
| *** ninag has joined #openstack-keystone | 16:12 | |
| *** knikolla has joined #openstack-keystone | 16:13 | |
| *** spzala has joined #openstack-keystone | 16:14 | |
| *** browne has joined #openstack-keystone | 16:14 | |
| *** mylu has quit IRC | 16:15 | |
| *** ninag has quit IRC | 16:18 | |
| *** spzala has quit IRC | 16:18 | |
| *** ninag has joined #openstack-keystone | 16:19 | |
| *** spzala has joined #openstack-keystone | 16:20 | |
| *** GB21 has joined #openstack-keystone | 16:21 | |
| *** roxanagh_ has joined #openstack-keystone | 16:22 | |
| dstanek | stevemar: you back in your normal timezone? | 16:22 |
| *** permalac has joined #openstack-keystone | 16:22 | |
| *** permalac has quit IRC | 16:22 | |
| stevemar | dstanek: yes sir | 16:22 |
| stevemar | dstanek: thanks for covering for me last week | 16:23 |
| stevemar | dstanek: morgan dolphm lbragstad gyee ayoung bknudson topol we're an hour later this week - yay DST | 16:23 |
| *** permalac has joined #openstack-keystone | 16:23 | |
| *** permalac has quit IRC | 16:23 | |
| morgan | blah | 16:23 |
| morgan | we should get rid of DST. | 16:24 |
| *** spzala has quit IRC | 16:24 | |
| *** markvoelker has joined #openstack-keystone | 16:25 | |
| *** spzala has joined #openstack-keystone | 16:25 | |
| openstackgerrit | Stuart McLaren proposed openstack/keystoneauth: Allow seeing full token response when debug enabled https://review.openstack.org/292440 | 16:26 |
| *** roxanaghe has quit IRC | 16:26 | |
| openstackgerrit | Stuart McLaren proposed openstack/python-keystoneclient: Allow seeing full token response when debug enabled https://review.openstack.org/292414 | 16:26 |
| gyee | stevemar, thanks for the reminder | 16:26 |
| gyee | morgan, I couldn't agreed more | 16:26 |
| dstanek | stevemar: DST is dumb | 16:27 |
| *** jed56 has joined #openstack-keystone | 16:27 | |
| stevemar | dstanek: yep :( | 16:29 |
| *** spzala has quit IRC | 16:30 | |
| *** tellesnobrega_af is now known as tellesnobrega | 16:31 | |
| *** sdake_ has joined #openstack-keystone | 16:31 | |
| *** permalac_ has joined #openstack-keystone | 16:31 | |
| *** permalac_ has quit IRC | 16:31 | |
| *** roxanagh_ has quit IRC | 16:32 | |
| *** roxanaghe has joined #openstack-keystone | 16:33 | |
| *** sdake has quit IRC | 16:34 | |
| *** spzala has joined #openstack-keystone | 16:35 | |
| *** rcernin has quit IRC | 16:35 | |
| ayoung | stevemar, I can't even figure outy how to get my Laptop's clock to update. It should be based on Timezone info, which shows that it was supposed to change on the 13th | 16:36 |
| *** real56 has quit IRC | 16:36 | |
| *** real56 has joined #openstack-keystone | 16:37 | |
| morgan | ayoung: yay linux =/ | 16:38 |
| ayoung | morgan, well, not having ntp setup might explain some of it | 16:38 |
| *** spzala has quit IRC | 16:39 | |
| *** real56 has quit IRC | 16:39 | |
| ayoung | sudo ntpdate 66.228.59.187 | 16:40 |
| *** real56 has joined #openstack-keystone | 16:40 | |
| morgan | ayoung: i just use "time.apple.com" or one of the ntp pools | 16:40 |
| ayoung | morgan, that was from ntpdate -q 0.fedora.pool.ntp.org | 16:42 |
| morgan | ahhh | 16:42 |
| morgan | :) | 16:42 |
| *** Guest71467 has quit IRC | 16:42 | |
| ayoung | and now my clock says 12:42. Meeting in 18 minutes or 78 minutes? | 16:43 |
| htruta | ayoung: 78 | 16:43 |
| *** real56 has quit IRC | 16:43 | |
| *** real56 has joined #openstack-keystone | 16:44 | |
| gyee | ayoung, who cleans your clock? :-) | 16:45 |
| *** links has quit IRC | 16:47 | |
| ayoung | gyee lives! | 16:48 |
| gyee | hah | 16:49 |
| *** jbell8 has quit IRC | 16:49 | |
| openstackgerrit | Rodrigo Duarte proposed openstack/python-keystoneclient: Add federation related tests https://review.openstack.org/293040 | 16:51 |
| ayoung | W00t rodrigods ! | 16:53 |
| ayoung | rodrigods, is the plan to follow that with mappings and protocols? | 16:55 |
| rodrigods | ayoung, yep! | 16:55 |
| ayoung | rodrigods, cool. It makes me think we should put something in that would actually be useful without reconfiguring apache | 16:56 |
| rodrigods | ayoung, reconfiguring apache? | 16:56 |
| ayoung | something like a query: what would I get if I passedin REMOTE_USER=bal REMOTE_GROUPS=x,y,z to this new federation | 16:56 |
| ayoung | rodrigods, you knwo, before adding a new IdP to mod_mellon | 16:56 |
| rodrigods | ayoung, ahh, exactly | 16:57 |
| rodrigods | that's the idea | 16:57 |
| ayoung | I had a BP... | 16:57 |
| rodrigods | just the basic stuff that don't need the deployment | 16:57 |
| ayoung | rodrigods, this https://review.openstack.org/#/c/245588/ | 16:57 |
| patchbot | ayoung: patch 245588 - keystone-specs - Validation of Authorization from Middleware | 16:57 |
| ayoung | the idea is that you could, in theory, set up mod_mellon on a remote service, and it would apply the mapping from Keystone | 16:58 |
| *** e0ne has quit IRC | 16:58 | |
| rodrigods | ayoung, reading | 17:00 |
| *** rderose has joined #openstack-keystone | 17:00 | |
| *** tsymanczyk has joined #openstack-keystone | 17:00 | |
| *** fawadkhaliq has joined #openstack-keystone | 17:00 | |
| ayoung | rodrigods, what is the cause of this? https://review.openstack.org/#/c/285541/ | 17:03 |
| patchbot | ayoung: patch 285541 - tempest - Add parent_id to create_project | 17:03 |
| rodrigods | ayoung, basically... the absence of a parent was represented by "null" in Liberty and Kilo, now it is represented by the "domain_id" | 17:04 |
| * rodrigods asking with -qa guys how to handle this | 17:04 | |
| rodrigods | the* | 17:04 |
| ayoung | rodrigods, ah, it was a special Null domain id | 17:05 |
| *** tellesnobrega is now known as tellesnobrega_af | 17:05 | |
| *** tellesnobrega_af is now known as tellesnobrega | 17:05 | |
| *** tellesnobrega is now known as tellesnobrega_af | 17:05 | |
| openstackgerrit | Boris Bobrov proposed openstack/python-keystoneclient: Support `truncated` flag returned by identity service https://review.openstack.org/293048 | 17:05 |
| *** knikolla has quit IRC | 17:05 | |
| ayoung | It was required for a uniqueness contraint, I think | 17:05 |
| rodrigods | ayoung, not really, it was just null | 17:05 |
| breton | attempt #3 | 17:05 |
| rodrigods | this was before the project acting as domain stuff | 17:06 |
| ayoung | rodrigods, right, I mean when we added domain as project | 17:06 |
| ayoung | raildo, ^^? | 17:06 |
| ayoung | didn't you work on that with henrynash? | 17:06 |
| rodrigods | ayoung, need feedback in -qa about how to handle this | 17:07 |
| rodrigods | since the stable branch tests are voting | 17:08 |
| *** real56 has quit IRC | 17:08 | |
| ayoung | rodrigods, keystone meeting in 50 minutes. Add it to the Agenda | 17:08 |
| ayoung | https://wiki.openstack.org/wiki/Meetings/KeystoneMeeting#Agenda_for_next_meeting | 17:08 |
| *** tqtran has joined #openstack-keystone | 17:09 | |
| raildo | ayoung: I worked in the beginning of this feature, I talked with rodrigods before, and we agreed on this point | 17:09 |
| rodrigods | thanks ayoung | 17:09 |
| *** real56 has joined #openstack-keystone | 17:09 | |
| ayoung | rodrigods, so did we really break stable, or just a convention? Did we ever support the previous stuff in the API? | 17:10 |
| *** fawadkhaliq has quit IRC | 17:10 | |
| ayoung | Or was Tempest just over-testing? | 17:10 |
| *** jbell8 has joined #openstack-keystone | 17:10 | |
| rodrigods | ayoung, we break stable :) | 17:10 |
| rodrigods | but we had zero HMT tests in tempest... | 17:11 |
| *** jbell8 has quit IRC | 17:11 | |
| ayoung | rodrigods, ah... | 17:11 |
| ayoung | 2016-03-15 14:43:14.678 | testtools.matchers._impl.MismatchError: None != u'350daf1667c24f489fbec7cac3c5af32' | 17:11 |
| ayoung | rodrigods, but this is a new test, right? It is just now being applied to the stable branch? | 17:12 |
| ayoung | So not something that we had committed to in the past? | 17:12 |
| rodrigods | ayoung, yeah, this is new... M broke the L contract | 17:12 |
| ayoung | rodrigods, so the question is, was that really the L contract. It can be diffferent between the two releases. | 17:13 |
| rodrigods | yes, it was | 17:13 |
| *** openstackgerrit has quit IRC | 17:14 | |
| *** openstackgerrit_ is now known as openstackgerrit | 17:14 | |
| *** openstackgerrit has quit IRC | 17:15 | |
| *** openstackgerrit_ has joined #openstack-keystone | 17:15 | |
| *** openstackgerrit_ is now known as openstackgerrit | 17:16 | |
| *** openstackgerrit_ has joined #openstack-keystone | 17:16 | |
| *** henrynash has joined #openstack-keystone | 17:16 | |
| *** ChanServ sets mode: +v henrynash | 17:16 | |
| rodrigods | ayoung, seems like we can config this in tempest | 17:16 |
| rodrigods | to not run the liberty tests | 17:17 |
| *** real56 has quit IRC | 17:17 | |
| *** real56 has joined #openstack-keystone | 17:17 | |
| ayoung | raildo, I thought we were not going to return the <null> domain id in the API? | 17:18 |
| ayoung | I thought it was only a representation for the database | 17:18 |
| *** fawadkhaliq has joined #openstack-keystone | 17:18 | |
| rodrigods | ayoung, this is not the issue | 17:19 |
| *** real56 has quit IRC | 17:19 | |
| rodrigods | the issue is related only to the parent_id | 17:19 |
| raildo | ayoung: and we didn't return null domain_id in the API | 17:19 |
| ayoung | rodrigods, I thought you said that in Liberty we returned the parent_id = None (null) and now we are returning a value? | 17:20 |
| ayoung | https://review.openstack.org/#/c/285541/5/tempest/services/identity/v3/json/projects_client.py | 17:20 |
| patchbot | ayoung: patch 285541 - tempest - Add parent_id to create_project | 17:20 |
| rodrigods | ayoung, yes... but the value is correct | 17:20 |
| ayoung | ok...so then what is different between the two releases? | 17:20 |
| *** real56 has joined #openstack-keystone | 17:20 | |
| rodrigods | because today, with projects acting as domains, the "root" project points to another project | 17:20 |
| rodrigods | which is a domain | 17:20 |
| ayoung | Ah | 17:21 |
| openstackgerrit | Alexander Makarov proposed openstack/keystone: Unified delegation assignment driver https://review.openstack.org/291318 | 17:21 |
| ayoung | so if someone had D1->p1 and they looked at P1.parent in the past it would have been none, and now it would be D1? | 17:21 |
| rodrigods | ayoung, exactly | 17:21 |
| openstackgerrit | Alexander Makarov proposed openstack/keystone: Unified delegation trust driver https://review.openstack.org/291871 | 17:21 |
| raildo | ayoung: exactly | 17:21 |
| ayoung | rodrigods, OK, get it on the agenda. | 17:22 |
| rodrigods | already there :) | 17:22 |
| ayoung | I'm guessing it will affect the quota code? | 17:22 |
| *** henrynash has quit IRC | 17:22 | |
| *** pcaruana has quit IRC | 17:24 | |
| rodrigods | ayoung, probably | 17:24 |
| *** fawadkhaliq has quit IRC | 17:25 | |
| *** fawadkhaliq has joined #openstack-keystone | 17:25 | |
| raildo | ayoung: probably, because in quota code, we have different behaviors for parent_id==None and parent_id!=None | 17:32 |
| ayoung | raildo, do you have a plan to address this issue there? | 17:33 |
| raildo | ayoung: not yet... | 17:34 |
| *** knikolla has joined #openstack-keystone | 17:35 | |
| *** jbell8 has joined #openstack-keystone | 17:35 | |
| *** spzala has joined #openstack-keystone | 17:35 | |
| *** pcaruana has joined #openstack-keystone | 17:36 | |
| openstackgerrit | Merged openstack/keystone: Correct Hints class filter documentation https://review.openstack.org/292680 | 17:37 |
| *** real56 has quit IRC | 17:39 | |
| openstackgerrit | Alexander Makarov proposed openstack/keystone: Unified delegation assignment driver https://review.openstack.org/291318 | 17:39 |
| *** lhcheng has joined #openstack-keystone | 17:39 | |
| *** ChanServ sets mode: +v lhcheng | 17:39 | |
| *** real56 has joined #openstack-keystone | 17:39 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone: Updating sample configuration file https://review.openstack.org/293070 | 17:39 |
| openstackgerrit | Ron De Rose proposed openstack/keystone: WIP - Change EMPHEMERAL user type to FEDERATED https://review.openstack.org/293071 | 17:40 |
| *** real56 has quit IRC | 17:41 | |
| ayoung | raildo, can you and rodrigods conspire to sketch out a test showing if there is a problem with quota now? | 17:42 |
| openstackgerrit | Ron De Rose proposed openstack/keystone: WIP - Change EMPHEMERAL user type to FEDERATED https://review.openstack.org/293071 | 17:42 |
| *** real56 has joined #openstack-keystone | 17:42 | |
| samueldmq | fyi: there will be some discussion around Rolling Upgrades and Updates in the cross-project meeting today | 17:42 |
| samueldmq | I don't expect lots of technical discussion today, as the proposed patch 290977 | 17:42 |
| patchbot | samueldmq: https://review.openstack.org/#/c/290977/ - openstack-specs - Adds Rolling Upgrades and Updates Spec | 17:42 |
| *** bjornar has joined #openstack-keystone | 17:43 | |
| samueldmq | only talks about user story for now | 17:43 |
| raildo | ayoung: sure, I think that we can do this in a devstack | 17:43 |
| ayoung | raildo, great. | 17:43 |
| ayoung | raildo, that is really what needs to get in to Tempest, I think. | 17:43 |
| *** ninag has quit IRC | 17:44 | |
| samueldmq | just in the case someone is interested ( stevemar dolphm bknudson dstanek ^ ) | 17:44 |
| openstackgerrit | Merged openstack/keystone: Consolidate @notifications.internal into Audit https://review.openstack.org/288798 | 17:44 |
| openstackgerrit | Merged openstack/keystone: Remove unused notification method and class https://review.openstack.org/288799 | 17:44 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone: Updating sample configuration file https://review.openstack.org/293070 | 17:46 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone: Updating sample configuration file https://review.openstack.org/293070 | 17:47 |
| *** aswadr_ has quit IRC | 17:50 | |
| *** mhickey has quit IRC | 17:50 | |
| *** real56 has quit IRC | 17:55 | |
| *** real56 has joined #openstack-keystone | 17:56 | |
| *** shaleh has joined #openstack-keystone | 17:58 | |
| *** ninag has joined #openstack-keystone | 17:59 | |
| stevemar | reminder ping for meeting: ajayaa, amakarov, ayoung, breton, browne, davechen, david8hu, dolphm, dstanek, edmondsw, ericksonsantos, geoffarnold, gyee, henrynash, hogepodge, htruta, jamielennox, joesavak, lbragstad, lhcheng, marekd, morganfainberg, nkinder, raildo, rodrigods, roxanaghe, samueldmq, shaleh, stevemar, tsymanczyk, topol, vivekd, wanghong, claudiub, rderose, samleon, xek, MaxPC, tjcocozz, jorge_munoz | 17:59 |
| *** dims_ has joined #openstack-keystone | 18:03 | |
| *** dims has quit IRC | 18:03 | |
| *** real56 has quit IRC | 18:11 | |
| *** real56 has joined #openstack-keystone | 18:12 | |
| *** jistr has quit IRC | 18:15 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: Change EMPHEMERAL user type to FEDERATED https://review.openstack.org/293071 | 18:22 |
| *** timcline has joined #openstack-keystone | 18:23 | |
| *** AJaeger has joined #openstack-keystone | 18:23 | |
| *** timcline has quit IRC | 18:24 | |
| AJaeger | could somebody please add another +A or toggle the existing one on https://review.openstack.org/#/c/292086/ ? That keystone change did not merge due to the Zuul problems and was approved... | 18:24 |
| patchbot | AJaeger: patch 292086 - keystone - Remove some translations | 18:24 |
| *** timcline has joined #openstack-keystone | 18:25 | |
| stevemar | AJaeger: done | 18:25 |
| *** daemontool has quit IRC | 18:27 | |
| openstackgerrit | Rodrigo Duarte proposed openstack/python-keystoneclient: Add federation related tests https://review.openstack.org/293040 | 18:28 |
| *** e0ne has joined #openstack-keystone | 18:28 | |
| *** real56 has quit IRC | 18:29 | |
| *** dims_ has quit IRC | 18:29 | |
| *** real56 has joined #openstack-keystone | 18:29 | |
| openstackgerrit | Merged openstack/python-keystoneclient-kerberos: use keystoneauth instead of keystoneclient https://review.openstack.org/290374 | 18:31 |
| AJaeger | thanks, stevemar | 18:32 |
| *** rk4n has quit IRC | 18:32 | |
| *** pece has quit IRC | 18:32 | |
| *** sdake_ has quit IRC | 18:34 | |
| *** GB21 has quit IRC | 18:34 | |
| *** AJaeger has left #openstack-keystone | 18:35 | |
| *** arunkant has joined #openstack-keystone | 18:40 | |
| *** real56 has quit IRC | 18:41 | |
| samueldmq | dstanek: do you know gabbi ? - http://gabbi.readthedocs.org/en/latest/ | 18:41 |
| samueldmq | dstanek: might be interesting to take a look at | 18:41 |
| *** real56 has joined #openstack-keystone | 18:41 | |
| dstanek | samueldmq: yes, i've used it in the past. | 18:42 |
| dstanek | samueldmq: it wasn't (at least at the time) great at complex REST interactions | 18:42 |
| dstanek | samueldmq: code worked better | 18:42 |
| samueldmq | dstanek: nice, I found the idea interesting | 18:43 |
| samueldmq | dstanek: I don't know if it fits all our requirements for functional testing | 18:43 |
| samueldmq | dstanek: but definitely something (at least the idea) to consider | 18:43 |
| shaleh | samueldmq: I am -1'ing the functional tests due to repetition. It looks like the tests would benefit from something like the new_*_ref() functions we added to keystone's unit tests. | 18:44 |
| shaleh | samueldmq: might as well start the code off right. | 18:44 |
| shaleh | there is also the almost unused _check_* on each class that is used for one test and then repeated with minor change for the rest. | 18:45 |
| samueldmq | shaleh: yes, I was wondering if it would be worth it to try to make something generic for those tests | 18:49 |
| samueldmq | shaleh: question is when it start getting complex to understand/maintain | 18:49 |
| samueldmq | shaleh: but might be worth it to give a try | 18:49 |
| shaleh | samueldmq: it looks like _check_* handle it if they took optional params. | 18:50 |
| *** e0ne_ has joined #openstack-keystone | 18:50 | |
| *** e0ne has quit IRC | 18:51 | |
| shaleh | samueldmq: similarly for the dictionary inputs. We replaced all of that in keystone with new_*_ref to simplify writing tests and give us one place to change bits. | 18:51 |
| *** spzala has quit IRC | 18:51 | |
| *** PsionTheory has joined #openstack-keystone | 18:52 | |
| jamielennox | dolphm: if you're around it'd be good to have a going over the common policy thing | 18:57 |
| jamielennox | dolphm: i was fixing it up recently, and with the addition of the is_admin_project stuff, i'm just not sure we need to distinguish project_admin and global_admin any more | 18:58 |
| rodrigods | dstanek, HMT is there since Kilo | 19:00 |
| dstanek | rodrigods: ? | 19:00 |
| rodrigods | i don't recall having discussions about it is being experimental | 19:00 |
| openstackgerrit | Alexander Makarov proposed openstack/keystone: Unified delegation trust driver https://review.openstack.org/291871 | 19:01 |
| samueldmq | shaleh: ++ please leave comments and I will fix it | 19:01 |
| dstanek | rodrigods: all i'm saying is that it should be so that we can make breaking changes. if we say it's stable then we shouldn't make them | 19:01 |
| *** rderose has quit IRC | 19:01 | |
| samueldmq | shaleh: however it seems like we haven't found an agreement whether we want them or not | 19:02 |
| *** spzala_ has joined #openstack-keystone | 19:02 | |
| breton | samueldmq: can we use catalog with gabbi? | 19:02 |
| shaleh | samueldmq: I have. This is solid work. I am just pushing it to handle the future :-) | 19:02 |
| samueldmq | stevemar: dstanek: we want hose functioanl client tests right ? | 19:02 |
| samueldmq | shaleh: yes, nothing says we can't have functional tests in the server AND in the client | 19:02 |
| samueldmq | shaleh: they're separate things | 19:02 |
| shaleh | samueldmq: it sounded like functional testing to ensure we are not lying with mock was largely agreed on | 19:02 |
| samueldmq | shaleh: yes, but not as our only set of functional tests for the server | 19:03 |
| samueldmq | shaleh: and I am not proposing that :) | 19:03 |
| samueldmq | breton: I think so, in gabbi you can write your own fixtures and store things on envvars to use in tests | 19:03 |
| breton | samueldmq: so, catalog as a fixture? | 19:04 |
| rodrigods | dstanek, of course, that's why i put the topic in the meeting, since it was stable and the API changed | 19:04 |
| breton | I think I proposed to use gabbi in Vancouver | 19:04 |
| samueldmq | breton: I don't think we need to put catalog in a fixture | 19:04 |
| *** jbell8 has quit IRC | 19:04 | |
| breton | and lack of catalog traversing was the main concern | 19:04 |
| samueldmq | breton: it comes in the token, we just store the token, use it | 19:04 |
| dstanek | rodrigods: so should we mark it as experimental? | 19:04 |
| samueldmq | breton: as usual | 19:04 |
| dstanek | rodrigods: i think the rationale from stevemar and ayoung isn't valid if the feature has been stable for 2 releases | 19:05 |
| samueldmq | breton: can you remember what were the concerns around catalog? | 19:05 |
| rodrigods | dstanek, i'd consider marking it as experimental now, since reseller-1 brought wild changes | 19:05 |
| ayoung | dstanek, so, I think it raises a real issue, and we need to address it | 19:06 |
| ayoung | if it breaks quota, in this case we should fix quoate | 19:06 |
| ayoung | quota | 19:06 |
| dstanek | ayoung: why is this different from other API changes? | 19:06 |
| samueldmq | question is: do we have control on everything that we may have broken? | 19:06 |
| ayoung | but there is the possiblitily, even the likelihood that it will break someone out there | 19:06 |
| ayoung | samueldmq, nope | 19:06 |
| dstanek | i'm not saying i care either way...i just don't understand what the rule is | 19:06 |
| ayoung | I'm just being a jerk | 19:07 |
| breton | samueldmq: nope. But functional tests make a least 2 steps -- 1. fetch a token; 2. parse catalog from it, get keystone endpoint and perform an action | 19:07 |
| dstanek | is this a change to fix a bug? | 19:07 |
| ayoung | because we need HTM, and we can't stay locked into how it was working | 19:07 |
| ayoung | so we break it early, we inflict slightly less pain | 19:07 |
| *** sdake has joined #openstack-keystone | 19:07 | |
| knikolla | edmondsw: I'm really not sure why jenkins fails. I went through the gate logs and it seems to fail on "openstack token issue" after running bootstrap | 19:07 |
| dstanek | breton: right. gabbi didn't do that when i used it | 19:07 |
| breton | dstanek: yep, i discussed it with you | 19:07 |
| dstanek | breton: could do complex REST interactions, but maybe that changed | 19:07 |
| samueldmq | breton: for testing only keystone we shouldn't need to parse catalog and get endpints from it | 19:07 |
| ayoung | dstanek, the bug is that we introduced domains without knowing what we were doing | 19:07 |
| edmondsw | stevemar, any ideas on knikolla's question? | 19:08 |
| dstanek | ayoung: ++ | 19:08 |
| samueldmq | breton: that'd be in the case we wanted to ask another service than keystone | 19:08 |
| ayoung | we should have made projects hierarchical back then | 19:08 |
| knikolla | https://review.openstack.org/#/c/292492/ | 19:08 |
| patchbot | knikolla: patch 292492 - keystone - Check for duplicates without inserting in keystone... | 19:08 |
| breton | samueldmq: keystone is still a usual openstack service | 19:08 |
| rodrigods | ayoung, samueldmq, dstanek i'd consider marking it experimental until we have the reseller-2 in N | 19:08 |
| rodrigods | we don't know what big changes we may have in the API because of it | 19:08 |
| breton | samueldmq: jamielennox even proposed a patch to use parts from ksm for token validation | 19:09 |
| samueldmq | when has it become a stable API ? | 19:09 |
| edmondsw | knikolla where did you see openstack token issue? | 19:09 |
| rodrigods | samueldmq, is it marked as experimental? | 19:09 |
| dstanek | rodrigods: hopefully they are backward compatible changes :-) otherwise they'd need to be new | 19:09 |
| samueldmq | breton: to run tests against keystone, we only need keystone URL right ? | 19:10 |
| knikolla | edmondsw, gate-tempest-dsvm-full/logs/devstacklog | 19:10 |
| samueldmq | breton: and we could test catalg responses from that, but we don't need info from the catalog itself | 19:10 |
| samueldmq | breton: does that make sense, or maybe I am just not getting it right | 19:10 |
| knikolla | http://logs.openstack.org/92/292492/1/check/gate-tempest-dsvm-full/f448b13/logs/devstacklog.txt.gz | 19:10 |
| samueldmq | dstanek: also, I heard that experimental doesn't mean you're allowed to break the api | 19:11 |
| samueldmq | dstanek: it just isn't ready for production yet | 19:11 |
| samueldmq | that's my understanding | 19:11 |
| morgan | experimental means: we will try not to break the api | 19:11 |
| morgan | but we may if we decide we made a mistake | 19:11 |
| morgan | or to make the feature better | 19:11 |
| morgan | no guarantees we wont break it. but we will do our best not to if there iens't a good reason to | 19:12 |
| *** dims has joined #openstack-keystone | 19:12 | |
| morgan | samueldmq: ^^ | 19:12 |
| samueldmq | morgan: nice, didn't know that was allowed | 19:12 |
| rodrigods | morgan, any thoughts acbout the HMT api than? | 19:12 |
| edmondsw | knikolla I'm not seeing that | 19:12 |
| samueldmq | morgan: thanks for clarifying | 19:12 |
| dstanek | samueldmq: what morgan said :) | 19:12 |
| morgan | rodrigods: afaik HMT was experimental | 19:12 |
| samueldmq | given what morgan said, it's allowed if HMT is experimental | 19:12 |
| morgan | but uhm. | 19:12 |
| samueldmq | if not, it's a mistake we should do | 19:12 |
| samueldmq | let's check in the code | 19:13 |
| knikolla | edmondsw, right at the bottom of http://logs.openstack.org/92/292492/1/check/gate-tempest-dsvm-full/f448b13/logs/devstacklog.txt.gz | 19:13 |
| knikolla | edmondsw, it tries 'openstack token issue' and gets a The request you have made requires authentication. (HTTP 401) | 19:13 |
| edmondsw | knikolla ohh... you're looking at the older jenkins run | 19:14 |
| samueldmq | from a JSONhome pov, it's not | 19:14 |
| samueldmq | see https://github.com/openstack/keystone/blob/master/keystone/resource/routers.py | 19:14 |
| edmondsw | knikolla same did not happen in the newer run | 19:14 |
| samueldmq | domain_config is marked as experimental there | 19:14 |
| *** krotscheck is now known as kro_death_by_sin | 19:14 | |
| breton | samueldmq: can gabbi fetch a token and then use it in a further request? | 19:14 |
| *** kro_death_by_sin is now known as kro_sinus_hell | 19:14 | |
| samueldmq | breton: yes it can | 19:14 |
| rodrigods | morgan, it was documented anywhere? | 19:15 |
| knikolla | edmondsw, oh | 19:15 |
| knikolla | edmondsw, but still it fails with The request you have made requires authentication. (HTTP 401) | 19:15 |
| samueldmq | breton: you can use the response of a previous query in the next | 19:15 |
| edmondsw | knikolla that's a pretty common error... question is why did auth fail | 19:16 |
| samueldmq | breton: or if you want to use a token in a whole .yaml test, you can create a fixture that gets a token and stores it in the envvar | 19:16 |
| samueldmq | breton: then reference it in the tests as $ENVIRON['token'] | 19:16 |
| knikolla | edmondsw, yeah. and getting it to fail on different parts during different runs. | 19:17 |
| samueldmq | dstanek: morgan: rodrigods: I don't see it marked as experimental anywhere | 19:17 |
| samueldmq | https://github.com/openstack/keystone/search?utf8=%E2%9C%93&q=experimental | 19:17 |
| dstanek | samueldmq: i didn't either when i looked | 19:18 |
| samueldmq | does that mean we've been treating it as stable all the time? | 19:18 |
| breton | samueldmq: well, then it might work! | 19:18 |
| rodrigods | it means to me | 19:18 |
| *** dims has quit IRC | 19:18 | |
| rodrigods | if it is not stable, we can't even test it in tempest | 19:19 |
| openstackgerrit | Merged openstack/keystone: Add auto-increment int primary key to revoke.backends.sql https://review.openstack.org/290841 | 19:19 |
| *** e0ne_ has quit IRC | 19:19 | |
| edmondsw | knikolla would probably have to setup devstack with the patch so you can debug | 19:20 |
| *** sdake_ has joined #openstack-keystone | 19:21 | |
| knikolla | edmondsw, i'll try to do that. | 19:21 |
| *** sdake has quit IRC | 19:23 | |
| stevemar | whoa, i had no idea that was on the table for merging :O | 19:23 |
| knikolla | edmondsw, any easy way to point devstack to use my patch when stacking? | 19:23 |
| * stevemar gives ayoung and morgan a stern eye for merging a change in rc time that has a migration | 19:24 | |
| morgan | stevemar: revert it then | 19:24 |
| ayoung | nah | 19:24 |
| morgan | stevemar: *shrugs* | 19:24 |
| ayoung | that is a rule of thumb | 19:24 |
| ayoung | not a strict law | 19:25 |
| ayoung | who says migrations are verbotten during rc? | 19:25 |
| stevemar | morgan: it looks fine | 19:25 |
| stevemar | ayoung: no one, just a big change to go in, i wasn't expecting it | 19:25 |
| *** dims has joined #openstack-keystone | 19:26 | |
| samueldmq | dstanek: funny is that we can't change an API state (stable/experimental) dependng on its received params/body | 19:27 |
| samueldmq | dstanek: the endpoint is what's returned on discovery, so we either mark the whole project API as experimental | 19:27 |
| samueldmq | dstanek: or create another api for hmt and mark it as so | 19:27 |
| morgan | i think we documented it as experimental | 19:28 |
| morgan | in the docs | 19:28 |
| morgan | ? | 19:28 |
| samueldmq | morgan: I couldn't find it, neither dstanek | 19:29 |
| samueldmq | morgan: maybe in -specs? | 19:29 |
| * samueldmq looking | 19:29 | |
| rodrigods | iirc, never was | 19:29 |
| samueldmq | morgan: I can't find anything there either :( | 19:30 |
| ayoung | File it as a bug, fixed in Mitaka | 19:30 |
| edmondsw | knikolla, I'm pretty sure there's a way but I've never done it | 19:30 |
| samueldmq | breton: there is also a request to be able to store arbitraty query returns as envvar | 19:31 |
| morgan | then we missed. because part of the original merge of HMT was that it would be experimental | 19:31 |
| morgan | as i recall | 19:31 |
| samueldmq | breton: what does that mean? that means you can POST /tokens and specify "- persist: token" in the .yaml | 19:31 |
| *** tsymanczyk has left #openstack-keystone | 19:31 | |
| openstackgerrit | Merged openstack/keystone: Remove some translations https://review.openstack.org/292086 | 19:31 |
| samueldmq | breton: and then use that in any other query as "$ENVIRON['token']" inside the same .yaml | 19:32 |
| samueldmq | breton: that means we woudln't need to have fixtures setting up the token | 19:32 |
| samueldmq | breton: and could store as many envvars as we need, easily :) | 19:32 |
| samueldmq | morgan: yes I agree that was the idea | 19:32 |
| edmondsw | knikolla, https://github.com/openstack-dev/devstack/blob/4a974e61c8c53c692d0e2d0dc85b3ce9b2eff446/doc/source/stackrc.rst#L53 | 19:32 |
| knikolla | edmondsw, thanks, i'll give it a try. | 19:33 |
| edmondsw | knikolla, tx and good luck | 19:33 |
| *** stingaci has joined #openstack-keystone | 19:33 | |
| knikolla | edmondsw, thanks, it would be my first contribution to go in. | 19:34 |
| edmondsw | knikolla awesome! | 19:34 |
| rodrigods | samueldmq, morgan, experimental means: it is not enabled by default too? | 19:35 |
| *** fawadkhaliq has quit IRC | 19:35 | |
| morgan | rodrigods: not nessicarily | 19:35 |
| morgan | rodrigods: depends on the implementation | 19:35 |
| *** PsionTheory has quit IRC | 19:36 | |
| *** ctina has joined #openstack-keystone | 19:36 | |
| navidp | stevemar, | 19:37 |
| navidp | stevemar, have time? | 19:37 |
| samueldmq | rodrigods: as morgan said, I think domain configs in database are enabled by default, but is experimental | 19:37 |
| samueldmq | as marked in the router (jsonhome thing) | 19:37 |
| samueldmq | see resource router | 19:37 |
| rodrigods | hmm | 19:37 |
| rodrigods | ok | 19:37 |
| rodrigods | so it is not experimental anymore? :P | 19:38 |
| openstackgerrit | Alexander Makarov proposed openstack/keystone: Closure table for HMT https://review.openstack.org/285521 | 19:42 |
| *** dims has quit IRC | 19:45 | |
| *** timcline has quit IRC | 19:51 | |
| *** sdake_ has quit IRC | 19:51 | |
| *** timcline has joined #openstack-keystone | 19:52 | |
| *** timcline has quit IRC | 19:56 | |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Document running in uwsgi proxied by apache https://review.openstack.org/293114 | 20:04 |
| openstackgerrit | Merged openstack/keystone: Updating sample configuration file https://review.openstack.org/293070 | 20:04 |
| *** ig0r_ has joined #openstack-keystone | 20:04 | |
| *** ig0r__ has quit IRC | 20:06 | |
| openstackgerrit | Alexander Makarov proposed openstack/keystone: Protect initialization with critical sections https://review.openstack.org/210001 | 20:10 |
| *** dims has joined #openstack-keystone | 20:11 | |
| *** sdake has joined #openstack-keystone | 20:11 | |
| stevemar | navidp: back now, had to pick up something from post office | 20:18 |
| *** ctina has quit IRC | 20:20 | |
| dstanek | stevemar: your post office seems about as slow as ours | 20:20 |
| stevemar | dstanek: don't get me started | 20:26 |
| stevemar | dstanek: we have a 24hr concierge in the lobby, they are authorized to sign for packages. for some reason this one didn't get accepted?! | 20:27 |
| stevemar | dstanek: then they dropped it off at the post office that isn't even the closest to our place?! | 20:27 |
| dstanek | stevemar: they probably don't accept drugs and weapons | 20:27 |
| stevemar | dstanek: once there, the line up was 2 people and it took 20 minutes | 20:27 |
| *** roxanagh_ has joined #openstack-keystone | 20:28 | |
| stevemar | dstanek: it was a modem | 20:28 |
| stevemar | dstanek: which is kind of a weapon, if you use it incorrectly | 20:29 |
| *** spandhe has joined #openstack-keystone | 20:30 | |
| samueldmq | stevemar: ayoung: there will be a discussion around proposing to abandon some cp stale specs in today's cp meeting | 20:30 |
| samueldmq | and ayoung's patch 205629 is one of those | 20:31 |
| patchbot | samueldmq: https://review.openstack.org/#/c/205629/ - openstack-specs - No global admin | 20:31 |
| ayoung | samueldmq, yeah, I guess I need to let that dream die | 20:31 |
| *** Sam-I-Am has joined #openstack-keystone | 20:31 | |
| Sam-I-Am | hello | 20:31 |
| stevemar | SamYaple: o/ | 20:31 |
| samueldmq | ayoung: what's the main idea proposed there ? | 20:32 |
| stevemar | Sam-I-Am: err, wrong sam before | 20:32 |
| *** roxanagh_ has quit IRC | 20:32 | |
| samueldmq | ayoung: (I can go there and read, just would like to discuss a bit before saying them you're ok with abandoning) | 20:32 |
| Sam-I-Am | heh | 20:32 |
| ayoung | samueldmq, instead of admin being able to do everything regardless of scope, uyou needed to get a scoped token to perform an operation | 20:32 |
| stevemar | samueldmq ayoung lbragstad dstanek bknudson dolphm morgan -- cross projecting with Sam-I-Am for docs stuff | 20:33 |
| stevemar | Sam-I-Am: so, you mentioned we're a hot mess :) | 20:33 |
| samueldmq | ayoung: isn't that what admin_project does? | 20:33 |
| SamYaple | stevemar: i thought we were friends | 20:33 |
| stevemar | Sam-I-Am: we screwed you guys over with the bootstrap command, and the default domain, sorry about that | 20:33 |
| dstanek | stevemar: talking about that in here? | 20:33 |
| *** AJaeger has joined #openstack-keystone | 20:34 | |
| *** gordc has quit IRC | 20:34 | |
| stevemar | dstanek: yeah, not sure how many of you lurk in x-project, wanted to keep everyone posted | 20:34 |
| Sam-I-Am | stevemar: yeah. i think bootstrap and some other things are fairly big changes, but i havent seen more than 1 or 2 patches containing docimpact in the keystone queue | 20:34 |
| samueldmq | dstanek: ++ my mind thought it was in the cp meeting (as I was talking about it) | 20:34 |
| Sam-I-Am | then things like versionless endpoints | 20:34 |
| bknudson | since we've got release notes we haven't been using docimpact | 20:35 |
| stevemar | Sam-I-Am: so, i was under the impression that DocImpact wasn't going to be used any longer | 20:35 |
| bknudson | check the release notes | 20:35 |
| Sam-I-Am | bknudson: thats not how it works | 20:35 |
| Sam-I-Am | at least no other projects are using it that way | 20:35 |
| stevemar | Sam-I-Am: so let's figure out how its supposed to work :) | 20:35 |
| AJaeger | stevemar: DocImpact is fine to use - but it goes into your own queue ;) | 20:35 |
| stevemar | we dont want to burn you guys again | 20:35 |
| stevemar | AJaeger: right, at which point, aren't we doing 2x the work then? | 20:35 |
| SamYaple | Sam-I-Am: I can help with the docs. i just implemented all the keystone-manage bootstrap stuff for kolla | 20:36 |
| AJaeger | stevemar: a commit using DocImpact opens a bug in keystone queue - and then you review it and either reject it or move it to openstack-manuals | 20:36 |
| stevemar | so really adding DocImpact means -- update the install/deployer docs, right? | 20:36 |
| samueldmq | too many sam's here | 20:36 |
| stevemar | samueldmq: :) | 20:36 |
| Sam-I-Am | the idea of docimpact is that something that needs docs opens a bug in your queue. it might be dev docs, it might be operator docs, whatever. then... you either write the docs and tag the bug... or you add the patch to the openstack-manuals project and explain what to do. | 20:36 |
| AJaeger | stevemar: In the past we got lots of junk for DocImpact - including developer docs ... | 20:36 |
| *** e0ne has joined #openstack-keystone | 20:37 | |
| SamYaple | samueldmq: would you prefer i switch to sebastian? | 20:37 |
| AJaeger | But since it now ends in your queue, you can define what to do and handle it for your own docs as well | 20:37 |
| stevemar | Sam-I-Am: AJaeger: OOOookay, THAT makes sense | 20:37 |
| Sam-I-Am | but ideally, the developers should be contributing to operator-ish docs (core docs) because the docs team is only about a dozen people, and we're stretched really thin. | 20:37 |
| samueldmq | SamYaple: nah, just kidding :) | 20:37 |
| Sam-I-Am | so the bug in your own repo is there as a reminder that something needs docs | 20:37 |
| stevemar | Sam-I-Am: AJaeger, see I was enforcing dev docs in patches that needed it, so using the docImpact tag didn't make sense given the enforcement + release notes | 20:38 |
| dstanek | hmmm... that's interesting. i heard that it wasn't really being used outside of our project and we typically require our dev docs in the same patch | 20:38 |
| bknudson | often the developer can't even just document their own feature since there's so much other doc missing | 20:38 |
| AJaeger | dstanek: many projects used DocImpact... | 20:39 |
| SamYaple | ++ | 20:39 |
| Sam-I-Am | bknudson: sounds like you need more docs :) | 20:39 |
| samueldmq | Sam-I-Am: where are the operator-ish docs ? what repo? | 20:39 |
| Sam-I-Am | samueldmq: mostly openstack-manuals | 20:39 |
| stevemar | Sam-I-Am: OK, i understand things now, i'll start enforcing DocImpact if I think it'll effect the openstack-manuals repo | 20:39 |
| samueldmq | so that's a project-specific change that requires an action in openstack-manuals | 20:39 |
| stevemar | Sam-I-Am: at which point I'll move the bug there, and try to get someone to solve it | 20:40 |
| navidp | stevemar, ok about this patch: https://review.openstack.org/#/c/276350/ it is faling tests because it is using released ksa vs master, is it possible to have a relaeased version of ksa | 20:40 |
| patchbot | navidp: patch 276350 - python-openstackclient - Moving authentication from keystoneclient to keyst... | 20:40 |
| Sam-I-Am | all non-developer docs should be in openstack-manuals | 20:40 |
| AJaeger | Sam-I-Am: see http://docs.openstack.org/contributor-guide/content-specs.html | 20:40 |
| Sam-I-Am | operators shouldnt need to look at the devref | 20:40 |
| stevemar | Sam-I-Am: agreed | 20:40 |
| samueldmq | stevemar: I think that's the right way to go, we need to notify them somehow | 20:40 |
| dstanek | what is the litmus test to use to know if it may drive changes in openstack-manuals? | 20:40 |
| samueldmq | stevemar: at least notify, helping would be ideal | 20:40 |
| Sam-I-Am | dstanek: would an operator care about it? | 20:40 |
| stevemar | samueldmq: we can notify all the keystone devs at the next meeting | 20:41 |
| Sam-I-Am | dstanek: or a user, for that matter | 20:41 |
| Sam-I-Am | dstanek: basically, any non-developer | 20:41 |
| samueldmq | stevemar: ++ | 20:41 |
| AJaeger | stevemar: invite Lana to your meeting for the topic... | 20:41 |
| Sam-I-Am | its also nice to have people from each project join the weekly docs meetings | 20:42 |
| AJaeger | She's in Australia, so timing might be difficult, but I suggest to invite her nevertheless | 20:42 |
| Sam-I-Am | well, bi-weekly if you only want to hit US or APAC | 20:42 |
| stevemar | AJaeger: yes, will do. Just doing it now/here cause I think shes aus right? | 20:42 |
| *** fawadkhaliq has joined #openstack-keystone | 20:42 | |
| Sam-I-Am | particularly with the installation guide, its nice to know whats going on with each project | 20:42 |
| Sam-I-Am | neutron has turned itself around with docs | 20:42 |
| navidp | stevemar, or is there any way to make sure zulus use related patch: https://review.openstack.org/#/c/289472/ for testing ? | 20:43 |
| patchbot | navidp: patch 289472 - keystoneauth - Adding authentication compatibility for OpenStackC... (MERGED) | 20:43 |
| SamYaple | Sam-I-Am: admin token deprecated, bootstrap command all the way | 20:43 |
| Sam-I-Am | SamYaple: yeah, thanks :) | 20:43 |
| SamYaple | itll make the deploy docs much nicer | 20:43 |
| SamYaple | at least easier to digest | 20:43 |
| Sam-I-Am | sure, but i shouldnt have to guess these things | 20:43 |
| SamYaple | i agree | 20:43 |
| Sam-I-Am | i only found out about it through some random mention | 20:43 |
| SamYaple | it bit kollas gate at first which got it on my radar | 20:43 |
| SamYaple | i would have missed it too | 20:43 |
| Sam-I-Am | and it impacts the install guide quite a bit | 20:43 |
| stevemar | navidp: i don't think it's possible to make jenkins use an unreleased version, and we can't release a new version just yet, cause the libraries should be frozen/unreleased til we release mitaka | 20:44 |
| Sam-I-Am | along with any admin guide stuff involving keystone | 20:44 |
| samueldmq | stevemar: and this also relates to the create the default domain when using V3 thing we discussed to day right? | 20:44 |
| samueldmq | stevemar: that goes in the operator guide | 20:44 |
| stevemar | Sam-I-Am: so we have 2 major changes that i can think of... bootstrap, which is being actively worked on; and the fact we don't create the default domain any longer | 20:44 |
| stevemar | samueldmq: you got it bud | 20:44 |
| navidp | stevemar, ok so it should wait for after mitaka? | 20:45 |
| Sam-I-Am | stevemar: and i didnt even know about the second one | 20:45 |
| SamYaple | stevemar: default domain should be fixed though with automagically creating it | 20:45 |
| SamYaple | right? | 20:45 |
| stevemar | Sam-I-Am: It's relatively recent, and i even made use of docImpact this time! https://bugs.launchpad.net/keystone/+bug/1549479 | 20:45 |
| openstack | Launchpad bug 1549479 in OpenStack Identity (keystone) "DocImpact - db_sync doesn't create default domain" [Medium,Triaged] - Assigned to zwei (suifeng20) | 20:45 |
| stevemar | SamYaple: yes, kinda... for some cases... | 20:46 |
| SamYaple | stevemar: car to elaborate? | 20:46 |
| SamYaple | care* | 20:47 |
| stevemar | Sam-I-Am: but i also opened it against openstack-manuals in this case | 20:47 |
| stevemar | i was trying to be a good doc'er :) | 20:47 |
| Sam-I-Am | stevemar: and sometimes that makes sense | 20:47 |
| stevemar | SamYaple: sure -- i think the only change for the install guide would be that we should create the "default" domain before creating the admin user & project | 20:48 |
| stevemar | bknudson: feel free to chime in | 20:48 |
| SamYaple | stevemar: with the bootstrap command thats always going to be creating default domain right? | 20:48 |
| stevemar | SamYaple: yep! | 20:48 |
| SamYaple | afaik it doesnt support domains | 20:49 |
| SamYaple | ok | 20:49 |
| SamYaple | ok then were on the same page i think | 20:49 |
| stevemar | SamYaple: this is only needed if they do not use bootstrap, but rather the ADMIN_TOKEN approach | 20:49 |
| bknudson | if you create a project or user using the v2 api then the default domain is created first | 20:49 |
| SamYaple | gotcha | 20:49 |
| Sam-I-Am | this sort of stuff makes sense in docs :) | 20:49 |
| SamYaple | well luckily Sam-I-Am is a super star. no deprecated things in the docs for him. so it should be using bootstrap this cycle | 20:49 |
| SamYaple | and therefore creating the default domain (but thats a good note) | 20:50 |
| *** sdake has quit IRC | 20:50 | |
| bknudson | hopefully we'll switch bootstrap to not create the default domain (just create a domain) | 20:50 |
| SamYaple | so we can not have any default domain at all bknudson ? is that the suggestion | 20:50 |
| stevemar | SamYaple: are you also a docs core? | 20:51 |
| bknudson | SamYaple: yes, going forward no default domain | 20:51 |
| stevemar | is the whole docs team just Sams? | 20:51 |
| SamYaple | stevemar: I am not. i am a one time contributor to docs | 20:51 |
| bknudson | the only reason there's a default domain is to support v2 users and projects | 20:51 |
| stevemar | SamYaple: gotcha :) | 20:51 |
| SamYaple | i am on the kolla team, you just summoned me | 20:51 |
| SamYaple | this conversation just interested me :) | 20:51 |
| stevemar | SamYaple: there are too many sams and steves in openstack | 20:52 |
| *** SamYaple is now known as NotSamYaple | 20:52 | |
| *** timcline has joined #openstack-keystone | 20:52 | |
| NotSamYaple | there | 20:52 |
| *** akanksha_ has joined #openstack-keystone | 20:52 | |
| stevemar | NotSamYaple: lol | 20:53 |
| *** timcline has quit IRC | 20:53 | |
| stevemar | Sam-I-Am: alright -- thanks for edumacating us :) | 20:53 |
| Sam-I-Am | stevemar: sure. glad i could help. | 20:53 |
| NotSamYaple | bknudson: good info. looking forward to death of v2. we are 100% v3 in kolla for mitaka | 20:53 |
| *** sdake has joined #openstack-keystone | 20:53 | |
| *** NotSamYaple is now known as SamYaple | 20:53 | |
| Sam-I-Am | you can always ask questions of the docs folks. we dont bite. | 20:53 |
| *** timcline has joined #openstack-keystone | 20:54 | |
| Sam-I-Am | SamYaple: did you get 100% versionless endpoints working? | 20:54 |
| Sam-I-Am | for keystone. | 20:54 |
| SamYaple | Sam-I-Am: we had to add /v3 to the endpoint in the cataloug, but the openrc files and other things are versionless | 20:54 |
| Sam-I-Am | SamYaple: what broke with not /v3 in the endpoint? | 20:55 |
| SamYaple | Sam-I-Am: the services tried to use v2.0 | 20:56 |
| Sam-I-Am | i know the admin token bootstrap method did, but thats gone now. | 20:56 |
| Sam-I-Am | oh. odd. | 20:56 |
| SamYaple | we could have overridden it in the configs, but i ran out of time | 20:56 |
| Sam-I-Am | override how? | 20:56 |
| SamYaple | honestly i did the work and did it quickly, it may not be _required_ | 20:56 |
| SamYaple | in the keystone_authtoken section | 20:56 |
| Sam-I-Am | i thought that assumed v3 | 20:57 |
| *** AJaeger has left #openstack-keystone | 20:57 | |
| SamYaple | again, i did it quickly while this bootstrap and admin token stauff was in flux | 20:58 |
| SamYaple | to quote LeVar Burton, dont take my word for it | 20:58 |
| Sam-I-Am | right | 20:59 |
| *** krobzaur has joined #openstack-keystone | 21:00 | |
| krobzaur | Hello all. For some reason when I try to user the keystone python cli on my desktop, the client makes requests to my keystone adminurl after authenticating to my publicurl regardless of which user I'm authenticated as | 21:01 |
| krobzaur | Anyone have any idea whats up? | 21:01 |
| Sam-I-Am | stevemar: is anyone going to pick this up soon? https://review.openstack.org/#/c/289889/ | 21:01 |
| patchbot | Sam-I-Am: patch 289889 - openstack-manuals - add new keystone bootstraping process to install docs | 21:01 |
| krobzaur | Is this the expected behavior? I want to be able to configure and list users/projects from my desktop but I don't have access to the IP of my adminurl at my desktop by design | 21:02 |
| stevemar | Sam-I-Am: i thought someone had... | 21:02 |
| *** sdake_ has joined #openstack-keystone | 21:02 | |
| stevemar | Sam-I-Am: https://review.openstack.org/#/c/289889/ ? | 21:02 |
| patchbot | stevemar: patch 289889 - openstack-manuals - add new keystone bootstraping process to install docs | 21:02 |
| *** gordc has joined #openstack-keystone | 21:03 | |
| Sam-I-Am | same patch? | 21:03 |
| *** sdake has quit IRC | 21:05 | |
| *** raildo is now known as raildo-afk | 21:05 | |
| Sam-I-Am | stevemar: it needs more work | 21:06 |
| stevemar | navidp: i spoke with the release team, as soon as keystone releases rc1 we can release a new keystoneauth version, but not before | 21:11 |
| *** Guest93664 is now known as med_ | 21:17 | |
| *** med_ has joined #openstack-keystone | 21:17 | |
| *** Sam-I-Am has left #openstack-keystone | 21:21 | |
| *** slberger has quit IRC | 21:21 | |
| *** slberger1 has joined #openstack-keystone | 21:21 | |
| *** jaugustine has quit IRC | 21:22 | |
| *** sdake_ is now known as sdake | 21:23 | |
| *** spzala_ has quit IRC | 21:26 | |
| *** spzala has joined #openstack-keystone | 21:30 | |
| *** spzala has quit IRC | 21:34 | |
| *** pcaruana has quit IRC | 21:38 | |
| *** e0ne has quit IRC | 21:40 | |
| *** fawadkhaliq has quit IRC | 21:51 | |
| *** fawadkhaliq has joined #openstack-keystone | 21:51 | |
| *** pcaruana has joined #openstack-keystone | 21:52 | |
| *** krobzaur has quit IRC | 21:53 | |
| *** timcline has quit IRC | 21:55 | |
| *** timcline has joined #openstack-keystone | 21:55 | |
| *** timcline has quit IRC | 22:00 | |
| *** fawadkhaliq has quit IRC | 22:00 | |
| *** mylu has joined #openstack-keystone | 22:00 | |
| *** woodster_ has joined #openstack-keystone | 22:01 | |
| *** fawadkhaliq has joined #openstack-keystone | 22:01 | |
| *** harlowja has joined #openstack-keystone | 22:01 | |
| *** raildo-afk is now known as raildo | 22:02 | |
| *** spandhe_ has joined #openstack-keystone | 22:05 | |
| *** raildo is now known as raildo-afk | 22:06 | |
| *** spandhe has quit IRC | 22:06 | |
| *** mylu has quit IRC | 22:07 | |
| *** mylu has joined #openstack-keystone | 22:07 | |
| *** spandhe has joined #openstack-keystone | 22:07 | |
| openstackgerrit | Colleen Murphy proposed openstack/keystone: Make backend filter testing more comprehensive https://review.openstack.org/293159 | 22:09 |
| *** sdake has quit IRC | 22:09 | |
| *** spandhe_ has quit IRC | 22:09 | |
| *** mylu has quit IRC | 22:10 | |
| *** dims_ has joined #openstack-keystone | 22:11 | |
| *** sigmavirus24 is now known as sigmavirus24_awa | 22:12 | |
| *** real56 has quit IRC | 22:12 | |
| *** real56 has joined #openstack-keystone | 22:13 | |
| *** david-lyle has quit IRC | 22:13 | |
| *** dims has quit IRC | 22:14 | |
| *** gordc has quit IRC | 22:15 | |
| *** dims has joined #openstack-keystone | 22:16 | |
| *** dims_ has quit IRC | 22:17 | |
| *** real56 has quit IRC | 22:17 | |
| *** real56 has joined #openstack-keystone | 22:17 | |
| *** mylu has joined #openstack-keystone | 22:22 | |
| *** mylu has quit IRC | 22:27 | |
| stevemar | crinkle: thanks for the all the keystone fixes lately :) | 22:28 |
| *** spzala has joined #openstack-keystone | 22:28 | |
| stevemar | crinkle: any reason why? | 22:28 |
| crinkle | stevemar: I'm trying to branch out from puppet and start hacking on keystone | 22:29 |
| stevemar | crinkle: w00t | 22:29 |
| stevemar | crinkle: one of us, one of us! | 22:29 |
| crinkle | :D | 22:29 |
| stevemar | fix everything, thanks! | 22:29 |
| *** jorge_munoz has quit IRC | 22:30 | |
| *** mylu has joined #openstack-keystone | 22:31 | |
| knikolla | stevemar, sorry to bother, but I'm unable to reproduce the CI fail on https://review.openstack.org/#/c/292492/ | 22:34 |
| patchbot | knikolla: patch 292492 - keystone - Check for duplicates without inserting in keystone... | 22:34 |
| stevemar | knikolla: lemme see | 22:35 |
| stevemar | knikolla: looks like it's failing here | 22:37 |
| stevemar | http://logs.openstack.org/92/292492/1/check/gate-tempest-dsvm-full/3a3ac2c/logs/devstacklog.txt.gz#_2016-03-15_22_01_02_663 | 22:37 |
| stevemar | it's failing to do "openstack project show admin -f value -c id" | 22:37 |
| * morgan waves at crinkle | 22:39 | |
| morgan | yay crinkle being a keystone dev! :) | 22:40 |
| knikolla | stevemar, i saw that, it says it requires authentication. | 22:40 |
| stevemar | knikolla: yeah, hmm | 22:40 |
| crinkle | morgan: o/* | 22:40 |
| stevemar | knikolla: if you want to try this locally, you can pull down the patch in your local keystone repo, and in your local devstack, create a local.conf and set OFFLINE=true and RECLONE=no | 22:41 |
| stevemar | then just ./stack.sh and see if fail in your own system | 22:41 |
| stevemar | brb, dinner | 22:41 |
| knikolla | stevemar, bon appetit :) | 22:42 |
| *** knikolla has quit IRC | 22:42 | |
| *** spzala has quit IRC | 22:44 | |
| *** edmondsw has quit IRC | 22:44 | |
| *** spzala has joined #openstack-keystone | 22:45 | |
| *** furface has joined #openstack-keystone | 22:46 | |
| *** ninag has quit IRC | 22:47 | |
| *** mvk_ has joined #openstack-keystone | 22:48 | |
| morgan | stevemar: FYI put a -1 on the OSProfiler change again, please let me know your feelings on my argument re: the secret_key | 22:49 |
| *** mkrcmari__ has quit IRC | 22:49 | |
| *** mkrcmari__ has joined #openstack-keystone | 22:49 | |
| *** spzala has quit IRC | 22:51 | |
| *** jorge_munoz has joined #openstack-keystone | 22:52 | |
| *** dave-mccowan has quit IRC | 22:54 | |
| *** mvk_ has quit IRC | 22:54 | |
| *** jorge_munoz has quit IRC | 22:54 | |
| *** GB21 has joined #openstack-keystone | 22:54 | |
| *** timcline has joined #openstack-keystone | 22:56 | |
| *** timcline has quit IRC | 23:00 | |
| *** pumarani__ has joined #openstack-keystone | 23:03 | |
| *** pushkaru has quit IRC | 23:03 | |
| openstackgerrit | Colleen Murphy proposed openstack/keystone: Update developer docs for bootstrap command https://review.openstack.org/290897 | 23:06 |
| *** dims has quit IRC | 23:06 | |
| openstackgerrit | Colleen Murphy proposed openstack/keystone: Update dev docs and sample script for v3/bootstrap https://review.openstack.org/290897 | 23:06 |
| *** knikolla has joined #openstack-keystone | 23:10 | |
| *** slberger1 has left #openstack-keystone | 23:10 | |
| *** mylu has quit IRC | 23:13 | |
| *** pumarani__ has quit IRC | 23:13 | |
| *** mylu has joined #openstack-keystone | 23:15 | |
| *** roxanagh_ has joined #openstack-keystone | 23:18 | |
| *** roxanagh_ has quit IRC | 23:22 | |
| *** chlong has joined #openstack-keystone | 23:28 | |
| *** mylu has quit IRC | 23:31 | |
| *** mylu has joined #openstack-keystone | 23:33 | |
| *** mylu has quit IRC | 23:35 | |
| *** mylu has joined #openstack-keystone | 23:37 | |
| morgan | crinkle: you rock, nice to have another solid contributor :) | 23:43 |
| crinkle | morgan: :D | 23:43 |
| * crinkle basks in praise | 23:43 | |
| morgan | If ya need anything besides reviews, don't hesitate to ask. (Reviews are going to happen either way) | 23:44 |
| crinkle | morgan: awesome, thank you | 23:44 |
| * morgan grabs a burger and beer at fifth quadrant while reviewing changes. | 23:44 | |
| stevemar | crinkle: i'll offer the same service | 23:44 |
| crinkle | stevemar: woot | 23:45 |
| *** sdake has joined #openstack-keystone | 23:45 | |
| *** akanksha_ has quit IRC | 23:47 | |
| *** harlowja has quit IRC | 23:47 | |
| *** jasonsb has joined #openstack-keystone | 23:50 | |
| openstackgerrit | Colleen Murphy proposed openstack/keystone: Make backend filter testing more comprehensive https://review.openstack.org/293159 | 23:50 |
| *** tqtran is now known as tqtran-afk | 23:53 | |
| *** timcline has joined #openstack-keystone | 23:57 | |
| knikolla | stevemar, i tried running stack locally earlier with this local.conf http://paste.openstack.org/show/490623/ | 23:58 |
| knikolla | it didn't fail | 23:58 |
| samueldmq | I see gyee and lhcheng speaking at http://www.meetup.com/openstack/events/229450770/ :) | 23:59 |
| *** jasonsb has quit IRC | 23:59 | |
| *** dstanek has left #openstack-keystone | 23:59 | |
| *** sdake_ has joined #openstack-keystone | 23:59 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!