| openstackgerrit | Merged openstack/keystone: Correct test_migrate_data_to_local_user_and_password_tables https://review.openstack.org/296041 | 00:04 |
|---|---|---|
| *** roxanaghe has joined #openstack-keystone | 00:04 | |
| *** harlowja has quit IRC | 00:05 | |
| *** dflorea has joined #openstack-keystone | 00:07 | |
| *** roxanaghe has quit IRC | 00:08 | |
| openstackgerrit | Merged openstack/keystone: Switch migration tests to oslo.db DbTestCase https://review.openstack.org/294246 | 00:09 |
| openstackgerrit | Merged openstack/keystone: Fix table row counting SQL for MySQL and Postgresql https://review.openstack.org/296017 | 00:09 |
| openstackgerrit | Merged openstack/keystone: Correct test_implied_roles_fk_on_delete_cascade https://review.openstack.org/296018 | 00:09 |
| openstackgerrit | Merged openstack/keystone: Opportunistic testing with different DBs https://review.openstack.org/295837 | 00:10 |
| *** gokrokve has joined #openstack-keystone | 00:10 | |
| *** dflorea has quit IRC | 00:11 | |
| *** richm has quit IRC | 00:13 | |
| *** dflorea has joined #openstack-keystone | 00:14 | |
| *** timcline has joined #openstack-keystone | 00:14 | |
| *** gokrokve has quit IRC | 00:15 | |
| *** dflorea has quit IRC | 00:15 | |
| *** dflorea has joined #openstack-keystone | 00:16 | |
| *** timcline has quit IRC | 00:19 | |
| *** fawadkhaliq has quit IRC | 00:20 | |
| *** fawadkhaliq has joined #openstack-keystone | 00:20 | |
| *** dan_nguyen has quit IRC | 00:22 | |
| *** sdake has quit IRC | 00:22 | |
| *** mylu has quit IRC | 00:24 | |
| *** sdake has joined #openstack-keystone | 00:24 | |
| *** roxanaghe_ has quit IRC | 00:24 | |
| *** gokrokve has joined #openstack-keystone | 00:24 | |
| *** fawadkhaliq has quit IRC | 00:24 | |
| *** timcline has joined #openstack-keystone | 00:25 | |
| *** mylu has joined #openstack-keystone | 00:25 | |
| *** furface has quit IRC | 00:26 | |
| *** furface has joined #openstack-keystone | 00:27 | |
| *** timcline has quit IRC | 00:29 | |
| *** shaleh has quit IRC | 00:30 | |
| *** mylu has quit IRC | 00:30 | |
| *** mylu has joined #openstack-keystone | 00:32 | |
| *** mylu has quit IRC | 00:36 | |
| *** dflorea has quit IRC | 00:37 | |
| *** dflorea has joined #openstack-keystone | 00:40 | |
| *** gokrokve has quit IRC | 00:43 | |
| *** mylu has joined #openstack-keystone | 00:43 | |
| *** mylu has quit IRC | 00:49 | |
| *** mylu has joined #openstack-keystone | 00:53 | |
| *** harlowja has joined #openstack-keystone | 00:54 | |
| *** mylu has quit IRC | 00:54 | |
| *** mylu has joined #openstack-keystone | 00:58 | |
| *** sdake_ has joined #openstack-keystone | 00:59 | |
| *** mylu has quit IRC | 01:00 | |
| *** dflorea has quit IRC | 01:01 | |
| *** browne has quit IRC | 01:01 | |
| *** sdake has quit IRC | 01:02 | |
| *** sheel has joined #openstack-keystone | 01:03 | |
| *** mylu has joined #openstack-keystone | 01:09 | |
| *** EinstCrazy has joined #openstack-keystone | 01:13 | |
| *** tqtran has quit IRC | 01:19 | |
| *** timcline has joined #openstack-keystone | 01:26 | |
| *** raginbajin has quit IRC | 01:30 | |
| *** krotscheck_dcm has quit IRC | 01:31 | |
| *** mnaser has quit IRC | 01:31 | |
| *** timcline has quit IRC | 01:31 | |
| *** raginbajin has joined #openstack-keystone | 01:31 | |
| *** krotscheck has joined #openstack-keystone | 01:33 | |
| *** EinstCrazy has quit IRC | 01:34 | |
| *** EinstCrazy has joined #openstack-keystone | 01:34 | |
| *** spandhe has quit IRC | 01:38 | |
| *** mnaser has joined #openstack-keystone | 01:38 | |
| *** dflorea has joined #openstack-keystone | 01:43 | |
| *** gyee has quit IRC | 01:47 | |
| *** dave-mccowan has joined #openstack-keystone | 01:54 | |
| EmilienM | ayoung: re- policies: maybe if you describe me the manual actions that are required to make it work, maybe I can determine if our current puppet-keystone is able to do it or not and if we can do it or not | 01:54 |
| ayoung | EmilienM, cool...ok | 01:54 |
| ayoung | Let me explain...no ... is too much, let me sum up | 01:55 |
| EmilienM | ahah ok | 01:55 |
| ayoung | Policies are not supposed to be the static things they are now | 01:55 |
| *** dflorea has quit IRC | 01:55 | |
| EmilienM | right, currently policy.json file make them static. | 01:55 |
| ayoung | for example, differnt sites want to chose to allow or not allow end users to manage neutron stuff | 01:55 |
| ayoung | so..trying to get a way to make them changeable post deploy | 01:56 |
| ayoung | there was a mail I read a day or so ago from one of our consultants who was trying to get a read-only role implemented | 01:56 |
| ayoung | basically, he created a repo in the undercloud | 01:56 |
| ayoung | it was just a directory, with a layout mirroring /etc | 01:57 |
| ayoung | any of the files he wanted to sync to the overcloud controllers he put in there. THen... | 01:57 |
| ayoung | he did iteratvie development and testing on the policy until it looked right, and synced them down to the node via ssh | 01:57 |
| ayoung | he did puppet's job for puppet | 01:57 |
| ayoung | so...this points out the two things we need: | 01:58 |
| ayoung | 1 some sort of staging repo | 01:58 |
| ayoung | 2 some way to sync from there to the nodes | 01:58 |
| ayoung | now, I have a third thing I want | 01:58 |
| ayoung | which is to put the files into the keystone policy API, so that other people can query "what policy is in effect" | 01:58 |
| ayoung | the api has 2 steps | 01:59 |
| ayoung | the first is uploading a file | 01:59 |
| ayoung | the second is the service or endpoint association | 01:59 |
| ayoung | meaning endpoijg id xyz (some nova node) might get a custom policy | 01:59 |
| *** dims has quit IRC | 01:59 | |
| ayoung | EmilienM, so, what I was thinking was that we could possibly use the Keystone API *as* the staging area | 02:00 |
| EmilienM | so operators have to create a file and upload it? | 02:00 |
| ayoung | EmilienM, right | 02:00 |
| ayoung | However, this might rub some people the wrong way | 02:00 |
| ayoung | its like, staging a config file inside a web server | 02:00 |
| EmilienM | what puppet could do is, generate as many files as you want, and upload it | 02:00 |
| *** dan_nguyen has joined #openstack-keystone | 02:02 | |
| ayoung | EmilienM, from a workflow perspective, I think it would start on the admins laptop. They should have the tools to test and develop the policy file, then copy it to the undercloud. Puppet should take it from there. However...that menas that all consuemrs of policy need to be managed by the same puppet. | 02:03 |
| ayoung | which might be fine | 02:03 |
| *** tqtran has joined #openstack-keystone | 02:03 | |
| ayoung | but under the big tent, I don't know if that is actually wise? Are we going to have third party services that need to comsume tokens etc? | 02:03 |
| ayoung | and have their own policy and stuff? I would think so. | 02:04 |
| EmilienM | I'm a bit confused by undercloud & "managed by the same puppet" | 02:04 |
| ayoung | Which is one reason I like syncing from the Keystone policy API | 02:04 |
| *** dims has joined #openstack-keystone | 02:04 | |
| ayoung | EmilienM, say there is a third party app for, Fluid Dynamics | 02:04 |
| ayoung | it spins up a cluster to run some big data/HOC type app | 02:05 |
| EmilienM | to me, this sounds like a DAY 2 operation | 02:05 |
| ayoung | right | 02:05 |
| ayoung | DAY 2...I guess..exactly...what is day 2? | 02:05 |
| EmilienM | well, DAY 1 is initial deployment | 02:05 |
| EmilienM | DAY 2 is start operations | 02:05 |
| ayoung | OK, I've ggogled it | 02:05 |
| ayoung | yes DAY 2, or even DAY 15 | 02:05 |
| EmilienM | if it's DAY 2, I'm not sure we need Puppet. | 02:06 |
| ayoung | But the thing is, anyone can fetch their policy out of Keystone, so no big deal...we just autodeploy the DAY 1 stuff. | 02:06 |
| ayoung | for the Overcloud, we use Puppet. Question is, where do we stage? | 02:07 |
| EmilienM | this operation sounds like the same as "creating an Image" or "spawning a VM", it's something very specific to the cloud tenant | 02:07 |
| EmilienM | or the cloud admin | 02:07 |
| ayoung | IN Keystone, or stage to a directory, and then copy to the services and to Keystone? | 02:07 |
| *** tqtran has quit IRC | 02:07 | |
| EmilienM | everything (currently) in tripleo is happenning on DAY 1 and at each upgrade or update. | 02:08 |
| ayoung | EmilienM, is there a web UI coming for the Undercloud deploy process? | 02:08 |
| ayoung | er... | 02:08 |
| ayoung | for managing the underclioud, | 02:08 |
| ayoung | and doing the OVERCLOUD deploy process? | 02:08 |
| EmilienM | there is tripleo UI, work in progress | 02:08 |
| EmilienM | but not sure it does undercloud | 02:08 |
| ayoung | OK...so this needs to fit in there | 02:08 |
| ayoung | right, my guess is it runs on the undercloud | 02:08 |
| EmilienM | again, AFIK OOO is not able to manage DAY 2 things right now | 02:09 |
| EmilienM | but I might be wrong | 02:09 |
| EmilienM | we better ask more folks | 02:09 |
| ayoung | Neither is Keystone, but ..weel To me Keystone is kindof useless | 02:09 |
| ayoung | its hobbled. | 02:09 |
| EmilienM | but, there is a but :) | 02:09 |
| EmilienM | I can see an implementation in puppet-keystone | 02:09 |
| ayoung | right..lets talk about that | 02:10 |
| ayoung | we don't really have a repo strategy in Tripleo. Puppet has no where to fetch data from | 02:10 |
| ayoung | I mean,there are the templates, and there is the file you feed to overcloud deploy | 02:10 |
| EmilienM | where we could have 1) a define function (like we already have) to create policy (we have one, static now, we can make it dynamic) and 2) a provider that upload this file in keystone API | 02:10 |
| *** mylu has quit IRC | 02:10 | |
| ayoung | We could also make it flexible enough that we could store the policy in the undercloud Keystone policy API when we tear down the overcloud | 02:11 |
| *** mylu has joined #openstack-keystone | 02:11 | |
| EmilienM | 1) means making keystone::policy dynamic, with a define function, that would be able to generate multiple policy.json files | 02:11 |
| ayoung | we don;t yet need to generate them | 02:11 |
| EmilienM | 2) means create a puppet provider that takes the file generated by 1) and upload it | 02:11 |
| EmilienM | stop talking about undercloud / overcloud | 02:11 |
| EmilienM | let's ignore tripleo | 02:12 |
| ayoung | and by upload, you mean copy to the controller node | 02:12 |
| EmilienM | and make it generic | 02:12 |
| EmilienM | ayoung: keystone class is applied on controllers, yes | 02:12 |
| ayoung | EmilienM, so I would add in there a "gather" step | 02:12 |
| EmilienM | can you describe this step? | 02:12 |
| ayoung | go and grab the policy files from the places that the packages drop them | 02:12 |
| ayoung | ok.. so say you are running puppet from a node that does not have Keystone RPM or comparable on it | 02:13 |
| ayoung | where does it get policy.json in the first place? | 02:13 |
| ayoung | it installs the RPM, and grabs from there. | 02:13 |
| EmilienM | all nodes running ::keystone class are installing keystone | 02:13 |
| EmilienM | so we would likely use a controller to generate / manage the policies. | 02:13 |
| ayoung | right, os it grabs policy from the first node | 02:13 |
| ayoung | or just stakes a sha256 hash and records that, whatever | 02:14 |
| ayoung | so long as we know how to start the customization process | 02:14 |
| ayoung | Remember, each of the service teams (Nova etc) are responsible for producing the first cut of policy. So we want to let that live in the ROPMs, but then on deploy, treat it as a manged resource | 02:15 |
| ayoung | remember the quest step, too | 02:15 |
| *** mylu has quit IRC | 02:15 | |
| ayoung | right now, there is no way to ask Nova "what is your policy" | 02:15 |
| EmilienM | like I said, puppet-keystone does not break existing policy.json (at its current state) | 02:15 |
| EmilienM | we append it | 02:15 |
| ayoung | EmilienM, append? | 02:15 |
| EmilienM | err | 02:15 |
| EmilienM | I should learn english | 02:16 |
| EmilienM | we append it, it's english | 02:16 |
| EmilienM | we add stuffs | 02:16 |
| EmilienM | we don't drop stuffs | 02:16 |
| EmilienM | we can also modify stuffs | 02:16 |
| EmilienM | ayoung: maybe we can have a chat tomorrow, with richm, our keystone liaison | 02:17 |
| ayoung | EmilienM, um..sure, but he's really focusod on Logging these days | 02:17 |
| EmilienM | I see | 02:17 |
| ayoung | I think I am going to end up with that role instead | 02:17 |
| EmilienM | ayoung: great, we like having experts in our puppet modules | 02:18 |
| EmilienM | ayoung: richm is core on puppet-keystone fyi | 02:18 |
| ayoung | I know. I wish he were still focused on it. But he's smart, and in demand. | 02:18 |
| ayoung | You'll have to settle for me. But I am trainable | 02:19 |
| EmilienM | I have no doubt | 02:19 |
| EmilienM | ayoung: I go to sleep now, can we continue tomorrow? it sounds very interesting | 02:19 |
| ayoung | EmilienM, please go to sleep. And We will certainly solitic more input | 02:19 |
| ayoung | from otheres involved. | 02:19 |
| EmilienM | nice insights, thanks for your patience :-P | 02:20 |
| *** dflorea has joined #openstack-keystone | 02:20 | |
| *** mylu has joined #openstack-keystone | 02:21 | |
| *** mylu has quit IRC | 02:26 | |
| *** timcline has joined #openstack-keystone | 02:27 | |
| *** mylu has joined #openstack-keystone | 02:27 | |
| *** dflorea has quit IRC | 02:28 | |
| *** timcline has quit IRC | 02:31 | |
| *** mylu has quit IRC | 02:33 | |
| openstackgerrit | wangxiyuan proposed openstack/python-keystoneclient: Allow send null value in extra properties https://review.openstack.org/296246 | 02:37 |
| *** Nakato_ is now known as Nakato | 02:44 | |
| *** timcline has joined #openstack-keystone | 02:45 | |
| *** dims_ has joined #openstack-keystone | 02:45 | |
| *** spandhe has joined #openstack-keystone | 02:45 | |
| *** dims has quit IRC | 02:46 | |
| *** GB21 has joined #openstack-keystone | 02:49 | |
| *** agrebennikov has quit IRC | 03:02 | |
| openstackgerrit | wangxiyuan proposed openstack/python-keystoneclient: Allow send null value in extra properties https://review.openstack.org/296246 | 03:03 |
| *** lhcheng has quit IRC | 03:04 | |
| *** sdake_ is now known as sdake | 03:07 | |
| *** roxanaghe has joined #openstack-keystone | 03:07 | |
| *** roxanaghe has quit IRC | 03:12 | |
| *** lhcheng has joined #openstack-keystone | 03:13 | |
| *** ChanServ sets mode: +v lhcheng | 03:13 | |
| openstackgerrit | Prosunjit Biswas proposed openstack/keystoneauth: Fix for PEP8 violation - D202 (No blank lines allowed after function docstring.) https://review.openstack.org/299099 | 03:13 |
| *** lhcheng_ has joined #openstack-keystone | 03:14 | |
| *** lhcheng has quit IRC | 03:14 | |
| *** ebalduf has joined #openstack-keystone | 03:14 | |
| *** mylu has joined #openstack-keystone | 03:16 | |
| *** sdake_ has joined #openstack-keystone | 03:17 | |
| *** sdake has quit IRC | 03:20 | |
| openstackgerrit | wangxiyuan proposed openstack/python-keystoneclient: Allow send null value in extra properties https://review.openstack.org/296246 | 03:21 |
| *** GB21 has quit IRC | 03:25 | |
| openstackgerrit | Prosunjit Biswas proposed openstack/keystoneauth: Fix for PEP8 violation - D202 (No blank lines allowed after function docstring.) https://review.openstack.org/299099 | 03:28 |
| *** links has joined #openstack-keystone | 03:40 | |
| *** lhcheng_ has quit IRC | 03:48 | |
| *** spandhe_ has joined #openstack-keystone | 03:49 | |
| *** spandhe has quit IRC | 03:51 | |
| *** spandhe_ is now known as spandhe | 03:51 | |
| *** lhcheng has joined #openstack-keystone | 03:55 | |
| *** ChanServ sets mode: +v lhcheng | 03:55 | |
| *** ebalduf has quit IRC | 04:00 | |
| openstackgerrit | Prosunjit Biswas proposed openstack/keystoneauth: Fix for PEP8 violation - D204 \n (1 blank line required after class docstring) https://review.openstack.org/299115 | 04:11 |
| *** dave-mccowan has quit IRC | 04:16 | |
| openstackgerrit | Prosunjit Biswas proposed openstack/keystoneauth: Fix for PEP8 violation - D204 (1 blank line required after class docstring) https://review.openstack.org/299115 | 04:16 |
| *** fawadkhaliq has joined #openstack-keystone | 04:18 | |
| openstackgerrit | Prosunjit Biswas proposed openstack/keystoneauth: Fix for PEP8 violation - D202 (No blank lines allowed after function docstring.) https://review.openstack.org/299099 | 04:19 |
| *** harlowja_at_home has joined #openstack-keystone | 04:33 | |
| *** markvoelker has joined #openstack-keystone | 04:36 | |
| *** agrebennikov has joined #openstack-keystone | 04:46 | |
| *** EinstCrazy has quit IRC | 04:50 | |
| *** timcline has quit IRC | 04:53 | |
| *** roxanaghe has joined #openstack-keystone | 04:53 | |
| *** GB21 has joined #openstack-keystone | 04:57 | |
| *** EinstCrazy has joined #openstack-keystone | 05:08 | |
| *** jaosorior has joined #openstack-keystone | 05:14 | |
| *** spandhe has quit IRC | 05:19 | |
| *** sdake_ has quit IRC | 05:20 | |
| *** spandhe has joined #openstack-keystone | 05:22 | |
| *** roxanaghe has quit IRC | 05:22 | |
| *** timcline has joined #openstack-keystone | 05:24 | |
| *** rk4n has joined #openstack-keystone | 05:27 | |
| *** timcline has quit IRC | 05:28 | |
| *** sdake has joined #openstack-keystone | 05:29 | |
| *** mylu has quit IRC | 05:38 | |
| *** maestro has joined #openstack-keystone | 05:38 | |
| *** spandhe has quit IRC | 05:43 | |
| openstackgerrit | Steve Martinelli proposed openstack/keystone-specs: Reorder the specs repo https://review.openstack.org/299132 | 05:44 |
| *** maestro has left #openstack-keystone | 05:45 | |
| *** stevemar changes topic to "Tag bugs as mitaka-rc-potential - fix more bugs! | Master is accepting code for Newton!" | 05:46 | |
| *** sdake has quit IRC | 05:48 | |
| *** sdake has joined #openstack-keystone | 05:51 | |
| *** EinstCra_ has joined #openstack-keystone | 05:59 | |
| *** harlowja_at_home has quit IRC | 06:01 | |
| *** EinstCrazy has quit IRC | 06:02 | |
| *** Nirupama has joined #openstack-keystone | 06:05 | |
| *** markvoelker has quit IRC | 06:10 | |
| *** lhcheng has quit IRC | 06:12 | |
| *** timcline has joined #openstack-keystone | 06:24 | |
| *** rcernin has joined #openstack-keystone | 06:26 | |
| *** markvoelker has joined #openstack-keystone | 06:26 | |
| *** timcline has quit IRC | 06:29 | |
| *** daemontool has joined #openstack-keystone | 06:37 | |
| *** markvoelker has quit IRC | 06:39 | |
| *** wanghua has joined #openstack-keystone | 06:44 | |
| *** tesseract has joined #openstack-keystone | 06:45 | |
| *** tesseract is now known as Guest23157 | 06:46 | |
| openstackgerrit | Maho Koshiya proposed openstack/python-keystoneclient: Add wrapper classes for return-request-id-to-caller https://review.openstack.org/261188 | 06:48 |
| *** woodster_ has quit IRC | 06:57 | |
| *** agrebennikov_ has joined #openstack-keystone | 07:00 | |
| *** agrebennikov has quit IRC | 07:02 | |
| *** fawadkhaliq has quit IRC | 07:24 | |
| *** GB21 has quit IRC | 07:25 | |
| *** timcline has joined #openstack-keystone | 07:25 | |
| *** timcline has quit IRC | 07:30 | |
| *** daemontool has quit IRC | 07:30 | |
| *** permalac has joined #openstack-keystone | 07:31 | |
| *** henrynash has quit IRC | 07:33 | |
| *** agrebennikov_ has quit IRC | 07:39 | |
| *** markvoelker has joined #openstack-keystone | 07:40 | |
| *** jed56 has joined #openstack-keystone | 07:40 | |
| *** daemontool has joined #openstack-keystone | 07:41 | |
| *** markvoelker has quit IRC | 07:45 | |
| *** sdake_ has joined #openstack-keystone | 07:49 | |
| *** sdake has quit IRC | 07:51 | |
| *** agrebennikov_ has joined #openstack-keystone | 07:54 | |
| *** mkoderer__ has quit IRC | 08:00 | |
| *** mkoderer__ has joined #openstack-keystone | 08:02 | |
| *** mvk has joined #openstack-keystone | 08:07 | |
| *** agrebennikov_ has quit IRC | 08:13 | |
| *** EinstCra_ has quit IRC | 08:15 | |
| *** EinstCra_ has joined #openstack-keystone | 08:15 | |
| *** gangadhar has joined #openstack-keystone | 08:17 | |
| *** jistr has joined #openstack-keystone | 08:25 | |
| *** timcline has joined #openstack-keystone | 08:26 | |
| *** mhickey has joined #openstack-keystone | 08:29 | |
| *** timcline has quit IRC | 08:30 | |
| openstackgerrit | Merged openstack/keystoneauth: Fix for PEP8 violation - D202 (No blank lines allowed after function docstring.) https://review.openstack.org/299099 | 08:32 |
| *** sdake_ has quit IRC | 08:36 | |
| *** bjornar has joined #openstack-keystone | 08:41 | |
| *** markvoelker has joined #openstack-keystone | 08:42 | |
| morgan | samueldmq: how far did you get with the tests? | 08:47 |
| *** markvoelker has quit IRC | 08:47 | |
| morgan | samueldmq: i have a stab at the if you haven't gottten very far (mine will need some work, and easier if you've made progress) | 08:47 |
| *** e0ne has joined #openstack-keystone | 08:48 | |
| *** GB21 has joined #openstack-keystone | 08:56 | |
| *** GB21 has quit IRC | 09:01 | |
| *** GB21 has joined #openstack-keystone | 09:01 | |
| *** pece has joined #openstack-keystone | 09:08 | |
| *** daemontool has quit IRC | 09:17 | |
| *** timcline has joined #openstack-keystone | 09:27 | |
| *** timcline has quit IRC | 09:31 | |
| *** rk4n has quit IRC | 09:35 | |
| openstackgerrit | Kalaswan Datta proposed openstack/keystone: Clear the project ID from user information https://review.openstack.org/277707 | 09:40 |
| *** markvoelker has joined #openstack-keystone | 09:44 | |
| *** markvoelker has quit IRC | 09:49 | |
| *** rk4n has joined #openstack-keystone | 10:06 | |
| *** rk4n has quit IRC | 10:25 | |
| *** timcline has joined #openstack-keystone | 10:27 | |
| *** EinstCra_ has quit IRC | 10:28 | |
| *** timcline has quit IRC | 10:32 | |
| *** mvk has quit IRC | 10:34 | |
| *** mvk has joined #openstack-keystone | 10:37 | |
| *** GB21 has quit IRC | 10:47 | |
| *** daemontool has joined #openstack-keystone | 10:57 | |
| *** rk4n has joined #openstack-keystone | 11:08 | |
| -openstackstatus- NOTICE: Gate on project-config is currently broken due to IRC tests. The problem has been detected and we are working to fix the issue as soon as possible. | 11:14 | |
| samueldmq | morgan: hi | 11:18 |
| samueldmq | morgan: I wrote a very nice method doc, explaining the mistake we needed to fix, and what we wanted to test | 11:19 |
| samueldmq | morgan: trying to test the migrations, I've not got that far | 11:19 |
| samueldmq | morgan: if you can upload what you have, I can continue | 11:19 |
| *** ericksonsantos has quit IRC | 11:21 | |
| *** iurygregory has quit IRC | 11:22 | |
| *** timcline has joined #openstack-keystone | 11:28 | |
| *** iurygregory has joined #openstack-keystone | 11:31 | |
| *** timcline has quit IRC | 11:33 | |
| *** permalac has quit IRC | 11:35 | |
| *** dave-mccowan has joined #openstack-keystone | 11:40 | |
| *** GB21 has joined #openstack-keystone | 11:41 | |
| *** iurygregory has quit IRC | 11:46 | |
| *** markvoelker has joined #openstack-keystone | 11:46 | |
| *** openstackgerrit has quit IRC | 11:47 | |
| *** openstackgerrit has joined #openstack-keystone | 11:47 | |
| *** GB21 has quit IRC | 11:49 | |
| *** GB21 has joined #openstack-keystone | 11:51 | |
| *** markvoelker has quit IRC | 11:51 | |
| *** rk4n has quit IRC | 11:58 | |
| *** rodrigods has quit IRC | 11:59 | |
| *** rodrigods has joined #openstack-keystone | 11:59 | |
| *** EinstCrazy has joined #openstack-keystone | 11:59 | |
| *** iurygregory has joined #openstack-keystone | 12:02 | |
| *** trown|outtypewww is now known as trown | 12:05 | |
| *** raildo-afk is now known as raildo | 12:11 | |
| *** david-lyle_ has joined #openstack-keystone | 12:17 | |
| *** david-lyle has quit IRC | 12:17 | |
| *** GB21 has quit IRC | 12:17 | |
| *** GB21 has joined #openstack-keystone | 12:19 | |
| *** daemontool has quit IRC | 12:27 | |
| *** timcline has joined #openstack-keystone | 12:29 | |
| *** daemontool has joined #openstack-keystone | 12:32 | |
| *** openstackgerrit has quit IRC | 12:33 | |
| *** openstackgerrit has joined #openstack-keystone | 12:33 | |
| *** timcline has quit IRC | 12:34 | |
| *** rmallah has joined #openstack-keystone | 12:38 | |
| *** jaosorior has quit IRC | 12:38 | |
| *** GB21 has quit IRC | 12:38 | |
| *** jaosorior has joined #openstack-keystone | 12:39 | |
| *** gordc has joined #openstack-keystone | 12:40 | |
| *** ayoung has quit IRC | 12:46 | |
| *** rk4n has joined #openstack-keystone | 12:47 | |
| *** markvoelker has joined #openstack-keystone | 12:47 | |
| rmallah | what is the difference between port 5000 and port 35357 of keystone ? | 12:48 |
| *** e0ne has quit IRC | 12:48 | |
| SamYaple | rmallah: about 30,000 | 12:49 |
| SamYaple | rmallah: i kid of course. one is used for "public" communnication, the other for "admin". only the 35357 port can do admin operations | 12:49 |
| breton | rmallah: SamYaple: this is only true for v2 API | 12:51 |
| breton | rmallah: SamYaple: for v3 API there is no difference | 12:51 |
| SamYaple | breton: oh? this is news to me | 12:51 |
| *** markvoelker has quit IRC | 12:51 | |
| SamYaple | so there need be only one listening port for v3, but two are there for backwards compatibility? | 12:51 |
| *** edmondsw has joined #openstack-keystone | 12:52 | |
| breton | port 35357 is somehow fixed for OpenStack Keystone, and 5000 we use... just because we use. | 12:52 |
| openstackgerrit | Tim Kelsey proposed openstack/keystone: Bandit test results https://review.openstack.org/299373 | 12:52 |
| breton | yes, we use both ports for backward compatibility | 12:52 |
| *** ninag has joined #openstack-keystone | 12:53 | |
| breton | we use ports by themselves because of backward compatibility, because keystone in devstack can listen on :80/identity/ | 12:53 |
| rmallah | hey thanks ! and excited to see ppl are awake :) | 12:54 |
| rmallah | i am actually a newbie and trying cope with the new concepts under v3 | 12:54 |
| rmallah | is there a new documents that explains the inter relation of domains , users , projects , tenants , services , endpoints ( and list if i missed any) | 12:57 |
| rmallah | sorry new was a typo | 12:57 |
| *** edmondsw has quit IRC | 12:58 | |
| rmallah | i am currently reading http://docs.openstack.org/developer/keystone/index.html but it seems to be meant for developers/contributors | 12:58 |
| tjcocozz | rmallah, check out section 1.1.3.1 https://books.google.com/books?id=nZYpCwAAQBAJ&pg=PT62&lpg=PT62&dq=six.binary_type+example&source=bl&ots=xZ9jTq2CLu&sig=-wCxi95JKp32ucVTE0KP38czd1g&hl=en&sa=X&ved=0ahUKEwjTif7KjNXLAhWIej4KHcS0CUUQ6AEITDAJ#v=onepage&q&f=false | 13:03 |
| *** rmallah has quit IRC | 13:12 | |
| *** openstackgerrit has quit IRC | 13:18 | |
| *** openstackgerrit has joined #openstack-keystone | 13:18 | |
| *** pauloewerton has joined #openstack-keystone | 13:20 | |
| *** rmallah has joined #openstack-keystone | 13:22 | |
| *** doug-fis_ has quit IRC | 13:25 | |
| *** naresht has joined #openstack-keystone | 13:27 | |
| *** links has quit IRC | 13:30 | |
| *** timcline has joined #openstack-keystone | 13:30 | |
| *** doug-fish has joined #openstack-keystone | 13:31 | |
| *** edmondsw has joined #openstack-keystone | 13:34 | |
| *** timcline has quit IRC | 13:34 | |
| *** doug-fish has quit IRC | 13:35 | |
| *** trown is now known as trown|afk | 13:37 | |
| *** ninag has quit IRC | 13:39 | |
| *** ninag has joined #openstack-keystone | 13:41 | |
| *** Nirupama has quit IRC | 13:41 | |
| *** ninag has quit IRC | 13:42 | |
| *** ebalduf has joined #openstack-keystone | 13:43 | |
| edmondsw | stevemar, wanted to hear your thoughts on how to fix https://bugs.launchpad.net/keystoneauth/+bug/1494413 | 13:45 |
| openstack | Launchpad bug 1494413 in python-openstackclient "AttributeError: auth_ref when trying to do user create" [Undecided,Confirmed] | 13:45 |
| edmondsw | I think we need to update global requirements, and then push that into openstackclient... should keystoneauth also start showing a requirement on keystoneclient? | 13:47 |
| *** markvoelker has joined #openstack-keystone | 13:48 | |
| *** doug-fish has joined #openstack-keystone | 13:50 | |
| edmondsw | and what version of keystoneclient should we make the new lower bound? | 13:50 |
| *** shangxdy has joined #openstack-keystone | 13:50 | |
| *** e0ne has joined #openstack-keystone | 13:50 | |
| *** clenimar has joined #openstack-keystone | 13:51 | |
| *** doug-fis_ has joined #openstack-keystone | 13:52 | |
| *** markvoelker has quit IRC | 13:52 | |
| *** richm has joined #openstack-keystone | 13:53 | |
| breton | > keystoneauth also start showing a requirement on keystoneclient | 13:55 |
| breton | you want keystoneauth to depend on keystoneclient? | 13:55 |
| breton | edmondsw: | 13:55 |
| *** doug-fish has quit IRC | 13:55 | |
| edmondsw | breton I'm not sure... I think the answer is probably no, but then I don't know if folks will correctly understand that keystoneauth1 is incompatible with keystoneclient 1.6 | 13:56 |
| *** ametts has joined #openstack-keystone | 13:57 | |
| *** tqtran has joined #openstack-keystone | 13:57 | |
| edmondsw | we probably just update global requirements | 13:57 |
| *** ebalduf has quit IRC | 13:58 | |
| *** knikolla has joined #openstack-keystone | 14:05 | |
| *** real56 has joined #openstack-keystone | 14:07 | |
| *** EinstCrazy has quit IRC | 14:07 | |
| *** e0ne has quit IRC | 14:11 | |
| *** pushkaru has joined #openstack-keystone | 14:12 | |
| *** sigmavirus24_awa is now known as sigmavirus24 | 14:12 | |
| *** e0ne has joined #openstack-keystone | 14:16 | |
| *** markvoelker has joined #openstack-keystone | 14:16 | |
| breton | edmondsw: i wonder if te issue is there with current master | 14:21 |
| breton | edmondsw: because it probably won't be fixed for kilo | 14:21 |
| *** trown|afk is now known as trown | 14:21 | |
| edmondsw | breton, I'm using mitaka | 14:22 |
| breton | what's the lower-constraint for ksc in mitaka? | 14:22 |
| edmondsw | 1.6 | 14:22 |
| breton | >=1.6.0 | 14:22 |
| breton | yep | 14:22 |
| breton | keystoneauth will not depend on ksc because there will be circular dependency | 14:23 |
| *** slberger has joined #openstack-keystone | 14:25 | |
| *** rk4n has quit IRC | 14:29 | |
| *** links has joined #openstack-keystone | 14:30 | |
| *** timcline has joined #openstack-keystone | 14:31 | |
| *** timcline has quit IRC | 14:35 | |
| *** spandhe has joined #openstack-keystone | 14:35 | |
| *** rderose has joined #openstack-keystone | 14:38 | |
| *** spandhe has quit IRC | 14:40 | |
| *** rderose has quit IRC | 14:41 | |
| stevemar | edmondsw: let me take a looksy | 14:42 |
| edmondsw | stevemar, ty sir | 14:42 |
| *** jsavak has joined #openstack-keystone | 14:43 | |
| *** rk4n has joined #openstack-keystone | 14:43 | |
| *** rderose has joined #openstack-keystone | 14:43 | |
| *** sdake has joined #openstack-keystone | 14:44 | |
| *** hogepodge has quit IRC | 14:44 | |
| *** markvoelker has quit IRC | 14:46 | |
| morgan | samueldmq: give me a few | 14:46 |
| morgan | I don't know if they'll work | 14:47 |
| openstackgerrit | Morgan Fainberg proposed openstack/keystone: Correct `role_name` constraint dropping https://review.openstack.org/298402 | 14:48 |
| morgan | samueldmq: ^ | 14:48 |
| *** links has quit IRC | 14:49 | |
| *** rderose has quit IRC | 14:50 | |
| *** rderose has joined #openstack-keystone | 14:51 | |
| openstackgerrit | Dolph Mathews proposed openstack/keystone-specs: Shadow users (continuation for newton) https://review.openstack.org/296123 | 14:54 |
| *** sdake_ has joined #openstack-keystone | 14:56 | |
| morgan | dolphm: soooo http://fossbytes.com/microsoft-canonical-bring-ubuntu-linux-on-windows-10/ (cc dstanek ) | 14:57 |
| *** sdake has quit IRC | 14:57 | |
| *** ametts has quit IRC | 14:57 | |
| *** ninag has joined #openstack-keystone | 14:58 | |
| stevemar | morgan: interesting | 14:58 |
| morgan | stevemar: right? | 14:58 |
| stevemar | dolphm: pretty sure federated users need to to be funneled into groups now | 14:59 |
| morgan | i hope it's not April 1 thing. | 14:59 |
| *** david_cu has joined #openstack-keystone | 14:59 | |
| *** rmallah has quit IRC | 15:00 | |
| *** jsavak has quit IRC | 15:01 | |
| morgan | anyway so stevemar pushed a change with tests | 15:02 |
| morgan | for the blocker bug. waiting to see if gate is cranky with it. | 15:02 |
| stevemar | morgan: haha | 15:02 |
| morgan | stevemar: i might have written the code at 1am last night | 15:02 |
| stevemar | morgan: still have 3 days til apr 1 | 15:02 |
| stevemar | 2* | 15:03 |
| *** real56 has quit IRC | 15:05 | |
| *** jsavak has joined #openstack-keystone | 15:06 | |
| *** roxanaghe has joined #openstack-keystone | 15:06 | |
| *** sdake has joined #openstack-keystone | 15:08 | |
| *** real56 has joined #openstack-keystone | 15:10 | |
| *** sdake_ has quit IRC | 15:10 | |
| openstackgerrit | Dolph Mathews proposed openstack/keystone-specs: Shadow users (continuation for newton) https://review.openstack.org/296123 | 15:10 |
| *** roxanaghe has quit IRC | 15:11 | |
| *** jorge_munoz has joined #openstack-keystone | 15:11 | |
| bknudson | dangerous move for MS - people will find that ubuntu works well enough and dump windows. | 15:13 |
| *** diazjf has joined #openstack-keystone | 15:14 | |
| *** bknudson has left #openstack-keystone | 15:14 | |
| *** bknudson has joined #openstack-keystone | 15:14 | |
| *** ChanServ sets mode: +v bknudson | 15:14 | |
| samueldmq | morgan: thanks will look | 15:16 |
| *** bjornar has quit IRC | 15:17 | |
| *** diazjf has quit IRC | 15:17 | |
| *** jsavak has quit IRC | 15:18 | |
| *** jsavak has joined #openstack-keystone | 15:18 | |
| *** Guest23157 has quit IRC | 15:21 | |
| lbragstad | morgan it'd be nice if they just started selling them like that | 15:22 |
| morgan | lbragstad: hehe | 15:22 |
| lbragstad | morgan so it saves me the step of blowing MS off whatever I buy | 15:22 |
| *** rderose has quit IRC | 15:22 | |
| morgan | lbragstad: we'll see how it goes, but i'm tentatively excited | 15:23 |
| bknudson | lbragstad: you're paying the tax for the MS license. | 15:23 |
| lbragstad | morgan same | 15:23 |
| *** rderose has joined #openstack-keystone | 15:23 | |
| bknudson | the sellers get so many kickbacks from the bundled adware that it's essentially free | 15:23 |
| morgan | bknudson: i'm actually ok with it for a desktop if it meets my needs. -- heck most of the time you pay for windows on laptops anyway... (OEM) even if you don't use it. | 15:24 |
| morgan | (unless mac or like dell xps dev edition | 15:24 |
| morgan | ) | 15:24 |
| *** markvoelker has joined #openstack-keystone | 15:29 | |
| *** timcline has joined #openstack-keystone | 15:31 | |
| *** diazjf has joined #openstack-keystone | 15:32 | |
| *** woodster_ has joined #openstack-keystone | 15:32 | |
| *** diazjf has quit IRC | 15:33 | |
| *** timcline_ has joined #openstack-keystone | 15:35 | |
| *** diazjf has joined #openstack-keystone | 15:35 | |
| *** timcline has quit IRC | 15:35 | |
| *** dan_nguyen has joined #openstack-keystone | 15:36 | |
| *** arunkant has quit IRC | 15:43 | |
| *** arunkant has joined #openstack-keystone | 15:43 | |
| *** real56 has quit IRC | 15:43 | |
| *** permalac has joined #openstack-keystone | 15:44 | |
| *** real56 has joined #openstack-keystone | 15:44 | |
| *** tellesnobrega is now known as tellesnobrega_af | 15:44 | |
| *** real56 has quit IRC | 15:44 | |
| *** agrebennikov_ has joined #openstack-keystone | 15:44 | |
| *** roxanaghe has joined #openstack-keystone | 15:46 | |
| stevemar | dolphm: pretty sure federated users need to be funneled into groups | 15:47 |
| *** ametts has joined #openstack-keystone | 15:51 | |
| stevemar | rderose: dolphm please use https://blueprints.launchpad.net/keystone/+spec/shadow-users-newton for tracking purposes | 15:52 |
| stevemar | or porpoises, your choice | 15:53 |
| rderose | stevemar: okay :) | 15:54 |
| openstackgerrit | Merged openstack/keystone-specs: Shadow users (continuation for newton) https://review.openstack.org/296123 | 15:55 |
| openstackgerrit | Ron De Rose proposed openstack/keystone: WIP - Concrete role assignments for federated users https://review.openstack.org/284943 | 15:55 |
| openstackgerrit | Ron De Rose proposed openstack/keystone: WIP - Drop EPHEMERAL user type https://review.openstack.org/296639 | 15:56 |
| *** gyee has joined #openstack-keystone | 15:58 | |
| *** ChanServ sets mode: +v gyee | 15:58 | |
| *** ericksonsantos has joined #openstack-keystone | 15:59 | |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Define identity interface - easy cases https://review.openstack.org/291950 | 16:00 |
| *** david_cu has quit IRC | 16:00 | |
| *** real56 has joined #openstack-keystone | 16:02 | |
| *** david_cu has joined #openstack-keystone | 16:03 | |
| *** real56_ has joined #openstack-keystone | 16:04 | |
| *** real56 has quit IRC | 16:04 | |
| *** real56_ is now known as real56 | 16:04 | |
| *** jaosorior has quit IRC | 16:06 | |
| *** topol has quit IRC | 16:07 | |
| *** stevemar has quit IRC | 16:08 | |
| *** doug-fish has joined #openstack-keystone | 16:10 | |
| *** jistr has quit IRC | 16:10 | |
| *** doug-fis_ has quit IRC | 16:12 | |
| *** real56 has quit IRC | 16:12 | |
| *** phalmos has joined #openstack-keystone | 16:12 | |
| *** doug-fish has quit IRC | 16:14 | |
| *** rmallah has joined #openstack-keystone | 16:14 | |
| *** tellesnobrega_af is now known as tellesnobrega | 16:15 | |
| *** rmallah has quit IRC | 16:15 | |
| *** daemontool has quit IRC | 16:18 | |
| *** cdcasey has joined #openstack-keystone | 16:18 | |
| *** stevemar has joined #openstack-keystone | 16:19 | |
| *** ChanServ sets mode: +o stevemar | 16:19 | |
| *** openstack has joined #openstack-keystone | 17:03 | |
| *** gyee has joined #openstack-keystone | 17:03 | |
| *** ChanServ sets mode: +v gyee | 17:03 | |
| *** openstackstatus has joined #openstack-keystone | 17:04 | |
| *** ChanServ sets mode: +v openstackstatus | 17:04 | |
| openstackgerrit | Kristi Nikolla proposed openstack/keystone: WIP - ldap3 Identity Driver https://review.openstack.org/296090 | 17:06 |
| *** permalac has quit IRC | 17:07 | |
| *** fawadkhaliq has quit IRC | 17:10 | |
| *** fawadkhaliq has joined #openstack-keystone | 17:11 | |
| *** gyee has quit IRC | 17:12 | |
| *** dflorea has joined #openstack-keystone | 17:13 | |
| *** rmallah has joined #openstack-keystone | 17:15 | |
| *** jsavak has quit IRC | 17:18 | |
| *** shangxdy has quit IRC | 17:19 | |
| *** gyee has joined #openstack-keystone | 17:24 | |
| *** ChanServ sets mode: +v gyee | 17:24 | |
| *** tellesnobrega_af is now known as tellesnobrega | 17:25 | |
| *** jsavak has joined #openstack-keystone | 17:27 | |
| openstackgerrit | Dolph Mathews proposed openstack/keystone-specs: Shadow users: work item to relax mapping requirements https://review.openstack.org/299546 | 17:28 |
| *** spandhe has joined #openstack-keystone | 17:29 | |
| *** trown|lunch is now known as trown | 17:30 | |
| *** ayoung has joined #openstack-keystone | 17:30 | |
| *** ChanServ sets mode: +v ayoung | 17:30 | |
| *** jsavak has quit IRC | 17:32 | |
| *** jsavak has joined #openstack-keystone | 17:33 | |
| jmlowe | ayoung: one more quick question about keystone middleware, where do I go to find the people maintaining it? | 17:34 |
| ayoung | jmlowe, here | 17:34 |
| jmlowe | perfect | 17:34 |
| *** dflorea has quit IRC | 17:34 | |
| ayoung | jmlowe, you found me | 17:34 |
| jmlowe | ayoung: best I could do in my bug search was https://bugs.launchpad.net/keystonemiddleware/+bug/1336056 | 17:34 |
| openstack | Launchpad bug 1336056 in keystonemiddleware "Keystone V3 Should Be Used By Default Over V2" [Wishlist,Fix released] - Assigned to Sam Leong (chio-fai-sam-leong) | 17:34 |
| ayoung | jmlowe, so, the question I have of the other devs is why Keystonemiddleware/ec2 does not support v3? | 17:34 |
| ayoung | if this is an oversight, or a deliberate decision | 17:35 |
| ayoung | jmlowe, did you verify that it does, infact, barf (to use the technical term) when given a v3 token? | 17:36 |
| *** dflorea has joined #openstack-keystone | 17:38 | |
| jmlowe | yes, using a v3 url returns a v3 ticket and 400 bad request failure for all users, v2 url works for default domain but users with non default domain fail auth | 17:39 |
| ayoung | jmlowe, file a bug for that. | 17:39 |
| ayoung | morgan, dolphm is there any reason that the ec2 middleware should not support Keystone V3? Is there an alternate Middleware approach to replace it? Can auth_token middleware replace Ec2? | 17:40 |
| ayoung | stevemar, ^^ | 17:40 |
| ayoung | jmlowe, I guess no one cares about your pain. | 17:41 |
| jmlowe | ayoung: emulating amazon isn't very sexy these days | 17:42 |
| *** sdake has quit IRC | 17:42 | |
| ayoung | jmlowe, depends on the Amazon | 17:42 |
| morgan | stevemar: I will fix the RC bug in a sec | 17:43 |
| morgan | stevemar: we are close. | 17:43 |
| ayoung | jmlowe, so fixing EC2 is non-trivial, but I suspect essential | 17:43 |
| morgan | samueldmq: ^cc | 17:43 |
| ayoung | I need to know if there is another approach. If not, I can take on the work | 17:43 |
| *** rmallah has quit IRC | 17:44 | |
| raildo | lbragstad: ayoung hey, can you guys take a look on the failed tests on this patch, later? https://review.openstack.org/#/c/258650/ there are only 6 errors, but i don't know how to handle with it | 17:45 |
| patchbot | raildo: patch 258650 - keystone - [WIP]Make fernet default token provider | 17:45 |
| *** e0ne has quit IRC | 17:45 | |
| *** browne has joined #openstack-keystone | 17:46 | |
| ayoung | raildo, sure...looking | 17:47 |
| ayoung | test_delete_tokens_for_user_invalidates_tokens_from_trust | 17:47 |
| raildo | ayoung: I don't know hot to handle with this trusts + fernet issues | 17:48 |
| ayoung | raildo, ok...so...since Fernet is ephemeral, these tokens don't get tagged as revoked. We need to make sure the revocation happens, but based on the trust ID, I think | 17:48 |
| ayoung | raildo, talk to lbragstad about that. Trusts was one of the last things implemented, and it might be wrong | 17:48 |
| ayoung | that is 4 tests... | 17:48 |
| bknudson | tests shouldn't be affected by a change to the default value. Just change the config back to uuid. | 17:48 |
| ayoung | the other is test_request_no_admin_token_auth | 17:49 |
| ayoung | and that I'll look at deeper | 17:49 |
| ayoung | bknudson, ? | 17:49 |
| *** fawadkhaliq has quit IRC | 17:49 | |
| bknudson | any tests that were using uuid before should continue to use uuid | 17:49 |
| ayoung | bknudson, you talking about the "default fernet" no. This indicates that Fernet has not handled trusts correctly | 17:49 |
| knikolla | what are the plans for these patches? https://review.openstack.org/#/q/file:keystone/tests/functional/federation/test_v3_crud.py | 17:50 |
| bknudson | then that was broken to begin with and doesn't have anything to do with changing the default to fernet | 17:50 |
| ayoung | bknudson, both uuid and fernet should be run against trusts. I think this shows a gap in our testing | 17:50 |
| edmondsw | how do I make devstack use a specific version of python-keystoneclient? | 17:51 |
| bknudson | right, it was a gap in the testing that didn't have anything to do with changing the default | 17:51 |
| bknudson | so this shouldn't hang up changing the default to fernet | 17:51 |
| *** fawadkhaliq has joined #openstack-keystone | 17:51 | |
| ayoung | raildo, so, bug lance about the trust tests, and move on to looking at the other two. Have you looked at them yet? | 17:52 |
| ayoung | bknudson, RIGHT | 17:53 |
| raildo | ayoung: I have looked into the assignment error, we have a problem when we delete a grant and try revoke the tokens related to this grant | 17:53 |
| ayoung | bknudson, the hangup is that fernet seems to be missing a key piece with trusts. | 17:54 |
| raildo | ayoung: that I tried to skip the revoke for fernet, but I'm not sure this is the right solution for this issue | 17:54 |
| ayoung | So, yes, fixing that and adding test coverage should happen prior to Default to fernet | 17:54 |
| ayoung | hmmm | 17:54 |
| raildo | ayoung: https://review.openstack.org/#/c/258650/30/keystone/assignment/core.py | 17:54 |
| patchbot | raildo: patch 258650 - keystone - [WIP]Make fernet default token provider | 17:54 |
| ayoung | raildo, so...no, don't skip that. But when expanding a Fernet token, that grant should not be valid, and the validation should fail | 17:55 |
| bknudson | I'm fine with fixing the bugs and having the change depend on those fixes. Alternatively, log the bug and run the tests with uuid since they were all working prior to changing the default. | 17:55 |
| raildo | ayoung: right, the grant it is not valid any more, but doesn't call the revoke part, sounds wrong for you? | 17:56 |
| raildo | ayoung: when we do this revoke, any http request after this will get a 401 | 17:57 |
| ayoung | raildo, so I think what is happening here is that the old test was too draconian. But there is a change in behavior. Say I have 2 roles on a project due to both direct and group membership. Then the drop assignment gets dropped. If I now validate a token for that project, fernet would still say it is ok, but only provide my direct assigned role. | 17:58 |
| ayoung | If, OTOH, this test is passing, but the user should not have any role on the project, there is a problem. | 17:58 |
| ayoung | So..lok at the result from that check. If there is a token with no roles in it, then we need a fix in fernet to reject the token | 17:58 |
| ayoung | If there is one role where before there are two...we can modify the test not to check that...its weird, but acceptable. | 17:59 |
| ayoung | Getting a test that says "either fail OR makes sure there is only one role" would be wonky. | 17:59 |
| ayoung | raildo, so I had a bunch of fixes for tests like this somewhere...I think in the "reduce spurious revoke events" patch: | 18:00 |
| ayoung | https://review.openstack.org/#/c/285134/ raildo see the corresponding tests there...bet I had to change it. | 18:00 |
| patchbot | ayoung: patch 285134 - keystone - Remove unneeded revocation events | 18:00 |
| *** e0ne has joined #openstack-keystone | 18:00 | |
| *** diazjf has quit IRC | 18:01 | |
| *** dflorea has quit IRC | 18:01 | |
| stevemar | morgan: sure, take your time | 18:02 |
| stevemar | morgan: thats the last one | 18:02 |
| raildo | ayoung: ++ this patch have a direct impact on this tests... I'll review and compare with our errors on the fernet patch, and see what we can do | 18:02 |
| *** ninag has quit IRC | 18:03 | |
| raildo | ayoung: about the assignments erros, what I saw is that when I delete a grant for another user, the authenticated user get a 401... it's sounds like a cache issue, since for every request, keystone will get a new token | 18:04 |
| ayoung | raildo, I think it was an overly broad revocation event, IIRC | 18:04 |
| raildo | ayoung: got it... thanks sir, anyway I'll talk with lance later and see his point of view on this too :) | 18:06 |
| *** dflorea has joined #openstack-keystone | 18:07 | |
| *** daemontool has quit IRC | 18:07 | |
| *** stevemar has quit IRC | 18:08 | |
| *** dflorea has quit IRC | 18:09 | |
| *** stevemar has joined #openstack-keystone | 18:09 | |
| *** ChanServ sets mode: +o stevemar | 18:09 | |
| *** e0ne has quit IRC | 18:11 | |
| *** diazjf has joined #openstack-keystone | 18:12 | |
| *** pushkaru has quit IRC | 18:13 | |
| ayoung | jmlowe, did you file a bug? | 18:13 |
| jmlowe | ayoung: not yet, a couple of other things made it to the top of my stack | 18:15 |
| ayoung | jmlowe, when you do, please assigne it to me, or, it you are not allowed to do that, send me a message aand I will grab it. | 18:17 |
| *** mvk has quit IRC | 18:19 | |
| *** roxanaghe has quit IRC | 18:19 | |
| jmlowe | ayoung: https://bugs.launchpad.net/keystonemiddleware/+bug/1564010 | 18:21 |
| openstack | Launchpad bug 1564010 in keystonemiddleware "Keystone middleware for ec2 doesn't work with keystone v3" [Undecided,New] | 18:21 |
| *** diazjf has quit IRC | 18:22 | |
| *** fawadkhaliq has quit IRC | 18:22 | |
| *** diazjf has joined #openstack-keystone | 18:22 | |
| *** fawadkhaliq has joined #openstack-keystone | 18:23 | |
| *** e0ne has joined #openstack-keystone | 18:24 | |
| *** e0ne has quit IRC | 18:26 | |
| stevemar | ayoung: thanks for looking at it | 18:27 |
| jmlowe | ayoung: is that description close enough to get it figured out? | 18:28 |
| stevemar | jmlowe: any config files and steps you have so we can reproduce it would be better :] | 18:29 |
| *** e0ne has joined #openstack-keystone | 18:31 | |
| *** e0ne has quit IRC | 18:31 | |
| *** e0ne has joined #openstack-keystone | 18:33 | |
| *** e0ne has quit IRC | 18:33 | |
| *** david_cu has joined #openstack-keystone | 18:34 | |
| *** sigmavirus24 is now known as sigmavirus24_awa | 18:34 | |
| *** e0ne has joined #openstack-keystone | 18:35 | |
| *** sigmavirus24_awa is now known as sigmavirus24 | 18:35 | |
| *** e0ne has quit IRC | 18:36 | |
| *** e0ne has joined #openstack-keystone | 18:37 | |
| *** e0ne has quit IRC | 18:37 | |
| ayoung | jmlowe, looks good | 18:40 |
| jmlowe | ayoung: just added some steps to reproduce including a python snippet to test boto | 18:40 |
| ayoung | jmlowe, thanks | 18:41 |
| *** jsavak has quit IRC | 18:43 | |
| *** jsavak has joined #openstack-keystone | 18:44 | |
| *** pushkaru has joined #openstack-keystone | 18:44 | |
| *** krotscheck is now known as krotscheck_dcm | 18:46 | |
| *** woodster_ has quit IRC | 18:47 | |
| *** timcline has joined #openstack-keystone | 18:48 | |
| *** jsavak has quit IRC | 18:51 | |
| *** jsavak has joined #openstack-keystone | 18:51 | |
| stevemar | anyone using osc + kerb these days? marekd ? | 18:53 |
| *** ninag has joined #openstack-keystone | 18:53 | |
| *** roxanaghe has joined #openstack-keystone | 18:56 | |
| *** sdake has joined #openstack-keystone | 18:57 | |
| *** diazjf has quit IRC | 18:57 | |
| *** tellesnobrega is now known as tellesnobrega_af | 18:57 | |
| *** tellesnobrega_af is now known as tellesnobrega | 18:58 | |
| *** tellesnobrega is now known as tellesnobrega_af | 18:58 | |
| *** tellesnobrega_af is now known as tellesnobrega | 18:58 | |
| *** timcline has quit IRC | 18:58 | |
| *** timcline has joined #openstack-keystone | 18:58 | |
| sdake | hey folks quick q relating to th e"Member" role | 18:59 |
| sdake | horizon requires this to opreate | 18:59 |
| sdake | we are debating whether to create the Member roel in the hoirozn bootstrap or the keystone bootstrap | 19:00 |
| sdake | the reason is horizon can be turned off | 19:00 |
| sdake | and then there is no need for a Member role | 19:00 |
| *** slberger1 has joined #openstack-keystone | 19:01 | |
| bknudson | sdake: if horizon needs it but keystone doesn't then it makes sense to create it for horizon to use. | 19:01 |
| *** slberger has quit IRC | 19:02 | |
| sdake | bknudson this is my thinkking as well, I'm curious i you knwo if any other prjects need it | 19:02 |
| sdake | e.g. is it a global role expectation | 19:02 |
| sdake | (if anyone knows this dificult question) | 19:02 |
| bknudson | I don't know if any other projects require it. Typically the other projects only require that the user has a role on a project. | 19:02 |
| bknudson | of course, they can change their policy to require a specific role | 19:03 |
| sdake | bknudson sure not worried about future proof only mitaka :) | 19:03 |
| bknudson | mitaka allows deployers to change their policy file | 19:03 |
| *** rmallah has joined #openstack-keystone | 19:06 | |
| *** rmallah has quit IRC | 19:07 | |
| *** e0ne has joined #openstack-keystone | 19:11 | |
| *** mylu has quit IRC | 19:11 | |
| *** tqtran has quit IRC | 19:12 | |
| *** tqtran has joined #openstack-keystone | 19:12 | |
| *** jsavak has quit IRC | 19:13 | |
| *** e0ne has quit IRC | 19:13 | |
| *** mylu has joined #openstack-keystone | 19:13 | |
| *** jsavak has joined #openstack-keystone | 19:19 | |
| *** mhickey has joined #openstack-keystone | 19:21 | |
| *** pushkaru has quit IRC | 19:25 | |
| *** gordc has quit IRC | 19:25 | |
| *** pushkaru has joined #openstack-keystone | 19:26 | |
| *** jsavak has quit IRC | 19:26 | |
| *** jsavak has joined #openstack-keystone | 19:27 | |
| *** fawadkhaliq has quit IRC | 19:28 | |
| *** fawadkhaliq has joined #openstack-keystone | 19:28 | |
| *** gyee has quit IRC | 19:35 | |
| openstackgerrit | Christopher J Schaefer proposed openstack/python-keystoneclient: Removing bandit.yaml in favor of defaults https://review.openstack.org/294597 | 19:39 |
| *** cburgess has quit IRC | 19:46 | |
| *** cburgess has joined #openstack-keystone | 19:47 | |
| openstackgerrit | Kristi Nikolla proposed openstack/keystone: WIP - ldap3 Identity Driver https://review.openstack.org/296090 | 19:49 |
| openstackgerrit | Dolph Mathews proposed openstack/keystone-specs: PCI-DSS v3.1 https://review.openstack.org/272396 | 19:50 |
| *** gordc has joined #openstack-keystone | 19:52 | |
| *** fawadkhaliq has quit IRC | 19:55 | |
| *** rk4n has quit IRC | 19:55 | |
| *** mvk has joined #openstack-keystone | 19:59 | |
| openstackgerrit | Dolph Mathews proposed openstack/keystone-specs: Add spec for multifactor authentication https://review.openstack.org/272287 | 20:00 |
| *** sdake_ has joined #openstack-keystone | 20:00 | |
| *** mvk_ has joined #openstack-keystone | 20:00 | |
| *** jorge_munoz has quit IRC | 20:00 | |
| *** mylu has quit IRC | 20:01 | |
| *** sudorandom has quit IRC | 20:01 | |
| *** cburgess has quit IRC | 20:01 | |
| edmondsw | stevemar, do you think anything should be done in keystoneauth re: https://bugs.launchpad.net/python-openstackclient/+bug/1494413 ? | 20:02 |
| openstack | Launchpad bug 1494413 in python-openstackclient "AttributeError: auth_ref when trying to do user create" [Undecided,Confirmed] | 20:02 |
| *** sdake has quit IRC | 20:02 | |
| edmondsw | e.g. to make it work with keystoneclient 1.6.0? I'm guessing no, and that I should remove keystoneauth from "Affects" on that bug | 20:03 |
| *** mvk has quit IRC | 20:04 | |
| *** cburgess has joined #openstack-keystone | 20:04 | |
| stevemar | edmondsw: probably, i can't see how ksa is affected | 20:04 |
| edmondsw | k | 20:04 |
| morgan | yeah i am not sure how that is KSA | 20:04 |
| stevemar | edmondsw: this is a sympton of osc not using ksa again | 20:04 |
| morgan | stevemar: soooon sooooooooooon | 20:05 |
| *** fawadkhaliq has joined #openstack-keystone | 20:05 | |
| knikolla | ++ | 20:05 |
| *** sudorandom has joined #openstack-keystone | 20:05 | |
| stevemar | morgan: pretty much when mitaka is unfrozen | 20:05 |
| *** cburgess has quit IRC | 20:05 | |
| *** cburgess has joined #openstack-keystone | 20:08 | |
| * morgan gets dev env setup for finishing stupid constraint test fixes | 20:12 | |
| *** jorge_munoz has joined #openstack-keystone | 20:14 | |
| *** cburgess has quit IRC | 20:14 | |
| *** cburgess has joined #openstack-keystone | 20:19 | |
| *** pleia2 has quit IRC | 20:19 | |
| *** pleia2 has joined #openstack-keystone | 20:20 | |
| *** mylu has joined #openstack-keystone | 20:20 | |
| *** phalmos has quit IRC | 20:21 | |
| *** dan_nguyen has quit IRC | 20:21 | |
| *** diazjf has joined #openstack-keystone | 20:23 | |
| *** fawadkhaliq has quit IRC | 20:24 | |
| *** fawadkhaliq has joined #openstack-keystone | 20:25 | |
| *** spzala has joined #openstack-keystone | 20:25 | |
| *** ninag has quit IRC | 20:26 | |
| stevemar | morgan: whenever you get a chance :P | 20:28 |
| stevemar | morgan: if your thumb isn't chopped off | 20:28 |
| morgan | stevemar: waiting for the trusty64 vbox to download | 20:28 |
| morgan | i just want to run the tests [i know what i did wrong, but... still] | 20:28 |
| *** stevemar changes topic to "Tag bugs as mitaka-rc-potential - fix more bugs! | Master is accepting code for Newton! | submit newton design summit topics: https://etherpad.openstack.org/p/keystone-newton-summit-brainstorm" | 20:31 | |
| *** sdake has joined #openstack-keystone | 20:32 | |
| *** sdake_ has quit IRC | 20:33 | |
| *** mylu has quit IRC | 20:37 | |
| *** trown is now known as trown|outtypewww | 20:37 | |
| *** ebalduf has joined #openstack-keystone | 20:38 | |
| *** mylu has joined #openstack-keystone | 20:40 | |
| ayoung | stevemar, look at what Nova wants to do. https://review.openstack.org/#/c/289405/1/specs/newton/approved/discoverable-policy-api.rst | 20:41 |
| patchbot | ayoung: patch 289405 - nova-specs - Adds Nova discoverable policy API spec | 20:41 |
| ayoung | sdake, you need "some" role | 20:42 |
| *** mylu has quit IRC | 20:43 | |
| ayoung | does not need to be Member, and the only reason that was there was due to Horizon | 20:43 |
| ayoung | we stuck in _member_ many interations ago as a migration thing | 20:43 |
| ayoung | but both are used to indicate that a user has basic roles in a project, not admin | 20:43 |
| ayoung | personally, I'd leave Member and drop any other role that means the same thing | 20:44 |
| *** inc0 has joined #openstack-keystone | 20:47 | |
| *** ebalduf has quit IRC | 20:48 | |
| inc0 | hey guys...quick question. I want to use keystone client in python code, but there is openstackclient out there. Only openstackclient is not well documented for using it as python lib | 20:48 |
| *** openstackgerrit has quit IRC | 20:48 | |
| *** openstackgerrit has joined #openstack-keystone | 20:48 | |
| inc0 | is keystoneclient deprecated only for shell usage or do we need to write better docs how to openstaclient as python lib? | 20:48 |
| stevemar | inc0: only for shell usage | 20:49 |
| morgan | inc0: keystoneclient CLI is deprecated, but as a library it is not | 20:49 |
| inc0 | ok, that's good to hear | 20:49 |
| inc0 | thanks | 20:49 |
| dtroyer | osc is not meant to be used as a lib, although the abstraction in the ClientManager could be used that way. | 20:49 |
| morgan | inc0: especially considering openstackclient relies on keystoneclient :) | 20:49 |
| dtroyer | We're suggesting the SDK for new app work, and the project libs otherwise | 20:49 |
| inc0 | I'll stick to keystoneclient then, old habits die hard | 20:50 |
| inc0 | thanks | 20:50 |
| *** mylu has joined #openstack-keystone | 20:51 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: Remove backend interface and common code out of identity.core https://review.openstack.org/296140 | 20:51 |
| *** rk4n has joined #openstack-keystone | 20:52 | |
| *** mylu has quit IRC | 20:52 | |
| *** gordc has quit IRC | 20:53 | |
| *** mylu has joined #openstack-keystone | 20:54 | |
| *** stevemar has quit IRC | 20:55 | |
| *** stevemar has joined #openstack-keystone | 20:55 | |
| *** ChanServ sets mode: +o stevemar | 20:55 | |
| *** mhickey has quit IRC | 20:55 | |
| *** roxanaghe has quit IRC | 20:55 | |
| morgan | rderose: commented on ^ have a suggestion | 20:56 |
| morgan | rderose: so we can drop the driver thing in core eventually | 20:56 |
| *** henrynash has joined #openstack-keystone | 20:58 | |
| *** ChanServ sets mode: +v henrynash | 20:58 | |
| rderose | morgan: okay | 20:58 |
| morgan | rderose: :) but def. a good move [and we should likewise do the same for the other .core things | 20:58 |
| *** mylu has quit IRC | 20:58 | |
| rderose | morgan: cool, thx | 20:58 |
| *** stevemar has quit IRC | 21:00 | |
| *** roxanaghe has joined #openstack-keystone | 21:07 | |
| *** raildo is now known as raildo-afk | 21:08 | |
| *** jsavak has quit IRC | 21:08 | |
| *** shangxdy has joined #openstack-keystone | 21:09 | |
| *** mylu has joined #openstack-keystone | 21:13 | |
| *** clenimar has quit IRC | 21:16 | |
| *** jsavak has joined #openstack-keystone | 21:16 | |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Define identity interface - easy cases https://review.openstack.org/291950 | 21:18 |
| *** david_cu has quit IRC | 21:20 | |
| *** cdcasey has quit IRC | 21:20 | |
| *** david_cu has joined #openstack-keystone | 21:21 | |
| *** david_cu_ has joined #openstack-keystone | 21:21 | |
| *** tqtran is now known as tqtran-afk | 21:22 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: WIP - Remove backend interface out of assignment.core https://review.openstack.org/299635 | 21:22 |
| *** pauloewerton has quit IRC | 21:23 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: WIP - Remove backend interface out of assignment.core https://review.openstack.org/299635 | 21:25 |
| *** david_cu has quit IRC | 21:25 | |
| *** jsavak has quit IRC | 21:27 | |
| *** jsavak has joined #openstack-keystone | 21:28 | |
| *** david_cu_ has quit IRC | 21:28 | |
| *** david_cu has joined #openstack-keystone | 21:29 | |
| *** david_cu has quit IRC | 21:34 | |
| *** henrynash has quit IRC | 21:39 | |
| *** shangxdy has quit IRC | 21:42 | |
| *** fawadkhaliq has quit IRC | 21:45 | |
| *** mkrcmari__ has joined #openstack-keystone | 21:46 | |
| *** mvk_ has quit IRC | 21:49 | |
| *** mvk has joined #openstack-keystone | 21:49 | |
| *** mkrcmari__ has quit IRC | 21:51 | |
| *** fawadkhaliq has joined #openstack-keystone | 21:52 | |
| *** mvk_ has joined #openstack-keystone | 21:52 | |
| *** pece has quit IRC | 21:55 | |
| *** mvk has quit IRC | 21:56 | |
| *** stevemar has joined #openstack-keystone | 21:56 | |
| *** ChanServ sets mode: +o stevemar | 21:56 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: Remove backend interface out of assignment.core https://review.openstack.org/299635 | 21:57 |
| *** stevemar has quit IRC | 22:01 | |
| *** diazjf has quit IRC | 22:04 | |
| openstackgerrit | Merged openstack/keystone: Improve error message for schema validation https://review.openstack.org/299036 | 22:06 |
| *** mylu has quit IRC | 22:06 | |
| inc0 | soo...another question: MissingAuthPlugin | 22:07 |
| inc0 | I'm trying to bootsrap admin in liberty code | 22:08 |
| *** spzala has quit IRC | 22:08 | |
| inc0 | so no keystone bootstrap and admin_token stuff with v2 | 22:08 |
| *** mylu has joined #openstack-keystone | 22:08 | |
| inc0 | I keep hitting MissingAuthPlugin when I'm trying to do anything, what am I doing wrong? | 22:08 |
| *** spzala has joined #openstack-keystone | 22:08 | |
| *** dan_nguyen has joined #openstack-keystone | 22:08 | |
| inc0 | ks = client.Client(token="foo", auth_url="http://192.168.4.8:35357/v2.0", version=(2,)) >> ks.services.list() | 22:09 |
| *** spzala has quit IRC | 22:13 | |
| *** slberger1 has left #openstack-keystone | 22:13 | |
| *** rderose has quit IRC | 22:15 | |
| *** jsavak has quit IRC | 22:18 | |
| *** fawadkhaliq has quit IRC | 22:20 | |
| *** fawadkhaliq has joined #openstack-keystone | 22:20 | |
| *** markvoelker has joined #openstack-keystone | 22:24 | |
| *** shaleh has joined #openstack-keystone | 22:26 | |
| shaleh | bknudson: you still around? | 22:27 |
| bknudson | shaleh: yes | 22:27 |
| *** sigmavirus24 is now known as sigmavirus24_awa | 22:27 | |
| shaleh | bknudson: re: needing 'links' on the output. http://paste.openstack.org/show/492510/ that is what the list command returns. You are saying the response is not correct? | 22:27 |
| bknudson | shaleh: if the response doesn't have links then it's incorrect | 22:28 |
| *** rmallah has joined #openstack-keystone | 22:28 | |
| bknudson | shaleh: try other resources, they have links | 22:28 |
| bknudson | typically "next", "previous", and "next" in the case of a list | 22:28 |
| bknudson | "next", "previous", and "self" | 22:29 |
| bknudson | if it's a single entity it's got "links": { "self": "<whatever>" } | 22:29 |
| shaleh | bknudson: I see. So the implied roles code is incorrect then. Looks like we need another bug. | 22:29 |
| shaleh | bknudson: the spec states exactly what keystone is returning currently. | 22:30 |
| *** mylu has quit IRC | 22:30 | |
| shaleh | bknudson: you want the honors or should i open it? | 22:30 |
| bknudson | shaleh: keystone is wrong | 22:30 |
| bknudson | shaleh: either way. I typically don't open bugs unless I'm working on it and have a solution already | 22:31 |
| shaleh | bknudson: k, on my way then.... | 22:31 |
| *** mylu has joined #openstack-keystone | 22:32 | |
| *** fawadkhaliq has quit IRC | 22:34 | |
| shaleh | bknudson: https://bugs.launchpad.net/keystone/+bug/1564129 | 22:35 |
| openstack | Launchpad bug 1564129 in OpenStack Identity (keystone) "Implied Roles responses lack 'links' pointing back to the API call that generated them" [Undecided,New] | 22:35 |
| *** jorge_munoz has quit IRC | 22:36 | |
| bknudson | http://specs.openstack.org/openstack/keystone-specs/api/v3/identity-api-v3.html#list-implied-roles-for-role -- it's got "self": "self" ... how odd. | 22:36 |
| *** fawadkhaliq has joined #openstack-keystone | 22:37 | |
| *** pushkaru has quit IRC | 22:38 | |
| *** gyee has joined #openstack-keystone | 22:40 | |
| *** ChanServ sets mode: +v gyee | 22:40 | |
| *** mylu has quit IRC | 22:41 | |
| *** mylu has joined #openstack-keystone | 22:43 | |
| *** spzala has joined #openstack-keystone | 22:44 | |
| *** sdake has quit IRC | 22:46 | |
| *** sdake has joined #openstack-keystone | 22:46 | |
| openstackgerrit | Kristi Nikolla proposed openstack/keystone: WIP - ldap3 Identity Driver https://review.openstack.org/296090 | 22:47 |
| *** edmondsw has quit IRC | 22:48 | |
| *** knikolla has quit IRC | 22:49 | |
| rmallah | i am able to get results via OS_TOKEN and curl but not through openstack python client , can anyone please help https://gist.github.com/rmallah/18ff3bc16c08315afc78e438954103a6 | 22:52 |
| rmallah | i have also posted all the OS_* env variables. | 22:55 |
| *** stevemar has joined #openstack-keystone | 22:56 | |
| *** ChanServ sets mode: +o stevemar | 22:56 | |
| *** tqtran-afk is now known as tqtran | 22:57 | |
| *** markvoelker has quit IRC | 22:57 | |
| *** ametts has quit IRC | 22:57 | |
| shaleh | rmallah: try just running "openstack -v -v --debug token issue". This will simplify the debugging. Note your IDENTITY_API_VERSION is not set correctly (it says 2 not 2.0) so it is using IDENTITY_API_VERSION=3 | 23:00 |
| *** stevemar has quit IRC | 23:01 | |
| *** mylu has quit IRC | 23:03 | |
| *** mylu has joined #openstack-keystone | 23:04 | |
| rmallah | shaleh: my IDENTITY_API_VERSION is set to '3' | 23:04 |
| *** agrebennikov_ has quit IRC | 23:05 | |
| rmallah | my service catalog was really empty now i have set it | 23:05 |
| shaleh | rmallah: hmm, I was confused by the 3rd line where it had identity_api_version=2, looks like a red herring | 23:06 |
| shaleh | rmallah: yeah, i have been caught by the empty catalog in the past myself | 23:06 |
| rmallah | :) | 23:07 |
| *** knikolla has joined #openstack-keystone | 23:07 | |
| *** bjornar has quit IRC | 23:10 | |
| *** fawadkhaliq has quit IRC | 23:12 | |
| rmallah | ********* ok now it works ****************** | 23:12 |
| *** fawadkhaliq has joined #openstack-keystone | 23:14 | |
| *** nkinder has joined #openstack-keystone | 23:16 | |
| rmallah | thanks shaleh for the attention. | 23:17 |
| *** mylu has quit IRC | 23:17 | |
| shaleh | rmallah: no worries | 23:18 |
| *** agrebennikov_ has joined #openstack-keystone | 23:18 | |
| *** timcline has quit IRC | 23:18 | |
| rmallah | i am facing a steep learning curve and anyone sparing a few moments of help is invaluable :) | 23:19 |
| *** furface has quit IRC | 23:19 | |
| *** mylu has joined #openstack-keystone | 23:20 | |
| *** mylu has quit IRC | 23:21 | |
| *** mylu has joined #openstack-keystone | 23:23 | |
| *** furface has joined #openstack-keystone | 23:23 | |
| *** knikolla has quit IRC | 23:25 | |
| *** mylu has quit IRC | 23:27 | |
| *** mylu has joined #openstack-keystone | 23:28 | |
| openstackgerrit | Cristian Sava proposed openstack/keystone: Customize config file location when run as wsgi app. https://review.openstack.org/288216 | 23:30 |
| *** nkinder has quit IRC | 23:32 | |
| *** timcline has joined #openstack-keystone | 23:35 | |
| *** timcline has quit IRC | 23:38 | |
| *** timcline has joined #openstack-keystone | 23:38 | |
| *** timcline has quit IRC | 23:43 | |
| *** inc0 has quit IRC | 23:44 | |
| *** inc0 has joined #openstack-keystone | 23:44 | |
| *** roxanaghe has quit IRC | 23:50 | |
| *** mylu has quit IRC | 23:52 | |
| *** inc0 has quit IRC | 23:55 | |
| *** tqtran has quit IRC | 23:55 | |
| *** stevemar has joined #openstack-keystone | 23:57 | |
| *** ChanServ sets mode: +o stevemar | 23:57 | |
| *** mylu has joined #openstack-keystone | 23:57 | |
| *** dan_nguyen has quit IRC | 23:58 | |
| *** mkrcmari__ has joined #openstack-keystone | 23:59 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!