| *** fpatwa_ has joined #openstack-keystone | 00:00 | |
| *** fpatwa_ has quit IRC | 00:04 | |
| *** rk4n has quit IRC | 00:05 | |
| *** fpatwa has joined #openstack-keystone | 00:05 | |
| *** fpatwa has quit IRC | 00:10 | |
| *** fester1 has joined #openstack-keystone | 00:17 | |
| fester1 | is POST /admin/v3/auth/tokens a valid location? | 00:17 |
|---|---|---|
| jamielennox | fester1: depends on your setup | 00:18 |
| jamielennox | /v3/auth/tokens is, you _could_ set it up for /admin/ but it's not standard | 00:18 |
| fester1 | so mitaka is adding it | 00:21 |
| fester1 | or at least my uwsgi with nginx is adding it | 00:21 |
| *** jerrygb has joined #openstack-keystone | 00:22 | |
| fester1 | I'm not sure where in python it's handling the uwsgi_param SCRIPT_NAME /admin | 00:22 |
| *** chlong has quit IRC | 00:27 | |
| fester1 | so base_url function in common/wsgi.py does not remove the SCRIPT_NAME part of the basename, but apparently the API requires that it isn't there | 00:30 |
| *** ayoung has joined #openstack-keystone | 00:32 | |
| *** ChanServ sets mode: +v ayoung | 00:32 | |
| fester1 | jamielennox: is this expected functionality? | 00:33 |
| *** chlong has joined #openstack-keystone | 00:34 | |
| jamielennox | fester1: sorry, wasn't watching, did mitaka add /admin or /identity | 00:36 |
| fester1 | it added /admin | 00:36 |
| jamielennox | i thought the plan was to add /{service_type} because keystone v3 is the same on admin and public and we don't really care about < 3 | 00:36 |
| jamielennox | :( | 00:36 |
| jamielennox | ok, so i've not seen anything official around this - but my guess is that haproxy should be removing the /admin component | 00:37 |
| fester1 | I get a 404 when it's present | 00:37 |
| fester1 | I'm not using haproxy | 00:37 |
| jamielennox | fester1: is this in a guide somewhere? | 00:37 |
| fester1 | yes, step 3 here: http://docs.openstack.org/mitaka/install-guide-ubuntu/keystone-verify.html | 00:38 |
| jamielennox | fester1: just to clarify then are you intending to add /admin because that's what i would consider a fairly advanced deployment | 00:39 |
| jamielennox | or are you mostly following the guide? | 00:40 |
| fester1 | i'm following the guide | 00:40 |
| fester1 | I don't want to modify the deployment, mostly | 00:40 |
| *** rderose has joined #openstack-keystone | 00:40 | |
| fester1 | the only change I've made is to use nginx and uwsgi | 00:40 |
| jamielennox | fester1: oh, ok - changes the response a bit | 00:41 |
| jamielennox | so from the guide there really shouldn't be a /admin component | 00:41 |
| fester1 | ok | 00:41 |
| jamielennox | nginx should be set up to serve from the root of port 5000 and 35357 | 00:41 |
| fester1 | interesting | 00:41 |
| jamielennox | looking at http://docs.openstack.org/mitaka/install-guide-ubuntu/keystone-services.html | 00:42 |
| jamielennox | you can see that the entries in the service catalog then point to those urls | 00:42 |
| fester1 | nginx is serving root | 00:42 |
| fester1 | the wsgi is adding the /admin to the url | 00:43 |
| jamielennox | so do you know where /admin crept in? | 00:43 |
| fester1 | it's adding uwsgi_param SCRIPT_NAME | 00:43 |
| jamielennox | so i don't know nginx, but i've done some stuff with uwsgi and i've not seen it modify the url | 00:44 |
| jamielennox | it adds some other stuff to the environment but not that should matter her | 00:44 |
| jamielennox | e | 00:44 |
| fester1 | hmm, maybe because this is how I'm starting it: https://bpaste.net/show/adba83a2563f | 00:47 |
| *** spzala has joined #openstack-keystone | 00:50 | |
| *** spzala has quit IRC | 00:55 | |
| jamielennox | fester1: it shouldn't be, that looks fairly standard, though the newer way is the installed /usr/local/bin/keystone-wsgi-admin and keystone-wsgi-public | 00:57 |
| jamielennox | fester1: also, tip use irc names liberally because i get notified when you say something when i've gone back to whatever else i was doing | 00:58 |
| *** tellesnobrega_af is now known as tellesnobrega | 00:59 | |
| fester1 | jamielennox: i'm not sure what's wrong then, so but i modified common/wsgi.py to remove '/(admin|main)' and it's working well now | 01:05 |
| jamielennox | fester1: yea, i'll admit it sounds like a configuration error but i wouldn't know where or what's doing it, ^ is probably not a long term solution for upgrades | 01:06 |
| *** fpatwa has joined #openstack-keystone | 01:06 | |
| jamielennox | i'm going to guess nginx because that's the bit i know least :) | 01:06 |
| fester1 | jamielennox: i'm not sure where nginx even modifies it, it hands it off to uwsgi | 01:08 |
| jamielennox | fester1: if you want to pastebin your configs i'll have a look but if you enable logging in everything, nginx, uwsgi, keystone you should be able to see the request url and at what point /admin is added | 01:10 |
| jamielennox | or at least what program | 01:10 |
| *** EinstCrazy has joined #openstack-keystone | 01:11 | |
| *** fpatwa has quit IRC | 01:11 | |
| *** fpatwa has joined #openstack-keystone | 01:12 | |
| fester1 | jamielennox: the nginx configs? sure | 01:12 |
| fester1 | https://bpaste.net/show/904a176b22e9 | 01:14 |
| fester1 | jamielennox: i have debug true enabled for everything | 01:14 |
| *** mylu has quit IRC | 01:15 | |
| jamielennox | fester1: yea, it's the uwsgi_params that look suspicious | 01:16 |
| *** fpatwa has quit IRC | 01:16 | |
| *** mylu has joined #openstack-keystone | 01:17 | |
| fester1 | afaik, nginx doesn't modify anything based on uwsgi_param | 01:17 |
| jamielennox | fester1: no, but SCRIPT_NAME is a standard environment variable that would appear to be being set on the uwsgi request, but i don't know why it would be added to the url | 01:19 |
| fester1 | so there's an overlap in environment variable names? | 01:21 |
| jamielennox | fester1: have you seen http://uwsgi-docs.readthedocs.org/en/latest/Nginx.html#hosting-multiple-apps-in-the-same-process-aka-managing-script-name-and-path-info | 01:22 |
| jamielennox | it may not be relevant as you have different socks for admin and public | 01:23 |
| jamielennox | but also if you have different admin/public socks you probably don't need to specify script_name in the nginx config at all | 01:23 |
| fester1 | I'll try that | 01:24 |
| jamielennox | are you using the uwsgi emperor or otherwise loading the uwsgi process specifically or doing the dynamic thing that requires script_name set? | 01:24 |
| fester1 | i was planning on using it for horizon | 01:25 |
| jamielennox | using which? | 01:25 |
| fester1 | using uwsgi | 01:26 |
| jamielennox | not what i meant, umm | 01:26 |
| fester1 | i will be using this uwsgi/nginx server to host horizon as well | 01:27 |
| jamielennox | so it looks like for uwsgi there is a dynamic mode that lets you serve multiple apps over the same socket, and that needs you to set script_name and add mount points so uwsgi can disambiguate which app to send it to | 01:27 |
| fester1 | but i am not using the SCRIPT_NAME for anything else | 01:27 |
| fester1 | I'm not hosting anything else, no | 01:27 |
| jamielennox | if you're using uwsgi emperor or something where all this is already configured so one socket serves one app you should be able to delete the uwsgi script_name variable from nginx | 01:27 |
| fester1 | i'm using more processes for admin and main and specifying different logging directories for the different apps, but that's about it | 01:30 |
| fester1 | s/admin and/admin than/ | 01:30 |
| *** EinstCrazy has quit IRC | 01:31 | |
| jamielennox | fester1: yep, but you somewhere have sepearte uwsgi config that points to a python script for keystone admin and main and open independant sockets for them | 01:32 |
| fester1 | yes | 01:33 |
| jamielennox | and they are being launched seperately from nginx | 01:33 |
| jamielennox | so try it without setting script_name in nginx | 01:34 |
| fester1 | yep, that works | 01:35 |
| *** EinstCrazy has joined #openstack-keystone | 01:35 | |
| fester1 | thank you | 01:35 |
| jamielennox | fester1: sweet - no worries | 01:35 |
| *** EinstCrazy has quit IRC | 01:35 | |
| *** EinstCrazy has joined #openstack-keystone | 01:35 | |
| *** akanksha_ has joined #openstack-keystone | 01:43 | |
| *** spzala has joined #openstack-keystone | 01:51 | |
| fester1 | jamielennox: I hope you have a good day. This bugged me for about 6hours last night. | 01:53 |
| *** spzala has quit IRC | 01:56 | |
| jamielennox | fester1: heh, thanks - it's crazy the little things that look correct and are in people's blog posts that can hang you up for days | 01:56 |
| fester1 | exactly | 01:57 |
| *** mylu has quit IRC | 02:01 | |
| *** wanghua has joined #openstack-keystone | 02:05 | |
| *** EinstCrazy has quit IRC | 02:10 | |
| *** zqfan has joined #openstack-keystone | 02:11 | |
| *** EinstCrazy has joined #openstack-keystone | 02:15 | |
| *** sdake has joined #openstack-keystone | 02:24 | |
| *** knikolla has quit IRC | 02:24 | |
| *** mylu has joined #openstack-keystone | 02:24 | |
| *** sdake_ has joined #openstack-keystone | 02:27 | |
| *** sdake has quit IRC | 02:28 | |
| *** jerrygb has quit IRC | 02:29 | |
| *** sdake has joined #openstack-keystone | 02:39 | |
| *** jerrygb has joined #openstack-keystone | 02:42 | |
| *** sdake_ has quit IRC | 02:43 | |
| *** spzala has joined #openstack-keystone | 02:45 | |
| *** mylu has quit IRC | 03:09 | |
| *** jasonsb has quit IRC | 03:10 | |
| *** mfisch has quit IRC | 03:11 | |
| *** mylu has joined #openstack-keystone | 03:12 | |
| *** mfisch has joined #openstack-keystone | 03:12 | |
| *** mfisch is now known as Guest89657 | 03:12 | |
| *** Guest89657 has quit IRC | 03:13 | |
| *** Guest89657 has joined #openstack-keystone | 03:13 | |
| *** Guest89657 is now known as mfisch | 03:14 | |
| *** mylu has quit IRC | 03:35 | |
| *** mylu has joined #openstack-keystone | 03:37 | |
| *** dan_nguyen has joined #openstack-keystone | 03:37 | |
| *** jerrygb has quit IRC | 03:41 | |
| *** links has joined #openstack-keystone | 03:45 | |
| *** fpatwa has joined #openstack-keystone | 03:50 | |
| *** jerrygb has joined #openstack-keystone | 03:51 | |
| *** jerrygb has quit IRC | 03:51 | |
| *** jerrygb has joined #openstack-keystone | 03:51 | |
| *** jerrygb has quit IRC | 03:51 | |
| *** fpatwa has quit IRC | 03:53 | |
| *** akanksha_ has quit IRC | 04:27 | |
| *** jerrygb has joined #openstack-keystone | 04:28 | |
| *** mylu has quit IRC | 04:30 | |
| *** mylu has joined #openstack-keystone | 04:32 | |
| *** lhcheng has joined #openstack-keystone | 04:36 | |
| *** ChanServ sets mode: +v lhcheng | 04:36 | |
| *** lhcheng_ has quit IRC | 04:36 | |
| *** jerrygb has quit IRC | 04:37 | |
| *** jerrygb has joined #openstack-keystone | 04:38 | |
| *** jerrygb has quit IRC | 04:43 | |
| *** jaosorior has joined #openstack-keystone | 04:46 | |
| *** rderose has quit IRC | 04:53 | |
| *** EinstCrazy has quit IRC | 04:57 | |
| *** EinstCrazy has joined #openstack-keystone | 05:01 | |
| *** fester1 has quit IRC | 05:03 | |
| *** spzala has quit IRC | 05:04 | |
| *** spzala has joined #openstack-keystone | 05:05 | |
| *** spzala has quit IRC | 05:09 | |
| *** stingaci has quit IRC | 05:11 | |
| *** GB21 has joined #openstack-keystone | 05:21 | |
| *** sdake_ has joined #openstack-keystone | 05:23 | |
| *** sdake has quit IRC | 05:24 | |
| *** dan_nguyen has quit IRC | 05:29 | |
| *** mylu has quit IRC | 05:36 | |
| *** pcaruana has joined #openstack-keystone | 05:39 | |
| *** dimsum__ has quit IRC | 05:40 | |
| *** agireud has quit IRC | 05:41 | |
| *** GB21 has quit IRC | 05:44 | |
| *** sdake_ is now known as sdake | 05:45 | |
| *** agireud has joined #openstack-keystone | 05:45 | |
| *** dims has joined #openstack-keystone | 05:47 | |
| *** lhcheng has quit IRC | 05:52 | |
| *** Nirupama has joined #openstack-keystone | 06:00 | |
| *** rk4n has joined #openstack-keystone | 06:10 | |
| *** chlong has quit IRC | 06:13 | |
| *** EinstCrazy has quit IRC | 06:15 | |
| *** rcernin has joined #openstack-keystone | 06:15 | |
| *** EinstCrazy has joined #openstack-keystone | 06:15 | |
| *** rk4n has quit IRC | 06:18 | |
| *** GB21 has joined #openstack-keystone | 06:18 | |
| *** rk4n has joined #openstack-keystone | 06:20 | |
| *** avishay has joined #openstack-keystone | 06:25 | |
| *** dims has quit IRC | 06:31 | |
| breton | morning, keystone | 06:34 |
| *** tesseract has joined #openstack-keystone | 06:35 | |
| *** EinstCrazy has quit IRC | 06:35 | |
| *** EinstCrazy has joined #openstack-keystone | 06:35 | |
| *** tesseract is now known as Guest8989 | 06:35 | |
| *** roxanaghe has joined #openstack-keystone | 06:37 | |
| *** roxanaghe has quit IRC | 06:41 | |
| *** rk4n has quit IRC | 06:47 | |
| *** daemontool has joined #openstack-keystone | 06:53 | |
| *** dims has joined #openstack-keystone | 06:54 | |
| *** dims has quit IRC | 06:58 | |
| *** markvoelker has joined #openstack-keystone | 07:01 | |
| *** jaosorior has quit IRC | 07:03 | |
| *** jaosorior has joined #openstack-keystone | 07:04 | |
| *** markvoelker has quit IRC | 07:06 | |
| *** spzala has joined #openstack-keystone | 07:06 | |
| *** spzala has quit IRC | 07:11 | |
| *** jamielennox is now known as jamielennox|away | 07:15 | |
| *** jed56 has joined #openstack-keystone | 07:21 | |
| *** xek has quit IRC | 07:24 | |
| *** GB21 has quit IRC | 07:25 | |
| *** GB21 has joined #openstack-keystone | 07:25 | |
| *** chlong has joined #openstack-keystone | 07:31 | |
| *** GB21 has quit IRC | 07:44 | |
| *** dims has joined #openstack-keystone | 07:45 | |
| *** jaosorior has quit IRC | 07:47 | |
| *** rk4n has joined #openstack-keystone | 07:47 | |
| *** jaosorior has joined #openstack-keystone | 07:48 | |
| *** jaosorior has quit IRC | 07:48 | |
| *** jaosorior has joined #openstack-keystone | 07:49 | |
| *** rk4n has quit IRC | 07:53 | |
| *** e0ne has joined #openstack-keystone | 08:02 | |
| *** spzala has joined #openstack-keystone | 08:07 | |
| openstackgerrit | yolanda.robla proposed openstack/keystoneauth: Allow to send different recorders to betamax https://review.openstack.org/303952 | 08:11 |
| *** henrynash has joined #openstack-keystone | 08:11 | |
| *** ChanServ sets mode: +v henrynash | 08:11 | |
| *** spzala has quit IRC | 08:12 | |
| *** roxanaghe has joined #openstack-keystone | 08:25 | |
| *** GB21 has joined #openstack-keystone | 08:28 | |
| *** roxanaghe has quit IRC | 08:29 | |
| *** jistr has joined #openstack-keystone | 08:32 | |
| openstackgerrit | Ryosuke Mizuno proposed openstack/keystone: Add keystone service ID to observer audit https://review.openstack.org/303963 | 08:36 |
| *** dims has quit IRC | 08:48 | |
| *** ksnihyr has joined #openstack-keystone | 08:50 | |
| *** rk4n has joined #openstack-keystone | 08:50 | |
| *** rk4n has quit IRC | 08:54 | |
| *** dims has joined #openstack-keystone | 08:55 | |
| *** pcaruana has quit IRC | 09:00 | |
| *** markvoelker has joined #openstack-keystone | 09:02 | |
| *** markvoelker has quit IRC | 09:07 | |
| *** spzala has joined #openstack-keystone | 09:08 | |
| *** spzala has quit IRC | 09:13 | |
| *** wanghua has quit IRC | 09:14 | |
| *** rk4n has joined #openstack-keystone | 09:42 | |
| *** GB21 has quit IRC | 09:47 | |
| *** Kimmo_ has joined #openstack-keystone | 09:53 | |
| *** spzala has joined #openstack-keystone | 10:10 | |
| *** roxanaghe has joined #openstack-keystone | 10:13 | |
| *** spzala has quit IRC | 10:14 | |
| *** lupine has quit IRC | 10:15 | |
| *** lupine has joined #openstack-keystone | 10:15 | |
| *** roxanaghe has quit IRC | 10:18 | |
| *** EinstCrazy has quit IRC | 10:31 | |
| *** GB21 has joined #openstack-keystone | 10:38 | |
| *** sdake_ has joined #openstack-keystone | 10:45 | |
| *** sdake has quit IRC | 10:48 | |
| *** mvk has joined #openstack-keystone | 10:49 | |
| *** pece has joined #openstack-keystone | 10:57 | |
| *** rk4n_ has joined #openstack-keystone | 10:59 | |
| *** rk4n has quit IRC | 11:00 | |
| *** GB21 has quit IRC | 11:02 | |
| *** markvoelker has joined #openstack-keystone | 11:03 | |
| morgan | breton: mornin' | 11:06 |
| *** markvoelker has quit IRC | 11:07 | |
| *** spzala has joined #openstack-keystone | 11:10 | |
| *** spzala has quit IRC | 11:16 | |
| *** henrynash has quit IRC | 11:16 | |
| openstackgerrit | Boris Bobrov proposed openstack/keystone: Support for running functional federation tests https://review.openstack.org/139137 | 11:19 |
| openstackgerrit | Boris Bobrov proposed openstack/keystone: enables bashate checking on dsvm code https://review.openstack.org/151309 | 11:19 |
| openstackgerrit | Boris Bobrov proposed openstack/keystone: adds a devstack plugin for running a pysaml2 IdP https://review.openstack.org/151310 | 11:19 |
| openstackgerrit | Boris Bobrov proposed openstack/keystone: adds a devstack plugin for setting up federation https://review.openstack.org/151311 | 11:19 |
| *** GB21 has joined #openstack-keystone | 11:35 | |
| *** clenimar has joined #openstack-keystone | 11:37 | |
| *** raildo-afk is now known as raildo | 11:38 | |
| *** gordc has joined #openstack-keystone | 11:42 | |
| *** flaper87 has quit IRC | 11:51 | |
| *** flaper87 has joined #openstack-keystone | 11:51 | |
| *** sdake_ is now known as sdake | 11:59 | |
| *** roxanaghe has joined #openstack-keystone | 12:01 | |
| *** ksnihyr has quit IRC | 12:04 | |
| *** sheel has joined #openstack-keystone | 12:04 | |
| *** roxanaghe has quit IRC | 12:06 | |
| *** mdavidson has quit IRC | 12:07 | |
| *** sdake_ has joined #openstack-keystone | 12:10 | |
| *** spzala has joined #openstack-keystone | 12:12 | |
| *** sdake has quit IRC | 12:12 | |
| *** rodrigods has quit IRC | 12:13 | |
| *** rodrigods has joined #openstack-keystone | 12:13 | |
| *** dave-mccowan has joined #openstack-keystone | 12:14 | |
| *** spzala has quit IRC | 12:17 | |
| *** GB21 has quit IRC | 12:17 | |
| *** sdake_ has quit IRC | 12:18 | |
| *** markvoelker has joined #openstack-keystone | 12:19 | |
| *** GB21 has joined #openstack-keystone | 12:19 | |
| *** ksnihyr has joined #openstack-keystone | 12:24 | |
| *** ksnihyr has quit IRC | 12:24 | |
| *** ksnihyr has joined #openstack-keystone | 12:24 | |
| *** rk4n has joined #openstack-keystone | 12:24 | |
| *** edmondsw has joined #openstack-keystone | 12:26 | |
| *** rk4n_ has quit IRC | 12:28 | |
| *** ksnihyr has quit IRC | 12:28 | |
| *** EinstCrazy has joined #openstack-keystone | 12:34 | |
| *** GB21 has quit IRC | 12:40 | |
| *** GB21 has joined #openstack-keystone | 12:41 | |
| *** ninag has joined #openstack-keystone | 12:49 | |
| *** henrynash has joined #openstack-keystone | 12:50 | |
| *** ChanServ sets mode: +v henrynash | 12:50 | |
| *** mdavidson has joined #openstack-keystone | 12:50 | |
| *** pauloewerton has joined #openstack-keystone | 12:53 | |
| *** spzala has joined #openstack-keystone | 12:55 | |
| *** jsavak has joined #openstack-keystone | 12:58 | |
| openstackgerrit | yolanda.robla proposed openstack/keystoneauth: Allow to send different recorders to betamax https://review.openstack.org/303952 | 13:07 |
| *** GB21 has quit IRC | 13:11 | |
| *** trown|outtypewww is now known as trown | 13:12 | |
| *** jerrygb has joined #openstack-keystone | 13:16 | |
| dstanek | morning all | 13:16 |
| lbragstad | o/ | 13:16 |
| raildo | :) | 13:18 |
| *** links has quit IRC | 13:21 | |
| *** xek has joined #openstack-keystone | 13:24 | |
| *** ksnihyr has joined #openstack-keystone | 13:30 | |
| stevemar | morning indeed | 13:32 |
| *** e0ne has quit IRC | 13:34 | |
| *** mylu has joined #openstack-keystone | 13:35 | |
| *** e0ne has joined #openstack-keystone | 13:39 | |
| *** rderose has joined #openstack-keystone | 13:49 | |
| *** ametts has joined #openstack-keystone | 13:55 | |
| *** doug-fish has joined #openstack-keystone | 14:00 | |
| *** jsavak has quit IRC | 14:01 | |
| *** e0ne has quit IRC | 14:01 | |
| *** jsavak has joined #openstack-keystone | 14:01 | |
| *** woodster_ has joined #openstack-keystone | 14:03 | |
| *** e0ne has joined #openstack-keystone | 14:04 | |
| *** mvk has quit IRC | 14:05 | |
| *** Nirupama has quit IRC | 14:06 | |
| *** pushkaru has joined #openstack-keystone | 14:11 | |
| *** anush_ has joined #openstack-keystone | 14:13 | |
| *** roxanaghe has joined #openstack-keystone | 14:18 | |
| *** roxanaghe has quit IRC | 14:22 | |
| *** jsavak has quit IRC | 14:24 | |
| *** jsavak has joined #openstack-keystone | 14:24 | |
| *** anush_ has quit IRC | 14:26 | |
| *** slberger has joined #openstack-keystone | 14:28 | |
| *** mvk has joined #openstack-keystone | 14:30 | |
| *** stingaci has joined #openstack-keystone | 14:35 | |
| *** knikolla has joined #openstack-keystone | 14:38 | |
| *** tpeoplesvacation is now known as tpeoples | 14:40 | |
| *** jaosorior is now known as jaosorior_away | 14:42 | |
| *** pumarani__ has joined #openstack-keystone | 14:46 | |
| *** pushkaru has quit IRC | 14:48 | |
| *** stingaci_ has joined #openstack-keystone | 14:51 | |
| *** stingaci has quit IRC | 14:51 | |
| *** diazjf has joined #openstack-keystone | 14:53 | |
| *** ninag has quit IRC | 14:57 | |
| *** ninag has joined #openstack-keystone | 14:57 | |
| *** ninag_ has joined #openstack-keystone | 14:59 | |
| morgan | i should get coffee | 15:00 |
| *** fawadkhaliq has joined #openstack-keystone | 15:01 | |
| *** timcline has joined #openstack-keystone | 15:01 | |
| *** ninag has quit IRC | 15:02 | |
| anteaya | reminder gerrit will be offline for maintenance at 20:00 utc today: http://lists.openstack.org/pipermail/openstack-dev/2016-March/088985.html | 15:02 |
| *** ninag_ has quit IRC | 15:04 | |
| *** nkinder has joined #openstack-keystone | 15:06 | |
| morgan | anteaya: oh noes! what shall i do instead of code review? | 15:07 |
| morgan | anteaya: ;) | 15:07 |
| morgan | anteaya: thanks for the heads up | 15:07 |
| *** diazjf has quit IRC | 15:09 | |
| openstackgerrit | Merged openstack/keystoneauth: Allow to send different recorders to betamax https://review.openstack.org/303952 | 15:09 |
| *** jsavak has quit IRC | 15:09 | |
| *** jsavak has joined #openstack-keystone | 15:10 | |
| *** diazjf has joined #openstack-keystone | 15:10 | |
| dstanek | what is the new security email list? | 15:11 |
| openstackgerrit | Merged openstack/keystoneauth: Updated from global requirements https://review.openstack.org/303130 | 15:11 |
| bknudson | dstanek: if there's a new security email list I don't know about it. | 15:13 |
| *** avishay has quit IRC | 15:14 | |
| knikolla | rodrigods, i can't edit the wiki as they have blocked new accounts. can you please add federation testing to the agenda for the meeting? | 15:14 |
| dstanek | bknudson: someone mentioned that they forwarded mfisch's email there | 15:14 |
| bknudson | dstanek: ossg discussions now take place on openstack-dev like all the other discussions | 15:14 |
| dstanek | bknudson: maybe that's what he meant | 15:15 |
| dstanek | rderose: are your reviews pretty stable or are you planning on pushing more changes in the next day or two? | 15:16 |
| anteaya | morgan: welcome | 15:17 |
| anteaya | well horizon likes to call bug triage sessions when they can't code review | 15:17 |
| rderose | dstanek: reviews should be pretty stable | 15:18 |
| *** openstackgerrit has quit IRC | 15:18 | |
| *** openstackgerrit has joined #openstack-keystone | 15:18 | |
| dstanek | rderose: cool, thanks | 15:18 |
| morgan | anteaya: i actually have at least 1 bug to chase down that i'm almost positive is invalid. | 15:18 |
| rderose | dstanek: cool, thank you :) | 15:18 |
| *** fawadkhaliq has quit IRC | 15:18 | |
| anteaya | morgan: awesome | 15:19 |
| anteaya | morgan: I hope it is invalid | 15:19 |
| morgan | anteaya: but need to add a bunch of debugging in to be sure since it hits a ton of layers | 15:19 |
| anteaya | wow | 15:19 |
| anteaya | sounds like you need some dedicated time to do that | 15:19 |
| morgan | anteaya: yeah. and it's been painful w/o a solid dev laptop :( | 15:20 |
| *** fawadkhaliq has joined #openstack-keystone | 15:21 | |
| morgan | waiting for my new on in the mail. | 15:21 |
| morgan | might be here anytime in the next 3-4 days | 15:21 |
| *** e0ne has quit IRC | 15:21 | |
| anteaya | go mail go | 15:22 |
| morgan | yay custom builds =/ | 15:22 |
| anteaya | I bet it has been painful | 15:22 |
| anteaya | yeah, that too | 15:22 |
| *** e0ne has joined #openstack-keystone | 15:23 | |
| *** diazjf has left #openstack-keystone | 15:24 | |
| *** ninag has joined #openstack-keystone | 15:24 | |
| *** daemontool_ has joined #openstack-keystone | 15:25 | |
| openstackgerrit | Merged openstack/keystone: Add missing backslash to keystone-manage bootstrap command in documentation https://review.openstack.org/304128 | 15:26 |
| *** daemontool_ has quit IRC | 15:26 | |
| *** daemontool_ has joined #openstack-keystone | 15:27 | |
| *** daemontool has quit IRC | 15:28 | |
| *** richm has joined #openstack-keystone | 15:28 | |
| *** ninag has quit IRC | 15:28 | |
| *** navid_ has joined #openstack-keystone | 15:30 | |
| *** mylu has quit IRC | 15:30 | |
| *** stingaci_ has quit IRC | 15:35 | |
| *** Guest8989 has quit IRC | 15:35 | |
| *** jsavak has quit IRC | 15:38 | |
| *** harlowja_at_home has joined #openstack-keystone | 15:38 | |
| *** mylu has joined #openstack-keystone | 15:38 | |
| *** mylu has quit IRC | 15:43 | |
| *** gyee has joined #openstack-keystone | 15:45 | |
| *** ChanServ sets mode: +v gyee | 15:45 | |
| *** navid_ has quit IRC | 15:46 | |
| *** fawadkhaliq has quit IRC | 15:47 | |
| *** jaosorior_away has quit IRC | 15:47 | |
| *** jaosorior_away has joined #openstack-keystone | 15:48 | |
| *** mylu has joined #openstack-keystone | 15:48 | |
| *** dtroyer_zz has quit IRC | 15:52 | |
| *** dtroyer has joined #openstack-keystone | 15:52 | |
| *** ninag has joined #openstack-keystone | 15:54 | |
| *** jsavak has joined #openstack-keystone | 15:59 | |
| *** jaosorior_away has quit IRC | 16:04 | |
| *** jaosorior has joined #openstack-keystone | 16:05 | |
| *** jsavak has quit IRC | 16:07 | |
| *** jsavak has joined #openstack-keystone | 16:07 | |
| *** openstackstatus has joined #openstack-keystone | 16:10 | |
| *** ChanServ sets mode: +v openstackstatus | 16:10 | |
| *** ksnihyr has quit IRC | 16:12 | |
| *** dan_nguyen has joined #openstack-keystone | 16:12 | |
| *** david-lyle_ is now known as david-lyle | 16:15 | |
| *** fawadkhaliq has joined #openstack-keystone | 16:16 | |
| *** fawadkhaliq has quit IRC | 16:16 | |
| -openstackstatus- NOTICE: Reminder, Gerrit will be offline from 20:00 to 21:00 UTC for a server replacement http://lists.openstack.org/pipermail/openstack-dev/2016-April/091274.html | 16:18 | |
| *** e0ne has quit IRC | 16:18 | |
| *** henrynash has quit IRC | 16:20 | |
| *** anush_ has joined #openstack-keystone | 16:20 | |
| *** fawadkhaliq has joined #openstack-keystone | 16:28 | |
| *** harlowja_at_home has quit IRC | 16:29 | |
| *** stingaci has joined #openstack-keystone | 16:29 | |
| *** stacker has quit IRC | 16:32 | |
| *** jaosorior has quit IRC | 16:33 | |
| *** stingaci has quit IRC | 16:37 | |
| *** stingaci has joined #openstack-keystone | 16:38 | |
| *** lhcheng has joined #openstack-keystone | 16:38 | |
| *** ChanServ sets mode: +v lhcheng | 16:38 | |
| *** rcernin has quit IRC | 16:40 | |
| *** jaosorior has joined #openstack-keystone | 16:44 | |
| *** roxanaghe has joined #openstack-keystone | 16:47 | |
| *** fawadkhaliq has quit IRC | 16:48 | |
| rodrigods | knikolla, sure | 16:49 |
| rodrigods | knikolla, do you have any specific questions in mind? | 16:49 |
| *** fawadkhaliq has joined #openstack-keystone | 16:49 | |
| *** navid_ has joined #openstack-keystone | 16:49 | |
| knikolla | rodrigods, not really. more like have a meeting to sync up and decide on the steps. | 16:53 |
| *** jerrygb has quit IRC | 16:53 | |
| *** dutsmoc is now known as comstud | 16:54 | |
| *** jerrygb has joined #openstack-keystone | 16:54 | |
| *** daemontool__ has joined #openstack-keystone | 16:57 | |
| amakarov | ayoung, o/ | 16:57 |
| amakarov | Are you here? | 16:57 |
| *** navid__ has joined #openstack-keystone | 16:58 | |
| *** navid_ has quit IRC | 16:59 | |
| *** daemontool_ has quit IRC | 17:00 | |
| *** rderose has quit IRC | 17:00 | |
| *** rk4n has quit IRC | 17:02 | |
| ayoung | amakarov, yes sah! | 17:04 |
| *** fawadkhaliq has quit IRC | 17:06 | |
| amakarov | ayoung, redelegation resolution logic depends on other keystone parts and quite complicated itself. What can be done in the driver level? | 17:06 |
| amakarov | https://review.openstack.org/#/c/291871 | 17:06 |
| dolphm | anyone know how to make `git checkout icehouse-eol && tox -e py27` work? it fails on "from oslo.utils import timeutils" with "ImportError: No module named utils" ... trying to install older versions of oslo.utils just wins me other dependency errors | 17:07 |
| amakarov | I left a comment in my patch | 17:07 |
| ayoung | amakarov, I'm OK with keeping it in the SQL driver | 17:08 |
| amakarov | dolphm, I can only suggest getting global requirements | 17:08 |
| *** edmondsw has quit IRC | 17:08 | |
| ayoung | the more we work with the Database, the more it will actuall perform | 17:08 |
| dolphm | amakarov: global requirements aren't maintained for icehouse either | 17:08 |
| amakarov | ayoung, how can I access roles from there | 17:08 |
| ayoung | as opposed to trying to work against the database | 17:08 |
| dolphm | amakarov: i'm hoping someone knows a trick to get keystone going | 17:08 |
| ayoung | amakarov, so is the problem that we have roles and role assignments in two different backends? | 17:09 |
| *** fawadkhaliq has joined #openstack-keystone | 17:09 | |
| amakarov | dolphm, you may try MOS 5.1.3 - it's built from icehouse and passes tests :) | 17:09 |
| ayoung | of course it is. | 17:09 |
| dolphm | amakarov: not sure what that is, but link? | 17:09 |
| amakarov | ayoung, ++ | 17:10 |
| dolphm | amakarov: sounds like something i could use to determine a working set of deps | 17:10 |
| amakarov | dolphm, https://software.mirantis.com/releases/#supported | 17:11 |
| ayoung | amakarov, so the business logic needs to work up one level. First get the top level assignments for a user. Then expand out implied roles so we have the whole tree. | 17:11 |
| amakarov | ayoung, the problem is that I should make delegation driver depend on role API :) | 17:12 |
| ayoung | dolphm, you might be able to do the same thing with an older RDO and get the RPM deps that way...I suspect that a Debian based deploy, too, would work | 17:12 |
| ayoung | amakarov maybe not the driver | 17:12 |
| ayoung | amakarov, the delegation driver should get the persisted data needed to reconsititue, but the merging should happen in the manager | 17:13 |
| *** jsavak has quit IRC | 17:13 | |
| amakarov | ayoung, I can leave assignment and trust delegation drivers as they are now (without strict tree dependencies) | 17:13 |
| dolphm | amakarov: ayoung: thanks, i'll look into what packagers are doing after foods | 17:13 |
| *** jsavak has joined #openstack-keystone | 17:13 | |
| ayoung | If you find yourself doing something in the driver that depends on another driver, push that logic up to the manager that calls it | 17:13 |
| amakarov | ayoung, and do all the magic later when the delegation API is introduced | 17:14 |
| *** e0ne has joined #openstack-keystone | 17:14 | |
| amakarov | ayoung, the problem is that I can't change neither assignment nor trust manager | 17:14 |
| amakarov | on the midcycle we agreed on driver replacement | 17:15 |
| amakarov | substitute to be more accurate | 17:15 |
| amakarov | ayoung, and right now both of them pass standard assignment and trust tests respectively | 17:16 |
| *** stingaci_ has joined #openstack-keystone | 17:26 | |
| *** stingaci has quit IRC | 17:26 | |
| *** e0ne has quit IRC | 17:27 | |
| *** trown is now known as trown|lunch | 17:28 | |
| *** ksnihyr has joined #openstack-keystone | 17:28 | |
| *** anush_ has quit IRC | 17:29 | |
| *** jsavak has quit IRC | 17:29 | |
| *** e0ne has joined #openstack-keystone | 17:30 | |
| *** jasonsb has joined #openstack-keystone | 17:30 | |
| *** jaosorior has quit IRC | 17:31 | |
| *** jsavak has joined #openstack-keystone | 17:32 | |
| ayoung | amakarov, so, are you just bugging me for a review (which I totally owe you) or is there a more fundamental design question? | 17:34 |
| openstackgerrit | Alexander Makarov proposed openstack/keystoneauth: Documentation example fix https://review.openstack.org/304233 | 17:34 |
| amakarov | ayoung, I don't know how to organize the code and asking for an advice :) | 17:36 |
| ayoung | amakarov, OK...so I will try and give it a thorough review. I think I need some time not in the middle of the day when I am constantly fielding questions, though, to do it justice.I'll aim for tonight | 17:36 |
| amakarov | ayoung, I can introduce an intermediate layer that may operate on manager layer but operate as a driver | 17:36 |
| rodrigods | knikolla, https://wiki.openstack.org/wiki/Meetings/KeystoneMeeting#Agenda_for_next_meeting done | 17:37 |
| rodrigods | would be nice to discuss that in tempest meeting too | 17:37 |
| amakarov | ayoung, formally this should go but will look weird... | 17:38 |
| *** neophy has joined #openstack-keystone | 17:40 | |
| *** mvk has quit IRC | 17:40 | |
| ayoung | amakarov, I have a feeling for what it should look like. It might be the wierdness you are describing | 17:40 |
| knikolla | rodrigods, thanks. Agree, but with the keystone_plugin in our code tree it's more important to get a gate up and running. | 17:40 |
| *** jerrygb has quit IRC | 17:41 | |
| amakarov | ayoung, like a manager incapsulating a manager? | 17:41 |
| ayoung | amakarov, calling, not encapsulating | 17:42 |
| ayoung | assignment calling role, maybe multiple times | 17:42 |
| *** navid__ has quit IRC | 17:43 | |
| * amakarov intrigued | 17:43 | |
| *** ksnihyr has quit IRC | 17:44 | |
| *** ksnihyr has joined #openstack-keystone | 17:46 | |
| *** jistr has quit IRC | 17:51 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone: WIP - Concrete role assignments for federated users https://review.openstack.org/284943 | 17:57 |
| *** navid__ has joined #openstack-keystone | 17:59 | |
| openstackgerrit | Alexander Makarov proposed openstack/keystoneauth: Documentation example removed for OAuth1 https://review.openstack.org/304247 | 17:59 |
| *** alejandrito has joined #openstack-keystone | 17:59 | |
| *** navid__ has quit IRC | 18:00 | |
| *** doug-fis_ has joined #openstack-keystone | 18:01 | |
| *** anush_ has joined #openstack-keystone | 18:02 | |
| *** doug-fi__ has joined #openstack-keystone | 18:02 | |
| *** rk4n has joined #openstack-keystone | 18:03 | |
| *** jsavak has quit IRC | 18:03 | |
| *** jsavak has joined #openstack-keystone | 18:03 | |
| *** doug-f___ has joined #openstack-keystone | 18:04 | |
| *** doug-fish has quit IRC | 18:04 | |
| openstackgerrit | Merged openstack/pycadf: Updated from global requirements https://review.openstack.org/303150 | 18:05 |
| openstackgerrit | Merged openstack/pycadf: Remove invalid character from neutron_api_audit_map.conf https://review.openstack.org/294455 | 18:05 |
| *** doug-f___ is now known as doug-fish | 18:06 | |
| *** doug-fis_ has quit IRC | 18:06 | |
| *** doug-fi__ has quit IRC | 18:07 | |
| *** rk4n has quit IRC | 18:08 | |
| *** daemontool__ has quit IRC | 18:10 | |
| openstackgerrit | Colleen Murphy proposed openstack/keystonemiddleware: Create signing_dir upon first usage https://review.openstack.org/304255 | 18:12 |
| *** stingaci_ has quit IRC | 18:12 | |
| *** trown|lunch is now known as trown | 18:14 | |
| *** stingaci has joined #openstack-keystone | 18:18 | |
| *** sdake has joined #openstack-keystone | 18:18 | |
| *** fawadkhaliq has quit IRC | 18:20 | |
| *** jasonsb has quit IRC | 18:21 | |
| *** fawadkhaliq has joined #openstack-keystone | 18:21 | |
| *** sheel has quit IRC | 18:27 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone: Updated from global requirements https://review.openstack.org/300626 | 18:27 |
| *** ninag has quit IRC | 18:30 | |
| *** ninag has joined #openstack-keystone | 18:30 | |
| *** fawadkhaliq has quit IRC | 18:33 | |
| *** fawadkhaliq has joined #openstack-keystone | 18:34 | |
| *** ninag has quit IRC | 18:35 | |
| *** ninag has joined #openstack-keystone | 18:39 | |
| *** anush_ has quit IRC | 18:44 | |
| *** daemontool has joined #openstack-keystone | 18:46 | |
| *** med_ has quit IRC | 18:46 | |
| *** mylu has quit IRC | 18:47 | |
| *** mylu has joined #openstack-keystone | 18:50 | |
| samueldmq | ayoung: hi | 18:51 |
| ayoung | Hey samueldmq | 18:51 |
| samueldmq | ayoung: whenever you ahve a moment, could you look at patch 302789 | 18:51 |
| patchbot | samueldmq: https://review.openstack.org/#/c/302789/ - keystone - Add API Change Tutorial | 18:51 |
| samueldmq | ayoung: that is a tutorial to help new contributors, I just wanted to see if we could find a better example for it | 18:52 |
| samueldmq | ayoung: see the comments (mine and crinkle's= | 18:52 |
| samueldmq | ) | 18:52 |
| ayoung | samueldmq, it reads well on a first pass | 18:52 |
| ayoung | I'm tempted to say "lets push it" and deal with feedback from someone that actually has to work with it | 18:52 |
| ayoung | samueldmq, its one of those where we won't know what is confusing until we try it on someone that does not know the process yet | 18:53 |
| *** arunkant has quit IRC | 18:53 | |
| *** med_ has joined #openstack-keystone | 18:54 | |
| *** med_ has quit IRC | 18:54 | |
| *** med_ has joined #openstack-keystone | 18:54 | |
| samueldmq | ayoung: completely agreed | 18:55 |
| samueldmq | ayoung: thanks for your feedback | 18:55 |
| *** doug-fish has quit IRC | 18:57 | |
| *** ninag has quit IRC | 18:57 | |
| *** doug-fish has joined #openstack-keystone | 18:58 | |
| *** agireud has quit IRC | 19:00 | |
| *** yarkot_ has joined #openstack-keystone | 19:00 | |
| *** agireud has joined #openstack-keystone | 19:01 | |
| *** doug-fis_ has joined #openstack-keystone | 19:01 | |
| *** ninag has joined #openstack-keystone | 19:01 | |
| *** edmondsw has joined #openstack-keystone | 19:02 | |
| *** ninag_ has joined #openstack-keystone | 19:02 | |
| *** doug-fish has quit IRC | 19:03 | |
| *** ninag__ has joined #openstack-keystone | 19:04 | |
| *** rk4n has joined #openstack-keystone | 19:05 | |
| *** doug-fis_ has quit IRC | 19:06 | |
| *** ninag has quit IRC | 19:06 | |
| *** rk4n has quit IRC | 19:06 | |
| *** rk4n has joined #openstack-keystone | 19:06 | |
| *** ninag_ has quit IRC | 19:07 | |
| *** csoukup has joined #openstack-keystone | 19:09 | |
| bknudson | tempest works with unversioned identity endpoint only by luck - http://git.openstack.org/cgit/openstack/tempest/tree/tempest/lib/auth.py#n333 | 19:11 |
| bknudson | when identity endpoint is like http://localhost:35357/ then path is '' so it appends the version_path (/v2.0) | 19:11 |
| bknudson | whereas if the identity endpoint is like http://localhost/identity then path is not empty so it doesn't append the version_path | 19:12 |
| bknudson | not sure what they were thinking | 19:12 |
| *** zqfan has quit IRC | 19:12 | |
| rodrigods | bknudson, odd | 19:15 |
| ayoung | GAH spent the whole (interrupted) monring chaing down a test failure that was just an incorrect test | 19:18 |
| ayoung | one test closer to Trusts working for v2 one step closer to fernet | 19:18 |
| *** csoukup has quit IRC | 19:19 | |
| morgan | ayoung: heh | 19:26 |
| *** stevemar has quit IRC | 19:27 | |
| *** stevemar has joined #openstack-keystone | 19:29 | |
| *** ChanServ sets mode: +o stevemar | 19:32 | |
| *** e0ne has quit IRC | 19:32 | |
| *** neophy has quit IRC | 19:34 | |
| *** fawadkhaliq has quit IRC | 19:39 | |
| *** fawadkhaliq has joined #openstack-keystone | 19:40 | |
| *** arunkant has joined #openstack-keystone | 19:45 | |
| *** stingaci has quit IRC | 19:45 | |
| -openstackstatus- NOTICE: Gerrit will be offline from 20:00 to 21:00 UTC (starting 10 minutes from now) for a server replacement http://lists.openstack.org/pipermail/openstack-dev/2016-April/091274.html | 19:50 | |
| *** fawadkhaliq has quit IRC | 19:51 | |
| *** fawadkhaliq has joined #openstack-keystone | 19:51 | |
| bknudson | I should have asked what jamielennox|away was thinking -- https://github.com/openstack/tempest/commit/823a00433fe6622f25a3c9dacf86fcd66b3e819b | 19:51 |
| *** lhcheng has quit IRC | 19:52 | |
| *** lhcheng has joined #openstack-keystone | 19:53 | |
| *** ChanServ sets mode: +v lhcheng | 19:53 | |
| *** mylu has quit IRC | 19:53 | |
| *** fawadkhaliq has quit IRC | 19:54 | |
| *** fawadkhaliq has joined #openstack-keystone | 19:55 | |
| *** anush_ has joined #openstack-keystone | 19:58 | |
| *** jsavak has quit IRC | 20:00 | |
| *** jsavak has joined #openstack-keystone | 20:00 | |
| *** trown is now known as trown|outtypewww | 20:01 | |
| *** maxabidi has joined #openstack-keystone | 20:02 | |
| *** lhcheng has quit IRC | 20:04 | |
| *** openstackgerrit has quit IRC | 20:05 | |
| -openstackstatus- NOTICE: Gerrit is offline until 21:00 UTC for a server replacement http://lists.openstack.org/pipermail/openstack-dev/2016-April/091274.html | 20:06 | |
| *** ChanServ changes topic to "Gerrit is offline until 21:00 UTC for a server replacement http://lists.openstack.org/pipermail/openstack-dev/2016-April/091274.html" | 20:06 | |
| *** ninag__ has quit IRC | 20:06 | |
| *** ninag has joined #openstack-keystone | 20:06 | |
| *** stingaci has joined #openstack-keystone | 20:06 | |
| *** yarkot_ has quit IRC | 20:09 | |
| *** mylu has joined #openstack-keystone | 20:10 | |
| *** ninag has quit IRC | 20:14 | |
| *** phalmos has joined #openstack-keystone | 20:16 | |
| *** neophy has joined #openstack-keystone | 20:21 | |
| *** jsavak has quit IRC | 20:23 | |
| *** openstackgerrit has joined #openstack-keystone | 20:27 | |
| *** maxabidi has quit IRC | 20:28 | |
| *** jsavak has joined #openstack-keystone | 20:29 | |
| *** alejandrito has quit IRC | 20:30 | |
| *** rderose has joined #openstack-keystone | 20:31 | |
| *** jsavak has quit IRC | 20:33 | |
| *** jsavak has joined #openstack-keystone | 20:34 | |
| *** alejandrito has joined #openstack-keystone | 20:36 | |
| *** doug-fis_ has joined #openstack-keystone | 20:40 | |
| *** ninag has joined #openstack-keystone | 20:41 | |
| *** csoukup has joined #openstack-keystone | 20:41 | |
| *** openstackgerrit has quit IRC | 20:41 | |
| *** anush_ has quit IRC | 20:42 | |
| ayoung | raildo, OK, I think I have the v2 trust stuff sorted | 20:43 |
| ayoung | running tox now | 20:43 |
| raildo | ayoung: how did you fix it? | 20:43 |
| raildo | ayoung: \o/ btw | 20:44 |
| ayoung | raildo, lbragstad, ^^ Had to switch a couple tests that were supposed to not validate for non-default domains | 20:44 |
| ayoung | raildo, there is also one ugle hack due to revocations | 20:44 |
| lbragstad | ayoung awesome | 20:44 |
| ayoung | I have had to put a sleep 1 in a few places | 20:44 |
| ayoung | that is the next thing to hunt down | 20:44 |
| raildo | ayoung: I saw that, I was trying to understand how to fix it | 20:45 |
| ayoung | raildo, I still don't get why it is happening | 20:45 |
| *** doug-fis_ has quit IRC | 20:45 | |
| ayoung | raildo, but the revocation code needs a rewrite anyway. THe tree must die | 20:45 |
| raildo | ayoung: ++ | 20:45 |
| ayoung | I suspect it is a glitch in the tree logic | 20:45 |
| raildo | ayoung: maybe there is some thread issue when we can a revocation event | 20:45 |
| ayoung | raildo, so if we can pull up the old code, that does the linear search I bet it starts to work | 20:46 |
| raildo | ayoung: great | 20:46 |
| ayoung | It certainly feels like a race condition, but I don't see how it would invalidate the admin token | 20:46 |
| ayoung | raildo, and only for a second? | 20:46 |
| ayoung | wweeeeird | 20:46 |
| raildo | ayoung: you know more about this than me :P I believe in you | 20:47 |
| ayoung | raildo, so that is one reason I was thinking to push through the change that reduces the number of revocation events. It will simplify the linear search | 20:47 |
| ayoung | so there is a loose order to what I am working on here | 20:47 |
| raildo | ayoung: I'll review that patch today | 20:48 |
| *** spzala has quit IRC | 20:48 | |
| ayoung | ah..one more failure... | 20:49 |
| ayoung | test_trust_get_token_fails_if_trustee_disabled | 20:49 |
| ayoung | looks like the race again... | 20:49 |
| ayoung | one sec | 20:49 |
| raildo | ayoung: this is really weird... | 20:49 |
| ayoung | and...it passed when run standalone... | 20:50 |
| ayoung | oh..that had the sleep(1) in it and failed anyway. | 20:51 |
| ayoung | well...I'll post the review | 20:51 |
| *** jsavak has quit IRC | 20:51 | |
| *** jsavak has joined #openstack-keystone | 20:51 | |
| ayoung | https://review.openstack.org/278693 | 20:52 |
| *** doug-fish has joined #openstack-keystone | 20:52 | |
| *** neophy has quit IRC | 20:53 | |
| *** openstackgerrit has joined #openstack-keystone | 20:55 | |
| *** doug-fish has quit IRC | 20:57 | |
| *** doug-fish has joined #openstack-keystone | 20:57 | |
| raildo | ayoung: awesome | 20:58 |
| ayoung | raildo, OK, so grab that review, and lets figure out how to reproduce the sleep issue.... | 20:59 |
| *** slberger1 has joined #openstack-keystone | 21:00 | |
| raildo | ayoung: I had a vm with this code running, and I was trying to reproduce this issue, if you want i can give access for you on it | 21:00 |
| *** slberger has quit IRC | 21:01 | |
| *** anush_ has joined #openstack-keystone | 21:02 | |
| *** jsavak has quit IRC | 21:03 | |
| *** ninag has quit IRC | 21:03 | |
| *** ninag has joined #openstack-keystone | 21:03 | |
| *** ninag has quit IRC | 21:04 | |
| *** ninag has joined #openstack-keystone | 21:04 | |
| openstackgerrit | Rodrigo Duarte proposed openstack/keystone: Add identity providers integration tests https://review.openstack.org/302299 | 21:05 |
| openstackgerrit | Rodrigo Duarte proposed openstack/keystone: Add service providers integration tests https://review.openstack.org/303502 | 21:05 |
| *** ChanServ changes topic to "MITAKA is released! Thanks to everyone that contributed!" | 21:05 | |
| -openstackstatus- NOTICE: Gerrit move maintenance completed successfully; note that DNS has been updated to new IP addresses as indicated in http://lists.openstack.org/pipermail/openstack-dev/2016-April/091274.html | 21:05 | |
| *** fawadkhaliq has quit IRC | 21:10 | |
| *** fawadkhaliq has joined #openstack-keystone | 21:10 | |
| *** fawadkhaliq has quit IRC | 21:11 | |
| *** fawadkhaliq has joined #openstack-keystone | 21:12 | |
| *** fawadkhaliq has quit IRC | 21:26 | |
| *** fawadkhaliq has joined #openstack-keystone | 21:26 | |
| *** pece has quit IRC | 21:28 | |
| *** raildo is now known as raildo-afk | 21:28 | |
| *** pauloewerton has quit IRC | 21:29 | |
| *** ninag has quit IRC | 21:34 | |
| *** ninag has joined #openstack-keystone | 21:34 | |
| *** ninag has quit IRC | 21:37 | |
| *** ninag has joined #openstack-keystone | 21:37 | |
| *** ninag has quit IRC | 21:38 | |
| *** mylu has quit IRC | 21:38 | |
| *** ninag has joined #openstack-keystone | 21:39 | |
| *** ksnihyr has quit IRC | 21:41 | |
| *** mylu has joined #openstack-keystone | 21:43 | |
| *** doug-fish has quit IRC | 21:45 | |
| stingaci | Hey guys. Quick question. There currently is no support for OS-INHERIT in the openstack client. Is that correct? | 21:46 |
| *** edmondsw has quit IRC | 21:48 | |
| *** ninag has quit IRC | 21:50 | |
| *** ninag has joined #openstack-keystone | 21:50 | |
| morgan | stevemar: ^? | 21:54 |
| stevemar | morgan: stingaci good question... | 21:54 |
| morgan | stevemar: yeah i am just not sure, figured i'd ask you before doing the really deep dig into it. | 21:55 |
| stevemar | morgan: stingaci i think it should work... you'll want to use the `openstack role add`` command, i think there is a --effective option | 21:55 |
| stingaci | I've looked up and down.. Didn't find any switches that support features like listing a project subtree. | 21:55 |
| stevemar | ah, the subtree stuff is different than os-inherit (which just means your projects and subprojects get assignments from domains) | 21:56 |
| morgan | ooooh | 21:57 |
| morgan | yeah | 21:57 |
| morgan | i think we have a gap in OSC | 21:57 |
| stevemar | for subtree bits, yeah, for sure | 21:57 |
| stingaci | I see. But even for adding a role there doesn't seem to be a 'push to child projects' swtich. | 21:58 |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Define identity interface - easy cases https://review.openstack.org/291950 | 21:58 |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Opportunistic LDAP testing https://review.openstack.org/300237 | 21:59 |
| *** anush_ has quit IRC | 21:59 | |
| *** EinstCrazy has quit IRC | 21:59 | |
| *** anush_ has joined #openstack-keystone | 22:00 | |
| *** knikolla has quit IRC | 22:04 | |
| *** alejandrito has quit IRC | 22:11 | |
| *** ninag has quit IRC | 22:17 | |
| *** eandersson_ has joined #openstack-keystone | 22:18 | |
| morgan | stevemar: ^ bknudson makes up for lines removed with docstrings added | 22:24 |
| bknudson | can't win for losing. | 22:24 |
| morgan | ;) | 22:28 |
| *** timcline has quit IRC | 22:29 | |
| *** stingaci_ has joined #openstack-keystone | 22:30 | |
| *** stingaci has quit IRC | 22:30 | |
| *** lhcheng has joined #openstack-keystone | 22:31 | |
| *** ChanServ sets mode: +v lhcheng | 22:31 | |
| *** phalmos has quit IRC | 22:32 | |
| *** markvoelker has quit IRC | 22:33 | |
| *** slberger1 has left #openstack-keystone | 22:37 | |
| *** anush_ has quit IRC | 22:46 | |
| *** mylu has quit IRC | 22:47 | |
| *** ametts has quit IRC | 22:48 | |
| *** mylu has joined #openstack-keystone | 22:49 | |
| *** fawadkhaliq has quit IRC | 22:51 | |
| *** fawadkhaliq has joined #openstack-keystone | 22:51 | |
| *** sdake_ has joined #openstack-keystone | 22:53 | |
| *** mylu has quit IRC | 22:53 | |
| *** mylu has joined #openstack-keystone | 22:55 | |
| *** sdake has quit IRC | 22:55 | |
| *** gordc has quit IRC | 22:57 | |
| *** mvk has joined #openstack-keystone | 23:01 | |
| *** rk4n has quit IRC | 23:20 | |
| *** rk4n has joined #openstack-keystone | 23:20 | |
| *** jamielennox|away is now known as jamielennox | 23:22 | |
| rodrigods | stingaci_, stevemar morgan ^ https://github.com/openstack/python-openstackclient/blob/master/openstackclient/identity/v3/role_assignment.py#L72 | 23:23 |
| rodrigods | btw, anyone has an opinion about the wording here https://review.openstack.org/#/c/303471/ ? | 23:24 |
| patchbot | rodrigods: patch 303471 - keystone-specs - Add note about service provider fields | 23:24 |
| stingaci_ | rodrigods: cheers! | 23:26 |
| rodrigods | o/ | 23:26 |
| jamielennox | bknudson: did i break it/ | 23:32 |
| bknudson | jamielennox: it was probably all broken before. | 23:32 |
| jamielennox | it is not my proudest patch but i just need something that worked | 23:32 |
| bknudson | I tried to implement some version discovery but that was rejected as being too complicated. | 23:33 |
| jamielennox | bknudson: it really needs a proper discovery system but that was more time than i was willing to invest | 23:33 |
| jamielennox | yep, you were mentioned as having attempted that | 23:33 |
| jamielennox | bknudson: so what's the case that i broke? | 23:33 |
| bknudson | the case where the endpoint is like https://localhost/identity | 23:33 |
| jamielennox | what happens? | 23:34 |
| *** markvoelker has joined #openstack-keystone | 23:34 | |
| bknudson | when it's https://localhost:35357/ it puts /v2.0, but when it's https://localhost/identity it stays as https://localhost/identity | 23:34 |
| jamielennox | the case i was trying to fix was when path was empty, so endpoint is https://keystone:5000/ without version | 23:34 |
| jamielennox | because the regexp went crazy and editted the base url and not just the path | 23:34 |
| jamielennox | bknudson: unversioned like that wouldn't have worked previously either right? | 23:35 |
| bknudson | this code seems to have gone through several changes recently, so not sure which version you're talking about | 23:36 |
| bknudson | but at one point https://localhost/identity was working, and then it stopped | 23:36 |
| bknudson | where https://localhost/identity was failing wasn't in replacing the version in the client, it was in replacing the version in tempest validate-config | 23:36 |
| bknudson | for some reason this functionality is reimplemented in a couple of places. | 23:37 |
| *** markvoelker has quit IRC | 23:39 | |
| *** stingaci_ has quit IRC | 23:39 | |
| jamielennox | bknudson: :( | 23:41 |
| *** mylu has quit IRC | 23:42 | |
| *** mylu has joined #openstack-keystone | 23:44 | |
| *** rk4n has quit IRC | 23:45 | |
| *** mylu has quit IRC | 23:48 | |
| *** mylu has joined #openstack-keystone | 23:49 | |
| morgan | dolphm: (ping) i... i think launchpad lost it's cookies | 23:51 |
| morgan | dolphm: there was a security bug i got an email about ~42mins ago, but LP says you updated it in 2013? | 23:52 |
| bknudson | grab a mop | 23:52 |
| *** sdake has joined #openstack-keystone | 23:52 | |
| morgan | dolphm: what the deal is. | 23:52 |
| morgan | oh and it's normal again | 23:52 |
| morgan | derp | 23:53 |
| morgan | it says mitaka | 23:53 |
| morgan | nvm | 23:53 |
| *** sdake_ has quit IRC | 23:53 | |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Opportunistic LDAP testing https://review.openstack.org/300237 | 23:56 |
| openstackgerrit | Brant Knudson proposed openstack/keystone: Tests clean up global ldap settings https://review.openstack.org/304337 | 23:56 |
| bknudson | global variables are the worst. | 23:57 |
| *** stingaci has joined #openstack-keystone | 23:59 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!