Friday, 2016-08-12

*** ddieterly has quit IRC00:03
*** testing1234 has quit IRC00:03
*** kragniz1 has joined #openstack-keystone00:03
*** itsuugo has quit IRC00:04
*** spzala has quit IRC00:06
*** spzala has joined #openstack-keystone00:07
*** spzala has quit IRC00:11
adriantJust to double check something... A user with a blank password is effectively treated as disabled for the purposes of authentication?00:16
adriantUntil a password is set to the by an admin that is.00:16
openstackgerritOpenStack Proposal Bot proposed openstack/keystone: Updated from global requirements  https://review.openstack.org/35430000:19
openstackgerritOpenStack Proposal Bot proposed openstack/keystonemiddleware: Updated from global requirements  https://review.openstack.org/35430100:19
*** spzala has joined #openstack-keystone00:26
*** ddieterly has joined #openstack-keystone00:32
*** adrian_otto has quit IRC00:34
*** code-R has joined #openstack-keystone00:36
*** code-R_ has joined #openstack-keystone00:37
*** code-R has quit IRC00:40
*** sdake has joined #openstack-keystone00:46
openstackgerritSamuel de Medeiros Queiroz proposed openstack/keystone: Detail IdP APIs in api-ref docs  https://review.openstack.org/35408900:47
*** esp has quit IRC00:49
samueldmqstevemar: ^00:50
samueldmqthere we go00:50
*** code-R_ has quit IRC00:53
*** code-R has joined #openstack-keystone00:53
*** ddieterly has quit IRC00:56
*** iurygregory_ has joined #openstack-keystone01:06
*** tonytan4ever has joined #openstack-keystone01:11
*** ddieterly has joined #openstack-keystone01:14
*** tonytan4ever has quit IRC01:16
*** ravelar has joined #openstack-keystone01:21
*** wangqun has joined #openstack-keystone01:23
*** ravelar has quit IRC01:25
*** jorge_munoz has quit IRC01:25
*** tqtran has quit IRC01:27
*** EinstCrazy has joined #openstack-keystone01:30
*** adrian_otto has joined #openstack-keystone01:32
*** adrian_otto has quit IRC01:43
openstackgerritTin Lam proposed openstack/keystone: api-ref: Add default domain config documentation  https://review.openstack.org/35447901:53
*** sdake has quit IRC02:01
*** spedione is now known as spedione|AWAY02:04
*** sdake has joined #openstack-keystone02:13
*** ddieterly has quit IRC02:14
*** gyee has quit IRC02:17
*** woodster_ has quit IRC02:19
*** ddieterly has joined #openstack-keystone02:29
*** itsuugo has joined #openstack-keystone02:31
*** sdake has quit IRC02:34
*** roxanaghe has joined #openstack-keystone02:38
*** EinstCrazy has quit IRC02:39
*** EinstCrazy has joined #openstack-keystone02:43
*** ddieterly has quit IRC02:45
*** roxanaghe has quit IRC02:46
*** davechen has joined #openstack-keystone02:49
*** ayoung has joined #openstack-keystone02:49
*** ChanServ sets mode: +v ayoung02:49
*** sdake has joined #openstack-keystone02:54
*** zhiyan has quit IRC02:55
*** jraim has quit IRC02:56
*** zhiyan has joined #openstack-keystone03:03
*** jraim has joined #openstack-keystone03:04
ayoungharlowja, I just saw your question.  All that $(tenant) stuff is the thrown in the side of the SC clean up effort. Many loing talks about that03:15
*** adrian_otto has joined #openstack-keystone03:24
*** sdake has quit IRC03:24
openstackgerritLance Bragstad proposed openstack/keystone: Support encryption of credentials at rest  https://review.openstack.org/31716903:24
openstackgerritLance Bragstad proposed openstack/keystone: Add credential encryption exception  https://review.openstack.org/35449403:24
openstackgerritLance Bragstad proposed openstack/keystone: Add conf to support credential encryption  https://review.openstack.org/35449503:24
openstackgerritLance Bragstad proposed openstack/keystone: Create a fernet credential provider  https://review.openstack.org/35449603:24
openstackgerritLance Bragstad proposed openstack/keystone: Document the fernet credential provider  https://review.openstack.org/35449703:24
*** EinstCra_ has joined #openstack-keystone03:29
*** EinstCrazy has quit IRC03:32
*** links has joined #openstack-keystone03:33
*** spzala has quit IRC03:35
*** ayoung has quit IRC03:45
*** iurygregory_ has quit IRC03:49
*** sdake has joined #openstack-keystone03:54
*** adrian_otto has quit IRC04:02
*** adrian_otto has joined #openstack-keystone04:02
*** dikonoor has joined #openstack-keystone04:09
*** adrian_otto has quit IRC04:11
*** tonytan4ever has joined #openstack-keystone04:12
*** tonytan4ever has quit IRC04:17
*** code-R_ has joined #openstack-keystone04:32
*** esp has joined #openstack-keystone04:34
*** code-R_ has quit IRC04:34
*** code-R_ has joined #openstack-keystone04:35
*** code-R has quit IRC04:35
openstackgerritOpenStack Proposal Bot proposed openstack/keystone: Updated from global requirements  https://review.openstack.org/35430004:49
*** esp has quit IRC05:04
*** jaosorior has joined #openstack-keystone05:04
*** dkehn_ has quit IRC05:21
*** esp has joined #openstack-keystone05:23
*** sdake has quit IRC05:32
*** spzala has joined #openstack-keystone05:35
*** spzala has quit IRC05:40
*** dkehn_ has joined #openstack-keystone05:41
*** esp has quit IRC05:44
*** rcernin has quit IRC05:51
*** code-R has joined #openstack-keystone05:53
*** code-R_ has quit IRC05:56
*** tqtran has joined #openstack-keystone06:04
*** tqtran has quit IRC06:08
*** code-R has quit IRC06:11
*** code-R has joined #openstack-keystone06:11
*** rcernin has joined #openstack-keystone06:21
*** adriant has quit IRC06:31
*** code-R_ has joined #openstack-keystone06:34
*** code-R has quit IRC06:34
*** jojden has joined #openstack-keystone06:49
*** GB21 has joined #openstack-keystone06:58
*** tesseract- has joined #openstack-keystone06:59
*** daemontool has joined #openstack-keystone07:06
*** rkrum has quit IRC07:16
*** GB21 has quit IRC07:22
*** tqtran has joined #openstack-keystone07:25
*** jpena|off is now known as jpena07:25
*** tqtran_ has joined #openstack-keystone07:26
*** tqtran has quit IRC07:29
*** markvoelker has quit IRC07:34
*** jamielennox|away has quit IRC07:38
*** amoralej|off is now known as amoralej07:44
*** jamielennox|away has joined #openstack-keystone07:47
*** jamielennox|away is now known as jamielennox07:48
*** ChanServ sets mode: +v jamielennox07:48
*** tonytan4ever has joined #openstack-keystone07:59
*** zzzeek has quit IRC08:00
*** zzzeek has joined #openstack-keystone08:01
*** tonytan4ever has quit IRC08:03
*** tqtran_ has quit IRC08:07
*** tqtran has joined #openstack-keystone08:09
openstackgerritDavanum Srinivas (dims) proposed openstack/keystone: [WIP] Testing latest u-c  https://review.openstack.org/31843508:10
*** danpawlik has joined #openstack-keystone08:12
*** code-R_ has quit IRC08:13
*** pnavarro has joined #openstack-keystone08:15
*** GB21 has joined #openstack-keystone08:21
*** tqtran has quit IRC08:22
*** amitkqed has quit IRC08:23
*** amitkqed has joined #openstack-keystone08:24
openstackgerritDave Chen proposed openstack/keystone: POC: This is the POC to support rolling upgrade without status  https://review.openstack.org/35328908:26
*** pnavarro has quit IRC08:29
*** markvoelker has joined #openstack-keystone08:34
*** markvoelker has quit IRC08:39
*** tqtran has joined #openstack-keystone08:43
openstackgerrithenry-nash proposed openstack/keystone: POC of data migration using database triggers  https://review.openstack.org/35434308:46
*** d0ugal has quit IRC08:52
*** code-R has joined #openstack-keystone09:01
*** code-R has quit IRC09:05
openstackgerrithenry-nash proposed openstack/keystone: Add contract migrations to keystone-manage  https://review.openstack.org/34993909:07
*** tqtran has quit IRC09:08
*** aloga has quit IRC09:10
*** aloga has joined #openstack-keystone09:11
openstackgerrithenry-nash proposed openstack/keystone: POC of data migration using database triggers  https://review.openstack.org/35434309:21
*** markvoelker has joined #openstack-keystone09:36
*** markvoelker has quit IRC09:40
*** amitkqed has quit IRC09:40
*** amitkqed has joined #openstack-keystone09:41
*** code-R has joined #openstack-keystone09:55
*** code-R has quit IRC10:00
*** EinstCra_ has quit IRC10:05
*** tqtran has joined #openstack-keystone10:05
*** tqtran has quit IRC10:09
*** mvk has quit IRC10:14
*** mvk has joined #openstack-keystone10:14
*** davechen has left #openstack-keystone10:25
*** amitkqed has quit IRC10:35
*** amitkqed has joined #openstack-keystone10:36
*** wangqun has quit IRC10:39
*** daemontool has quit IRC10:39
*** daemontool has joined #openstack-keystone10:41
*** daemontool_ has joined #openstack-keystone10:47
*** daemontool has quit IRC10:47
*** code-R has joined #openstack-keystone10:49
*** kragniz1 has quit IRC10:52
*** kragniz1 has joined #openstack-keystone10:53
*** code-R has quit IRC10:53
*** kragniz1 has quit IRC10:59
*** kragniz1 has joined #openstack-keystone11:15
*** kragniz1 has quit IRC11:18
*** kragniz1 has joined #openstack-keystone11:18
*** dkehn_ has quit IRC11:21
*** GB21 has quit IRC11:28
*** jaosorior has quit IRC11:29
*** jaosorior has joined #openstack-keystone11:30
*** dkehn_ has joined #openstack-keystone11:34
*** kragniz is now known as Guest6666611:36
*** kragniz1 is now known as kragniz11:36
*** markvoelker has joined #openstack-keystone11:37
*** GB21 has joined #openstack-keystone11:38
*** jistr has quit IRC11:39
*** markvoelker has quit IRC11:42
*** code-R has joined #openstack-keystone11:43
*** code-R has quit IRC11:48
*** tonytan4ever has joined #openstack-keystone12:00
*** tonytan4ever has quit IRC12:05
*** tqtran has joined #openstack-keystone12:06
*** GB21 has quit IRC12:08
*** tqtran has quit IRC12:11
*** wangqun has joined #openstack-keystone12:21
*** amoralej is now known as amoralej|lunch12:23
*** jistr has joined #openstack-keystone12:24
*** jpena is now known as jpena|lunch12:25
*** jistr has quit IRC12:31
*** jistr has joined #openstack-keystone12:32
*** chlong|mtg has quit IRC12:33
*** pauloewerton has joined #openstack-keystone12:34
*** markvoelker has joined #openstack-keystone12:35
*** wangqun has quit IRC12:36
*** spzala has joined #openstack-keystone12:36
*** code-R has joined #openstack-keystone12:37
*** spzala has quit IRC12:41
*** jistr has quit IRC12:41
*** code-R has quit IRC12:42
*** rkrum has joined #openstack-keystone12:45
*** rkrum has quit IRC12:50
*** links has quit IRC12:53
*** jith_ has joined #openstack-keystone12:54
jith_hi all, i have a setup with swift(mitaka) to be authenticated with keystone(liberty).. But swift request is getting authenticated but not authorized... i got error like "Account HEAD failed: http://10.10.15.161:8080/v1/AUTH_17af2c253bc143ffbdda116d4fdb8e89 401 Unauthorized"12:56
jith_pls do guide12:56
*** amoralej|lunch is now known as amoralej12:59
*** tonytan4ever has joined #openstack-keystone13:01
*** jistr has joined #openstack-keystone13:03
jith_The error is http://paste.openstack.org/show/555981/13:04
*** daemontool_ has quit IRC13:05
*** tonytan4ever has quit IRC13:06
*** messy has joined #openstack-keystone13:11
*** jistr has quit IRC13:13
*** sdake has joined #openstack-keystone13:14
*** edmondsw has joined #openstack-keystone13:14
*** spzala has joined #openstack-keystone13:16
*** itisha has joined #openstack-keystone13:19
*** tonytan4ever has joined #openstack-keystone13:22
*** luke123412314123 has joined #openstack-keystone13:25
luke123412314123hello, i have some problems with keystone API. Can someone hel me? i can't curl anything i always get "The request you have made requires authentication." even if i try to login13:25
*** jpena|lunch is now known as jpena13:31
*** code-R has joined #openstack-keystone13:31
*** code-R has quit IRC13:36
*** amakarov_away is now known as amakarov13:37
*** ddieterly has joined #openstack-keystone13:39
amakarovlbragstad, hi! Is you performance test bot working? I've added 'check performance' comment to my patch https://review.openstack.org/#/c/309146/ yesterday, alas with no result...13:39
patchbotamakarov: patch 309146 - keystone - Pre-cache new tokens13:39
*** rodrigods has quit IRC13:39
*** rodrigods has joined #openstack-keystone13:40
*** messy has quit IRC13:44
*** messy has joined #openstack-keystone13:44
*** messy has quit IRC13:45
*** sdake has quit IRC13:46
*** messy has joined #openstack-keystone13:46
*** adu has joined #openstack-keystone13:49
*** d0ugal has joined #openstack-keystone13:51
lbragstadamakarov yeah - I need to rekick it.. for some reason when you set something up to listen to the gerrit event stream, the longer it is listening the longer it takes to get the event. dolphm and I were talking about it yesterday13:54
*** jith_ has quit IRC13:54
*** pnavarro has joined #openstack-keystone13:56
*** sdake has joined #openstack-keystone13:56
*** ddieterly is now known as ddieterly[away]14:03
*** danpawlik has quit IRC14:04
*** ravelar has joined #openstack-keystone14:04
*** jaugustine_ has joined #openstack-keystone14:05
*** jojden has quit IRC14:12
*** jaugustine_ has quit IRC14:12
*** messy has quit IRC14:13
*** ddieterly[away] is now known as ddieterly14:16
*** edtubill has joined #openstack-keystone14:19
*** pnavarro has quit IRC14:19
*** adu has quit IRC14:22
*** thiagolib has joined #openstack-keystone14:30
*** pnavarro has joined #openstack-keystone14:32
rodrigodshenrynash, ping... are you there?14:32
*** luke123412314123 has quit IRC14:33
*** jorge_munoz has joined #openstack-keystone14:33
*** code-R has joined #openstack-keystone14:34
*** jorge_munoz has quit IRC14:38
*** jistr has joined #openstack-keystone14:39
*** jorge_munoz_ has joined #openstack-keystone14:39
*** spedione|AWAY is now known as spedione14:39
*** KevinE has joined #openstack-keystone14:43
*** KevinE has quit IRC14:43
*** KevinE has joined #openstack-keystone14:43
*** woodster_ has joined #openstack-keystone14:45
*** jorge_munoz_ has quit IRC14:48
*** adrian_otto has joined #openstack-keystone14:48
*** spedione is now known as spedione|AWAY14:48
*** spedione|AWAY is now known as spedione14:49
*** KevinE has quit IRC14:50
*** michauds has joined #openstack-keystone14:50
*** diazjf has joined #openstack-keystone14:51
*** diazjf1 has joined #openstack-keystone14:51
*** pnavarro has quit IRC14:51
*** messy has joined #openstack-keystone14:53
*** diazjf has quit IRC14:55
*** ezpz has joined #openstack-keystone14:58
*** EinstCrazy has joined #openstack-keystone15:00
openstackgerrithenry-nash proposed openstack/keystone: POC of data migration using database triggers  https://review.openstack.org/35434315:01
henrynashrodigods: hi15:02
rodrigodshenrynash, regarding https://review.openstack.org/#/c/168089/15:02
patchbotrodrigods: patch 168089 - python-keystoneclient - Support domain-specific configuration management15:02
rodrigodsany intention to revisit it before the newton freeze?15:02
*** jorge_munoz has joined #openstack-keystone15:02
henrynashrodigods: i'd like to yes, but concentrating on the rolling upgrades...15:03
henrynashrodigods: I need to revisit how the api endpoints are exposed in keystone client...I was never relaly happy with how I had done it15:03
*** michauds has quit IRC15:03
rodrigodshenrynash, i see... i can try to help out there :)15:04
henrynashrodigods: sure!!! go for it!15:04
*** jorge_munoz has quit IRC15:05
*** adrian_otto has quit IRC15:05
*** sheel has joined #openstack-keystone15:06
*** adrian_otto has joined #openstack-keystone15:08
*** ayoung has joined #openstack-keystone15:10
*** ChanServ sets mode: +v ayoung15:10
*** spzala has quit IRC15:14
*** spzala has joined #openstack-keystone15:14
*** jaosorior has quit IRC15:15
*** code-R has quit IRC15:18
*** michauds has joined #openstack-keystone15:18
*** spzala has quit IRC15:20
*** spzala has joined #openstack-keystone15:22
*** pcaruana has quit IRC15:23
*** EinstCrazy has quit IRC15:23
*** jistr is now known as jistr|call15:23
*** haplo37_ has joined #openstack-keystone15:30
*** dikonoor has quit IRC15:31
*** adrian_otto has quit IRC15:33
*** ayoung has quit IRC15:33
*** sdake_ has joined #openstack-keystone15:39
*** sdake has quit IRC15:41
*** jistr|call is now known as jistr15:42
*** michauds has quit IRC15:46
*** rcernin has quit IRC15:47
*** messy has quit IRC15:48
*** ddieterly is now known as ddieterly[away]15:49
*** messy has joined #openstack-keystone15:53
*** hockeynut has joined #openstack-keystone15:54
*** ddieterly[away] is now known as ddieterly15:55
*** sdake_ has quit IRC15:59
*** haplo37_ has quit IRC16:00
*** roxanaghe has joined #openstack-keystone16:01
*** KevinE has joined #openstack-keystone16:02
*** michauds has joined #openstack-keystone16:02
*** adrian_otto has joined #openstack-keystone16:03
*** roxanaghe has quit IRC16:04
*** tqtran has joined #openstack-keystone16:08
*** tqtran has quit IRC16:13
*** code-R has joined #openstack-keystone16:13
*** code-R_ has joined #openstack-keystone16:13
*** adu has joined #openstack-keystone16:15
*** code-R has quit IRC16:17
*** esp has joined #openstack-keystone16:19
*** clenimar_ has joined #openstack-keystone16:20
*** Ephur has quit IRC16:23
*** clenimar_ has quit IRC16:26
*** roxanaghe has joined #openstack-keystone16:27
*** tesseract- has quit IRC16:35
*** EinstCrazy has joined #openstack-keystone16:36
*** roxanaghe has quit IRC16:46
rodrigodslbragstad, hey... just sent a PR for your keystone-performance repo :)16:46
*** ddieterly is now known as ddieterly[away]16:48
*** jpena is now known as jpena|off16:52
*** ddieterly[away] is now known as ddieterly16:53
openstackgerritMerged openstack/keystonemiddleware: Updated from global requirements  https://review.openstack.org/35430116:59
*** dikonoor has joined #openstack-keystone17:08
*** asettle has joined #openstack-keystone17:08
*** woodster_ has quit IRC17:09
*** ayoung has joined #openstack-keystone17:13
*** ChanServ sets mode: +v ayoung17:13
dolphmrderose_: demo of zero-downtime database migrations in SQLite using triggers https://gist.github.com/dolph/72dae9391ec4e13444498f977bc92ad917:13
dolphmlbragstad: dstanek: pretty similar to henrynash's work ^ but mine is just a generic demo17:13
*** roxanaghe has joined #openstack-keystone17:17
*** dikonoor has quit IRC17:23
*** roxanaghe has quit IRC17:23
*** roxanaghe has joined #openstack-keystone17:25
*** code-R_ has quit IRC17:25
*** sheel has quit IRC17:26
*** gyee has joined #openstack-keystone17:26
*** amoralej is now known as amoralej|off17:27
*** ddieterly is now known as ddieterly[away]17:29
harlowjaayoung whats the 'SC clean up effort.' ?17:32
harlowjasouth carolina cleanup17:32
ayoungharlowja, service catalog17:32
harlowjak17:32
harlowjaayoung did u get out climbing when u were here?17:32
*** Gorian_ has joined #openstack-keystone17:32
ayoungharlowja, harlowja nope.  But I did get in an 8 pitch called Moby Grape on Cannon two weeks ago17:33
ayoungharlowja, this was not me, but shows the climb http://www.supertopo.com/climbers-forum/453229/Moby-Grape-TR-9-17-0717:34
ayoungREally only one pitch of 5.8.  A couple interesting moves per pitch17:34
*** hockeynut has quit IRC17:38
*** michauds has quit IRC17:39
harlowjacools17:40
harlowjawalk down from that or rapel?17:40
*** EinstCrazy has quit IRC17:48
*** tonytan4ever has quit IRC17:49
*** jdennis1 has joined #openstack-keystone17:50
*** jdennis has quit IRC17:51
*** michauds has joined #openstack-keystone17:51
*** amakarov is now known as amakarov_away17:54
openstackgerritMerged openstack/keystone: Updated from global requirements  https://review.openstack.org/35430017:55
*** edtubill has quit IRC18:01
openstackgerritSteve Martinelli proposed openstack/keystone: Constraints are ready to be used for tox.ini  https://review.openstack.org/35487518:01
*** shewless has joined #openstack-keystone18:01
*** Ephur has joined #openstack-keystone18:04
openstackgerritTin Lam proposed openstack/keystone: api-ref: Add default domain config documentation  https://review.openstack.org/35447918:11
*** adu has quit IRC18:14
*** adu has joined #openstack-keystone18:15
*** baffle has quit IRC18:17
*** adu has quit IRC18:17
*** KevinE has quit IRC18:19
*** sdake has joined #openstack-keystone18:21
*** baffle has joined #openstack-keystone18:21
lbragstadrodrigods sweet - thank you!18:22
*** asettle has quit IRC18:24
*** asettle has joined #openstack-keystone18:25
*** ravelar has quit IRC18:25
*** adrian_otto has quit IRC18:26
*** asettle has quit IRC18:29
samueldmqstevemar:  ping18:30
*** ddieterly[away] has quit IRC18:30
openstackgerritSamuel de Medeiros Queiroz proposed openstack/keystone: Detail IdP APIs in api-ref docs  https://review.openstack.org/35408918:31
shewlessHi there. I'm working on getting designate working on my mitaka setup. I'm getting a weird problem with keystone auth. the keystone logs claim the user "designate" doesn't exist.. but that user does in fact exist!18:31
shewlessI think it has something to do with v2 auth versus v3 auth but I'm not sure how to make designate use v318:31
dstanekshewless: what backend are you using?18:32
shewlessdstanek: not exactly sure what you mean18:34
dstanekshewless: are you users in ldap, sql, etc?18:34
shewlessah. they are all local in keystone on this setup18:34
shewlessso sql I guess18:34
shewlessbut eventually they will be ldap.. not sure if that matters18:35
dstanekso you have a desigate user that doesn't work in v2, does it work in v3?18:35
samueldmqstevemar: nvm, just submitted another ps addressing your comments ^18:35
dstanekshewless: it may be that your user isn't in the default domain18:35
stevemarcoolio18:35
shewlessdstanek: that is a theory18:35
ayoungrodrigods, cannot get the unit tests running on that old system18:35
ayoungThere is not even a python-tox rpm available, so can't even try to run it the old way...18:36
shewlessdstanek: I checked the designate user and it is a part of the default domain18:36
ayoungand running python -m testtools.run  inside a git checked out dir does nothing...no tests run18:37
dstanekshewless: are you sure you're using the correct password?18:37
ayoungGah....hate working with out-of-date repos...18:38
shewlessdtanek: I'm pretty sure. I tried resetting the password just to be more sure. Would keystone claim this if it's a password problem?18:38
shewlessIdentity response: {"error": {"message": "Could not find user: designate18:38
ayoungHTF do I run Icehouse era unit tests?18:39
dstanekshewless: you get that on an auth?18:39
shewlessdstanek. Yes if I try "designate record-list" I get that error int he keystone logs (with debug on)18:42
dstanekshewless: can you paste your keystone logs into paste.openstack.org? 'designate record-list' isn't a keystone thing so i don't know what it's doing18:43
*** sdake has quit IRC18:45
shewlessdstanek: yes18:46
*** wasmum has quit IRC18:47
*** agireud has quit IRC18:47
shewlessdstanek: here you go: http://paste.ubuntu.com/23050348/18:48
*** wasmum has joined #openstack-keystone18:49
dstanekshewless: can you get a token for that user using the openstackclient?18:50
*** tonytan4ever has joined #openstack-keystone18:50
stevemarayoung: clone the keystone repo and switch to the stable/icehouse branch?18:50
shewlessdstanek: not sure how to do that18:51
ayoungstevemar, so, I've essentiall done that, albeit with our internal copy18:51
ayounglet me try with upstream and see if there is a difference18:51
dstanekshewless: or maybe even easier is to just use the curl commands http://docs.openstack.org/developer/keystone/api_curl_examples.html#default-scope18:52
ayoungstevemar, we only have   origin/master  origin/stable/liberty  origin/stable/mitaka18:53
openstackgerritAndreas Jaeger proposed openstack/keystone: Move other-requirements.txt to bindep.txt  https://review.openstack.org/35492118:53
ayoungthis is like, 2 releases before that18:53
*** agireud has joined #openstack-keystone18:55
*** tonytan4ever has quit IRC18:55
*** ravelar has joined #openstack-keystone18:56
*** diazjf1 has quit IRC18:57
stevemarayoung: "git checkout icehouse-eol"19:00
stevemarayoung: it's an unattached head or something19:00
ayoungahhh19:00
*** fifieldt has quit IRC19:03
openstackgerritDavid Stanek proposed openstack/keystone: WIP: region namespace POC for cache invalidation  https://review.openstack.org/34970419:06
dstanekshewless: any luck?19:07
*** thiagolib has quit IRC19:08
*** code-R has joined #openstack-keystone19:09
*** tonytan4ever has joined #openstack-keystone19:10
*** code-R_ has joined #openstack-keystone19:10
*** code-R has quit IRC19:13
openstackgerritAndreas Jaeger proposed openstack/python-keystoneclient: Move other-requirements.txt to bindep.txt  https://review.openstack.org/35501319:14
*** roxanaghe has quit IRC19:16
*** fifieldt has joined #openstack-keystone19:18
openstackgerritSamuel de Medeiros Queiroz proposed openstack/keystone: Detail Federation Assertion APIs in api-ref docs  https://review.openstack.org/35503919:20
*** ddieterly has joined #openstack-keystone19:21
*** pnavarro has joined #openstack-keystone19:36
*** messy has quit IRC19:40
*** xenogear has joined #openstack-keystone19:41
shewlessdstanek - not yet19:47
*** mvk has quit IRC19:54
*** adrian_otto has joined #openstack-keystone19:55
*** bknudson has left #openstack-keystone19:57
*** ravelar has quit IRC20:01
openstackgerritSamuel de Medeiros Queiroz proposed openstack/keystone: Detail Federation Auth APIs in api-ref docs  https://review.openstack.org/35505420:03
*** ddieterly has quit IRC20:04
openstackgerritLance Bragstad proposed openstack/keystone: Add create and update methods to credential Manager  https://review.openstack.org/35505620:05
openstackgerritLance Bragstad proposed openstack/keystone: Implement encryptin of credentials at rest  https://review.openstack.org/35505720:05
*** sigmavirus is now known as sigmavirus24|awa20:06
*** sigmavirus24|awa is now known as sigmavirus|away20:06
lbragstadstevemar around?20:07
stevemarlbragstad: you know it20:07
lbragstadstevemar thanks for the review here - https://review.openstack.org/#/c/354495/120:07
patchbotlbragstad: patch 354495 - keystone - Add conf to support credential encryption20:07
stevemarnp20:07
lbragstadstevemar I talked through this with dstanek20:07
lbragstadand I think we are going to rework it a bit20:07
stevemarlbragstad: oh?20:08
lbragstadstevemar what do you think about this - https://review.openstack.org/#/c/355057/1/keystone/conf/credential.py ?20:08
patchbotlbragstad: patch 355057 - keystone - Implement encryptin of credentials at rest20:08
*** spzala has quit IRC20:08
*** spzala has joined #openstack-keystone20:08
lbragstadstevemar then the upgrade process looks more like this instead - https://review.openstack.org/#/c/355057/1/keystone/cmd/cli.py20:08
patchbotlbragstad: patch 355057 - keystone - Implement encryptin of credentials at rest20:08
stevemarlbragstad: i'll confess i'm not sure why we need to rotate keys for this20:11
lbragstadstevemar yeah - dstanek brought up a good point20:11
*** gagehugo has left #openstack-keystone20:12
lbragstadrelated to credential fernet key rotation saying20:12
lbragstadbecause PCI might require a deployment to rotate more frequently20:12
*** gagehugo_ has joined #openstack-keystone20:12
stevemarah20:12
*** spzala has quit IRC20:13
lbragstadand without having fernet rotation done on disk - re-encrypting credentials would require you to roll all your keystone nodes20:13
lbragstad(because the keys are just values in config)20:13
lbragstadversus being files on disk point at from config20:13
*** gagehugo has joined #openstack-keystone20:15
*** gagehugo has quit IRC20:17
*** gagehugo_ has quit IRC20:17
*** gagehugo has joined #openstack-keystone20:17
lbragstadstevemar dolphm https://github.com/lbragstad/keystone-performance/issues/1420:18
*** gagehugo_ has joined #openstack-keystone20:18
lbragstaddolphm the variables for setting up the keystone performance service are here - https://github.com/lbragstad/keystone-performance/blob/master/setup_perf_host.yml#L3720:20
openstackgerritLance Bragstad proposed openstack/keystone: Implement encryption of credentials at rest  https://review.openstack.org/31716920:25
*** jorge_munoz has joined #openstack-keystone20:25
openstackgerritMerged openstack/keystone: [api] add relationship links to v3  https://review.openstack.org/35435320:26
*** rderose_ is now known as rderose20:27
*** jaugustine has left #openstack-keystone20:28
*** ezpz has quit IRC20:29
*** sdake has joined #openstack-keystone20:32
*** roxanaghe has joined #openstack-keystone20:36
*** haplo37_ has joined #openstack-keystone20:39
stevemarlbragstad: dolphm i imagine the bot picks up the latest from os-ansible?20:41
*** shewless has quit IRC20:44
*** agireud has quit IRC20:48
*** freerunner has quit IRC20:49
-openstackstatus- NOTICE: The Gerrit service on review.openstack.org is restarting for a scheduled upgrade, but should return to service momentarily: http://lists.openstack.org/pipermail/openstack-dev/2016-August/101394.html20:49
*** freerunner has joined #openstack-keystone20:51
*** agireud has joined #openstack-keystone20:55
*** raildo has quit IRC20:57
stevemarlbragstad: lemme know when its ready to rview20:57
-openstackstatus- NOTICE: The Mediawiki service at wiki.openstack.org will be offline from 21:00 UTC until approximately 23:00 UTC for a planned upgrade http://lists.openstack.org/pipermail/openstack-dev/2016-August/101395.html20:58
*** ChanServ changes topic to "The Mediawiki service at wiki.openstack.org will be offline from 21:00 UTC until approximately 23:00 UTC for a planned upgrade http://lists.openstack.org/pipermail/openstack-dev/2016-August/101395.html"20:58
*** esp has quit IRC20:59
lbragstadstevemar yeah21:00
lbragstadstevemar results just posted21:01
lbragstadstevemar and i merged https://github.com/lbragstad/keystone-performance/pull/1521:02
stevemarlbragstad: yay21:03
lbragstadstevemar i'm still not seeing a performance difference with that patch21:03
lbragstadstevemar I reran performance numbers though21:03
stevemarlbragstad: yeah :(21:03
*** pauloewerton has quit IRC21:03
*** jorge_munoz has quit IRC21:04
*** hockeynut has joined #openstack-keystone21:11
openstackgerritSteve Martinelli proposed openstack/keystone: add a header for the federation APIs  https://review.openstack.org/35508421:11
openstackgerritSamuel de Medeiros Queiroz proposed openstack/keystone: Detail Federation Mapping APIs in api-ref docs  https://review.openstack.org/35508521:12
samueldmqstevemar: ^ thanks for the approvals so far21:12
openstackgerritSteve Martinelli proposed openstack/keystone: add a header for the federation APIs  https://review.openstack.org/35508421:13
stevemarsamueldmq: ++21:16
*** edmondsw has quit IRC21:22
*** sdake has quit IRC21:23
*** esp has joined #openstack-keystone21:24
*** ddieterly has joined #openstack-keystone21:24
openstackgerritLance Bragstad proposed openstack/keystone: Pass key_repository and max_active_keys to FernetUtils  https://review.openstack.org/35376221:27
openstackgerritLance Bragstad proposed openstack/keystone: Add conf to support credential encryption  https://review.openstack.org/35449521:27
openstackgerritLance Bragstad proposed openstack/keystone: Add credential encryption exception  https://review.openstack.org/35449421:27
openstackgerritLance Bragstad proposed openstack/keystone: Make a FernetUtils class  https://review.openstack.org/35376121:27
openstackgerritLance Bragstad proposed openstack/keystone: Add create and update methods to credential Manager  https://review.openstack.org/35505621:27
openstackgerritLance Bragstad proposed openstack/keystone: Move fernet utils into keystone/common/  https://review.openstack.org/35370721:27
openstackgerritLance Bragstad proposed openstack/keystone: Implement encryption of credentials at rest  https://review.openstack.org/31716921:27
openstackgerritLance Bragstad proposed openstack/keystone: Create a fernet credential provider  https://review.openstack.org/35449621:27
openstackgerritSamuel de Medeiros Queiroz proposed openstack/keystone: Detail Fed Projects and Domains APIs in api-ref  https://review.openstack.org/35508921:29
*** ddieterly has quit IRC21:29
*** tonytan4ever has quit IRC21:30
*** ddieterly has joined #openstack-keystone21:31
openstackgerritDolph Mathews proposed openstack/keystone: Fix nits in PCI-DSS Minimum password age requirements  https://review.openstack.org/35509521:37
*** jorge_munoz has joined #openstack-keystone21:37
*** adu has joined #openstack-keystone21:38
*** spzala has joined #openstack-keystone21:39
*** spzala has quit IRC21:44
*** adu has quit IRC21:44
*** jistr has quit IRC21:47
*** adu has joined #openstack-keystone21:48
*** haplo37_ has quit IRC21:50
*** jistr has joined #openstack-keystone21:51
samueldmqstevemar: what is the relay_state_prefix of a sp21:55
samueldmq?21:55
*** jistr has quit IRC22:00
samueldmqstevemar: nvm, just found a config with taht name and saw its help text22:04
*** spzala has joined #openstack-keystone22:08
*** jistr has joined #openstack-keystone22:09
*** michauds has quit IRC22:11
*** spzala has quit IRC22:17
*** spzala has joined #openstack-keystone22:17
*** jistr has quit IRC22:19
openstackgerritSamuel de Medeiros Queiroz proposed openstack/keystone: Detail Federation Service Provider APIs in api-ref  https://review.openstack.org/35510222:21
samueldmqstevemar: last one ^ .... for nwo :)22:22
*** spzala has quit IRC22:23
openstackgerritMerged openstack/keystone: api-ref: Renaming parameters of V3-ext APIs  https://review.openstack.org/35385522:23
*** tonytan4ever has joined #openstack-keystone22:25
*** jistr has joined #openstack-keystone22:25
openstackgerrithenry-nash proposed openstack/keystone: Add support for rolling upgrades to keystone-manage  https://review.openstack.org/34971622:31
*** pnavarro has quit IRC22:32
openstackgerritMerged openstack/keystone: Add basic upgrade documentation  https://review.openstack.org/35034122:35
*** adu has quit IRC22:43
*** adrian_otto has quit IRC22:43
*** diazjf has joined #openstack-keystone22:45
openstackgerrithenry-nash proposed openstack/keystone: Add migration helper logic for rolling upgrades  https://review.openstack.org/35375322:46
*** spzala has joined #openstack-keystone22:48
*** code-R_ has quit IRC22:50
*** ddieterly has quit IRC22:50
*** ddieterly has joined #openstack-keystone22:52
openstackgerrithenry-nash proposed openstack/keystone: Add contract migrations to keystone-manage  https://review.openstack.org/34993922:52
*** markvoelker has quit IRC22:53
*** ddieterly has quit IRC22:55
*** adrian_otto has joined #openstack-keystone22:55
*** adrian_otto has quit IRC22:56
*** adrian_otto has joined #openstack-keystone22:58
-openstackstatus- NOTICE: ok https://wiki.openstack.org/ is now running Mediawiki 1.27.0; please let us know in #openstack-infra if anything seems wrong23:00
*** ChanServ changes topic to "ok https://wiki.openstack.org/ is now running Mediawiki 1.27.0; please let us know in #openstack-infra if anything seems wrong"23:00
*** adrian_otto has quit IRC23:00
*** spedione is now known as spedione|AWAY23:03
*** ChanServ changes topic to "Newton Deadlines: http://releases.openstack.org/newton/schedule.html | Meeting Agenda https://etherpad.openstack.org/p/keystone-weekly-meeting"23:06
-openstackstatus- NOTICE: https://wiki.openstack.org/ is now running Mediawiki 1.27.0; please let us know in #openstack-infra if anything seems wrong23:06
openstackgerrithenry-nash proposed openstack/keystone: POC of data migration using database triggers  https://review.openstack.org/35434323:07
openstackgerrithenry-nash proposed openstack/keystone: POC of data migration using database triggers  https://review.openstack.org/35434323:14
*** adrian_otto has joined #openstack-keystone23:18
*** pgbridge has quit IRC23:18
*** adrian_otto has quit IRC23:21
*** adrian_otto has joined #openstack-keystone23:28
*** Gorian_ is now known as Gorian|work23:29
*** sdake has joined #openstack-keystone23:33
*** hockeynut has quit IRC23:35
*** gagehugo has quit IRC23:35
openstackgerritDavid Stanek proposed openstack/keystone: WIP: region namespace POC for cache invalidation  https://review.openstack.org/34970423:38
openstackgerritDavid Stanek proposed openstack/keystone: Add debug logging to revocation event checking  https://review.openstack.org/35374223:38
*** Gorian|work has quit IRC23:39
*** agireud has quit IRC23:44
*** roxanaghe has quit IRC23:46
*** diazjf1 has joined #openstack-keystone23:46
*** diazjf has quit IRC23:47
*** agireud has joined #openstack-keystone23:53
*** markvoelker has joined #openstack-keystone23:54
*** roxanaghe has joined #openstack-keystone23:55
*** markvoelker has quit IRC23:59

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!