| *** LiYuenan has joined #openstack-keystone | 00:03 | |
| *** Viswanath has joined #openstack-keystone | 00:10 | |
| *** jamielennox is now known as jamielennox|away | 00:14 | |
| *** Viswanath has quit IRC | 00:16 | |
| *** Marcellin__ has quit IRC | 00:18 | |
| *** jefrite has joined #openstack-keystone | 00:19 | |
| *** _cjones_ has quit IRC | 00:22 | |
| *** _cjones_ has joined #openstack-keystone | 00:23 | |
| *** _cjones_ has quit IRC | 00:28 | |
| *** agrebennikov has quit IRC | 00:35 | |
| *** adrian_otto has joined #openstack-keystone | 00:36 | |
| openstackgerrit | Kevin Benton proposed openstack/oslo.policy: Fix _cycle_check to ignore duplicate references https://review.openstack.org/394688 | 00:38 |
|---|---|---|
| openstackgerrit | Kevin Benton proposed openstack/oslo.policy: Fix _cycle_check to ignore duplicate references https://review.openstack.org/394688 | 00:38 |
| *** adrian_otto has quit IRC | 00:39 | |
| *** markvoelker has quit IRC | 00:39 | |
| *** adrian_otto has joined #openstack-keystone | 00:41 | |
| *** adrian_otto has quit IRC | 00:42 | |
| *** adrian_otto has joined #openstack-keystone | 00:43 | |
| *** adrian_otto has quit IRC | 00:46 | |
| *** adrian_otto has joined #openstack-keystone | 00:46 | |
| *** esp has quit IRC | 00:52 | |
| *** woodster_ has quit IRC | 00:55 | |
| *** hoangcx has joined #openstack-keystone | 01:12 | |
| *** diazjf has joined #openstack-keystone | 01:13 | |
| *** abhishek_k has quit IRC | 01:13 | |
| *** diazjf has quit IRC | 01:14 | |
| *** abhishek_k has joined #openstack-keystone | 01:15 | |
| *** adrian_otto has quit IRC | 01:16 | |
| *** ayoung has joined #openstack-keystone | 01:20 | |
| *** ChanServ sets mode: +v ayoung | 01:20 | |
| *** trananhkma has quit IRC | 01:22 | |
| *** adrian_otto has joined #openstack-keystone | 01:27 | |
| *** oomichi has quit IRC | 01:28 | |
| *** oomichi has joined #openstack-keystone | 01:29 | |
| *** adrian_otto has quit IRC | 01:33 | |
| *** trananhkma has joined #openstack-keystone | 01:39 | |
| *** markvoelker has joined #openstack-keystone | 01:40 | |
| morgan_ | mordred: just saw the email re more languages (and your notes on keystoneauth). I wonder how to handle the cross-language support. I am worried that <new language> will lag because of a lack of interest in maintaining it. I don't know if there is a good x-lang thing we can use (like protobuf can compile to many languages) for something that has as much logic | 01:40 |
| morgan_ | as keystoneauth does | 01:40 |
| morgan_ | I shall respond to that email as well | 01:41 |
| *** markvoelker has quit IRC | 01:45 | |
| morgan_ | mordred: email sent | 01:49 |
| *** oomichi has quit IRC | 01:54 | |
| *** oomichi has joined #openstack-keystone | 01:55 | |
| *** ayoung has quit IRC | 02:02 | |
| openstackgerrit | Xu Ao proposed openstack/oslo.policy: Fix a code logic while doing cyclical reference check to the policy https://review.openstack.org/391370 | 02:05 |
| *** jascott1 has joined #openstack-keystone | 02:07 | |
| openstackgerrit | Xu Ao proposed openstack/oslo.policy: Fix a code logic while doing cyclical reference check to the policy https://review.openstack.org/391370 | 02:20 |
| *** ravelar has quit IRC | 02:34 | |
| *** esp has joined #openstack-keystone | 02:38 | |
| stevemar | morgan_: email eh | 02:43 |
| morgan_ | stevemar: yesh | 02:43 |
| stevemar | morgan_: intriguing | 02:44 |
| stevemar | morgan_: can you punt https://review.openstack.org/#/c/392167/ through the uprights? | 03:01 |
| morgan_ | done] | 03:01 |
| *** esp has left #openstack-keystone | 03:01 | |
| *** adrian_otto has joined #openstack-keystone | 03:07 | |
| stevemar | \o/ | 03:19 |
| *** adrian_otto has quit IRC | 03:26 | |
| *** ayoung has joined #openstack-keystone | 03:37 | |
| *** ChanServ sets mode: +v ayoung | 03:37 | |
| *** markvoelker has joined #openstack-keystone | 03:41 | |
| openstackgerrit | Merged openstack/keystonemiddleware: Mock log only after app creation https://review.openstack.org/392167 | 03:45 |
| *** markvoelker has quit IRC | 03:46 | |
| *** ayoung has quit IRC | 03:54 | |
| *** ayoung has joined #openstack-keystone | 03:56 | |
| *** ChanServ sets mode: +v ayoung | 03:56 | |
| *** links has joined #openstack-keystone | 04:00 | |
| *** dikonoor has joined #openstack-keystone | 04:01 | |
| *** dave-mccowan has quit IRC | 04:01 | |
| *** spzala has quit IRC | 04:05 | |
| *** ayoung has quit IRC | 04:06 | |
| *** nicolasbock has quit IRC | 04:22 | |
| *** ravelar has joined #openstack-keystone | 05:00 | |
| *** ravelar has quit IRC | 05:05 | |
| *** odyssey4me has quit IRC | 05:17 | |
| *** odyssey4me has joined #openstack-keystone | 05:18 | |
| *** sc68cal has quit IRC | 05:19 | |
| *** sc68cal has joined #openstack-keystone | 05:19 | |
| *** jperry has joined #openstack-keystone | 05:42 | |
| *** rcernin has joined #openstack-keystone | 05:54 | |
| *** zhangjl has joined #openstack-keystone | 05:56 | |
| *** GB21 has joined #openstack-keystone | 06:01 | |
| *** spzala has joined #openstack-keystone | 06:06 | |
| *** spzala has quit IRC | 06:10 | |
| *** jaosorior has joined #openstack-keystone | 06:20 | |
| openstackgerrit | zhangyanxian proposed openstack/python-keystoneclient: Fix typo in httpclient.py https://review.openstack.org/394778 | 06:23 |
| openstackgerrit | zhangyanxian proposed openstack/python-keystoneclient: Fix typo in httpclient.py https://review.openstack.org/394778 | 06:25 |
| *** jaosorior has quit IRC | 06:32 | |
| *** jaosorior has joined #openstack-keystone | 06:33 | |
| *** hoangcx has quit IRC | 06:39 | |
| *** richm has quit IRC | 06:41 | |
| *** markvoelker has joined #openstack-keystone | 06:43 | |
| *** markvoelker has quit IRC | 06:47 | |
| *** hoangcx has joined #openstack-keystone | 06:48 | |
| *** belmoreira has joined #openstack-keystone | 06:50 | |
| *** pcaruana has joined #openstack-keystone | 06:53 | |
| *** namnh has joined #openstack-keystone | 07:00 | |
| *** tesseract has joined #openstack-keystone | 07:03 | |
| *** tesseract is now known as Guest6570 | 07:03 | |
| *** david-lyle has quit IRC | 07:03 | |
| *** dikonoor has quit IRC | 07:11 | |
| *** adriant has quit IRC | 07:21 | |
| *** tobberydberg has joined #openstack-keystone | 07:35 | |
| *** aloga_ has joined #openstack-keystone | 07:37 | |
| *** tobbery__ has joined #openstack-keystone | 07:55 | |
| *** tobberydberg has quit IRC | 07:59 | |
| *** jperry has quit IRC | 08:21 | |
| *** links has quit IRC | 08:29 | |
| *** jpich has joined #openstack-keystone | 08:34 | |
| *** amoralej|off is now known as amoralej | 08:39 | |
| *** markvoelker has joined #openstack-keystone | 08:43 | |
| *** links has joined #openstack-keystone | 08:44 | |
| *** tobbery__ has quit IRC | 08:47 | |
| *** markvoelker has quit IRC | 08:48 | |
| *** zzzeek has quit IRC | 09:00 | |
| *** zzzeek has joined #openstack-keystone | 09:00 | |
| *** spzala has joined #openstack-keystone | 09:06 | |
| *** khamtamtun has joined #openstack-keystone | 09:07 | |
| *** dikonoor has joined #openstack-keystone | 09:08 | |
| *** khamtamtun has quit IRC | 09:10 | |
| *** links has quit IRC | 09:10 | |
| *** spzala has quit IRC | 09:11 | |
| *** mvk has quit IRC | 09:20 | |
| *** links has joined #openstack-keystone | 09:24 | |
| *** asettle has joined #openstack-keystone | 09:40 | |
| *** aloga_ has quit IRC | 09:41 | |
| *** dikonoor has quit IRC | 09:47 | |
| *** mvk has joined #openstack-keystone | 09:49 | |
| *** pcaruana has quit IRC | 09:51 | |
| *** aloga_ has joined #openstack-keystone | 09:58 | |
| *** namnh has quit IRC | 10:02 | |
| *** hoangcx has quit IRC | 10:10 | |
| *** david_cu has quit IRC | 10:20 | |
| *** wasmum has quit IRC | 10:21 | |
| *** wasmum has joined #openstack-keystone | 10:24 | |
| *** jperry has joined #openstack-keystone | 10:32 | |
| *** maestropandy has joined #openstack-keystone | 10:38 | |
| *** maestropandy has left #openstack-keystone | 10:41 | |
| *** zhangjl has quit IRC | 10:58 | |
| *** richm has joined #openstack-keystone | 11:10 | |
| *** tobberydberg has joined #openstack-keystone | 11:17 | |
| *** aloga_ has quit IRC | 11:17 | |
| *** mvk has quit IRC | 11:33 | |
| *** nicolasbock has joined #openstack-keystone | 11:35 | |
| *** dikonoor has joined #openstack-keystone | 11:44 | |
| *** mvk has joined #openstack-keystone | 11:45 | |
| *** LiYuenan1 has joined #openstack-keystone | 11:53 | |
| *** LiYuenan has quit IRC | 11:56 | |
| *** LiYuenan1 is now known as LiYuenan | 11:56 | |
| *** khamtamtun has joined #openstack-keystone | 12:00 | |
| *** amoralej is now known as amoralej|lunch | 12:00 | |
| *** khamtamtun has quit IRC | 12:05 | |
| *** khamtamtun has joined #openstack-keystone | 12:05 | |
| *** khamtamtun has quit IRC | 12:07 | |
| *** khamtamtun has joined #openstack-keystone | 12:17 | |
| *** aloga_ has joined #openstack-keystone | 12:21 | |
| *** aloga_ has quit IRC | 12:21 | |
| *** aloga_ has joined #openstack-keystone | 12:21 | |
| *** aloga_ has quit IRC | 12:23 | |
| *** aloga_ has joined #openstack-keystone | 12:23 | |
| *** rodrigods has quit IRC | 12:25 | |
| *** rodrigods has joined #openstack-keystone | 12:25 | |
| *** LiYuenan has quit IRC | 12:34 | |
| *** david-lyle has joined #openstack-keystone | 12:37 | |
| *** GB21 has quit IRC | 12:38 | |
| dstanek | good morning keystone | 12:41 |
| *** markvoelker has joined #openstack-keystone | 12:45 | |
| *** tobberydberg has quit IRC | 12:47 | |
| *** Kimmo__ has quit IRC | 12:48 | |
| *** markvoelker has quit IRC | 12:50 | |
| *** aloga_ has quit IRC | 12:58 | |
| *** trananhkma has quit IRC | 13:02 | |
| *** khamtamtun has quit IRC | 13:02 | |
| raildo | dstanek, morning :) | 13:05 |
| *** spzala has joined #openstack-keystone | 13:06 | |
| *** jperry has quit IRC | 13:09 | |
| *** spzala has quit IRC | 13:11 | |
| *** markvoelker has joined #openstack-keystone | 13:14 | |
| *** lamt has joined #openstack-keystone | 13:21 | |
| openstackgerrit | Merged openstack/python-keystoneclient: Fix typo in httpclient.py https://review.openstack.org/394778 | 13:22 |
| *** aloga_ has joined #openstack-keystone | 13:27 | |
| *** david-lyle has quit IRC | 13:29 | |
| *** links has quit IRC | 13:33 | |
| *** amoralej|lunch is now known as amoralej | 13:34 | |
| *** khamtamtun has joined #openstack-keystone | 13:42 | |
| *** khamtamtun has quit IRC | 13:43 | |
| *** edmondsw has joined #openstack-keystone | 13:47 | |
| *** openstackgerrit has quit IRC | 13:48 | |
| *** openstackgerrit has joined #openstack-keystone | 13:48 | |
| *** spzala has joined #openstack-keystone | 13:51 | |
| bknudson | stevemar: thanks for removing keystone from https://bugs.launchpad.net/neutron/+bug/1082248 | 13:51 |
| openstack | Launchpad bug 1082248 in tacker "Use uuidutils instead of uuid.uuid4()" [Undecided,In progress] - Assigned to bailin.zhang (bailin-zhang) | 13:51 |
| stevemar | bknudson: yeah, that wasn't gonna happen | 13:52 |
| *** aloga_ has quit IRC | 14:05 | |
| *** dave-mccowan has joined #openstack-keystone | 14:14 | |
| *** Marcellin__ has joined #openstack-keystone | 14:16 | |
| *** tobberydberg has joined #openstack-keystone | 14:18 | |
| *** agrebennikov has joined #openstack-keystone | 14:22 | |
| *** tobberydberg has quit IRC | 14:23 | |
| *** ravelar has joined #openstack-keystone | 14:23 | |
| *** jperry has joined #openstack-keystone | 14:23 | |
| *** jaosorior has quit IRC | 14:27 | |
| *** dikonoor has quit IRC | 14:38 | |
| *** agrebennikov has quit IRC | 14:46 | |
| *** Kimmo__ has joined #openstack-keystone | 14:46 | |
| *** catintheroof has joined #openstack-keystone | 14:57 | |
| knikolla | o/ | 14:58 |
| rodrigods | hey knikolla | 15:00 |
| rodrigods | what do you think about writing a spec detailing the steps to be taken for the devstack plugins + tests? | 15:00 |
| *** adrian_otto has joined #openstack-keystone | 15:01 | |
| *** adrian_otto has quit IRC | 15:01 | |
| rodrigods | stevemar, ^ | 15:01 |
| knikolla | rodrigods: was going to do that today :) | 15:01 |
| rodrigods | knikolla, awesome :) | 15:01 |
| *** adrian_otto has joined #openstack-keystone | 15:01 | |
| stevemar | i thought we already had one? | 15:02 |
| knikolla | rodrigods: also, do you mind giving the devstack plugin a spin? it needs a few minor tweaks to completely work, but you're more experienced on setting up federation so i'd appreciate the help. | 15:03 |
| rodrigods | stevemar, to detail the steps taken... like: first introduce a plugin that talks with testshib.org, then .... and so on | 15:04 |
| openstackgerrit | Colleen Murphy proposed openstack/ldappool: Expose SERVER_DOWN if connection fails https://review.openstack.org/395013 | 15:04 |
| rodrigods | knikolla, sure | 15:04 |
| rodrigods | knikolla, the testshib one? | 15:04 |
| *** edtubill has joined #openstack-keystone | 15:04 | |
| knikolla | rodrigods: yes. | 15:05 |
| knikolla | rodrigods: save for updating the shibollet2.xml to have the host_ip, and uploading the metadata to testshib, i'm unsure on what's missing to get it to work. | 15:06 |
| knikolla | rodrigods: i go to v3/os-federation/identity_providers/testshib/protocol/mapped/auth and i get redirected to testshib, but when testshib sends me back i get a 404 | 15:07 |
| knikolla | shibboleth* | 15:07 |
| *** tobberyd_ has joined #openstack-keystone | 15:11 | |
| rodrigods | knikolla, hmm what is the address it is sending you back? | 15:11 |
| knikolla | the same v3/os-federation/identity_providers/testshib/protocol/mapped/auth | 15:12 |
| openstackgerrit | Richard Avelar proposed openstack/keystone: Validate consumer_id exists directly https://review.openstack.org/388842 | 15:12 |
| knikolla | (uppercase where needed, i was lazy when writing the message) | 15:12 |
| knikolla | protocols* | 15:12 |
| *** tobberyd_ has quit IRC | 15:15 | |
| *** agrebennikov has joined #openstack-keystone | 15:15 | |
| rodrigods | knikolla, hmm is the keystone port on the URL? | 15:18 |
| *** david-lyle has joined #openstack-keystone | 15:29 | |
| *** jaugustine has joined #openstack-keystone | 15:32 | |
| *** adrian_otto has quit IRC | 15:32 | |
| *** david-lyle has quit IRC | 15:34 | |
| openstackgerrit | ayoung proposed openstack/keystone: Support AD Nested groups https://review.openstack.org/389316 | 15:40 |
| *** phalmos has joined #openstack-keystone | 15:41 | |
| *** chris_hultin|AWA is now known as chris_hultin | 15:43 | |
| *** phalmos_ has joined #openstack-keystone | 15:44 | |
| *** chris_hultin is now known as chris_hultin|AWA | 15:44 | |
| *** phalmos has quit IRC | 15:46 | |
| *** chris_hultin|AWA is now known as chris_hultin | 15:46 | |
| *** adrian_otto has joined #openstack-keystone | 15:46 | |
| *** adrian_otto has quit IRC | 15:47 | |
| *** ayoung has joined #openstack-keystone | 15:52 | |
| *** ChanServ sets mode: +v ayoung | 15:52 | |
| *** adrian_otto has joined #openstack-keystone | 15:57 | |
| *** belmoreira has quit IRC | 15:58 | |
| *** Guest6570 has quit IRC | 16:01 | |
| *** diazjf has joined #openstack-keystone | 16:05 | |
| *** henrynash has left #openstack-keystone | 16:05 | |
| *** henrynash_ has joined #openstack-keystone | 16:06 | |
| *** ChanServ sets mode: +v henrynash_ | 16:06 | |
| *** henrynash_ has quit IRC | 16:06 | |
| *** rcernin has quit IRC | 16:20 | |
| *** edtubill has quit IRC | 16:21 | |
| *** edtubill has joined #openstack-keystone | 16:28 | |
| openstackgerrit | Richard Avelar proposed openstack/keystone: Doc warning for keystone db migration https://review.openstack.org/394603 | 16:35 |
| *** iurygregory has left #openstack-keystone | 16:35 | |
| *** iurygregory has joined #openstack-keystone | 16:35 | |
| openstackgerrit | Boris Bobrov proposed openstack/keystone-specs: [wip] Quota limits https://review.openstack.org/363765 | 16:48 |
| *** ravelar has quit IRC | 16:52 | |
| *** rcernin has joined #openstack-keystone | 16:55 | |
| *** _cjones_ has joined #openstack-keystone | 16:58 | |
| *** jaugustine has quit IRC | 17:01 | |
| *** mvk has quit IRC | 17:07 | |
| stevemar | just a heads up for folks in regions that observe day light savings, the keystone meeting will be in 50 minutes | 17:09 |
| lbragstad | stevemar ++ it gets me everytime | 17:09 |
| stevemar | ajayaa, amakarov, ayoung, breton, browne, crinkle, claudiub, davechen, david8hu, dolphm, dstanek, edmondsw, gagehugo, gyee, henrynash, hogepodge, htruta, jamielennox, jaugustine, jgrassler, joesavak, jorge_munoz, knikolla, lbragstad, MaxPC, morgan, nishaYadav, nkinder, notmorgan, raildo, ravelar, rodrigods, rderose, roxanaghe, samleon, samueldmq, shaleh, stevemar, tsymanczyk, topol, vivekd, wanghong, xek, StefanPae | 17:09 |
| stevemar | towJisc ^ heads up the keystone meeting is in 50 minutes this week if you do daylight savings | 17:09 |
| gagehugo | oh | 17:10 |
| gagehugo | yeah that is right | 17:10 |
| samueldmq | stevemar: I thought the call was about it happening right now :) | 17:10 |
| gagehugo | :( 12 PM meeting | 17:10 |
| lbragstad | gagehugo yup - lunch meetings until spring | 17:11 |
| knikolla | stevemar: there goes my lunch :P | 17:11 |
| stevemar | knikolla: yep, same | 17:11 |
| stevemar | knikolla: i gotta scarf down some food now | 17:12 |
| ayoung | Daylight savings time! | 17:14 |
| *** ravelar has joined #openstack-keystone | 17:18 | |
| raildo | o/ | 17:22 |
| *** rcernin has quit IRC | 17:29 | |
| *** edtubill has quit IRC | 17:30 | |
| *** jamielennox|away is now known as jamielennox | 17:30 | |
| *** edtubill has joined #openstack-keystone | 17:31 | |
| *** Zer0Byte__ has joined #openstack-keystone | 17:33 | |
| *** jpich has quit IRC | 17:34 | |
| stevemar | ayoung: more like ruiner of children sleep schedule time | 17:34 |
| *** jamielennox is now known as jamielennox|away | 17:39 | |
| *** ravelar has quit IRC | 17:44 | |
| *** david-lyle has joined #openstack-keystone | 17:46 | |
| openstackgerrit | Eric Brown proposed openstack/keystonemiddleware: Deprecate PKI token format options https://review.openstack.org/391405 | 17:46 |
| knikolla | subway almost charged me 14000$ for a sandwich o.O | 17:46 |
| openstackgerrit | Eric Brown proposed openstack/keystonemiddleware: Deprecate PKI token format options https://review.openstack.org/391405 | 17:47 |
| lbragstad | knikolla those sandwiches aren't nearly that good | 17:48 |
| lbragstad | Subway - $14,000 footlongs, everyday! | 17:49 |
| knikolla | lbragstad: it wasn't even a footlong one! | 17:49 |
| lbragstad | knikolla ouch | 17:49 |
| *** diazjf has quit IRC | 17:52 | |
| lbragstad | nevermind - figured it out | 17:53 |
| *** nk2527 has joined #openstack-keystone | 17:56 | |
| stevemar | meeting time! ajayaa, amakarov, ayoung, breton, browne, crinkle, claudiub, davechen, david8hu, dolphm, dstanek, edmondsw, gagehugo, gyee, henrynash, hogepodge, htruta, jamielennox, jaugustine, jgrassler, joesavak, jorge_munoz, knikolla, lbragstad, MaxPC, morgan, nishaYadav, nkinder, notmorgan, raildo, ravelar, rodrigods, rderose, roxanaghe, samleon, samueldmq, shaleh, stevemar, tsymanczyk, topol, vivekd, wanghong, | 17:58 |
| stevemar | xek, StefanPaetowJisc | 17:58 |
| *** mvk has joined #openstack-keystone | 17:59 | |
| *** spilla has joined #openstack-keystone | 17:59 | |
| raildo | here we go again \o/ | 17:59 |
| *** browne has joined #openstack-keystone | 17:59 | |
| *** henrynash has joined #openstack-keystone | 18:00 | |
| *** ChanServ sets mode: +v henrynash | 18:00 | |
| *** henrynash has left #openstack-keystone | 18:00 | |
| *** henrynash_ has joined #openstack-keystone | 18:00 | |
| *** ChanServ sets mode: +v henrynash_ | 18:00 | |
| *** jperry has quit IRC | 18:00 | |
| *** asettle has quit IRC | 18:06 | |
| *** jperry has joined #openstack-keystone | 18:10 | |
| *** ravelar has joined #openstack-keystone | 18:14 | |
| *** adrian_otto has quit IRC | 18:15 | |
| openstackgerrit | Merged openstack/keystone-specs: Add reason to notifications for PCI-DSS events https://review.openstack.org/381302 | 18:25 |
| *** ravelar has quit IRC | 18:36 | |
| openstackgerrit | Merged openstack/keystone-specs: PCI-DSS Expired Password Users https://review.openstack.org/383832 | 18:37 |
| *** agrebennikov has quit IRC | 18:44 | |
| *** david-lyle_ has joined #openstack-keystone | 18:47 | |
| *** david-lyle_ has quit IRC | 18:53 | |
| openstackgerrit | Matt Fischer proposed openstack/keystone: cache_on_issue default to true https://review.openstack.org/383333 | 18:55 |
| *** jaugustine has joined #openstack-keystone | 18:57 | |
| lbragstad | are the properties in the user case things we should make official to the project? | 19:00 |
| dstanek | stevemar: in your mind what is the usecase? a formal api for extras? | 19:00 |
| ayoung | dstanek, care to add a -2 to mine to reinforce the statement? | 19:00 |
| dstanek | ayoung: i haven't yet because you are did that, but i can | 19:01 |
| stevemar | ayoung: i have 100,000 projects, how in the word do i list the 500 i have deemed are "development" | 19:02 |
| stevemar | dstanek: ^ | 19:02 |
| ayoung | stevemar, deemed develpoment by whom? | 19:02 |
| dstanek | stevemar: who controls the tag that says it's in development? | 19:02 |
| stevemar | ayoung: my cloud admin | 19:02 |
| ayoung | stevemar, then the cloud admin organizes they way she wants them | 19:02 |
| dstanek | extras can be change by non-cloud admins | 19:02 |
| gagehugo | dstanek, something we want to move from | 19:03 |
| ayoung | what does that mean that they are "development"? | 19:03 |
| ayoung | do they get billed differently? | 19:03 |
| ayoung | different QoS? | 19:03 |
| ayoung | not allowed to connect to the live network? | 19:03 |
| stevemar | sure, any one of those are a good reason | 19:03 |
| dstanek | gagehugo: that's my point. this isn't an api for extras | 19:03 |
| dstanek | it's different and more complex | 19:03 |
| ayoung | stevemar, none of those are Keystone concerns | 19:03 |
| edtubill | stevemar: when is the horizon/keystone meeting again? Is it happening today? | 19:04 |
| *** adrian_otto has joined #openstack-keystone | 19:04 | |
| stevemar | but they are keystone resources | 19:04 |
| lbragstad | edtubill https://review.openstack.org/#/c/395106/ | 19:04 |
| robcresswell | edtubill: In an hour | 19:04 |
| gagehugo | dstanek: its not, it's a way to move away from extras for projects | 19:04 |
| stevemar | edtubill: today it's in 1 hour i believe, the rest of the weeks it'll be now | 19:04 |
| *** asettle has joined #openstack-keystone | 19:04 | |
| lbragstad | stevemar what channel? | 19:04 |
| gagehugo | because throwing stuff in extras sucks | 19:04 |
| stevemar | lbragstad: #openstack-meeting-cp | 19:04 |
| lbragstad | robcresswell edtubill stevemar i proposed the meeting to take place in #openstack-meeting-cp | 19:04 |
| lbragstad | ok | 19:04 |
| stevemar | lbragstad: thats fine | 19:04 |
| lbragstad | i proposed the time to be right after the keystone meeting | 19:05 |
| dstanek | gagehugo: exactly. i said "this isn't an api for extras" | 19:05 |
| edtubill | stevemar: oh okay so it's different for just today thx | 19:05 |
| robcresswell | Why is it an hour later today? Just curious | 19:05 |
| stevemar | edtubill: yeah | 19:05 |
| ayoung | gagehugo, then throw things in the right database for the problem you are going to solve. Project ID should be a field on those databases | 19:05 |
| stevemar | robcresswell: cause we dont want future meetings to conflict with the tc meeting | 19:05 |
| breton | ayoung: you are suggesting to implement logic that is expected from openstack outside of openstack | 19:05 |
| dstanek | lbragstad: is it now? | 19:05 |
| lbragstad | robcresswell edtubill stevemar the 1 hour difference is my fault... i can switch the official time if needed | 19:05 |
| ayoung | building a generic schema into Keystone for Billing, or VM policy belong in those projects | 19:06 |
| ayoung | breton, last I checked those were projects within OpenStack | 19:06 |
| ayoung | Policy is congress, Billing is cloud Kitty | 19:06 |
| stevemar | lbragstad: no, david-lyle brought up a good point, let's keep it for now, and see if r1chardj0n3s can still make it if we bump it by an hour | 19:06 |
| lbragstad | stevemar so keep it at 1900 in #openstack-meeting-cp? | 19:06 |
| robcresswell | stevemar: Right, I meant why was this one specifically later, since it collides. But I guess it was just a collision that nobody noticed at the time | 19:06 |
| stevemar | ayoung: https://www.openstack.org/software/project-navigator/ | 19:07 |
| stevemar | ayoung: congress 1% | 19:07 |
| stevemar | cloudkitty... | 19:07 |
| lbragstad | robcresswell edtubill stevemar dstanek 2000 and 1900 UTC are both open times in #openstack-meeting-cp according the irc-meeting repository tests | 19:07 |
| breton | ayoung: this is a feature that deployers want out of the box. They don't want to code storing things in swift or anywhere else | 19:07 |
| stevemar | operators everywhere: we want this | 19:08 |
| ayoung | breton, they want magic. THere is no magic | 19:08 |
| stevemar | ayoung: no you're wrong | 19:08 |
| stevemar | thats how they see it | 19:08 |
| ayoung | stevemar, frequently, but not about this | 19:08 |
| stevemar | ayoung: i mean that's what you are telling our operators | 19:08 |
| breton | i don't know any person in mirantis who worked with cloudkitty or congress | 19:08 |
| stevemar | they are telling you exactly what they want | 19:08 |
| stevemar | and you are insisting they are wrong | 19:09 |
| ayoung | stevemar, say we have tags. 1: who gets to define what the standard tags are and 2: who gets to add a tag to a projects | 19:09 |
| ayoung | cuz 1 is going to cause Havoc | 19:09 |
| stevemar | cloud admin and project owner | 19:09 |
| dstanek | stevemar: they want a generic way to add arbitrary data to resources? | 19:09 |
| ayoung | stevemar, so wrong on 2 | 19:09 |
| stevemar | let people change their policy | 19:09 |
| ayoung | project owner cannot say "ah, I am going to say my project is in the low-billing category" | 19:09 |
| ayoung | an admin manages inside their project | 19:09 |
| stevemar | dstanek: yes, read http://lists.openstack.org/pipermail/openstack-dev/2016-November/106839.html | 19:09 |
| robcresswell | lbragstad: Yes, but the TC meeting is Tuesday at 2000. So we dont want to collide, regardless of the actual meeting room availability :) | 19:10 |
| *** ravelar has joined #openstack-keystone | 19:10 | |
| lbragstad | robcresswell oh - right... good point | 19:10 |
| breton | dstanek: not arbitrary. (string)key: (string)value. No one is going to put json or stuff like that. | 19:10 |
| stevemar | i'll say this as simply as i can. every operator wants this, and we as a team are telling them they are wrong. it's so ass backwards i can't believe i have to explain this | 19:11 |
| *** agrebennikov has joined #openstack-keystone | 19:11 | |
| lbragstad | robcresswell makse sense.. i'll keep it at 1900 in #openstack-meeting-cp | 19:11 |
| dstanek | ayoung: exactly. there would have to be a defined schema. these keys (billing_code, etc) are editable by cloud admin, these keys (something,whatever,etc) are for the domain admin, yet others for project owner | 19:11 |
| stevemar | i'm done, see people in an hour | 19:11 |
| *** amoralej is now known as amoralej|off | 19:11 | |
| dstanek | stevemar: i think we need to really think about what that spec means | 19:11 |
| breton | i want this because i had to review implementration it downstream. In our case properties were editable the same way project's description is editable. | 19:13 |
| openstackgerrit | Steve Martinelli proposed openstack/keystone-specs: Optional MFA via password + TOTP auth plugin https://review.openstack.org/345113 | 19:13 |
| dstanek | i'm not saying a flat out no, but that spec is definitely lacking | 19:13 |
| gagehugo | dstanek: please comment on it | 19:14 |
| dstanek | gagehugo: i did a few times. how do you address my questions above? has that been thought about? | 19:15 |
| *** ayoung has quit IRC | 19:16 | |
| dstanek | breton: not having a list of keys in advance is arbitrary...i'm not talking about the specific values | 19:16 |
| *** ayoung has joined #openstack-keystone | 19:17 | |
| *** ChanServ sets mode: +v ayoung | 19:17 | |
| gagehugo | dstanek: do you mean a defined schema for keys? | 19:19 |
| openstackgerrit | Merged openstack/keystone-specs: Optional MFA via password + TOTP auth plugin https://review.openstack.org/345113 | 19:19 |
| dstanek | gagehugo: yes | 19:19 |
| breton | dstanek: what's the problem with having lowercase alphabetic arbitrary keys? | 19:20 |
| gagehugo | dstanek: we would be ok with something like having a list of keys in the config so that other systems cant just dump arbitrary data into properties | 19:20 |
| gagehugo | setting up a schema for keys that way | 19:20 |
| breton | config would work too | 19:21 |
| dstanek | if we are saying that only a cloud admin can edit keys and you can never delegate down then probably nothing is wrong | 19:22 |
| gagehugo | for us, if we just limited it to cloud admin defining keys, then that is fine for us | 19:24 |
| dstanek | gagehugo: but what about the rest of the openstack uses? | 19:25 |
| gagehugo | dstanek: that is a good question | 19:25 |
| gagehugo | which probably warrents more discussion | 19:25 |
| dstanek | gagehugo: right. that's why i keep raising the issues | 19:25 |
| *** diazjf has joined #openstack-keystone | 19:26 | |
| *** ravelar has quit IRC | 19:26 | |
| gagehugo | but I would think that people using extras would most likely prefer properties with defined keys than to keep using extras | 19:26 |
| dstanek | gagehugo: so let's take both of the usecases tagging environment type and billing code, but instead of environment we'll use application | 19:27 |
| dstanek | for example, lots of organizations manage their apache servers with one group and their switches/routers/whatever with another | 19:27 |
| dstanek | so in that case you'd want the cloud admin to be able to tag billing code and domain admin to be able to tag the application type | 19:28 |
| dstanek | as a cloud admin i centainy don't want to be involved as you organize your enterprise applications | 19:28 |
| gagehugo | yeah | 19:30 |
| *** diazjf has quit IRC | 19:30 | |
| gagehugo | I would say a project admin should be able to change their own project, but not allow them to define their own keys without going through the cloud admin | 19:34 |
| gagehugo | we do not want cloud admins to have to be involved with organizing everything, yes | 19:34 |
| gagehugo | but cloud admins should be the ones defining the keys, but downstream admins should be able to change the values of their respective projects | 19:35 |
| *** diazjf has joined #openstack-keystone | 19:40 | |
| gagehugo | s/downstream/project | 19:41 |
| dstanek | so you've added complexity that isn't currently reflected in the spec. | 19:44 |
| dstanek | that's my point about this needing more thought. maybe we just want to say there are 4 keys and only cloud admins can change them and be done with it. | 19:45 |
| *** david-lyle has quit IRC | 19:45 | |
| ayoung | gagehugo, ok...I think I have a path forward | 19:47 |
| ayoung | dstanek, you too, for the properties thing | 19:47 |
| *** diazjf has quit IRC | 19:47 | |
| ayoung | the issue I have is that the inclusion of a tag or value for a project should be a decision outside the project | 19:48 |
| ayoung | quota falls into this category as well, but we'll table that for now | 19:48 |
| *** bjolo has quit IRC | 19:48 | |
| ayoung | so, say there are certain "development" projects that gets some special treatment in some other service | 19:49 |
| ayoung | "development" should be a project-group inside Keystone, and then projects get added to that group | 19:49 |
| ayoung | from a management and control standpoint, these tags are resources that are owned and managed separately from the projects | 19:50 |
| ayoung | if they are "meta" on a project then they are "above" the project | 19:50 |
| dstanek | ayoung: groups is an interesting concept because it solves the permission issues | 19:50 |
| ayoung | So...just for grins, lets start with that concept, and see where it leads us | 19:50 |
| lamt | can a project belong to multiple groups? | 19:51 |
| ayoung | first of all, there is HMT | 19:51 |
| ayoung | lamt, yes | 19:51 |
| ayoung | many to many | 19:51 |
| lamt | ah, okay | 19:51 |
| ayoung | one prj-grp has man prj and one prj is in amny prj-grps | 19:51 |
| ayoung | I'm going to abbbrevite project-group to PG for now | 19:52 |
| ayoung | and if we start talking about user groups, those are UGs | 19:52 |
| ayoung | so, lets say we add the PG concept | 19:52 |
| ayoung | we need a rule for HMT | 19:52 |
| ayoung | if I add a parent to agroup, do I automatically add all the children? | 19:52 |
| ayoung | if we say "maybe yes, maybe no" we have a complex mechanism on our hands | 19:53 |
| ayoung | comparable to inherited-roles | 19:53 |
| ayoung | suspect the right answer there is "always yes" | 19:53 |
| ayoung | now, here is where things get funky | 19:54 |
| ayoung | how do we do permissions on PGs? | 19:54 |
| ayoung | do we treat them as projects, are they resources owned by projects, or are they resources owned by domains? | 19:55 |
| ayoung | I'm tempted to say "resources owned by domains" much like projects themselves are | 19:55 |
| knikolla | would a user be able to have a role on a pg? | 19:55 |
| ayoung | knikolla, they would have to | 19:55 |
| ayoung | which leads to the weird sentance: | 19:56 |
| ayoung | a Project group is a project. | 19:56 |
| gagehugo | hmm | 19:56 |
| ayoung | call them tags or any other name, the logic is the same | 19:56 |
| knikolla | np=p | 19:56 |
| knikolla | np = p | 19:56 |
| *** ravelar has joined #openstack-keystone | 19:57 | |
| ayoung | Not quite that bad | 19:57 |
| gagehugo | pg = p | 19:57 |
| ayoung | pg = XXX? | 19:57 |
| *** jamielennox|away is now known as jamielennox | 19:57 | |
| *** iurygregory has quit IRC | 19:58 | |
| dstanek | I'm lost noe | 19:58 |
| dstanek | now | 19:58 |
| jamielennox | stevemar, ayoung: i was expecting to be able to make this horizon meeting, but i'm not | 19:58 |
| jamielennox | r1chardj0n3s: ^ | 19:58 |
| jamielennox | i'll read the logs later, but lte me know of anything specific i need to do | 19:58 |
| *** raildo has quit IRC | 19:58 | |
| r1chardj0n3s | hi | 19:58 |
| ayoung | dstanek, I'll take it back up again after the H-K meeting | 19:59 |
| dstanek | k | 19:59 |
| gagehugo | ok | 19:59 |
| ayoung | where are we meeting? | 19:59 |
| stevemar | jamielennox: thanks for the heads up | 19:59 |
| stevemar | in #openstack-meeting-cp | 19:59 |
| *** raildo has joined #openstack-keystone | 20:05 | |
| *** jamielennox is now known as jamielennox|away | 20:09 | |
| openstackgerrit | Merged openstack/keystone: Doc warning for keystone db migration https://review.openstack.org/394603 | 20:16 |
| *** iurygregory has joined #openstack-keystone | 20:22 | |
| *** raildo has quit IRC | 20:24 | |
| *** Zer0Byte__ has quit IRC | 20:28 | |
| *** Zer0Byte__ has joined #openstack-keystone | 20:29 | |
| *** jaugustine has quit IRC | 20:29 | |
| *** jaugustine has joined #openstack-keystone | 20:32 | |
| *** jaugustine has quit IRC | 20:33 | |
| *** ravelar has quit IRC | 20:34 | |
| *** tobberyd_ has joined #openstack-keystone | 20:35 | |
| *** diazjf has joined #openstack-keystone | 20:38 | |
| *** iurygregory has quit IRC | 20:41 | |
| *** ayoung has quit IRC | 20:44 | |
| *** Zer0Byte__ has quit IRC | 20:47 | |
| *** adriant has joined #openstack-keystone | 20:52 | |
| *** Zer0Byte__ has joined #openstack-keystone | 20:54 | |
| *** rcernin has joined #openstack-keystone | 20:58 | |
| *** browne has quit IRC | 20:59 | |
| lbragstad | stevemar can i get your +1 on https://review.openstack.org/#/c/395106/ ? | 20:59 |
| lbragstad | I'll go to -infra and see if I can get it merged | 20:59 |
| *** browne has joined #openstack-keystone | 21:02 | |
| *** agrebennikov has quit IRC | 21:03 | |
| lbragstad | ttx tonyb o/ We have a meeting we'd like to propose to the irc-meetings repository for collaboration between horizon and keystone. The ptls have agreed to the proposed time and place. Curious if either of you would be interested in reviewing when you have time. https://review.openstack.org/#/c/395106/ | 21:06 |
| lbragstad | ugh - wrong channel... sorry | 21:06 |
| *** rarora has joined #openstack-keystone | 21:11 | |
| *** diazjf has quit IRC | 21:13 | |
| crinkle | stevemar: morgan_ want to look at https://review.openstack.org/#/c/395013/ for me? you guys are the only cores on it | 21:14 |
| crinkle | i'm not entirely sure if it's backwards compatible or if it matters | 21:14 |
| *** Guest24494 is now known as melwitt | 21:18 | |
| *** mfisch has quit IRC | 21:21 | |
| *** mfisch has joined #openstack-keystone | 21:21 | |
| *** mfisch has quit IRC | 21:21 | |
| *** mfisch has joined #openstack-keystone | 21:21 | |
| *** diazjf has joined #openstack-keystone | 21:25 | |
| *** asettle has quit IRC | 21:25 | |
| adriant | stevemar: thanks for the MFA spec merge :) | 21:35 |
| kevinbenton | hi, can i get some oslo.policy eyes on this patch: https://review.openstack.org/#/c/391370/ | 21:52 |
| kevinbenton | the bad cyclic reference warnings are filling up the neutron logs | 21:52 |
| *** agrebennikov has joined #openstack-keystone | 21:53 | |
| *** spilla has quit IRC | 21:54 | |
| stevemar | kevinbenton: it's on my queue | 21:55 |
| stevemar | adriant: np! | 21:55 |
| mfisch | stevemar: docs question for you | 21:56 |
| mfisch | why are none of the compliance options listed in the "new options" section? | 21:56 |
| mfisch | http://docs.openstack.org/newton/config-reference/identity.html | 21:56 |
| adriant | stevemar: now to get people reviewing and testing our the patch ;) | 21:56 |
| stevemar | mfisch: cause we don't control that content :( | 21:56 |
| mfisch | its not in the release notes either really | 21:57 |
| adriant | s/our/out/ | 21:57 |
| mfisch | so this isnt built by some tooling? | 21:57 |
| kevinbenton | stevemar: thanks | 21:57 |
| mfisch | http://docs.openstack.org/newton/config-reference/tables/conf-changes/keystone.html | 21:57 |
| stevemar | mfisch: i imagine it might be, lets go to #openstack-doc and find out? | 21:57 |
| mfisch | yes please | 21:57 |
| *** chris_hultin is now known as chris_hultin|AWA | 22:08 | |
| stevemar | mfisch: i'm worried about https://review.openstack.org/#/c/383333/7 | 22:08 |
| mfisch | the CI fail? | 22:09 |
| stevemar | mfisch: yah | 22:10 |
| stevemar | mfisch: looks like we got an answer in doc | 22:10 |
| mfisch | not a good answer | 22:11 |
| mfisch | as for CI I will look | 22:11 |
| mfisch | I figured Adam put a hex on me though | 22:12 |
| *** edtubill has quit IRC | 22:14 | |
| mfisch | stevemar: is this setting tested default enabled in the gate in any way? | 22:17 |
| stevemar | mfisch: doubtful | 22:18 |
| *** tobberyd_ has quit IRC | 22:22 | |
| *** catintheroof has quit IRC | 22:22 | |
| *** catintheroof has joined #openstack-keystone | 22:22 | |
| openstackgerrit | Steve Martinelli proposed openstack/keystone: Support nested groups in Active Directory https://review.openstack.org/389316 | 22:24 |
| *** adrian_otto has quit IRC | 22:24 | |
| morgan_ | crinkle: does that still need eyes? I am at an airport and can grab a laptop if so. | 22:25 |
| *** david-lyle has joined #openstack-keystone | 22:26 | |
| *** catintheroof has quit IRC | 22:27 | |
| mfisch | stevemar: I had it enabled when I tested my upgrade | 22:28 |
| mfisch | stevemar: that might be a real bug though from looking at it | 22:28 |
| mfisch | the initial cached token missing something? | 22:29 |
| *** adrian_otto has joined #openstack-keystone | 22:30 | |
| crinkle | morgan_: it's not urgent but i wanted to put it on your radar since i don't think a lot of people are watching that repo | 22:31 |
| morgan_ | okie | 22:31 |
| morgan_ | yeah not a lot of people track that one. | 22:32 |
| stevemar | crinkle: which one? | 22:33 |
| stevemar | bbl | 22:34 |
| crinkle | stevemar: ldappool https://review.openstack.org/#/c/395013/ | 22:34 |
| *** edmondsw has quit IRC | 22:38 | |
| *** darrenc is now known as darrenc_vpn | 22:39 | |
| *** agrebennikov has quit IRC | 22:43 | |
| *** adrian_otto has quit IRC | 22:46 | |
| *** adrian_otto has joined #openstack-keystone | 22:47 | |
| *** adrian_otto has quit IRC | 22:49 | |
| *** david-lyle_ has joined #openstack-keystone | 22:50 | |
| *** david-lyle_ has quit IRC | 22:54 | |
| *** diazjf has quit IRC | 22:56 | |
| *** jperry has quit IRC | 22:57 | |
| *** chris_hultin|AWA is now known as chris_hultin | 23:01 | |
| *** gyee has joined #openstack-keystone | 23:07 | |
| *** spzala has quit IRC | 23:14 | |
| *** lamt has quit IRC | 23:16 | |
| *** rcernin has quit IRC | 23:18 | |
| *** gagehugo has quit IRC | 23:24 | |
| *** chris_hultin is now known as chris_hultin|AWA | 23:25 | |
| *** Marcellin__ has quit IRC | 23:28 | |
| *** darrenc_vpn is now known as darrenc | 23:28 | |
| *** catintheroof has joined #openstack-keystone | 23:29 | |
| *** spzala has joined #openstack-keystone | 23:30 | |
| *** catintheroof has quit IRC | 23:31 | |
| *** catintheroof has joined #openstack-keystone | 23:31 | |
| *** spzala has quit IRC | 23:35 | |
| *** gyee has quit IRC | 23:38 | |
| *** gagehugo has joined #openstack-keystone | 23:38 | |
| *** david-lyle has quit IRC | 23:38 | |
| *** david-lyle has joined #openstack-keystone | 23:40 | |
| *** ayoung has joined #openstack-keystone | 23:53 | |
| *** ChanServ sets mode: +v ayoung | 23:53 | |
| *** oomichi has quit IRC | 23:57 | |
| *** oomichi has joined #openstack-keystone | 23:58 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!