| *** tqtran has quit IRC | 00:04 | |
| *** ravelar has joined #openstack-keystone | 00:04 | |
| openstackgerrit | Merged openstack/python-keystoneclient: Fix missing service_catalog parameter in Client object https://review.openstack.org/339150 | 00:08 |
|---|---|---|
| *** Zer0Byte__ has quit IRC | 00:10 | |
| *** browne has joined #openstack-keystone | 00:14 | |
| *** Zer0Byte__ has joined #openstack-keystone | 00:14 | |
| *** rdo has quit IRC | 00:16 | |
| *** Zer0Byte__ has quit IRC | 00:17 | |
| *** franza has quit IRC | 00:18 | |
| ayoung | stevemar__, happens every time | 00:19 |
| ayoung | wiped out .tox | 00:19 |
| ayoung | something is wrong with the feedformatter code I think | 00:20 |
| ayoung | But that looks like it has not been touched in about 7 years | 00:21 |
| stevemar__ | :) | 00:21 |
| stevemar__ | someone needs to punt brant's patch through: https://review.openstack.org/#/c/405006/ :P | 00:21 |
| stevemar__ | err i meant https://review.openstack.org/#/c/404806/3 | 00:21 |
| stevemar__ | well i guess dstanek already looked at it | 00:22 |
| stevemar__ | he deserves another look | 00:22 |
| ayoung | I'll look | 00:22 |
| ayoung | stevemar__, +2a | 00:22 |
| stevemar__ | :O | 00:23 |
| morgan | stevemar__: | 00:23 |
| morgan | need your brain | 00:23 |
| *** rdo has joined #openstack-keystone | 00:24 | |
| stevemar__ | morgan: okie doke | 00:24 |
| morgan | sent you a dm | 00:24 |
| *** hoangcx has joined #openstack-keystone | 00:28 | |
| *** spzala has quit IRC | 00:29 | |
| *** spzala has joined #openstack-keystone | 00:29 | |
| *** spzala has quit IRC | 00:30 | |
| *** spzala has joined #openstack-keystone | 00:30 | |
| ayoung | when building a env I see this line | 00:30 |
| ayoung | Collecting feedformatter (from yasfb>=0.5.1->-r /opt/stack/keystone-specs/requirements.txt (line 9)) | 00:30 |
| ayoung | Using cached feedformatter-0.4.tar.bz2 | 00:30 |
| ayoung | what does it mean by cached? | 00:30 |
| *** spzala has quit IRC | 00:36 | |
| *** spzala has joined #openstack-keystone | 00:36 | |
| *** spzala has quit IRC | 00:40 | |
| ayoung | stevemar__, it is python | 00:46 |
| ayoung | stevemar__, it is python ls .tox/docs/lib64/python3.5/ | 00:46 |
| ayoung | must be the new Fedora 25 install that triggers running tox in python3 | 00:47 |
| *** Marcellin__ has quit IRC | 00:48 | |
| openstackgerrit | Andrey Grebennikov proposed openstack/keystone: Allow to specify ID on project creation https://review.openstack.org/403866 | 00:49 |
| *** chris_hultin is now known as chris_hultin|AWA | 00:52 | |
| *** guoshan has joined #openstack-keystone | 00:52 | |
| *** catintheroof has joined #openstack-keystone | 01:05 | |
| *** ravelar has quit IRC | 01:05 | |
| *** catintheroof has quit IRC | 01:08 | |
| browne | ok, i'm new to federation and trying out some things. one problematic thing i've found is that horizon redirects to keystone, thereby expecting a public keystone URL | 01:12 |
| browne | but my keystone is behind an SSL terminator (haproxy) and horizon is also configured to use private addresses to the services | 01:12 |
| browne | not sure how to resolve this since either federation doesn't work, or horizon doesn't work | 01:13 |
| ayoung | browne, you need a public Keystone. | 01:18 |
| ayoung | But it does not have to be the full keystone server | 01:19 |
| browne | ayoung: ugh, so public keystone is a requirement for federation? | 01:19 |
| ayoung | when you set up Federation, you set up URLs under the Apache server that the Horizon server is going to hit. only those URLs need to be exposed to the outside world | 01:19 |
| *** liujiong has joined #openstack-keystone | 01:19 | |
| ayoung | browne, something needs to be outside the firewall to deal with Federation | 01:20 |
| *** guoshan_ has joined #openstack-keystone | 01:20 | |
| *** guoshan has quit IRC | 01:20 | |
| ayoung | Does not need to be the full Apache server, just the Federation portion | 01:20 |
| browne | well, technically, our keystone is open in haproxy to the public world, but the problem is that horizon forming the SSO url based on the region URL, which is also used for normal authentication | 01:21 |
| browne | and our controller node (keystone, apache, horizon, etc) does not have public network access | 01:21 |
| *** donnalezyty_ has quit IRC | 01:21 | |
| ayoung | there is one config option that tells HA proxy to pass through the URL. You can do that, too. | 01:22 |
| ayoung | But, yeah, it would be nice to split the Federation URL from the internal. | 01:22 |
| browne | ha proxy isn't involved because my web browser follows the redirect request, which has a private IP in it | 01:23 |
| ayoung | That is a horizon thing, but we might be able to hack that into Django Openstack auth | 01:23 |
| ayoung | No, I get it | 01:23 |
| ayoung | let me see... | 01:23 |
| browne | i think my issue is this: https://github.com/openstack/django_openstack_auth/blob/a40234be311eae11ca22497a82a82ab404d09a7c/openstack_auth/utils.py#L181 | 01:26 |
| browne | forms the URL using the region URL set in horizon's local_settings.py | 01:26 |
| ayoung | browne, yep, and there is no reason you can't use a different URL there | 01:26 |
| browne | if i could override that specific for federation case, that would be ideal | 01:26 |
| ayoung | browne, are you OK living with custom code for this for a short while? | 01:27 |
| browne | ayoung: you mean hack openstack_auth or is there an existing way to override that? i can't change the values of region url or keystone url without breaking normal auth | 01:28 |
| ayoung | I think that the Horizon team would be willing to accept the change over time | 01:28 |
| ayoung | we make the base URL for Federation a different config option in Horizon | 01:28 |
| browne | ayoung: yeah custom code would be fine | 01:28 |
| ayoung | browne, OK, so let me trace that call | 01:28 |
| browne | thank you! | 01:28 |
| *** spzala has joined #openstack-keystone | 01:30 | |
| ayoung | browne, OK so see the line idp_mapping = getattr(settings, 'WEBSSO_IDP_MAPPING', {}) | 01:30 |
| browne | yep | 01:30 |
| ayoung | that is pulling a value out of the config file. | 01:30 |
| ayoung | django does a config file as straight python | 01:30 |
| ayoung | so your horizon server has a file that is /etc/openstack_dashboard/local_settings | 01:31 |
| ayoung | it is a python file, despite the lack of extension, and the config options are in there. | 01:31 |
| ayoung | Lets say we add a new one that is FEDERATION_AUTH_URL | 01:31 |
| ayoung | then lower down in the utils file... | 01:31 |
| browne | ah, i gotch ya. i could easily hack this to accept a new config option | 01:32 |
| ayoung | federation_auth_url = getattr(settings, 'FEDEARTION_AUTH_URL', auth_url) | 01:32 |
| ayoung | and then | 01:32 |
| ayoung | (auth_url, idp_id, protocol_id, origin)) becomes (federation_auth_url, idp_id, protocol_id, origin)) | 01:32 |
| browne | yep that would do the trick | 01:32 |
| ayoung | can you test it out? | 01:33 |
| browne | yep, i'll try it out tomorrow, but think that'll do the job. i'll let know. gotta go soon. but thanks a million ayoung | 01:34 |
| openstackgerrit | Rodrigo Duarte proposed openstack/keystone: Minor fix in role_assignments api-ref https://review.openstack.org/381777 | 01:34 |
| *** jamielennox is now known as jamielennox|away | 01:34 | |
| *** browne has quit IRC | 01:35 | |
| ayoung | GAH! | 01:37 |
| ayoung | If he does not submit that as a patch I'll be pissed | 01:37 |
| *** davechen_afk is now known as davechen | 01:38 | |
| openstackgerrit | Rodrigo Duarte proposed openstack/keystone: Include mapped in the default auth methods https://review.openstack.org/403816 | 01:42 |
| *** adrian_otto has quit IRC | 01:45 | |
| openstackgerrit | Rodrigo Duarte proposed openstack/python-keystoneclient: Refactor test_credentials https://review.openstack.org/405044 | 01:51 |
| *** zhangjl has joined #openstack-keystone | 01:51 | |
| *** marekd has quit IRC | 01:56 | |
| *** adu has joined #openstack-keystone | 01:59 | |
| stevemar__ | ayoung: eric'll submit a patch | 02:03 |
| stevemar__ | he usually comes through for things he says he'll do | 02:04 |
| *** chrisplo has quit IRC | 02:10 | |
| davechen | lbragstad: oh... i didn't aware it failed the Jenkins before. :) | 02:11 |
| *** adu has quit IRC | 02:12 | |
| *** stevemar__ has quit IRC | 02:13 | |
| *** stevemar__ has joined #openstack-keystone | 02:13 | |
| davechen | lbragstad: I thought the patch was in good shape, and seems no mistake in the code excepts the nits you said, hope it hasn't caused you too much trouble. | 02:13 |
| *** stevemar__ has quit IRC | 02:17 | |
| *** wanghua has joined #openstack-keystone | 02:22 | |
| *** catintheroof has joined #openstack-keystone | 02:24 | |
| *** bjolo_ has joined #openstack-keystone | 02:39 | |
| *** topol has joined #openstack-keystone | 02:47 | |
| *** ChanServ sets mode: +v topol | 02:47 | |
| openstackgerrit | Morgan Fainberg proposed openstack/keystoneauth: Implement TaskContextManager for Session https://review.openstack.org/362473 | 02:49 |
| openstackgerrit | Morgan Fainberg proposed openstack/keystoneauth: Implement TaskContextManager for Session https://review.openstack.org/362473 | 02:51 |
| morgan | dstanek: ok D105 pep8 error is absurd | 02:51 |
| *** agrebennikov has quit IRC | 02:51 | |
| morgan | dstanek: we have to have a docstring on magic methods?! | 02:51 |
| morgan | really absurd. | 02:51 |
| *** jamielennox|away is now known as jamielennox | 02:54 | |
| ayoung | morgan, that is the most beautiful code I have seen | 02:56 |
| openstackgerrit | Morgan Fainberg proposed openstack/keystoneauth: Implement TaskContextManager for Session https://review.openstack.org/362473 | 02:57 |
| morgan | it has an issue i need to revisit | 02:58 |
| ayoung | Ah... | 02:58 |
| morgan | it doesn't support the concept of really serializing stuff | 02:58 |
| ayoung | No> | 02:58 |
| ayoung | ? | 02:58 |
| morgan | becuase it on-demand instantiates the taskmanager | 02:58 |
| morgan | it needs to be a pre-instantiated context_manager but is passed the method/etc on entry etc | 02:59 |
| morgan | i need to figure out how to do that. | 02:59 |
| ayoung | ah.got it | 02:59 |
| morgan | it wont change a ton though | 02:59 |
| ayoung | coo | 02:59 |
| morgan | and it needs some tests added | 02:59 |
| ayoung | morgan, I take it this is an outgrowth of the Zuul 2.X work? | 02:59 |
| morgan | it;s a cleanup of shade and nodepool | 03:00 |
| *** rkrum has joined #openstack-keystone | 03:00 | |
| morgan | which makes zuul 3 better | 03:00 |
| ayoung | right 3 | 03:00 |
| morgan | but yes, it is cleanup the code effort and make things more functional; | 03:00 |
| morgan | less hack-y | 03:00 |
| morgan | and pushing this down into ksa makes life waaaaay better | 03:00 |
| ayoung | this could be a Very Useful Engine | 03:00 |
| morgan | so i think... i can do instantiate and make __call__ do the work for __enter__ | 03:01 |
| morgan | i need to test how __enter__ gets called | 03:01 |
| ayoung | hey, tox quesiont for you. I need to force the doc task in keystone-specs to use python2, as it pulls in a library no longer actively developed that is 2 only | 03:01 |
| ayoung | is there some way in tox.ini to say "for docs use python 2.7" | 03:02 |
| morgan | yes. you can, let me look up the method to say "this venv uses pyXX" | 03:02 |
| ayoung | basepython=python2.6 | 03:03 |
| morgan | ayoung: use basepython = python3.4 | 03:03 |
| morgan | well basepython = python2.7 | 03:03 |
| ayoung | heh right | 03:04 |
| morgan | in the venv definitioin | 03:04 |
| ayoung | ok let me see if this works... | 03:04 |
| morgan | should do what you're looking for | 03:04 |
| morgan | we use it in the [testenv:debug-py34] | 03:04 |
| morgan | env in keystone's tox.ini | 03:04 |
| ayoung | not sure that docs should require a separate venv in keystone-specs. | 03:05 |
| morgan | if it's a concern/breaking, it should for now | 03:05 |
| ayoung | yeah, it is | 03:05 |
| morgan | it's easy to change that down the line | 03:05 |
| ayoung | Fedora 25 made a change, I think | 03:05 |
| morgan | go with "not broken" over "better looking" | 03:05 |
| morgan | ;) | 03:06 |
| openstackgerrit | ayoung proposed openstack/keystone-specs: Role Check Check from Middleware https://review.openstack.org/391624 | 03:09 |
| openstackgerrit | ayoung proposed openstack/keystone-specs: Fix python version i to 2.7 for docs https://review.openstack.org/405074 | 03:09 |
| morgan | ayoung: if you do re-review that code (added reno since your +2) let me know what you think about my in-line comment. if you think it is a non-issue, I'm happy to have it +2'd as is | 03:09 |
| morgan | i'll refrain from another patch and addressing what might be a non-issue until some other folks weigh in | 03:10 |
| ayoung | so that is your final final...ok. I'll rereview | 03:10 |
| morgan | it's final until i get more feedback on it. i'm content with the general code itself. | 03:10 |
| morgan | also context_managers always make me feel like i'm invoking black magic ;) | 03:11 |
| *** topol has quit IRC | 03:11 | |
| *** stevemar__ has joined #openstack-keystone | 03:11 | |
| ayoung | morgan, so yeah...now that I think about it, I don't like that aspect | 03:11 |
| ayoung | you should be able to share a context manager | 03:11 |
| ayoung | I'd expect that to be the default...why not ... | 03:11 |
| ayoung | pass the context maanger as an object in the function, but create the class if the param is None? | 03:11 |
| morgan | it just becomes impossible to pass anyting into __enter__ | 03:12 |
| morgan | that isn't done on context manager instantiation | 03:12 |
| morgan | __enter__ is very limited, similar to __exit__ | 03:12 |
| morgan | nothing magic really can happy in them besides what is already there | 03:12 |
| morgan | so either you instantiate the context manager before hand and just do "with self.manager as XX:" | 03:13 |
| morgan | or you instantiate on demand like I am doing | 03:13 |
| morgan | doing an explicit __Call__() method would make things worse. | 03:13 |
| morgan | and yes, i am fine with creating it in __init__ if we don't pass one in | 03:14 |
| *** rodrigods_ is now known as rodrigods | 03:15 | |
| ayoung | morgan, I'll let you play. I'm going to hold off on reviewing it until dstanek weighs in on the python mechanism. My brain is full of RBAC | 03:17 |
| *** jamielennox is now known as jamielennox|away | 03:17 | |
| openstackgerrit | ayoung proposed openstack/keystone-specs: Fix python version to 2.7 for docs https://review.openstack.org/405074 | 03:18 |
| morgan | ayoung: did that work for tox.ini | 03:18 |
| morgan | ? | 03:18 |
| ayoung | morgan, it did work, thanks | 03:18 |
| morgan | cool! | 03:18 |
| ayoung | morgan, https://admiyo.fedorapeople.org/keystone-specs/specs/keystone/ongoing/role-check-from-middleware.html much easier to read than a gerrit page | 03:22 |
| ayoung | That might be our longest spec yet | 03:22 |
| *** jamielennox|away is now known as jamielennox | 03:26 | |
| *** catintheroof has quit IRC | 03:28 | |
| *** catintheroof has joined #openstack-keystone | 03:28 | |
| *** catintheroof has quit IRC | 03:28 | |
| *** catintheroof has joined #openstack-keystone | 03:30 | |
| ayoung | jamielennox, BTW, the RBAC spec and approach will let us get you your standard set of roles: | 03:30 |
| *** catintheroof has quit IRC | 03:30 | |
| *** catintheroof has joined #openstack-keystone | 03:31 | |
| *** tqtran has joined #openstack-keystone | 03:31 | |
| *** catintheroof has quit IRC | 03:31 | |
| *** ravelar has joined #openstack-keystone | 03:37 | |
| *** ravelar has quit IRC | 03:37 | |
| *** tqtran has quit IRC | 03:37 | |
| morgan | ayoung: nah, that spec is short just has a lot of "related links" | 03:43 |
| morgan | :P | 03:43 |
| *** adriant has quit IRC | 03:44 | |
| *** nicolasbock has quit IRC | 03:45 | |
| *** jamielennox is now known as jamielennox|away | 03:47 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone-specs: Extend user API to support federated attributes https://review.openstack.org/397410 | 03:53 |
| openstackgerrit | ayoung proposed openstack/keystone-specs: Role Check Check from Middleware https://review.openstack.org/391624 | 03:54 |
| openstackgerrit | Ron De Rose proposed openstack/keystone-specs: Extend user API to support federated attributes https://review.openstack.org/397410 | 03:56 |
| *** guoshan_ has quit IRC | 04:02 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone-specs: Extend user API to support federated attributes https://review.openstack.org/397410 | 04:10 |
| *** Ephur has quit IRC | 04:13 | |
| *** Ephur has joined #openstack-keystone | 04:13 | |
| *** Ephur has quit IRC | 04:14 | |
| *** PsionTheory has joined #openstack-keystone | 04:14 | |
| *** Ephur has joined #openstack-keystone | 04:14 | |
| *** Ephur has quit IRC | 04:14 | |
| *** Ephur has joined #openstack-keystone | 04:15 | |
| *** Ephur has quit IRC | 04:15 | |
| *** Ephur has joined #openstack-keystone | 04:16 | |
| *** Ephur has quit IRC | 04:16 | |
| *** Ephur has joined #openstack-keystone | 04:17 | |
| *** Ephur has quit IRC | 04:17 | |
| *** Ephur has joined #openstack-keystone | 04:18 | |
| *** Ephur has quit IRC | 04:18 | |
| *** Ephur has joined #openstack-keystone | 04:19 | |
| *** Ephur has quit IRC | 04:19 | |
| *** Ephur has joined #openstack-keystone | 04:19 | |
| *** Ephur has quit IRC | 04:20 | |
| *** Ephur has joined #openstack-keystone | 04:20 | |
| *** Ephur has quit IRC | 04:21 | |
| *** Ephur has joined #openstack-keystone | 04:21 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone-specs: Extend user API to support federated attributes https://review.openstack.org/397410 | 04:22 |
| *** Ephur has joined #openstack-keystone | 04:22 | |
| *** Ephur has quit IRC | 04:22 | |
| *** Ephur has joined #openstack-keystone | 04:23 | |
| *** Ephur has quit IRC | 04:23 | |
| *** Ephur has joined #openstack-keystone | 04:24 | |
| *** Ephur has quit IRC | 04:24 | |
| *** Ephur has joined #openstack-keystone | 04:25 | |
| *** stevemar__ has quit IRC | 04:25 | |
| *** Ephur has quit IRC | 04:25 | |
| *** stevemar__ has joined #openstack-keystone | 04:25 | |
| *** Ephur has joined #openstack-keystone | 04:26 | |
| *** Ephur has quit IRC | 04:26 | |
| *** ravelar has joined #openstack-keystone | 04:26 | |
| *** Ephur has joined #openstack-keystone | 04:27 | |
| *** Ephur has quit IRC | 04:27 | |
| *** Ephur has joined #openstack-keystone | 04:27 | |
| *** Ephur has quit IRC | 04:28 | |
| *** Ephur has joined #openstack-keystone | 04:28 | |
| *** Ephur has quit IRC | 04:29 | |
| *** Ephur has joined #openstack-keystone | 04:29 | |
| *** Ephur has quit IRC | 04:29 | |
| *** stevemar__ has quit IRC | 04:30 | |
| *** Ephur has joined #openstack-keystone | 04:30 | |
| *** Ephur has quit IRC | 04:30 | |
| *** Ephur has joined #openstack-keystone | 04:31 | |
| *** Ephur has quit IRC | 04:31 | |
| *** Ephur has joined #openstack-keystone | 04:32 | |
| *** Ephur has quit IRC | 04:32 | |
| *** Ephur has joined #openstack-keystone | 04:33 | |
| *** Ephur has quit IRC | 04:33 | |
| *** jamielennox|away is now known as jamielennox | 04:33 | |
| *** Ephur has joined #openstack-keystone | 04:34 | |
| *** Ephur has quit IRC | 04:34 | |
| *** Ephur has joined #openstack-keystone | 04:35 | |
| *** Ephur has quit IRC | 04:35 | |
| *** rkrum has quit IRC | 04:35 | |
| *** Ephur has joined #openstack-keystone | 04:36 | |
| *** Ephur has quit IRC | 04:36 | |
| *** Ephur has joined #openstack-keystone | 04:36 | |
| *** Ephur has quit IRC | 04:37 | |
| openstackgerrit | Richard Avelar proposed openstack/keystone: Print name with duplicate error on user creation https://review.openstack.org/405104 | 04:37 |
| *** Ephur has joined #openstack-keystone | 04:37 | |
| *** Ephur has quit IRC | 04:37 | |
| *** ravelar has quit IRC | 04:38 | |
| *** Ephur has joined #openstack-keystone | 04:38 | |
| *** Ephur has quit IRC | 04:38 | |
| *** Ephur has joined #openstack-keystone | 04:39 | |
| *** Ephur has quit IRC | 04:39 | |
| *** Ephur has joined #openstack-keystone | 04:40 | |
| *** Ephur has quit IRC | 04:40 | |
| *** Ephur has joined #openstack-keystone | 04:41 | |
| *** Ephur has quit IRC | 04:41 | |
| *** Ephur has joined #openstack-keystone | 04:42 | |
| *** Ephur has quit IRC | 04:42 | |
| *** Ephur has joined #openstack-keystone | 04:43 | |
| *** Ephur has joined #openstack-keystone | 04:43 | |
| *** Ephur has quit IRC | 04:44 | |
| *** Ephur has joined #openstack-keystone | 04:44 | |
| *** Ephur has quit IRC | 04:45 | |
| *** guoshan has joined #openstack-keystone | 04:45 | |
| *** Ephur has joined #openstack-keystone | 04:45 | |
| *** Ephur has joined #openstack-keystone | 04:46 | |
| *** Ephur has quit IRC | 04:46 | |
| *** Ephur has joined #openstack-keystone | 04:47 | |
| *** Ephur has quit IRC | 04:47 | |
| *** Ephur has joined #openstack-keystone | 04:48 | |
| *** Ephur has quit IRC | 04:48 | |
| *** Ephur has joined #openstack-keystone | 04:49 | |
| *** Ephur has quit IRC | 04:49 | |
| *** guoshan has quit IRC | 04:49 | |
| *** Ephur has joined #openstack-keystone | 04:49 | |
| *** browne has joined #openstack-keystone | 04:49 | |
| *** PsionTheory has quit IRC | 04:49 | |
| *** Ephur has quit IRC | 04:50 | |
| *** Ephur has joined #openstack-keystone | 04:51 | |
| *** Ephur has joined #openstack-keystone | 04:51 | |
| *** Ephur has quit IRC | 04:52 | |
| *** Ephur has joined #openstack-keystone | 04:52 | |
| *** Ephur has quit IRC | 04:52 | |
| *** Ephur has joined #openstack-keystone | 04:53 | |
| *** Ephur has quit IRC | 04:53 | |
| *** Ephur has joined #openstack-keystone | 04:54 | |
| *** Ephur has quit IRC | 04:54 | |
| *** Ephur has joined #openstack-keystone | 04:55 | |
| *** Ephur has quit IRC | 04:55 | |
| *** Ephur has joined #openstack-keystone | 04:56 | |
| *** Ephur has quit IRC | 04:56 | |
| *** Ephur has joined #openstack-keystone | 04:57 | |
| *** Ephur has quit IRC | 04:57 | |
| *** Ephur has joined #openstack-keystone | 04:58 | |
| *** Ephur has joined #openstack-keystone | 04:58 | |
| *** browne has quit IRC | 04:58 | |
| *** Ephur has quit IRC | 04:59 | |
| *** Ephur has joined #openstack-keystone | 04:59 | |
| *** Ephur has quit IRC | 05:00 | |
| *** links has joined #openstack-keystone | 05:00 | |
| *** Ephur has joined #openstack-keystone | 05:00 | |
| *** Ephur has quit IRC | 05:00 | |
| *** Ephur has joined #openstack-keystone | 05:01 | |
| *** Ephur has quit IRC | 05:01 | |
| *** Ephur has joined #openstack-keystone | 05:02 | |
| *** Ephur has quit IRC | 05:02 | |
| *** Ephur has joined #openstack-keystone | 05:03 | |
| *** bjolo_ has quit IRC | 05:03 | |
| *** Ephur has joined #openstack-keystone | 05:04 | |
| *** Ephur has quit IRC | 05:04 | |
| *** Ephur has joined #openstack-keystone | 05:05 | |
| *** Ephur has quit IRC | 05:05 | |
| *** Ephur has joined #openstack-keystone | 05:05 | |
| *** Ephur has quit IRC | 05:06 | |
| *** Ephur has joined #openstack-keystone | 05:06 | |
| *** Ephur has quit IRC | 05:07 | |
| *** Ephur has joined #openstack-keystone | 05:07 | |
| *** Ephur has quit IRC | 05:07 | |
| *** Ephur has joined #openstack-keystone | 05:08 | |
| *** Ephur has joined #openstack-keystone | 05:09 | |
| *** Ephur has quit IRC | 05:09 | |
| *** Ephur has joined #openstack-keystone | 05:10 | |
| *** udesale has joined #openstack-keystone | 05:10 | |
| *** Ephur has quit IRC | 05:10 | |
| *** Ephur has joined #openstack-keystone | 05:11 | |
| *** Ephur has quit IRC | 05:11 | |
| *** Ephur has joined #openstack-keystone | 05:12 | |
| *** Ephur has quit IRC | 05:12 | |
| *** Ephur has joined #openstack-keystone | 05:13 | |
| *** Ephur has quit IRC | 05:13 | |
| *** Ephur has joined #openstack-keystone | 05:13 | |
| *** Ephur has quit IRC | 05:14 | |
| *** Ephur has joined #openstack-keystone | 05:14 | |
| *** Ephur has quit IRC | 05:15 | |
| *** Ephur has joined #openstack-keystone | 05:15 | |
| *** Ephur has quit IRC | 05:15 | |
| *** Ephur has joined #openstack-keystone | 05:16 | |
| *** Ephur has joined #openstack-keystone | 05:17 | |
| *** Ephur has quit IRC | 05:17 | |
| *** Ephur has joined #openstack-keystone | 05:18 | |
| *** Ephur has quit IRC | 05:18 | |
| *** Ephur has joined #openstack-keystone | 05:19 | |
| *** Ephur has quit IRC | 05:19 | |
| *** Ephur has joined #openstack-keystone | 05:20 | |
| *** Ephur has quit IRC | 05:20 | |
| *** Ephur has joined #openstack-keystone | 05:20 | |
| *** Ephur has quit IRC | 05:21 | |
| *** spzala has quit IRC | 05:21 | |
| *** spzala has joined #openstack-keystone | 05:21 | |
| *** Ephur has joined #openstack-keystone | 05:21 | |
| *** spzala has quit IRC | 05:22 | |
| *** spzala has joined #openstack-keystone | 05:22 | |
| *** spzala has quit IRC | 05:22 | |
| *** Ephur has joined #openstack-keystone | 05:22 | |
| *** Ephur has quit IRC | 05:22 | |
| *** spzala has joined #openstack-keystone | 05:23 | |
| *** spzala has quit IRC | 05:23 | |
| *** Ephur has joined #openstack-keystone | 05:23 | |
| *** spzala has joined #openstack-keystone | 05:23 | |
| *** Ephur has quit IRC | 05:23 | |
| *** spzala has quit IRC | 05:23 | |
| *** spzala has joined #openstack-keystone | 05:24 | |
| *** Ephur has joined #openstack-keystone | 05:24 | |
| *** spzala has quit IRC | 05:24 | |
| *** Ephur has quit IRC | 05:24 | |
| *** spzala has joined #openstack-keystone | 05:25 | |
| *** Ephur has joined #openstack-keystone | 05:25 | |
| *** spzala has quit IRC | 05:25 | |
| *** Ephur has quit IRC | 05:25 | |
| *** Ephur has joined #openstack-keystone | 05:26 | |
| *** spzala has joined #openstack-keystone | 05:26 | |
| *** Ephur has quit IRC | 05:26 | |
| *** spzala has quit IRC | 05:26 | |
| *** spzala has joined #openstack-keystone | 05:27 | |
| *** Ephur has joined #openstack-keystone | 05:27 | |
| *** spzala has quit IRC | 05:27 | |
| *** Ephur has quit IRC | 05:27 | |
| *** spzala has joined #openstack-keystone | 05:27 | |
| *** Ephur has joined #openstack-keystone | 05:28 | |
| *** spzala has quit IRC | 05:28 | |
| *** Ephur has quit IRC | 05:28 | |
| *** spzala has joined #openstack-keystone | 05:28 | |
| *** spzala has quit IRC | 05:28 | |
| *** Ephur has joined #openstack-keystone | 05:28 | |
| *** mahatic_ has left #openstack-keystone | 05:28 | |
| *** Ephur has quit IRC | 05:29 | |
| *** spzala has joined #openstack-keystone | 05:29 | |
| *** spzala has quit IRC | 05:29 | |
| *** Ephur has joined #openstack-keystone | 05:29 | |
| *** Ephur has quit IRC | 05:30 | |
| *** spzala has joined #openstack-keystone | 05:30 | |
| *** spzala has quit IRC | 05:30 | |
| *** Ephur has joined #openstack-keystone | 05:30 | |
| *** spzala has joined #openstack-keystone | 05:30 | |
| *** Ephur has quit IRC | 05:30 | |
| *** spzala has quit IRC | 05:31 | |
| *** Ephur has joined #openstack-keystone | 05:31 | |
| *** Ephur has quit IRC | 05:31 | |
| *** spzala has joined #openstack-keystone | 05:31 | |
| *** spzala has quit IRC | 05:32 | |
| *** Ephur has joined #openstack-keystone | 05:32 | |
| *** spzala has joined #openstack-keystone | 05:32 | |
| *** Ephur has quit IRC | 05:32 | |
| *** spzala has quit IRC | 05:32 | |
| *** Ephur has joined #openstack-keystone | 05:33 | |
| *** Ephur has quit IRC | 05:33 | |
| *** spzala has joined #openstack-keystone | 05:33 | |
| *** spzala has quit IRC | 05:33 | |
| *** Ephur has joined #openstack-keystone | 05:34 | |
| *** spzala has joined #openstack-keystone | 05:34 | |
| *** spzala has quit IRC | 05:34 | |
| *** Ephur has quit IRC | 05:34 | |
| *** tqtran has joined #openstack-keystone | 05:34 | |
| *** spzala has joined #openstack-keystone | 05:35 | |
| *** Ephur has joined #openstack-keystone | 05:35 | |
| *** spzala has quit IRC | 05:35 | |
| *** Ephur has quit IRC | 05:35 | |
| *** spzala has joined #openstack-keystone | 05:35 | |
| *** Ephur has joined #openstack-keystone | 05:35 | |
| *** spzala has quit IRC | 05:35 | |
| *** Ephur has quit IRC | 05:36 | |
| *** spzala has joined #openstack-keystone | 05:36 | |
| *** spzala has quit IRC | 05:36 | |
| *** Ephur has joined #openstack-keystone | 05:36 | |
| *** Ephur has quit IRC | 05:37 | |
| *** spzala has joined #openstack-keystone | 05:37 | |
| *** spzala has quit IRC | 05:37 | |
| *** Ephur has joined #openstack-keystone | 05:37 | |
| *** spzala has joined #openstack-keystone | 05:37 | |
| *** Ephur has quit IRC | 05:38 | |
| *** spzala has quit IRC | 05:38 | |
| *** Ephur has joined #openstack-keystone | 05:38 | |
| *** qwertyco has joined #openstack-keystone | 05:38 | |
| *** spzala has joined #openstack-keystone | 05:38 | |
| *** spzala has quit IRC | 05:38 | |
| *** Ephur has quit IRC | 05:38 | |
| *** qwertyco has quit IRC | 05:38 | |
| *** qwertyco has joined #openstack-keystone | 05:39 | |
| *** spzala has joined #openstack-keystone | 05:39 | |
| *** Ephur has joined #openstack-keystone | 05:39 | |
| *** spzala has quit IRC | 05:39 | |
| *** tqtran has quit IRC | 05:39 | |
| *** Ephur has quit IRC | 05:39 | |
| *** spzala has joined #openstack-keystone | 05:40 | |
| *** Ephur has joined #openstack-keystone | 05:40 | |
| *** spzala has quit IRC | 05:40 | |
| *** Ephur has quit IRC | 05:40 | |
| *** spzala has joined #openstack-keystone | 05:40 | |
| *** spzala has quit IRC | 05:41 | |
| *** Ephur has joined #openstack-keystone | 05:41 | |
| *** Ephur has quit IRC | 05:41 | |
| *** spzala has joined #openstack-keystone | 05:41 | |
| *** spzala has quit IRC | 05:41 | |
| *** Ephur has joined #openstack-keystone | 05:42 | |
| *** Ephur has quit IRC | 05:42 | |
| *** spzala has joined #openstack-keystone | 05:42 | |
| *** spzala has quit IRC | 05:42 | |
| *** Ephur has joined #openstack-keystone | 05:42 | |
| *** Ephur has quit IRC | 05:43 | |
| *** spzala has joined #openstack-keystone | 05:43 | |
| *** spzala has quit IRC | 05:43 | |
| *** Ephur has joined #openstack-keystone | 05:43 | |
| *** Ephur has quit IRC | 05:44 | |
| *** spzala has joined #openstack-keystone | 05:44 | |
| *** spzala has quit IRC | 05:44 | |
| *** Ephur has joined #openstack-keystone | 05:44 | |
| *** Ephur has quit IRC | 05:45 | |
| *** spzala has joined #openstack-keystone | 05:45 | |
| *** spzala has quit IRC | 05:45 | |
| *** Ephur has joined #openstack-keystone | 05:45 | |
| *** Ephur has quit IRC | 05:45 | |
| *** spzala has joined #openstack-keystone | 05:46 | |
| *** spzala has quit IRC | 05:46 | |
| *** Ephur has joined #openstack-keystone | 05:46 | |
| *** Ephur has quit IRC | 05:46 | |
| *** spzala has joined #openstack-keystone | 05:47 | |
| *** oomichi has quit IRC | 05:47 | |
| *** spzala has quit IRC | 05:47 | |
| *** Ephur has joined #openstack-keystone | 05:47 | |
| *** Ephur has quit IRC | 05:47 | |
| *** spzala has joined #openstack-keystone | 05:47 | |
| *** spzala has quit IRC | 05:48 | |
| *** Ephur has joined #openstack-keystone | 05:48 | |
| *** oomichi has joined #openstack-keystone | 05:48 | |
| *** Ephur has quit IRC | 05:48 | |
| *** spzala has joined #openstack-keystone | 05:48 | |
| *** spzala has quit IRC | 05:48 | |
| *** Ephur has joined #openstack-keystone | 05:49 | |
| *** spzala has joined #openstack-keystone | 05:49 | |
| *** Ephur has quit IRC | 05:49 | |
| *** spzala has quit IRC | 05:49 | |
| *** Ephur has joined #openstack-keystone | 05:50 | |
| *** spzala has joined #openstack-keystone | 05:50 | |
| *** spzala has quit IRC | 05:50 | |
| *** Ephur has quit IRC | 05:50 | |
| *** spzala has joined #openstack-keystone | 05:51 | |
| *** Ephur has joined #openstack-keystone | 05:51 | |
| *** spzala has quit IRC | 05:51 | |
| *** Ephur has quit IRC | 05:51 | |
| *** spzala has joined #openstack-keystone | 05:51 | |
| *** spzala has quit IRC | 05:51 | |
| *** Ephur has joined #openstack-keystone | 05:51 | |
| *** Ephur has quit IRC | 05:52 | |
| *** spzala has joined #openstack-keystone | 05:52 | |
| *** spzala has quit IRC | 05:52 | |
| *** Ephur has joined #openstack-keystone | 05:52 | |
| *** Ephur has quit IRC | 05:53 | |
| *** spzala has joined #openstack-keystone | 05:53 | |
| *** spzala has quit IRC | 05:53 | |
| *** Ephur has joined #openstack-keystone | 05:53 | |
| *** Ephur has quit IRC | 05:53 | |
| *** spzala has joined #openstack-keystone | 05:53 | |
| *** spzala has quit IRC | 05:54 | |
| *** Ephur has joined #openstack-keystone | 05:54 | |
| *** spzala has joined #openstack-keystone | 05:54 | |
| *** Ephur has quit IRC | 05:54 | |
| *** spzala has quit IRC | 05:54 | |
| *** Ephur has joined #openstack-keystone | 05:55 | |
| *** spzala has joined #openstack-keystone | 05:55 | |
| *** spzala has quit IRC | 05:55 | |
| *** Ephur has quit IRC | 05:55 | |
| *** spzala has joined #openstack-keystone | 05:56 | |
| *** spzala has quit IRC | 05:56 | |
| *** Ephur has joined #openstack-keystone | 05:56 | |
| *** Ephur has quit IRC | 05:56 | |
| *** spzala has joined #openstack-keystone | 05:56 | |
| *** Ephur has joined #openstack-keystone | 05:57 | |
| *** spzala has quit IRC | 05:57 | |
| *** Ephur has quit IRC | 05:57 | |
| *** spzala has joined #openstack-keystone | 05:57 | |
| *** spzala has quit IRC | 05:57 | |
| *** Ephur has joined #openstack-keystone | 05:58 | |
| *** Ephur has quit IRC | 05:58 | |
| *** spzala has joined #openstack-keystone | 05:58 | |
| *** spzala has quit IRC | 05:58 | |
| *** Ephur has joined #openstack-keystone | 05:58 | |
| *** spzala has joined #openstack-keystone | 05:59 | |
| *** Ephur has quit IRC | 05:59 | |
| *** spzala has quit IRC | 05:59 | |
| *** spzala has joined #openstack-keystone | 05:59 | |
| *** Ephur has joined #openstack-keystone | 05:59 | |
| *** spzala has quit IRC | 06:00 | |
| *** Ephur has quit IRC | 06:00 | |
| *** spzala has joined #openstack-keystone | 06:00 | |
| *** spzala has quit IRC | 06:00 | |
| *** Ephur has joined #openstack-keystone | 06:00 | |
| *** spzala has joined #openstack-keystone | 06:01 | |
| *** spzala has quit IRC | 06:01 | |
| *** Ephur has joined #openstack-keystone | 06:01 | |
| *** Ephur has quit IRC | 06:01 | |
| *** spzala has joined #openstack-keystone | 06:02 | |
| *** spzala has quit IRC | 06:02 | |
| *** Ephur has joined #openstack-keystone | 06:02 | |
| *** Ephur has quit IRC | 06:02 | |
| *** spzala has joined #openstack-keystone | 06:03 | |
| *** spzala has quit IRC | 06:03 | |
| *** Ephur has joined #openstack-keystone | 06:03 | |
| *** Ephur has quit IRC | 06:03 | |
| *** spzala has joined #openstack-keystone | 06:03 | |
| *** spzala has quit IRC | 06:03 | |
| *** Ephur has joined #openstack-keystone | 06:04 | |
| *** Ephur has quit IRC | 06:04 | |
| *** spzala has joined #openstack-keystone | 06:04 | |
| *** spzala has quit IRC | 06:04 | |
| *** Ephur has joined #openstack-keystone | 06:05 | |
| *** spzala has joined #openstack-keystone | 06:05 | |
| *** Ephur has quit IRC | 06:05 | |
| *** spzala has quit IRC | 06:05 | |
| *** spzala has joined #openstack-keystone | 06:06 | |
| *** Ephur has joined #openstack-keystone | 06:06 | |
| *** spzala has quit IRC | 06:06 | |
| *** Ephur has quit IRC | 06:06 | |
| *** spzala has joined #openstack-keystone | 06:06 | |
| *** Ephur has joined #openstack-keystone | 06:06 | |
| *** spzala has quit IRC | 06:06 | |
| *** Ephur has quit IRC | 06:07 | |
| *** spzala has joined #openstack-keystone | 06:07 | |
| *** spzala has quit IRC | 06:07 | |
| *** Ephur has joined #openstack-keystone | 06:07 | |
| *** Ephur has joined #openstack-keystone | 06:08 | |
| *** Ephur has quit IRC | 06:08 | |
| *** Ephur has joined #openstack-keystone | 06:09 | |
| *** Ephur has quit IRC | 06:09 | |
| *** Ephur has joined #openstack-keystone | 06:10 | |
| *** Ephur has quit IRC | 06:10 | |
| *** Ephur has joined #openstack-keystone | 06:11 | |
| *** Ephur has quit IRC | 06:11 | |
| *** Ephur has joined #openstack-keystone | 06:12 | |
| *** Ephur has quit IRC | 06:12 | |
| *** Ephur has joined #openstack-keystone | 06:13 | |
| *** Ephur has quit IRC | 06:13 | |
| *** Ephur has joined #openstack-keystone | 06:14 | |
| *** Ephur has quit IRC | 06:14 | |
| *** Ephur has joined #openstack-keystone | 06:14 | |
| *** guoshan has joined #openstack-keystone | 06:15 | |
| *** jaosorior has joined #openstack-keystone | 06:19 | |
| *** duonghq has joined #openstack-keystone | 06:33 | |
| *** tqtran has joined #openstack-keystone | 06:36 | |
| *** richm has quit IRC | 06:40 | |
| *** tqtran has quit IRC | 06:41 | |
| *** stevemar__ has joined #openstack-keystone | 06:56 | |
| *** stevemar__ has quit IRC | 07:01 | |
| *** spzala has joined #openstack-keystone | 07:08 | |
| *** jaosorior has quit IRC | 07:09 | |
| *** jaosorior has joined #openstack-keystone | 07:09 | |
| *** spzala has quit IRC | 07:12 | |
| *** zhangjl1 has joined #openstack-keystone | 07:13 | |
| *** zhangjl has quit IRC | 07:15 | |
| *** masuberu has joined #openstack-keystone | 07:28 | |
| *** guoshan has quit IRC | 07:28 | |
| *** guoshan has joined #openstack-keystone | 07:29 | |
| *** masber has quit IRC | 07:30 | |
| *** zhangjl1 has quit IRC | 07:33 | |
| *** zhangjl has joined #openstack-keystone | 07:33 | |
| *** josecastroleon has quit IRC | 07:50 | |
| *** josecastroleon has joined #openstack-keystone | 07:59 | |
| *** spzala has joined #openstack-keystone | 08:08 | |
| *** spzala has quit IRC | 08:13 | |
| *** code-R_ has quit IRC | 08:17 | |
| *** xiaoyang has joined #openstack-keystone | 08:21 | |
| *** liujiong has quit IRC | 08:24 | |
| *** liujiong has joined #openstack-keystone | 08:24 | |
| *** dobson has quit IRC | 08:24 | |
| *** josecastroleon1 has joined #openstack-keystone | 08:24 | |
| *** bigjools has quit IRC | 08:25 | |
| *** dobson has joined #openstack-keystone | 08:25 | |
| *** bigjools has joined #openstack-keystone | 08:26 | |
| *** bigjools has quit IRC | 08:26 | |
| *** bigjools has joined #openstack-keystone | 08:26 | |
| *** josecastroleon has quit IRC | 08:26 | |
| *** rcernin has joined #openstack-keystone | 08:34 | |
| *** mfisch has quit IRC | 08:36 | |
| *** Guest66666 has quit IRC | 08:36 | |
| *** pnavarro has joined #openstack-keystone | 08:37 | |
| *** rcernin has quit IRC | 08:37 | |
| *** rcernin has joined #openstack-keystone | 08:37 | |
| *** Guest66666 has joined #openstack-keystone | 08:38 | |
| *** mfisch has joined #openstack-keystone | 08:39 | |
| *** mfisch has quit IRC | 08:40 | |
| *** mfisch has joined #openstack-keystone | 08:40 | |
| *** amoralej|off is now known as amoralej | 08:44 | |
| *** jpich has joined #openstack-keystone | 08:46 | |
| *** asettle has joined #openstack-keystone | 08:55 | |
| *** stevemar__ has joined #openstack-keystone | 08:57 | |
| *** zzzeek has quit IRC | 09:00 | |
| *** zzzeek has joined #openstack-keystone | 09:00 | |
| *** stevemar__ has quit IRC | 09:02 | |
| *** code-R has joined #openstack-keystone | 09:05 | |
| *** spzala has joined #openstack-keystone | 09:10 | |
| *** hogepodge has quit IRC | 09:11 | |
| *** hogepodge has joined #openstack-keystone | 09:12 | |
| *** spzala has quit IRC | 09:15 | |
| *** woodster_ has quit IRC | 09:16 | |
| *** code-R_ has joined #openstack-keystone | 09:17 | |
| *** code-R has quit IRC | 09:20 | |
| *** ccard_ has quit IRC | 09:22 | |
| *** rcernin has quit IRC | 09:29 | |
| *** rcernin has joined #openstack-keystone | 09:30 | |
| *** hogepodge has quit IRC | 09:31 | |
| *** hogepodge has joined #openstack-keystone | 09:32 | |
| *** ccard_ has joined #openstack-keystone | 09:33 | |
| *** guoshan has quit IRC | 09:35 | |
| *** wanghua has quit IRC | 09:38 | |
| *** openstack has joined #openstack-keystone | 10:02 | |
| *** rcernin has quit IRC | 10:06 | |
| *** rcernin has joined #openstack-keystone | 10:07 | |
| *** voelzmo has joined #openstack-keystone | 10:08 | |
| *** hoangcx has quit IRC | 10:11 | |
| *** ma9 has joined #openstack-keystone | 10:15 | |
| *** Ephur has joined #openstack-keystone | 10:16 | |
| ma9 | Hi, is there any plan to improve the Keystone Trusts concept and limit the scope of the trust delegation? By this I mean that I could delegate a third party to access only some of the things I can usually do with my identity in Openstack, like only access the Object storage but not my VM instances for instance. | 10:17 |
| *** liujiong has quit IRC | 10:20 | |
| *** Ephur has quit IRC | 10:21 | |
| ma9 | oh maybe the role assignments do this already. | 10:22 |
| breton | yey, we broke people again with v3 | 10:24 |
| breton | ma9: talk to ayoung | 10:24 |
| breton | ma9: he drives this | 10:24 |
| ma9 | ok thanks | 10:26 |
| *** zhangjl1 has joined #openstack-keystone | 10:27 | |
| *** zhangjl has quit IRC | 10:29 | |
| *** zhangjl1 has quit IRC | 10:31 | |
| *** sirushti has quit IRC | 10:31 | |
| *** mvk has quit IRC | 10:33 | |
| *** sirushti has joined #openstack-keystone | 10:34 | |
| *** jdennis1 has quit IRC | 10:39 | |
| *** tonyb has quit IRC | 10:39 | |
| *** lbragstad has quit IRC | 10:39 | |
| *** jdennis1 has joined #openstack-keystone | 10:43 | |
| *** tonyb has joined #openstack-keystone | 10:43 | |
| *** lbragstad has joined #openstack-keystone | 10:43 | |
| *** mvk has joined #openstack-keystone | 11:09 | |
| *** bapalm has quit IRC | 11:10 | |
| *** spzala has joined #openstack-keystone | 11:12 | |
| *** richm has joined #openstack-keystone | 11:12 | |
| *** bapalm has joined #openstack-keystone | 11:15 | |
| *** spzala has quit IRC | 11:16 | |
| *** jaosorior_lunch is now known as jaosorior | 11:25 | |
| *** ma9 has left #openstack-keystone | 11:30 | |
| *** udesale has quit IRC | 11:33 | |
| *** topol has joined #openstack-keystone | 11:39 | |
| *** ChanServ sets mode: +v topol | 11:39 | |
| *** udesale has joined #openstack-keystone | 11:46 | |
| *** topol has quit IRC | 11:56 | |
| *** nicolasbock has joined #openstack-keystone | 11:59 | |
| *** topol has joined #openstack-keystone | 12:05 | |
| *** ChanServ sets mode: +v topol | 12:05 | |
| *** topol has quit IRC | 12:05 | |
| *** rodrigods is now known as rodrigods_ | 12:09 | |
| *** spzala has joined #openstack-keystone | 12:13 | |
| *** raildo has joined #openstack-keystone | 12:16 | |
| *** spzala has quit IRC | 12:18 | |
| *** catintheroof has joined #openstack-keystone | 12:25 | |
| *** udesale has quit IRC | 12:26 | |
| *** topol has joined #openstack-keystone | 12:41 | |
| *** ChanServ sets mode: +v topol | 12:41 | |
| *** topol has quit IRC | 12:41 | |
| *** stevemar__ has joined #openstack-keystone | 12:46 | |
| *** catintheroof has quit IRC | 12:48 | |
| *** stevemar__ has quit IRC | 12:50 | |
| *** rodrigods_ has quit IRC | 12:58 | |
| *** rodrigods has joined #openstack-keystone | 12:58 | |
| *** jamielennox is now known as jamielennox|away | 13:00 | |
| openstackgerrit | Rodrigo Duarte proposed openstack/python-keystoneclient: Refactor test_projects https://review.openstack.org/405359 | 13:01 |
| openstackgerrit | Rodrigo Duarte proposed openstack/keystone: Minor fix in role_assignments api-ref https://review.openstack.org/381777 | 13:03 |
| *** ma9 has joined #openstack-keystone | 13:04 | |
| *** catintheroof has joined #openstack-keystone | 13:13 | |
| *** spzala has joined #openstack-keystone | 13:13 | |
| *** voelzmo has quit IRC | 13:16 | |
| *** voelzmo has joined #openstack-keystone | 13:16 | |
| *** catinthe_ has joined #openstack-keystone | 13:18 | |
| *** spzala has quit IRC | 13:19 | |
| *** catintheroof has quit IRC | 13:19 | |
| *** amoralej is now known as amoralej|lunch | 13:21 | |
| *** jrist has quit IRC | 13:25 | |
| *** edmondsw has joined #openstack-keystone | 13:25 | |
| *** edmondsw_ has joined #openstack-keystone | 13:28 | |
| *** edmondsw_ has quit IRC | 13:28 | |
| *** edmondsw_ has joined #openstack-keystone | 13:29 | |
| *** edmondsw_ has quit IRC | 13:29 | |
| *** voelzmo has quit IRC | 13:30 | |
| *** lamt has joined #openstack-keystone | 13:34 | |
| *** stevemar__ has joined #openstack-keystone | 13:36 | |
| *** agrebennikov has joined #openstack-keystone | 13:37 | |
| ayoung | ma9 we can discuss it here | 13:39 |
| ma9 | ok | 13:39 |
| ayoung | you said | 13:39 |
| ayoung | I'm interested in the possiblity to assign trust to a user, but in a way that the trust is limited only to a given and known set of actions… for example I'd give him only access Swift instead of Nova. | 13:39 |
| ayoung | <ma9> is this done with setting 'privileges'/roles to this user? | 13:39 |
| ayoung | ma9 that is what I am working towards, but it is a hard problem to solve | 13:40 |
| ayoung | setting aside issues of admin-ness, even for the "user" role you need some better policy enforcement than comes with OpenStack by default | 13:40 |
| ayoung | I should say "Member" role...for the average, non admin user, the operations are usually not even checking the role in the policy files. Instead, they just check that the token has a project that matches the project on the resource | 13:42 |
| *** qwertyco has quit IRC | 13:47 | |
| ma9 | Mm ok I'm not sure if I understand. I'll try to be more clear myself… my use case is that I have some users who access a website. They can perform some actions while they are logged in, but the site should be able to perform some operations autonomously when the user is not logged in… for example monitoring some datasets or operations on his behalf… that the user will check once he logs in again. | 13:48 |
| *** spzala has joined #openstack-keystone | 13:48 | |
| ma9 | So I would like that the user of this page could be able to allow this website to access some of the things he can usually access via Openstack | 13:48 |
| ma9 | but I don't want this website to be able to do any harm to the other things the user can access | 13:49 |
| ma9 | and also, I would like to be able to log who performed the actions, and it it's the website there should still be a pointer to the original user | 13:50 |
| ma9 | so that if there are many users doing delegations at the same time, I know who did what at what time | 13:50 |
| ma9 | does it make sense? | 13:50 |
| ayoung | ma9 is makes sense, and that is what I am working towards | 13:54 |
| ayoung | that is why I am pushing for this: https://review.openstack.org/#/c/391624/ | 13:54 |
| ma9 | what are the current limitations? | 13:55 |
| ma9 | i'll check the links thanks | 13:55 |
| *** lamt has quit IRC | 14:01 | |
| *** lamt has joined #openstack-keystone | 14:07 | |
| *** rcernin has quit IRC | 14:10 | |
| *** voelzmo has joined #openstack-keystone | 14:11 | |
| *** rcernin has joined #openstack-keystone | 14:11 | |
| *** voelzmo has quit IRC | 14:13 | |
| *** voelzmo has joined #openstack-keystone | 14:13 | |
| *** jperry has joined #openstack-keystone | 14:14 | |
| *** Ephur has joined #openstack-keystone | 14:18 | |
| *** amoralej|lunch is now known as amoralej | 14:21 | |
| *** jrist has joined #openstack-keystone | 14:21 | |
| *** jaugustine has quit IRC | 14:22 | |
| *** Ephur has quit IRC | 14:22 | |
| *** spzala has quit IRC | 14:28 | |
| *** spzala has joined #openstack-keystone | 14:29 | |
| *** spzala has quit IRC | 14:33 | |
| *** jaugustine has joined #openstack-keystone | 14:47 | |
| *** duonghq has quit IRC | 14:48 | |
| *** duonghq has joined #openstack-keystone | 14:49 | |
| *** duonghq has quit IRC | 14:49 | |
| *** guoshan has joined #openstack-keystone | 14:49 | |
| *** duonghq_ has joined #openstack-keystone | 14:50 | |
| *** guoshan_ has joined #openstack-keystone | 14:52 | |
| *** guoshan has quit IRC | 14:52 | |
| *** code-R_ has quit IRC | 14:53 | |
| *** code-R has joined #openstack-keystone | 14:53 | |
| *** Marcellin__ has joined #openstack-keystone | 14:59 | |
| *** daemontool has joined #openstack-keystone | 15:00 | |
| openstackgerrit | Merged openstack/pycadf: Show team and repo badges on README https://review.openstack.org/402871 | 15:00 |
| *** links has quit IRC | 15:01 | |
| *** guoshan_ has quit IRC | 15:04 | |
| *** phalmos has joined #openstack-keystone | 15:04 | |
| lbragstad | breton it looks like magnum issues have been resolved | 15:06 |
| lbragstad | breton i'm following up with them now | 15:06 |
| *** jaosorior has quit IRC | 15:09 | |
| *** jaosorior has joined #openstack-keystone | 15:09 | |
| *** stevemar has joined #openstack-keystone | 15:12 | |
| *** ChanServ sets mode: +o stevemar | 15:12 | |
| *** code-R_ has joined #openstack-keystone | 15:12 | |
| stevemar | get outta here stevemar__ | 15:12 |
| stevemar__ | stevemar: ok boss | 15:12 |
| *** stevemar__ has quit IRC | 15:12 | |
| lbragstad | looks like stevemar figured out his irc bouncer | 15:13 |
| *** code-R has quit IRC | 15:15 | |
| lbragstad | stevemar not sure if you've seen http://lists.openstack.org/pipermail/openstack-dev/2016-December/108266.html yet this morning but i followed up with magnum and strigazi is working on their tests now | 15:15 |
| stevemar | ah nice, i figured there was going to be fall out... | 15:15 |
| lbragstad | it looks like they are on the right track, and mitigating the issues | 15:15 |
| lbragstad | but - i told them to come find me if they need reviews | 15:16 |
| stevemar | it broke novaclient? | 15:16 |
| lbragstad | the email says it makes one of the novaclient jobs redundant, which i don't really consider a reason to revert | 15:16 |
| lbragstad | so me that sounds like cleanup | 15:16 |
| stevemar | lbragstad: i see dims came in right away and -1'ed the revert lol | 15:16 |
| lbragstad | bknudson did too | 15:17 |
| dims | not that i had any karma to do so! | 15:17 |
| lbragstad | but it looks like rally is still having issues (cc: breton) | 15:17 |
| lbragstad | although I'm not sure what they are | 15:17 |
| lbragstad | dims o/ | 15:18 |
| *** spzala has joined #openstack-keystone | 15:18 | |
| *** edtubill has joined #openstack-keystone | 15:20 | |
| *** ravelar has joined #openstack-keystone | 15:23 | |
| *** dave-mccowan has joined #openstack-keystone | 15:25 | |
| *** stevemar_znc has joined #openstack-keystone | 15:29 | |
| lbragstad | I'm seeing quite a bit of this in the rally failures - http://logs.openstack.org/76/405376/2/check/gate-rally-dsvm-neutron-existing-users-rally/a748b7e/console.html#_2016-12-01_14_02_44_808055 | 15:30 |
| lbragstad | and http://logs.openstack.org/76/405376/2/check/gate-rally-dsvm-cli/7b4f770/console.html#_2016-12-01_14_21_27_844925 | 15:30 |
| *** jperry has quit IRC | 15:31 | |
| lbragstad | same thing with the rally-dsvm-pg-py27-cli job | 15:32 |
| dims | lbragstad : andreykurilin : breton : i see quite a few bugs in rally around keystone v3 support - https://bugs.launchpad.net/rally?field.searchtext=keystone+v3 | 15:37 |
| andreykurilin | dims: it doesn't relate to the fact that the ability to setup devstack + keystone v2 is broken | 15:38 |
| dims | andreykurilin : other than a revert, what can we do? | 15:39 |
| openstackgerrit | Richard Avelar proposed openstack/keystone: Print name with duplicate error on user creation https://review.openstack.org/405104 | 15:39 |
| *** code-R_ has quit IRC | 15:40 | |
| *** code-R has joined #openstack-keystone | 15:40 | |
| andreykurilin | dims: long debug to understand which devstack plugin overrides this variable or forgot about all customers who use keystone v2 and remove it from rally | 15:40 |
| dims | breton : do you have some time to help andreykurilin with this? | 15:41 |
| andreykurilin | dims: at first stage- I will turn off testing keystone v2 checks. I do not want to have blocked gates... Then, as much as I have free time, I'll look experiment with enabling devstack plugins to find the core issue. | 15:43 |
| *** dims has quit IRC | 15:46 | |
| *** adrian_otto has joined #openstack-keystone | 15:47 | |
| *** chris_hultin|AWA is now known as chris_hultin | 15:48 | |
| *** links has joined #openstack-keystone | 15:48 | |
| *** hrybacki is now known as hrybacki|IAmGE | 15:49 | |
| *** hrybacki|IAmGE is now known as hrybacki|lAmG3 | 15:49 | |
| lbragstad | this looks like the bug that I am seeing most in the latest rally failures - https://bugs.launchpad.net/rally/+bug/1441379 | 15:50 |
| openstack | Launchpad bug 1441379 in Rally "Need Rally deployment create support on domain_id or domain_name in order to support keystone v3 test (which needs domain scoped token). The current project scoped token only works in service API but not keystone v3 API (DTUG domain, user, group...)." [Medium,In progress] | 15:50 |
| *** hrybacki|lAmG3 is now known as hrybacki|l4mG3 | 15:51 | |
| lbragstad | we could probably reopen this, too https://bugs.launchpad.net/rally/+bug/1582777 | 15:52 |
| openstack | Launchpad bug 1582777 in Rally "rally does not work with keystone v3" [Critical,Fix released] - Assigned to Sergey Skripnick (eyerediskin) | 15:52 |
| andreykurilin | @lbragstad: oh...the problem is not in particular scenarios! Yes, we have some scenarios for only keystone v2, but previously(before today's change) we were able to have two separate jobs. One for keystone v2, another for v3 | 15:56 |
| andreykurilin | I do not want to have only keystone v3 jobs | 15:57 |
| andreykurilin | I want to continue to test keystone v2 scenarios to be able to satisfy customers who have only keystone v2 | 15:58 |
| lbragstad | andreykurilin ah - that makes sense | 15:58 |
| andreykurilin | Yes | 15:58 |
| andreykurilin | Even more, I had a patch which adds keystone v3 support for all rally scenarios | 15:59 |
| lbragstad | andreykurilin but all scenarios now are expected to work against v2.0, not v3 | 15:59 |
| *** code-R_ has joined #openstack-keystone | 16:00 | |
| andreykurilin | @lbragstad: yes. But those scenarios which doesn't support keystone v3 yet can be included in keystone v2 job | 16:00 |
| *** dims has joined #openstack-keystone | 16:00 | |
| andreykurilin | As it who it worked before | 16:00 |
| breton | dims: yep | 16:01 |
| *** adrian_otto has quit IRC | 16:01 | |
| *** code-R has quit IRC | 16:02 | |
| *** dave-mccowan has quit IRC | 16:02 | |
| *** ma9 has left #openstack-keystone | 16:03 | |
| dims | thank you breton ! | 16:03 |
| andreykurilin | @lbragstad Even when my patch which finish keystone v3 support for all scenarios will be merged, it will not help to setup job to test those scenarios with keystone v2. Please do not merge to separate issues: inability to setup keystone v2 job and keystone v2 only rally scenarios | 16:04 |
| *** topol has joined #openstack-keystone | 16:04 | |
| *** ChanServ sets mode: +v topol | 16:04 | |
| *** voelzmo has quit IRC | 16:05 | |
| andreykurilin | @dims ^ it relates to your message too | 16:06 |
| dims | ack andreykurilin | 16:06 |
| *** spzala_ has joined #openstack-keystone | 16:07 | |
| *** spzala has quit IRC | 16:09 | |
| *** stevemar_znc is now known as topol_ | 16:12 | |
| *** rcernin has quit IRC | 16:13 | |
| *** dave-mccowan has joined #openstack-keystone | 16:16 | |
| *** phalmos has quit IRC | 16:16 | |
| *** chrisplo has joined #openstack-keystone | 16:16 | |
| *** ChanServ sets mode: +v topol_ | 16:18 | |
| *** topol has quit IRC | 16:20 | |
| *** topol_ is now known as topol | 16:20 | |
| stevemar | new keystone libraries are out: middleware at 4.11.0, auth at 2.16.0, client at 3.8.0 | 16:30 |
| *** jaosorior has quit IRC | 16:30 | |
| *** adrian_otto has joined #openstack-keystone | 16:31 | |
| *** browne has joined #openstack-keystone | 16:40 | |
| *** adrian_otto has quit IRC | 16:44 | |
| openstackgerrit | Ron De Rose proposed openstack/keystone-specs: Extend user API to support federated attributes https://review.openstack.org/397410 | 16:46 |
| *** dave-mccowan has quit IRC | 16:46 | |
| *** josecastroleon1 has quit IRC | 16:48 | |
| *** rcernin has joined #openstack-keystone | 16:50 | |
| *** adrian_otto has joined #openstack-keystone | 16:52 | |
| *** links has quit IRC | 16:53 | |
| *** links has joined #openstack-keystone | 16:53 | |
| *** dave-mccowan has joined #openstack-keystone | 16:56 | |
| *** edmondsw has quit IRC | 16:59 | |
| *** edmondsw has joined #openstack-keystone | 16:59 | |
| *** jpich has quit IRC | 17:07 | |
| breton | dims: andreykurilin: lbragstad: how do you think, will https://review.openstack.org/405536 help? | 17:10 |
| breton | i don't know how to check | 17:10 |
| breton | add depends-on in the patch with failing jobs? | 17:10 |
| andreykurilin | breton: unfortunately, depends-on is not work for infra patches :( | 17:11 |
| openstackgerrit | Samuel Pilla proposed openstack/keystone: Add password expiration queries for PCI-DSS https://review.openstack.org/403898 | 17:13 |
| *** asettle has quit IRC | 17:24 | |
| agrebennikov | lbragstad, are you around by chance? | 17:30 |
| lbragstad | agrebennikov kind of | 17:30 |
| lbragstad | agrebennikov what's uo? | 17:30 |
| agrebennikov | 17:30 | |
| lbragstad | up* | 17:30 |
| *** kukacz has joined #openstack-keystone | 17:31 | |
| *** spzala_ has quit IRC | 17:33 | |
| stevemar | if rally is the only project that broke due to the devstack change i'm really impressed | 17:36 |
| *** chris_hultin is now known as chris_hultin|AWA | 17:40 | |
| morgan | stevemar: agreed | 17:40 |
| *** chris_hultin|AWA is now known as chris_hultin | 17:40 | |
| * morgan just responded to the thread as well. | 17:41 | |
| morgan | lbragstad: let me know if you need help with rally getting v3 working. | 17:41 |
| morgan | stevemar: does this mean v2 is effectively dead (at long last)... I mean getting to the removal point ;) (obvs not this cycle) | 17:42 |
| *** chlong has joined #openstack-keystone | 17:45 | |
| *** browne has quit IRC | 17:47 | |
| stevemar | morgan: it means our promise to remove it in Q isn't just a vague threat :) | 17:47 |
| *** ayoung has quit IRC | 17:48 | |
| stevemar | morgan: when I spoke with a few ops at openstack day, everyone is pretty much OK removing the admin / CRUD v2 APIs | 17:48 |
| lbragstad | that'd be awesome | 17:48 |
| morgan | this is damn good news. | 17:48 |
| morgan | so good. | 17:48 |
| morgan | so very good. | 17:48 |
| stevemar | we should probably always keep the APIs around, we can't "remove" them i think... | 17:49 |
| morgan | in q I think deleting the code is sane. | 17:50 |
| stevemar | morgan: i thought we could never remove an API? | 17:50 |
| morgan | v2 keystone is a special exception | 17:50 |
| morgan | we have approval for it to go away | 17:51 |
| stevemar | morgan: we do? | 17:51 |
| morgan | when the TC made the resolution a couple things that were long in progress were ok'd to be removed. | 17:51 |
| morgan | glance v1 I think, keystone v2, and one more. | 17:52 |
| *** code-R_ has quit IRC | 17:52 | |
| morgan | since it was in works long. before that resolution was considered. | 17:52 |
| stevemar | ah | 17:52 |
| stevemar | interesting | 17:52 |
| *** code-R has joined #openstack-keystone | 17:52 | |
| morgan | and because v2 has unfixable security flaws. | 17:52 |
| morgan | e.g. simplistic rbac | 17:52 |
| openstackgerrit | Andrey Grebennikov proposed openstack/keystone: Allow to specify ID on project creation https://review.openstack.org/403866 | 17:53 |
| stevemar | morgan: lol "rbac" | 17:53 |
| *** code-R has quit IRC | 17:53 | |
| stevemar | if it only works with one role is it really rbac :) | 17:53 |
| morgan | we simply can't fix it without breaking the contract... and v2 lacks basic features we lean on in other projects. | 17:53 |
| *** code-R has joined #openstack-keystone | 17:54 | |
| morgan | so v2 code is slated for removal as soon as we can (aka Q) | 17:54 |
| morgan | but v3 APIs may not ever be removed. | 17:54 |
| morgan | stevemar: funny thing, the app I use to track my migraines ... asked me why I wasn't using it anymore... I had to send them an email saying I do use it, just nothing to report! :) | 17:56 |
| stevemar | morgan: probably something to do with v2 going away :P | 17:59 |
| stevemar | morgan: fernet tokens default, v3 default, encrypted credentials default, performance is pretty good. this has all been a long time coming | 18:01 |
| morgan | Gerber *cough* | 18:01 |
| morgan | erm. | 18:01 |
| morgan | screw off autocorrect... | 18:02 |
| stevemar | fernet? | 18:02 |
| morgan | fernet* | 18:02 |
| morgan | yes. | 18:02 |
| stevemar | not a fan of it by default? | 18:02 |
| morgan | Android autocorrect is worse than iOS at this point. | 18:03 |
| *** code-R has quit IRC | 18:04 | |
| morgan | still not, but that is because of the added operational cost. | 18:11 |
| morgan | but I have said over and over I won't block making it default. | 18:11 |
| mordred | morgan, stevemar: by the time you remove v2 I hope to have all of my client testing of v2 fully requests_mock driven anyway, so I won't scream too much | 18:11 |
| *** ravelar has quit IRC | 18:12 | |
| morgan | ideally uuid tokens would validate the same as fernet except in the db vs encoded... then we would drop uuid at the same time as v2 | 18:12 |
| morgan | or mark deprecated that is. | 18:12 |
| morgan | the fact we validate uuid differently than fernet really bothers me, since it means we have multiple regression points we have to maintain. | 18:13 |
| morgan | mordred: ++ | 18:13 |
| mordred | hopefully over the next six months we'll have a bunch of public clouds actually roll out v3 | 18:13 |
| andreykurilin | mordred: I replied to you reply :) | 18:15 |
| *** voelzmo has joined #openstack-keystone | 18:15 | |
| andreykurilin | stevemar: rally job is broken since we want to check that our scenarios work with keystone v2 and that job was designed to work only with keystone v2. I think all other openstack jobs are not broken since they do not have restriction to check only keystone v2. | 18:17 |
| *** mvk has quit IRC | 18:17 | |
| morgan | andreykurilin: please keep in mind the deprecation and removal plans of v2... Q cycle | 18:17 |
| morgan | stevemar: related to migraines... i even did a 6-week caffeine detox... no migraine. clearly it is keystone being awesome :P | 18:19 |
| mordred | andreykurilin: I replied? OH - morgan ... yay tab complete :) | 18:19 |
| andreykurilin | morgan: I'm ok about it:) as I mentioned in thread, I had a patch to port all remaining scenarios to work with keystone v3. It is tested and will be merged soon. But it doesn't change my wish to test our scenarios with keystone v2 as much as possible | 18:19 |
| morgan | mordred: mor<tab> fail | 18:19 |
| andreykurilin | mordred: oh... sorry:) | 18:19 |
| morgan | mordred: hehe hold on. | 18:20 |
| *** morgan is now known as morgred | 18:20 | |
| morgred | mordred: even better :P | 18:20 |
| andreykurilin | mordred: but you can read my reply too. I'm not against :D | 18:20 |
| morgred | mordred: right? | 18:20 |
| mordred | andreykurilin: yah - shade also has a keystone v2 functional test - I think when v2 gets removed in q we'll try to set that job to run on stable/p at least until p is removed | 18:20 |
| *** amoralej is now known as amoralej|off | 18:20 | |
| mordred | we have a similar issue wanting to keep testing against nova-network for as long as possible after its removal because it still exists in the wild | 18:21 |
| *** morgred is now known as morgan | 18:21 | |
| andreykurilin | mordred: I think in near future(I hope before Ocata will be closed), I'll add jobs to check rally against openstack stable branches...and we continue to check keystone v2 for a long time :) | 18:23 |
| andreykurilin | nova-network...eh... | 18:23 |
| mordred | andreykurilin: ++ to stable branches - and yah, I know of at least one public cloud running nova network, and we want to make sure our users don't get screwed by that :) | 18:23 |
| andreykurilin | I understand that we need to continue to test it too, but I want to get rid of it... | 18:23 |
| andreykurilin | I do not like nova-net at all | 18:24 |
| andreykurilin | :) | 18:24 |
| andreykurilin | mordred: we have a statement that rally cleans up all created resources... but in case of nova-net this statement is not true. It is impossible to remove default security groups even for deleted networks... | 18:25 |
| andreykurilin | ok, AJaeger put +2W to possible fix for our jobs. I hope it will help | 18:26 |
| mordred | andreykurilin: yah. nova-net is _terrible_ | 18:26 |
| *** pnavarro has quit IRC | 18:26 | |
| andreykurilin | mordred: I like that I can complain about novanet here without any opponents... please, do not repost my messages to #openstack-nova channel :D | 18:28 |
| mordred | heheh | 18:29 |
| *** browne has joined #openstack-keystone | 18:29 | |
| mordred | andreykurilin: well, as an end-user, I can report that it is a terrible experience. I do not have much opinion as an operator :) | 18:29 |
| *** cheran has joined #openstack-keystone | 18:34 | |
| morgan | as a developer, neutron is a nightmare to setup consistently when testing a full cloud deployment | 18:35 |
| morgan | nova-net "worked" | 18:35 |
| morgan | out of the box... with basic functionality | 18:36 |
| * morgan had to ask at least 10 people for a "how to get neutron working consistently in devstack" at one point | 18:36 | |
| morgan | s/is/was | 18:36 |
| morgan | i haven't done it in a while. | 18:36 |
| morgan | stevemar: going to ask for a release of ksa once we land the taskmanager interface. fwiw | 18:37 |
| morgan | stevemar: also https://review.openstack.org/#/c/405007/ - mfa spec | 18:37 |
| *** tqtran has joined #openstack-keystone | 18:39 | |
| *** voelzmo has quit IRC | 18:45 | |
| stevemar | morgan: totes willing to release new version once it's merged | 18:45 |
| *** ravelar has joined #openstack-keystone | 18:47 | |
| *** diazjf has joined #openstack-keystone | 18:48 | |
| *** voelzmo has joined #openstack-keystone | 18:50 | |
| openstackgerrit | Samuel Pilla proposed openstack/keystone: API Documentation for user password expires https://review.openstack.org/405574 | 18:54 |
| *** daemontool has quit IRC | 18:55 | |
| *** dave-mccowan has quit IRC | 18:59 | |
| *** ravelar has quit IRC | 19:13 | |
| *** mvk has joined #openstack-keystone | 19:14 | |
| *** voelzmo has quit IRC | 19:20 | |
| *** voelzmo has joined #openstack-keystone | 19:20 | |
| *** spzala has joined #openstack-keystone | 19:23 | |
| *** spzala has quit IRC | 19:26 | |
| *** spzala has joined #openstack-keystone | 19:27 | |
| *** voelzmo has quit IRC | 19:27 | |
| *** diazjf has quit IRC | 19:27 | |
| *** david-lyle_ has joined #openstack-keystone | 19:28 | |
| *** david-lyle has quit IRC | 19:31 | |
| *** openstackgerrit has quit IRC | 19:32 | |
| *** openstackgerrit has joined #openstack-keystone | 19:33 | |
| *** openstackgerrit has quit IRC | 19:36 | |
| *** voelzmo has joined #openstack-keystone | 19:37 | |
| *** ravelar has joined #openstack-keystone | 19:39 | |
| *** voelzmo has quit IRC | 19:39 | |
| *** voelzmo has joined #openstack-keystone | 19:40 | |
| *** dave-mccowan has joined #openstack-keystone | 19:41 | |
| *** diazjf has joined #openstack-keystone | 19:43 | |
| *** voelzmo has quit IRC | 19:44 | |
| *** bknudson has left #openstack-keystone | 19:46 | |
| *** josecastroleon has joined #openstack-keystone | 19:49 | |
| *** spzala has quit IRC | 19:50 | |
| *** openstackgerrit has joined #openstack-keystone | 19:50 | |
| openstackgerrit | Morgan Fainberg proposed openstack/keystoneauth: Implement TaskContextManager for Session https://review.openstack.org/362473 | 19:50 |
| morgan | mordred, stevemar, lbragstad, jamielennox|away, ^ new context manager version in ksa | 19:51 |
| *** phalmos has joined #openstack-keystone | 19:52 | |
| morgan | please let me know if there is anything else that is missing/required for it at this point | 19:52 |
| *** jamielennox|away is now known as jamielennox | 19:53 | |
| *** josecastroleon has quit IRC | 19:53 | |
| *** phalmos has quit IRC | 19:56 | |
| *** spzala has joined #openstack-keystone | 19:56 | |
| *** spzala has quit IRC | 20:01 | |
| *** david-lyle_ is now known as david-lyle | 20:01 | |
| openstackgerrit | Gage Hugo proposed openstack/keystone: Add reason to notifications for PCI-DSS https://review.openstack.org/396752 | 20:05 |
| *** ravelar has quit IRC | 20:06 | |
| *** ravelar has joined #openstack-keystone | 20:06 | |
| *** spzala has joined #openstack-keystone | 20:08 | |
| *** links has quit IRC | 20:09 | |
| openstackgerrit | ayoung proposed openstack/keystone: Refactor Authorization: https://review.openstack.org/387161 | 20:11 |
| *** bknudson has joined #openstack-keystone | 20:12 | |
| *** ChanServ sets mode: +v bknudson | 20:12 | |
| *** spzala has quit IRC | 20:12 | |
| *** spzala has joined #openstack-keystone | 20:14 | |
| openstackgerrit | ayoung proposed openstack/keystone: Refactor is_admin https://review.openstack.org/387710 | 20:16 |
| openstackgerrit | ayoung proposed openstack/keystone: Add is_admin_project check to policy.json https://review.openstack.org/257636 | 20:16 |
| *** spzala has quit IRC | 20:18 | |
| openstackgerrit | Morgan Fainberg proposed openstack/keystoneauth: Implement TaskContextManager for Session https://review.openstack.org/362473 | 20:21 |
| morgan | jamielennox: ^ addressed comments | 20:22 |
| morgan | jamielennox: I am of the opinon it is much easier to write the code encapsulated in a context manager like this than a custom requests.Session | 20:24 |
| morgan | jamielennox: since there are a lot of other moving bits and this way (with the change to pass the ksa session in) the context manager can inspect/use ksa-session details as needed now | 20:25 |
| jamielennox | morgan: yea, i'm aware making people mess with sessions is daunting | 20:26 |
| openstackgerrit | Morgan Fainberg proposed openstack/keystoneauth: Implement TaskContextManager for Session https://review.openstack.org/362473 | 20:26 |
| morgan | jamielennox: fixed a pep8 error there. | 20:27 |
| morgan | whoopse. | 20:27 |
| morgan | :) | 20:27 |
| jamielennox | morgan: so this is super pedantic, but how do feel about making TaskManager.request TaskManager.__call__ | 20:28 |
| morgan | i am not a fan of magic methods where we can avoid them | 20:29 |
| morgan | i also think it is far more explicit to not make it look like task_context_managet(self, method, url **kwargs) | 20:29 |
| jamielennox | fair enough | 20:29 |
| openstackgerrit | ayoung proposed openstack/keystone: URL pattern based RBAC Management Interface https://review.openstack.org/401808 | 20:29 |
| jamielennox | was just looking that the default implementation is basically | 20:30 |
| morgan | if i didn't want to provide this as a "template" for an object manager, i would have made this a function. | 20:30 |
| jamielennox | @contextmanager | 20:30 |
| morgan | using context lib | 20:30 |
| jamielennox | def fun(): | 20:30 |
| jamielennox | yield self.session | 20:30 |
| morgan | yep | 20:30 |
| morgan | this is just so we have a clear template for developers to work from. | 20:30 |
| jamielennox | and i'm wondering if we define that context_manager has to be a context manager rather than a subclass of TaskContextManager is it easier | 20:31 |
| jamielennox | but yea, i see the template argument | 20:31 |
| morgan | :) | 20:31 |
| *** spzala has joined #openstack-keystone | 20:31 | |
| morgan | my first pass was as a function when i re-did it and i felt it was not providing enough guidance | 20:31 |
| jamielennox | morgan: ok, so my only thing then is can we s/Task// - ksa doesn't have the notion of tasks, so i don't care SessionContextManager, RequestContextManager? | 20:33 |
| jamielennox | probably Request | 20:33 |
| jamielennox | and add a test just to validate behaviour and i'm good | 20:33 |
| *** catinthe_ has quit IRC | 20:34 | |
| morgan | Request. | 20:34 |
| morgan | not Session :P | 20:34 |
| morgan | because... yo dawg, i heard you like sessions | 20:34 |
| jamielennox | yea, it's a per requeest thing | 20:34 |
| morgan | so i put a session in your session for your sessioning session session session session session | 20:35 |
| jamielennox | oh, i'm very aware | 20:35 |
| morgan | hehe | 20:35 |
| jamielennox | should init be request_context_manager= then? | 20:35 |
| morgan | nah | 20:35 |
| jamielennox | make it explicit | 20:35 |
| *** voelzmo has joined #openstack-keystone | 20:35 | |
| morgan | lets just leave it shorter | 20:35 |
| jamielennox | ok | 20:35 |
| morgan | the docstring identifies what it is | 20:35 |
| *** spzala has quit IRC | 20:35 | |
| morgan | if there wasn't a docstring, yes | 20:36 |
| jamielennox | just no ctxt_mngr | 20:36 |
| jamielennox | use your vowels :) | 20:36 |
| morgan | srry cnt n vwls lft | 20:36 |
| openstackgerrit | Morgan Fainberg proposed openstack/keystoneauth: Implement TaskContextManager for Session https://review.openstack.org/362473 | 20:42 |
| morgan | jamielennox: ^ there ya go | 20:42 |
| morgan | renamed | 20:42 |
| morgan | bah. let me fix the commit message | 20:42 |
| *** openstack has joined #openstack-keystone | 20:42 | |
| *** spzala has joined #openstack-keystone | 20:43 | |
| openstackgerrit | Morgan Fainberg proposed openstack/keystoneauth: Implement ReqContextManager for Session https://review.openstack.org/362473 | 20:43 |
| morgan | there we go | 20:44 |
| *** ravelar has quit IRC | 20:44 | |
| *** ravelar1 has joined #openstack-keystone | 20:44 | |
| *** spzala has quit IRC | 20:47 | |
| *** adrian_otto has quit IRC | 20:48 | |
| *** spzala has joined #openstack-keystone | 20:49 | |
| *** spzala has quit IRC | 20:53 | |
| *** spzala has joined #openstack-keystone | 20:55 | |
| *** adriant has joined #openstack-keystone | 20:56 | |
| *** spzala has quit IRC | 20:59 | |
| openstackgerrit | Gage Hugo proposed openstack/keystone: Add reason to notifications for PCI-DSS https://review.openstack.org/396752 | 21:05 |
| *** voelzmo has quit IRC | 21:08 | |
| openstackgerrit | ayoung proposed openstack/keystone: IAM Models https://review.openstack.org/184651 | 21:10 |
| *** rcernin has quit IRC | 21:10 | |
| *** spzala has joined #openstack-keystone | 21:10 | |
| openstackgerrit | ayoung proposed openstack/keystone-specs: Federated Query APIs https://review.openstack.org/313604 | 21:20 |
| *** adrian_otto has joined #openstack-keystone | 21:30 | |
| openstackgerrit | Samuel Pilla proposed openstack/keystone: API Documentation for user password expires https://review.openstack.org/405574 | 21:31 |
| openstackgerrit | Brant Knudson proposed openstack/keystone: More info in schema validation error https://review.openstack.org/405006 | 21:34 |
| *** pnavarro has quit IRC | 21:37 | |
| *** Ephur has joined #openstack-keystone | 21:44 | |
| *** ravelar1 has quit IRC | 21:45 | |
| *** jrist has quit IRC | 21:49 | |
| *** spzala has quit IRC | 21:52 | |
| *** chris_hultin is now known as chris_hultin|AWA | 22:00 | |
| *** openstackgerrit has quit IRC | 22:03 | |
| *** edmondsw has quit IRC | 22:06 | |
| *** edmondsw has joined #openstack-keystone | 22:07 | |
| *** openstackgerrit has joined #openstack-keystone | 22:10 | |
| openstackgerrit | Samuel Pilla proposed openstack/keystone: API Documentation for user password expires https://review.openstack.org/405574 | 22:10 |
| *** edmondsw_ has joined #openstack-keystone | 22:10 | |
| *** jaugustine has quit IRC | 22:11 | |
| *** edmondsw has quit IRC | 22:11 | |
| *** edmondsw_ has quit IRC | 22:14 | |
| *** diazjf has quit IRC | 22:16 | |
| stevemar | andreykurilin: are you proposing we go with your spec over rderose's ? or just rebasing it? | 22:16 |
| stevemar | andreykurilin: sorry, that question is for ayoung, who is now offline | 22:17 |
| andreykurilin | stevemar: np) | 22:18 |
| rderose | stevemar: ayoung seemed agreeable to extending the user API; not use OS-FEDERATION | 22:20 |
| rderose | just working out the kinks in that spec | 22:20 |
| rderose | trying to understand how kerberos and federation play together | 22:20 |
| rderose | should have a new patch soon. | 22:20 |
| *** diazjf has joined #openstack-keystone | 22:26 | |
| gagehugo | keystone turtle looks pretty good | 22:43 |
| *** diazjf has quit IRC | 22:44 | |
| *** chlong has quit IRC | 22:50 | |
| *** edtubill has quit IRC | 22:52 | |
| *** edtubill has joined #openstack-keystone | 22:53 | |
| *** adrian_otto has quit IRC | 22:55 | |
| *** edtubill has quit IRC | 22:58 | |
| *** diazjf has joined #openstack-keystone | 23:03 | |
| *** ebalduf_ has joined #openstack-keystone | 23:10 | |
| *** masuberu has quit IRC | 23:11 | |
| *** ebalduf_ has quit IRC | 23:11 | |
| *** masber has joined #openstack-keystone | 23:12 | |
| *** ayoung has joined #openstack-keystone | 23:12 | |
| *** ChanServ sets mode: +v ayoung | 23:12 | |
| ayoung | stevemar, lbragstad are you guys OK with pushing https://review.openstack.org/#/c/405074/ through? I can't run tox for specs without it. | 23:13 |
| *** dave-mccowan has quit IRC | 23:15 | |
| lbragstad | ayoung hmm - that's weird | 23:16 |
| lbragstad | ayoung any reason why that's happening? | 23:16 |
| ayoung | lbragstad, its just cuzI upgraded to F25 | 23:16 |
| ayoung | the library that docs uses is py2 only | 23:16 |
| ayoung | with F25, it tries to build docs using python3 as the default | 23:16 |
| ayoung | and the libary in question looks unmaintained since 2009 | 23:17 |
| *** diazjf has quit IRC | 23:17 | |
| *** masber has quit IRC | 23:17 | |
| ayoung | lbragstad, until we can either fix the library and get another release, or replace it in our build system, we need to build docs with py27 | 23:18 |
| openstackgerrit | Ron De Rose proposed openstack/keystone-specs: Extend user API to support federated attributes https://review.openstack.org/397410 | 23:26 |
| jamielennox | ayoung: can we remove the library? | 23:30 |
| jamielennox | py3 is a cross project goal and if the library can't be used then replace it with something that can | 23:31 |
| openstackgerrit | ayoung proposed openstack/keystone-specs: Service Catalog Subsets by ID https://review.openstack.org/160909 | 23:31 |
| *** dave-mccowan has joined #openstack-keystone | 23:31 | |
| ayoung | jamielennox, eventually, but for now it is only used in tox when building docs | 23:31 |
| ayoung | so, the right thing is probbly to fix the upstream library, but for now, obviously the docs building is being done with 27. This is only an issue for people building specs on f25 ATM | 23:32 |
| ayoung | jamielennox, and we don't have a bug tracker for keystone-specs or I would have filed a bug | 23:32 |
| jamielennox | yea, not saying to not fix it, but i'm guessing this is not a direct dependency of keystone-specs and so this will apply everywhere | 23:33 |
| jamielennox | ayoung: feedformatter is a dependency of yasfb, authored by mr dhellmann - and i wonder if he knows it's not python 3 compatible? | 23:34 |
| ayoung | jamielennox, I canbug him about it | 23:35 |
| ayoung | Oooh it sa code.google.com page. I hope someone else has a copy o the repo | 23:36 |
| ayoung | looks like SVN | 23:36 |
| openstackgerrit | Ken'ichi Ohmichi proposed openstack/keystone: Remove CONF.os_inherit.enabled https://review.openstack.org/405679 | 23:37 |
| jamielennox | ayoung: anyway, i agree with lbragstad and reviewed, just put a note there saying yasfb is not py3 compatible and i''ll +A | 23:37 |
| ayoung | jamielennox, ++ | 23:37 |
| jamielennox | ayoung: oh, he knows: https://github.com/dhellmann/yasfb/issues/1 | 23:37 |
| *** dave-mccowan has quit IRC | 23:37 | |
| jamielennox | opened this Issue on 1 Sep 2015 - i wonder if it's maintained? | 23:38 |
| openstackgerrit | ayoung proposed openstack/keystone-specs: Fix python version to 2.7 for docs https://review.openstack.org/405074 | 23:40 |
| jamielennox | ayoung: lol, sorry, i meant in the tox.ini file | 23:41 |
| ayoung | jamielennox, ah | 23:41 |
| lbragstad | jamielennox ++ | 23:41 |
| jamielennox | so we can see when to remove it | 23:41 |
| ayoung | OK...I can do that | 23:42 |
| ayoung | jamielennox, let me see if I can get feedformatter source from svn | 23:42 |
| jamielennox | yea, it's non-trivial | 23:42 |
| jamielennox | i had a quick look | 23:42 |
| jamielennox | the replacement mentioned in the bug requires lxml :( | 23:44 |
| ayoung | jamielennox, I was just going to see if I could get feedformatter checked out and fix the error to build Py3 | 23:45 |
| morgan | ayoung, jamielennox: o/ | 23:45 |
| ayoung | it looks like a syntax change | 23:45 |
| morgan | how goes the day? | 23:45 |
| ayoung | morgan, status quo ante | 23:45 |
| morgan | ayoung: sounds about right | 23:45 |
| jamielennox | ayoung: you opting to take over ownership of a python package? | 23:45 |
| morgan | ayoung: planning on spending a chunk of time on the RBAC spec today | 23:45 |
| ayoung | jamielennox, meh. probably not. I'll make doug do it | 23:45 |
| morgan | now that I have the things I needed to propose up | 23:46 |
| ayoung | morgan, ++ | 23:46 |
| jamielennox | if he hasn't moved it off code.google.com it probbaly hasn't been touched in a while | 23:46 |
| morgan | jamielennox: likely | 23:46 |
| ayoung | jamielennox, about 7 years | 23:46 |
| jamielennox | morgan: howdy | 23:46 |
| ayoung | https://github.com/lmaurits/feedformatter might be that he just didn't update Pypi | 23:47 |
| morgan | ayoung: possibly | 23:48 |
| ayoung | there is a py3 fix in there, and I think it is the same dev | 23:48 |
| ayoung | still 4 years old | 23:48 |
| jamielennox | no published release? | 23:48 |
| morgan | ancient libraries ftl | 23:49 |
| ayoung | lmaurits | 23:49 |
| ayoung | nope, but lets see if the dev is active and willing to make a new release | 23:49 |
| ayoung | its the same person | 23:49 |
| jamielennox | so that commit seems to be in code.google.com as well: https://code.google.com/archive/p/feedformatter/source/default/commits | 23:49 |
| jamielennox | it just needs a release | 23:50 |
| jamielennox | well- i haven't tested it | 23:50 |
| jamielennox | Modern versions of Python have ElementTree in the standard library | 23:50 |
| ayoung | jamielennox, dev is still active..and in your part of the world.... .au domain name | 23:50 |
| jamielennox | it's old.. | 23:50 |
| jamielennox | ayoung: i don't know him | 23:51 |
| morgan | jamielennox: you mean you don't know everyone in .au? | 23:51 |
| lbragstad | jamielennox you mean to tell me you don't know another developer in au? | 23:51 |
| jamielennox | i know another one, just not that one | 23:52 |
| lbragstad | c'mon *how* big au anyway | 23:52 |
| jamielennox | there's like 10+ of us | 23:52 |
| lbragstad | lol | 23:52 |
| ayoung | he's the guy that did prettytable. We use that in the CLI | 23:54 |
| openstackgerrit | Ken'ichi Ohmichi proposed openstack/keystone: Remove CONF.os_inherit.enabled https://review.openstack.org/405679 | 23:56 |
| ayoung | jamielennox, BTW, the rollback to devstack setting admin_project went through. 2 of the commits now pass: glance and cinder I think | 23:58 |
| jamielennox | why? | 23:59 |
| jamielennox | oh, right, something about tempest | 23:59 |
| ayoung | jamielennox, easier to fix the projects first, then tempest | 23:59 |
| ayoung | all will happen | 23:59 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!