| *** jistr has quit IRC | 00:03 | |
| *** jistr has joined #openstack-keystone | 00:07 | |
| *** dave-mcc_ has joined #openstack-keystone | 00:08 | |
| *** dave-mccowan has quit IRC | 00:10 | |
| *** dave-mcc_ has quit IRC | 00:13 | |
| *** adrian_otto has joined #openstack-keystone | 00:30 | |
| *** dave-mccowan has joined #openstack-keystone | 00:41 | |
| *** thorst has joined #openstack-keystone | 00:41 | |
| *** thorst has quit IRC | 00:45 | |
| *** thorst has joined #openstack-keystone | 00:46 | |
| *** hoangcx has joined #openstack-keystone | 00:50 | |
| *** dave-mccowan has quit IRC | 00:51 | |
| *** adrian_otto has quit IRC | 00:52 | |
| *** voelzmo has joined #openstack-keystone | 01:35 | |
| *** voelzmo has quit IRC | 01:40 | |
| *** stevemar has quit IRC | 02:21 | |
| *** stevemar has joined #openstack-keystone | 02:21 | |
| *** links has joined #openstack-keystone | 02:25 | |
| *** ChanServ sets mode: +o stevemar | 02:26 | |
| *** links has quit IRC | 02:38 | |
| *** links has joined #openstack-keystone | 02:46 | |
| *** thorst has joined #openstack-keystone | 02:47 | |
| *** liujiong has joined #openstack-keystone | 02:50 | |
| *** thorst has quit IRC | 02:52 | |
| *** dave-mccowan has joined #openstack-keystone | 03:02 | |
| *** dave-mccowan has quit IRC | 03:06 | |
| *** severion has joined #openstack-keystone | 03:10 | |
| *** thorst has joined #openstack-keystone | 03:14 | |
| *** thorst has quit IRC | 03:14 | |
| *** dave-mccowan has joined #openstack-keystone | 03:31 | |
| *** voelzmo has joined #openstack-keystone | 03:36 | |
| *** voelzmo has quit IRC | 03:41 | |
| *** dave-mccowan has quit IRC | 03:45 | |
| *** tqtran has joined #openstack-keystone | 03:49 | |
| *** tqtran has quit IRC | 03:50 | |
| *** phalmos has joined #openstack-keystone | 03:54 | |
| *** phalmos has quit IRC | 04:13 | |
| *** adrian_otto has joined #openstack-keystone | 04:23 | |
| *** adrian_otto has quit IRC | 04:24 | |
| *** adrian_otto has joined #openstack-keystone | 04:24 | |
| *** adrian_otto has quit IRC | 04:33 | |
| *** adrian_otto has joined #openstack-keystone | 04:44 | |
| *** jperry has joined #openstack-keystone | 04:53 | |
| *** adrian_otto has quit IRC | 05:11 | |
| *** thorst has joined #openstack-keystone | 05:15 | |
| *** severion has quit IRC | 05:18 | |
| *** v1k0d3n has quit IRC | 05:18 | |
| *** thorst has quit IRC | 05:20 | |
| *** v1k0d3n has joined #openstack-keystone | 05:35 | |
| *** v1k0d3n has quit IRC | 05:48 | |
| *** v1k0d3n has joined #openstack-keystone | 05:49 | |
| *** Dinesh_Bhor has joined #openstack-keystone | 06:05 | |
| *** adrian_otto has joined #openstack-keystone | 06:06 | |
| *** adrian_otto has quit IRC | 06:14 | |
| *** adrian_otto has joined #openstack-keystone | 06:16 | |
| *** adrian_otto has quit IRC | 06:16 | |
| *** adrian_otto has joined #openstack-keystone | 06:21 | |
| *** voelzmo has joined #openstack-keystone | 06:27 | |
| *** voelzmo has quit IRC | 06:32 | |
| *** adrian_otto has quit IRC | 06:33 | |
| *** richm has quit IRC | 06:43 | |
| *** mnaser has quit IRC | 06:53 | |
| *** afazekas has quit IRC | 06:53 | |
| *** mordred has quit IRC | 06:53 | |
| *** tqtran has joined #openstack-keystone | 06:54 | |
| *** afazekas has joined #openstack-keystone | 06:57 | |
| *** Jack_I has joined #openstack-keystone | 07:00 | |
| *** mordred has joined #openstack-keystone | 07:02 | |
| *** afazekas has quit IRC | 07:02 | |
| *** g2[ATL] is now known as g2 | 07:03 | |
| *** mnaser has joined #openstack-keystone | 07:13 | |
| *** afazekas has joined #openstack-keystone | 07:13 | |
| *** tqtran has quit IRC | 07:15 | |
| *** thorst has joined #openstack-keystone | 07:16 | |
| *** edtubill has joined #openstack-keystone | 07:18 | |
| *** edtubill has quit IRC | 07:20 | |
| *** voelzmo has joined #openstack-keystone | 07:21 | |
| *** thorst has quit IRC | 07:21 | |
| *** tesseract has joined #openstack-keystone | 07:21 | |
| *** hogepodge_ has joined #openstack-keystone | 07:24 | |
| *** pcaruana has joined #openstack-keystone | 07:34 | |
| *** hogepodge_ has quit IRC | 07:37 | |
| *** liujiong has quit IRC | 07:52 | |
| *** liujiong has joined #openstack-keystone | 07:52 | |
| *** adriant has quit IRC | 08:03 | |
| *** stingaci has joined #openstack-keystone | 08:07 | |
| *** trananhkma has joined #openstack-keystone | 08:30 | |
| *** obre has joined #openstack-keystone | 08:32 | |
| *** zzzeek has quit IRC | 09:00 | |
| *** zzzeek has joined #openstack-keystone | 09:00 | |
| *** thorst has joined #openstack-keystone | 09:17 | |
| *** chrisplo_ has quit IRC | 09:18 | |
| *** chrisplo_ has joined #openstack-keystone | 09:20 | |
| *** thorst has quit IRC | 09:22 | |
| *** rha has joined #openstack-keystone | 09:33 | |
| *** rha has quit IRC | 09:33 | |
| *** rha has joined #openstack-keystone | 09:33 | |
| *** asettle has joined #openstack-keystone | 09:46 | |
| *** asettle is now known as Guest58506 | 09:46 | |
| *** mvk has quit IRC | 09:47 | |
| *** Guest58506 has quit IRC | 09:53 | |
| *** liujiong has quit IRC | 10:04 | |
| *** jperry has quit IRC | 10:11 | |
| *** hoangcx has quit IRC | 10:14 | |
| *** mvk has joined #openstack-keystone | 10:20 | |
| *** voelzmo has quit IRC | 10:43 | |
| *** asettle has joined #openstack-keystone | 10:53 | |
| *** asettle has quit IRC | 10:54 | |
| *** asettle has joined #openstack-keystone | 10:59 | |
| *** asettle__ has joined #openstack-keystone | 11:01 | |
| *** asettle has quit IRC | 11:01 | |
| *** asettle__ has quit IRC | 11:10 | |
| *** asettle has joined #openstack-keystone | 11:11 | |
| *** asettle is now known as Guest74297 | 11:11 | |
| *** richm has joined #openstack-keystone | 11:13 | |
| *** erlon_pto has joined #openstack-keystone | 11:15 | |
| *** Guest74297 has quit IRC | 11:17 | |
| *** thorst has joined #openstack-keystone | 11:18 | |
| stevemar | o/ | 11:22 |
|---|---|---|
| *** thorst has quit IRC | 11:23 | |
| *** voelzmo has joined #openstack-keystone | 11:41 | |
| *** asettle_ has joined #openstack-keystone | 11:50 | |
| *** asettle_ is now known as asettle | 11:52 | |
| *** voelzmo has quit IRC | 11:55 | |
| *** voelzmo has joined #openstack-keystone | 11:56 | |
| *** dikonoor has joined #openstack-keystone | 12:13 | |
| *** thiagolib has joined #openstack-keystone | 12:19 | |
| *** dikonoor has quit IRC | 12:34 | |
| *** dikonoor has joined #openstack-keystone | 12:34 | |
| *** nicolasbock has joined #openstack-keystone | 12:34 | |
| *** jperry has joined #openstack-keystone | 12:41 | |
| *** thorst has joined #openstack-keystone | 12:45 | |
| stevemar | o/ | 12:48 |
| *** raildo has joined #openstack-keystone | 12:58 | |
| *** jperry has quit IRC | 13:10 | |
| *** erlon_pto is now known as erlon | 13:33 | |
| breton | stevemar: https://review.openstack.org/#/q/topic:bug/1634265 :( | 13:44 |
| stevemar | breton: meh | 13:45 |
| stevemar | breton: at least its ~10 projects | 13:46 |
| stevemar | breton: not 130 | 13:46 |
| *** dave-mccowan has joined #openstack-keystone | 14:14 | |
| *** edtubill has joined #openstack-keystone | 14:22 | |
| *** jperry has joined #openstack-keystone | 14:23 | |
| *** links has quit IRC | 14:30 | |
| *** v1k0d3n has quit IRC | 14:43 | |
| *** davechen has quit IRC | 14:44 | |
| *** davechen has joined #openstack-keystone | 14:45 | |
| *** dikonoor has quit IRC | 14:51 | |
| *** mriedem has joined #openstack-keystone | 15:04 | |
| mriedem | has anyone else been seeing these 500 errors in keystone? http://logs.openstack.org/61/420261/1/check/gate-tempest-dsvm-cells-ubuntu-xenial/2b44ec1/logs/apache/keystone.txt.gz?level=TRACE#_2017-01-16_04_12_53_564 | 15:04 |
| stevemar | eh Lost connection to MySQL server | 15:05 |
| stevemar | mriedem: is it happening with other projects of just keystone? | 15:06 |
| dstanek | yuck | 15:08 |
| mriedem | checking | 15:08 |
| stevemar | dstanek: how did the bug smash go? | 15:09 |
| mriedem | looks like it's just keystone | 15:09 |
| stevemar | dstanek: we were dealing with a fire in OSC so i diverted my attention there, but will be back on keystone for the rest of the dev cycle | 15:09 |
| stevemar | mriedem: hmm | 15:09 |
| mriedem | http://logstash.openstack.org/#dashboard/file/logstash.json?query=message%3A%5C%22(pymysql.err.OperationalError)%20(2003%2C%20%5C%5C%5C%22Can't%20connect%20to%20MySQL%20server%20on%20'127.0.0.1'%20(%5BErrno%20111%5D%20Connection%20refused)%5C%5C%5C%22)%20%5BSQL%3A%20u'SELECT%201'%5D%5C%22%20AND%20message%3A%5C%22check_revocation_v3%5C%22%20AND%20tags%3A%5C%22keystone.txt%5C%22%20AND%20voting%3A1%20AND%20(build_queue%3A%5C%22check%5C% | 15:11 |
| *** chris_hultin|AWA is now known as chris_hultin | 15:11 | |
| dstanek | stevemar: i think it went well. i was in meetings in the morning so i really couldn't participate | 15:11 |
| mriedem | not sure if it matters but it's mostly on rax-ord nodes | 15:11 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone-specs: Update shadow mapping spec https://review.openstack.org/420755 | 15:12 |
| dstanek | mriedem: that's really strange | 15:12 |
| lbragstad | hmm | 15:13 |
| lbragstad | samueldmq ^ modified the spec | 15:13 |
| *** edmondsw has joined #openstack-keystone | 15:20 | |
| *** jaosorior has joined #openstack-keystone | 15:25 | |
| openstackgerrit | Merged openstack/keystoneauth: Replace yaml.load() with yaml.safe_load() https://review.openstack.org/420572 | 15:27 |
| *** edmondsw has quit IRC | 15:30 | |
| lbragstad | mriedem that logstash query doesn't seem to be rendering for me | 15:38 |
| lbragstad | mriedem how often is this popping up? | 15:38 |
| mriedem | 153 in 7 days in check and gate | 15:39 |
| mriedem | 97% failure | 15:39 |
| *** phalmos has joined #openstack-keystone | 15:39 | |
| mriedem | 79% on rax-ord odes | 15:39 |
| mriedem | *nodes | 15:39 |
| lbragstad | ah - so it's not completely exclusive to rax-ord nodes | 15:39 |
| mriedem | well 106 hits in voting jobs | 15:39 |
| lbragstad | was the first occurrence 7 days ago? | 15:40 |
| mriedem | looks like it started happening around 1/10 | 15:41 |
| mriedem | we only store up to 10 days of logs | 15:41 |
| mriedem | so that's under the 10 days | 15:41 |
| mriedem | so could be some performance impacting change made around 1/10 | 15:41 |
| mriedem | this is the bug i created btw https://bugs.launchpad.net/keystone/+bug/1656850 | 15:41 |
| openstack | Launchpad bug 1656850 in OpenStack Identity (keystone) "DBConnectionError while validating tokens in CI runs" [Undecided,New] | 15:41 |
| mriedem | i did see something about listing revocation events in the stacktrace, and https://github.com/openstack/keystone/commit/d4a890a6c8bd6927e229f4b665a982a51c130073 was 1/10 | 15:43 |
| mriedem | but ^ is just a policy change to make things more restrictive | 15:43 |
| lbragstad | right | 15:43 |
| lbragstad | token validation should bypass that since I don't think we're using policy in that sense | 15:43 |
| mriedem | https://github.com/openstack/keystone/commit/dd71d11ff524cc0bb4cb92ff4a3c9e8db1b99483 "Allow a service user to fetch a token that has expired." | 15:44 |
| mriedem | is that talking about the same change? | 15:44 |
| mriedem | lbragstad: what is the reseller feature? https://review.openstack.org/#/c/415531/ | 15:47 |
| *** stingaci has quit IRC | 15:48 | |
| lbragstad | mriedem reselling is the ability to have HM in a sense that doesn't allow projects above you to inspect projects below you | 15:48 |
| *** thiagolib has quit IRC | 15:48 | |
| lbragstad | i.e. protecting your customers if you're reselling | 15:48 |
| lbragstad | a service | 15:48 |
| *** stingaci has joined #openstack-keystone | 15:48 | |
| mriedem | does enabling that introduce more flows to the check_token operation? | 15:49 |
| lbragstad | (i think rodrigods worked on that stuff) | 15:49 |
| lbragstad | mriedem that's a good question - I am not sure | 15:49 |
| *** dave-mccowan has quit IRC | 15:50 | |
| openstackgerrit | Boris Bobrov proposed openstack/keystone: Handling of 'region' parameter as None https://review.openstack.org/304489 | 15:50 |
| *** mvk has quit IRC | 15:50 | |
| lbragstad | it's a long shot - but a new version of pymysql hasn't been released in the last week | 15:51 |
| lbragstad | by looking at the trace - it doesn't even look like the revocation check is even getting to comparing the token against the values returned from the revocation API | 15:53 |
| *** phalmos has quit IRC | 15:54 | |
| lbragstad | looks like the revocation API blows up trying to retrieve revocation events | 15:54 |
| lbragstad | fwiw - this would have been the change that allowed that for keystone server https://review.openstack.org/#/c/382098/ | 15:55 |
| *** thiagolib has joined #openstack-keystone | 15:56 | |
| stevemar | lbragstad: hmm, we just got the keystonemiddleware bits merged | 16:00 |
| stevemar | hmm, about a month ago | 16:01 |
| lbragstad | yeah - i'm seeing dec 15v | 16:01 |
| lbragstad | s/v// | 16:02 |
| stevemar | mriedem: did you guys land something that uses the allow_expired flag? | 16:02 |
| mriedem | stevemar: not that i'm aware of | 16:04 |
| openstackgerrit | Merged openstack/keystone-specs: Update shadow mapping spec https://review.openstack.org/420755 | 16:04 |
| mriedem | stevemar: we're working through the nova changes to pass a service token with the user token, but none of that is enabled in the gate yet | 16:04 |
| dstanek | still working on the gate mystery? | 16:05 |
| *** dave-mccowan has joined #openstack-keystone | 16:05 | |
| lbragstad | this is the last point where keystone passes control to pymysql - https://github.com/openstack/keystone/blob/d6410bf60b73e09b0ce2b6e71d8d4f058e19b197/keystone/revoke/backends/sql.py#L93-L114 | 16:05 |
| lbragstad | but that stuff was refactored like 3 months ago and we haven't had an issue with it | 16:05 |
| lbragstad | the only other thing that would made me a little suspicious would be https://review.openstack.org/#/c/382098/14/keystone/token/provider.py | 16:05 |
| dstanek | what's a good example of the failure? | 16:05 |
| lbragstad | but that is only modifying the token expiration comparison and that is all done before the call to list all revocation events happnes | 16:06 |
| lbragstad | dstanek http://logs.openstack.org/61/420261/1/check/gate-tempest-dsvm-cells-ubuntu-xenial/2b44ec1/logs/apache/keystone.txt.gz?level=TRACE#_2017-01-16_04_12_53_564 | 16:06 |
| lbragstad | ^ that's was I'm working off of | 16:07 |
| *** dave-mcc_ has joined #openstack-keystone | 16:08 | |
| dstanek | i wish the mysql log was captured | 16:09 |
| dstanek | seems like maybe it becomes unresponsive | 16:09 |
| *** dave-mccowan has quit IRC | 16:10 | |
| lbragstad | dstanek right - it look infra related | 16:11 |
| lbragstad | and and I can't imagine we would have merged anything that can do that across keystone/keystonemiddleware/keystoneauth in the last week | 16:12 |
| lbragstad | (but I could be wrong) | 16:12 |
| mriedem | lbragstad: we haven't bumped pymysql in upper-constraints since sept https://github.com/openstack/requirements/commit/b908491de3ba5b7609becd4d5b0c585e48f78da4 | 16:13 |
| mriedem | so i doubt it's a new release | 16:13 |
| *** voelzmo has quit IRC | 16:13 | |
| mriedem | at one point the mysql logs were captured... | 16:14 |
| dstanek | zzzeek: do you have any thoughts on http://logs.openstack.org/61/420261/1/check/gate-tempest-dsvm-cells-ubuntu-xenial/2b44ec1/logs/apache/keystone.txt.gz?level=TRACE#_2017-01-16_04_12_53_564 ? | 16:15 |
| lbragstad | mriedem yeah - i double checked that to make sure there wasn't a new release of pymysql that broke us, but they haven't released anything since last year (and we've already accounted for it in uc) | 16:15 |
| zzzeek | dstanek: that error would indicate the network was cut off to MySQL or MySQL was stopped | 16:15 |
| *** voelzmo has joined #openstack-keystone | 16:15 | |
| zzzeek | dstanek: "connection refused" is pretty unambiguous | 16:16 |
| lbragstad | (that sounds pretty infra related) | 16:16 |
| *** jose-phillips has joined #openstack-keystone | 16:16 | |
| dstanek | zzzeek: there's nothing that we could have done application side to trigger that right? | 16:16 |
| mriedem | dstanek: oom http://logs.openstack.org/61/420261/1/check/gate-tempest-dsvm-cells-ubuntu-xenial/2b44ec1/logs/syslog.txt.gz#_Jan_16_04_12_53 | 16:16 |
| *** jose-phillips has quit IRC | 16:16 | |
| zzzeek | dstanek: the "lost connection" thing can be application side but the next error 20 ms later makes it clear the network to mysql is not avalible | 16:17 |
| dstanek | mriedem: nice | 16:17 |
| dstanek | zzzeek: thanks. i just wanted to double check before i started pointing fingers, but mriedem may have just found the cause | 16:17 |
| mriedem | Jan 16 04:12:53 ubuntu-xenial-rax-ord-6682904 kernel: Killed process 16686 (mysqld) total-vm:4707732kB, anon-rss:465436kB, file-rss:13016kB | 16:17 |
| zzzeek | dstanek: the errors show it trying to connect and failing many times just within 4:12:53 this is clear | 16:18 |
| breton | yey, so kernel did it | 16:20 |
| *** phalmos has joined #openstack-keystone | 16:22 | |
| knikolla | o/ | 16:23 |
| dstanek | breton: but it's possible that keystone was the cause if we were blowing up the memory somehow | 16:23 |
| *** adrian_otto has joined #openstack-keystone | 16:31 | |
| *** kiran-r has joined #openstack-keystone | 16:32 | |
| lbragstad | Jan 16 04:12:53 ubuntu-xenial-rax-ord-6682904 kernel: Free swap = 7998540kB | 16:37 |
| lbragstad | Jan 16 04:12:53 ubuntu-xenial-rax-ord-6682904 kernel: Total swap = 7999020kB | 16:37 |
| lbragstad | this looks interesting | 16:46 |
| lbragstad | lvmetad invoked oom-killer: gfp_mask=0x26000c0, order=2, oom_score_adj=0 | 16:46 |
| *** phalmos has quit IRC | 16:48 | |
| lbragstad | looks like that is specific to LVM | 16:51 |
| lbragstad | cc dstanek mriedem ^ | 16:51 |
| *** voelzmo has quit IRC | 16:52 | |
| *** jose-phillips has joined #openstack-keystone | 16:52 | |
| dstanek | lbragstad: we need to figure out what process grew in memory between run | 16:53 |
| dstanek | s | 16:53 |
| *** jose-phi_ has joined #openstack-keystone | 16:53 | |
| lbragstad | dstanek wouldn't that be lvmetad? | 16:54 |
| *** jose-phillips has quit IRC | 16:54 | |
| dstanek | lbragstad: maybe... not sure what the message means. | 16:56 |
| dstanek | lbragstad: i guess it could be some sort of disk caching error? i think lvmetad plays a role in that | 16:57 |
| *** tqtran has joined #openstack-keystone | 16:57 | |
| *** kiran-r has quit IRC | 17:04 | |
| lbragstad | dstanek from what I've read, it looks like it reports what causes the kernel to invoke the oom-killer | 17:05 |
| *** dave-mcc_ has quit IRC | 17:06 | |
| *** phalmos has joined #openstack-keystone | 17:08 | |
| *** diazjf has joined #openstack-keystone | 17:09 | |
| lbragstad | dstanek you don't suppose this is cinder related - do you? | 17:13 |
| dstanek | lbragstad: maybe...not really sure | 17:13 |
| *** stingaci has quit IRC | 17:19 | |
| *** stingaci has joined #openstack-keystone | 17:23 | |
| *** jose-phi_ has quit IRC | 17:24 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/python-keystoneclient: Updated from global requirements https://review.openstack.org/420857 | 17:27 |
| *** stingaci has quit IRC | 17:28 | |
| *** phalmos has quit IRC | 17:29 | |
| *** stingaci has joined #openstack-keystone | 17:29 | |
| *** tesseract has quit IRC | 17:29 | |
| *** jose-phillips has joined #openstack-keystone | 17:30 | |
| *** stingaci has quit IRC | 17:30 | |
| *** stingaci has joined #openstack-keystone | 17:30 | |
| *** stingaci has quit IRC | 17:35 | |
| *** jose-phillips has quit IRC | 17:35 | |
| *** jose-phillips has joined #openstack-keystone | 17:36 | |
| *** jose-phi_ has joined #openstack-keystone | 17:40 | |
| *** phalmos has joined #openstack-keystone | 17:40 | |
| lbragstad | dstanek hmm - it looks like systemd-udevd has invoked it a couple times, too | 17:41 |
| *** jose-phillips has quit IRC | 17:43 | |
| *** adrian_otto1 has joined #openstack-keystone | 17:47 | |
| morgan | o/ | 17:48 |
| lbragstad | whatever seems to be invoking the oom-killer seems sporadic | 17:49 |
| *** adrian_otto has quit IRC | 17:51 | |
| dstanek | lbragstad: that would make sense - lvmetad listens for udev events | 17:52 |
| *** spzala has joined #openstack-keystone | 17:59 | |
| *** clenimar has joined #openstack-keystone | 18:02 | |
| lbragstad | dstanek looks like there are a bunch of things that initiate oom-killer though | 18:05 |
| lbragstad | (systemd-udevd, neutron-openvsw, ebtables, kthreadd) | 18:05 |
| *** mvk has joined #openstack-keystone | 18:06 | |
| *** portdirect is now known as intlabs | 18:14 | |
| lbragstad | grabbing lunch | 18:15 |
| *** intlabs is now known as portdirect | 18:17 | |
| morgan | stevemar: ALL the auth plugins (in keystone, the handlers) are supposed to set 'methods' right? | 18:17 |
| morgan | stevemar: ... it seems like mapped, external, and a number of others ignore that part of the spec *sigh* | 18:17 |
| morgan | in fact, oauth1 does too | 18:18 |
| morgan | wow, like we didn't require this at all =/ | 18:18 |
| morgan | going to just make authenticate deal with that. | 18:18 |
| bknudson | the method comes from the config file mapping | 18:32 |
| bknudson | IIRC we had methods in the plugins originally and then decided we didn't need it anymore. | 18:32 |
| morgan | bknudson: right, no this is from cases like rescope | 18:37 |
| morgan | bknudson: we at least track the original request auth methods | 18:37 |
| morgan | if that is not something we care about... | 18:37 |
| morgan | we can drop it | 18:37 |
| morgan | right now only token bothers to set it | 18:38 |
| morgan | this is in the token itself | 18:38 |
| morgan | i'm tracking it independently | 18:38 |
| morgan | as well | 18:38 |
| *** dave-mccowan has joined #openstack-keystone | 18:44 | |
| *** diazjf has quit IRC | 18:51 | |
| stevemar | morgan: at least no one has noticed until nowv *shrug* | 18:58 |
| morgan | stevemar: we can probably drop that info from the tokens | 18:59 |
| morgan | i am certain nothing uses it | 18:59 |
| *** voelzmo has joined #openstack-keystone | 19:02 | |
| *** diazjf has joined #openstack-keystone | 19:03 | |
| stevemar | morgan: probably | 19:04 |
| *** voelzmo has quit IRC | 19:06 | |
| stevemar | morgan: probably still needs to be supported in the request ;) | 19:12 |
| morgan | the request wont change | 19:14 |
| morgan | just the body of the token wouldn't have it | 19:14 |
| *** voelzmo has joined #openstack-keystone | 19:18 | |
| *** voelzmo has quit IRC | 19:19 | |
| rodrigods | we need to add functional tests for the auth plugins | 19:19 |
| rodrigods | i guess we can do that in the ksc functional tests | 19:19 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: Implement federated auto-provisioning https://review.openstack.org/415895 | 19:20 |
| lbragstad | knikolla around? | 19:21 |
| lbragstad | knikolla you had a comment on the shadow mapping review that asked if there was any background on why we wanted to associate a single domain to an identity provider - https://bugs.launchpad.net/keystone/+bug/1642687 | 19:23 |
| openstack | Launchpad bug 1642687 in OpenStack Identity (keystone) "Missing domain for federated users" [Medium,In progress] - Assigned to Ron De Rose (ronald-de-rose) | 19:23 |
| lbragstad | rderose ended up working on that and implementing the fix ^ | 19:23 |
| *** avarner has joined #openstack-keystone | 19:29 | |
| *** phalmos has quit IRC | 19:33 | |
| *** avarner has quit IRC | 19:33 | |
| lbragstad | stevemar ping | 19:41 |
| *** phalmos has joined #openstack-keystone | 19:44 | |
| knikolla | lbragstad: my comment was about restricting the projects to be of the same domain. i agree on keeping the users in that domain. | 19:52 |
| lbragstad | knikolla ah - got it. I thought your comment was about the one-to-one mapping in general | 19:53 |
| stevemar | lbragstad: pong | 19:55 |
| lbragstad | stevemar i'm curious if you had a strong opinion on where federated development environment documentation should live/ | 19:56 |
| *** spilla has joined #openstack-keystone | 19:56 | |
| lbragstad | in the federation section, or in the dev docs? | 19:56 |
| lbragstad | (I went with the dev docs) | 19:56 |
| *** jerrygb has joined #openstack-keystone | 19:57 | |
| stevemar | lbragstad: dev docs makes sense to me | 20:04 |
| *** voelzmo has joined #openstack-keystone | 20:05 | |
| openstackgerrit | Merged openstack/python-keystoneclient: Updated from global requirements https://review.openstack.org/420857 | 20:10 |
| *** chris_hultin is now known as chris_hultin|AWA | 20:11 | |
| *** jaugustine has joined #openstack-keystone | 20:12 | |
| *** spzala has quit IRC | 20:14 | |
| *** edmondsw has joined #openstack-keystone | 20:18 | |
| * morgan needs a non-enameled dutch oven. | 20:19 | |
| morgan | dolphm: which one do you have so i can be sure to avoid buying it and having the same issues with food being stuck in the lid. | 20:19 |
| *** voelzmo has quit IRC | 20:22 | |
| * dolphm just went to go look in the kitchen... | 20:23 | |
| dolphm | morgan: Lodge L10DOL3 (7-quart) | 20:23 |
| *** edmondsw has quit IRC | 20:23 | |
| morgan | dolphm: cool I shall not buy that one. | 20:25 |
| morgan | for now, the enameled one is enough | 20:25 |
| morgan | but i want a proper cast iron one w/o the enamel | 20:25 |
| dolphm | morgan: besides the lid, it is pretty great. i was pondering it the other day and i think the last use i'd reserve for it is probably deep frying though, which i don't do very often | 20:26 |
| morgan | dolphm: i'm in need of a new dutch oven so i can dedicate my current one for bread baking | 20:28 |
| morgan | dolphm: and i love cooking with proper cast iron and carbon steel | 20:28 |
| morgan | so, it's a win-win | 20:28 |
| *** woodster_ has joined #openstack-keystone | 20:32 | |
| *** jose-phi_ has quit IRC | 20:33 | |
| *** dave-mccowan has quit IRC | 20:34 | |
| *** jose-phillips has joined #openstack-keystone | 20:36 | |
| *** adrian_otto1 has quit IRC | 20:40 | |
| *** spzala has joined #openstack-keystone | 20:49 | |
| openstackgerrit | Morgan Fainberg proposed openstack/keystone: Add user_mfa_rules table https://review.openstack.org/418166 | 20:56 |
| openstackgerrit | Morgan Fainberg proposed openstack/keystone: Auth Method Handlers now return a response object always https://review.openstack.org/420955 | 20:56 |
| *** chris_hultin|AWA is now known as chris_hultin | 20:58 | |
| *** jamielennox|away is now known as jamielennox | 20:59 | |
| *** chris_hultin is now known as chris_hultin|AWA | 21:07 | |
| *** jose-phillips has quit IRC | 21:12 | |
| *** Jack_I has quit IRC | 21:12 | |
| *** jose-phillips has joined #openstack-keystone | 21:13 | |
| openstackgerrit | Merged openstack/keystonemiddleware: Updated from global requirements https://review.openstack.org/420838 | 21:20 |
| gagehugo | stevemar: exclude_patterns doesn't seem to acknowledge '../../keystone_tempest_plugin' at all | 21:29 |
| *** dave-mccowan has joined #openstack-keystone | 21:32 | |
| *** adrian_otto has joined #openstack-keystone | 21:33 | |
| *** edmondsw has joined #openstack-keystone | 21:40 | |
| *** edmondsw has quit IRC | 21:44 | |
| stevemar | gagehugo: oh no? | 21:45 |
| stevemar | gagehugo: what about just *keystone_tempest_plugin* | 21:46 |
| openstackgerrit | John Dennis proposed openstack/keystoneauth: Use comma as separator in ECP Accept HTTP header https://review.openstack.org/420970 | 21:50 |
| *** v1k0d3n has joined #openstack-keystone | 21:50 | |
| jamielennox | jdennis: i feel like we've made that fix before... | 21:52 |
| *** dave-mccowan has quit IRC | 21:54 | |
| *** thorst has quit IRC | 21:55 | |
| *** spilla has quit IRC | 22:01 | |
| gagehugo | stevemar: nope :( | 22:08 |
| *** spzala has quit IRC | 22:13 | |
| *** stingaci has joined #openstack-keystone | 22:20 | |
| *** thorst has joined #openstack-keystone | 22:24 | |
| *** stingaci has quit IRC | 22:24 | |
| *** thorst has quit IRC | 22:28 | |
| *** jerrygb has quit IRC | 22:34 | |
| *** chris_hultin|AWA is now known as chris_hultin | 22:36 | |
| *** jaosorior has quit IRC | 22:41 | |
| *** mriedem has quit IRC | 22:51 | |
| *** jperry has quit IRC | 23:05 | |
| *** medberry is now known as med_ | 23:05 | |
| *** jaugustine has quit IRC | 23:05 | |
| *** v1k0d3n has quit IRC | 23:08 | |
| *** edtubill has quit IRC | 23:09 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone: Implement federated auto-provisioning https://review.openstack.org/415895 | 23:12 |
| *** spzala has joined #openstack-keystone | 23:14 | |
| *** spzala has quit IRC | 23:18 | |
| *** jerrygb has joined #openstack-keystone | 23:22 | |
| *** jose-phillips has quit IRC | 23:23 | |
| *** jerrygb has quit IRC | 23:26 | |
| *** jose-phillips has joined #openstack-keystone | 23:29 | |
| *** chris_hultin is now known as chris_hultin|AWA | 23:31 | |
| *** jerrygb has joined #openstack-keystone | 23:34 | |
| *** spzala has joined #openstack-keystone | 23:36 | |
| *** chris_hultin|AWA is now known as chris_hultin | 23:39 | |
| *** knikolla has quit IRC | 23:47 | |
| *** knikolla has joined #openstack-keystone | 23:47 | |
| *** knikolla has quit IRC | 23:47 | |
| *** knikolla has joined #openstack-keystone | 23:48 | |
| *** phalmos has quit IRC | 23:48 | |
| *** edmondsw has joined #openstack-keystone | 23:55 | |
| *** adrian_otto has quit IRC | 23:58 | |
| *** edmondsw has quit IRC | 23:59 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!