*** agrebennikov has quit IRC | 00:07 | |
rderose | notmorgan: sorry, stepped away for a bit | 00:09 |
---|---|---|
rderose | notmorgan: gotcha regarding linking sql and ldap | 00:10 |
rderose | notmorgan: yeah, so definitely possible | 00:11 |
*** catintheroof has quit IRC | 00:31 | |
*** tovin07 has joined #openstack-keystone | 00:33 | |
*** jamielennox is now known as jamielennox|away | 00:41 | |
*** namnh has joined #openstack-keystone | 00:43 | |
*** jamielennox|away is now known as jamielennox | 00:44 | |
*** zsli has joined #openstack-keystone | 00:47 | |
*** erhudy has quit IRC | 00:50 | |
*** liujiong has joined #openstack-keystone | 01:03 | |
*** portdirect is now known as sdake______ | 01:09 | |
*** sdake______ is now known as portdirect | 01:09 | |
*** zhurong has joined #openstack-keystone | 01:15 | |
*** zsli_ has joined #openstack-keystone | 01:22 | |
*** zsli has quit IRC | 01:24 | |
*** rderose has quit IRC | 01:30 | |
*** MasterOfBugs has quit IRC | 01:38 | |
*** pramodrj07 has quit IRC | 01:39 | |
*** thorst has quit IRC | 01:58 | |
*** zsli__ has joined #openstack-keystone | 02:19 | |
*** thorst has joined #openstack-keystone | 02:21 | |
*** zsli_ has quit IRC | 02:22 | |
*** thorst has quit IRC | 02:23 | |
*** zsli_ has joined #openstack-keystone | 02:24 | |
*** erlon has joined #openstack-keystone | 02:27 | |
*** zsli__ has quit IRC | 02:28 | |
*** prashkre has joined #openstack-keystone | 02:29 | |
openstackgerrit | Gage Hugo proposed openstack/keystone-specs master: Add Project tags https://review.openstack.org/431785 | 02:29 |
*** yuvalb has quit IRC | 02:37 | |
openstackgerrit | Merged openstack/keystone master: Modify examples to use v3 URLs https://review.openstack.org/440807 | 02:38 |
*** yuvalb has joined #openstack-keystone | 02:38 | |
openstackgerrit | Gage Hugo proposed openstack/python-keystoneclient master: Remove pbr warnerrors in favor of sphinx check https://review.openstack.org/441468 | 02:41 |
openstackgerrit | Gage Hugo proposed openstack/keystonemiddleware master: Added "warning-is-error" sphinx check for docs https://review.openstack.org/439819 | 02:45 |
openstackgerrit | Gage Hugo proposed openstack/keystoneauth master: Remove pbr warnerrors in favor of sphinx check https://review.openstack.org/439797 | 02:51 |
*** prashkre has quit IRC | 03:01 | |
*** aasthad has quit IRC | 03:02 | |
*** ngupta has joined #openstack-keystone | 03:03 | |
*** chlong_ has joined #openstack-keystone | 03:15 | |
*** chlong has quit IRC | 03:15 | |
*** frontrunner has quit IRC | 03:16 | |
*** thorst has joined #openstack-keystone | 03:24 | |
*** thorst has quit IRC | 03:28 | |
*** oomichi has quit IRC | 03:30 | |
*** oomichi has joined #openstack-keystone | 03:33 | |
*** chris_hultin|AWA is now known as chris_hultin | 03:52 | |
*** thorst has joined #openstack-keystone | 04:00 | |
*** namnh has quit IRC | 04:01 | |
*** zhurong has quit IRC | 04:01 | |
*** thorst has quit IRC | 04:03 | |
*** zsli__ has joined #openstack-keystone | 04:05 | |
*** zsli_ has quit IRC | 04:07 | |
*** nicolasbock has quit IRC | 04:19 | |
*** chris_hultin is now known as chris_hultin|AWA | 04:19 | |
*** zsli_ has joined #openstack-keystone | 04:24 | |
*** zsli has joined #openstack-keystone | 04:26 | |
*** zsli__ has quit IRC | 04:26 | |
*** zsli_ has quit IRC | 04:28 | |
*** masterjcool has quit IRC | 04:30 | |
*** links has joined #openstack-keystone | 04:41 | |
*** masterjcool has joined #openstack-keystone | 04:42 | |
*** zsli has quit IRC | 04:43 | |
*** zsli has joined #openstack-keystone | 04:44 | |
*** zsli has quit IRC | 04:53 | |
*** zsli has joined #openstack-keystone | 04:54 | |
*** zsli has quit IRC | 04:55 | |
*** zsli has joined #openstack-keystone | 05:00 | |
*** zsli has quit IRC | 05:02 | |
*** zsli has joined #openstack-keystone | 05:03 | |
*** thorst has joined #openstack-keystone | 05:04 | |
*** erlon has quit IRC | 05:05 | |
*** zsli has quit IRC | 05:08 | |
*** wxy has quit IRC | 05:18 | |
*** liujiong_lj has joined #openstack-keystone | 05:19 | |
*** thorst has quit IRC | 05:19 | |
*** edmondsw has joined #openstack-keystone | 05:20 | |
*** liujiong has quit IRC | 05:20 | |
*** venki has quit IRC | 05:21 | |
*** edmondsw has quit IRC | 05:25 | |
*** Shunli has joined #openstack-keystone | 05:29 | |
*** adriant has quit IRC | 05:39 | |
*** Shunli has quit IRC | 05:41 | |
*** waj334 has quit IRC | 06:09 | |
*** waj334 has joined #openstack-keystone | 06:09 | |
*** knangia has quit IRC | 06:11 | |
*** Shunli has joined #openstack-keystone | 06:13 | |
*** zsli_ has joined #openstack-keystone | 06:15 | |
*** zsli__ has joined #openstack-keystone | 06:16 | |
*** thorst has joined #openstack-keystone | 06:16 | |
*** Shunli has quit IRC | 06:17 | |
*** zsli_ has quit IRC | 06:20 | |
*** thorst has quit IRC | 06:20 | |
*** zsli__ has quit IRC | 06:20 | |
*** liujiong_lj is now known as liujiong | 06:22 | |
*** ngupta has quit IRC | 06:22 | |
*** Shunli has joined #openstack-keystone | 06:23 | |
*** Shunli has quit IRC | 06:23 | |
*** ngupta has joined #openstack-keystone | 06:23 | |
*** zsli_ has joined #openstack-keystone | 06:25 | |
*** ngupta has quit IRC | 06:27 | |
*** zsli__ has joined #openstack-keystone | 06:34 | |
*** zsli__ has quit IRC | 06:34 | |
*** zsli__ has joined #openstack-keystone | 06:35 | |
*** zsli_ has quit IRC | 06:35 | |
*** wxy has joined #openstack-keystone | 06:38 | |
*** zsli__ has quit IRC | 06:40 | |
*** zsli__ has joined #openstack-keystone | 06:41 | |
*** richm has quit IRC | 06:42 | |
*** pcaruana has joined #openstack-keystone | 06:43 | |
*** gyee has quit IRC | 06:46 | |
*** zsli_ has joined #openstack-keystone | 06:46 | |
*** zsli__ has quit IRC | 06:48 | |
*** zsli__ has joined #openstack-keystone | 06:50 | |
*** zsli_ has quit IRC | 06:52 | |
*** Shunli has joined #openstack-keystone | 06:52 | |
*** Shunli has quit IRC | 06:53 | |
*** markvoelker has quit IRC | 06:54 | |
*** zsli__ has quit IRC | 06:54 | |
*** Shunli has joined #openstack-keystone | 06:55 | |
*** zsli_ has joined #openstack-keystone | 06:59 | |
*** Shunli has quit IRC | 06:59 | |
*** zsli_ has quit IRC | 07:02 | |
*** zsli_ has joined #openstack-keystone | 07:02 | |
*** h5t4_ has joined #openstack-keystone | 07:04 | |
*** zsli_ has quit IRC | 07:06 | |
*** Shunli has joined #openstack-keystone | 07:13 | |
*** zsli_ has joined #openstack-keystone | 07:14 | |
*** zsli_ has quit IRC | 07:15 | |
*** thorst has joined #openstack-keystone | 07:17 | |
*** Shunli has quit IRC | 07:17 | |
*** thorst has quit IRC | 07:21 | |
*** rcernin has joined #openstack-keystone | 07:40 | |
*** tesseract has joined #openstack-keystone | 07:43 | |
*** henrynash has joined #openstack-keystone | 07:46 | |
*** jaosorior has joined #openstack-keystone | 07:50 | |
*** jlvillal has quit IRC | 07:51 | |
*** henrynash has quit IRC | 07:53 | |
*** markvoelker has joined #openstack-keystone | 08:12 | |
*** jlvillal has joined #openstack-keystone | 08:12 | |
*** liujiong has quit IRC | 08:16 | |
*** liujiong has joined #openstack-keystone | 08:16 | |
*** thorst has joined #openstack-keystone | 08:18 | |
*** chlong_ has quit IRC | 08:18 | |
*** thorst has quit IRC | 08:22 | |
*** Jack_I has joined #openstack-keystone | 08:29 | |
*** dulek has joined #openstack-keystone | 08:50 | |
dulek | Hey! Can you tell me if "As of the Newton release, keystone supports two different approaches to upgrading across releases." means that I can upgrade Mitaka to Newton without downtime, or is it supported only since Newton->Ocata upgrade? | 08:51 |
*** edmondsw has joined #openstack-keystone | 08:57 | |
*** zzzeek has quit IRC | 09:00 | |
*** zzzeek has joined #openstack-keystone | 09:00 | |
*** edmondsw has quit IRC | 09:01 | |
*** openstackgerrit has quit IRC | 09:03 | |
*** pnavarro has joined #openstack-keystone | 09:08 | |
*** thorst has joined #openstack-keystone | 09:18 | |
*** jaosorior is now known as jaosorior_brb | 09:19 | |
*** thorst has quit IRC | 09:23 | |
*** thorst has joined #openstack-keystone | 09:40 | |
*** thorst has quit IRC | 09:44 | |
*** ngupta has joined #openstack-keystone | 10:26 | |
*** ngupta has quit IRC | 10:30 | |
*** Haaibo has quit IRC | 10:37 | |
*** thorst has joined #openstack-keystone | 10:40 | |
*** thorst has quit IRC | 10:45 | |
*** nicolasbock has joined #openstack-keystone | 11:04 | |
*** zhurong has joined #openstack-keystone | 11:07 | |
*** liujiong has quit IRC | 11:09 | |
*** masber has quit IRC | 11:09 | |
*** masber has joined #openstack-keystone | 11:10 | |
*** richm has joined #openstack-keystone | 11:12 | |
*** catintheroof has joined #openstack-keystone | 11:20 | |
*** ngupta has joined #openstack-keystone | 11:26 | |
*** ngupta has quit IRC | 11:31 | |
*** thorst has joined #openstack-keystone | 11:41 | |
*** thorst has quit IRC | 11:46 | |
*** jaosorior_brb is now known as jaosorior | 12:03 | |
*** raildo has joined #openstack-keystone | 12:15 | |
*** ngupta has joined #openstack-keystone | 12:27 | |
*** catinthe_ has joined #openstack-keystone | 12:29 | |
*** catintheroof has quit IRC | 12:29 | |
*** david-lyle has quit IRC | 12:30 | |
*** catintheroof has joined #openstack-keystone | 12:30 | |
*** catinthe_ has quit IRC | 12:31 | |
*** ngupta has quit IRC | 12:31 | |
*** david-lyle has joined #openstack-keystone | 12:33 | |
*** thorst has joined #openstack-keystone | 12:33 | |
*** zhurong has quit IRC | 12:35 | |
*** erlon has joined #openstack-keystone | 12:37 | |
*** frontrunner has joined #openstack-keystone | 13:05 | |
*** murugesh has joined #openstack-keystone | 13:08 | |
murugesh | Hi There | 13:08 |
murugesh | I have issue in keystone authentication with swift | 13:08 |
murugesh | I am using openstack mitaka version | 13:09 |
murugesh | i see the following error in /var/log/swift/swift.log | 13:09 |
murugesh | proxy-server:Unable to validate token: Identity server rejected authorization necessary to fetch token data | 13:10 |
murugesh | proxy-server: Identity server rejected authorization | 13:10 |
murugesh | proxy-server: Identity response: {"error": {"message": "The request you have made requires authentication.", "code": 401, "title": "Unauthorized"}} | 13:10 |
murugesh | can someone pls assist me on this ?? | 13:11 |
dolphm | murugesh: check the service credentials that swift itself is using | 13:11 |
murugesh | Where can i check this | 13:12 |
murugesh | in /etc/swift/proxy-server.conf ?? | 13:13 |
murugesh | dolpm, you there | 13:14 |
*** edmondsw has joined #openstack-keystone | 13:14 | |
murugesh | dolphm, when i run "swift stat --debug" on keystone node i get the follwing | 13:15 |
murugesh | http://paste.openstack.org/show/601926/ | 13:16 |
dolphm | murugesh: your 503 is likely coming from a load balancer, not openstack | 13:19 |
murugesh | so how can i proceed further ?? | 13:20 |
dolphm | murugesh: find out why the load balancer is returning 503's? | 13:21 |
murugesh | dolpm: i don't see any error in /var/log/haproxy.log which is my loadbalancer | 13:25 |
murugesh | and what does it mean?? | 13:25 |
*** links has quit IRC | 13:25 | |
murugesh | proxy-server:Unable to validate token: Identity server rejected authorization necessary to fetch token data | 13:25 |
murugesh | proxy-server: Identity server rejected authorization | 13:25 |
murugesh | roxy-server: Identity response: {"error": {"message": "The request you have made requires authentication.", "code": 401, "title": "Unauthorized"}} | 13:26 |
murugesh | This is from /var/log/swift/swift.log ^^ | 13:26 |
*** ngupta has joined #openstack-keystone | 13:28 | |
*** ngupta has quit IRC | 13:32 | |
*** mvk has quit IRC | 13:40 | |
*** lamt has joined #openstack-keystone | 13:44 | |
murugesh | Is somebody there?? | 13:49 |
*** sileht has quit IRC | 13:51 | |
*** sileht has joined #openstack-keystone | 13:55 | |
*** sileht has quit IRC | 13:59 | |
*** zhurong has joined #openstack-keystone | 14:01 | |
*** jaosorior has quit IRC | 14:01 | |
*** spilla has joined #openstack-keystone | 14:03 | |
*** sileht has joined #openstack-keystone | 14:04 | |
*** sileht has quit IRC | 14:04 | |
*** murugesh has quit IRC | 14:05 | |
*** sileht has joined #openstack-keystone | 14:08 | |
*** sileht has quit IRC | 14:08 | |
*** sileht has joined #openstack-keystone | 14:10 | |
*** sileht has quit IRC | 14:11 | |
*** lamt has quit IRC | 14:19 | |
*** dave-mccowan has joined #openstack-keystone | 14:21 | |
*** sileht has joined #openstack-keystone | 14:26 | |
lbragstad | gagehugo knikolla https://github.com/openstack/security-doc/blob/master/security-threat-analysis/source/threat-analysis-process.rst has some good information about next steps after (or even as we prepare the architecture stuff) | 14:28 |
lbragstad | dulek the wording there is suppose to imply that keystone will support rolling upgrades moving forward | 14:29 |
lbragstad | dulek as in you should be able to do a rolling upgrade from Newton -> Ocata and from Ocata -> Pike, so on and so forth | 14:30 |
*** erhudy has joined #openstack-keystone | 14:31 | |
dulek | lbragstad: Great, thanks! | 14:32 |
dolphm | anyone know John Lin's nick? | 14:36 |
*** sileht has quit IRC | 14:47 | |
lbragstad | dulek we have an action item to get that fully tested this release | 14:47 |
*** chlong_ has joined #openstack-keystone | 14:49 | |
*** lamt has joined #openstack-keystone | 14:49 | |
dulek | lbragstad: Cool. I'm asking because I'm doing a presentation for OpenStack Day Poland about upgrades. Surprisingly it looks like O->P rolling upgrade will be supported by all of the services, which is great. :) | 14:50 |
lbragstad | dulek nice! | 14:51 |
dulek | (all of the old core services ;)) | 14:51 |
lbragstad | dulek when is your presentation? | 14:51 |
dulek | 22 march. I'm not sure if it will be recorded. | 14:52 |
*** ngupta has joined #openstack-keystone | 14:52 | |
lbragstad | dulek well - if it is, drop the link in here | 14:52 |
lbragstad | i'd like to watch the recording :) | 14:52 |
dulek | lbragstad: Sure thing! | 14:52 |
dolphm | lbragstad: tried to reproduce the original fernet rotation + disk full bug here using the test approach taken in the patch merged to master, which resulted in a totally different behavior than what the bug described https://review.openstack.org/#/c/443158/1/keystone/tests/unit/token/test_fernet_provider.py | 14:52 |
*** ngupta has quit IRC | 14:53 | |
*** ngupta has joined #openstack-keystone | 14:53 | |
*** sileht has joined #openstack-keystone | 14:54 | |
lbragstad | dolphm minor nit - but does assertUnchangedRepositoryState seem to go against it's doc string? | 14:54 |
*** sileht has quit IRC | 14:54 | |
dolphm | lbragstad: oh yeah, i copied the other method and repurposed it | 14:56 |
dolphm | lbragstad: updated | 14:57 |
*** rderose has joined #openstack-keystone | 15:00 | |
*** jaosorior has joined #openstack-keystone | 15:01 | |
*** mvk has joined #openstack-keystone | 15:03 | |
lbragstad | dolphm cool - still reviewing | 15:03 |
*** zhurong has quit IRC | 15:05 | |
*** pnavarro has quit IRC | 15:08 | |
*** openstackgerrit has joined #openstack-keystone | 15:09 | |
openstackgerrit | Anthony Washington proposed openstack/keystone master: Policy in code https://review.openstack.org/435609 | 15:09 |
*** jaugustine has joined #openstack-keystone | 15:11 | |
lbragstad | dolphm how come we start seeing OSErrors *after* the first rotation? | 15:12 |
*** sileht has joined #openstack-keystone | 15:13 | |
lbragstad | dolphm specifically line 672 - https://review.openstack.org/#/c/443158/1/keystone/tests/unit/token/test_fernet_provider.py ? | 15:13 |
dolphm | lbragstad: i have no idea | 15:14 |
*** henrynash has joined #openstack-keystone | 15:14 | |
lbragstad | dolphm weird, that tells me something about keystone-manage fernet_rotate is dealing with state? | 15:15 |
dolphm | lbragstad: well, the keys themselves are state | 15:15 |
lbragstad | dolphm right - exception state? | 15:16 |
dolphm | lbragstad: right now i'm trying to figure out how to cause a real IOError: [Errno 28] No space left on device | 15:16 |
lbragstad | dolphm aren't you doing that with the mock on line 666 | 15:16 |
* lbragstad thinks thats ironic because mocks are the devil! | 15:16 | |
dolphm | lbragstad: not quite... real IOErrors have error numbers associated with them depending on the underlying cause | 15:17 |
dolphm | lbragstad: the mock does not do that | 15:17 |
dolphm | lbragstad: and i'm not sure the mock is raising the IOError at the right time -- it does it on .flush(), but i'm wondering if a real file system would do it elsewhere | 15:17 |
lbragstad | dolphm but the side-effect you're setting of the mock should throw an IOError? | 15:17 |
dolphm | lbragstad: that's what the original bug fix tested with | 15:19 |
dolphm | lbragstad: so, the original bug description does not match the behavior being tested by the fix to the original bug | 15:20 |
lbragstad | dolphm do you changes pass tests? | 15:20 |
lbragstad | s/you/your/ | 15:21 |
dolphm | lbragstad: yes | 15:21 |
rderose | dstanek lbragstad: I want to clarify something from yesterday’s conversation | 15:21 |
rderose | dstanek lbragstad: I’ve said that our data model supports account linking, but it really just models a user account. | 15:21 |
dolphm | lbragstad: the question & answer here are well written to describe what could be going on behind the IOError https://stackoverflow.com/questions/1115203/sorting-disk-i-o-errors-in-python | 15:21 |
rderose | dstanek lbragstad: Where we model a user: | 15:21 |
rderose | local credentials | 15:21 |
rderose | , ldap account | 15:21 |
rderose | , federated profiles | 15:21 |
rderose | dstanek lbragstad: user > local, ldap, federated and a client should be able to populate the model | 15:22 |
rderose | dstanek lbragstad: And while you can associate a user to their federated profile, it’s not account linking. | 15:22 |
rderose | dstanek lbragstad: Account linking would be more about having 2 user accounts (2 distinct user IDs), and then trying to link them together. | 15:23 |
rderose | dstanek lbragstad: That is not what we are doing here with ravelar’s patch. | 15:23 |
rderose | dstanek: so if we come up with a way to do account linking in the future, we won’t have multiple ways of doing it. | 15:23 |
lbragstad | dolphm hmmm | 15:24 |
lbragstad | dolphm interesting | 15:24 |
*** ravelar has joined #openstack-keystone | 15:30 | |
*** phalmos has joined #openstack-keystone | 15:32 | |
*** links has joined #openstack-keystone | 15:36 | |
*** agrebennikov has joined #openstack-keystone | 15:37 | |
openstackgerrit | Gage Hugo proposed openstack/keystonemiddleware master: Added "warning-is-error" sphinx check for docs https://review.openstack.org/439819 | 15:46 |
*** adrian_otto has joined #openstack-keystone | 15:47 | |
openstackgerrit | Richard Avelar proposed openstack/keystone master: Policy in code https://review.openstack.org/435609 | 15:47 |
*** adrian_otto has quit IRC | 15:47 | |
*** h5t4_ has quit IRC | 15:47 | |
*** nizam037 has quit IRC | 15:48 | |
knikolla | o/ morning | 15:49 |
gagehugo | knikolla o/ | 15:51 |
*** jaugustine has quit IRC | 15:53 | |
*** rcernin has quit IRC | 15:58 | |
*** adrian_otto has joined #openstack-keystone | 15:59 | |
lbragstad | gagehugo knikolla o/ | 15:59 |
lbragstad | ping antwash, raildo, ktychkova, dolphm, dstanek, rderose, htruta, atrmr, gagehugo, lamt, thinrichs, edmondsw, ruan, ayoung, ravelar, morgan, raj_singh, johnthetubaguy, knikolla | 16:00 |
lbragstad | policy meeting happening now in #openstack-meeting-cp | 16:00 |
knikolla | ayoung: btw, i think i'm pretty close with the tempest change https://review.openstack.org/#/c/441469/ | 16:03 |
ayoung | knikolla, that makes me so happy! | 16:03 |
ayoung | rodrigods, thanks for keeping on the review there, too | 16:04 |
*** adrian_otto1 has joined #openstack-keystone | 16:05 | |
openstackgerrit | Andreas Jaeger proposed openstack/keystone master: Fix keystone.o.o URL https://review.openstack.org/443208 | 16:06 |
*** adrian_otto has quit IRC | 16:07 | |
*** pnavarro has joined #openstack-keystone | 16:08 | |
*** henrynash has quit IRC | 16:11 | |
*** h5t4 has joined #openstack-keystone | 16:22 | |
*** jaosorior has quit IRC | 16:24 | |
*** markvoelker has quit IRC | 16:30 | |
*** henrynash has joined #openstack-keystone | 16:41 | |
*** henrynash has quit IRC | 16:43 | |
*** jaugustine has joined #openstack-keystone | 16:46 | |
*** henrynash has joined #openstack-keystone | 16:54 | |
*** links has quit IRC | 16:55 | |
openstackgerrit | Kristi Nikolla proposed openstack/keystone master: Remove LDAP delete logic and associated tests https://review.openstack.org/424344 | 16:55 |
*** ravelar has quit IRC | 17:03 | |
ayoung | HAve people been notified about talk acceptance/rejection yet? | 17:03 |
rderose | ayoung: nope, I haven't | 17:05 |
openstackgerrit | Gage Hugo proposed openstack/keystonemiddleware master: Remove old comment referencing fixed bug https://review.openstack.org/443235 | 17:05 |
knikolla | ayoung: not that i know of | 17:05 |
ayoung | would be nice to know before registration price increase... | 17:06 |
gagehugo | I haven't heard anything yet :( | 17:06 |
rderose | ayoung: I know, I thought we were supposed to hear on Monday | 17:06 |
knikolla | probably too many proposals | 17:07 |
knikolla | we have like 5-6 | 17:07 |
*** ravelar has joined #openstack-keystone | 17:09 | |
*** markvoelker has joined #openstack-keystone | 17:13 | |
openstackgerrit | Kristi Nikolla proposed openstack/keystone master: Remove LDAP delete logic and associated tests https://review.openstack.org/424344 | 17:17 |
*** tesseract has quit IRC | 17:18 | |
*** henrynash has quit IRC | 17:25 | |
*** henrynash has joined #openstack-keystone | 17:32 | |
*** ravelar has quit IRC | 17:33 | |
*** henrynash has quit IRC | 17:35 | |
*** henrynash has joined #openstack-keystone | 17:36 | |
*** ravelar has joined #openstack-keystone | 17:42 | |
*** henrynash has quit IRC | 17:45 | |
*** henrynash has joined #openstack-keystone | 17:51 | |
ayoung | knikolla, https://www.openstack.org/summit/boston-2017/call-for-presentations/ | 17:56 |
ayoung | Looks at ours and tell me if you see what I see? | 17:56 |
knikolla | ayoung: accepted | 17:57 |
ayoung | Guess we better get to work! | 17:57 |
openstackgerrit | Ian Cordasco proposed openstack/keystoneauth master: Allow users to specify request matchers in Betamax https://review.openstack.org/443254 | 17:57 |
knikolla | ayoung: ack | 17:57 |
ayoung | is that ack as short for Acknowledge, or ACK! Like Bill the Cat? | 17:57 |
sigmavirus | lbragstad: ^ is another part =/ I think there may still be a problem with the pre-record hook that keystoneauth defaults in the fixture but *shrug* It's hard for me to determine what causes that and if it's the hook's fault or the API's fault | 17:57 |
ayoung | rderose, which one was yours? | 17:58 |
knikolla | ayoung: Acknowledge! I'll get to it. | 17:58 |
rderose | ayoung: mine is on PCI | 17:59 |
knikolla | ayoung: i'll have a look at the patches you've already done or wip, and then we'll sync up. | 17:59 |
*** henrynash has quit IRC | 17:59 | |
*** chris_hultin|AWA is now known as chris_hultin | 18:00 | |
ayoung | knikolla, OK, I have some tasks for my current project I need to knock out. And then we should co-locate (mid next week?) and crank out a proof of concept impl | 18:00 |
knikolla | ayoung: sounds good. | 18:01 |
*** ngupta has quit IRC | 18:03 | |
*** ngupta has joined #openstack-keystone | 18:03 | |
*** browne has joined #openstack-keystone | 18:05 | |
*** pramodrj07 has joined #openstack-keystone | 18:06 | |
*** MasterOfBugs has joined #openstack-keystone | 18:06 | |
openstackgerrit | Julien Lavesque proposed openstack/python-keystoneclient master: Fix UserManager.get prototype to include kwargs https://review.openstack.org/443257 | 18:09 |
*** chris_hultin is now known as chris_hultin|AWA | 18:15 | |
openstackgerrit | Colleen Murphy proposed openstack/ldappool master: Don't call start_tls_s() twice https://review.openstack.org/443264 | 18:20 |
*** chris_hultin|AWA is now known as chris_hultin | 18:21 | |
knikolla | ayoung: https://review.openstack.org/#/c/441469/ still some tempest failures. :( | 18:27 |
ayoung | knikolla, anything you need help with, or do you understand them? | 18:28 |
knikolla | 2 tests only on master, but older releases seem to have more failures somehow. | 18:28 |
*** gyee has joined #openstack-keystone | 18:28 | |
ayoung | Heh. Of course. | 18:28 |
ayoung | Get the two on master, and we can see if there is a way to ignore doing this for older releases | 18:29 |
knikolla | ayoung: i haven't started debugging yet. i'll update you. | 18:30 |
*** blancos has joined #openstack-keystone | 18:32 | |
* sigmavirus determined the bug in the keystoneauth betamax fixture hook | 18:34 | |
*** phalmos has quit IRC | 18:36 | |
*** chlong_ has quit IRC | 18:37 | |
*** chris_hultin is now known as chris_hultin|AWA | 18:38 | |
openstackgerrit | Ian Cordasco proposed openstack/keystoneauth master: Prevent JSON decode errors in the pre-record hook https://review.openstack.org/443284 | 18:38 |
*** rcernin has joined #openstack-keystone | 18:42 | |
*** mvk has quit IRC | 18:48 | |
*** chlong_ has joined #openstack-keystone | 18:53 | |
*** phalmos has joined #openstack-keystone | 19:02 | |
notmorgan | sigmavirus: nice | 19:03 |
*** ngupta has quit IRC | 19:07 | |
*** ngupta has joined #openstack-keystone | 19:07 | |
sigmavirus | Thanks notmorgan | 19:08 |
*** pcaruana has quit IRC | 19:13 | |
*** Jack_I has quit IRC | 19:18 | |
*** mvk has joined #openstack-keystone | 19:24 | |
*** blancos has left #openstack-keystone | 19:33 | |
lbragstad | sigmavirus is ^ that the last bit you need in keystoneauth for a release? | 19:35 |
sigmavirus | yes lbragstad | 19:36 |
lbragstad | sigmavirus sweet - i'll keep my eye on it and propose a release today | 19:36 |
sigmavirus | Thanks lbragstad :) | 19:37 |
notmorgan | sigmavirus: +2 btw. | 19:37 |
sigmavirus | hopefully those make things better for all future users of the betamax fixture | 19:37 |
sigmavirus | thanks notmorgan I saw that :) | 19:37 |
notmorgan | lbragstad: i pre-emptively +A'd it. | 19:37 |
notmorgan | it's test fixture | 19:38 |
lbragstad | notmorgan sweet - i don't expect that to be an issue | 19:38 |
notmorgan | exactly | 19:38 |
sigmavirus | to be fair | 19:38 |
sigmavirus | cratonclient appears to be the only potential consumer at this point | 19:38 |
sigmavirus | shade isn't presently using it and might start again, but no one should be broken by this (in openstack) | 19:39 |
notmorgan | yep. | 19:39 |
knikolla | ayoung: i think this is the culprit for one of the failures https://github.com/openstack-dev/devstack/blob/7a30c7fcabac1cf28fd9baa39d05436680616aef/lib/keystone#L112 | 19:39 |
notmorgan | and it doesn't break any contracts | 19:39 |
notmorgan | so... | 19:39 |
notmorgan | easy approbal | 19:39 |
notmorgan | approval* | 19:39 |
ayoung | knikolla, looks like it... | 19:39 |
knikolla | ayoung: http://logs.openstack.org/69/441469/5/check/gate-tempest-dsvm-neutron-full-ubuntu-xenial/1ab7887/logs/screen-n-api.txt.gz#_2017-03-08_17_21_09_444 | 19:40 |
knikolla | but we are not enforcing is_admin yet. so i'm confused | 19:41 |
knikolla | err, admin_project | 19:41 |
notmorgan | sigmavirus: https://review.openstack.org/#/c/443254/1 does that need to land too? | 19:43 |
*** chris_hultin|AWA is now known as chris_hultin | 19:45 | |
notmorgan | mordred: i might remove PBR from keystoneauth - it is a pretty heavy requirement all said and done esp with the breakages we had in the major versions. | 19:45 |
notmorgan | mordred: just FYI. | 19:45 |
notmorgan | mordred: honestly, I'd also like to drop stevedore if we could :P. | 19:46 |
notmorgan | i'd like to get keystoneauth down to exactly 1 dependency... Requests (for runtime) | 19:47 |
mordred | notmorgan: please do not remove pbr | 19:50 |
mordred | notmorgan: it is a hard requirement of all openstack python projects | 19:50 |
*** Jack_I has joined #openstack-keystone | 19:51 | |
notmorgan | mordred: this makes me sad. | 19:51 |
mordred | there are a number of systems that depend on features it provides | 19:51 |
*** henrynash has joined #openstack-keystone | 19:51 | |
notmorgan | like seriously sad. | 19:51 |
notmorgan | i'm serious, ksa should depend on exactly 1 thing. | 19:52 |
notmorgan | requests | 19:52 |
* notmorgan wants to rip stevedore and positional out of ksa as well. | 19:52 | |
*** prashkre has joined #openstack-keystone | 19:52 | |
notmorgan | it's not the build-time bit that bothers me, its the runtime requirement of pbr | 19:53 |
notmorgan | so it's not PBR itself. | 19:53 |
mordred | oh - that I don't care about at al | 19:53 |
notmorgan | i want to make it so KSA doesn't need PBR to run. | 19:53 |
mordred | if you want to ditch the runtime version reporting, *shrug* | 19:53 |
notmorgan | yes. | 19:53 |
notmorgan | sorry wasn't clear there | 19:53 |
notmorgan | :) | 19:53 |
mordred | k. dude | 19:53 |
mordred | I was about to have to be like 'jesus' | 19:53 |
notmorgan | it def. isn't about the build stuff. | 19:53 |
notmorgan | it's a whole lot about how can we eliminate more stuff pulled in by ksa that could make running it universally harder | 19:54 |
mordred | notmorgan: problem is, to do that, you'll have problems with the __version__ field in __init__.py | 19:54 |
notmorgan | i'll poke around with that | 19:54 |
mordred | can you tell me more about issues that you've had with it that the runtime depend is causing trouble with? | 19:54 |
notmorgan | yeah, it's just more dep-solve issues | 19:55 |
notmorgan | in non-openstack environemtns | 19:55 |
notmorgan | non-openstack specific stuff | 19:55 |
notmorgan | i tried to use ksa in an older build of some things. | 19:55 |
notmorgan | and PBR made me slam my head on the desk. | 19:55 |
notmorgan | it was a really big venv | 19:56 |
notmorgan | but it made me realize i want to pull out a few more runtime deps on ksa | 19:56 |
notmorgan | i was trying to get an ancient version of openstack + a custom tool to work w/ ksa and newer keystone | 19:56 |
notmorgan | trying to prove out some stability things in keystone. | 19:57 |
notmorgan | but that just comes down to not super important - it's going to be a side-project-thing i'l poke at when not cleaning up more shade tests | 19:58 |
notmorgan | ran into it this last weekend. | 19:58 |
sigmavirus | notmorgan: sorry, 443254 would be a nice-to-have | 19:58 |
mordred | ah. yeah. that's not going to work well due to old openstack having caps in their requirements | 19:58 |
notmorgan | mordred: exactly. | 19:58 |
mordred | notmorgan: those caps aren't actually important - but they exist in history | 19:58 |
notmorgan | and unwinding it is a pain in the butt | 19:58 |
mordred | notmorgan: like, if you just remove them / force-install the code will all work | 19:58 |
notmorgan | but it highlights ksa has a gap in usefulness. | 19:59 |
mordred | notmorgan: so - perhaps just remove the runtime depend and then wrap the __version__ in a try/except ImportError | 19:59 |
*** h5t4 has quit IRC | 19:59 | |
notmorgan | that is my thought, i need to consider that change before proposing it | 20:00 |
notmorgan | since... ksa contract. | 20:00 |
mordred | yah. I think as long as the except case has a __version__ the number of people it should break should be very very low | 20:00 |
mordred | but yes to thinking it through | 20:00 |
* notmorgan wishes we could stop supporting python2 :P | 20:01 | |
notmorgan | it would clean up openstack a lot :P | 20:01 |
notmorgan | anyway... going back to test refactoring | 20:02 |
notmorgan | i have another 60-80 tests to fix today | 20:02 |
*** chris_hultin is now known as chris_hultin|AWA | 20:03 | |
*** chris_hultin|AWA is now known as chris_hultin | 20:06 | |
*** henrynash has quit IRC | 20:07 | |
sigmavirus | notmorgan: not supporting Python 2 would clean up *so* many projects | 20:10 |
sigmavirus | Requests, Betamax, Flake8, Pyflakes, pycodestyle, pydocstyle, OpenStack, Django | 20:11 |
*** chlong_ has quit IRC | 20:16 | |
*** ngupta_ has joined #openstack-keystone | 20:16 | |
*** ngupta has quit IRC | 20:20 | |
mordred | ++ | 20:24 |
*** markvoelker has quit IRC | 20:27 | |
*** chlong_ has joined #openstack-keystone | 20:28 | |
*** ngupta_ has quit IRC | 20:35 | |
*** rcernin has quit IRC | 20:36 | |
*** frontrunner has quit IRC | 20:42 | |
*** adrian_otto1 has quit IRC | 20:43 | |
*** adriant has joined #openstack-keystone | 20:43 | |
*** MasterOfBugs has quit IRC | 20:48 | |
*** pramodrj07 has quit IRC | 20:48 | |
*** MasterOfBugs has joined #openstack-keystone | 20:52 | |
openstackgerrit | Brant Knudson proposed openstack/keystoneauth master: Remove unused test requirement pycrypto https://review.openstack.org/443318 | 20:54 |
openstackgerrit | Merged openstack/keystoneauth master: Update test requirement https://review.openstack.org/440236 | 20:55 |
openstackgerrit | Lance Bragstad proposed openstack/keystone master: Add in-code comment to clarify pattern in tests https://review.openstack.org/441187 | 20:56 |
*** phalmos_ has joined #openstack-keystone | 20:57 | |
dolphm | sigmavirus: not supporting py3 would have the same outcome ;) | 20:58 |
*** spotz is now known as spotz_zzz | 20:59 | |
*** spotz_zzz is now known as spotz | 21:00 | |
*** phalmos has quit IRC | 21:00 | |
*** ngupta has joined #openstack-keystone | 21:00 | |
*** jaugustine has quit IRC | 21:03 | |
dstanek | dolphm: except it would also be like shooting ourselves in the face | 21:07 |
notmorgan | dstanek: who doesn't like shooting themselves in the face? | 21:08 |
lbragstad | notmorgan wanna kick this through - https://review.openstack.org/#/c/442283/1 ? | 21:14 |
* dstanek raises a hand | 21:18 | |
*** adrian_otto has joined #openstack-keystone | 21:24 | |
openstackgerrit | Merged openstack/keystoneauth master: Add an allow_version_hack flag to session and identity plugins. https://review.openstack.org/438788 | 21:27 |
*** markvoelker has joined #openstack-keystone | 21:27 | |
openstackgerrit | Merged openstack/keystoneauth master: Prevent JSON decode errors in the pre-record hook https://review.openstack.org/443284 | 21:27 |
notmorgan | mmm, my carbonsteel pan is almost completely black with polymerized oil. | 21:29 |
notmorgan | love when i can cook sticky things like eggs and they don't stick, as good/better than actual "non-stick" pans | 21:30 |
*** thorst has quit IRC | 21:30 | |
*** prashkre has quit IRC | 21:30 | |
dolphm | the *original* non-stick pan | 21:30 |
*** thorst has joined #openstack-keystone | 21:31 | |
*** raildo has quit IRC | 21:31 | |
notmorgan | dolphm: hehe | 21:32 |
notmorgan | dolphm: right?! | 21:32 |
*** markvoelker has quit IRC | 21:32 | |
notmorgan | not as good as my mom's cast iron griddle with 30yrs of seasoning on it | 21:33 |
*** thorst has quit IRC | 21:35 | |
lbragstad | if people knew how many videos i have on my phone of cooking eggs that slide around freely in cast iron - i would probably be considered really weird | 21:35 |
notmorgan | i <3 carbon steel over cast iron for skillets | 21:36 |
notmorgan | because it weighs a bit less | 21:36 |
notmorgan | easier to move around when using the larger pans. | 21:36 |
dolphm | new black card: "If people knew how many videos i have on my phone of _____ that _____ - I would probably be considered really weird." | 21:37 |
lbragstad | ++ | 21:37 |
notmorgan | dolphm: ++ | 21:38 |
notmorgan | though i did set of the smoke detector just now... | 21:38 |
notmorgan | on two floors. | 21:38 |
notmorgan | hazards of kitchen being on the bottom floor | 21:38 |
lbragstad | lol - thats one way to do it ;) | 21:39 |
dolphm | this is why i have a burner outside too | 21:39 |
notmorgan | the hood isn't good enough to vent smoke all the time | 21:39 |
notmorgan | so sometimes seasoning/reseasoning overloads it even with a super thin layer of oil | 21:39 |
notmorgan | the hood needs to be about 2x the size | 21:40 |
lbragstad | notmorgan you season on your stovetop? | 21:40 |
notmorgan | only when finishing after cooking | 21:40 |
lbragstad | oh | 21:40 |
notmorgan | if i'm doing a full re-season on more in depth, in oven | 21:40 |
lbragstad | my dad seasons all his cast iron like that | 21:41 |
notmorgan | though my large pan doesn't fit in the oven | 21:41 |
lbragstad | but he has a commercial range | 21:41 |
notmorgan | so, i have to do it on the stove-top... and the burner(s) are not big enough | 21:41 |
notmorgan | can't get even 550F+ heat across the whole pan | 21:41 |
notmorgan | i can't wait to buy a house so i can put the "right" range and hood in. | 21:42 |
notmorgan | yes that is the biggest reason i want to own a place. | 21:42 |
lbragstad | totally valid | 21:42 |
* notmorgan has to budget ~$25k for stove, hood, and refridgerator | 21:42 | |
notmorgan | lbragstad: going to put wolf range and hood in :) and a subzero (not-in-cabinet form) refrigerator in | 21:43 |
openstackgerrit | Colleen Murphy proposed openstack/ldappool master: Don't call start_tls_s() twice https://review.openstack.org/443264 | 21:43 |
lbragstad | notmorgan you planning on doing a lot of cooking?! | 21:43 |
notmorgan | lbragstad: every meal | 21:43 |
notmorgan | working on making everything from scratch. it's so much fun to do... and things taste a ton better imo | 21:44 |
*** henrynash has joined #openstack-keystone | 21:44 | |
lbragstad | i'd like to have a place for all my cast iron - right now we store it all in the oven | 21:45 |
notmorgan | working on making the barley malt next so I have it for bread making | 21:45 |
notmorgan | lbragstad: get a hanging pot rack | 21:45 |
notmorgan | it makes life so much better | 21:45 |
lbragstad | notmorgan that would be idea - when we move out, i'm sure we'll consider it | 21:45 |
* notmorgan nods. | 21:45 | |
notmorgan | i've had them at the last two places... makes all the difference | 21:46 |
dolphm | notmorgan: ++ | 21:46 |
notmorgan | unfortunately, my current place i had to get a much smaller hanging pot rack | 21:46 |
dolphm | notmorgan: we just started doing curbside pickup for groceries, and it makes cooking *everything* so much easier | 21:47 |
notmorgan | it really only holds 7 pans and the flat pan/pot universal lids | 21:47 |
notmorgan | dolphm: did i show you these things: http://www.williams-sonoma.com/products/all-clad-tk-d5-brushed-stainless-steel-universal-lid/ | 21:47 |
notmorgan | dolphm: they are *amazing* to cook with | 21:47 |
notmorgan | lbragstad: ^ | 21:47 |
dolphm | no, what the hell is that | 21:49 |
dolphm | "These universal lids come in three different sizes" | 21:49 |
*** thorst has joined #openstack-keystone | 21:50 | |
*** adrian_otto has quit IRC | 21:50 | |
notmorgan | they are basically lids for stove-top cooking, they have 3 disc sizes for different pan sizes | 21:50 |
notmorgan | but they are super awesome to cook with, easy, since the handles are on them and they are super easy to clean too. | 21:50 |
notmorgan | and they hang on my pot rack, a lot less space taken up | 21:51 |
openstackgerrit | Anthony Washington proposed openstack/oslo.policy master: oslopolicy-sample-generator description support https://review.openstack.org/443330 | 21:51 |
notmorgan | i'm guessing you could also use them in the oven if you needed. but *shrug* | 21:51 |
dolphm | notmorgan: i don't have too many lids, but they're all on my pot rack too | 21:51 |
notmorgan | the real win with these is it's easy to partially cover among other bits like not needing to worry how you tilt it to avoid steam hitting your hand. | 21:53 |
notmorgan | but they were less than $100 for all three when i got them | 21:53 |
notmorgan | they fit every pot/pan I have. :) | 21:53 |
lbragstad | i'd like to get a lib for my 12" cast iron skillet | 21:53 |
lbragstad | lid* | 21:53 |
* notmorgan likes that -keystone randomly becomes "cooking discussion" | 21:54 | |
dolphm | notmorgan: +1 | 21:54 |
notmorgan | s/randomly/not-so-randomly/ | 21:54 |
notmorgan | :) | 21:54 |
dolphm | lbragstad: the lid from my cast iron dutch oven fits my lodge skillet perfectly :) | 21:54 |
notmorgan | dolphm: oh nice. | 21:54 |
notmorgan | dolphm: i need to get a larger non-enameled cast-iron dutch oven | 21:55 |
lbragstad | dolphm yeah - that's exactly what i use for my smaller dutch oven and my 10" | 21:55 |
notmorgan | i have a 4qt lodge one. but my 7qt one is enameled | 21:55 |
notmorgan | =/ | 21:55 |
openstackgerrit | Richard Avelar proposed openstack/keystone master: Validate rolling upgrade is run in order https://review.openstack.org/437441 | 21:56 |
*** browne has quit IRC | 21:57 | |
notmorgan | also http://www.williams-sonoma.com/products/williams-sonoma-glass-canister/?pkey=chomekeeping-canisters&&chomekeeping-canisters is awesome for coffee storage | 21:57 |
notmorgan | (and other similar dry-storage stuff) | 21:57 |
openstackgerrit | Richard Avelar proposed openstack/keystone master: Policy in code https://review.openstack.org/435609 | 22:00 |
*** pnavarro has quit IRC | 22:01 | |
*** agrebennikov has quit IRC | 22:02 | |
* dolphm is going to go home and cook now | 22:05 | |
* lbragstad is making a grocery list | 22:05 | |
*** knangia has joined #openstack-keystone | 22:07 | |
openstackgerrit | Anusha Unnam proposed openstack/oslo.policy master: Comment out the rule in sample policy.yaml file https://review.openstack.org/443332 | 22:07 |
lbragstad | i have a craving for jambalaya - i haven't made that in a long time | 22:08 |
notmorgan | nice | 22:12 |
*** dave-mccowan has quit IRC | 22:13 | |
openstackgerrit | Merged openstack/keystone master: Move driver loading inside of dict https://review.openstack.org/440845 | 22:20 |
*** edmondsw has quit IRC | 22:20 | |
*** edmondsw has joined #openstack-keystone | 22:23 | |
*** chlong_ has quit IRC | 22:24 | |
*** ngupta has quit IRC | 22:24 | |
*** spilla has quit IRC | 22:25 | |
*** edmondsw has quit IRC | 22:28 | |
*** ngupta has joined #openstack-keystone | 22:32 | |
*** browne has joined #openstack-keystone | 22:40 | |
openstackgerrit | Brant Knudson proposed openstack/keystoneauth master: Remove unused test requirement pycrypto https://review.openstack.org/443318 | 22:44 |
*** catintheroof has quit IRC | 22:44 | |
openstackgerrit | OpenStack Proposal Bot proposed openstack/keystoneauth master: Updated from global requirements https://review.openstack.org/439317 | 22:46 |
openstackgerrit | Anthony Washington proposed openstack/keystone master: Add policy sample generation https://review.openstack.org/443344 | 22:54 |
*** thorst has quit IRC | 22:54 | |
*** markvoelker has joined #openstack-keystone | 22:54 | |
*** thorst has joined #openstack-keystone | 22:55 | |
*** edmondsw has joined #openstack-keystone | 22:57 | |
*** chris_hultin is now known as chris_hultin|AWA | 22:57 | |
openstackgerrit | Anthony Washington proposed openstack/keystone master: Add policy sample generation https://review.openstack.org/443344 | 22:58 |
*** thorst has quit IRC | 22:59 | |
*** edmondsw has quit IRC | 23:01 | |
*** Jack_I has quit IRC | 23:06 | |
*** adrian_otto has joined #openstack-keystone | 23:14 | |
*** gyee has quit IRC | 23:18 | |
*** ngupta has quit IRC | 23:18 | |
*** thorst has joined #openstack-keystone | 23:20 | |
*** bkudryavtsev has joined #openstack-keystone | 23:23 | |
*** bkudryavtsev has quit IRC | 23:23 | |
*** thorst has quit IRC | 23:24 | |
*** catintheroof has joined #openstack-keystone | 23:28 | |
*** adrian_otto has quit IRC | 23:29 | |
*** bkudryavtsev has joined #openstack-keystone | 23:31 | |
*** adrian_otto has joined #openstack-keystone | 23:32 | |
*** ngupta has joined #openstack-keystone | 23:32 | |
*** bkudryavtsev has quit IRC | 23:33 | |
*** ngupta has quit IRC | 23:43 | |
*** ngupta has joined #openstack-keystone | 23:44 | |
*** david-lyle has quit IRC | 23:56 | |
*** nicolasbock has quit IRC | 23:57 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!