| *** nkinder has quit IRC | 00:11 | |
| *** eglute_s has quit IRC | 00:14 | |
| *** _d34dh0r53_ has quit IRC | 00:14 | |
| *** d34dh0r53 has joined #openstack-keystone | 00:14 | |
| *** eglute has joined #openstack-keystone | 00:15 | |
| *** Aqsa has quit IRC | 00:18 | |
| *** jlopezgu has quit IRC | 00:21 | |
| *** knangia has quit IRC | 00:31 | |
| *** prashkre has quit IRC | 00:35 | |
| lbragstad | notmorgan yeah - i need to review it, bumping it up my list | 00:39 |
|---|---|---|
| *** harlowja has joined #openstack-keystone | 00:42 | |
| *** guoshan has joined #openstack-keystone | 00:45 | |
| *** MasterOfBugs has quit IRC | 00:48 | |
| *** nkinder has joined #openstack-keystone | 00:51 | |
| *** dave-mcc_ has joined #openstack-keystone | 00:52 | |
| *** zhurong has joined #openstack-keystone | 00:52 | |
| *** tovin07 has quit IRC | 00:52 | |
| *** dave-mccowan has quit IRC | 00:53 | |
| openstackgerrit | Rodrigo Duarte proposed openstack/keystone master: Drop federated_user table foreign keys https://review.openstack.org/445505 | 00:54 |
| openstackgerrit | Rodrigo Duarte proposed openstack/keystone master: Drop federated_user table foreign keys https://review.openstack.org/445505 | 00:58 |
| openstackgerrit | Rodrigo Duarte proposed openstack/keystone master: Drop federated_user table foreign keys https://review.openstack.org/445505 | 00:59 |
| *** edmondsw has quit IRC | 00:59 | |
| *** guoshan has quit IRC | 01:01 | |
| *** agrebennikov has quit IRC | 01:01 | |
| *** liujiong has joined #openstack-keystone | 01:14 | |
| *** nkinder has quit IRC | 01:25 | |
| *** guoshan_ has joined #openstack-keystone | 01:42 | |
| *** gyee has quit IRC | 01:45 | |
| *** markvoelker has quit IRC | 01:49 | |
| *** edmondsw has joined #openstack-keystone | 01:55 | |
| *** dave-mccowan has joined #openstack-keystone | 01:58 | |
| *** edmondsw has quit IRC | 01:59 | |
| *** dave-mcc_ has quit IRC | 02:00 | |
| *** masterjcool has quit IRC | 02:10 | |
| *** liujiong has quit IRC | 02:12 | |
| *** liujiong has joined #openstack-keystone | 02:12 | |
| openstackgerrit | Anthony Washington proposed openstack/oslo.policy master: Add release note for DocumentedRuleDefault https://review.openstack.org/448139 | 02:18 |
| *** markvoelker has joined #openstack-keystone | 02:50 | |
| *** nicolasbock has quit IRC | 02:52 | |
| *** markvoelker has quit IRC | 02:54 | |
| *** links has joined #openstack-keystone | 03:12 | |
| *** tovin07 has joined #openstack-keystone | 03:14 | |
| *** david-lyle has joined #openstack-keystone | 03:30 | |
| *** harlowja has quit IRC | 03:35 | |
| *** david-lyle has quit IRC | 03:36 | |
| *** links has quit IRC | 03:38 | |
| *** prashkre has joined #openstack-keystone | 03:44 | |
| *** markvoelker has joined #openstack-keystone | 03:51 | |
| *** dave-mccowan has quit IRC | 03:51 | |
| *** links has joined #openstack-keystone | 03:52 | |
| *** markvoelker has quit IRC | 03:55 | |
| *** prashkre has quit IRC | 03:56 | |
| *** prashkre has joined #openstack-keystone | 03:56 | |
| *** guoshan_ has quit IRC | 04:00 | |
| *** prashkre has quit IRC | 04:11 | |
| *** adriant has quit IRC | 04:12 | |
| *** kbaegis has quit IRC | 04:21 | |
| *** ravelar has quit IRC | 04:24 | |
| *** links has quit IRC | 04:33 | |
| *** zhurong has quit IRC | 04:37 | |
| *** Administrator_ has joined #openstack-keystone | 04:38 | |
| *** zhugaoxiao has quit IRC | 04:41 | |
| *** knangia has joined #openstack-keystone | 04:49 | |
| *** links has joined #openstack-keystone | 04:50 | |
| *** markvoelker has joined #openstack-keystone | 04:52 | |
| *** markvoelker has quit IRC | 04:56 | |
| *** rcernin has joined #openstack-keystone | 05:09 | |
| *** rcernin has quit IRC | 05:09 | |
| *** rderose has quit IRC | 05:10 | |
| *** nkinder has joined #openstack-keystone | 05:11 | |
| *** gsilvis has quit IRC | 05:16 | |
| *** liujiong has quit IRC | 05:20 | |
| *** liujiong has joined #openstack-keystone | 05:25 | |
| *** edmondsw has joined #openstack-keystone | 05:31 | |
| *** zhurong has joined #openstack-keystone | 05:31 | |
| *** edmondsw has quit IRC | 05:35 | |
| *** richm has quit IRC | 05:42 | |
| *** kbaegis has joined #openstack-keystone | 05:48 | |
| *** markvoelker has joined #openstack-keystone | 05:52 | |
| *** markvoelker has quit IRC | 05:57 | |
| *** masterjcool has joined #openstack-keystone | 06:04 | |
| *** rha has quit IRC | 06:11 | |
| *** masber has quit IRC | 06:24 | |
| *** masber has joined #openstack-keystone | 06:24 | |
| *** aojea has joined #openstack-keystone | 06:42 | |
| *** markvoelker has joined #openstack-keystone | 06:53 | |
| *** aojea has quit IRC | 06:56 | |
| *** markvoelker has quit IRC | 06:58 | |
| *** kbaegis has quit IRC | 07:04 | |
| *** voelzmo has joined #openstack-keystone | 07:18 | |
| *** edmondsw has joined #openstack-keystone | 07:19 | |
| *** jaosorior has joined #openstack-keystone | 07:21 | |
| *** edmondsw has quit IRC | 07:23 | |
| *** voelzmo has quit IRC | 07:24 | |
| *** henrynash has joined #openstack-keystone | 07:25 | |
| *** voelzmo has joined #openstack-keystone | 07:25 | |
| *** pcaruana has joined #openstack-keystone | 07:39 | |
| *** knangia has quit IRC | 07:41 | |
| *** henrynash has quit IRC | 07:45 | |
| *** markvoelker has joined #openstack-keystone | 07:54 | |
| *** tesseract has joined #openstack-keystone | 07:55 | |
| *** markvoelker has quit IRC | 07:58 | |
| *** zzzeek has quit IRC | 08:00 | |
| *** zhurong has quit IRC | 08:00 | |
| *** zzzeek has joined #openstack-keystone | 08:00 | |
| *** Aqsa has joined #openstack-keystone | 08:01 | |
| openstackgerrit | wingwj proposed openstack/keystone master: Remove log translations in keystone https://review.openstack.org/447864 | 08:11 |
| *** zhurong has joined #openstack-keystone | 08:11 | |
| *** lifeless_ has joined #openstack-keystone | 08:13 | |
| *** lifeless has quit IRC | 08:14 | |
| *** aojea has joined #openstack-keystone | 08:16 | |
| *** aojea has quit IRC | 08:16 | |
| *** aojea has joined #openstack-keystone | 08:17 | |
| openstackgerrit | wangxiyuan proposed openstack/python-keystoneclient master: Init include_catalog for V3 client https://review.openstack.org/448437 | 08:17 |
| *** rha has joined #openstack-keystone | 08:29 | |
| *** rha has quit IRC | 08:29 | |
| *** rha has joined #openstack-keystone | 08:29 | |
| *** rakhmerov__ is now known as rakhmerov | 08:38 | |
| *** henrynash has joined #openstack-keystone | 09:07 | |
| *** gsilvis has joined #openstack-keystone | 09:22 | |
| *** henrynash has quit IRC | 09:30 | |
| *** voelzmo has quit IRC | 09:50 | |
| *** zhurong has quit IRC | 09:52 | |
| *** aojea_ has joined #openstack-keystone | 10:05 | |
| *** aojea has quit IRC | 10:08 | |
| *** pnavarro has joined #openstack-keystone | 10:10 | |
| *** richm has joined #openstack-keystone | 10:13 | |
| *** liujiong has quit IRC | 10:28 | |
| *** nicolasbock has joined #openstack-keystone | 10:36 | |
| *** edmondsw has joined #openstack-keystone | 10:55 | |
| *** edmondsw has quit IRC | 11:00 | |
| *** rmascena has joined #openstack-keystone | 11:03 | |
| *** rmascena has quit IRC | 11:13 | |
| *** rmascena has joined #openstack-keystone | 11:13 | |
| *** henrynash has joined #openstack-keystone | 11:33 | |
| openstackgerrit | Aqsa Malik proposed openstack/keystone master: Fix mapping_purge failure https://review.openstack.org/408304 | 11:34 |
| *** edmondsw has joined #openstack-keystone | 11:35 | |
| *** henrynash_ has joined #openstack-keystone | 11:43 | |
| *** henrynash has quit IRC | 11:44 | |
| *** henrynash_ is now known as henrynash | 11:44 | |
| openstackgerrit | Rodrigo Duarte proposed openstack/keystone master: Drop federated_user table foreign keys https://review.openstack.org/445505 | 11:58 |
| *** pnavarro has quit IRC | 12:02 | |
| *** henrynash_ has joined #openstack-keystone | 12:13 | |
| *** henrynash has quit IRC | 12:15 | |
| *** henrynash_ is now known as henrynash | 12:15 | |
| *** catintheroof has joined #openstack-keystone | 12:42 | |
| *** markvoelker has joined #openstack-keystone | 12:51 | |
| *** markvoelker_ has joined #openstack-keystone | 12:54 | |
| *** markvoelker has quit IRC | 12:54 | |
| *** phalmos has joined #openstack-keystone | 12:59 | |
| *** spilla has joined #openstack-keystone | 13:00 | |
| *** henrynash has quit IRC | 13:25 | |
| *** agrebennikov has joined #openstack-keystone | 13:31 | |
| *** phalmos has quit IRC | 13:36 | |
| *** nishaYadav has joined #openstack-keystone | 13:45 | |
| *** ravelar has joined #openstack-keystone | 13:53 | |
| *** nishaYadav has quit IRC | 13:54 | |
| *** markvoelker_ is now known as markvoelker | 14:01 | |
| *** oomichi has quit IRC | 14:04 | |
| *** chlong has joined #openstack-keystone | 14:04 | |
| *** Aqsa has quit IRC | 14:05 | |
| *** oomichi has joined #openstack-keystone | 14:06 | |
| *** Aqsa has joined #openstack-keystone | 14:08 | |
| *** chlong has quit IRC | 14:12 | |
| *** chlong has joined #openstack-keystone | 14:13 | |
| lbragstad | gagehugo the on going discussion here might be relevant to your spec - https://review.openstack.org/#/c/447344/ | 14:15 |
| *** links has quit IRC | 14:21 | |
| *** dave-mccowan has joined #openstack-keystone | 14:26 | |
| dstanek | lbragstad: that is interesting | 14:26 |
| lbragstad | yeah | 14:27 |
| lbragstad | i thought so, too | 14:27 |
| antwash | ping stevemar | 14:28 |
| dstanek | lbragstad: i don't understand the language | 14:29 |
| lbragstad | dstanek i don't think edleafe or cdent hangout in this channel | 14:29 |
| lbragstad | dstanek but i've been having conversations with them in -sdks | 14:30 |
| lbragstad | (that seems to be where all the API WG discussions happen | 14:30 |
| lbragstad | ) | 14:30 |
| *** knangia has joined #openstack-keystone | 14:32 | |
| antwash | stevemar: quick question, looking at https://bugs.launchpad.net/keystone/+bug/1674676 -- after searching thru the OpenStack docs, I've come to the conclusion the 'Relationship' link suppose to be removed completely... Would like your opinion before moving forward with removing it | 14:35 |
| openstack | Launchpad bug 1674676 in OpenStack Identity (keystone) "The URL listed against the details of identity resources returns 404 Not Found error" [Medium,Confirmed] - Assigned to Anthony Washington (anthony-washington) | 14:35 |
| stevemar | antwash: ugh... | 14:36 |
| *** henrynash has joined #openstack-keystone | 14:36 | |
| antwash | stevemar : no rush lol | 14:37 |
| stevemar | antwash: so the URL specified in the relationship was never meant to point to a real thing | 14:37 |
| stevemar | they're just supposed to be unique | 14:37 |
| stevemar | but we've had this same bug reported 3 times now | 14:37 |
| stevemar | i'm tempted to just change them to point to the right API docs | 14:37 |
| stevemar | i think bknudson_ was against that for backwards compat reasons, but i don't know who/how one would depend on that | 14:38 |
| lbragstad | stevemar i thought that bug looked familiar | 14:38 |
| antwash | stevemar now that is interesting.. | 14:38 |
| stevemar | it's a minor inconvenience IMO | 14:39 |
| stevemar | there are other bigger fish to fry | 14:39 |
| openstackgerrit | Richard Avelar proposed openstack/keystone master: Remove unused revoke_by_project_role_assignment https://review.openstack.org/448613 | 14:39 |
| antwash | stevemar ++, to the bigger fish! | 14:39 |
| antwash | thanks steve! | 14:39 |
| *** henrynash has quit IRC | 14:40 | |
| lbragstad | stevemar if we keep getting the same bug opened, maybe we just need to be better about the wording of "relationship" to explain "this thing isn't real, it's an example" | 14:40 |
| stevemar | ja | 14:40 |
| dstanek | antwash: no! | 14:41 |
| antwash | lbragstad : or just s/relationship/example ? | 14:41 |
| dstanek | lbragstad: it's not an example though | 14:41 |
| antwash | lol yeah that'll be confusing..bad! | 14:42 |
| dstanek | it i | 14:42 |
| *** chris_hultin|AWA is now known as chris_hultin | 14:42 | |
| dstanek | it is a unique identifier. often they resolved to the docs for that relationship, but it really is just like a guid | 14:42 |
| dstanek | the relationship is really what is known as a URN in the REST world | 14:43 |
| *** henrynash has joined #openstack-keystone | 14:43 | |
| *** henrynash has quit IRC | 14:46 | |
| *** henrynash has joined #openstack-keystone | 14:46 | |
| openstackgerrit | Richard Avelar proposed openstack/keystone master: Remove unused revoke_by_domain_role_assignment https://review.openstack.org/448615 | 14:47 |
| *** henrynash has quit IRC | 14:47 | |
| *** phalmos has joined #openstack-keystone | 14:47 | |
| openstackgerrit | Richard Avelar proposed openstack/keystone master: Remove unused revoke_by_project_role_assignment https://review.openstack.org/448613 | 14:48 |
| *** pnavarro has joined #openstack-keystone | 14:48 | |
| *** henrynash has joined #openstack-keystone | 14:48 | |
| openstackgerrit | Richard Avelar proposed openstack/keystone master: Remove unnecessary revocation events revoke grant https://review.openstack.org/448192 | 14:48 |
| lbragstad | dstanek so there isn't anything we can do? | 14:49 |
| openstackgerrit | Richard Avelar proposed openstack/keystone master: Remove unnecessary revocation events https://review.openstack.org/448186 | 14:49 |
| openstackgerrit | Lance Bragstad proposed openstack/oslo.policy master: Update usage documentation https://review.openstack.org/448617 | 14:50 |
| lbragstad | cc antwash ^ | 14:50 |
| openstackgerrit | Anthony Washington proposed openstack/oslo.policy master: Add release note for DocumentedRuleDefault https://review.openstack.org/448139 | 14:50 |
| dstanek | lbragstad: see my comment on https://bugs.launchpad.net/keystone/+bug/1674676 | 14:51 |
| openstack | Launchpad bug 1674676 in OpenStack Identity (keystone) "The URL listed against the details of identity resources returns 404 Not Found error" [Medium,Confirmed] - Assigned to Anthony Washington (anthony-washington) | 14:51 |
| dstanek | antwash: ^ | 14:51 |
| openstackgerrit | Lance Bragstad proposed openstack/oslo.policy master: Update usage documentation https://review.openstack.org/448617 | 14:51 |
| dstanek | stevemar: interesting in your thoughts there too | 14:51 |
| *** chris_hultin is now known as chris_hultin|AWA | 14:51 | |
| gagehugo | lbragstad: interesting, thanks! | 14:52 |
| openstackgerrit | Anthony Washington proposed openstack/oslo.policy master: Add release note for DocumentedRuleDefault https://review.openstack.org/448139 | 14:53 |
| dstanek | lbragstad: this may help for background http://whatisrest.com/uniform_contract_elements/resource_identifier_syntax | 14:53 |
| EmilienM | lbragstad: hey, when you have time I wanted you to look at https://review.openstack.org/#/c/448326/ and give feedback on the way we test it | 14:55 |
| EmilienM | lbragstad: this repo is our integration tests, nothing for production | 14:56 |
| stevemar | dstanek: whats that now? | 14:56 |
| dstanek | stevemar: i commented on the bug antwash was asking about | 14:57 |
| lbragstad | dstanek thanks | 14:59 |
| antwash | seems like it should be marked as invalid | 15:00 |
| * antwash thinking... | 15:00 | |
| dstanek | i totally agree, but want to give you guys a chance to see if you agree with my view on APIs | 15:00 |
| stevemar | ++ dstanek | 15:00 |
| stevemar | dstanek: lbragstad any easy patches i can review? | 15:01 |
| antwash | stevemar : https://review.openstack.org/#/c/448139/ :) | 15:02 |
| dstanek | stevemar: actually some of the specs like tags and api keys are not terrible. there's also a few py2-py3 fixes up there | 15:02 |
| openstackgerrit | Stephen Finucane proposed openstack/oslo.policy master: Add release note for DocumentedRuleDefault https://review.openstack.org/448139 | 15:02 |
| dstanek | https://review.openstack.org/447377 | 15:02 |
| ravelar | stevemar https://review.openstack.org/#/c/447573/ super duper easy ;) | 15:02 |
| ravelar | https://review.openstack.org/#/c/447564/ | 15:02 |
| ravelar | https://review.openstack.org/#/c/444424/ | 15:03 |
| ravelar | https://review.openstack.org/#/c/447562/ | 15:03 |
| lbragstad | stevemar https://review.openstack.org/#/c/448617/ https://review.openstack.org/#/c/435078/ https://review.openstack.org/#/c/448211/ https://review.openstack.org/#/q/status:open+project:openstack/keystone+branch:master+topic:bp/policy-in-code https://review.openstack.org/#/c/440815/ | 15:03 |
| lbragstad | stevemar you asked ;) | 15:03 |
| cmurphy | lol poor stevemar | 15:03 |
| dstanek | lol. i was going to post a few more links. but it looks like you guys posted all of the keystone reviews :-) | 15:03 |
| stevemar | :O :O | 15:04 |
| stevemar | asking for reviews in keystone like https://media.giphy.com/media/L2KHKeiYyLEMo/giphy.gif | 15:04 |
| antwash | hahaha! | 15:04 |
| stevemar | cmurphy: new nick! | 15:04 |
| lbragstad | stevemar i was just about to go look for something like that | 15:05 |
| cmurphy | stevemar: new job new me | 15:05 |
| stevemar | cmurphy: old you was cool, i'm assuming new you is still cool | 15:05 |
| *** adrian_otto has joined #openstack-keystone | 15:06 | |
| cmurphy | if not cooler | 15:06 |
| lbragstad | i think we need to bring back casual-nick-fridays | 15:06 |
| stevemar | lbragstad: gonna abandon my reno patches, i don't have the time to work on them much :\ | 15:06 |
| lbragstad | stevemar i attempted to rebase them | 15:07 |
| knikolla | o/ | 15:07 |
| rodrigods | stevemar, https://review.openstack.org/#/c/445505/ :) | 15:09 |
| *** henrynash has quit IRC | 15:09 | |
| lbragstad | stevemar so the worst case if those patches don't merge would be that existing release notes for ocata, newton, and mitaka won't follow the newer conventions (https://docs.openstack.org/developer/keystone/devref/development_best_practices.html#release-notes), right? | 15:10 |
| stevemar | yep | 15:11 |
| stevemar | lbragstad: i'll abandon for now, there was some benefit to them, but reno confuses me | 15:11 |
| *** henrynash has joined #openstack-keystone | 15:11 | |
| *** rderose has joined #openstack-keystone | 15:12 | |
| *** david-lyle has joined #openstack-keystone | 15:12 | |
| openstackgerrit | Steve Martinelli proposed openstack/python-keystoneclient master: Fix failing PY2 and PY3 gate jobs https://review.openstack.org/447377 | 15:14 |
| *** Aqsa has quit IRC | 15:15 | |
| lbragstad | stevemar https://review.openstack.org/#/c/439355/ | 15:17 |
| openstackgerrit | Merged openstack/keystone-specs master: Add Policy Documentation https://review.openstack.org/435078 | 15:21 |
| ravelar | yay! | 15:22 |
| ravelar | thanks stevemar | 15:22 |
| *** prashkre has joined #openstack-keystone | 15:25 | |
| *** chlong has quit IRC | 15:30 | |
| *** chlong has joined #openstack-keystone | 15:34 | |
| openstackgerrit | Gage Hugo proposed openstack/python-keystoneclient master: Remove pbr warnerrors in favor of sphinx check https://review.openstack.org/441468 | 15:49 |
| lbragstad | ping reminder that the policy meeting will be starting in #openstack-meeting-cp in 6 minutes antwash, raildo, ktychkova, dolphm, dstanek, rderose, htruta, atrmr, gagehugo, lamt, thinrichs, edmondsw, ruan, ayoung, ravelar, morgan, raj_singh, johnthetubaguy, knikolla | 15:54 |
| openstackgerrit | Richard Avelar proposed openstack/python-keystoneclient master: WIP https://review.openstack.org/448658 | 16:00 |
| catintheroof | hi guys, in what openstack version keystone V2 is completely deprecated ? (if it is) | 16:00 |
| *** harlowja has joined #openstack-keystone | 16:06 | |
| dstanek | catintheroof: http://git.openstack.org/cgit/openstack/keystone/commit/keystone?h=e63a83 | 16:06 |
| dstanek | it's been deprecated for a little while now | 16:06 |
| *** MasterOfBugs has joined #openstack-keystone | 16:07 | |
| *** adu has joined #openstack-keystone | 16:10 | |
| catintheroof | dstanek: but that means, that the api calls doesnt work ? | 16:12 |
| catintheroof | dstanek: or just warns that is deprecated ? | 16:12 |
| *** kbaegis has joined #openstack-keystone | 16:12 | |
| *** Aqsa has joined #openstack-keystone | 16:15 | |
| *** Aqsam has joined #openstack-keystone | 16:16 | |
| *** Aqsa has quit IRC | 16:19 | |
| *** ma9_ has joined #openstack-keystone | 16:26 | |
| ma9_ | Is there anybody with experience with Keystone+Keycloak in here? or with Mellon? | 16:27 |
| ma9_ | I'm trying to debug how to get a keystone token authenticating with Keycloak with CURL | 16:27 |
| notmorgan | catintheroof: it's deprecated and slated for removal in the future - so it's fully deprecated now, but it wont be removed for a few more releases | 16:29 |
| *** hlo323 has joined #openstack-keystone | 16:30 | |
| openstackgerrit | Merged openstack/keystone master: Remove x-subject-token in api-ref for v3/auth/catalog https://review.openstack.org/446279 | 16:30 |
| openstackgerrit | Merged openstack/keystone master: Fix keystone.o.o URL https://review.openstack.org/443208 | 16:31 |
| openstackgerrit | Steve Martinelli proposed openstack/python-keystoneclient master: Fix failing PY2 and PY3 gate jobs https://review.openstack.org/447377 | 16:32 |
| openstackgerrit | Merged openstack/keystone master: Use HostAddressOpt for opts that accept IP and hostnames https://review.openstack.org/446444 | 16:35 |
| *** prashkre has quit IRC | 16:38 | |
| *** pnavarro has quit IRC | 16:43 | |
| *** prashkre has joined #openstack-keystone | 16:44 | |
| *** chlong has quit IRC | 16:45 | |
| *** links has joined #openstack-keystone | 16:49 | |
| *** chlong has joined #openstack-keystone | 16:52 | |
| openstackgerrit | Merged openstack/keystone master: Include the requested URL in authentication errors https://review.openstack.org/446720 | 16:55 |
| *** kencjohnston has joined #openstack-keystone | 17:01 | |
| *** rmascena has quit IRC | 17:20 | |
| *** henrynash has quit IRC | 17:25 | |
| *** rmascena has joined #openstack-keystone | 17:33 | |
| *** ma9_ has quit IRC | 17:35 | |
| *** links has quit IRC | 17:39 | |
| *** mvk has quit IRC | 17:39 | |
| *** jaosorior has quit IRC | 17:40 | |
| *** aojea_ has quit IRC | 17:46 | |
| *** MasterOfBugs has quit IRC | 17:49 | |
| *** ma9_ has joined #openstack-keystone | 17:49 | |
| openstackgerrit | Merged openstack/oslo.policy master: Add release note for DocumentedRuleDefault https://review.openstack.org/448139 | 17:51 |
| *** prashkre has quit IRC | 17:54 | |
| *** prashkre has joined #openstack-keystone | 17:55 | |
| openstackgerrit | Richard Avelar proposed openstack/keystone master: Add federated support for get user https://review.openstack.org/448730 | 17:59 |
| dstanek | catintheroof: warns... like notmorgan said it'll evenually be removed and is currently discouraged | 18:06 |
| dstanek | ma9_: what kind of error are you having? i don't know keycloak, but maybe i could point you in the right direction | 18:07 |
| *** mvk has joined #openstack-keystone | 18:08 | |
| *** MasterOfBugs has joined #openstack-keystone | 18:23 | |
| kfox1111 | anyone seen this before: http://paste.openstack.org/show/1ZGkhhAGpvslCK3EeAva/ | 18:36 |
| kfox1111 | its from glance/heat with keystone audit plugin enabled. | 18:36 |
| kfox1111 | going from mitaka -> newton. | 18:39 |
| lbragstad | huh- i have not | 18:41 |
| lbragstad | kfox1111 that's coming from keystone calling into oslo messaging? | 18:41 |
| lbragstad | kfox1111 or keystone dispatching a message? | 18:42 |
| dstanek | kfox1111: it looks to me the the context's to_dict isn't returning something that six likes | 18:43 |
| kfox1111 | its in the glance api logs when I do a glance image-list or the heat-api logs when doing a heat stack-list. | 18:44 |
| kfox1111 | it looks very similar to this: https://review.openstack.org/#/c/92576/2 | 18:44 |
| kfox1111 | but it only seems to happen with the audit plugin. | 18:44 |
| lbragstad | sounds like there is gap somewhere with the audit plugin | 18:44 |
| kfox1111 | yeah. | 18:45 |
| openstackgerrit | Richard Avelar proposed openstack/keystone master: Add federated support for get user https://review.openstack.org/448730 | 18:51 |
| dstanek | kfox1111: lbragstad: does it implement its own context object? | 18:54 |
| *** Aqsam has quit IRC | 18:55 | |
| openstackgerrit | Richard Avelar proposed openstack/keystone master: Add federated support for creating a user https://review.openstack.org/448755 | 18:57 |
| *** harlowja has quit IRC | 18:59 | |
| *** harlowja has joined #openstack-keystone | 19:00 | |
| *** harlowja has quit IRC | 19:01 | |
| *** edtubill has joined #openstack-keystone | 19:04 | |
| lbragstad | dstanek that's a good question | 19:06 |
| lbragstad | dstanek mind giving https://review.openstack.org/#/c/448617/ a look? | 19:06 |
| *** adrian_otto has quit IRC | 19:07 | |
| openstackgerrit | Merged openstack/python-keystoneclient master: Fix failing PY2 and PY3 gate jobs https://review.openstack.org/447377 | 19:08 |
| dstanek | lbragstad: sure | 19:11 |
| dstanek | lbragstad: is each URL a separate API? | 19:15 |
| lbragstad | dstanek not necessarily | 19:15 |
| lbragstad | dstanek the operations attribute is a list | 19:15 |
| dstanek | that's the terminology used in that patch. | 19:16 |
| lbragstad | dstanek and it supports containing multiple dictionaries | 19:16 |
| lbragstad | dstanek checking | 19:16 |
| dstanek | API mapping to policy and protecting multiple URLs | 19:17 |
| dstanek | seems like you'd want to s/API/URL/ in those cases, but i need to look at the rest of the doc. maybe it's like that all over | 19:17 |
| lbragstad | dstanek line 109 adn 110? | 19:18 |
| dstanek | lines 57 and 110 | 19:18 |
| lbragstad | dstanek ah - I see what you mean | 19:19 |
| lbragstad | dstanek http://cdn.pasteraw.com/9fqokozpkd6lvdxtpakgazmyjv5e5dh | 19:20 |
| *** spilla has quit IRC | 19:21 | |
| lbragstad | dstanek that's a good point because the operations attribute contains a dictionary with 'path' and 'method', and 'path' is a URL | 19:21 |
| dstanek | path isn't quite a URL | 19:22 |
| dstanek | lbragstad: you can use a URL to access a resource. the same is not true of a path. | 19:23 |
| lbragstad | dstanek in this case does it make sense to refer to URL instead of API? | 19:23 |
| lbragstad | s/make sense/make more sense/ | 19:23 |
| dstanek | i commented s/API/path/ in the review since that's the most accurate | 19:25 |
| openstackgerrit | Lance Bragstad proposed openstack/oslo.policy master: Update usage documentation https://review.openstack.org/448617 | 19:27 |
| lbragstad | dstanek stevemar antwash ^ | 19:27 |
| dstanek | lbragstad: i just dug this out of the history books: https://www.w3.org/Addressing/URL/url-spec.txt | 19:29 |
| dstanek | lbragstad: what do you want to do about that bug from earlier? URL one, that is | 19:29 |
| lbragstad | dstanek i'm not sure | 19:29 |
| lbragstad | dstanek i poked at it a few more times, and then put it on the backburner | 19:30 |
| lbragstad | dstanek i want to do something about it because (as stevemar said) it has been reported multiple times | 19:30 |
| lbragstad | dstanek do you have an opinion? | 19:32 |
| *** spotz is now known as spotz_zzz | 19:32 | |
| dstanek | yeah, but let me go double check before I throw it out there | 19:33 |
| *** spotz_zzz is now known as spotz | 19:33 | |
| *** adrian_otto has joined #openstack-keystone | 19:34 | |
| kfox1111 | dstanek: not sure. just an op upgrading my cloud from mitaka->newton. | 19:36 |
| dstanek | kfox1111: I can dig in a little and see if I can find anything | 19:38 |
| *** spilla has joined #openstack-keystone | 19:41 | |
| *** harlowja has joined #openstack-keystone | 19:45 | |
| kfox1111 | dstanek: thanks. | 19:46 |
| kfox1111 | if you need any config or info to help debug, please let me know. :) | 19:47 |
| *** Aqsa has joined #openstack-keystone | 19:51 | |
| openstackgerrit | Richard Avelar proposed openstack/keystone master: Add federated support for creating a user https://review.openstack.org/448755 | 19:51 |
| openstackgerrit | Richard Avelar proposed openstack/keystone master: Add federated support for get user https://review.openstack.org/448730 | 19:51 |
| openstackgerrit | Richard Avelar proposed openstack/keystone master: Add federated support for updating a user https://review.openstack.org/448765 | 19:51 |
| *** henrynash has joined #openstack-keystone | 19:54 | |
| lbragstad | stevemar does http://specs.openstack.org/openstack/keystone-specs/ repopulate periodically after we merge specs? | 20:05 |
| stevemar | lbragstad: it should, you may have to refresh and skip the cache though | 20:06 |
| stevemar | command+shirt+r on a mac | 20:06 |
| stevemar | or open it in an incognito window | 20:06 |
| lbragstad | aha | 20:06 |
| lbragstad | stevemar thanks! | 20:06 |
| *** henrynash has quit IRC | 20:07 | |
| lbragstad | antwash fyi - https://blueprints.launchpad.net/keystone/+spec/policy-docs | 20:08 |
| lbragstad | antwash when you propose new patch sets for https://review.openstack.org/#/c/447606 if you include `blueprint policy-docs` in the commit it should automatically like those to the newly registered blueprint | 20:09 |
| antwash | lbragstad: ++ gotcha | 20:10 |
| *** jlopezgu has joined #openstack-keystone | 20:12 | |
| openstackgerrit | Kristi Nikolla proposed openstack/keystone master: WIP - Document functional testing and devstack plugin https://review.openstack.org/448773 | 20:14 |
| dstanek | kfox1111: hmmm....keystonemiddleware.audit doesn't seem to implement its own context. not sure what the problem could be | 20:15 |
| *** tesseract has quit IRC | 20:17 | |
| *** henrynash has joined #openstack-keystone | 20:17 | |
| *** harlowja has quit IRC | 20:18 | |
| kfox1111 | dstanek: the pipeline from glance is: | 20:20 |
| dstanek | kfox1111: i wish that traceback when a little further up the stack | 20:21 |
| kfox1111 | pipeline = cors healthcheck http_proxy_to_wsgi versionnegotiation osprofiler authtoken audit context rootapp | 20:21 |
| kfox1111 | still fails if cors healthcheck and osprofiler is removed. | 20:22 |
| kfox1111 | so, not really much in the way to mess with the request before the audit plugin gets it. :/ | 20:22 |
| *** adrian_otto has quit IRC | 20:24 | |
| kfox1111 | yeah. the stack trace isn't too useful. :/ | 20:25 |
| *** adu has quit IRC | 20:29 | |
| *** alex_xu has quit IRC | 20:43 | |
| *** davechen has quit IRC | 20:44 | |
| *** prashkre has quit IRC | 20:44 | |
| *** alex_xu has joined #openstack-keystone | 20:46 | |
| *** spilla has quit IRC | 20:50 | |
| *** henrynash has quit IRC | 20:50 | |
| *** adriant has joined #openstack-keystone | 20:50 | |
| *** henrynash has joined #openstack-keystone | 20:52 | |
| *** henrynash has quit IRC | 20:53 | |
| openstackgerrit | Merged openstack/keystone master: Speed up check_user_in_group for LDAP users https://review.openstack.org/447459 | 20:55 |
| openstackgerrit | Anthony Washington proposed openstack/keystone master: Move policy from RuleDefault to DocumentedRuleDefault https://review.openstack.org/447606 | 21:04 |
| openstackgerrit | Anthony Washington proposed openstack/keystone master: Move policy from RuleDefault to DocumentedRuleDefault https://review.openstack.org/447606 | 21:05 |
| openstackgerrit | Merged openstack/keystone master: Don't persist rev event when deleting access token https://review.openstack.org/447549 | 21:07 |
| *** Aqsa has quit IRC | 21:08 | |
| *** chlong has quit IRC | 21:08 | |
| *** adrian_otto has joined #openstack-keystone | 21:11 | |
| *** rmascena has quit IRC | 21:28 | |
| *** harlowja has joined #openstack-keystone | 21:33 | |
| openstackgerrit | Anthony Washington proposed openstack/keystone master: Move policy from RuleDefault to DocumentedRuleDefault 2 https://review.openstack.org/447607 | 21:33 |
| openstackgerrit | Anthony Washington proposed openstack/keystone master: Policy in code (part 2) https://review.openstack.org/435751 | 21:33 |
| openstackgerrit | Anthony Washington proposed openstack/keystone master: Policy in code https://review.openstack.org/435609 | 21:33 |
| *** phalmos has quit IRC | 21:34 | |
| lbragstad | johnthetubaguy https://review.openstack.org/#/c/448793/ and https://review.openstack.org/#/c/448794/ (per the policy meeting earlier) | 21:34 |
| EmilienM | dolphm: thanks for your review on the tripleo-spec: https://review.openstack.org/#/c/445592 - keep in mind I don't like this spec and I hope we can abandon it. | 21:34 |
| *** edtubill has quit IRC | 21:36 | |
| EmilienM | dolphm: I'm currently looking for internal resources to work on the keystone side | 21:37 |
| *** raj_singh has quit IRC | 21:37 | |
| *** Guest73793 has quit IRC | 21:38 | |
| *** antwash_ has quit IRC | 21:38 | |
| *** Aqsa has joined #openstack-keystone | 21:43 | |
| *** pcaruana has quit IRC | 21:47 | |
| openstackgerrit | Merged openstack/oslo.policy master: Update usage documentation https://review.openstack.org/448617 | 21:47 |
| *** woodburn has quit IRC | 21:49 | |
| kfox1111 | so, glance's request.context isn't serilizable the way the notification expects. | 21:52 |
| *** david-lyle has quit IRC | 21:52 | |
| kfox1111 | calling to_dict on it before passing it in worked. | 21:52 |
| *** masber has quit IRC | 21:56 | |
| *** woodburn has joined #openstack-keystone | 21:57 | |
| *** david-lyle has joined #openstack-keystone | 22:15 | |
| *** masber has joined #openstack-keystone | 22:22 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/python-keystoneclient master: Updated from global requirements https://review.openstack.org/439355 | 22:27 |
| *** henrynash has joined #openstack-keystone | 22:29 | |
| *** henrynash has quit IRC | 22:39 | |
| *** nkinder has quit IRC | 22:42 | |
| *** nkinder has joined #openstack-keystone | 22:43 | |
| *** eandersson has quit IRC | 22:51 | |
| *** catintheroof has quit IRC | 23:01 | |
| *** catintheroof has joined #openstack-keystone | 23:02 | |
| openstackgerrit | Anthony Washington proposed openstack/keystone master: Policy in code (part 2) https://review.openstack.org/435751 | 23:06 |
| openstackgerrit | Anthony Washington proposed openstack/keystone master: Policy in code https://review.openstack.org/435609 | 23:06 |
| openstackgerrit | Anthony Washington proposed openstack/keystone master: Policy in code (part 3) https://review.openstack.org/435754 | 23:06 |
| openstackgerrit | Anthony Washington proposed openstack/keystone master: Policy in code (part 4) https://review.openstack.org/435755 | 23:06 |
| openstackgerrit | Anthony Washington proposed openstack/keystone master: Policy in code (part 5) https://review.openstack.org/435757 | 23:06 |
| *** catintheroof has quit IRC | 23:06 | |
| openstackgerrit | Anthony Washington proposed openstack/keystone master: Policy in code (part 2) https://review.openstack.org/435751 | 23:09 |
| openstackgerrit | Anthony Washington proposed openstack/keystone master: Policy in code https://review.openstack.org/435609 | 23:09 |
| openstackgerrit | Anthony Washington proposed openstack/keystone master: Policy in code (part 3) https://review.openstack.org/435754 | 23:09 |
| openstackgerrit | Anthony Washington proposed openstack/keystone master: Move policy from RuleDefault to DocumentedRuleDefault 3 https://review.openstack.org/448823 | 23:09 |
| antwash | lol wow Anthony | 23:09 |
| *** Aqsa has quit IRC | 23:10 | |
| *** eandersson has joined #openstack-keystone | 23:15 | |
| *** rmascena has joined #openstack-keystone | 23:19 | |
| openstackgerrit | Richard Avelar proposed openstack/keystone master: Address comments from Steve Mar Policy in Code 5 https://review.openstack.org/448826 | 23:24 |
| ravelar | what?!? what?! just when everything was going to merge?! a;sdklfja;sdlkfj;askldjf | 23:24 |
| antwash | it was rebase | 23:28 |
| antwash | it still has the reviews on it just running jenkins again | 23:28 |
| ravelar | i know, oh well | 23:29 |
| antwash | *shurgs* it'll get merged oneday | 23:29 |
| antwash | lol | 23:29 |
| ravelar | a;lksdfja;skldjf;alskdjf;alskdjf | 23:29 |
| ravelar | lol | 23:29 |
| ravelar | slow and steady wins the race | 23:30 |
| openstackgerrit | Richard Avelar proposed openstack/keystone master: Address comments from Steve Mar Policy in Code 5 https://review.openstack.org/448826 | 23:32 |
| *** adrian_otto has quit IRC | 23:36 | |
| *** rmascena has quit IRC | 23:39 | |
| *** nkinder has quit IRC | 23:42 | |
| *** adrian_otto has joined #openstack-keystone | 23:46 | |
| *** adrian_otto has quit IRC | 23:51 | |
| *** nkinder has joined #openstack-keystone | 23:54 | |
| *** kbaegis has quit IRC | 23:55 | |
| *** kbaegis has joined #openstack-keystone | 23:55 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!
