| *** gcb has quit IRC | 00:03 | |
| *** mvk has quit IRC | 00:12 | |
| *** chris_hultin is now known as chris_hultin|AWA | 00:13 | |
| *** rajpatel has quit IRC | 00:15 | |
| *** catintheroof has quit IRC | 00:19 | |
| *** MasterOfBugs has quit IRC | 00:22 | |
| *** pramodrj07 has quit IRC | 00:23 | |
| *** mvk has joined #openstack-keystone | 00:25 | |
| *** mvk has quit IRC | 00:34 | |
| *** mvk has joined #openstack-keystone | 00:34 | |
| *** mvk has quit IRC | 00:51 | |
| *** zhurong has joined #openstack-keystone | 00:55 | |
| *** sjain has joined #openstack-keystone | 00:56 | |
| *** mvk has joined #openstack-keystone | 01:03 | |
| *** gyee has quit IRC | 01:04 | |
| *** davechen has joined #openstack-keystone | 01:06 | |
| *** mvk has quit IRC | 01:10 | |
| *** mvk has joined #openstack-keystone | 01:10 | |
| *** liujiong has joined #openstack-keystone | 01:12 | |
| *** gcb has joined #openstack-keystone | 01:17 | |
| *** shu-mutou-AWAY has quit IRC | 01:19 | |
| *** sjain has quit IRC | 01:20 | |
| rocky_ | dstanek: thx for your answer. my OS is ubuntu 16.04, and the service name is apache2 . | 01:27 |
|---|---|---|
| *** rocky_ is now known as xuhaigang | 01:27 | |
| *** thorst has quit IRC | 01:30 | |
| *** thorst has joined #openstack-keystone | 01:30 | |
| *** thorst has quit IRC | 01:34 | |
| *** edmondsw has joined #openstack-keystone | 01:39 | |
| *** edmondsw has quit IRC | 01:43 | |
| *** shuyingya has joined #openstack-keystone | 02:01 | |
| *** catintheroof has joined #openstack-keystone | 02:16 | |
| *** thorst has joined #openstack-keystone | 02:31 | |
| *** catintheroof has quit IRC | 02:34 | |
| *** catintheroof has joined #openstack-keystone | 02:35 | |
| *** catintheroof has quit IRC | 02:40 | |
| *** thorst has quit IRC | 02:51 | |
| *** Shunli has joined #openstack-keystone | 02:55 | |
| *** namnh has joined #openstack-keystone | 03:09 | |
| *** nicolasbock has quit IRC | 03:10 | |
| *** chlong has quit IRC | 03:47 | |
| *** Dinesh_Bhor has quit IRC | 04:07 | |
| *** markvoelker has quit IRC | 04:09 | |
| *** lamt has joined #openstack-keystone | 04:41 | |
| *** thorst has joined #openstack-keystone | 04:48 | |
| *** thorst has quit IRC | 04:52 | |
| *** liujiong has quit IRC | 05:05 | |
| *** liujiong has joined #openstack-keystone | 05:06 | |
| *** Dinesh_Bhor has joined #openstack-keystone | 05:11 | |
| *** rcernin has joined #openstack-keystone | 05:15 | |
| *** shuyingy_ has joined #openstack-keystone | 05:19 | |
| *** shuyingya has quit IRC | 05:19 | |
| *** lamt has quit IRC | 05:36 | |
| *** richm has quit IRC | 05:44 | |
| *** spotz is now known as spotz_zzz | 05:46 | |
| *** thorst has joined #openstack-keystone | 05:48 | |
| *** spotz_zzz is now known as spotz | 05:48 | |
| *** lamt has joined #openstack-keystone | 05:53 | |
| *** thorst has quit IRC | 05:53 | |
| *** jaosorior_away is now known as jaosorior | 05:55 | |
| *** adriant has quit IRC | 06:02 | |
| *** aojea has joined #openstack-keystone | 06:12 | |
| *** liujiong_lj has joined #openstack-keystone | 06:15 | |
| *** liujiong has quit IRC | 06:16 | |
| *** lamt has quit IRC | 06:19 | |
| *** shuyingya has joined #openstack-keystone | 06:19 | |
| *** shuyingy_ has quit IRC | 06:20 | |
| *** xuhaigang has quit IRC | 06:20 | |
| *** voelzmo has joined #openstack-keystone | 06:26 | |
| *** sudorandom has quit IRC | 06:29 | |
| *** liujiong has joined #openstack-keystone | 06:30 | |
| *** sudorandom has joined #openstack-keystone | 06:30 | |
| *** liujiong_lj has quit IRC | 06:32 | |
| *** xuhaigang has joined #openstack-keystone | 06:34 | |
| *** liujiong has quit IRC | 06:37 | |
| *** tesseract has joined #openstack-keystone | 06:47 | |
| *** lamt has joined #openstack-keystone | 06:48 | |
| *** thorst has joined #openstack-keystone | 06:49 | |
| *** mgagne has quit IRC | 06:52 | |
| *** thorst has quit IRC | 06:54 | |
| *** shuyingy_ has joined #openstack-keystone | 07:00 | |
| *** shuyingya has quit IRC | 07:00 | |
| *** Aqsa has joined #openstack-keystone | 07:00 | |
| *** xuhaigang has quit IRC | 07:01 | |
| *** lamt has quit IRC | 07:04 | |
| *** pcaruana has joined #openstack-keystone | 07:06 | |
| *** Aqsa has quit IRC | 07:08 | |
| *** aojea has quit IRC | 07:16 | |
| *** aojea has joined #openstack-keystone | 07:19 | |
| *** xuhaigang has joined #openstack-keystone | 07:30 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone master: Imported Translations from Zanata https://review.openstack.org/455559 | 07:33 |
| openstackgerrit | D G Lee proposed openstack/keystonemiddleware master: Remove log translations https://review.openstack.org/447841 | 07:49 |
| *** thorst has joined #openstack-keystone | 07:50 | |
| *** frickler has quit IRC | 07:51 | |
| *** frickler has joined #openstack-keystone | 07:52 | |
| *** zzzeek has quit IRC | 08:00 | |
| *** zzzeek has joined #openstack-keystone | 08:00 | |
| *** aojea has quit IRC | 08:04 | |
| *** aojea has joined #openstack-keystone | 08:06 | |
| *** aojea has quit IRC | 08:07 | |
| *** thorst has quit IRC | 08:09 | |
| *** aojea has joined #openstack-keystone | 08:25 | |
| *** aojea has quit IRC | 08:29 | |
| *** toddnni has joined #openstack-keystone | 08:44 | |
| *** evrardjp has joined #openstack-keystone | 08:52 | |
| evrardjp | hello | 08:52 |
| evrardjp | could someone have a look at this? https://bugs.launchpad.net/openstack-ansible/+bug/1681695 | 08:52 |
| openstack | Launchpad bug 1681695 in openstack-ansible "Incorrect keystone with multiple memcache configuration" [Undecided,New] | 08:52 |
| evrardjp | I'm no keystone expert, and I'm pretty sure there is something wrong on our side | 08:52 |
| breton | evrardjp: commented | 08:54 |
| evrardjp | thanks! | 08:54 |
| evrardjp | great. | 08:54 |
| evrardjp | so oslo/dogpile don't have conflicting configurations. | 08:55 |
| evrardjp | good, thank you breton! | 08:55 |
| breton | > so oslo/dogpile don't have conflicting configurations | 08:59 |
| breton | that's right | 08:59 |
| evrardjp | I misread the bug too, I see it's also a question of using backend_argument or memcache_servers, I know have to dig a little deeper in how we template this, but it's helping! | 08:59 |
| *** voelzmo has quit IRC | 09:00 | |
| *** voelzmo has joined #openstack-keystone | 09:02 | |
| *** openstackgerrit has quit IRC | 09:03 | |
| *** thorst has joined #openstack-keystone | 09:06 | |
| *** thorst has quit IRC | 09:11 | |
| *** aojea has joined #openstack-keystone | 09:26 | |
| *** aojea has quit IRC | 09:32 | |
| *** belmoreira has joined #openstack-keystone | 09:47 | |
| *** openstackgerrit has joined #openstack-keystone | 10:07 | |
| openstackgerrit | John Garbutt proposed openstack/keystone-specs master: WIP Write down my ideas around delegation https://review.openstack.org/455629 | 10:07 |
| cmurphy | keystoners might want to be aware of https://bugs.launchpad.net/swift/+bug/1604674 (pointed out to me on https://review.openstack.org/#/c/454386) to help resolve some confusion | 10:09 |
| openstack | Launchpad bug 1604674 in OpenStack Object Storage (swift) "Doc error in Auth Overview for specifying keystone domain " [Undecided,In progress] - Assigned to Alistair Coles (alistair-coles) | 10:09 |
| *** zhurong has quit IRC | 10:10 | |
| *** zhurong has joined #openstack-keystone | 10:11 | |
| *** richm has joined #openstack-keystone | 10:15 | |
| *** zsli_ has joined #openstack-keystone | 10:20 | |
| *** Shunli has quit IRC | 10:23 | |
| *** nicolasbock has joined #openstack-keystone | 10:24 | |
| *** aojea has joined #openstack-keystone | 10:28 | |
| *** aojea has quit IRC | 10:33 | |
| *** winggundamth has joined #openstack-keystone | 10:43 | |
| *** raildo has joined #openstack-keystone | 11:00 | |
| *** raildo has quit IRC | 11:01 | |
| *** thorst has joined #openstack-keystone | 11:08 | |
| *** raildo has joined #openstack-keystone | 11:09 | |
| *** thorst has quit IRC | 11:13 | |
| *** zsli_ has quit IRC | 11:16 | |
| *** adriant has joined #openstack-keystone | 11:16 | |
| *** aojea has joined #openstack-keystone | 11:29 | |
| *** aojea has quit IRC | 11:33 | |
| breton | cmurphy: thanks, commented on it | 11:35 |
| *** adriant has quit IRC | 11:43 | |
| *** thorst has joined #openstack-keystone | 11:47 | |
| *** mvk has quit IRC | 11:49 | |
| *** markvoelker has joined #openstack-keystone | 11:56 | |
| *** markvoelker has quit IRC | 12:03 | |
| *** edmondsw has joined #openstack-keystone | 12:12 | |
| *** basilAB has quit IRC | 12:14 | |
| *** namnh has quit IRC | 12:14 | |
| *** breton has quit IRC | 12:17 | |
| *** basilAB has joined #openstack-keystone | 12:18 | |
| *** vaishali has joined #openstack-keystone | 12:18 | |
| *** breton has joined #openstack-keystone | 12:18 | |
| *** aojea has joined #openstack-keystone | 12:30 | |
| *** aojea has quit IRC | 12:34 | |
| *** shuyingy_ has quit IRC | 12:43 | |
| *** stradling has joined #openstack-keystone | 12:48 | |
| *** zhurong has quit IRC | 12:54 | |
| *** lamt has joined #openstack-keystone | 12:56 | |
| *** spilla has joined #openstack-keystone | 13:02 | |
| *** lamt has quit IRC | 13:08 | |
| *** winggundamth has quit IRC | 13:12 | |
| *** Dinesh_Bhor has quit IRC | 13:22 | |
| *** Dinesh_Bhor has joined #openstack-keystone | 13:24 | |
| *** erlon has joined #openstack-keystone | 13:24 | |
| openstackgerrit | Sean Dague proposed openstack/keystone-specs master: WIP: very very early sketch of possible limits API https://review.openstack.org/455709 | 13:25 |
| *** aojea has joined #openstack-keystone | 13:31 | |
| *** mvk has joined #openstack-keystone | 13:33 | |
| *** aojea has quit IRC | 13:36 | |
| *** shuyingya has joined #openstack-keystone | 13:43 | |
| *** shuyingya has quit IRC | 13:47 | |
| gagehugo | o/ | 13:53 |
| *** shuyingya has joined #openstack-keystone | 13:54 | |
| *** jaosorior is now known as jaosorior_away | 14:06 | |
| *** shuyingya has quit IRC | 14:07 | |
| *** lamt has joined #openstack-keystone | 14:11 | |
| *** markvoelker has joined #openstack-keystone | 14:12 | |
| *** markvoelker has quit IRC | 14:12 | |
| *** markvoelker has joined #openstack-keystone | 14:13 | |
| *** rajpatel has joined #openstack-keystone | 14:17 | |
| *** lucasxu has joined #openstack-keystone | 14:17 | |
| *** chris_hultin|AWA is now known as chris_hultin | 14:18 | |
| *** chlong has joined #openstack-keystone | 14:22 | |
| *** lamt has quit IRC | 14:22 | |
| -openstackstatus- NOTICE: latest base images have mistakenly put python3 in some places expecting python2 causing widespread failure of docs patches - fixes are underway | 14:26 | |
| *** chris_hultin is now known as chris_hultin|AWA | 14:27 | |
| *** lamt has joined #openstack-keystone | 14:27 | |
| *** lucasxu has quit IRC | 14:28 | |
| *** lucasxu has joined #openstack-keystone | 14:29 | |
| *** aojea has joined #openstack-keystone | 14:31 | |
| *** dave-mccowan has joined #openstack-keystone | 14:34 | |
| *** aojea has quit IRC | 14:36 | |
| *** lucasxu has quit IRC | 14:38 | |
| *** lucasxu has joined #openstack-keystone | 14:44 | |
| knikolla | o/ | 14:45 |
| lbragstad | o/ | 14:45 |
| -openstackstatus- NOTICE: we have rolled back centos-7, fedora-25 and ubuntu-xenial images to the previous days release. Feel free to recheck your jobs now. | 14:47 | |
| *** lamt has quit IRC | 14:50 | |
| *** jlvillal_pto is now known as jlvillal | 14:52 | |
| *** rderose has joined #openstack-keystone | 14:52 | |
| *** lucasxu has quit IRC | 14:54 | |
| *** lucasxu has joined #openstack-keystone | 14:55 | |
| openstackgerrit | Sean McCully proposed openstack/keystoneauth master: KeystoneAuth should default to system CAFile. https://review.openstack.org/452585 | 14:58 |
| *** belmoreira has quit IRC | 14:59 | |
| *** rcernin has quit IRC | 15:05 | |
| *** shuyingya has joined #openstack-keystone | 15:16 | |
| *** shuyingya has quit IRC | 15:20 | |
| *** gcb has quit IRC | 15:24 | |
| *** lucasxu has quit IRC | 15:26 | |
| *** chlong_ has joined #openstack-keystone | 15:29 | |
| *** chlong has quit IRC | 15:32 | |
| *** aojea has joined #openstack-keystone | 15:32 | |
| *** aojea has quit IRC | 15:37 | |
| *** lamt has joined #openstack-keystone | 15:41 | |
| *** chlong has joined #openstack-keystone | 15:44 | |
| openstackgerrit | Sean McCully proposed openstack/keystoneauth master: KeystoneAuth should default to system CAFile. https://review.openstack.org/452585 | 15:50 |
| *** jistr is now known as jistr|mtg | 15:59 | |
| *** voelzmo has quit IRC | 16:02 | |
| *** voelzmo has joined #openstack-keystone | 16:03 | |
| *** voelzmo has quit IRC | 16:07 | |
| *** d0ugal has quit IRC | 16:18 | |
| openstackgerrit | Merged openstack/keystone master: Move group policies to DocumentedRuleDefault https://review.openstack.org/449237 | 16:18 |
| *** shuyingya has joined #openstack-keystone | 16:18 | |
| knikolla | ayoung: the keystoneclient doesn't like too much the fact the the url endpoint is "url_patterns" while the resource is "patterns". Everything else has usually been named the same. | 16:20 |
| *** browne has joined #openstack-keystone | 16:20 | |
| *** shuyingya has quit IRC | 16:21 | |
| knikolla | i've had to make some changes to base classes, especially in the unit tests which i'm working on. | 16:21 |
| *** gyee has joined #openstack-keystone | 16:25 | |
| openstackgerrit | Merged openstack/keystone master: Move project endpoint to DocumentedRuleDefault https://review.openstack.org/449276 | 16:28 |
| *** pcaruana has quit IRC | 16:29 | |
| *** aojea has joined #openstack-keystone | 16:33 | |
| lbragstad | morgan fyi - curious to get your thought on https://review.openstack.org/#/c/451941/3 | 16:36 |
| *** jistr|mtg is now known as jistr | 16:37 | |
| *** aojea has quit IRC | 16:38 | |
| morgan | i dislike it is using hazmat stuff. but i get that is part of the impl =/ | 16:40 |
| morgan | and hard to do outside of hazmat | 16:40 |
| morgan | generally speaking this move is good | 16:41 |
| lbragstad | i agree | 16:45 |
| *** rderose has quit IRC | 16:51 | |
| *** rderose has joined #openstack-keystone | 16:51 | |
| *** rderose has quit IRC | 16:52 | |
| *** rderose_ has joined #openstack-keystone | 16:52 | |
| *** stradling has quit IRC | 16:54 | |
| *** winggundamth has joined #openstack-keystone | 16:57 | |
| *** mgagne has joined #openstack-keystone | 17:00 | |
| *** stradling has joined #openstack-keystone | 17:02 | |
| openstackgerrit | Merged openstack/keystone master: Move consumer to DocumentedRuleDefault https://review.openstack.org/449269 | 17:11 |
| ayoung | knikolla, we can change it on either side | 17:21 |
| ayoung | knikolla, I've been thinking more and more about the Body introspection for Posts, and how essential that is going to be for Nova. Every use case I come across for something to demo ends up in the actions API | 17:22 |
| *** lamt has quit IRC | 17:23 | |
| *** mvk has quit IRC | 17:25 | |
| *** tesseract has quit IRC | 17:26 | |
| *** aojea has joined #openstack-keystone | 17:34 | |
| *** aojea has quit IRC | 17:38 | |
| *** MasterOfBugs has joined #openstack-keystone | 17:41 | |
| *** pramodrj07 has joined #openstack-keystone | 17:41 | |
| knikolla | ayoung: cool. i don't really like "url_patterns" to be honest | 17:42 |
| ayoung | knikolla, open to suggestions | 17:42 |
| ayoung | knikolla, I guess patterns is ok, but kindof generic. And they are not complete URLs | 17:43 |
| ayoung | I've toyed with targets, | 17:43 |
| ayoung | routes? | 17:44 |
| knikolla | ayoung: hmm… routes is an improvement | 17:45 |
| ayoung | yeah, lets go with that. dstanek lbragstad morgan what do you folks think? INstead of url_patterns, we call them routes, for RBAC from middleware? | 17:46 |
| ayoung | I think it then maps clearly to the routers, at least in Keystone | 17:46 |
| morgan | sure. | 17:46 |
| morgan | wfm | 17:46 |
| lbragstad | ayoung is it still a path? | 17:47 |
| ayoung | lbragstad, not quite | 17:47 |
| ayoung | lbragstad, its a pattern that matches a path, though | 17:47 |
| ayoung | knikolla, routers does call it a path | 17:48 |
| ayoung | path='/groups/{group_id}/users/{user_id}', | 17:48 |
| *** lamt has joined #openstack-keystone | 17:48 | |
| *** rajpatel is now known as rajpatel_away | 17:48 | |
| knikolla | pathterns :P | 17:48 |
| knikolla | okay, terrible joke | 17:49 |
| *** stradling has quit IRC | 17:50 | |
| morgan | knikolla: -3 | 17:50 |
| morgan | knikolla: not just no, not just hell no, the next step beyond... | 17:50 |
| morgan | ;) | 17:50 |
| knikolla | morgan: haha :) | 17:52 |
| knikolla | ayoung: it's not really a path, since it can match multiple paths. i'd be hesitant to overload the term | 17:52 |
| knikolla | even though those are developer terms, as opposed to user terms | 17:54 |
| lbragstad | ping antwash, ayoung, breton, cmurphy, dstanek, gagehugo, henrynash, hrybacki, knikolla, lamt, lbragstad, notmorgan, ravelar, rderose, rodrigods, samueldmq, spilla | 17:55 |
| samueldmq | oh | 17:55 |
| lbragstad | 5 minutes pre-meeting ping | 17:55 |
| *** Aqsa has joined #openstack-keystone | 17:55 | |
| samueldmq | lbragstad: nice. "prepare your coffee and seats, we're about to launch" | 17:55 |
| lbragstad | samueldmq pretty much :) | 17:55 |
| dstanek | pong lbragstad; ready to go! | 17:56 |
| cmurphy | :) | 17:57 |
| *** mvk has joined #openstack-keystone | 17:57 | |
| ayoung | knikolla, lets go with paths. At least we will all be wrong together. | 17:58 |
| knikolla | ayoung: ok, sounds good. will do the rename later today on both server and client. | 17:59 |
| knikolla | i'll also start writing the api-ref | 17:59 |
| ayoung | knikolla, I want to add in a field for matching something in the body. I was going to call that Path, but oh well | 18:01 |
| *** rajpatel_away has quit IRC | 18:08 | |
| *** stradling has joined #openstack-keystone | 18:10 | |
| *** rodrigods_ has joined #openstack-keystone | 18:10 | |
| *** rajpatel has joined #openstack-keystone | 18:19 | |
| *** MasterOfBugs has quit IRC | 18:21 | |
| *** pramodrj07 has quit IRC | 18:21 | |
| *** rodrigods_ has quit IRC | 18:22 | |
| *** lucasxu has joined #openstack-keystone | 18:25 | |
| openstackgerrit | Merged openstack/keystone master: Move mapping to DocumentedRuleDefault https://review.openstack.org/449341 | 18:27 |
| openstackgerrit | Merged openstack/keystone master: Move role assignment to DocumentedRuleDefault https://review.openstack.org/449253 | 18:33 |
| openstackgerrit | Merged openstack/keystone master: Move region policies to DocumentedRuleDefault https://review.openstack.org/449213 | 18:33 |
| *** aojea has joined #openstack-keystone | 18:35 | |
| *** mgagne_ has joined #openstack-keystone | 18:35 | |
| *** mgagne_ is now known as Guest89317 | 18:35 | |
| *** rodrigods_ has joined #openstack-keystone | 18:38 | |
| lbragstad | lamt want to ping me your email? | 18:39 |
| lbragstad | cc gagehugo ^ | 18:39 |
| lbragstad | knikolla ^ | 18:39 |
| gagehugo | sure | 18:39 |
| *** aojea has quit IRC | 18:39 | |
| *** Guest89317 has quit IRC | 18:46 | |
| *** lamt has quit IRC | 18:50 | |
| *** rodrigods_ has quit IRC | 18:53 | |
| *** lamt has joined #openstack-keystone | 18:55 | |
| ayoung | knikolla, what are we going to call the segment of the body that we want to match? Let me throw out 'body' to get it started | 18:57 |
| knikolla | ayoung: payload? | 19:02 |
| ayoung | knikolla, I'd say that is equal | 19:02 |
| *** rajpatel has quit IRC | 19:02 | |
| ayoung | what we really want is something like Path, that indicates "this has to be in the body". What about "key" | 19:03 |
| knikolla | ayoung: yeah, key works. | 19:03 |
| ayoung | knikolla, for something like JSON-RPC ( not OpenStack) we might be in case where we want to check something like "method": "add-user" | 19:04 |
| ayoung | I guess if we ever get there, we could add an additional field for "value" | 19:04 |
| ayoung | OK, lets go with key | 19:05 |
| knikolla | ayoung: key and value pair well. | 19:05 |
| ayoung | knikolla, you have an update you are posting, or is it ok if I go in and add this now? | 19:05 |
| ayoung | I kindof want it in the API even if we can't enforce on it first go round | 19:05 |
| knikolla | ayoung: add it now. got sprint planning in the next hour. | 19:05 |
| *** lamt has quit IRC | 19:06 | |
| ayoung | knikolla, roger | 19:07 |
| *** lucasxu has quit IRC | 19:08 | |
| *** lucasxu has joined #openstack-keystone | 19:11 | |
| *** rodrigods_ has joined #openstack-keystone | 19:14 | |
| *** mgagne_ has joined #openstack-keystone | 19:18 | |
| *** mgagne_ is now known as Guest4366 | 19:19 | |
| *** dave-mccowan has quit IRC | 19:21 | |
| *** mgagne has quit IRC | 19:24 | |
| *** Guest4366 is now known as mgagne | 19:25 | |
| *** mgagne has quit IRC | 19:25 | |
| *** mgagne has joined #openstack-keystone | 19:25 | |
| *** rajpatel has joined #openstack-keystone | 19:28 | |
| *** winggundamth has quit IRC | 19:29 | |
| *** lamt has joined #openstack-keystone | 19:31 | |
| *** rodrigods_ has quit IRC | 19:32 | |
| *** pramodrj07 has joined #openstack-keystone | 19:36 | |
| *** MasterOfBugs has joined #openstack-keystone | 19:36 | |
| *** markvoelker has quit IRC | 19:56 | |
| knikolla | lbragstad: since ocata, every write operation in ldap returns 403. regardless of the "remove ldap delete" patch. https://github.com/openstack/keystone/blob/af4e98c770d771144463e6dd49cb4b559d48c403/keystone/identity/backends/ldap/core.py#L155-L161 | 19:57 |
| lbragstad | knikolla i saw you updated some of the API to raise 403 Forbidden | 19:58 |
| lbragstad | knikolla that makes sense | 19:58 |
| knikolla | lbragstad: i basically removed the conditional on writable to a hard exception. | 19:58 |
| knikolla | but the conditional is only for tests. | 19:58 |
| *** lamt has quit IRC | 19:59 | |
| knikolla | lbragstad: https://github.com/openstack/keystone/blob/fa63f893d487d54fe932e42ad9b53eea7a24932f/keystone/tests/unit/ksfixtures/ldapdb.py#L29 | 19:59 |
| knikolla | no user ever doesn't get a 403. | 19:59 |
| lbragstad | ok - cool | 20:00 |
| lbragstad | good deal, just checking | 20:00 |
| *** lamt has joined #openstack-keystone | 20:00 | |
| knikolla | lbragstad: it | 20:02 |
| knikolla | lbragstad: it's good to be thorough :) | 20:02 |
| lbragstad | knikolla or i'm just losing my marbles ;) | 20:02 |
| *** Aqsa has quit IRC | 20:03 | |
| *** lamt has quit IRC | 20:09 | |
| *** rajpatel has quit IRC | 20:13 | |
| *** lucasxu has quit IRC | 20:27 | |
| *** lucasxu has joined #openstack-keystone | 20:30 | |
| *** lucasxu has quit IRC | 20:34 | |
| *** lucasxu has joined #openstack-keystone | 20:35 | |
| *** lamt has joined #openstack-keystone | 20:40 | |
| openstackgerrit | Merged openstack/keystone master: Imported Translations from Zanata https://review.openstack.org/455559 | 20:42 |
| openstackgerrit | Richard Avelar proposed openstack/keystone master: Add setup to test classes and private method https://review.openstack.org/453254 | 20:46 |
| *** ravelar has joined #openstack-keystone | 20:47 | |
| ayoung | knikolla, gah, I forgot all the stuff I did to support bulk upload of access_rules | 20:51 |
| ayoung | knikolla, this is what happens when you have patches hang out for a month or 5 | 20:52 |
| knikolla | ayoung: are they in later patchsets we disregarded? | 20:54 |
| ayoung | knikolla, nope | 20:54 |
| ayoung | knikolla, it is why there are both url_patterns and access_rules | 20:54 |
| ayoung | the idea is that access_rules were supposed to be bulk upload, url_patterns individual, | 20:54 |
| ayoung | knikolla, ok, lets get the naming straightened out | 20:56 |
| ayoung | url_pattern is the name of the entity. We can't call that path | 20:56 |
| ayoung | we could call it route | 20:56 |
| ayoung | would that be clearer, or misleading? | 20:56 |
| knikolla | clearer than url pattern, i think | 20:57 |
| *** stradling has quit IRC | 21:01 | |
| ayoung | ok, then the pattern part becomes route | 21:05 |
| ayoung | I'd like for the access_rules part to go away | 21:05 |
| ayoung | it should only be routes, I think | 21:06 |
| ayoung | path='/access/service/{service_name}/routes | 21:06 |
| ayoung | too long | 21:06 |
| *** thorst has quit IRC | 21:07 | |
| ayoung | path='/access/service/{service_name}' can probably go away | 21:07 |
| ayoung | routers.append( | 21:08 |
| ayoung | router.Router(controllers.AccessV3(), | 21:08 |
| ayoung | 'routes', | 21:08 |
| ayoung | 'route', | 21:08 |
| ayoung | resource_descriptions=self.v3_resources)) | 21:08 |
| ayoung | should be enough. Just want to think through adding all of the routes at startup time | 21:08 |
| ayoung | and I think that only will work for changing one at a time | 21:08 |
| ayoung | knikolla, you see what I am getting at? | 21:09 |
| *** chlong has quit IRC | 21:09 | |
| *** chlong_ has quit IRC | 21:09 | |
| knikolla | ayoung: so /v3/access/service/<svc_name>/routes or /v3/routes? | 21:11 |
| *** lucasxu has quit IRC | 21:12 | |
| *** lucasxu has joined #openstack-keystone | 21:16 | |
| *** catintheroof has joined #openstack-keystone | 21:19 | |
| *** catintheroof has quit IRC | 21:21 | |
| *** catintheroof has joined #openstack-keystone | 21:21 | |
| *** lamt has quit IRC | 21:21 | |
| *** lamt has joined #openstack-keystone | 21:26 | |
| knikolla | lbragstad: links in https://docs.openstack.org/ocata/config-reference/identity/federated-identity.html are broken. where should i report them? | 21:28 |
| lbragstad | knikolla https://bugs.launchpad.net/openstack-manuals | 21:29 |
| knikolla | lbragstad: thanks | 21:29 |
| lbragstad | knikolla all that should live in https://github.com/openstack/openstack-manuals | 21:29 |
| *** thorst has joined #openstack-keystone | 21:30 | |
| lbragstad | knikolla specifically https://github.com/openstack/openstack-manuals/blob/master/doc/config-reference/source/identity/federated-identity.rst | 21:30 |
| *** edmondsw has quit IRC | 21:34 | |
| *** thorst has quit IRC | 21:34 | |
| *** edmondsw has joined #openstack-keystone | 21:35 | |
| *** edmondsw has quit IRC | 21:39 | |
| *** raildo has quit IRC | 21:39 | |
| *** lamt has quit IRC | 21:40 | |
| *** lamt has joined #openstack-keystone | 21:44 | |
| *** lamt has quit IRC | 21:53 | |
| *** spilla has quit IRC | 21:55 | |
| *** lamt has joined #openstack-keystone | 21:57 | |
| *** lucasxu has quit IRC | 21:58 | |
| *** edmondsw has joined #openstack-keystone | 22:04 | |
| *** edmondsw has quit IRC | 22:08 | |
| *** dgonzalez has joined #openstack-keystone | 22:28 | |
| *** r-daneel has joined #openstack-keystone | 22:38 | |
| *** rajpatel has joined #openstack-keystone | 22:43 | |
| *** chris_hultin|AWA is now known as chris_hultin | 22:50 | |
| *** masterjcool has joined #openstack-keystone | 22:51 | |
| *** chris_hultin is now known as chris_hultin|AWA | 22:55 | |
| *** r-daneel has quit IRC | 22:59 | |
| *** erlon has quit IRC | 23:15 | |
| *** thorst has joined #openstack-keystone | 23:20 | |
| *** thorst has quit IRC | 23:23 | |
| *** lamt has quit IRC | 23:27 | |
| *** catintheroof has quit IRC | 23:29 | |
| *** catintheroof has joined #openstack-keystone | 23:30 | |
| *** catintheroof has quit IRC | 23:30 | |
| *** jamielennox is now known as jamielennox|away | 23:48 | |
| *** jamielennox|away is now known as jamielennox | 23:51 | |
| *** thorst has joined #openstack-keystone | 23:53 | |
| *** lamt has joined #openstack-keystone | 23:56 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!