| *** guoshan has joined #openstack-keystone | 00:05 | |
| *** mpjetta has quit IRC | 00:14 | |
| *** Aqsa has quit IRC | 00:19 | |
| *** thorst has quit IRC | 00:25 | |
| *** namnh has joined #openstack-keystone | 00:37 | |
| *** david-lyle has joined #openstack-keystone | 00:44 | |
| *** topol has quit IRC | 00:54 | |
| *** gyee has quit IRC | 01:01 | |
| *** guoshan has quit IRC | 01:03 | |
| *** guoshan has joined #openstack-keystone | 01:04 | |
| *** guoshan has quit IRC | 01:09 | |
| *** shuyingya has joined #openstack-keystone | 01:12 | |
| *** guoshan has joined #openstack-keystone | 01:22 | |
| *** gus has joined #openstack-keystone | 01:26 | |
| *** aojea has joined #openstack-keystone | 01:30 | |
| *** aojea has quit IRC | 01:36 | |
| *** liujiong has joined #openstack-keystone | 01:46 | |
| openstackgerrit | huangtianhua proposed openstack/keystone master: Role name is unique within the owning domain https://review.openstack.org/457835 | 01:46 |
|---|---|---|
| *** ngupta has joined #openstack-keystone | 01:47 | |
| *** thorst has joined #openstack-keystone | 02:00 | |
| *** Shunli has joined #openstack-keystone | 02:05 | |
| *** mpjetta has joined #openstack-keystone | 02:12 | |
| *** thorst has quit IRC | 02:16 | |
| *** shuyingy_ has joined #openstack-keystone | 02:16 | |
| *** shuyingya has quit IRC | 02:16 | |
| *** ngupta has quit IRC | 02:32 | |
| *** ngupta has joined #openstack-keystone | 02:33 | |
| *** ngupta has quit IRC | 02:37 | |
| *** dave-mccowan has quit IRC | 02:47 | |
| *** lamt has joined #openstack-keystone | 02:59 | |
| *** MasterOfBugs has quit IRC | 03:11 | |
| *** thorst has joined #openstack-keystone | 03:13 | |
| openstackgerrit | liyanhang proposed openstack/keystone master: Fix-test-of-assertValidRole https://review.openstack.org/457847 | 03:15 |
| *** ngupta has joined #openstack-keystone | 03:17 | |
| *** links has joined #openstack-keystone | 03:19 | |
| *** kencjohnston_ has quit IRC | 03:19 | |
| *** kencjohnston has joined #openstack-keystone | 03:19 | |
| *** shuyingy_ has quit IRC | 03:20 | |
| *** shuyingya has joined #openstack-keystone | 03:20 | |
| *** jerrygb has joined #openstack-keystone | 03:21 | |
| *** shuyingy_ has joined #openstack-keystone | 03:26 | |
| *** ngupta has quit IRC | 03:28 | |
| *** smccully has quit IRC | 03:28 | |
| *** ngupta has joined #openstack-keystone | 03:29 | |
| *** shuyingya has quit IRC | 03:30 | |
| *** ngupta has quit IRC | 03:31 | |
| *** ngupta has joined #openstack-keystone | 03:32 | |
| *** thorst has quit IRC | 03:32 | |
| *** aojea has joined #openstack-keystone | 03:32 | |
| *** lamt has quit IRC | 03:34 | |
| *** ngupta has quit IRC | 03:36 | |
| *** aojea has quit IRC | 03:37 | |
| *** lamt has joined #openstack-keystone | 03:41 | |
| openstackgerrit | Richard Avelar proposed openstack/keystone master: Add federated support for get user https://review.openstack.org/448730 | 03:44 |
| *** lifeless has joined #openstack-keystone | 03:46 | |
| openstackgerrit | Shan Guo proposed openstack/python-keystoneclient master: Remove log translations https://review.openstack.org/457853 | 03:47 |
| *** nicolasbock has quit IRC | 03:51 | |
| *** chlong has quit IRC | 03:58 | |
| *** guoshan has quit IRC | 04:05 | |
| *** lamt has quit IRC | 04:26 | |
| *** aojea has joined #openstack-keystone | 04:33 | |
| *** links has quit IRC | 04:36 | |
| *** aojea has quit IRC | 04:38 | |
| *** links has joined #openstack-keystone | 04:53 | |
| *** lamt has joined #openstack-keystone | 05:01 | |
| *** lamt has quit IRC | 05:05 | |
| *** links has quit IRC | 05:25 | |
| *** jerrygb has quit IRC | 05:25 | |
| *** thorst has joined #openstack-keystone | 05:29 | |
| *** markvoelker has quit IRC | 05:29 | |
| *** aojea has joined #openstack-keystone | 05:32 | |
| *** links has joined #openstack-keystone | 05:37 | |
| *** zhurong has joined #openstack-keystone | 05:42 | |
| *** richm has quit IRC | 05:44 | |
| *** thorst has quit IRC | 05:48 | |
| *** stingaci has quit IRC | 06:00 | |
| *** guoshan has joined #openstack-keystone | 06:06 | |
| *** aojea has quit IRC | 06:07 | |
| *** aojea has joined #openstack-keystone | 06:07 | |
| *** rcernin has joined #openstack-keystone | 06:08 | |
| *** guoshan has quit IRC | 06:11 | |
| *** aojea has quit IRC | 06:12 | |
| *** guoshan has joined #openstack-keystone | 06:21 | |
| *** voelzmo has joined #openstack-keystone | 06:25 | |
| *** markvoelker has joined #openstack-keystone | 06:29 | |
| *** pcaruana has joined #openstack-keystone | 06:33 | |
| *** markvoelker has quit IRC | 06:35 | |
| *** lamt has joined #openstack-keystone | 06:44 | |
| *** lamt has quit IRC | 06:44 | |
| *** thorst has joined #openstack-keystone | 06:45 | |
| *** thorst has quit IRC | 06:49 | |
| *** Aqsa has joined #openstack-keystone | 06:52 | |
| *** jaosorior has joined #openstack-keystone | 06:53 | |
| *** tesseract has joined #openstack-keystone | 07:01 | |
| *** MasterOfBugs has joined #openstack-keystone | 07:03 | |
| *** belmoreira has joined #openstack-keystone | 07:04 | |
| *** tovin07 has joined #openstack-keystone | 07:12 | |
| *** faizy has joined #openstack-keystone | 07:20 | |
| openstackgerrit | Hemanth Nakkina proposed openstack/keystone master: Minor corrections in OS-OAUTH1 api documentation https://review.openstack.org/457896 | 07:21 |
| *** adriant has quit IRC | 07:23 | |
| *** aojea has joined #openstack-keystone | 07:24 | |
| *** markvoelker has joined #openstack-keystone | 07:30 | |
| *** shuyingy_ has quit IRC | 07:34 | |
| *** shuyingya has joined #openstack-keystone | 07:34 | |
| *** markvoelker has quit IRC | 07:35 | |
| *** zsli_ has joined #openstack-keystone | 07:43 | |
| *** thorst has joined #openstack-keystone | 07:46 | |
| *** Shunli has quit IRC | 07:46 | |
| *** thorst has quit IRC | 07:50 | |
| *** lennyb has joined #openstack-keystone | 07:53 | |
| *** jerrygb has joined #openstack-keystone | 07:55 | |
| *** zzzeek has quit IRC | 08:00 | |
| *** jerrygb has quit IRC | 08:00 | |
| openstackgerrit | Peter Sabaini proposed openstack/keystone master: Make flushing tokens more robust https://review.openstack.org/454351 | 08:01 |
| *** zzzeek has joined #openstack-keystone | 08:01 | |
| openstackgerrit | Shan Guo proposed openstack/keystone master: Remove unused log translation code https://review.openstack.org/457916 | 08:20 |
| *** mvk has quit IRC | 08:26 | |
| *** aloga has quit IRC | 08:34 | |
| *** aloga has joined #openstack-keystone | 08:35 | |
| *** MasterOfBugs has quit IRC | 08:37 | |
| *** shuyingy_ has joined #openstack-keystone | 08:41 | |
| *** shuyingya has quit IRC | 08:44 | |
| *** thorst has joined #openstack-keystone | 08:47 | |
| *** thorst has quit IRC | 08:52 | |
| *** mvk has joined #openstack-keystone | 08:56 | |
| *** Aqsa has quit IRC | 09:05 | |
| *** Aqsa has joined #openstack-keystone | 09:07 | |
| *** mvk has quit IRC | 09:12 | |
| *** rocky_ has quit IRC | 09:13 | |
| *** zhugaoxiao has joined #openstack-keystone | 09:13 | |
| *** xuhaigang has joined #openstack-keystone | 09:16 | |
| *** tuan__ has joined #openstack-keystone | 09:16 | |
| *** tuan__ has quit IRC | 09:19 | |
| *** tuan__ has joined #openstack-keystone | 09:22 | |
| *** mvk has joined #openstack-keystone | 09:23 | |
| *** zsli_ has quit IRC | 09:27 | |
| openstackgerrit | Stephen Finucane proposed openstack/keystone master: Explicitly set 'builders' option https://review.openstack.org/457969 | 09:36 |
| *** thorst has joined #openstack-keystone | 09:47 | |
| *** thorst has quit IRC | 09:52 | |
| openstackgerrit | huangtianhua proposed openstack/keystone master: Role name is unique within the owning domain https://review.openstack.org/457835 | 09:55 |
| *** stingaci has joined #openstack-keystone | 09:57 | |
| *** stingaci has quit IRC | 10:01 | |
| *** liujiong has quit IRC | 10:11 | |
| *** richm has joined #openstack-keystone | 10:13 | |
| *** shuyingy_ has quit IRC | 10:18 | |
| *** shuyingya has joined #openstack-keystone | 10:18 | |
| *** luisnho223 has joined #openstack-keystone | 10:26 | |
| *** tuan__ has quit IRC | 10:27 | |
| luisnho223 | Hey guys. You guys know any type of tutorial or something to implement angularJS with Openstack/Devstack? Im developing an app that needs to send and receive requests through Openstack API and I am using AngularJS for that | 10:28 |
| *** nicolasbock has joined #openstack-keystone | 10:28 | |
| luisnho223 | I know i need to authenticate first but don't know how to do it with angularJS | 10:29 |
| *** tuan__ has joined #openstack-keystone | 10:29 | |
| *** guoshan has quit IRC | 10:30 | |
| *** zhurong has quit IRC | 10:34 | |
| *** tuan__ has quit IRC | 10:45 | |
| *** thorst has joined #openstack-keystone | 10:48 | |
| *** thorst has quit IRC | 10:53 | |
| *** shuyingy_ has joined #openstack-keystone | 10:54 | |
| *** shuyingya has quit IRC | 10:57 | |
| *** tuan has joined #openstack-keystone | 10:58 | |
| *** dmk0202 has joined #openstack-keystone | 11:02 | |
| *** rojo16 has joined #openstack-keystone | 11:07 | |
| *** rojo16 has quit IRC | 11:07 | |
| *** dmk0202 has quit IRC | 11:21 | |
| *** dmk0202 has joined #openstack-keystone | 11:21 | |
| *** tuan has quit IRC | 11:27 | |
| *** thorst has joined #openstack-keystone | 11:42 | |
| *** thorst_ has joined #openstack-keystone | 11:42 | |
| *** edmondsw has joined #openstack-keystone | 11:46 | |
| *** thorst has quit IRC | 11:47 | |
| openstackgerrit | Zhaokun Fu proposed openstack/keystone master: fix overridden error https://review.openstack.org/458039 | 11:56 |
| *** stingaci has joined #openstack-keystone | 11:58 | |
| *** stingaci has quit IRC | 12:02 | |
| *** markvoelker has joined #openstack-keystone | 12:19 | |
| openstackgerrit | ayoung proposed openstack/keystone master: Route based RBAC Management Bulk API https://review.openstack.org/458047 | 12:20 |
| *** namnh has quit IRC | 12:21 | |
| *** voelzmo has quit IRC | 12:23 | |
| *** voelzmo has joined #openstack-keystone | 12:23 | |
| *** voelzmo has quit IRC | 12:24 | |
| *** voelzmo has joined #openstack-keystone | 12:24 | |
| *** edmondsw has quit IRC | 12:29 | |
| *** edmondsw has joined #openstack-keystone | 12:30 | |
| *** zhurong has joined #openstack-keystone | 12:31 | |
| *** shuyingy_ has quit IRC | 12:38 | |
| *** zhurong has quit IRC | 12:45 | |
| *** lamt has joined #openstack-keystone | 12:47 | |
| *** catintheroof has joined #openstack-keystone | 12:48 | |
| *** jerrygb has joined #openstack-keystone | 12:53 | |
| *** raildo has joined #openstack-keystone | 12:56 | |
| *** lamt has quit IRC | 12:58 | |
| *** lamt has joined #openstack-keystone | 13:01 | |
| *** Aqsam has joined #openstack-keystone | 13:05 | |
| *** Aqsa has quit IRC | 13:08 | |
| *** shuyingya has joined #openstack-keystone | 13:11 | |
| *** shuyingya has quit IRC | 13:11 | |
| *** mpjetta has quit IRC | 13:11 | |
| *** shuyingya has joined #openstack-keystone | 13:11 | |
| *** lamt has quit IRC | 13:14 | |
| *** lamt has joined #openstack-keystone | 13:16 | |
| *** shuyingya has quit IRC | 13:16 | |
| *** shuyingya has joined #openstack-keystone | 13:16 | |
| *** ngupta has joined #openstack-keystone | 13:17 | |
| *** amrith has joined #openstack-keystone | 13:26 | |
| *** shuyingy_ has joined #openstack-keystone | 13:32 | |
| amrith | hiya keystone, did something just change (like yesterday) in the gate setup that makes keystone auth v2.0 not work any longer? | 13:34 |
| *** raildo has quit IRC | 13:34 | |
| amrith | seeing a failure to get on /v2.0/tokens now | 13:34 |
| dstanek | amrith: what's the failure? | 13:35 |
| amrith | or did a port change or something, no longer on port 5000 maybe? | 13:35 |
| *** shuyingya has quit IRC | 13:35 | |
| amrith | dstanek, sending paste one second. | 13:35 |
| ayoung | amrith, I think it was devstack | 13:35 |
| ayoung | amrith, someone was asking yesterday. let me look | 13:35 |
| amrith | http://paste.openstack.org/show/607158/ | 13:36 |
| amrith | hi ayoung | 13:36 |
| ayoung | amrith, heyo | 13:36 |
| amrith | ayoung, asking where? this channel? let me hunt for scrollback | 13:36 |
| ayoung | amrith, here | 13:37 |
| ayoung | "<rm_work> kk found the issue I think, devstack change w/r/t keystone wsgi" | 13:37 |
| amrith | looking | 13:37 |
| ayoung | amrith, I wonder if it was the systemd work | 13:37 |
| cmurphy | http://eavesdrop.openstack.org/irclogs/%23openstack-qa/%23openstack-qa.2017-04-18.log.html#t2017-04-18T19:19:14 | 13:37 |
| ayoung | I think I have that on a running devstack...1 set | 13:37 |
| ayoung | sec | 13:37 |
| amrith | tx, I just reran devstack on a brand new machine | 13:38 |
| amrith | I see a response from keystone | 13:38 |
| *** voelzmo has quit IRC | 13:38 | |
| amrith | to the conn request; a whole service catalog for example | 13:38 |
| ayoung | amrith, try "http://192.168.122.180/identity/v2.0/", | 13:38 |
| amrith | how do you mean? the URL changed? | 13:39 |
| *** voelzmo has joined #openstack-keystone | 13:39 | |
| amrith | not /v2.0/tokens but /identity/v2.0? | 13:39 |
| ayoung | no | 13:39 |
| *** topol has joined #openstack-keystone | 13:39 | |
| ayoung | instelad of port 5000 | 13:39 |
| amrith | oh, I see, the wsgi crap | 13:39 |
| ayoung | curl http://192.168.122.180/identity | jq .| fpaste gives | 13:40 |
| ayoung | https://paste.fedoraproject.org/paste/FHC~K8nTbLRLHvjY50F9kV5M1UNdIGYhyRLivL9gydE=/ | 13:40 |
| ayoung | so do a curl of your auth_url from sourcing openrc and see what you get | 13:40 |
| cmurphy | I think it was https://review.openstack.org/#/c/456344/, it was talked about in -qa in the eavesdrop link I posted | 13:40 |
| *** voelzmo has quit IRC | 13:43 | |
| *** voelzmo has joined #openstack-keystone | 13:46 | |
| ayoung | lbragstad, do we need to set up a group or something for the video chat? | 13:47 |
| amrith | yes, that sounds about right cmurphy ... I noticed a change in the requirements and that uWSGI was enabled in the failing runs. is WSGI_MODE going to be supported going forward or is it going to be orphaned? can trove rely on wsgi mode setting for the foreseeable future? | 13:48 |
| *** lamt__ has joined #openstack-keystone | 13:52 | |
| *** lamt has quit IRC | 13:53 | |
| *** links has quit IRC | 14:02 | |
| *** chlong has joined #openstack-keystone | 14:03 | |
| *** david-lyle has quit IRC | 14:04 | |
| luisnho223 | Hey guys one question. I installed Devstack and I am trying sending JSON requests to my Devstack my third party app. How I enable CORS to do that? | 14:05 |
| *** ksavich has joined #openstack-keystone | 14:11 | |
| *** luisnho223 has quit IRC | 14:13 | |
| *** mpjetta has joined #openstack-keystone | 14:13 | |
| *** david-lyle has joined #openstack-keystone | 14:14 | |
| amrith | dstanek, ayoung, cmurphy thanks for the pointers. the error was in trove's devstack plugin; it didn't set the auth url for one of the 3 services. | 14:17 |
| ayoung | cool | 14:17 |
| amrith | testing the change now, will push it up soon. thanks. ayoung lunch sometime? | 14:17 |
| *** lamt__ has quit IRC | 14:35 | |
| *** belmoreira has quit IRC | 14:35 | |
| knikolla | cmurphy: hi. i remember you updating the docs for setting up federation. do you happen to have some pointers on how to set up federation with mod_proxy_uwsgi and uwsgi (as opposed to mod_wsgi)? i need to update our devstack plugin for federation after https://review.openstack.org/#/c/456344/ | 14:47 |
| *** arturb has quit IRC | 14:50 | |
| cmurphy | knikolla: no I never played with uwsgi :( | 14:51 |
| cmurphy | knikolla: I imagine it would be mostly the same except for the WSGIScriptAlias ? | 14:53 |
| *** chris_hultin|AWA is now known as chris_hultin | 14:54 | |
| knikolla | cmurphy: probably. but the conf file only contains a ProxyPass directive pointing it to the uwsgi socket. so i'm unsure. i'll do some research. | 14:55 |
| knikolla | dstanek: do you know something about this ^^ ? | 14:56 |
| ayoung | lbragstad, policy meeting time? | 15:01 |
| knikolla | ayoung: it's 12EST | 15:01 |
| ayoung | knikolla, OK. thanks | 15:02 |
| dstanek | hey knikolla. i don't have scrollback right now. what's up? | 15:02 |
| ayoung | knikolla, do you have hangouts setup? Care to give me a commo test | 15:02 |
| *** rcernin has quit IRC | 15:03 | |
| lbragstad | ayoung in an hour :) | 15:03 |
| openstackgerrit | Merged openstack/keystone master: Make flushing tokens more robust https://review.openstack.org/454351 | 15:03 |
| knikolla | dstanek: devstack switched from mod_wsgi to mod_proxy_uwsgi with uwsgi, which broke the devstack plugin that sets up federation. | 15:03 |
| ayoung | lbragstad, must not have updated the caledar for DST. | 15:03 |
| lbragstad | ayoung the meeting time is in UTC | 15:03 |
| lbragstad | ayoung so DST shouldn't matter | 15:03 |
| dstanek | knikolla: ah, i see. so a little apache magic is needed? | 15:03 |
| ayoung | lbragstad, but My calendar is not. | 15:04 |
| ayoung | lbragstad, I should have said *I* must not have updated the caledar for DST | 15:04 |
| *** voelzmo has quit IRC | 15:04 | |
| lbragstad | ayoung oh | 15:04 |
| lbragstad | ayoung if you need an updated ical - http://eavesdrop.openstack.org/#Keystone_Policy_Meeting | 15:04 |
| ayoung | lbragstad, anyway, I set up the chat, and got kicked out...turns out Google and Firefox are at odds. It works with chrome | 15:04 |
| ayoung | I'm good | 15:04 |
| knikolla | dstanek: yep. docs don't say anything about how. besides "use mod_wsgi" | 15:05 |
| knikolla | so i'm hunting for blog posts. | 15:05 |
| ayoung | lbragstad, care to check in to the hangout for a moment to make sure sound is good? | 15:05 |
| lbragstad | ayoung thanks for testing it early | 15:05 |
| knikolla | ayoung: sorry, i haven't set things up yet. i'll probably be joining from my phone. | 15:06 |
| gagehugo | guess I need to install chrome real quick | 15:07 |
| *** lamt has joined #openstack-keystone | 15:07 | |
| *** topol_ has joined #openstack-keystone | 15:11 | |
| *** topol has quit IRC | 15:13 | |
| dstanek | knikolla: i can take a look after this meeting. it should only be a minimal change depending on how they configure apache in devstack | 15:14 |
| knikolla | dstanek: thanks! | 15:14 |
| *** stingaci has joined #openstack-keystone | 15:16 | |
| openstackgerrit | John Garbutt proposed openstack/keystone master: Add docs around RBAC and policy https://review.openstack.org/458132 | 15:18 |
| *** rajpatel has joined #openstack-keystone | 15:23 | |
| *** ksavich has quit IRC | 15:26 | |
| *** pcaruana has quit IRC | 15:28 | |
| *** rajpatel has quit IRC | 15:33 | |
| *** shuyingy_ has quit IRC | 15:34 | |
| *** david-lyle has quit IRC | 15:41 | |
| *** shuyingya has joined #openstack-keystone | 15:43 | |
| *** arunkant has quit IRC | 15:49 | |
| *** aojea has quit IRC | 15:51 | |
| rm_work | amrith: yeah the key is to use $OS_AUTH_URL from devstack | 15:56 |
| rm_work | instead of setting manually | 15:56 |
| rm_work | we had hardcoded to 127.0.0.1:5000/v2.0/ | 15:56 |
| rm_work | but we changed to $OS_AUTH_URL/v2.0 | 15:56 |
| rm_work | or actually, $OS_AUTH_URL/v3 | 15:56 |
| rm_work | there is a strong contract on that variable | 15:57 |
| *** tesseract has quit IRC | 15:59 | |
| dstanek | knikolla: ok, i'll start poking during this next meeting. does it error on installation? | 15:59 |
| gagehugo | my mic is acting up one sec | 16:01 |
| ayoung | johnthetubaguy, care to join the policy chat? | 16:02 |
| johnthetubaguy | ayoung: sorry, running late, be there really soon | 16:02 |
| *** dave-mccowan has joined #openstack-keystone | 16:06 | |
| *** dulek has left #openstack-keystone | 16:09 | |
| *** dmk0202 has quit IRC | 16:09 | |
| *** Aqsam has quit IRC | 16:11 | |
| *** mvk has quit IRC | 16:11 | |
| *** david-lyle has joined #openstack-keystone | 16:19 | |
| *** chris_hultin is now known as chris_hultin|AWA | 16:26 | |
| mnaser | i've been trying to look at the impact scope of switching an existing cloud to the v3 domain admin policy | 16:27 |
| mnaser | ive been giving it thought and i dont think it'll be an issue as long as the default domain still exists? | 16:28 |
| mordred | mnaser: is the v3 domain admin policy the one where each customer gets a domain and is domain admin of that domain? | 16:34 |
| mnaser | yup mordred | 16:35 |
| mnaser | (you see where im going with this :-p) | 16:35 |
| mordred | yes I do! | 16:35 |
| mordred | as usual, I think you are awesome :) | 16:35 |
| mnaser | customers are convinced and asked for it so we might be flipping the switch soon | 16:35 |
| mordred | lbragstad: I have just noticed that keystoneauth repo does not have a bindep.txt file | 16:36 |
| mordred | do we have the list of distro depends for ksa for tests documented anywhere/ | 16:36 |
| mordred | mnaser: WOOT | 16:36 |
| mordred | mnaser: let me know when you do so I can blog/tweet about you being awesome | 16:36 |
| lbragstad | mordred that's a good question - not that i am aware of | 16:36 |
| lbragstad | mordred but i can make a note to follow up on that | 16:36 |
| mordred | ossum | 16:36 |
| mordred | well, I'll figure it out by hitting my head against a wall real quick | 16:37 |
| lbragstad | mordred i have a feeling jamielennox would have a better answer for that than I would | 16:37 |
| mnaser | thanks mordred ! im thinking if we get the cloud_admin role and stuff setup before hand, replacing the policys shouldnt have an affect | 16:37 |
| lbragstad | :) | 16:37 |
| mnaser | because all old users will stay under the default domain and the old "admin" will continue to administer that domain | 16:37 |
| mnaser | and then the new cloud_admin will manage all domains | 16:37 |
| mnaser | so it makes sense in theory | 16:38 |
| mordred | mnaser: I'm guessing existing users would have to just create a new user to take advantage of the new stuff? | 16:39 |
| mnaser | mordred yeah, it would be opt in | 16:39 |
| mnaser | the most important thing is not breaking the existing environment | 16:40 |
| mnaser | so tenants that exist under the default domain still work and authenticate correctly | 16:40 |
| mordred | yup | 16:43 |
| *** shuyingya has quit IRC | 16:44 | |
| *** david-lyle has quit IRC | 16:51 | |
| *** chlong has quit IRC | 17:09 | |
| *** harlowja_ has quit IRC | 17:13 | |
| *** harlowja has joined #openstack-keystone | 17:15 | |
| *** harlowja has quit IRC | 17:17 | |
| *** harlowja has joined #openstack-keystone | 17:17 | |
| *** chlong has joined #openstack-keystone | 17:25 | |
| *** andreykurilin has joined #openstack-keystone | 17:33 | |
| openstackgerrit | Merged openstack/keystone master: Minor corrections in OS-OAUTH1 api documentation https://review.openstack.org/457896 | 17:37 |
| *** aojea has joined #openstack-keystone | 17:38 | |
| *** eandersson has joined #openstack-keystone | 17:40 | |
| *** catintheroof has quit IRC | 17:47 | |
| *** jaosorior is now known as jaosorior_away | 17:54 | |
| openstackgerrit | Merged openstack/keystone master: Fix-test-of-assertValidRole https://review.openstack.org/457847 | 17:56 |
| ayoung | And now I am going to take the dog for a long walk! | 18:05 |
| gagehugo | sorry my mic wasn't working, I liked the discussion | 18:05 |
| gagehugo | ayoung, it's the same as "gauge" | 18:06 |
| *** astudenov has joined #openstack-keystone | 18:12 | |
| *** aojea has quit IRC | 18:13 | |
| *** aojea has joined #openstack-keystone | 18:14 | |
| *** voelzmo has joined #openstack-keystone | 18:15 | |
| astudenov | Hi keystone developers, FYI https://bugs.launchpad.net/keystone/+bug/1684241 | 18:18 |
| openstack | Launchpad bug 1684241 in OpenStack Identity (keystone) "Bug in url parser " [Undecided,New] | 18:18 |
| *** aojea has quit IRC | 18:18 | |
| *** chlong has quit IRC | 18:20 | |
| ayoung | astudenov, Is that a real problem? | 18:26 |
| ayoung | It seems like a check that might no longer catch the problem early enough to give a good message, but no security aspect | 18:27 |
| *** catinthe_ has joined #openstack-keystone | 18:30 | |
| *** aojea has joined #openstack-keystone | 18:34 | |
| *** aojea_ has joined #openstack-keystone | 18:35 | |
| *** aojea has quit IRC | 18:38 | |
| *** catinthe_ has quit IRC | 18:39 | |
| *** gyee has joined #openstack-keystone | 18:40 | |
| *** aojea_ has quit IRC | 18:41 | |
| *** aojea_ has joined #openstack-keystone | 18:44 | |
| *** nicolasbock has quit IRC | 18:45 | |
| *** lucasxu has joined #openstack-keystone | 18:45 | |
| *** chlong has joined #openstack-keystone | 18:45 | |
| astudenov | ayoung, no, I see only possible error there | 18:47 |
| *** aojea has joined #openstack-keystone | 18:47 | |
| ayoung | astudenov, ? | 18:47 |
| ayoung | pretty sure it will actually work | 18:47 |
| ayoung | if the url is https://hostname/identity/v2.0.... then the one issue is if it removes the /identity before it loos at /v2.0 | 18:48 |
| ayoung | astudenov, or...maybe I misunderstand what you are saying | 18:48 |
| *** aojea_ has quit IRC | 18:48 | |
| ayoung | is it that urlparse.urlparse(self.auth_url) does the wrong thing? | 18:49 |
| *** aojea_ has joined #openstack-keystone | 18:50 | |
| astudenov | url_parts.path.lower() returns "/identity/v2.0" in this case | 18:50 |
| *** aojea has quit IRC | 18:53 | |
| ayoung | astudenov, ah, and I misread the code | 18:54 |
| ayoung | I was just worried about it improperly passing on information, but it never trips the proper case there: | 18:54 |
| *** nicolasbock has joined #openstack-keystone | 18:55 | |
| ayoung | elif path.startswith('/v3'): | 18:55 |
| ayoung | plugin = self.create_plugin(session, (3, 0), self.auth_url) | 18:55 |
| ayoung | that code is just a workaround for discovery not working, but a lot of people don't have discovery working... | 18:55 |
| *** gyee has quit IRC | 18:55 | |
| ayoung | astudenov, got a solution in mind? | 18:56 |
| astudenov | ayoung, http://xsnippet.org/362451/ | 18:59 |
| ayoung | astudenov, I'm trying to remember if there is ever a case where we are about what comes after the /v2.0 here | 19:03 |
| *** MasterOfBugs has joined #openstack-keystone | 19:03 | |
| ayoung | astudenov, I think you are right...can you propose that as a fix? | 19:03 |
| *** Aqsam has joined #openstack-keystone | 19:04 | |
| astudenov | ayoung, ok, will do | 19:04 |
| ayoung | astudenov, thanks. | 19:04 |
| *** david-lyle has joined #openstack-keystone | 19:06 | |
| *** lucasxu has quit IRC | 19:08 | |
| *** lucasxu has joined #openstack-keystone | 19:09 | |
| openstackgerrit | Rodrigo Duarte proposed openstack/keystone master: Writing API & Scenario Tests docs https://review.openstack.org/458207 | 19:10 |
| rodrigods | lbragstad, final piece ^ | 19:11 |
| rodrigods | lbragstad, think something like that could be useful when you were trying to write some tests for shadow mapping :) | 19:11 |
| lbragstad | rodrigods awesome - thanks! | 19:16 |
| *** david-lyle_ has joined #openstack-keystone | 19:17 | |
| *** david-lyle has quit IRC | 19:17 | |
| *** gyee has joined #openstack-keystone | 19:27 | |
| lbragstad | knikolla weren't we just talking about the difference between auth_uri and auth_url recently? | 19:41 |
| lbragstad | knikolla do you remember if we opened a bug for figuring thatout? | 19:41 |
| lbragstad | like - why does ksm need auth_uri and auth_url? | 19:42 |
| knikolla | lbragstad: we opened this bug, https://bugs.launchpad.net/keystonemiddleware/+bug/1679238 | 19:43 |
| openstack | Launchpad bug 1679238 in keystonemiddleware "documented config options are deprecated" [Medium,Confirmed] - Assigned to Kristi Nikolla (knikolla) | 19:43 |
| knikolla | lbragstad: for context i'd go to the irc logs the day this was opened | 19:44 |
| knikolla | i had totally forgotten about it :/ | 19:44 |
| *** voelzmo has quit IRC | 19:44 | |
| *** Aqsam has quit IRC | 19:47 | |
| *** dmk0202 has joined #openstack-keystone | 19:47 | |
| knikolla | lbragstad: http://eavesdrop.openstack.org/irclogs/%23openstack-keystone/%23openstack-keystone.2017-04-03.log.html#t2017-04-03T16:50:12 | 19:49 |
| *** david-lyle_ has quit IRC | 19:52 | |
| lbragstad | whats the difference between auth_url and auth_uri? | 19:55 |
| lbragstad | cc knikolla ^ | 19:55 |
| *** voelzmo has joined #openstack-keystone | 19:57 | |
| knikolla | lbragstad: from ksm | 19:59 |
| knikolla | auth_url = '%s/v2.0' % self._identity_uri | 19:59 |
| lbragstad | knikolla is that in ksm? | 19:59 |
| lbragstad | because we don't actually list that in the ksm options? | 19:59 |
| *** catintheroof has joined #openstack-keystone | 19:59 | |
| knikolla | lbragstad: that's from the deprecated auth in ksm | 20:00 |
| lbragstad | knikolla this is what we have in ksm configuration options - https://github.com/openstack/keystonemiddleware/blob/a2e3d60644aadb4ecb3d49dadbcd5d4c1dec2176/keystonemiddleware/auth_token/_opts.py#L32-L40 | 20:00 |
| knikolla | lbragstad: before keystonauth | 20:00 |
| * lbragstad facepalm | 20:01 | |
| *** voelzmo has quit IRC | 20:02 | |
| openstackgerrit | Sean Dague proposed openstack/keystonemiddleware master: Remove reference to auth_url https://review.openstack.org/458221 | 20:02 |
| knikolla | ^^ looks correct, since i saw no reference of auth_uri when i searched keystoneauth, osc, os-client-config, etc. | 20:03 |
| knikolla | err, let me double check that | 20:03 |
| lbragstad | holy man - that was frustrating | 20:04 |
| knikolla | i'm totally exhausted after the 2 hour policy meeting. | 20:04 |
| lbragstad | knikolla sdague is going to push a bunch of changes to devstack to clear that up | 20:04 |
| lbragstad | knikolla i asked if he could add us to those reviews when he has them ready so we can sign off on them | 20:04 |
| lbragstad | knikolla i am, too | 20:04 |
| lbragstad | knikolla i needed to look at something else because i'm fried | 20:05 |
| knikolla | lbragstad: not sure untangling ksm options is the best thing after that | 20:06 |
| knikolla | i'll give the reviews a look and play around with the ksm options myself | 20:06 |
| lbragstad | knikolla probably not | 20:06 |
| lbragstad | knikolla yeah - it turns out that a lot of the misdirection in ksm has bled into devstack | 20:06 |
| knikolla | lbragstad: yeah, the correct option is auth_urihttps://github.com/openstack/keystonemiddleware/blob/96dac98364562055720a0ada7ec3c89c8d251bf5/keystonemiddleware/auth_token/__init__.py#L584 | 20:11 |
| knikolla | https://github.com/openstack/keystonemiddleware/blob/96dac98364562055720a0ada7ec3c89c8d251bf5/keystonemiddleware/auth_token/__init__.py#L584 | 20:11 |
| lbragstad | knikolla yep | 20:11 |
| knikolla | lbragstad: gotta love when docstrings in the same file are wrong | 20:12 |
| knikolla | https://github.com/openstack/keystonemiddleware/blob/96dac98364562055720a0ada7ec3c89c8d251bf5/keystonemiddleware/auth_token/__init__.py#L193 | 20:12 |
| lbragstad | knikolla ten bucks says it's because of things like this - https://github.com/openstack/keystonemiddleware/blob/master/keystonemiddleware/auth_token/_auth.py#L66 | 20:13 |
| *** lucasxu has quit IRC | 20:13 | |
| knikolla | lbragstad: i know right. that's what got me too. url, uri, eureka. | 20:14 |
| *** lucasxu has joined #openstack-keystone | 20:14 | |
| lbragstad | one is a variable, one is a configuration option | 20:16 |
| knikolla | lbragstad: i'm confused though. why are we calling it auth_uri in ksm, and auth_url in every other project? | 20:17 |
| lbragstad | knikolla what do you mean? | 20:17 |
| knikolla | lbragstad: keystoneauth, osc, etc. refer to it as auth_url. | 20:17 |
| knikolla | lbragstad: sure auth_uri in those brings up nothing. | 20:18 |
| knikolla | searching* | 20:18 |
| lbragstad | knikolla oh - i have no idea | 20:18 |
| lbragstad | i'm not sure why it was done that way | 20:18 |
| lbragstad | but no doubt, that can lead to confusion,too | 20:18 |
| lbragstad | it's just harder to change because it's a configuration option | 20:18 |
| *** aojea has joined #openstack-keystone | 20:18 | |
| knikolla | lbragstad: then you have something like this: https://github.com/openstack/keystonemiddleware/blob/cbe9accc06a80ef8b0013983e96818379452e7da/keystonemiddleware/tests/unit/auth_token/test_config.py#L65-L66 | 20:19 |
| knikolla | lol | 20:19 |
| *** chris_hultin|AWA is now known as chris_hultin | 20:20 | |
| *** aojea_ has quit IRC | 20:21 | |
| lbragstad | knikolla oh wtf | 20:23 |
| *** aojea_ has joined #openstack-keystone | 20:25 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystonemiddleware master: Remove auth_url https://review.openstack.org/458227 | 20:26 |
| lbragstad | cc knikolla ^ | 20:26 |
| knikolla | lbragstad: ack | 20:26 |
| knikolla | lbragstad: that was glorious though. unsure which one to use? use both. | 20:27 |
| lbragstad | right | 20:27 |
| lbragstad | FILGTM | 20:27 |
| lbragstad | nothing beats the shotgun approach | 20:27 |
| *** aojea has quit IRC | 20:28 | |
| cmurphy | fwiw the puppet modules have been using that approach for years http://git.openstack.org/cgit/openstack/puppet-keystone/tree/manifests/resource/authtoken.pp | 20:28 |
| lbragstad | so has tripleo | 20:28 |
| lbragstad | apparently | 20:28 |
| cmurphy | that one actually makes auth_url a required parameter | 20:28 |
| lbragstad | and devstack | 20:28 |
| lbragstad | cmurphy we should patch that | 20:29 |
| jaosorior_away | well, tripleo that puppet module | 20:29 |
| lbragstad | jaosorior_away o/ | 20:29 |
| knikolla | lbragstad: would this be a nice moment to switch to make a 180 degree reversal and require auth_url instead and deprecate auth_uri. since nothing really uses that term anywhere besides ksm. | 20:30 |
| knikolla | lbragstad: people seem to be confused and rely on both anyway | 20:30 |
| lbragstad | bah | 20:30 |
| *** ngupta has quit IRC | 20:31 | |
| lbragstad | i personally don't care just so long as it's applied consistently and documented :) | 20:31 |
| knikolla | lbragstad: i see it as an inconsistency between projects, but yeah. | 20:32 |
| jaosorior_away | lbragstad: in tripleo we've been using both. So either way is fine on our side. | 20:33 |
| lbragstad | knikolla if you want to make it consistent across projects, we should go talk to sdague | 20:33 |
| lbragstad | knikolla he's currently on a terror fixing all the devstack stuff ;) | 20:34 |
| openstackgerrit | Rodrigo Duarte proposed openstack/keystone master: Writing API & Scenario Tests docs https://review.openstack.org/458207 | 20:36 |
| knikolla | lbragstad: that's actually a good reason not to fix it now. too many moving parts. | 20:38 |
| *** david-lyle_ has joined #openstack-keystone | 20:38 | |
| knikolla | lbragstad: i'm already dealing with the aftermath of his switching us to uwsgi, with needing to fix the devstack plugin | 20:38 |
| lbragstad | knikolla yeah - i'm it's not cool to have one be auth_uri and everything else be auth_url | 20:38 |
| lbragstad | but there's nothing technical about it that's bad | 20:39 |
| lbragstad | just a wart | 20:39 |
| knikolla | lbragstad: we can open a low priority bug for it | 20:40 |
| knikolla | wishlist | 20:40 |
| lbragstad | knikolla switching auth_uri -> auth_url? | 20:40 |
| knikolla | lbragstad: yes | 20:40 |
| lbragstad | knikolla yeah - we could do that | 20:41 |
| lbragstad | which would at the very least document it | 20:41 |
| knikolla | lbragstad: yep | 20:41 |
| openstackgerrit | Gage Hugo proposed openstack/keystone-specs master: Remove pbr warnerrors in favor of sphinx check https://review.openstack.org/439914 | 20:45 |
| *** david-lyle_ has quit IRC | 20:53 | |
| *** catintheroof has quit IRC | 20:55 | |
| *** catintheroof has joined #openstack-keystone | 20:55 | |
| *** catintheroof has quit IRC | 21:00 | |
| *** catintheroof has joined #openstack-keystone | 21:01 | |
| jamielennox | mordred: what would you expect in ksa bindep? it's a fairly small list of pure python libs: https://github.com/openstack/keystoneauth/blob/master/requirements.txt | 21:03 |
| jamielennox | should bindep specify like python-dev? | 21:04 |
| *** sjain has joined #openstack-keystone | 21:04 | |
| *** edmondsw has quit IRC | 21:05 | |
| *** edmondsw has joined #openstack-keystone | 21:06 | |
| *** aojea_ has quit IRC | 21:06 | |
| mordred | jamielennox: gssapi is needed for tests | 21:08 |
| openstackgerrit | Monty Taylor proposed openstack/keystoneauth master: Add bindep.txt file https://review.openstack.org/458242 | 21:08 |
| openstackgerrit | Monty Taylor proposed openstack/keystoneauth master: Add latest methods to discovery object https://review.openstack.org/458243 | 21:08 |
| openstackgerrit | Monty Taylor proposed openstack/keystoneauth master: Add support for requesting the most recent version https://review.openstack.org/458244 | 21:09 |
| *** topol_ has quit IRC | 21:09 | |
| mordred | jamielennox: so there's the bindep file - and then a pile of absurd code to get the latest_version stuff (I had fun while you were asleep) | 21:09 |
| *** edmondsw has quit IRC | 21:10 | |
| *** thorst_ has quit IRC | 21:10 | |
| jamielennox | mordred: oh good :) | 21:10 |
| jamielennox | i might need a coffee or two first | 21:10 |
| mordred | jamielennox: oh yeah | 21:11 |
| mordred | jamielennox: it's ... my brain hurts | 21:11 |
| mordred | jamielennox: thank you, btw, for your comments and tests - they were all supremely helpful | 21:11 |
| jamielennox | mordred: good - at the time i was envisioning usages like this - but then noone did - so at least it's getting used now | 21:12 |
| mordred | jamielennox: yah - I'm super excited that it exists - it felt silly to have in shade, and only slightly less silly to put into occ | 21:13 |
| mordred | also, I've got a clear path in my head now to not having default versions in occ | 21:14 |
| *** masterjcool has quit IRC | 21:19 | |
| *** lucasxu has quit IRC | 21:19 | |
| mordred | jamielennox: I need to follow up with one more thing for dealing with catalog urls that have project_ids in them - and then something to extract min/max microversions | 21:20 |
| mordred | but I'll hold off for a little bit and let you caffinate properly before assaulting you too much | 21:21 |
| mordred | samueldmq: ^^ this is all related to the earlier discussion in #openstack-shade with jamielennox | 21:21 |
| jamielennox | mordred: so i have things for catalog urls with project_id, depends exactly what you want to do | 21:21 |
| mordred | jamielennox: well - as an example ... | 21:22 |
| mordred | catalog entry for manila on vexxhost is: 'https://file-storage-ca-ymq-1.vexxhost.net/v2/db92b20496ae4fbda850a689ea9d563f' | 21:22 |
| mordred | but you can't doa GET on that | 21:22 |
| mordred | you can do a GET on https://file-storage-ca-ymq-1.vexxhost.net/v2 | 21:23 |
| mordred | and on https://file-storage-ca-ymq-1.vexxhost.net | 21:23 |
| mordred | which will give you the versioned and unversioned discovery docs, respectively | 21:23 |
| *** catintheroof has quit IRC | 21:24 | |
| mordred | so to get a discovery doc from that, you'd need to pop the project_id, then apply version hacks, then potentially re-add the project-id at the end (since it _was_ in the catalog) | 21:24 |
| mordred | I have not done extensive testing on that case yet | 21:24 |
| *** lucasxu has joined #openstack-keystone | 21:26 | |
| jamielennox | mordred: i'm going out for a bit, but you can twist the version hacks logic to do that | 21:26 |
| jamielennox | you can globally add your own hacks at https://github.com/openstack/keystoneauth/blob/master/keystoneauth1/discover.py#L329 | 21:27 |
| mordred | jamielennox: yah - it's the adding the project_id back at the end that I'm concerned about | 21:27 |
| jamielennox | so add_catalog_version_hack('manilla-type', re.compile('/v2/[a-zA-Z0-9]*''), '/') | 21:27 |
| jamielennox | mordred: ah, have something for that to | 21:28 |
| mordred | woot! | 21:28 |
| * mordred loves it when jamielennox has already written all the code | 21:28 | |
| jamielennox | oh, i thought i did, but maybe it only applies to endpoint override | 21:29 |
| jamielennox | https://github.com/openstack/keystoneauth/blob/master/keystoneauth1/session.py#L510 | 21:29 |
| jamielennox | the idea was you could request a url with a %(project_id)s in the url and keystoneauth would fill it in appropriately | 21:30 |
| jamielennox | but yea, i guess come to think of it i'm not sure how you make that work with the catalog as well | 21:30 |
| jamielennox | mordred: hmm, that might need a little work - not sure | 21:31 |
| *** masterjcool has joined #openstack-keystone | 21:31 | |
| *** ngupta has joined #openstack-keystone | 21:31 | |
| *** sjain has quit IRC | 21:31 | |
| *** david-lyle_ has joined #openstack-keystone | 21:33 | |
| *** catintheroof has joined #openstack-keystone | 21:34 | |
| mordred | jamielennox: I'll probably geek out on it tomorrow :) | 21:34 |
| *** thorst has joined #openstack-keystone | 21:35 | |
| openstackgerrit | Merged openstack/ldappool master: [Fix gate]Update test requirement https://review.openstack.org/440446 | 21:35 |
| *** david-lyle_ has quit IRC | 21:39 | |
| lbragstad | jamielennox o/ | 21:40 |
| *** thorst has quit IRC | 21:40 | |
| lbragstad | jamielennox if i'm understanding https://review.openstack.org/#/c/458221/ correctly, if auth_url is configured in keystonemiddleware, it will be passed through to keystoneauth? | 21:41 |
| *** mvk has joined #openstack-keystone | 21:44 | |
| *** stingaci has quit IRC | 21:47 | |
| *** jerrygb has quit IRC | 21:47 | |
| *** lucasxu has quit IRC | 21:49 | |
| *** lucasxu has joined #openstack-keystone | 21:54 | |
| *** chlong has quit IRC | 22:07 | |
| *** lucasxu has quit IRC | 22:08 | |
| *** ngupta has quit IRC | 22:11 | |
| *** ngupta has joined #openstack-keystone | 22:11 | |
| *** dmk0202 has quit IRC | 22:17 | |
| mnaser | i've done some research and it seems that if a user does go the policy.v3cloudsample.json path, the domain admins are able to conduct things like contact nova and do a list of all servers with all_tenants=1, and because nova sees they have the role:admin .. it'll let them do it | 22:19 |
| mnaser | is that a correct assumption? | 22:19 |
| mnaser | https://github.com/openstack/nova/blob/master/nova/policies/servers.py#L43-L62 => https://github.com/openstack/nova/blob/master/nova/policies/base.py#L19 | 22:30 |
| mnaser | rule:admin_api has is_admin:True which is determined by context_is_admin that has role:admin | 22:31 |
| mnaser | would it be more correct to have a role called domain_admin to prevent this? | 22:31 |
| mordred | mnaser: oh wow, that seems fun | 22:36 |
| mordred | mnaser: that does not, in fact, seem like it's what we want :) | 22:37 |
| *** ngupta has quit IRC | 22:37 | |
| mnaser | mordred yeah that's not ideal .. i found this patch https://review.openstack.org/#/c/384148/ | 22:37 |
| mnaser | this kinda kills the whole idea in this case :( | 22:37 |
| jamielennox | lbragstad: so auth_url is defined as one of the standard arguments required by the password (and all) auth plugins | 22:38 |
| jamielennox | in the same way that user_domain_name and other things in that review are defined in the password plugin, not in auth_token middleware directly | 22:39 |
| mnaser | looks like cinder is not affected by this - https://github.com/openstack/cinder/commit/da0ea57d7e9b8254a877009e77f412684cce3754 | 22:40 |
| jamielennox | auth_uri is unfortunately something different and gets used when auth_token responds with a 401 to fill out the authenticate header: https://github.com/openstack/keystonemiddleware/blob/master/keystonemiddleware/auth_token/__init__.py#L688 | 22:41 |
| mnaser | looks like defining a "domain_admin" could still result in a problem, because domain_admin can create an "admin" role and then give admin access to the cloud | 22:42 |
| *** david-lyle has joined #openstack-keystone | 22:45 | |
| jamielennox | mordred: :O, that's a big patch | 22:48 |
| mordred | jamielennox: yah. sorry about that | 22:48 |
| mordred | jamielennox: at this point I could likely go back and break it up into smaller ones - I learned things while writing this one | 22:49 |
| *** jerrygb has joined #openstack-keystone | 22:49 | |
| jamielennox | mordred: meh, let me see if i can wrap my head around it first | 22:49 |
| mordred | kk. | 22:50 |
| *** jerrygb has quit IRC | 22:53 | |
| *** chris_hultin is now known as chris_hultin|AWA | 22:59 | |
| *** lamt has quit IRC | 23:01 | |
| *** mpjetta has quit IRC | 23:09 | |
| *** topol has joined #openstack-keystone | 23:09 | |
| *** mpjetta has joined #openstack-keystone | 23:10 | |
| *** ngupta has joined #openstack-keystone | 23:13 | |
| *** mpjetta has quit IRC | 23:15 | |
| *** topol has quit IRC | 23:16 | |
| *** adriant has joined #openstack-keystone | 23:17 | |
| samueldmq | jamielennox: mordred: interesting, so ksa implements most of the logic we were talking about already | 23:18 |
| samueldmq | and with that approach we could simply call adapter.get_endpoint() with the right params to get what we want | 23:19 |
| samueldmq | for any service | 23:19 |
| jamielennox | samueldmq: that's the goal | 23:24 |
| jamielennox | or more likely, get_endpoint is called within request() with the contents of endpoint_filter={}, so if you set the right params on the Adapter you shouldn't have to deal with the endpoint at all | 23:25 |
| samueldmq | jamielennox: I saw mordred has patches up for that already | 23:26 |
| samueldmq | jamielennox: how does endpoint_filter relates to that ? | 23:26 |
| samueldmq | realte | 23:26 |
| jamielennox | it's kind of an implementation detail, but in a straight request() call it calls get_endpoint(**endpoint_filter) | 23:27 |
| jamielennox | so shade/os-c-c shouldn't have to deal with actually getting the endpoint and doing anything with it | 23:27 |
| samueldmq | jamielennox: so if it's configured right from the beginning we wouldn't need to get_endpoint(), do discovery and set endpoint_override | 23:27 |
| samueldmq | anymore, as we're doing in shade right now | 23:27 |
| jamielennox | it should just be constructing the right parameters you should just do .get('/path/to/resource') and it'll all work for you | 23:27 |
| jamielennox | yep | 23:28 |
| samueldmq | jamielennox: perfect, that'll be great | 23:28 |
| *** stingaci has joined #openstack-keystone | 23:29 | |
| *** ngupta has quit IRC | 23:29 | |
| jamielennox | i just need to wrap my head around mordred's patches and figure out all the bits | 23:31 |
| *** stingaci has quit IRC | 23:32 | |
| *** astudenov has quit IRC | 23:46 | |
| samueldmq | jamielennox: ++ please add me as reviewer when you submit something :) | 23:46 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!