| *** adrian_otto has quit IRC | 00:00 | |
| *** d0ugal has quit IRC | 00:04 | |
| *** adrian_otto has joined #openstack-keystone | 00:14 | |
| *** thorst_afk has joined #openstack-keystone | 00:22 | |
| *** dikonoor has joined #openstack-keystone | 00:32 | |
| *** ducttape_ has quit IRC | 00:35 | |
| *** ducttape_ has joined #openstack-keystone | 00:38 | |
| *** ducttape_ has quit IRC | 00:38 | |
| *** ducttape_ has joined #openstack-keystone | 00:43 | |
| *** adrian_otto has quit IRC | 00:51 | |
| *** adrian_otto has joined #openstack-keystone | 00:52 | |
| *** adrian_otto has quit IRC | 00:52 | |
| *** stingaci has joined #openstack-keystone | 00:52 | |
| *** rajpatel has quit IRC | 00:53 | |
| *** shuyingya has joined #openstack-keystone | 00:54 | |
| *** Shunli has joined #openstack-keystone | 00:55 | |
| *** stingaci has quit IRC | 00:57 | |
| *** gyee has quit IRC | 00:57 | |
| *** shuyingya has quit IRC | 01:01 | |
| *** shuyingya has joined #openstack-keystone | 01:24 | |
| *** shuyingya has quit IRC | 01:24 | |
| *** thorst_afk has quit IRC | 01:36 | |
| *** dikonoor has quit IRC | 01:42 | |
| *** MasterOfBugs has quit IRC | 01:43 | |
| *** zhurong has joined #openstack-keystone | 02:02 | |
| *** yingwei has joined #openstack-keystone | 02:03 | |
| *** zhugaoxiao has quit IRC | 02:10 | |
| *** stingaci has joined #openstack-keystone | 02:14 | |
| *** zhurong has quit IRC | 02:18 | |
| *** rajpatel has joined #openstack-keystone | 02:22 | |
| *** ducttape_ has quit IRC | 02:28 | |
| *** dave-mccowan has quit IRC | 02:36 | |
| *** thorst_afk has joined #openstack-keystone | 02:37 | |
| *** thorst_afk has quit IRC | 02:41 | |
| *** dave-mccowan has joined #openstack-keystone | 02:42 | |
| *** dave-mcc_ has joined #openstack-keystone | 02:43 | |
| *** zhurong has joined #openstack-keystone | 02:45 | |
| *** cheran has quit IRC | 02:46 | |
| *** dave-mccowan has quit IRC | 02:47 | |
| *** chlong has joined #openstack-keystone | 02:48 | |
| *** stingaci has quit IRC | 02:49 | |
| *** ducttape_ has joined #openstack-keystone | 02:53 | |
| *** ducttape_ has quit IRC | 02:53 | |
| *** ducttape_ has joined #openstack-keystone | 02:59 | |
| *** rajpatel has quit IRC | 03:00 | |
| *** thorst_afk has joined #openstack-keystone | 03:08 | |
| *** ducttape_ has quit IRC | 03:12 | |
| *** rajpatel has joined #openstack-keystone | 03:16 | |
| *** ducttape_ has joined #openstack-keystone | 03:18 | |
| *** rajpatel has quit IRC | 03:18 | |
| *** ducttape_ has quit IRC | 03:22 | |
| *** dave-mcc_ has quit IRC | 03:24 | |
| *** thorst_afk has quit IRC | 03:25 | |
| *** nicolasbock has quit IRC | 03:27 | |
| *** zhurong has quit IRC | 03:42 | |
| openstackgerrit | Shan Guo proposed openstack/keystone master: Revise doc about python 3.4 https://review.openstack.org/460385 | 03:52 |
|---|---|---|
| *** dikonoor has joined #openstack-keystone | 03:57 | |
| *** dikonoor has quit IRC | 04:08 | |
| *** prashkre has joined #openstack-keystone | 04:22 | |
| *** aojea has joined #openstack-keystone | 05:00 | |
| *** prashkre has quit IRC | 05:01 | |
| *** dikonoor has joined #openstack-keystone | 05:05 | |
| *** prashkre has joined #openstack-keystone | 05:18 | |
| *** dikonoor has quit IRC | 05:21 | |
| *** thorst_afk has joined #openstack-keystone | 05:22 | |
| *** thorst_afk has quit IRC | 05:32 | |
| *** yingwei has quit IRC | 05:34 | |
| *** yingwei has joined #openstack-keystone | 05:38 | |
| *** prashkre has quit IRC | 05:38 | |
| *** prashkre has joined #openstack-keystone | 05:39 | |
| *** richm has quit IRC | 05:44 | |
| *** Aqsa has joined #openstack-keystone | 05:53 | |
| *** dikonoor has joined #openstack-keystone | 06:05 | |
| *** aojea has quit IRC | 06:06 | |
| *** aojea has joined #openstack-keystone | 06:07 | |
| *** aojea has quit IRC | 06:11 | |
| *** zhurong has joined #openstack-keystone | 06:12 | |
| *** dikonoo has joined #openstack-keystone | 06:16 | |
| *** dikonoor has quit IRC | 06:16 | |
| *** Aqsa has quit IRC | 06:21 | |
| *** aojea has joined #openstack-keystone | 06:29 | |
| *** shuyingya has joined #openstack-keystone | 06:36 | |
| *** d0ugal has joined #openstack-keystone | 06:44 | |
| *** pcaruana has joined #openstack-keystone | 06:44 | |
| *** aojea has quit IRC | 06:48 | |
| *** jaosorior_away is now known as jaosorior | 06:51 | |
| *** zhurong has quit IRC | 07:02 | |
| *** zhurong has joined #openstack-keystone | 07:06 | |
| *** Nakato has quit IRC | 07:08 | |
| *** Nakato has joined #openstack-keystone | 07:08 | |
| *** tesseract has joined #openstack-keystone | 07:09 | |
| *** voelzmo has joined #openstack-keystone | 07:09 | |
| *** MasterOfBugs has joined #openstack-keystone | 07:20 | |
| *** thorst_afk has joined #openstack-keystone | 07:28 | |
| *** Nakato has quit IRC | 07:30 | |
| *** Aqsa has joined #openstack-keystone | 07:31 | |
| *** Nakato has joined #openstack-keystone | 07:31 | |
| *** dikonoo has quit IRC | 07:32 | |
| *** aojea has joined #openstack-keystone | 07:35 | |
| *** aojea_ has joined #openstack-keystone | 07:36 | |
| *** zhurong has quit IRC | 07:37 | |
| *** aojea has quit IRC | 07:40 | |
| *** thorst_afk has quit IRC | 07:48 | |
| *** zzzeek has quit IRC | 08:00 | |
| *** zzzeek has joined #openstack-keystone | 08:00 | |
| *** zhurong has joined #openstack-keystone | 08:19 | |
| *** d0ugal has quit IRC | 08:45 | |
| *** aojea_ has quit IRC | 08:58 | |
| *** Aqsa has quit IRC | 09:01 | |
| *** d0ugal has joined #openstack-keystone | 09:04 | |
| *** d0ugal has quit IRC | 09:04 | |
| *** d0ugal has joined #openstack-keystone | 09:04 | |
| *** aojea has joined #openstack-keystone | 09:27 | |
| *** Aqsa has joined #openstack-keystone | 09:42 | |
| *** thorst_afk has joined #openstack-keystone | 09:45 | |
| *** thorst_afk has quit IRC | 09:50 | |
| *** prashkre has quit IRC | 09:54 | |
| *** prashkre has joined #openstack-keystone | 09:54 | |
| *** d0ugal has quit IRC | 10:01 | |
| *** nicolasbock has joined #openstack-keystone | 10:03 | |
| *** mvk has quit IRC | 10:04 | |
| *** Shunli has quit IRC | 10:05 | |
| *** d0ugal has joined #openstack-keystone | 10:07 | |
| *** richm has joined #openstack-keystone | 10:15 | |
| *** zhurong has quit IRC | 10:20 | |
| *** d0ugal has quit IRC | 10:21 | |
| *** d0ugal has joined #openstack-keystone | 10:26 | |
| *** zhurong has joined #openstack-keystone | 10:28 | |
| *** prashkre has quit IRC | 10:32 | |
| *** mvk has joined #openstack-keystone | 10:34 | |
| *** prashkre has joined #openstack-keystone | 10:42 | |
| *** d0ugal has quit IRC | 10:45 | |
| *** thorst_afk has joined #openstack-keystone | 10:46 | |
| *** thorst_afk has quit IRC | 10:51 | |
| *** edmondsw has joined #openstack-keystone | 10:53 | |
| *** d0ugal has joined #openstack-keystone | 11:05 | |
| *** MasterOfBugs has quit IRC | 11:06 | |
| *** dave-mccowan has joined #openstack-keystone | 11:09 | |
| *** markvoelker_ has joined #openstack-keystone | 11:11 | |
| *** markvoelker has quit IRC | 11:12 | |
| openstackgerrit | Merged openstack/keystone master: Move endpoint group to DocumentedRuleDefault https://review.openstack.org/449273 | 11:14 |
| openstackgerrit | ayoung proposed openstack/keystone master: Expand the route tables to include a body key https://review.openstack.org/456692 | 11:22 |
| openstackgerrit | ayoung proposed openstack/keystone master: Route based RBAC Management Interface https://review.openstack.org/401808 | 11:22 |
| *** prashkre has quit IRC | 11:30 | |
| *** markvoelker_ has quit IRC | 11:38 | |
| *** thorst_afk has joined #openstack-keystone | 11:51 | |
| *** shuyingya has quit IRC | 11:55 | |
| *** shuyingya has joined #openstack-keystone | 11:55 | |
| *** dgonzalez has quit IRC | 12:02 | |
| *** dgonzalez has joined #openstack-keystone | 12:07 | |
| *** shuyingy_ has joined #openstack-keystone | 12:08 | |
| *** shuyingya has quit IRC | 12:11 | |
| *** Aqsam has joined #openstack-keystone | 12:14 | |
| *** Aqsa has quit IRC | 12:17 | |
| *** thorst_a_ has joined #openstack-keystone | 12:17 | |
| *** thorst_afk has quit IRC | 12:19 | |
| *** ducttape_ has joined #openstack-keystone | 12:21 | |
| *** zhurong has quit IRC | 12:25 | |
| *** markvoelker has joined #openstack-keystone | 12:35 | |
| *** shuyingy_ has quit IRC | 12:35 | |
| *** nle5223__ has joined #openstack-keystone | 12:53 | |
| *** Aqsam has quit IRC | 12:56 | |
| *** zhurong has joined #openstack-keystone | 12:58 | |
| *** shuyingya has joined #openstack-keystone | 12:58 | |
| *** ducttape_ has quit IRC | 12:59 | |
| *** d0ugal has quit IRC | 13:04 | |
| *** ayoung has joined #openstack-keystone | 13:06 | |
| *** yingwei has quit IRC | 13:11 | |
| *** catintheroof has joined #openstack-keystone | 13:17 | |
| *** thorst_a_ is now known as thorst | 13:19 | |
| *** d0ugal has joined #openstack-keystone | 13:20 | |
| *** spzala has joined #openstack-keystone | 13:22 | |
| *** raildo has joined #openstack-keystone | 13:28 | |
| *** lamt has joined #openstack-keystone | 13:49 | |
| *** stingaci has joined #openstack-keystone | 13:52 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone-specs master: Outline policy goals https://review.openstack.org/460344 | 13:58 |
| *** phalmos has joined #openstack-keystone | 14:05 | |
| *** prashkre has joined #openstack-keystone | 14:06 | |
| lbragstad | FYI - i'm going to be in and out today, communication with me might be hit or miss, I'll be parsing missed pings intermittently throughout the day | 14:06 |
| *** ducttape_ has joined #openstack-keystone | 14:06 | |
| *** voelzmo has quit IRC | 14:07 | |
| *** voelzmo has joined #openstack-keystone | 14:08 | |
| openstackgerrit | Stephen Finucane proposed openstack/oslo.policy master: Add Sphinx extension to pretty-print modules https://review.openstack.org/460572 | 14:12 |
| *** voelzmo has quit IRC | 14:12 | |
| *** ducttape_ has quit IRC | 14:13 | |
| *** ducttape_ has joined #openstack-keystone | 14:14 | |
| *** yingwei has joined #openstack-keystone | 14:24 | |
| *** shuyingy_ has joined #openstack-keystone | 14:24 | |
| *** shuyingya has quit IRC | 14:24 | |
| *** ducttape_ has quit IRC | 14:28 | |
| *** d0ugal has quit IRC | 14:28 | |
| *** ducttape_ has joined #openstack-keystone | 14:29 | |
| *** d0ugal has joined #openstack-keystone | 14:32 | |
| *** zhurong has quit IRC | 14:39 | |
| *** d0ugal has quit IRC | 14:39 | |
| *** ducttape_ has quit IRC | 14:40 | |
| *** darrenc has quit IRC | 14:43 | |
| *** prashkre has quit IRC | 14:44 | |
| *** prashkre has joined #openstack-keystone | 14:44 | |
| *** d0ugal has joined #openstack-keystone | 14:47 | |
| *** aojea has quit IRC | 14:50 | |
| prashkre | lbragstad:Hi Lance. On bug https://bugs.launchpad.net/keystone/+bug/1684820. wat do you suggest? skipping role-assignment if user is not found in backend or like https://review.openstack.org/#/c/458954/ update user with N/A | 14:55 |
| openstack | Launchpad bug 1684820 in OpenStack Identity (keystone) "GET /role_assignments?include_names API is blocked with 404 error when a user doesn't exists in identity backend" [Undecided,In progress] - Assigned to Kristi Nikolla (knikolla) | 14:55 |
| *** d0ugal has quit IRC | 14:56 | |
| *** ducttape_ has joined #openstack-keystone | 15:00 | |
| dstanek | prashkre: without researching it more deeply that's what i would expect | 15:00 |
| dstanek | lbragstad: rodrigods: this is probably something that only exists because we have handle FKs properly | 15:00 |
| prashkre | dstanek: you mean the one which is proposed in https://review.openstack.org/#/c/458954/? | 15:03 |
| prashkre | dstanek: sorry.. I have asked query with 2 choices 1) skipping role-assignment if user is not found in backend 2) update user with N/A like in proposed solution... which is the best one do you think? | 15:05 |
| *** pcaruana has quit IRC | 15:05 | |
| rodrigods | dstanek, sorry, lost the convo | 15:07 |
| dstanek | prashkre: i just weighed in on the review | 15:08 |
| *** adrian_otto has joined #openstack-keystone | 15:09 | |
| *** nle5223__ is now known as Aqsa | 15:09 | |
| dstanek | rodrigods: basically the role assignments may exist for users that don't | 15:09 |
| rodrigods | dstanek, ah, right | 15:09 |
| rodrigods | this can be changed with the shadow users approach | 15:09 |
| dstanek | rodrigods: yeah, we just need to add some data integrity | 15:10 |
| dstanek | prashkre: i don't think we should hide the data. maybe seeing empty assignments would trigger someone to fix them | 15:11 |
| prashkre | dstanek: I agree with you. | 15:12 |
| *** jaosorior is now known as jaosorior_away | 15:13 | |
| *** zigo has quit IRC | 15:17 | |
| *** phalmos has quit IRC | 15:19 | |
| *** Aqsa has quit IRC | 15:20 | |
| *** d0ugal has joined #openstack-keystone | 15:21 | |
| *** shuyingy_ has quit IRC | 15:22 | |
| dstanek | prashkre: we should probably fix the bug too :-) | 15:23 |
| *** pnavarro has joined #openstack-keystone | 15:28 | |
| *** markvoelker has quit IRC | 15:30 | |
| *** markvoelker has joined #openstack-keystone | 15:31 | |
| *** phalmos has joined #openstack-keystone | 15:33 | |
| *** prashkre has quit IRC | 15:35 | |
| *** prashkre has joined #openstack-keystone | 15:35 | |
| openstackgerrit | Eric Fried proposed openstack/keystoneauth master: WIP: Introduce keystoneauth1.loading.adapter https://review.openstack.org/460337 | 15:47 |
| *** sjain has joined #openstack-keystone | 15:48 | |
| *** yingwei has quit IRC | 15:48 | |
| *** lamt has quit IRC | 16:03 | |
| *** ksavich has joined #openstack-keystone | 16:05 | |
| *** sjain has quit IRC | 16:08 | |
| *** chlong_ has joined #openstack-keystone | 16:08 | |
| *** chlong_ has quit IRC | 16:14 | |
| *** adrian_otto has quit IRC | 16:22 | |
| *** aojea has joined #openstack-keystone | 16:23 | |
| edmondsw | jamielennox, any thoughts on https://review.openstack.org/#/c/460337 ? | 16:26 |
| edmondsw | sprung out of comments in https://review.openstack.org/#/c/458257 | 16:26 |
| *** prashkre has quit IRC | 16:31 | |
| *** prashkre has joined #openstack-keystone | 16:43 | |
| *** Aqsa has joined #openstack-keystone | 16:46 | |
| *** lamt has joined #openstack-keystone | 16:48 | |
| *** voelzmo has joined #openstack-keystone | 16:48 | |
| *** browne has joined #openstack-keystone | 16:55 | |
| *** voelzmo has quit IRC | 16:58 | |
| *** voelzmo has joined #openstack-keystone | 16:58 | |
| ayoung | edmondsw, middle of his night | 17:00 |
| *** sjain has joined #openstack-keystone | 17:01 | |
| *** hyakuhei has quit IRC | 17:02 | |
| *** hyakuhei has joined #openstack-keystone | 17:02 | |
| *** hyakuhei has quit IRC | 17:02 | |
| *** hyakuhei has joined #openstack-keystone | 17:02 | |
| *** voelzmo has quit IRC | 17:03 | |
| *** MasterOfBugs has joined #openstack-keystone | 17:05 | |
| *** sjain has quit IRC | 17:06 | |
| *** harlowja has quit IRC | 17:08 | |
| openstackgerrit | ayoung proposed openstack/keystone master: Refactor Authorization: https://review.openstack.org/387161 | 17:19 |
| openstackgerrit | ayoung proposed openstack/keystone master: Refactor is_admin https://review.openstack.org/387710 | 17:19 |
| *** aojea has quit IRC | 17:27 | |
| edmondsw | ayoung, yeah, I know, but I saw he's online and you never know with jamie... | 17:35 |
| openstackgerrit | ayoung proposed openstack/keystone master: Refactor is_admin https://review.openstack.org/387710 | 17:36 |
| *** blake has joined #openstack-keystone | 17:41 | |
| *** gyee has joined #openstack-keystone | 17:43 | |
| *** phalmos has quit IRC | 17:45 | |
| *** efried has joined #openstack-keystone | 17:47 | |
| ayoung | Hear you nothing that I say? | 17:48 |
| ayoung | Who decided it would be a good idea to hardcode the role check everywhere? | 17:49 |
| ayoung | lbragstad, stevemar you guys really do not pay attention. | 17:51 |
| *** harlowja has joined #openstack-keystone | 17:51 | |
| lbragstad | ayoung ? | 17:51 |
| ayoung | I am very angry right now. And you two +2ed the patch responsivle | 17:51 |
| ayoung | https://review.openstack.org/#/c/435609/ | 17:51 |
| ayoung | lbragstad, If I had not submitted the is_admin fix I would understand | 17:51 |
| ayoung | but you ignored it | 17:51 |
| ayoung | and now it is even harder to fix | 17:51 |
| ayoung | I just looked at the details of that patch, and the role checks are now embedded in code | 17:52 |
| ayoung | and that is exactly what I was afraid other projects would do | 17:52 |
| ayoung | but I figured at least you were paying attention | 17:52 |
| ayoung | putting the scope check in code is the right thing to do, not the role | 17:53 |
| *** mvk has quit IRC | 17:53 | |
| ayoung | and burying the definitino of is_admin_required ... | 17:53 |
| ayoung | OK, I can work with that, as the fix is to edit the RuleDefault | 17:53 |
| lbragstad | ayoung part of the rationale of putting the policy checks in code was to make it so that we can write tooling that allows us to change it, like how we use deprecated functionality of oslo.config to advertise changing configuration options | 17:54 |
| ayoung | lbragstad, and I was ok with that. But the part of the policy that was supposed to go in code was the scope check only | 17:55 |
| ayoung | instead, we codified the policy.json default that henrynash has been trying to deprecate for years now | 17:55 |
| lbragstad | ayoung we moved the *default* into code | 17:55 |
| ayoung | lbragstad, we moved bad defaults into code | 17:55 |
| lbragstad | and because of that we can advertise deprecation and change using normal software mechanisms | 17:56 |
| lbragstad | ayoung i am in no way advertising what we moved into code as the end-all-be-all default's we will have forever | 17:56 |
| ayoung | THat is the wrong rationale | 17:56 |
| ayoung | we want to move the scope check into code so people can't break it | 17:56 |
| ayoung | the role check, OTOH, is what people should be modifying | 17:56 |
| lbragstad | ayoung otherwise we don't have a sane way to tell operators things are changing | 17:56 |
| ayoung | OK...let me see how hard it is to rebase the patch that I submitted 6 months ago and that should have gone in before this work | 17:57 |
| *** erlon has joined #openstack-keystone | 17:57 | |
| ayoung | which solves an actual long standing security concern | 17:58 |
| ayoung | Need to straighten out the priorities here. | 17:58 |
| lbragstad | ayoung the spec was up for review, i asked for reviews, it merged 5 weeks ago | 17:59 |
| ayoung | lbragstad, I know. And I posted my shit a long ass time ago and it got nickeld and dimed away | 17:59 |
| lbragstad | it was communicated in the policy meetings, it was communicated in the weekly team meetings | 17:59 |
| ayoung | I don't have the ability to do this full time any more | 17:59 |
| ayoung | lbragstad, none of that process excuses ignoring not actually understanding the problem. | 18:00 |
| ayoung | process is not a replacement for understanding. | 18:00 |
| lbragstad | ayoung excuse me but i am not ignoring anything, i understand this is something that is important to you and i'm willing to work with you on it but the feeling has to be mutual. | 18:01 |
| ayoung | lbragstad, are you willing to close this "Won't fix" https://bugs.launchpad.net/keystone/+bug/968696 | 18:02 |
| openstack | Launchpad bug 968696 in OpenStack Identity (keystone) ""admin"-ness not properly scoped" [High,In progress] - Assigned to Adam Young (ayoung) | 18:02 |
| ayoung | because that is what you are ignoring | 18:02 |
| ayoung | an active bug fix for a security issue that is one of the oldest in our database | 18:03 |
| ayoung | that should be a stop ship | 18:03 |
| ayoung | it should be a CVE it is so damn bad, but we've lived with it this long that people just accept it is not a big deal | 18:03 |
| ayoung | and I put a log of goddamn work into fixing it, as did jamielennox | 18:04 |
| ayoung | and that should have taken priority | 18:04 |
| *** spilla has joined #openstack-keystone | 18:05 | |
| lbragstad | I have not stated that we won't fix https://bugs.launchpad.net/keystone/+bug/968696 in any way, shape, or form since I've started dedicating time to policy work | 18:06 |
| openstack | Launchpad bug 968696 in OpenStack Identity (keystone) ""admin"-ness not properly scoped" [High,In progress] - Assigned to Adam Young (ayoung) | 18:06 |
| lbragstad | I feel that to be rushing to conclusions | 18:06 |
| *** voelzmo has joined #openstack-keystone | 18:07 | |
| *** spzala has quit IRC | 18:15 | |
| *** adrian_otto has joined #openstack-keystone | 18:19 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Cleanup policy generation https://review.openstack.org/458666 | 18:21 |
| *** Daviey_ has joined #openstack-keystone | 18:38 | |
| *** Daviey has quit IRC | 18:38 | |
| *** odyssey4me has quit IRC | 18:38 | |
| *** eglute has quit IRC | 18:38 | |
| *** odyssey4me_ has joined #openstack-keystone | 18:39 | |
| *** eglute has joined #openstack-keystone | 18:39 | |
| *** voelzmo has quit IRC | 18:45 | |
| *** openstackgerrit has quit IRC | 18:48 | |
| dstanek | ayoung's motion to won't fix, seconded | 18:52 |
| dstanek | all in favor? | 18:52 |
| *** ducttape_ has quit IRC | 18:54 | |
| *** aojea has joined #openstack-keystone | 19:00 | |
| *** adrian_otto has quit IRC | 19:01 | |
| edmondsw | dstanek I'm opposed to won't fix there | 19:02 |
| edmondsw | highly opposed | 19:03 |
| *** voelzmo has joined #openstack-keystone | 19:04 | |
| *** aojea has quit IRC | 19:05 | |
| edmondsw | ayoung, I think you're misunderstanding the policy-in-code effort... it has no detrimental impact on 968696. | 19:06 |
| *** ducttape_ has joined #openstack-keystone | 19:07 | |
| *** ducttape_ has quit IRC | 19:07 | |
| *** mvk has joined #openstack-keystone | 19:08 | |
| *** spilla has quit IRC | 19:09 | |
| *** ducttape_ has joined #openstack-keystone | 19:13 | |
| *** prashkre has quit IRC | 19:25 | |
| *** aojea has joined #openstack-keystone | 19:28 | |
| *** voelzmo has quit IRC | 19:29 | |
| *** voelzmo has joined #openstack-keystone | 19:30 | |
| *** ksavich has quit IRC | 19:42 | |
| *** spzala has joined #openstack-keystone | 19:43 | |
| *** phalmos has joined #openstack-keystone | 19:51 | |
| *** ducttape_ has quit IRC | 19:53 | |
| *** aojea has quit IRC | 19:56 | |
| *** ducttape_ has joined #openstack-keystone | 19:56 | |
| *** ducttape_ has quit IRC | 19:57 | |
| *** aojea has joined #openstack-keystone | 19:59 | |
| *** spilla has joined #openstack-keystone | 20:04 | |
| *** ducttape_ has joined #openstack-keystone | 20:06 | |
| *** aojea has quit IRC | 20:12 | |
| *** adrian_otto has joined #openstack-keystone | 20:13 | |
| *** blake has quit IRC | 20:20 | |
| *** ducttape_ has quit IRC | 20:29 | |
| *** raildo has quit IRC | 20:30 | |
| *** Aqsa has quit IRC | 20:30 | |
| *** voelzmo has quit IRC | 20:32 | |
| efried | jamielennox Thanks for the review on https://review.openstack.org/#/c/460337/ | 20:36 |
| efried | jamielennox For some context, the plan is to consume it in nova via https://review.openstack.org/#/c/458257/ | 20:36 |
| efried | ...which I am in the process of updating to use the new keystoneauth stuff. | 20:37 |
| efried | Thinking once that's scrubbed a bit more, it'll make the consumption model clearer. | 20:37 |
| efried | I do have a question for you (and/or mordred, and/or not-sure-who-else) about whether it's still possible to have more than one endpoint for a service. | 20:38 |
| mordred | efried: it is possible - but should be considered an essentially broken cloud | 20:41 |
| mordred | or - that the person consuming the service hasn't provided enough filters | 20:42 |
| efried | mordred This stems from the fact that [glance]api_servers takes multiple URLs, and the code cycles through them at random whenever an endpoint is requested. | 20:42 |
| efried | mordred Some kind of load balancing? | 20:42 |
| mordred | so on the nova consume side of things, the "grab the list of returned endpoints and pick one at random" should be skippable | 20:42 |
| efried | mordred Yeah, I mainly did that to accomodate glance per above. | 20:43 |
| mordred | efried: right. that was an idea someone had back in teh day with nova and it's best left to the dustbin of history | 20:43 |
| mordred | efried: yah - totally. that is not how that will be registered with keystone | 20:43 |
| mordred | in the catalog, there should be one endpoint returned | 20:43 |
| efried | mordred Okay, so nobody's going to scream if we "break backward compatibility" by no longer supporting multiple glance endpoints? | 20:43 |
| *** ducttape_ has joined #openstack-keystone | 20:43 | |
| *** ducttape_ has quit IRC | 20:43 | |
| mordred | efried: I do not believe so, no. I have encountered many strange and terrible things across all the openstack clouds - so far nobody has returned more than one endpoint for a service in the service_catalog :) | 20:44 |
| efried | mordred Cool. Though note that [glance] was never using the service_catalog. | 20:44 |
| mordred | efried: if they do scream, I'm happy to scream back at them | 20:44 |
| mordred | efried: exactly | 20:44 |
| efried | Heh, you're on record now; I'll gladly defer screaming matches to you ;-) | 20:45 |
| mordred | efried: bring em on :) | 20:45 |
| efried | Mebbe I send a note to openstack-dev asking for pre-screams. | 20:46 |
| efried | Per blueprint direction, api_servers will still be supported in pike, so they'll have time to warm up their vocals. Worst case, we continue to support that one past pike. | 20:47 |
| mordred | efried, jamielennox: just responded to the ksa review with a little context from my POV | 20:50 |
| mordred | that might help the intent make sense for jamielennox | 20:50 |
| efried | mordred Thanks. Also once I've reswizzled the nova change set. I'm hoping we can KISS for consumers; if I understood jamielennox's suggestions, it would be pretty heavy weight for everyone to have to subclass a ServiceClient. | 20:53 |
| efried | mordred I do still have questions about how to use os-client-config. Is this the right channel for that? Or #openstack-oslo? Or...? | 20:54 |
| mordred | efried: yes- I do not think we need to do that - that's why I put in that context - what/where we're wanting to use it I think keeps that a bit simpler | 20:54 |
| efried | Cool | 20:54 |
| mordred | efried: either #openstack-sdks or #openstack-shade - maybe #openstack-sdks | 20:54 |
| efried | joining... | 20:54 |
| *** stingaci has quit IRC | 20:56 | |
| *** thorst has quit IRC | 20:56 | |
| *** edmondsw has quit IRC | 21:14 | |
| *** ducttape_ has joined #openstack-keystone | 21:19 | |
| *** thorst has joined #openstack-keystone | 21:21 | |
| *** ducttape_ has quit IRC | 21:25 | |
| *** thorst has quit IRC | 21:25 | |
| *** zigo has joined #openstack-keystone | 21:32 | |
| *** ducttape_ has joined #openstack-keystone | 21:36 | |
| *** ducttape_ has quit IRC | 21:40 | |
| *** spilla has quit IRC | 21:45 | |
| *** Nakato has quit IRC | 21:52 | |
| *** Nakato has joined #openstack-keystone | 21:53 | |
| *** catintheroof has quit IRC | 22:00 | |
| *** jose-phillips has joined #openstack-keystone | 22:00 | |
| *** ducttape_ has joined #openstack-keystone | 22:10 | |
| *** adrian_otto has quit IRC | 22:11 | |
| *** cburgess has quit IRC | 22:12 | |
| *** erlon has quit IRC | 22:13 | |
| *** ianw has quit IRC | 22:13 | |
| *** raj_sing- has joined #openstack-keystone | 22:14 | |
| *** peterstac has quit IRC | 22:14 | |
| *** harlowja has quit IRC | 22:14 | |
| *** raj_singh has quit IRC | 22:14 | |
| *** rha has quit IRC | 22:15 | |
| *** zeus has quit IRC | 22:15 | |
| *** mnaser has quit IRC | 22:16 | |
| *** zeus has joined #openstack-keystone | 22:16 | |
| *** cburgess has joined #openstack-keystone | 22:16 | |
| *** zeus is now known as Guest24728 | 22:17 | |
| *** ianw has joined #openstack-keystone | 22:18 | |
| *** chrome0 has quit IRC | 22:18 | |
| *** mnaser has joined #openstack-keystone | 22:18 | |
| *** rha has joined #openstack-keystone | 22:19 | |
| *** rha has quit IRC | 22:19 | |
| *** rha has joined #openstack-keystone | 22:19 | |
| *** chrome0 has joined #openstack-keystone | 22:20 | |
| *** Dave___ has joined #openstack-keystone | 22:20 | |
| *** Dave has quit IRC | 22:22 | |
| *** adrian_otto has joined #openstack-keystone | 22:31 | |
| *** edmondsw has joined #openstack-keystone | 22:37 | |
| *** peterstac has joined #openstack-keystone | 22:37 | |
| *** edmondsw has quit IRC | 22:42 | |
| *** ducttape_ has quit IRC | 22:43 | |
| *** ducttape_ has joined #openstack-keystone | 22:45 | |
| *** ducttape_ has quit IRC | 22:45 | |
| *** ducttape_ has joined #openstack-keystone | 22:50 | |
| *** blake has joined #openstack-keystone | 22:59 | |
| *** adriant_ has joined #openstack-keystone | 23:07 | |
| *** adrian_otto has quit IRC | 23:08 | |
| *** lamt has quit IRC | 23:09 | |
| *** tesseract has quit IRC | 23:20 | |
| *** harlowja has joined #openstack-keystone | 23:23 | |
| *** markvoelker has quit IRC | 23:40 | |
| *** blake has quit IRC | 23:42 | |
| *** ducttape_ has quit IRC | 23:51 | |
| *** ducttape_ has joined #openstack-keystone | 23:52 | |
| *** thorst has joined #openstack-keystone | 23:54 | |
| *** ducttape_ has quit IRC | 23:57 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!