*** edmondsw has joined #openstack-keystone | 00:08 | |
*** edmondsw has quit IRC | 00:12 | |
*** aojea has quit IRC | 00:20 | |
*** aojea has joined #openstack-keystone | 00:21 | |
*** ducttape_ has joined #openstack-keystone | 00:33 | |
*** ayoung has joined #openstack-keystone | 00:39 | |
*** zhurong has joined #openstack-keystone | 00:39 | |
*** liujiong has joined #openstack-keystone | 00:42 | |
*** mdnadeem has joined #openstack-keystone | 00:51 | |
*** Dave has quit IRC | 00:53 | |
*** Dave____ has joined #openstack-keystone | 00:55 | |
*** shuyingya has joined #openstack-keystone | 00:56 | |
*** lucasxu has joined #openstack-keystone | 01:19 | |
*** lucasxu has quit IRC | 01:21 | |
*** namnh has joined #openstack-keystone | 01:25 | |
*** piliman974 has joined #openstack-keystone | 01:32 | |
*** ducttape_ has quit IRC | 02:06 | |
*** ducttape_ has joined #openstack-keystone | 02:07 | |
*** ducttape_ has quit IRC | 02:08 | |
*** aojea has quit IRC | 02:25 | |
*** aojea has joined #openstack-keystone | 02:26 | |
*** aojea has quit IRC | 02:26 | |
*** markvoelker has quit IRC | 02:32 | |
*** markvoelker has joined #openstack-keystone | 02:33 | |
*** markvoelker has quit IRC | 02:37 | |
*** piliman974 has quit IRC | 02:43 | |
*** piliman974 has joined #openstack-keystone | 02:45 | |
*** nicolasbock has joined #openstack-keystone | 02:51 | |
*** dklyle has joined #openstack-keystone | 03:01 | |
*** david-lyle has quit IRC | 03:04 | |
*** ducttape_ has joined #openstack-keystone | 03:08 | |
*** Shunli has joined #openstack-keystone | 03:14 | |
*** catintheroof has joined #openstack-keystone | 03:15 | |
*** cheran has quit IRC | 03:35 | |
*** catintheroof has quit IRC | 03:47 | |
*** dave-mcc_ has quit IRC | 03:51 | |
*** nicolasbock has quit IRC | 03:53 | |
*** zsli_ has joined #openstack-keystone | 03:55 | |
*** Shunli has quit IRC | 03:58 | |
*** tobberydberg has joined #openstack-keystone | 04:09 | |
*** tobberydberg has quit IRC | 04:13 | |
*** zhurong has quit IRC | 04:28 | |
*** markvoelker has joined #openstack-keystone | 04:33 | |
*** piliman974 has quit IRC | 04:40 | |
*** zhurong has joined #openstack-keystone | 04:41 | |
*** aselius has quit IRC | 04:45 | |
*** jaosorior has quit IRC | 05:00 | |
*** markvoelker has quit IRC | 05:07 | |
*** phalmos_ has quit IRC | 05:15 | |
*** phalmos has joined #openstack-keystone | 05:18 | |
*** zig_ has joined #openstack-keystone | 05:27 | |
*** edmondsw has joined #openstack-keystone | 05:32 | |
*** edmondsw has quit IRC | 05:37 | |
*** gyee has quit IRC | 05:39 | |
*** zig_ has quit IRC | 05:47 | |
*** zig_ has joined #openstack-keystone | 05:48 | |
*** tobberydberg has joined #openstack-keystone | 05:50 | |
*** markvoelker has joined #openstack-keystone | 06:04 | |
*** zig_ has quit IRC | 06:04 | |
*** rcernin has quit IRC | 06:11 | |
*** broda has joined #openstack-keystone | 06:16 | |
broda | hi.. i need some help with keystone | 06:16 |
---|---|---|
broda | i'm running ocata version | 06:16 |
broda | i've noticed that expired tokens are deleted after a while even without running keystone-manage flush command | 06:17 |
broda | backend is sql and i've installed via packstack | 06:17 |
broda | can anyone tell me how the tokens are being deleted? | 06:18 |
*** cheran has joined #openstack-keystone | 06:29 | |
*** markvoelker has quit IRC | 06:37 | |
*** rcernin has joined #openstack-keystone | 06:37 | |
*** tesseract has joined #openstack-keystone | 06:43 | |
*** ArchiFleKs has quit IRC | 06:44 | |
*** dims has quit IRC | 06:44 | |
*** dims has joined #openstack-keystone | 06:46 | |
*** liujiong_lj has joined #openstack-keystone | 06:57 | |
*** liujiong has quit IRC | 06:58 | |
*** pcaruana has joined #openstack-keystone | 06:58 | |
*** aselius has joined #openstack-keystone | 07:08 | |
*** jaosorior has joined #openstack-keystone | 07:12 | |
*** shuyingya has quit IRC | 07:19 | |
*** shuyingya has joined #openstack-keystone | 07:19 | |
*** liujiong_lj has quit IRC | 07:22 | |
*** liujiong has joined #openstack-keystone | 07:22 | |
*** shuyingya has quit IRC | 07:22 | |
*** shuyingya has joined #openstack-keystone | 07:23 | |
*** hoonetorg has joined #openstack-keystone | 07:34 | |
*** markvoelker has joined #openstack-keystone | 07:34 | |
*** cheran has quit IRC | 07:54 | |
*** aojea has joined #openstack-keystone | 07:54 | |
*** zzzeek has quit IRC | 08:00 | |
*** zzzeek has joined #openstack-keystone | 08:00 | |
*** aojea has quit IRC | 08:01 | |
*** markvoelker has quit IRC | 08:08 | |
*** shuyingy_ has joined #openstack-keystone | 08:10 | |
*** shuyingya has quit IRC | 08:14 | |
breton | broda: why do you think that they are being deleted? | 08:18 |
breton | broda: what is the token provider in keystone.conf? | 08:18 |
*** shuyingy_ has quit IRC | 08:34 | |
*** shuyingya has joined #openstack-keystone | 08:34 | |
*** liujiong has quit IRC | 08:43 | |
*** liujiong has joined #openstack-keystone | 08:43 | |
*** mdnadeem has quit IRC | 08:46 | |
*** mfedosin has joined #openstack-keystone | 08:51 | |
*** piliman974 has joined #openstack-keystone | 08:54 | |
*** mdnadeem has joined #openstack-keystone | 09:02 | |
*** markvoelker has joined #openstack-keystone | 09:05 | |
*** edmondsw has joined #openstack-keystone | 09:08 | |
*** mdnadeem has quit IRC | 09:13 | |
*** aselius has quit IRC | 09:18 | |
*** edmondsw has quit IRC | 09:18 | |
*** shuyingya has quit IRC | 09:22 | |
*** shuyingya has joined #openstack-keystone | 09:23 | |
broda | breton: i checked the database to see the tokens | 09:28 |
broda | breton: the provider is uuid. nvm. | 09:28 |
*** zsli_ has quit IRC | 09:28 | |
broda | breton: i figured out how it works :) | 09:28 |
*** shuyingy_ has joined #openstack-keystone | 09:31 | |
*** shuyingya has quit IRC | 09:34 | |
*** markvoelker has quit IRC | 09:38 | |
*** d0ugal has quit IRC | 09:48 | |
*** d0ugal has joined #openstack-keystone | 09:49 | |
*** broda has quit IRC | 09:49 | |
*** mvk has quit IRC | 09:54 | |
*** liujiong has quit IRC | 10:06 | |
*** nicolasbock has joined #openstack-keystone | 10:19 | |
*** mvk has joined #openstack-keystone | 10:23 | |
*** piliman974 has quit IRC | 10:26 | |
*** markvoelker has joined #openstack-keystone | 10:34 | |
*** shuyingy_ has quit IRC | 10:56 | |
*** shuyingya has joined #openstack-keystone | 10:56 | |
*** shuyingy_ has joined #openstack-keystone | 10:57 | |
*** shuyingya has quit IRC | 10:57 | |
*** shuyingy_ has quit IRC | 10:59 | |
*** shuyingya has joined #openstack-keystone | 11:00 | |
*** tobberyd_ has joined #openstack-keystone | 11:06 | |
*** tobberyd_ has quit IRC | 11:07 | |
openstackgerrit | Samriddhi proposed openstack/keystone master: Added keystone configuration references https://review.openstack.org/474542 | 11:07 |
openstackgerrit | Samriddhi proposed openstack/keystone master: Added configuration references to documentation https://review.openstack.org/474543 | 11:07 |
*** tobberyd_ has joined #openstack-keystone | 11:07 | |
openstackgerrit | Samriddhi proposed openstack/keystone master: Added keystone installation guides to documentation https://review.openstack.org/474545 | 11:08 |
*** markvoelker has quit IRC | 11:08 | |
*** tobberydberg has quit IRC | 11:09 | |
*** tobberyd_ has quit IRC | 11:10 | |
*** tobberydberg has joined #openstack-keystone | 11:11 | |
*** Dave____ is now known as Dave | 11:14 | |
*** BigDogStl has joined #openstack-keystone | 11:21 | |
*** BigDogStl has quit IRC | 11:29 | |
*** tobberyd_ has joined #openstack-keystone | 11:31 | |
*** chlong has joined #openstack-keystone | 11:32 | |
*** tobberydberg has quit IRC | 11:34 | |
*** tobberyd_ has quit IRC | 11:49 | |
*** markvoelker has joined #openstack-keystone | 11:51 | |
*** tobberydberg has joined #openstack-keystone | 11:52 | |
samueldmq | morning keystone | 12:07 |
*** namnh has quit IRC | 12:10 | |
*** shuyingya has quit IRC | 12:13 | |
*** nkinder has joined #openstack-keystone | 12:21 | |
*** edmondsw has joined #openstack-keystone | 12:22 | |
*** shuyingya has joined #openstack-keystone | 12:23 | |
*** edmondsw has quit IRC | 12:24 | |
*** edmondsw has joined #openstack-keystone | 12:25 | |
*** zhurong has quit IRC | 12:26 | |
*** shuyingya has quit IRC | 12:27 | |
*** zhurong has joined #openstack-keystone | 12:28 | |
*** shuyingya has joined #openstack-keystone | 12:28 | |
*** zhurong has quit IRC | 12:36 | |
*** nkinder has quit IRC | 12:38 | |
*** nkinder has joined #openstack-keystone | 12:39 | |
*** shuyingy_ has joined #openstack-keystone | 12:43 | |
openstackgerrit | Samriddhi proposed openstack/keystone master: Added configuration references to documentation https://review.openstack.org/474543 | 12:43 |
*** shuyingya has quit IRC | 12:46 | |
*** catintheroof has joined #openstack-keystone | 13:07 | |
*** sjain_ has joined #openstack-keystone | 13:12 | |
*** shuyingy_ has quit IRC | 13:19 | |
*** shuyingya has joined #openstack-keystone | 13:20 | |
*** catinthe_ has joined #openstack-keystone | 13:21 | |
*** catintheroof has quit IRC | 13:24 | |
*** catintheroof has joined #openstack-keystone | 13:25 | |
*** catinthe_ has quit IRC | 13:25 | |
*** catinthe_ has joined #openstack-keystone | 13:26 | |
*** catinth__ has joined #openstack-keystone | 13:26 | |
*** catintheroof has quit IRC | 13:26 | |
*** lucasxu has joined #openstack-keystone | 13:26 | |
*** dave-mccowan has joined #openstack-keystone | 13:27 | |
*** bknudson has joined #openstack-keystone | 13:29 | |
*** catintheroof has joined #openstack-keystone | 13:29 | |
*** catinthe_ has quit IRC | 13:30 | |
*** shuyingya has quit IRC | 13:30 | |
*** catinth__ has quit IRC | 13:33 | |
*** mariusv has joined #openstack-keystone | 13:33 | |
*** thorst has joined #openstack-keystone | 13:36 | |
*** sjain_ has quit IRC | 13:42 | |
*** sjain_ has joined #openstack-keystone | 13:43 | |
*** zzzeek has quit IRC | 13:46 | |
*** zzzeek has joined #openstack-keystone | 13:47 | |
*** zhurong has joined #openstack-keystone | 13:48 | |
*** mariusv has quit IRC | 13:55 | |
*** jistr is now known as jistr|mtg | 13:59 | |
*** spzala has joined #openstack-keystone | 14:01 | |
*** spzala has quit IRC | 14:03 | |
*** aojea has joined #openstack-keystone | 14:06 | |
*** phalmos has quit IRC | 14:10 | |
*** Tahvok has quit IRC | 14:12 | |
*** zhurong has quit IRC | 14:22 | |
samueldmq | wow tox -epy35 is taking ages | 14:26 |
*** aselius has joined #openstack-keystone | 14:29 | |
*** ducttape_ has quit IRC | 14:29 | |
*** ducttape_ has joined #openstack-keystone | 14:30 | |
samueldmq | too many deprecation warnings from oslo_middleware | 14:31 |
*** sjain_ has quit IRC | 14:32 | |
*** Tahvok has joined #openstack-keystone | 14:34 | |
*** Tahvok has quit IRC | 14:49 | |
*** Tahvok has joined #openstack-keystone | 14:55 | |
*** jistr|mtg is now known as jistr | 14:59 | |
*** mvk has quit IRC | 15:05 | |
*** rcernin has quit IRC | 15:09 | |
*** dklyle is now known as david-lyle | 15:10 | |
*** gyee has joined #openstack-keystone | 15:10 | |
*** phalmos has joined #openstack-keystone | 15:15 | |
knikolla | o/ morning | 15:18 |
lbragstad | o/ | 15:20 |
*** tobberyd_ has joined #openstack-keystone | 15:22 | |
*** tobberydberg has quit IRC | 15:25 | |
*** tobberyd_ has quit IRC | 15:28 | |
*** raildo has joined #openstack-keystone | 15:29 | |
morgan | zzzzzz | 15:34 |
*** rcernin has joined #openstack-keystone | 15:44 | |
*** tobberydberg has joined #openstack-keystone | 15:53 | |
*** aojea has quit IRC | 15:56 | |
*** tobberydberg has quit IRC | 15:57 | |
*** rcernin has quit IRC | 16:12 | |
openstackgerrit | OpenStack Proposal Bot proposed openstack/python-keystoneclient master: Updated from global requirements https://review.openstack.org/472915 | 16:34 |
openstackgerrit | Kirill Bespalov proposed openstack/python-keystoneclient master: Handle unicode attrs case for Resource obj https://review.openstack.org/474703 | 16:42 |
*** tesseract has quit IRC | 16:46 | |
lbragstad | stevemar: ping | 16:51 |
*** pcaruana has quit IRC | 17:16 | |
morgan | lbragstad: is stevemar even irc-alive anymore:P | 17:20 |
morgan | i never see him | 17:21 |
*** cheran has joined #openstack-keystone | 17:28 | |
lbragstad | morgan: that's a good questions | 17:28 |
lbragstad | stevemar: | 17:28 |
lbragstad | stevemar: | 17:28 |
lbragstad | stevemar: | 17:28 |
lbragstad | stevemar: | 17:28 |
lbragstad | but - i'm curious to find out ;) | 17:29 |
*** mvk has joined #openstack-keystone | 18:03 | |
*** raildo has quit IRC | 18:04 | |
*** zzzeek has quit IRC | 18:04 | |
*** lbragstad has quit IRC | 18:28 | |
*** lbragstad has joined #openstack-keystone | 18:36 | |
*** ChanServ sets mode: +o lbragstad | 18:36 | |
stevemar | morgan: lbragstad :) | 18:41 |
stevemar | i'm still irc-alive, was just AFK looking at a house | 18:41 |
*** nicolasbock has quit IRC | 18:41 | |
lbragstad | stevemar: that's some serious stuff :) | 18:45 |
lbragstad | stevemar: congrats! | 18:45 |
*** catinthe_ has joined #openstack-keystone | 19:07 | |
*** cheran has quit IRC | 19:08 | |
*** jaosorior is now known as jaosorior_away | 19:08 | |
*** lucasxu has quit IRC | 19:10 | |
*** catintheroof has quit IRC | 19:11 | |
*** lucasxu has joined #openstack-keystone | 19:11 | |
EmilienM | lbragstad: hey, can you confirm that policy.v3cloudsample.json file needs to be renamed to policy.json to be used with default config, right? | 19:13 |
EmilienM | I think the default value for policy_file is policy.json | 19:13 |
lbragstad | EmilienM: yeah - that is correct | 19:14 |
EmilienM | ok thx | 19:14 |
lbragstad | EmilienM: I don't think we'll do that in project source though | 19:14 |
EmilienM | lbragstad: and the default policy.v3cloudsample.json file provided as exemple in tree can be used by default? | 19:14 |
EmilienM | or the content is dangerous or not for production? | 19:14 |
lbragstad | EmilienM: it is not as well tested as the default policy configuration | 19:14 |
lbragstad | EmilienM: it has been known to break in some deployments | 19:15 |
EmilienM | ah ok | 19:15 |
lbragstad | (specifically horizon if I remember correctly) | 19:15 |
EmilienM | where is the default policy configuration? | 19:15 |
lbragstad | EmilienM: we've moved all of our defaults into code | 19:15 |
lbragstad | which can be found here: | 19:15 |
EmilienM | ah ok | 19:15 |
lbragstad | EmilienM: https://github.com/openstack/keystone/tree/master/keystone/common/policies | 19:15 |
lbragstad | so - everything that was in policy.json (kept in tree) was moved into those modules | 19:16 |
EmilienM | lbragstad: nice, if all projects could do that :D | 19:16 |
lbragstad | EmilienM: that's why i proposed a goal for it ;) | 19:16 |
EmilienM | yeah | 19:16 |
lbragstad | EmilienM: for historical context, the policy.v3cloudsample.json file was an attempt to introduce more granularity into keystone policy file | 19:16 |
lbragstad | so - we kept and maintained two policy files for a while, the default was tested more that the v3cloudsample, though | 19:17 |
lbragstad | the big change that it tried to do was introduce the concept of a project or cloud administrator | 19:17 |
lbragstad | or something inbetween a regular API user and a global administrator | 19:18 |
EmilienM | lbragstad: ok | 19:21 |
lbragstad | EmilienM: hopefully that makes sense | 19:21 |
EmilienM | lbragstad: is it fine if in packaging we ship an empty policy.json? | 19:21 |
EmilienM | empty {} with no rules by default | 19:21 |
*** ducttap__ has joined #openstack-keystone | 19:21 | |
lbragstad | EmilienM: if you're deployment tooling doesn't override any policies by default, then yet | 19:21 |
lbragstad | yes* | 19:21 |
EmilienM | lbragstad: we don't | 19:22 |
lbragstad | EmilienM: that should be fine | 19:22 |
EmilienM | but we have the interface to do so | 19:22 |
*** catintheroof has joined #openstack-keystone | 19:22 | |
EmilienM | at their risk | 19:22 |
lbragstad | EmilienM: that's perfect | 19:22 |
EmilienM | cool | 19:22 |
EmilienM | thanks a lot for the details, it helped a lot | 19:22 |
lbragstad | EmilienM: i think that's the approach the openstack-ansible takes | 19:22 |
EmilienM | good | 19:22 |
lbragstad | EmilienM: no overrides by default, but they expose an interface for users to supply their own policy file | 19:22 |
lbragstad | cloudnull: can keep me honest there though | 19:23 |
*** ducttape_ has quit IRC | 19:24 | |
*** catinthe_ has quit IRC | 19:25 | |
*** ducttape_ has joined #openstack-keystone | 19:27 | |
*** ducttap__ has quit IRC | 19:29 | |
cloudnull | wat? | 19:30 |
cloudnull | yes. | 19:31 |
cloudnull | this is what we do too | 19:31 |
lbragstad | ++ | 19:31 |
lbragstad | good deal - consistency is good | 19:31 |
cloudnull | we do the same for other services like nova too | 19:31 |
cloudnull | so +1 for consistency between deployment projects :) | 19:32 |
lbragstad | agreed! | 19:34 |
*** tobberydberg has joined #openstack-keystone | 19:37 | |
*** mfedosin has quit IRC | 19:53 | |
lbragstad | stepping away for a bit | 19:54 |
openstackgerrit | Merged openstack/python-keystoneclient master: Updated from global requirements https://review.openstack.org/472915 | 20:00 |
*** nkinder has quit IRC | 20:04 | |
*** thorst has quit IRC | 20:27 | |
*** lucasxu has quit IRC | 20:55 | |
edmondsw | lbragstad, I was just debugging some tempest failures in our CI, and tracked it back to an inconsistency between devstack and tempest conf settings | 20:55 |
edmondsw | which of these do you think should change? | 20:55 |
edmondsw | https://github.com/openstack-dev/devstack/blob/master/lib/keystone#L125 | 20:55 |
edmondsw | https://github.com/openstack/tempest/blob/4b6f5bbd5168d2d1d2781a2ca150222187c72ec6/tempest/config.py#L182 | 20:55 |
edmondsw | lbragstad, oh, hey, this is your fault ;) https://github.com/openstack-dev/devstack/commit/dcd4b64c990660f9b11b999a3b70e17c36323c4c | 20:57 |
edmondsw | so I assume by that that we'd like tempest to change | 20:58 |
*** thorst has joined #openstack-keystone | 20:59 | |
*** catinthe_ has joined #openstack-keystone | 21:06 | |
*** ducttape_ has quit IRC | 21:09 | |
*** catintheroof has quit IRC | 21:09 | |
*** tobberydberg has quit IRC | 21:10 | |
*** tobberydberg has joined #openstack-keystone | 21:10 | |
*** tobberydberg has quit IRC | 21:15 | |
*** catinthe_ has quit IRC | 21:28 | |
lbragstad | edmondsw: yep - that was me | 21:28 |
lbragstad | it was related to a bug reported against keystone | 21:29 |
lbragstad | edmondsw: i'd think tempest would need to change as well | 21:29 |
lbragstad | edmondsw: i see you've already reviewed https://review.openstack.org/#/c/472793/1 | 21:30 |
lbragstad | edmondsw: thanks for that | 21:30 |
*** ducttape_ has joined #openstack-keystone | 21:34 | |
*** ducttape_ has quit IRC | 21:38 | |
*** nkinder has joined #openstack-keystone | 21:39 | |
*** ducttape_ has joined #openstack-keystone | 21:41 | |
*** ducttape_ has quit IRC | 21:54 | |
*** ducttape_ has joined #openstack-keystone | 21:55 | |
edmondsw | lbragstad yep, tx | 22:01 |
*** bknudson has quit IRC | 22:06 | |
openstackgerrit | Samriddhi proposed openstack/keystone master: Added configuration references to documentation https://review.openstack.org/474543 | 22:11 |
*** ducttape_ has quit IRC | 22:14 | |
*** thorst has quit IRC | 22:14 | |
*** ducttape_ has joined #openstack-keystone | 22:17 | |
*** ducttape_ has quit IRC | 22:17 | |
*** ducttape_ has joined #openstack-keystone | 22:17 | |
*** ducttape_ has quit IRC | 22:33 | |
*** thorst has joined #openstack-keystone | 22:33 | |
*** thorst has quit IRC | 22:34 | |
*** ducttape_ has joined #openstack-keystone | 22:34 | |
*** nkinder has quit IRC | 22:53 | |
*** zzzeek has joined #openstack-keystone | 23:09 | |
*** hoonetorg has quit IRC | 23:10 | |
*** edmondsw has quit IRC | 23:10 | |
*** ducttape_ has quit IRC | 23:16 | |
*** ducttape_ has joined #openstack-keystone | 23:18 | |
*** ducttape_ has quit IRC | 23:21 | |
*** ducttape_ has joined #openstack-keystone | 23:22 | |
*** phalmos has quit IRC | 23:24 | |
*** ducttape_ has quit IRC | 23:26 | |
*** ducttape_ has joined #openstack-keystone | 23:32 | |
*** hyakuhei has joined #openstack-keystone | 23:36 | |
*** cheran has joined #openstack-keystone | 23:36 | |
*** ducttape_ has quit IRC | 23:37 | |
*** thorst has joined #openstack-keystone | 23:53 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!