openstackgerrit | Monty Taylor proposed openstack/keystoneauth master: Add min_version and max_version to adapter constructors https://review.openstack.org/482742 | 00:01 |
---|---|---|
openstackgerrit | Monty Taylor proposed openstack/keystoneauth master: Expose interface as a ListOpt for config files https://review.openstack.org/482743 | 00:01 |
openstackgerrit | Monty Taylor proposed openstack/keystoneauth master: Remove kwargs from adapter.get_endpoint_data https://review.openstack.org/482744 | 00:01 |
openstackgerrit | Monty Taylor proposed openstack/keystoneauth master: Add support for next_min_version and not_before https://review.openstack.org/482745 | 00:01 |
openstackgerrit | Monty Taylor proposed openstack/keystoneauth master: Add ability to request a microversion in a request https://review.openstack.org/482746 | 00:02 |
mordred | efried's stuff opened a whole can of worms | 00:02 |
mordred | but with that - I shall EOD and pick up the good fight tomorrow | 00:02 |
*** thorst has quit IRC | 00:17 | |
openstackgerrit | Merged openstack/keystone master: Added configuration references to documentation https://review.openstack.org/474543 | 00:28 |
openstackgerrit | Merged openstack/keystone master: Added configuration options using oslo.config https://review.openstack.org/479631 | 00:28 |
*** zhurong has joined #openstack-keystone | 00:42 | |
*** Shunli has joined #openstack-keystone | 00:48 | |
*** liujiong has joined #openstack-keystone | 00:56 | |
*** masuberu has joined #openstack-keystone | 01:14 | |
openstackgerrit | wingwj proposed openstack/keystone master: [install] Clarify the paths of the rc files https://review.openstack.org/482373 | 01:17 |
*** masber has quit IRC | 01:18 | |
openstackgerrit | Gage Hugo proposed openstack/keystone master: Trim invalid characters from token authentication https://review.openstack.org/470425 | 01:30 |
*** ducttape_ has joined #openstack-keystone | 01:48 | |
*** masber has joined #openstack-keystone | 01:57 | |
*** masuberu has quit IRC | 02:00 | |
*** ducttape_ has quit IRC | 02:02 | |
openstackgerrit | Mathieu Gagné proposed openstack/keystone master: Fix catalog endpoints format with templated catalog and v3 https://review.openstack.org/482766 | 02:10 |
*** dtroyer has quit IRC | 02:11 | |
*** dtroyer has joined #openstack-keystone | 02:12 | |
*** ducttape_ has joined #openstack-keystone | 02:19 | |
*** ducttape_ has quit IRC | 02:25 | |
*** thorst has joined #openstack-keystone | 02:39 | |
*** thorst has quit IRC | 02:44 | |
*** jmlowe has joined #openstack-keystone | 02:50 | |
openstackgerrit | Yaguang Tang proposed openstack/keystonemiddleware master: Remove PKI/PKIZ auth support and tests https://review.openstack.org/481895 | 02:51 |
*** zzzeek_ has quit IRC | 02:52 | |
*** zhurong has quit IRC | 03:08 | |
*** aojea has joined #openstack-keystone | 03:13 | |
*** brad[] has quit IRC | 03:16 | |
*** aojea has quit IRC | 03:17 | |
*** dave-mccowan has joined #openstack-keystone | 03:19 | |
*** dave-mccowan has quit IRC | 03:40 | |
*** zhurong has joined #openstack-keystone | 03:44 | |
openstackgerrit | Van Hung Pham proposed openstack/keystonemiddleware master: Replace six.iteritems() with .items() https://review.openstack.org/482797 | 04:22 |
*** gongysh has joined #openstack-keystone | 04:35 | |
*** tbh__ has joined #openstack-keystone | 04:38 | |
*** tbh__ is now known as tbh_ | 04:38 | |
*** thorst has joined #openstack-keystone | 04:40 | |
*** pcaruana has joined #openstack-keystone | 04:41 | |
*** thorst has quit IRC | 04:45 | |
*** ppiela_ has joined #openstack-keystone | 04:53 | |
*** ppiela has quit IRC | 04:55 | |
*** jmlowe has quit IRC | 04:56 | |
*** pcaruana has quit IRC | 04:58 | |
*** tobberydberg has joined #openstack-keystone | 04:59 | |
*** Shunli has quit IRC | 05:14 | |
*** Shunli has joined #openstack-keystone | 05:15 | |
*** aojea has joined #openstack-keystone | 05:26 | |
*** rcernin has joined #openstack-keystone | 05:33 | |
*** nicolasbock has joined #openstack-keystone | 05:38 | |
*** rajalokan has joined #openstack-keystone | 05:42 | |
*** gyee has quit IRC | 05:52 | |
openstackgerrit | Merged openstack/keystone master: fix identity:get_identity_providers typo https://review.openstack.org/482142 | 05:56 |
openstackgerrit | wingwj proposed openstack/keystone master: [install] Clarify the paths of the rc files https://review.openstack.org/482373 | 06:00 |
*** aojea has quit IRC | 06:07 | |
*** liujiong has quit IRC | 06:19 | |
*** liujiong has joined #openstack-keystone | 06:19 | |
*** Shunli has quit IRC | 06:20 | |
*** Shunli has joined #openstack-keystone | 06:21 | |
*** Shunli has quit IRC | 06:30 | |
*** gongysh has quit IRC | 06:34 | |
*** thorst has joined #openstack-keystone | 06:41 | |
*** d0ugal has quit IRC | 06:44 | |
openstackgerrit | Van Hung Pham proposed openstack/keystonemiddleware master: Replace six.iteritems() with .items() https://review.openstack.org/482797 | 06:45 |
*** thorst has quit IRC | 06:46 | |
*** belmoreira has joined #openstack-keystone | 06:47 | |
*** openstackgerrit has quit IRC | 06:48 | |
*** liujiong_lj has joined #openstack-keystone | 06:50 | |
-openstackstatus- NOTICE: FYI, ask.openstack.org is down, review.o.o is slow - please have patience until this is fixed | 06:51 | |
*** kman has joined #openstack-keystone | 06:53 | |
*** liujiong has quit IRC | 06:54 | |
*** aloga has quit IRC | 06:55 | |
*** zhurong has quit IRC | 06:55 | |
*** tesseract has joined #openstack-keystone | 07:11 | |
*** aloga has joined #openstack-keystone | 07:14 | |
*** kman has quit IRC | 07:17 | |
*** ma9_ has joined #openstack-keystone | 07:19 | |
ma9_ | Hi, has the upstream Keystone documentation changes I saved the link to this section which does not exist anymore: https://docs.openstack.org/keystone/latest/#mappings-examples | 07:20 |
ma9_ | I need the mapping examples for multiple groups | 07:20 |
ma9_ | where can I find them now? | 07:21 |
*** edmondsw has joined #openstack-keystone | 07:24 | |
*** aojea has joined #openstack-keystone | 07:25 | |
cmurphy | ma9_: here https://docs.openstack.org/keystone/latest/advanced-topics/federation/federated_identity.html#mappings-examples | 07:27 |
cmurphy | our docs are in the middle of being reorganized | 07:27 |
ma9_ | great! thanks | 07:29 |
*** edmondsw has quit IRC | 07:29 | |
ma9_ | so in there I read: | 07:29 |
ma9_ | "Groups can have multiple values. Each value must be separated by a ; Example: OIDC_GROUPS=developers;testers" | 07:29 |
ma9_ | does anybody know, can we do the same with projects? | 07:29 |
ma9_ | is there any plan to implement that? | 07:29 |
*** pcaruana has joined #openstack-keystone | 07:31 | |
*** zhurong has joined #openstack-keystone | 07:33 | |
breton | ma9_: that's called auto-provisioning | 07:34 |
breton | ma9_: read about it in the docs | 07:35 |
ma9_ | hmm I'm afraid that section explains how to 'hardcode' the projects | 07:41 |
*** pcaruana has quit IRC | 07:41 | |
ma9_ | I need a dynamic list which comes from SAML/OIDC, like OIDC_PROJECTS=developers;testers,whatever | 07:41 |
breton | ma9_: nope, keystone cannot do it today. | 07:43 |
ma9_ | ok thanks! is that something planned for the future? | 07:44 |
*** pcaruana has joined #openstack-keystone | 07:45 | |
-openstackstatus- NOTICE: Gerrit is going to be restarted, due to low performance | 07:49 | |
*** tobberydberg has quit IRC | 07:51 | |
*** tobberydberg has joined #openstack-keystone | 07:52 | |
-openstackstatus- NOTICE: Gerrit has been successfully restarted | 07:56 | |
*** tobberydberg has quit IRC | 07:56 | |
*** zzzeek has quit IRC | 08:00 | |
*** zzzeek has joined #openstack-keystone | 08:00 | |
*** liujiong_lj is now known as liujiong | 08:02 | |
*** rajalokan has quit IRC | 08:04 | |
*** ppiela has joined #openstack-keystone | 08:05 | |
*** ppiela_ has quit IRC | 08:07 | |
*** openstackgerrit has joined #openstack-keystone | 08:07 | |
openstackgerrit | Samriddhi proposed openstack/keystone master: Improved the keystone federation image https://review.openstack.org/482836 | 08:07 |
*** sjain has joined #openstack-keystone | 08:14 | |
*** tobberydberg has joined #openstack-keystone | 08:15 | |
*** sjain has quit IRC | 08:31 | |
*** pcaruana has quit IRC | 08:33 | |
*** ppiela_ has joined #openstack-keystone | 08:34 | |
*** ppiela has quit IRC | 08:35 | |
*** thorst has joined #openstack-keystone | 08:42 | |
*** dklyle has joined #openstack-keystone | 08:45 | |
*** david-lyle has quit IRC | 08:45 | |
*** d0ugal has joined #openstack-keystone | 08:45 | |
*** pcaruana has joined #openstack-keystone | 08:46 | |
*** tobberydberg has quit IRC | 08:46 | |
*** tobberydberg has joined #openstack-keystone | 08:46 | |
*** thorst has quit IRC | 08:47 | |
*** liujiong has quit IRC | 08:47 | |
*** liujiong has joined #openstack-keystone | 08:47 | |
*** tbh_ has quit IRC | 08:48 | |
openstackgerrit | TommyLike proposed openstack/oslo.policy master: Fix parsing bug when config file is empty. https://review.openstack.org/482477 | 08:48 |
*** d0ugal has quit IRC | 08:54 | |
*** d0ugal has joined #openstack-keystone | 08:55 | |
*** d0ugal has quit IRC | 08:55 | |
*** d0ugal has joined #openstack-keystone | 08:55 | |
*** ma9_ has quit IRC | 09:11 | |
*** edmondsw has joined #openstack-keystone | 09:12 | |
*** liujiong has quit IRC | 09:15 | |
*** liujiong has joined #openstack-keystone | 09:15 | |
*** edmondsw has quit IRC | 09:16 | |
*** ma9_ has joined #openstack-keystone | 09:17 | |
*** ma9_ has quit IRC | 09:20 | |
*** pcaruana has quit IRC | 09:32 | |
*** pcaruana has joined #openstack-keystone | 09:32 | |
*** thorst has joined #openstack-keystone | 09:43 | |
*** mvk has joined #openstack-keystone | 09:44 | |
*** thorst has quit IRC | 09:47 | |
*** brad[] has joined #openstack-keystone | 09:57 | |
openstackgerrit | Monty Taylor proposed openstack/keystoneauth master: Add min_version and max_version to adapter constructors https://review.openstack.org/482742 | 10:18 |
openstackgerrit | Monty Taylor proposed openstack/keystoneauth master: Expose interface as a ListOpt for config files https://review.openstack.org/482743 | 10:18 |
openstackgerrit | Monty Taylor proposed openstack/keystoneauth master: Add paragraph clarifying major and micro versions https://review.openstack.org/482710 | 10:18 |
openstackgerrit | Monty Taylor proposed openstack/keystoneauth master: Add ability to request a microversion in a request https://review.openstack.org/482746 | 10:18 |
openstackgerrit | Monty Taylor proposed openstack/keystoneauth master: Update docs and add a release note https://review.openstack.org/477566 | 10:18 |
openstackgerrit | Monty Taylor proposed openstack/keystoneauth master: Remove kwargs from adapter.get_endpoint_data https://review.openstack.org/482744 | 10:18 |
openstackgerrit | Monty Taylor proposed openstack/keystoneauth master: Add support for next_min_version and not_before https://review.openstack.org/482745 | 10:18 |
*** liujiong has quit IRC | 10:23 | |
*** dklyle has quit IRC | 10:28 | |
*** david-lyle has joined #openstack-keystone | 10:28 | |
*** zhurong has quit IRC | 10:41 | |
cmurphy | oh good my life has meaning again ^ | 10:48 |
*** d0ugal has quit IRC | 10:49 | |
*** sjain has joined #openstack-keystone | 10:49 | |
*** sjain has quit IRC | 10:54 | |
*** rajalokan has joined #openstack-keystone | 10:59 | |
*** rajalokan has quit IRC | 11:03 | |
*** sjain has joined #openstack-keystone | 11:06 | |
*** markvoelker has quit IRC | 11:09 | |
openstackgerrit | Harry Rybacki proposed openstack/keystone master: Move trust to DocumentedRuleDefault https://review.openstack.org/449278 | 11:09 |
*** markvoelker has joined #openstack-keystone | 11:10 | |
*** markvoelker has quit IRC | 11:14 | |
*** dave-mccowan has joined #openstack-keystone | 11:19 | |
openstackgerrit | Monty Taylor proposed openstack/keystoneauth master: Fix typo from earlier docs patch https://review.openstack.org/482925 | 11:35 |
*** thorst has joined #openstack-keystone | 11:38 | |
*** sjain has quit IRC | 11:41 | |
samueldmq | morning keystone | 11:43 |
samueldmq | cmurphy: hehe o/ | 11:43 |
cmurphy | morning samueldmq | 11:43 |
*** markvoelker has joined #openstack-keystone | 11:55 | |
*** raildo has joined #openstack-keystone | 12:03 | |
*** sjain has joined #openstack-keystone | 12:08 | |
*** robcresswell has joined #openstack-keystone | 12:10 | |
robcresswell | Er, what happened? It looks like half the channel got banned last week? I only just noticed | 12:14 |
robcresswell | wait, APRIL? I am slow. | 12:17 |
cmurphy | there was an accidental kickban mishap | 12:19 |
*** kairat has joined #openstack-keystone | 12:27 | |
*** ducttape_ has joined #openstack-keystone | 12:29 | |
*** ducttape_ has quit IRC | 12:32 | |
*** zzzeek_ has joined #openstack-keystone | 12:32 | |
*** wasmum has quit IRC | 12:40 | |
*** hrybacki_ has joined #openstack-keystone | 12:40 | |
*** szaher has quit IRC | 12:40 | |
breton | robcresswell: yeah, i know that feel, when you accidentally scroll to the top and forget to scroll down | 12:41 |
*** DinaBelova has quit IRC | 12:41 | |
*** hrybacki has quit IRC | 12:41 | |
*** eglute_s has quit IRC | 12:41 | |
*** melwitt has quit IRC | 12:41 | |
*** hrybacki_ is now known as hrybacki | 12:41 | |
*** melwitt has joined #openstack-keystone | 12:41 | |
*** wasmum has joined #openstack-keystone | 12:41 | |
*** melwitt is now known as Guest86208 | 12:41 | |
*** eglute has joined #openstack-keystone | 12:42 | |
*** DinaBelova has joined #openstack-keystone | 12:42 | |
*** timburke has quit IRC | 12:44 | |
*** szaher has joined #openstack-keystone | 12:44 | |
*** dgonzalez has quit IRC | 12:44 | |
*** dgonzalez has joined #openstack-keystone | 12:46 | |
*** timburke has joined #openstack-keystone | 12:46 | |
robcresswell | breton: It was actually that I just suddenly noticed I wasn't in the channel any more, then realised my last log was April | 12:47 |
robcresswell | So it took me 3 months to realise. | 12:47 |
openstackgerrit | Monty Taylor proposed openstack/keystoneauth master: Add min_version and max_version to adapter constructors https://review.openstack.org/482742 | 12:47 |
openstackgerrit | Monty Taylor proposed openstack/keystoneauth master: Expose interface as a ListOpt for config files https://review.openstack.org/482743 | 12:47 |
openstackgerrit | Monty Taylor proposed openstack/keystoneauth master: Add paragraph clarifying major and micro versions https://review.openstack.org/482710 | 12:47 |
openstackgerrit | Monty Taylor proposed openstack/keystoneauth master: Add ability to request a microversion in a request https://review.openstack.org/482746 | 12:47 |
openstackgerrit | Monty Taylor proposed openstack/keystoneauth master: Update docs and add a release note https://review.openstack.org/477566 | 12:47 |
openstackgerrit | Monty Taylor proposed openstack/keystoneauth master: Remove kwargs from adapter.get_endpoint_data https://review.openstack.org/482744 | 12:47 |
openstackgerrit | Monty Taylor proposed openstack/keystoneauth master: Add support for next_min_version and not_before https://review.openstack.org/482745 | 12:47 |
robcresswell | Anyway, I came here to say that I've proposed a merge of Django OpenStack Auth and Horizon | 12:48 |
robcresswell | https://review.openstack.org/#/c/482561/ | 12:48 |
robcresswell | If anyone's interested, that's the patch | 12:48 |
robcresswell | Will send out an email later on | 12:48 |
* cmurphy celebrates | 12:50 | |
*** edmondsw has joined #openstack-keystone | 12:50 | |
*** edmondsw_ has joined #openstack-keystone | 12:51 | |
*** edmondsw has quit IRC | 12:52 | |
*** d0ugal has joined #openstack-keystone | 12:56 | |
lbragstad | robcresswell: welcome back :) | 13:05 |
robcresswell | Haha, cheers | 13:06 |
lbragstad | https://review.openstack.org/#/c/437441/ closes a bug in case anyone is interested in taking a look | 13:08 |
*** zzzeek_ has quit IRC | 13:12 | |
*** zzzeek_ has joined #openstack-keystone | 13:13 | |
*** zhurong has joined #openstack-keystone | 13:14 | |
*** tobberyd_ has joined #openstack-keystone | 13:18 | |
lbragstad | sjain: ping | 13:18 |
lbragstad | sjain: it looks like the configuration section of our docs needs to be reworked a bit https://docs.openstack.org/keystone/latest/ | 13:19 |
*** d0ugal has quit IRC | 13:19 | |
sjain | Hi lbragstad! | 13:19 |
lbragstad | sjain: o/ | 13:19 |
sjain | okay | 13:19 |
lbragstad | sjain: https://docs.openstack.org/keystone/latest/configuration/config-options.html looks great | 13:19 |
sjain | what needs to be done? | 13:19 |
lbragstad | but when I click on the policy link | 13:20 |
lbragstad | i get this https://docs.openstack.org/keystone/latest/configuration/policy.html | 13:20 |
lbragstad | which has configuration stuff in it as well as policy stuff | 13:20 |
sjain | is this not correct? | 13:20 |
sjain | oh | 13:20 |
lbragstad | it's like sphinx is pulling the configuration guide content into the policy section? | 13:20 |
sjain | I didn't knew about that | 13:20 |
lbragstad | but - if you scroll down under the Table of Contents on https://docs.openstack.org/keystone/latest/configuration/policy.html | 13:21 |
*** tobberydberg has quit IRC | 13:21 | |
lbragstad | you do see the statement about policy and the link to the generated policy sample | 13:21 |
lbragstad | which is good | 13:21 |
lbragstad | somehow both are getting munged together? | 13:21 |
sjain | the sample configuration file? | 13:22 |
sjain | its a separate file included in the toc tree | 13:22 |
lbragstad | doc/source/configuration/config-options.rst and doc/source/configuration/policy.rst | 13:22 |
sjain | see the configuration options section here https://github.com/openstack/keystone/blob/master/doc/source/index.rst | 13:24 |
sjain | after the two files, there is a link to sample files | 13:24 |
sjain | are you referring those? | 13:25 |
lbragstad | sjain: i'm more referring to the middle link | 13:25 |
lbragstad | because it gets rendered like this - https://docs.openstack.org/keystone/latest/configuration/policy.html | 13:25 |
sjain | okay, it is this file, https://github.com/openstack/keystone/blob/master/doc/source/configuration/policy.rst | 13:26 |
sjain | can you please explain again how actually it should be looking | 13:27 |
*** zzzeek_ has quit IRC | 13:29 | |
*** bknudson has joined #openstack-keystone | 13:29 | |
lbragstad | sjain: i'm not quite sure - i was expecting it to only have policy information in it | 13:30 |
lbragstad | sjain: i'm tinkering with it locally to try and figure out why it is rendering with configuration options | 13:30 |
sjain | oh as per I know I have included only the keystone-policy-generator.conf, so I thought it will include whatever is predefined there | 13:32 |
*** frickler has quit IRC | 13:33 | |
lbragstad | sjain: right - that seems to look fine | 13:33 |
*** zzzeek_ has joined #openstack-keystone | 13:34 | |
sjain | lbragstad: btw are you able to run the tests, I was getting this error in oslo_config http://paste.openstack.org/show/615121/, any clues? | 13:35 |
lbragstad | sjain: hmm - i haven't seen that one yet | 13:36 |
lbragstad | sjain: i've been running the tests using `tox -e docs` | 13:36 |
sjain | yeah I did the same, strange, I'll ask Doug | 13:36 |
sjain | anyway, let me know what change is needed there, do we need to change the config file itself or something | 13:38 |
lbragstad | sjain: sounds good - i think asking dhellmann would be a good idea | 13:39 |
sjain | yup | 13:40 |
*** frickler has joined #openstack-keystone | 13:41 | |
openstackgerrit | Lance Bragstad proposed openstack/keystone master: Remove duplicate configuration documentation https://review.openstack.org/482969 | 13:46 |
openstackgerrit | Matthew Edmonds proposed openstack/keystonemiddleware master: strip whitespace from token https://review.openstack.org/482971 | 13:49 |
sjain | lbragstad: what needs to be done with the policy. json/yaml | 13:51 |
sjain | I was changing some docs to .yaml | 13:51 |
sjain | and there is a comment here too, https://review.openstack.org/#/c/482139/ | 13:52 |
*** catintheroof has joined #openstack-keystone | 13:57 | |
*** frickler has quit IRC | 13:57 | |
*** frickler has joined #openstack-keystone | 14:03 | |
*** jmlowe has joined #openstack-keystone | 14:09 | |
morgan | Hmm. | 14:11 |
*** tobberyd_ has quit IRC | 14:12 | |
lbragstad | sjain: yeah - i just saw that | 14:12 |
lbragstad | sjain: i think the main concerns is that we change the configuration option as well | 14:13 |
lbragstad | sjain: https://github.com/openstack/keystone/blob/master/etc/keystone.conf.sample#L2161 | 14:13 |
sjain | okay so that also needs to be changed to policy.yaml | 14:14 |
sjain | ? | 14:14 |
*** tobberydberg has joined #openstack-keystone | 14:14 | |
lbragstad | sjain: correct | 14:14 |
sjain | okay, cool! | 14:15 |
*** rmascena has joined #openstack-keystone | 14:16 | |
sjain | lbragstad: but here https://github.com/openstack/keystone/tree/master/etc, there is no policy.yaml file too, there is just a policy.v3cloudsample.json | 14:17 |
sjain | should we create one? | 14:17 |
lbragstad | sjain: we should rename policy.v3cloudsample.json to policy.v3cloudsample.yaml and convert it according to the documentation in oslo.policy (suggesting the use of the new yaml format) | 14:18 |
*** raildo has quit IRC | 14:18 | |
sjain | okay so its like switching everything to yaml, cool makes sense! | 14:19 |
lbragstad | sjain: thank you! | 14:19 |
sjain | thank you, I was actually confused about this :) | 14:19 |
*** catintheroof has quit IRC | 14:20 | |
lbragstad | sjain: no problem - the main thing is just to be consistent everywhere | 14:20 |
sjain | yes | 14:20 |
sjain | other than that, should I merge these two docs, https://docs.openstack.org/keystone/latest/admin/caching.html and https://docs.openstack.org/keystone/latest/admin/identity-caching-layer.html | 14:21 |
sjain | there are two caching layer subsections in admin section | 14:21 |
lbragstad | sjain: oh - yes | 14:22 |
lbragstad | sjain: that's be a good contribution | 14:22 |
sjain | great, I'll do that then | 14:23 |
gagehugo | o/ | 14:23 |
lbragstad | gagehugo: o/ | 14:23 |
*** zzzeek has quit IRC | 14:24 | |
*** tobberydberg has quit IRC | 14:25 | |
*** tobberydberg has joined #openstack-keystone | 14:25 | |
*** tobberydberg has quit IRC | 14:29 | |
*** tobberydberg has joined #openstack-keystone | 14:31 | |
*** tobberydberg has quit IRC | 14:33 | |
*** tobberydberg has joined #openstack-keystone | 14:34 | |
*** sjain has quit IRC | 14:34 | |
lbragstad | cmurphy: ping | 14:45 |
lbragstad | cmurphy: when you split out the tempest plugin - did you have a specific planning document somewhere or did you just follow the steps as they were written in the goal? | 14:46 |
*** nicolasbock has quit IRC | 14:50 | |
*** zhurong has quit IRC | 14:53 | |
*** phalmos has joined #openstack-keystone | 14:55 | |
*** david-lyle has quit IRC | 14:58 | |
*** david-lyle has joined #openstack-keystone | 14:58 | |
*** rcernin has quit IRC | 15:01 | |
cmurphy | lbragstad: just the steps in the goal, plus an etherpad that is now linked from the goal | 15:02 |
openstackgerrit | ChangBo Guo(gcb) proposed openstack/oslo.policy master: Update URLs in documents according to document migration https://review.openstack.org/482997 | 15:02 |
*** zzzeek_ has quit IRC | 15:02 | |
*** catintheroof has joined #openstack-keystone | 15:03 | |
*** zzzeek has joined #openstack-keystone | 15:04 | |
lbragstad | cmurphy: awesome - thanks | 15:04 |
lbragstad | cmurphy: https://review.openstack.org/#/c/483000/ | 15:05 |
*** nicolasbock has joined #openstack-keystone | 15:10 | |
*** tobberyd_ has joined #openstack-keystone | 15:11 | |
*** tobberydberg has quit IRC | 15:14 | |
*** tobberyd_ has quit IRC | 15:16 | |
cmurphy | lol i like how we're done with both of the queens goals | 15:19 |
*** sjain has joined #openstack-keystone | 15:20 | |
openstackgerrit | Samriddhi proposed openstack/keystone master: Merged the caching subsections in admin docs https://review.openstack.org/483009 | 15:24 |
*** rmascena is now known as raildo | 15:29 | |
*** tobberydberg has joined #openstack-keystone | 15:30 | |
*** belmoreira has quit IRC | 15:31 | |
*** oorgeron has joined #openstack-keystone | 15:32 | |
lbragstad | cmurphy: me too! | 15:34 |
*** edmondsw_ is now known as edmondsw | 15:34 | |
*** tobberydberg has quit IRC | 15:34 | |
oorgeron | Hi folks, I'm looking to get this patch merged https://review.openstack.org/#/c/431229/ . The oslo.db patches have been integrated into 4.24 and now I'm going back and getting patches that were depended merged. | 15:37 |
*** mvk has quit IRC | 15:40 | |
*** aojea has quit IRC | 15:40 | |
*** sjain has quit IRC | 15:41 | |
*** jmlowe has quit IRC | 15:54 | |
hrybacki | lbragstad: policy mtg today? | 16:00 |
*** nishaYadav has joined #openstack-keystone | 16:02 | |
lbragstad | hrybacki: yessir | 16:02 |
*** tesseract has quit IRC | 16:05 | |
*** aselius_ has quit IRC | 16:29 | |
*** aselius_ has joined #openstack-keystone | 16:30 | |
*** catintheroof has quit IRC | 16:30 | |
*** aselius_ has quit IRC | 16:30 | |
*** aselius has joined #openstack-keystone | 16:31 | |
*** catintheroof has joined #openstack-keystone | 16:31 | |
*** Guest86208 is now known as melwitt | 16:36 | |
*** mvk has joined #openstack-keystone | 16:42 | |
*** pcaruana has quit IRC | 16:56 | |
*** jmlowe has joined #openstack-keystone | 16:59 | |
eandersson | looks good morgan | 17:16 |
*** aojea has joined #openstack-keystone | 17:16 | |
*** aojea has quit IRC | 17:21 | |
*** jmlowe has quit IRC | 17:30 | |
*** aojea has joined #openstack-keystone | 17:37 | |
*** aojea has quit IRC | 17:42 | |
*** oorgeron has quit IRC | 17:42 | |
gagehugo | edmondsw I couldn't get https://review.openstack.org/#/c/482971/ to work for me | 17:52 |
edmondsw | gagehugo what were you doing? | 17:52 |
*** gyee has joined #openstack-keystone | 17:53 | |
gagehugo | curling keystone | 17:53 |
gagehugo | and appending '\r' to the end of the x-auth-token | 17:53 |
gagehugo | edmondsw how did you get it to work? | 17:54 |
*** jaosorior has joined #openstack-keystone | 17:54 | |
edmondsw | gagehugo same | 17:54 |
edmondsw | curl -1 -k -X GET https://$OPENSTACK:5000/v3/projects -H "X-Auth-Token: $TOKEN" -H "Accept: application/json" | 17:54 |
edmondsw | where TOKEN has a \r on it | 17:54 |
gagehugo | hmm | 17:54 |
*** hoonetorg has quit IRC | 17:54 | |
edmondsw | the fix has to be in the middleware, because that's how the token is coming in | 17:55 |
gagehugo | yeah that makes sense | 17:55 |
edmondsw | cmurphy can you verify that my fix works for you? | 17:55 |
*** swain has joined #openstack-keystone | 18:04 | |
edmondsw | gagehugo you remembered to restart keystone after making the code change? | 18:06 |
*** ducttape_ has joined #openstack-keystone | 18:06 | |
gagehugo | edmondsw yup | 18:06 |
edmondsw | hmm | 18:07 |
edmondsw | I wish I could get on your system :) | 18:07 |
gagehugo | I'm triple checking everything heh | 18:07 |
*** hoonetorg has joined #openstack-keystone | 18:10 | |
cmurphy | edmondsw: will try it later tonight | 18:10 |
edmondsw | cmurphy tx | 18:11 |
gagehugo | edmondsw: http://paste.openstack.org/show/615198/ | 18:14 |
gagehugo | If I remove the '\r' it works | 18:15 |
openstackgerrit | Merged openstack/keystone master: Improved the keystone federation image https://review.openstack.org/482836 | 18:16 |
gagehugo | lbragstad I think https://bugs.launchpad.net/keystone/+bug/1703917 may be related to https://bugs.launchpad.net/keystone/+bug/1702211 | 18:17 |
openstack | Launchpad bug 1703917 in OpenStack Identity (keystone) "Sometimes test_update_user_password fails with Unauthorized" [Undecided,New] | 18:17 |
openstack | Launchpad bug 1702211 in OpenStack Identity (keystone) "test_password_history_not_enforced_in_admin_reset failed in tempest test" [Undecided,Confirmed] | 18:17 |
gagehugo | random failures | 18:17 |
lbragstad | gagehugo: yeah - that wouldn't surprise me | 18:19 |
lbragstad | gagehugo: something tells me there is a timing issue in there somewhere | 18:20 |
lbragstad | but i haven't poked at it too hard | 18:20 |
gagehugo | lbragstad yeah I took a look and got 1702211 to sometimes fail, but didn't look into the logs yet | 18:20 |
jaosorior | raildo: ping | 18:28 |
raildo | jaosorior, hey | 18:28 |
openstackgerrit | Matthew Edmonds proposed openstack/keystone master: remove default rule https://review.openstack.org/482164 | 18:29 |
edmondsw | lbragstad I had to respin ^ to fix a UT issue | 18:32 |
lbragstad | sounds good | 18:32 |
*** nishaYadav has quit IRC | 18:33 | |
edmondsw | gagehugo instead of hardcoding the token into your curl command, how about making that dynamic like with the script I pasted into the bug? | 18:44 |
edmondsw | maybe the shell is doing something funky, or that token you're specifying has expired, or... | 18:44 |
gagehugo | edmondsw I'll try that | 18:45 |
gagehugo | edmondsw the token was fine, it worked right after if I removed the '\r' | 18:45 |
edmondsw | gagehugo yeah, I worry more about the \r being taken literally as 2 chars instead of as a control character | 18:46 |
edmondsw | maybe? | 18:46 |
edmondsw | I don't know... just grasping at straws :) | 18:46 |
gagehugo | edmondsw that could be | 18:46 |
*** jmlowe has joined #openstack-keystone | 18:49 | |
morgan | edmondsw: I don't think that's how that works :p | 19:00 |
edmondsw | morgan yeah, I don't really either... like I said, grasping at straws | 19:01 |
edmondsw | it works for me... | 19:01 |
edmondsw | it works in the UT... | 19:01 |
edmondsw | no idea why it's not working for gagehugo | 19:01 |
gagehugo | I usually assume I am missing something | 19:02 |
*** aojea has joined #openstack-keystone | 19:03 | |
edmondsw | gagehugo I tried what you did, and that doesn't work for me either... so it's something to do with how you added the \r | 19:05 |
gagehugo | edmondsw I'm getting a 400 when I try to curl keystone using the awk'd token | 19:06 |
gagehugo | TOKEN does have a carriage return though | 19:10 |
edmondsw | gagehugo 400? | 19:11 |
edmondsw | how did you verify that it has a carriage return? | 19:11 |
gagehugo | [[ $TOKEN == *$'\r'* ]] && echo yes || echo no | 19:11 |
edmondsw | instead, try this: | 19:11 |
edmondsw | echo $TOKEN$TOKEN | 19:11 |
*** jmlowe has quit IRC | 19:11 | |
edmondsw | and see that the second one overwrites part of the first | 19:11 |
gagehugo | yes | 19:12 |
edmondsw | cool | 19:12 |
edmondsw | so... how does your script differ from mine? | 19:12 |
gagehugo | Not sure I copy/pasted | 19:12 |
gagehugo | and changed OPENSTACK accordingly | 19:12 |
edmondsw | yeah, same here... | 19:13 |
edmondsw | I did just confirm that adding \r on the shell doesn't work... the \ is somehow eaten and you end up with token + r instead of token + \r | 19:13 |
edmondsw | so that's why what you were first trying didn't work | 19:14 |
gagehugo | ah | 19:14 |
gagehugo | does \\r work? | 19:14 |
edmondsw | no, that just appends a \ and an r... not a carriage return | 19:14 |
gagehugo | ok | 19:14 |
edmondsw | using the script with awk... did the neutron command work or also 400? | 19:15 |
gagehugo | I don't have neutron setup on this box, it's standalone keystone | 19:15 |
edmondsw | so did you comment that out? | 19:15 |
gagehugo | I can switch back to devstack box | 19:15 |
gagehugo | yeah | 19:15 |
edmondsw | weird, man, I don't know | 19:16 |
*** nicolasbock has quit IRC | 19:16 | |
edmondsw | maybe you're running keystone differently than I am, and whatever server you're using doesn't tolerate \r like mine does | 19:17 |
gagehugo | maybe? | 19:17 |
*** harlowja has quit IRC | 19:17 | |
edmondsw | I'm running in httpd on RHEL 7.2 | 19:17 |
gagehugo | ah | 19:17 |
gagehugo | im doing apache on debian | 19:17 |
*** david-lyle has quit IRC | 19:17 | |
*** david-lyle has joined #openstack-keystone | 19:17 | |
edmondsw | and cmurphy said she was using uwsgi | 19:18 |
edmondsw | so we'll see what she see there :) | 19:18 |
gagehugo | lemme try uwsgi | 19:18 |
gagehugo | ! | 19:21 |
gagehugo | uwsgi works | 19:21 |
gagehugo | interesting | 19:21 |
*** ducttap__ has joined #openstack-keystone | 19:23 | |
openstackgerrit | Merged openstack/oslo.policy master: Update URLs in documents according to document migration https://review.openstack.org/482997 | 19:24 |
gagehugo | edmondsw aselius says it fails on apache for him | 19:25 |
edmondsw | gagehugo I think morgan had said something about he didn't think \r would be valid in headers for some web servers | 19:26 |
gagehugo | so cmurphy's comment about it was correct with apache | 19:26 |
*** ducttape_ has quit IRC | 19:26 | |
edmondsw | I'm httpd, she's uwsgi, you're apache | 19:27 |
gagehugo | edmondsw I'll update my comment on the change | 19:27 |
edmondsw | odd that httpd (rhel) and apache (debian) aren't acting the same... thought that was the same codebase | 19:27 |
edmondsw | probably different versions | 19:27 |
gagehugo | could be | 19:28 |
edmondsw | rhel always uses old stuff | 19:28 |
edmondsw | e.g. still on py2.7.5 :( | 19:28 |
gagehugo | hmm | 19:30 |
gagehugo | now I'm getting a 401 | 19:31 |
gagehugo | this is weird | 19:34 |
*** lucasxu has joined #openstack-keystone | 19:51 | |
aselius | edmondsw im getting a 401 on uwsgi now too hmm | 20:00 |
edmondsw | I've never used uwsgi, so I don't know | 20:00 |
*** harlowja has joined #openstack-keystone | 20:02 | |
gagehugo | edmondsw gonna try nginx on fedora | 20:02 |
*** ducttape_ has joined #openstack-keystone | 20:03 | |
gagehugo | edmondsw my log message in keystonemiddleware didn't show up in the uwsgi logs | 20:03 |
*** ducttap__ has quit IRC | 20:06 | |
openstackgerrit | Samuel Pilla proposed openstack/python-keystoneclient master: WIP: Add project tags to keystoneclient https://review.openstack.org/481223 | 20:07 |
*** lucasxu has quit IRC | 20:08 | |
gagehugo | edmondsw nginx running uwsgi on fedora works | 20:11 |
*** raildo has quit IRC | 20:12 | |
openstackgerrit | Merged openstack/keystone master: Validate rolling upgrade is run in order https://review.openstack.org/437441 | 20:15 |
*** swain has quit IRC | 20:42 | |
*** mdrabe has joined #openstack-keystone | 21:00 | |
*** mdrabe has left #openstack-keystone | 21:03 | |
*** dave-mccowan has quit IRC | 21:09 | |
*** jmlowe has joined #openstack-keystone | 21:12 | |
*** edmondsw has quit IRC | 21:12 | |
*** edmondsw has joined #openstack-keystone | 21:13 | |
*** edmondsw_ has joined #openstack-keystone | 21:14 | |
*** edmondsw has quit IRC | 21:14 | |
*** edmondsw_ has quit IRC | 21:15 | |
*** bknudson has quit IRC | 21:15 | |
*** edmondsw has joined #openstack-keystone | 21:15 | |
*** edmondsw has quit IRC | 21:20 | |
*** phalmos has quit IRC | 21:21 | |
*** aojea has quit IRC | 21:23 | |
*** thorst has quit IRC | 21:23 | |
*** aojea has joined #openstack-keystone | 21:32 | |
*** ducttape_ has quit IRC | 21:32 | |
*** ducttape_ has joined #openstack-keystone | 21:41 | |
*** zzzeek_ has joined #openstack-keystone | 21:42 | |
*** edmondsw has joined #openstack-keystone | 21:46 | |
*** catintheroof has quit IRC | 21:46 | |
*** edmondsw has quit IRC | 21:50 | |
*** aojea has quit IRC | 21:53 | |
*** jmlowe has quit IRC | 21:54 | |
*** jaosorior has quit IRC | 22:03 | |
*** agrebennikov has joined #openstack-keystone | 22:11 | |
*** zzzeek_ has quit IRC | 22:15 | |
*** zzzeek_ has joined #openstack-keystone | 22:17 | |
*** zzzeek has quit IRC | 22:18 | |
*** d34dh0r53 has quit IRC | 22:32 | |
*** d34dh0r53 has joined #openstack-keystone | 22:32 | |
*** rm_work has quit IRC | 22:32 | |
*** rm_work has joined #openstack-keystone | 22:32 | |
*** szaher has quit IRC | 22:37 | |
*** szaher has joined #openstack-keystone | 22:37 | |
*** thorst has joined #openstack-keystone | 22:45 | |
*** jmlowe has joined #openstack-keystone | 23:02 | |
*** jmlowe has quit IRC | 23:09 | |
*** ducttape_ has quit IRC | 23:11 | |
*** d0ugal has joined #openstack-keystone | 23:11 | |
openstackgerrit | Nicolas Helgeson proposed openstack/keystone master: WIP: Add project tags https://review.openstack.org/470317 | 23:12 |
*** agrebennikov has quit IRC | 23:52 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!