*** sbezverk has joined #openstack-keystone | 00:01 | |
*** thorst has joined #openstack-keystone | 00:09 | |
*** thorst has quit IRC | 00:13 | |
*** markvoelker has joined #openstack-keystone | 00:19 | |
*** stingaci has joined #openstack-keystone | 00:20 | |
*** stingaci_ has quit IRC | 00:22 | |
*** Shunli has joined #openstack-keystone | 00:24 | |
*** catintheroof has quit IRC | 00:33 | |
*** thorst has joined #openstack-keystone | 00:44 | |
*** thorst has quit IRC | 00:45 | |
*** edmondsw has joined #openstack-keystone | 01:13 | |
*** edmondsw has quit IRC | 01:18 | |
*** zsli_ has joined #openstack-keystone | 01:25 | |
*** Shunli has quit IRC | 01:27 | |
*** masber has joined #openstack-keystone | 01:28 | |
*** zhurong has joined #openstack-keystone | 01:35 | |
*** thorst has joined #openstack-keystone | 01:46 | |
*** ayoung has quit IRC | 01:48 | |
*** guoshan has joined #openstack-keystone | 01:50 | |
*** thorst has quit IRC | 01:51 | |
*** guoshan has quit IRC | 01:51 | |
*** guoshan has joined #openstack-keystone | 01:51 | |
*** ducttape_ has joined #openstack-keystone | 02:31 | |
*** zhurong has quit IRC | 02:34 | |
*** dave-mccowan has quit IRC | 02:36 | |
*** thorst has joined #openstack-keystone | 02:47 | |
*** thorst has quit IRC | 02:51 | |
*** edmondsw has joined #openstack-keystone | 03:02 | |
*** edmondsw has quit IRC | 03:06 | |
*** mjax has joined #openstack-keystone | 03:08 | |
*** mjax has quit IRC | 03:09 | |
*** Dinesh_Bhor has joined #openstack-keystone | 03:45 | |
*** thorst has joined #openstack-keystone | 03:48 | |
*** thorst has quit IRC | 03:52 | |
*** links has joined #openstack-keystone | 03:54 | |
*** swain has joined #openstack-keystone | 04:06 | |
*** zsli_ has quit IRC | 04:13 | |
*** zsli_ has joined #openstack-keystone | 04:13 | |
*** zsli_ has quit IRC | 04:21 | |
*** zsli__ has joined #openstack-keystone | 04:24 | |
*** mvk has joined #openstack-keystone | 04:33 | |
*** ying_zuo has joined #openstack-keystone | 04:36 | |
*** hoonetorg has quit IRC | 04:38 | |
*** zsli__ has quit IRC | 04:39 | |
*** edmondsw has joined #openstack-keystone | 04:50 | |
*** hoonetorg has joined #openstack-keystone | 04:54 | |
*** edmondsw has quit IRC | 04:54 | |
*** mvk_ has joined #openstack-keystone | 05:10 | |
*** mvk has quit IRC | 05:12 | |
*** flwang has quit IRC | 05:15 | |
*** flwang has joined #openstack-keystone | 05:18 | |
*** mvk_ has quit IRC | 05:21 | |
*** Shunli has joined #openstack-keystone | 05:31 | |
*** Shunli has quit IRC | 05:33 | |
*** mvk_ has joined #openstack-keystone | 05:34 | |
*** Shunli has joined #openstack-keystone | 05:34 | |
*** Shunli has quit IRC | 05:35 | |
*** Shunli has joined #openstack-keystone | 05:36 | |
*** thorst has joined #openstack-keystone | 05:49 | |
*** Shunli has quit IRC | 05:51 | |
*** Shunli has joined #openstack-keystone | 05:51 | |
*** thorst has quit IRC | 05:54 | |
*** zsli_ has joined #openstack-keystone | 06:01 | |
*** Shunli has quit IRC | 06:03 | |
*** rcernin has joined #openstack-keystone | 06:04 | |
*** zsli__ has joined #openstack-keystone | 06:08 | |
*** zsli_ has quit IRC | 06:11 | |
*** swain has quit IRC | 06:16 | |
*** jaosorior has joined #openstack-keystone | 06:16 | |
*** zsli__ has quit IRC | 06:26 | |
*** zsli__ has joined #openstack-keystone | 06:26 | |
*** mkrcmari__ has joined #openstack-keystone | 06:29 | |
*** pcaruana has joined #openstack-keystone | 06:30 | |
*** mvk_ has quit IRC | 06:32 | |
*** mvk has joined #openstack-keystone | 06:32 | |
*** stingaci has quit IRC | 06:32 | |
*** stingaci has joined #openstack-keystone | 06:32 | |
*** mkrcmari__ has quit IRC | 06:35 | |
*** stingaci has quit IRC | 06:37 | |
*** mvpnitesh has joined #openstack-keystone | 06:45 | |
*** thorst has joined #openstack-keystone | 06:51 | |
*** thorst has quit IRC | 06:55 | |
*** stingaci has joined #openstack-keystone | 07:08 | |
*** stingaci has quit IRC | 07:09 | |
*** stingaci has joined #openstack-keystone | 07:10 | |
*** stingaci has quit IRC | 07:11 | |
*** aojea has joined #openstack-keystone | 07:39 | |
*** gokhan has quit IRC | 07:51 | |
*** thorst has joined #openstack-keystone | 07:51 | |
*** thorst has quit IRC | 07:56 | |
*** mvpnitesh has quit IRC | 08:25 | |
*** mvpnitesh has joined #openstack-keystone | 08:25 | |
*** edmondsw has joined #openstack-keystone | 08:26 | |
*** aojea has quit IRC | 08:27 | |
*** ioggstream has joined #openstack-keystone | 08:27 | |
*** kukacz has quit IRC | 08:27 | |
*** edmondsw has quit IRC | 08:30 | |
*** thorst has joined #openstack-keystone | 08:52 | |
*** pcaruana has quit IRC | 08:53 | |
*** pcaruana has joined #openstack-keystone | 08:55 | |
*** thorst has quit IRC | 08:56 | |
*** pcaruana has quit IRC | 09:19 | |
*** zsli__ has quit IRC | 09:31 | |
*** pcaruana has joined #openstack-keystone | 09:32 | |
*** kukacz has joined #openstack-keystone | 09:34 | |
*** nicolasbock_ has joined #openstack-keystone | 09:42 | |
*** pcaruana has quit IRC | 09:45 | |
*** nicolasbock_ has quit IRC | 09:47 | |
*** dims has quit IRC | 09:50 | |
*** pcaruana has joined #openstack-keystone | 09:58 | |
*** kukacz has quit IRC | 09:58 | |
*** kukacz has joined #openstack-keystone | 09:59 | |
*** nicolasbock_ has joined #openstack-keystone | 09:59 | |
*** edmondsw has joined #openstack-keystone | 10:14 | |
*** guoshan has quit IRC | 10:18 | |
*** guoshan has joined #openstack-keystone | 10:18 | |
*** edmondsw has quit IRC | 10:19 | |
*** guoshan has quit IRC | 10:24 | |
*** thorst has joined #openstack-keystone | 10:54 | |
*** thorst has quit IRC | 10:58 | |
*** zhuzeyu has joined #openstack-keystone | 11:04 | |
*** zhuzeyu has left #openstack-keystone | 11:04 | |
*** aojea has joined #openstack-keystone | 11:05 | |
*** aojea_ has joined #openstack-keystone | 11:08 | |
*** aojea has quit IRC | 11:09 | |
*** openstackgerrit has quit IRC | 11:17 | |
*** ioggstream has quit IRC | 11:17 | |
samueldmq | morning keystone | 11:20 |
---|---|---|
*** belmoreira has joined #openstack-keystone | 11:45 | |
*** raildo has joined #openstack-keystone | 11:48 | |
*** mvk_ has joined #openstack-keystone | 11:50 | |
*** david-lyle has joined #openstack-keystone | 11:50 | |
*** dklyle has quit IRC | 11:51 | |
*** mvk has quit IRC | 11:53 | |
*** dave-mccowan has joined #openstack-keystone | 11:53 | |
*** edmondsw has joined #openstack-keystone | 11:55 | |
*** thorst has joined #openstack-keystone | 11:57 | |
*** ioggstream has joined #openstack-keystone | 12:12 | |
*** aojea_ has quit IRC | 12:27 | |
*** aojea has joined #openstack-keystone | 12:28 | |
*** edmondsw has quit IRC | 12:29 | |
*** iurygregory has joined #openstack-keystone | 12:31 | |
*** mkrcmari__ has joined #openstack-keystone | 12:56 | |
*** mvk_ has quit IRC | 13:00 | |
*** ayoung has joined #openstack-keystone | 13:06 | |
*** aojea has quit IRC | 13:15 | |
*** dims has joined #openstack-keystone | 13:21 | |
knikolla | o/ | 13:23 |
*** zxy has joined #openstack-keystone | 13:28 | |
*** belmoreira has quit IRC | 13:29 | |
*** edmondsw has joined #openstack-keystone | 13:29 | |
*** belmoreira has joined #openstack-keystone | 13:32 | |
*** lucasxu has joined #openstack-keystone | 13:34 | |
*** aojea has joined #openstack-keystone | 13:36 | |
*** mvpnitesh has quit IRC | 13:37 | |
lbragstad | o/ | 13:41 |
*** sjain has joined #openstack-keystone | 13:43 | |
*** aojea has quit IRC | 13:50 | |
*** markvoelker has quit IRC | 13:52 | |
zxy | \o | 13:53 |
*** aojea has joined #openstack-keystone | 13:58 | |
*** cfriesen_ has joined #openstack-keystone | 14:01 | |
*** mvk has joined #openstack-keystone | 14:04 | |
*** mkrcmari__ has quit IRC | 14:05 | |
*** zxy has quit IRC | 14:11 | |
*** zxy has joined #openstack-keystone | 14:12 | |
gagehugo | o/ | 14:24 |
*** aojea has quit IRC | 14:26 | |
lbragstad | the themes for monday/tuesday at the PTG have been released - https://www.openstack.org/ptg#tab_schedule | 14:36 |
*** nicolasbock_ has quit IRC | 14:51 | |
*** nicolasbock has joined #openstack-keystone | 14:51 | |
*** sjain has quit IRC | 14:55 | |
*** links has quit IRC | 14:56 | |
*** jmlowe has joined #openstack-keystone | 14:57 | |
*** mvk_ has joined #openstack-keystone | 14:58 | |
*** mvk has quit IRC | 15:02 | |
*** mkrcmari__ has joined #openstack-keystone | 15:11 | |
*** ayoung has quit IRC | 15:11 | |
*** Guest180 is now known as zeus | 15:11 | |
*** zeus has joined #openstack-keystone | 15:11 | |
*** ayoung has joined #openstack-keystone | 15:11 | |
*** mvk_ has quit IRC | 15:14 | |
*** rcernin has quit IRC | 15:15 | |
*** pcaruana has quit IRC | 15:22 | |
*** otleimat has joined #openstack-keystone | 15:22 | |
*** nicolasbock has quit IRC | 15:23 | |
*** belmoreira has quit IRC | 15:24 | |
*** jmlowe has quit IRC | 15:34 | |
*** swain has joined #openstack-keystone | 15:35 | |
*** gyee has joined #openstack-keystone | 15:40 | |
*** sjain has joined #openstack-keystone | 16:00 | |
*** aselius has joined #openstack-keystone | 16:01 | |
*** nicolasbock has joined #openstack-keystone | 16:02 | |
*** markvoelker has joined #openstack-keystone | 16:03 | |
*** edmondsw has quit IRC | 16:05 | |
*** edmondsw has joined #openstack-keystone | 16:07 | |
kmalloc | mmmm | 16:11 |
kmalloc | eclipse watching today | 16:11 |
*** edmondsw has quit IRC | 16:11 | |
kmalloc | 93% where i'm at (didn't decide to drive down to PDX or Salem) | 16:11 |
kmalloc | lbragstad: what is "skip level" upgrading? | 16:12 |
kmalloc | like ocata->rocky? | 16:12 |
lbragstad | skip level upgrading? | 16:13 |
kmalloc | Skip-level upgrading (#upgrading) | 16:13 |
kmalloc | Support for skip-level upgrading across all OpenStack components will be discussed In this room. We’ll also discuss increasing the number of projects that support rolling upgrades, zero-downtime upgrades and zero-impact upgrades. | 16:13 |
kmalloc | from the linke | 16:13 |
lbragstad | sounds like it consists of powering down a cloud, rolling through each release, and powering it back on | 16:13 |
* kmalloc shrugs | 16:13 | |
*** aojea has joined #openstack-keystone | 16:16 | |
*** aojea has quit IRC | 16:17 | |
*** david-lyle has quit IRC | 16:18 | |
*** david-lyle has joined #openstack-keystone | 16:19 | |
cmurphy | it's upgrading from N to N+2 | 16:31 |
cmurphy | it's not specific to how the cloud is powered up or down | 16:31 |
lbragstad | cmurphy: does the migration have to be online? | 16:32 |
cmurphy | lbragstad: ideally | 16:32 |
lbragstad | cmurphy: or are those details omitted? | 16:32 |
lbragstad | interesting | 16:32 |
lbragstad | it's like a "go baby go" upgrade button for your cloud | 16:33 |
*** tsufiev has joined #openstack-keystone | 16:37 | |
*** zxy has quit IRC | 16:39 | |
lbragstad | does anyone here know if they will be in Sydney yet? | 16:40 |
lbragstad | cc cmurphy kmalloc knikolla gagehugo breton hrybacki ayoung samueldmq ^ | 16:41 |
lbragstad | raildo: ^ | 16:41 |
knikolla | I most probably will be. | 16:41 |
hrybacki | lbragstad: I don't think I'm budgeted to go, no. Ayoung probably won't be going either | 16:42 |
lbragstad | ack - i understand it's pretty early to be asking that question | 16:42 |
raildo | lbragstad, I had one talk approved but I'm not sure that I'll have budget to go, so I think that I'm in the maybe section | 16:44 |
*** sjain has quit IRC | 16:44 | |
lbragstad | raildo: ack | 16:45 |
lbragstad | i'll follow up after the PTG as well | 16:45 |
cmurphy | both my talks were accepted so strong possibility | 16:46 |
lbragstad | good deal | 16:46 |
gagehugo | lbragstad I highly doubt I will be | 16:47 |
gagehugo | but it's not 100% decided yet | 16:47 |
lbragstad | gagehugo: do you know if/when you'll have a for sure answer </loadedquestion> | 16:48 |
*** sjain has joined #openstack-keystone | 16:48 | |
gagehugo | heh | 16:48 |
knikolla | My talk wasn't approved yet again, but I should be fine to go. Will confirm soon. | 16:48 |
gagehugo | I can double check tomorrow | 16:48 |
lbragstad | ok - we can discuss more in Denver, too | 16:48 |
lbragstad | i just wanted to get feelers out there | 16:48 |
gagehugo | yeah my talk wasn't approved either | 16:49 |
*** links has joined #openstack-keystone | 16:53 | |
ayoung | I am not going to Sydney. | 16:54 |
lbragstad | ayoung: :( | 16:55 |
lbragstad | well - jamielennox better be there | 16:56 |
ayoung | I'm not sure if anyone representing the Identity side of RH is going. rcrit, who was doing the Novajoin stuff is headed back to the IPA project to take back over techlead. | 16:56 |
lbragstad | ah | 16:56 |
ayoung | jamielennox has been working for IBM for several years now. But, yeah. | 16:56 |
*** sjain has quit IRC | 17:00 | |
*** rcernin has joined #openstack-keystone | 17:05 | |
*** links has quit IRC | 17:06 | |
*** eandersson has joined #openstack-keystone | 17:09 | |
kmalloc | lbragstad: I will not be in syd | 17:11 |
kmalloc | Unless something massive changes. | 17:12 |
breton | i will not be either | 17:12 |
*** mjax has joined #openstack-keystone | 17:13 | |
*** markvoelker has quit IRC | 17:18 | |
samueldmq | lbragstad: I'm with the majority: not sure yet. I am expecting to be approved to go though | 17:22 |
*** harlowja has joined #openstack-keystone | 17:29 | |
*** mvk_ has joined #openstack-keystone | 17:36 | |
*** edmondsw has joined #openstack-keystone | 17:39 | |
*** mkrcmari__ has quit IRC | 17:39 | |
*** edmondsw has quit IRC | 17:43 | |
*** ioggstream has quit IRC | 17:43 | |
*** mkrcmari__ has joined #openstack-keystone | 17:47 | |
*** mvk_ has quit IRC | 17:50 | |
*** markvoelker has joined #openstack-keystone | 17:50 | |
*** mvk has joined #openstack-keystone | 17:51 | |
*** edmondsw has joined #openstack-keystone | 17:52 | |
*** mvk_ has joined #openstack-keystone | 17:53 | |
*** mkrcmari__ has quit IRC | 17:53 | |
*** mvk has quit IRC | 17:55 | |
*** aojea has joined #openstack-keystone | 18:18 | |
*** aojea has quit IRC | 18:23 | |
*** dave-mccowan has quit IRC | 18:30 | |
*** catintheroof has joined #openstack-keystone | 18:32 | |
*** dave-mccowan has joined #openstack-keystone | 18:53 | |
cfriesen_ | Has anyone ever considered extending the API to deal more efficiently with many regions? ie adding some optional parameters to the initial authorization such that the returned endpoints correspond only to a particular region (and maybe service, while we're at it)? Otherwise I could see the endpoint list getting very long if there are many regions. | 18:57 |
lbragstad | cfriesen_: yeah - that'd be an interesting discussion to have | 19:00 |
lbragstad | cfriesen_: I haven't heard of anyone doing that - at least to my knowledge | 19:00 |
cfriesen_ | lbragstat: I'll be at the PTG, if anyone's interested. We're looking at something that could involve 20+ regions, so the number of endpoints starts to add up. | 19:02 |
cfriesen_ | oops, spelling | 19:02 |
lbragstad | cfriesen_: that's a lot of regions | 19:03 |
lbragstad | i'm not sure we've had someone deploy keystone across that many regions before | 19:03 |
lbragstad | cfriesen_: are you using sql for the backend? | 19:03 |
cfriesen_ | lbragstad: yes, Postgres | 19:04 |
*** raildo has quit IRC | 19:04 | |
cfriesen_ | currently, anyway | 19:04 |
lbragstad | cfriesen_: are you replicating it successfully across that many regions? | 19:04 |
cfriesen_ | lbragstad: still in design phase. are you anticipating issues? | 19:05 |
lbragstad | cfriesen_: well - the last i heard, people hit issues scaling keystone across that many regions | 19:06 |
lbragstad | but.. that was also before we implemented non-persistent tokens | 19:06 |
lbragstad | which accounted for nearly all replication/backend traffic | 19:06 |
cfriesen_ | lbragstad: we're not expecting each region to be all that big, would that help? | 19:06 |
lbragstad | oh - i'm sure that will have an impact | 19:07 |
lbragstad | the biggest thing we noticed in any replicated identity setup was the amount of traffic that needed to be sync'd | 19:07 |
lbragstad | and syncing globally can get expensive | 19:07 |
lbragstad | so - removing the need to write tokens to a persistent storage layer was a big win in that regard | 19:08 |
lbragstad | but - a lot has changed from when i last heard of someone scaling keystone into that many regions | 19:09 |
lbragstad | so any information based on those previous attempts are probably irrelevant | 19:09 |
lbragstad | s/are/is/ | 19:09 |
cfriesen_ | lbragstad: thanks for the info | 19:10 |
lbragstad | cfriesen_: anytime - i'll be at the PTG | 19:10 |
lbragstad | happy to sit down and talk about what you're going for | 19:10 |
cfriesen_ | sounds good | 19:10 |
*** raildo has joined #openstack-keystone | 19:13 | |
*** catintheroof has quit IRC | 19:17 | |
*** aojea has joined #openstack-keystone | 19:20 | |
*** lucasxu has quit IRC | 19:23 | |
*** aojea has quit IRC | 19:24 | |
*** lucasxu has joined #openstack-keystone | 19:25 | |
*** ducttape_ has quit IRC | 19:26 | |
*** ducttape_ has joined #openstack-keystone | 19:27 | |
*** mrhillsman has quit IRC | 19:43 | |
*** mrhillsman has joined #openstack-keystone | 19:47 | |
mjax | lbragstad: Trying to get two different domains to use very similar identity backend drivers, with the difference being how they store the user in the database, and how they authenticate users. Problem is, they both use the same sql tables and I get an unexpected error preventing things from working on the server. | 19:49 |
mjax | Works fine if I get rid of the sql session calls in the 2nd driver, but I want to inherit sql.py to override 1 or 2 methods | 19:50 |
mjax | any idea why this is happening or workarounds that I could employ? | 19:51 |
*** simondodsley has joined #openstack-keystone | 19:56 | |
*** gyee has quit IRC | 20:26 | |
*** ayoung has quit IRC | 20:35 | |
lbragstad | mjax: interesting - so you want to use different sql drivers but you want them to read/write to the same sql store for users? | 20:41 |
mjax | yea | 20:41 |
mjax | lbragstad: do you think it's possible? | 20:43 |
*** openstackgerrit has joined #openstack-keystone | 20:43 | |
openstackgerrit | Jaewoo Park proposed openstack/keystone master: WIP: Extend comparator support for project list by tags https://review.openstack.org/495978 | 20:43 |
lbragstad | mjax: does each sql driver have to list users maintained by the other? | 20:43 |
*** swain has quit IRC | 20:45 | |
mjax | nope, I believe just the ones that they've controlled should be fine. Are you thinking of having a separate stores for each driver? | 20:45 |
*** edmondsw_ has joined #openstack-keystone | 20:47 | |
*** rcernin has quit IRC | 20:47 | |
*** edmondsw has quit IRC | 20:49 | |
*** gagehugo has quit IRC | 20:50 | |
lbragstad | mjax: might make managing the conflict easier | 20:51 |
* lbragstad shrugs | 20:51 | |
mjax | would that affect the use of the resource, and assignment drivers that also make use of sql stores? | 20:53 |
lbragstad | mjax: you can also use hybrid properties to in the event a driver needs to access users stored in a different sql table | 20:53 |
*** lucasxu has quit IRC | 20:55 | |
*** gyee has joined #openstack-keystone | 20:56 | |
lbragstad | mjax: does https://docs.openstack.org/keystone/latest/admin/identity-domain-specific-config.html help or apply to your situation? | 20:57 |
mjax | i've been following that to get the domain specific config files in order, but it didn't help me with my specific problem of sql stores | 20:58 |
*** thorst has quit IRC | 21:04 | |
*** edmondsw_ has quit IRC | 21:04 | |
openstackgerrit | Jaewoo Park proposed openstack/keystone master: WIP: Extend comparator support for project list by tags https://review.openstack.org/495978 | 21:12 |
*** raildo has quit IRC | 21:52 | |
*** ayoung has joined #openstack-keystone | 22:02 | |
*** aojea has joined #openstack-keystone | 22:04 | |
*** thorst has joined #openstack-keystone | 22:35 | |
*** sbezverk has quit IRC | 22:39 | |
* kmalloc sings loudly | 22:39 | |
*** nkinder has quit IRC | 22:49 | |
*** thorst has quit IRC | 22:53 | |
*** wasmum has joined #openstack-keystone | 23:03 | |
*** aojea has quit IRC | 23:16 | |
*** catintheroof has joined #openstack-keystone | 23:29 | |
*** thorst has joined #openstack-keystone | 23:33 | |
*** thorst has quit IRC | 23:33 | |
*** gyee has quit IRC | 23:47 | |
jamielennox | shut up with that racket | 23:51 |
jamielennox | people are trying to concentrate | 23:51 |
*** thorst has joined #openstack-keystone | 23:59 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!