| *** Shunli has joined #openstack-keystone | 00:30 | |
| *** spzala has joined #openstack-keystone | 00:31 | |
| *** thorst_afk has joined #openstack-keystone | 00:41 | |
| *** zxy has joined #openstack-keystone | 00:45 | |
| *** thorst_afk has quit IRC | 00:46 | |
| *** thorst_afk has joined #openstack-keystone | 00:51 | |
| *** superdan is now known as dansmith | 00:57 | |
| openstackgerrit | Jamie Lennox proposed openstack/keystoneauth master: Add loading mock fixtures https://review.openstack.org/436012 | 01:02 |
|---|---|---|
| * jamielennox actually revives a patch | 01:03 | |
| *** thorst_afk has quit IRC | 01:06 | |
| *** thorst_afk has joined #openstack-keystone | 01:07 | |
| *** thorst_afk has quit IRC | 01:11 | |
| *** edmondsw has joined #openstack-keystone | 01:12 | |
| *** edmondsw has quit IRC | 01:15 | |
| *** edmondsw has joined #openstack-keystone | 01:15 | |
| *** edmondsw has quit IRC | 01:16 | |
| openstackgerrit | Jeffrey Zhang proposed openstack/keystonemiddleware master: Make memcache client reusable across threads https://review.openstack.org/496972 | 01:25 |
| *** guoshan has joined #openstack-keystone | 01:28 | |
| *** zhurong has quit IRC | 01:28 | |
| *** burnz has joined #openstack-keystone | 01:55 | |
| *** Shunli has quit IRC | 02:14 | |
| *** Shunli has joined #openstack-keystone | 02:17 | |
| *** thorst_afk has joined #openstack-keystone | 02:23 | |
| *** thorst_afk has quit IRC | 02:24 | |
| *** zhurong has joined #openstack-keystone | 02:39 | |
| *** hoonetorg has quit IRC | 02:43 | |
| *** itlinux has quit IRC | 02:45 | |
| *** hoonetorg has joined #openstack-keystone | 03:00 | |
| *** thorst_afk has joined #openstack-keystone | 03:25 | |
| *** thorst_afk has quit IRC | 03:30 | |
| *** mrhillsman has left #openstack-keystone | 03:35 | |
| openstackgerrit | Jamie Lennox proposed openstack/keystoneauth master: Add loading mock fixtures https://review.openstack.org/436012 | 03:53 |
| *** links has joined #openstack-keystone | 04:00 | |
| *** thorst_afk has joined #openstack-keystone | 04:26 | |
| *** thorst_afk has quit IRC | 04:31 | |
| *** jaosorior has joined #openstack-keystone | 05:18 | |
| *** markvoelker_ has joined #openstack-keystone | 05:25 | |
| *** thorst_afk has joined #openstack-keystone | 05:27 | |
| *** markvoelker has joined #openstack-keystone | 05:29 | |
| *** markvoelker_ has quit IRC | 05:29 | |
| *** rcernin has joined #openstack-keystone | 05:30 | |
| *** thorst_afk has quit IRC | 05:32 | |
| *** markvoelker has quit IRC | 05:33 | |
| *** markvoelker has joined #openstack-keystone | 05:34 | |
| *** edmondsw has joined #openstack-keystone | 06:02 | |
| *** thorst_afk has joined #openstack-keystone | 06:28 | |
| *** thorst_afk has quit IRC | 06:32 | |
| *** belmoreira has joined #openstack-keystone | 06:34 | |
| *** pcaruana has joined #openstack-keystone | 06:36 | |
| *** aojea has joined #openstack-keystone | 06:56 | |
| *** aojea has quit IRC | 07:12 | |
| *** aojea has joined #openstack-keystone | 07:13 | |
| *** aojea has quit IRC | 07:16 | |
| *** aojea has joined #openstack-keystone | 07:18 | |
| *** zxy has quit IRC | 07:27 | |
| *** zxy has joined #openstack-keystone | 07:28 | |
| *** d0ugal has joined #openstack-keystone | 07:30 | |
| *** tesseract has joined #openstack-keystone | 07:31 | |
| *** edmondsw has quit IRC | 07:40 | |
| *** josecastroleon has joined #openstack-keystone | 08:14 | |
| *** ioggstream has joined #openstack-keystone | 08:17 | |
| *** thorst_afk has joined #openstack-keystone | 08:30 | |
| *** thorst_afk has quit IRC | 08:34 | |
| *** d0ugal has quit IRC | 08:35 | |
| *** jaosorior has quit IRC | 08:39 | |
| *** jaosorior has joined #openstack-keystone | 08:50 | |
| openstackgerrit | Lingyong Xu proposed openstack/oslo.policy master: Update the documentation link for doc migration https://review.openstack.org/498381 | 09:00 |
| *** markvoelker has quit IRC | 09:15 | |
| *** thorst_afk has joined #openstack-keystone | 09:30 | |
| *** Shunli has quit IRC | 09:31 | |
| *** thorst_afk has quit IRC | 09:35 | |
| *** edmondsw has joined #openstack-keystone | 09:41 | |
| openstackgerrit | Abhishek Kekane proposed openstack/python-keystoneclient master: Add Response class to return request-id to caller https://review.openstack.org/329913 | 09:43 |
| *** edmondsw has quit IRC | 09:45 | |
| *** aojea has quit IRC | 10:06 | |
| *** aojea has joined #openstack-keystone | 10:27 | |
| *** thorst_afk has joined #openstack-keystone | 10:31 | |
| *** thorst_afk has quit IRC | 10:36 | |
| *** d0ugal has joined #openstack-keystone | 10:40 | |
| *** guoshan has quit IRC | 10:48 | |
| *** jamielennox has quit IRC | 10:51 | |
| *** jamielennox has joined #openstack-keystone | 10:52 | |
| *** markvoelker has joined #openstack-keystone | 11:15 | |
| *** dave-mccowan has joined #openstack-keystone | 11:32 | |
| *** szaher has quit IRC | 11:32 | |
| *** thorst_afk has joined #openstack-keystone | 11:33 | |
| *** szaher has joined #openstack-keystone | 11:36 | |
| *** ioggstream has quit IRC | 11:39 | |
| *** rajalokan has joined #openstack-keystone | 11:39 | |
| *** thorst_afk has quit IRC | 11:40 | |
| *** rajalokan has quit IRC | 11:40 | |
| *** edmondsw has joined #openstack-keystone | 11:42 | |
| *** edmondsw has quit IRC | 11:46 | |
| *** markvoelker has quit IRC | 11:50 | |
| *** raildo has joined #openstack-keystone | 11:58 | |
| *** aojea has quit IRC | 12:02 | |
| *** ducttap__ has quit IRC | 12:08 | |
| *** lwanderley has joined #openstack-keystone | 12:08 | |
| *** lwanderley has quit IRC | 12:14 | |
| *** lifeless has quit IRC | 12:15 | |
| *** ducttape_ has joined #openstack-keystone | 12:16 | |
| *** lwanderley has joined #openstack-keystone | 12:17 | |
| *** lifeless has joined #openstack-keystone | 12:17 | |
| *** rreimberg has joined #openstack-keystone | 12:17 | |
| *** zhurong has quit IRC | 12:23 | |
| *** aojea has joined #openstack-keystone | 12:24 | |
| *** thorst_afk has joined #openstack-keystone | 12:30 | |
| *** catintheroof has joined #openstack-keystone | 12:36 | |
| *** dave-mccowan has quit IRC | 12:38 | |
| samueldmq | morning keystone | 12:47 |
| *** ducttape_ has quit IRC | 12:48 | |
| samueldmq | kmalloc: hey, would be nice to have your eyes on https://review.openstack.org/#/c/496972 | 12:48 |
| samueldmq | kmalloc: memcache reuse across threads in ksa | 12:48 |
| *** dave-mccowan has joined #openstack-keystone | 12:49 | |
| *** markvoelker has joined #openstack-keystone | 13:01 | |
| *** lucasxu has joined #openstack-keystone | 13:05 | |
| *** lwanderley has quit IRC | 13:15 | |
| *** lwanderley has joined #openstack-keystone | 13:26 | |
| *** josecastroleon has quit IRC | 13:29 | |
| *** lwanderley has quit IRC | 13:31 | |
| *** josecastroleon has joined #openstack-keystone | 13:31 | |
| *** ducttape_ has joined #openstack-keystone | 13:33 | |
| *** gagehugo_ has joined #openstack-keystone | 13:34 | |
| *** gagehugo_ has quit IRC | 13:36 | |
| *** markvoelker has quit IRC | 13:40 | |
| *** lbragstad has joined #openstack-keystone | 13:42 | |
| *** ChanServ sets mode: +o lbragstad | 13:42 | |
| *** edmondsw has joined #openstack-keystone | 13:43 | |
| *** edmondsw has quit IRC | 13:47 | |
| openstackgerrit | Thomas Duval proposed openstack/oslo.policy master: Modification to add additional information in the HTTPCheck request. https://review.openstack.org/498467 | 13:47 |
| *** ducttape_ has quit IRC | 13:48 | |
| knikolla | o/ | 13:48 |
| gagehugo | o/ | 13:48 |
| knikolla | i apologize for my inactivity in the past week. we're still ongoing an incident with our ceph deployment. That has been eating my entire work time + extra. | 13:50 |
| lbragstad | knikolla: no worries - making progress on it? | 13:51 |
| *** aojea has quit IRC | 13:53 | |
| stevemar | lbragstad: theres a q in -dev about keystone, and my memory of what the right answer is crap | 13:54 |
| knikolla | lbragstad: i think so. don't want to jinx it though. | 13:54 |
| knikolla | will make for a splendid blog post after we're done. | 13:54 |
| knikolla | #youwontbelievehowbadlywemessedupourceph | 13:54 |
| *** ducttape_ has joined #openstack-keystone | 13:55 | |
| *** cfriesen_ has joined #openstack-keystone | 13:55 | |
| *** aojea has joined #openstack-keystone | 13:56 | |
| *** lwanderley has joined #openstack-keystone | 13:58 | |
| *** edmondsw has joined #openstack-keystone | 14:00 | |
| *** david-lyle has quit IRC | 14:10 | |
| *** rbrndt has joined #openstack-keystone | 14:18 | |
| *** links has quit IRC | 14:22 | |
| kmalloc | samueldmq: ksm you mean? Because ksa cannot have memcache support baked in. | 14:27 |
| *** ioggstream has joined #openstack-keystone | 14:32 | |
| *** sjain has joined #openstack-keystone | 14:35 | |
| *** edmondsw has quit IRC | 14:37 | |
| *** jamesbenson has joined #openstack-keystone | 14:42 | |
| *** gyee has joined #openstack-keystone | 14:56 | |
| *** belmoreira has quit IRC | 14:58 | |
| *** belmoreira has joined #openstack-keystone | 15:01 | |
| *** belmoreira has quit IRC | 15:02 | |
| *** sjain has quit IRC | 15:02 | |
| *** lwanderley has quit IRC | 15:03 | |
| *** josecastroleon has quit IRC | 15:07 | |
| *** david-lyle has joined #openstack-keystone | 15:16 | |
| *** aselius has joined #openstack-keystone | 15:18 | |
| *** john5223 has quit IRC | 15:20 | |
| *** jamesbenson has quit IRC | 15:25 | |
| *** john5223 has joined #openstack-keystone | 15:25 | |
| *** otleimat has joined #openstack-keystone | 15:31 | |
| *** jistr is now known as jistr|off|mtg | 15:33 | |
| *** jistr|off|mtg is now known as jistr | 15:33 | |
| *** links has joined #openstack-keystone | 15:34 | |
| *** jamesbenson has joined #openstack-keystone | 15:35 | |
| *** jamesbenson has quit IRC | 15:35 | |
| *** jamesbenson has joined #openstack-keystone | 15:44 | |
| *** pcaruana has quit IRC | 15:47 | |
| *** aojea has quit IRC | 15:55 | |
| *** aojea has joined #openstack-keystone | 15:58 | |
| *** jamesben_ has joined #openstack-keystone | 15:59 | |
| *** jamesbenson has quit IRC | 16:00 | |
| *** rcernin has quit IRC | 16:10 | |
| *** aojea has quit IRC | 16:26 | |
| *** links has quit IRC | 16:27 | |
| *** jamesben_ has quit IRC | 16:27 | |
| *** jamesbenson has joined #openstack-keystone | 16:30 | |
| *** tesseract has quit IRC | 16:30 | |
| *** jamesbenson has quit IRC | 16:34 | |
| *** lwanderley has joined #openstack-keystone | 16:35 | |
| *** lwanderley has quit IRC | 16:36 | |
| *** lwanderley has joined #openstack-keystone | 16:37 | |
| *** jamesbenson has joined #openstack-keystone | 16:37 | |
| *** aojea has joined #openstack-keystone | 16:46 | |
| *** rcernin has joined #openstack-keystone | 16:48 | |
| *** aojea has quit IRC | 16:56 | |
| *** ioggstream has quit IRC | 17:03 | |
| *** chlong has joined #openstack-keystone | 17:07 | |
| openstackgerrit | Merged openstack/keystone master: Log format error https://review.openstack.org/497747 | 17:12 |
| kmalloc | samueldmq: reviewed | 17:14 |
| samueldmq | kmalloc: yes, I meant ksm. thanks for reviewing | 17:25 |
| kmalloc | samueldmq: it needs work =/ | 17:26 |
| * samueldmq nods | 17:27 | |
| samueldmq | kmalloc: I was just looking at your comments | 17:27 |
| *** aahh has joined #openstack-keystone | 17:27 | |
| *** lwanderley has quit IRC | 17:54 | |
| openstackgerrit | Merged openstack/keystone-specs master: Update project-tags spec https://review.openstack.org/484529 | 17:54 |
| *** lwanderley has joined #openstack-keystone | 18:10 | |
| ducttape_ | is it documented somewhere how to effectively write a 3rd party app that acts as a openstack service? my question is around how to scope to a project, do stuff, etc. Would like to avoid having a service account with a role setup on every single project | 18:19 |
| ducttape_ | or a good example / project (say heat) to follow | 18:19 |
| knikolla | ducttape_: the app only needs a service/admin role. it uses that to verify the users token and then users the users token to perform actions. | 18:21 |
| knikolla | so it's the user's token which is scoped to the project and has a role on the project. | 18:21 |
| knikolla | typically you would integrate the keystonemiddleware with your app. | 18:21 |
| knikolla | https://docs.openstack.org/keystonemiddleware/latest/ | 18:21 |
| ducttape_ | ok. and ideally that token will not get revoked / expired if the task is long running | 18:21 |
| knikolla | ducttape_: if you need to make calls to other services, you can get a service token and pass the alongside the user's token. | 18:22 |
| knikolla | that way even if the user's token expires, your app is vouching for it to be still valid. | 18:22 |
| ducttape_ | k. thanks knikolla | 18:22 |
| ducttape_ | oh, that is exciting / sounds less bad | 18:22 |
| *** itlinux has joined #openstack-keystone | 18:23 | |
| knikolla | ducttape_: np :) | 18:24 |
| *** lwanderley has quit IRC | 18:42 | |
| *** raildo has quit IRC | 18:45 | |
| *** raildo has joined #openstack-keystone | 18:54 | |
| *** aojea has joined #openstack-keystone | 18:55 | |
| knikolla | lbragstad: quick questions | 18:56 |
| knikolla | question*. singular | 18:56 |
| lbragstad | knikolla: sure | 18:56 |
| knikolla | what is the difference between `list_grants` and `list_role_assignments` in the assignment controller. | 18:57 |
| lbragstad | knikolla: list_role_assignments seems to be for /v3/groups/{group_id}/projects/{project_id}/roles/ like paths | 18:59 |
| lbragstad | knikolla: wait - sorry | 18:59 |
| lbragstad | list_grants seems to be the entry point for the full/explicit patch | 19:00 |
| lbragstad | path* | 19:00 |
| lbragstad | and list_role_assignments seems to be exposed through the /role_assignments path | 19:00 |
| lbragstad | i'm not sure why they don't use the same backend logic though at the controller or core layers | 19:00 |
| knikolla | lbragstad: they have a different path all the way to the backend | 19:01 |
| lbragstad | that's unfortunate | 19:01 |
| *** ducttape_ has quit IRC | 19:02 | |
| aahh | @lbragstad : hi , i just need some help with writing auth_plugins . | 19:03 |
| lbragstad | knikolla: i also seem to be having some issues with COMPUTED_ASSIGNMENTS_REGION | 19:03 |
| aahh | created the new plugin inside the keystone/auth/plugins | 19:03 |
| lbragstad | knikolla: when i delete a role, that cache isn't invalidated | 19:03 |
| aahh | defined the method name inside it | 19:03 |
| knikolla | lbragstad which review is that? | 19:04 |
| *** catintheroof has quit IRC | 19:04 | |
| lbragstad | knikolla: it's just what i have locally | 19:04 |
| aahh | gave an entry point to it on the setup.cfg and conf/auth.py | 19:04 |
| lbragstad | knikolla: but there shouldn't be anything weird about the test that i'm doing | 19:04 |
| aahh | but am not able to make it recognise with my domain_specific config | 19:04 |
| lbragstad | aahh: are you using a specific config file for your domain | 19:05 |
| lbragstad | ? | 19:05 |
| aahh | yes | 19:05 |
| aahh | i have a seperate one inside /etc/keystone/domains | 19:05 |
| aahh | i have defined the auth section inside the conf in it as method = new_plugin_name | 19:06 |
| aahh | but by default its always my default plugin that gets called instead of the new plugin from the different domain | 19:06 |
| lbragstad | aahh: the domain specific code only looks for specific configuration groups | 19:09 |
| lbragstad | specifically `ldap` and `identity` | 19:09 |
| lbragstad | the authenticate plugin configuration option is in `auth` | 19:09 |
| aahh | is it not possible to write a seperate plugin for the domain specific one then | 19:10 |
| *** ducttape_ has joined #openstack-keystone | 19:10 | |
| lbragstad | no - i don't think it is | 19:10 |
| aahh | any workaround thats possible ?? | 19:11 |
| lbragstad | aahh: not through domain configuration | 19:14 |
| lbragstad | that piece of the API is pretty locked down since it contains sensitive information | 19:14 |
| lbragstad | henrynash knows more about that than I do though | 19:14 |
| lbragstad | knikolla: pushing what i have locally quick | 19:15 |
| lbragstad | knikolla: it's going to be a mess | 19:15 |
| *** ducttape_ has quit IRC | 19:15 | |
| knikolla | lbragstad: no worries. | 19:17 |
| *** catintheroof has joined #openstack-keystone | 19:17 | |
| lbragstad | knikolla: the assignment bits seem to be ok | 19:18 |
| *** mjax has joined #openstack-keystone | 19:20 | |
| openstackgerrit | Gage Hugo proposed openstack/keystone master: Add new tags attribute to project https://review.openstack.org/470317 | 19:26 |
| openstackgerrit | Gage Hugo proposed openstack/keystone master: Add JSON schema validation for project tags https://review.openstack.org/484483 | 19:26 |
| openstackgerrit | Gage Hugo proposed openstack/keystone master: Add database migration for project tags https://review.openstack.org/484456 | 19:26 |
| openstackgerrit | Gage Hugo proposed openstack/keystone master: Add policy for project tags https://review.openstack.org/486757 | 19:26 |
| openstackgerrit | Gage Hugo proposed openstack/keystone master: Refactor removal of duplicate projects/domains https://review.openstack.org/491574 | 19:26 |
| *** ducttap__ has joined #openstack-keystone | 19:27 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Allow global scoping of tokens https://review.openstack.org/498577 | 19:29 |
| lbragstad | knikolla: ^ | 19:29 |
| lbragstad | knikolla: stepping away for a minute | 19:30 |
| knikolla | lbragstad: thanks! | 19:30 |
| openstackgerrit | Gage Hugo proposed openstack/keystone master: Refactor removal of duplicate projects/domains https://review.openstack.org/491574 | 19:31 |
| *** ducttap__ has quit IRC | 19:32 | |
| *** ducttape_ has joined #openstack-keystone | 19:33 | |
| *** aojea has quit IRC | 19:33 | |
| gagehugo | bah dumb rebasing | 19:35 |
| *** lwanderley has joined #openstack-keystone | 19:35 | |
| *** lwanderley has quit IRC | 19:36 | |
| openstackgerrit | Gage Hugo proposed openstack/keystone master: Add new tags attribute to project https://review.openstack.org/470317 | 19:38 |
| openstackgerrit | Gage Hugo proposed openstack/keystone master: Add JSON schema validation for project tags https://review.openstack.org/484483 | 19:38 |
| openstackgerrit | Gage Hugo proposed openstack/keystone master: Add database migration for project tags https://review.openstack.org/484456 | 19:38 |
| openstackgerrit | Gage Hugo proposed openstack/keystone master: Add policy for project tags https://review.openstack.org/486757 | 19:38 |
| openstackgerrit | Gage Hugo proposed openstack/keystone master: Refactor removal of duplicate projects/domains https://review.openstack.org/491574 | 19:38 |
| *** edmondsw has joined #openstack-keystone | 19:52 | |
| *** edmondsw has quit IRC | 19:54 | |
| *** edmondsw has joined #openstack-keystone | 20:00 | |
| lbragstad | knikolla: if i can get https://review.openstack.org/#/c/498577/ cleaned up within the next couple days, i can start on the oslo.policy/context stuff | 20:00 |
| lbragstad | well - technically the interface is already defined in the token response | 20:01 |
| lbragstad | so that work can start actually | 20:01 |
| *** edmondsw has quit IRC | 20:04 | |
| openstackgerrit | Gage Hugo proposed openstack/keystone master: Add project tags api-ref documentation and reno https://review.openstack.org/472396 | 20:08 |
| *** ducttape_ has quit IRC | 20:19 | |
| *** cfriesen_ has quit IRC | 20:23 | |
| *** cfriesen_ has joined #openstack-keystone | 20:23 | |
| *** ducttape_ has joined #openstack-keystone | 20:24 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Allow global scoping of tokens https://review.openstack.org/498577 | 20:25 |
| *** ducttape_ has quit IRC | 20:25 | |
| *** ducttape_ has joined #openstack-keystone | 20:26 | |
| *** ducttap__ has joined #openstack-keystone | 20:29 | |
| *** ducttape_ has quit IRC | 20:33 | |
| *** ducttap__ has quit IRC | 20:35 | |
| *** spzala has quit IRC | 20:36 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Allow global scoping of tokens https://review.openstack.org/498577 | 20:36 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Allow TokenFormatter to handle global scope https://review.openstack.org/498593 | 20:36 |
| *** rreimberg has quit IRC | 20:44 | |
| *** lucasxu has quit IRC | 20:46 | |
| catintheroof | guys, im having this error http://paste.openstack.org/show/619682/ when using keystoneauth1 == 3.1.0 and keystonemiddleware == 4.14.0 on python 3.5.4 (im using memcache_security_strategy=ENCRYPT and memcache_secret_key ) | 20:47 |
| catintheroof | any hint or help ? | 20:47 |
| *** chlong has quit IRC | 20:53 | |
| kmalloc | ``auth`` | 20:54 |
| kmalloc | ooh neato | 20:54 |
| kmalloc | irccloud reads md.... | 20:54 |
| *** edmondsw has joined #openstack-keystone | 21:03 | |
| *** edmondsw has quit IRC | 21:07 | |
| *** catintheroof has quit IRC | 21:09 | |
| *** raildo has quit IRC | 21:21 | |
| *** spzala has joined #openstack-keystone | 21:24 | |
| *** chlong has joined #openstack-keystone | 21:26 | |
| openstackgerrit | Merged openstack/keystone master: Delete redundant code https://review.openstack.org/496065 | 21:27 |
| openstackgerrit | Gage Hugo proposed openstack/keystone master: Copy specific distro pages for install guide https://review.openstack.org/498605 | 21:28 |
| *** chlong has quit IRC | 21:31 | |
| *** thorst_afk has quit IRC | 21:32 | |
| *** rcernin has quit IRC | 21:32 | |
| *** thorst_afk has joined #openstack-keystone | 21:35 | |
| *** edmondsw has joined #openstack-keystone | 21:38 | |
| *** thorst_afk has quit IRC | 21:40 | |
| *** edmondsw has quit IRC | 21:42 | |
| kmalloc | lbragstad: i have an interesting take on removing the "XXX_api" depencency decorators... | 21:43 |
| kmalloc | i actually have a fix that is much more generic across all keystone | 21:43 |
| kmalloc | should be pretty quick to implement | 21:43 |
| *** chlong has joined #openstack-keystone | 21:43 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Allow global scoping of tokens https://review.openstack.org/498577 | 21:45 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Allow TokenFormatter to handle global scope https://review.openstack.org/498593 | 21:45 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: WIP: Add skeleton tests for global scoping https://review.openstack.org/497946 | 21:45 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Implement manager logic for global roles https://review.openstack.org/494371 | 21:45 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Implement global role assignments for groups https://review.openstack.org/481781 | 21:45 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Implement backend logic for global roles https://review.openstack.org/494338 | 21:45 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Ensure building scope is mutually exclusive https://review.openstack.org/498091 | 21:45 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Implement global role assignments for users https://review.openstack.org/494374 | 21:45 |
| lbragstad | kmalloc: nice | 21:45 |
| lbragstad | i'd like to see it | 21:45 |
| lbragstad | dstanek: had some interesting ways to implement it that i dusted of a couple weeks ago | 21:45 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Allow global scoping of tokens https://review.openstack.org/498577 | 21:46 |
| lbragstad | knikolla: i separated the commits a bit more in hopes of keeping them cleaner ^ | 21:47 |
| kmalloc | lbragstad: ah nice. | 21:53 |
| lbragstad | kmalloc: i actually noticed something weird with our COMPUTED_ASSIGNMENTS_REGION stuff | 21:54 |
| lbragstad | line 817 here attempts to explain what i was seeing locally https://review.openstack.org/#/c/498577/5/keystone/tests/unit/test_v3_auth.py | 21:54 |
| *** jamesbenson has quit IRC | 22:01 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Allow global scoping of tokens https://review.openstack.org/498577 | 22:08 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Allow TokenFormatter to handle global scope https://review.openstack.org/498593 | 22:08 |
| *** edmondsw has joined #openstack-keystone | 22:09 | |
| *** cfriesen__ has joined #openstack-keystone | 22:10 | |
| *** cfriesen__ is now known as cfriesen | 22:10 | |
| *** cfriesen_ has quit IRC | 22:11 | |
| *** edmondsw has quit IRC | 22:13 | |
| *** cfriesen_ has joined #openstack-keystone | 22:13 | |
| *** cfriesen has quit IRC | 22:16 | |
| *** cfriesen__ has joined #openstack-keystone | 22:16 | |
| *** cfriesen__ is now known as cfriesen | 22:16 | |
| *** edmondsw has joined #openstack-keystone | 22:17 | |
| *** cfriesen_ has quit IRC | 22:19 | |
| *** edmondsw has quit IRC | 22:21 | |
| *** edmondsw has joined #openstack-keystone | 22:27 | |
| *** itlinux has quit IRC | 22:28 | |
| *** edmondsw has quit IRC | 22:34 | |
| *** markvoelker has joined #openstack-keystone | 22:42 | |
| *** rbrndt has quit IRC | 22:59 | |
| *** aojea has joined #openstack-keystone | 23:20 | |
| *** cfriesen has quit IRC | 23:23 | |
| *** cfriesen has joined #openstack-keystone | 23:23 | |
| *** aojea has quit IRC | 23:24 | |
| *** itlinux has joined #openstack-keystone | 23:28 | |
| *** itlinux has quit IRC | 23:28 | |
| *** aojea has joined #openstack-keystone | 23:33 | |
| *** chlong has quit IRC | 23:34 | |
| kmalloc | lbragstad: hey | 23:37 |
| kmalloc | lbragstad: have something (early prototype code) to show you | 23:37 |
| kmalloc | lbragstad: you here? | 23:39 |
| kmalloc | lbragstad: https://gist.github.com/morganfainberg/0b6000f71c7898ed9de12605873bf959 rough start of new dependency code | 23:39 |
| kmalloc | lbragstad: the metaclass is added to any managers (similar to your code). The @requires_api() decorator is simply to ensure we have a dependency registered (via the meta class) for the *_api bit | 23:42 |
| kmalloc | it would then use __getattribute__ to find the *_api provider (instance) in the Dependency Registry | 23:42 |
| kmalloc | the other benefit is that with minor tuning we can use the *_api value in __init__. instead of needing things like .create() | 23:43 |
| kmalloc | finally, we _could_ remove the @requires(blah_api) and just make it @uses_provider_api or similar | 23:44 |
| kmalloc | and not pass values, since you're 100% allowed to just access the *_api values in methods. | 23:44 |
| * kmalloc has a minor additional tweak to the setup. | 23:44 | |
| kmalloc | to do | 23:44 |
| kmalloc | but otherwise, it is a lot more "automatic" | 23:44 |
| kmalloc | and it guarantees shared managers | 23:45 |
| kmalloc | since they all reside in the registry | 23:45 |
| *** markvoelker has quit IRC | 23:46 | |
| *** edmondsw has joined #openstack-keystone | 23:53 | |
| *** aojea has quit IRC | 23:54 | |
| *** edmondsw_ has joined #openstack-keystone | 23:56 | |
| *** edmondsw has quit IRC | 23:58 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!