| openstackgerrit | Merged openstack/keystoneauth master: Migrate to stestr https://review.openstack.org/505803 | 00:07 |
|---|---|---|
| *** gyee has quit IRC | 00:07 | |
| *** thorst has joined #openstack-keystone | 00:16 | |
| kong | it has been solved. | 00:16 |
| *** itlinux has quit IRC | 00:16 | |
| *** sbezverk has quit IRC | 00:25 | |
| *** sbezverk has joined #openstack-keystone | 00:26 | |
| *** jmlowe has joined #openstack-keystone | 00:27 | |
| *** bigdogstl has joined #openstack-keystone | 00:29 | |
| *** zhurong has joined #openstack-keystone | 00:31 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone master: Updated from global requirements https://review.openstack.org/502659 | 00:34 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystoneauth master: Updated from global requirements https://review.openstack.org/502660 | 00:34 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystonemiddleware master: Updated from global requirements https://review.openstack.org/500005 | 00:34 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/ldappool master: Updated from global requirements https://review.openstack.org/502776 | 00:34 |
| *** bigdogstl has quit IRC | 00:36 | |
| *** itlinux has joined #openstack-keystone | 00:38 | |
| *** openstackgerrit has quit IRC | 00:41 | |
| *** openstackgerrit has joined #openstack-keystone | 00:42 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/pycadf master: Updated from global requirements https://review.openstack.org/470137 | 00:42 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/python-keystoneclient master: Updated from global requirements https://review.openstack.org/500024 | 00:43 |
| *** bigdogstl has joined #openstack-keystone | 00:53 | |
| *** thorst has quit IRC | 00:54 | |
| *** hoonetorg has joined #openstack-keystone | 00:56 | |
| *** bigdogstl has quit IRC | 01:15 | |
| *** dave-mccowan has joined #openstack-keystone | 01:22 | |
| *** itlinux has quit IRC | 01:28 | |
| *** dave-mcc_ has joined #openstack-keystone | 01:33 | |
| *** dave-mccowan has quit IRC | 01:35 | |
| *** jmlowe has quit IRC | 01:42 | |
| *** jmlowe has joined #openstack-keystone | 01:43 | |
| *** guoshan has joined #openstack-keystone | 01:47 | |
| *** itlinux has joined #openstack-keystone | 01:49 | |
| *** itlinux has quit IRC | 01:51 | |
| *** thorst has joined #openstack-keystone | 01:53 | |
| *** thorst has quit IRC | 01:53 | |
| *** dougshelley66 has quit IRC | 01:57 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone master: Updated from global requirements https://review.openstack.org/502659 | 02:06 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystoneauth master: Updated from global requirements https://review.openstack.org/502660 | 02:06 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystonemiddleware master: Updated from global requirements https://review.openstack.org/500005 | 02:06 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/ldappool master: Updated from global requirements https://review.openstack.org/502776 | 02:07 |
| *** Shunli has joined #openstack-keystone | 02:10 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/pycadf master: Updated from global requirements https://review.openstack.org/470137 | 02:15 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/python-keystoneclient master: Updated from global requirements https://review.openstack.org/500024 | 02:16 |
| *** dave-mcc_ has quit IRC | 02:23 | |
| *** bigdogstl has joined #openstack-keystone | 02:25 | |
| *** efried has quit IRC | 02:31 | |
| *** efried has joined #openstack-keystone | 02:32 | |
| *** bigdogstl has quit IRC | 02:33 | |
| *** thorst has joined #openstack-keystone | 02:53 | |
| *** thorst has quit IRC | 02:59 | |
| *** mfisch` is now known as mfisch | 02:59 | |
| *** mfisch is now known as Guest44234 | 03:00 | |
| *** lbragstad has joined #openstack-keystone | 03:00 | |
| *** ChanServ sets mode: +o lbragstad | 03:00 | |
| *** jamesbenson has joined #openstack-keystone | 03:04 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone master: Updated from global requirements https://review.openstack.org/502659 | 03:05 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystoneauth master: Updated from global requirements https://review.openstack.org/502660 | 03:05 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystonemiddleware master: Updated from global requirements https://review.openstack.org/500005 | 03:05 |
| *** jamesbenson has quit IRC | 03:06 | |
| *** jamesbenson has joined #openstack-keystone | 03:06 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/ldappool master: Updated from global requirements https://review.openstack.org/502776 | 03:06 |
| *** chrisshattuck has joined #openstack-keystone | 03:13 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/pycadf master: Updated from global requirements https://review.openstack.org/470137 | 03:13 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/python-keystoneclient master: Updated from global requirements https://review.openstack.org/500024 | 03:14 |
| *** lbragstad has quit IRC | 03:21 | |
| *** bigdogstl has joined #openstack-keystone | 03:31 | |
| *** bigdogstl has quit IRC | 03:35 | |
| *** chrisshattuck has quit IRC | 03:37 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone master: Updated from global requirements https://review.openstack.org/502659 | 03:41 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystoneauth master: Updated from global requirements https://review.openstack.org/502660 | 03:41 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystonemiddleware master: Updated from global requirements https://review.openstack.org/500005 | 03:41 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/ldappool master: Updated from global requirements https://review.openstack.org/502776 | 03:41 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/pycadf master: Updated from global requirements https://review.openstack.org/470137 | 03:48 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/python-keystoneclient master: Updated from global requirements https://review.openstack.org/500024 | 03:49 |
| *** jamesbenson has quit IRC | 03:50 | |
| *** jamesbenson has joined #openstack-keystone | 03:51 | |
| *** Guest44234 is now known as mfisch | 03:52 | |
| *** mfisch is now known as Guest13446 | 03:53 | |
| *** thorst has joined #openstack-keystone | 03:55 | |
| *** thorst has quit IRC | 03:59 | |
| *** bigdogstl has joined #openstack-keystone | 04:00 | |
| *** erlon has quit IRC | 04:03 | |
| *** bigdogstl has quit IRC | 04:11 | |
| *** jrist has joined #openstack-keystone | 04:31 | |
| *** jamesbenson has quit IRC | 04:38 | |
| *** bigdogstl has joined #openstack-keystone | 04:38 | |
| *** bigdogstl has quit IRC | 04:43 | |
| *** links has joined #openstack-keystone | 04:43 | |
| openstackgerrit | Tin Lam proposed openstack/python-keystoneclient master: Add project tags to keystoneclient https://review.openstack.org/481223 | 04:50 |
| *** thorst has joined #openstack-keystone | 04:55 | |
| *** itlinux has joined #openstack-keystone | 05:00 | |
| *** thorst has quit IRC | 05:00 | |
| *** pcaruana has joined #openstack-keystone | 05:09 | |
| *** markvoelker has quit IRC | 05:16 | |
| *** aojea has joined #openstack-keystone | 05:31 | |
| *** aojea has quit IRC | 05:35 | |
| *** bigdogstl has joined #openstack-keystone | 05:40 | |
| *** bigdogstl has quit IRC | 05:44 | |
| *** thorst has joined #openstack-keystone | 05:56 | |
| *** thorst has quit IRC | 06:01 | |
| *** aojea has joined #openstack-keystone | 06:05 | |
| *** bigdogstl has joined #openstack-keystone | 06:05 | |
| *** bigdogstl has quit IRC | 06:09 | |
| *** josecastroleon has joined #openstack-keystone | 06:27 | |
| *** rcernin has joined #openstack-keystone | 06:28 | |
| *** itlinux has quit IRC | 06:37 | |
| *** jamesbenson has joined #openstack-keystone | 06:38 | |
| *** itlinux has joined #openstack-keystone | 06:40 | |
| *** itlinux has quit IRC | 06:40 | |
| *** jamesbenson has quit IRC | 06:43 | |
| *** thorst has joined #openstack-keystone | 06:57 | |
| *** thorst has quit IRC | 07:02 | |
| *** pcaruana has quit IRC | 07:05 | |
| *** ioggstream has joined #openstack-keystone | 07:09 | |
| *** ChanServ sets mode: +o openstack | 07:16 | |
| *** bigdogstl has joined #openstack-keystone | 07:17 | |
| *** markvoelker has joined #openstack-keystone | 07:18 | |
| *** tesseract has joined #openstack-keystone | 07:19 | |
| *** bigdogstl has quit IRC | 07:22 | |
| *** pcaruana has joined #openstack-keystone | 07:23 | |
| *** zhurong has quit IRC | 07:35 | |
| *** markvoelker has quit IRC | 07:52 | |
| *** zhurong has joined #openstack-keystone | 07:55 | |
| *** thorst has joined #openstack-keystone | 07:58 | |
| *** thorst has quit IRC | 08:02 | |
| *** bigdogstl has joined #openstack-keystone | 08:28 | |
| *** bigdogstl has quit IRC | 08:34 | |
| kmARC | Hi all. I'm trying to set up federated multi-site keystone. I had no problems with ocata, however with mitaka I get errors. I'm trying to follow official docs, and the @topol @henrynash @stevemar book, without any success. | 08:39 |
| kmARC | Anyone can point me to some howto/docs for _mitaka_ and federation? I'm mostly interested in keystone as a ServiceProvider | 08:40 |
| cmurphy | kmARC: the mitaka docs are https://docs.openstack.org/keystone/mitaka/configure_federation.html but there have been a lot of bugfixes between mitaka and ocata, if ocata works why not continue with it instead of going backwards? | 08:45 |
| kmARC | cmurphy: thanks. Unfortunately we standardized on Mitaka that's why I'm trying to set it up. Federation is considered stable since Juno IIRC therefore I'd expect it to work (at least with some plumbing) | 08:46 |
| *** markvoelker has joined #openstack-keystone | 08:48 | |
| kmARC | What I don't understand is this error message: | 08:49 |
| kmARC | $ openstack identity provider create my_idp --remote-id my_idp | 08:49 |
| kmARC | Additional properties are not allowed (u'domain_id' was unexpected) | 08:49 |
| kmARC | However, https://developer.openstack.org/api-ref/identity/v3-ext/#os-federation-api lists that the domain_id is a valid property | 08:49 |
| kmARC | (I guess next step is gonna be manually crafting a curl PUT request without `domain_id`) | 08:51 |
| openstackgerrit | zhangyangyang proposed openstack/keystone master: Cleanup test-requirements https://review.openstack.org/506068 | 08:52 |
| cmurphy | kmARC: the domain_id parameter for IdPs is new in ocata http://git.openstack.org/cgit/openstack/keystone/commit/?id=8c190a1a29dbb17fee044827fc9b651918dfc51e | 08:57 |
| *** thorst has joined #openstack-keystone | 08:59 | |
| kmARC | the python-openstackclient I'm using comes from the standard ubuntu 16.04 repos | 09:00 |
| kmARC | I guess it's a client "error" in the sense it doesn't work with older versions of keystone server | 09:01 |
| cmurphy | I'm surprised ubuntu is including a newer openstackclient in their mitaka repos | 09:02 |
| kmARC | I haven't set up the mitaka repo per se (cloudarchive doesn't contain version mitaka for ubuntu 16.04, since that's what the upstream 16.04 repos contain) | 09:03 |
| *** thorst has quit IRC | 09:03 | |
| *** bigdogstl has joined #openstack-keystone | 09:14 | |
| kmARC | I found the problem. `pip install shade` also installed the latest version of openstackclient. I was using `openstack` installed by pip, hence the incompatible version | 09:15 |
| *** edmondsw has joined #openstack-keystone | 09:15 | |
| kmARC | However, that means that python-openstackclient is not backwards compatible | 09:16 |
| odyssey4me | kmARC you should be installing shade into a venv, not into the system packages | 09:16 |
| odyssey4me | mixing things up will cause a world of pain | 09:17 |
| kmARC | problem is, not just me as an operator, but all our clients need to do that :-\ | 09:17 |
| kmARC | I was under the impression the latest python-openstackclient is backwards compatible | 09:18 |
| odyssey4me | well, each version has minimum requirements - and only certain requirements are implemented by packagers | 09:18 |
| *** bigdogstl has quit IRC | 09:19 | |
| odyssey4me | so while openstackclient itself might be, by installing the latest you're also upgrading a ton of other python bits which may affect your running services or other things too | 09:19 |
| odyssey4me | so, in general, either use the distro packages or use pip - not both | 09:19 |
| odyssey4me | if you use pip, better to use venvs so that you can isolate your different environments from each other | 09:19 |
| *** edmondsw has quit IRC | 09:20 | |
| kmARC | that's gonna be painful for our users | 09:20 |
| *** ygl has joined #openstack-keystone | 09:20 | |
| kmARC | minor workaround tho, so I guess we can live with that :-) | 09:20 |
| odyssey4me | if you want the versions that were tested with mitaka, they'll be exposed in the upper-constraints file for the mitaka branch in the requirements repo... but I can tell you that shade just won't work with that stuff - we tried | 09:21 |
| odyssey4me | shade is now in u-c from pike onwards, so that will help | 09:21 |
| kmARC | ah okay, cool | 09:21 |
| *** markvoelker has quit IRC | 09:21 | |
| odyssey4me | this is the mitaka tested openstackclient FYI: https://github.com/openstack/requirements/blob/mitaka-eol/upper-constraints.txt#L298 | 09:22 |
| kmARC | yepp, this is what comes from ubuntu upstream repos | 09:24 |
| kmARC | thanks for the explanation! | 09:24 |
| odyssey4me | kmARC Sure thing - happy to help. Hopefully shade will be packaged by the distro vendors in the future so it makes it easier for peple to use it. | 09:30 |
| *** Shunli has quit IRC | 09:31 | |
| kmARC | it is packaged actually. In my case, since I was using ocata first, I needed to set up a newer version of shade, hence the pip. Now when I reverted to mitaka, I left pip shade-installation in my ansible playbooks, that's why I had the wrong versions. Now I got rid of pip entirely. | 09:31 |
| *** tesseract has quit IRC | 09:41 | |
| *** tesseract has joined #openstack-keystone | 09:41 | |
| *** mvk has quit IRC | 09:49 | |
| *** zhurong has quit IRC | 09:55 | |
| *** thorst has joined #openstack-keystone | 10:00 | |
| *** thorst has quit IRC | 10:04 | |
| *** zhurong has joined #openstack-keystone | 10:11 | |
| *** markvoelker has joined #openstack-keystone | 10:19 | |
| *** mvk has joined #openstack-keystone | 10:19 | |
| *** ygl has quit IRC | 10:21 | |
| *** bigdogstl has joined #openstack-keystone | 10:38 | |
| *** jamesbenson has joined #openstack-keystone | 10:39 | |
| *** guoshan has quit IRC | 10:41 | |
| *** jamesbenson has quit IRC | 10:43 | |
| *** bigdogstl has quit IRC | 10:45 | |
| *** markvoelker has quit IRC | 10:52 | |
| *** sapd has quit IRC | 10:59 | |
| *** thorst has joined #openstack-keystone | 11:00 | |
| *** thorst has quit IRC | 11:05 | |
| *** ioggstream has quit IRC | 11:28 | |
| *** sapd has joined #openstack-keystone | 11:32 | |
| *** sapd has quit IRC | 11:39 | |
| *** sapd has joined #openstack-keystone | 11:43 | |
| *** markvoelker has joined #openstack-keystone | 11:49 | |
| *** zhurong has quit IRC | 11:51 | |
| *** chlong has joined #openstack-keystone | 11:52 | |
| *** markvoelker has quit IRC | 11:54 | |
| *** sapd has quit IRC | 11:54 | |
| *** sapd has joined #openstack-keystone | 11:55 | |
| *** sapd has quit IRC | 11:56 | |
| *** sapd has joined #openstack-keystone | 11:56 | |
| *** markvoelker has joined #openstack-keystone | 11:56 | |
| *** thorst has joined #openstack-keystone | 11:59 | |
| *** raildo has joined #openstack-keystone | 12:05 | |
| *** raildo has quit IRC | 12:08 | |
| *** raildo has joined #openstack-keystone | 12:08 | |
| *** dave-mccowan has joined #openstack-keystone | 12:09 | |
| *** bigdogstl has joined #openstack-keystone | 12:10 | |
| *** edmondsw has joined #openstack-keystone | 12:13 | |
| *** erlon has joined #openstack-keystone | 12:34 | |
| *** catintheroof has joined #openstack-keystone | 12:41 | |
| *** bigdogstl has quit IRC | 12:46 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone master: Updated from global requirements https://review.openstack.org/502659 | 12:46 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystoneauth master: Updated from global requirements https://review.openstack.org/502660 | 12:46 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystonemiddleware master: Updated from global requirements https://review.openstack.org/500005 | 12:46 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/ldappool master: Updated from global requirements https://review.openstack.org/502776 | 12:47 |
| openstackgerrit | Jesse Pretorius (odyssey4me) proposed openstack/keystone master: Add default configuration files to data_files https://review.openstack.org/506149 | 12:53 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/pycadf master: Updated from global requirements https://review.openstack.org/470137 | 12:54 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/python-keystoneclient master: Updated from global requirements https://review.openstack.org/500024 | 12:54 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone master: Updated from global requirements https://review.openstack.org/502659 | 13:02 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystoneauth master: Updated from global requirements https://review.openstack.org/502660 | 13:02 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystonemiddleware master: Updated from global requirements https://review.openstack.org/500005 | 13:02 |
| *** d0ugal has quit IRC | 13:02 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/ldappool master: Updated from global requirements https://review.openstack.org/502776 | 13:02 |
| *** d0ugal has joined #openstack-keystone | 13:03 | |
| *** d0ugal has quit IRC | 13:03 | |
| *** d0ugal has joined #openstack-keystone | 13:03 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/pycadf master: Updated from global requirements https://review.openstack.org/470137 | 13:10 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/python-keystoneclient master: Updated from global requirements https://review.openstack.org/500024 | 13:10 |
| *** ioggstream has joined #openstack-keystone | 13:11 | |
| *** lucasxu has joined #openstack-keystone | 13:16 | |
| *** panbalag has joined #openstack-keystone | 13:17 | |
| *** panbalag has left #openstack-keystone | 13:17 | |
| mordred | odyssey4me, kmARC: fwiw, we're one step away from having the shade transitive depend on python-openstackclient gone | 13:21 |
| mordred | odyssey4me, kmARC: sorry it bit you this time | 13:21 |
| openstackgerrit | henry-nash proposed openstack/keystone master: Pass request back into wsgi render_reponse https://review.openstack.org/330720 | 13:24 |
| openstackgerrit | henry-nash proposed openstack/keystone master: WIP - Add framework for supporting microversions https://review.openstack.org/330674 | 13:25 |
| odyssey4me | mordred ah, good to know that's roadmapped :) | 13:27 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone master: Updated from global requirements https://review.openstack.org/502659 | 13:29 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystoneauth master: Updated from global requirements https://review.openstack.org/502660 | 13:29 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystonemiddleware master: Updated from global requirements https://review.openstack.org/500005 | 13:29 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/ldappool master: Updated from global requirements https://review.openstack.org/502776 | 13:30 |
| mordred | odyssey4me: the only python-*client depend left for shade is python-ironicclient | 13:34 |
| mordred | odyssey4me: unfortunately python-ironicclient depends on python-openstackclient | 13:35 |
| mordred | which also depends on most of the rest of python-*client that we don't use anymore | 13:35 |
| *** jmlowe has quit IRC | 13:35 | |
| mordred | BUT - TheJulia has started the remove-python-ironicclient patches | 13:35 |
| kmARC | mordred: what unfortunate is that ansible openstack-related modules need newer and newer versions of shade, which would bring newer version of python-openstackclient too. For the time being, I just gave up on using the ansible modules, and now invoke commands of the python-openstackclient | 13:36 |
| kmARC | anyhow, thanks for the clarification | 13:36 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/pycadf master: Updated from global requirements https://review.openstack.org/470137 | 13:37 |
| mordred | we've also talked about just removing the ironicclient depend since it's the last one and let folks who need ironic features install python-ironicclient directly | 13:37 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/python-keystoneclient master: Updated from global requirements https://review.openstack.org/500024 | 13:38 |
| mordred | since bifrost already explicitly installs it | 13:38 |
| *** bigdogstl has joined #openstack-keystone | 13:43 | |
| *** bigdogstl has quit IRC | 13:47 | |
| odyssey4me | kmARC yeah, we've taken the same approach - alternatively using a venv as discussed earlier | 13:49 |
| *** lucasxu has quit IRC | 13:54 | |
| *** josecastroleon has quit IRC | 14:02 | |
| *** lucasxu has joined #openstack-keystone | 14:03 | |
| knikolla | o/ | 14:10 |
| gagehugo | o/ | 14:11 |
| *** bigdogstl has joined #openstack-keystone | 14:12 | |
| *** bigdogstl has quit IRC | 14:16 | |
| *** itlinux has joined #openstack-keystone | 14:23 | |
| *** itlinux has quit IRC | 14:23 | |
| *** jmlowe has joined #openstack-keystone | 14:28 | |
| hrybacki | o/ | 14:29 |
| *** openstackgerrit has quit IRC | 14:33 | |
| *** zhouyaguo has joined #openstack-keystone | 14:40 | |
| *** jamesbenson has joined #openstack-keystone | 14:40 | |
| *** itlinux has joined #openstack-keystone | 14:41 | |
| *** jamesbenson has quit IRC | 14:42 | |
| *** itlinux has quit IRC | 14:43 | |
| *** jamesbenson has joined #openstack-keystone | 14:51 | |
| *** jamesbenson has quit IRC | 14:55 | |
| *** jamesbenson has joined #openstack-keystone | 15:03 | |
| *** links has quit IRC | 15:07 | |
| *** chrisshattuck has joined #openstack-keystone | 15:10 | |
| *** chrisshattuck has quit IRC | 15:11 | |
| *** bigdogstl has joined #openstack-keystone | 15:12 | |
| *** chrisshattuck has joined #openstack-keystone | 15:13 | |
| *** gary-smith_ has joined #openstack-keystone | 15:14 | |
| *** bigdogstl has quit IRC | 15:17 | |
| *** gary-smith_ has left #openstack-keystone | 15:21 | |
| *** bigdogstl has joined #openstack-keystone | 15:25 | |
| *** bigdogstl has quit IRC | 15:30 | |
| *** bigdogstl has joined #openstack-keystone | 15:34 | |
| *** gyee has joined #openstack-keystone | 15:37 | |
| *** bigdogstl has quit IRC | 15:39 | |
| *** bigdogstl has joined #openstack-keystone | 15:52 | |
| *** bigdogstl has quit IRC | 15:58 | |
| *** sbezverk has quit IRC | 15:59 | |
| *** sbezverk has joined #openstack-keystone | 16:01 | |
| kmalloc | o/ | 16:03 |
| *** bigdogstl has joined #openstack-keystone | 16:14 | |
| *** bigdogstl has quit IRC | 16:20 | |
| *** bigdogstl has joined #openstack-keystone | 16:33 | |
| kmalloc | uhm. | 16:33 |
| kmalloc | aww lance isn't on irc | 16:33 |
| *** zhouyaguo has quit IRC | 16:39 | |
| *** bigdogstl has quit IRC | 16:42 | |
| *** itlinux has joined #openstack-keystone | 16:45 | |
| *** tesseract has quit IRC | 16:50 | |
| *** rcernin has quit IRC | 16:52 | |
| *** dave-mcc_ has joined #openstack-keystone | 16:55 | |
| *** dave-mccowan has quit IRC | 16:58 | |
| *** mvk has quit IRC | 17:01 | |
| *** tellesnobrega has quit IRC | 17:01 | |
| knikolla | kmalloc: few questions about jwt | 17:01 |
| kmalloc | sure | 17:02 |
| *** aselius has joined #openstack-keystone | 17:02 | |
| knikolla | kmalloc: would supporting jwt in ksm hypothetically allow substituting keystone entirely for another idp? | 17:02 |
| kmalloc | if the idp could talk keystone-specific data | 17:03 |
| kmalloc | project, user, roles, etc | 17:03 |
| kmalloc | in the keystone-specific manner | 17:03 |
| knikolla | kmalloc: shouldn't be too hard to configure that way | 17:04 |
| knikolla | kmalloc: i have a pretty shallow knowledge of oauth/openid, but i'm inclined to think that that combination can actually work better than k2k? | 17:09 |
| kmalloc | eh. differently | 17:10 |
| kmalloc | keystone still has to be authoritative to the data for that deployment | 17:10 |
| kmalloc | so k2k only solves authentication | 17:11 |
| kmalloc | it doesn't provide authz in the SP environment | 17:11 |
| kmalloc | the authoritative keystone does. | 17:11 |
| knikolla | true | 17:11 |
| *** bigdogstl has joined #openstack-keystone | 17:12 | |
| knikolla | kmalloc: given the flow of the MOC, where users access resources (volumes, etc) from other clouds, the authorization part is still sort of a hack (mappings). so i was brainstorming and investigating some other solutions. | 17:14 |
| *** bigdogstl has quit IRC | 17:17 | |
| *** itlinux has quit IRC | 17:18 | |
| *** erlon has quit IRC | 17:37 | |
| *** mvk has joined #openstack-keystone | 17:41 | |
| *** ioggstream has quit IRC | 17:52 | |
| *** openstackgerrit has joined #openstack-keystone | 18:01 | |
| openstackgerrit | Gage Hugo proposed openstack/keystoneauth master: Correct docs usage of keystoneauth1 session https://review.openstack.org/503193 | 18:01 |
| *** bigdogstl has joined #openstack-keystone | 18:06 | |
| *** bigdogstl has quit IRC | 18:14 | |
| -openstackstatus- NOTICE: Gerrit OpenIDs have been accidentally overwritten and are in the process of being restored | 18:17 | |
| -openstackstatus- NOTICE: The Gerrit service on review.openstack.org is being taken offline briefly to perform database repair work but should be back up shortly | 18:22 | |
| *** ChanServ changes topic to "The Gerrit service on review.openstack.org is being taken offline briefly to perform database repair work but should be back up shortly" | 18:22 | |
| *** tellesnobrega has joined #openstack-keystone | 18:44 | |
| *** ioggstream has joined #openstack-keystone | 18:50 | |
| *** bigdogstl has joined #openstack-keystone | 19:11 | |
| *** bigdogstl has quit IRC | 19:16 | |
| *** aahh has joined #openstack-keystone | 19:19 | |
| aahh | @lbragstad : How exactly does the request payload inside the auth-plugin/password.py gets generated | 19:19 |
| *** ChanServ changes topic to "Queens release schedule: https://releases.openstack.org/queens/schedule.html | Meeting agenda: https://etherpad.openstack.org/p/keystone-weekly-meeting | Bugs that need triaging: http://bit.ly/2iJuN1h" | 19:20 | |
| -openstackstatus- NOTICE: OpenIDs for the Gerrit service have been restored from a recent backup and the service is running again; before/after table states are being analyzed now to identify any remaining cleanup needed for changes made to accounts today | 19:20 | |
| aahh | is there any way possible to read the environment variables inside this file for the project name | 19:20 |
| *** ioggstream has quit IRC | 19:22 | |
| openstackgerrit | Samuel de Medeiros Queiroz proposed openstack/keystone master: WIP: try to reproduce bug 1718747 https://review.openstack.org/506340 | 19:34 |
| openstack | bug 1718747 in OpenStack Identity (keystone) "Unable to delete domain with projects in it" [Undecided,New] https://launchpad.net/bugs/1718747 | 19:34 |
| *** pcaruana has quit IRC | 19:41 | |
| *** dave-mcc_ is now known as dave-mccowan | 19:45 | |
| *** tellesnobrega has left #openstack-keystone | 19:47 | |
| *** thorst has quit IRC | 19:58 | |
| *** jmlowe has quit IRC | 20:02 | |
| *** thorst has joined #openstack-keystone | 20:03 | |
| *** mvk has quit IRC | 20:05 | |
| *** thorst has quit IRC | 20:07 | |
| *** aahh has quit IRC | 20:16 | |
| *** mvk has joined #openstack-keystone | 20:17 | |
| *** thorst has joined #openstack-keystone | 20:40 | |
| *** edmondsw has quit IRC | 20:51 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone master: Updated from global requirements https://review.openstack.org/502659 | 20:51 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystoneauth master: Updated from global requirements https://review.openstack.org/502660 | 20:52 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystonemiddleware master: Updated from global requirements https://review.openstack.org/500005 | 20:52 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/ldappool master: Updated from global requirements https://review.openstack.org/502776 | 20:52 |
| *** edmondsw has joined #openstack-keystone | 20:57 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/pycadf master: Updated from global requirements https://review.openstack.org/470137 | 20:59 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/python-keystoneclient master: Updated from global requirements https://review.openstack.org/500024 | 21:00 |
| *** edmondsw has quit IRC | 21:01 | |
| *** lucasxu has quit IRC | 21:04 | |
| *** catintheroof has quit IRC | 21:07 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone master: Updated from global requirements https://review.openstack.org/502659 | 21:08 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystoneauth master: Updated from global requirements https://review.openstack.org/502660 | 21:09 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystonemiddleware master: Updated from global requirements https://review.openstack.org/500005 | 21:09 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/ldappool master: Updated from global requirements https://review.openstack.org/502776 | 21:09 |
| *** bigdogstl has joined #openstack-keystone | 21:13 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/pycadf master: Updated from global requirements https://review.openstack.org/470137 | 21:16 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/python-keystoneclient master: Updated from global requirements https://review.openstack.org/500024 | 21:17 |
| *** bigdogstl has quit IRC | 21:18 | |
| *** aojea has quit IRC | 21:22 | |
| *** aojea has joined #openstack-keystone | 21:23 | |
| *** aahh has joined #openstack-keystone | 21:25 | |
| aahh | how to get the domain id with domain name | 21:26 |
| *** aojea has quit IRC | 21:27 | |
| kmalloc | aahh: via the rest api or internal to keystone? | 21:28 |
| kmalloc | or via shade, etc? | 21:29 |
| *** raildo has quit IRC | 21:39 | |
| aahh | internal to keystone | 21:40 |
| openstackgerrit | Samuel de Medeiros Queiroz proposed openstack/keystone master: Delete users before deleting domains https://review.openstack.org/506340 | 21:40 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/pycadf master: Updated from global requirements https://review.openstack.org/470137 | 21:44 |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/python-keystoneclient master: Updated from global requirements https://review.openstack.org/500024 | 21:44 |
| *** thorst has quit IRC | 21:46 | |
| *** simondodsley has quit IRC | 21:46 | |
| *** kmARC has quit IRC | 21:46 | |
| *** enriquetaso has quit IRC | 21:47 | |
| *** efried has quit IRC | 21:47 | |
| *** evrardjp has quit IRC | 21:47 | |
| *** rm_work has quit IRC | 21:47 | |
| *** kmARC has joined #openstack-keystone | 21:48 | |
| *** simondodsley has joined #openstack-keystone | 21:48 | |
| *** enriquetaso has joined #openstack-keystone | 21:49 | |
| *** hugokuo has quit IRC | 21:49 | |
| *** hugokuo has joined #openstack-keystone | 21:50 | |
| *** evrardjp has joined #openstack-keystone | 21:52 | |
| aahh | is it possible to create the project with an ID and project name by using the resource_api | 21:59 |
| *** jamesbenson has quit IRC | 22:01 | |
| *** rm_work has joined #openstack-keystone | 22:02 | |
| *** rm_work has quit IRC | 22:02 | |
| *** rm_work has joined #openstack-keystone | 22:02 | |
| *** efried has joined #openstack-keystone | 22:03 | |
| *** chrisshattuck has quit IRC | 22:09 | |
| *** bigdogstl has joined #openstack-keystone | 22:16 | |
| *** bigdogstl has quit IRC | 22:23 | |
| *** ioggstream has joined #openstack-keystone | 22:23 | |
| *** chrisshattuck has joined #openstack-keystone | 22:33 | |
| *** chrisshattuck has quit IRC | 22:35 | |
| *** bigdogstl has joined #openstack-keystone | 22:53 | |
| *** edmondsw has joined #openstack-keystone | 22:58 | |
| *** bigdogstl has quit IRC | 23:00 | |
| *** edmondsw has quit IRC | 23:02 | |
| *** bigdogstl has joined #openstack-keystone | 23:06 | |
| *** bigdogstl has quit IRC | 23:11 | |
| *** ioggstream has quit IRC | 23:12 | |
| *** jmlowe has joined #openstack-keystone | 23:35 | |
| *** markvoelker has quit IRC | 23:40 | |
| *** bigdogstl has joined #openstack-keystone | 23:41 | |
| *** thorst has joined #openstack-keystone | 23:46 | |
| *** chrisshattuck has joined #openstack-keystone | 23:49 | |
| *** bigdogstl has quit IRC | 23:50 | |
| *** thorst has quit IRC | 23:50 | |
| *** thorst has joined #openstack-keystone | 23:50 | |
| *** thorst has quit IRC | 23:53 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!