*** aloga has quit IRC | 00:14 | |
*** aloga has joined #openstack-keystone | 00:16 | |
*** jamesbenson has joined #openstack-keystone | 00:17 | |
*** jamesbenson has quit IRC | 00:22 | |
*** raildo has joined #openstack-keystone | 00:23 | |
*** raildo has quit IRC | 00:30 | |
*** namnh has joined #openstack-keystone | 01:01 | |
*** raildo has joined #openstack-keystone | 01:06 | |
*** openstackstatus has quit IRC | 01:14 | |
*** openstackstatus has joined #openstack-keystone | 01:15 | |
*** ChanServ sets mode: +v openstackstatus | 01:15 | |
*** lxnch_ has joined #openstack-keystone | 01:23 | |
*** lxnch has quit IRC | 01:27 | |
*** zigo has quit IRC | 01:27 | |
*** gyee has quit IRC | 01:28 | |
*** dikonoor has joined #openstack-keystone | 01:29 | |
*** zigo has joined #openstack-keystone | 01:31 | |
*** d0ugal has quit IRC | 01:45 | |
*** d0ugal has joined #openstack-keystone | 01:45 | |
*** markvoelker has joined #openstack-keystone | 01:52 | |
openstackgerrit | Merged openstack/keystonemiddleware master: Issue a deprecation warning for validating PKI tokens https://review.openstack.org/508631 | 01:57 |
---|---|---|
*** portdirect has quit IRC | 02:04 | |
*** portdirect has joined #openstack-keystone | 02:04 | |
*** McClymontS_ has quit IRC | 02:06 | |
*** andymccr has quit IRC | 02:06 | |
*** rha has quit IRC | 02:06 | |
*** mtreinish has quit IRC | 02:08 | |
openstackgerrit | Gage Hugo proposed openstack/keystone master: Implement project tags API controller and router https://review.openstack.org/499728 | 02:08 |
*** jistr has quit IRC | 02:08 | |
*** john5223_ has quit IRC | 02:08 | |
*** prashkre_ has joined #openstack-keystone | 02:09 | |
*** enriquetaso_ has joined #openstack-keystone | 02:09 | |
*** jistr has joined #openstack-keystone | 02:10 | |
*** mtreinish has joined #openstack-keystone | 02:10 | |
*** kong_ has joined #openstack-keystone | 02:11 | |
*** enriquetaso has quit IRC | 02:12 | |
*** kong has quit IRC | 02:12 | |
*** enriquetaso_ is now known as enriquetaso | 02:12 | |
*** kong_ is now known as kong | 02:12 | |
*** andymccr has joined #openstack-keystone | 02:13 | |
*** rha has joined #openstack-keystone | 02:14 | |
*** McClymontS has joined #openstack-keystone | 02:15 | |
*** mgagne has quit IRC | 02:23 | |
*** aselius has quit IRC | 02:23 | |
*** chris_hultin|AWA has quit IRC | 02:23 | |
*** chris_hultin|AWA has joined #openstack-keystone | 02:24 | |
*** chris_hultin|AWA is now known as chris_hultin | 02:24 | |
*** comstud has quit IRC | 02:24 | |
*** mgagne has joined #openstack-keystone | 02:24 | |
*** mgagne is now known as Guest66098 | 02:24 | |
*** gagehugo has quit IRC | 02:25 | |
*** markvoelker has quit IRC | 02:27 | |
*** prashkre has joined #openstack-keystone | 02:32 | |
*** prashkre_ has quit IRC | 02:32 | |
*** dave-mccowan has quit IRC | 02:33 | |
*** sapd has joined #openstack-keystone | 02:38 | |
*** sapd has quit IRC | 02:38 | |
*** comstud has joined #openstack-keystone | 02:39 | |
*** nicolasbock_ has quit IRC | 03:00 | |
*** nicolasbock has quit IRC | 03:01 | |
*** edmondsw has joined #openstack-keystone | 03:04 | |
*** edmondsw has quit IRC | 03:09 | |
*** gagehugo has joined #openstack-keystone | 03:17 | |
*** markvoelker has joined #openstack-keystone | 03:24 | |
*** oikiki has quit IRC | 03:25 | |
*** oikiki has joined #openstack-keystone | 03:28 | |
*** links has joined #openstack-keystone | 03:32 | |
*** oikiki has quit IRC | 03:35 | |
*** markvoelker has quit IRC | 03:57 | |
*** aloga has quit IRC | 04:07 | |
*** jaosorior has joined #openstack-keystone | 04:21 | |
*** prashkre has quit IRC | 04:30 | |
*** edmondsw has joined #openstack-keystone | 04:52 | |
*** markvoelker has joined #openstack-keystone | 04:54 | |
*** edmondsw has quit IRC | 04:57 | |
*** markvoelker has quit IRC | 05:27 | |
*** raildo has quit IRC | 05:47 | |
*** oikiki has joined #openstack-keystone | 05:51 | |
*** spectr has joined #openstack-keystone | 05:56 | |
*** clayton has quit IRC | 06:16 | |
*** ppiela has quit IRC | 06:17 | |
*** ppiela_ has joined #openstack-keystone | 06:17 | |
*** rcernin has joined #openstack-keystone | 06:17 | |
*** clayton has joined #openstack-keystone | 06:18 | |
*** prashkre has joined #openstack-keystone | 06:22 | |
*** markvoelker has joined #openstack-keystone | 06:24 | |
*** pcaruana has joined #openstack-keystone | 06:24 | |
*** rcernin has quit IRC | 06:41 | |
*** links has quit IRC | 06:42 | |
*** rcernin has joined #openstack-keystone | 06:43 | |
*** markvoelker has quit IRC | 06:58 | |
*** links has joined #openstack-keystone | 06:59 | |
*** tesseract has joined #openstack-keystone | 07:25 | |
*** aloga has joined #openstack-keystone | 07:27 | |
*** links has quit IRC | 07:46 | |
*** markvoelker has joined #openstack-keystone | 07:54 | |
*** aloga has quit IRC | 07:58 | |
*** links has joined #openstack-keystone | 07:59 | |
*** prashkre has quit IRC | 08:10 | |
*** prashkre has joined #openstack-keystone | 08:28 | |
*** markvoelker has quit IRC | 08:28 | |
*** edmondsw has joined #openstack-keystone | 08:28 | |
*** edmondsw has quit IRC | 08:33 | |
*** daidv has quit IRC | 08:38 | |
*** aloga has joined #openstack-keystone | 08:51 | |
zigo | dims: Around? | 09:18 |
*** markvoelker has joined #openstack-keystone | 09:25 | |
*** spectr has quit IRC | 09:26 | |
*** oikiki has quit IRC | 09:33 | |
*** spectr has joined #openstack-keystone | 09:34 | |
*** spectr has quit IRC | 09:34 | |
*** spectr has joined #openstack-keystone | 09:36 | |
*** spectr has quit IRC | 09:36 | |
*** spectr has joined #openstack-keystone | 09:37 | |
*** spectr has quit IRC | 09:38 | |
*** spectr has joined #openstack-keystone | 09:40 | |
*** spectr has quit IRC | 09:40 | |
*** spectr has joined #openstack-keystone | 09:41 | |
*** spectr has quit IRC | 09:43 | |
*** spectr has joined #openstack-keystone | 09:43 | |
*** oikiki has joined #openstack-keystone | 09:52 | |
*** jamesbenson has joined #openstack-keystone | 09:53 | |
*** oikiki has quit IRC | 09:56 | |
*** spectr has quit IRC | 09:56 | |
*** spectr has joined #openstack-keystone | 09:57 | |
*** spectr has quit IRC | 09:57 | |
*** jamesbenson has quit IRC | 09:57 | |
*** spectr has joined #openstack-keystone | 09:58 | |
*** markvoelker has quit IRC | 09:58 | |
*** edmondsw has joined #openstack-keystone | 10:16 | |
*** edmondsw has quit IRC | 10:21 | |
dims | zigo : pong | 10:32 |
*** Dinesh_Bhor has quit IRC | 10:35 | |
*** markvoelker has joined #openstack-keystone | 10:56 | |
openstackgerrit | Merged openstack/keystone master: Remove admin_token_auth steps from install guide https://review.openstack.org/509293 | 11:04 |
*** namnh has quit IRC | 11:06 | |
*** nicolasbock has joined #openstack-keystone | 11:10 | |
*** nicolasbock_ has joined #openstack-keystone | 11:10 | |
*** nicolasbock_ has quit IRC | 11:15 | |
*** nicolasbock has quit IRC | 11:15 | |
*** dave-mccowan has joined #openstack-keystone | 11:20 | |
*** nicolasbock has joined #openstack-keystone | 11:27 | |
*** nicolasbock_ has joined #openstack-keystone | 11:27 | |
*** ricolin has joined #openstack-keystone | 11:28 | |
*** nicolasbock_ has quit IRC | 11:29 | |
*** nicolasbock has quit IRC | 11:29 | |
*** markvoelker has quit IRC | 11:29 | |
*** efried is now known as fried_rice | 11:35 | |
openstackgerrit | Merged openstack/keystone master: Update invalid url in admin docs https://review.openstack.org/502507 | 11:38 |
*** spectr has quit IRC | 12:02 | |
*** spectr has joined #openstack-keystone | 12:03 | |
*** edmondsw has joined #openstack-keystone | 12:05 | |
*** magicboiz has quit IRC | 12:09 | |
*** edmondsw has quit IRC | 12:09 | |
*** raildo has joined #openstack-keystone | 12:12 | |
*** d0ugal has quit IRC | 12:15 | |
*** nicolasbock has joined #openstack-keystone | 12:22 | |
*** markvoelker has joined #openstack-keystone | 12:26 | |
*** spectr has quit IRC | 12:28 | |
*** jdwidari has joined #openstack-keystone | 12:30 | |
*** markvoelker has quit IRC | 12:31 | |
*** markvoelker has joined #openstack-keystone | 12:31 | |
*** ayoung has quit IRC | 12:37 | |
*** spectr has joined #openstack-keystone | 12:39 | |
*** nicolasbock has quit IRC | 12:39 | |
*** erlon has joined #openstack-keystone | 12:41 | |
*** panbalag has joined #openstack-keystone | 12:44 | |
*** nicolasbock has joined #openstack-keystone | 12:51 | |
openstackgerrit | Merged openstack/keystone master: Remove the v2_deprecated decorator https://review.openstack.org/499785 | 12:58 |
*** rmascena has joined #openstack-keystone | 13:02 | |
fried_rice | kmalloc Care to throw an eyeball at https://review.openstack.org/#/c/500956/ ? | 13:03 |
*** raildo has quit IRC | 13:05 | |
*** nicolasbock has quit IRC | 13:05 | |
*** nicolasbock has joined #openstack-keystone | 13:05 | |
*** gema has joined #openstack-keystone | 13:07 | |
gema | I have a cloud configured to use LDAP for authentication. I am trying to figure out what ldap group is authorised to log into a project and cannot find instructions to the right command anywhere, any ideas? | 13:08 |
openstackgerrit | OpenStack Proposal Bot proposed openstack/keystonemiddleware master: Updated from global requirements https://review.openstack.org/500005 | 13:10 |
*** lbragstad has joined #openstack-keystone | 13:15 | |
*** ChanServ sets mode: +o lbragstad | 13:15 | |
*** dansmith is now known as superdan | 13:28 | |
*** jmlowe_ has quit IRC | 13:29 | |
*** jmlowe has joined #openstack-keystone | 13:30 | |
knikolla | o/ | 13:32 |
*** jmlowe_ has joined #openstack-keystone | 13:33 | |
knikolla | gema: you can do list the role assignments for a project with `openstack role assignment list --project <project>` | 13:34 |
*** spectr has quit IRC | 13:35 | |
*** jmlowe has quit IRC | 13:35 | |
lbragstad | o/ | 13:35 |
lbragstad | i think my irc client is giving me hell | 13:36 |
*** lbragstad has quit IRC | 13:36 | |
*** lbragstad has joined #openstack-keystone | 13:36 | |
*** ChanServ sets mode: +o lbragstad | 13:36 | |
*** spectr has joined #openstack-keystone | 13:36 | |
gema | knikolla: thanks! | 13:42 |
*** links has quit IRC | 13:48 | |
*** edmondsw has joined #openstack-keystone | 13:53 | |
*** jdwidari has quit IRC | 13:54 | |
*** edmondsw has quit IRC | 13:57 | |
fried_rice | lbragstad Care to throw an eyeball at https://review.openstack.org/#/c/500956/ ? | 13:58 |
lbragstad | fried_rice: yep - i can do that today | 13:58 |
fried_rice | thanx | 13:58 |
*** ayoung has joined #openstack-keystone | 13:59 | |
*** d0ugal has joined #openstack-keystone | 14:00 | |
*** lwanderley has joined #openstack-keystone | 14:00 | |
*** catintheroof has joined #openstack-keystone | 14:05 | |
*** catinthe_ has joined #openstack-keystone | 14:06 | |
*** catintheroof has quit IRC | 14:07 | |
samueldmq | gagehugo: lbragstad I get very confused in gerrit when I try to understand the chain in the project tags studd | 14:10 |
samueldmq | stuff | 14:10 |
samueldmq | it's not really clear, I prefer very much the old gerrit UI for project dependencies | 14:10 |
samueldmq | s/project/patch | 14:10 |
*** spectr has quit IRC | 14:11 | |
*** d0ugal has quit IRC | 14:15 | |
cmurphy | samueldmq: i'm pretty sure as long as jenkins and zuul are both reporting then you only need to listen to jenkins, no need to recheck for zuul failures | 14:16 |
cmurphy | e.g. for https://review.openstack.org/#/c/504433/ | 14:16 |
samueldmq | cmurphy: hmm interesting, I didn't know that, thanks | 14:18 |
samueldmq | cmurphy: approved it then | 14:19 |
cmurphy | samueldmq: http://lists.openstack.org/pipermail/openstack-dev/2017-October/123055.html | 14:21 |
samueldmq | ++ | 14:21 |
*** gyee has joined #openstack-keystone | 14:24 | |
*** panbalag has quit IRC | 14:27 | |
gagehugo | samueldmq yeah I'm not sure how to clarify the chain other than the gerrit ui | 14:28 |
samueldmq | gagehugo: I see migration -> backend -> manager -> controller + router | 14:29 |
gagehugo | that is correct | 14:29 |
samueldmq | that's kinda clear, but looks like there are some other patches around those | 14:29 |
gagehugo | yeah there is the policy and json schema stuff as well | 14:29 |
gagehugo | which the controller and manager rely on | 14:29 |
samueldmq | ok, I will make sure to have another pass on those today | 14:30 |
samueldmq | thanks | 14:30 |
*** panbalag has joined #openstack-keystone | 14:30 | |
*** d0ugal has joined #openstack-keystone | 14:32 | |
openstackgerrit | Gage Hugo proposed openstack/keystone master: Implement project tags API controller and router https://review.openstack.org/499728 | 14:35 |
*** jamesbenson has joined #openstack-keystone | 14:37 | |
*** rmascena is now known as raildo | 14:41 | |
*** spectr has joined #openstack-keystone | 15:04 | |
*** spectr has quit IRC | 15:04 | |
*** links has joined #openstack-keystone | 15:07 | |
dtroyer | Hey Keystone! How about something from the wayback machine? I am getting an exception in Mitaka-era keystone-manage bootstrap about 70% of the time I run it: http://paste.openstack.org/show/622848/ Is this a known problem? | 15:08 |
dtroyer | I will admit to using the modern mod_wsgi config and URIs, is that a problem? DevStack still used the old form then... | 15:08 |
dtroyer | also, using the Xenial packages directly from the ubuntu repo (not uca); this is an attempt to build a devstack-like cloud using just these packages | 15:14 |
*** rcernin has quit IRC | 15:19 | |
lbragstad | dtroyer: oh - interesting | 15:21 |
lbragstad | i don't think i've ever seen that | 15:21 |
lbragstad | were we using pymysql during the mitaka timeframe? | 15:21 |
dtroyer | yup, both the Ubuntu guide (https://docs.openstack.org/mitaka/install-guide-ubuntu/keystone-users.html) and devstack show it | 15:22 |
dtroyer | this is a bit of a hybrid between those two, using the package install but with devstack's config | 15:22 |
dtroyer | this may also be a mysql issue, it seems to work better the longer I wait after dropping the database | 15:23 |
lbragstad | that sounds like fun | 15:23 |
lbragstad | does it always happen when creating an endpoint? | 15:23 |
*** jaosorior has quit IRC | 15:24 | |
dtroyer | yes, always the same place in bootstrap | 15:24 |
lbragstad | so - it seems specific to the endpoint table | 15:24 |
lbragstad | at least | 15:24 |
openstackgerrit | Lance Bragstad proposed openstack/keystone master: Remove v2.0 identity API documentation https://review.openstack.org/509510 | 15:29 |
lbragstad | cc knikolla ^ | 15:30 |
*** prashkre has quit IRC | 15:30 | |
lbragstad | i responded to dave chen's comment there - which was related to your comment on the removal of index.rst | 15:30 |
knikolla | lbragstad: oh, i see. | 15:31 |
lbragstad | since y'all are here | 15:34 |
lbragstad | knikolla: cmurphy samueldmq gagehugo thoughts on https://review.openstack.org/#/c/509835/ ? | 15:34 |
lbragstad | hrybacki: ^ | 15:34 |
knikolla | lbragstad: i have the days off between christmas and new year | 15:36 |
lbragstad | ok - should we push feature proposal freeze a week earlier or a week later? | 15:36 |
knikolla | lbragstad: i defer that to the people who are working on the big features | 15:39 |
knikolla | though it's proposal freeze rather than feature freeze | 15:39 |
gagehugo | I doubt much work will get done that week | 15:39 |
knikolla | so my guess is it doesn't matter much | 15:39 |
*** edmondsw has joined #openstack-keystone | 15:41 | |
openstackgerrit | Merged openstack/keystonemiddleware master: Updates for stestr https://review.openstack.org/504433 | 15:42 |
lbragstad | knikolla: yeah - feature proposal is a pretty low bar | 15:44 |
lbragstad | also - thoughts on https://review.openstack.org/#/c/508611/ ? | 15:44 |
*** edmondsw has quit IRC | 15:45 | |
knikolla | lbragstad: i've always been used to doing `tox -e py27 -- something` so it doesn't make much of a difference to me. | 15:46 |
knikolla | regarding the single quotes. ^^ | 15:47 |
knikolla | take my +2 | 15:47 |
*** ayoung has quit IRC | 15:49 | |
lbragstad | knikolla: sweet | 15:50 |
lbragstad | knikolla: thanks! | 15:50 |
openstackgerrit | Merged openstack/keystone master: Replace assertRegexpMatches with assertregex https://review.openstack.org/504873 | 16:10 |
openstackgerrit | Merged openstack/keystone master: Update links in keystone https://review.openstack.org/501589 | 16:10 |
*** pcaruana has quit IRC | 16:13 | |
*** mnaser has joined #openstack-keystone | 16:13 | |
mnaser | hi everyone .. im going over a few puppet openstack reviews about adding user domain and project domain to our configs to "Default" | 16:13 |
mnaser | i'm seeing that the default bootstrapped keystone domain is "default" (lowercase) | 16:13 |
mnaser | but i've seen a lot of "Default" references, is there some magic that happens there? | 16:14 |
mnaser | https://github.com/openstack/keystone/blob/b3e47e05c6e49729869bf73967668a73bbb32b38/keystone/cmd/cli.py#L180-L186 | 16:17 |
mnaser | so in fact it adds a "Default" in uppercase | 16:17 |
cmurphy | mnaser: Default is the name of the domain and default is the id of the domain | 16:17 |
samueldmq | lbragstad: I have comments in https://review.openstack.org/#/c/508611 | 16:18 |
samueldmq | let me know if they don't make sense | 16:18 |
cmurphy | mnaser: your configs could also use *_domain_id=default and it would be the same | 16:18 |
*** fried_rice is now known as fried_rice_afk | 16:18 | |
lbragstad | samueldmq: https://github.com/openstack/keystone/blob/master/.gitignore#L33 | 16:18 |
samueldmq | lbragstad: so we migrated already? | 16:18 |
lbragstad | mnaser: i believe one is the name and the other is the id | 16:18 |
*** jamesbenson has quit IRC | 16:18 | |
lbragstad | samueldmq: yeah - gagehugo did that a while ago | 16:18 |
samueldmq | and only the .tox bits are left | 16:18 |
mnaser | lbragstad cmurphy cool, thank you so much | 16:19 |
gagehugo | I was curious why the regex wasn't working | 16:20 |
gagehugo | that explained it | 16:20 |
lbragstad | gagehugo: yeah - i kept doing tox -- path.to.some.TestModule.test_case | 16:21 |
samueldmq | lbragstad: gagehugo :-) | 16:21 |
lbragstad | and it kept running all the tests | 16:21 |
gagehugo | yeah | 16:21 |
gagehugo | same | 16:21 |
lbragstad | i paced for a while, cooled down, and then started digging | 16:22 |
ricolin | lbragstad, Hi my patches are updated with your comment please help me review it if you got free time https://review.openstack.org/#/c/502386 | 16:28 |
*** dikonoor has quit IRC | 16:28 | |
lbragstad | ricolin: awesome - i should be able to review those today | 16:29 |
ricolin | lbragstad, cheers! | 16:30 |
lbragstad | ricolin: thanks for pulling that together, that chain should be all the bits required for heat, yeah? | 16:31 |
ricolin | yep:) | 16:32 |
lbragstad | ricolin: cool - i'll propose a patch to add your planning documents and implementation to the community goal | 16:32 |
ricolin | lbragstad, cool, let me know if any others we should also add in:) | 16:34 |
lbragstad | ricolin: https://review.openstack.org/#/c/510179/ | 16:36 |
lbragstad | ricolin: also - i'm not seeing it in the current patches, but you could use all that work to generate sample policy files for your documentation | 16:36 |
lbragstad | like we did here - https://docs.openstack.org/keystone/latest/configuration/policy.html | 16:36 |
lbragstad | and https://docs.openstack.org/keystone/latest/configuration/samples/policy-yaml.html | 16:36 |
ricolin | lbragstad, that's also done in new patches:) | 16:37 |
lbragstad | ricolin: oh - i just missed it the | 16:37 |
*** lwanderley has quit IRC | 16:37 | |
lbragstad | then* | 16:37 |
ricolin | lbragstad, should be in part 1:) | 16:37 |
lbragstad | https://review.openstack.org/#/c/502386/4 > | 16:37 |
lbragstad | ? | 16:38 |
*** dikonoor has joined #openstack-keystone | 16:38 | |
ricolin | lbragstad, yeah, the heat-policy-generator right? | 16:38 |
lbragstad | yeah - that's there | 16:39 |
lbragstad | i'm thinking something like https://review.openstack.org/#/c/458677/ | 16:39 |
lbragstad | where you can generate samples based on your in-code policy default and put them in https://github.com/openstack/heat/tree/master/doc | 16:39 |
ricolin | oh, okay I can insert that in chain | 16:39 |
lbragstad | ricolin: the nice part is that doesn't have to go in last or anything like that | 16:40 |
lbragstad | new policies will get generated when they are converted | 16:40 |
ricolin | cool | 16:41 |
*** aselius has joined #openstack-keystone | 16:51 | |
*** jamesbenson has joined #openstack-keystone | 16:52 | |
*** knikolla has left #openstack-keystone | 16:53 | |
*** knikolla has joined #openstack-keystone | 16:53 | |
openstackgerrit | Lance Bragstad proposed openstack/oslo.policy master: Add functionality to deprecate policies https://review.openstack.org/509909 | 16:56 |
lbragstad | dims: ^ updated | 16:57 |
dims | LGTM links | 16:59 |
dims | LGTM lbragstad :) | 16:59 |
*** melwitt is now known as jgwentworth | 17:02 | |
*** openstackstatus has quit IRC | 17:05 | |
*** openstack has joined #openstack-keystone | 17:05 | |
*** ChanServ sets mode: +o openstack | 17:05 | |
*** openstackstatus has joined #openstack-keystone | 17:06 | |
*** ChanServ sets mode: +v openstackstatus | 17:06 | |
openstackgerrit | Merged openstack/keystoneauth master: Add version discovery support to BaseAuthPlugin https://review.openstack.org/500956 | 17:11 |
lbragstad | dims: sweet - thanks! | 17:11 |
*** panbalag has quit IRC | 17:12 | |
*** swain has joined #openstack-keystone | 17:22 | |
ricolin | lbragstad, sorry not sure I understand your question in https://review.openstack.org/#/c/505358/3/heat/common/policy.py | 17:23 |
lbragstad | ricolin: i probably didn't make sense | 17:25 |
lbragstad | what is is_registered_policy designed to do? | 17:25 |
ricolin | to help for backwards can still act as their old behavior | 17:26 |
lbragstad | for backwards compatibility? | 17:26 |
ricolin | is_registered_policy mark as true will use policy in code | 17:26 |
lbragstad | shouldn't that happen by default? | 17:27 |
*** prashkre has joined #openstack-keystone | 17:28 | |
lbragstad | ricolin: up today - all policies have to be defined in a policy.json or policy.yaml file, right? | 17:29 |
lbragstad | up to today* | 17:29 |
*** edmondsw has joined #openstack-keystone | 17:29 | |
ricolin | that's default for new code in heat(every where I using that function I flag `is_registered_policy`) but consider there might be other extend services depend on the behavior of that enforce function | 17:29 |
ricolin | yes | 17:29 |
lbragstad | other extended services? | 17:30 |
lbragstad | that's probably the bit i'm missing | 17:30 |
lbragstad | ricolin: do you have an example? | 17:30 |
lbragstad | specifically an example of how is_registered_policy prevents backwards incompatible breakages? | 17:30 |
*** links has quit IRC | 17:32 | |
*** edmondsw has quit IRC | 17:33 | |
ricolin | not a signal one from me actually, but since we mark it as common lib, just thinking there might be a chances that other (unknown services) also use that for their own api checking | 17:33 |
lbragstad | ahh | 17:33 |
ricolin | or maybe I just worry to much | 17:34 |
lbragstad | well - you understand that code better than i do | 17:34 |
lbragstad | i was just curious because i haven't really seem infrastructure like that required for policy changes yet | 17:35 |
lbragstad | but - at the same time, everyone's policy seems to be a little different | 17:36 |
ricolin | Anyway I will keep checking that part with others from team and see if they think we can just get rid of all old patterns in fallow up patch | 17:39 |
lbragstad | ok - sounds good | 17:40 |
lbragstad | i had another comment on a set of policies that didn't have operations defined | 17:40 |
lbragstad | in that case, you might be able to get away with just using RuleDefault objects instead of DocumentedRuleDefault | 17:40 |
ricolin | yeah, so resource type didn't have, I'm changing it back to use RuleDefault now | 17:40 |
lbragstad | cool | 17:41 |
ricolin | also we have some AWS cfn and cloudwatch resources which IMO maybe we can move to use RuleDefault too? | 17:41 |
*** oomichi_afk is now known as oomichi | 17:44 | |
*** prashkre_ has joined #openstack-keystone | 17:55 | |
*** prashkre has quit IRC | 17:56 | |
*** lwanderley has joined #openstack-keystone | 17:56 | |
*** lwanderley has quit IRC | 17:56 | |
*** esp has joined #openstack-keystone | 18:07 | |
*** lbragstad has quit IRC | 18:16 | |
*** lbragstad has joined #openstack-keystone | 18:25 | |
*** ChanServ sets mode: +o lbragstad | 18:25 | |
*** aahh has joined #openstack-keystone | 18:26 | |
aahh | hi , when we try to lookup a project that doesnt exist , we get an error like this " WARNING keystone.common.wsgi [req-da938f24-4059-4372-9111-f3eda770fead - - - - -] Could not find project: testing project" | 18:27 |
aahh | which part of the code is triggering this ?? | 18:27 |
lbragstad | aahh: probably https://github.com/openstack/keystone/blob/master/keystone/resource/core.py#L835 | 18:30 |
lbragstad | or one of its variants | 18:30 |
*** oikiki has joined #openstack-keystone | 18:30 | |
*** ricolin has quit IRC | 18:30 | |
*** afred312 has joined #openstack-keystone | 18:32 | |
aahh | never mind , i think i got it. thanks @lbragstad | 18:36 |
lbragstad | aahh: yep | 18:36 |
*** clenimar has joined #openstack-keystone | 18:37 | |
*** jessegler has joined #openstack-keystone | 18:44 | |
*** prashkre_ has quit IRC | 18:44 | |
openstackgerrit | Merged openstack/keystone master: Remove v2.0 identity API documentation https://review.openstack.org/509510 | 18:49 |
openstackgerrit | OpenStack Proposal Bot proposed openstack/keystonemiddleware master: Updated from global requirements https://review.openstack.org/500005 | 18:52 |
openstackgerrit | OpenStack Proposal Bot proposed openstack/pycadf master: Updated from global requirements https://review.openstack.org/470137 | 19:00 |
*** chlong has joined #openstack-keystone | 19:06 | |
*** edmondsw has joined #openstack-keystone | 19:17 | |
*** afred312 has quit IRC | 19:20 | |
*** edmondsw has quit IRC | 19:22 | |
fried_rice_afk | lbragstad Thanks for that review sir. Any idea when the next ksa release is scheduled? | 19:25 |
*** tesseract has quit IRC | 19:31 | |
openstackgerrit | Lance Bragstad proposed openstack/oslo.policy master: Add scope_types to RuleDefault objects https://review.openstack.org/510222 | 19:32 |
lbragstad | fried_rice_afk: i don't think we're waiting on anything else, so we can probably release whenever | 19:32 |
lbragstad | dims: ^ | 19:32 |
*** fried_rice_afk is now known as fried_rice | 19:32 | |
lbragstad | dims: another oslo_policy review for you :) | 19:32 |
fried_rice | lbragstad Actually, it would be nice if https://review.openstack.org/#/c/491947/ could be included. But I got stuck trying to figure out UT for that guy. Know anyone who's an expert with this requests_mock business? | 19:33 |
fried_rice | and specifically the crazy UT on identity base? | 19:34 |
lbragstad | fried_rice: jamielennox probably does, but it might be hit or miss on availability | 19:37 |
fried_rice | lbragstad Didn't I hear he was, like, retiring or something? | 19:38 |
lbragstad | fried_rice: switching roles | 19:38 |
fried_rice | lbragstad Monty actually agreed to look at it, but has had more important things on his mind :) | 19:38 |
lbragstad | http://lists.openstack.org/pipermail/openstack-dev/2017-October/123001.html | 19:39 |
lbragstad | kmalloc: scope_types patch for oslo.policy is up | 19:41 |
*** jessegler has quit IRC | 19:45 | |
*** jessegler has joined #openstack-keystone | 19:53 | |
*** aahh has quit IRC | 19:53 | |
*** lbragstad changes topic to "Queens release schedule: https://releases.openstack.org/queens/schedule.html | Meeting agenda: https://etherpad.openstack.org/p/keystone-weekly-meeting | Bugs that need triaging: http://bit.ly/2iJuN1h | Trello: https://trello.com/b/5F0h9Hoe/keystone" | 19:58 | |
*** raildo has quit IRC | 20:01 | |
*** john5223_ has joined #openstack-keystone | 20:02 | |
jessegler | I pulled python-keystoneclient stable/newton and tried to run the unit tests. They're failing for me because it's using some packages that are too new. I've updated tox.ini to use upper constraints similar to ocata/pike/etc. Should I create a patch for this? I know stable/newton is EOL'ing soon. | 20:06 |
*** swain has quit IRC | 20:12 | |
lbragstad | jessegler: you could create a patch - but newton EOLs on Wednesday https://releases.openstack.org/ | 20:14 |
lbragstad | i doubt it will be reviewed, merged, and released by then :( | 20:15 |
jessegler | Yeah, that's why I was asking. :) | 20:18 |
knikolla | i'm so looking forward to not having anymore the case where i help people with some issue and the issue is /v2.0 and export OS_IDENTITY_API_VERSION=2 in their rc file. | 20:26 |
*** catinthe_ has quit IRC | 20:28 | |
*** spectr has joined #openstack-keystone | 20:34 | |
*** spectr has quit IRC | 20:36 | |
*** david-lyle has quit IRC | 20:38 | |
*** aahh has joined #openstack-keystone | 20:41 | |
aahh | hi @lbgragstad : am trying to create a project like this by calling the resource api , self.resource_api.create_project(project_id,project_name) | 20:42 |
aahh | but i get an error 'str' object has no attribute 'copy' | 20:42 |
aahh | i | 20:42 |
aahh | i | 20:42 |
aahh | i | 20:42 |
aahh | i | 20:42 |
aahh | i | 20:42 |
aahh | i | 20:42 |
aahh | i | 20:42 |
aahh | i | 20:42 |
aahh | i | 20:42 |
*** aahh has quit IRC | 20:42 | |
*** aahh has joined #openstack-keystone | 20:43 | |
dims | @lbragstad : on a roll :) | 20:44 |
aahh | @lbragstad : while creating the project using the resource api , it fails with the error messge "str attribute has no copy" probably coming from the file | 20:44 |
aahh | https://github.com/openstack/keystone/blob/master/keystone/resource/core.py#L179 | 20:44 |
lbragstad | aahh: you need to make sure you're passing a dict object to that method | 20:45 |
lbragstad | project is a dictionary | 20:46 |
lbragstad | project_id is a string representatin of the id | 20:46 |
*** dikonoor has quit IRC | 20:52 | |
*** aojea has joined #openstack-keystone | 20:55 | |
*** edmondsw has joined #openstack-keystone | 21:05 | |
*** aahh has quit IRC | 21:06 | |
lbragstad | this one is looking good | 21:07 |
lbragstad | https://review.openstack.org/#/c/486757/23 | 21:07 |
*** edmondsw has quit IRC | 21:10 | |
*** marst has quit IRC | 21:15 | |
*** david-lyle has joined #openstack-keystone | 21:19 | |
*** dklyle has joined #openstack-keystone | 21:39 | |
*** david-lyle has quit IRC | 21:41 | |
*** dklyle has quit IRC | 21:41 | |
*** dklyle has joined #openstack-keystone | 21:42 | |
*** lbragstad has quit IRC | 21:43 | |
*** dklyle has quit IRC | 21:52 | |
*** aselius has quit IRC | 21:53 | |
*** jamesbenson has quit IRC | 21:55 | |
*** jamesbenson has joined #openstack-keystone | 21:56 | |
*** jamesbenson has quit IRC | 21:58 | |
openstackgerrit | Merged openstack/keystone master: Add database migration for project tags https://review.openstack.org/484456 | 21:59 |
openstackgerrit | Tin Lam proposed openstack/keystonemiddleware master: [WIP] Fix py3 byte/string error https://review.openstack.org/510241 | 22:04 |
*** jgwentworth is now known as melwitt | 22:08 | |
*** chlong has quit IRC | 22:14 | |
*** aojea has quit IRC | 22:18 | |
*** erlon has quit IRC | 22:30 | |
*** aahh has joined #openstack-keystone | 22:31 | |
aahh | can we get domain name from domain id | 22:31 |
*** edmondsw has joined #openstack-keystone | 22:53 | |
*** edmondsw has quit IRC | 22:58 | |
*** aahh has quit IRC | 23:02 | |
*** jessegler has quit IRC | 23:07 | |
*** jamesbenson has joined #openstack-keystone | 23:14 | |
*** jamesbenson has quit IRC | 23:18 | |
*** aselius has joined #openstack-keystone | 23:27 | |
*** david-lyle has joined #openstack-keystone | 23:42 | |
*** harlowja has quit IRC | 23:45 | |
*** markvoelker has quit IRC | 23:54 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!