*** itlinux has quit IRC | 00:37 | |
*** itlinux has joined #openstack-keystone | 00:56 | |
*** itlinux has quit IRC | 01:06 | |
SamYaple | im about to play with keystone tokenless auth with x509 certs. does anyone actively use this? have any pitfails you could point out for me to avoid? | 01:09 |
---|---|---|
openstackgerrit | Adrian Turjak proposed openstack/keystone master: Make name fields a consistent size of 255 https://review.openstack.org/440941 | 01:09 |
SamYaple | end goal is to use k8s and vault to generate these and pull passwords out of the config files | 01:09 |
SamYaple | (mostly) | 01:10 |
*** Anticimex has quit IRC | 01:14 | |
*** Anticimex has joined #openstack-keystone | 01:15 | |
openstackgerrit | Adrian Turjak proposed openstack/keystone master: Make name fields a consistent size of 255 https://review.openstack.org/440941 | 01:19 |
*** itlinux has joined #openstack-keystone | 01:30 | |
*** panbalag has joined #openstack-keystone | 01:31 | |
*** lbragstad has joined #openstack-keystone | 01:45 | |
*** ChanServ sets mode: +o lbragstad | 01:45 | |
*** panbalag has quit IRC | 01:52 | |
*** daidv has joined #openstack-keystone | 02:21 | |
*** annp has joined #openstack-keystone | 03:01 | |
*** dave-mccowan has quit IRC | 03:39 | |
*** rcernin has quit IRC | 03:50 | |
*** rcernin has joined #openstack-keystone | 03:52 | |
*** links has joined #openstack-keystone | 04:13 | |
*** gmann is now known as gmann_lunch | 04:35 | |
*** d0ugal_ has joined #openstack-keystone | 05:30 | |
*** d0ugal has quit IRC | 05:32 | |
*** sticker has quit IRC | 05:35 | |
*** rcernin has quit IRC | 05:38 | |
*** threestrands has quit IRC | 06:03 | |
*** hoonetorg has quit IRC | 06:41 | |
*** hoonetorg has joined #openstack-keystone | 06:54 | |
*** itlinux has quit IRC | 07:15 | |
*** d0ugal_ has quit IRC | 07:31 | |
*** nsingh has quit IRC | 07:35 | |
*** nsingh has joined #openstack-keystone | 07:35 | |
*** belmoreira has joined #openstack-keystone | 07:38 | |
*** AlexeyAbashkin has joined #openstack-keystone | 07:47 | |
*** pcaruana has joined #openstack-keystone | 08:04 | |
*** niraj_singh has joined #openstack-keystone | 08:05 | |
*** nsingh has quit IRC | 08:05 | |
*** josecastroleon has joined #openstack-keystone | 08:08 | |
*** d0ugal_ has joined #openstack-keystone | 08:14 | |
*** aojea has joined #openstack-keystone | 08:14 | |
*** aojea has quit IRC | 08:19 | |
*** magicboiz has joined #openstack-keystone | 08:27 | |
*** gmann_lunch is now known as gmann | 08:42 | |
*** d0ugal_ has quit IRC | 08:53 | |
*** d0ugal has joined #openstack-keystone | 08:53 | |
*** d0ugal has quit IRC | 08:53 | |
*** d0ugal has joined #openstack-keystone | 08:53 | |
*** belmoreira has quit IRC | 08:58 | |
*** spectr has joined #openstack-keystone | 09:07 | |
*** spectr has quit IRC | 09:07 | |
*** spectr has joined #openstack-keystone | 09:11 | |
*** spectr has quit IRC | 09:12 | |
*** hoonetorg has quit IRC | 09:13 | |
*** d0ugal has quit IRC | 09:24 | |
*** d0ugal has joined #openstack-keystone | 09:25 | |
*** magicboiz has quit IRC | 09:25 | |
*** magicboiz has joined #openstack-keystone | 09:27 | |
*** magicboiz has quit IRC | 09:32 | |
openstackgerrit | Merged openstack/oslo.policy master: Updated from global requirements https://review.openstack.org/520490 | 09:35 |
*** gmann is now known as gmann_afk | 09:37 | |
*** magicboiz has joined #openstack-keystone | 09:39 | |
*** belmoreira has joined #openstack-keystone | 09:52 | |
*** annp has quit IRC | 10:03 | |
*** magicboiz has quit IRC | 10:18 | |
*** ma9_ has joined #openstack-keystone | 10:20 | |
ma9_ | Hi! We have an openstakc using Keystone v3 with domains. In this case Swift requires me to configure ACLs using IDs, not usernames. The problem is that my tenants are not able to see the IDs of the users which belong to their project. How go get around this? Do we need to enable list_users in the Keystone policy.json? | 10:21 |
ma9_ | is there a way to see who are the users in the project you belong to, if you're not admin? | 10:22 |
*** magicboiz has joined #openstack-keystone | 10:22 | |
*** magicboiz has quit IRC | 10:26 | |
*** jaosorior has joined #openstack-keystone | 10:30 | |
*** magicboiz has joined #openstack-keystone | 10:33 | |
*** kmalloc has joined #openstack-keystone | 11:01 | |
*** szaher has quit IRC | 11:02 | |
*** belmoreira has quit IRC | 11:21 | |
*** openstackgerrit has quit IRC | 11:32 | |
*** magicboiz has quit IRC | 11:47 | |
*** magicboiz has joined #openstack-keystone | 11:48 | |
*** szaher has joined #openstack-keystone | 11:51 | |
*** d0ugal has quit IRC | 11:51 | |
*** d0ugal has joined #openstack-keystone | 11:53 | |
*** magicboiz has quit IRC | 11:55 | |
*** magicboiz has joined #openstack-keystone | 11:55 | |
*** raildo has joined #openstack-keystone | 11:59 | |
*** belmoreira has joined #openstack-keystone | 12:06 | |
*** efried_zzz is now known as efried | 12:09 | |
*** openstackgerrit has joined #openstack-keystone | 12:13 | |
openstackgerrit | Juan Antonio Osorio Robles proposed openstack/keystone master: Populate user, project and domain names from token into context https://review.openstack.org/518751 | 12:13 |
*** links has quit IRC | 12:31 | |
*** josecastroleon has quit IRC | 12:59 | |
*** ma9_ has quit IRC | 12:59 | |
*** ma9_ has joined #openstack-keystone | 13:01 | |
*** ma9_1 has joined #openstack-keystone | 13:02 | |
*** ma9_ has quit IRC | 13:05 | |
*** aojea has joined #openstack-keystone | 13:07 | |
*** josecastroleon has joined #openstack-keystone | 13:16 | |
*** links has joined #openstack-keystone | 13:18 | |
*** markvoelker has quit IRC | 13:23 | |
*** markvoelker has joined #openstack-keystone | 13:24 | |
*** aojea has quit IRC | 13:29 | |
*** dave-mccowan has joined #openstack-keystone | 13:36 | |
*** dave-mcc_ has joined #openstack-keystone | 13:46 | |
*** dave-mccowan has quit IRC | 13:48 | |
*** josecastroleon has quit IRC | 13:56 | |
*** josecastroleon has joined #openstack-keystone | 14:14 | |
*** ayoung has joined #openstack-keystone | 14:15 | |
*** josecastroleon has quit IRC | 14:32 | |
*** belmoreira has quit IRC | 14:34 | |
*** ma9_1 has quit IRC | 14:35 | |
*** jdennis has joined #openstack-keystone | 14:36 | |
*** ma9_ has joined #openstack-keystone | 14:37 | |
*** panbalag has joined #openstack-keystone | 14:38 | |
*** spilla has joined #openstack-keystone | 14:50 | |
knikolla | o/ | 14:57 |
lbragstad | o/ | 14:57 |
*** links has quit IRC | 15:01 | |
*** dave-mcc_ is now known as dave-mccowan | 15:06 | |
*** ma9_ has left #openstack-keystone | 15:10 | |
*** ma9_ has joined #openstack-keystone | 15:10 | |
*** links has joined #openstack-keystone | 15:13 | |
*** aloga has quit IRC | 15:15 | |
*** aloga has joined #openstack-keystone | 15:16 | |
cmurphy | ohai o/ | 15:19 |
* cmurphy back in the right timezone | 15:19 | |
lbragstad | cmurphy: were you in sydney this whole time?! | 15:19 |
cmurphy | lbragstad: got home Saturday | 15:20 |
lbragstad | wow - nice | 15:20 |
lbragstad | cmurphy: see anything cool over the last week? | 15:20 |
cmurphy | lbragstad: wasn't Sydney the whole time, went to a few places northward | 15:21 |
cmurphy | lbragstad: I did! | 15:21 |
cmurphy | I went scuba diving at the great barrier reef | 15:21 |
cmurphy | was amazing | 15:21 |
* lbragstad is jealous | 15:22 | |
cmurphy | and I saw wild kangaroos and koalas | 15:22 |
lbragstad | so did you make it all the way up to brisbane? | 15:22 |
cmurphy | lbragstad: yep, and from there went to the gold coast and north stradbroke island and cairns | 15:23 |
lbragstad | how different is all of that from sydney? | 15:23 |
lbragstad | i expected it to be quite different, but we never made it that far | 15:23 |
cmurphy | all pretty different | 15:24 |
cmurphy | check out these crazy things i found on the beach at the gold coast https://photos.app.goo.gl/VV33Ez1zu8t2tQ4I2 | 15:24 |
*** d0ugal has quit IRC | 15:24 | |
lbragstad | whoa - that's like something you see out of stranger thiunsg | 15:25 |
lbragstad | things* | 15:25 |
cmurphy | ikr | 15:25 |
lbragstad | what was it? | 15:25 |
cmurphy | i think it's this https://en.wikipedia.org/wiki/Glaucus_atlanticus | 15:25 |
*** d0ugal has joined #openstack-keystone | 15:27 | |
*** links has quit IRC | 15:27 | |
lbragstad | interesting | 15:27 |
lbragstad | i still need to process all my photos | 15:28 |
cmurphy | what did you end up doing in sydney? | 15:28 |
lbragstad | i had meetings on thursday but after that we went to the domains and the rocks, then we did the royal botanic gardens (which was amazing) | 15:29 |
lbragstad | saturday we walked bondi to south coogee | 15:29 |
cmurphy | nice | 15:30 |
lbragstad | yeah - that was a lot of fun | 15:30 |
lbragstad | this is the only picture i've really had time to publish yet - https://www.lbragstad.com/blog/openstack-summit-sydney-recap | 15:30 |
lbragstad | but that was from the royal botanic gardens | 15:31 |
lbragstad | i could have spent another day there | 15:31 |
lbragstad | just in the gardens | 15:31 |
cmurphy | that's a pretty cool photo | 15:31 |
lbragstad | do you like google photos? | 15:33 |
cmurphy | i don't really like it for sharing albums but my android syncs there automatically so it's good for sharing oneoffs | 15:36 |
lbragstad | ah - yeah | 15:38 |
lbragstad | now that we have a dslr - i'm kinda shopping around for some sort of photo storage/sharing service | 15:38 |
cmurphy | google photos is fine for that, i just don't end up using it much since i tend to just post to facebook | 15:41 |
*** jdennis has quit IRC | 15:43 | |
*** edmondsw has joined #openstack-keystone | 15:47 | |
lbragstad | yeah | 15:48 |
*** mvk has quit IRC | 15:51 | |
*** panbalag has left #openstack-keystone | 15:52 | |
*** hoonetorg has joined #openstack-keystone | 15:58 | |
*** itlinux has joined #openstack-keystone | 16:00 | |
*** jmlowe has joined #openstack-keystone | 16:00 | |
*** jdennis has joined #openstack-keystone | 16:01 | |
*** ma9_1 has joined #openstack-keystone | 16:22 | |
*** josecastroleon has joined #openstack-keystone | 16:23 | |
*** _ix has joined #openstack-keystone | 16:24 | |
*** AlexeyAbashkin has quit IRC | 16:25 | |
*** Sandy619 has joined #openstack-keystone | 16:25 | |
*** ma9_ has quit IRC | 16:25 | |
*** josecastroleon has quit IRC | 16:28 | |
*** Sandy619 has quit IRC | 16:30 | |
*** Sandy619 has joined #openstack-keystone | 16:31 | |
*** pcaruana has quit IRC | 16:35 | |
*** josecastroleon has joined #openstack-keystone | 16:36 | |
*** ma9_1 has quit IRC | 16:37 | |
jaosorior | rodrigods, lbragstad: Could you revisit this patch https://review.openstack.org/#/c/518751/ ? | 16:49 |
*** itlinux has quit IRC | 16:53 | |
*** itlinux has joined #openstack-keystone | 16:54 | |
*** Sandy619 has quit IRC | 17:03 | |
*** aojea has joined #openstack-keystone | 17:03 | |
lbragstad | jaosorior: yep - i can review that today | 17:21 |
jaosorior | thanks | 17:22 |
*** aojea has quit IRC | 17:33 | |
*** aojea has joined #openstack-keystone | 17:36 | |
*** edmondsw has quit IRC | 17:37 | |
*** aojea has quit IRC | 17:37 | |
*** aojea has joined #openstack-keystone | 17:37 | |
*** edmondsw has joined #openstack-keystone | 17:38 | |
*** aojea has quit IRC | 17:42 | |
*** edmondsw has quit IRC | 17:42 | |
*** efried is now known as efried_rollin | 17:44 | |
*** pcaruana has joined #openstack-keystone | 18:00 | |
*** panbalag has joined #openstack-keystone | 18:19 | |
*** panbalag has quit IRC | 18:21 | |
lbragstad | mordred: cmurphy i attempted to parse the current app cred proposal and highlight bits that need to be updated based on the discussions from the PTG and forum https://review.openstack.org/#/c/512505/ | 18:35 |
lbragstad | let me know if those make sense or if i'm off in left field | 18:36 |
cmurphy | lbragstad: thanks - i plan on looking at it on wednesday | 18:40 |
mordred | lbragstad: woot - thanks! | 18:44 |
*** rmcall_ has joined #openstack-keystone | 18:52 | |
*** rmcall_ has quit IRC | 18:58 | |
*** spilla has quit IRC | 19:02 | |
*** itlinux has quit IRC | 19:03 | |
*** aojea has joined #openstack-keystone | 19:07 | |
*** aojea has quit IRC | 19:07 | |
*** aselius has joined #openstack-keystone | 19:08 | |
*** aojea has joined #openstack-keystone | 19:08 | |
*** aojea has quit IRC | 19:12 | |
*** spilla has joined #openstack-keystone | 19:16 | |
*** aojea has joined #openstack-keystone | 19:18 | |
kmalloc | lbragstad: i... i think i commented let me make sure i published | 19:26 |
*** itlinux has joined #openstack-keystone | 19:31 | |
*** jmlowe has quit IRC | 19:37 | |
*** aojea has quit IRC | 19:38 | |
lbragstad | cmurphy: good deal | 19:40 |
* lbragstad goes off to review unified limits | 19:41 | |
*** panbalag has joined #openstack-keystone | 19:55 | |
*** panbalag has left #openstack-keystone | 19:55 | |
*** rmascena has joined #openstack-keystone | 20:29 | |
*** edmondsw has joined #openstack-keystone | 20:29 | |
*** raildo has quit IRC | 20:31 | |
*** edmondsw has quit IRC | 20:33 | |
lbragstad | wxy_: reviewed https://review.openstack.org/#/c/455709/ thanks for updating! | 20:34 |
*** pcaruana has quit IRC | 20:39 | |
*** efried_rollin is now known as efried | 20:43 | |
*** rmascena has quit IRC | 20:46 | |
*** spilla has quit IRC | 20:55 | |
*** panbalag has joined #openstack-keystone | 20:57 | |
*** panbalag has left #openstack-keystone | 20:57 | |
openstackgerrit | Lance Bragstad proposed openstack/keystone-specs master: Specification for system roles https://review.openstack.org/464763 | 21:01 |
*** deepika08 has joined #openstack-keystone | 21:07 | |
*** AlexeyAbashkin has joined #openstack-keystone | 21:12 | |
*** AlexeyAbashkin has quit IRC | 21:17 | |
*** dave-mccowan has quit IRC | 21:18 | |
*** McClymontS has joined #openstack-keystone | 21:30 | |
*** McClymontS has quit IRC | 21:33 | |
*** aojea has joined #openstack-keystone | 21:38 | |
*** aojea has quit IRC | 21:43 | |
*** linkmark has joined #openstack-keystone | 21:45 | |
*** rcernin has joined #openstack-keystone | 21:48 | |
*** itlinux has quit IRC | 22:01 | |
*** itlinux has joined #openstack-keystone | 22:04 | |
*** mvk has joined #openstack-keystone | 22:14 | |
*** edmondsw has joined #openstack-keystone | 22:17 | |
*** edmondsw has quit IRC | 22:22 | |
*** spilla has joined #openstack-keystone | 22:33 | |
*** spilla has quit IRC | 22:40 | |
*** aojea has joined #openstack-keystone | 22:48 | |
*** itlinux has quit IRC | 22:49 | |
*** itlinux has joined #openstack-keystone | 22:50 | |
*** d0ugal has quit IRC | 22:50 | |
*** lbragstad has quit IRC | 22:51 | |
*** aojea has quit IRC | 22:54 | |
*** lbragstad has joined #openstack-keystone | 23:04 | |
*** ChanServ sets mode: +o lbragstad | 23:04 | |
*** d0ugal has joined #openstack-keystone | 23:07 | |
*** jrist is now known as jrist-afk | 23:13 | |
*** d0ugal has quit IRC | 23:24 | |
*** linkmark has quit IRC | 23:38 | |
breton | unified limits? | 23:51 |
breton | the thing is still alive? | 23:52 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!