| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystoneauth master: Updated from global requirements https://review.openstack.org/523736 | 00:22 |
|---|---|---|
| *** tlam__ has joined #openstack-keystone | 00:27 | |
| *** tlam_ has quit IRC | 00:27 | |
| *** tlam__ has quit IRC | 00:34 | |
| *** tlam_ has joined #openstack-keystone | 00:45 | |
| *** aojea has joined #openstack-keystone | 01:06 | |
| *** aojea has quit IRC | 01:11 | |
| *** edmondsw has joined #openstack-keystone | 01:21 | |
| *** edmondsw has quit IRC | 01:26 | |
| *** threestrands has joined #openstack-keystone | 01:51 | |
| *** threestrands has quit IRC | 01:51 | |
| *** threestrands has joined #openstack-keystone | 01:51 | |
| *** jappleii__ has quit IRC | 01:52 | |
| *** tommylikehu_ has joined #openstack-keystone | 02:04 | |
| *** kmARC_ has joined #openstack-keystone | 02:04 | |
| *** hrybacki_ has joined #openstack-keystone | 02:04 | |
| *** mvk has quit IRC | 02:07 | |
| *** harlowja has quit IRC | 02:07 | |
| *** iurygregory has quit IRC | 02:07 | |
| *** obre has quit IRC | 02:07 | |
| *** baffle has quit IRC | 02:07 | |
| *** tommylikehu has quit IRC | 02:07 | |
| *** hrybacki has quit IRC | 02:07 | |
| *** dansmith has quit IRC | 02:07 | |
| *** kmARC has quit IRC | 02:07 | |
| *** evrardjp has quit IRC | 02:07 | |
| *** comstud has quit IRC | 02:07 | |
| *** baffle_ has joined #openstack-keystone | 02:07 | |
| *** obre_ has joined #openstack-keystone | 02:07 | |
| *** tommylikehu_ is now known as tommylikehu | 02:07 | |
| *** hrybacki_ is now known as hrybacki | 02:07 | |
| *** kmARC_ is now known as kmARC | 02:07 | |
| *** mvk has joined #openstack-keystone | 02:08 | |
| *** dansmith has joined #openstack-keystone | 02:08 | |
| *** dansmith is now known as Guest99680 | 02:08 | |
| *** comstud has joined #openstack-keystone | 02:09 | |
| *** iurygregory has joined #openstack-keystone | 02:09 | |
| *** evrardjp has joined #openstack-keystone | 02:09 | |
| *** dave-mccowan has joined #openstack-keystone | 02:09 | |
| *** andreykurilin has quit IRC | 02:10 | |
| *** andreykurilin has joined #openstack-keystone | 02:12 | |
| *** Sandy619 has joined #openstack-keystone | 02:15 | |
| *** tlam_ has quit IRC | 02:34 | |
| *** aselius has quit IRC | 02:36 | |
| *** panbalag has joined #openstack-keystone | 02:42 | |
| *** masuberu has joined #openstack-keystone | 03:03 | |
| *** masber has quit IRC | 03:04 | |
| *** Sandy619_opensta has joined #openstack-keystone | 03:04 | |
| *** Sandy619_opensta has quit IRC | 03:05 | |
| *** Sandy619 has quit IRC | 03:07 | |
| *** edmondsw has joined #openstack-keystone | 03:09 | |
| *** edmondsw has quit IRC | 03:14 | |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Expose unified limit APIs https://review.openstack.org/524110 | 03:16 |
| *** masuberu has quit IRC | 03:17 | |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Add schema check for authorize request token https://review.openstack.org/526296 | 03:20 |
| *** dave-mccowan has quit IRC | 03:20 | |
| *** gyee has quit IRC | 03:21 | |
| *** panbalag has left #openstack-keystone | 03:28 | |
| *** threestrands_ has joined #openstack-keystone | 03:39 | |
| *** threestrands_ has quit IRC | 03:39 | |
| *** threestrands_ has joined #openstack-keystone | 03:39 | |
| *** threestrands has quit IRC | 03:41 | |
| *** namnh has joined #openstack-keystone | 03:42 | |
| *** ayoung has quit IRC | 04:04 | |
| *** namnh has quit IRC | 04:12 | |
| *** masber has joined #openstack-keystone | 04:17 | |
| *** links has joined #openstack-keystone | 04:35 | |
| *** links has quit IRC | 04:35 | |
| *** edmondsw has joined #openstack-keystone | 04:57 | |
| *** edmondsw has quit IRC | 05:02 | |
| *** gmann has joined #openstack-keystone | 05:08 | |
| *** lxnch_ has joined #openstack-keystone | 05:08 | |
| *** lxnch has quit IRC | 05:13 | |
| *** vegarl has quit IRC | 05:13 | |
| *** vegarl_ has joined #openstack-keystone | 05:13 | |
| *** Krenair has quit IRC | 05:13 | |
| *** lxnch has joined #openstack-keystone | 05:13 | |
| *** lxnch_ has quit IRC | 05:17 | |
| *** sileht has quit IRC | 05:18 | |
| *** sileht has joined #openstack-keystone | 05:18 | |
| *** Krenair has joined #openstack-keystone | 05:22 | |
| *** aojea has joined #openstack-keystone | 05:41 | |
| openstackgerrit | Merged openstack/keystone master: Add a new table for system role assignments https://review.openstack.org/507993 | 05:42 |
| *** aojea has quit IRC | 05:52 | |
| *** sileht has quit IRC | 06:12 | |
| *** sileht has joined #openstack-keystone | 06:12 | |
| *** DinaBelova2 has joined #openstack-keystone | 06:19 | |
| *** threestrands_ has quit IRC | 06:21 | |
| *** tristanC_ has joined #openstack-keystone | 06:21 | |
| *** tommylikehu has quit IRC | 06:26 | |
| *** itlinux has quit IRC | 06:26 | |
| *** afazekas has quit IRC | 06:26 | |
| *** Dave has quit IRC | 06:26 | |
| *** robcresswell has quit IRC | 06:26 | |
| *** betherly has quit IRC | 06:26 | |
| *** DinaBelova has quit IRC | 06:26 | |
| *** kencjohnston has quit IRC | 06:26 | |
| *** zhongjun has quit IRC | 06:26 | |
| *** knikolla has quit IRC | 06:26 | |
| *** tristanC has quit IRC | 06:26 | |
| *** DinaBelova2 is now known as DinaBelova | 06:26 | |
| *** itlinux has joined #openstack-keystone | 06:30 | |
| *** tommylikehu has joined #openstack-keystone | 06:31 | |
| *** afazekas has joined #openstack-keystone | 06:31 | |
| *** Dave has joined #openstack-keystone | 06:31 | |
| *** robcresswell has joined #openstack-keystone | 06:31 | |
| *** betherly has joined #openstack-keystone | 06:31 | |
| *** kencjohnston has joined #openstack-keystone | 06:31 | |
| *** zhongjun has joined #openstack-keystone | 06:31 | |
| *** knikolla has joined #openstack-keystone | 06:31 | |
| *** edmondsw has joined #openstack-keystone | 06:45 | |
| *** tommylikehu has quit IRC | 06:48 | |
| *** afazekas has quit IRC | 06:48 | |
| *** Dave has quit IRC | 06:48 | |
| *** robcresswell has quit IRC | 06:48 | |
| *** betherly has quit IRC | 06:48 | |
| *** kencjohnston has quit IRC | 06:48 | |
| *** zhongjun has quit IRC | 06:48 | |
| *** knikolla has quit IRC | 06:48 | |
| *** edmondsw has quit IRC | 06:50 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystonemiddleware master: Imported Translations from Zanata https://review.openstack.org/527623 | 06:52 |
| *** afazekas has joined #openstack-keystone | 07:24 | |
| *** robcresswell has joined #openstack-keystone | 07:24 | |
| *** zhongjun has joined #openstack-keystone | 07:24 | |
| *** kencjohnston has joined #openstack-keystone | 07:25 | |
| *** Dave__ has joined #openstack-keystone | 07:25 | |
| *** knikolla has joined #openstack-keystone | 07:25 | |
| *** betherly has joined #openstack-keystone | 07:25 | |
| *** tommylikehu has joined #openstack-keystone | 07:26 | |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Add new tables for unified limits https://review.openstack.org/523041 | 07:36 |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Add db operation for unified limit https://review.openstack.org/524082 | 07:36 |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: [WIP]Add limit provider https://review.openstack.org/524109 | 07:36 |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Expose unified limit APIs https://review.openstack.org/524110 | 07:36 |
| *** rcernin has quit IRC | 07:37 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 07:41 | |
| *** ianw_pto is now known as ianw | 07:43 | |
| *** ianw is now known as ianw_pto | 07:43 | |
| *** samuelbartel has joined #openstack-keystone | 07:53 | |
| *** pcaruana has joined #openstack-keystone | 07:58 | |
| *** annp has joined #openstack-keystone | 07:59 | |
| *** celebdor has joined #openstack-keystone | 08:23 | |
| *** gmann has quit IRC | 08:27 | |
| *** edmondsw has joined #openstack-keystone | 08:33 | |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Add new tables for unified limits https://review.openstack.org/523041 | 08:37 |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Add db operation for unified limit https://review.openstack.org/524082 | 08:37 |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: [WIP]Add limit provider https://review.openstack.org/524109 | 08:37 |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Expose unified limit APIs https://review.openstack.org/524110 | 08:37 |
| *** edmondsw has quit IRC | 08:38 | |
| *** linkmark has joined #openstack-keystone | 08:39 | |
| *** namnh has joined #openstack-keystone | 08:41 | |
| *** tristanC_ is now known as tristanC | 08:53 | |
| *** rm_work has quit IRC | 08:59 | |
| *** rm_work has joined #openstack-keystone | 09:07 | |
| *** gmann has joined #openstack-keystone | 09:27 | |
| *** issp has quit IRC | 09:41 | |
| *** aojea has joined #openstack-keystone | 09:54 | |
| *** jdennis has quit IRC | 09:57 | |
| openstackgerrit | Merged openstack/keystoneauth master: Updated from global requirements https://review.openstack.org/523736 | 10:04 |
| *** aojea_ has joined #openstack-keystone | 10:04 | |
| *** aojea has quit IRC | 10:07 | |
| *** aojea has joined #openstack-keystone | 10:09 | |
| *** aojea_ has quit IRC | 10:12 | |
| *** aojea_ has joined #openstack-keystone | 10:13 | |
| *** jdennis has joined #openstack-keystone | 10:15 | |
| *** annp has quit IRC | 10:16 | |
| *** aojea has quit IRC | 10:17 | |
| *** namnh has quit IRC | 10:20 | |
| *** edmondsw has joined #openstack-keystone | 10:22 | |
| *** aojea_ has quit IRC | 10:24 | |
| *** edmondsw has quit IRC | 10:26 | |
| *** pcaruana has quit IRC | 10:43 | |
| *** AlexeyAbashkin has quit IRC | 11:01 | |
| *** bhagyashris has quit IRC | 11:07 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 11:08 | |
| *** hoonetorg has quit IRC | 11:22 | |
| *** bhagyashris has joined #openstack-keystone | 11:34 | |
| *** hoonetorg has joined #openstack-keystone | 11:34 | |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Add db operation for unified limit https://review.openstack.org/524082 | 11:42 |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: [WIP]Add limit provider https://review.openstack.org/524109 | 11:42 |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Expose unified limit APIs https://review.openstack.org/524110 | 11:42 |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Add limit provider https://review.openstack.org/524109 | 11:50 |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Expose unified limit APIs https://review.openstack.org/524110 | 11:50 |
| *** rarora has joined #openstack-keystone | 11:50 | |
| *** raildo has joined #openstack-keystone | 11:59 | |
| *** edmondsw has joined #openstack-keystone | 12:10 | |
| *** dave-mccowan has joined #openstack-keystone | 12:10 | |
| *** edmondsw has quit IRC | 12:14 | |
| *** dave-mccowan has quit IRC | 12:24 | |
| *** dave-mccowan has joined #openstack-keystone | 12:58 | |
| *** dave-mcc_ has joined #openstack-keystone | 13:07 | |
| *** dave-mccowan has quit IRC | 13:08 | |
| openstackgerrit | Guoqiang Ding proposed openstack/keystone-specs master: Fix the misspelling of "configuration" https://review.openstack.org/529579 | 13:08 |
| openstackgerrit | Stephen Finucane proposed openstack/oslo.policy master: generator: Reimplement wrapping of 'description' https://review.openstack.org/485646 | 13:16 |
| *** catintheroof has joined #openstack-keystone | 13:34 | |
| *** catintheroof has quit IRC | 13:36 | |
| *** catintheroof has joined #openstack-keystone | 13:36 | |
| *** panbalag has joined #openstack-keystone | 13:54 | |
| *** edmondsw has joined #openstack-keystone | 13:58 | |
| *** edmondsw has quit IRC | 14:02 | |
| *** panbalag has quit IRC | 14:05 | |
| *** spilla has joined #openstack-keystone | 14:09 | |
| *** panbalag has joined #openstack-keystone | 14:19 | |
| *** tlam_ has joined #openstack-keystone | 14:59 | |
| *** tlam_ has quit IRC | 15:06 | |
| *** tlam__ has joined #openstack-keystone | 15:06 | |
| *** dave-mcc_ has quit IRC | 15:09 | |
| *** tlam__ has quit IRC | 15:11 | |
| *** dave-mcc_ has joined #openstack-keystone | 15:12 | |
| *** panbalag has quit IRC | 15:13 | |
| *** raildo has quit IRC | 15:20 | |
| *** raildo has joined #openstack-keystone | 15:20 | |
| *** itlinux has quit IRC | 15:27 | |
| *** magicboiz has joined #openstack-keystone | 15:31 | |
| *** panbalag has joined #openstack-keystone | 15:32 | |
| *** magicboiz has quit IRC | 15:36 | |
| *** magicboiz has joined #openstack-keystone | 15:36 | |
| *** magicboiz has quit IRC | 15:42 | |
| knikolla | o/ | 15:44 |
| gagehugo | o/ | 15:48 |
| lbragstad | o/ | 15:52 |
| cmurphy | o/ | 15:52 |
| *** AlexeyAbashkin has quit IRC | 15:55 | |
| *** spilla has quit IRC | 15:57 | |
| *** panbalag has quit IRC | 15:58 | |
| lbragstad | looks like a couple of those patches still need to merge - once that's done i'll rebase the entire system scope string | 15:59 |
| lbragstad | then i should be able to get around to the project tags patch | 15:59 |
| lbragstad | s/patch/client patch/ | 16:00 |
| lbragstad | also - there is a lot of duplicate patterns between ksc and ksa, and I assume for implementing system scope, that only needs to be done in ksa, right? | 16:00 |
| cmurphy | i think so | 16:01 |
| lbragstad | i imagine a lot of those ksc bits are just there because ksc used to implement all the auth things | 16:01 |
| cmurphy | yeah, cleanup that never got done | 16:01 |
| lbragstad | i vaguely remember conversations about it | 16:02 |
| lbragstad | but i was never directly involved in the refactoring | 16:02 |
| knikolla | seems like i missed all the fun :( | 16:07 |
| cmurphy | ??? there is lots of fun to be had! | 16:08 |
| cmurphy | i still haven't started looking through the system-scope patches | 16:08 |
| * knikolla will get to reviewing now. | 16:11 | |
| *** aojea has joined #openstack-keystone | 16:12 | |
| *** itlinux has joined #openstack-keystone | 16:13 | |
| cmurphy | 498091 is having a hard time in the gate, it's been working on it for 7 hours now :( | 16:14 |
| knikolla | there seems to be a bug in horizon where if a federated user has been given an admin role to the admin project, horizon will show only users from the "Federated" domain (which doesn't exist anymore). | 16:14 |
| *** spilla has joined #openstack-keystone | 16:21 | |
| lbragstad | cmurphy: yeah - that one is struggling | 16:25 |
| lbragstad | knikolla: i wonder if we need to patch horizon to pull from the idp's domain | 16:25 |
| lbragstad | knikolla: just fyi - the system scope stuff should be in a linear series | 16:26 |
| lbragstad | but there were two patches i proposed in the middle of the series that weren't specific to system scope, just refactors that needed to be cleaned up | 16:27 |
| lbragstad | i pulled those out last night and we kicked them though | 16:27 |
| lbragstad | but https://review.openstack.org/#/c/507994/8 to https://review.openstack.org/#/c/524407/7 should be good to review | 16:28 |
| lbragstad | the two patches after https://review.openstack.org/#/c/524407/7 are in the gate, then i'll rebase the rest of the string once those merge | 16:28 |
| lbragstad | and https://review.openstack.org/#/c/528847/ will actually get abandon in favor of https://review.openstack.org/#/c/529372/ pending oslo reviews | 16:29 |
| knikolla | lbragstad: sounds good! | 16:30 |
| knikolla | i'll start with the first two ones. | 16:31 |
| *** pcaruana has joined #openstack-keystone | 17:04 | |
| *** kmalloc has joined #openstack-keystone | 17:13 | |
| *** d0ugal has quit IRC | 17:20 | |
| *** aselius has joined #openstack-keystone | 17:21 | |
| *** samuelbartel has quit IRC | 17:23 | |
| *** edmondsw has joined #openstack-keystone | 17:39 | |
| *** d0ugal has joined #openstack-keystone | 17:40 | |
| *** gyee has joined #openstack-keystone | 17:44 | |
| *** edmondsw has quit IRC | 17:44 | |
| *** celebdor has quit IRC | 17:45 | |
| *** aojea has quit IRC | 17:53 | |
| openstackgerrit | Merged openstack/keystone master: Ensure building scope is mutually exclusive https://review.openstack.org/498091 | 18:09 |
| openstackgerrit | Merged openstack/keystone master: Remove private methods for v2.0 and v3 tokens https://review.openstack.org/525329 | 18:09 |
| openstackgerrit | Lance Bragstad proposed openstack/keystoneauth master: Implement system scope https://review.openstack.org/529665 | 18:11 |
| lbragstad | cc jamielennox ^ | 18:11 |
| lbragstad | no idea of what i'm doing is right there | 18:11 |
| lbragstad | s/of/if/ | 18:13 |
| * lbragstad takes lunch | 18:13 | |
| openstackgerrit | Gage Hugo proposed openstack/keystone master: Replace parse_strtime with datetime.strptime https://review.openstack.org/529667 | 18:14 |
| *** harlowja has joined #openstack-keystone | 18:16 | |
| *** raildo has quit IRC | 18:18 | |
| *** raildo has joined #openstack-keystone | 18:18 | |
| *** catintheroof has quit IRC | 18:22 | |
| *** raildo has quit IRC | 18:24 | |
| ksalman | There is no way to define project domain and user domain in novaclient.client? https://docs.openstack.org/python-novaclient/latest/reference/api/novaclient.client.html | 18:38 |
| *** catintheroof has joined #openstack-keystone | 18:47 | |
| *** raildo has joined #openstack-keystone | 18:56 | |
| *** panbalag has joined #openstack-keystone | 19:08 | |
| *** panbalag has left #openstack-keystone | 19:11 | |
| *** dave-mcc_ has quit IRC | 19:21 | |
| gagehugo | ksalman https://docs.openstack.org/python-novaclient/latest/reference/api/index.html | 19:27 |
| gagehugo | via keystoneauth1.session I think | 19:27 |
| *** edmondsw has joined #openstack-keystone | 19:28 | |
| *** edmondsw has quit IRC | 19:33 | |
| lbragstad | gagehugo: spilla kicked https://review.openstack.org/#/c/481223/46 | 19:41 |
| lbragstad | nice work! | 19:41 |
| lbragstad | just osc left | 19:41 |
| gagehugo | yay | 19:42 |
| *** gmann has quit IRC | 19:57 | |
| *** raildo has quit IRC | 20:00 | |
| gagehugo | cmurphy lbragstad thanks! | 20:11 |
| cmurphy | \o/ | 20:11 |
| *** pcaruana has quit IRC | 20:12 | |
| lbragstad | thank you | 20:13 |
| *** raildo has joined #openstack-keystone | 20:20 | |
| *** pcaruana has joined #openstack-keystone | 20:29 | |
| *** raildo has quit IRC | 20:29 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 20:29 | |
| *** AlexeyAbashkin has quit IRC | 20:33 | |
| *** catintheroof has quit IRC | 20:37 | |
| *** catintheroof has joined #openstack-keystone | 20:38 | |
| *** ayoung has joined #openstack-keystone | 20:39 | |
| *** pcaruana has quit IRC | 20:42 | |
| *** catintheroof has quit IRC | 20:42 | |
| openstackgerrit | Merged openstack/keystone master: Implement backend logic for system roles https://review.openstack.org/507994 | 20:50 |
| lbragstad | knikolla: good question - responded here https://review.openstack.org/#/c/514471/7 | 20:52 |
| knikolla | lbragstad: answered. | 20:58 |
| openstackgerrit | Merged openstack/python-keystoneclient master: Add project tags to keystoneclient https://review.openstack.org/481223 | 20:59 |
| lbragstad | knikolla: responded again :) | 21:01 |
| knikolla | lbragstad: i'm unsure. | 21:06 |
| lbragstad | actually... | 21:07 |
| lbragstad | i think consistency would be good | 21:07 |
| lbragstad | but maybe cloud_admin is the right thing? | 21:07 |
| lbragstad | (ideally the cloudv3sample policy file it going to be obsolete once we get the system scope stuff in place and tweak the policies a bit | 21:08 |
| lbragstad | ) | 21:08 |
| knikolla | lbragstad: i think having the flip for enforcing scope disabled by default calls for cloud_admin | 21:08 |
| lbragstad | yeah | 21:09 |
| knikolla | but after the bit is flipped, role:admin works great. | 21:09 |
| lbragstad | otherwise - it's just the same situation as the default | 21:09 |
| lbragstad | once the bit is flipped the defaults will be much better | 21:09 |
| lbragstad | and the majority of cloudv3sample will be obsolete | 21:09 |
| knikolla | but then we're kind of breaking things because cloud admin requires a project scoped token | 21:09 |
| knikolla | is it a catch-22? | 21:10 |
| lbragstad | probably | 21:10 |
| knikolla | we need some sort of "if not enforcing scope, require rule:cloud_admin, if enforcing scope, require rule:admin." | 21:11 |
| lbragstad | hmm | 21:12 |
| lbragstad | so - if a deployment is using cloud_admin, they are already scoping to the admin_project to do things like that | 21:12 |
| lbragstad | s/that/this/ | 21:13 |
| lbragstad | is that safe to assume/ | 21:13 |
| knikolla | hmmm... with the current policy in code we don't even have cloud_admin at all | 21:14 |
| knikolla | is anyone using the v3 policy sample json? | 21:15 |
| *** spilla has quit IRC | 21:19 | |
| lbragstad | i wouldn't think so - it's broken by default | 21:23 |
| lbragstad | we have bugs opened against it | 21:23 |
| knikolla | then let's go with just admin, since it's what the policy defaults in code are. | 21:25 |
| lbragstad | if we have any cloudsamplev3 users, i bet henry would know who they are | 21:26 |
| lbragstad | or edmondsw | 21:26 |
| knikolla | updated my review to +2/+A. | 21:29 |
| lbragstad | knikolla: thanks for all the reviews | 21:29 |
| knikolla | lbragstad: np, thanks for breaking them up into small chunks. | 21:30 |
| lbragstad | knikolla: no problem - hopefully they are easier to review | 21:30 |
| lbragstad | turned out to be more patches than what i was expecting | 21:30 |
| *** threestrands_ has joined #openstack-keystone | 21:35 | |
| *** spilla has joined #openstack-keystone | 21:39 | |
| openstackgerrit | Merged openstack/keystone master: Implement manager logic for user+system roles https://review.openstack.org/512468 | 21:43 |
| *** celebdor has joined #openstack-keystone | 21:44 | |
| *** blake has joined #openstack-keystone | 21:48 | |
| *** celebdor has quit IRC | 21:54 | |
| *** andreaf has quit IRC | 21:55 | |
| *** andreaf has joined #openstack-keystone | 21:56 | |
| *** d0ugal has quit IRC | 21:59 | |
| openstackgerrit | Merged openstack/keystone master: Implement manager logic for group+system roles https://review.openstack.org/512641 | 22:06 |
| *** tlam__ has joined #openstack-keystone | 22:07 | |
| *** d0ugal has joined #openstack-keystone | 22:09 | |
| *** tlam__ has quit IRC | 22:12 | |
| *** spilla has quit IRC | 22:22 | |
| jamielennox | lbragstad: looks fine from a code perspective, i'm unsure i like system scoped being a boolena | 22:23 |
| jamielennox | the finale i was hoping for was that you scoped to a region or something that implied system scope- but that's a way more dramatic change to everything | 22:24 |
| *** rcernin has joined #openstack-keystone | 22:24 | |
| openstackgerrit | Colleen Murphy proposed openstack/keystone master: WIP Add application credentials db migration https://review.openstack.org/524927 | 22:30 |
| openstackgerrit | Colleen Murphy proposed openstack/keystone master: WIP Add application credentials driver https://review.openstack.org/524928 | 22:30 |
| openstackgerrit | Colleen Murphy proposed openstack/keystone master: WIP Add Application Credentials manager https://review.openstack.org/524747 | 22:30 |
| openstackgerrit | Colleen Murphy proposed openstack/keystone master: WIP Add Application Credentials controller https://review.openstack.org/524423 | 22:30 |
| openstackgerrit | Colleen Murphy proposed openstack/keystone master: WIP Add application credential auth plugin https://review.openstack.org/525346 | 22:30 |
| *** catintheroof has joined #openstack-keystone | 22:37 | |
| *** catintheroof has quit IRC | 22:37 | |
| *** gagehugo has quit IRC | 22:38 | |
| lbragstad | jamielennox: we'll we can build it like that | 22:38 |
| lbragstad | i'm realizing im not as familiar with ksa as i'd like | 22:38 |
| lbragstad | so i'm open to any suggestions or guidance | 22:39 |
| jamielennox | lbragstad: ksa is the easy bit, it's just a reflection of whatever architecture goes into the keystone api | 22:39 |
| jamielennox | you got all the parts access.py, generic and v3 | 22:39 |
| jamielennox | you're missing some loading info | 22:39 |
| lbragstad | it took me a good 45 minutes to figure out https://review.openstack.org/#/c/529665/1/keystoneauth1/identity/generic/base.py@107 | 22:40 |
| jamielennox | oh, nvm - you got loading | 22:40 |
| jamielennox | yea, generic is always a bit funny, i was never sure where to hold the parameters | 22:41 |
| lbragstad | i was like "what magic is happening that pulls the stuff from env?!" | 22:41 |
| lbragstad | also - it looks like there is a bunch of stuff similar to this in python-keystoneclient | 22:42 |
| lbragstad | but i didn't add any system-scoping stuff ther e | 22:43 |
| lbragstad | i guess we could swich it to system-scope instead of system-scoped? | 22:48 |
| openstackgerrit | Lance Bragstad proposed openstack/keystoneauth master: Implement system scope https://review.openstack.org/529665 | 22:52 |
| *** Dave__ is now known as Dave | 23:01 | |
| *** gagehugo has joined #openstack-keystone | 23:01 | |
| *** blake has quit IRC | 23:03 | |
| *** edmondsw has joined #openstack-keystone | 23:04 | |
| lbragstad | knikolla: good call on https://review.openstack.org/#/c/528847/3 - responded | 23:07 |
| *** edmondsw has quit IRC | 23:08 | |
| jamielennox | i don't mind on the naming | 23:20 |
| jamielennox | there is a bunch of similar stuff in keystoneclient because it started there | 23:20 |
| jamielennox | that whole bit has been deprecated for a while | 23:20 |
| jamielennox | i had a review that actually tried to remove it to see if i could get it to pass gate and it's way more difficult than it should be | 23:20 |
| *** AlexeyAbashkin has joined #openstack-keystone | 23:34 | |
| openstackgerrit | Merged openstack/keystone master: Add user system grant policies https://review.openstack.org/514471 | 23:34 |
| *** AlexeyAbashkin has quit IRC | 23:39 | |
| *** aojea has joined #openstack-keystone | 23:45 | |
| *** aojea has quit IRC | 23:54 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!