| *** d0ugal has quit IRC | 00:15 | |
| openstackgerrit | Gage Hugo proposed openstack/keystone master: Add new config option and setup for token keys https://review.openstack.org/527542 | 00:16 |
|---|---|---|
| *** comstud has quit IRC | 00:19 | |
| *** masber has joined #openstack-keystone | 00:21 | |
| *** comstud has joined #openstack-keystone | 00:22 | |
| *** d0ugal has joined #openstack-keystone | 00:27 | |
| *** masber has quit IRC | 00:29 | |
| *** dave-mccowan has joined #openstack-keystone | 01:07 | |
| openstackgerrit | Gage Hugo proposed openstack/keystone master: Add new config option and setup for token keys https://review.openstack.org/527542 | 01:10 |
| *** masber has joined #openstack-keystone | 01:10 | |
| *** daidv has joined #openstack-keystone | 01:20 | |
| *** daidv_ has joined #openstack-keystone | 01:20 | |
| *** edmondsw has joined #openstack-keystone | 01:21 | |
| *** daidv_ has quit IRC | 01:24 | |
| *** edmondsw has quit IRC | 01:26 | |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Add new tables for unified limits https://review.openstack.org/523041 | 01:32 |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Add db operation for unified limit https://review.openstack.org/524082 | 01:32 |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Add limit provider https://review.openstack.org/524109 | 01:32 |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Implement policies for limits https://review.openstack.org/530143 | 01:32 |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Expose unified limit APIs https://review.openstack.org/524110 | 01:32 |
| *** phalmos__ has quit IRC | 01:37 | |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Add schema check for authorize request token https://review.openstack.org/526296 | 01:37 |
| *** annp has joined #openstack-keystone | 01:54 | |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Fix list users by name https://review.openstack.org/529914 | 02:06 |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: DNM: test fix list users by name https://review.openstack.org/531635 | 02:07 |
| *** zhurong has joined #openstack-keystone | 02:46 | |
| *** dave-mccowan has quit IRC | 03:09 | |
| *** edmondsw has joined #openstack-keystone | 03:09 | |
| *** edmondsw has quit IRC | 03:14 | |
| *** kong has quit IRC | 03:17 | |
| *** kong has joined #openstack-keystone | 03:17 | |
| openstackgerrit | Gage Hugo proposed openstack/keystone master: WIP - Add functional testing gate https://review.openstack.org/531014 | 04:44 |
| *** rajalokan has quit IRC | 04:47 | |
| *** zhurong has quit IRC | 04:52 | |
| *** edmondsw has joined #openstack-keystone | 04:58 | |
| *** edmondsw has quit IRC | 05:02 | |
| *** bhagyashri_s is now known as bhagyashris | 05:05 | |
| *** rajalokan has joined #openstack-keystone | 05:33 | |
| *** abhi89 has joined #openstack-keystone | 05:40 | |
| *** zhurong has joined #openstack-keystone | 05:51 | |
| *** edmondsw has joined #openstack-keystone | 06:46 | |
| *** edmondsw has quit IRC | 06:50 | |
| *** rajalokan has quit IRC | 06:56 | |
| *** pcaruana has joined #openstack-keystone | 07:04 | |
| *** knikolla has quit IRC | 07:13 | |
| *** knikolla has joined #openstack-keystone | 07:13 | |
| *** brad[] has quit IRC | 07:15 | |
| *** Krenair has quit IRC | 07:15 | |
| *** Krenair has joined #openstack-keystone | 07:22 | |
| *** tesseract has joined #openstack-keystone | 08:09 | |
| *** namnh has joined #openstack-keystone | 08:09 | |
| *** Suramya has joined #openstack-keystone | 08:23 | |
| *** edmondsw has joined #openstack-keystone | 08:34 | |
| *** edmondsw has quit IRC | 08:39 | |
| *** rcernin has quit IRC | 09:07 | |
| *** sbezverk has quit IRC | 09:11 | |
| *** aloga has joined #openstack-keystone | 09:45 | |
| *** zhurong has quit IRC | 10:02 | |
| openstackgerrit | Suramya proposed openstack/keystone master: Reorganize api-ref: v3-ext endpoint-policy.inc https://review.openstack.org/531704 | 10:10 |
| *** namnh has quit IRC | 10:18 | |
| *** ktibi has joined #openstack-keystone | 10:18 | |
| ktibi | Hi ! Are the roles shared between domain ? | 10:19 |
| ktibi | because If I try to add role on user in specific domain ==> No role with a name or ID of 'admin' exists. Need to add admin role in each new domain ? | 10:20 |
| cmurphy | ktibi: by default roles are global but it's possible to create a domain-specific role | 10:21 |
| cmurphy | ktibi: if you just did 'openstack role create admin' i don't think there's any reason that wouldn't be visible | 10:22 |
| *** edmondsw has joined #openstack-keystone | 10:22 | |
| ktibi | cmurphy If I want global roles ? because I think I used default conf | 10:22 |
| ktibi | I forgot to specifiy, it's a LDAP domain | 10:23 |
| cmurphy | even still a global role should be visible to the ldap domain | 10:23 |
| ktibi | cmurphy I have strange behavior with openstack CLI, sometimes I need to retry 4 or 5 times the command add role | 10:24 |
| cmurphy | that is pretty strange :( | 10:24 |
| cmurphy | why do you need to retry? does it give an error? | 10:24 |
| -openstackstatus- NOTICE: zuul has been restarted, all queues have been reset. please recheck your patches when appropriate | 10:25 | |
| ktibi | yes error it's awalys cloud not find group, or could not find role | 10:25 |
| cmurphy | but then it works eventually? | 10:26 |
| ktibi | yes after 4-5 times | 10:26 |
| ktibi | cmurphy https://thepasteb.in/p/g5hPy3M7y93Cr | 10:27 |
| *** edmondsw has quit IRC | 10:27 | |
| cmurphy | for "could not find group" that could be a pagination problem with ldap, for "could not find role" I have no idea | 10:27 |
| ktibi | it's random, I don't know why :/ | 10:27 |
| cmurphy | either way the keystone logs should help | 10:28 |
| ktibi | pagination problemes are very common with keystone and ldap ? | 10:29 |
| ktibi | I use pike | 10:29 |
| cmurphy | i'm not sure about "very common" but it's a possibility | 10:29 |
| ktibi | and do you have tips or tricks for errors like that ? | 10:29 |
| cmurphy | just turn on debug logging for keystone, it will show you the ldap queries it's running and you can verify they make sense | 10:30 |
| cmurphy | there might also be some helpful warnings | 10:30 |
| *** abhi89 has quit IRC | 10:32 | |
| *** annp has quit IRC | 10:32 | |
| ktibi | cmurphy I use 3 keystone with haproxy do you think it can be the pb ? | 10:36 |
| ktibi | because when I launch request, I can see log on my 3 keystones, one have failed, two good answer | 10:36 |
| ktibi | and maybe sometimes, wrong keystone return can't find project. | 10:37 |
| ktibi | cmurphy it's like that https://bugzilla.redhat.com/show_bug.cgi?id=1284734 | 10:44 |
| openstack | bugzilla.redhat.com bug 1284734 in openstack-keystone "Keystone Authorization Failed" [Urgent,Closed: notabug] - Assigned to ayoung | 10:44 |
| *** sambetts|afk is now known as sambetts | 10:50 | |
| *** simondodsley has quit IRC | 10:50 | |
| *** simondodsley has joined #openstack-keystone | 10:51 | |
| *** jamespage has quit IRC | 10:51 | |
| *** wolsen has quit IRC | 10:51 | |
| *** jamespage has joined #openstack-keystone | 10:52 | |
| *** wolsen has joined #openstack-keystone | 10:52 | |
| cmurphy | ktibi: yes if any of your keystones behind the load balancer was acting up that would cause the inconsistency | 11:06 |
| openstackgerrit | Suramya proposed openstack/keystone master: Reorganize api-ref: v3-ext oauth.inc https://review.openstack.org/531719 | 11:12 |
| *** mvk has quit IRC | 11:20 | |
| *** panbalag has joined #openstack-keystone | 11:34 | |
| *** zhurong has joined #openstack-keystone | 11:35 | |
| *** jistr is now known as jistr|mtg | 11:58 | |
| *** zhongjun has quit IRC | 12:06 | |
| *** raildo has joined #openstack-keystone | 12:09 | |
| *** panbalag has left #openstack-keystone | 12:09 | |
| *** dave-mccowan has joined #openstack-keystone | 12:09 | |
| *** edmondsw has joined #openstack-keystone | 12:10 | |
| *** edmondsw has quit IRC | 12:15 | |
| *** mvk has joined #openstack-keystone | 12:37 | |
| *** dave-mccowan has quit IRC | 12:47 | |
| *** dave-mccowan has joined #openstack-keystone | 12:49 | |
| *** rcernin has joined #openstack-keystone | 12:59 | |
| *** zhurong has quit IRC | 13:01 | |
| *** rcernin has quit IRC | 13:16 | |
| *** iurygregory has quit IRC | 13:20 | |
| *** pcaruana has quit IRC | 13:25 | |
| *** pcaruana has joined #openstack-keystone | 13:25 | |
| *** jistr|mtg is now known as jistr | 13:35 | |
| *** panbalag has joined #openstack-keystone | 13:51 | |
| *** edmondsw has joined #openstack-keystone | 13:51 | |
| *** bhagyashris has quit IRC | 13:52 | |
| *** bhagyashris has joined #openstack-keystone | 14:01 | |
| *** abhi89 has joined #openstack-keystone | 14:13 | |
| openstackgerrit | Suramya proposed openstack/keystone master: Reorganize api-ref: v3-ext trust.inc https://review.openstack.org/531772 | 14:18 |
| *** jmlowe has quit IRC | 14:19 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Use keystone.common.provider_api for trust APIs https://review.openstack.org/530247 | 14:36 |
| *** jdennis has quit IRC | 14:40 | |
| *** spilla has joined #openstack-keystone | 14:41 | |
| *** jdennis has joined #openstack-keystone | 14:41 | |
| openstackgerrit | Suramya proposed openstack/keystone master: Reorganize api-ref: v3-ext revoke.inc https://review.openstack.org/531808 | 14:52 |
| *** AlexeyAbashkin has joined #openstack-keystone | 14:53 | |
| *** afred312 has quit IRC | 14:57 | |
| *** afred312 has joined #openstack-keystone | 14:57 | |
| *** Guest8485 is now known as dansmith | 15:02 | |
| *** dansmith is now known as Guest62501 | 15:02 | |
| *** Guest62501 is now known as dansmith | 15:05 | |
| *** sbezverk has joined #openstack-keystone | 15:09 | |
| *** AlexeyAbashkin has quit IRC | 15:13 | |
| *** ktibi has quit IRC | 15:20 | |
| gagehugo | o/ | 15:22 |
| *** jmlowe has joined #openstack-keystone | 15:25 | |
| *** SamYaple_ has quit IRC | 15:30 | |
| *** SamYaple has joined #openstack-keystone | 15:30 | |
| *** abhishek has joined #openstack-keystone | 15:33 | |
| *** abhi89 has quit IRC | 15:36 | |
| *** nicolasbock has joined #openstack-keystone | 15:45 | |
| *** abhi89 has joined #openstack-keystone | 15:56 | |
| *** SamYaple has quit IRC | 15:57 | |
| *** SamYaple has joined #openstack-keystone | 15:57 | |
| *** SamYaple has quit IRC | 15:58 | |
| *** SamYaple has joined #openstack-keystone | 15:58 | |
| *** abhishek has quit IRC | 15:59 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 16:02 | |
| *** phalmos has joined #openstack-keystone | 16:04 | |
| *** AlexeyAbashkin has quit IRC | 16:06 | |
| *** brad[] has joined #openstack-keystone | 16:18 | |
| openstackgerrit | Gage Hugo proposed openstack/keystone master: WIP - Add functional testing gate https://review.openstack.org/531014 | 16:26 |
| *** jistr is now known as jistr|off|mtg | 16:33 | |
| *** d0ugal has quit IRC | 16:35 | |
| *** abhishek has joined #openstack-keystone | 16:38 | |
| *** kmalloc has joined #openstack-keystone | 16:38 | |
| kmalloc | lbragstad: do we have a list of patches needing attention | 16:39 |
| *** gyee has joined #openstack-keystone | 16:39 | |
| *** abhi89 has quit IRC | 16:41 | |
| *** abhishek has quit IRC | 16:42 | |
| *** david-lyle has quit IRC | 16:47 | |
| *** david-lyle has joined #openstack-keystone | 16:48 | |
| *** pcaruana has quit IRC | 16:48 | |
| *** david-lyle has quit IRC | 16:52 | |
| *** d0ugal has joined #openstack-keystone | 16:59 | |
| *** jmlowe has quit IRC | 17:02 | |
| openstackgerrit | Merged openstack/keystone master: Migrate jobs to zuulV3 https://review.openstack.org/523231 | 17:04 |
| *** mvk has quit IRC | 17:09 | |
| kmalloc | cmurphy: are the app cred patches in a state ready for review? | 17:10 |
| *** d0ugal has quit IRC | 17:11 | |
| lbragstad | kmalloc: all the unified limits stuff is good to review | 17:17 |
| lbragstad | wxy: needs feedback there | 17:17 |
| lbragstad | same with the system-scope things | 17:17 |
| lbragstad | those should be good to go | 17:17 |
| lbragstad | we also have all the scope-types changes | 17:19 |
| lbragstad | https://review.openstack.org/#/q/status:open+project:openstack/keystone+branch:master+topic:add-scope-types | 17:19 |
| kmalloc | lbragstad: great, i'll focus on those. | 17:19 |
| lbragstad | i expect each review to at least generate a bit of discussion as to how we go about code the scope check into keystone (e.g. different behaviors based on token scope) | 17:20 |
| lbragstad | oh - these are pretty easy to kick through too https://review.openstack.org/#/q/topic:api-ref-reorganization+status:open | 17:20 |
| kmalloc | lbragstad: i'll also see about fixing the provider_apis patches. | 17:22 |
| kmalloc | today. since it looks liek they need a little love to kick through the last of them | 17:22 |
| kmalloc | then i'll do the last cleanup to remove the self.<<XXX>>_api | 17:22 |
| lbragstad | i remembered that we need a patch to convert the backend tests to use PROVIDERS | 17:23 |
| lbragstad | other than that, i think all the APIs are using the provider_apis | 17:23 |
| lbragstad | (trusts, revoke, and auth are the last ones that need to merged) | 17:24 |
| lbragstad | documenting some of that work here https://trello.com/c/luUjeAwr/88-refactor-dependency-injection | 17:24 |
| *** StefanPaetowJisc has joined #openstack-keystone | 17:25 | |
| *** itlinux_ has joined #openstack-keystone | 17:27 | |
| *** itlinux_ has quit IRC | 17:30 | |
| *** itlinux_ has joined #openstack-keystone | 17:30 | |
| *** itlinux_ has quit IRC | 17:31 | |
| *** itlinux_ has joined #openstack-keystone | 17:31 | |
| *** david-lyle has joined #openstack-keystone | 17:34 | |
| cmurphy | kmalloc: they're not ready to merge (they need tests) but would be great get reviews anyway | 17:34 |
| *** itlinux_ has quit IRC | 17:34 | |
| kmalloc | great | 17:34 |
| kmalloc | will look at them | 17:34 |
| cmurphy | the auth plugin stuff makes me nervous now that it's not piggybacking on trusts | 17:34 |
| cmurphy | and which crud logic goes at which layer has been confusing me | 17:35 |
| cmurphy | so eyes on that would be good | 17:35 |
| *** itlinux_ has joined #openstack-keystone | 17:36 | |
| *** itlinux_ has quit IRC | 17:37 | |
| *** itlinux_ has joined #openstack-keystone | 17:38 | |
| openstackgerrit | Gage Hugo proposed openstack/keystone master: WIP - Add functional testing gate https://review.openstack.org/531014 | 17:39 |
| *** StefanPaetowJisc has quit IRC | 17:42 | |
| *** itlinux_ has quit IRC | 17:42 | |
| *** itlinux_ has joined #openstack-keystone | 17:42 | |
| *** itlinux_ has quit IRC | 17:43 | |
| *** david-lyle has quit IRC | 17:47 | |
| kmalloc | cmurphy: ok i can loo into that as well. | 17:48 |
| *** itlinux_ has joined #openstack-keystone | 17:49 | |
| *** itlinux_ has quit IRC | 17:49 | |
| *** itlinux has joined #openstack-keystone | 17:50 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 17:54 | |
| *** clenimar has joined #openstack-keystone | 17:55 | |
| *** itlinux has quit IRC | 17:55 | |
| *** itlinux has joined #openstack-keystone | 17:56 | |
| *** AlexeyAbashkin has quit IRC | 17:58 | |
| *** rmascena has joined #openstack-keystone | 18:05 | |
| *** raildo has quit IRC | 18:08 | |
| *** tesseract has quit IRC | 18:35 | |
| *** panbalag has quit IRC | 18:41 | |
| kmalloc | https://www.theverge.com/circuitbreaker/2018/1/8/16860118/asus-rog-bezel-free-kit-gaming-pc-monitor-light-refraction-ces-2018 | 18:47 |
| kmalloc | thats kinda neat | 18:47 |
| *** jmlowe has joined #openstack-keystone | 18:53 | |
| gagehugo | oh nice | 19:02 |
| *** harlowja has joined #openstack-keystone | 19:19 | |
| *** pramodrj07 has joined #openstack-keystone | 19:22 | |
| *** pramodrj07 has quit IRC | 19:22 | |
| *** Suramya has quit IRC | 19:33 | |
| openstackgerrit | Gage Hugo proposed openstack/keystone master: WIP - Add functional testing gate https://review.openstack.org/531014 | 19:39 |
| *** david-lyle has joined #openstack-keystone | 19:43 | |
| *** jmlowe has quit IRC | 19:59 | |
| *** itlinux has quit IRC | 20:19 | |
| *** edmondsw has quit IRC | 20:26 | |
| *** itlinux has joined #openstack-keystone | 20:29 | |
| *** jmlowe has joined #openstack-keystone | 20:31 | |
| *** spilla has quit IRC | 20:31 | |
| *** openstack has quit IRC | 20:38 | |
| *** openstack has joined #openstack-keystone | 20:39 | |
| *** ChanServ sets mode: +o openstack | 20:39 | |
| *** sxc731 has joined #openstack-keystone | 20:45 | |
| *** jmlowe has quit IRC | 20:45 | |
| *** jmlowe has joined #openstack-keystone | 20:50 | |
| *** openstackgerrit has quit IRC | 21:03 | |
| *** rcernin has joined #openstack-keystone | 21:17 | |
| *** panbalag has joined #openstack-keystone | 21:19 | |
| *** jmlowe has quit IRC | 21:22 | |
| *** Anticimex has joined #openstack-keystone | 21:27 | |
| *** r-daneel has joined #openstack-keystone | 21:27 | |
| *** david-lyle has quit IRC | 21:28 | |
| *** rcernin has quit IRC | 21:33 | |
| *** sxc731 has quit IRC | 21:35 | |
| *** jmlowe has joined #openstack-keystone | 21:37 | |
| *** jmlowe has quit IRC | 21:39 | |
| *** openstackgerrit has joined #openstack-keystone | 21:48 | |
| openstackgerrit | Colleen Murphy proposed openstack/keystone master: Add application credentials driver https://review.openstack.org/524928 | 21:48 |
| openstackgerrit | Colleen Murphy proposed openstack/keystone master: WIP Add Application Credentials manager https://review.openstack.org/524747 | 21:48 |
| *** itlinux has quit IRC | 21:52 | |
| *** panbalag has left #openstack-keystone | 22:01 | |
| openstackgerrit | Colleen Murphy proposed openstack/keystone master: WIP Add Application Credentials manager https://review.openstack.org/524747 | 22:05 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Validate identity providers during token validation https://review.openstack.org/531915 | 22:06 |
| *** rcernin has joined #openstack-keystone | 22:06 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Validate identity providers during token validation https://review.openstack.org/531915 | 22:11 |
| *** afred312 has quit IRC | 22:22 | |
| openstackgerrit | Colleen Murphy proposed openstack/keystone master: Add application credentials driver https://review.openstack.org/524928 | 22:27 |
| openstackgerrit | Colleen Murphy proposed openstack/keystone master: Add Application Credentials manager https://review.openstack.org/524747 | 22:27 |
| openstackgerrit | Merged openstack/keystone master: Add new tables for unified limits https://review.openstack.org/523041 | 22:31 |
| *** dave-mccowan has quit IRC | 22:37 | |
| openstackgerrit | Merged openstack/keystone master: Reorganize api-ref: v3 project-tags https://review.openstack.org/530533 | 22:39 |
| openstackgerrit | Merged openstack/keystone master: Reorganize api-ref: v3 policies https://review.openstack.org/530466 | 22:39 |
| *** itlinux has joined #openstack-keystone | 22:51 | |
| *** david-lyle has joined #openstack-keystone | 22:55 | |
| openstackgerrit | Merged openstack/keystone master: Reorganize api-ref: v3 credentials https://review.openstack.org/504459 | 22:57 |
| *** afred312 has joined #openstack-keystone | 23:00 | |
| *** david-lyle has quit IRC | 23:12 | |
| *** harsha has joined #openstack-keystone | 23:13 | |
| *** david-lyle has joined #openstack-keystone | 23:13 | |
| harsha | Hello, can anyone let me know if the following issue is fixed? https://bugs.launchpad.net/horizon/+bug/1023502.. In horizon we still don't see user's default_project_id getting reflected on login. We are using keystone v3 and are on ocata release | 23:15 |
| openstack | Launchpad bug 1023502 in OpenStack Identity (keystone) "Horizon does not use the default tenant" [High,Fix released] - Assigned to Dolph Mathews (dolph) | 23:15 |
| lbragstad | harsha: that might be something with horizon | 23:17 |
| *** sambetts is now known as sambetts|afk | 23:22 | |
| lbragstad | specifically django_openstack_auth | 23:23 |
| *** rmascena has quit IRC | 23:29 | |
| *** phalmos has quit IRC | 23:52 | |
| *** itlinux has quit IRC | 23:54 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!