Friday, 2018-01-26

*** jmlowe has joined #openstack-keystone00:00
*** gongysh has quit IRC00:16
*** markvoelker has quit IRC00:22
*** aselius has quit IRC00:50
*** zhurong has joined #openstack-keystone00:51
*** zhurong_ has joined #openstack-keystone00:53
*** rmcall has joined #openstack-keystone01:24
*** gongysh has joined #openstack-keystone01:24
*** annp has joined #openstack-keystone01:40
*** markvoelker has joined #openstack-keystone01:41
*** dave-mccowan has joined #openstack-keystone01:45
*** Supun has joined #openstack-keystone01:46
openstackgerritTim Burke proposed openstack/keystonemiddleware master: Only include response body if there's a response
*** harlowja has quit IRC02:16
*** Supun has quit IRC02:24
*** zhurong has quit IRC02:24
*** Supun has joined #openstack-keystone02:35
*** Supun has quit IRC02:50
openstackgerritMerged openstack/keystoneauth master: Update reno for stable/queens
openstackgerritMerged openstack/keystonemiddleware master: Update reno for stable/queens
*** pramodrj07 has quit IRC03:43
*** dave-mccowan has quit IRC03:49
*** rmcall has quit IRC03:53
*** gongysh has quit IRC04:07
*** aojea has joined #openstack-keystone04:12
openstackgerritMerged openstack/keystone master: Add scope_types to endpoint policies
*** zhurong_ has quit IRC04:39
*** harlowja has joined #openstack-keystone04:51
*** openstackstatus has quit IRC04:56
*** openstackstatus has joined #openstack-keystone04:57
*** ChanServ sets mode: +v openstackstatus04:57
*** gongysh has joined #openstack-keystone05:11
*** gongysh has quit IRC05:16
*** zhurong has joined #openstack-keystone05:18
*** aojea has quit IRC05:19
*** aojea has joined #openstack-keystone05:33
*** aojea has quit IRC05:38
*** aojea has joined #openstack-keystone05:40
openstackgerritMerged openstack/python-keystoneclient master: Update reno for stable/queens
*** links has joined #openstack-keystone05:58
*** yangzhenyu__ has quit IRC06:14
*** aojea has quit IRC06:24
*** belmoreira has joined #openstack-keystone06:42
*** zhurong has quit IRC06:52
*** aojea_ has joined #openstack-keystone07:00
*** namnh has joined #openstack-keystone07:03
openstackgerritMerged openstack/keystone master: Implement GET /v3/auth/system
openstackgerritwangqiang-bj proposed openstack/keystone master: add 'extra' and 'tags' in request body of projects
*** harlowja has quit IRC07:23
*** hoonetorg has quit IRC07:55
*** d0ugal has quit IRC08:04
*** yangzhenyu has joined #openstack-keystone08:15
*** d0ugal has joined #openstack-keystone08:23
*** hoonetorg has joined #openstack-keystone08:25
*** AlexeyAbashkin has joined #openstack-keystone08:39
*** yangzhenyu has quit IRC08:57
openstackgerritMerged openstack/keystone master: Remove foreign key for registered limit
*** aojea has joined #openstack-keystone09:24
*** aojea_ has quit IRC09:26
*** sambetts|afk is now known as sambetts09:27
*** aojea has quit IRC10:02
*** namnh has quit IRC10:08
*** magicboiz has joined #openstack-keystone10:11
*** aojea has joined #openstack-keystone10:12
*** aojea has quit IRC10:17
*** yangzhenyu has joined #openstack-keystone10:27
*** rm_work has quit IRC10:42
*** itlinux has joined #openstack-keystone10:46
*** rm_work has joined #openstack-keystone10:46
*** magicboiz has quit IRC10:48
*** daidv has quit IRC10:58
*** itlinux has quit IRC11:21
*** johnthetubaguy has quit IRC11:26
*** johnthetubaguy has joined #openstack-keystone11:28
*** aojea has joined #openstack-keystone11:53
*** aojea has quit IRC12:09
*** aojea has joined #openstack-keystone12:10
*** yangzhenyu has quit IRC12:13
*** dave-mccowan has joined #openstack-keystone12:14
*** raildo has joined #openstack-keystone12:20
*** annp has quit IRC12:21
openstackgerritMerged openstack/keystone master: Improve limit sql backend
openstackgerritMerged openstack/keystone master: Add limit provider
openstackgerritMerged openstack/keystone master: Implement policies for limits
openstackgerritMerged openstack/keystone master: Expose unified limit APIs
openstackgerritMerged openstack/keystone master: Add api-ref for unified limits
*** edmondsw has joined #openstack-keystone13:13
openstackgerritMerged openstack/keystone master: Add scope_types to implied role policies
openstackgerritMerged openstack/keystone master: Relay system information in RoleAssignmentNotFound
*** itlinux has joined #openstack-keystone13:45
*** panbalag has joined #openstack-keystone13:47
*** yangzhenyu has joined #openstack-keystone14:04
*** aojea_ has joined #openstack-keystone14:07
openstackgerritKairat Kushaev proposed openstack/keystoneauth master: use defusedxml for XML parsing
*** aojea has quit IRC14:11
*** rmcall has joined #openstack-keystone14:16
*** hoonetorg has quit IRC14:18
*** itlinux has quit IRC14:31
*** itlinux has joined #openstack-keystone14:32
*** hoonetorg has joined #openstack-keystone14:32
*** david-lyle has quit IRC14:35
*** itlinux has quit IRC14:36
*** r-daneel has joined #openstack-keystone14:39
*** efried is now known as fried_rice14:39
*** Supun has joined #openstack-keystone14:41
*** dansmith is now known as superdan14:41
*** tesseract has joined #openstack-keystone14:49
*** d0ugal has quit IRC14:57
*** phalmos has joined #openstack-keystone15:00
*** r-daneel has quit IRC15:01
*** jaosorior has quit IRC15:04
lbragstadjust fyi - it looks like the milestone deadline is going to be extended for libraries to monday15:10
lbragstadcc gagehugo cmurphy ^15:10
lbragstadso any client patches that still need work can make it into the client release if we can merge them over the weekend15:11
cmurphylbragstad: libraries or clients?15:11
lbragstadi just asked the same question in the release meeting because libraries are already frozen15:11
cmurphymaybe i can get my osc patch in15:11
*** d0ugal has joined #openstack-keystone15:14
openstackgerritChangBo Guo(gcb) proposed openstack/keystone master: Handle TZ change in iso8601 >=0.1.12
lbragstadcmurphy: i just started thinking about this...15:17
lbragstadwhat happens if we want to do client changes for an experimental API?15:18
cmurphylbragstad: hmm idunno15:18
cmurphywe don't have a precedent15:19
lbragstadit's kind of a weird thing...15:19
lbragstadif the API is experimental it can change at anytime, but you still want people to use it15:19
cmurphyi guess i feel like the reason we want it to be experimental is that we're still figuring out the clients15:21
cmurphyonce the clients are solidish then that probably means the api is too15:21
openstackgerritMerged openstack/keystone master: Add scope_types to region policies
lbragstadif we have the ability to discover experiemntal API status, we should emit a message in clients15:24
lbragstadwhen they are using an experimental API (if there is support for it)15:24
gagehugooh nice15:28
*** dave-mccowan has quit IRC15:31
*** david-lyle has joined #openstack-keystone15:37
*** spilla has joined #openstack-keystone15:38
gagehugoknikolla o/15:52
knikollagagehugo: anything i missed? had to crunch yesterday on some work stuff.15:56
gagehugomissed the gate failing all day :(15:58
knikollaoh wow15:59
lbragstadthe review board went from 42 -> 41 patches16:03
lbragstadlast night we went from 41 - 3116:03
lbragstadso that's a good sign16:04
*** links has quit IRC16:05
lbragstadkmalloc: do you mind if i bump the YAML service catalog stuff to Rocky?16:06
*** AlexeyAbashkin has quit IRC16:06
lbragstadhrybacki: around?16:12
hrybackilbragstad: o/16:15
lbragstadi have a trello/process question16:16
lbragstadwe have the queens board..16:16
lbragstadnot sure when we're going to get storyboard or if the migration is still happening16:17
*** belmoreira has quit IRC16:17
hrybackithat move getting slowed down?16:17
lbragstadi haven't heard anything about it yet16:18
lbragstadduring denver i thought they said it was suppose to happen in january16:18
hrybackithat rings a bell16:18
lbragstadsince we're past a few of the deadlines for queens, there are things on our board that we know we won't get into this release16:19
* hrybacki nods16:19
lbragstadif i create a new board for Rocky and have to migrate it to storyboard later, that's fine16:19
lbragstadbut i was thinking about cleaning out some of the items that are no longer relevant for queens16:20
hrybackilbragstad: want to have a 30 minute work session on call on Monday to clean it up together?16:20
lbragstadsure - that'd work16:20
hrybackishould go quick with two of us. We can even start prepping a Rocky board16:20
lbragstad^ that was my main question16:20
lbragstadbecause if we prep a rocky board, it still makes sense to have epcs16:21
* hrybacki nods16:21
lbragstadbut, by definition, epics are large portions of work16:21
lbragstadand having them span releases isn't uncommon16:21
* hrybacki nods16:21
lbragstadmy worry is duplicating epics...16:22
hrybackiyou thinking of keeping a single board across multiple releases?16:22
hrybackiwell we /can/ move a card (epic) from on board to another16:22
lbragstadi like having aboard per release, for sure16:22
hrybackior reference a card in another board16:22
lbragstadthat's kinda what i'm thinking..16:22
lbragstadwhat if we had a single board for Epics?16:22
lbragstad(kinda like the policy roadmap)16:22
lbragstadand we just link to broken out cards in each release board16:23
hrybackiI don't know if that would flow well16:23
lbragstadah - maybe you're right16:23
hrybackiI think we should keep epics in release boards, and if they span multiple releases we should move the epic from one board to the next as we do the transition work16:23
*** melwitt is now known as jgwentworth16:23
lbragstadare two examples16:24
hrybackileave the cards that were worked in release A in board A, port the epic to board B, and create new cards for work done in release B16:24
* hrybacki looks16:24
lbragstadok - so, don't duplicate the epic at all?16:24
hrybackiwe can either duplicate it and create a backreference e.g. 'Work on this epic began Queens[link to queens epic card]'16:26
lbragstadyeah - that's kinda what i did in the epics for unified limits in the rocky board16:26
hrybackior we can just move the epic card to the next release board. I believe it will retain links to the cards in the previous releases' board for maintain history16:26
* hrybacki nods16:26
lbragstadyeah - it should16:27
lbragstadi think it did when i copied it from the queens roadmap to the rocky roadmap16:27
hrybackieither way works. It's really about which workflow you have a prefer a workflow for16:27
lbragstadso - i do like the ability to pull up the board and see the epics that were worked on in a release16:28
lbragstadfor answering questions like "name 3 features in the Queens release"16:29
*** gyee has joined #openstack-keystone16:31
hrybackilbragstad: yeah that is a good point16:34
hrybackilet's just replicate them for now and if we find that it is confusing to folks we can always move to just porting them?16:35
*** itlinux has joined #openstack-keystone16:35
lbragstadthat works16:35
hrybacki+1, lemme look for a free timcblock on monday16:36
hrybackilbragstad: monday 1430-1500 CST?16:36
lbragstadthat works for me16:36
hrybackiinvite sent lbragstad -- to your gmail (I don't actually have your work email)16:38
lbragstadgmail is my work email lol16:38
hrybackioh :P well then disregard haha16:39
lbragstadaccepted, thanks!16:39
*** itlinux has quit IRC16:42
lbragstaddid our docs change?16:57
lbragstadsomething doesn't look right16:58
lbragstadnevermind... broken link16:59
*** kukacz has quit IRC17:02
*** yangzhenyu has quit IRC17:02
*** dave-mccowan has joined #openstack-keystone17:05
*** harlowja has joined #openstack-keystone17:10
*** fried_rice is now known as fried_rolls17:15
*** hoonetorg has quit IRC17:20
*** itlinux has joined #openstack-keystone17:25
*** david-lyle has quit IRC17:32
openstackgerritMerged openstack/keystone master: Add scope_types to protocol policies
*** tesseract has quit IRC17:35
*** hoonetorg has joined #openstack-keystone17:37
*** itlinux has quit IRC17:38
*** aselius has joined #openstack-keystone17:40
*** AlexeyAbashkin has joined #openstack-keystone17:40
kmalloclbragstad: bump it all you want :)17:41
*** AlexeyAbashkin has quit IRC17:45
openstackgerritMerged openstack/keystone master: Add scope_types to identity provider policies
openstackgerritLance Bragstad proposed openstack/keystone master: Add documentation describing unified limits
lbragstadwxy: gagehugo cmurphy ^17:57
*** rmcall has quit IRC18:01
*** links has joined #openstack-keystone18:02
*** itlinux has joined #openstack-keystone18:05
*** AlexeyAbashkin has joined #openstack-keystone18:09
*** AlexeyAbashkin has quit IRC18:14
*** mvenesio has joined #openstack-keystone18:19
*** itlinux has quit IRC18:21
*** pramodrj07 has joined #openstack-keystone18:24
*** pramodrj07 has quit IRC18:24
*** pramodrj07 has joined #openstack-keystone18:25
*** dtroyer has quit IRC18:31
*** links has quit IRC18:32
*** dtroyer has joined #openstack-keystone18:32
*** panbalag1 has joined #openstack-keystone18:35
*** panbalag has quit IRC18:36
*** aojea_ has quit IRC18:39
*** panbalag1 has quit IRC18:39
openstackgerritLance Bragstad proposed openstack/keystone master: Document flat limit enforcement model
lbragstadalright - stepping away for lunch18:49
*** itlinux has joined #openstack-keystone18:49
*** itlinux has quit IRC18:50
*** Supun has quit IRC18:59
*** Supun has joined #openstack-keystone18:59
*** Supun has quit IRC19:02
*** sambetts is now known as sambetts|afk19:04
*** david-lyle has joined #openstack-keystone19:08
*** comstud has quit IRC19:10
hrybackilbragstad:  storyboard community goal for Rocky19:10
*** harlowja has quit IRC19:14
*** links has joined #openstack-keystone19:21
*** pramodrj07 has quit IRC19:32
openstackgerritMerged openstack/oslo.policy master: Update reno for stable/queens
*** ayoung has quit IRC19:42
*** harlowja has joined #openstack-keystone19:46
*** pramodrj07 has joined #openstack-keystone19:50
*** Pramod has joined #openstack-keystone19:51
*** mvk has joined #openstack-keystone19:53
*** ayoung has joined #openstack-keystone19:54
*** pramodrj07 has quit IRC19:55
*** harlowja_ has joined #openstack-keystone19:58
*** fried_rolls is now known as fried_rice19:58
*** ayoung has quit IRC20:00
*** harlowja has quit IRC20:00
*** Pramod has quit IRC20:02
*** pramodrj07 has joined #openstack-keystone20:02
lbragstadhrybacki: nice20:12
*** mvenesio has quit IRC20:18
*** mvenesio has joined #openstack-keystone20:18
*** mvenesio has quit IRC20:23
openstackgerritLance Bragstad proposed openstack/keystone master: Add documentation describing unified limits
*** knasim-wrs has joined #openstack-keystone20:39
knasim-wrsHi folks, hitting a DB Deadlock issue on Online-migrations, when I contract the Keystone DB20:40
openstackgerritGage Hugo proposed openstack/keystone master: Add functional testing gate
knasim-wrswas wondering if others have seen this?20:40
knasim-wrsWe are skipping a release and going from Newton -> Pike20:41
*** links has quit IRC20:43
lbragstadknasim-wrs: when you say skipping a release, are you stopping at ocata to at least run the migrations?20:46
*** rmcall has joined #openstack-keystone20:46
openstackgerritMerged openstack/keystone master: Document scope_types for ec2 policies
*** rmcall has quit IRC20:59
lbragstadgagehugo: when i install with python-openstackclient i still get
gagehugolbragstad probably have to encode tags in osc21:11
*** aojea has joined #openstack-keystone21:11
lbragstadhuh.. interesting...21:14
lbragstadit's weird that osc doesn't just use what's passed in...21:15
lbragstador what it gets from ksc21:15
gagehugostring encoding in python is a nightmare between 2 and 321:16
gagehugoI don't think the 'u' shows up in py3 since all strings are unicode by default21:16
knasim-wrs@lbragstad: no the previous version of our software incorporates Newton Openstack, the next version incorporates Pike openstack. As part of upgrade, I call db_sync expand, migrate, contract and the contraction fails due to the deadlock21:24
knasim-wrsshould I be running the Ocata migration or expansion / contraction even though my Keystone is not at Ocata?21:24
knasim-wrsshoot :(21:24
knasim-wrswe have always skipped one version of openstack21:24
knasim-wrswent from kilo to mitaka before that and then mitaka to newton and now to pike21:25
lbragstadthe migrations are serial, so i think the process for skip level upgrades require at least running the upgrades from the installed version you want to skip before installing Pike and running those upgrades21:25
knasim-wrsso how can I run Ocata upgrades without installing an Ocata version of Keystone?21:26
lbragstadthat's a good question21:26
lbragstadi don't think i have an answer...21:26
knasim-wrscan I just copy over their DB migration scripts from expand_repo/ migrate_repo/ and contract_repo/ and specify which ones to run first21:26
lbragstadmaybe pull the ocata source somewhere safe and install into a venv?21:26
lbragstadthen run the db_sync command from the venv?21:27
knasim-wrshmm we'd need to package both versions of the Keystone RPM in our installer then21:27
knasim-wrsthat may be problematic for patching21:27
knasim-wrsok gotta try to figure out a way then to run the expand, contract and migration scripts for Ocata first21:28
lbragstadgagehugo: if we want to include into stable/queens we're going to need a backport21:28
cmurphylbragstad: all the migration scripts are in keystone already, why would you need to run an ocata migration?21:28
gagehugolbragstad ok21:29
lbragstadcmurphy: actually - yeah you're right21:29
lbragstadknasim-wrs: i might have given you inaccurate information...21:30
cmurphyit looks like a legit postgres issue to me21:30
lbragstadi defaulted to skip-level upgrades when looking at the issue and seeing Newton -> Pike21:30
*** Pramod has joined #openstack-keystone21:31
*** panbalag has joined #openstack-keystone21:33
*** ayoung has joined #openstack-keystone21:34
knasim-wrsok so the Ocata migrations are already there then21:35
*** pramodrj07 has quit IRC21:35
knasim-wrsthat's what I wanted to confirm21:35
*** aojea has quit IRC21:35
knasim-wrsits something in the DB then21:35
lbragstadgagehugo: it might be good to get dtroyer's advice on
gagehugospilla ^21:36
*** aojea has joined #openstack-keystone21:36
lbragstadlooks good to me outside of the unicode thing, but i tested it locally and it works21:36
cmurphyknasim-wrs: is it persistent? if you try to run the migration again is it still stuck?21:36
*** dave-mccowan has quit IRC21:36
spilladtroyer: any advice on getting rid of unicode on tags??? :)21:38
spillaif we ping them, they will come21:38
lbragstadthat's usually a pretty safe assumption21:39
*** david-lyle has quit IRC21:42
*** dklyle has joined #openstack-keystone21:43
*** aojea has quit IRC21:43
*** aojea has joined #openstack-keystone21:44
*** PramodJ has joined #openstack-keystone21:44
*** PramodJ has quit IRC21:44
*** pramodrj07 has joined #openstack-keystone21:45
*** Pramod has quit IRC21:45
openstackgerritMerged openstack/keystone master: Add scope_types to grant policies
*** phalmos has quit IRC21:49
*** raildo has quit IRC21:58
*** aojea has quit IRC22:08
*** panbalag has quit IRC22:09
openstackgerritMerged openstack/keystone master: Add scope_types to role assignment policies
openstackgerritMerged openstack/keystone master: Add scope_types to group policies
*** panbalag has joined #openstack-keystone22:13
*** panbalag has left #openstack-keystone22:14
*** kukacz has joined #openstack-keystone22:19
dtroyerspilla: I don't know offhand how to fix that, cliff is supposed to be handling the encode/decode bits, I wonder if there is a bit of locale config needed to make it go away?22:24
spillaah ok22:32
spillai can look into it.Do you happen to know cliffs irc nick so i can reach out22:34
openstackgerritMerged openstack/python-keystoneclient master: Override find function in project
lbragstadspilla: cliff is a library we use across several clients22:58
lbragstadspilla: i _think_ dhellmann had a hand in writing it?22:58
spillawell now i feel silly23:01
spillabut thanks23:01
lbragstadspilla:  ;)23:02
lbragstadspilla: i'm sure -sdks has someone familiar with it, too23:03
lbragstadplus dhellmann hangs out there23:04
lbragstadi doubt we'd be the first to hit an issue like this23:04
*** edmondsw has quit IRC23:07
lbragstadda nada23:10
* lbragstad brushes up on his spanish23:10
*** lbragstad is now known as elbragstad23:11
spillalgrabstad if you didnt see the sdks, seems we can get the list in py2 to show up normally but then py3 will have a b infront23:16
spillaso maybe encode based on python versions, or trying to think of alternative work around23:17
*** mvk has quit IRC23:27
*** jgwentworth is now known as melwitt23:28
gagehugowonder if six does anything for this?23:31
elbragstadoh - sure23:33
elbragstadi bet there is a way to accomplish that with six23:33
elbragstadin which case, we might need to patch ksc again?23:33
elbragstadif we do the string conversion using six in ksc, and try to keep things transparent in osc, if that makes sense23:34
spillabasically osc is just handing it off23:35
elbragstador at least that's what i'm hoping for :)23:35
spillai think that could happen23:36
*** aselius has quit IRC23:39
*** spilla has quit IRC23:54
elbragstadgagehugo: spilla this fixes it for me23:58
elbragstadnot sure if that is the right way to do it23:58
gagehugoso that works for osc then?23:58
elbragstadyeah, i made that change in python-keystoneclient and it did the translation before handing it off to osc23:59
elbragstadwhich just relayed the list23:59

Generated by 2.15.3 by Marius Gedminas - find it at!