Thursday, 2018-02-08

*** hoonetorg has quit IRC00:05
*** markvoelker has joined #openstack-keystone00:17
*** markvoelker has quit IRC00:24
openstackgerritzhangzhaoshan proposed openstack/keystoneauth master: Fix a spelling error  https://review.openstack.org/54194900:36
*** gyee has quit IRC00:47
*** zhurong has joined #openstack-keystone00:52
*** edmondsw has joined #openstack-keystone00:53
*** edmondsw has quit IRC00:58
*** brad[] has quit IRC01:15
*** annp has joined #openstack-keystone01:58
*** nicolasbock has quit IRC02:10
*** edmondsw has joined #openstack-keystone02:41
*** edmondsw has quit IRC02:46
*** gongysh has joined #openstack-keystone03:16
*** gongysh has quit IRC03:33
*** dave-mccowan has quit IRC03:39
openstackgerritbaiwenteng proposed openstack/keystone-specs master: Fix typos in keystone-specs  https://review.openstack.org/54201003:49
*** gongysh has joined #openstack-keystone04:03
*** ayoung has quit IRC04:06
openstackgerritwangxiyuan proposed openstack/keystone-specs master: [WIP] Hierarchical Unified Limits  https://review.openstack.org/54080304:10
*** edmondsw has joined #openstack-keystone04:30
*** edmondsw has quit IRC04:34
*** zhurong has quit IRC04:56
*** lbragstad has quit IRC05:37
*** zhurong has joined #openstack-keystone05:49
*** threestrands has quit IRC05:57
*** errr has quit IRC06:01
*** edmondsw has joined #openstack-keystone06:18
*** edmondsw has quit IRC06:22
openstackgerritOpenStack Proposal Bot proposed openstack/keystone master: Imported Translations from Zanata  https://review.openstack.org/54156706:36
*** hoonetorg has joined #openstack-keystone06:44
*** itlinux has quit IRC07:06
*** hoonetorg has quit IRC07:06
*** vish_18 has quit IRC07:08
openstackgerritwangxiyuan proposed openstack/keystone-specs master: Hierarchical Unified Limits  https://review.openstack.org/54080307:10
*** vish_18_ has quit IRC07:10
*** rcernin has quit IRC07:16
*** AlexeyAbashkin has joined #openstack-keystone07:20
*** bhagyashris has quit IRC07:21
*** hoonetorg has joined #openstack-keystone07:23
*** pcaruana has joined #openstack-keystone07:31
*** martinus__ has joined #openstack-keystone07:37
*** AlexeyAbashkin has quit IRC07:38
*** AlexeyAbashkin has joined #openstack-keystone07:43
*** AlexeyAbashkin has quit IRC07:47
*** AlexeyAbashkin has joined #openstack-keystone07:52
*** bhagyashris has joined #openstack-keystone07:53
*** edmondsw has joined #openstack-keystone08:06
*** edmondsw has quit IRC08:11
*** mnaser has quit IRC08:17
*** kmalloc has quit IRC08:17
*** kmalloc has joined #openstack-keystone08:18
*** robcresswell has quit IRC08:18
*** mnaser has joined #openstack-keystone08:18
*** gmann_ has quit IRC08:18
*** tesseract has joined #openstack-keystone08:26
*** gmann_ has joined #openstack-keystone08:27
*** robcresswell has joined #openstack-keystone08:49
*** daidv_ has quit IRC08:56
*** annp has quit IRC08:56
*** daidv_ has joined #openstack-keystone09:02
*** annp has joined #openstack-keystone09:02
openstackgerritSuramya proposed openstack/keystone master: Reorganize api-ref: v3-ext oauth.inc  https://review.openstack.org/53171909:20
*** Suramya_ has joined #openstack-keystone09:22
*** Suramya has joined #openstack-keystone09:23
*** sapd has quit IRC09:29
*** sapd has joined #openstack-keystone09:33
*** gongysh has quit IRC09:36
*** sambetts|afk is now known as sambetts09:51
*** edmondsw has joined #openstack-keystone09:55
*** edmondsw has quit IRC09:59
*** zhurong has quit IRC10:04
*** annp has quit IRC10:08
*** annp has joined #openstack-keystone10:08
*** sticker has joined #openstack-keystone10:29
*** annp has quit IRC10:31
*** StefanPaetowJisc has joined #openstack-keystone10:41
*** links has joined #openstack-keystone10:51
*** sticker has quit IRC10:56
*** sticker has joined #openstack-keystone10:56
*** StefanPaetowJisc has quit IRC10:58
openstackgerritwangxiyuan proposed openstack/keystonemiddleware master: Add arguments for MemcacheClientPool init  https://review.openstack.org/54213311:04
*** panbalag has joined #openstack-keystone11:10
*** panbalag has left #openstack-keystone11:10
openstackgerritwangxiyuan proposed openstack/keystonemiddleware master: Fix the AttributeError: __exit__ error  https://review.openstack.org/54213411:12
*** zhurong has joined #openstack-keystone11:29
*** links has quit IRC11:44
*** nicolasbock has joined #openstack-keystone11:50
openstackgerritSuramya proposed openstack/keystone master: Reorganize api-ref: v3-ext federation service-provider  https://review.openstack.org/53341911:51
*** links has joined #openstack-keystone11:57
*** dave-mccowan has joined #openstack-keystone12:10
*** raildo has joined #openstack-keystone12:16
*** links has quit IRC12:21
*** belmoreira has joined #openstack-keystone12:40
*** jaosorior has quit IRC12:56
*** jaosorior has joined #openstack-keystone12:56
*** links has joined #openstack-keystone13:02
*** AlexeyAbashkin has quit IRC13:03
*** AlexeyAbashkin has joined #openstack-keystone13:04
*** edmondsw has joined #openstack-keystone13:11
*** zhurong has quit IRC13:27
*** d0ugal has quit IRC13:36
*** Supun has joined #openstack-keystone13:37
*** d0ugal has joined #openstack-keystone13:43
*** AlexeyAbashkin has quit IRC13:56
*** AlexeyAbashkin has joined #openstack-keystone13:56
*** McClymontS has joined #openstack-keystone13:57
*** magicboiz has joined #openstack-keystone14:08
*** magicboiz has quit IRC14:23
*** rmcall has joined #openstack-keystone14:36
*** lbragstad has joined #openstack-keystone14:37
*** ChanServ sets mode: +o lbragstad14:37
*** McClymontS has quit IRC14:49
*** magicboiz has joined #openstack-keystone14:49
*** links has quit IRC14:50
openstackgerritColleen Murphy proposed openstack/keystone master: Update OBS install docs for v2 removal  https://review.openstack.org/54224414:51
cmurphylbragstad: ^ turns out i didn't need to update the suse package14:51
*** Supun has quit IRC14:52
lbragstadcmurphy: oh - nice!14:53
*** r-daneel has joined #openstack-keystone14:56
*** itlinux has joined #openstack-keystone15:02
*** StefanPaetowJisc has joined #openstack-keystone15:03
*** links has joined #openstack-keystone15:03
*** StefanPaetowJisc has quit IRC15:12
*** magicboiz has quit IRC15:13
knikollao/15:20
knikollai won't be able to find the time to write up the tests for https://review.openstack.org/#/c/487579/15:21
knikollaanyone wants to take over?15:21
*** rmcall has quit IRC15:23
*** Suramya_ has quit IRC15:25
*** Suramya has quit IRC15:25
*** links has quit IRC15:28
*** brad[] has joined #openstack-keystone15:34
lbragstadI can try and take a look at it15:39
lbragstadknikolla: ^15:39
knikollalbragstad: thanks!15:40
knikollaand sorry15:40
*** itlinux has quit IRC15:42
lbragstadknikolla: no worries - it happens15:50
*** links has joined #openstack-keystone15:52
*** gongysh has joined #openstack-keystone16:00
*** pcaruana has quit IRC16:02
*** mvk_ has quit IRC16:05
*** gongysh has quit IRC16:13
*** belmoreira has quit IRC16:17
*** tesseract has quit IRC16:29
*** tesseract has joined #openstack-keystone16:29
*** itlinux has joined #openstack-keystone16:36
*** sticker has quit IRC16:39
*** openstackgerrit has quit IRC16:48
*** openstackgerrit has joined #openstack-keystone16:56
openstackgerritSuramya proposed openstack/keystone master: Reorganize api-ref: v3-ext federation mapping.inc  https://review.openstack.org/53288516:56
*** Suramya has joined #openstack-keystone16:57
*** itlinux has quit IRC17:00
openstackgerritMerged openstack/keystone master: Reorganize api-ref: v3-ext federation identity-provider  https://review.openstack.org/53341417:09
*** AlexeyAbashkin has quit IRC17:19
*** sambetts is now known as sambetts|af17:20
*** sambetts|af is now known as sambetts|afk17:20
*** AlexeyAbashkin has joined #openstack-keystone17:23
*** AlexeyAbashkin has quit IRC17:28
openstackgerritMerged openstack/keystone master: Reorganize api-ref: v3-ext federation service-provider  https://review.openstack.org/53341917:32
*** AlexeyAbashkin has joined #openstack-keystone17:33
*** AlexeyAbashkin has quit IRC17:37
*** mvk_ has joined #openstack-keystone17:50
*** ayoung has joined #openstack-keystone17:51
*** itlinux has joined #openstack-keystone17:59
*** spiette has quit IRC18:11
openstackgerritKam Nasim proposed openstack/keystoneauth master: Ignore unexpected arguments to token auth plugin  https://review.openstack.org/54235518:11
*** spiette_ has joined #openstack-keystone18:12
lbragstadi think this is the last of the doc consistency reviews https://review.openstack.org/#/c/532885/418:16
cmurphyawesome job Suramya !18:17
lbragstad++18:19
*** tesseract has quit IRC18:37
Suramyacmurphy: lbragstad: o/ :D18:41
*** links has quit IRC18:42
*** Exhar has quit IRC19:06
*** sjmc7 has left #openstack-keystone19:12
*** Exhar has joined #openstack-keystone19:16
gagehugonice19:24
*** kong has quit IRC19:26
*** kong has joined #openstack-keystone19:27
cmurphykmalloc: any new thoughts on https://review.openstack.org/#/c/539347 ?19:30
cmurphylbragstad: i haven't heard from rderose on ^ yet :/19:30
*** lbragstad has quit IRC19:31
*** lbragstad has joined #openstack-keystone19:32
*** ChanServ sets mode: +o lbragstad19:32
lbragstadcmurphy: me either..19:32
lbragstadcmurphy: this is a work around for it, right?19:32
lbragstadwhich is to manually delete the contents of the domain before deleting the domain19:32
cmurphyi wouldn't call it a workaround, it's a fix19:33
cmurphya workaround is what i had on ps519:33
cmurphylbragstad: oh did you mean "there is a work around"?19:33
cmurphythen yes the workaround is manually delete19:34
lbragstadack - yeah that's what i meant19:34
cmurphyi'd like to get it fixed though, it's being pushed for internally19:34
lbragstadi see henry had a concern19:37
*** AlexeyAbashkin has joined #openstack-keystone19:37
lbragstadit sounded the henry's main concern was that it shouldn't be an issue if you use a non-sql resource backend, right?19:38
cmurphywish he was in the channel19:39
lbragstadyeah - me too19:40
lbragstadsame with rderose19:40
lbragstadso handle that user.domain_id -> domain_id relationship in the app, don't we?19:41
openstackgerritMerged openstack/keystone master: Reorganize api-ref: v3-ext federation mapping.inc  https://review.openstack.org/53288519:47
openstackgerritMerged openstack/keystone master: Reorganize api-ref: v3-ext oauth.inc  https://review.openstack.org/53171919:47
cmurphythere's no foreign key in the sqlalchemy model but in core.py we have resource_api.get_domain to make sure there's an associated domain when creating users/groups19:49
*** knasim-wrs has joined #openstack-keystone19:49
lbragstadahh19:49
knasim-wrsdo we support any file based caching backends?19:49
knasim-wrstrying to get dogpile.cache.dbm to work19:49
knasim-wrsConfigFileValueError: Value for option backend is not valid: Valid values are [oslo_cache.memcache_pool, oslo_cache.dict, dogpile.cache.memcached, dogpile.cache.redis, dogpile.cache.memory, dogpile.cache.null], but found 'dogpile.cache.dbm'19:49
lbragstadknasim-wrs: not that i am aware of19:49
lbragstadcc kmalloc ^19:50
knasim-wrsI would STRONGLY discourage anybody to not enable inprocess memory caching with gunicorn. I had lots of services failing since the cache for gunicorn worker processes cannot be shared b/w each other19:51
knasim-wrsI tried dogpile.cache.memory and oslo_cache.dict19:52
knasim-wrslbragstad: thanks for confirming19:54
lbragstadcmurphy: if that relationship was already enforced in the application, i wonder why we introduced a FK?19:55
*** jmlowe has quit IRC19:59
*** mvk_ has quit IRC19:59
cmurphylbragstad: it probably seemed like the correct thing to do from a database management perspective at the time since they're clearly linked entities, i think we've not always done a good job of separating our application logic from our db logic19:59
lbragstadtrue20:00
lbragstadi think that's becoming more and more apparent20:00
lbragstadso - we'll need to de-couple this relationship as long as it's possible to have a non-sql resource backend and a sql identity backend...20:01
cmurphywell it's not possible any more, kmalloc retroactively declared the resource backend to be sql-only https://review.openstack.org/#/c/493621/20:02
cmurphybut with this change we could undo that20:02
kmallocright, i think we did that because it wasn't easy to undo the FK20:02
kmallocsome behavior issues20:02
kmallocthere was some edge case I ran into that make it incompat to remove the FK20:03
kmalloci have been wrakcing my brain to try and figure it out20:03
kmallocknasim-wrs: gunicorn is incompat with keystone's CLI processor20:03
kmallocknasim-wrs: ftr, it never worked right20:03
cmurphykmalloc: did it have to do with the fk not having a name? i think i've figured that out20:03
kmalloccmurphy: i think it was the forward rolling no-dwntime migrations honestly20:04
kmallocand no FK name makes it a nightmare... AND we can't assume folks have run contract phase for runtime20:04
kmallocso, decoupling the FK was basically a "well, someone might or might not have the FK and we can't be sure"20:04
kmalloci *think* that was the long and the short of the issue20:05
kmallocknasim-wrs: that is the issue with the in-process cache, it basically doesn't work well.20:05
cmurphywell - i *think* i figured out the issue with the name, and it only removes the FK if it doesn't exist, and if people are still having this bug we can tell them they need to go run contract20:06
lbragstadright20:07
cmurphyi guess if we're all still uneasy about this, i'll revert to what i had in ps5 which adds a new notification so that users get deleted first, we can have an rc with the bug fixed, and later in rocky when the ansible rolling upgrade job is working we can revisit this20:09
*** jmlowe has joined #openstack-keystone20:10
lbragstadthat's a possibility - are you happy with that cmurphy?20:11
cmurphylbragstad: i can be satisfied with that20:11
lbragstadcan suse?20:11
cmurphyyes20:11
lbragstadcool20:12
cmurphythey just want keystone to stop 500ing it's not important how20:12
lbragstadlet's roll with that since we have a couple people who are still uneasy with it20:12
cmurphy++20:12
lbragstadi think we need to revisit this though, especially with the db troubles we hit with system assignments and unified limits20:12
lbragstadi completely agree that out drivers do *way* too much20:13
lbragstads/our/out/20:14
lbragstadthen we're just left with two bugs for RC https://goo.gl/A5Wz4Z20:15
lbragstadhttps://bugs.launchpad.net/keystone/+bug/1714937 has a workaroudn20:16
openstackLaunchpad bug 1714937 in OpenStack Identity (keystone) "keystone returns 500 on password change" [Low,In progress] - Assigned to Vishakha Agarwal (vishakha.agarwal)20:16
lbragstadif we do another rc20:16
lbragstadwe can include that fix if it lands20:16
*** knasim-wrs has quit IRC20:17
*** raildo has quit IRC20:17
*** knasim-wrs has joined #openstack-keystone20:18
openstackgerritColleen Murphy proposed openstack/keystone master: Delete SQL users before deleting domain  https://review.openstack.org/53934720:19
lbragstadhttps://bugs.launchpad.net/keystone/+bug/1658641 would be nice to have fixed but i don't think it's a release stopper20:19
openstackLaunchpad bug 1658641 in OpenStack Identity (keystone) "Moving/disabling LDAP users break Keystone queries depending on role ID" [Medium,In progress] - Assigned to Kristi Nikolla (knikolla)20:19
lbragstadcmurphy: lgtm20:22
edmondswis there a way for an admin to reset a user's password?20:30
edmondswall I've found is https://developer.openstack.org/api-ref/identity/v3/#change-password-for-user and that requires knowing the original password20:31
cmurphyedmondsw: `openstack user set --password <password> <user>` has always worked for me20:31
edmondswcmurphy so then the API docs are wrong about the orig password being required?20:32
kmalloclbragstad: ++20:33
cmurphyedmondsw: i think the admin command is doing a PATCH /v3/users/id20:33
kmalloci am uneasy with it, but fixing the 500 error is important20:33
edmondswshould have an (optional) there, and a comment about when it's required (wich I assume it is for non-admins)20:33
edmondswcmurphy oh... interesting20:33
edmondswcmurphy still seems to warrant better API documentation here20:34
cmurphyedmondsw: always :)20:34
kmallocyah the admin command is patching user, vs using the change password workflow20:34
lbragstadright - two separate APis20:36
openstackgerritColleen Murphy proposed openstack/keystone master: Add placeholder migrations for Queens  https://review.openstack.org/54241920:41
lbragstadcmurphy: good call20:45
cmurphyo720:45
lbragstadi'll wait to rc until we get that in20:46
lbragstadand your fix20:46
lbragstadthen we should be goo d20:46
edmondswcmurphy 7 is the perfect number after all :)20:47
cmurphylol i think i meant to do 620:48
cmurphyoh well20:48
kmalloclol20:49
kmallocthe correct number of placements would be any number in this list 1, 2, 3, 5, 8, 1320:49
*** ayoung has quit IRC20:52
*** andy_wrs has joined #openstack-keystone20:52
*** jmlowe has quit IRC20:56
*** ChanServ has quit IRC20:57
lbragstadd.) all of the above?21:03
kmalloclbragstad, cmurphy: inline comment https://review.openstack.org/#/c/539347/15 but +2/+A21:06
cmurphykmalloc: yeah agree21:07
lbragstadhttps://review.openstack.org/#/c/539347/3/keystone/identity/core.py21:08
lbragstadi had that comment too21:08
*** Suramya has quit IRC21:12
*** dave-mccowan has quit IRC21:30
*** ChanServ has joined #openstack-keystone21:31
*** barjavel.freenode.net sets mode: +o ChanServ21:31
*** jmlowe has joined #openstack-keystone21:33
*** martinus__ has quit IRC21:36
*** edmondsw has quit IRC21:38
*** dave-mccowan has joined #openstack-keystone21:47
* lbragstad stands in the queue for lenovo support21:47
lbragstadbaha -22:06
lbragstadhttps://imgur.com/a/RB42322:06
lbragstadlol yes!22:07
lbragstadhttp://paste.openstack.org/show/666833/22:07
gagehugo114 seconds22:08
gagehugoslacking22:08
lbragstadjust gettin' warmed up22:09
lbragstadgagehugo: have you tried calling lenovo yet? i forget, was your system affected?22:10
gagehugolbragstad it was according to the site, but I took a quick look and the screws were fine22:11
gagehugothere's a guide somewhere to check22:11
lbragstadoh nice - i should look for that22:12
*** itlinux has quit IRC22:12
gagehugoPop off the back cover, remove screws keeping in battery, remove battery, inspect all screws under battery and tighten loose screws, inspect battery for any damages22:14
gagehugohttps://download.lenovo.com/consumer/hnt/x1carbon5thgen_inspectionforunfastened_screw.mp422:14
gagehugolink is dead now though22:14
lbragstadi wonder how many batteries have been replaced22:21
*** knasim-wrs has quit IRC22:23
*** AlexeyAbashkin has quit IRC22:23
*** rcernin has joined #openstack-keystone22:31
*** andy_wrs has left #openstack-keystone22:33
*** adriant has quit IRC22:38
*** adriant has joined #openstack-keystone22:38
*** mr_snuf has joined #openstack-keystone22:58
*** mvk_ has joined #openstack-keystone22:59
mr_snufhi. im trying to use the identity api through curl running some examples from the official docs. i can get a token but i can't seem to use that token to make other requests by storing it on an environment variable. for example, this command doesn't work23:00
mr_snufcurl -i -H "X-Auth-Token: $TOKEN" "<url>:5000/v3/domains"23:00
mr_snufbut if i copy and paste the token there manually it works23:00
mr_snuftried some variations of that command but nothing so far23:01
lbragstadmr_snuf: are you exporting the token as an env?23:01
mr_snufyeah23:01
mr_snufjust a sec23:01
mr_snufexport TOKEN=`curl -i -H "Content-Type: application/json" -d @token-request.json "http://<url>:5000/v3/auth/tokens" | awk '/X-Subject-Token/ {print $2}'`23:02
lbragstadwhen you echo the env, do you see the token?23:02
mr_snufyep, i see it23:02
lbragstaddoes it contain a newline after the token?23:02
mr_snufi put another grep at the end of that export with | xargs to trim the token in case there were newlines or spaces23:03
mr_snufit didnt work23:03
mr_snufi'll double check if | xargs removes newlines23:03
lbragstadif you export the env with the token and not the newline, does it work?23:03
mr_snufit did... thanks. i guess im screwing it up when using awk to get the token23:05
lbragstadthat's been reported before23:05
lbragstadthe workaround would be to trim newlines from the token before sourcing the env23:06
lbragstadmr_snuf: can you string tr on the end of your awk statement?23:08
mr_snufi see... i tried tr -d "\n" but still doesn't work. if you have any suggestions on how to trim this token id appreciate it23:08
mr_snufyeah23:08
mr_snufinteresting. "\n\r" works23:09
lbragstadoh - when you pipe the result to tr?23:10
mr_snufyeah23:10
lbragstadtr -d "\n\r"23:10
mr_snufyeah that solves the problem :) thanks a lot!23:10
lbragstadno problem - not sure how much help i was :)23:11
*** dave-mccowan has quit IRC23:12
openstackgerritMerged openstack/keystone master: Delete SQL users before deleting domain  https://review.openstack.org/53934723:15
openstackgerritMerged openstack/pycadf master: Updated from global requirements  https://review.openstack.org/52379123:15
*** mr_snuf has quit IRC23:29
openstackgerritMerged openstack/keystone master: Add placeholder migrations for Queens  https://review.openstack.org/54241923:37
*** kong has left #openstack-keystone23:58

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!