| *** oikiki has quit IRC | 00:02 | |
| *** oikiki has joined #openstack-keystone | 00:03 | |
| *** masuberu has quit IRC | 00:35 | |
| *** masuberu has joined #openstack-keystone | 00:37 | |
| *** tonytan4ever has joined #openstack-keystone | 00:40 | |
| lbragstad | wxy: o/ just a heads up but i proposed an alternate meeting time https://review.openstack.org/#/c/550260/ | 01:01 |
|---|---|---|
| wxy | lbragstad: Cool, thanks for the proposal. Looking now. | 01:04 |
| *** germs has joined #openstack-keystone | 01:06 | |
| *** germs has quit IRC | 01:06 | |
| *** germs has joined #openstack-keystone | 01:06 | |
| *** gyee has quit IRC | 01:08 | |
| *** itlinux has joined #openstack-keystone | 01:10 | |
| *** david-lyle has joined #openstack-keystone | 01:10 | |
| *** germs has quit IRC | 01:11 | |
| *** jmlowe has quit IRC | 01:24 | |
| *** lbragstad has quit IRC | 01:27 | |
| *** itlinux has quit IRC | 01:42 | |
| *** oikiki has quit IRC | 01:44 | |
| *** oikiki has joined #openstack-keystone | 01:45 | |
| *** zhurong has joined #openstack-keystone | 01:45 | |
| *** jmlowe has joined #openstack-keystone | 01:46 | |
| *** david-lyle has quit IRC | 01:47 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 01:49 | |
| *** AlexeyAbashkin has quit IRC | 01:53 | |
| *** dave-mccowan has joined #openstack-keystone | 01:56 | |
| *** harlowja has quit IRC | 02:13 | |
| *** edmondsw has quit IRC | 02:21 | |
| *** itlinux has joined #openstack-keystone | 02:22 | |
| *** edmondsw has joined #openstack-keystone | 02:22 | |
| *** oikiki has quit IRC | 02:24 | |
| *** germs has joined #openstack-keystone | 02:25 | |
| *** markvoelker has quit IRC | 02:25 | |
| *** markvoelker has joined #openstack-keystone | 02:26 | |
| *** edmondsw has quit IRC | 02:26 | |
| *** jmlowe has quit IRC | 02:28 | |
| *** germs has quit IRC | 02:29 | |
| *** guys has joined #openstack-keystone | 02:36 | |
| *** itlinux has quit IRC | 02:36 | |
| *** masuberu has quit IRC | 02:42 | |
| guys | the testsuite for keystoneauth seems to be broken, see https://paste.xinu.at/2n1G0xm86/ | 02:43 |
| *** tonytan4ever_brb has joined #openstack-keystone | 02:43 | |
| guys | assertItemsEqual needs to be changed to assertCountEqual in keystoneauth1/tests/unit/extras/kerberos/test_{fedkerb,kerberos}_loading.py | 02:43 |
| *** annp has joined #openstack-keystone | 02:44 | |
| *** tonytan4ever has quit IRC | 02:44 | |
| *** namnh has joined #openstack-keystone | 02:47 | |
| *** gongysh has joined #openstack-keystone | 02:50 | |
| *** oikiki has joined #openstack-keystone | 02:52 | |
| *** markvoelker has quit IRC | 02:53 | |
| *** markvoelker has joined #openstack-keystone | 02:53 | |
| openstackgerrit | Mark Hamzy proposed openstack/keystone master: Fix formatting of ImportError https://review.openstack.org/549870 | 02:55 |
| *** oikiki has quit IRC | 02:58 | |
| *** masber has joined #openstack-keystone | 03:02 | |
| *** itlinux has joined #openstack-keystone | 03:04 | |
| *** itlinux has quit IRC | 03:07 | |
| *** tonytan4ever_brb has quit IRC | 03:16 | |
| *** masber has quit IRC | 03:36 | |
| *** masber has joined #openstack-keystone | 03:47 | |
| *** links has joined #openstack-keystone | 03:59 | |
| *** dave-mccowan has quit IRC | 04:08 | |
| wxy | guys: what unittest or unittest2 python lib version are you using? | 04:10 |
| wxy | guys: for unittest, the version should be >=2.7 | 04:12 |
| guys | using the unittest module from the stdlib (python3 build is 3.6.4-2, python2 build is 2.7.14-2) | 04:19 |
| guys | I was attempting to rebuild the official Arch Linux packages | 04:20 |
| *** nicolasbock has quit IRC | 04:21 | |
| guys | wxy: FWIW adding sed to the source prepare() function in https://git.archlinux.org/svntogit/community.git/tree/trunk/PKGBUILD?h=packages/python-keystoneauth1 just makes this work perfectly | 04:24 |
| *** links has quit IRC | 04:25 | |
| *** germs has joined #openstack-keystone | 04:26 | |
| *** germs has quit IRC | 04:26 | |
| *** germs has joined #openstack-keystone | 04:26 | |
| *** links has joined #openstack-keystone | 04:27 | |
| *** germs has quit IRC | 04:31 | |
| *** masuberu has joined #openstack-keystone | 04:36 | |
| *** masber has quit IRC | 04:40 | |
| *** masber has joined #openstack-keystone | 04:40 | |
| *** masuberu has quit IRC | 04:42 | |
| *** gongysh has quit IRC | 04:57 | |
| *** gongysh has joined #openstack-keystone | 04:59 | |
| *** zhurong has quit IRC | 05:08 | |
| *** edmondsw has joined #openstack-keystone | 05:09 | |
| *** edmondsw has quit IRC | 05:14 | |
| *** jaosorior has joined #openstack-keystone | 05:18 | |
| *** masuberu has joined #openstack-keystone | 05:32 | |
| *** masber has quit IRC | 05:35 | |
| *** Supun has joined #openstack-keystone | 05:52 | |
| *** david-lyle has joined #openstack-keystone | 05:59 | |
| *** gongysh has quit IRC | 06:04 | |
| *** gongysh has joined #openstack-keystone | 06:05 | |
| *** rcernin_ has joined #openstack-keystone | 06:18 | |
| *** rcernin has quit IRC | 06:21 | |
| *** germs has joined #openstack-keystone | 06:27 | |
| *** germs has quit IRC | 06:27 | |
| *** germs has joined #openstack-keystone | 06:27 | |
| *** Supun has quit IRC | 06:30 | |
| *** germs has quit IRC | 06:31 | |
| openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone master: Imported Translations from Zanata https://review.openstack.org/550348 | 06:32 |
| *** sapd_ has joined #openstack-keystone | 06:35 | |
| *** masuberu has quit IRC | 06:38 | |
| *** sapd__ has quit IRC | 06:39 | |
| *** links has quit IRC | 06:41 | |
| wxy | guys: I found a bug here: https://bugs.python.org/issue17866 the assertItemsEqual has been renamed to assertCountEqual after python3.2 | 06:41 |
| wxy | guys: So if you don't use unittest2, I guess the test will fail after python3.2 | 06:42 |
| *** zhurong has joined #openstack-keystone | 06:49 | |
| *** links has joined #openstack-keystone | 06:51 | |
| guys | I mean, this is why it's also available under six.assertCountEqual for any version of python... | 06:53 |
| guys | if the tests are meant to work with unittest, they should do so and be tested without unittest2 :P | 06:53 |
| guys | wxy: FWIW it is failing on python2 as well, oddly | 06:55 |
| guys | not sure why | 06:56 |
| wxy | guys: emm. a little strange. I'm still checking. | 06:56 |
| guys | You can see a traceback in /build/python-keystoneauth1/src/keystoneauth-3.4.0-py2/keystoneauth1/tests/unit/extras/kerberos/test_fedkerb_loading.py note the -py2 directory name | 06:57 |
| *** edmondsw has joined #openstack-keystone | 06:58 | |
| wxy | guys: I tested locally, py27 works, but py35 not. | 06:58 |
| guys | I'm super confused why py27 failed, indeed. I do know that py35 is why felixonmars ignored errors in the python 3 testsuite | 07:00 |
| wxy | for your previous question, I think because that unittest2 is in the openstack global requirements. https://github.com/openstack/requirements/blob/master/global-requirements.txt#L441 | 07:01 |
| wxy | guys: for py27, I have no idea as well now. :( | 07:02 |
| *** edmondsw has quit IRC | 07:03 | |
| wxy | guys: maybe your py2 is <2.7 ? just a guess | 07:03 |
| *** rcernin has joined #openstack-keystone | 07:05 | |
| *** rcernin_ has quit IRC | 07:06 | |
| guys | the tests still fail if I install python2-unittest2 | 07:09 |
| guys | 11:20 PM <guys> using the unittest module from the stdlib (python3 build is 3.6.4-2, python2 build is 2.7.14-2) | 07:09 |
| *** threestrands_ has joined #openstack-keystone | 07:09 | |
| *** threestrands_ has quit IRC | 07:09 | |
| *** threestrands_ has joined #openstack-keystone | 07:09 | |
| *** threestrands has quit IRC | 07:10 | |
| *** threestrands_ has quit IRC | 07:13 | |
| guys | wxy: the testsuite already seems to import six, which is enough to redefine assertCountEqual to work everywhere AFAIK | 07:16 |
| guys | So it seems to make sense to switch it regardless | 07:16 |
| guys | wxy: AFAICT unittest2 isn't really useful on python3. This is why Arch does not provide a python3 version of the package. | 07:22 |
| guys | relying on some global requirement that does not seem to be necessary for this specific module, to ensure that python3 tests work using a python2 style backport of unittest, seems to be less "clean" than using python3 tests with six to smooth the way | 07:24 |
| wxy | guys: seems a lot projects use assertItemsEqual http://codesearch.openstack.org/?q=assertItemsEqual&i=nope&files=&repos= so maybe it's better to create a bug for tracing. | 07:26 |
| *** martinus__ has joined #openstack-keystone | 07:46 | |
| *** pcaruana has joined #openstack-keystone | 07:54 | |
| *** pcaruana has quit IRC | 07:55 | |
| *** pcaruana has joined #openstack-keystone | 07:55 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 07:58 | |
| *** gus has quit IRC | 08:02 | |
| *** adriant has quit IRC | 08:03 | |
| *** adriant has joined #openstack-keystone | 08:03 | |
| *** gus has joined #openstack-keystone | 08:04 | |
| *** tesseract has joined #openstack-keystone | 08:22 | |
| *** germs has joined #openstack-keystone | 08:27 | |
| *** germs has quit IRC | 08:27 | |
| *** germs has joined #openstack-keystone | 08:27 | |
| *** threestrands has joined #openstack-keystone | 08:32 | |
| *** threestrands has quit IRC | 08:32 | |
| *** threestrands has joined #openstack-keystone | 08:32 | |
| *** germs has quit IRC | 08:32 | |
| *** threestrands has quit IRC | 08:36 | |
| *** jaosorior_ has joined #openstack-keystone | 08:37 | |
| *** jaosorior has quit IRC | 08:40 | |
| *** rcernin has quit IRC | 08:42 | |
| *** edmondsw has joined #openstack-keystone | 08:46 | |
| *** guys has quit IRC | 08:49 | |
| *** edmondsw has quit IRC | 08:50 | |
| *** jaosorior_ is now known as jaosorior | 09:03 | |
| *** guys has joined #openstack-keystone | 09:05 | |
| *** felipemonteiro has joined #openstack-keystone | 09:18 | |
| *** gongysh has quit IRC | 09:32 | |
| *** gongysh has joined #openstack-keystone | 09:34 | |
| *** namnh has quit IRC | 09:49 | |
| *** slunkad_ has quit IRC | 09:51 | |
| *** slunkad has joined #openstack-keystone | 09:54 | |
| *** oikiki has joined #openstack-keystone | 09:57 | |
| *** oikiki has quit IRC | 10:03 | |
| *** kukacz has quit IRC | 10:17 | |
| *** zhurong has quit IRC | 10:23 | |
| *** annp has quit IRC | 10:23 | |
| *** germs has joined #openstack-keystone | 10:28 | |
| *** germs has quit IRC | 10:28 | |
| *** germs has joined #openstack-keystone | 10:28 | |
| *** germs has quit IRC | 10:33 | |
| *** felipemonteiro has quit IRC | 10:33 | |
| *** edmondsw has joined #openstack-keystone | 10:34 | |
| *** edmondsw has quit IRC | 10:38 | |
| *** gongysh has quit IRC | 11:10 | |
| *** gongysh has joined #openstack-keystone | 11:17 | |
| *** gongysh has quit IRC | 11:21 | |
| *** nicolasbock has joined #openstack-keystone | 11:31 | |
| *** karthi has joined #openstack-keystone | 12:12 | |
| *** meltdown_spectre has joined #openstack-keystone | 12:13 | |
| *** meltdown_spectre is now known as eschwartz | 12:13 | |
| *** mattoliverau has quit IRC | 12:21 | |
| *** mattoliverau has joined #openstack-keystone | 12:22 | |
| *** guys has quit IRC | 12:28 | |
| *** germs has joined #openstack-keystone | 12:29 | |
| *** germs has quit IRC | 12:29 | |
| *** germs has joined #openstack-keystone | 12:29 | |
| *** nicolasbock has quit IRC | 12:31 | |
| *** dave-mccowan has joined #openstack-keystone | 12:32 | |
| *** sticker has joined #openstack-keystone | 12:33 | |
| *** germs has quit IRC | 12:34 | |
| *** guys has joined #openstack-keystone | 12:38 | |
| *** lbragstad has joined #openstack-keystone | 12:39 | |
| *** ChanServ sets mode: +o lbragstad | 12:39 | |
| *** felipemonteiro has joined #openstack-keystone | 12:47 | |
| *** karthi has quit IRC | 12:48 | |
| lbragstad | o/ | 12:58 |
| *** karthi has joined #openstack-keystone | 13:09 | |
| *** karthi has quit IRC | 13:24 | |
| *** edmondsw_ has joined #openstack-keystone | 13:25 | |
| openstackgerrit | Johannes Grassler proposed openstack/keystone-specs master: Add whitelist-extension-for-app-creds https://review.openstack.org/396331 | 13:39 |
| knikolla | o/ | 13:54 |
| knikolla | lbragstad: cmurphy: during the retro we mentioned a weekly summary etherpad if i'm not wrong | 13:55 |
| knikolla | where is that | 13:55 |
| cmurphy | it's in the footer of the weekly summary email | 13:56 |
| cmurphy | knikolla: https://etherpad.openstack.org/p/keystone-team-newsletter | 13:56 |
| knikolla | cmurphy: thanks! bookmarking | 13:57 |
| cmurphy | \o/ | 13:57 |
| cmurphy | and again feel free to make changes to the template | 13:58 |
| lbragstad | cmurphy: this contains the template for every weekly report we've sent? | 14:00 |
| lbragstad | ah - yep, looks like it | 14:00 |
| cmurphy | lbragstad: it contains a generic template | 14:00 |
| cmurphy | which gets copied for each week | 14:01 |
| *** karthi has joined #openstack-keystone | 14:03 | |
| *** karthi has quit IRC | 14:08 | |
| *** germs has joined #openstack-keystone | 14:08 | |
| *** germs has quit IRC | 14:08 | |
| *** germs has joined #openstack-keystone | 14:08 | |
| *** germs has quit IRC | 14:09 | |
| *** germs has joined #openstack-keystone | 14:09 | |
| *** germs has quit IRC | 14:09 | |
| *** germs has joined #openstack-keystone | 14:09 | |
| *** felipemonteiro has quit IRC | 14:11 | |
| *** lbragstad has quit IRC | 14:15 | |
| *** tonytan4ever has joined #openstack-keystone | 14:17 | |
| *** lbragstad has joined #openstack-keystone | 14:21 | |
| *** ChanServ sets mode: +o lbragstad | 14:21 | |
| *** tonytan4ever has quit IRC | 14:23 | |
| *** spilla has joined #openstack-keystone | 14:27 | |
| *** germs has quit IRC | 14:33 | |
| knikolla | lbragstad: stumbled upon this bug the other day https://bugs.launchpad.net/keystone/+bug/1754048 | 14:33 |
| openstack | Launchpad bug 1754048 in OpenStack Identity (keystone) "Federated domain is reported when validating a federated token" [Undecided,New] | 14:33 |
| knikolla | the token code is really a maze. | 14:34 |
| lbragstad | yeah... it's dense | 14:34 |
| lbragstad | i'd love to get rid of it this release | 14:34 |
| knikolla | lbragstad: that's probably a bug to fix while refactoring than, rather than prior. | 14:35 |
| knikolla | then* | 14:35 |
| lbragstad | yeah... it could be | 14:36 |
| lbragstad | i need to pick that back up soo | 14:36 |
| lbragstad | soon* | 14:36 |
| knikolla | i'll be happy to help. | 14:36 |
| lbragstad | i'd gladly accept it :) | 14:36 |
| lbragstad | i think we can safely break the new token model out into it's own patch | 14:37 |
| *** links has quit IRC | 14:37 | |
| lbragstad | and keep both token models side-by-side until we get the refactor done, | 14:37 |
| lbragstad | then we can remove the old one | 14:37 |
| knikolla | yeah, a gradual replacement makes sense. i'd love to see us documenting this while we do it. | 14:37 |
| knikolla | in the developer docs with diagrams | 14:37 |
| knikolla | start tackling the technical and knowledge debt | 14:38 |
| *** r-daneel has joined #openstack-keystone | 14:38 | |
| lbragstad | "When you decide to rewrite a major part of keystone - follow this easy guide" | 14:38 |
| knikolla | lbragstad: more like "discovered a bug in the keystone token code and want to fix it but have no idea what's going on? read this guide!" | 14:39 |
| cmurphy | 1) cry 2) ... | 14:39 |
| knikolla | cmurphy: lol | 14:39 |
| lbragstad | 2) cry harder 3) pull yourself together 4) repeat step 1 | 14:40 |
| cmurphy | :') | 14:40 |
| knikolla | there needs to be a reboot your machine step somewhere | 14:40 |
| lbragstad | that's after you get the angry sobs | 14:40 |
| *** mvk has quit IRC | 14:41 | |
| *** karthi has joined #openstack-keystone | 15:06 | |
| *** edmondsw_ is now known as edmondsw | 15:13 | |
| *** karthi has quit IRC | 15:14 | |
| ayoung | lbragstad, cmurphy I think I'd like to us and Johannes Grassler all together on a video call and talk through RBAC in Middleware and whitelist-extension-for-app-creds. I think we are a really close to a workable solution, but I want to make sure you understand my concerns. I really like this approach, so my -2 is just to make sure we are in sync, not to stop progress. | 15:21 |
| cmurphy | jgr: ^ | 15:21 |
| *** pcichy has joined #openstack-keystone | 15:24 | |
| ayoung | cmurphy, thanks. | 15:25 |
| ayoung | cmurphy, I'm thinkg of a scheme something like this: | 15:25 |
| ayoung | if we consider the current policy rules as the key, and the URL template as the value, we could make a dictionary for the lookups | 15:25 |
| ayoung | that might be too big a stretch, but it would be wonderful if we could treat the policy rules as roles | 15:26 |
| ayoung | so Member implies compute:create_server | 15:26 |
| jgr | ayoung: video (or at least voice) call sounds like a plan. Cannot discuss much right now - currently in meeting :-/ | 15:26 |
| ayoung | the scheme that jgr is proposing would reference the URL templates from those roles | 15:26 |
| ayoung | we could also do a separate UUID as the key, but those are ugly and unreadable, | 15:27 |
| ayoung | jgr ++ let me know when you are available | 15:27 |
| cmurphy | ayoung: it might be good to get johnthetubaguy or zaneb on this too, they were helpful when we were talking about this at the ptg | 15:27 |
| ayoung | I have sometjhing at 11:30 Easter (in one hour) | 15:27 |
| jgr | ayoung: what's your time zone (mine's CEST)? | 15:27 |
| ayoung | jgr, US Eastern | 15:27 |
| *** karthi has joined #openstack-keystone | 15:29 | |
| openstackgerrit | Mark Hamzy proposed openstack/keystone master: Fix formatting of ImportError https://review.openstack.org/549870 | 15:29 |
| jgr | Ok...so I've got meetings until 11:30 Easter (17:30 CEST) today. After that would be fine if it doesn't get too late (need to fit a grocery run in somewhere :-)) | 15:29 |
| *** mvk has joined #openstack-keystone | 15:30 | |
| *** germs has joined #openstack-keystone | 15:31 | |
| *** germs has quit IRC | 15:31 | |
| *** germs has joined #openstack-keystone | 15:31 | |
| knikolla | i'd like to be in this too | 15:31 |
| cmurphy | ++ | 15:31 |
| jgr | Failing that I can make some time tomorrow or Friday afternoon (got a half hour thing at 15:00 CEST on Thursday and 15:30 on Friday), other than that I should be free. | 15:32 |
| jgr | Maybe we should create a Doodle :-) | 15:32 |
| *** germs has quit IRC | 15:32 | |
| *** germs has joined #openstack-keystone | 15:35 | |
| *** germs has quit IRC | 15:35 | |
| *** germs has joined #openstack-keystone | 15:35 | |
| openstackgerrit | Merged openstack/keystone master: Remove @expression from tags https://review.openstack.org/548399 | 15:46 |
| ayoung | jgr, want to go for tomorrow? Morning my time, afternoon your time, should work for everyone. cmurphy you are also CEST, right? Or am I confusing you with someone else | 15:50 |
| *** oikiki has joined #openstack-keystone | 15:50 | |
| cmurphy | ayoung: you are correct | 15:50 |
| lbragstad | i have a wide open schedule tomorrow, fwiw | 15:51 |
| cmurphy | knikolla: ^ | 15:51 |
| jgr | ayoung: tomorrow is fine with me. I've got a meeting from 15:00-16:00 CEST (09:00-10:00 EST), other than that I'm free. | 15:51 |
| knikolla | works for me | 15:51 |
| lbragstad | i think zaneb is in EST, too | 15:52 |
| ayoung | 10:00 EST works for me. Google Hangout the Video conf tool of choice? I can also set up bluejeans. | 15:52 |
| lbragstad | but we should check with him and johnthetubaguy to see if they can make it | 15:52 |
| lbragstad | bluejeans works well | 15:52 |
| lbragstad | imo | 15:52 |
| ayoung | zane shows as US NC so yes. I can ping him | 15:53 |
| lbragstad | ayoung: in -dev now | 15:54 |
| lbragstad | talking to him | 15:54 |
| *** david-lyle has quit IRC | 15:54 | |
| ayoung | Gah...I am already 3pl booked fo 10 AM tomorrow. Let me see if it is stuff I can skip | 15:56 |
| ayoung | OK, yeah, I can skip them, and slot this in | 15:57 |
| lbragstad | jgr: cmurphy knikolla we've got zaneb in openstack-dev working on a time that works | 15:58 |
| *** pcaruana has quit IRC | 16:10 | |
| *** guys has quit IRC | 16:23 | |
| *** guys has joined #openstack-keystone | 16:33 | |
| cmurphy | hrybacki: around? I'd like to add a link to https://trello.com/b/Vo6dRALh/keystone-queens-retrospective in my ptg summary but it is a private board | 16:35 |
| *** itlinux has joined #openstack-keystone | 16:35 | |
| *** sticker has quit IRC | 16:41 | |
| *** karthi has quit IRC | 16:47 | |
| *** karthi has joined #openstack-keystone | 17:08 | |
| *** karthi has quit IRC | 17:13 | |
| *** david-lyle has joined #openstack-keystone | 17:16 | |
| *** oikiki has quit IRC | 17:28 | |
| *** oikiki has joined #openstack-keystone | 17:28 | |
| *** david-lyle has quit IRC | 17:33 | |
| kmalloc | ayoung: make sure i'm around for that call [it's going to have to be next week] | 17:34 |
| kmalloc | ayoung: i just commented on your comment for that spec. | 17:34 |
| ayoung | kmalloc, tomorrow at 9 My time | 17:34 |
| kmalloc | ayoung: i'm swamped / unavailable until monday | 17:34 |
| ayoung | so too early day and time wise for you | 17:34 |
| ayoung | I'll look at your comments | 17:34 |
| kmalloc | i will not have access to a computer. | 17:34 |
| kmalloc | or minimally will | 17:35 |
| kmalloc | (well not one i can do anything beyond text chat/irc on) | 17:35 |
| ayoung | kmalloc, -2 is not due to endpoint. That was just a comment on the point there. THe -2 is due to the URL scheme. But we'll work it out once we discuss | 17:36 |
| kmalloc | not based upon your comment there. | 17:36 |
| kmalloc | so you were referencing an earlier comment? | 17:36 |
| kmalloc | oh, yes we can let users put their own URLS there | 17:37 |
| kmalloc | this is caveate emptor | 17:37 |
| ayoung | kmalloc, sorry if I gave that impression. I was still going to +1 it when I wrote that comment, as it was just a suggestion. The issue is getting this and the RBAC in middleware approach in sync, and I have some ideas that will make both better | 17:37 |
| kmalloc | we CANNOT reconcile a URL from another service | 17:37 |
| kmalloc | it's not doable with the architecture and lack of centralized "waht is all your URLs" | 17:37 |
| ayoung | kmalloc, we actually have all that information already | 17:37 |
| kmalloc | no, we don't | 17:37 |
| ayoung | have you looked? | 17:38 |
| kmalloc | we do not have that information available to us. | 17:38 |
| ayoung | Heh. You sound so confident. And I know you are wrong | 17:38 |
| kmalloc | we have the same issues with having to ask each service (reason why policy centralization in keystone can't work) | 17:38 |
| ayoung | kmalloc, so...that is part of what I want to talk through. I realize that we don't need "everything" | 17:38 |
| kmalloc | and that there are microversions per service | 17:39 |
| ayoung | we only need "here are the blessed sets of URLs | 17:39 |
| kmalloc | which change what is there | 17:39 |
| ayoung | I don't want users adding freeform strings for URL fragments. That is going to be a disaster to debug. | 17:39 |
| kmalloc | you still need to ask actively every time... and the app cred may become invalid when you update | 17:39 |
| ayoung | Yep | 17:39 |
| ayoung | I'm ok with that | 17:39 |
| kmalloc | so no no no, -2 to asking everyt ime | 17:39 |
| kmalloc | like, hard -2 | 17:40 |
| kmalloc | and you have to ask. | 17:40 |
| kmalloc | because only nova knows what urls are allowed | 17:40 |
| ayoung | Wait...so are you hard -2ing the spec App Cred spec? | 17:40 |
| kmalloc | and what if you don't specify an endpoint specifically | 17:40 |
| kmalloc | what are you supposed to ask (which compute)? | 17:40 |
| kmalloc | no, i'm -2ing your requirement to know what urls. | 17:40 |
| kmalloc | are "blessed" | 17:40 |
| ayoung | Damn it, do you have time now? | 17:41 |
| kmalloc | this is the same distributed issue we have / had with policy. | 17:41 |
| kmalloc | yes. i do. | 17:41 |
| kmalloc | now works. | 17:41 |
| kmalloc | give me a sec | 17:41 |
| *** gyee has joined #openstack-keystone | 17:48 | |
| *** felipemonteiro has joined #openstack-keystone | 17:49 | |
| lbragstad | who here is interested in being a driver for the oslo.limits group in launchpad? | 17:49 |
| lbragstad | i don't know if i want to start by adding the entire keystone-core group and oslo-core groups right off the bat | 17:50 |
| guys | so regarding the testsuite failures I mentioned last night, would it make sense to open a general https://launchpad.net/openstack bug to have assertItemsEqual transitioned to assertCountEqual/python-six | 17:51 |
| *** pcaruana has joined #openstack-keystone | 17:57 | |
| * lbragstad goes to find lunch | 18:05 | |
| *** AlexeyAbashkin has quit IRC | 18:06 | |
| rodrigods | lbragstad, i'm interested in following the progress | 18:10 |
| rodrigods | so basically, reviews | 18:11 |
| *** david-lyle has joined #openstack-keystone | 18:21 | |
| *** mvk has quit IRC | 18:31 | |
| *** r-daneel has quit IRC | 18:33 | |
| *** r-daneel has joined #openstack-keystone | 18:34 | |
| *** david-lyle has quit IRC | 18:35 | |
| *** tesseract has quit IRC | 18:53 | |
| ayoung | OK... cmurphy I think that was a good talk. kmalloc and I are near enough in understanding that I think we can make it owrk. I have a summary from our chat that I am going to add as a review to the spec | 18:54 |
| ayoung | I'll talk through what we meant tomorow so there is no misunderstanding, though, as these notes are kinda brief | 18:54 |
| kmalloc | thanks ayoung | 18:55 |
| cmurphy | awesome, thanks ayoung and kmalloc | 18:57 |
| *** david-lyle has joined #openstack-keystone | 19:03 | |
| *** mvk has joined #openstack-keystone | 19:14 | |
| *** harlowja has joined #openstack-keystone | 19:26 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 19:33 | |
| *** r-daneel_ has joined #openstack-keystone | 19:34 | |
| *** r-daneel has quit IRC | 19:35 | |
| *** r-daneel_ is now known as r-daneel | 19:35 | |
| *** AlexeyAbashkin has quit IRC | 19:37 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 19:38 | |
| *** nicolasbock has joined #openstack-keystone | 19:39 | |
| *** germs_ has joined #openstack-keystone | 19:52 | |
| *** germs__ has joined #openstack-keystone | 19:54 | |
| *** germs has quit IRC | 19:54 | |
| *** martinus__ has quit IRC | 19:56 | |
| *** martinus__ has joined #openstack-keystone | 19:57 | |
| *** germs_ has quit IRC | 19:57 | |
| *** germs__ is now known as germs | 19:58 | |
| *** germs has quit IRC | 19:58 | |
| *** germs has joined #openstack-keystone | 19:58 | |
| *** felipemonteiro has quit IRC | 19:58 | |
| *** david-lyle has quit IRC | 20:07 | |
| *** r-daneel_ has joined #openstack-keystone | 20:09 | |
| *** r-daneel has quit IRC | 20:09 | |
| *** r-daneel_ is now known as r-daneel | 20:09 | |
| *** david-lyle has joined #openstack-keystone | 20:15 | |
| *** AlexeyAbashkin has quit IRC | 20:29 | |
| *** d0ugal has quit IRC | 20:40 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 20:45 | |
| *** AlexeyAbashkin has quit IRC | 20:50 | |
| *** d0ugal has joined #openstack-keystone | 20:52 | |
| *** david-lyle has quit IRC | 20:53 | |
| lbragstad | is anyone interested in helping with project onboarding in vancouver? | 20:55 |
| cmurphy | sure | 20:55 |
| lbragstad | i'm going to reserve a time slot and the foundation is asking for a list of speakers | 20:55 |
| lbragstad | cmurphy: thanks | 20:56 |
| *** AlexeyAbashkin has joined #openstack-keystone | 21:04 | |
| *** pcaruana has quit IRC | 21:12 | |
| *** r-daneel_ has joined #openstack-keystone | 21:22 | |
| *** r-daneel has quit IRC | 21:23 | |
| *** r-daneel_ is now known as r-daneel | 21:23 | |
| *** AlexeyAbashkin has quit IRC | 21:28 | |
| *** oikiki has quit IRC | 21:29 | |
| *** oikiki has joined #openstack-keystone | 21:30 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Mark the implied role API as stable https://review.openstack.org/550611 | 21:30 |
| *** r-daneel has quit IRC | 22:07 | |
| *** david-lyle has joined #openstack-keystone | 22:08 | |
| *** openstackstatus has quit IRC | 22:13 | |
| *** openstack has joined #openstack-keystone | 22:13 | |
| *** ChanServ sets mode: +o openstack | 22:13 | |
| *** openstackstatus has joined #openstack-keystone | 22:14 | |
| *** ChanServ sets mode: +v openstackstatus | 22:14 | |
| *** david-lyle has quit IRC | 22:14 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Add user documentation for JSON Home https://review.openstack.org/550628 | 22:22 |
| *** martinus__ has quit IRC | 22:22 | |
| *** dklyle has joined #openstack-keystone | 22:34 | |
| *** itlinux has quit IRC | 22:36 | |
| *** rcernin has joined #openstack-keystone | 22:37 | |
| *** edmondsw has quit IRC | 22:38 | |
| *** edmondsw has joined #openstack-keystone | 22:39 | |
| *** openstackstatus has quit IRC | 22:42 | |
| *** openstack has joined #openstack-keystone | 22:42 | |
| *** ChanServ sets mode: +o openstack | 22:42 | |
| *** openstackstatus has joined #openstack-keystone | 22:43 | |
| *** ChanServ sets mode: +v openstackstatus | 22:43 | |
| *** edmondsw has quit IRC | 22:44 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 22:46 | |
| lbragstad | cmurphy: wxy knikolla outside of https://bugs.launchpad.net/keystone/+bug/1754184 what else did we come up with for the unified limits api? | 22:49 |
| openstack | Launchpad bug 1754184 in OpenStack Identity (keystone) "Unified limits API shouldn't return a list of all limits" [Medium,Triaged] | 22:49 |
| knikolla | lbragstad: the other question was whether we want to keep using IDs. | 22:50 |
| lbragstad | ah | 22:51 |
| *** AlexeyAbashkin has quit IRC | 22:51 | |
| lbragstad | i'm trying to remember the pros and cons of that | 22:51 |
| knikolla | global limits, region limits, service limits | 22:51 |
| cmurphy | lbragstad: description field | 22:51 |
| knikolla | don't form a nice tree | 22:51 |
| lbragstad | i think a reason for not keeping them was because we didn't "need" them since there is a unique constraint in the attributes | 22:52 |
| lbragstad | cmurphy: aha - yes... good call | 22:52 |
| *** david-lyle has joined #openstack-keystone | 22:54 | |
| *** dklyle has quit IRC | 22:55 | |
| openstackgerrit | Merged openstack/keystone master: Consolidate identity-service-api-protection.rst https://review.openstack.org/547104 | 22:55 |
| openstackgerrit | Merged openstack/keystone master: Imported Translations from Zanata https://review.openstack.org/550348 | 22:56 |
| lbragstad | knikolla: so - using a unique constraint across those attributes would be a reason to not include an ID, but it would also make logic around resolving the path harder | 22:56 |
| knikolla | lbragstad: yeah, IDs make paths easier since they're essentially flat. | 22:57 |
| lbragstad | yeah | 22:57 |
| lbragstad | but you should be able to query all limits and filter based on a project (which i think is supported today) | 22:58 |
| knikolla | true. | 22:58 |
| cmurphy | if we want to keep each individual resource GETable and DELETEable then they need to be uniquely identifiable somehow and we decided on ids because of the regions problem | 22:58 |
| cmurphy | if we want to say you can only do batch lookups and updates then maybe that wouldn't be so important | 22:59 |
| lbragstad | yeah... | 22:59 |
| cmurphy | or maybe we could have some magic keyword be the null region | 22:59 |
| lbragstad | my knee-jerk reaction is that an ID is easier to understand than a special region string | 23:00 |
| cmurphy | sure | 23:00 |
| knikolla | i have no strong opinions, IDs conform with how we do things. | 23:00 |
| lbragstad | i think it was also mentioned... | 23:01 |
| lbragstad | yeah ^ that was mentioned iirc | 23:01 |
| cmurphy | they do but PUT with a list of ids doesn't really conform to how we do things | 23:01 |
| * lbragstad wonders how important the batch upload path is | 23:02 | |
| cmurphy | i think sdague was thinking about it that way because you're probably going to upload all the registered limits for your project in one go | 23:02 |
| cmurphy | and you don't really want to make 50 api calls for that | 23:03 |
| cmurphy | er bad wording, you're going to upload all the registered limits for your service | 23:03 |
| lbragstad | right | 23:03 |
| cmurphy | and then you'd add overrides for all of them on a per-project basis, so like 50 limits per project | 23:04 |
| knikolla | in which case paths make things nicer for batch uploading | 23:04 |
| cmurphy | i don't think so, the path is only relevant to lookups | 23:06 |
| cmurphy | but anyways i think the batch create is important but maybe the batch update not so much, maybe that could be a PATCH on /registered-limit/id | 23:06 |
| lbragstad | for the PUT case it would make the body of the request busy | 23:06 |
| lbragstad | because you'd need to include the id and a dictionary for each thing, right? | 23:07 |
| lbragstad | instead of just a list of dictionaries | 23:07 |
| cmurphy | isn't that how it is now? | 23:09 |
| lbragstad | yeah - https://developer.openstack.org/api-ref/identity/v3/index.html#unified-limits | 23:10 |
| lbragstad | i think i like the PATCH path better | 23:10 |
| lbragstad | and keep batch processing specific to POST | 23:10 |
| * knikolla is amazed at how cmurphy is still functioning properly at midnight. it's 6pm here and i'm shutting down. | 23:10 | |
| lbragstad | inoright? | 23:11 |
| lbragstad | i don't know if it's the jet lag or what, but i was in bed by 8 pm last night | 23:11 |
| lbragstad | the last time i went to bed at 8pm i was 6 | 23:12 |
| knikolla | lbragstad: i can relate. been sleeping at 8pm and waking at 6am for the past days. | 23:12 |
| knikolla | but i've never felt so fresh in the mornings, haha. so there's that. | 23:12 |
| *** threestrands has joined #openstack-keystone | 23:12 | |
| *** threestrands has quit IRC | 23:12 | |
| *** threestrands has joined #openstack-keystone | 23:12 | |
| lbragstad | knikolla: ++ | 23:12 |
| cmurphy | been curating my ireland album https://photos.app.goo.gl/QmRXDL2xCFrRd41V2 | 23:14 |
| knikolla | cmurphy: really nice! i feel like i missed out now. all i saw was snow and the inside of the hotel. | 23:19 |
| lbragstad | damn... | 23:20 |
| lbragstad | i like how it's castle, castle, castle, cliff, castle, pony-in-a-coat | 23:21 |
| cmurphy | lol | 23:21 |
| knikolla | lol | 23:21 |
| lbragstad | https://photos.google.com/share/AF1QipNrTvL88OR8MNyb4_jIlSvNdCUqKIsQo-tklevz_0hsaUyqcAAzTE9Vdr4Q7Ld4Ow/photo/AF1QipPuOBhLO74g9D7I9UhUgfaOPXzIxLeBLaZDJ30?key=TGhhSTBoSV9HeW05bV9UT0V1Ti03Q0R2M1hoajNB | 23:22 |
| lbragstad | my favorite | 23:22 |
| lbragstad | i wish i would have stayed longer | 23:22 |
| *** jdennis has quit IRC | 23:24 | |
| *** jdennis has joined #openstack-keystone | 23:25 | |
| *** threestrands_ has joined #openstack-keystone | 23:34 | |
| *** threestrands_ has quit IRC | 23:35 | |
| *** threestrands_ has joined #openstack-keystone | 23:36 | |
| *** threestrands has quit IRC | 23:36 | |
| *** jmlowe has joined #openstack-keystone | 23:39 | |
| *** spilla has quit IRC | 23:41 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 23:45 | |
| *** AlexeyAbashkin has quit IRC | 23:49 | |
| openstackgerrit | Nicolas Helgeson proposed openstack/keystone master: Extend comparator support for project list by tags https://review.openstack.org/523499 | 23:56 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!