*** bigjools has quit IRC | 00:02 | |
*** bigjools has joined #openstack-keystone | 00:03 | |
*** bigjools has quit IRC | 00:03 | |
*** bigjools has joined #openstack-keystone | 00:03 | |
*** jessegler has quit IRC | 00:08 | |
openstackgerrit | Gage Hugo proposed openstack/keystone master: Fix tags and tags-any filter interaction https://review.openstack.org/553108 | 00:15 |
---|---|---|
*** wes_dillingham has joined #openstack-keystone | 00:16 | |
*** odyssey4me has quit IRC | 00:29 | |
*** odyssey4me has joined #openstack-keystone | 00:29 | |
*** wes_dillingham has quit IRC | 00:29 | |
*** r-daneel has quit IRC | 00:48 | |
*** Dinesh_Bhor has joined #openstack-keystone | 00:50 | |
*** wes_dillingham has joined #openstack-keystone | 00:54 | |
*** Dinesh_Bhor has quit IRC | 00:56 | |
*** dave-mccowan has joined #openstack-keystone | 01:05 | |
*** jmlowe has quit IRC | 01:08 | |
*** jmlowe has joined #openstack-keystone | 01:10 | |
*** wes_dillingham has quit IRC | 01:12 | |
*** Dinesh_Bhor has joined #openstack-keystone | 01:24 | |
*** nicolasbock has quit IRC | 01:29 | |
*** r-daneel has joined #openstack-keystone | 01:37 | |
*** nicolasbock has joined #openstack-keystone | 01:41 | |
*** harlowja has quit IRC | 01:59 | |
*** namnh has joined #openstack-keystone | 02:05 | |
*** r-daneel has quit IRC | 02:15 | |
*** r-daneel has joined #openstack-keystone | 02:16 | |
*** david-lyle has quit IRC | 02:21 | |
*** zhurong has joined #openstack-keystone | 02:29 | |
*** itlinux has quit IRC | 02:32 | |
openstackgerrit | Gage Hugo proposed openstack/keystone master: Fix tags and tags-any filter interaction https://review.openstack.org/553108 | 02:41 |
*** Dinesh_Bhor has quit IRC | 02:44 | |
*** Dinesh_Bhor has joined #openstack-keystone | 02:45 | |
*** dave-mccowan has quit IRC | 03:14 | |
*** germs has quit IRC | 03:14 | |
*** germs has joined #openstack-keystone | 03:15 | |
*** germs has quit IRC | 03:15 | |
*** germs has joined #openstack-keystone | 03:15 | |
*** germs has quit IRC | 03:16 | |
*** germs has joined #openstack-keystone | 03:17 | |
*** germs has quit IRC | 03:17 | |
*** germs has joined #openstack-keystone | 03:17 | |
*** annp has joined #openstack-keystone | 03:26 | |
*** nicolasbock has quit IRC | 03:27 | |
openstackgerrit | wangxiyuan proposed openstack/keystone master: The migration script to add description for limit https://review.openstack.org/553131 | 03:32 |
openstackgerrit | wangxiyuan proposed openstack/keystone master: Add manage logic for limit description https://review.openstack.org/553132 | 03:32 |
openstackgerrit | wangxiyuan proposed openstack/keystone master: Expose description for limit APIs https://review.openstack.org/553133 | 03:32 |
*** felipemonteiro_ has joined #openstack-keystone | 03:32 | |
*** felipemonteiro__ has joined #openstack-keystone | 03:33 | |
*** felipemonteiro_ has quit IRC | 03:36 | |
*** links has joined #openstack-keystone | 03:41 | |
*** felipemonteiro__ has quit IRC | 03:45 | |
*** felipemonteiro__ has joined #openstack-keystone | 03:46 | |
*** zhurong has quit IRC | 03:53 | |
*** karthi has joined #openstack-keystone | 03:58 | |
*** karthi has quit IRC | 04:01 | |
*** karthi has joined #openstack-keystone | 04:04 | |
*** germs has quit IRC | 04:09 | |
*** harlowja has joined #openstack-keystone | 04:11 | |
*** ayoung has quit IRC | 04:25 | |
*** gyee has quit IRC | 04:35 | |
*** harlowja has quit IRC | 04:50 | |
*** karthi has quit IRC | 04:52 | |
*** karthi has joined #openstack-keystone | 04:56 | |
*** jmlowe has quit IRC | 05:01 | |
*** felipemonteiro__ has quit IRC | 05:01 | |
*** Dinesh_Bhor has quit IRC | 05:02 | |
*** Dinesh_Bhor has joined #openstack-keystone | 05:03 | |
*** abhi89 has joined #openstack-keystone | 05:07 | |
*** oikiki has joined #openstack-keystone | 05:30 | |
*** karthi has quit IRC | 05:44 | |
*** Madarstr has joined #openstack-keystone | 05:50 | |
Madarstr | THIS IS A FREENODE BREAKING NEWS ALERT!! Hitechcg AND opal ARE GOING AT IT RIGHT NOW WITH A LOT OF FIGHTING AND ARGUING WOW YOU DON'T WANT TO MISS THIS!! TYPE /JOIN ## TO SEE THE ACTION...AGAIN TYPE /JOIN ## TO SEE THE ACTION!! | 05:50 |
Madarstr | THIS IS A FREENODE BREAKING NEWS ALERT!! Hitechcg AND opal ARE GOING AT IT RIGHT NOW WITH A LOT OF FIGHTING AND ARGUING WOW YOU DON'T WANT TO MISS THIS!! TYPE /JOIN ## TO SEE THE ACTION...AGAIN TYPE /JOIN ## TO SEE THE ACTION!! | 05:50 |
Madarstr | THIS IS A FREENODE BREAKING NEWS ALERT!! Hitechcg AND opal ARE GOING AT IT RIGHT NOW WITH A LOT OF FIGHTING AND ARGUING WOW YOU DON'T WANT TO MISS THIS!! TYPE /JOIN ## TO SEE THE ACTION...AGAIN TYPE /JOIN ## TO SEE THE ACTION!! | 05:50 |
Madarstr | oikiki abhi89 Dinesh_Bhor links annp r-daneel namnh odyssey4me bigjools rcernin panbalag mvk sapd_ zhongjun hoonetorg dims d0ugal mburrows bhagyashris_ jaosorior jroll jdennis dmellado openstackgerrit wxy_ Krenair bradjones toddnni rybridges chrome0 mordred asettle breton dstanek eglute chason dtroyer DinaBelova NikitaKonovalov ianw timothyb89 trident SamYaple kencjohnston spotz brad[] cloudnull zzzeek Anticimex weezhard_ a | 05:50 |
*** Madarstr has quit IRC | 05:50 | |
*** Dinesh_Bhor has quit IRC | 06:10 | |
*** Dinesh_Bhor has joined #openstack-keystone | 06:10 | |
*** Dinesh_Bhor has quit IRC | 06:16 | |
*** karthi has joined #openstack-keystone | 06:20 | |
*** karthi has quit IRC | 06:22 | |
*** karthi has joined #openstack-keystone | 06:26 | |
*** karthi has quit IRC | 06:26 | |
*** karthi has joined #openstack-keystone | 06:27 | |
*** Dinesh_Bhor has joined #openstack-keystone | 06:40 | |
*** martinus__ has joined #openstack-keystone | 06:49 | |
*** namnh has quit IRC | 06:53 | |
openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone master: Updated from global requirements https://review.openstack.org/551493 | 07:03 |
openstackgerrit | OpenStack Proposal Bot proposed openstack/keystone-tempest-plugin master: Updated from global requirements https://review.openstack.org/551494 | 07:03 |
openstackgerrit | OpenStack Proposal Bot proposed openstack/keystoneauth master: Updated from global requirements https://review.openstack.org/549536 | 07:03 |
openstackgerrit | OpenStack Proposal Bot proposed openstack/keystonemiddleware master: Updated from global requirements https://review.openstack.org/551495 | 07:03 |
openstackgerrit | OpenStack Proposal Bot proposed openstack/ldappool master: Updated from global requirements https://review.openstack.org/551498 | 07:07 |
*** karthi has quit IRC | 07:12 | |
*** oikiki has quit IRC | 07:23 | |
*** karthi has joined #openstack-keystone | 07:34 | |
*** karthi has quit IRC | 07:39 | |
openstackgerrit | wangxiyuan proposed openstack/keystone master: The migration script to add description for limit https://review.openstack.org/553131 | 07:40 |
openstackgerrit | wangxiyuan proposed openstack/keystone master: Limit description support https://review.openstack.org/553132 | 07:40 |
*** pcaruana has joined #openstack-keystone | 07:48 | |
openstackgerrit | OpenStack Proposal Bot proposed openstack/oslo.policy master: Updated from global requirements https://review.openstack.org/549559 | 07:49 |
*** pcaruana has quit IRC | 07:50 | |
*** pcaruana has joined #openstack-keystone | 07:50 | |
*** pcaruana is now known as pcaruana|wfh| | 07:53 | |
openstackgerrit | OpenStack Proposal Bot proposed openstack/pycadf master: Updated from global requirements https://review.openstack.org/551615 | 07:53 |
*** karthi has joined #openstack-keystone | 07:54 | |
openstackgerrit | OpenStack Proposal Bot proposed openstack/python-keystoneclient master: Updated from global requirements https://review.openstack.org/549565 | 07:58 |
*** AlexeyAbashkin has joined #openstack-keystone | 08:13 | |
*** karthi has quit IRC | 08:17 | |
*** karthi has joined #openstack-keystone | 08:23 | |
*** karthi has quit IRC | 08:23 | |
*** karthi has joined #openstack-keystone | 08:24 | |
*** tesseract has joined #openstack-keystone | 08:24 | |
*** rcernin has quit IRC | 09:00 | |
*** ispp is now known as burned | 09:04 | |
*** r-daneel has quit IRC | 09:07 | |
*** slunkad has quit IRC | 09:10 | |
*** slunkad has joined #openstack-keystone | 09:14 | |
openstackgerrit | wangxiyuan proposed openstack/keystone master: The migration script to add description for limit https://review.openstack.org/553131 | 09:26 |
openstackgerrit | wangxiyuan proposed openstack/keystone master: Limit description support https://review.openstack.org/553132 | 09:26 |
*** nicolasbock has joined #openstack-keystone | 09:27 | |
openstackgerrit | wangxiyuan proposed openstack/keystone master: Add yaml-loaded filesystem catalog backend https://review.openstack.org/483514 | 09:35 |
openstackgerrit | wangxiyuan proposed openstack/keystone master: Deprecate the templated catalog https://review.openstack.org/482714 | 09:35 |
*** Dinesh_Bhor has quit IRC | 09:35 | |
*** karthi has quit IRC | 10:21 | |
*** gongysh has joined #openstack-keystone | 10:54 | |
*** abhishek has joined #openstack-keystone | 10:59 | |
*** abhi89 has quit IRC | 11:02 | |
*** panbalag has quit IRC | 11:15 | |
*** gongysh has quit IRC | 11:17 | |
*** dtruong_ has joined #openstack-keystone | 11:18 | |
*** bhagyashri_s has joined #openstack-keystone | 11:20 | |
*** Alexey_Abashkin has joined #openstack-keystone | 11:20 | |
*** mnaser_ has joined #openstack-keystone | 11:21 | |
*** rodrigod` has joined #openstack-keystone | 11:23 | |
*** frickler_ has joined #openstack-keystone | 11:23 | |
*** Anticime1 has joined #openstack-keystone | 11:23 | |
*** weezhard has joined #openstack-keystone | 11:25 | |
*** pcaruana|wfh| has quit IRC | 11:27 | |
*** dtruong has quit IRC | 11:27 | |
*** rarora has quit IRC | 11:27 | |
*** rodrigods has quit IRC | 11:27 | |
*** mnaser has quit IRC | 11:27 | |
*** frickler has quit IRC | 11:27 | |
*** Anticimex has quit IRC | 11:27 | |
*** mnaser_ is now known as mnaser | 11:27 | |
*** pcaruana|wfh| has joined #openstack-keystone | 11:28 | |
*** AlexeyAbashkin has quit IRC | 11:28 | |
*** jgr has quit IRC | 11:28 | |
*** weezhard_ has quit IRC | 11:28 | |
*** bhagyashris_ has quit IRC | 11:28 | |
*** jgr has joined #openstack-keystone | 11:28 | |
*** mnaser has quit IRC | 11:28 | |
*** mnaser has joined #openstack-keystone | 11:28 | |
*** Alexey_Abashkin is now known as AlexeyAbashkin | 11:28 | |
openstackgerrit | wangxiyuan proposed openstack/keystone master: The migration script to add description for limit https://review.openstack.org/553131 | 11:30 |
openstackgerrit | wangxiyuan proposed openstack/keystone master: Limit description support https://review.openstack.org/553132 | 11:30 |
*** frickler_ is now known as frickler | 11:35 | |
openstackgerrit | wangxiyuan proposed openstack/keystone master: Add yaml-loaded filesystem catalog backend https://review.openstack.org/483514 | 11:44 |
*** rarora has joined #openstack-keystone | 11:45 | |
*** annp has quit IRC | 11:48 | |
*** dmellado has quit IRC | 11:50 | |
*** dmellado has joined #openstack-keystone | 11:58 | |
*** raildo has joined #openstack-keystone | 11:59 | |
*** dmellado has quit IRC | 12:05 | |
*** odyssey4me has quit IRC | 12:05 | |
*** odyssey4me has joined #openstack-keystone | 12:05 | |
*** martinus__ has quit IRC | 12:11 | |
*** pcaruana|wfh| is now known as pcaruana | 12:14 | |
*** edmondsw has joined #openstack-keystone | 12:15 | |
*** wes_dillingham has joined #openstack-keystone | 12:18 | |
*** dmellado has joined #openstack-keystone | 12:23 | |
*** dmellado has quit IRC | 12:30 | |
*** abhi89 has joined #openstack-keystone | 12:33 | |
*** abhishek has quit IRC | 12:36 | |
*** abhishek has joined #openstack-keystone | 12:40 | |
*** abhi89 has quit IRC | 12:43 | |
*** panbalag has joined #openstack-keystone | 12:43 | |
*** panbalag has left #openstack-keystone | 12:44 | |
*** jmlowe has joined #openstack-keystone | 12:44 | |
*** r-daneel has joined #openstack-keystone | 12:46 | |
*** david-lyle has joined #openstack-keystone | 12:52 | |
*** dave-mccowan has joined #openstack-keystone | 13:01 | |
*** david-lyle has quit IRC | 13:12 | |
*** belmoreira has joined #openstack-keystone | 13:13 | |
*** david-lyle has joined #openstack-keystone | 13:15 | |
*** dmellado has joined #openstack-keystone | 13:19 | |
*** dmellado has quit IRC | 13:20 | |
*** david-lyle has quit IRC | 13:25 | |
*** idlemind has joined #openstack-keystone | 13:25 | |
*** jmlowe has quit IRC | 13:33 | |
lbragstad | wxy: i'm about 20 failing tests away from getting https://review.openstack.org/#/c/545450/3 to pass | 13:34 |
*** dave-mccowan has quit IRC | 13:34 | |
cmurphy | lol | 13:34 |
cmurphy | only 20 failing tests to rewrite keystone? we might not have enough test coverage ;) | 13:34 |
lbragstad | hah | 13:35 |
lbragstad | shhh | 13:35 |
*** felipemonteiro__ has joined #openstack-keystone | 13:36 | |
*** felipemonteiro_ has joined #openstack-keystone | 13:38 | |
*** jmlowe has joined #openstack-keystone | 13:40 | |
*** felipemonteiro__ has quit IRC | 13:42 | |
*** mvk has quit IRC | 13:42 | |
*** links has quit IRC | 13:42 | |
*** felipemonteiro_ has quit IRC | 13:45 | |
*** felipemonteiro_ has joined #openstack-keystone | 13:45 | |
*** r-daneel has quit IRC | 13:48 | |
lbragstad | we have some stuff that's really nested in the token provider API | 13:53 |
lbragstad | if statements _everywhere_ | 13:53 |
*** McClymontS has joined #openstack-keystone | 13:58 | |
*** spilla has joined #openstack-keystone | 14:00 | |
*** gongysh has joined #openstack-keystone | 14:01 | |
*** jaosorior has quit IRC | 14:03 | |
knikolla | o/ | 14:06 |
-openstackstatus- NOTICE: POST_FAILURE results on Tempest-based jobs since the most recent Zuul security fixes are being investigated; rechecking those won't help for now but we'll keep you posted once a solution is identified | 14:09 | |
*** ChanServ changes topic to "POST_FAILURE results on Tempest-based jobs since the most recent Zuul security fixes are being investigated; rechecking those won't help for now but we'll keep you posted once a solution is identified" | 14:09 | |
*** BlackDex has quit IRC | 14:13 | |
*** mvk has joined #openstack-keystone | 14:14 | |
*** McClymontS has quit IRC | 14:16 | |
lbragstad | we should hopefully have our docs job back - https://review.openstack.org/#/c/552955/ | 14:19 |
lbragstad | well - once https://review.openstack.org/#/c/551493/3 starts passing | 14:20 |
*** r-daneel has joined #openstack-keystone | 14:30 | |
*** gongysh has quit IRC | 14:31 | |
*** germs has joined #openstack-keystone | 14:33 | |
*** germs has quit IRC | 14:33 | |
*** germs has joined #openstack-keystone | 14:33 | |
*** germs has quit IRC | 14:33 | |
*** germs has joined #openstack-keystone | 14:36 | |
*** martinus__ has joined #openstack-keystone | 14:39 | |
*** dmellado_ has joined #openstack-keystone | 14:46 | |
*** jaosorior has joined #openstack-keystone | 14:47 | |
*** panbalag has joined #openstack-keystone | 14:48 | |
*** panbalag has quit IRC | 14:50 | |
openstackgerrit | Gage Hugo proposed openstack/keystone master: Fix api-ref for project tag create https://review.openstack.org/553422 | 14:50 |
*** dmellado_ is now known as dmellado | 14:54 | |
*** panbalag has joined #openstack-keystone | 14:57 | |
*** felipemonteiro_ has quit IRC | 15:01 | |
*** felipemonteiro_ has joined #openstack-keystone | 15:01 | |
*** McClymontS has joined #openstack-keystone | 15:03 | |
*** BlackDex has joined #openstack-keystone | 15:04 | |
*** r-daneel_ has joined #openstack-keystone | 15:14 | |
*** r-daneel has quit IRC | 15:14 | |
*** r-daneel_ is now known as r-daneel | 15:14 | |
*** felipemonteiro__ has joined #openstack-keystone | 15:17 | |
*** felipemonteiro_ has quit IRC | 15:21 | |
*** McClymontS has quit IRC | 15:24 | |
*** panbalag has left #openstack-keystone | 15:25 | |
openstackgerrit | Lance Bragstad proposed openstack/keystone master: WIP: rewrite keystone https://review.openstack.org/545450 | 15:29 |
lbragstad | ok - ^ passes tests for me locally | 15:29 |
*** itlinux has joined #openstack-keystone | 15:29 | |
lbragstad | that's probaby only of the most frustrating refactors i've ever attempted | 15:29 |
lbragstad | s/only/one/ | 15:30 |
*** dave-mccowan has joined #openstack-keystone | 15:38 | |
* lbragstad steps away for a bit | 15:43 | |
*** oikiki has joined #openstack-keystone | 15:51 | |
*** gongysh has joined #openstack-keystone | 15:51 | |
*** Suramya has joined #openstack-keystone | 15:52 | |
*** kmalloc has joined #openstack-keystone | 15:53 | |
*** BlackDex has quit IRC | 15:54 | |
*** dtruong_ has quit IRC | 15:58 | |
*** dtruong has joined #openstack-keystone | 15:58 | |
*** harlowja has joined #openstack-keystone | 16:03 | |
*** gongysh has quit IRC | 16:08 | |
*** belmoreira has quit IRC | 16:18 | |
*** jaosorior has quit IRC | 16:21 | |
cmurphy | app creds talk accepted https://www.openstack.org/summit/vancouver-2018/summit-schedule/events/20836/enabling-cloud-native-applications-with-application-credentials-in-keystone | 16:22 |
*** BlackDex has joined #openstack-keystone | 16:23 | |
*** masber has joined #openstack-keystone | 16:28 | |
*** Suramya_ has joined #openstack-keystone | 16:28 | |
openstackgerrit | Pavlo Shchelokovskyy proposed openstack/keystone master: Conditionalyy protect self-service password change https://review.openstack.org/552988 | 16:31 |
openstackgerrit | Pavlo Shchelokovskyy proposed openstack/keystone master: Conditionalyy protect self-service password change https://review.openstack.org/552988 | 16:32 |
*** AlexeyAbashkin has quit IRC | 16:32 | |
*** gongysh has joined #openstack-keystone | 16:38 | |
openstackgerrit | Alvaro Lopez Garcia proposed openstack/keystone-specs master: OpenID Connect improved support https://review.openstack.org/373983 | 16:39 |
*** gongysh has quit IRC | 16:39 | |
*** abhishek has quit IRC | 16:41 | |
*** masber has quit IRC | 16:53 | |
openstackgerrit | Gage Hugo proposed openstack/keystone master: Fix api-ref for project tag create https://review.openstack.org/553422 | 17:01 |
lbragstad | cmurphy: nice! | 17:08 |
*** harlowja has quit IRC | 17:09 | |
*** felipemonteiro__ has quit IRC | 17:25 | |
*** felipemonteiro__ has joined #openstack-keystone | 17:26 | |
lbragstad | proposed the rocky deadlines we talked about during the PTG retrospective - https://review.openstack.org/#/c/553502/ | 17:31 |
*** r-daneel_ has joined #openstack-keystone | 17:50 | |
*** r-daneel has quit IRC | 17:51 | |
*** r-daneel_ is now known as r-daneel | 17:51 | |
*** felipemonteiro_ has joined #openstack-keystone | 17:57 | |
*** felipemonteiro__ has quit IRC | 17:59 | |
*** jdennis has quit IRC | 18:02 | |
*** mvenesio has joined #openstack-keystone | 18:03 | |
*** mvk has quit IRC | 18:05 | |
*** david-lyle has joined #openstack-keystone | 18:05 | |
*** harlowja has joined #openstack-keystone | 18:20 | |
*** wes_dillingham has quit IRC | 18:23 | |
*** david-lyle has quit IRC | 18:29 | |
*** jmlowe has quit IRC | 18:31 | |
*** david-lyle has joined #openstack-keystone | 18:33 | |
*** jmlowe has joined #openstack-keystone | 18:36 | |
*** david-lyle has quit IRC | 18:37 | |
*** tesseract has quit IRC | 18:39 | |
*** felipemonteiro_ has quit IRC | 18:42 | |
*** felipemonteiro has joined #openstack-keystone | 18:42 | |
*** felipemonteiro_ has joined #openstack-keystone | 18:43 | |
*** felipemonteiro has quit IRC | 18:47 | |
*** jdennis has joined #openstack-keystone | 18:49 | |
*** mvk has joined #openstack-keystone | 18:51 | |
*** AlexeyAbashkin has joined #openstack-keystone | 18:54 | |
*** AlexeyAbashkin has quit IRC | 18:58 | |
*** david-lyle has joined #openstack-keystone | 19:17 | |
-openstackstatus- NOTICE: The regression stemming from one of yesterday's Zuul security fixes has been rectified, and Devstack/Tempest jobs which encountered POST_FAILURE results over the past 24 hours can safely be rechecked now | 19:24 | |
*** ChanServ changes topic to "Queens release schedule: https://releases.openstack.org/queens/schedule.html | Meeting agenda: https://etherpad.openstack.org/p/keystone-weekly-meeting | Bugs that need triaging: http://bit.ly/2iJuN1h | Trello: https://trello.com/b/wmyzbFq5/keystone-rocky-roadmap" | 19:24 | |
*** frickler has quit IRC | 19:29 | |
*** frickler has joined #openstack-keystone | 19:30 | |
*** Suramya has quit IRC | 19:32 | |
*** Suramya_ has quit IRC | 19:32 | |
*** panbalag has joined #openstack-keystone | 19:33 | |
*** panbalag has left #openstack-keystone | 19:35 | |
*** exarr has joined #openstack-keystone | 19:39 | |
exarr | Hi all. So, I realise I had set all my endpoints for keystone auth to port 35357 (public, internal, admin). | 19:40 |
*** felipemonteiro_ has quit IRC | 19:40 | |
exarr | What affect would this have? As everything was working fine, and all I find is that 35357 is the "admin" port. Whatever that means :-/ | 19:40 |
*** felipemonteiro_ has joined #openstack-keystone | 19:40 | |
kmalloc | exarr: in v3 keystone api, there is no difference between admin/public | 19:41 |
kmalloc | exarr: admin/public was largely historical from early days (v2 keystone api) | 19:41 |
exarr | kmalloc: Ahh. So it's just supporting both ports for backwards-compatibility? | 19:42 |
kmalloc | i recommend moving to HTTP[s] (port 80/443) instead | 19:42 |
kmalloc | port 35357 has issues, it is in the default ephemeral port range of linux | 19:42 |
exarr | kmalloc: Very good point actually! | 19:43 |
openstackgerrit | Lance Bragstad proposed openstack/keystone master: Add logging for xmlsec1 installation https://review.openstack.org/553592 | 19:43 |
kmalloc | it's an issue between linux and IANA, our solution: use standard http(s) ports | 19:43 |
kmalloc | :) | 19:43 |
kmalloc | since it's HTTP and REST, it makes sense. | 19:43 |
exarr | kmalloc: It certainly does. | 19:44 |
exarr | Thanks for that. Makes perfect sense. | 19:44 |
kmalloc | and we know you can do things like: http://OpenstackAPI.WhateverYourDomainIs/identity | 19:44 |
kmalloc | we put alolt of effort into ensuring that works ^ so you can do http://domain/identity and http://domain/compute etc | 19:45 |
kmalloc | for the various services (suburl) rather than needing an IP/Vhost for each (though, http://identity.yourdomain and http://compute.yourdomain is easier in general) | 19:45 |
exarr | waw. I feel like tearing it all apart and rebuilding it. | 19:48 |
kmalloc | :) | 19:48 |
exarr | Don't think the devs would be too happy about that tho. | 19:48 |
kmalloc | hehe, well, the nice thing is you can just add http ports for identity | 19:48 |
kmalloc | and also listen on 35357 | 19:49 |
kmalloc | and just update everything to just look at the http ports and tell people to use the "more correct" port (and 35357 will go away in X time) - same with suburls or dedicated vhosts/ips | 19:49 |
kmalloc | if folks use the service catalog, you should be able to change the addresses of any of the services | 19:50 |
kmalloc | with exception of keystone (since that is apriori knowledge to auth) | 19:50 |
kmalloc | I know, that doesn't help with the "RIP IT APART AND REDO IT" feeling ;) | 19:50 |
*** mvenesio has quit IRC | 19:53 | |
exarr | kmalloc: I have rebuilt the implmentation a few times. Still have a lot to learn. But now the concept piece is in place for a lab, so trying to at least offer a completed POC. | 19:53 |
*** spilla has quit IRC | 19:53 | |
*** dave-mccowan has quit IRC | 19:53 | |
exarr | But I will look to see if I can fix it with minimal disruption. | 19:53 |
exarr | Random question: Why apache over nginx? | 19:55 |
*** oikiki has quit IRC | 19:56 | |
*** oikiki has joined #openstack-keystone | 19:56 | |
exarr | Consensus over the projects? | 19:56 |
lbragstad | gagehugo: is https://bugs.launchpad.net/keystone/+bug/1738372 an issue with heat or keystone? | 19:56 |
openstack | Launchpad bug 1738372 in OpenStack Identity (keystone) "Install and configure in keystone" [Undecided,Confirmed] | 19:56 |
lbragstad | gagehugo: it sounds like something it's installing the right version of oslo.policy somewhere | 19:57 |
gagehugo | lbragstad I'm testing that now, waiting to get the conf from one of our engineers | 19:57 |
lbragstad | ok - this feels like a dependency issue | 19:58 |
gagehugo | it does | 19:58 |
lbragstad | curious to know what you find out | 19:58 |
*** raildo has quit IRC | 19:58 | |
gagehugo | also how did this pass https://review.openstack.org/#/c/552988/ | 19:58 |
gagehugo | pass zuul* | 19:59 |
gagehugo | thought we needed the requirements change | 19:59 |
gagehugo | but maybe not? | 19:59 |
*** ayoung has joined #openstack-keystone | 20:00 | |
*** wes_dillingham has joined #openstack-keystone | 20:01 | |
lbragstad | i was looking at that one the other day | 20:02 |
lbragstad | i'm not sure i quite understand why you'd want to prevent someone from updating their password | 20:02 |
lbragstad | exarr: it was the first one we targeted a long time ago | 20:04 |
gagehugo | yeah that is an odd use case | 20:04 |
lbragstad | several deployment projects give you the ability to specify nginx over apache | 20:04 |
exarr | Yeah, no biggie. Just curious. | 20:05 |
exarr | Thanks :_ | 20:05 |
*** wes_dillingham has quit IRC | 20:06 | |
*** jmlowe has quit IRC | 20:06 | |
*** NM has joined #openstack-keystone | 20:06 | |
* lbragstad grabs tea | 20:07 | |
* exarr wonders if tea == cup of tea, or you're a northern lad in the UK and you mean food :-) | 20:08 | |
*** dave-mccowan has joined #openstack-keystone | 20:11 | |
lbragstad | hah - nope | 20:24 |
lbragstad | just a cup of tea | 20:25 |
*** oikiki has quit IRC | 20:28 | |
*** mvenesio has joined #openstack-keystone | 20:31 | |
*** oikiki has joined #openstack-keystone | 20:33 | |
*** oikiki has quit IRC | 20:33 | |
*** spilla has joined #openstack-keystone | 20:33 | |
*** oikiki has joined #openstack-keystone | 20:39 | |
*** dave-mccowan has quit IRC | 20:53 | |
*** mvk has quit IRC | 20:53 | |
ayoung | lbragstad, looks like I | 20:58 |
ayoung | lbragstad, looks like I'm going to Vancouver | 20:58 |
lbragstad | \o/ | 20:58 |
ayoung | and that means I'll probably drag kmalloc with me. | 20:58 |
ayoung | FLy to Seattle to see friends, drive on up. | 20:58 |
lbragstad | ayoung: did you have a talk accepted? | 20:59 |
ayoung | yep. https://www.openstack.org/summit/vancouver-2018/summit-schedule/events/20818/a-unified-approach-to-role-based-access-control | 20:59 |
ayoung | mapping RBAC between Keystone and Kubernetes | 20:59 |
lbragstad | oh - nice | 21:00 |
*** edmondsw has quit IRC | 21:02 | |
exarr | kmalloc: regarding your method of openstackAPI.blah/<service> approach, this suburl method works only with a web service passing the requests back and fourth assumingly. | 21:03 |
exarr | With your comment of "we put effot in to make this work" I didn't know if I was missing something. | 21:03 |
exarr | With the obvious service.domain/blah it's simple enough. | 21:03 |
kmalloc | we as in openstack | 21:04 |
exarr | lol. I used the term collectively :-) | 21:05 |
kmalloc | for a long time, it didn't work (pre ... newton? or so) | 21:05 |
*** mvk has joined #openstack-keystone | 21:06 | |
exarr | How could it not work? .... to google" | 21:07 |
kmalloc | the way other services interacted with the service catalog | 21:08 |
kmalloc | or was unable to reach suburls | 21:08 |
exarr | Ah. okay. | 21:10 |
exarr | I have made note of your recommendations, and will explore them over the next few days. Thank you. | 21:10 |
*** jessegler has joined #openstack-keystone | 21:11 | |
exarr | ayoung: (sorry, I read your link :-/) As a redhat guy, is director a good deployment too for rhel-based OS implementations? | 21:13 |
exarr | *tool | 21:13 |
ayoung | exarr, it is pretty much the only thing we will really support | 21:14 |
ayoung | I mean, I've done a bunch of POC work with Packstack, so for little stuff I still prefer it. | 21:14 |
exarr | ayoung: Thanks. It's being considered. But I have always found deployment tools fills me with sorrow. | 21:14 |
ayoung | Heh | 21:15 |
ayoung | THe thinkg about director/tripleo is it is shooting for everything: HA, ironic based enrollment, Ceph integration | 21:15 |
ayoung | I reintroduced myself to Director just this week, after having laid off it for a year. | 21:16 |
ayoung | Its hard to find resources to learn it, because it really wants a full cluster. We do this thing called HextupleO for training | 21:17 |
ayoung | which means we have an OpenStack cluster for learning how to install OpenStack on OpenStack. | 21:17 |
ayoung | its Keystone Turtles all the way down | 21:17 |
exarr | ayoung: Plenty of people using it in the real world for deployments? | 21:17 |
ayoung | yes | 21:18 |
exarr | ahh, the old nested-openstack approach :-) | 21:18 |
ayoung | exarr, I can probably get you some customer references if you need them | 21:18 |
exarr | ayoung: That would be really useful actually. | 21:18 |
exarr | We're a decent company trying to break into openstack. I'll not cite the environment because everone just sighs. :-) | 21:19 |
ayoung | exarr send me an email at ayoung@redhat.com with your specifics and I'll get the right set of answers to you. | 21:19 |
exarr | ayoung: That's brilliant. Thankyou :-) | 21:19 |
ayoung | That is exactly my job these days. | 21:19 |
*** mburrows has quit IRC | 21:21 | |
openstackgerrit | Merged openstack/oslo.policy master: Updated from global requirements https://review.openstack.org/549559 | 21:22 |
*** r-daneel_ has joined #openstack-keystone | 21:23 | |
*** r-daneel has quit IRC | 21:24 | |
*** r-daneel_ is now known as r-daneel | 21:24 | |
exarr | ayoung: Fired you a quick email. I don't want to take too much of your time, but would be good to have a guy of your stature promoting the tool as it's good to cite within the design specs to the guys in suits :-) | 21:28 |
ayoung | I'm not that tall. | 21:28 |
exarr | hahaha. The second reference in that definition :-) | 21:29 |
gagehugo | lbragstad http://paste.openstack.org/show/702237/ | 21:30 |
gagehugo | 2018-03-15 21:11:49.485 | Requirement already satisfied: oslo.policy===1.18.0 | 21:34 |
gagehugo | lemme try updating | 21:34 |
* gagehugo breaks everything | 21:34 | |
kmalloc | exarr: see you talk to ayoung and you get all the fun stuff. i'm just a lurker (i'm happy to direct all the fun stuff to adam, even though we both are at red hat) | 21:37 |
*** dave-mccowan has joined #openstack-keystone | 21:39 | |
*** itlinux has quit IRC | 21:39 | |
*** r-daneel_ has joined #openstack-keystone | 21:41 | |
*** r-daneel has quit IRC | 21:41 | |
*** r-daneel_ is now known as r-daneel | 21:41 | |
ayoung | kmalloc, BTW, I'm planning on taking you up on that offer to drive to Vancouver from Seattle. | 21:42 |
kmalloc | cool | 21:42 |
exarr | Does Satellite and Openstack play well together? | 21:43 |
exarr | I mean more in terms of keeping the infrastructure up to date, not the VMs. | 21:44 |
exarr | Patch management is important, but the idea of this being applied to the hypervisor nodes seems a little scary. | 21:45 |
*** felipemonteiro__ has joined #openstack-keystone | 21:45 | |
exarr | kmalloc: To be fair, you redhat guys are very active across the openstack irc channels. Nice to see. | 21:46 |
*** felipemonteiro_ has quit IRC | 21:49 | |
*** rcernin has joined #openstack-keystone | 22:02 | |
*** masber has joined #openstack-keystone | 22:09 | |
*** spilla has quit IRC | 22:11 | |
*** oikiki has quit IRC | 22:12 | |
*** oikiki has joined #openstack-keystone | 22:14 | |
*** oikiki has quit IRC | 22:16 | |
*** mvenesio has quit IRC | 22:22 | |
*** mvenesio has joined #openstack-keystone | 22:23 | |
*** oikiki has joined #openstack-keystone | 22:23 | |
jessegler | lbragstad: I opened a bug for the project tags stuff we discussed yesterday, because it's not aligned with nova. | 22:23 |
*** oikiki has quit IRC | 22:23 | |
*** jessegler has quit IRC | 22:25 | |
*** jessegler has joined #openstack-keystone | 22:26 | |
*** felipemonteiro__ has quit IRC | 22:27 | |
*** mvenesio has quit IRC | 22:27 | |
*** martinus__ has quit IRC | 22:28 | |
lbragstad | jessegler: do they treat it as subsets? | 22:37 |
lbragstad | jessegler: thanks for the follow up btw - i'll check in a little later | 22:38 |
*** mvenesio has joined #openstack-keystone | 22:44 | |
*** dave-mccowan has quit IRC | 22:48 | |
exarr | ayoung: Thanks for the reply! | 22:49 |
ayoung | exarr, My pleasure. | 22:49 |
*** mvenesio has quit IRC | 22:59 | |
*** masber has quit IRC | 23:02 | |
gagehugo | lbragstad yeah I think they do | 23:11 |
openstackgerrit | Merged openstack/keystone master: Updated from global requirements https://review.openstack.org/551493 | 23:15 |
*** sticker has joined #openstack-keystone | 23:17 | |
*** rcernin has quit IRC | 23:39 | |
*** david-lyle has quit IRC | 23:59 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!