| *** hoonetorg has joined #openstack-keystone | 00:09 | |
| *** hoonetorg has quit IRC | 00:14 | |
| *** gyee has quit IRC | 00:21 | |
| *** felipemonteiro__ has joined #openstack-keystone | 01:51 | |
| *** panbalag has joined #openstack-keystone | 02:01 | |
| *** gongysh has joined #openstack-keystone | 02:03 | |
| *** nicolasbock has quit IRC | 02:32 | |
| *** panbalag has quit IRC | 02:39 | |
| *** felipemonteiro__ has quit IRC | 02:41 | |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Update IdP sql model https://review.openstack.org/559676 | 03:13 |
|---|---|---|
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Fix the test for unique IdP https://review.openstack.org/563812 | 03:13 |
| *** zhongjun_ has joined #openstack-keystone | 03:28 | |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Invalidate the shadow user cache when deleting a user https://review.openstack.org/561908 | 03:39 |
| *** jdennis has quit IRC | 04:16 | |
| *** jdennis has joined #openstack-keystone | 04:29 | |
| *** links has joined #openstack-keystone | 04:29 | |
| *** felipemonteiro__ has joined #openstack-keystone | 04:57 | |
| *** edmondsw has joined #openstack-keystone | 05:02 | |
| *** felipemonteiro__ has quit IRC | 05:04 | |
| *** edmondsw has quit IRC | 05:36 | |
| *** itlinux has joined #openstack-keystone | 05:47 | |
| *** itlinux has quit IRC | 05:53 | |
| *** itlinux has joined #openstack-keystone | 05:55 | |
| *** itlinux has quit IRC | 06:06 | |
| openstackgerrit | Monty Taylor proposed openstack/keystoneauth master: Turn normalize_status into a class https://review.openstack.org/564110 | 06:27 |
| *** martinus__ has joined #openstack-keystone | 06:39 | |
| openstackgerrit | wangxiyuan proposed openstack/keystonemiddleware master: Follow the new PTI for document build https://review.openstack.org/562951 | 06:55 |
| *** tesseract has joined #openstack-keystone | 07:01 | |
| *** pcaruana has joined #openstack-keystone | 07:06 | |
| *** itlinux has joined #openstack-keystone | 07:33 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 07:37 | |
| *** szaher has quit IRC | 07:37 | |
| *** szaher has joined #openstack-keystone | 07:38 | |
| *** itlinux has quit IRC | 07:44 | |
| *** gongysh has quit IRC | 07:51 | |
| *** Horrorcat has joined #openstack-keystone | 07:56 | |
| *** jaosorior has joined #openstack-keystone | 08:16 | |
| *** gongysh has joined #openstack-keystone | 08:30 | |
| Horrorcat | is the unified limits thing used by services already? (in pike) | 08:32 |
| Horrorcat | how do unified limits interact with reselling? | 08:37 |
| Horrorcat | eh, s/reselling/keystone federation/ | 08:37 |
| *** itlinux has joined #openstack-keystone | 08:39 | |
| *** itlinux has quit IRC | 09:13 | |
| *** itlinux has joined #openstack-keystone | 09:20 | |
| *** gongysh has quit IRC | 09:35 | |
| *** hoonetorg has joined #openstack-keystone | 09:49 | |
| *** AlexeyAbashkin has quit IRC | 10:10 | |
| *** magnumbonum has quit IRC | 10:20 | |
| *** itlinux has quit IRC | 10:23 | |
| *** opetrenko has joined #openstack-keystone | 10:27 | |
| *** nicolasbock has joined #openstack-keystone | 10:33 | |
| *** aloga has quit IRC | 10:37 | |
| *** aloga has joined #openstack-keystone | 10:37 | |
| *** simondodsley has quit IRC | 10:50 | |
| *** opetrenko has quit IRC | 10:51 | |
| *** simondodsley has joined #openstack-keystone | 10:51 | |
| *** opetrenko has joined #openstack-keystone | 10:51 | |
| *** raildo has joined #openstack-keystone | 10:59 | |
| *** opetrenko has quit IRC | 11:04 | |
| *** itlinux has joined #openstack-keystone | 11:06 | |
| *** opetrenko has joined #openstack-keystone | 11:07 | |
| *** itlinux has quit IRC | 11:07 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 11:20 | |
| *** wolsen has quit IRC | 11:30 | |
| *** wolsen has joined #openstack-keystone | 11:30 | |
| *** lamt has quit IRC | 11:33 | |
| *** lamt has joined #openstack-keystone | 11:33 | |
| *** lamt is now known as Guest62064 | 11:34 | |
| *** jmlowe has joined #openstack-keystone | 11:54 | |
| *** dangtrinhnt has quit IRC | 12:07 | |
| *** raildo has quit IRC | 12:13 | |
| *** raginbaj- has joined #openstack-keystone | 12:18 | |
| *** raginbajin has quit IRC | 12:23 | |
| *** dklyle has quit IRC | 12:23 | |
| *** mvk has quit IRC | 12:23 | |
| *** lbragstad has quit IRC | 12:23 | |
| *** Guest62751 has quit IRC | 12:23 | |
| *** jrist has quit IRC | 12:23 | |
| *** frickler has quit IRC | 12:23 | |
| *** SamYaple has quit IRC | 12:23 | |
| *** hemna has quit IRC | 12:23 | |
| *** raginbaj- is now known as raginbajin | 12:23 | |
| *** edmondsw has joined #openstack-keystone | 12:24 | |
| *** homeski has quit IRC | 12:25 | |
| *** dklyle has joined #openstack-keystone | 12:26 | |
| *** mvk has joined #openstack-keystone | 12:26 | |
| *** lbragstad has joined #openstack-keystone | 12:26 | |
| *** Guest62751 has joined #openstack-keystone | 12:26 | |
| *** jrist has joined #openstack-keystone | 12:26 | |
| *** frickler has joined #openstack-keystone | 12:26 | |
| *** SamYaple has joined #openstack-keystone | 12:26 | |
| *** hemna has joined #openstack-keystone | 12:26 | |
| *** barjavel.freenode.net sets mode: +o lbragstad | 12:26 | |
| *** mtreinish has quit IRC | 12:27 | |
| *** mtreinish has joined #openstack-keystone | 12:28 | |
| *** homeski has joined #openstack-keystone | 12:28 | |
| *** edmondsw has quit IRC | 12:28 | |
| *** raildo has joined #openstack-keystone | 12:38 | |
| openstackgerrit | Monty Taylor proposed openstack/keystoneauth master: Turn normalize_status into a class https://review.openstack.org/564110 | 12:40 |
| mordred | kmalloc, lbragstad, ^^ I think that should address the review comments | 12:41 |
| mordred | kmalloc: ping me when you're up and we can talk aout your compat concern and stuff | 12:41 |
| *** panbalag has joined #openstack-keystone | 12:42 | |
| *** edmondsw has joined #openstack-keystone | 12:43 | |
| *** edmondsw has quit IRC | 12:46 | |
| *** edmondsw has joined #openstack-keystone | 12:47 | |
| *** sonuk has joined #openstack-keystone | 12:50 | |
| *** edmondsw has quit IRC | 12:50 | |
| *** jamespage has quit IRC | 12:57 | |
| *** jamespage has joined #openstack-keystone | 12:58 | |
| *** edmondsw has joined #openstack-keystone | 13:13 | |
| *** edmondsw has quit IRC | 13:15 | |
| *** edmondsw has joined #openstack-keystone | 13:15 | |
| *** sonuk has quit IRC | 13:24 | |
| *** viks has quit IRC | 13:31 | |
| *** viks has joined #openstack-keystone | 13:31 | |
| *** dave-mccowan has joined #openstack-keystone | 13:34 | |
| *** dave-mcc_ has joined #openstack-keystone | 13:48 | |
| *** dave-mccowan has quit IRC | 13:51 | |
| *** panbalag has quit IRC | 13:56 | |
| *** raildo has quit IRC | 13:59 | |
| *** raildo has joined #openstack-keystone | 14:00 | |
| *** dklyle has quit IRC | 14:00 | |
| kmalloc | mordred: o/ | 14:01 |
| kmalloc | Here | 14:01 |
| *** rabel has joined #openstack-keystone | 14:01 | |
| *** panbalag has joined #openstack-keystone | 14:02 | |
| kmalloc | Drinking absurdly strong coffee | 14:02 |
| kmalloc | But here. | 14:02 |
| rabel | hi there. what does the keystone policy service actually do? as far as i understand, policies are handled by every openstack component individually (that is by using oslo.policy). or is the keystone architecture as described at https://docs.openstack.org/keystone/latest/getting-started/architecture.html not up-to-date? | 14:04 |
| lbragstad | rabel: that was an API that was introduced shortly after the v3 API but never really fully realized | 14:05 |
| *** panbalag has left #openstack-keystone | 14:11 | |
| mordred | kmalloc: \o/ | 14:11 |
| kmalloc | So, my olny concern is that the returned catalog will be different between releases of ksa with this for the same unchanged OpenStack (in theory) | 14:12 |
| kmalloc | And that, in itself, would be a behavior change in ksa / might break someone using it | 14:13 |
| mordred | kmalloc: so - in general, the whole aliases thing is aimed at letting deployers start to deploy things with better service types without breaking their users - at themoment nobody should be doing it because it would break everyone. it SHOULD return all the same data for the existing clouds | 14:13 |
| mordred | of course, I could totally be wrong | 14:13 |
| kmalloc | If it was anything but KSA I would have already +2'd it | 14:13 |
| kmalloc | FTR | 14:13 |
| mordred | yah - totally | 14:13 |
| kmalloc | I am ok with it if this should just work and not break anyone... But you get my concern :) | 14:14 |
| mordred | I'm wondering what we should do to validate whether the concern is a thing ... oh, and YES - I totally agree on not wanting to do the thing you are concerned with | 14:14 |
| kmalloc | But I want to be 3x sure we aren't really changing any behavior that someone might be using. | 14:14 |
| kmalloc | Yeah, I don't know how to be sure. | 14:15 |
| mordred | the one thing I could come up with in my head that could be different ... | 14:15 |
| kmalloc | Which is why I wanted to chat ;) | 14:15 |
| rabel | lbragstad: so keystone in reallity only consists of 5 components instead of 6? | 14:15 |
| mordred | is that if a deployer deployed cinder using service-type bloack-storage and didn't use volumev2 or volumev3 - and the user requested service-type volumev2 | 14:15 |
| kmalloc | Yep, that is the only real example I can come up with. | 14:16 |
| lbragstad | rabel: i guess it depends on your use case | 14:16 |
| mordred | kmalloc: in that case, today the user would get "can't find endpoint" and after this change they'd get the block storage endpoint | 14:16 |
| lbragstad | but as far as the policy stuff is concerned, that direction never really panned out because we were going to be able to pull all policies across all of openstack into a single service | 14:16 |
| kmalloc | How likely is that though. | 14:17 |
| kmalloc | mordred: I am inclined to approve this patch as is. | 14:18 |
| mordred | kmalloc: cool. I think as a second verification, I'll write the sdk consumption patch so we can see it do all of shade/sdk functional tests too | 14:19 |
| kmalloc | Heck, I kind of want to make KSA2 and just sump some stuff and clean up things. :P | 14:19 |
| mordred | kmalloc: and we should make sure that's happy before we cut the release | 14:19 |
| mordred | kmalloc: dude. srrsly | 14:19 |
| kmalloc | Yeah, sounds good. | 14:19 |
| mordred | the number of flags we've grown | 14:19 |
| rabel | lbragstad: is this going to happen in the future? i mean having a central policy service? should we add a note to https://docs.openstack.org/keystone/latest/getting-started/architecture.html that keystone's policy service is not actually used and the corresponding api is deprecated? | 14:20 |
| kmalloc | You know, it means we are successful with it. | 14:20 |
| kmalloc | And we have been careful to make it stable. | 14:20 |
| kmalloc | We did a good job (tm) on ksa | 14:20 |
| lbragstad | rabel: i doubt it | 14:20 |
| lbragstad | but there have been variants of the idea proposed | 14:20 |
| lbragstad | that don't include a full fledged policy mapping for every service in keystone | 14:21 |
| kmalloc | mordred: we can chat about ksa2 (strictly API compat, but behavioral cleanup) next release | 14:21 |
| kmalloc | Let's get a sign off from lbragstad on this change. | 14:22 |
| *** felipemonteiro__ has joined #openstack-keystone | 14:22 | |
| kmalloc | And we can roll.forward (sdk stuff as a depending change) | 14:22 |
| * mordred nudges lbragstad | 14:23 | |
| * lbragstad looks for a link | 14:23 | |
| kmalloc | lbragstad: service aliases. Sorry on mobile (+_+) | 14:24 |
| lbragstad | https://review.openstack.org/564110 ? | 14:24 |
| kmalloc | https://review.openstack.org/#/c/462218/4 | 14:25 |
| kmalloc | But yes, that stack | 14:25 |
| kmalloc | See my comments and the wuick chat mordred and I had here just now. | 14:25 |
| kmalloc | But I'm inclined to accept this, but want other eyes first. | 14:25 |
| *** rabel has left #openstack-keystone | 14:26 | |
| *** rabel has joined #openstack-keystone | 14:26 | |
| rabel | lbragstad: thank you! what do you thin about adding a note to the docs? | 14:26 |
| *** felipemonteiro_ has joined #openstack-keystone | 14:26 | |
| lbragstad | rabel: yeah - i don't see an issue with that | 14:26 |
| lbragstad | fwiw - the API reference has a warning https://developer.openstack.org/api-ref/identity/v3/index.html#policies | 14:27 |
| lbragstad | as far as the architecture document is concerned, i wouldn't be opposed to just remove the policy section | 14:27 |
| lbragstad | it's has no real significance on the overall architecture of keystone | 14:28 |
| lbragstad | and is mostly boilerplate code | 14:28 |
| lbragstad | thinking about it from someone trying to digest that document, it's just an extra thing they have hold in their mental map | 14:28 |
| rabel | lbragstad: ok, I will create a change for deleting that section | 14:28 |
| lbragstad | rabel: thanks | 14:29 |
| *** felipemonteiro__ has quit IRC | 14:30 | |
| lbragstad | kmalloc: you're good with the test added at the end of that change? | 14:31 |
| mordred | lbragstad, kmalloc: cmurphy also often has good eyes for spotting when I do something crazy | 14:33 |
| cmurphy | heh | 14:33 |
| cmurphy | trying to finish something else up, can look later tonight if it isn't already taken care of | 14:33 |
| rabel | lbragstad: more down in that same document there are some keystone internals including more stuff about policy. i don't touch that stuff, right? | 14:35 |
| lbragstad | rabel: yeah - i would leave that because it's describing the relationship we have with oslo.policy to do policy enforcement | 14:36 |
| *** felipemonteiro has joined #openstack-keystone | 14:37 | |
| openstackgerrit | David Rabel proposed openstack/keystone master: Remove policy service from architecture.rst https://review.openstack.org/564239 | 14:38 |
| *** felipemonteiro_ has quit IRC | 14:38 | |
| *** felipemonteiro has quit IRC | 14:45 | |
| *** rabel has left #openstack-keystone | 14:56 | |
| *** edmondsw has quit IRC | 15:01 | |
| *** mvk has quit IRC | 15:01 | |
| *** lbragstad has quit IRC | 15:01 | |
| *** Guest62751 has quit IRC | 15:01 | |
| *** jrist has quit IRC | 15:01 | |
| *** frickler has quit IRC | 15:01 | |
| *** SamYaple has quit IRC | 15:01 | |
| *** hemna has quit IRC | 15:01 | |
| *** jhesketh has quit IRC | 15:01 | |
| *** AlexeyAbashkin has quit IRC | 15:01 | |
| *** hoonetorg has quit IRC | 15:01 | |
| *** martinus__ has quit IRC | 15:01 | |
| *** jdennis has quit IRC | 15:01 | |
| *** mchlumsky has quit IRC | 15:01 | |
| *** markvoelker has quit IRC | 15:01 | |
| *** andreykurilin has quit IRC | 15:01 | |
| *** eEbx has quit IRC | 15:01 | |
| *** vegarl has quit IRC | 15:01 | |
| *** zigo has quit IRC | 15:01 | |
| *** tsufiev has quit IRC | 15:01 | |
| *** johnthetubaguy_ has quit IRC | 15:01 | |
| *** devx has quit IRC | 15:01 | |
| *** rybridges has quit IRC | 15:01 | |
| *** slunkad has quit IRC | 15:01 | |
| *** ChanServ has quit IRC | 15:01 | |
| *** vegarl has joined #openstack-keystone | 15:01 | |
| *** zigo has joined #openstack-keystone | 15:01 | |
| *** tsufiev has joined #openstack-keystone | 15:01 | |
| *** johnthetubaguy_ has joined #openstack-keystone | 15:01 | |
| *** devx has joined #openstack-keystone | 15:01 | |
| *** rybridges has joined #openstack-keystone | 15:01 | |
| *** slunkad has joined #openstack-keystone | 15:01 | |
| *** ChanServ has joined #openstack-keystone | 15:01 | |
| *** barjavel.freenode.net sets mode: +o ChanServ | 15:01 | |
| *** jhesketh has joined #openstack-keystone | 15:03 | |
| *** edmondsw has joined #openstack-keystone | 15:03 | |
| *** mvk has joined #openstack-keystone | 15:03 | |
| *** lbragstad has joined #openstack-keystone | 15:03 | |
| *** Guest62751 has joined #openstack-keystone | 15:03 | |
| *** jrist has joined #openstack-keystone | 15:03 | |
| *** frickler has joined #openstack-keystone | 15:03 | |
| *** SamYaple has joined #openstack-keystone | 15:03 | |
| *** hemna has joined #openstack-keystone | 15:03 | |
| *** barjavel.freenode.net sets mode: +o lbragstad | 15:03 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 15:04 | |
| *** hoonetorg has joined #openstack-keystone | 15:04 | |
| *** martinus__ has joined #openstack-keystone | 15:04 | |
| *** jdennis has joined #openstack-keystone | 15:04 | |
| *** mchlumsky has joined #openstack-keystone | 15:04 | |
| *** markvoelker has joined #openstack-keystone | 15:04 | |
| *** andreykurilin has joined #openstack-keystone | 15:04 | |
| *** eEbx has joined #openstack-keystone | 15:04 | |
| openstackgerrit | David Rabel proposed openstack/keystone master: Remove policy service from architecture.rst https://review.openstack.org/564239 | 15:04 |
| openstackgerrit | David Rabel proposed openstack/keystone master: Remove policy service from architecture.rst https://review.openstack.org/564239 | 15:07 |
| *** felipemonteiro has joined #openstack-keystone | 15:24 | |
| *** belmoreira has joined #openstack-keystone | 15:25 | |
| *** felipemonteiro_ has joined #openstack-keystone | 15:28 | |
| *** felipemonteiro__ has joined #openstack-keystone | 15:29 | |
| *** felipemonteiro has quit IRC | 15:31 | |
| *** r-daneel has joined #openstack-keystone | 15:31 | |
| *** felipemonteiro_ has quit IRC | 15:33 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystoneauth master: Use Status variables in tests https://review.openstack.org/564258 | 15:37 |
| *** gyee has joined #openstack-keystone | 15:39 | |
| *** felipemonteiro__ has quit IRC | 15:40 | |
| *** felipemonteiro__ has joined #openstack-keystone | 15:40 | |
| *** felipemonteiro__ has quit IRC | 15:45 | |
| *** SamYaple has quit IRC | 15:45 | |
| *** redrobot has joined #openstack-keystone | 15:51 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystoneauth master: Reference class variable in Status https://review.openstack.org/564262 | 15:53 |
| *** itlinux has joined #openstack-keystone | 15:54 | |
| *** felipemonteiro has joined #openstack-keystone | 15:54 | |
| *** belmoreira has quit IRC | 15:56 | |
| *** pcaruana has quit IRC | 15:57 | |
| *** belmoreira has joined #openstack-keystone | 15:58 | |
| *** pcaruana has joined #openstack-keystone | 15:59 | |
| *** felipemonteiro_ has joined #openstack-keystone | 15:59 | |
| lbragstad | kmalloc: for that ksm change, wouldn't we want service users who have roles on the system to also have that header populated? | 16:01 |
| *** belmoreira has quit IRC | 16:02 | |
| kmalloc | uhm... | 16:02 |
| kmalloc | maybe? | 16:02 |
| kmalloc | it wasn't clear to me. | 16:02 |
| *** felipemonteiro has quit IRC | 16:03 | |
| *** ildikov_ has joined #openstack-keystone | 16:03 | |
| lbragstad | i mean - that might be a little bit into the future | 16:03 |
| lbragstad | but, i figured it might be possible to have service users that have roles on the system | 16:04 |
| *** breton__ has joined #openstack-keystone | 16:05 | |
| kmalloc | trying to figure that out | 16:05 |
| kmalloc | also do we want to call this: openstack-system-scope: system | 16:06 |
| kmalloc | or .. openstack-scope-type ? | 16:06 |
| lbragstad | that's a good question | 16:07 |
| lbragstad | we already have the project-id domain-id bits | 16:07 |
| lbragstad | which relay scope | 16:07 |
| kmalloc | annnd i wouldn't want to call it openstack-auth-system-scope and openstack-service-system-scope | 16:07 |
| kmalloc | which is why i don't think it belongs in the template | 16:07 |
| kmalloc | (thats what the template does) | 16:08 |
| *** pcaruana has quit IRC | 16:08 | |
| *** andreaf_ has joined #openstack-keystone | 16:09 | |
| *** jmccrory_ has joined #openstack-keystone | 16:09 | |
| *** dstanek_ has joined #openstack-keystone | 16:09 | |
| *** chrome0 has joined #openstack-keystone | 16:09 | |
| *** links has quit IRC | 16:09 | |
| *** kencjohnston has joined #openstack-keystone | 16:09 | |
| lbragstad | got it | 16:09 |
| lbragstad | that's fair | 16:09 |
| *** jamiec_ has joined #openstack-keystone | 16:09 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystonemiddleware master: Introduce new header for system-scoped tokens https://review.openstack.org/564072 | 16:10 |
| lbragstad | new version ^ | 16:10 |
| kmalloc | cool. | 16:10 |
| lbragstad | no tests yet | 16:10 |
| *** SamYaple has joined #openstack-keystone | 16:10 | |
| lbragstad | but just working through the feel of it | 16:10 |
| *** andreaf has quit IRC | 16:10 | |
| *** ildikov has quit IRC | 16:10 | |
| *** jamiec has quit IRC | 16:10 | |
| *** dstanek has quit IRC | 16:10 | |
| *** kencjohnston_ has quit IRC | 16:10 | |
| *** chrome0_ has quit IRC | 16:10 | |
| *** breton has quit IRC | 16:10 | |
| *** jmccrory has quit IRC | 16:10 | |
| *** dstanek_ is now known as dstanek | 16:10 | |
| kmalloc | yah | 16:10 |
| *** ildikov_ is now known as ildikov | 16:10 | |
| *** SamYaple has quit IRC | 16:10 | |
| *** jmccrory_ is now known as jmccrory | 16:11 | |
| *** andreaf_ is now known as andreaf | 16:11 | |
| *** rmascena has joined #openstack-keystone | 16:14 | |
| *** raildo has quit IRC | 16:16 | |
| *** wxy has quit IRC | 16:22 | |
| *** wxy has joined #openstack-keystone | 16:23 | |
| *** jaosorior has quit IRC | 16:25 | |
| *** felipemonteiro_ has quit IRC | 16:27 | |
| *** felipemonteiro_ has joined #openstack-keystone | 16:27 | |
| lbragstad | i'm going to take lunch quick, but i'll get the ksm patch tested this afternoon | 16:27 |
| *** pcichy has joined #openstack-keystone | 16:37 | |
| openstackgerrit | Merged openstack/keystoneauth master: Expose version status in EndpointData https://review.openstack.org/559125 | 16:40 |
| *** itlinux has quit IRC | 16:49 | |
| *** r-daneel_ has joined #openstack-keystone | 17:02 | |
| *** r-daneel has quit IRC | 17:05 | |
| *** r-daneel_ is now known as r-daneel | 17:05 | |
| *** links has joined #openstack-keystone | 17:08 | |
| *** links has quit IRC | 17:09 | |
| *** itlinux has joined #openstack-keystone | 17:09 | |
| *** itlinux has quit IRC | 17:10 | |
| *** AlexeyAbashkin has quit IRC | 17:11 | |
| *** itlinux has joined #openstack-keystone | 17:12 | |
| *** rmascena has quit IRC | 17:13 | |
| *** edmondsw has quit IRC | 17:15 | |
| *** belmoreira has joined #openstack-keystone | 17:20 | |
| *** pcaruana has joined #openstack-keystone | 17:20 | |
| *** raildo has joined #openstack-keystone | 17:22 | |
| kmalloc | mordred: once lbragstad's questions are answered i'm good with the aliases change | 17:31 |
| mordred | kmalloc: awesome. in exchange, I have written you a whole new patch to be excited about | 17:37 |
| mordred | kmalloc: are you ready to be excited by it? | 17:37 |
| kmalloc | oh no :P | 17:37 |
| mordred | kmalloc: (I realized there was one last piece lurking when I went to write the sdk patch) | 17:37 |
| kmalloc | hehe | 17:37 |
| openstackgerrit | Monty Taylor proposed openstack/keystoneauth master: Infer version from old versioned service type aliases https://review.openstack.org/564299 | 17:38 |
| mordred | you're gonna like the comment I left in this one - I at least I hope you are | 17:38 |
| kmalloc | god, volume2 version=3 | 17:38 |
| mordred | right? | 17:38 |
| kmalloc | wow, we are baaaaaaad. | 17:38 |
| kmalloc | :P | 17:38 |
| mordred | this is all literally because of the original impl of python-novaclient that got cargo culted everywhere | 17:39 |
| mordred | since it hid the version discovery docs, there was no way for cinder to rev the version without volumev2 - and we're STILL cleaning up after it years later | 17:39 |
| mordred | EVEN THOUGH openstack has been able to support doing this cleanly since basically day one | 17:40 |
| kmalloc | yeah | 17:40 |
| kmalloc | it looks good, going to wait for zuul | 17:40 |
| mordred | it's all 100% the fault of a single library | 17:40 |
| kmalloc | also... https://review.openstack.org/#/c/564110/2 needs another pass | 17:40 |
| * mordred stabs everyone | 17:40 | |
| kmalloc | you can't remove a public function | 17:40 |
| kmalloc | but it's a small fix to just use the class for that function | 17:40 |
| kmalloc | ah wait. that hasn't been released | 17:41 |
| kmalloc | bah, i need to drink coffee before reviewing | 17:41 |
| kmalloc | :P | 17:41 |
| kmalloc | +2 now | 17:42 |
| kmalloc | unless a release is cut between now and when it lands. | 17:42 |
| *** itlinux has quit IRC | 17:43 | |
| mordred | I'm +2 on the followups from lbragstad ... I feel bad for not co-authoring efried though | 17:45 |
| mordred | kmalloc: you saw those, yeah? | 17:45 |
| lbragstad | yeah - the whole volumev2, volumev3, block-storage test case kinda makes me sad | 17:48 |
| lbragstad | but... | 17:48 |
| lbragstad | i assume that's a different problem | 17:48 |
| *** ayoung has quit IRC | 17:48 | |
| mordred | such sadness | 17:48 |
| mordred | lbragstad: I can make a class - and will do that real quick -if it subclasses dict it doesn't break json.dumps | 17:49 |
| lbragstad | nice | 17:49 |
| *** r-daneel has quit IRC | 17:49 | |
| *** r-daneel has joined #openstack-keystone | 17:49 | |
| *** edmondsw has joined #openstack-keystone | 17:51 | |
| *** edmondsw has quit IRC | 17:55 | |
| *** ayoung has joined #openstack-keystone | 17:58 | |
| *** edmondsw has joined #openstack-keystone | 17:59 | |
| *** edmondsw has quit IRC | 18:00 | |
| *** belmoreira has quit IRC | 18:00 | |
| kmalloc | mordred: yeah +2 on those | 18:00 |
| *** itlinux has joined #openstack-keystone | 18:01 | |
| *** edmondsw has joined #openstack-keystone | 18:04 | |
| *** kevinbenton has joined #openstack-keystone | 18:17 | |
| *** Guest62751 is now known as zeus | 18:17 | |
| *** zeus has quit IRC | 18:17 | |
| *** zeus has joined #openstack-keystone | 18:17 | |
| *** prashkre has joined #openstack-keystone | 18:19 | |
| *** kevinbenton_ has quit IRC | 18:22 | |
| *** kevinbenton has left #openstack-keystone | 18:22 | |
| lbragstad | hmm - our ksm tests are pretty dated | 18:29 |
| lbragstad | we reference two unsupported token providers | 18:35 |
| *** itlinux has quit IRC | 18:47 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystonemiddleware master: Introduce new header for system-scoped tokens https://review.openstack.org/564072 | 19:00 |
| lbragstad | kmalloc: tested ^ | 19:00 |
| *** SamYaple has joined #openstack-keystone | 19:11 | |
| *** SamYaple has quit IRC | 19:11 | |
| *** itlinux has joined #openstack-keystone | 19:37 | |
| *** prashkre has quit IRC | 19:46 | |
| *** prashkre has joined #openstack-keystone | 19:46 | |
| *** itlinux has quit IRC | 19:47 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 19:48 | |
| *** prashkre has quit IRC | 19:50 | |
| *** AlexeyAbashkin has quit IRC | 19:52 | |
| *** dklyle has joined #openstack-keystone | 19:54 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 19:57 | |
| ayoung | lbragstad, does oslo-context have support for system scope? I assume it does, just want to confirm | 19:58 |
| lbragstad | ayoung: it's in the pipe | 19:58 |
| lbragstad | https://review.openstack.org/#/c/530509/ | 19:58 |
| lbragstad | but it needs this too https://review.openstack.org/#/c/564072/ | 19:58 |
| ayoung | lbragstad, I think that needs to land before https://review.openstack.org/#/c/564072/ middleware will work. | 19:58 |
| lbragstad | yeah | 19:58 |
| ayoung | I got fooled by that doing is_admin_project. Jamie helped straighten it out | 19:59 |
| lbragstad | middleware will set the header but it won't be recognized by anything | 19:59 |
| lbragstad | yeah - i tried reverse engineering the approach in that patch | 19:59 |
| ayoung | and thus policy can't get enforced on it | 19:59 |
| lbragstad | not sure if i got close of not | 19:59 |
| lbragstad | or not* | 19:59 |
| ayoung | have jamielennox look at it | 19:59 |
| ayoung | I really don't trust anyone else with oslo-context | 19:59 |
| lbragstad | i groked at it for a while | 20:00 |
| lbragstad | the ksm stuff is intense too | 20:00 |
| lbragstad | the header translation bits threw me for a loop | 20:00 |
| ayoung | yep | 20:00 |
| ayoung | I'll keep on those reviews. I've been beating on that beast for years nowq | 20:00 |
| lbragstad | keep beating please | 20:00 |
| lbragstad | those should be good to review | 20:00 |
| lbragstad | we'll have to get both of those merged before the patch to nova will make any sense | 20:01 |
| *** dklyle has quit IRC | 20:06 | |
| *** edmondsw has quit IRC | 20:12 | |
| *** edmondsw has joined #openstack-keystone | 20:15 | |
| *** edmondsw has quit IRC | 20:20 | |
| *** raildo has quit IRC | 20:21 | |
| *** AlexeyAbashkin has quit IRC | 20:27 | |
| *** edmondsw has joined #openstack-keystone | 20:28 | |
| *** edmondsw has quit IRC | 20:33 | |
| *** edmondsw has joined #openstack-keystone | 20:34 | |
| openstackgerrit | Lance Bragstad proposed openstack/oslo.policy master: Update documentation to include usage for new projects https://review.openstack.org/564340 | 20:36 |
| *** edmondsw has quit IRC | 20:39 | |
| *** felipemonteiro_ has quit IRC | 20:39 | |
| *** ediardo has joined #openstack-keystone | 20:40 | |
| *** tesseract has quit IRC | 20:40 | |
| *** felipemonteiro_ has joined #openstack-keystone | 20:40 | |
| *** pcaruana has quit IRC | 20:42 | |
| *** martinus__ has quit IRC | 20:51 | |
| *** edmondsw has joined #openstack-keystone | 20:54 | |
| *** edmondsw has quit IRC | 20:59 | |
| *** edmondsw has joined #openstack-keystone | 21:00 | |
| *** edmondsw has quit IRC | 21:05 | |
| *** edmondsw has joined #openstack-keystone | 21:06 | |
| mwhahaha | hey any thoughts on a change in about the last 3 weeks that might have affected the saml2 items? | 21:07 |
| mwhahaha | the puppet tests that deployed Shibboleth/saml2 is failing now http://logs.openstack.org/87/558887/10/check/puppet-openstack-beaker-centos-7/cc9be41/logs/keystone/keystone.txt.gz#_2018-04-25_18_29_34_339 | 21:08 |
| mwhahaha | i would guess it's https://review.openstack.org/#/c/350815/ but i'm not sure what we should be loading instead | 21:08 |
| *** edmondsw has quit IRC | 21:11 | |
| *** edmondsw has joined #openstack-keystone | 21:12 | |
| cmurphy | mwhahaha: i think this shouldn't be set http://git.openstack.org/cgit/openstack/puppet-keystone/tree/manifests/federation/shibboleth.pp#n102 | 21:15 |
| cmurphy | [auth]/methods = [...],saml2 should be enough | 21:16 |
| mwhahaha | so drop the module_plugin bits | 21:16 |
| cmurphy | yeah | 21:16 |
| mwhahaha | k i'll give that a shot | 21:16 |
| *** edmondsw has quit IRC | 21:17 | |
| *** edmondsw has joined #openstack-keystone | 21:18 | |
| *** openstackgerrit has quit IRC | 21:20 | |
| *** edmondsw has quit IRC | 21:23 | |
| *** edmondsw has joined #openstack-keystone | 21:24 | |
| *** edmondsw has quit IRC | 21:28 | |
| *** edmondsw has joined #openstack-keystone | 21:30 | |
| *** edmondsw has quit IRC | 21:35 | |
| *** dave-mcc_ has quit IRC | 21:36 | |
| *** edmondsw has joined #openstack-keystone | 21:36 | |
| *** edmondsw has quit IRC | 21:41 | |
| *** devx has quit IRC | 21:42 | |
| *** mchlumsky has quit IRC | 21:44 | |
| *** edmondsw has joined #openstack-keystone | 21:50 | |
| *** edmondsw has quit IRC | 21:55 | |
| *** edmondsw has joined #openstack-keystone | 22:02 | |
| *** edmondsw has quit IRC | 22:07 | |
| *** jmlowe has quit IRC | 22:09 | |
| *** dave-mccowan has joined #openstack-keystone | 22:13 | |
| *** threestrands has joined #openstack-keystone | 22:17 | |
| *** dave-mccowan has quit IRC | 22:36 | |
| *** gyee has quit IRC | 22:48 | |
| *** rcernin has joined #openstack-keystone | 22:52 | |
| *** edmondsw has joined #openstack-keystone | 23:01 | |
| *** felipemonteiro_ has quit IRC | 23:03 | |
| *** edmondsw has quit IRC | 23:10 | |
| *** jmlowe has joined #openstack-keystone | 23:15 | |
| jamielennox | lbragstad: what is that header - a boolean? | 23:19 |
| *** threestrands_ has joined #openstack-keystone | 23:35 | |
| *** threestrands has quit IRC | 23:38 | |
| *** pcichy has quit IRC | 23:46 | |
| *** pcichy has joined #openstack-keystone | 23:46 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!