| *** xinran_ has joined #openstack-keystone | 00:01 | |
| *** lbragstad has quit IRC | 00:17 | |
| *** r-daneel has joined #openstack-keystone | 00:46 | |
| *** r-daneel_ has joined #openstack-keystone | 00:49 | |
| *** r-daneel has quit IRC | 00:50 | |
| *** r-daneel_ is now known as r-daneel | 00:50 | |
| *** threestrands has joined #openstack-keystone | 01:05 | |
| *** r-daneel has quit IRC | 01:06 | |
| *** panbalag has quit IRC | 01:14 | |
| *** panbalag has joined #openstack-keystone | 01:15 | |
| *** panbalag has left #openstack-keystone | 01:15 | |
| *** Guest10014 is now known as jlvillal | 01:19 | |
| *** namnh has joined #openstack-keystone | 01:31 | |
| *** namnh has quit IRC | 01:31 | |
| *** openstackgerrit has joined #openstack-keystone | 01:40 | |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: [WIP]Enable foreign keys for unit test https://review.openstack.org/558193 | 01:40 |
|---|---|---|
| *** r-daneel has joined #openstack-keystone | 01:53 | |
| *** xinran_ has quit IRC | 02:11 | |
| *** annp has joined #openstack-keystone | 02:12 | |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: [WIP]Enable foreign keys for unit test https://review.openstack.org/558193 | 02:20 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone-specs master: Add scenarios to strict hierarchy enforcement model https://review.openstack.org/565412 | 02:21 |
| *** lbragstad has joined #openstack-keystone | 02:24 | |
| *** ChanServ sets mode: +o lbragstad | 02:24 | |
| *** nicolasbock has quit IRC | 03:21 | |
| *** namnh has joined #openstack-keystone | 03:38 | |
| *** germs has quit IRC | 04:02 | |
| *** hoonetorg has quit IRC | 04:21 | |
| *** chrome0_ has quit IRC | 04:39 | |
| *** chrome0 has joined #openstack-keystone | 04:41 | |
| *** gyee has quit IRC | 04:41 | |
| *** links has joined #openstack-keystone | 04:46 | |
| *** jdennis has quit IRC | 05:07 | |
| *** markvoelker has quit IRC | 05:08 | |
| *** jdennis has joined #openstack-keystone | 05:22 | |
| *** pcichy has joined #openstack-keystone | 05:51 | |
| *** hoonetorg has joined #openstack-keystone | 05:55 | |
| *** redrobot has quit IRC | 05:59 | |
| *** redrobot has joined #openstack-keystone | 06:03 | |
| *** markvoelker has joined #openstack-keystone | 06:09 | |
| *** markvoelker has quit IRC | 06:44 | |
| *** hoonetorg has quit IRC | 06:44 | |
| *** martinus__ has joined #openstack-keystone | 06:45 | |
| *** bhagyashris has joined #openstack-keystone | 06:46 | |
| *** hoonetorg has joined #openstack-keystone | 06:50 | |
| *** pcaruana has joined #openstack-keystone | 06:53 | |
| *** rcernin has quit IRC | 06:58 | |
| *** threestrands has quit IRC | 06:58 | |
| *** aloga has joined #openstack-keystone | 07:03 | |
| usr2033 | lbragstad, sorry i had to leave, user_z's default domain id is domain_a | 07:14 |
| *** tesseract has joined #openstack-keystone | 07:18 | |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: [WIP]Enable foreign keys for unit test https://review.openstack.org/558193 | 07:26 |
| *** markvoelker has joined #openstack-keystone | 07:41 | |
| *** markvoelker has quit IRC | 08:13 | |
| *** links has quit IRC | 08:43 | |
| *** links has joined #openstack-keystone | 08:44 | |
| *** namnh has quit IRC | 08:48 | |
| *** namnh has joined #openstack-keystone | 08:48 | |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: [WIP]Enable foreign keys for unit test https://review.openstack.org/558193 | 08:51 |
| *** jrist has quit IRC | 08:57 | |
| *** jrist has joined #openstack-keystone | 09:01 | |
| wxy | lbragstad: sure. I'll take a look. Thanks for the update. | 09:05 |
| *** markvoelker has joined #openstack-keystone | 09:10 | |
| *** markvoelker has quit IRC | 09:44 | |
| openstackgerrit | Merged openstack/oslo.policy master: make the sphinxpolicygen extension handle multiple input/output files https://review.openstack.org/564627 | 09:49 |
| openstackgerrit | Merged openstack/oslo.policy master: Remove stale pip-missing-reqs tox test https://review.openstack.org/565803 | 09:49 |
| *** namnh has quit IRC | 10:11 | |
| *** pcichy has quit IRC | 10:12 | |
| *** nicolasbock has joined #openstack-keystone | 10:31 | |
| *** edmondsw has joined #openstack-keystone | 10:31 | |
| *** edmondsw has quit IRC | 10:36 | |
| *** annp has quit IRC | 10:40 | |
| *** markvoelker has joined #openstack-keystone | 10:41 | |
| usr2033 | i have a problem about deleting domain. In my case: I have already user_z and it's default domain is domain_a. I create new domain_b and i gave user_z domain admin role to this domain. When i delete domain_b, openstack doesn't remove user_z's domain admin role. I tried this from openstack cli. No luck. Openstack keystone rest api document says that deleting domain will remove role assignments. Can you help me about this? | 10:55 |
| *** markvoelker has quit IRC | 11:14 | |
| *** raildo has joined #openstack-keystone | 11:22 | |
| *** opetrenko has quit IRC | 11:26 | |
| *** opetrenko has joined #openstack-keystone | 11:27 | |
| *** panbalag has joined #openstack-keystone | 11:37 | |
| *** panbalag has left #openstack-keystone | 11:40 | |
| *** markvoelker has joined #openstack-keystone | 12:11 | |
| *** edmondsw has joined #openstack-keystone | 12:16 | |
| *** markvoelker has quit IRC | 12:20 | |
| *** markvoelker has joined #openstack-keystone | 12:20 | |
| *** panbalag has joined #openstack-keystone | 12:42 | |
| *** panbalag has left #openstack-keystone | 12:45 | |
| *** mvk has quit IRC | 12:55 | |
| *** nicolasbock has quit IRC | 12:57 | |
| *** mchlumsky has joined #openstack-keystone | 13:07 | |
| *** nicolasbock has joined #openstack-keystone | 13:14 | |
| *** mvk has joined #openstack-keystone | 13:28 | |
| *** pcichy has joined #openstack-keystone | 13:46 | |
| *** spilla has joined #openstack-keystone | 14:04 | |
| ayoung | usr2033, pretty sure I wrote that code. | 14:05 |
| ayoung | http://git.openstack.org/cgit/openstack/keystone/tree/keystone/resource/controllers.py#n73 is the controller code for delete_domain... | 14:07 |
| *** Horrorcat has left #openstack-keystone | 14:07 | |
| ayoung | and I am already starting to believe you | 14:07 |
| ayoung | http://git.openstack.org/cgit/openstack/keystone/tree/keystone/resource/core.py#n752 is the internal code for delete domain | 14:09 |
| *** spilla has quit IRC | 14:13 | |
| *** spilla has joined #openstack-keystone | 14:14 | |
| lbragstad | ayoung: i can't recreate it http://paste.openstack.org/raw/720230/ | 14:14 |
| lbragstad | we're going to be lucky at the summit because the project update is early in the week | 14:15 |
| lbragstad | we can use it as an opportunity to plug other related talks | 14:15 |
| ayoung | lbragstad, OK here is what I have so far | 14:15 |
| lbragstad | if you have a talk in vancouver that you'd like us to mention in keystone's project update, please add it to the list https://etherpad.openstack.org/p/YVR-keystone-forum-sessions | 14:16 |
| ayoung | http://git.openstack.org/cgit/openstack/keystone/tree/keystone/assignment/core.py#n68 | 14:16 |
| ayoung | lbragstad, will do | 14:17 |
| ayoung | lbragstad, so we don't delete assignments directly, only based on a notification | 14:18 |
| ayoung | if we delete a domain, then the notification should get picked up by the code I linked to above, and that should remove all domain_assignments. | 14:18 |
| ayoung | I can't recall discussing the need to defer the domain assignments to this level, suspect it was part of henrynash's split of the assignment api off the others | 14:19 |
| openstackgerrit | Merged openstack/pycadf master: Trivial: Update pypi url to new url https://review.openstack.org/551695 | 14:19 |
| lbragstad | usr2033: do you have a paste that shows the steps you're taking and points out where you think the bug is? | 14:21 |
| lbragstad | because based on my understanding - this is how i'm recreating the scenario http://paste.openstack.org/raw/720230/ | 14:22 |
| lbragstad | in that example, i have the "default" domain and a "new-domain" | 14:22 |
| ayoung | lbragstad, do the same thing, but use the admin role. | 14:24 |
| lbragstad | ok - let me try that then | 14:24 |
| ayoung | lbragstad, I wonder if there is another step, too, that he didn't say | 14:24 |
| ayoung | like...do something as admin as that user | 14:24 |
| ayoung | http://git.openstack.org/cgit/openstack/keystone/tree/keystone/assignment/backends/sql.py#n265 delete_domain_assignments should be pretty simple | 14:26 |
| lbragstad | the admin role doesn't seem to matter http://paste.openstack.org/raw/720294/ | 14:28 |
| ayoung | lbragstad, agreed that it should not, either. | 14:30 |
| *** r-daneel has quit IRC | 14:36 | |
| lbragstad | my pastes are getting repetitive | 14:38 |
| lbragstad | i'm just going to paste the assignment list | 14:38 |
| lbragstad | http://paste.openstack.org/show/720296/ | 14:38 |
| *** germs has joined #openstack-keystone | 14:38 | |
| *** germs has quit IRC | 14:38 | |
| *** germs has joined #openstack-keystone | 14:38 | |
| lbragstad | ^ still works | 14:38 |
| *** germs has quit IRC | 14:39 | |
| *** germs has joined #openstack-keystone | 14:39 | |
| lbragstad | so does - http://paste.openstack.org/show/720297/ | 14:41 |
| lbragstad | regardless of the user being in the domain that gets deleted or another domain, their assignment are always cleaned up | 14:41 |
| *** mvk has quit IRC | 14:42 | |
| *** _d34dh0r53_ is now known as d34dh0r53 | 14:46 | |
| *** afazekas_ has quit IRC | 14:54 | |
| *** afazekas has joined #openstack-keystone | 14:58 | |
| *** r-daneel has joined #openstack-keystone | 14:59 | |
| *** AlexeyAbashkin has joined #openstack-keystone | 15:00 | |
| *** usr2033 has quit IRC | 15:03 | |
| *** AlexeyAbashkin has quit IRC | 15:03 | |
| *** links has quit IRC | 15:06 | |
| *** felipemonteiro__ has joined #openstack-keystone | 15:41 | |
| *** spilla has quit IRC | 15:43 | |
| *** spilla has joined #openstack-keystone | 15:43 | |
| gagehugo | lbragstad don't we already allow uuids with dashes? | 15:43 |
| gagehugo | re: keystone feedback | 15:44 |
| lbragstad | gagehugo: it depends, i think that statement is missing specific context | 15:44 |
| gagehugo | hmm | 15:44 |
| lbragstad | if you have a uuid with dashes in an external system and we put that uuid in a token, the dashes won't get reinflated | 15:44 |
| lbragstad | on token validation | 15:44 |
| lbragstad | CERN hit that i think, or i rememeber talking to jose about it | 15:45 |
| gagehugo | ah | 15:45 |
| *** felipemonteiro_ has quit IRC | 15:45 | |
| hrybacki | lbragstad: were those submission results surprising? | 15:45 |
| lbragstad | mmm | 15:46 |
| lbragstad | i'm inclined to say no | 15:46 |
| hrybacki | I did think people wanted policy fixed more than the federation bits | 15:46 |
| lbragstad | if i had to say anything was surprising it was that federation was to the right of the curve | 15:46 |
| lbragstad | but - the middle three are really close to each other | 15:47 |
| *** gyee has joined #openstack-keystone | 15:47 | |
| gagehugo | there's quite a bit of asking for performance improvements too | 15:48 |
| lbragstad | yeah | 15:48 |
| *** pcaruana has quit IRC | 15:50 | |
| knikolla | yeah, i'm also surprised that federation was above policy | 16:13 |
| lbragstad | to be fair | 16:15 |
| lbragstad | most of the other feedback was policy related | 16:15 |
| lbragstad | so i would consider it tied with scaling out to multiple regions | 16:16 |
| *** felipemonteiro__ has quit IRC | 16:17 | |
| *** felipemonteiro_ has joined #openstack-keystone | 16:17 | |
| *** tesseract has quit IRC | 16:28 | |
| hrybacki | gagehugo: do you know if there has been any movement on w/ Patrole? I saw https://review.openstack.org/#/c/464678/ was basically re-created here: https://review.openstack.org/#/c/559137/ | 16:57 |
| *** tesseract has joined #openstack-keystone | 16:57 | |
| hrybacki | I'm not sure how closely you work with him (if at all) | 16:57 |
| *** itlinux has joined #openstack-keystone | 17:00 | |
| *** panbalag1 has joined #openstack-keystone | 17:01 | |
| *** panbalag1 has left #openstack-keystone | 17:01 | |
| gagehugo | I'm not sure | 17:02 |
| gagehugo | felipemonteiro_ ^ | 17:02 |
| mordred | lbragstad: could I bug you to re-look at https://review.openstack.org/#/c/559154/7 and https://review.openstack.org/#/c/462218 and maybe change your +1 to a +2? - I think your comments have been addressed | 17:14 |
| hrybacki | ack, thanks gagehugo :) | 17:25 |
| *** tesseract has quit IRC | 17:25 | |
| *** mvk has joined #openstack-keystone | 17:28 | |
| lbragstad | mordred: done | 17:54 |
| felipemonteiro_ | hrybacki: i only moved the spec because i noticed nothing was being committed to keystone-specs so i wasn't sure if openstack-specs was more appropriate. in any case, i can consolidate them into keystone-specs if need be | 18:00 |
| hrybacki | lbragstad: ^^ is that the case? | 18:01 |
| lbragstad | if it affects multiple projects, then openstack specs is probably more appropriate | 18:02 |
| mordred | lbragstad: \o/ thanks! | 18:04 |
| hrybacki | felipemonteiro_: you may want to take a look at https://review.openstack.org/#/c/523973 again now that seems to have become stable | 18:12 |
| hrybacki | I'm going to be digging into your spec/approach bc we'll need a way to test ^^ | 18:12 |
| felipemonteiro_ | ok, thanks will take a look | 18:15 |
| *** felipemonteiro__ has joined #openstack-keystone | 18:39 | |
| *** felipemonteiro_ has quit IRC | 18:42 | |
| lbragstad | woot - we got a +1 from tim on our hierarchical limit enforcement model https://review.openstack.org/#/c/565412/4 | 18:45 |
| lbragstad | :84 | 18:53 |
| lbragstad | bah | 18:53 |
| * lbragstad goes to terminal | 18:53 | |
| hrybacki | comments added to your newer spec felipemonteiro__ :) | 19:00 |
| felipemonteiro__ | Thanks | 19:01 |
| *** openstackgerrit has quit IRC | 19:05 | |
| *** sapd_ has joined #openstack-keystone | 19:19 | |
| *** felipemonteiro_ has joined #openstack-keystone | 19:21 | |
| *** felipemonteiro__ has quit IRC | 19:21 | |
| *** sapd has quit IRC | 19:22 | |
| *** openstackgerrit has joined #openstack-keystone | 19:24 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone-specs master: Add scenarios to strict hierarchy enforcement model https://review.openstack.org/565412 | 19:25 |
| lbragstad | wxy: thanks for the review - addressed your comments in ^ | 19:35 |
| *** zzzeek_ has quit IRC | 19:35 | |
| lbragstad | wxy: feel free to roll that into your proposal if you'd like | 19:37 |
| *** zzzeek has joined #openstack-keystone | 19:37 | |
| *** pcichy has quit IRC | 19:49 | |
| *** chrome0 has quit IRC | 20:10 | |
| *** chrome0 has joined #openstack-keystone | 20:12 | |
| *** chrome0 has quit IRC | 20:15 | |
| *** chrome0 has joined #openstack-keystone | 20:16 | |
| *** mchlumsky has quit IRC | 20:17 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Add policy for limit model protection https://review.openstack.org/562714 | 20:21 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Implement enforcement model logic in Manager https://review.openstack.org/562715 | 20:21 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Expose endpoint to return enforcement model https://review.openstack.org/562716 | 20:21 |
| *** spilla has quit IRC | 20:26 | |
| openstackgerrit | Monty Taylor proposed openstack/keystoneauth master: Implement service_type alias lookups https://review.openstack.org/462218 | 20:28 |
| openstackgerrit | Monty Taylor proposed openstack/keystoneauth master: Add methods to get all of the version data https://review.openstack.org/559154 | 20:29 |
| openstackgerrit | Monty Taylor proposed openstack/keystoneauth master: Make VersionData class https://review.openstack.org/564469 | 20:29 |
| openstackgerrit | Monty Taylor proposed openstack/keystoneauth master: Turn normalize_status into a class https://review.openstack.org/564110 | 20:29 |
| openstackgerrit | Monty Taylor proposed openstack/keystoneauth master: Infer version from old versioned service type aliases https://review.openstack.org/564299 | 20:29 |
| mordred | lbragstad, kmalloc: I had to rebase the whole stack because the first patch didn't add os-service-types to lower-constraints.txt (merge race condition) | 20:29 |
| lbragstad | ah | 20:29 |
| openstackgerrit | Monty Taylor proposed openstack/keystoneauth master: Use Status variables in tests https://review.openstack.org/564258 | 20:29 |
| openstackgerrit | Monty Taylor proposed openstack/keystoneauth master: Reference class variable in Status https://review.openstack.org/564262 | 20:30 |
| kmalloc | Damn | 20:30 |
| mordred | right? | 20:30 |
| kmalloc | Nbd, it still can land easy...just..ugh | 20:30 |
| mordred | yah. | 20:31 |
| mordred | those moments when you see the red x and you just get sad | 20:31 |
| *** jdennis has quit IRC | 20:31 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Remove unused exception https://review.openstack.org/566156 | 20:33 |
| *** jdennis has joined #openstack-keystone | 20:33 | |
| kmalloc | Ayup | 20:34 |
| *** raildo has quit IRC | 20:42 | |
| *** martinus__ has quit IRC | 20:47 | |
| *** spilla has joined #openstack-keystone | 20:47 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Remove dead code in token provider https://review.openstack.org/566160 | 20:57 |
| *** dtruong_ has quit IRC | 21:13 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Remove unused assertions from test_v3.py https://review.openstack.org/566163 | 21:13 |
| *** nkinder has quit IRC | 21:14 | |
| *** edmondsw has quit IRC | 21:15 | |
| *** edmondsw has joined #openstack-keystone | 21:16 | |
| *** edmondsw has quit IRC | 21:21 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Remove dead dependency injection code https://review.openstack.org/566168 | 21:25 |
| *** itlinux_ has joined #openstack-keystone | 21:53 | |
| *** itlinux has quit IRC | 21:56 | |
| *** itlinux_ has quit IRC | 21:58 | |
| *** rcernin has joined #openstack-keystone | 22:07 | |
| *** felipemonteiro__ has joined #openstack-keystone | 22:43 | |
| *** felipemonteiro__ has quit IRC | 22:44 | |
| *** felipemonteiro__ has joined #openstack-keystone | 22:44 | |
| *** felipemonteiro_ has quit IRC | 22:47 | |
| *** threestrands has joined #openstack-keystone | 22:59 | |
| *** felipemonteiro__ has quit IRC | 23:04 | |
| *** dmellado has quit IRC | 23:19 | |
| *** masber has joined #openstack-keystone | 23:23 | |
| *** dmellado has joined #openstack-keystone | 23:51 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!