*** rledisez has quit IRC | 00:04 | |
*** jamespage has quit IRC | 00:04 | |
*** wxy_ has joined #openstack-keystone | 00:04 | |
*** rledisez has joined #openstack-keystone | 00:05 | |
*** lamt__ has joined #openstack-keystone | 00:05 | |
*** awestin1_ has joined #openstack-keystone | 00:05 | |
*** wxy has quit IRC | 00:05 | |
*** wxy_ is now known as wxy | 00:05 | |
*** ildikov_ has joined #openstack-keystone | 00:05 | |
*** awestin1 has quit IRC | 00:05 | |
*** ildikov has quit IRC | 00:05 | |
*** odyssey4me has quit IRC | 00:05 | |
*** awestin1_ is now known as awestin1 | 00:05 | |
*** ildikov_ is now known as ildikov | 00:05 | |
*** nicolasbock has quit IRC | 00:06 | |
*** mordred has quit IRC | 00:06 | |
*** zigo has quit IRC | 00:06 | |
*** afazekas has quit IRC | 00:06 | |
*** lamt has quit IRC | 00:06 | |
*** melwitt has quit IRC | 00:06 | |
*** lamt__ is now known as lamt | 00:06 | |
*** zigo_ has joined #openstack-keystone | 00:06 | |
*** r-daneel has quit IRC | 00:07 | |
*** cz2 has quit IRC | 00:10 | |
*** odyssey4me has joined #openstack-keystone | 00:11 | |
*** melwitt has joined #openstack-keystone | 00:11 | |
*** afazekas has joined #openstack-keystone | 00:11 | |
*** ChanServ has quit IRC | 00:12 | |
*** cz2 has joined #openstack-keystone | 00:13 | |
*** mordred has joined #openstack-keystone | 00:15 | |
*** jamespage has joined #openstack-keystone | 00:16 | |
*** Dinesh_Bhor has joined #openstack-keystone | 00:24 | |
*** ChanServ has joined #openstack-keystone | 00:33 | |
*** barjavel.freenode.net sets mode: +o ChanServ | 00:33 | |
*** cmurphy[m] has quit IRC | 00:37 | |
*** lbragstad[m] has quit IRC | 00:37 | |
*** knikolla[m] has quit IRC | 00:38 | |
*** lamt is now known as Guest41358 | 00:39 | |
*** melwitt is now known as Guest48153 | 00:39 | |
*** awestin1 is now known as Guest54251 | 00:39 | |
*** nicolasbock has joined #openstack-keystone | 00:40 | |
*** annp has quit IRC | 00:53 | |
*** annp has joined #openstack-keystone | 00:54 | |
*** ayoung has quit IRC | 00:55 | |
*** harlowja has quit IRC | 01:00 | |
*** cmurphy[m] has joined #openstack-keystone | 01:00 | |
*** lbragstad[m] has joined #openstack-keystone | 01:13 | |
*** knikolla[m] has joined #openstack-keystone | 01:13 | |
*** gyankum has joined #openstack-keystone | 01:29 | |
*** jamespage has quit IRC | 01:30 | |
*** mordred has quit IRC | 01:31 | |
*** gyee has quit IRC | 01:31 | |
*** jamespage has joined #openstack-keystone | 01:44 | |
*** mordred has joined #openstack-keystone | 01:44 | |
*** felipemonteiro has joined #openstack-keystone | 01:44 | |
*** Guest41358 is now known as lamt | 02:06 | |
*** dklyle has joined #openstack-keystone | 02:40 | |
*** markvoelker_ has quit IRC | 02:45 | |
*** namnh has joined #openstack-keystone | 02:48 | |
*** dklyle has quit IRC | 02:54 | |
*** neha_alhat has quit IRC | 03:10 | |
*** dikonoor has joined #openstack-keystone | 03:29 | |
*** harlowja has joined #openstack-keystone | 03:29 | |
*** felipemonteiro has quit IRC | 03:32 | |
*** markvoelker has joined #openstack-keystone | 03:35 | |
*** markvoelker has quit IRC | 03:39 | |
*** sonuk has joined #openstack-keystone | 03:47 | |
*** ricolin has joined #openstack-keystone | 03:49 | |
*** felipemonteiro has joined #openstack-keystone | 03:49 | |
*** nicolasbock has quit IRC | 03:55 | |
*** links has joined #openstack-keystone | 04:11 | |
*** annp has quit IRC | 04:13 | |
*** harlowja has quit IRC | 04:14 | |
*** blake has joined #openstack-keystone | 04:23 | |
*** markvoelker has joined #openstack-keystone | 04:29 | |
*** rajalokan has joined #openstack-keystone | 04:33 | |
*** tsufiev has quit IRC | 04:51 | |
*** mvk has joined #openstack-keystone | 04:58 | |
*** markvoelker has quit IRC | 05:03 | |
*** dikonoor has quit IRC | 05:05 | |
*** felipemonteiro has quit IRC | 05:05 | |
*** ricolin has quit IRC | 05:05 | |
*** eandersson has joined #openstack-keystone | 05:10 | |
*** dikonoor has joined #openstack-keystone | 05:11 | |
*** lifeless_ has quit IRC | 05:19 | |
*** lifeless has joined #openstack-keystone | 05:19 | |
*** tsufiev has joined #openstack-keystone | 05:22 | |
*** dikonoor has quit IRC | 05:23 | |
*** dikonoor has joined #openstack-keystone | 05:26 | |
*** felipemonteiro has joined #openstack-keystone | 05:27 | |
*** dikonoor has quit IRC | 05:29 | |
*** eandersson has quit IRC | 05:48 | |
*** eandersson has joined #openstack-keystone | 05:49 | |
*** felipemonteiro has quit IRC | 05:50 | |
*** felipemonteiro has joined #openstack-keystone | 05:53 | |
*** tsufiev has quit IRC | 05:58 | |
*** martinus__ has joined #openstack-keystone | 06:00 | |
*** Dinesh_Bhor has quit IRC | 06:01 | |
*** Dinesh_Bhor has joined #openstack-keystone | 06:07 | |
*** blake has quit IRC | 06:13 | |
*** markvoelker has joined #openstack-keystone | 06:20 | |
*** tsufiev has joined #openstack-keystone | 06:20 | |
*** lifeless has quit IRC | 06:23 | |
*** lifeless has joined #openstack-keystone | 06:25 | |
*** AlexeyAbashkin has joined #openstack-keystone | 06:32 | |
*** pcaruana has joined #openstack-keystone | 06:33 | |
*** rajalokan has quit IRC | 06:42 | |
*** annp has joined #openstack-keystone | 06:52 | |
*** markvoelker has quit IRC | 06:54 | |
*** apple01 has joined #openstack-keystone | 06:54 | |
*** bhagyashris_ has quit IRC | 07:07 | |
*** wangyuxin has quit IRC | 07:07 | |
*** yuxin_ has joined #openstack-keystone | 07:07 | |
*** bhagyashris has joined #openstack-keystone | 07:09 | |
*** jaosorior has joined #openstack-keystone | 07:15 | |
*** ricolin has joined #openstack-keystone | 07:15 | |
*** apple01 has quit IRC | 07:17 | |
*** adriant has quit IRC | 07:20 | |
*** tesseract has joined #openstack-keystone | 07:20 | |
*** adriant has joined #openstack-keystone | 07:20 | |
*** rcernin has quit IRC | 07:27 | |
*** markvoelker has joined #openstack-keystone | 07:45 | |
*** apple01 has joined #openstack-keystone | 07:46 | |
*** markvoelker has quit IRC | 07:49 | |
*** apple01 has quit IRC | 07:51 | |
*** felipemonteiro has quit IRC | 08:15 | |
*** markvoelker has joined #openstack-keystone | 08:38 | |
*** lifeless_ has joined #openstack-keystone | 08:44 | |
*** lifeless has quit IRC | 08:44 | |
*** Alexey_Abashkin has joined #openstack-keystone | 08:50 | |
*** Alexey_Abashkin has quit IRC | 08:51 | |
*** AlexeyAbashkin has quit IRC | 08:51 | |
*** AlexeyAbashkin has joined #openstack-keystone | 08:52 | |
*** apple01 has joined #openstack-keystone | 08:56 | |
*** apple01 has quit IRC | 09:01 | |
*** markvoelker has quit IRC | 09:12 | |
*** pcichy has joined #openstack-keystone | 09:13 | |
*** Dinesh_Bhor has quit IRC | 09:30 | |
*** sonuk has quit IRC | 09:31 | |
*** yikun has joined #openstack-keystone | 09:43 | |
*** zigo_ is now known as zigo | 09:56 | |
*** annp has quit IRC | 10:01 | |
*** apple01 has joined #openstack-keystone | 10:06 | |
*** sonuk has joined #openstack-keystone | 10:07 | |
*** namnh has quit IRC | 10:08 | |
*** jaosorior has quit IRC | 10:14 | |
*** apple01 has quit IRC | 10:14 | |
*** AlexeyAbashkin has quit IRC | 10:30 | |
*** AlexeyAbashkin has joined #openstack-keystone | 10:31 | |
*** jaosorior has joined #openstack-keystone | 10:31 | |
*** lifeless_ has quit IRC | 10:32 | |
*** markvoelker has joined #openstack-keystone | 10:35 | |
*** AlexeyAbashkin has quit IRC | 10:36 | |
*** gyankum has quit IRC | 10:41 | |
*** nicolasbock has joined #openstack-keystone | 10:50 | |
*** lifeless has joined #openstack-keystone | 11:01 | |
*** apple01 has joined #openstack-keystone | 11:04 | |
*** markvoelker has quit IRC | 11:06 | |
*** apple01 has quit IRC | 11:08 | |
*** apple01 has joined #openstack-keystone | 11:20 | |
*** dave-mccowan has joined #openstack-keystone | 11:21 | |
*** AlexeyAbashkin has joined #openstack-keystone | 11:21 | |
*** liuzz_ has quit IRC | 11:22 | |
*** liuzz has joined #openstack-keystone | 11:22 | |
*** dave-mcc_ has joined #openstack-keystone | 11:25 | |
*** dave-mccowan has quit IRC | 11:26 | |
*** lifeless_ has joined #openstack-keystone | 11:37 | |
*** sonuk has quit IRC | 11:38 | |
*** lifeless has quit IRC | 11:38 | |
*** sonuk has joined #openstack-keystone | 11:40 | |
*** apple01 has quit IRC | 11:42 | |
*** apple01 has joined #openstack-keystone | 11:49 | |
*** gyankum has joined #openstack-keystone | 11:54 | |
*** raildo has joined #openstack-keystone | 11:58 | |
*** rha has joined #openstack-keystone | 12:14 | |
*** Tahvok has quit IRC | 12:15 | |
*** cz2 has quit IRC | 12:29 | |
*** cz2 has joined #openstack-keystone | 12:30 | |
*** mvenesio has joined #openstack-keystone | 12:37 | |
*** lifeless_ has quit IRC | 12:41 | |
*** sonuk has quit IRC | 12:44 | |
*** apple01 has quit IRC | 12:44 | |
*** edmondsw has joined #openstack-keystone | 12:50 | |
*** markvoelker has joined #openstack-keystone | 12:54 | |
*** panbalag has joined #openstack-keystone | 12:59 | |
*** panbalag has left #openstack-keystone | 12:59 | |
*** mvenesio has quit IRC | 13:02 | |
*** markvoelker has quit IRC | 13:24 | |
*** liuzz_ has joined #openstack-keystone | 13:26 | |
*** links has quit IRC | 13:29 | |
*** liuzz has quit IRC | 13:30 | |
*** links has joined #openstack-keystone | 13:30 | |
*** nicolasbock has quit IRC | 13:40 | |
*** links has quit IRC | 13:44 | |
*** nicolasbock has joined #openstack-keystone | 13:53 | |
*** Tahvok has joined #openstack-keystone | 14:00 | |
*** AlexeyAbashkin has quit IRC | 14:02 | |
*** AlexeyAbashkin has joined #openstack-keystone | 14:04 | |
hrybacki | o/ | 14:05 |
---|---|---|
*** EmilienM_PTO is now known as EmilienM | 14:08 | |
*** spilla has joined #openstack-keystone | 14:10 | |
lbragstad | o/ | 14:11 |
*** r-daneel has joined #openstack-keystone | 14:18 | |
*** fiddletwix has quit IRC | 14:19 | |
*** fiddletwix has joined #openstack-keystone | 14:20 | |
*** felipemonteiro has joined #openstack-keystone | 14:25 | |
*** dklyle has joined #openstack-keystone | 14:33 | |
*** r-daneel_ has joined #openstack-keystone | 14:36 | |
*** r-daneel has quit IRC | 14:37 | |
*** r-daneel_ is now known as r-daneel | 14:37 | |
gagehugo | o/ | 14:42 |
*** felipemonteiro has quit IRC | 14:42 | |
*** dave-mcc_ is now known as dave-mccowan | 14:55 | |
*** jgrassler has quit IRC | 14:58 | |
*** gyee has joined #openstack-keystone | 15:05 | |
*** apple01 has joined #openstack-keystone | 15:07 | |
*** markvoelker has joined #openstack-keystone | 15:08 | |
*** r-daneel has quit IRC | 15:16 | |
*** spilla has quit IRC | 15:21 | |
*** spilla has joined #openstack-keystone | 15:24 | |
*** r-daneel has joined #openstack-keystone | 15:25 | |
*** Guest48153 is now known as melwitt | 15:25 | |
*** pcaruana has quit IRC | 15:33 | |
*** markvoelker has quit IRC | 15:41 | |
*** jgrassler has joined #openstack-keystone | 15:44 | |
*** jgrassler has quit IRC | 15:50 | |
*** felipemonteiro has joined #openstack-keystone | 15:50 | |
*** apple01 has quit IRC | 15:51 | |
knikolla | o/ | 15:56 |
*** _KaszpiR_ has joined #openstack-keystone | 15:57 | |
_KaszpiR_ | hey, I've got a question, using keystone url with /healthcheck I was expecting it to also report if the keystone is able to connect to the database | 16:00 |
*** felipemonteiro has quit IRC | 16:01 | |
*** felipemonteiro has joined #openstack-keystone | 16:01 | |
*** ricolin has quit IRC | 16:08 | |
kmalloc | _KaszpiR_: the healthcheck middleware doesn't know much about keystone itself | 16:08 |
kmalloc | Just if the wsgi app is responding. | 16:08 |
kmalloc | I expect we need a better healthcheck page that keystone itself is responsible for, not the oslo-middleware one. | 16:08 |
kmalloc | You could write a plug-in to healthcheck to give it more info | 16:09 |
kmalloc | lbragstad: I almost have flask dispatching working. | 16:09 |
lbragstad | sweet | 16:09 |
kmalloc | lbragstad: figuring out how to morph the routes.Mapper to match, I think I need to explicitly add /v3 to the route, since paste isn't doing it's magic anymore. | 16:10 |
kmalloc | And I'll have some.json home fixes I need to add, but it really is getting close. | 16:10 |
lbragstad | nice | 16:11 |
kmalloc | Everything is loading and we are dispatching to the right mapper/router. | 16:11 |
_KaszpiR_ | kmalloc thanks for the info, was expecting more thorough healthcheck response, but as I know better limitation/use case I can focus on different approach | 16:11 |
kmalloc | _KaszpiR_: Id be happy to accept a better healthcheck mechanism for keystone. :). But right now it's pretty far down the list of things I'd like to work on. | 16:11 |
_KaszpiR_ | :D | 16:12 |
kmalloc | If you are interested in helping to build one, I'd support it to be merged. | 16:12 |
kmalloc | ;) | 16:12 |
kmalloc | But I know, omwtimes that is a large request, esp. if you have a lot of other things going on. | 16:12 |
_KaszpiR_ | our keystone use case is rather limited, not to mention human power :( | 16:12 |
kmalloc | Yeah, figured as much. | 16:13 |
*** pcaruana has joined #openstack-keystone | 16:23 | |
kmalloc | lbragstad, cmurphy, johnthetubaguy, mordred: Want your opinion(s) [not OpenStack related]; Glossy *very* bright screen (500nit) or Matte Screen (300nit). Cost difference is ~$17. Same resolution 1440p, both non-touch. I am very torn and want some outside brains #LazyWeb | 16:31 |
*** jgrassler has joined #openstack-keystone | 16:35 | |
gagehugo | kmalloc do you like bright screens? | 16:40 |
gagehugo | I usually keep mine pretty dim, but that's me | 16:40 |
gagehugo | I don't think I've used a glossy screen on a laptop other than on a macbook | 16:42 |
kmalloc | gagehugo: usually dim, but when i'm sitting somewhere with direct sunlight, extra brightness is very much appreciated | 16:46 |
*** tesseract has quit IRC | 17:10 | |
*** felipemonteiro has quit IRC | 17:15 | |
*** felipemonteiro has joined #openstack-keystone | 17:16 | |
*** felipemonteiro has quit IRC | 17:20 | |
*** gyankum has quit IRC | 17:23 | |
*** felipemonteiro has joined #openstack-keystone | 17:25 | |
*** AlexeyAbashkin has quit IRC | 17:29 | |
*** markvoelker has joined #openstack-keystone | 17:30 | |
*** AlexeyAbashkin has joined #openstack-keystone | 17:31 | |
*** AlexeyAbashkin has quit IRC | 17:36 | |
*** felipemonteiro has quit IRC | 17:38 | |
*** cz2 has quit IRC | 17:43 | |
*** AlexeyAbashkin has joined #openstack-keystone | 17:57 | |
*** markvoelker has quit IRC | 18:00 | |
*** Alexey_Abashkin has joined #openstack-keystone | 18:00 | |
*** AlexeyAbashkin has quit IRC | 18:02 | |
*** Alexey_Abashkin is now known as AlexeyAbashkin | 18:02 | |
*** mvenesio has joined #openstack-keystone | 18:05 | |
hrybacki | kmalloc: I've grown fond of this bright, glossy screen. Being able to use it outdoors (face away from main light source but using extra brightness) is the winner point for me | 18:06 |
hrybacki | MBP has same level of brightness iirc | 18:06 |
*** felipemonteiro has joined #openstack-keystone | 18:08 | |
*** pcaruana has quit IRC | 18:09 | |
kmalloc | hrybacki: yeah. | 18:11 |
kmalloc | hrybacki: very similar (if not the same) depending on the specific panel [each computer tends to be slightly different...] | 18:12 |
kmalloc | holy crap... i think i have flask dispatching working. | 18:12 |
kmalloc | i.. woooooo | 18:13 |
kmalloc | now i just need to run a full test run and massage version discovery bits and json_home | 18:13 |
kmalloc | but.. | 18:13 |
kmalloc | wooooo | 18:13 |
*** felipemonteiro has quit IRC | 18:13 | |
hrybacki | kmalloc++ congrats! Do you have patches up for this anywhere? | 18:14 |
kmalloc | hrybacki: almost doing pep8 and running a local full run. | 18:14 |
kmalloc | but it's damn close | 18:14 |
openstackgerrit | Morgan Fainberg proposed openstack/keystone master: Convert Keystone to use Flask https://review.openstack.org/568377 | 18:22 |
kmalloc | hrybacki: it's not done, but that is actually dispatching in tests and treats each subsystem as its own "app" for legacy -> flask conversion | 18:23 |
kmalloc | hrybacki: it also makes a ton of legacy code disappear once we move to flask-native things | 18:24 |
kmalloc | hrybacki: related, I know a TON more about webob and it's "helper" decorators now. | 18:26 |
kmalloc | it's kinda gross. | 18:26 |
kmalloc | that probably wont pass unit tests as is. | 18:26 |
kmalloc | lbragstad: ^ see 568377 | 18:26 |
openstackgerrit | Morgan Fainberg proposed openstack/keystone master: Convert Keystone to use Flask https://review.openstack.org/568377 | 18:30 |
kmalloc | hrybacki: looks like i need to fix some msgpack stuff in keystone as well some "encoding" bits are deprecated | 18:33 |
kmalloc | hrybacki: wow, ... this might almost pass unit tests. it's... | 18:34 |
kmalloc | passing the majority of them. | 18:34 |
kmalloc | lbragstad: what was the limit code review? i lost it in the scroll back. looking through review.o.o as well | 18:39 |
lbragstad | it's in the specs repo | 18:39 |
*** AlexeyAbashkin has quit IRC | 18:40 | |
*** ayoung has joined #openstack-keystone | 18:40 | |
lbragstad | kmalloc: https://review.openstack.org/#/c/540803/ and https://review.openstack.org/#/c/570990/ | 18:40 |
kmalloc | thanks | 18:40 |
kmalloc | i am maybe 10 tests from having working flask :) | 18:41 |
lbragstad | our authentication api reference is... interesting | 18:41 |
kmalloc | lbragstad: oh regarding the behavior spec stuff check out https://behave.readthedocs.io/en/latest/ just as a conceptual bit | 18:42 |
kmalloc | it feels very much like what our specs were intended to solve. | 18:43 |
kmalloc | but something we can leverage i had another doc page i lost, but it was good | 18:43 |
kmalloc | i'll see if i can find it | 18:43 |
lbragstad | nice | 18:43 |
kmalloc | we also need to fix to use rfc3986.validator from something else | 18:44 |
kmalloc | lots and lots of spam about deprecation | 18:44 |
kmalloc | hey, not bad, 54 tests to fix. | 18:47 |
kmalloc | ahahaha and a bunch are because i messed up the new loadapp | 18:48 |
*** markvoelker has joined #openstack-keystone | 18:50 | |
*** markvoelker has quit IRC | 18:55 | |
*** felipemonteiro has joined #openstack-keystone | 19:04 | |
lbragstad | i might need some help figuring out how to make these docs maintainable | 19:09 |
kmalloc | lbragstad: docs... unfun | 19:10 |
lbragstad | i kinda went down a rabbit hole with the authentication documentation | 19:10 |
ildikov | kmalloc: lbragstad: hi :) I don't want to interrupt your discussion, but would love to ask for a quick chat when you're available | 19:14 |
lbragstad | sure - what's up ildikov | 19:14 |
kmalloc | ildikov: hey, i'm here. | 19:14 |
ildikov | hey :) | 19:15 |
ildikov | so we had that cool session last week on Keystone and Edge | 19:15 |
kmalloc | ildikov: Oh also yay, I mapped your IRC name to who you are in person :) [I'm often terrrrrible at that] | 19:15 |
ildikov | kmalloc: relax, I checked yours too to be sure before I pinged :) | 19:16 |
ildikov | I talked to johnthetubaguy quickly yesterday as he seem to have some use cases that overlap with our ideas on the Edge side | 19:17 |
ildikov | I will also talk to the OPNFV Edge Cloud project members next week on setting up a test environment | 19:17 |
ildikov | and was wondering whether either or both of you would be available to discuss where we got with this | 19:17 |
lbragstad | from what i gathered last week | 19:18 |
lbragstad | it sounds like we're at the point were we need to start documenting different federated deployments | 19:18 |
kmalloc | ++ | 19:18 |
lbragstad | and highlighting where they can be useful | 19:18 |
ildikov | there are weekly calls on our side and for their project as well or we can find a separate slot to discuss ideas and possibilities | 19:18 |
lbragstad | e.g. if you're pursuing edge use cases, an architecture like this would be best because of X, Y, and Z | 19:19 |
ildikov | lbragstad: johnthetubaguy is working a blog post to summarize last week's discussions including some architecture diagrams on their scientific cloud federation use case | 19:19 |
lbragstad | oh - nice | 19:19 |
lbragstad | that'd be good | 19:19 |
lbragstad | because then we can start deploying it and seeing where they tip over | 19:19 |
lbragstad | and open bugs/file specs as necessary | 19:20 |
ildikov | I hoped to use that and some diagrams from the edge side and see what would make sense to start testing in OPNFV | 19:20 |
ildikov | as we need to figure out the lab setup, etc on that side and trying to shoot for some automated testing at some point | 19:20 |
lbragstad | right - that would be idea | 19:20 |
lbragstad | ideal* | 19:20 |
ildikov | and I hoped to get some involvement from the Keystone team to make sure we're going to the right direction | 19:21 |
lbragstad | fwiw - knikolla was really interested in this, too | 19:21 |
ildikov | as I'm very enthusiastic but less knowledgable at this point... :) | 19:21 |
lbragstad | ildikov: are you looking for a specific architecture to start testing today? | 19:21 |
lbragstad | s/testing/playing with/ | 19:22 |
ildikov | lbragstad: I thought to pick up the federation part and see how that works first and then we can look into the edge specific things like what if someone cut the cable and things still need to work | 19:22 |
ildikov | if that makes sense? | 19:22 |
lbragstad | sure | 19:22 |
* knikolla is in a meeting, but will read back | 19:23 | |
lbragstad | do you have specific questions about federation we can answer to help level set, if needed? | 19:23 |
ildikov | in OPNFV we need to specify PoDs, like they have a 6-server setup with a jumpstart server, 3 control nodes and two computes | 19:23 |
ildikov | which is more of an HA scenario | 19:23 |
ildikov | we could rethink it and set it up being multiple regions maybe on the same/similar footprint maybe to see how federation works | 19:24 |
lbragstad | yeah - the main reason we started seriously considering federation in my opinion, is because of the data replication issues | 19:24 |
ildikov | we are also thinking about multi-lab environment at some point, but probably a single-lab scenario would be easier to start | 19:24 |
lbragstad | (not only from a technical perspective, but also considering data regulations and what-not) | 19:25 |
* kmalloc concurs with lbragstad | 19:25 | |
ildikov | ah, interesting | 19:26 |
lbragstad | chances are - federating multiple regions meant to be a single deployment is going to expose to interesting cases in our federation implementation | 19:26 |
*** felipemonteiro has quit IRC | 19:26 | |
ildikov | I see the world more from the NIST/IEEE effort as well as edge right now :) | 19:26 |
lbragstad | s/to/some/ | 19:26 |
lbragstad | if that's the case, you're probably already a few steps ahead of me, then | 19:26 |
ildikov | lbragstad: I'm brainstorming here really, hence I would like to have you guys on board to tell us what makes sense and what does not :) | 19:27 |
*** felipemonteiro has joined #openstack-keystone | 19:27 | |
lbragstad | so - if i had all the time in the world... and could pick up testing this immediately | 19:28 |
lbragstad | i'd probably create two separate deployments | 19:28 |
kmalloc | solution: clone lbragstad | 19:28 |
hrybacki | GitHuman ? | 19:28 |
kmalloc | git clone dev/lbragstad -b | 19:28 |
kmalloc | ;) | 19:28 |
ildikov | kmalloc: that would be handy :) | 19:28 |
lbragstad | make it so... | 19:28 |
* hrybacki high fives kmalloc | 19:28 | |
lbragstad | but - i would create two super small deployments | 19:29 |
lbragstad | at least initially | 19:29 |
hrybacki | nah, I saw a show about this. never works out as planned | 19:29 |
lbragstad | and federate them together | 19:29 |
kmalloc | hmm. hrybacki somehow some routes aren't being cleanly added to the Mapper [most of the test errors] in the current flask-i-fication patch | 19:29 |
hrybacki | nsfwish reference: https://www.youtube.com/watch?v=qWUBnrIaphQ | 19:29 |
kmalloc | hrybacki: but i'm down to 51 failing tests, most are version/json_home/discovery, which I expected | 19:30 |
ildikov | lbragstad: so we can use servers in the same lab, but make sure they are separate deployments and do the federation that way, right? | 19:30 |
hrybacki | I tip my hat to you kmalloc | 19:30 |
lbragstad | yeah - that'd be a good start | 19:30 |
kmalloc | ildikov: yeah. | 19:30 |
kmalloc | that would be where i start | 19:30 |
kmalloc | i'd start* | 19:30 |
lbragstad | then you have a couple options | 19:30 |
kmalloc | hrybacki: like... notably the ._add_resource bits for say OS-OAUTH1 | 19:31 |
kmalloc | it's... weird. i bet i'm just not reading the mapper right. | 19:31 |
lbragstad | you have two deployments, right? then you can either federate them with an external identity provider, like Google/ADFS/etc... or federate them with each other | 19:31 |
*** lifeless has joined #openstack-keystone | 19:31 | |
* kmalloc sees the time and realizes... dogs need love (it's been 3hrs since i was home) and #PuppyThings | 19:32 | |
kmalloc | so, brb once i get back and empty the dogs. | 19:32 |
openstackgerrit | Merged openstack/keystone-specs master: Follow-up -- replace 'auditor' role with 'reader' https://review.openstack.org/570990 | 19:32 |
ildikov | kmalloc: that sounded a little weird I hope everyone survives :D | 19:33 |
*** nicolasbock has quit IRC | 19:33 | |
ildikov | lbragstad: cool, I like that the small setup already has multiple options :) | 19:33 |
kmalloc | ildikov: it is intended to sound weird. but... it's an accurate description of what I must do. dogs are full of <doggy stuff> and will empty on <doggy walk> :) | 19:33 |
kmalloc | ^_^ | 19:33 |
ildikov | I get the point, just too visual for a statement of 'empty the dogs' :) | 19:35 |
lbragstad | ildikov: the main difference between the two is that the first option requires that source of identity to be a separate system | 19:35 |
lbragstad | the second option requires one or both of the keystone's from each deployment to have the identities for the users | 19:35 |
ildikov | lbragstad: I will bring this small setup option up next week on the OPNFV Plugfest and see where we get with it | 19:35 |
lbragstad | cool | 19:35 |
ildikov | lbragstad: kmalloc: knikolla: we plan to do a Summit recap on the Edge Computing Call next week. Would either of you available for the Keystone bits? | 19:37 |
lbragstad | what time is the call? | 19:37 |
ildikov | the call is Tuesday 1400 UTC on Zoom | 19:37 |
ildikov | a bit early in Pacific Time, but doable | 19:37 |
lbragstad | ok - so that's 9 am for me | 19:38 |
lbragstad | that should work | 19:38 |
ildikov | lbragstad: awesome, thanks! | 19:42 |
lbragstad | no problem - looking forward to it | 19:42 |
ildikov | lbragstad: here's the wiki with meeting info: https://wiki.openstack.org/wiki/Edge_Computing_Group#Meetings | 19:43 |
ildikov | lbragstad: I will add the Zoom link there soon too | 19:43 |
ildikov | lbragstad: or I can forward you the meeting invite if you would rather have that | 19:43 |
*** markvoelker has joined #openstack-keystone | 19:45 | |
lbragstad | ildikov: sure - then i can put it on my calendar | 19:45 |
*** nicolasbock has joined #openstack-keystone | 19:48 | |
ildikov | lbragstad: done | 19:50 |
lbragstad | thanks | 19:50 |
ildikov | lbragstad: me thanks! :) | 19:50 |
*** raildo has quit IRC | 19:50 | |
lbragstad | no problem! | 19:50 |
*** markvoelker has quit IRC | 19:54 | |
knikolla | ildikov: that time works for me too. | 20:02 |
ildikov | knikolla: cool, sent you the calendar invite | 20:03 |
ildikov | knikolla: thanks! | 20:03 |
knikolla | awesome! thanks | 20:04 |
*** mvenesio has quit IRC | 20:08 | |
*** mvenesio has joined #openstack-keystone | 20:08 | |
*** ayoung has quit IRC | 20:11 | |
*** mvenesio has quit IRC | 20:13 | |
kmalloc | ildikov: i'll add it to my calendar, hope i can be there | 20:13 |
ildikov | kmalloc: sounds good, thank you | 20:13 |
kmalloc | ildikov: my only concern is that 1400 is a bit early for me to hop on meetings, i have morning things to do (that's 7am Pacific) | 20:13 |
kmalloc | so i might need to just lean on lbragstad and you for summary/followup | 20:13 |
kmalloc | hassles of west coast US living. | 20:14 |
kmalloc | ;) | 20:14 |
ildikov | kmalloc: I know, scheduling meetings is tough... :/ | 20:14 |
kmalloc | i trust knikolla and lbragstad if i can't make it | 20:14 |
kmalloc | besides, they can't sign me up for much more work than i already take on :P | 20:14 |
*** felipemonteiro has quit IRC | 20:20 | |
ildikov | kmalloc: good, we always need volunteers :) | 20:21 |
*** markvoelker has joined #openstack-keystone | 20:25 | |
kmalloc | lbragstad: oh look at that, we have a buggy test | 20:29 |
kmalloc | it's... doing the complete wrong thing | 20:30 |
kmalloc | go figure | 20:30 |
kmalloc | or well, keystone is doing thr wrong-ish thing, the test is doing thr right thing. | 20:31 |
*** itlinux has joined #openstack-keystone | 20:44 | |
*** felipemonteiro has joined #openstack-keystone | 20:46 | |
openstackgerrit | Lance Bragstad proposed openstack/keystone master: Overhaul the authentication API reference https://review.openstack.org/571309 | 20:57 |
openstackgerrit | Gage Hugo proposed openstack/keystone master: Add LDAP user-backed functional testing gate https://review.openstack.org/558940 | 20:58 |
*** martinus__ has quit IRC | 20:58 | |
*** sapd_ has joined #openstack-keystone | 21:03 | |
lbragstad | has anyone seen an issue like this with api-ref for docs? http://logs.openstack.org/09/571309/1/check/build-openstack-sphinx-docs/78f7bcf/job-output.txt.gz#_2018-05-30_21_03_13_098184 | 21:07 |
*** sapd has quit IRC | 21:07 | |
*** markvoelker has quit IRC | 21:14 | |
*** markvoelker has joined #openstack-keystone | 21:14 | |
*** markvoelker has quit IRC | 21:18 | |
*** lifeless has quit IRC | 21:26 | |
*** lifeless_ has joined #openstack-keystone | 21:26 | |
*** spilla has quit IRC | 21:28 | |
kmalloc | nope, but it looks like we aren't pulling in one of our modules that we lean on via the extras | 21:29 |
lbragstad | yeah | 21:30 |
kmalloc | my guess is we need to specify [ldap] | 21:31 |
kmalloc | and somehow we're not | 21:31 |
kmalloc | lbragstad: how in the actual... | 21:38 |
kmalloc | lbragstad: this test doesn't make sense. | 21:38 |
*** lifeless has joined #openstack-keystone | 21:38 | |
kmalloc | lbragstad: it's using .admin_request, which seems to omit tokens | 21:38 |
*** lifeless_ has quit IRC | 21:38 | |
kmalloc | lbragstad: am i dumb? | 21:38 |
kmalloc | lbragstad: am i mis-reading this? why would we ever omit tokens in a restful test case for an api under @protected? | 21:39 |
kmalloc | lbragstad: looking at test_bad_authorizing_roles_name | 21:40 |
kmalloc | i think this test was succeeding by accident | 21:40 |
kmalloc | yep. | 21:41 |
kmalloc | it was succeeding by accident | 21:41 |
kmalloc | wooooooo, test bugs. | 21:41 |
lbragstad | .admin_request is supposed to get an admin token | 21:43 |
lbragstad | i think | 21:43 |
kmalloc | nope | 21:43 |
*** itlinux has quit IRC | 21:43 | |
kmalloc | .put .post etc | 21:43 |
kmalloc | those wrap and get a token | 21:43 |
lbragstad | yeah | 21:43 |
kmalloc | .admin_request is just "call admin endpoint app go" | 21:43 |
lbragstad | oh... | 21:43 |
lbragstad | that sounds like a v2.0 test utility | 21:44 |
kmalloc | the test i found was accidently succeeding because it was hitting a non-existant route | 21:44 |
kmalloc | v3 uses it, but is magical | 21:44 |
kmalloc | anyway the test was hitting: /OS-OAUTH1/authorize_token | 21:44 |
kmalloc | not /v[3|2.0]/OS-AUTH1 ... | 21:44 |
kmalloc | and looking for a 404 | 21:44 |
kmalloc | with flask we're being more explict about not automatically encoding every 404 to json | 21:45 |
kmalloc | in our old wsgi stuff, any 404 was indistinguishable | 21:45 |
* kmalloc rolls eyes | 21:45 | |
kmalloc | i think i found like 20-30 of these tests doing the bad thing(tm) | 21:45 |
kmalloc | i think i'm going to respin .admin_request and .public_request to be private, we should *never* use them directly | 21:46 |
kmalloc | but i'll do that as a followup | 21:46 |
lbragstad | cool | 21:47 |
kmalloc | oh man, nope, well that was still a rabbit hole | 21:49 |
kmalloc | i think i'll fix the version stuff next. | 21:49 |
kmalloc | then that should leave me with like 20 or so tests left failing | 21:49 |
kmalloc | then this will be ready for review | 21:49 |
lbragstad | nicw | 21:49 |
lbragstad | nice* | 21:49 |
kmalloc | i am still torn if we allow direct loading of middleware or not | 21:50 |
kmalloc | i really kindof don't want to allow it | 21:50 |
*** harlowja has joined #openstack-keystone | 21:52 | |
*** lifeless has quit IRC | 22:03 | |
*** lifeless has joined #openstack-keystone | 22:04 | |
*** rcernin has joined #openstack-keystone | 22:22 | |
*** dave-mccowan has quit IRC | 22:23 | |
gagehugo | lbragstad seeing the same issue here http://logs.openstack.org/14/531014/65/check/build-openstack-sphinx-docs/dc06558/job-output.txt.gz#_2018-05-30_18_15_10_020816 | 22:32 |
lbragstad | hmm | 22:33 |
lbragstad | our docs might be broken | 22:33 |
*** lifeless has quit IRC | 22:33 | |
*** lifeless has joined #openstack-keystone | 22:35 | |
gagehugo | wonder if something updated :/ | 22:38 |
*** r-daneel has quit IRC | 22:42 | |
*** nicolasbock has quit IRC | 22:47 | |
lbragstad | cmurphy: whenever you're finished up with your blog post would you mind passing me a link (no rush)? i'd like to include it in my post | 22:48 |
lbragstad | ^ that goes to anyone who's writing up a summary | 22:50 |
*** edmondsw has quit IRC | 22:52 | |
*** edmondsw has joined #openstack-keystone | 22:53 | |
*** edmondsw has quit IRC | 22:57 | |
*** lifeless has quit IRC | 23:11 | |
*** felipemonteiro has quit IRC | 23:18 | |
*** felipemonteiro has joined #openstack-keystone | 23:25 | |
*** markvoelker has joined #openstack-keystone | 23:25 | |
*** lifeless has joined #openstack-keystone | 23:41 | |
*** markvoelker has quit IRC | 23:43 | |
*** markvoelker has joined #openstack-keystone | 23:44 | |
*** markvoelker has quit IRC | 23:48 | |
*** lifeless has quit IRC | 23:58 | |
*** lifeless has joined #openstack-keystone | 23:59 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!