Friday, 2018-07-13

openstackgerritMerged openstack/keystone master: Make it easy to identify a 404 from Flask  https://review.openstack.org/57762700:12
*** stewie925 has quit IRC00:23
*** david-lyle has joined #openstack-keystone00:28
*** dklyle has quit IRC00:29
*** agrebennikov has quit IRC00:31
*** agrebennikov_ has quit IRC00:31
openstackgerritBrin Zhang proposed openstack/keystone master: Remove the uuid token provider  https://review.openstack.org/58194000:32
openstackgerritBrin Zhang proposed openstack/keystone master: Remove uuid token size check from doctor  https://review.openstack.org/58194000:35
*** BrinZhang has joined #openstack-keystone00:36
*** elibrokeit has quit IRC00:46
*** ztrawhcse has joined #openstack-keystone00:46
*** ztrawhcse has quit IRC00:48
*** gyee has quit IRC00:49
*** ztrawhcse has joined #openstack-keystone00:50
*** david-lyle has quit IRC00:54
*** dklyle has joined #openstack-keystone00:54
*** ztrawhcse is now known as elibrokeit00:58
*** david-lyle has joined #openstack-keystone01:00
*** dklyle has quit IRC01:02
*** harlowja has quit IRC01:05
*** spilla has joined #openstack-keystone01:07
*** spilla has quit IRC01:07
*** dklyle has joined #openstack-keystone01:36
*** david-lyle has quit IRC01:37
*** dklyle has quit IRC01:38
*** dklyle has joined #openstack-keystone01:38
*** markvoelker has joined #openstack-keystone02:00
*** gongysh has joined #openstack-keystone02:12
*** markvoelker has quit IRC02:34
*** agrebennikov_ has joined #openstack-keystone02:35
*** agrebennikov has joined #openstack-keystone02:35
openstackgerritMerged openstack/keystone master: Address minor comments to 404 error detection  https://review.openstack.org/57821602:45
*** ayoung has quit IRC02:58
*** boris_42_ has quit IRC03:28
*** markvoelker has joined #openstack-keystone03:31
*** gongysh has quit IRC03:34
*** links has joined #openstack-keystone04:02
*** markvoelker has quit IRC04:04
*** bzhao__ has joined #openstack-keystone04:07
*** gongysh has joined #openstack-keystone04:15
*** harlowja has joined #openstack-keystone04:25
openstackgerritMerged openstack/keystone master: Remove uuid token size check from doctor  https://review.openstack.org/58194004:38
*** harlowja has quit IRC04:44
*** markvoelker has joined #openstack-keystone05:01
*** agrebennikov has quit IRC05:26
*** agrebennikov_ has quit IRC05:26
*** markvoelker has quit IRC05:33
openstackgerritMorgan Fainberg proposed openstack/keystone master: Don't allow legacy and native flask to share paths  https://review.openstack.org/58244905:34
openstackgerritMorgan Fainberg proposed openstack/keystone master: Move Credentials API to Flask Native  https://review.openstack.org/58245005:34
*** pcichy has joined #openstack-keystone06:05
*** markvoelker has joined #openstack-keystone06:31
*** martinus__ has joined #openstack-keystone06:41
*** ispp has joined #openstack-keystone06:50
openstackgerritwangxiyuan proposed openstack/keystone master: Strict two level limit model  https://review.openstack.org/55769607:00
openstackgerritwangxiyuan proposed openstack/keystone master: Add project_id filter for listing limit  https://review.openstack.org/57933007:00
openstackgerritwangxiyuan proposed openstack/keystone master: Add include_limits filter  https://review.openstack.org/57933107:00
*** markvoelker has quit IRC07:04
openstackgerritwangxiyuan proposed openstack/keystone master: Update project depth check  https://review.openstack.org/58025807:07
openstackgerritwangxiyuan proposed openstack/keystone master: Add project hierarchical tree check when Keystone start  https://review.openstack.org/58033107:07
*** tesseract has joined #openstack-keystone07:12
*** masber has joined #openstack-keystone07:17
*** peereb has joined #openstack-keystone07:18
*** amoralej|off is now known as amoralej07:26
*** ispp has quit IRC07:28
*** kimamisa has joined #openstack-keystone07:49
*** ispp has joined #openstack-keystone07:56
*** markvoelker has joined #openstack-keystone08:01
*** tosky has joined #openstack-keystone08:06
*** markvoelker has quit IRC08:34
*** rcernin has quit IRC08:46
openstackgerritMerged openstack/keystone master: Implement base for new RBAC Enforcer  https://review.openstack.org/57663908:49
openstackgerritMerged openstack/keystone master: Add support for enforce_call to set value on flask.g  https://review.openstack.org/57818908:52
openstackgerritMerged openstack/keystone master: Move keystone.server.common to keystone.server  https://review.openstack.org/57974608:53
openstackgerritwangxiyuan proposed openstack/keystone master: Strict two level limit model  https://review.openstack.org/55769608:58
openstackgerritwangxiyuan proposed openstack/keystone master: Add project_id filter for listing limit  https://review.openstack.org/57933008:58
openstackgerritwangxiyuan proposed openstack/keystone master: Add include_limits filter  https://review.openstack.org/57933108:58
openstackgerritwangxiyuan proposed openstack/keystone master: Update project depth check  https://review.openstack.org/58025808:58
openstackgerritwangxiyuan proposed openstack/keystone master: Add project hierarchical tree check when Keystone start  https://review.openstack.org/58033108:58
openstackgerritMerged openstack/keystone master: Address minor comments from initial impl RBACEnforcer  https://review.openstack.org/57934209:03
*** vigneshwar has joined #openstack-keystone09:14
*** markvoelker has joined #openstack-keystone09:31
*** gongysh has quit IRC09:43
*** gongysh has joined #openstack-keystone09:43
*** gongysh has quit IRC09:47
vigneshwarHi hello..09:50
vigneshwarIs there any mechanism in openstack, if we configure something in the keystone.conf and the result is provided in the buffer log ?09:51
*** markvoelker has quit IRC10:04
*** ispp has quit IRC10:10
vigneshwarHi hello.vigneshware.10:39
*** annp has quit IRC10:40
*** BrinZhang has quit IRC10:41
*** sapd has quit IRC10:47
*** ispp has joined #openstack-keystone10:58
*** markvoelker has joined #openstack-keystone11:01
*** edmondsw has joined #openstack-keystone11:33
*** markvoelker has quit IRC11:34
*** pcichy has quit IRC11:46
*** pcichy has joined #openstack-keystone11:47
bretonvigneshwar: hi. What is buffer log?12:03
*** markvoelker has joined #openstack-keystone12:07
*** pooja_jadhav has quit IRC12:14
*** Tahvok has quit IRC12:18
*** hoonetorg has quit IRC12:43
*** amoralej is now known as amoralej|lunch12:44
*** TheJulia is now known as needssleep12:58
*** links has quit IRC12:59
*** hoonetorg has joined #openstack-keystone13:01
*** pcichy has quit IRC13:03
*** spilla has joined #openstack-keystone13:08
*** vigneshwar has quit IRC13:16
*** peereb has quit IRC13:44
*** dpaterson has joined #openstack-keystone13:46
*** raildo has joined #openstack-keystone13:48
*** rmascena has joined #openstack-keystone13:50
*** raildo has quit IRC13:53
*** raildo has joined #openstack-keystone13:54
*** rmascena has quit IRC13:55
lbragstado/13:57
cmurphy\o13:57
*** raildo_ has joined #openstack-keystone13:57
cmurphylbragstad: wxy so with our feature freeze scheduled for this week are we going to push to merge the rest of the limits stuff today? or push it to next week?13:58
lbragstadpersonally, after looking through the rest of the changes (besides the interface), i think i'm ok with everything and would be fine granting an exception13:59
lbragstad(pending everyone else is, too)13:59
cmurphyas in push it to next week?13:59
lbragstadyeah13:59
cmurphyi'm fine with that14:00
*** raildo has quit IRC14:00
lbragstadi mainly say that because it sounds like wxy has an alternative for simplifying the interface14:00
lbragstadi want to see what that is all about14:00
cmurphyyeah me too, i think giving it a few more days will be fine14:01
cmurphywhat about default roles stuff? is there more work to do that we were trying to get done by this week?14:02
cmurphycc hrybacki14:02
*** raildo_ has quit IRC14:02
lbragstadi think that depends on two things (at least how i understood it)14:02
lbragstad1.) the auditing of the API14:02
lbragstad2.) the flask work (e.g. the RBACEnforcer + removal of @controller.protected)14:03
cmurphyokay, so we kind of implicitly pushed the default roles work back by prioritizing flask over it14:03
lbragstadyeah - pretty much... but i guess it depends on if we classify something like fixing https://bugs.launchpad.net/keystone/+bug/1750660 as a feature-ish thing that can't land after rocky-314:04
openstackLaunchpad bug 1750660 in OpenStack Identity (keystone) "The v3 project API should account for different scopes" [High,Triaged]14:04
lbragstadthe audit and changes to enforce whatever that decision is should ultimately fix ^14:05
cmurphyi guess that's the ptl's call :P14:06
lbragstaddamn... that backfired14:06
cmurphylol14:07
lbragstad;)14:07
lbragstadidk... it's changing a default policy and adding a scope type14:07
lbragstadbut it's backwards compatible14:07
*** raildo has joined #openstack-keystone14:07
cmurphyi think i lean toward calling it a feature14:08
cmurphyit's a significant enough change that it could cause more bugs14:09
cmurphywhen we're supposed to be using this time to fix bugs14:09
lbragstadthat's fair14:09
lbragstadi mean - that this pint14:10
lbragstadpoint*14:10
lbragstadeven if we did say "sure, we're ok merging this stuff past FF"14:10
*** raildo_ has joined #openstack-keystone14:10
lbragstadwe'd likely only get *maybe* one or two APIs done14:11
cmurphythat's a good point too14:11
lbragstadif we do wait until stein, i certainly wouldn't be opposed to queuing things in gerrit14:12
cmurphysure14:12
*** raildo has quit IRC14:13
lbragstad(pending the amount of churn it causes for backports)14:13
*** raildo_ is now known as raildo14:13
*** ispp has quit IRC14:19
lbragstadcmurphy: jgrassler do you know if we'll be seeing any more capability list code soon?14:19
*** ispp has joined #openstack-keystone14:19
cmurphyI didn't manage to make any time to help with that and haven't synced up with jgrassler on it :( I'll be able to dedicate some time next cycle to help jgrassler with it14:22
lbragstadack - that sounds good14:22
cmurphyknikolla: have you seen http://lists.openstack.org/pipermail/openstack-dev/2018-July/132146.html ?14:28
knikollacmurphy: yup, i'll be on that meeting14:33
cmurphycool o714:34
*** raildo_ has joined #openstack-keystone14:39
*** raildo has quit IRC14:41
*** lbragstad is now known as elbragstad14:43
hrybackilbragstad knikolla what time abouts were y'all trying to link up for reviews today?14:45
elbragstadi'm *just* about to rebase the series - so i should be available anytime after that14:45
knikollaanytime works for me14:45
elbragstadthere was a conflict with the rbac enforcer stuff14:45
hrybackiah ack ack14:46
knikollawhat'll be our medium?14:46
hrybackiI can host bluejeans?14:46
hrybackior hangouts if folks prefer14:46
elbragstaddoesn't matter to me, whatever is easiest14:47
knikollasame14:47
hrybackialright, I'll just pop up a bridge whenever we are ready :)14:47
elbragstadjust about to rebase this series14:50
*** amoralej|lunch is now known as amoralej14:52
gagehugoo/14:53
*** fiddletwix has joined #openstack-keystone14:55
*** felipemonteiro has joined #openstack-keystone14:55
openstackgerritLance Bragstad proposed openstack/keystone master: Introduce new TokenModel object  https://review.openstack.org/55912915:03
openstackgerritLance Bragstad proposed openstack/keystone master: Add serialization for TokenModel object  https://review.openstack.org/57843415:03
openstackgerritLance Bragstad proposed openstack/keystone master: Simplify the token provider API  https://review.openstack.org/54545015:03
openstackgerritLance Bragstad proposed openstack/keystone master: Remove remnants of token bind  https://review.openstack.org/57843515:03
openstackgerritLance Bragstad proposed openstack/keystone master: Cleanup keystone.token.providers.common  https://review.openstack.org/57750715:03
openstackgerritLance Bragstad proposed openstack/keystone master: Remove KeystoneToken object  https://review.openstack.org/57756715:03
elbragstadok - i should be ready whenever if people want to walk through ^15:04
hrybackielbragstad: awesome, I'm good now. knikolla ?15:04
knikollaawesome15:05
elbragstadcc gagehugo ^15:05
hrybackihttps://bluejeans.com/u/hrybacki/15:05
elbragstadhrybacki: can you hear me?15:05
gagehugoas soon as this other call ends I'll hop on15:06
elbragstadcool15:06
elbragstadhttps://review.openstack.org/#/c/559129/1915:08
elbragstadone thing you'll notice too is the difference between attributes here - https://review.openstack.org/#/c/559129/19/keystone/models/token_model.py@31115:11
*** EmilienM is now known as EvilienM15:18
*** tesseract has quit IRC15:21
*** jmlowe has quit IRC15:34
*** sapd has joined #openstack-keystone15:34
elbragstadrelease note https://review.openstack.org/#/c/545450/20/releasenotes/notes/bug-1778945-b7f2db3052525ca8.yaml15:41
*** ispp has quit IRC15:41
elbragstadknikolla: https://review.openstack.org/#/c/545450/20/keystone/token/provider.py@20415:43
kmallocelbragstad: darn, missing the provider walk through. Ah well, I understand most of the code.15:48
elbragstad++15:48
elbragstadi'm going to work on a follow up for locking the model after it's been minted...15:49
elbragstadknikolla: https://review.openstack.org/#/c/545450/20/keystone/auth/controllers.py@14915:55
*** felipemonteiro has quit IRC15:58
*** agrebennikov has joined #openstack-keystone16:03
*** agrebennikov_ has joined #openstack-keystone16:04
*** harlowja has joined #openstack-keystone16:08
*** harlowja has quit IRC16:10
*** spilla has quit IRC16:24
*** nelsnelson has joined #openstack-keystone16:28
*** amoralej is now known as amoralej|off16:30
*** kimamisa has quit IRC16:30
*** nelsnelson has quit IRC16:32
*** nelsnelson has joined #openstack-keystone16:32
openstackgerritLance Bragstad proposed openstack/keystone master: Use auth_context in issue_token exclusively  https://review.openstack.org/58263516:32
elbragstadknikolla: ^16:33
*** pcichy has joined #openstack-keystone16:33
elbragstadwe can go either way though... we can either use auth_context exclusively or we can pull all the values out of auth_context and explicitly pass them to issue_token16:33
elbragstadfigured we can iterate on it there16:33
* elbragstad breaks for lunch16:35
*** jmlowe has joined #openstack-keystone16:42
*** pcichy has quit IRC16:45
* knikolla is back from lunch17:27
*** spilla has joined #openstack-keystone17:45
*** pcichy has joined #openstack-keystone18:00
*** raildo_ is now known as raildo18:08
*** dpaterson has quit IRC18:10
*** jistr has quit IRC18:11
*** jistr has joined #openstack-keystone18:11
*** kimamisa has joined #openstack-keystone18:17
*** Tahvok has joined #openstack-keystone18:34
*** kimamisa has quit IRC18:41
*** pcichy has quit IRC18:42
*** kimamisa has joined #openstack-keystone18:44
*** pcichy has joined #openstack-keystone18:46
*** zzzeek has quit IRC18:52
*** zzzeek has joined #openstack-keystone18:57
*** kimamisa has quit IRC19:34
openstackgerritLance Bragstad proposed openstack/keystone-specs master: Update the default roles spec to include Rocky details  https://review.openstack.org/58267319:43
elbragstadcc hrybacki ^19:43
*** kimamisa has joined #openstack-keystone19:50
*** kimamisa_ has joined #openstack-keystone19:56
*** kimamisa has quit IRC19:56
*** spilla has quit IRC20:03
*** kimamisa_ has quit IRC20:04
*** kimamisa has joined #openstack-keystone20:05
*** jmlowe has quit IRC20:06
*** kaiokmo has joined #openstack-keystone20:07
*** kimamisa has quit IRC20:07
*** kaiokmo has left #openstack-keystone20:07
*** kimamisa has joined #openstack-keystone20:11
*** spilla has joined #openstack-keystone20:15
*** kimamisa has quit IRC20:18
*** boris_42_ has joined #openstack-keystone20:28
*** kimamisa has joined #openstack-keystone20:40
*** raildo has quit IRC21:05
*** kimamisa has quit IRC21:15
*** gyee has joined #openstack-keystone21:25
*** sonuk_ has joined #openstack-keystone21:26
*** markvoelker_ has joined #openstack-keystone21:27
*** markvoelker has quit IRC21:29
*** sonuk has quit IRC21:29
*** spilla has quit IRC21:31
openstackgerritLance Bragstad proposed openstack/keystone master: Increase test coverage of entity_type id mapping query  https://review.openstack.org/58269221:33
*** raildo has joined #openstack-keystone21:35
*** ayoung has joined #openstack-keystone21:37
*** martinus__ has quit IRC21:39
openstackgerritLance Bragstad proposed openstack/keystone master: Increase test coverage of entity_type id mapping query  https://review.openstack.org/58269221:42
*** mchlumsky has quit IRC21:45
*** raildo has quit IRC21:45
*** raildo has joined #openstack-keystone21:49
-openstackstatus- NOTICE: logs.openstack.org is offline, causing POST_FAILURE results from Zuul. Cause and resolution timeframe currently unknown.21:50
*** ChanServ changes topic to "logs.openstack.org is offline, causing POST_FAILURE results from Zuul. Cause and resolution timeframe currently unknown."21:50
*** mchlumsky has joined #openstack-keystone21:58
*** itlinux_ has joined #openstack-keystone22:00
*** raildo has quit IRC22:01
*** mchlumsky has quit IRC22:05
*** edmondsw has quit IRC22:31
*** itlinux_ has quit IRC22:49
*** agrebennikov_ has quit IRC23:22
*** agrebennikov has quit IRC23:22
*** edmondsw has joined #openstack-keystone23:26
*** jmlowe has joined #openstack-keystone23:29
*** edmondsw has quit IRC23:31
*** ChanServ changes topic to "Rocky release schedule: https://releases.openstack.org/rocky/schedule.html | Meeting agenda: https://etherpad.openstack.org/p/keystone-weekly-meeting | Bugs that need triaging: http://bit.ly/2iJuN1h | Trello: https://trello.com/b/wmyzbFq5/keystone-rocky-roadmap !!NOTE!! This Channel is Logged ( https://tinyurl.com/OpenStackKeystone )"23:34
-openstackstatus- NOTICE: logs.openstack.org is back on-line. Changes with "POST_FAILURE" job results should be rechecked.23:34
*** tosky has quit IRC23:41

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!