openstackgerrit | Merged openstack/keystone master: Make it easy to identify a 404 from Flask https://review.openstack.org/577627 | 00:12 |
---|---|---|
*** stewie925 has quit IRC | 00:23 | |
*** david-lyle has joined #openstack-keystone | 00:28 | |
*** dklyle has quit IRC | 00:29 | |
*** agrebennikov has quit IRC | 00:31 | |
*** agrebennikov_ has quit IRC | 00:31 | |
openstackgerrit | Brin Zhang proposed openstack/keystone master: Remove the uuid token provider https://review.openstack.org/581940 | 00:32 |
openstackgerrit | Brin Zhang proposed openstack/keystone master: Remove uuid token size check from doctor https://review.openstack.org/581940 | 00:35 |
*** BrinZhang has joined #openstack-keystone | 00:36 | |
*** elibrokeit has quit IRC | 00:46 | |
*** ztrawhcse has joined #openstack-keystone | 00:46 | |
*** ztrawhcse has quit IRC | 00:48 | |
*** gyee has quit IRC | 00:49 | |
*** ztrawhcse has joined #openstack-keystone | 00:50 | |
*** david-lyle has quit IRC | 00:54 | |
*** dklyle has joined #openstack-keystone | 00:54 | |
*** ztrawhcse is now known as elibrokeit | 00:58 | |
*** david-lyle has joined #openstack-keystone | 01:00 | |
*** dklyle has quit IRC | 01:02 | |
*** harlowja has quit IRC | 01:05 | |
*** spilla has joined #openstack-keystone | 01:07 | |
*** spilla has quit IRC | 01:07 | |
*** dklyle has joined #openstack-keystone | 01:36 | |
*** david-lyle has quit IRC | 01:37 | |
*** dklyle has quit IRC | 01:38 | |
*** dklyle has joined #openstack-keystone | 01:38 | |
*** markvoelker has joined #openstack-keystone | 02:00 | |
*** gongysh has joined #openstack-keystone | 02:12 | |
*** markvoelker has quit IRC | 02:34 | |
*** agrebennikov_ has joined #openstack-keystone | 02:35 | |
*** agrebennikov has joined #openstack-keystone | 02:35 | |
openstackgerrit | Merged openstack/keystone master: Address minor comments to 404 error detection https://review.openstack.org/578216 | 02:45 |
*** ayoung has quit IRC | 02:58 | |
*** boris_42_ has quit IRC | 03:28 | |
*** markvoelker has joined #openstack-keystone | 03:31 | |
*** gongysh has quit IRC | 03:34 | |
*** links has joined #openstack-keystone | 04:02 | |
*** markvoelker has quit IRC | 04:04 | |
*** bzhao__ has joined #openstack-keystone | 04:07 | |
*** gongysh has joined #openstack-keystone | 04:15 | |
*** harlowja has joined #openstack-keystone | 04:25 | |
openstackgerrit | Merged openstack/keystone master: Remove uuid token size check from doctor https://review.openstack.org/581940 | 04:38 |
*** harlowja has quit IRC | 04:44 | |
*** markvoelker has joined #openstack-keystone | 05:01 | |
*** agrebennikov has quit IRC | 05:26 | |
*** agrebennikov_ has quit IRC | 05:26 | |
*** markvoelker has quit IRC | 05:33 | |
openstackgerrit | Morgan Fainberg proposed openstack/keystone master: Don't allow legacy and native flask to share paths https://review.openstack.org/582449 | 05:34 |
openstackgerrit | Morgan Fainberg proposed openstack/keystone master: Move Credentials API to Flask Native https://review.openstack.org/582450 | 05:34 |
*** pcichy has joined #openstack-keystone | 06:05 | |
*** markvoelker has joined #openstack-keystone | 06:31 | |
*** martinus__ has joined #openstack-keystone | 06:41 | |
*** ispp has joined #openstack-keystone | 06:50 | |
openstackgerrit | wangxiyuan proposed openstack/keystone master: Strict two level limit model https://review.openstack.org/557696 | 07:00 |
openstackgerrit | wangxiyuan proposed openstack/keystone master: Add project_id filter for listing limit https://review.openstack.org/579330 | 07:00 |
openstackgerrit | wangxiyuan proposed openstack/keystone master: Add include_limits filter https://review.openstack.org/579331 | 07:00 |
*** markvoelker has quit IRC | 07:04 | |
openstackgerrit | wangxiyuan proposed openstack/keystone master: Update project depth check https://review.openstack.org/580258 | 07:07 |
openstackgerrit | wangxiyuan proposed openstack/keystone master: Add project hierarchical tree check when Keystone start https://review.openstack.org/580331 | 07:07 |
*** tesseract has joined #openstack-keystone | 07:12 | |
*** masber has joined #openstack-keystone | 07:17 | |
*** peereb has joined #openstack-keystone | 07:18 | |
*** amoralej|off is now known as amoralej | 07:26 | |
*** ispp has quit IRC | 07:28 | |
*** kimamisa has joined #openstack-keystone | 07:49 | |
*** ispp has joined #openstack-keystone | 07:56 | |
*** markvoelker has joined #openstack-keystone | 08:01 | |
*** tosky has joined #openstack-keystone | 08:06 | |
*** markvoelker has quit IRC | 08:34 | |
*** rcernin has quit IRC | 08:46 | |
openstackgerrit | Merged openstack/keystone master: Implement base for new RBAC Enforcer https://review.openstack.org/576639 | 08:49 |
openstackgerrit | Merged openstack/keystone master: Add support for enforce_call to set value on flask.g https://review.openstack.org/578189 | 08:52 |
openstackgerrit | Merged openstack/keystone master: Move keystone.server.common to keystone.server https://review.openstack.org/579746 | 08:53 |
openstackgerrit | wangxiyuan proposed openstack/keystone master: Strict two level limit model https://review.openstack.org/557696 | 08:58 |
openstackgerrit | wangxiyuan proposed openstack/keystone master: Add project_id filter for listing limit https://review.openstack.org/579330 | 08:58 |
openstackgerrit | wangxiyuan proposed openstack/keystone master: Add include_limits filter https://review.openstack.org/579331 | 08:58 |
openstackgerrit | wangxiyuan proposed openstack/keystone master: Update project depth check https://review.openstack.org/580258 | 08:58 |
openstackgerrit | wangxiyuan proposed openstack/keystone master: Add project hierarchical tree check when Keystone start https://review.openstack.org/580331 | 08:58 |
openstackgerrit | Merged openstack/keystone master: Address minor comments from initial impl RBACEnforcer https://review.openstack.org/579342 | 09:03 |
*** vigneshwar has joined #openstack-keystone | 09:14 | |
*** markvoelker has joined #openstack-keystone | 09:31 | |
*** gongysh has quit IRC | 09:43 | |
*** gongysh has joined #openstack-keystone | 09:43 | |
*** gongysh has quit IRC | 09:47 | |
vigneshwar | Hi hello.. | 09:50 |
vigneshwar | Is there any mechanism in openstack, if we configure something in the keystone.conf and the result is provided in the buffer log ? | 09:51 |
*** markvoelker has quit IRC | 10:04 | |
*** ispp has quit IRC | 10:10 | |
vigneshwar | Hi hello.vigneshware. | 10:39 |
*** annp has quit IRC | 10:40 | |
*** BrinZhang has quit IRC | 10:41 | |
*** sapd has quit IRC | 10:47 | |
*** ispp has joined #openstack-keystone | 10:58 | |
*** markvoelker has joined #openstack-keystone | 11:01 | |
*** edmondsw has joined #openstack-keystone | 11:33 | |
*** markvoelker has quit IRC | 11:34 | |
*** pcichy has quit IRC | 11:46 | |
*** pcichy has joined #openstack-keystone | 11:47 | |
breton | vigneshwar: hi. What is buffer log? | 12:03 |
*** markvoelker has joined #openstack-keystone | 12:07 | |
*** pooja_jadhav has quit IRC | 12:14 | |
*** Tahvok has quit IRC | 12:18 | |
*** hoonetorg has quit IRC | 12:43 | |
*** amoralej is now known as amoralej|lunch | 12:44 | |
*** TheJulia is now known as needssleep | 12:58 | |
*** links has quit IRC | 12:59 | |
*** hoonetorg has joined #openstack-keystone | 13:01 | |
*** pcichy has quit IRC | 13:03 | |
*** spilla has joined #openstack-keystone | 13:08 | |
*** vigneshwar has quit IRC | 13:16 | |
*** peereb has quit IRC | 13:44 | |
*** dpaterson has joined #openstack-keystone | 13:46 | |
*** raildo has joined #openstack-keystone | 13:48 | |
*** rmascena has joined #openstack-keystone | 13:50 | |
*** raildo has quit IRC | 13:53 | |
*** raildo has joined #openstack-keystone | 13:54 | |
*** rmascena has quit IRC | 13:55 | |
lbragstad | o/ | 13:57 |
cmurphy | \o | 13:57 |
*** raildo_ has joined #openstack-keystone | 13:57 | |
cmurphy | lbragstad: wxy so with our feature freeze scheduled for this week are we going to push to merge the rest of the limits stuff today? or push it to next week? | 13:58 |
lbragstad | personally, after looking through the rest of the changes (besides the interface), i think i'm ok with everything and would be fine granting an exception | 13:59 |
lbragstad | (pending everyone else is, too) | 13:59 |
cmurphy | as in push it to next week? | 13:59 |
lbragstad | yeah | 13:59 |
cmurphy | i'm fine with that | 14:00 |
*** raildo has quit IRC | 14:00 | |
lbragstad | i mainly say that because it sounds like wxy has an alternative for simplifying the interface | 14:00 |
lbragstad | i want to see what that is all about | 14:00 |
cmurphy | yeah me too, i think giving it a few more days will be fine | 14:01 |
cmurphy | what about default roles stuff? is there more work to do that we were trying to get done by this week? | 14:02 |
cmurphy | cc hrybacki | 14:02 |
*** raildo_ has quit IRC | 14:02 | |
lbragstad | i think that depends on two things (at least how i understood it) | 14:02 |
lbragstad | 1.) the auditing of the API | 14:02 |
lbragstad | 2.) the flask work (e.g. the RBACEnforcer + removal of @controller.protected) | 14:03 |
cmurphy | okay, so we kind of implicitly pushed the default roles work back by prioritizing flask over it | 14:03 |
lbragstad | yeah - pretty much... but i guess it depends on if we classify something like fixing https://bugs.launchpad.net/keystone/+bug/1750660 as a feature-ish thing that can't land after rocky-3 | 14:04 |
openstack | Launchpad bug 1750660 in OpenStack Identity (keystone) "The v3 project API should account for different scopes" [High,Triaged] | 14:04 |
lbragstad | the audit and changes to enforce whatever that decision is should ultimately fix ^ | 14:05 |
cmurphy | i guess that's the ptl's call :P | 14:06 |
lbragstad | damn... that backfired | 14:06 |
cmurphy | lol | 14:07 |
lbragstad | ;) | 14:07 |
lbragstad | idk... it's changing a default policy and adding a scope type | 14:07 |
lbragstad | but it's backwards compatible | 14:07 |
*** raildo has joined #openstack-keystone | 14:07 | |
cmurphy | i think i lean toward calling it a feature | 14:08 |
cmurphy | it's a significant enough change that it could cause more bugs | 14:09 |
cmurphy | when we're supposed to be using this time to fix bugs | 14:09 |
lbragstad | that's fair | 14:09 |
lbragstad | i mean - that this pint | 14:10 |
lbragstad | point* | 14:10 |
lbragstad | even if we did say "sure, we're ok merging this stuff past FF" | 14:10 |
*** raildo_ has joined #openstack-keystone | 14:10 | |
lbragstad | we'd likely only get *maybe* one or two APIs done | 14:11 |
cmurphy | that's a good point too | 14:11 |
lbragstad | if we do wait until stein, i certainly wouldn't be opposed to queuing things in gerrit | 14:12 |
cmurphy | sure | 14:12 |
*** raildo has quit IRC | 14:13 | |
lbragstad | (pending the amount of churn it causes for backports) | 14:13 |
*** raildo_ is now known as raildo | 14:13 | |
*** ispp has quit IRC | 14:19 | |
lbragstad | cmurphy: jgrassler do you know if we'll be seeing any more capability list code soon? | 14:19 |
*** ispp has joined #openstack-keystone | 14:19 | |
cmurphy | I didn't manage to make any time to help with that and haven't synced up with jgrassler on it :( I'll be able to dedicate some time next cycle to help jgrassler with it | 14:22 |
lbragstad | ack - that sounds good | 14:22 |
cmurphy | knikolla: have you seen http://lists.openstack.org/pipermail/openstack-dev/2018-July/132146.html ? | 14:28 |
knikolla | cmurphy: yup, i'll be on that meeting | 14:33 |
cmurphy | cool o7 | 14:34 |
*** raildo_ has joined #openstack-keystone | 14:39 | |
*** raildo has quit IRC | 14:41 | |
*** lbragstad is now known as elbragstad | 14:43 | |
hrybacki | lbragstad knikolla what time abouts were y'all trying to link up for reviews today? | 14:45 |
elbragstad | i'm *just* about to rebase the series - so i should be available anytime after that | 14:45 |
knikolla | anytime works for me | 14:45 |
elbragstad | there was a conflict with the rbac enforcer stuff | 14:45 |
hrybacki | ah ack ack | 14:46 |
knikolla | what'll be our medium? | 14:46 |
hrybacki | I can host bluejeans? | 14:46 |
hrybacki | or hangouts if folks prefer | 14:46 |
elbragstad | doesn't matter to me, whatever is easiest | 14:47 |
knikolla | same | 14:47 |
hrybacki | alright, I'll just pop up a bridge whenever we are ready :) | 14:47 |
elbragstad | just about to rebase this series | 14:50 |
*** amoralej|lunch is now known as amoralej | 14:52 | |
gagehugo | o/ | 14:53 |
*** fiddletwix has joined #openstack-keystone | 14:55 | |
*** felipemonteiro has joined #openstack-keystone | 14:55 | |
openstackgerrit | Lance Bragstad proposed openstack/keystone master: Introduce new TokenModel object https://review.openstack.org/559129 | 15:03 |
openstackgerrit | Lance Bragstad proposed openstack/keystone master: Add serialization for TokenModel object https://review.openstack.org/578434 | 15:03 |
openstackgerrit | Lance Bragstad proposed openstack/keystone master: Simplify the token provider API https://review.openstack.org/545450 | 15:03 |
openstackgerrit | Lance Bragstad proposed openstack/keystone master: Remove remnants of token bind https://review.openstack.org/578435 | 15:03 |
openstackgerrit | Lance Bragstad proposed openstack/keystone master: Cleanup keystone.token.providers.common https://review.openstack.org/577507 | 15:03 |
openstackgerrit | Lance Bragstad proposed openstack/keystone master: Remove KeystoneToken object https://review.openstack.org/577567 | 15:03 |
elbragstad | ok - i should be ready whenever if people want to walk through ^ | 15:04 |
hrybacki | elbragstad: awesome, I'm good now. knikolla ? | 15:04 |
knikolla | awesome | 15:05 |
elbragstad | cc gagehugo ^ | 15:05 |
hrybacki | https://bluejeans.com/u/hrybacki/ | 15:05 |
elbragstad | hrybacki: can you hear me? | 15:05 |
gagehugo | as soon as this other call ends I'll hop on | 15:06 |
elbragstad | cool | 15:06 |
elbragstad | https://review.openstack.org/#/c/559129/19 | 15:08 |
elbragstad | one thing you'll notice too is the difference between attributes here - https://review.openstack.org/#/c/559129/19/keystone/models/token_model.py@311 | 15:11 |
*** EmilienM is now known as EvilienM | 15:18 | |
*** tesseract has quit IRC | 15:21 | |
*** jmlowe has quit IRC | 15:34 | |
*** sapd has joined #openstack-keystone | 15:34 | |
elbragstad | release note https://review.openstack.org/#/c/545450/20/releasenotes/notes/bug-1778945-b7f2db3052525ca8.yaml | 15:41 |
*** ispp has quit IRC | 15:41 | |
elbragstad | knikolla: https://review.openstack.org/#/c/545450/20/keystone/token/provider.py@204 | 15:43 |
kmalloc | elbragstad: darn, missing the provider walk through. Ah well, I understand most of the code. | 15:48 |
elbragstad | ++ | 15:48 |
elbragstad | i'm going to work on a follow up for locking the model after it's been minted... | 15:49 |
elbragstad | knikolla: https://review.openstack.org/#/c/545450/20/keystone/auth/controllers.py@149 | 15:55 |
*** felipemonteiro has quit IRC | 15:58 | |
*** agrebennikov has joined #openstack-keystone | 16:03 | |
*** agrebennikov_ has joined #openstack-keystone | 16:04 | |
*** harlowja has joined #openstack-keystone | 16:08 | |
*** harlowja has quit IRC | 16:10 | |
*** spilla has quit IRC | 16:24 | |
*** nelsnelson has joined #openstack-keystone | 16:28 | |
*** amoralej is now known as amoralej|off | 16:30 | |
*** kimamisa has quit IRC | 16:30 | |
*** nelsnelson has quit IRC | 16:32 | |
*** nelsnelson has joined #openstack-keystone | 16:32 | |
openstackgerrit | Lance Bragstad proposed openstack/keystone master: Use auth_context in issue_token exclusively https://review.openstack.org/582635 | 16:32 |
elbragstad | knikolla: ^ | 16:33 |
*** pcichy has joined #openstack-keystone | 16:33 | |
elbragstad | we can go either way though... we can either use auth_context exclusively or we can pull all the values out of auth_context and explicitly pass them to issue_token | 16:33 |
elbragstad | figured we can iterate on it there | 16:33 |
* elbragstad breaks for lunch | 16:35 | |
*** jmlowe has joined #openstack-keystone | 16:42 | |
*** pcichy has quit IRC | 16:45 | |
* knikolla is back from lunch | 17:27 | |
*** spilla has joined #openstack-keystone | 17:45 | |
*** pcichy has joined #openstack-keystone | 18:00 | |
*** raildo_ is now known as raildo | 18:08 | |
*** dpaterson has quit IRC | 18:10 | |
*** jistr has quit IRC | 18:11 | |
*** jistr has joined #openstack-keystone | 18:11 | |
*** kimamisa has joined #openstack-keystone | 18:17 | |
*** Tahvok has joined #openstack-keystone | 18:34 | |
*** kimamisa has quit IRC | 18:41 | |
*** pcichy has quit IRC | 18:42 | |
*** kimamisa has joined #openstack-keystone | 18:44 | |
*** pcichy has joined #openstack-keystone | 18:46 | |
*** zzzeek has quit IRC | 18:52 | |
*** zzzeek has joined #openstack-keystone | 18:57 | |
*** kimamisa has quit IRC | 19:34 | |
openstackgerrit | Lance Bragstad proposed openstack/keystone-specs master: Update the default roles spec to include Rocky details https://review.openstack.org/582673 | 19:43 |
elbragstad | cc hrybacki ^ | 19:43 |
*** kimamisa has joined #openstack-keystone | 19:50 | |
*** kimamisa_ has joined #openstack-keystone | 19:56 | |
*** kimamisa has quit IRC | 19:56 | |
*** spilla has quit IRC | 20:03 | |
*** kimamisa_ has quit IRC | 20:04 | |
*** kimamisa has joined #openstack-keystone | 20:05 | |
*** jmlowe has quit IRC | 20:06 | |
*** kaiokmo has joined #openstack-keystone | 20:07 | |
*** kimamisa has quit IRC | 20:07 | |
*** kaiokmo has left #openstack-keystone | 20:07 | |
*** kimamisa has joined #openstack-keystone | 20:11 | |
*** spilla has joined #openstack-keystone | 20:15 | |
*** kimamisa has quit IRC | 20:18 | |
*** boris_42_ has joined #openstack-keystone | 20:28 | |
*** kimamisa has joined #openstack-keystone | 20:40 | |
*** raildo has quit IRC | 21:05 | |
*** kimamisa has quit IRC | 21:15 | |
*** gyee has joined #openstack-keystone | 21:25 | |
*** sonuk_ has joined #openstack-keystone | 21:26 | |
*** markvoelker_ has joined #openstack-keystone | 21:27 | |
*** markvoelker has quit IRC | 21:29 | |
*** sonuk has quit IRC | 21:29 | |
*** spilla has quit IRC | 21:31 | |
openstackgerrit | Lance Bragstad proposed openstack/keystone master: Increase test coverage of entity_type id mapping query https://review.openstack.org/582692 | 21:33 |
*** raildo has joined #openstack-keystone | 21:35 | |
*** ayoung has joined #openstack-keystone | 21:37 | |
*** martinus__ has quit IRC | 21:39 | |
openstackgerrit | Lance Bragstad proposed openstack/keystone master: Increase test coverage of entity_type id mapping query https://review.openstack.org/582692 | 21:42 |
*** mchlumsky has quit IRC | 21:45 | |
*** raildo has quit IRC | 21:45 | |
*** raildo has joined #openstack-keystone | 21:49 | |
-openstackstatus- NOTICE: logs.openstack.org is offline, causing POST_FAILURE results from Zuul. Cause and resolution timeframe currently unknown. | 21:50 | |
*** ChanServ changes topic to "logs.openstack.org is offline, causing POST_FAILURE results from Zuul. Cause and resolution timeframe currently unknown." | 21:50 | |
*** mchlumsky has joined #openstack-keystone | 21:58 | |
*** itlinux_ has joined #openstack-keystone | 22:00 | |
*** raildo has quit IRC | 22:01 | |
*** mchlumsky has quit IRC | 22:05 | |
*** edmondsw has quit IRC | 22:31 | |
*** itlinux_ has quit IRC | 22:49 | |
*** agrebennikov_ has quit IRC | 23:22 | |
*** agrebennikov has quit IRC | 23:22 | |
*** edmondsw has joined #openstack-keystone | 23:26 | |
*** jmlowe has joined #openstack-keystone | 23:29 | |
*** edmondsw has quit IRC | 23:31 | |
*** ChanServ changes topic to "Rocky release schedule: https://releases.openstack.org/rocky/schedule.html | Meeting agenda: https://etherpad.openstack.org/p/keystone-weekly-meeting | Bugs that need triaging: http://bit.ly/2iJuN1h | Trello: https://trello.com/b/wmyzbFq5/keystone-rocky-roadmap !!NOTE!! This Channel is Logged ( https://tinyurl.com/OpenStackKeystone )" | 23:34 | |
-openstackstatus- NOTICE: logs.openstack.org is back on-line. Changes with "POST_FAILURE" job results should be rechecked. | 23:34 | |
*** tosky has quit IRC | 23:41 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!