*** rcernin_ has quit IRC | 00:02 | |
*** jhesketh has quit IRC | 00:06 | |
*** lbragstad has quit IRC | 00:06 | |
*** annp has quit IRC | 00:06 | |
*** gagehugo has quit IRC | 00:06 | |
*** frickler has quit IRC | 00:06 | |
*** gmann has quit IRC | 00:06 | |
*** eandersson has quit IRC | 00:06 | |
*** knikolla[m] has quit IRC | 00:10 | |
*** lbragstad[m] has quit IRC | 00:10 | |
*** markvoelker has quit IRC | 00:10 | |
*** felipemonteiro has joined #openstack-keystone | 00:11 | |
*** jhesketh has joined #openstack-keystone | 00:15 | |
*** rcernin_ has joined #openstack-keystone | 00:15 | |
*** lbragstad has joined #openstack-keystone | 00:15 | |
*** annp has joined #openstack-keystone | 00:15 | |
*** gagehugo has joined #openstack-keystone | 00:15 | |
*** frickler has joined #openstack-keystone | 00:15 | |
*** gmann has joined #openstack-keystone | 00:15 | |
*** eandersson has joined #openstack-keystone | 00:15 | |
*** barjavel.freenode.net sets mode: +o lbragstad | 00:15 | |
*** felipemonteiro has quit IRC | 00:22 | |
*** threestrands has joined #openstack-keystone | 00:23 | |
*** threestrands has quit IRC | 00:23 | |
*** threestrands has joined #openstack-keystone | 00:23 | |
*** markvoelker has joined #openstack-keystone | 00:24 | |
*** dklyle has quit IRC | 00:24 | |
*** rcernin_ has quit IRC | 00:43 | |
*** rcernin has joined #openstack-keystone | 00:44 | |
*** lbragstad[m] has joined #openstack-keystone | 00:51 | |
*** r-daneel has quit IRC | 00:57 | |
*** dave-mccowan has quit IRC | 00:59 | |
*** felipemonteiro has joined #openstack-keystone | 00:59 | |
*** r-daneel has joined #openstack-keystone | 01:00 | |
*** knikolla[m] has joined #openstack-keystone | 01:05 | |
*** Dinesh_Bhor has joined #openstack-keystone | 01:08 | |
*** harlowja has quit IRC | 01:09 | |
*** liuzz has joined #openstack-keystone | 01:14 | |
*** r-daneel has quit IRC | 01:18 | |
*** felipemonteiro has quit IRC | 01:32 | |
*** dave-mccowan has joined #openstack-keystone | 01:38 | |
*** dave-mccowan has quit IRC | 01:52 | |
*** itlinux has quit IRC | 01:56 | |
*** felipemonteiro has joined #openstack-keystone | 02:34 | |
*** links has joined #openstack-keystone | 02:40 | |
*** lifeless has quit IRC | 02:51 | |
*** threestrands has quit IRC | 02:54 | |
*** mguz has quit IRC | 02:54 | |
*** lifeless has joined #openstack-keystone | 02:58 | |
*** threestrands has joined #openstack-keystone | 03:10 | |
*** threestrands has quit IRC | 03:10 | |
*** threestrands has joined #openstack-keystone | 03:10 | |
*** felipemonteiro_ has joined #openstack-keystone | 03:18 | |
*** felipemonteiro has quit IRC | 03:21 | |
nehaalhat | wxy: Hi, you are correct that cinder registers the keystoneauth options in [service_user] group, but if I open cinder/cinder.conf then I cant see section like [service_user] like [keystone_authtoken] where we can set split_loggers=True/False | 03:25 |
---|---|---|
kmalloc | ayoung: posting a "patch not supported" test shortly | 03:27 |
kmalloc | ayoung: for tests | 03:27 |
kmalloc | erm trusts* | 03:27 |
openstackgerrit | Morgan Fainberg proposed openstack/keystone master: Implement "no-update" test for trusts https://review.openstack.org/584211 | 03:30 |
openstackgerrit | Morgan Fainberg proposed openstack/keystone master: Implement "no-update" test for trusts https://review.openstack.org/584211 | 03:33 |
kmalloc | ayoung: ^ | 03:34 |
*** dklyle has joined #openstack-keystone | 03:37 | |
openstackgerrit | Morgan Fainberg proposed openstack/keystone master: Implement "no-update" test for trusts https://review.openstack.org/584211 | 03:50 |
*** jdennis has quit IRC | 04:17 | |
*** dklyle has quit IRC | 04:26 | |
*** jdennis has joined #openstack-keystone | 04:30 | |
*** harlowja has joined #openstack-keystone | 04:30 | |
*** Dinesh_Bhor has quit IRC | 04:30 | |
*** threestrands has quit IRC | 04:40 | |
*** flwang1 has quit IRC | 04:48 | |
*** harlowja has quit IRC | 04:52 | |
*** pcaruana has joined #openstack-keystone | 05:09 | |
*** Dinesh_Bhor has joined #openstack-keystone | 05:10 | |
*** felipemonteiro has joined #openstack-keystone | 05:11 | |
*** felipemonteiro has quit IRC | 05:15 | |
*** felipemonteiro has joined #openstack-keystone | 05:19 | |
*** pcichy has quit IRC | 05:25 | |
*** dmellado has quit IRC | 05:48 | |
*** martinus__ has joined #openstack-keystone | 05:51 | |
*** AlexeyAbashkin has joined #openstack-keystone | 06:15 | |
*** dmellado has joined #openstack-keystone | 06:29 | |
*** AlexeyAbashkin has quit IRC | 06:41 | |
openstackgerrit | Merged openstack/keystone master: Properly remove content-type on HTTP 204 https://review.openstack.org/582724 | 06:51 |
openstackgerrit | Merged openstack/keystone master: Add correct self-link https://review.openstack.org/582725 | 06:51 |
openstackgerrit | Merged openstack/keystone master: Move Credentials API to Flask Native https://review.openstack.org/582450 | 06:51 |
*** hoonetorg has quit IRC | 06:54 | |
openstackgerrit | Duc Nguyen proposed openstack/keystonemiddleware master: Replace port 35357 with 5000 https://review.openstack.org/584251 | 06:56 |
*** felipemonteiro has quit IRC | 06:56 | |
*** AlexeyAbashkin has joined #openstack-keystone | 06:58 | |
wxy | nehaalhat: so do we still need to add split_loggers into keystonemiddleware? | 07:00 |
*** Alexey_Abashkin has joined #openstack-keystone | 07:01 | |
*** tesseract has joined #openstack-keystone | 07:02 | |
*** AlexeyAbashkin has quit IRC | 07:02 | |
*** Alexey_Abashkin is now known as AlexeyAbashkin | 07:02 | |
*** rcernin has quit IRC | 07:02 | |
*** ispp has joined #openstack-keystone | 07:09 | |
*** hoonetorg has joined #openstack-keystone | 07:11 | |
*** ispp has quit IRC | 07:22 | |
*** ispp has joined #openstack-keystone | 07:24 | |
*** peereb has joined #openstack-keystone | 07:26 | |
*** tosky has joined #openstack-keystone | 07:27 | |
*** annp has quit IRC | 07:28 | |
*** zhongjun___ has joined #openstack-keystone | 07:30 | |
*** zhongjun__ has quit IRC | 07:31 | |
*** zhongjun___ is now known as zhongjun__ | 07:31 | |
*** jamielennox has quit IRC | 07:31 | |
wxy | nehaalhat: oh, you mean the cinder.conf example file doesn't contain split_loggers? | 07:38 |
wxy | nehaalhat: you can set split_loggers=True/False in [service_user] group, it works well. I just tested. | 07:38 |
*** pcichy has joined #openstack-keystone | 07:55 | |
*** nilesh has joined #openstack-keystone | 08:00 | |
nilesh | Is there any way to change the keystone config dir from its default location '/etc/keystone' to something like '/mydir/keystone' ? This needs to be done during install | 08:01 |
*** jamielennox has joined #openstack-keystone | 08:05 | |
*** ispp has quit IRC | 08:11 | |
wxy | nilesh: using 'OS_KEYSTONE_CONFIG-DIR' or 'OS_KEYSTONE_CONFIG_FILES' env to set it. | 08:21 |
wxy | s/OS_KEYSTONE_CONFIG-DIR/OS_KEYSTONE_CONFIG_DIR | 08:21 |
nehaalhat | wxy: Ok, thanks. But now the concern is core projects like glance, mistral are registering options explicitly under[keystone_authtoken], so IMO it should be at center place i.e. keystonemiddleware so all projects can use directly that options without explicit registration | 08:52 |
wxy | nehaalhat: actually I think it's the wrong usage in Mistral and Glance. I have a patch for Mistral https://review.openstack.org/#/c/572300/ | 08:53 |
nilesh | thanks @wxy for your valuable input | 08:55 |
wxy | nehaalhat: and since Glance only use it for glance-registry and glance-registry is deprecated already. So It's less worth to fix it. | 08:57 |
nehaalhat | wxy: this patch https://review.openstack.org/#/c/572300/ is removing the options from keystone_authtoken and registers it under 'keystone' group, right? | 08:59 |
wxy | nehaalhat: not removing, just created a new group for keystoneauth options. | 09:00 |
nehaalhat | wxy: ok, can you please look https://review.openstack.org/#/c/578008/1, where I was registering options from keystone under [keystone_authtoken], but it was failing in glance for duplicate registration for 'timeout' conf option | 09:01 |
nehaalhat | wxy: and may be it will fail for other projects also like you pointed for mistral | 09:02 |
nehaalhat | wxy: But IMO it will be better to have these options at center place i.e. keystonemiddleware | 09:03 |
wxy | nehaalhat: yeah, I don't oppose adding them to keystonemiddleware. acutally I like your PS1, it removed some duplicated options and reused keystoneauth's | 09:06 |
nehaalhat | wxy: yes, but as glance were failing or duplicate registration of 'timeout' conf option, I was unable to process further with PS1 | 09:08 |
*** liuzz has quit IRC | 09:08 | |
wxy | nehaalhat: My concern is 1. it'll break Glance and Mistral (solution: fix the usage in Glance and Mistral). 2. Like lbragstad's comment in your patch, you should address how these options will be used in keystonemiddleware. | 09:09 |
*** liuzz has joined #openstack-keystone | 09:11 | |
wxy | nehaalhat: how about fixing Glance and Mistral first, then go back to your PS1? | 09:11 |
*** sapd has quit IRC | 09:11 | |
cmurphy | I think therew as a patch to fix glance, but it caused a circular dependency issue | 09:11 |
wxy | nehaalhat: since there is a fix for mistral already. And the glance part is not hard as well. | 09:11 |
cmurphy | and my concern about that was it raises red flags about upgrading | 09:11 |
cmurphy | and about what other projects might be relying on this behavior | 09:12 |
cmurphy | but in principle i agree it would be better to remove the duplication | 09:12 |
nehaalhat | cmurphy: i am not clear about this: raises red flags about upgrading | 09:12 |
*** liuzz has quit IRC | 09:13 | |
*** liuzz has joined #openstack-keystone | 09:13 | |
cmurphy | nehaalhat: if someone upgrades glance but not keystonemiddleware, or the other way around, things would be broken | 09:14 |
cmurphy | but i guess the answer to that is to bump the minimum requirements | 09:14 |
nehaalhat | cmuprhy: yes, there was patch for glance | 09:14 |
wxy | emm, can you show me the link? | 09:17 |
nehaalhat | cmurphy: can you please elaborate this: to bump the minimum requirements, do you suggesting to bump this change under new microversion? | 09:20 |
*** flwang1 has joined #openstack-keystone | 09:22 | |
nehaalhat | wxy: as there is fix for mistral, IMO the patch https://review.openstack.org/#/c/578008/4 will not cause any harm for other project | 09:24 |
cmurphy | nehaalhat: no, i mean to raise the minimum required version of keystonemiddleware for glance, i think here http://git.openstack.org/cgit/openstack/glance/tree/requirements.txt#n26 but the problem is you can't do that until a new version of keystonemiddleware is released with your change, but we can't commit that change since it breaks glance, so it's a pickle | 09:24 |
cmurphy | and i don't have a good suggestion, sorry :/ | 09:24 |
cmurphy | nehaalhat: what was the patch for glance? maybe wxy has ideas | 09:24 |
nehaalhat | cmurphy, wxy: the patch for glance was: https://review.openstack.org/#/c/578008/4 | 09:25 |
nehaalhat | cmurphy, wxy: sorry, please refer: https://review.openstack.org/#/c/579047/ | 09:26 |
wxy | nehaalhat: cmurphy: /me need to take a look at glance code carefully. | 09:27 |
nehaalhat | wxy: ok | 09:28 |
*** links has quit IRC | 09:29 | |
*** sapd has joined #openstack-keystone | 09:29 | |
wxy | nehaalhat: after the patch for mistral, your change is fine now, but I think it's maybe not the best way (because it'll add a duplicated option again.) Since Cinder has "split_loggers" already, and the ksm was just released, could we hold on the patch for a while. I'd like to take a look at glance first. Then give you my opinion. | 09:32 |
openstackgerrit | Merged openstack/keystone master: Allow class-level definition of API URL Prefix https://review.openstack.org/582726 | 09:33 |
nehaalhat | wxy: yes sure thanks | 09:34 |
nehaalhat | cmurphy: thank you for your opinion | 09:35 |
wxy | nehaalhat: thanks, BTW, here is a patch for cinder to list the keystoneauth options in sample file. https://review.openstack.org/#/c/584281/ | 09:35 |
cmurphy | nehaalhat: sorry to not be more helpful, tbh sometimes oslo.config is a bit of a mystery :) | 09:35 |
nehaalhat | cmurpy: yeah :) | 09:37 |
nehaalhat | wxy: thanks for https://review.openstack.org/#/c/584281/ | 09:39 |
*** lbragstad[m] has quit IRC | 09:42 | |
*** knikolla[m] has quit IRC | 09:43 | |
*** lbragstad[m] has joined #openstack-keystone | 09:49 | |
*** liuzz has quit IRC | 09:56 | |
*** knikolla[m] has joined #openstack-keystone | 10:03 | |
*** AlexeyAbashkin has quit IRC | 10:08 | |
*** AlexeyAbashkin has joined #openstack-keystone | 10:11 | |
nilesh | @wxy: the setting you had suggested is not working it seems. I am building a centos docker container with keystone installed in it using yum install for centos-release-openstack-queens, openstack-keystone, openstack-utils, python-openstackclient . I set the env variable in the Dockerfile using "ENV OS_KEYSTONE_CONFIG_DIR=/mydir/keystone/" but still when I start the container, the keystone config files are created under ' | 10:11 |
*** AlexeyAbashkin has quit IRC | 10:18 | |
*** AlexeyAbashkin has joined #openstack-keystone | 10:31 | |
*** Dinesh_Bhor has quit IRC | 10:52 | |
*** links has joined #openstack-keystone | 11:32 | |
openstackgerrit | Merged openstack/keystone master: Refactor _set_domain_id_and_mapping functions https://review.openstack.org/579670 | 11:36 |
*** raildo has joined #openstack-keystone | 11:57 | |
*** spilla has joined #openstack-keystone | 12:12 | |
*** ayoung has quit IRC | 12:30 | |
*** AlexeyAbashkin has quit IRC | 12:31 | |
*** AlexeyAbashkin has joined #openstack-keystone | 12:35 | |
*** spilla has quit IRC | 12:35 | |
*** edmondsw has joined #openstack-keystone | 12:42 | |
*** d0ugal has quit IRC | 12:45 | |
*** d0ugal has joined #openstack-keystone | 12:45 | |
*** d0ugal has quit IRC | 12:45 | |
*** d0ugal has joined #openstack-keystone | 12:45 | |
*** raildo has quit IRC | 12:49 | |
*** spilla has joined #openstack-keystone | 12:52 | |
*** ispp has joined #openstack-keystone | 12:53 | |
*** AlexeyAbashkin has quit IRC | 12:55 | |
*** AlexeyAbashkin has joined #openstack-keystone | 12:56 | |
*** d0ugal has quit IRC | 12:57 | |
*** d0ugal has joined #openstack-keystone | 13:09 | |
*** ispp has quit IRC | 13:17 | |
*** ispp has joined #openstack-keystone | 13:23 | |
*** TheJulia is now known as needssleep | 13:40 | |
*** EmilienM is now known as EvilienM | 13:41 | |
*** ispp has quit IRC | 14:00 | |
*** ispp has joined #openstack-keystone | 14:03 | |
*** dansmith is now known as superdan | 14:04 | |
*** peereb has quit IRC | 14:05 | |
*** pcichy has quit IRC | 14:14 | |
*** pcichy has joined #openstack-keystone | 14:15 | |
*** nehaalhat has quit IRC | 14:16 | |
*** felipemonteiro_ has quit IRC | 14:33 | |
*** felipemonteiro has joined #openstack-keystone | 14:51 | |
*** links has quit IRC | 14:52 | |
*** r-daneel has joined #openstack-keystone | 14:59 | |
*** lbragstad has quit IRC | 15:03 | |
*** pcichy has quit IRC | 15:03 | |
*** r-daneel_ has joined #openstack-keystone | 15:04 | |
*** r-daneel has quit IRC | 15:04 | |
*** r-daneel_ is now known as r-daneel | 15:04 | |
gagehugo | o/ | 15:05 |
*** lbragstad has joined #openstack-keystone | 15:12 | |
*** ChanServ sets mode: +o lbragstad | 15:12 | |
*** dave-mccowan has joined #openstack-keystone | 15:19 | |
*** dave-mcc_ has joined #openstack-keystone | 15:23 | |
*** hoonetorg has quit IRC | 15:24 | |
*** dave-mccowan has quit IRC | 15:25 | |
*** hoonetorg has joined #openstack-keystone | 15:25 | |
*** ispp has quit IRC | 15:30 | |
knikolla | o/ | 15:33 |
*** r-daneel has quit IRC | 15:53 | |
*** r-daneel has joined #openstack-keystone | 15:53 | |
*** nilesh has quit IRC | 15:54 | |
kmalloc | O/ | 15:57 |
*** AlexeyAbashkin has quit IRC | 16:13 | |
*** spilla has quit IRC | 16:23 | |
*** spilla has joined #openstack-keystone | 16:23 | |
*** spilla has quit IRC | 16:23 | |
*** tesseract has quit IRC | 16:24 | |
*** jmlowe has quit IRC | 16:44 | |
*** felipemonteiro has quit IRC | 16:45 | |
*** felipemonteiro has joined #openstack-keystone | 16:46 | |
*** felipemonteiro has quit IRC | 16:46 | |
*** Mantorok has joined #openstack-keystone | 16:47 | |
*** raildo has joined #openstack-keystone | 16:56 | |
*** spilla has joined #openstack-keystone | 17:02 | |
*** dklyle has joined #openstack-keystone | 17:15 | |
*** david-lyle has joined #openstack-keystone | 17:16 | |
*** dklyle has quit IRC | 17:20 | |
*** david-lyle has quit IRC | 17:21 | |
*** david-lyle has joined #openstack-keystone | 17:22 | |
openstackgerrit | Morgan Fainberg proposed openstack/keystone master: Fix RBACEnforcer Comment https://review.openstack.org/584451 | 17:25 |
openstackgerrit | Morgan Fainberg proposed openstack/keystone master: Fix RBACEnforcer Comment https://review.openstack.org/584451 | 17:26 |
kmalloc | wxy: ^ fixed the comment. | 17:27 |
*** raildo has quit IRC | 17:29 | |
*** raildo has joined #openstack-keystone | 17:30 | |
*** david-lyle has quit IRC | 17:33 | |
*** dklyle has joined #openstack-keystone | 17:33 | |
*** r-daneel has quit IRC | 17:39 | |
imacdonn | kmalloc: Do you think that https://review.openstack.org/#/c/583698/ needs a release note? If not, I think it just needs a rebase to pick up the pip fix and pass CI... | 17:48 |
imacdonn | well, it needs that either way :) | 17:48 |
kmalloc | i don't think it does | 17:54 |
*** jdennis has quit IRC | 18:08 | |
*** jdennis has joined #openstack-keystone | 18:21 | |
openstackgerrit | Morgan Fainberg proposed openstack/keystone master: Boostrap CLI tests no longer call auth controller https://review.openstack.org/584466 | 18:23 |
kmalloc | gagehugo: sigh, it's so tedious to fix all of our test cases like this :P | 18:24 |
*** dklyle has quit IRC | 18:29 | |
*** dklyle has joined #openstack-keystone | 18:36 | |
*** r-daneel has joined #openstack-keystone | 18:37 | |
openstackgerrit | Morgan Fainberg proposed openstack/keystone master: Move validate_issue_token_auth from controllers https://review.openstack.org/584485 | 18:38 |
*** dklyle has quit IRC | 18:38 | |
*** dklyle has joined #openstack-keystone | 18:38 | |
*** dklyle has quit IRC | 18:43 | |
openstackgerrit | Morgan Fainberg proposed openstack/keystone master: Boostrap CLI tests no longer call auth controller https://review.openstack.org/584466 | 18:46 |
openstackgerrit | Morgan Fainberg proposed openstack/keystone master: Move validate_issue_token_auth from controllers https://review.openstack.org/584485 | 18:46 |
gagehugo | heh | 18:46 |
*** felipemonteiro has joined #openstack-keystone | 19:07 | |
kmalloc | gagehugo: direct calling of controller methods is... icky | 19:07 |
kmalloc | esp. with all the hoop jumping to make @protected work | 19:09 |
kmalloc | [yay moving away from that where we can mock/patch enforce_call if really needed] | 19:09 |
gagehugo | hmm | 19:10 |
gagehugo | yeah there's a lot of calling controller | 19:10 |
kmalloc | this kind of stuff self.api = auth.controllers.Auth( | 19:11 |
kmalloc | drives me batty | 19:11 |
kmalloc | welcome to making the test suite abysmal to work with | 19:11 |
* kmalloc looks for how to approach the next few fixes. | 19:11 | |
kmalloc | this is only awkward because flask-restful doesn't mirror the webob thing very well so direct controller calls is weird. | 19:12 |
*** pcichy has joined #openstack-keystone | 19:18 | |
*** edmondsw has quit IRC | 19:19 | |
*** edmondsw has joined #openstack-keystone | 19:20 | |
*** felipemonteiro has quit IRC | 19:25 | |
*** edmondsw has quit IRC | 19:26 | |
kmalloc | uhm.. | 19:31 |
kmalloc | gagehugo, knikolla, lbragstad: if any of you have a second, mind helping me check something, but i think we have a huge swath of tests that are never run | 19:32 |
knikolla | sure | 19:32 |
kmalloc | look in test_v3_auth, these classes seem to never be used: TestAuthExternalDefaultDomain, AuthExternalDomainBehavior, | 19:34 |
kmalloc | so we basically don't test them. | 19:34 |
kmalloc | the question is... do we drop them or do we try and retro-fit them into the tests? | 19:34 |
* kmalloc can also just add a TODO. | 19:34 | |
kmalloc | maybe they are supposed to be restfultestcase | 19:35 |
kmalloc | ? | 19:35 |
*** r-daneel has quit IRC | 19:39 | |
* gagehugo likes deleting code | 19:40 | |
gagehugo | kmalloc not sure | 19:40 |
*** r-daneel has joined #openstack-keystone | 19:40 | |
knikolla | kmalloc: what do you mean they're not used/tested | 19:40 |
knikolla | interesting, you're right | 19:42 |
kmalloc | that. | 19:42 |
kmalloc | ;) | 19:42 |
kmalloc | i'm reworking all tests that involve the auth.controller directly | 19:43 |
*** felipemonteiro has joined #openstack-keystone | 19:43 | |
knikolla | does unittest require subclassing and they don't run because object? | 19:43 |
kmalloc | yeah | 19:43 |
knikolla | i always get confused between pytest and unittest | 19:43 |
kmalloc | i mean those would fail | 19:43 |
kmalloc | if they wrere run as is | 19:44 |
*** felipemonteiro has quit IRC | 19:44 | |
kmalloc | since they don't have .build_external_auth_request etc | 19:44 |
knikolla | if they hit something that we want to test, a TODO or FIXME is better than deleting the code. | 19:44 |
*** dklyle has joined #openstack-keystone | 19:44 | |
kmalloc | yeah i just don't know | 19:45 |
kmalloc | i'd ask ayoung, but he's not here atm | 19:45 |
*** felipemonteiro has joined #openstack-keystone | 19:45 | |
knikolla | i'll ask him if i run into him in the boston office | 19:45 |
knikolla | or see him in irc | 19:45 |
kmalloc | yeah. i'll just mark it as a TODO | 19:46 |
kmalloc | and ignore the cases. | 19:46 |
knikolla | ++ | 19:46 |
*** s10 has joined #openstack-keystone | 20:02 | |
s10 | https://review.openstack.org/#/c/584053/ | 20:03 |
s10 | What should happen to make Zuul start another gate tests? | 20:04 |
aning_ | lbragstad: where can I find keystone DB schema? any document or somewhere in the code base? | 20:08 |
clarkb | s10: have a specific example? Generall the workflow is new commit is pushed, we test that, reviewers review and if approved it goes into the gate. In the gate all the related projcet changes are serialized but then speculatively tested in parallel. If a change ahead of another change fails we reorder things removing the fialing change and start over without it | 20:09 |
imacdonn | s10: that will need approval from kmalloc and lbragstad | 20:09 |
*** felipemonteiro has quit IRC | 20:10 | |
kmalloc | aning_: schema is generated by migrations in: keystone.common.sql | 20:14 |
kmalloc | aning_: you can look at the models in the various backends if you want to see what we expect, however, for a running openstack, the schema is alwyas handled by the migrations | 20:14 |
*** jdennis has quit IRC | 20:14 | |
kmalloc | imacdonn: ++ | 20:15 |
aning_ | kmalloc: ok will look over there. Thanks | 20:15 |
*** raildo has quit IRC | 20:19 | |
*** spilla has quit IRC | 20:19 | |
aning_ | kmalloc: keystone-manage bootstrap creates all the tables initially doesn't it? | 20:20 |
kmalloc | aning_: keystone-manage dbsync | 20:20 |
*** edmondsw has joined #openstack-keystone | 20:20 | |
kmalloc | bootstrap injects some specific data to get a working keystone online | 20:20 |
kmalloc | so you don't need to do a "shared secret" password and then restart keystone to disable the shared secret | 20:21 |
aning_ | then dbsync should know what to create ... | 20:21 |
kmalloc | dbsync uses the migrations | 20:21 |
aning_ | ok, back to migrations then. | 20:22 |
kmalloc | yep :) | 20:22 |
*** jdennis has joined #openstack-keystone | 20:30 | |
*** dklyle has quit IRC | 20:35 | |
*** r-daneel has quit IRC | 20:40 | |
*** martinus__ has quit IRC | 21:11 | |
*** lbragstad[m] has quit IRC | 21:16 | |
*** knikolla[m] has quit IRC | 21:17 | |
*** r-daneel has joined #openstack-keystone | 21:20 | |
*** felipemonteiro has joined #openstack-keystone | 21:38 | |
*** felipemonteiro has quit IRC | 21:41 | |
*** felipemonteiro has joined #openstack-keystone | 21:41 | |
openstackgerrit | Morgan Fainberg proposed openstack/keystone master: Remove direct calls to auth.controllers in some tests https://review.openstack.org/584529 | 21:56 |
openstackgerrit | Morgan Fainberg proposed openstack/keystone master: Correctly pull input data for enforcement https://review.openstack.org/583356 | 21:57 |
openstackgerrit | Morgan Fainberg proposed openstack/keystone master: Use oslo_serialization.jsonutils https://review.openstack.org/583373 | 21:57 |
openstackgerrit | Morgan Fainberg proposed openstack/keystone master: Add pycadf initiator for flask resource https://review.openstack.org/583374 | 21:57 |
openstackgerrit | Morgan Fainberg proposed openstack/keystone master: Allow for 'extension' rel in json home https://review.openstack.org/583357 | 21:57 |
openstackgerrit | Morgan Fainberg proposed openstack/keystone master: Trusts do not implement patch. https://review.openstack.org/583358 | 21:57 |
openstackgerrit | Morgan Fainberg proposed openstack/keystone master: Mirror self-link trust check from tempest https://review.openstack.org/584041 | 21:57 |
openstackgerrit | Morgan Fainberg proposed openstack/keystone master: Move trusts to flask native dispatching https://review.openstack.org/583278 | 21:57 |
openstackgerrit | Morgan Fainberg proposed openstack/keystone master: Implement "no-update" test for trusts https://review.openstack.org/584211 | 21:57 |
openstackgerrit | Morgan Fainberg proposed openstack/keystone master: Boostrap CLI tests no longer call auth controller https://review.openstack.org/584466 | 21:57 |
openstackgerrit | Morgan Fainberg proposed openstack/keystone master: Move validate_issue_token_auth from controllers https://review.openstack.org/584485 | 21:57 |
openstackgerrit | Morgan Fainberg proposed openstack/keystone master: Remove direct calls to auth.controllers in some tests https://review.openstack.org/584529 | 21:57 |
*** felipemonteiro has quit IRC | 21:59 | |
*** lbragstad[m] has joined #openstack-keystone | 22:05 | |
*** knikolla[m] has joined #openstack-keystone | 22:20 | |
kmalloc | this is starting to get unfun :P | 22:24 |
kmalloc | another 1 or 2 patches and I can migrate /auth | 22:25 |
kmalloc | to flask | 22:25 |
*** ayoung has joined #openstack-keystone | 22:33 | |
*** imacdonn has quit IRC | 22:45 | |
*** imacdonn has joined #openstack-keystone | 22:45 | |
*** itlinux has joined #openstack-keystone | 22:49 | |
*** alex_xu has quit IRC | 22:53 | |
*** alex_xu has joined #openstack-keystone | 23:00 | |
*** itlinux has quit IRC | 23:08 | |
*** r-daneel has quit IRC | 23:26 | |
*** r-daneel has joined #openstack-keystone | 23:29 | |
*** tosky has quit IRC | 23:48 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!