| *** imacdonn has quit IRC | 01:18 | |
| *** imacdonn has joined #openstack-keystone | 01:18 | |
| openstackgerrit | wangxiyuan proposed openstack/oslo.limit master: [WIP]Add limit check func https://review.openstack.org/596520 | 01:27 |
|---|---|---|
| openstackgerrit | wangqiang-bj proposed openstack/keystone master: fix wrong url link in release notes https://review.openstack.org/596629 | 02:01 |
| *** wxy-xiyuan has joined #openstack-keystone | 02:20 | |
| *** wxy-xiyuan has quit IRC | 02:21 | |
| *** wxy-xiyuan has joined #openstack-keystone | 02:21 | |
| kmalloc | knikolla: o/ power out here. | 03:10 |
| kmalloc | Might be 24+ hrs, just let folks know for me tomorrow | 03:10 |
| *** Dinesh_Bhor has joined #openstack-keystone | 03:50 | |
| *** viks__ has joined #openstack-keystone | 03:52 | |
| *** Dinesh_Bhor has quit IRC | 04:00 | |
| *** Dinesh_Bhor has joined #openstack-keystone | 04:54 | |
| adriant | kmalloc: you still about? | 05:06 |
| *** gagehugo has joined #openstack-keystone | 05:50 | |
| vishakha | wxy-xiyuan, kmalloc Regarding https://bugs.launchpad.net/keystone/+bug/1777671. The bug seems invalid now as only the exceptions are getting translated not the logs according to the latest code. Pl confirm . Thanks | 06:26 |
| openstack | Launchpad bug 1777671 in OpenStack Identity (keystone) "Incorrect use of translation _()" [Medium,Triaged] - Assigned to sonu (sonu-bhumca11) | 06:26 |
| wxy-xiyuan | vishakha: There are still some areas need to be fixed. For example: https://github.com/openstack/keystone/blob/master/keystone/notifications.py#L251 | 06:39 |
| vishakha | wxy-xiyuan: Thanks. I will update a patch for these. | 06:41 |
| vishakha | wxy-xiyuan: Also can you pl review https://review.openstack.org/#/c/594921/ | 06:43 |
| wxy-xiyuan | vishakha: sure, looking. | 06:44 |
| *** pcaruana has joined #openstack-keystone | 06:49 | |
| *** dmellado has quit IRC | 07:00 | |
| *** dmellado has joined #openstack-keystone | 07:02 | |
| *** Dinesh_Bhor has quit IRC | 07:13 | |
| *** rcernin has quit IRC | 07:31 | |
| *** d0ugal has joined #openstack-keystone | 07:54 | |
| *** Dinesh_Bhor has joined #openstack-keystone | 07:55 | |
| openstackgerrit | wangxiyuan proposed openstack/oslo.limit master: [WIP]Add limit check func https://review.openstack.org/596520 | 08:20 |
| *** josecastroleon has joined #openstack-keystone | 08:27 | |
| *** josecastroleon has quit IRC | 08:30 | |
| *** josecastroleon has joined #openstack-keystone | 08:42 | |
| *** Emine has joined #openstack-keystone | 08:53 | |
| *** Dinesh_Bhor has quit IRC | 09:07 | |
| *** Dinesh_Bhor has joined #openstack-keystone | 09:15 | |
| openstackgerrit | Vishakha Agarwal proposed openstack/python-keystoneclient master: create() call in v3.regions.py is wrong https://review.openstack.org/594921 | 09:22 |
| openstackgerrit | Vishakha Agarwal proposed openstack/python-keystoneclient master: create() call in v3.regions.py is wrong https://review.openstack.org/594921 | 09:26 |
| openstackgerrit | Vishakha Agarwal proposed openstack/python-keystoneclient master: create() call in v3.regions.py is wrong https://review.openstack.org/594921 | 09:30 |
| vishakha | gagehugo: waiting for your response on https://review.openstack.org/#/c/594929/. Pl have a look.Thanks | 09:52 |
| *** sapd1 has joined #openstack-keystone | 10:01 | |
| *** Dinesh_Bhor has quit IRC | 10:08 | |
| openstackgerrit | Vishakha Agarwal proposed openstack/keystone master: Incorrect use of translation _() https://review.openstack.org/596683 | 10:10 |
| *** Dinesh_Bhor has joined #openstack-keystone | 10:22 | |
| *** jaosorior has joined #openstack-keystone | 10:25 | |
| openstackgerrit | Vishakha Agarwal proposed openstack/keystone master: Incorrect use of translation _() https://review.openstack.org/596683 | 10:27 |
| *** pcaruana has quit IRC | 10:32 | |
| *** pcaruana has joined #openstack-keystone | 10:32 | |
| *** Dinesh_Bhor has quit IRC | 10:58 | |
| *** nicolasbock has joined #openstack-keystone | 11:13 | |
| *** jroll has quit IRC | 11:43 | |
| *** jroll has joined #openstack-keystone | 11:44 | |
| *** raildo has joined #openstack-keystone | 11:59 | |
| *** mchlumsky has joined #openstack-keystone | 13:16 | |
| *** josecastroleon has quit IRC | 13:30 | |
| *** lbragstad has joined #openstack-keystone | 13:47 | |
| *** ChanServ sets mode: +o lbragstad | 13:47 | |
| *** Emine has quit IRC | 13:55 | |
| *** mchlumsky has quit IRC | 13:55 | |
| *** mchlumsky has joined #openstack-keystone | 13:57 | |
| *** raildo_ has joined #openstack-keystone | 14:03 | |
| *** raildo has quit IRC | 14:03 | |
| *** r-daneel has joined #openstack-keystone | 14:05 | |
| *** rmascena__ has joined #openstack-keystone | 14:06 | |
| *** raildo_ has quit IRC | 14:09 | |
| *** Emine has joined #openstack-keystone | 14:13 | |
| lbragstad | gagehugo: is felipe going to be at the PTG? | 14:14 |
| ildikov | lbragstad: morning | 14:21 |
| *** r-daneel_ has joined #openstack-keystone | 14:24 | |
| *** r-daneel has quit IRC | 14:24 | |
| *** r-daneel_ is now known as r-daneel | 14:24 | |
| lbragstad | ildikov: o/ | 14:30 |
| ildikov | lbragstad: I saw the agenda for the Keystone team is up on the etherpad and the federation topic is scheduled for Thursday | 14:32 |
| lbragstad | ildikov: aha - i was going to put that on Tuesday wasn't I? | 14:32 |
| ildikov | lbragstad: we will probably have discussions related to Keystone before Thursday and I'll try to get those scheduled for Wednesday as I saw that day is the most open | 14:32 |
| lbragstad | yeah - you're right | 14:32 |
| ildikov | lbragstad: we said Monday or Tuesday | 14:32 |
| ildikov | lbragstad: we have the next weekly call tomorrow with the Edge Computing Group and on Wednesday with StarlingX | 14:33 |
| lbragstad | the tough part is that i think we're only guaranteed rooms on monday, thursday, and friday | 14:33 |
| ildikov | so I will sync up with them, but also wanted to ask whether you have any flexibility in your agenda in case people wouldn't be available whole week | 14:33 |
| ildikov | the Edge group has a room an Tuesday and StarlingX has one for Wednesday | 14:34 |
| lbragstad | yeah - i think we'll have flexibility on tuesday and wednesday, it's just a matter of finding a place to visit i think? | 14:34 |
| ildikov | so I'm not worried about finding a place, just trying to figure out how to get everyone interested in the topic in one of those rooms :) | 14:34 |
| lbragstad | true | 14:35 |
| ildikov | ok, I will collect feedback on preferences from other teams and get beck to you prolly on Wednesday | 14:35 |
| ildikov | does that sound good? | 14:35 |
| lbragstad | sure - for now i'll stage the federation discussions for tuesday | 14:36 |
| ildikov | ok, sounds good | 14:36 |
| lbragstad | and then i'll keep a small window open on thursday for us to go through follow-ups if needed | 14:36 |
| lbragstad | thanks for catching that ildikov | 14:37 |
| ildikov | ok, sounds good | 14:37 |
| ildikov | will try to get all the Keystone related topics for that slot so we have the relevant people in the room for one slot and then we can figure out follow ups later if needed | 14:37 |
| lbragstad | works for me | 14:38 |
| ildikov | cool, thanks much! | 14:38 |
| lbragstad | not a problem, thanks for catching that | 14:39 |
| *** marvin_mhg has joined #openstack-keystone | 14:41 | |
| gagehugo | lbragstad yes | 14:45 |
| lbragstad | gagehugo: sweet - i was wondering if he would be interested in the testing specific aspects of lines 43 - 53 https://etherpad.openstack.org/p/keystone-stein-ptg | 14:46 |
| gagehugo | lemme ping him | 14:47 |
| *** felipemonteiro has joined #openstack-keystone | 14:52 | |
| *** markvoelker has joined #openstack-keystone | 14:55 | |
| gagehugo | felipemonteiro o/ | 14:55 |
| felipemonteiro | gagehugo: hi | 14:57 |
| lbragstad | felipemonteiro: o/ i'm working through the schedule for the PTG and curious how free you are on Monday? https://etherpad.openstack.org/p/keystone-stein-ptg | 14:57 |
| felipemonteiro | lbradstad: not sure yet. qa one is here: https://etherpad.openstack.org/p/qa-stein-ptg | 14:59 |
| felipemonteiro | gmann is out on vacation atm so i don't believe we've gotten around to ironing out a schedule, so so long as i don't have to present/co-present on something i should be able to swing by | 15:00 |
| lbragstad | felipemonteiro: ok - sounds good | 15:00 |
| lbragstad | if there is a conflict on your end, just let me know and i'll see if i can make adjustments | 15:00 |
| felipemonteiro | reading your schedule | 15:01 |
| lbragstad | but if we're going to talk about the system scope/system role testing bits, it'd be good to have y'all around for that | 15:01 |
| kmalloc | lbragstad: I have to miss Friday of the PTG | 15:01 |
| lbragstad | kmalloc: ack - thank for the heads up | 15:01 |
| lbragstad | right now i'm just planning on doing release recapping on friday | 15:01 |
| kmalloc | And will likely need to leave early Thursday, since I have to be home Thursday night | 15:01 |
| lbragstad | ok - if there is anything you want to have ironed out on friday then just let me know, we can discuss it during the week to | 15:02 |
| lbragstad | too* | 15:02 |
| kmalloc | Sure. | 15:03 |
| lbragstad | unless we need to go over other discussions, i plan to work through the stein schedule and see if we can get the roadmap squared away before we leave denver | 15:03 |
| felipemonteiro | lbragstad: looks like wednesday is free as per schedule if monday doesn't work? should be fine then due to flexibility on both ends | 15:04 |
| lbragstad | felipemonteiro: yeah - i think monday is going to be the cross-project day for us, but we should be able to meet wednesday, too | 15:05 |
| lbragstad | if we need to go through testing stuff specifically | 15:05 |
| lbragstad | kmalloc: you'll be around on monday, right? | 15:07 |
| lbragstad | i'd like to get line 31 written down on paper or a specification https://etherpad.openstack.org/p/keystone-stein-ptg | 15:07 |
| kmalloc | Ya | 15:12 |
| *** r-daneel_ has joined #openstack-keystone | 15:17 | |
| *** r-daneel has quit IRC | 15:17 | |
| *** r-daneel_ is now known as r-daneel | 15:17 | |
| *** rmascena__ is now known as raildo | 15:26 | |
| *** pcaruana has quit IRC | 15:29 | |
| *** markvoelker has quit IRC | 15:36 | |
| knikolla | o/ | 15:44 |
| *** nicolasbock has quit IRC | 15:49 | |
| *** Emine has quit IRC | 16:00 | |
| lbragstad | note regarding the PTG schedule - i'm only going to propose separate etherpads for larger topics | 16:16 |
| lbragstad | otherwise, for relatively light or quick discussions, we can just reuse the schedule etherpad | 16:16 |
| lbragstad | i'm hoping that will help with less jumping around and hunting down links | 16:16 |
| lbragstad | ildikov: do you have an etherpad for keystone specific edge architecture discussions, yet? | 16:20 |
| lbragstad | if so - i can just link to it from our schedule, otherwise i can bootstrap one | 16:20 |
| gagehugo | lbragstad it's not a true PTG if you don't have to click on 3+ etherpad links to get to the current topic :) | 16:23 |
| ildikov | lbragstad: just the overall etherpad for the Edge group | 16:25 |
| lbragstad | ack - created one here https://etherpad.openstack.org/p/keystone-stein-edge-architecture | 16:26 |
| *** pcaruana has joined #openstack-keystone | 16:26 | |
| lbragstad | yeah - following the links can get exhausting if there is only 10 lines in the smaller ones | 16:27 |
| *** itlinux has joined #openstack-keystone | 16:29 | |
| ildikov | lbragstad: thanks, I added the link to the main group etherpad and will move the topics to the specific one | 16:31 |
| *** raildo_ has joined #openstack-keystone | 16:31 | |
| lbragstad | ildikov: sounds good, thanks! | 16:31 |
| ildikov | lbragstad: I agree that separate etherpads are better to capture details | 16:31 |
| *** raildo has quit IRC | 16:32 | |
| *** jlviva-viva is now known as jlvillal | 16:40 | |
| *** raildo_ is now known as raildo | 16:41 | |
| lbragstad | fyi - our specification repository appears to be broken with stestr https://review.openstack.org/#/c/581326/3 | 16:41 |
| *** raildo has quit IRC | 16:48 | |
| *** raildo has joined #openstack-keystone | 16:48 | |
| kmalloc | lbragstad: that is unfortunate | 17:02 |
| *** raildo_ has joined #openstack-keystone | 17:03 | |
| kmalloc | lbragstad: +2 on tht chain | 17:04 |
| *** openstackgerrit has quit IRC | 17:04 | |
| kmalloc | gagehugo: we need to make it a full on hunt to find the correct etherpad. it's the new game ;) | 17:05 |
| *** raildo has quit IRC | 17:05 | |
| *** rmascena__ has joined #openstack-keystone | 17:16 | |
| *** openstackgerrit has joined #openstack-keystone | 17:16 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone-specs master: Repropose JWT specification for Stein https://review.openstack.org/541903 | 17:16 |
| *** raildo has joined #openstack-keystone | 17:18 | |
| *** raildo_ has quit IRC | 17:18 | |
| *** rmascena__ has quit IRC | 17:21 | |
| *** raildo_ has joined #openstack-keystone | 17:22 | |
| *** raildo has quit IRC | 17:23 | |
| *** raildo_ has quit IRC | 17:28 | |
| *** raildo has joined #openstack-keystone | 17:40 | |
| *** r-daneel has quit IRC | 18:04 | |
| *** r-daneel has joined #openstack-keystone | 18:12 | |
| *** gyee has joined #openstack-keystone | 18:27 | |
| *** gyee has quit IRC | 18:28 | |
| *** gyee has joined #openstack-keystone | 18:28 | |
| * kmalloc does the happy-getting-a-new-desk dance. | 18:32 | |
| kmalloc | my current desk(s) are falling apart. | 18:32 |
| kmalloc | somehow i don't think i'll have the same problem with this: | 18:32 |
| kmalloc | https://usercontent.irccloud-cdn.com/file/XKhKy6gt/Desk | 18:32 |
| lbragstad | looks solid | 18:37 |
| lbragstad | you should throw a butcherblock slab on it | 18:41 |
| kmalloc | that is my plan | 18:42 |
| kmalloc | i am probably going to need to buy a 1/4" steel support plate between the two legs too | 18:42 |
| kmalloc | the butcherblock slab i want is only 1.25" thick vs 2" | 18:42 |
| kmalloc | (walnut) | 18:42 |
| openstackgerrit | Merged openstack/keystone-specs master: Switch to stestr https://review.openstack.org/581326 | 18:43 |
| kmalloc | and i worry that center weight will be too much | 18:43 |
| kmalloc | 160lbs cast iron desk. | 18:43 |
| kmalloc | without top ;) | 18:43 |
| lbragstad | yeah, that's heavy... | 18:44 |
| kmalloc | the other option is a hot rolled steel top. | 18:44 |
| kmalloc | well other options: Steel Top, Tile(ed) Slate, Glass (gross no no no), Granite | 18:44 |
| lbragstad | fancy :) | 18:45 |
| kmalloc | ooh, 1/2 steel will only weigh 400lbs :P | 18:48 |
| gagehugo | kmalloc oh my | 18:52 |
| kmalloc | i think a 600-800 lbs desk would damage the floor (even carpet) somewhat. | 18:53 |
| gagehugo | ++ on glass, I can never understand putting anything of value on one | 18:53 |
| kmalloc | glass is gross to keep clean too | 18:53 |
| kmalloc | finger prints... | 18:53 |
| kmalloc | ick | 18:53 |
| gagehugo | glossy plastic desktop | 18:53 |
| kmalloc | even worse :P | 18:53 |
| kmalloc | i know, a 2" sheet of acrylic | 18:53 |
| kmalloc | so it can scratch super easily AND be disgusting with fingerprints | 18:54 |
| gagehugo | \o/ | 18:54 |
| *** itlinux has quit IRC | 18:54 | |
| gagehugo | can it randomly shatter though? | 18:54 |
| kmalloc | yeah, it's acrylic! so you get the benefits of easy to shatter (no tensile strength) too! | 18:55 |
| gagehugo | lol | 18:55 |
| kmalloc | 2-3" thick tempered glass is unlikely to randomly shatter | 18:57 |
| kmalloc | i've dropped 1/2" tempered glass from 3 feet before and it bounced. | 18:57 |
| * gagehugo is always paranoid | 18:57 | |
| kmalloc | but oh god, if 2" glass did go, it would be quite the explosion | 18:57 |
| kmalloc | there is a LOT of energy in 2" tempered glass. | 18:58 |
| kmalloc | maybe i should get "bullet resistent" laminated glass, you know, 4+" thick stuff :P | 18:58 |
| gagehugo | heh | 18:59 |
| gagehugo | that might be a bit heavy | 19:00 |
| *** itlinux has joined #openstack-keystone | 19:11 | |
| *** pcaruana has quit IRC | 19:13 | |
| *** itlinux has quit IRC | 19:16 | |
| mnaser | it looks like identity:change_password was removed | 20:27 |
| mnaser | is there a policy that can know if a user is trying to change their own password (vs update_user) | 20:28 |
| mnaser | https://github.com/openstack/horizon/commit/117ec5ddc286d5894368da20d5c43af6df99807b this commit made horizon start showing the edit user password field even though it doesn't allow the user to edit their password | 20:28 |
| *** nicolasbock has joined #openstack-keystone | 20:30 | |
| *** raildo has quit IRC | 20:32 | |
| mnaser | it does look like there is no policy enforcement on that? | 20:33 |
| lbragstad | i want to say we had to add it back in because someone was trying to prevent users from changing their passwords | 20:34 |
| lbragstad | we have it in a bug report | 20:34 |
| mnaser | i was just wondering so that i know if i should make a commit to horizon to either add that policy change *or* just enforce update_user | 20:34 |
| mnaser | i don't spot anything here https://github.com/openstack/keystone/blob/master/keystone/common/policies/user.py | 20:35 |
| * lbragstad digs for a bug report | 20:38 | |
| lbragstad | this happened in pike https://bugs.launchpad.net/keystone/+bug/1705485 | 20:41 |
| openstack | Launchpad bug 1705485 in OpenStack Identity (keystone) "policy rule identity:change password is no longer needed" [Low,Fix released] - Assigned to Lance Bragstad (lbragstad) | 20:41 |
| lbragstad | but we had something else happen recently related to that, too | 20:43 |
| mnaser | lbragstad: https://review.openstack.org/596890 this should fix up the horizon side of the story then, i think | 20:43 |
| lbragstad | aha - yep | 20:44 |
| lbragstad | https://bugs.launchpad.net/keystone/+bug/1755874 | 20:44 |
| openstack | Launchpad bug 1755874 in OpenStack Identity (keystone) "Ability to block users from changing passwords is missing in Keystone v3" [Undecided,Fix released] - Assigned to Morgan Fainberg (mdrnstm) | 20:44 |
| lbragstad | so - we technically added the ability for an admin to prevent a user from changing their password, but we didn't do it via policy | 20:45 |
| lbragstad | instead we used resource options | 20:45 |
| lbragstad | so yeah, it looks like that policy is dead to horizon | 20:45 |
| *** raildo has joined #openstack-keystone | 20:54 | |
| *** raildo has quit IRC | 20:54 | |
| *** r-daneel_ has joined #openstack-keystone | 20:57 | |
| *** r-daneel has quit IRC | 20:59 | |
| *** r-daneel_ is now known as r-daneel | 20:59 | |
| *** idlemind has joined #openstack-keystone | 21:04 | |
| *** markvoelker has joined #openstack-keystone | 21:04 | |
| *** markvoelker has quit IRC | 21:13 | |
| *** rcernin has joined #openstack-keystone | 21:51 | |
| openstackgerrit | Gage Hugo proposed openstack/keystone master: Add details and clarify examples on casing https://review.openstack.org/590477 | 22:11 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Implement scope_type checking for credentials https://review.openstack.org/594547 | 22:14 |
| kmalloc | mnaser, lbragstad: there is no way to do enforcement on password (self-service) change, so we had to use a resource option | 22:22 |
| kmalloc | mnaser, lbragstad: you don't know what the roles for the user are at that point, and we were unable to craft the magic in a meaningful way with @protected | 22:23 |
| kmalloc | mnaser, lbragstad: with the new RBACEnforcer, it is much much easier to do, that said, still easier to use a resource option flag | 22:23 |
| *** nicolasbock has quit IRC | 22:39 | |
| *** nicolasbock has joined #openstack-keystone | 22:44 | |
| *** nicolasbock has quit IRC | 23:07 | |
| *** r-daneel has quit IRC | 23:08 | |
| *** Tahvok_ has joined #openstack-keystone | 23:24 | |
| *** Tahvok has quit IRC | 23:24 | |
| *** Tahvok_ is now known as Tahvok | 23:24 | |
| openstackgerrit | Merged openstack/keystone-specs master: Repropose capability lists to Stein https://review.openstack.org/594123 | 23:27 |
| *** zul has quit IRC | 23:29 | |
| openstackgerrit | Merged openstack/keystoneauth master: Add Keystone2Keystone example https://review.openstack.org/594156 | 23:35 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!