Tuesday, 2018-08-28

« Monday, 2018-08-27 Index Wednesday, 2018-08-29 »
*** gyee has quit IRC00:02
*** itlinux has joined #openstack-keystone00:59
*** orange_julius has quit IRC01:03
*** imacdonn has quit IRC01:18
*** imacdonn has joined #openstack-keystone01:18
*** Dinesh_Bhor has joined #openstack-keystone01:23
*** felipemonteiro has quit IRC01:24
openstackgerritwangxiyuan proposed openstack/oslo.limit master: Add limit check func  https://review.openstack.org/59652002:13
openstackgerritMerged openstack/keystone-specs master: Move MFA receipt specification to Stein  https://review.openstack.org/59412902:24
openstackgerritVishakha Agarwal proposed openstack/python-keystoneclient master: create() call in v3.regions.py is wrong  https://review.openstack.org/59492103:10
*** sapd1 has quit IRC03:16
*** Dinesh_Bhor has quit IRC03:46
openstackgerritwangxiyuan proposed openstack/oslo.limit master: Add limit check func  https://review.openstack.org/59652004:03
openstackgerritVishakha Agarwal proposed openstack/keystone master: Use items() instead of iteritems()  https://review.openstack.org/59492904:26
*** Dinesh_Bhor has joined #openstack-keystone04:36
*** fiddletwix has quit IRC05:06
*** ykarel has joined #openstack-keystone06:01
ykarelHi i am seeing a strange error with python3 + keystonemiddleware and oslo.config >= 6.3.0, detected in glance. Don't know if it's already known, i reported https://bugs.launchpad.net/keystonemiddleware/+bug/178935106:04
openstackLaunchpad bug 1789351 in oslo.config "Glance deployment with python3 + "keystone" paste_deploy flavor Fails" [Undecided,New]06:04
ykarellarsks, any idea ^^06:05
openstackgerritVishakha Agarwal proposed openstack/keystone master: Incorrect use of translation _()  https://review.openstack.org/59668306:33
*** Dinesh_Bhor has quit IRC06:39
*** pcaruana has joined #openstack-keystone06:39
*** Dinesh_Bhor has joined #openstack-keystone07:01
*** rcernin has quit IRC07:02
*** dims has quit IRC07:08
*** dims has joined #openstack-keystone07:10
*** sapd1 has joined #openstack-keystone07:33
*** andymccr has joined #openstack-keystone07:35
*** ykarel is now known as ykarel|lunch07:43
*** josecastroleon has joined #openstack-keystone08:30
*** Dinesh_Bhor has quit IRC08:38
*** ykarel|lunch is now known as ykarel08:40
wxy-xiyuanykarel: hi, still online?08:51
ykarelwxy-xiyuan, yes i am here08:52
wxy-xiyuanI tried locally, can't reproduce. But your patch shows that devstack failed. it's a little strange.08:52
ykarelwxy-xiyuan, u used USE_PYTHON=3?08:53
wxy-xiyuan year, /usr/bin/python3.5 /usr/local/bin/glance-api --config-file=/etc/glance/glance-api.conf08:53
ykarelwxy-xiyuan, and u set flavor=keystone?08:54
wxy-xiyuanand ykarel year08:55
wxy-xiyuanand oslo.config is 6.4.008:55
wxy-xiyuanI wonder how "if self._conf.oslo_conf_obj != cfg.CONF" could raise ERROR: dictionary changed size during iteration08:56
wxy-xiyuanykarel: could you say more here about your debug?08:56
ykarelwxy-xiyuan, yes it's raising,08:56
ykarelwxy-xiyuan, can u share ur local.conf? how u reproduced08:57
ykarelwxy-xiyuan, just above that line, import pdb;pdb.set_trace()08:57
ykareland then any comparison with cfg.CONF, like cfg.CONF == cfg.CONF, returns that Error08:58
ykareland if u see len(cfg.CONF.keys()) before and after it differs08:58
*** Dinesh_Bhor has joined #openstack-keystone08:59
*** rcernin has joined #openstack-keystone08:59
wxy-xiyuanykarel: I just start glance-api by hand in py3.5 with oslo.config==6.4.0 and flavor=keystone. I did not reinstall devstack.09:00
wxy-xiyuanykarel: glance and keystonemiddleware are both on master branch.09:01
openstackgerritVishakha Agarwal proposed openstack/keystone master: Incorrect use of translation _()  https://review.openstack.org/59668309:02
ykarelwxy-xiyuan, can u try installing glance with py3 in venv09:02
wxy-xiyuanykarel: let me try again.09:03
ykarelwxy-xiyuan, ack09:03
wxy-xiyuanykarel: BTW, does this work in your env http://paste.openstack.org/show/728908/ or it will raise the error?09:04
ykarelwxy-xiyuan, it works09:06
ykarelthe error i mentioned happens with the scenario i mentioned in bug09:07
wxy-xiyuanykarel: ok09:07
wxy-xiyuanykarel: still the same with venv. I'll download your devstack patch and re-install it locally to see what happend09:13
*** takamatsu has joined #openstack-keystone09:15
ykarelwxy-xiyuan, ack, btw local.conf and the steps that i used to get it locally:- http://paste.openstack.org/show/728909/09:19
ykarelwxy-xiyuan, let me know if u are able to reproduce09:19
ykarelif not i can try again09:19
*** hoonetorg has quit IRC09:20
*** rcernin has quit IRC09:47
*** Emine has joined #openstack-keystone09:47
*** Emine has quit IRC10:05
*** Emine has joined #openstack-keystone10:10
*** Emine has quit IRC10:14
*** Emine has joined #openstack-keystone10:14
*** zul has joined #openstack-keystone10:19
*** nicolasbock has joined #openstack-keystone10:20
*** Dinesh_Bhor has quit IRC10:23
*** Dinesh_Bhor has joined #openstack-keystone10:27
*** sapd1 has quit IRC10:51
*** Dinesh_Bhor has quit IRC11:09
*** Dinesh_Bhor has joined #openstack-keystone11:21
*** Dinesh_Bhor has quit IRC11:24
*** ducnv has joined #openstack-keystone11:29
*** szaher has joined #openstack-keystone11:46
ducnvHi folks, in [keystone_authtoken] section I see some options have been configured as 'project_domain_name = Default', 'user_domain_name = Default' (https://docs.openstack.org/glance/queens/install/install-ubuntu.html#install-and-configure-components)12:06
ducnvBut I didn't see them in `glance-api.conf` sample file12:07
ducnvhttps://github.com/openstack/glance/blob/master/etc/glance-api.conf12:07
ducnvWho can tell me these options belong to which namespace?12:07
ducnvThanks in advance.12:07
*** raildo has joined #openstack-keystone12:08
*** Emine has quit IRC12:17
*** Emine has joined #openstack-keystone12:21
wxy-xiyuanducnv: these kind of options are registered dynamically into [keystone_authtoken] in when a service start, base on which auth_type the service using.12:32
wxy-xiyuanducnv: they are from keystoneauth lib. for example: https://github.com/openstack/keystoneauth/blob/ebe781a3ea0386d6ff088a84e8dde26e538b856d/keystoneauth1/loading/identity.py#L13612:32
wxy-xiyuanducnv: so "list_opts" does not contain them.12:32
wxy-xiyuanykarel: have to leave now. my devstack env hit some problem. I'll keep looking this bug tomorrow12:37
ykarelwxy-xiyuan, okk, let me know in case of any issue, Thanks12:38
ducnvwxy-xiyuan, yes I got it, thanks a lot.12:52
*** Emine has quit IRC13:16
*** Emine has joined #openstack-keystone13:40
*** itlinux has quit IRC14:12
lbragstadam i unrealistic for making the policy deprecation cycle one release (e.g. change the default policy in N and remove the deprecated one in N+1)?14:17
gagehugohmm14:23
*** pcaruana has quit IRC14:29
*** pcaruana has joined #openstack-keystone14:30
*** r-daneel has joined #openstack-keystone14:39
*** dolly has joined #openstack-keystone14:43
dollyWhen using 'openstack application credential list --debug' I see, 1 ) https://cloud.internal:13000 "POST /v3/auth/tokens HTTP/1.1" 201 10384 containing the token and the whole catalog, 2 ) REQ: curl -g -i -X GET https://cloud.internal:35357 -H "Accept: application/json" -H "User-Agent: openstacksdk/0.17.2 keystoneauth1/3.10.0 python-requests/2.19.1 CPython/2.7.15"14:44
dollyWhy does the second request go to the admin endpoint ?14:44
dollyWe don't have that available to our users.14:44
dollyUsing Queens14:45
*** markvoelker has joined #openstack-keystone14:45
larsksdolly: if you specify '--os-interface public' does it use the correct endpoint?14:48
*** fiddletwix has joined #openstack-keystone14:48
*** fiddletwix has quit IRC14:49
*** markvoelker has quit IRC14:49
*** fiddletwix has joined #openstack-keystone14:50
dollylarsks, yes that seem to work!14:50
lbragstaddolly: oh - nice... sorry i missed the ping in -dev14:52
lbragstadi assume https://cloud.internal:35357 is listed as an admin endpoint in your catalog?14:53
dollyyes exactly14:53
dollyNot sure why it would grab the admin endpoint url though ?14:55
*** Martin_Ch has quit IRC14:55
*** nicolasbock has quit IRC14:56
*** nicolasbock has joined #openstack-keystone14:59
larsksdolly: you can the OS_INTERFACE environment variable to avoid setting that on the command line all the time.15:00
*** pcaruana has quit IRC15:00
dollylarsks, ok, I understand. Still curious though why I get the admin endpoint back ? same with openstack roles command ?15:00
larsksNot sure about that. I've noticed that some commands just seem to prefer the admin endpoint.15:01
dollySeems a bit like a bug to me.. But yea, setting that env works so =)15:03
*** jroll has quit IRC15:05
*** jroll has joined #openstack-keystone15:06
*** itlinux has joined #openstack-keystone15:07
lbragstadit's likely left over from when the v2.0 api was in use15:15
lbragstadv3 isn't deployed using two separate applications, so the concept of an admin and public endpoint for v3 is kind of moot15:16
lbragstadis this rendering in chinese for anyone else? https://etherpad.openstack.org/p/keystone-weekly-meeting15:16
gagehugolbragstad lol yup15:17
lbragstadlooking at the timeline it looks like it changed yesterday?15:18
*** ykarel is now known as ykarel|away15:19
gagehugothat's what I see15:20
gagehugoTIL what my last name in simplified chinese looks like15:22
*** ducnv_ has joined #openstack-keystone15:23
*** wxy| has joined #openstack-keystone15:24
*** gyee has joined #openstack-keystone15:27
*** david-lyle has quit IRC15:33
*** ducnv_ has quit IRC15:33
*** ducnv_ has joined #openstack-keystone15:33
*** dklyle has joined #openstack-keystone15:34
*** ykarel|away has quit IRC15:36
*** ykarel|away has joined #openstack-keystone15:37
openstackgerritMerged openstack/keystone master: Add details and clarify examples on casing  https://review.openstack.org/59047715:38
*** jhesketh has quit IRC15:41
*** jhesketh has joined #openstack-keystone15:41
*** jistr is now known as jistr|call15:42
*** ykarel|away has quit IRC15:42
*** jistr|call is now known as jistr15:43
*** hrybacki has joined #openstack-keystone16:01
*** Emine has quit IRC16:02
*** raildo has quit IRC16:03
*** dave-mccowan has joined #openstack-keystone16:12
*** raildo has joined #openstack-keystone16:13
*** raildo has quit IRC16:15
*** raildo has joined #openstack-keystone16:16
openstackgerritMerged openstack/keystonemiddleware master: Handle DiscoveryFailure errors  https://review.openstack.org/57521416:21
*** raildo has quit IRC16:23
*** raildo has joined #openstack-keystone16:23
kmallocgagehugo: +2/+A https://review.openstack.org/#/c/596973/16:29
gagehugokmalloc ty16:29
kmallocmordred: https://review.openstack.org/#/c/595980/ if there is no other way, i'll +2.16:30
*** wxy| has quit IRC16:35
lbragstad#startmeeting keystone-office-hours17:08
openstackMeeting started Tue Aug 28 17:08:15 2018 UTC and is due to finish in 60 minutes.  The chair is lbragstad. Information about MeetBot at http://wiki.debian.org/MeetBot.17:08
openstackUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.17:08
*** openstack changes topic to " (Meeting topic: keystone-office-hours)"17:08
*** ChanServ changes topic to "Rocky release schedule: https://releases.openstack.org/rocky/schedule.html | Meeting agenda: https://etherpad.openstack.org/p/keystone-weekly-meeting | Bugs that need triaging: http://bit.ly/2iJuN1h | Trello: https://trello.com/b/wmyzbFq5/keystone-rocky-roadmap !!NOTE!! This Channel is Logged ( https://tinyurl.com/OpenStackKeystone )"17:08
openstackThe meeting name has been set to 'keystone_office_hours'17:08
openstackgerritLance Bragstad proposed openstack/keystone master: Implement scope_type checking for credentials  https://review.openstack.org/59454717:13
openstackgerritLance Bragstad proposed openstack/keystone master: Loosen the assertion for logging scope type warnings  https://review.openstack.org/59718617:13
openstackgerritLance Bragstad proposed openstack/keystone master: Remove obsolete credential policies  https://review.openstack.org/59718717:13
lbragstadok - that *is* going to pass this time17:13
* lbragstad attempts jedi mind tricks on zuul17:13
*** ducnv_ has quit IRC17:18
*** raildo has quit IRC17:35
*** raildo has joined #openstack-keystone17:38
*** raildo_ has joined #openstack-keystone17:42
*** raildo has quit IRC17:45
*** raildo_ is now known as raildo17:46
openstackgerritAndreas Jaeger proposed openstack/keystone master: import zuul job settings from project-config  https://review.openstack.org/59444017:51
*** markvoelker has joined #openstack-keystone17:51
*** r-daneel_ has joined #openstack-keystone17:53
*** r-daneel has quit IRC17:53
*** r-daneel_ is now known as r-daneel17:53
openstackgerritAndreas Jaeger proposed openstack/keystone-tempest-plugin master: import zuul job settings from project-config  https://review.openstack.org/59445817:55
*** r-daneel_ has joined #openstack-keystone18:31
*** r-daneel has quit IRC18:32
*** r-daneel_ is now known as r-daneel18:32
*** markvoelker has quit IRC18:32
*** markvoelker has joined #openstack-keystone18:33
*** dave-mccowan has quit IRC18:36
*** markvoelker has quit IRC18:37
*** dave-mccowan has joined #openstack-keystone18:45
lbragstadkmalloc: i've worked through all the flask changes, including groups and federation19:07
openstackgerritsonu proposed openstack/keystone master: Drop support for ephemeral  user type  https://review.openstack.org/57070619:07
*** markvoelker has joined #openstack-keystone19:19
*** hoonetorg has joined #openstack-keystone19:22
*** hoonetorg has quit IRC19:24
*** dave-mccowan has quit IRC19:26
gagehugokmalloc the domain config plumbing is "interesting"19:35
kmallocgagehugo: yeah :(19:40
kmalloclbragstad: thnx19:41
ildikovlbragstad: hi, are you around?19:52
lbragstadildikov: i am19:52
lbragstadwhat's up?19:52
ildikovwe did a little planning with the Edge Group today for the PTG and were wondering whether we could have the Keystone session on Tuesday 10am - 11:45am?19:53
ildikovwe have a generic requirements topic that would make sense to discuss first19:54
ildikovand people also felt that 2 hours 45 minutes would be a little long19:54
ildikovcould that work for the Keystone team or it would mess up your agenda too much?19:55
*** raildo has quit IRC20:05
ildikovlbragstad: ^^20:07
* lbragstad checks20:08
lbragstadildikov: yeah - that won't be a problem20:09
lbragstadthe time slots are pretty generic and we break them down once we're happy with the overall grouping of topics20:09
ildikovlbragstad: cool, sounds good20:10
lbragstadildikov: is anyone from that particular group interested in the full-fledged idp discussions?20:10
lbragstador was the time assessment only considering the "identity & edge architecture" bullets20:11
ildikovlbragstad: identity & edge at this point20:13
lbragstadack20:13
lbragstadi'll bump the second topic to 9 am then - just to make sure we slot the entire time slice for edge stuff20:13
ildikovcan give a heads up on the edge MLs once the schedule is roughly set20:13
lbragstadsounds good20:13
ildikovthis is how ours looks like right now: https://etherpad.openstack.org/p/EdgeComputingGroupPTG420:13
lbragstadcc knikolla ^20:14
knikollaawesome, bookmarking20:15
ildikovlbragstad: thanks for being so flexible!20:15
lbragstadno problem - thanks for keeping in touch about your schedule20:16
gagehugokmalloc what about grants?20:18
gagehugohttps://github.com/openstack/keystone/blob/master/keystone/assignment/routers.py#L10020:18
*** itlinux has quit IRC20:31
*** markvoelker has quit IRC21:05
*** hoonetorg has joined #openstack-keystone21:36
kmallocgagehugo: yep, you need to port all of the apis that start with /domains21:44
*** rcernin has joined #openstack-keystone21:46
kmallocgagehugo: its what makes these not a ton of fun.21:50
*** mchlumsky has quit IRC21:58
lbragstad#endmeeting22:06
*** openstack changes topic to "Rocky release schedule: https://releases.openstack.org/rocky/schedule.html | Meeting agenda: https://etherpad.openstack.org/p/keystone-weekly-meeting | Bugs that need triaging: http://bit.ly/2iJuN1h | Trello: https://trello.com/b/wmyzbFq5/keystone-rocky-roadmap !!NOTE!! This Channel is Logged ( https://tinyurl.com/OpenStackKeystone )"22:06
openstackMeeting ended Tue Aug 28 22:06:22 2018 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)22:06
openstackMinutes:        http://eavesdrop.openstack.org/meetings/keystone_office_hours/2018/keystone_office_hours.2018-08-28-17.08.html22:06
openstackMinutes (text): http://eavesdrop.openstack.org/meetings/keystone_office_hours/2018/keystone_office_hours.2018-08-28-17.08.txt22:06
openstackLog:            http://eavesdrop.openstack.org/meetings/keystone_office_hours/2018/keystone_office_hours.2018-08-28-17.08.log.html22:06
*** r-daneel has quit IRC23:10
gagehugokmalloc ack23:33
*** itlinux has joined #openstack-keystone23:53
*** threestrands has joined #openstack-keystone23:54
« Monday, 2018-08-27 Index Wednesday, 2018-08-29 »

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!