Friday, 2018-08-31

*** lbragstad has quit IRC00:12
*** lbragstad has joined #openstack-keystone00:14
*** ChanServ sets mode: +o lbragstad00:14
*** harlowja has quit IRC00:34
*** imacdonn has quit IRC01:19
*** imacdonn has joined #openstack-keystone01:19
*** ykarel|away has joined #openstack-keystone01:35
*** Emine has quit IRC01:55
gagehugonice03:05
*** nicolasbock has quit IRC03:33
*** prashkre has joined #openstack-keystone03:53
*** shyamb has joined #openstack-keystone05:12
*** ykarel_ has joined #openstack-keystone05:29
*** ykarel|away has quit IRC05:32
*** ykarel_ is now known as ykarel05:53
*** ykarel_ has joined #openstack-keystone05:55
*** ykarel_ is now known as ykarel|afk05:56
*** ykarel has quit IRC05:58
*** ykarel|afk has quit IRC06:01
*** shyamb has quit IRC06:03
*** shyamb has joined #openstack-keystone06:04
*** prashkre_ has joined #openstack-keystone06:08
*** prashkre has quit IRC06:12
*** josecastroleon has joined #openstack-keystone06:26
*** shyamb has quit IRC06:27
*** shyamb has joined #openstack-keystone06:27
*** nbhosale has joined #openstack-keystone06:29
nbhosaleHello, I am installing keystone inside a container using the  centos-release-openstack-queens rpms ... it installs couple of scripts /usr/bin/keystone-wsgi-public, /usr/bin/keystone-wsgi-admin .. which start the wsgi services for keystone ... but I see message displayed there "DANGER! For testing only, do not use in production" .. are these not really meant for production .. if so is there an alternative available?06:31
*** shyamb has quit IRC06:36
*** nbhosale has quit IRC06:37
*** nbhosale has joined #openstack-keystone06:40
*** shyamb has joined #openstack-keystone06:41
*** prashkre_ has quit IRC06:44
*** prashkre has joined #openstack-keystone06:46
*** prashkre_ has joined #openstack-keystone06:50
*** prashkre has quit IRC06:50
*** rcernin has quit IRC07:00
openstackgerritwangxiyuan proposed openstack/keystone master: Remove member_role_id/name  https://review.openstack.org/59846707:06
*** shyamb has quit IRC07:12
openstackgerritwangxiyuan proposed openstack/keystone master: Convert policy API to flask  https://review.openstack.org/58995007:14
*** shyamb has joined #openstack-keystone07:19
*** pcaruana has joined #openstack-keystone07:19
zioprotokmalloc: still there ?07:27
zioprotokmalloc: I am in the Zurich timezone, I will try to ping you today07:27
zioprotokmalloc: I am using Ocata and UUID tokens. The tokens work when they are fresh, but after two hours randomly happens that tokens fail with 404. They are supposed to be valid 6 hours07:28
zioprotokmalloc: I dont understand how the key_mangling function works. I would like starting from the token UUID to calculate my self the key value in redis to check if the token is actually there07:30
zioprotofor V2 token it is easy because the token UUID is also in the value in redis, so I can scan redis key and find the token I want to check. But for V3 tokens the UUID is not in the value07:31
zioprotoNow I am testing a workaround where the redis key TTL is double of the keystone token lifetime, and it seems to work07:31
*** shyamb has quit IRC07:55
*** chaconpiza has quit IRC08:36
*** ykarel has joined #openstack-keystone08:43
openstackgerritwangxiyuan proposed openstack/keystone master: Remove member_role_id/name  https://review.openstack.org/59846708:46
*** chaconpiza has joined #openstack-keystone08:49
*** shyamb has joined #openstack-keystone08:51
*** gmann has quit IRC09:27
*** ykarel is now known as ykarel|lunch09:33
*** shyamb has quit IRC09:37
*** gmann has joined #openstack-keystone09:43
*** bzhao__ has joined #openstack-keystone09:53
-openstackstatus- NOTICE: Jobs using devstack-gate (legacy devstack jobs) have been failing due to an ara update. We use now a newer ansible version, it's safe to recheck if you see "ImportError: No module named manager" in the logs.09:57
*** ykarel|lunch is now known as ykarel09:58
*** shyamb has joined #openstack-keystone10:05
*** shyamb has quit IRC10:23
*** shyamb has joined #openstack-keystone10:23
*** nicolasbock has joined #openstack-keystone10:33
*** dave-mccowan has joined #openstack-keystone10:34
*** ykarel_ has joined #openstack-keystone10:52
*** ykarel has quit IRC10:53
*** shyamb has quit IRC10:57
*** ykarel_ is now known as ykarel|afk11:12
*** ykarel|afk has quit IRC11:17
*** shyamb has joined #openstack-keystone11:33
*** ykarel has joined #openstack-keystone11:40
*** josecastroleon has quit IRC11:47
*** raildo has joined #openstack-keystone12:06
*** shyamb has quit IRC12:08
*** shyamb has joined #openstack-keystone12:08
zioprotokmalloc: ping ?12:24
*** shyamb has quit IRC12:41
*** lbragstad is now known as elbragstad13:37
elbragstadmornin'13:37
zioprotoI am still troubleshooting keystone+redis backend in Ocata13:50
zioprotoanyone has this setup in production ?13:50
zioprotoI would like to figure out how the key in redis is computed. I figured out it is sha1 digest, but I cant understand what is give as input to sha113:51
*** prashkre_ has quit IRC13:57
*** prashkre has joined #openstack-keystone13:59
knikollao/14:12
knikollayay rocky is out14:12
elbragstadzioproto i believe we removed that code a while ago - what release are you running?14:16
elbragstadknikolla time to do it all over again ;)14:17
*** prashkre has quit IRC14:18
*** ykarel is now known as ykarel|away14:26
*** zzzeek has quit IRC14:33
*** zzzeek has joined #openstack-keystone14:34
*** zzzeek has quit IRC14:40
*** zzzeek has joined #openstack-keystone14:42
*** jaosorior has quit IRC14:43
*** zzzeek has quit IRC14:46
*** zzzeek has joined #openstack-keystone14:47
elbragstadgagehugo fyi - https://review.openstack.org/#/c/598990/ should fix ksa stable/pike14:56
elbragstadand https://review.openstack.org/#/c/598346/ is a formal cherry pick of ^14:58
elbragstadwhich should take care of stable/ocata14:58
gagehugoelbragstad nice!15:00
elbragstadwe need to fix up ksm, too?15:01
elbragstadi'm looking at master and tools/tox_install.sh is still there15:01
gagehugoyes15:01
gagehugoI think doug's ocata patch is failing with the same thing15:01
elbragstadlooks like it http://logs.openstack.org/77/597677/1/check/build-openstack-sphinx-docs/d20dc90/job-output.txt.gz#_2018-08-30_16_24_02_99117315:02
*** ykarel|away has quit IRC15:08
gagehugoyup :(15:10
elbragstadi suppose we should just remove that from master and backport it all the way15:15
openstackgerritLance Bragstad proposed openstack/keystonemiddleware master: Remove tox_install.sh  https://review.openstack.org/59900315:24
elbragstadgagehugo ^ let's see if that blows up...15:24
elbragstadi think the version of oslo_messaging is going to need to be adjusted as we backport it though15:24
gagehugohmm15:25
*** pcaruana has quit IRC15:26
*** jlvillal is now known as jlvilla-viva15:30
*** nbhosale has quit IRC15:33
elbragstadhttps://review.openstack.org/#/c/599010/15:36
elbragstadhttps://review.openstack.org/#/c/599008/15:36
elbragstadhttps://review.openstack.org/#/c/599006/15:36
elbragstadhttps://review.openstack.org/#/c/599005/15:36
elbragstadlet's see what happens with those15:36
openstackgerritLance Bragstad proposed openstack/keystone-specs master: Run python 3.6  https://review.openstack.org/59901715:57
* knikolla thinking of running for the tc.15:58
*** r-daneel has joined #openstack-keystone16:01
openstackgerritLance Bragstad proposed openstack/keystone-specs master: Run python 3.6  https://review.openstack.org/59901716:02
*** openstackgerrit has quit IRC16:06
gagehugoknikolla go for it!16:32
*** r-daneel has quit IRC16:38
*** r-daneel has joined #openstack-keystone16:38
*** hoonetorg has joined #openstack-keystone17:06
*** raildo has quit IRC17:07
*** raildo has joined #openstack-keystone17:08
*** orange_julius has joined #openstack-keystone17:15
orange_juliusThis isn't the correct place for this question but I'm going to ask it nonetheless. What do you guys use for developing on / testing openstack? I've been trying to use DevStack to confirm a bugfix for Newton but apparently the devstack guys aren't merging anything back into Newton because its CI doesn't work. And now with newer version of PIP and o17:17
orange_juliusther things I can't even get devstack to deploy with Newton. So my question is this: What are you guys using to develop / test on Openstack?17:17
*** orange_julius has quit IRC17:18
*** orange_julius has joined #openstack-keystone17:26
*** orange_julius has quit IRC17:28
*** orange_julius has joined #openstack-keystone17:32
gagehugoorange_julius I've been using containerized deployment more than devstack, but I haven't had to test anything older than ocata for a while17:42
elbragstadorange_julius if i have to test something that old i usually just grab a copy of keystone source and install it into a venv17:44
elbragstadand forego using devstack17:44
orange_juliusAlright thanks. I17:51
*** prashkre has joined #openstack-keystone18:13
*** raildo has quit IRC18:23
*** openstackstatus has quit IRC18:58
*** raildo has joined #openstack-keystone19:05
kmallocelbragstad: hmm19:26
kmallocelbragstad: ++ yeah19:27
kmallocelbragstad: i am working on respinning the groups patch and rebasing the rest of the stack today19:32
elbragstadcool19:32
kmallocelbragstad: i might even take a stab at users or projects since gagehugo is doing domains19:32
elbragstadyeah - that'd be good19:33
kmallocauth is daunting19:33
kmallocjust so many bits and peices to move19:33
elbragstadas soon as you have something up for projects i'm going to attempt to fix https://bugs.launchpad.net/keystone/+bug/175066019:33
openstackLaunchpad bug 1750660 in OpenStack Identity (keystone) "The v3 project API should account for different scopes" [High,Triaged]19:33
kmallocah19:33
kmallocso, i'll make that the prio after i respin the current stack19:34
kmallocelbragstad: this needs eyes: https://review.openstack.org/#/c/591082/19:34
elbragstadok19:34
*** openstackstatus has joined #openstack-keystone19:38
*** ChanServ sets mode: +v openstackstatus19:38
kmallocelbragstad: target[group] = <get_group>19:45
kmallocis correct, (groups patch)19:45
kmallocsee https://review.openstack.org/#/c/591147/9/keystone/identity/controllers.py@a5019:45
kmallocit builds ref['group']19:45
kmallocso, if i were to change that we break current behavior19:45
kmallocsecond, target may have multiple entities in it19:46
kmallocso it is important to always have target.<entity_type, e.g group>.<attr>19:46
elbragstadok19:47
elbragstadi'll leave a comment on my credentials patch19:47
elbragstadthat'll need to be fixed19:47
kmalloc++19:49
*** openstackstatus has quit IRC19:55
*** openstackstatus has joined #openstack-keystone19:58
*** ChanServ sets mode: +v openstackstatus19:58
elbragstaddid something happen in pike where ostestr proxies to stestr or something?20:03
*** itlinux has joined #openstack-keystone20:04
elbragstadbecause the *same* exact patch passes on ksa stable/ocata but not stable/pike20:04
elbragstadhttps://review.openstack.org/#/c/598346/20:04
elbragstadand https://review.openstack.org/#/c/598990/20:04
elbragstadlooks like stable/ocata uses 0.8.020:06
elbragstadstable/pike uses 1.0.020:07
elbragstadbah https://docs.openstack.org/os-testr/latest/user/history.html#id120:09
*** openstackstatus has quit IRC20:11
*** openstackstatus has joined #openstack-keystone20:12
*** ChanServ sets mode: +v openstackstatus20:12
*** nicolasbock has quit IRC20:16
elbragstadwe're either going to have to port ksa stable/pike to use stestr or pin os-testr to a version less than 1.0.020:16
elbragstad(the later feels safer)20:16
*** itlinux has quit IRC20:16
*** itlinux has joined #openstack-keystone20:28
*** niceplace has joined #openstack-keystone20:32
*** openstackstatus has quit IRC20:36
*** raildo has quit IRC20:37
*** openstackstatus has joined #openstack-keystone20:37
*** ChanServ sets mode: +v openstackstatus20:37
*** itlinux has quit IRC20:44
*** harlowja has joined #openstack-keystone20:46
*** imacdonn has quit IRC20:48
kmalloceh20:52
kmallocno idea20:52
elbragstadhttps://review.openstack.org/#/c/598990/20:54
elbragstadfixed20:54
elbragstadhopefully20:54
elbragstadjust going to include stestr support and call it a day20:54
*** cmurphy|vacation is now known as cmurphy20:58
*** imacdonn has joined #openstack-keystone21:01
kmallocelbragstad: running local tests for groups, then rebase storm21:10
kmallocelbragstad: and then will fix OS-INHERIT21:10
elbragstadok21:10
elbragstadgo for it21:11
elbragstadnot sure i'll be able to promise a review today :(21:11
*** raildo has joined #openstack-keystone21:12
elbragstadhopefully the check and gate queues will catch up over the weekend though21:12
*** raildo has quit IRC21:13
kmalloc++21:40
kmallocah my stack was somehow made a bit wonky.... oops21:40
kmallocelbragstad: sending you a msg21:41
*** arunkant has joined #openstack-keystone21:55
*** arunkant has quit IRC21:57
*** arunkant has joined #openstack-keystone21:59
elbragstadkmalloc ack22:01
elbragstadi'm about to head out for the weekend - have a fantastic labor day everyone22:01
kmallocok i think i see what is going on here.22:02
kmallocweird.22:02
*** elbragstad has quit IRC22:02
*** arunkant has quit IRC22:03
*** arunkant has joined #openstack-keystone22:05
*** itlinux has joined #openstack-keystone22:11
*** arunkant has quit IRC22:17
*** harlowja has quit IRC22:24
*** itlinux has quit IRC22:34
*** markvoelker has joined #openstack-keystone22:40
*** jrist has quit IRC22:58
*** lamt has joined #openstack-keystone23:22
*** r-daneel has quit IRC23:36

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!