| *** gyee has quit IRC | 00:58 | |
| *** Dinesh_Bhor has joined #openstack-keystone | 01:39 | |
| *** Dinesh_Bhor has quit IRC | 01:43 | |
| *** Dinesh_Bhor has joined #openstack-keystone | 02:01 | |
| *** mhen has quit IRC | 02:26 | |
| *** sapd1_ has joined #openstack-keystone | 02:27 | |
| *** sapd1 has quit IRC | 02:29 | |
| *** mhen has joined #openstack-keystone | 02:30 | |
| *** dave-mccowan has joined #openstack-keystone | 02:38 | |
| *** itlinux has joined #openstack-keystone | 02:40 | |
| *** lbragstad has joined #openstack-keystone | 03:50 | |
| *** ChanServ sets mode: +o lbragstad | 03:50 | |
| *** lbragstad has quit IRC | 03:51 | |
| *** Dinesh_Bhor has quit IRC | 03:52 | |
| *** dave-mccowan has quit IRC | 04:03 | |
| *** lbragstad has joined #openstack-keystone | 04:13 | |
| *** ChanServ sets mode: +o lbragstad | 04:13 | |
| *** Dinesh_Bhor has joined #openstack-keystone | 04:14 | |
| itlinux | hello guys I have a heat templates and I have OS::Keystone::GroupRoleAssignment and if I set this to one group at _member_ and then add a second for a diff group for the admin groups I get a neutron error.. can someone suggest anything? http://pastebin.mattei.co/index.php/view/3c9fa65e thanks | 04:43 |
|---|---|---|
| *** Dinesh_Bhor has quit IRC | 05:01 | |
| *** markvoelker has joined #openstack-keystone | 05:04 | |
| *** Dinesh_Bhor has joined #openstack-keystone | 05:23 | |
| *** dklyle has joined #openstack-keystone | 05:38 | |
| wxy-xiyuan | itlinux: A neutron error? What's that | 06:26 |
| *** ska has quit IRC | 06:53 | |
| *** rcernin has quit IRC | 07:03 | |
| *** ska has joined #openstack-keystone | 07:06 | |
| *** pcaruana has joined #openstack-keystone | 07:12 | |
| *** markvoelker has quit IRC | 07:45 | |
| *** Dinesh_Bhor has quit IRC | 07:48 | |
| *** amoralej|off is now known as amoralej | 08:02 | |
| *** markvoelker has joined #openstack-keystone | 08:16 | |
| *** imacdonn has quit IRC | 08:24 | |
| *** imacdonn has joined #openstack-keystone | 08:24 | |
| *** Dinesh_Bhor has joined #openstack-keystone | 08:33 | |
| openstackgerrit | Colleen Murphy proposed openstack/keystone-specs master: Add spec for immutable roles https://review.openstack.org/624692 | 08:42 |
| openstackgerrit | Merged openstack/keystone master: Add irrelevant-files for grenade-py3 jobs https://review.openstack.org/624988 | 08:44 |
| openstackgerrit | Merged openstack/keystone master: Split trusts docs between admin and user guide https://review.openstack.org/624622 | 08:45 |
| openstackgerrit | Colleen Murphy proposed openstack/keystone master: Consolidate service catalog docs https://review.openstack.org/624673 | 08:58 |
| openstackgerrit | Colleen Murphy proposed openstack/keystone master: Reorganize admin guide https://review.openstack.org/624972 | 08:58 |
| *** Emine has joined #openstack-keystone | 09:05 | |
| openstackgerrit | Colleen Murphy proposed openstack/keystone master: Reorganize admin guide https://review.openstack.org/624972 | 09:08 |
| openstackgerrit | Merged openstack/keystone master: Consolidate service catalog docs https://review.openstack.org/624673 | 09:21 |
| *** Dinesh_Bhor has quit IRC | 09:46 | |
| *** shrasool has joined #openstack-keystone | 10:15 | |
| openstackgerrit | Colleen Murphy proposed openstack/keystone-specs master: Add spec for immutable roles https://review.openstack.org/624692 | 10:25 |
| openstackgerrit | Merged openstack/keystone-specs master: Add domain level limit support https://review.openstack.org/599491 | 10:28 |
| openstackgerrit | Colleen Murphy proposed openstack/keystone master: Remove i18n.enable_lazy() translation https://review.openstack.org/617892 | 10:30 |
| *** Dinesh_Bhor has joined #openstack-keystone | 10:35 | |
| *** markvoelker has quit IRC | 10:36 | |
| *** Dinesh_Bhor has quit IRC | 10:36 | |
| *** markvoelker has joined #openstack-keystone | 10:37 | |
| *** markvoelker has quit IRC | 10:41 | |
| openstackgerrit | Merged openstack/keystone-specs master: Delete the duplicate words in multi-backend-uuids.rst https://review.openstack.org/617607 | 10:42 |
| openstackgerrit | Moisés Guimarães de Medeiros proposed openstack/oslo.policy master: WIP: Use oslo.config instead of argparse. https://review.openstack.org/625038 | 10:51 |
| openstackgerrit | Moisés Guimarães de Medeiros proposed openstack/oslo.policy master: Use oslo.config instead of argparse. https://review.openstack.org/625038 | 10:55 |
| *** shrasool has quit IRC | 11:16 | |
| *** markvoelker has joined #openstack-keystone | 11:16 | |
| openstackgerrit | Moisés Guimarães de Medeiros proposed openstack/oslo.policy master: Add ability for policy-checker to read configuration https://review.openstack.org/616659 | 11:27 |
| openstackgerrit | Moisés Guimarães de Medeiros proposed openstack/oslo.policy master: Add ability for policy-checker to read configuration https://review.openstack.org/616659 | 11:46 |
| *** raildo has joined #openstack-keystone | 11:50 | |
| *** pcaruana has quit IRC | 12:21 | |
| *** pcaruana has joined #openstack-keystone | 12:22 | |
| *** pcaruana is now known as pcaruana|intw| | 12:25 | |
| openstackgerrit | Colleen Murphy proposed openstack/keystone-specs master: Add spec for immutable roles https://review.openstack.org/624692 | 12:25 |
| *** erus has quit IRC | 13:02 | |
| *** erus has joined #openstack-keystone | 13:05 | |
| *** dave-mccowan has joined #openstack-keystone | 13:09 | |
| *** dave-mccowan has quit IRC | 13:15 | |
| *** imus has joined #openstack-keystone | 13:22 | |
| *** amoralej is now known as amoralej|lunch | 13:54 | |
| *** pcaruana|intw| has quit IRC | 14:05 | |
| *** Emine has quit IRC | 14:16 | |
| openstackgerrit | Merged openstack/keystone master: Remove i18n.enable_lazy() translation https://review.openstack.org/617892 | 14:17 |
| *** pcaruana has joined #openstack-keystone | 14:31 | |
| *** dave-mccowan has joined #openstack-keystone | 14:32 | |
| *** dave-mccowan has quit IRC | 14:43 | |
| lbragstad | imho - this is probably one of the best ways to start a friday | 14:47 |
| lbragstad | https://review.openstack.org/#/c/585037/ | 14:47 |
| cmurphy | nice | 14:48 |
| *** jmlowe has quit IRC | 14:48 | |
| kmalloc | ++ | 14:49 |
| *** amoralej|lunch is now known as amoralej | 14:53 | |
| cmurphy | kmalloc: o | 14:55 |
| cmurphy | kmalloc: o/ | 14:55 |
| cmurphy | we just use blueprints as a pointer to the spec | 14:55 |
| cmurphy | it doesn't matter if someone messes with it, that's not where the content is | 14:56 |
| kmalloc | so... we're creating a pointer that is a throwaway? | 14:57 |
| * kmalloc doesn't understand this process anymore | 14:57 | |
| cmurphy | we're not changing anything | 14:57 |
| kmalloc | blueprints should just be never used. | 14:57 |
| kmalloc | ever | 14:57 |
| cmurphy | it's just a placeholder in launchpad | 14:57 |
| kmalloc | ever | 14:57 |
| kmalloc | I want to note that i still +1'd and would still +2 the patch and spec, but each and every time I'm going to pretty much say the same thing | 14:59 |
| kmalloc | I'm happy to patch the template | 14:59 |
| cmurphy | this is the first time i'm hearing about it | 14:59 |
| kmalloc | i would like to never see "bp" in a spec ever again | 14:59 |
| kmalloc | basically blueprints have lost all the tracking data in the past. | 14:59 |
| kmalloc | someone edits it and it's dead | 14:59 |
| kmalloc | the reason for the bp originally was we used it like bug: XXXX in the commit message | 15:00 |
| kmalloc | if we're not using the bp like that (we shouldn't, for the patches) we shouldn't even link / point to the bp in the spec | 15:00 |
| *** mchlumsky has joined #openstack-keystone | 15:00 | |
| cmurphy | we do still use that, it still works | 15:00 |
| kmalloc | it is so bad. | 15:00 |
| cmurphy | so people can click on that link in gerrit to get to launchpad which has a url to get them to the spec | 15:00 |
| kmalloc | ok, so what i'm advocating for is instead -- a bug, marked as an RFE | 15:01 |
| kmalloc | and all patches are tracked with the bug | 15:01 |
| kmalloc | the tracking the blueprint is terrible, anyone can edit it and all tracking of patches/changes goes away. | 15:01 |
| cmurphy | you can edit a bug too | 15:01 |
| cmurphy | anyone can edit the bug title and description | 15:02 |
| kmalloc | a bug, when a patch is proposed/abandoned/merged a comment is left | 15:02 |
| kmalloc | the comments are immutable | 15:02 |
| kmalloc | blueprints have no comments. | 15:02 |
| kmalloc | so instead, the CI system edits the text box of the blueprint. and it doesn't track if patches were merged (except by hand) | 15:02 |
| kmalloc | i used to do that when i was PTL and it was just awful. | 15:02 |
| kmalloc | also blueprints can't be closed via a "close-bug" like call. | 15:03 |
| kmalloc | basically... blueprints are terrible. | 15:03 |
| cmurphy | okay but we're not using them that way, it's just a placeholder | 15:04 |
| kmalloc | so it's a throwaway placeholder. | 15:04 |
| cmurphy | sure | 15:04 |
| kmalloc | which then i'm going to say why not just open the tracking bug and link to it pre-emptively | 15:04 |
| kmalloc | bugs can be closed trivially if the spec doesn't pass. | 15:04 |
| *** jmlowe has joined #openstack-keystone | 15:05 | |
| * kmalloc wont block any specs. | 15:05 | |
| kmalloc | i'll patch the template to give this guidance | 15:05 |
| * kmalloc goes to write said patch. | 15:05 | |
| cmurphy | ugh okay i just don't like it because it's not a bug | 15:05 |
| cmurphy | but you're right | 15:05 |
| kmalloc | =/ sorry | 15:05 |
| * cmurphy makes note to check out storyboard again | 15:05 | |
| kmalloc | heheheheh | 15:05 |
| kmalloc | i keep looking at storyboard | 15:05 |
| *** markvoelker has quit IRC | 15:06 | |
| kmalloc | cmurphy: sorry, i don't mean to be pushy right now. this is morgan pre-coffee, and up 3 times tonight to walk dogs, plus taking brie for surgery in 3 hrs | 15:06 |
| cmurphy | kmalloc: no worries <3 | 15:06 |
| kmalloc | cmurphy: just want to apologize upfront, because i realize i'm being a bit more... uh... less diplomatic atm | 15:06 |
| cmurphy | heh | 15:06 |
| kmalloc | :) let me get the guidance for the spec changed | 15:07 |
| kmalloc | also, don't respin that spec on this account, i'll still +2 it if needed | 15:07 |
| kmalloc | we can fix on a followup | 15:07 |
| cmurphy | it's not hard to respin | 15:07 |
| kmalloc | right. | 15:07 |
| kmalloc | its up to you :) | 15:07 |
| kmalloc | like i said, not a blocker, something we can fix after next round of comments or after it lands. | 15:08 |
| cmurphy | kmalloc: maybe we chat about it on your template change with the rest of the team before committing | 15:08 |
| cmurphy | i'm not in a hurry with this spec | 15:09 |
| * kmalloc nods. | 15:09 | |
| * lbragstad notices how many blueprints we have that are open and irrelevant | 15:15 | |
| openstackgerrit | Morgan Fainberg proposed openstack/keystone-specs master: Update template with guidance for bugs over bp https://review.openstack.org/625282 | 15:23 |
| kmalloc | cmurphy, lbragstad ^ | 15:24 |
| kmalloc | i should probably split that into two changes. | 15:24 |
| kmalloc | the "boilerplate" comment should be separate | 15:24 |
| cmurphy | kmalloc: btw did you open a bug to deprecate the s3 support in ksm re http://eavesdrop.openstack.org/irclogs/%23openstack-keystone/%23openstack-keystone.2018-12-13.log.html#t2018-12-13T16:42:46 ? i don't see it yet | 15:25 |
| openstackgerrit | Morgan Fainberg proposed openstack/keystone-specs master: Update template with guidance for bugs over bp https://review.openstack.org/625282 | 15:25 |
| kmalloc | cmurphy: i have not yet | 15:28 |
| kmalloc | cmurphy: it's on my todo, i was roped into looking into some craziness with SDK | 15:28 |
| kmalloc | which i think i have solved now/know the path forward. | 15:28 |
| kmalloc | basically new dogpile breaks sdk :P | 15:29 |
| openstackgerrit | Morgan Fainberg proposed openstack/keystone-specs master: Add note about boilerplate content https://review.openstack.org/625283 | 15:29 |
| cmurphy | /o\ | 15:29 |
| kmalloc | it's because we do silly things in openstacksdk | 15:29 |
| kmalloc | we're passing a bound instance into the dogpile decorator | 15:29 |
| kmalloc | ... well dogpile tries to set .set, .get, .invalidate | 15:30 |
| kmalloc | and you can't set values on bound methods | 15:30 |
| kmalloc | s/instance/method | 15:30 |
| openstackgerrit | Morgan Fainberg proposed openstack/keystone-specs master: Update template with guidance for bugs over bp https://review.openstack.org/625282 | 15:31 |
| openstackgerrit | Morgan Fainberg proposed openstack/keystone-specs master: Add note about boilerplate content https://review.openstack.org/625283 | 15:31 |
| kmalloc | ok i need to coffee, cancel a meeting, and then get brie off to the doctor. | 15:32 |
| kmalloc | i'll be back sometime around lunch or little later pacific | 15:32 |
| kmalloc | and i'll be working on sdk and other things while she sleeps off the anesthesia | 15:33 |
| cmurphy | good luck kmalloc | 15:33 |
| kmalloc | thanks cmurphy :) | 15:33 |
| kmalloc | <3 | 15:33 |
| kmalloc | ooh ooh | 15:33 |
| kmalloc | wanna see my new desk setup? | 15:33 |
| cmurphy | sure | 15:34 |
| kmalloc | https://usercontent.irccloud-cdn.com/file/ylihsQes/battlestation | 15:34 |
| cmurphy | so much screen | 15:34 |
| kmalloc | yessssssss. | 15:34 |
| kmalloc | 3x2160p(4k UHD) portrait mode sceeens is awesome for programming | 15:35 |
| kmalloc | that normal landscape screen is gaming/conference-call/music/etc machine (windows) | 15:35 |
| kmalloc | i still need a new keyboard for the workstation... Cherry MX Clear isn't as nice as cherry mx speed silver. | 15:36 |
| jrosser | I saw the chat about deprecating s3 in ksm - as I understand it those bits are now in swift... could I check what should happen in a deployment which is radosgw authenticating against keystone with no swift installation? | 15:49 |
| kmalloc | jrosser: so, the s3_token middleware is moved from keystonemiddleware to swift3 | 15:53 |
| kmalloc | jrosser: keystone still has the s3_token bits. so if you're not using the swift3 middleware with radosgw, then it'll still bog down keystone | 15:54 |
| kmalloc | jrosser: does that make sense? | 15:54 |
| * kmalloc is unfamiliar with how radosgw works on this front | 15:54 | |
| lbragstad | that picture makes me miss my x1c | 15:55 |
| kmalloc | lbragstad: getting a new one? | 15:56 |
| * lbragstad thumps his chest twice and points to the sky | 15:56 | |
| lbragstad | idk | 15:56 |
| kmalloc | there are some good deals end-of-year on the x1c6 | 15:58 |
| kmalloc | if you get the 6, run 18.10 (or equiv in other distro) and make sure to set the kernel command line for wakeups, so you'll need to rpess the button to wake up the machine | 15:59 |
| jrosser | kmalloc: it sort of makes sense - I guess I’m not sufficiently familiar with keystone vs. ksm..... | 16:00 |
| jrosser | From the radosgw POV the setup looks like this http://docs.ceph.com/docs/mimic/radosgw/keystone/ | 16:01 |
| *** dklyle has quit IRC | 16:07 | |
| *** dklyle has joined #openstack-keystone | 16:07 | |
| kmalloc | Ok, it looks like radosgw does not use s3_token middleware | 16:08 |
| kmalloc | S3_token middleware is run in front of the services to handle the auth bits and talking to keystone. RADOSGW looks like it inplements those bits | 16:09 |
| kmalloc | This means caching would need to be added to radosgw to mirror what s3_token middleware does | 16:09 |
| kmalloc | Keystone may also benefit from additional caching in s3 where possible, but that is an unknown for now. | 16:10 |
| jrosser | Yes I see now how this all fits together | 16:10 |
| kmalloc | I can take a stab at caching I keystone but FYI, I am on vacation after Monday until mid-January. | 16:11 |
| kmalloc | So not sure where this lands in the "can land in keystone master". It also can't be back ported as it requires config options. | 16:11 |
| kmalloc | I know that isn't a ton of help :( | 16:11 |
| jrosser | That would be great if you are able to - we are already working on other performance things in the radosgw c++ code here so just getting some advice the approach when replicating bits of the ksm caching into there would be super useful | 16:13 |
| *** dklyle has quit IRC | 16:13 | |
| lbragstad | kmalloc yeah - i saw a few of them, i was hoping to get a bit more life out of the one i have before getting another | 16:14 |
| lbragstad | it's currently sitting in the corner, thinking about what it did... i'm going to dig it back out and see if i can figure out something to do with it | 16:14 |
| lbragstad | ultimately, i need to test the hard drive i think | 16:15 |
| lbragstad | if that's fine, then i likely need to get the motherboard replaced, apparently there were a slew of issues with mb replacements | 16:15 |
| knikolla | o/ | 16:18 |
| kmalloc | Yeah, I was not a fan of the Lenovo replacing the mb. My x1c3 was a lemon | 16:19 |
| kmalloc | And 3 or 4 fixes later... It was still a lemon | 16:19 |
| kmalloc | I still want a surface running Linux. | 16:19 |
| kmalloc | But Linux is hard on them. | 16:20 |
| *** pcaruana has quit IRC | 16:20 | |
| *** dklyle has joined #openstack-keystone | 16:24 | |
| *** jmlowe has quit IRC | 16:27 | |
| *** gyee has joined #openstack-keystone | 16:37 | |
| *** dklyle has quit IRC | 16:41 | |
| *** Shilpa has quit IRC | 16:42 | |
| lbragstad | kmalloc yeah... | 16:48 |
| *** ayoung has joined #openstack-keystone | 16:55 | |
| *** amoralej is now known as amoralej|off | 17:01 | |
| *** dklyle has joined #openstack-keystone | 17:11 | |
| *** markvoelker has joined #openstack-keystone | 17:31 | |
| *** markvoelker has quit IRC | 17:35 | |
| *** Emine has joined #openstack-keystone | 17:36 | |
| *** bnemec is now known as beekneemech | 17:37 | |
| *** dklyle has quit IRC | 17:51 | |
| *** dklyle has joined #openstack-keystone | 18:00 | |
| *** itlinux has quit IRC | 18:13 | |
| *** itlinux has joined #openstack-keystone | 18:13 | |
| *** dklyle has quit IRC | 18:25 | |
| *** dklyle has joined #openstack-keystone | 18:46 | |
| *** dklyle has quit IRC | 18:54 | |
| *** dklyle has joined #openstack-keystone | 19:11 | |
| *** dklyle has quit IRC | 19:21 | |
| *** jdennis has quit IRC | 19:23 | |
| *** Emine has quit IRC | 19:26 | |
| *** gagehugo has quit IRC | 19:28 | |
| *** jmlowe has joined #openstack-keystone | 19:32 | |
| *** jdennis has joined #openstack-keystone | 19:38 | |
| *** dklyle has joined #openstack-keystone | 19:42 | |
| *** dklyle has quit IRC | 19:55 | |
| *** mchlumsky has quit IRC | 21:01 | |
| *** aloga has quit IRC | 21:11 | |
| *** aloga has joined #openstack-keystone | 21:11 | |
| *** dklyle has joined #openstack-keystone | 21:27 | |
| *** erus has quit IRC | 21:27 | |
| *** erus has joined #openstack-keystone | 21:29 | |
| *** dklyle has quit IRC | 21:32 | |
| *** dklyle has joined #openstack-keystone | 21:33 | |
| *** raildo has quit IRC | 21:33 | |
| *** mchlumsky has joined #openstack-keystone | 21:35 | |
| *** erus has quit IRC | 21:36 | |
| *** erus has joined #openstack-keystone | 21:38 | |
| *** mchlumsky has quit IRC | 21:53 | |
| *** dklyle has quit IRC | 21:54 | |
| *** dklyle has joined #openstack-keystone | 21:56 | |
| *** imus has quit IRC | 21:59 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Update protocol policies for system reader https://review.openstack.org/625352 | 22:01 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Add protocol tests for system member role https://review.openstack.org/625353 | 22:01 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Implement system admin role in protocol API https://review.openstack.org/625354 | 22:01 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Add tests for domain users interacting with protocols https://review.openstack.org/625355 | 22:01 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Add tests for project users interacting with protocols https://review.openstack.org/625356 | 22:01 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Remove protocol policies from v3cloudsample.json https://review.openstack.org/625357 | 22:01 |
| *** dklyle has quit IRC | 22:02 | |
| *** dklyle has joined #openstack-keystone | 22:13 | |
| *** dklyle has quit IRC | 22:18 | |
| *** dklyle has joined #openstack-keystone | 22:37 | |
| *** dklyle has quit IRC | 22:41 | |
| *** dklyle has joined #openstack-keystone | 22:42 | |
| *** dklyle has quit IRC | 22:57 | |
| *** lbragstad has quit IRC | 23:08 | |
| *** lbragstad has joined #openstack-keystone | 23:17 | |
| *** ChanServ sets mode: +o lbragstad | 23:17 | |
| *** lbragstad has quit IRC | 23:22 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!