| *** markvoelker has joined #openstack-keystone | 00:21 | |
| *** markvoelker has quit IRC | 00:54 | |
| *** ileixe has joined #openstack-keystone | 00:55 | |
| *** ileixe has quit IRC | 01:03 | |
| *** vishwanathj has quit IRC | 01:22 | |
| *** markvoelker has joined #openstack-keystone | 01:51 | |
| *** markvoelker has quit IRC | 02:24 | |
| *** markvoelker has joined #openstack-keystone | 03:22 | |
| *** markvoelker has quit IRC | 03:54 | |
| *** markvoelker has joined #openstack-keystone | 04:51 | |
| *** vishakha has joined #openstack-keystone | 05:22 | |
| *** markvoelker has quit IRC | 05:24 | |
| *** shyamb has joined #openstack-keystone | 06:19 | |
| *** markvoelker has joined #openstack-keystone | 06:22 | |
| *** hoonetorg has joined #openstack-keystone | 06:22 | |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: [SQLite] Ensure change is addressed for limit table https://review.openstack.org/621497 | 06:24 |
|---|---|---|
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Add domain_id column for limit https://review.openstack.org/620202 | 06:24 |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Add domain level limit support - Manager https://review.openstack.org/621468 | 06:24 |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Add domain level limit support - API https://review.openstack.org/622773 | 06:24 |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Add domain level support for strict-two-level-model https://review.openstack.org/623153 | 06:24 |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Update project depth check https://review.openstack.org/623984 | 06:24 |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Release note for domain level limit https://review.openstack.org/624019 | 06:24 |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: [api-ref] add domain level limit support https://review.openstack.org/624562 | 06:24 |
| *** markvoelker has quit IRC | 06:55 | |
| *** shyamb has quit IRC | 06:57 | |
| *** shyamb has joined #openstack-keystone | 07:24 | |
| *** markvoelker has joined #openstack-keystone | 07:52 | |
| *** shyamb has quit IRC | 07:52 | |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: [SQLite] Ensure change is addressed for limit table https://review.openstack.org/621497 | 07:54 |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Add domain_id column for limit https://review.openstack.org/620202 | 07:54 |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Add domain level limit support - Manager https://review.openstack.org/621468 | 07:54 |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Add domain level limit support - API https://review.openstack.org/622773 | 07:54 |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Add domain level support for strict-two-level-model https://review.openstack.org/623153 | 07:54 |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Update project depth check https://review.openstack.org/623984 | 07:54 |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Release note for domain level limit https://review.openstack.org/624019 | 07:54 |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: [api-ref] add domain level limit support https://review.openstack.org/624562 | 07:54 |
| *** awalende has joined #openstack-keystone | 07:59 | |
| *** shyamb has joined #openstack-keystone | 08:00 | |
| *** awalende_ has joined #openstack-keystone | 08:02 | |
| *** awalende has quit IRC | 08:03 | |
| *** awalende_ has quit IRC | 08:16 | |
| *** Emine has joined #openstack-keystone | 08:18 | |
| *** awalende has joined #openstack-keystone | 08:22 | |
| *** jaosorior has joined #openstack-keystone | 08:23 | |
| *** markvoelker has quit IRC | 08:24 | |
| *** xek has joined #openstack-keystone | 08:30 | |
| *** Emine has quit IRC | 08:37 | |
| *** Emine has joined #openstack-keystone | 08:42 | |
| *** shyamb has quit IRC | 08:50 | |
| *** awalende has quit IRC | 08:54 | |
| *** bnemec-pto has quit IRC | 08:57 | |
| *** bnemec has joined #openstack-keystone | 08:59 | |
| *** awalende has joined #openstack-keystone | 09:07 | |
| *** shyamb has joined #openstack-keystone | 09:17 | |
| *** markvoelker has joined #openstack-keystone | 09:21 | |
| *** Emine has quit IRC | 09:29 | |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: [SQLite] Ensure change is addressed for limit table https://review.openstack.org/621497 | 09:34 |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Add domain_id column for limit https://review.openstack.org/620202 | 09:34 |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Add domain level limit support - Manager https://review.openstack.org/621468 | 09:34 |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Add domain level limit support - API https://review.openstack.org/622773 | 09:34 |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Add domain level support for strict-two-level-model https://review.openstack.org/623153 | 09:34 |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Update project depth check https://review.openstack.org/623984 | 09:34 |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: Release note for domain level limit https://review.openstack.org/624019 | 09:34 |
| openstackgerrit | wangxiyuan proposed openstack/keystone master: [api-ref] add domain level limit support https://review.openstack.org/624562 | 09:34 |
| *** Emine has joined #openstack-keystone | 09:36 | |
| *** markvoelker has quit IRC | 09:54 | |
| openstackgerrit | Vishakha Agarwal proposed openstack/keystone master: Implement system reader for role_assignments https://review.openstack.org/609210 | 10:13 |
| *** whoami-rajat has joined #openstack-keystone | 10:20 | |
| *** yan0s has joined #openstack-keystone | 10:23 | |
| *** markvoelker has joined #openstack-keystone | 10:52 | |
| *** shyamb has quit IRC | 11:01 | |
| *** markvoelker has quit IRC | 11:25 | |
| *** shyamb has joined #openstack-keystone | 11:42 | |
| *** Emine has quit IRC | 11:46 | |
| *** raildo has joined #openstack-keystone | 12:01 | |
| *** shyamb has quit IRC | 12:10 | |
| *** shyamb has joined #openstack-keystone | 12:10 | |
| *** dave-mccowan has joined #openstack-keystone | 12:12 | |
| *** markvoelker has joined #openstack-keystone | 12:21 | |
| *** Emine has joined #openstack-keystone | 12:35 | |
| *** whoami-rajat has quit IRC | 12:40 | |
| *** shyamb has quit IRC | 12:53 | |
| *** markvoelker has quit IRC | 12:54 | |
| *** yan0s has quit IRC | 12:57 | |
| *** yan0s has joined #openstack-keystone | 12:57 | |
| *** yan0s has quit IRC | 13:21 | |
| *** yan0s has joined #openstack-keystone | 13:34 | |
| *** erus has joined #openstack-keystone | 13:39 | |
| *** edmondsw has quit IRC | 13:46 | |
| *** markvoelker has joined #openstack-keystone | 13:52 | |
| *** erus has quit IRC | 13:52 | |
| *** dklyle has quit IRC | 13:52 | |
| *** erus has joined #openstack-keystone | 13:53 | |
| *** erus has quit IRC | 14:00 | |
| *** erus has joined #openstack-keystone | 14:08 | |
| gagehugo | o/ | 14:22 |
| *** erus has quit IRC | 14:22 | |
| *** erus has joined #openstack-keystone | 14:24 | |
| *** markvoelker has quit IRC | 14:24 | |
| *** edmondsw has joined #openstack-keystone | 14:27 | |
| cmurphy | \o | 14:28 |
| erus | o/ | 14:30 |
| *** lbragstad has joined #openstack-keystone | 14:31 | |
| *** ChanServ sets mode: +o lbragstad | 14:31 | |
| *** jdennis has joined #openstack-keystone | 14:37 | |
| *** erus has quit IRC | 14:37 | |
| *** erus has joined #openstack-keystone | 14:37 | |
| vishakha | o/ | 14:57 |
| *** awalende has quit IRC | 14:58 | |
| *** awalende has joined #openstack-keystone | 14:59 | |
| *** awalende has quit IRC | 15:03 | |
| *** hoonetorg has quit IRC | 15:09 | |
| *** markvoelker has joined #openstack-keystone | 15:22 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Implement JWS token provider https://review.openstack.org/614549 | 15:26 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: WIP: Preemptive key loading https://review.openstack.org/636151 | 15:26 |
| *** hoonetorg has joined #openstack-keystone | 15:27 | |
| kmalloc | \o | 15:33 |
| kmalloc | o/ | 15:33 |
| kmalloc | /o\ | 15:33 |
| kmalloc | \o/ | 15:33 |
| lbragstad | good $UGT | 15:33 |
| *** opetrenko_ has joined #openstack-keystone | 15:36 | |
| opetrenko_ | hi, can anyone help me setup keystone to keystone? | 15:36 |
| openstackgerrit | Vishakha Agarwal proposed openstack/keystone master: Implement system reader for role_assignments https://review.openstack.org/609210 | 15:39 |
| *** erus has quit IRC | 15:41 | |
| knikolla | o/ | 15:43 |
| knikolla | opetrenko_: hello | 15:43 |
| *** erus has joined #openstack-keystone | 15:43 | |
| opetrenko_ | knikolla: can you help with setup? | 15:47 |
| *** erus has quit IRC | 15:48 | |
| *** erus has joined #openstack-keystone | 15:51 | |
| knikolla | opetrenko_: yes | 15:53 |
| knikolla | are you having difficulty with any step in particular? | 15:53 |
| *** erus has quit IRC | 15:55 | |
| *** markvoelker has quit IRC | 15:56 | |
| *** erus has joined #openstack-keystone | 15:56 | |
| *** dklyle has joined #openstack-keystone | 15:58 | |
| opetrenko_ | knikolla: https://github.com/Enacero/docker-keystone-federation I have this. There is docker-compose file with 2 keystones, both looking into 1 shibboleth that uses ldap | 16:01 |
| knikolla | looking | 16:02 |
| knikolla | opetrenko_: FYI: I'm lurking on a video-conference meeting so may take a while to respond at times. | 16:02 |
| opetrenko_ | I want to setup k2k, since I want to setup this such way, that when I would use horizon with one region, and change region to second, I want be logged of horizon | 16:03 |
| knikolla | opetrenko_: are you familiar with this guide? https://docs.openstack.org/keystone/latest/admin/federation/federated_identity.html | 16:12 |
| opetrenko_ | so so | 16:15 |
| *** Emine has quit IRC | 16:21 | |
| knikolla | opetrenko_: are there any parts that confuse you? | 16:24 |
| *** erus has quit IRC | 16:29 | |
| opetrenko_ | I dont understand at full how to configure both keystones to be at the same time k2k and k2shibboleth | 16:29 |
| *** yan0s has quit IRC | 16:37 | |
| *** erus has joined #openstack-keystone | 16:39 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Implement domain admin functionality for user API https://review.openstack.org/623321 | 16:39 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Add explicit testing for project users and the user API https://review.openstack.org/623322 | 16:39 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Remove user policies from policy.v3cloudsample.json https://review.openstack.org/623323 | 16:39 |
| *** markvoelker has joined #openstack-keystone | 16:52 | |
| *** erus has quit IRC | 16:54 | |
| *** erus has joined #openstack-keystone | 17:08 | |
| openstackgerrit | guang-yee proposed openstack/keystone master: populate request context with X.509 tokenless cred information https://review.openstack.org/635993 | 17:21 |
| *** erus has quit IRC | 17:22 | |
| *** erus has joined #openstack-keystone | 17:23 | |
| *** gyee has joined #openstack-keystone | 17:24 | |
| *** markvoelker has quit IRC | 17:24 | |
| *** xek has quit IRC | 17:42 | |
| *** erus has quit IRC | 17:44 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Implement system admin role in groups API https://review.openstack.org/625734 | 17:50 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Add region tests for system member role https://review.openstack.org/619086 | 17:52 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Update region policies to use system admin https://review.openstack.org/619241 | 17:52 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Add tests for domain users interacting with regions https://review.openstack.org/619242 | 17:52 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Add tests for project users interacting with regions https://review.openstack.org/619243 | 17:52 |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Remove region policies from policy.v3cloudsample.json https://review.openstack.org/619244 | 17:52 |
| *** erus has joined #openstack-keystone | 17:53 | |
| *** erus has quit IRC | 17:54 | |
| *** markvoelker has joined #openstack-keystone | 18:21 | |
| *** imacdonn has joined #openstack-keystone | 18:24 | |
| *** whoami-rajat has joined #openstack-keystone | 18:40 | |
| *** xek has joined #openstack-keystone | 18:51 | |
| *** openstackgerrit has quit IRC | 18:51 | |
| *** markvoelker has quit IRC | 18:55 | |
| *** xek_ has joined #openstack-keystone | 19:04 | |
| *** xek has quit IRC | 19:06 | |
| *** mvkr has quit IRC | 19:10 | |
| *** jmlowe has joined #openstack-keystone | 19:14 | |
| *** vishakha has quit IRC | 19:29 | |
| *** gyee has quit IRC | 19:52 | |
| *** markvoelker has joined #openstack-keystone | 19:52 | |
| *** gyee has joined #openstack-keystone | 20:00 | |
| *** jmlowe has quit IRC | 20:08 | |
| *** markvoelker has quit IRC | 20:24 | |
| *** dmellado has quit IRC | 20:39 | |
| *** xek_ has quit IRC | 21:21 | |
| *** markvoelker has joined #openstack-keystone | 21:22 | |
| *** itlinux has joined #openstack-keystone | 21:22 | |
| *** raildo has quit IRC | 21:26 | |
| *** itlinux has quit IRC | 21:35 | |
| *** dmellado has joined #openstack-keystone | 21:43 | |
| *** openstackgerrit has joined #openstack-keystone | 21:43 | |
| openstackgerrit | Colleen Murphy proposed openstack/keystoneauth master: Expose app creds and new attrs in fixtures https://review.openstack.org/636030 | 21:43 |
| openstackgerrit | Colleen Murphy proposed openstack/keystonemiddleware master: [WIP] Add validation of app cred capabilities https://review.openstack.org/633369 | 21:44 |
| *** ayoung has joined #openstack-keystone | 21:46 | |
| ayoung | cmurphy, and with that I realized my IRC never came up. Anything I can help with? | 21:47 |
| cmurphy | ayoung: heh no I think I've got it doing what I want it to do but the tests in general are quite a mess | 21:49 |
| ayoung | IS all the PKI Stuff still there? | 21:50 |
| cmurphy | yep | 21:50 |
| ayoung | I think we can kill all that now | 21:54 |
| *** markvoelker has quit IRC | 21:55 | |
| *** markvoelker has joined #openstack-keystone | 22:20 | |
| *** whoami-rajat has quit IRC | 22:33 | |
| *** ayoung has quit IRC | 22:37 | |
| kmalloc | aw ayoung left. | 22:38 |
| kmalloc | cmurphy: https://review.openstack.org/#/c/613675/ a pass at ripping out PKI[z] stuff | 22:39 |
| *** tkajinam has joined #openstack-keystone | 22:57 | |
| *** mvkr has joined #openstack-keystone | 23:08 | |
| lbragstad | kmalloc i can revisit the review there | 23:30 |
| kmalloc | lbragstad: sure. it's just a philosophy disagreement. | 23:31 |
| kmalloc | regarding a totally unused set of opts that don't impact anything if they are removed *shrug* | 23:31 |
| *** jistr_ has joined #openstack-keystone | 23:39 | |
| *** BlackDex_ has joined #openstack-keystone | 23:42 | |
| *** hemna_ has joined #openstack-keystone | 23:45 | |
| *** jmlowe has joined #openstack-keystone | 23:46 | |
| gyee | lbragstad, kmalloc, can we backport this one? https://review.openstack.org/#/c/594547/ | 23:46 |
| *** BlackDex has quit IRC | 23:46 | |
| *** jistr has quit IRC | 23:46 | |
| *** cosss_ has quit IRC | 23:46 | |
| *** zioproto has quit IRC | 23:46 | |
| *** hemna has quit IRC | 23:46 | |
| *** csatari has quit IRC | 23:46 | |
| *** TheJulia has quit IRC | 23:46 | |
| *** hrybacki has quit IRC | 23:46 | |
| *** coreycb has quit IRC | 23:46 | |
| gyee | credential APIs are pretty useless with it | 23:46 |
| kmalloc | not really | 23:48 |
| kmalloc | that is a lot of feature stuff. not really a stable backport thing. | 23:48 |
| kmalloc | gyee: here. | 23:54 |
| kmalloc | really that does not feel like stable conforming | 23:54 |
| gyee | that feature used to work in Pike | 23:54 |
| kmalloc | i am very hesitant to be backporting that kind of stuff. | 23:54 |
| gyee | then it broken in Rocky | 23:54 |
| kmalloc | it might be worth directly fixing rocky without the additonal scope-type work | 23:55 |
| kmalloc | really, the scope-type stuff is not really a "bug" fix in the sense of what goes to stable | 23:55 |
| kmalloc | it implements deprecated policy stuff | 23:55 |
| gyee | ok, I see what you mean | 23:56 |
| kmalloc | and directly references stien | 23:56 |
| gyee | maybe backport is not the right word | 23:56 |
| gyee | but we need to fix it | 23:56 |
| kmalloc | yeah, you probably need to spin a direct bug fix up | 23:56 |
| kmalloc | that we can accept, but that in itself can't be backported. | 23:56 |
| gyee | make sense, thanks for the pointer | 23:56 |
| kmalloc | yeah :) | 23:57 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!