*** whoami-rajat has quit IRC | 00:22 | |
*** lbragstad has joined #openstack-keystone | 00:42 | |
*** ChanServ sets mode: +o lbragstad | 00:42 | |
*** jamesmcarthur has joined #openstack-keystone | 01:06 | |
*** d34dh0r53 has quit IRC | 01:09 | |
*** eglute has quit IRC | 01:09 | |
*** cloudnull has quit IRC | 01:09 | |
*** jamesmcarthur has quit IRC | 01:16 | |
*** jamesmcarthur has joined #openstack-keystone | 01:42 | |
*** jamesmcarthur has quit IRC | 01:54 | |
*** ileixe has joined #openstack-keystone | 01:55 | |
openstackgerrit | Merged openstack/keystone master: Replace dict.iteritems() with dict.items() in keystone https://review.opendev.org/491361 | 02:15 |
---|---|---|
*** cloudnull has joined #openstack-keystone | 02:43 | |
*** eglute has joined #openstack-keystone | 02:44 | |
*** lbragstad has quit IRC | 02:46 | |
*** d34dh0r53 has joined #openstack-keystone | 02:46 | |
*** ileixe has quit IRC | 03:30 | |
*** ileixe has joined #openstack-keystone | 03:34 | |
openstackgerrit | zhongshengping proposed openstack/keystone master: Replace git.openstack.org URLs with opendev.org URLs https://review.opendev.org/654296 | 04:16 |
*** ileixe has quit IRC | 04:37 | |
*** ileixe has joined #openstack-keystone | 04:42 | |
*** shyamb has joined #openstack-keystone | 04:49 | |
openstackgerrit | Yang Youseok proposed openstack/keystone master: [PoC] Expose 'project_tags' in auth token https://review.opendev.org/654301 | 05:30 |
*** vishakha has joined #openstack-keystone | 05:33 | |
*** shyamb has quit IRC | 05:39 | |
openstackgerrit | Yang Youseok proposed openstack/keystonemiddleware master: [PoC] Expose 'project_tags' in auth header https://review.opendev.org/654305 | 05:56 |
*** shyamb has joined #openstack-keystone | 05:58 | |
openstackgerrit | Yang Youseok proposed openstack/keystoneauth master: [PoC] Expose 'project_tags' in AccessInfo https://review.opendev.org/654309 | 06:15 |
openstackgerrit | Yang Youseok proposed openstack/oslo.policy master: [PoC] Add new kind of check called 'tags' https://review.opendev.org/654321 | 06:31 |
openstackgerrit | Yang Youseok proposed openstack/oslo.policy master: [PoC] Add new kind of check called 'tags' https://review.opendev.org/654321 | 06:33 |
*** shyamb has quit IRC | 06:42 | |
*** shyamb has joined #openstack-keystone | 06:42 | |
*** shyamb has quit IRC | 07:08 | |
*** shyamb has joined #openstack-keystone | 07:08 | |
*** pcaruana has joined #openstack-keystone | 07:19 | |
*** shyamb has quit IRC | 08:04 | |
*** tkajinam has quit IRC | 08:24 | |
*** pcaruana has quit IRC | 08:45 | |
*** dave-mccowan has joined #openstack-keystone | 08:46 | |
*** dave-mccowan has quit IRC | 08:53 | |
*** rcernin has joined #openstack-keystone | 09:03 | |
*** shyamb has joined #openstack-keystone | 09:06 | |
*** yan0s has joined #openstack-keystone | 09:41 | |
yan0s | Hello, is it possible to have more than one policy.json files in keystone? | 09:49 |
yan0s | I mean one for each domain | 09:49 |
yan0s | Using multiple /etc/keystone/domain/keystone.DOMAIN_NAME.conf files | 09:49 |
*** hoonetorg has quit IRC | 10:00 | |
openstackgerrit | Yang Youseok proposed openstack/keystonemiddleware master: [PoC] Expose 'project_tags' in auth header https://review.opendev.org/654305 | 10:05 |
*** shyamb has quit IRC | 10:05 | |
*** hoonetorg has joined #openstack-keystone | 10:13 | |
*** shyamb has joined #openstack-keystone | 10:24 | |
*** shyamb has quit IRC | 10:49 | |
*** shyamb has joined #openstack-keystone | 10:52 | |
*** pcaruana has joined #openstack-keystone | 10:58 | |
*** shyamb has quit IRC | 11:00 | |
*** raildo has joined #openstack-keystone | 11:02 | |
*** shyamb has joined #openstack-keystone | 11:03 | |
*** shyam89 has joined #openstack-keystone | 11:47 | |
*** shyamb has quit IRC | 11:50 | |
*** shyam89 has quit IRC | 12:11 | |
*** cmurpheus is now known as cmurphy | 12:21 | |
cmurphy | yan0s: no, you can't have domain-specific policies | 12:24 |
yan0s | @cmurphy: thanks! | 12:25 |
*** jamesmcarthur has joined #openstack-keystone | 12:42 | |
*** yan0s has quit IRC | 12:48 | |
*** yan0s has joined #openstack-keystone | 12:56 | |
*** jmlowe has quit IRC | 13:00 | |
knikolla | o/ | 13:06 |
knikolla | cmurphy: you're up really early for PST | 13:07 |
*** lbragstad has joined #openstack-keystone | 13:09 | |
*** ChanServ sets mode: +o lbragstad | 13:09 | |
cmurphy | knikolla: yeah been trying to get an early start :) | 13:09 |
knikolla | i've tried, failed and given up on that. | 13:09 |
knikolla | even just the DST change messed my sleep cycle up for almost a month. | 13:09 |
cmurphy | i just never let go of my jetlag ;) | 13:10 |
knikolla | hahaha, that's like cheating | 13:10 |
cmurphy | :) | 13:13 |
*** jamesmcarthur has quit IRC | 13:14 | |
pas-ha | @cmurphy hi, are there plans to cut stable/stein branch in ldappool? project is listed under keystone governance | 13:17 |
cmurphy | pas-ha: i forgot that one had branches since it's released independently, let me try to do that now | 13:23 |
pas-ha | thanks :-) we've just started to build the downstream for stein and noticed that | 13:23 |
cmurphy | pas-ha: https://review.opendev.org/654455 | 13:31 |
*** jmlowe has joined #openstack-keystone | 13:44 | |
pas-ha | thanks again ^-) | 13:50 |
*** jamesmcarthur has joined #openstack-keystone | 14:03 | |
*** zaneb has joined #openstack-keystone | 14:06 | |
yan0s | is a "conf.d" like directory supported for additional keystone.conf configuration options? | 14:10 |
cmurphy | yan0s: yes that should work for all oslo.config style config files | 14:19 |
cmurphy | i can't seem to find it mentioned in the docs but it's in a release note https://docs.openstack.org/releasenotes/oslo.config/ocata.html | 14:20 |
yan0s | cmurphy: and what would happen if an option was on both files (keystone.conf and in conf.d dir)? | 14:21 |
yan0s | cmurphy: which one would override the other? | 14:21 |
cmurphy | the config in conf.d overrides the other | 14:25 |
yan0s | cmurphy: thanks again! | 14:27 |
*** openstackgerrit has quit IRC | 14:28 | |
yan0s | another question, is there a way for an admin user to impersonate another user in cli? | 14:42 |
yan0s | my goal is to create project specific application credentials (so the above may not be necessary) | 14:42 |
cmurphy | yan0s: trusts can be used to impersonate another user but i don't think they can be used to create application credentials | 14:47 |
yan0s | cmurphy: so the only way to create application credentials for a project is by a user that has access only on this project? | 14:50 |
cmurphy | yan0s: application credentials are already created for one and only one project | 14:51 |
cmurphy | they only work for the project that you are scoped to when you created it | 14:51 |
yan0s | cmurphy: oh, ok so I can do that with the admin user just by changing the scope, excellent! | 14:52 |
*** dklyle has joined #openstack-keystone | 15:03 | |
*** gyee has joined #openstack-keystone | 15:11 | |
*** imacdonn has joined #openstack-keystone | 15:17 | |
*** yan0s has quit IRC | 15:25 | |
bnemec | Hmm, did we not document that config-dir behavior? | 15:43 |
cmurphy | bnemec: i see it in a docstring in find_config_dirs but i couldn't find it either in docs/ or in the generated module reference | 15:44 |
bnemec | cmurphy: Okay, thanks. | 15:45 |
bnemec | I wonder why that module isn't being documented. | 15:45 |
bnemec | But even so, users shouldn't have to look at API docs for that behavior. | 15:45 |
bnemec | https://bugs.launchpad.net/oslo.config/+bug/1825859 | 15:50 |
openstack | Launchpad bug 1825859 in oslo.config "Docs missing details on config-dir default behavior" [Medium,Triaged] | 15:50 |
*** jamesmcarthur has quit IRC | 15:50 | |
bnemec | cmurphy: Did you find the precedence information in https://github.com/openstack/oslo.config/blob/0bc22839b09fcd7ae2de4f7fe5d63ac055fd0a78/oslo_config/cfg.py#L2095 anywhere but the docstring either? | 15:56 |
cmurphy | bnemec: nope | 16:00 |
bnemec | Okay, we should fix that too. | 16:01 |
bnemec | Huh. I can't git pull today. | 16:04 |
* bnemec looks for information on the opendev migration | 16:04 | |
bnemec | Interesting. I didn't realize I ever cloned anything using git:// but that gives a really unhelpful error message now. :-/ | 16:10 |
kmalloc | o/ | 16:13 |
kmalloc | how is everyone today? | 16:13 |
*** jamesmcarthur has joined #openstack-keystone | 16:21 | |
*** jamesmcarthur_ has joined #openstack-keystone | 16:47 | |
*** jamesmcarthur has quit IRC | 16:50 | |
ayoung | trying to figure out if I am the dog or the hydrant | 17:12 |
gagehugo | o/ | 17:39 |
*** zaneb has quit IRC | 17:41 | |
*** zaneb has joined #openstack-keystone | 17:41 | |
kmalloc | oh i'm the bug not the windshield. | 17:42 |
kmalloc | most every day | 17:42 |
*** zaneb has quit IRC | 17:46 | |
*** zaneb has joined #openstack-keystone | 17:50 | |
kmalloc | @bnemec i always clone with https:// | 18:03 |
kmalloc | @bnemec unless ... it's a private repo, then I do ssh and that breaks horribly with the new name thing(s) | 18:03 |
bnemec | kmalloc: I usually do too. I think these are probably repos that were originally cloned by devstack and have been copied around for the last six years or so. | 18:04 |
kmalloc | aha, yeah | 18:07 |
*** openstackgerrit has joined #openstack-keystone | 18:31 | |
openstackgerrit | Abhishek Sharma M proposed openstack/keystone master: Fix unicode character issue in ldap https://review.opendev.org/654601 | 18:31 |
*** abhi89 has joined #openstack-keystone | 18:37 | |
abhi89 | coreycb, cmurphy: Hi.. please review my changeset - https://review.opendev.org/#/c/654601/ | 18:40 |
openstackgerrit | Merged openstack/keystone master: Fix werkzeug imports for version 0.15.x https://review.opendev.org/651430 | 18:44 |
*** jamesmcarthur_ has quit IRC | 18:44 | |
*** jamesmcarthur has joined #openstack-keystone | 18:48 | |
*** jamesmcarthur has quit IRC | 18:50 | |
*** jamesmcarthur has joined #openstack-keystone | 18:50 | |
*** abhi89 has quit IRC | 18:57 | |
*** zbitter has joined #openstack-keystone | 19:26 | |
*** zaneb has quit IRC | 19:29 | |
*** dasp has joined #openstack-keystone | 19:33 | |
*** lbragstad has quit IRC | 19:40 | |
*** jmlowe has quit IRC | 19:58 | |
*** jmlowe has joined #openstack-keystone | 20:14 | |
*** ayoung has quit IRC | 20:23 | |
*** zbitter is now known as zaneb | 20:28 | |
*** vishakha has quit IRC | 20:36 | |
*** pcaruana has quit IRC | 20:46 | |
*** gmann has quit IRC | 20:59 | |
*** mnaser has quit IRC | 21:04 | |
*** raildo has quit IRC | 21:07 | |
*** gmann has joined #openstack-keystone | 21:08 | |
*** mnaser has joined #openstack-keystone | 21:08 | |
*** johanssone has quit IRC | 21:58 | |
*** odyssey4me has quit IRC | 21:58 | |
*** Krenair has quit IRC | 21:59 | |
*** Zara has quit IRC | 21:59 | |
*** dansmith has quit IRC | 21:59 | |
*** irclogbot_3 has quit IRC | 21:59 | |
*** imacdonn has quit IRC | 21:59 | |
*** odyssey4me has joined #openstack-keystone | 22:00 | |
*** dansmith has joined #openstack-keystone | 22:01 | |
*** imacdonn has joined #openstack-keystone | 22:01 | |
*** johanssone has joined #openstack-keystone | 22:02 | |
*** irclogbot_2 has joined #openstack-keystone | 22:02 | |
openstackgerrit | Raildo Mascena proposed openstack/keystone master: Fixing dn_to_id function for cases were id is not in the DN https://review.opendev.org/649177 | 22:03 |
*** Krenair has joined #openstack-keystone | 22:04 | |
*** gmann has quit IRC | 22:07 | |
*** gmann has joined #openstack-keystone | 22:07 | |
*** sapd1_ has joined #openstack-keystone | 22:10 | |
*** gmann has quit IRC | 22:11 | |
*** gmann has joined #openstack-keystone | 22:11 | |
*** kinrui has joined #openstack-keystone | 22:13 | |
*** irclogbot_2 has quit IRC | 22:16 | |
*** freerunner has quit IRC | 22:16 | |
*** errr has quit IRC | 22:16 | |
*** gagehugo has quit IRC | 22:16 | |
*** dansmith has quit IRC | 22:16 | |
*** jenglisch has quit IRC | 22:16 | |
*** fungi has quit IRC | 22:16 | |
*** sapd1 has quit IRC | 22:16 | |
*** dansmith has joined #openstack-keystone | 22:17 | |
*** freerunner has joined #openstack-keystone | 22:18 | |
*** errr has joined #openstack-keystone | 22:18 | |
*** irclogbot_2 has joined #openstack-keystone | 22:18 | |
*** kinrui is now known as fungi | 22:19 | |
*** irclogbot_2 has quit IRC | 22:19 | |
*** irclogbot_3 has joined #openstack-keystone | 22:20 | |
*** jenglisch_ has joined #openstack-keystone | 22:30 | |
*** rcernin has quit IRC | 22:45 | |
*** rcernin has joined #openstack-keystone | 22:45 | |
*** tkajinam has joined #openstack-keystone | 22:57 | |
*** threestrands has joined #openstack-keystone | 23:04 | |
*** rcernin has quit IRC | 23:15 | |
*** rcernin has joined #openstack-keystone | 23:16 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!