*** gyee has quit IRC | 00:36 | |
*** xek has quit IRC | 00:37 | |
*** awalende has joined #openstack-keystone | 00:57 | |
*** NM has joined #openstack-keystone | 00:57 | |
*** NM has quit IRC | 00:59 | |
*** d34dh0r53 has joined #openstack-keystone | 01:01 | |
*** awalende has quit IRC | 01:02 | |
*** lbragstad has quit IRC | 01:42 | |
*** lbragstad has joined #openstack-keystone | 01:51 | |
*** whoami-rajat has joined #openstack-keystone | 02:06 | |
*** dklyle has joined #openstack-keystone | 02:14 | |
*** lbragstad has quit IRC | 02:40 | |
*** lbragstad has joined #openstack-keystone | 02:43 | |
joshualyle | #thanks cmurphy for your help with debugging ldap setup today | 02:47 |
---|---|---|
openstackstatus | joshualyle: Added your thanks to Thanks page (https://wiki.openstack.org/wiki/Thanks) | 02:47 |
*** joshualyle has quit IRC | 03:06 | |
openstackgerrit | zhangboye proposed openstack/keystone master: Cap sphinx for py2 to match global requirements https://review.opendev.org/659429 | 03:41 |
*** vishakha has joined #openstack-keystone | 04:09 | |
openstackgerrit | Vishakha Agarwal proposed openstack/keystone master: WIP: Remove [signing] config https://review.opendev.org/659434 | 04:41 |
*** _d34dh0r53_ has joined #openstack-keystone | 04:55 | |
*** lbragstad has quit IRC | 04:59 | |
*** _d34dh0r53_ has quit IRC | 05:08 | |
*** shyamb has joined #openstack-keystone | 05:08 | |
*** cloudkiller has joined #openstack-keystone | 05:11 | |
*** _d34dh0r53_ has joined #openstack-keystone | 05:11 | |
*** shyamb has quit IRC | 05:35 | |
*** shyamb has joined #openstack-keystone | 05:41 | |
*** shyam89 has joined #openstack-keystone | 06:07 | |
*** shyamb has quit IRC | 06:07 | |
*** shyam89 has quit IRC | 06:29 | |
*** shyamb has joined #openstack-keystone | 06:40 | |
*** xek has joined #openstack-keystone | 06:54 | |
openstackgerrit | Vishakha Agarwal proposed openstack/keystone master: WIP: Remove [signing] config https://review.opendev.org/659434 | 06:54 |
openstackgerrit | Vishakha Agarwal proposed openstack/keystone master: Remove [signing] config https://review.opendev.org/659434 | 06:56 |
*** rcernin has quit IRC | 07:01 | |
*** starborn has joined #openstack-keystone | 07:03 | |
*** openstackgerrit has quit IRC | 07:03 | |
*** tesseract has joined #openstack-keystone | 07:05 | |
*** jaosorior has quit IRC | 07:06 | |
*** pcaruana has joined #openstack-keystone | 07:13 | |
*** xek has quit IRC | 07:21 | |
*** awalende has joined #openstack-keystone | 07:49 | |
*** tesseract has quit IRC | 07:52 | |
*** tesseract has joined #openstack-keystone | 07:52 | |
*** shyamb has quit IRC | 08:01 | |
*** awalende_ has joined #openstack-keystone | 08:15 | |
*** awalend__ has joined #openstack-keystone | 08:18 | |
*** awalende has quit IRC | 08:19 | |
*** awalende_ has quit IRC | 08:20 | |
*** awalende has joined #openstack-keystone | 08:21 | |
*** awalend__ has quit IRC | 08:24 | |
*** starborn has quit IRC | 08:29 | |
*** tkajinam has quit IRC | 08:32 | |
*** starborn has joined #openstack-keystone | 08:33 | |
*** openstackgerrit has joined #openstack-keystone | 08:39 | |
openstackgerrit | Vishakha Agarwal proposed openstack/keystone master: Remove [signing] config https://review.opendev.org/659434 | 08:39 |
*** shyamb has joined #openstack-keystone | 08:55 | |
openstackgerrit | Vishakha Agarwal proposed openstack/keystone master: Remove [token]/ infer_roles https://review.opendev.org/659500 | 08:56 |
*** rabel has quit IRC | 09:03 | |
*** starborn has quit IRC | 09:08 | |
openstackgerrit | Vishakha Agarwal proposed openstack/keystone master: Remove [token]/ infer_roles https://review.opendev.org/659500 | 09:13 |
openstackgerrit | Vishakha Agarwal proposed openstack/keystone master: Remove [token]/ infer_roles https://review.opendev.org/659500 | 09:15 |
*** rabel has joined #openstack-keystone | 09:16 | |
*** starborn has joined #openstack-keystone | 09:37 | |
*** yuxin_ has quit IRC | 10:08 | |
*** shyamb has quit IRC | 10:10 | |
*** awalende_ has joined #openstack-keystone | 10:11 | |
*** jaosorior has joined #openstack-keystone | 10:12 | |
*** awalende has quit IRC | 10:12 | |
*** shyamb has joined #openstack-keystone | 10:21 | |
*** pcaruana has quit IRC | 10:27 | |
*** xek has joined #openstack-keystone | 10:27 | |
*** yuxin_ has joined #openstack-keystone | 10:28 | |
*** shyamb has quit IRC | 10:40 | |
*** shyamb has joined #openstack-keystone | 10:41 | |
*** shyamb has quit IRC | 10:55 | |
*** shyamb has joined #openstack-keystone | 11:11 | |
openstackgerrit | Vishakha Agarwal proposed openstack/keystone master: Remove [token]/ infer_roles https://review.opendev.org/659500 | 11:25 |
*** yan0s has joined #openstack-keystone | 11:25 | |
*** pcaruana has joined #openstack-keystone | 11:37 | |
*** shyamb has quit IRC | 11:43 | |
*** shyam89 has joined #openstack-keystone | 11:43 | |
*** rabel has left #openstack-keystone | 12:00 | |
*** lajoskatona has joined #openstack-keystone | 12:11 | |
*** joshualyle has joined #openstack-keystone | 12:24 | |
*** awalende has joined #openstack-keystone | 12:27 | |
*** awalende_ has quit IRC | 12:29 | |
*** shyam89 has quit IRC | 12:35 | |
*** shyamb has joined #openstack-keystone | 12:35 | |
*** raildo has joined #openstack-keystone | 12:37 | |
*** shyamb has quit IRC | 12:42 | |
*** shyamb has joined #openstack-keystone | 12:47 | |
*** shyamb has quit IRC | 12:51 | |
*** shyamb has joined #openstack-keystone | 12:57 | |
*** mchlumsky has joined #openstack-keystone | 12:59 | |
*** mchlumsky has quit IRC | 13:06 | |
*** mchlumsky has joined #openstack-keystone | 13:08 | |
*** lbragstad has joined #openstack-keystone | 13:09 | |
*** itlinux has quit IRC | 13:10 | |
*** xek_ has joined #openstack-keystone | 13:28 | |
*** xek has quit IRC | 13:30 | |
*** lajoskatona has quit IRC | 13:33 | |
*** shyamb has quit IRC | 13:38 | |
*** vishakha has quit IRC | 13:49 | |
*** pcaruana has quit IRC | 13:56 | |
*** johnthetubaguy has joined #openstack-keystone | 14:09 | |
*** cloudkiller is now known as blah23 | 14:27 | |
*** blah23 is now known as cloudnull|afk | 14:27 | |
*** itlinux has joined #openstack-keystone | 14:27 | |
*** itlinux has quit IRC | 14:31 | |
*** cloudnull|afk is now known as cloudnull | 14:31 | |
*** NM has joined #openstack-keystone | 14:31 | |
*** starborn has quit IRC | 14:31 | |
*** d34dh0r53 has quit IRC | 14:36 | |
*** d34dh0r53 has joined #openstack-keystone | 14:37 | |
*** pcaruana has joined #openstack-keystone | 14:37 | |
*** d34dh0r53 is now known as Guest28904 | 14:41 | |
*** NM has quit IRC | 15:06 | |
*** awalende has quit IRC | 15:11 | |
*** awalende has joined #openstack-keystone | 15:12 | |
*** awalende_ has joined #openstack-keystone | 15:15 | |
*** awalende has quit IRC | 15:16 | |
*** awalende_ has quit IRC | 15:20 | |
openstackgerrit | Pavlo Shchelokovskyy proposed openstack/keystone master: Use ignore_change_password_on_first_use for admin https://review.opendev.org/659600 | 15:29 |
*** _d34dh0r53_ is now known as d34dh0r53 | 15:38 | |
*** pcaruana has quit IRC | 15:47 | |
*** dims has quit IRC | 16:05 | |
*** tesseract has quit IRC | 16:05 | |
*** yan0s has quit IRC | 16:07 | |
openstackgerrit | Gage Hugo proposed openstack/keystonemiddleware master: Blacklist bandit 1.6.0 https://review.opendev.org/659610 | 16:08 |
*** awalende has joined #openstack-keystone | 16:09 | |
*** awalende has quit IRC | 16:13 | |
*** NM has joined #openstack-keystone | 16:40 | |
*** jmlowe has quit IRC | 16:41 | |
*** jmlowe has joined #openstack-keystone | 17:02 | |
*** joshualyle has quit IRC | 17:03 | |
*** dims has joined #openstack-keystone | 17:03 | |
*** lbragstad has quit IRC | 17:05 | |
*** dims has quit IRC | 17:12 | |
*** lbragstad has joined #openstack-keystone | 17:13 | |
*** NM has quit IRC | 17:13 | |
*** dims has joined #openstack-keystone | 17:13 | |
*** NM has joined #openstack-keystone | 17:28 | |
*** xek__ has joined #openstack-keystone | 17:30 | |
*** xek_ has quit IRC | 17:32 | |
*** dklyle has quit IRC | 17:34 | |
-openstackstatus- NOTICE: Gerrit is being restarted to add gitweb links back to Gerrit. Sorry for the noise. | 17:36 | |
*** pcaruana has joined #openstack-keystone | 17:39 | |
*** joshualyle has joined #openstack-keystone | 18:13 | |
*** joshualyle has quit IRC | 18:15 | |
*** eandersson has joined #openstack-keystone | 18:16 | |
eandersson | Seen an odd issue with ec2 credentials. We can create / delete ec2 tokens, but listing tokens leads to a decryption error. | 18:17 |
eandersson | > CredentialEncryptionError: Credential could not be decrypted. Please contact the administrator | 18:18 |
eandersson | Anyone got a clue on where to start when troubleshooting that? :D | 18:19 |
*** joshualyle has joined #openstack-keystone | 18:22 | |
*** trident has quit IRC | 18:51 | |
*** trident has joined #openstack-keystone | 18:52 | |
*** jmlowe has quit IRC | 19:29 | |
kmalloc | eandersson: that is... that is a weird one. | 19:31 |
kmalloc | sounds like some record is still lingering in the DB. | 19:31 |
kmalloc | eandersson: i recommend opening a bug on it and duplication steps. Check if it's the at-rest-encryption grabbing something bogus. | 19:31 |
kmalloc | eandersson: https://opendev.org/openstack/keystone/src/branch/master/keystone/credential/core.py#L44 something related to that | 19:32 |
*** xek__ has quit IRC | 19:32 | |
*** xek__ has joined #openstack-keystone | 19:32 | |
kmalloc | eandersson: https://opendev.org/openstack/keystone/src/branch/master/keystone/credential/providers/fernet/core.py#L109 | 19:36 |
kmalloc | eandersson: did you setup a decryption fernet repo for the credentials"? | 19:36 |
kmalloc | eandersson: i would also check the DB after deletion to see if some record is lingering. | 19:37 |
gagehugo | yeah, if there's stale encrypted records in the DB you can't list them, but creating/deleting new ones will work | 19:39 |
*** jmlowe has joined #openstack-keystone | 19:44 | |
*** NM has quit IRC | 19:50 | |
*** pcaruana has quit IRC | 19:52 | |
*** joshualyle has quit IRC | 20:01 | |
*** whoami-rajat has quit IRC | 20:05 | |
*** NM has joined #openstack-keystone | 20:32 | |
*** dave-mccowan has joined #openstack-keystone | 20:38 | |
eandersson | kmalloc, looks like the fernet key rotation started failing | 20:46 |
eandersson | for credentials | 20:46 |
eandersson | the migrator portion of it to be exact | 20:46 |
eandersson | and not sure how to get back into a good "state" | 20:47 |
*** mchlumsky has quit IRC | 20:47 | |
*** raildo has quit IRC | 20:48 | |
*** trident has quit IRC | 20:59 | |
*** trident has joined #openstack-keystone | 21:00 | |
*** NM has quit IRC | 21:26 | |
*** joshualyle has joined #openstack-keystone | 21:32 | |
*** xek has joined #openstack-keystone | 21:33 | |
*** xek__ has quit IRC | 21:35 | |
*** joshualyle has quit IRC | 21:36 | |
openstackgerrit | Merged openstack/keystone master: Revert "Blacklist bandit 1.6.0" https://review.opendev.org/659164 | 21:38 |
*** xek_ has joined #openstack-keystone | 21:47 | |
*** xek has quit IRC | 21:47 | |
*** xek has joined #openstack-keystone | 21:56 | |
*** xek_ has quit IRC | 21:56 | |
*** xek has quit IRC | 21:58 | |
*** xek has joined #openstack-keystone | 21:59 | |
eandersson | kmalloc, we basically use this https://github.com/openstack/openstack-ansible-os_keystone/blob/master/templates/keystone-credential-rotate.sh.j2#L24 | 21:59 |
eandersson | Not sure how we got into a scenario where credential_migrate was failing :'( | 21:59 |
*** joshualyle has joined #openstack-keystone | 22:23 | |
*** joshualyle has quit IRC | 22:27 | |
kmalloc | hah | 22:53 |
kmalloc | well that explains the issue | 22:53 |
kmalloc | sorry that happened to you :( | 22:53 |
*** tkajinam has joined #openstack-keystone | 22:55 | |
*** xek has quit IRC | 23:03 | |
*** rcernin has joined #openstack-keystone | 23:04 | |
*** efried has joined #openstack-keystone | 23:05 | |
efried | lbragstad: Would you please +1 (or not) this patch? https://review.opendev.org/#/c/624185/ It lgtm, but I'm not very familiar with the context (so to speak) so I'd prefer to proxy your vote to approve. | 23:06 |
efried | lbragstad: ...noting that (I think) johnthetubaguy is fixing up some of the concerns via series starting at https://review.opendev.org/#/c/657696/ | 23:07 |
efried | tia | 23:07 |
*** dklyle has joined #openstack-keystone | 23:21 | |
*** dklyle has quit IRC | 23:35 | |
*** aning_ has joined #openstack-keystone | 23:57 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!