*** awalende has joined #openstack-keystone | 00:13 | |
*** awalende has quit IRC | 00:18 | |
*** markvoelker has joined #openstack-keystone | 00:45 | |
*** jamesmcarthur has quit IRC | 00:46 | |
*** markvoelker has quit IRC | 00:50 | |
*** liushuo has joined #openstack-keystone | 01:07 | |
liushuo | https://bugs.launchpad.net/keystone/+bug/1833085 | 01:10 |
---|---|---|
openstack | Launchpad bug 1833085 in OpenStack Identity (keystone) "Zero-downtime upgrades lead to spurious token validation failures when caching is enabled" [High,Triaged] | 01:10 |
liushuo | validation failures of all valid tokens or only cached tokens? | 01:10 |
*** lbragstad has quit IRC | 01:22 | |
*** lbragstad has joined #openstack-keystone | 01:22 | |
kmalloc | liushuo: cached | 01:45 |
*** markvoelker has joined #openstack-keystone | 01:46 | |
*** markvoelker has quit IRC | 01:50 | |
liushuo | 3ks | 01:51 |
*** markvoelker has joined #openstack-keystone | 02:46 | |
*** markvoelker has quit IRC | 02:51 | |
*** whoami-rajat has joined #openstack-keystone | 03:01 | |
*** tristanC has quit IRC | 03:01 | |
*** tristanC has joined #openstack-keystone | 03:04 | |
*** lbragstad has quit IRC | 03:26 | |
*** liushuo has quit IRC | 03:29 | |
*** liushuo has joined #openstack-keystone | 03:29 | |
openstackgerrit | Merged openstack/keystone master: Update the meaning of low-hanging-fruit https://review.opendev.org/659141 | 03:32 |
*** markvoelker has joined #openstack-keystone | 03:47 | |
*** markvoelker has quit IRC | 03:52 | |
*** awalende has joined #openstack-keystone | 03:56 | |
*** threestrands has joined #openstack-keystone | 04:05 | |
*** awalende has quit IRC | 04:29 | |
*** markvoelker has joined #openstack-keystone | 04:48 | |
*** markvoelker has quit IRC | 04:52 | |
*** pcaruana has joined #openstack-keystone | 04:56 | |
*** awalende has joined #openstack-keystone | 05:03 | |
*** zzzeek has quit IRC | 05:07 | |
*** awalende has quit IRC | 05:08 | |
*** zzzeek has joined #openstack-keystone | 05:08 | |
*** masayukig has quit IRC | 05:36 | |
*** johnsom has quit IRC | 05:36 | |
*** csatari has quit IRC | 05:36 | |
*** hogepodge has quit IRC | 05:36 | |
*** masayukig has joined #openstack-keystone | 05:37 | |
*** csatari has joined #openstack-keystone | 05:38 | |
*** johnsom has joined #openstack-keystone | 05:38 | |
*** hogepodge has joined #openstack-keystone | 05:38 | |
*** markvoelker has joined #openstack-keystone | 05:49 | |
*** markvoelker has quit IRC | 05:54 | |
openstackgerrit | Vishakha Agarwal proposed openstack/keystone master: Fix contributor doc of keystone https://review.opendev.org/662690 | 06:18 |
*** vishalmanchanda has joined #openstack-keystone | 06:21 | |
openstackgerrit | zhaixiaojun proposed openstack/keystone master: Modify the url of upper_constraints_file https://review.opendev.org/665873 | 06:25 |
*** markvoelker has joined #openstack-keystone | 06:50 | |
*** markvoelker has quit IRC | 06:54 | |
*** trident has quit IRC | 06:57 | |
*** trident has joined #openstack-keystone | 06:59 | |
*** tesseract has joined #openstack-keystone | 07:24 | |
*** threestrands has quit IRC | 07:36 | |
*** xek has joined #openstack-keystone | 07:41 | |
*** markvoelker has joined #openstack-keystone | 07:50 | |
*** markvoelker has quit IRC | 07:55 | |
*** spsurya has joined #openstack-keystone | 08:01 | |
*** yan0s has joined #openstack-keystone | 08:05 | |
*** h3rbz has quit IRC | 08:20 | |
*** dklyle has quit IRC | 08:35 | |
*** david-lyle has joined #openstack-keystone | 08:35 | |
*** imacdonn has quit IRC | 08:40 | |
*** imacdonn has joined #openstack-keystone | 08:40 | |
*** tkajinam has quit IRC | 08:50 | |
*** vishakha has joined #openstack-keystone | 08:51 | |
*** markvoelker has joined #openstack-keystone | 08:51 | |
*** kevinluuuuu has joined #openstack-keystone | 08:54 | |
*** markvoelker has quit IRC | 08:56 | |
*** liushuo_ has joined #openstack-keystone | 08:59 | |
*** liushuo has quit IRC | 09:03 | |
openstackgerrit | Vishakha Agarwal proposed openstack/keystone master: Fix contributor doc of keystone https://review.opendev.org/662690 | 09:03 |
*** liushuobj__ has joined #openstack-keystone | 09:10 | |
*** liushuo_ has quit IRC | 09:13 | |
*** awalende has joined #openstack-keystone | 09:34 | |
*** rcernin has quit IRC | 09:57 | |
*** awalende has quit IRC | 10:01 | |
*** awalende has joined #openstack-keystone | 10:01 | |
*** awalende has quit IRC | 10:05 | |
jamespage | would anyone have cycles to peek at https://review.opendev.org/#/c/665617/ ? its a fairly blanket fix for py3/msgpack decoding but I think its appropriate | 10:14 |
*** liushuo_ has joined #openstack-keystone | 10:40 | |
*** liushuobj__ has quit IRC | 10:44 | |
*** awalende has joined #openstack-keystone | 10:50 | |
*** awalende has quit IRC | 10:51 | |
*** awalende has joined #openstack-keystone | 10:52 | |
*** liushuobj__ has joined #openstack-keystone | 10:54 | |
*** awalende has quit IRC | 10:56 | |
*** liushuo_ has quit IRC | 10:57 | |
*** dave-mccowan has joined #openstack-keystone | 11:34 | |
*** raildo has joined #openstack-keystone | 11:41 | |
*** awalende has joined #openstack-keystone | 11:49 | |
*** awalende has quit IRC | 11:51 | |
*** liushuo_ has joined #openstack-keystone | 11:51 | |
*** awalende has joined #openstack-keystone | 11:52 | |
*** liushuobj__ has quit IRC | 11:55 | |
*** awalende has quit IRC | 11:55 | |
*** awalende has joined #openstack-keystone | 12:23 | |
*** awalende has quit IRC | 12:27 | |
*** liushuobj__ has joined #openstack-keystone | 12:31 | |
*** liushuo_ has quit IRC | 12:35 | |
*** liushuo_ has joined #openstack-keystone | 12:45 | |
*** liushuobj__ has quit IRC | 12:48 | |
*** awalende has joined #openstack-keystone | 12:53 | |
*** markvoelker has joined #openstack-keystone | 12:55 | |
*** awalende has quit IRC | 12:56 | |
*** liushuobj__ has joined #openstack-keystone | 12:57 | |
*** awalende has joined #openstack-keystone | 12:58 | |
*** markvoelker has quit IRC | 13:00 | |
*** liushuo_ has quit IRC | 13:00 | |
*** awalende has quit IRC | 13:02 | |
*** awalende_ has joined #openstack-keystone | 13:02 | |
*** lbragstad has joined #openstack-keystone | 13:11 | |
*** liushuo_ has joined #openstack-keystone | 13:22 | |
*** liushuobj__ has quit IRC | 13:26 | |
*** vishakha has quit IRC | 13:36 | |
*** pcaruana has quit IRC | 13:37 | |
*** vishalmanchanda has quit IRC | 13:48 | |
*** rafaelweingartne has joined #openstack-keystone | 13:49 | |
*** pcaruana has joined #openstack-keystone | 13:54 | |
*** markvoelker has joined #openstack-keystone | 13:56 | |
*** mchlumsky has joined #openstack-keystone | 14:00 | |
knikolla | o/ | 14:00 |
lbragstad | o/ | 14:00 |
*** markvoelker has quit IRC | 14:15 | |
*** rafaelweingartne has quit IRC | 14:20 | |
*** vishakha has joined #openstack-keystone | 14:23 | |
*** awalende_ has quit IRC | 14:27 | |
*** awalende has joined #openstack-keystone | 14:27 | |
*** jamesmcarthur has joined #openstack-keystone | 14:31 | |
*** awalende has quit IRC | 14:31 | |
*** liushuobj__ has joined #openstack-keystone | 14:46 | |
*** liushuo_ has quit IRC | 14:50 | |
ayoung | kmalloc, I think we're ok on the exception part you wrote about above for explicit_project_id. If a user passes that in, it will be policy-checked. If it fails, the whole create fails. | 14:54 |
kmalloc | thats fine, the update needs to be covered | 14:55 |
kmalloc | you don't want explicit_id ever handled in update | 14:55 |
kmalloc | ayoung: otherwise the code really is ok | 14:58 |
ayoung | kmalloc, Its not allowed in via JSON-Home in update, only create | 14:58 |
ayoung | I need to update the JSON home test, and I'll repost. | 14:59 |
kmalloc | *extras* allows it | 14:59 |
ayoung | extras allows anything | 14:59 |
kmalloc | right | 14:59 |
kmalloc | so. | 14:59 |
*** jamesmcarthur_ has joined #openstack-keystone | 14:59 | |
kmalloc | you need to explicitly raise an exception in update | 14:59 |
ayoung | I think you are lying. | 14:59 |
ayoung | HEH | 14:59 |
ayoung | No seriously, how would it be any different than sending in "random" or "foo" in extras? | 15:00 |
kmalloc | because we are carving out this value as having special meaning | 15:00 |
kmalloc | it's communicating that you can't set explicit_id or change ID in update | 15:00 |
*** spsurya has quit IRC | 15:01 | |
kmalloc | and fyi, adding it to the schema.py for JSON home on create explicitly calls it out as a valid entry if someone parses json home | 15:02 |
kmalloc | s/home/schema | 15:02 |
*** jamesmcarthur has quit IRC | 15:02 | |
kmalloc | wait strike that whole last sentence | 15:03 |
kmalloc | that was useless and incorrect | 15:03 |
kmalloc | adding it to the json schema just makes it more explicitly covered rather than relying on extras, cleaner maintainability, i wouldn't -1 strictly on the schema change though | 15:03 |
*** gyee has joined #openstack-keystone | 15:07 | |
cmurphy | I don't have anything prepared for today's meeting, does anyone want to add something to https://etherpad.openstack.org/p/keystone-weekly-meeting to cover with the team? | 15:10 |
*** markvoelker has joined #openstack-keystone | 15:12 | |
openstackgerrit | ayoung proposed openstack/keystone master: Explicit Project ID https://review.opendev.org/664746 | 15:15 |
*** awalende has joined #openstack-keystone | 15:15 | |
ayoung | kmalloc, since "extras" can be anything, putting "explicit_project_id" in there would, in update, technically be allowed. Just very, very dumb. | 15:16 |
*** whoami-rajat has quit IRC | 15:21 | |
knikolla | cmurphy: if nothing gets added i propose to just cancel the meeting for today. | 15:23 |
cmurphy | knikolla: i agree | 15:24 |
lbragstad | i was thinking about doing an update on unified limits/oslo.limit during open discussion | 15:24 |
lbragstad | but it's not a big deal | 15:24 |
cmurphy | that sounds worthwhile | 15:25 |
*** markvoelker has quit IRC | 15:31 | |
kmalloc | ayoung: yeah, totally dumb, but this is a case where we should explicitly say "uh...." | 15:36 |
kmalloc | ;) | 15:36 |
*** mgagne has quit IRC | 15:39 | |
*** d34dh0r53 has quit IRC | 15:39 | |
*** kklimonda has quit IRC | 15:39 | |
*** vishakha has quit IRC | 15:40 | |
*** masayukig has quit IRC | 15:40 | |
*** d34dh0r53 has joined #openstack-keystone | 15:40 | |
*** dave-mccowan has quit IRC | 15:40 | |
*** masayukig has joined #openstack-keystone | 15:40 | |
*** kklimonda has joined #openstack-keystone | 15:41 | |
*** awalende has quit IRC | 15:41 | |
*** awalende has joined #openstack-keystone | 15:42 | |
*** mgagne has joined #openstack-keystone | 15:42 | |
*** vishakha has joined #openstack-keystone | 15:44 | |
kmalloc | *sigh* another busted panel in the dell 4k screen. | 15:44 |
kmalloc | this is now the 4th panel that has turned green/cloudy distortion | 15:45 |
*** awalende has quit IRC | 15:46 | |
cmurphy | meeting in 10 minutes in #openstack-meeting-alt | 15:50 |
* kmalloc sips coffee. | 15:50 | |
*** awalende has joined #openstack-keystone | 15:51 | |
*** liushuo_ has joined #openstack-keystone | 15:53 | |
*** liushuobj__ has quit IRC | 15:57 | |
lbragstad | johnthetubaguy are you around? | 16:00 |
cmurphy | meeting starting now | 16:01 |
*** pcaruana has quit IRC | 16:01 | |
*** awalende has quit IRC | 16:19 | |
*** awalende has joined #openstack-keystone | 16:19 | |
*** vishwanathj has joined #openstack-keystone | 16:22 | |
*** awalende has quit IRC | 16:23 | |
*** markvoelker has joined #openstack-keystone | 16:28 | |
*** yan0s has quit IRC | 16:31 | |
openstackgerrit | jacky06 proposed openstack/ldappool master: Sync Sphinx requirement https://review.opendev.org/666046 | 16:38 |
openstackgerrit | jacky06 proposed openstack/ldappool master: Sync Sphinx requirement https://review.opendev.org/666046 | 16:40 |
*** pcaruana has joined #openstack-keystone | 16:45 | |
*** markvoelker has quit IRC | 16:46 | |
*** jamesmcarthur_ has quit IRC | 16:57 | |
*** jamesmcarthur has joined #openstack-keystone | 16:59 | |
*** altlogbot_0 has quit IRC | 17:00 | |
*** altlogbot_1 has joined #openstack-keystone | 17:01 | |
*** irclogbot_1 has quit IRC | 17:02 | |
*** irclogbot_0 has joined #openstack-keystone | 17:02 | |
*** jamesmcarthur has quit IRC | 17:04 | |
openstackgerrit | jacky06 proposed openstack/python-keystoneclient master: Sync Sphinx requirement https://review.opendev.org/666065 | 17:08 |
*** brett-soric has joined #openstack-keystone | 17:11 | |
*** awalende has joined #openstack-keystone | 17:24 | |
*** jamesmcarthur has joined #openstack-keystone | 17:28 | |
lbragstad | cmurphy are you cool with one +2 and one +W on spec cleanups? | 17:32 |
*** jamesmcarthur has quit IRC | 17:33 | |
cmurphy | lbragstad: sure | 17:33 |
*** whoami-rajat has joined #openstack-keystone | 17:37 | |
openstackgerrit | Merged openstack/keystone-specs master: Move SP endpoint filters spec to attic https://review.opendev.org/658893 | 17:40 |
openstackgerrit | Merged openstack/keystone-specs master: Move unified model spec from ongoing to backlog https://review.opendev.org/658894 | 17:44 |
openstackgerrit | Merged openstack/keystone-specs master: Combine policy roadmap documents https://review.opendev.org/659159 | 17:46 |
*** jamesmcarthur has joined #openstack-keystone | 17:52 | |
openstackgerrit | Lance Bragstad proposed openstack/oslo.limit master: WIP: Add ksa connection logic https://review.opendev.org/666085 | 17:53 |
*** awalende has quit IRC | 17:55 | |
*** awalende has joined #openstack-keystone | 17:56 | |
*** awalende_ has joined #openstack-keystone | 17:58 | |
*** awalende has quit IRC | 17:58 | |
*** brett-soric has left #openstack-keystone | 17:59 | |
*** awalende_ has quit IRC | 18:02 | |
*** awalende has joined #openstack-keystone | 18:05 | |
*** vishwanathj has quit IRC | 18:22 | |
*** liushuobj__ has joined #openstack-keystone | 18:26 | |
*** liushuo_ has quit IRC | 18:30 | |
*** vishwanathj has joined #openstack-keystone | 18:35 | |
*** awalende has quit IRC | 18:35 | |
*** awalende has joined #openstack-keystone | 18:36 | |
*** awalende has quit IRC | 18:39 | |
*** awalende has joined #openstack-keystone | 18:40 | |
*** awalende has quit IRC | 18:43 | |
*** pcaruana has quit IRC | 18:45 | |
*** pcaruana has joined #openstack-keystone | 19:05 | |
*** vishwanathj has quit IRC | 19:06 | |
openstackgerrit | Colleen Murphy proposed openstack/keystone master: Add link to describe Principle of Least Privilege https://review.opendev.org/666151 | 19:06 |
*** jamesmcarthur has quit IRC | 19:08 | |
*** jdennis has quit IRC | 19:16 | |
*** jdennis has joined #openstack-keystone | 19:20 | |
*** jdennis has quit IRC | 19:24 | |
*** awalende has joined #openstack-keystone | 19:29 | |
*** awalende has quit IRC | 19:32 | |
*** jdennis has joined #openstack-keystone | 19:40 | |
*** awalende has joined #openstack-keystone | 19:42 | |
*** vishakha has quit IRC | 19:46 | |
*** vishwanathj has joined #openstack-keystone | 19:54 | |
*** vishwanathj has quit IRC | 19:59 | |
*** jamesmcarthur has joined #openstack-keystone | 20:01 | |
openstackgerrit | Colleen Murphy proposed openstack/keystonemiddleware master: Add validation of app cred access rules https://review.opendev.org/633369 | 20:26 |
mloza | Hello, I keep getting this error in the logs 'Either [None] key_repository does not exist or Keystone does not have sufficient permission to access it: /etc/keystone/credential-keys/ ' | 20:45 |
mloza | The env is in stable/rocky | 20:46 |
*** whoami-rajat has quit IRC | 20:56 | |
openstackgerrit | Merged openstack/keystone master: Update mission statement and vision reflection https://review.opendev.org/662106 | 21:00 |
openstackgerrit | Colleen Murphy proposed openstack/keystone master: Add new attribute to the federation protocol API https://review.opendev.org/637305 | 21:01 |
openstackgerrit | Raildo Mascena proposed openstack/keystone master: Fixing dn_to_id function for cases were id is not in the DN https://review.opendev.org/649177 | 21:14 |
*** xek has quit IRC | 21:15 | |
*** jamesmcarthur has quit IRC | 21:17 | |
*** ayoung has quit IRC | 21:38 | |
*** tesseract has quit IRC | 21:47 | |
*** markvoelker has joined #openstack-keystone | 21:48 | |
*** awalende has quit IRC | 21:52 | |
*** awalende has joined #openstack-keystone | 21:53 | |
*** awalende has quit IRC | 21:57 | |
*** liushuo_ has joined #openstack-keystone | 21:58 | |
*** markvoelker has quit IRC | 22:00 | |
*** liushuo has joined #openstack-keystone | 22:01 | |
*** liushuobj__ has quit IRC | 22:02 | |
*** raildo has quit IRC | 22:02 | |
*** liushuo_ has quit IRC | 22:04 | |
*** mchlumsky has quit IRC | 22:09 | |
*** awalende has joined #openstack-keystone | 22:24 | |
*** awalende has quit IRC | 22:29 | |
*** liushuo has quit IRC | 22:58 | |
*** liushuo has joined #openstack-keystone | 22:58 | |
*** tkajinam has joined #openstack-keystone | 23:01 | |
*** awalende has joined #openstack-keystone | 23:03 | |
*** liushuo_ has joined #openstack-keystone | 23:08 | |
*** liushuo has quit IRC | 23:11 | |
*** rcernin has joined #openstack-keystone | 23:16 | |
*** rcernin has quit IRC | 23:17 | |
*** rcernin has joined #openstack-keystone | 23:18 | |
*** liushuobj__ has joined #openstack-keystone | 23:35 | |
*** awalende has quit IRC | 23:36 | |
*** liushuo_ has quit IRC | 23:39 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!