| *** jamesmcarthur has quit IRC | 00:06 | |
| *** gyee has quit IRC | 00:10 | |
| *** jamesmcarthur has joined #openstack-keystone | 00:40 | |
| *** markvoelker has joined #openstack-keystone | 00:51 | |
| *** markvoelker has quit IRC | 00:56 | |
| *** liushuo has joined #openstack-keystone | 00:57 | |
| *** liushuo_ has quit IRC | 01:00 | |
| openstackgerrit | Merged openstack/keystoneauth master: Simplify session logger object tests https://review.opendev.org/680515 | 01:01 |
|---|---|---|
| *** liushuo_ has joined #openstack-keystone | 01:04 | |
| *** jamesmcarthur has quit IRC | 01:06 | |
| *** jamesmcarthur has joined #openstack-keystone | 01:06 | |
| *** liushuo has quit IRC | 01:07 | |
| *** jamesmcarthur has quit IRC | 01:21 | |
| *** spsurya has joined #openstack-keystone | 01:28 | |
| *** jamesmcarthur has joined #openstack-keystone | 02:05 | |
| *** jamesmcarthur has quit IRC | 02:18 | |
| *** jamesmcarthur has joined #openstack-keystone | 02:20 | |
| *** jamesmcarthur has quit IRC | 02:26 | |
| *** jamesmcarthur_ has joined #openstack-keystone | 02:26 | |
| *** jamesmcarthur_ has quit IRC | 02:31 | |
| *** jamesmcarthur has joined #openstack-keystone | 02:34 | |
| *** dave-mccowan has quit IRC | 02:38 | |
| *** liushuobj__ has joined #openstack-keystone | 03:15 | |
| *** liushuo_ has quit IRC | 03:17 | |
| *** mvkr has joined #openstack-keystone | 03:34 | |
| *** jamesmcarthur has quit IRC | 03:34 | |
| *** jamesmcarthur has joined #openstack-keystone | 03:37 | |
| *** jamesmcarthur has quit IRC | 03:42 | |
| *** jamesmcarthur has joined #openstack-keystone | 04:05 | |
| *** jamesmcarthur has quit IRC | 04:12 | |
| *** etp has joined #openstack-keystone | 04:17 | |
| *** vishakha has joined #openstack-keystone | 04:22 | |
| *** jaosorior has quit IRC | 04:34 | |
| *** jaosorior has joined #openstack-keystone | 04:34 | |
| *** Luzi has joined #openstack-keystone | 04:52 | |
| *** ileixe has left #openstack-keystone | 05:05 | |
| *** jamesmcarthur has joined #openstack-keystone | 05:09 | |
| *** jamesmcarthur has quit IRC | 05:13 | |
| *** markvoelker has joined #openstack-keystone | 05:15 | |
| *** markvoelker has quit IRC | 05:20 | |
| *** pcaruana has joined #openstack-keystone | 05:25 | |
| *** zaneb has quit IRC | 05:35 | |
| *** zaneb has joined #openstack-keystone | 05:35 | |
| *** etp has quit IRC | 05:47 | |
| *** jamesmcarthur has joined #openstack-keystone | 05:49 | |
| *** jaosorior has quit IRC | 05:49 | |
| *** jaosorior has joined #openstack-keystone | 05:51 | |
| *** jamesmcarthur has quit IRC | 05:54 | |
| *** etp has joined #openstack-keystone | 05:55 | |
| *** itlinux has joined #openstack-keystone | 06:01 | |
| openstackgerrit | Takashi Kajinami proposed openstack/python-keystoneclient master: WIP: Fix broken unit tests https://review.opendev.org/680579 | 06:03 |
| *** markvoelker has joined #openstack-keystone | 06:06 | |
| *** markvoelker has quit IRC | 06:10 | |
| openstackgerrit | Takashi Kajinami proposed openstack/python-keystoneclient master: Fix unit tests broken by requests-mock https://review.opendev.org/680579 | 06:11 |
| *** etp has quit IRC | 06:16 | |
| *** etp has joined #openstack-keystone | 06:16 | |
| openstackgerrit | Takashi Kajinami proposed openstack/python-keystoneclient master: Fix unit tests broken by requests-mock https://review.opendev.org/680579 | 06:33 |
| *** markvoelker has joined #openstack-keystone | 06:36 | |
| *** jawad_axd has joined #openstack-keystone | 06:38 | |
| *** ildikov has joined #openstack-keystone | 06:39 | |
| *** liushuo_ has joined #openstack-keystone | 06:41 | |
| *** markvoelker has quit IRC | 06:41 | |
| *** liushuobj__ has quit IRC | 06:45 | |
| *** dancn has joined #openstack-keystone | 06:45 | |
| *** jamesmcarthur has joined #openstack-keystone | 06:51 | |
| *** trident has quit IRC | 06:53 | |
| *** jamesmcarthur has quit IRC | 06:55 | |
| *** trident has joined #openstack-keystone | 07:04 | |
| *** markvoelker has joined #openstack-keystone | 07:06 | |
| *** itlinux has quit IRC | 07:09 | |
| *** threestrands has quit IRC | 07:10 | |
| *** rcernin|brb has quit IRC | 07:10 | |
| *** tesseract has joined #openstack-keystone | 07:11 | |
| *** markvoelker has quit IRC | 07:11 | |
| *** markvoelker has joined #openstack-keystone | 07:16 | |
| *** dancn has quit IRC | 07:18 | |
| *** markvoelker has quit IRC | 07:20 | |
| *** jamesmcarthur has joined #openstack-keystone | 07:22 | |
| *** dancn has joined #openstack-keystone | 07:23 | |
| openstackgerrit | Qitao proposed openstack/python-keystoneclient master: Fix misspell word https://review.opendev.org/680594 | 07:40 |
| *** jamesmcarthur has quit IRC | 07:42 | |
| openstackgerrit | Qitao proposed openstack/keystoneauth master: Fix misspell word https://review.opendev.org/680600 | 07:58 |
| *** dancn has quit IRC | 07:59 | |
| *** ivve has joined #openstack-keystone | 08:01 | |
| *** dancn has joined #openstack-keystone | 08:04 | |
| *** pcaruana has quit IRC | 08:08 | |
| *** pcaruana has joined #openstack-keystone | 08:13 | |
| *** liushuo_ has quit IRC | 08:15 | |
| *** liushuo_ has joined #openstack-keystone | 08:16 | |
| *** liushuo_ has quit IRC | 08:17 | |
| *** liushuo_ has joined #openstack-keystone | 08:18 | |
| *** liushuobj__ has joined #openstack-keystone | 08:19 | |
| *** liushuo_ has quit IRC | 08:20 | |
| *** liushuobj__ has quit IRC | 08:20 | |
| *** liushuobj__ has joined #openstack-keystone | 08:20 | |
| *** liushuobj__ has quit IRC | 08:26 | |
| *** liushuobj__ has joined #openstack-keystone | 08:27 | |
| tkajinam | Hi team. It would be nice if I can ask some attention on the patch https://review.opendev.org/#/c/680579/ which fixes currently broken unit tests. I hope that the patch will pass CI shortly. | 08:31 |
| *** tkajinam has quit IRC | 08:32 | |
| *** trident has quit IRC | 08:40 | |
| openstackgerrit | Qitao proposed openstack/keystonemiddleware master: Fix misspell word https://review.opendev.org/680624 | 08:45 |
| *** liushuo_ has joined #openstack-keystone | 08:46 | |
| *** liushuobj__ has quit IRC | 08:50 | |
| *** trident has joined #openstack-keystone | 08:51 | |
| *** zigo has quit IRC | 08:57 | |
| *** zigo has joined #openstack-keystone | 09:05 | |
| vishakha | Thanks for the gate fix tkajinam | 09:09 |
| *** markvoelker has joined #openstack-keystone | 09:10 | |
| *** markvoelker has quit IRC | 09:20 | |
| *** spatel has joined #openstack-keystone | 09:31 | |
| *** prometheanfire has quit IRC | 09:34 | |
| *** spatel has quit IRC | 09:35 | |
| *** prometheanfire has joined #openstack-keystone | 09:35 | |
| *** ivve has quit IRC | 09:36 | |
| *** ivve has joined #openstack-keystone | 09:39 | |
| openstackgerrit | Takashi Kajinami proposed openstack/python-keystoneclient master: Fix unit tests broken by requests-mock https://review.opendev.org/680579 | 10:08 |
| *** jawad_axd has quit IRC | 10:19 | |
| *** dancn has quit IRC | 10:48 | |
| *** ivve has quit IRC | 10:52 | |
| *** dancn has joined #openstack-keystone | 10:53 | |
| *** ivve has joined #openstack-keystone | 10:55 | |
| *** spatel has joined #openstack-keystone | 11:01 | |
| *** spatel has quit IRC | 11:05 | |
| *** dancn has quit IRC | 11:13 | |
| *** johnsom has quit IRC | 11:53 | |
| *** johnsom has joined #openstack-keystone | 11:55 | |
| *** bnemec has quit IRC | 11:55 | |
| *** bnemec has joined #openstack-keystone | 11:56 | |
| *** etp has quit IRC | 11:57 | |
| *** rcernin|brb has joined #openstack-keystone | 12:03 | |
| *** jawad_axd has joined #openstack-keystone | 12:17 | |
| *** spsurya has quit IRC | 12:26 | |
| *** rcernin|brb has quit IRC | 12:30 | |
| *** dave-mccowan has joined #openstack-keystone | 12:30 | |
| *** dave-mccowan has quit IRC | 12:31 | |
| *** dave-mccowan has joined #openstack-keystone | 12:33 | |
| *** dave-mccowan has quit IRC | 12:38 | |
| *** markvoelker has joined #openstack-keystone | 12:45 | |
| *** jamesmcarthur has joined #openstack-keystone | 13:07 | |
| *** jawad_axd has quit IRC | 13:15 | |
| *** jawad_axd has joined #openstack-keystone | 13:16 | |
| *** jawad_ax_ has joined #openstack-keystone | 13:19 | |
| *** jawad_a__ has joined #openstack-keystone | 13:21 | |
| *** jawad_axd has quit IRC | 13:21 | |
| *** jawad_ax_ has quit IRC | 13:23 | |
| *** jawad_a__ has quit IRC | 13:25 | |
| *** jawad_axd has joined #openstack-keystone | 13:38 | |
| *** jawad_axd has quit IRC | 13:42 | |
| *** Luzi has quit IRC | 13:59 | |
| *** lbragstad has quit IRC | 14:04 | |
| *** lbragstad has joined #openstack-keystone | 14:07 | |
| *** jamesmcarthur has quit IRC | 14:07 | |
| *** markvoelker has quit IRC | 14:07 | |
| *** jamesmcarthur has joined #openstack-keystone | 14:15 | |
| *** jaosorior has quit IRC | 14:38 | |
| *** markvoelker has joined #openstack-keystone | 14:51 | |
| *** jawad_axd has joined #openstack-keystone | 14:53 | |
| *** jawad_axd has quit IRC | 14:53 | |
| *** markvoelker has quit IRC | 14:55 | |
| *** bnemec is now known as beekneemech | 15:04 | |
| *** jdwidari has joined #openstack-keystone | 15:07 | |
| *** trident has quit IRC | 15:37 | |
| *** trident has joined #openstack-keystone | 15:46 | |
| *** tesseract has quit IRC | 15:52 | |
| *** gyee has joined #openstack-keystone | 15:55 | |
| *** ivve has quit IRC | 15:56 | |
| openstackgerrit | Merged openstack/keystone master: Fix oauthlib update errors https://review.opendev.org/677511 | 15:59 |
| cmurphy | prometheanfire: ^ | 15:59 |
| *** virendra-sharma has joined #openstack-keystone | 16:06 | |
| virendra-sharma | Hi, Devstack failing with below error... any suggestions ?Failed to discover available identity versions when contacting http://172.21.74.3/identity. Attempting to parse version from URL.Could not find versioned identity endpoints when attempting to authenticate. Please check that your auth_url is correct. Internal Server Error (HTTP 500) | 16:10 |
| *** baffle has quit IRC | 16:21 | |
| prometheanfire | woot | 16:29 |
| prometheanfire | now if only gate weren't so slow | 16:29 |
| *** baffle has joined #openstack-keystone | 16:32 | |
| virendra-sharma | prometheanfire do you have any suggestions on above error for devstack installation ? | 16:34 |
| *** pcaruana has quit IRC | 16:37 | |
| cmurphy | virendra-sharma: the message is saying that keystone had an internal server error so you need to check the keystone logs with journalctl -u devstack@keystone | 16:42 |
| virendra-sharma | Started Devstack devstack@keystone.service.Traceback (most recent call last):Traceback (most recent call last): File "/usr/local/bin/keystone-wsgi-public", line 6, in <module> File "/usr/local/bin/keystone-wsgi-public", line 6, in <module> from keystone.server.wsgi import initialize_public_applicationModuleNotFoundError: No module named 'keyst | 16:43 |
| virendra-sharma | one'unable to load app 0 (mountpoint='') (callable not found or import error)*** no app loaded. going in full dynamic mode *** from keystone.server.wsgi import initialize_public_applicationModuleNotFoundError: No module named 'keystone'unable to load app 0 (mountpoint='') (callable not found or import error)*** no app loaded. going in full dynam | 16:43 |
| virendra-sharma | ic mode ***--- no python application found, check your startup logs for errors ---[pid: 8131|app: -1|req: -1/1] 172.21.74.3 () {50 vars in 782 bytes} [Fri Sep 6 15:10:25 2019] GET /identity/v3/ => generated 21 bytes in 0 msecs (HTTP/1--- no python application found, check your startup logs for errors ---[pid: 8130|app: -1|req: -1/2] 172.21.74.3 () | 16:43 |
| virendra-sharma | {54 vars in 916 bytes} [Fri Sep 6 15:10:30 2019] GET /identity => generated 21 bytes in 0 msecs (HTTP/1.1 5--- no python application found, check your startup logs for errors ---[pid: 8131|app: -1|req: -1/3] 172.21.74.3 () {54 vars in 916 bytes} [Fri Sep 6 15:49:14 2019] GET /identity => generated 21 bytes in 0 msecs (HTTP/1.1 5--- no python app | 16:43 |
| virendra-sharma | lication found, check your startup logs for errors --- | 16:43 |
| cmurphy | virendra-sharma: please use paste.openstack.org for log pastes | 16:44 |
| cmurphy | virendra-sharma: it looks like keystone isn't pip installed, i would try to either pip install -e /opt/stack/keystone or just unstack.sh and stack.sh again | 16:45 |
| *** vesper11 has quit IRC | 16:48 | |
| *** vesper11 has joined #openstack-keystone | 16:48 | |
| *** pcaruana has joined #openstack-keystone | 16:51 | |
| *** gyee has quit IRC | 16:56 | |
| *** gyee has joined #openstack-keystone | 16:56 | |
| cmurphy | lbragstad: kmalloc knikolla gagehugo the last few of these still need some eyes https://review.opendev.org/677004 | 16:57 |
| cmurphy | gyee: can you take another look at https://review.opendev.org/676284 not sure if i answered your question | 16:57 |
| lbragstad | cmurphy nice | 16:57 |
| lbragstad | i have to wrap a few things up but i should be able to get to some of those this afternoon | 16:57 |
| cmurphy | cool ty | 16:58 |
| cmurphy | lbragstad: i had some comments on https://review.opendev.org/645968 shall i just go ahead and fix them up? | 16:59 |
| lbragstad | cmurphy absolutely - thank you | 16:59 |
| cmurphy | mmk | 16:59 |
| gyee | cmurphy, yeah, lgtm | 16:59 |
| vishakha | cmurphy lbragstad if you have spare time i too need some eyes on https://review.opendev.org/#/q/status:open+project:openstack/keystone+branch:master+topic:bug/1805366 | 17:05 |
| cmurphy | vishakha: awesome, will do | 17:06 |
| vishakha | Thanks cmurphy . Some remaining for policy associations https://review.opendev.org/#/q/status:open+project:openstack/keystone+branch:master+topic:bug/1805409 | 17:07 |
| cmurphy | vishakha: you rock | 17:08 |
| vishakha | cmurphy: :) | 17:09 |
| *** markvoelker has joined #openstack-keystone | 17:25 | |
| *** liushuobj__ has joined #openstack-keystone | 17:44 | |
| *** jamesmcarthur has quit IRC | 17:45 | |
| *** liushuo_ has quit IRC | 17:48 | |
| *** jawad_axd has joined #openstack-keystone | 17:55 | |
| *** mvkr has quit IRC | 17:55 | |
| *** markvoelker has quit IRC | 17:57 | |
| *** markvoelker has joined #openstack-keystone | 18:03 | |
| *** virendra-sharma has quit IRC | 18:04 | |
| *** markvoelker has quit IRC | 18:12 | |
| *** markvoelker has joined #openstack-keystone | 18:15 | |
| *** markvoelker has quit IRC | 18:26 | |
| *** markvoelker has joined #openstack-keystone | 18:28 | |
| *** markvoelker has quit IRC | 18:38 | |
| cmurphy | lbragstad: hmm i was refactoring some tests in https://review.opendev.org/645968 but it looks like a domain reader can list grants for a user in their own domain regardless of whether the assignment domain or project is accessible to the domain reader | 18:39 |
| cmurphy | is that what we intended? | 18:40 |
| lbragstad | so the domain reader doesn't have an assignment on the domain they're listing assignments for? | 18:40 |
| lbragstad | so if Alice is the domain reader and she has a role assignment on domain Foo but her domain is domain Bar, she should be able to get a domain-scoped token for Foo and list assignments in Foo, but not Bar because she doesn't have an assignment on Bar (even though that example doesn't make much sense) | 18:41 |
| *** jawad_axd has quit IRC | 18:42 | |
| lbragstad | i intended the authorization to always come from the assignment/authorization via the token scope | 18:42 |
| lbragstad | and not the actual domain in the user reference, since that doesn't really carry authorization at all | 18:43 |
| cmurphy | lbragstad: then i think that's broken | 18:43 |
| lbragstad | damn - ok | 18:43 |
| cmurphy | lbragstad: so the domain reader has an assignment on DomA and the user belongs to DomA but has a role assignment on DomB and the domain reader is doing GET /domains/DomB/users/user1/roles and that gives a 200 | 18:43 |
| cmurphy | but the domain reader has nothing to do with DomB | 18:43 |
| lbragstad | bah | 18:44 |
| lbragstad | so the only things that match are the assignment of the domain reader on domain A and the user's domain (which is domain A) | 18:44 |
| cmurphy | yeah let me paste the test i wrote | 18:45 |
| lbragstad | so we should be checking the token scope (domain A) against the domain in the request (domain B) - and since those don't match we should fail | 18:45 |
| cmurphy | http://paste.openstack.org/show/772109/ returns a 200 | 18:46 |
| lbragstad | yeah - that's broken then | 18:48 |
| lbragstad | domain_reader should only be able to see assignments in self.domain_id | 18:48 |
| lbragstad | right? | 18:48 |
| cmurphy | i think so | 18:48 |
| lbragstad | domain_reader doesn't actually have any authorization in the default domain in this case, right? | 18:48 |
| cmurphy | right | 18:48 |
| lbragstad | yeah - ok | 18:48 |
| lbragstad | you're right then | 18:49 |
| lbragstad | nice catch | 18:49 |
| cmurphy | \o/ | 18:49 |
| cmurphy | okay but now someone's gotta fix it T.T | 18:49 |
| lbragstad | cmurphy can you incorporate that test in the review or the patch? | 18:50 |
| cmurphy | sure | 18:50 |
| lbragstad | thanks | 18:50 |
| openstackgerrit | Colleen Murphy proposed openstack/keystone master: Implement domain reader support for grants https://review.opendev.org/645968 | 18:52 |
| lbragstad | kmalloc cmurphy any follow up on https://review.opendev.org/#/c/676648/ ? | 18:55 |
| cmurphy | i haven't looked yet, already proposed the final ksa release | 19:00 |
| lbragstad | ok - that's fine | 19:00 |
| *** gagehugo has quit IRC | 19:07 | |
| *** markvoelker has joined #openstack-keystone | 19:11 | |
| *** markvoelker has quit IRC | 19:15 | |
| *** liushuo_ has joined #openstack-keystone | 19:15 | |
| *** liushuobj__ has quit IRC | 19:18 | |
| kmalloc | o/ | 19:25 |
| *** markvoelker has joined #openstack-keystone | 19:41 | |
| *** markvoelker has quit IRC | 19:45 | |
| *** liushuobj__ has joined #openstack-keystone | 20:09 | |
| *** prometheanfire has quit IRC | 20:10 | |
| *** prometheanfire has joined #openstack-keystone | 20:11 | |
| *** liushuo_ has quit IRC | 20:12 | |
| *** liushuo_ has joined #openstack-keystone | 20:14 | |
| *** liushuobj__ has quit IRC | 20:18 | |
| *** markvoelker has joined #openstack-keystone | 20:19 | |
| *** markvoelker has quit IRC | 20:29 | |
| *** gagehugo has joined #openstack-keystone | 20:43 | |
| *** markvoelker has joined #openstack-keystone | 20:50 | |
| *** markvoelker has quit IRC | 20:54 | |
| *** rcernin|brb has joined #openstack-keystone | 21:19 | |
| lbragstad | cmurphy ok - i think the trust series should all be entering the gate | 21:20 |
| * lbragstad crosses fingers | 21:20 | |
| cmurphy | sweet ty | 21:22 |
| lbragstad | thanks for the patches | 21:31 |
| lbragstad | not an easy series! | 21:31 |
| cmurphy | yeah that was a hairy one | 21:32 |
| *** rcernin|brb has quit IRC | 21:33 | |
| cmurphy | kmalloc: for https://review.opendev.org/666739 looks like there's three tests that need content and then we need tests for assignment backend too, is that it? i'll get started on that if you haven't already | 22:06 |
| kmalloc | yes | 22:11 |
| kmalloc | that is what we need | 22:11 |
| cmurphy | kk | 22:11 |
| kmalloc | and i've almost got them done | 22:11 |
| cmurphy | oh cool | 22:11 |
| kmalloc | but...i have a concert i'm headed to in a few minutes | 22:11 |
| kmalloc | i'll get them posted up tonight or tomorrow. | 22:11 |
| kmalloc | well... i take that back, i have the 3 empty tests almost done | 22:12 |
| kmalloc | but not the assignement backend ones | 22:12 |
| cmurphy | okay i can take those | 22:12 |
| kmalloc | cool | 22:12 |
| *** markvoelker has joined #openstack-keystone | 22:15 | |
| cmurphy | lbragstad: is https://bugs.launchpad.net/keystone/+bug/1805400 done? it looks like it was partly done but the domain specific role actions are left, did we make a plan for those? | 22:19 |
| openstack | Launchpad bug 1805400 in OpenStack Identity (keystone) "The v3 role API should account for different scopes" [High,In progress] - Assigned to Lance Bragstad (lbragstad) | 22:19 |
| *** markvoelker has quit IRC | 22:20 | |
| cmurphy | also i think https://bugs.launchpad.net/keystone/+bug/1818736 looks done? | 22:20 |
| openstack | Launchpad bug 1818736 in OpenStack Identity (keystone) "The limit and registered limit APIs should account for different scopes" [Medium,In progress] - Assigned to Lance Bragstad (lbragstad) | 22:20 |
| cmurphy | lbragstad: kmalloc i skimmed the meeting notes and it seemed like there was a plan to split out the protection tests into a separate job so the unit tests wouldn't time out so much? did anyone work on that? | 23:04 |
| openstackgerrit | Colleen Murphy proposed openstack/keystone master: Add immutable option for roles and projects https://review.opendev.org/666739 | 23:10 |
| kmalloc | No one started that | 23:16 |
| kmalloc | AFAIK | 23:16 |
| *** liushuobj__ has joined #openstack-keystone | 23:17 | |
| *** liushuo_ has quit IRC | 23:20 | |
| *** liushuo_ has joined #openstack-keystone | 23:35 | |
| *** liushuobj__ has quit IRC | 23:38 | |
| *** liushuo has joined #openstack-keystone | 23:38 | |
| *** liushuo_ has quit IRC | 23:40 | |
| openstackgerrit | Colleen Murphy proposed openstack/keystone master: Implement domain admin support for grants https://review.opendev.org/667730 | 23:42 |
| openstackgerrit | Colleen Murphy proposed openstack/keystone master: Remove obsolete grant policies from policy.v3cloudsample.json https://review.opendev.org/667731 | 23:42 |
| *** gyee has quit IRC | 23:45 | |
| *** gyee has joined #openstack-keystone | 23:55 | |
| *** gyee has quit IRC | 23:56 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!