| *** markvoelker has quit IRC | 00:02 | |
| *** rcernin has quit IRC | 00:30 | |
| openstackgerrit | Qitao proposed openstack/keystonemiddleware master: Fix misspell word https://review.opendev.org/680624 | 01:02 |
|---|---|---|
| openstackgerrit | zhufl proposed openstack/keystone master: Add remote_id definition in _perform_auth https://review.opendev.org/679706 | 01:34 |
| *** rcernin has joined #openstack-keystone | 01:45 | |
| *** dave-mccowan has quit IRC | 01:58 | |
| *** liushuobj__ has joined #openstack-keystone | 02:57 | |
| *** liushuo_ has quit IRC | 03:00 | |
| *** liushuo has joined #openstack-keystone | 03:19 | |
| *** liushuobj__ has quit IRC | 03:22 | |
| *** dklyle has quit IRC | 03:29 | |
| *** liushuo has quit IRC | 03:34 | |
| *** liushuo has joined #openstack-keystone | 03:36 | |
| *** etp has joined #openstack-keystone | 04:13 | |
| openstackgerrit | Merged openstack/keystone master: Fix federation CI https://review.opendev.org/680799 | 04:19 |
| *** liushuo_ has joined #openstack-keystone | 04:38 | |
| openstackgerrit | Merged openstack/keystonemiddleware master: Fix misspell word https://review.opendev.org/680624 | 04:41 |
| *** liushuo has quit IRC | 04:42 | |
| *** Luzi has joined #openstack-keystone | 04:48 | |
| *** markvoelker has joined #openstack-keystone | 04:55 | |
| *** markvoelker has quit IRC | 05:00 | |
| *** jaosorior has joined #openstack-keystone | 05:03 | |
| *** liushuo has joined #openstack-keystone | 05:40 | |
| *** liushuo_ has quit IRC | 05:43 | |
| *** dancn has joined #openstack-keystone | 05:58 | |
| *** liushuo_ has joined #openstack-keystone | 06:10 | |
| *** liushuo has quit IRC | 06:14 | |
| *** liushuobj__ has joined #openstack-keystone | 06:25 | |
| *** liushuo_ has quit IRC | 06:29 | |
| *** liushuo has joined #openstack-keystone | 06:30 | |
| *** liushuobj__ has quit IRC | 06:31 | |
| *** rcernin has quit IRC | 07:02 | |
| *** jawad_axd has joined #openstack-keystone | 07:09 | |
| *** trident has quit IRC | 07:10 | |
| *** liushuo_ has joined #openstack-keystone | 07:12 | |
| *** tesseract has joined #openstack-keystone | 07:13 | |
| *** liushuo has quit IRC | 07:15 | |
| *** liushuobj__ has joined #openstack-keystone | 07:15 | |
| *** liushuo has joined #openstack-keystone | 07:18 | |
| *** liushuo_ has quit IRC | 07:19 | |
| *** trident has joined #openstack-keystone | 07:21 | |
| *** liushuobj__ has quit IRC | 07:21 | |
| *** liushuo_ has joined #openstack-keystone | 07:32 | |
| *** liushuo has quit IRC | 07:33 | |
| *** pcaruana has joined #openstack-keystone | 07:49 | |
| *** markvoelker has joined #openstack-keystone | 07:50 | |
| *** markvoelker has quit IRC | 07:55 | |
| *** tkajinam has quit IRC | 08:42 | |
| *** liushuobj__ has joined #openstack-keystone | 09:38 | |
| *** liushuo_ has quit IRC | 09:42 | |
| *** jawad_axd has quit IRC | 09:51 | |
| *** markvoelker has joined #openstack-keystone | 09:51 | |
| *** markvoelker has quit IRC | 10:00 | |
| *** jawad_axd has joined #openstack-keystone | 10:05 | |
| *** rcernin has joined #openstack-keystone | 10:08 | |
| *** jawad_axd has quit IRC | 10:10 | |
| *** spsurya has joined #openstack-keystone | 10:21 | |
| *** liushuo_ has joined #openstack-keystone | 10:45 | |
| *** liushuobj__ has quit IRC | 10:48 | |
| *** awalende has joined #openstack-keystone | 10:50 | |
| *** dave-mccowan has joined #openstack-keystone | 10:53 | |
| openstackgerrit | Vishakha Agarwal proposed openstack/keystone master: Implement system reader and member for EC2 credentials https://review.opendev.org/607820 | 10:59 |
| *** liushuobj__ has joined #openstack-keystone | 11:06 | |
| *** liushuo_ has quit IRC | 11:10 | |
| *** liushuo_ has joined #openstack-keystone | 11:26 | |
| *** liushuobj__ has quit IRC | 11:30 | |
| *** liushuobj__ has joined #openstack-keystone | 11:50 | |
| *** liushuo_ has quit IRC | 11:54 | |
| *** markvoelker has joined #openstack-keystone | 11:56 | |
| *** markvoelker has quit IRC | 12:02 | |
| *** raildo has joined #openstack-keystone | 12:02 | |
| *** jdwidari has joined #openstack-keystone | 12:02 | |
| *** jdwidari has quit IRC | 12:03 | |
| *** ivve has joined #openstack-keystone | 12:10 | |
| *** markvoelker has joined #openstack-keystone | 12:12 | |
| *** jawad_axd has joined #openstack-keystone | 12:21 | |
| *** liushuobj__ has quit IRC | 12:21 | |
| *** liushuobj__ has joined #openstack-keystone | 12:22 | |
| *** rcernin has quit IRC | 12:22 | |
| *** jawad_axd has quit IRC | 12:25 | |
| *** liushuo_ has joined #openstack-keystone | 12:36 | |
| *** jawad_axd has joined #openstack-keystone | 12:39 | |
| *** liushuobj__ has quit IRC | 12:40 | |
| *** jawad_axd has quit IRC | 12:44 | |
| *** jawad_axd has joined #openstack-keystone | 12:45 | |
| *** jawad_axd has quit IRC | 12:50 | |
| *** jawad_ax_ has joined #openstack-keystone | 12:50 | |
| *** etp has quit IRC | 13:12 | |
| *** Luzi has quit IRC | 13:34 | |
| *** liushuobj__ has joined #openstack-keystone | 13:34 | |
| *** liushuo_ has quit IRC | 13:37 | |
| *** liushuo_ has joined #openstack-keystone | 13:38 | |
| *** liushuobj__ has quit IRC | 13:41 | |
| *** awalende has quit IRC | 13:44 | |
| *** awalende has joined #openstack-keystone | 13:45 | |
| *** prometheanfire has quit IRC | 13:49 | |
| *** awalende has quit IRC | 13:49 | |
| *** prometheanfire has joined #openstack-keystone | 13:50 | |
| *** beekneemech is now known as bnemec | 13:54 | |
| *** liushuobj__ has joined #openstack-keystone | 14:03 | |
| *** liushuo_ has quit IRC | 14:07 | |
| *** jawad_ax_ has quit IRC | 14:12 | |
| *** jawad_axd has joined #openstack-keystone | 14:13 | |
| *** jawad_axd has quit IRC | 14:13 | |
| *** jamesmcarthur has joined #openstack-keystone | 14:15 | |
| *** awalende has joined #openstack-keystone | 14:25 | |
| *** awalende has quit IRC | 14:29 | |
| *** dklyle has joined #openstack-keystone | 14:29 | |
| *** markvoelker has quit IRC | 14:41 | |
| *** dancn has quit IRC | 14:44 | |
| *** jroll has joined #openstack-keystone | 15:00 | |
| *** gyee has joined #openstack-keystone | 15:07 | |
| *** jaosorior has quit IRC | 15:12 | |
| *** ivve has quit IRC | 15:19 | |
| *** jawad_axd has joined #openstack-keystone | 15:22 | |
| *** jawad_axd has quit IRC | 15:26 | |
| *** jawad_axd has joined #openstack-keystone | 15:38 | |
| *** liushuo_ has joined #openstack-keystone | 15:51 | |
| cmurphy | lbragstad: want to reconsider https://review.opendev.org/680579 ? | 15:54 |
| *** liushuobj__ has quit IRC | 15:55 | |
| cmurphy | anyone want to approve https://review.opendev.org/680798 so we can suffer through fewer timeouts this week? | 15:58 |
| *** liushuobj__ has joined #openstack-keystone | 15:59 | |
| cmurphy | still need reviews for this stack https://review.opendev.org/668238 as well | 16:00 |
| openstackgerrit | Colleen Murphy proposed openstack/keystone master: Implement system reader for implied roles https://review.opendev.org/680795 | 16:02 |
| *** jdwidari has joined #openstack-keystone | 16:02 | |
| *** jawad_axd is now known as JAX | 16:02 | |
| *** liushuo_ has quit IRC | 16:02 | |
| lbragstad | cmurphy oh - sure | 16:03 |
| *** JAX is now known as JAX_ | 16:03 | |
| cmurphy | adriant: i've been seeing intermittent failures in the test_with_passcode_in_previous_windows_default test, e.g. https://391fbd8bf2548557cb6a-c3ec680ab787b0ae7fbdeb20a072dd12.ssl.cf5.rackcdn.com/677020/2/check/openstack-tox-cover/ff2cd57/testr_results.html.gz if you happen to have spare time to check it out | 16:04 |
| *** JAX_ is now known as JAX | 16:06 | |
| *** liushuo_ has joined #openstack-keystone | 16:07 | |
| *** tesseract has quit IRC | 16:07 | |
| *** liushuo has joined #openstack-keystone | 16:09 | |
| *** liushuobj__ has quit IRC | 16:10 | |
| *** liushuo_ has quit IRC | 16:12 | |
| *** JAX has quit IRC | 16:12 | |
| *** jawad_axd has joined #openstack-keystone | 16:12 | |
| *** jawad_axd has quit IRC | 16:14 | |
| *** jdwidari has quit IRC | 16:16 | |
| gyee | cmurphy: what do you think? https://review.opendev.org/#/c/669982/ | 16:21 |
| gyee | should we merge this one and fix the formatting later and fix everything in one go? | 16:21 |
| *** markvoelker has joined #openstack-keystone | 16:21 | |
| cmurphy | gyee: how bad are the formatting issues? the pdf artifact link in zuul is broken | 16:24 |
| gyee | I haven't read through the whole thing yet. Just quick glance through it. Content seem mostly OK, besides the TOC issues pointed out | 16:25 |
| *** spsurya has quit IRC | 16:27 | |
| openstackgerrit | Morgan Fainberg proposed openstack/keystone master: Implement resource options for roles and projects https://review.opendev.org/678322 | 16:32 |
| cmurphy | gyee: one comment, also from akihiro's comment it seems like maybe fixing the toctree issue shouldn't be too hard? | 16:34 |
| *** ayoung has quit IRC | 16:35 | |
| gyee | interesting, my FF browser is having trouble with the https://openstack.fortnebula.com:13808 SSL certificate | 16:41 |
| gyee | cmurphy, yeah, toctree fix looks pretty trivial, but I don't know if by fixing PDF, we will break HTML :-) | 16:43 |
| *** ayoung has joined #openstack-keystone | 16:44 | |
| cmurphy | lol | 16:44 |
| *** jawad_axd has joined #openstack-keystone | 16:45 | |
| openstackgerrit | Colleen Murphy proposed openstack/keystone master: Implement system reader for OAUTH1 consumers https://review.opendev.org/680793 | 16:54 |
| *** trident has quit IRC | 16:58 | |
| *** jdwidari has joined #openstack-keystone | 17:03 | |
| *** trident has joined #openstack-keystone | 17:06 | |
| cmurphy | here's all the things we need to merge this week https://etherpad.openstack.org/p/keystone-train-feature-freeze-todo | 17:12 |
| cmurphy | lbragstad: do you have time to look into the issues i pointed out on https://review.opendev.org/645968 or should I? | 17:15 |
| lbragstad | i won't get to it until this afternoon - but i can either later this afternoon or tonight | 17:17 |
| lbragstad | do you know if we have a list of remaining scope-types work? | 17:17 |
| lbragstad | like - reviews that need to merge? | 17:18 |
| cmurphy | lbragstad: https://etherpad.openstack.org/p/keystone-train-feature-freeze-todo | 17:18 |
| *** jmlowe has quit IRC | 17:18 | |
| lbragstad | oh - boy | 17:20 |
| lbragstad | alright - i'll hit those tonight | 17:20 |
| cmurphy | awesome ty | 17:21 |
| lbragstad | everything is in review? | 17:21 |
| lbragstad | or are there outstanding bugs that need patches? | 17:21 |
| cmurphy | i think vishakha is working on the last couple of ec2 ones | 17:21 |
| cmurphy | otherwise i think that's everything | 17:21 |
| lbragstad | https://bugs.launchpad.net/keystone/+bugs?field.tag=system-scope | 17:21 |
| lbragstad | looks like everything is in progress for system-scope with the exception of domain specific mappings (but thats not even a thing, yet) | 17:22 |
| cmurphy | right | 17:22 |
| lbragstad | nice https://bugs.launchpad.net/keystone/+bugs?field.tag=default-roles | 17:22 |
| lbragstad | everything is in progress there, too | 17:22 |
| cmurphy | one thing i'm not sure about is the access token APIs, they all have project scope type but use RULE_ADMIN_REQUIRED | 17:22 |
| cmurphy | we might have talked about that one at the midcycle? | 17:23 |
| lbragstad | access tokens have to be scoped to a project i think? | 17:23 |
| cmurphy | yeah i guess so? | 17:23 |
| lbragstad | if that's the case - then we might have to elaborate on the api logic like we do for users and projects | 17:24 |
| lbragstad | (e.g., anyone can create access tokens for a projects, but system administrators can clean them up) | 17:24 |
| openstackgerrit | guang-yee proposed openstack/keystone master: Generate PDF documentation https://review.opendev.org/669982 | 17:25 |
| * lbragstad just realized that we can officially close https://bugs.launchpad.net/keystone/+bug/968696 once all those patches merge | 17:25 | |
| openstack | Launchpad bug 968696 in OpenStack Identity (keystone) ""admin"-ness not properly scoped" [High,In progress] - Assigned to Colleen Murphy (krinkle) | 17:25 |
| cmurphy | @.@ | 17:25 |
| cmurphy | and my work here is done | 17:26 |
| * cmurphy takes another vacation | 17:26 | |
| lbragstad | ++ | 17:27 |
| lbragstad | plan a retirement party | 17:27 |
| cmurphy | \o/ | 17:27 |
| lbragstad | ayoung has a t-shirt he owes you i think | 17:27 |
| lbragstad | i'm pretty sure he still brings it to each openstack summit | 17:28 |
| cmurphy | lol | 17:28 |
| lbragstad | waiting for the opportunity to give it to the person who closes bug 968696 | 17:28 |
| openstack | bug 968696 in OpenStack Identity (keystone) ""admin"-ness not properly scoped" [High,In progress] https://launchpad.net/bugs/968696 - Assigned to Colleen Murphy (krinkle) | 17:28 |
| *** jamesmcarthur has quit IRC | 17:28 | |
| cmurphy | we still have to fix it for the rest of openstack T.T | 17:28 |
| lbragstad | little victories | 17:29 |
| lbragstad | feels like an oxymoron because this "little victory" took over two years (we started working on the policy WG meetings prior to the Pike cycle - that came out of the BCN summit!) | 17:30 |
| lbragstad | 3 years | 17:30 |
| lbragstad | that was fall of 2016 | 17:31 |
| *** jmlowe has joined #openstack-keystone | 17:36 | |
| *** awalende has joined #openstack-keystone | 17:46 | |
| *** awalende has quit IRC | 17:50 | |
| openstackgerrit | Merged openstack/python-keystoneclient master: Fix unit tests broken by requests-mock https://review.opendev.org/680579 | 17:59 |
| openstackgerrit | Merged openstack/keystone master: Override tox job timeouts https://review.opendev.org/680798 | 18:00 |
| *** ayoung has quit IRC | 18:21 | |
| *** ayoung has joined #openstack-keystone | 18:24 | |
| *** jmlowe has quit IRC | 18:25 | |
| *** jamesmcarthur has joined #openstack-keystone | 18:37 | |
| *** vesper11 has quit IRC | 18:52 | |
| *** liushuo_ has joined #openstack-keystone | 18:55 | |
| *** liushuo has quit IRC | 18:58 | |
| *** jdwidari has quit IRC | 19:02 | |
| *** bnemec has quit IRC | 19:27 | |
| *** bnemec has joined #openstack-keystone | 19:32 | |
| *** vesper11 has joined #openstack-keystone | 19:41 | |
| openstackgerrit | Bernhard M. Wiedemann proposed openstack/keystoneauth master: Make tests pass in 2020 https://review.opendev.org/681103 | 19:48 |
| *** jmlowe has joined #openstack-keystone | 19:55 | |
| ayoung | Are all of the APIs covered by Service Scoped roles now? | 19:58 |
| ayoung | In Keystone? | 19:59 |
| *** jmlowe has quit IRC | 20:05 | |
| cmurphy | s/service/system/ - all changes are proposed but still need reviews | 20:06 |
| *** trident has quit IRC | 20:15 | |
| *** jdwidari has joined #openstack-keystone | 20:18 | |
| lbragstad | ayoung https://etherpad.openstack.org/p/keystone-train-feature-freeze-todo | 20:26 |
| lbragstad | ^ they're all in there i think | 20:26 |
| ayoung | I'll print the t-shirts. | 20:27 |
| *** trident has joined #openstack-keystone | 20:27 | |
| cmurphy | https://review.opendev.org/677101 worth merging asap so we can do a final ksc release | 20:29 |
| *** trident has quit IRC | 20:32 | |
| *** trident has joined #openstack-keystone | 20:33 | |
| cmurphy | kmalloc: anything you want me to do re resource options/immutable resources? | 20:33 |
| *** jmlowe has joined #openstack-keystone | 20:41 | |
| kmalloc | I am running some errands. | 20:47 |
| kmalloc | Will check in in an hour or so. | 20:47 |
| *** mvkr has joined #openstack-keystone | 20:48 | |
| *** raildo has quit IRC | 20:58 | |
| *** jawad_axd has quit IRC | 21:01 | |
| *** markvoelker has quit IRC | 21:02 | |
| *** markvoelker has joined #openstack-keystone | 21:16 | |
| *** jamesmcarthur has quit IRC | 21:29 | |
| *** liushuobj__ has joined #openstack-keystone | 21:35 | |
| *** liushuo_ has quit IRC | 21:39 | |
| *** lbragstad_ has joined #openstack-keystone | 21:44 | |
| *** lbragstad has quit IRC | 21:44 | |
| kmalloc | ok | 21:50 |
| kmalloc | cmurphy: uhm, i am sitting down to finish the release note and the other bits now. | 21:51 |
| kmalloc | so, should be up shortly | 21:51 |
| cmurphy | kmalloc: sweet | 21:51 |
| *** jdwidari has quit IRC | 21:55 | |
| *** markvoelker has quit IRC | 21:59 | |
| *** markvoelker has joined #openstack-keystone | 22:01 | |
| *** markvoelker has quit IRC | 22:06 | |
| openstackgerrit | Morgan Fainberg proposed openstack/keystone master: Implement resource options for roles and projects https://review.opendev.org/678322 | 22:06 |
| kmalloc | cmurphy: ^ release note added | 22:06 |
| openstackgerrit | Morgan Fainberg proposed openstack/keystone master: Implement resource options for roles and projects https://review.opendev.org/678322 | 22:07 |
| *** lbragstad_ is now known as lbragstad | 22:11 | |
| openstackgerrit | Merged openstack/keystone master: Add tests for domain users for policy association https://review.opendev.org/678467 | 22:12 |
| openstackgerrit | Merged openstack/keystone master: Add tests for project users for policy association https://review.opendev.org/678471 | 22:12 |
| *** liushuo has joined #openstack-keystone | 22:21 | |
| *** liushuobj__ has quit IRC | 22:23 | |
| lbragstad | cmurphy do you still want https://review.opendev.org/#/c/680788/ to go in right away? | 22:26 |
| lbragstad | as opposed to enlongating the timeout? | 22:26 |
| lbragstad | elongating* | 22:27 |
| cmurphy | lbragstad: http://lists.openstack.org/pipermail/openstack-discuss/2019-September/009249.html | 22:28 |
| cmurphy | timeout is already increased | 22:28 |
| cmurphy | so i think we should postpone the split until after all the policy changes are in | 22:28 |
| cmurphy | kmalloc: +2 | 22:29 |
| lbragstad | ah | 22:30 |
| lbragstad | i'm reviewing policy changes tonight | 22:30 |
| lbragstad | i'll see if i can debug the grant one, too | 22:31 |
| *** markvoelker has joined #openstack-keystone | 22:36 | |
| *** markvoelker has quit IRC | 22:46 | |
| openstackgerrit | Colleen Murphy proposed openstack/keystone master: Implement domain reader support for grants https://review.opendev.org/645968 | 22:55 |
| cmurphy | lbragstad: i think i got it ^ | 22:55 |
| *** prometheanfire has left #openstack-keystone | 22:55 | |
| *** tkajinam has joined #openstack-keystone | 22:55 | |
| *** rcernin has joined #openstack-keystone | 22:59 | |
| *** liushuo has quit IRC | 23:03 | |
| *** liushuo has joined #openstack-keystone | 23:03 | |
| openstackgerrit | Morgan Fainberg proposed openstack/keystone master: Add immutable option for roles and projects https://review.opendev.org/666739 | 23:04 |
| kmalloc | cmurphy: ok, so i need to get the role tests in | 23:12 |
| *** threestrands has joined #openstack-keystone | 23:14 | |
| cmurphy | kmalloc: i did that here https://review.opendev.org/#/c/666739/10/keystone/tests/unit/assignment/test_core.py | 23:15 |
| kmalloc | cmurphy: ahhh | 23:15 |
| kmalloc | nice | 23:15 |
| kmalloc | did i overwrite it? | 23:15 |
| * kmalloc checks | 23:15 | |
| kmalloc | i didn't | 23:16 |
| kmalloc | sweet. | 23:16 |
| cmurphy | \o/ | 23:16 |
| *** liushuo_ has joined #openstack-keystone | 23:19 | |
| openstackgerrit | Colleen Murphy proposed openstack/keystone master: Implement domain admin support for grants https://review.opendev.org/667730 | 23:21 |
| cmurphy | lbragstad: ^ | 23:21 |
| *** liushuo has quit IRC | 23:22 | |
| openstackgerrit | Colleen Murphy proposed openstack/keystone master: Add immutable option for roles and projects https://review.opendev.org/666739 | 23:25 |
| openstackgerrit | Colleen Murphy proposed openstack/keystone master: Add immutable option for roles and projects https://review.opendev.org/666739 | 23:26 |
| kmalloc | cmurphy: ^ thanks | 23:28 |
| kmalloc | my ide went on the fritz and had to use vi before running off to baby-class (the fun things you do when kids come) | 23:28 |
| openstackgerrit | Colleen Murphy proposed openstack/keystone master: Add --immutable-roles flag to bootstrap command https://review.opendev.org/675228 | 23:36 |
| openstackgerrit | Colleen Murphy proposed openstack/keystone master: Add immutable roles status check https://review.opendev.org/675509 | 23:44 |
| openstackgerrit | Colleen Murphy proposed openstack/keystone master: Add immutable option for roles and projects https://review.opendev.org/666739 | 23:50 |
| openstackgerrit | Colleen Murphy proposed openstack/keystone master: Add --immutable-roles flag to bootstrap command https://review.opendev.org/675228 | 23:50 |
| openstackgerrit | Colleen Murphy proposed openstack/keystone master: Add immutable roles status check https://review.opendev.org/675509 | 23:50 |
| lbragstad | cmurphy nice - playing with 667730 locally now | 23:50 |
| lbragstad | i tested the other patch that isolates the protection tests into their own suite - py37 is running for me in 350s | 23:50 |
| lbragstad | that's good | 23:51 |
| openstackgerrit | Merged openstack/keystone master: Add tests for domain users for trusts https://review.opendev.org/677020 | 23:54 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!