| *** gyee has quit IRC | 00:05 | |
| openstackgerrit | Merged openstack/keystone master: Remove limit policies from policy.v3cloudsample.json https://review.opendev.org/621025 | 00:07 |
|---|---|---|
| *** markvoelker has joined #openstack-keystone | 00:29 | |
| *** markvoelker has quit IRC | 00:33 | |
| *** markvoelker has joined #openstack-keystone | 01:06 | |
| *** Ben78 has joined #openstack-keystone | 01:17 | |
| openstackgerrit | Merged openstack/keystone master: Fix validation of role assignment subtree list https://review.opendev.org/682750 | 01:42 |
| *** markvoelker has quit IRC | 02:25 | |
| *** Ben78 has quit IRC | 02:47 | |
| *** dave-mccowan has quit IRC | 03:24 | |
| openstackgerrit | Lance Bragstad proposed openstack/keystone master: Remove policy.v3cloudsample.json https://review.opendev.org/682266 | 04:05 |
| *** markvoelker has joined #openstack-keystone | 04:26 | |
| *** markvoelker has quit IRC | 04:30 | |
| *** tkajinam has quit IRC | 05:00 | |
| *** tkajinam has joined #openstack-keystone | 05:02 | |
| *** tkajinam_ has joined #openstack-keystone | 05:36 | |
| *** tkajinam has quit IRC | 05:38 | |
| *** Luzi has joined #openstack-keystone | 05:42 | |
| *** dancn has joined #openstack-keystone | 05:55 | |
| *** Guest29634 has quit IRC | 06:16 | |
| *** rcernin has quit IRC | 06:29 | |
| *** benj has joined #openstack-keystone | 06:32 | |
| *** benj is now known as Guest57861 | 06:32 | |
| *** Luzi has quit IRC | 06:40 | |
| openstackgerrit | Vishakha Agarwal proposed openstack/keystonemiddleware master: Generate pdf documentation https://review.opendev.org/682271 | 06:50 |
| *** Luzi has joined #openstack-keystone | 06:56 | |
| *** tesseract has joined #openstack-keystone | 07:20 | |
| *** pcaruana has joined #openstack-keystone | 07:21 | |
| openstackgerrit | Vishakha Agarwal proposed openstack/keystoneauth master: Generate pdf documentation https://review.opendev.org/682272 | 07:28 |
| *** yan0s has joined #openstack-keystone | 07:37 | |
| *** jaosorior has quit IRC | 07:48 | |
| *** Emine has joined #openstack-keystone | 07:53 | |
| *** stingrayza has quit IRC | 07:57 | |
| *** stingrayza has joined #openstack-keystone | 08:01 | |
| *** tkajinam_ has quit IRC | 08:16 | |
| *** ivve has joined #openstack-keystone | 08:30 | |
| openstackgerrit | Bernhard M. Wiedemann proposed openstack/keystoneauth master: Make tests pass in 2020 https://review.opendev.org/681103 | 08:45 |
| *** pcaruana has quit IRC | 08:52 | |
| *** rcernin has joined #openstack-keystone | 08:53 | |
| *** pcaruana has joined #openstack-keystone | 09:03 | |
| *** dancn has quit IRC | 09:07 | |
| openstackgerrit | Vishakha Agarwal proposed openstack/keystone-tempest-plugin master: Follow the PTI for docs https://review.opendev.org/685260 | 09:09 |
| openstackgerrit | OpenStack Release Bot proposed openstack/keystone master: Update master for stable/train https://review.opendev.org/685264 | 09:11 |
| openstackgerrit | Vishakha Agarwal proposed openstack/keystone-tempest-plugin master: Follow the PTI for docs https://review.opendev.org/685260 | 09:40 |
| *** Guest57861 has quit IRC | 09:44 | |
| *** benj has joined #openstack-keystone | 09:47 | |
| *** benj is now known as Guest94083 | 09:48 | |
| *** xek has quit IRC | 10:31 | |
| *** xek has joined #openstack-keystone | 10:31 | |
| *** tesseract has quit IRC | 10:35 | |
| *** tesseract has joined #openstack-keystone | 10:35 | |
| *** ayoung has quit IRC | 10:37 | |
| *** ayoung has joined #openstack-keystone | 10:38 | |
| openstackgerrit | Monty Taylor proposed openstack/keystoneauth master: Add support for authenticated endpoint_data https://review.opendev.org/685042 | 10:49 |
| *** dancn has joined #openstack-keystone | 11:10 | |
| *** jaosorior has joined #openstack-keystone | 11:19 | |
| openstackgerrit | Vishakha Agarwal proposed openstack/keystone-tempest-plugin master: PDF generation https://review.opendev.org/685026 | 11:19 |
| *** jaosorior has quit IRC | 11:33 | |
| *** jhesketh has quit IRC | 11:34 | |
| *** jhesketh has joined #openstack-keystone | 11:35 | |
| *** Luzi has quit IRC | 11:52 | |
| openstackgerrit | Bernhard M. Wiedemann proposed openstack/keystoneauth master: Make tests pass in 2020 https://review.opendev.org/681103 | 11:59 |
| *** markvoelker has joined #openstack-keystone | 12:02 | |
| *** markvoelker has quit IRC | 12:03 | |
| *** bnemec has quit IRC | 12:10 | |
| *** mvkr has quit IRC | 12:11 | |
| *** bnemec has joined #openstack-keystone | 12:11 | |
| *** mvkr has joined #openstack-keystone | 12:13 | |
| *** jamesmcarthur has joined #openstack-keystone | 12:14 | |
| *** markvoelker has joined #openstack-keystone | 12:15 | |
| *** dancn has quit IRC | 12:17 | |
| *** jamesmcarthur has quit IRC | 12:27 | |
| *** dancn has joined #openstack-keystone | 12:28 | |
| *** raildo has joined #openstack-keystone | 13:01 | |
| *** jamesmcarthur has joined #openstack-keystone | 13:04 | |
| *** tkajinam has joined #openstack-keystone | 13:05 | |
| *** pcaruana has quit IRC | 13:09 | |
| *** rcernin has quit IRC | 13:18 | |
| *** yan0s has quit IRC | 13:37 | |
| *** yan0s has joined #openstack-keystone | 13:49 | |
| *** yan0s has quit IRC | 13:52 | |
| *** pcaruana has joined #openstack-keystone | 14:04 | |
| *** dancn has quit IRC | 14:13 | |
| *** tkajinam has quit IRC | 14:24 | |
| *** jaosorior has joined #openstack-keystone | 14:34 | |
| *** pcaruana has quit IRC | 14:35 | |
| *** dancn has joined #openstack-keystone | 14:36 | |
| *** dancn has quit IRC | 14:41 | |
| *** ivve has quit IRC | 14:58 | |
| *** gyee has joined #openstack-keystone | 15:30 | |
| *** pcaruana has joined #openstack-keystone | 15:36 | |
| *** jamesmcarthur has quit IRC | 16:04 | |
| *** jamesmcarthur has joined #openstack-keystone | 16:06 | |
| *** Emine has quit IRC | 16:10 | |
| *** jaosorior has quit IRC | 16:21 | |
| *** tesseract has quit IRC | 16:32 | |
| openstackgerrit | Vishakha Agarwal proposed openstack/keystone-tempest-plugin master: Follow the PTI for docs https://review.opendev.org/685260 | 16:40 |
| *** eandersson has joined #openstack-keystone | 16:41 | |
| eandersson | Anyone that can explain how this works? https://review.opendev.org/#/c/684854/4/neutron/services/externaldns/drivers/designate/driver.py | 16:41 |
| eandersson | In particular the token_endpoint.Token bit | 16:41 |
| eandersson | It looks to be semi working without the endpoint_override on the client, but fails when changing from a port schema to something like http://host/dns/v2 | 16:42 |
| openstackgerrit | Vishakha Agarwal proposed openstack/keystone-tempest-plugin master: PDF generation https://review.opendev.org/685026 | 16:42 |
| openstackgerrit | Vishakha Agarwal proposed openstack/ldappool master: Follow the PTI for docs https://review.opendev.org/685402 | 16:53 |
| openstackgerrit | Vishakha Agarwal proposed openstack/ldappool master: Follow the PTI for docs https://review.opendev.org/685402 | 16:55 |
| openstackgerrit | Vishakha Agarwal proposed openstack/ldappool master: [WIP] Generate pdf documentation https://review.opendev.org/685029 | 17:03 |
| openstackgerrit | Vishakha Agarwal proposed openstack/pycadf master: Follow the PTI for docs https://review.opendev.org/685432 | 17:15 |
| efried | lbragstad: anyone you know have paste skills? | 17:15 |
| lbragstad | ? | 17:16 |
| efried | as in paste.ini | 17:16 |
| lbragstad | oh | 17:16 |
| efried | Heh, not ^V | 17:16 |
| efried | even *I* can do that. | 17:16 |
| efried | I can even S-Ins -- advanced paste skills. | 17:16 |
| lbragstad | psh - i ^C^V like it's my job | 17:16 |
| lbragstad | some folks here are familiar with paste.ini though | 17:17 |
| lbragstad | but we don't use it any more | 17:17 |
| lbragstad | kmalloc completely ripped it out of keystone with force | 17:17 |
| efried | I'm trying to fix nova's versioned discovery documents, which currently require auth. | 17:17 |
| efried | Perhaps we can do the same; nobody seems to know anything about it, and those who have even heard of it have a particular loathing for it. | 17:18 |
| efried | (and having spent a few hours on it yesterday, I can see why) | 17:18 |
| efried | but that sounds like a larger undertaking. Unless it's not... | 17:19 |
| lbragstad | i guess it depends on what you're moving to? | 17:19 |
| lbragstad | but we transitioned keystone entirely to flask | 17:19 |
| lbragstad | it took us two cycles | 17:19 |
| efried | lbragstad: Well, until three minutes ago I hadn't considered the possibility of moving to something else. So I dunno. | 17:21 |
| efried | If it took keystone two cycles, I can't imagine how long it would take nova. | 17:22 |
| lbragstad | we wanted to ditch paste a long time ago - we made time for it around pike and queens i think | 17:22 |
| lbragstad | ultimately, we introduced the flask plumbing first | 17:23 |
| lbragstad | then incrementally went through each keystone API and converted it off of paste and onto flask | 17:23 |
| *** pcaruana has quit IRC | 17:23 | |
| efried | https://review.opendev.org/#/c/609071/ and successors | 17:23 |
| efried | ? | 17:23 |
| lbragstad | yeah - that's some of the work | 17:23 |
| lbragstad | specifically what it took to get an API off of paste and onto flask | 17:24 |
| lbragstad | lemme see if i can find the work that introduced the flask plumbing we needed first | 17:24 |
| lbragstad | https://review.opendev.org/#/q/status:merged+project:openstack/keystone+branch:master+topic:flaskification | 17:25 |
| openstackgerrit | Vishakha Agarwal proposed openstack/pycadf master: PDF generation https://review.opendev.org/685033 | 17:26 |
| efried | cool, was just poking through that. | 17:26 |
| lbragstad | yeah - luckily we were able to slice in a way that let us break it across multiple releases | 17:28 |
| lbragstad | (we did have a releases were some APIs were on flask and the rest were on paste) | 17:29 |
| efried | eek | 17:29 |
| efried | I don't really know what that entails, but it sounds hairy. | 17:29 |
| efried | At this point I think I know enough to feel as though that level of cutover isn't something I want to attempt | 17:29 |
| efried | particularly since I'm having trouble convincing people outside of api-sig that it's bad for versioned discovery endpoints to require auth. | 17:30 |
| lbragstad | so - how is paste preventing you from exposing version discovery to unauthenticated users? | 17:32 |
| *** itlinux has joined #openstack-keystone | 17:39 | |
| openstackgerrit | Vishakha Agarwal proposed openstack/keystonemiddleware master: Generate pdf documentation https://review.opendev.org/682271 | 17:43 |
| *** jamesmcarthur has quit IRC | 17:49 | |
| *** jamesmcarthur has joined #openstack-keystone | 18:02 | |
| *** markvoelker has quit IRC | 18:03 | |
| *** markvoelker has joined #openstack-keystone | 18:08 | |
| *** jamesmcarthur has quit IRC | 18:10 | |
| cmurphy | lbragstad: easy review for you https://review.opendev.org/685138 | 18:13 |
| *** jamesmcarthur has joined #openstack-keystone | 18:13 | |
| efried | lbragstad: sorry, lunched. It looks like this: https://review.opendev.org/#/c/685181/ | 18:20 |
| efried | There's a / endpoint that's mapping to an authless pipeline that just returns version json | 18:20 |
| efried | but then the /v2.1 and /v2 endpoints map to the real API's pipelines, which require auth, and the / of *those* is spitting out the version-specific discovery doc. | 18:21 |
| efried | I can create another authless pipeline thingy (or meld into the existing one) -- but I don't know how to get /v2 and /v2.1 to map to that thing, while getting /v2/$everything_else and /v2.1/$everything_else to map to the real API ones. | 18:22 |
| efried | ...without blowing out $everything_else as specific endpoint patterns, which would suck, because there's like a bajillion of them. | 18:22 |
| *** itlinux has quit IRC | 19:01 | |
| *** jamesmcarthur has quit IRC | 19:17 | |
| *** ayoung has quit IRC | 19:25 | |
| *** ayoung has joined #openstack-keystone | 19:26 | |
| *** ayoung has quit IRC | 19:39 | |
| *** ayoung has joined #openstack-keystone | 19:42 | |
| efried | lbragstad: I think I did it https://review.opendev.org/685181 | 20:08 |
| lbragstad | efried nice - that looks sane? | 20:10 |
| efried | Question mark appropriate | 20:10 |
| *** mvkr has quit IRC | 20:11 | |
| lbragstad | well - i know enough about paste to +2 reviews that drop-kicked it out of our project | 20:11 |
| efried | heh | 20:11 |
| lbragstad | barely enough to be dangerous | 20:11 |
| efried | so basically, I hacked paste's front end (that we were already overriding in nova) to accept a "wildcard" | 20:11 |
| efried | The wsgi resource bit could probably be a tad cleaner, but this made use of stuff that was already hanging around | 20:12 |
| efried | And I don't think I can get rid of the existing VersionV21 gorp because (for some unknown reason) we service the versioned discovery documents at /v2[.1]/versions/v2[.1] as well | 20:13 |
| lbragstad | huh - interesting | 20:14 |
| efried | hum, which appears to be an undocumented API | 20:14 |
| efried | as such, I wonder if we can blow it away... | 20:14 |
| efried | but later. | 20:14 |
| efried | Anyway, thanks for being a sounding board :) | 20:14 |
| * efried ==> chauffeur | 20:14 | |
| lbragstad | anytime - i'm a great rubber duck | 20:22 |
| *** mvkr has joined #openstack-keystone | 20:25 | |
| *** raildo has quit IRC | 21:32 | |
| *** dave-mccowan has joined #openstack-keystone | 21:38 | |
| *** rcernin has joined #openstack-keystone | 22:24 | |
| *** xek has quit IRC | 22:43 | |
| *** rcernin has quit IRC | 22:48 | |
| *** jamesmcarthur has joined #openstack-keystone | 23:03 | |
| *** jamesmcarthur has quit IRC | 23:29 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!