*** eandersson has quit IRC | 00:44 | |
*** spsurya has joined #openstack-keystone | 01:18 | |
*** ayoung has quit IRC | 01:56 | |
*** ayoung has joined #openstack-keystone | 01:57 | |
*** ayoung has quit IRC | 02:53 | |
*** ayoung has joined #openstack-keystone | 02:54 | |
*** ayoung has quit IRC | 03:04 | |
*** ayoung has joined #openstack-keystone | 03:07 | |
*** ayoung has quit IRC | 03:41 | |
*** ayoung has joined #openstack-keystone | 03:42 | |
*** ayoung has quit IRC | 04:01 | |
*** ayoung has joined #openstack-keystone | 04:04 | |
*** ayoung has quit IRC | 04:48 | |
*** ayoung has joined #openstack-keystone | 04:51 | |
*** ayoung has quit IRC | 05:27 | |
*** ayoung has joined #openstack-keystone | 05:29 | |
*** ayoung has quit IRC | 05:56 | |
*** ayoung has joined #openstack-keystone | 05:58 | |
*** ayoung has quit IRC | 07:07 | |
*** rcernin has quit IRC | 07:08 | |
*** ayoung has joined #openstack-keystone | 07:08 | |
*** jmlowe has quit IRC | 07:19 | |
*** awalende has joined #openstack-keystone | 08:09 | |
*** ayoung has quit IRC | 08:19 | |
*** tkajinam has quit IRC | 08:19 | |
*** ayoung has joined #openstack-keystone | 08:21 | |
*** shyamb has joined #openstack-keystone | 08:40 | |
*** trident has quit IRC | 08:45 | |
*** jrist- has quit IRC | 08:51 | |
*** jrist has joined #openstack-keystone | 08:53 | |
*** gshippey has joined #openstack-keystone | 08:55 | |
*** trident has joined #openstack-keystone | 08:59 | |
*** jrist has quit IRC | 09:00 | |
*** rcernin has joined #openstack-keystone | 09:03 | |
*** jrist has joined #openstack-keystone | 09:09 | |
*** trident has quit IRC | 09:16 | |
*** ivve has joined #openstack-keystone | 09:17 | |
*** dancn has joined #openstack-keystone | 09:19 | |
*** trident has joined #openstack-keystone | 09:24 | |
*** ayoung has quit IRC | 09:35 | |
*** shyamb has quit IRC | 09:36 | |
*** ayoung has joined #openstack-keystone | 09:37 | |
*** dancn has quit IRC | 09:55 | |
*** rcernin has quit IRC | 09:56 | |
awalende | hello, I have a question concerning the "new" policy rules coming with stein, where there is the transition to system_scopes. Consider the following new rule: "identity:list_roles": "role:reader and system_scope:all" | 09:56 |
---|---|---|
awalende | Usually the admin account does not have a reader role, not even in devstack stein. | 09:57 |
awalende | So i have to create a reader role with system_scope:all and add it to the admin rule? The admin role alone does not do the trick? | 09:57 |
awalende | *to the admin user | 09:57 |
*** rcernin has joined #openstack-keystone | 10:12 | |
*** ayoung has quit IRC | 10:49 | |
*** rcernin has quit IRC | 10:49 | |
*** ayoung has joined #openstack-keystone | 10:52 | |
*** ayoung has quit IRC | 11:06 | |
*** ayoung has joined #openstack-keystone | 11:07 | |
wdoekes | heh, I also ran into the scope issue for the list_roles. I disabled the new enforce_scopes for now. otherwise I couldn't create domain admins without system scope | 11:11 |
*** FlorianFa has quit IRC | 11:26 | |
*** pcaruana has joined #openstack-keystone | 11:47 | |
*** awalende has quit IRC | 11:48 | |
*** awalende has joined #openstack-keystone | 11:49 | |
*** ayoung has quit IRC | 12:01 | |
*** ayoung has joined #openstack-keystone | 12:02 | |
*** pcaruana has quit IRC | 12:09 | |
*** rcernin has joined #openstack-keystone | 12:16 | |
*** awalende has quit IRC | 12:33 | |
*** awalende has joined #openstack-keystone | 12:39 | |
*** rcernin has quit IRC | 12:44 | |
awalende | wdoekes, Is this a keytone.conf option? | 12:47 |
*** kumar_biplab has joined #openstack-keystone | 12:52 | |
*** raildo has joined #openstack-keystone | 13:25 | |
*** dancn has joined #openstack-keystone | 13:27 | |
*** jaosorior has joined #openstack-keystone | 13:35 | |
kumar_biplab | Hello Everyone .. I am running an openstack in a system where I am trying to create and delete 150 projects through an automation script but while deleting I am running into a problem of "Failed to delete project with name or ID 'xxx': Internal Server Error (HTTP 500). resetting dropped connection: VM". Is there any limit on deleting/creating projects in bulk ? I also tried to delete the projects through cli and in debug mo | 13:50 |
kumar_biplab | de same error appears. Please help on this. | 13:50 |
*** ayoung has quit IRC | 14:23 | |
*** ayoung has joined #openstack-keystone | 14:25 | |
*** bnemec has joined #openstack-keystone | 14:29 | |
*** bnemec has quit IRC | 14:29 | |
wdoekes | awalende: yes, enforce_scope=False in keystone.conf, and possibly "identity:list_roles": "role:reader" in your policy file (depending on your permissions). | 14:38 |
wdoekes | I think setting enforce_scope=False changes a lot of policies though (to the old defaults). so you'll want to look into what you're altering | 14:39 |
wdoekes | github.com/ossobv/horizon/blob/osso/train/ossobv_policy.yaml <- a listing of the changed policies I fetched from the deprecationwarnings | 14:41 |
awalende | oh nice! I was about to fetch them for myself from the wsgi logs :D | 14:42 |
*** bnemec has joined #openstack-keystone | 14:49 | |
*** dancn has quit IRC | 14:53 | |
*** dancn has joined #openstack-keystone | 15:00 | |
*** ayoung has quit IRC | 15:02 | |
*** ayoung has joined #openstack-keystone | 15:05 | |
*** jaosorior has quit IRC | 15:06 | |
*** dancn has quit IRC | 15:13 | |
*** dancn has joined #openstack-keystone | 15:15 | |
*** awalende has quit IRC | 15:19 | |
*** awalende has joined #openstack-keystone | 15:20 | |
*** jaosorior has joined #openstack-keystone | 15:22 | |
*** awalende_ has joined #openstack-keystone | 15:23 | |
*** awalende has quit IRC | 15:24 | |
*** awalende_ has quit IRC | 15:27 | |
*** kumar_biplab has quit IRC | 15:40 | |
*** ayoung has quit IRC | 15:41 | |
*** kumar_biplab has joined #openstack-keystone | 15:42 | |
*** stingrayza has quit IRC | 15:44 | |
*** ayoung has joined #openstack-keystone | 15:45 | |
*** stingrayza has joined #openstack-keystone | 15:47 | |
*** jaosorior has quit IRC | 15:47 | |
*** awalende has joined #openstack-keystone | 15:50 | |
*** kumar_biplab has quit IRC | 15:51 | |
*** also_stingrayza has joined #openstack-keystone | 15:53 | |
*** stingrayza has quit IRC | 15:53 | |
*** awalende has quit IRC | 15:54 | |
*** dancn has quit IRC | 15:57 | |
*** jaosorior has joined #openstack-keystone | 15:57 | |
*** jaosorior has quit IRC | 16:04 | |
*** jaosorior has joined #openstack-keystone | 16:05 | |
*** ayoung has quit IRC | 16:17 | |
*** ayoung has joined #openstack-keystone | 16:17 | |
*** bnemec has quit IRC | 16:20 | |
*** ivve has quit IRC | 16:32 | |
*** pcaruana has joined #openstack-keystone | 16:45 | |
*** bnemec has joined #openstack-keystone | 16:47 | |
*** ayoung has quit IRC | 16:56 | |
*** ayoung has joined #openstack-keystone | 16:59 | |
*** dancn has joined #openstack-keystone | 17:10 | |
*** jaosorior has quit IRC | 18:06 | |
*** jmlowe has joined #openstack-keystone | 18:38 | |
*** ayoung has quit IRC | 18:39 | |
*** ayoung has joined #openstack-keystone | 18:42 | |
*** ayoung has quit IRC | 18:47 | |
*** ayoung has joined #openstack-keystone | 18:49 | |
*** ivve has joined #openstack-keystone | 18:55 | |
*** pcaruana has quit IRC | 18:57 | |
*** pcaruana has joined #openstack-keystone | 18:58 | |
*** ayoung has quit IRC | 19:04 | |
*** ayoung has joined #openstack-keystone | 19:05 | |
*** dancn has quit IRC | 19:11 | |
*** awalende has joined #openstack-keystone | 19:21 | |
*** awalende has quit IRC | 19:25 | |
*** ayoung has quit IRC | 19:26 | |
*** ayoung has joined #openstack-keystone | 19:26 | |
*** efried is now known as efried_afk | 21:01 | |
*** raildo has quit IRC | 21:05 | |
*** spsurya has quit IRC | 21:07 | |
*** ayoung has quit IRC | 21:10 | |
*** ayoung has joined #openstack-keystone | 21:13 | |
cmurphy | mordred: https://review.opendev.org/687753 and https://review.opendev.org/687756 are the foreign key changes i mentioned last week | 21:31 |
*** ayoung has quit IRC | 21:34 | |
*** ayoung has joined #openstack-keystone | 21:37 | |
*** pcaruana has quit IRC | 21:42 | |
*** gshippey has quit IRC | 21:44 | |
*** efried_afk is now known as efried | 21:53 | |
*** ayoung has quit IRC | 22:16 | |
*** ayoung has joined #openstack-keystone | 22:17 | |
*** dklyle has quit IRC | 22:35 | |
*** david-lyle has joined #openstack-keystone | 22:35 | |
*** ayoung has quit IRC | 22:43 | |
*** ayoung has joined #openstack-keystone | 22:44 | |
*** ayoung has quit IRC | 22:52 | |
*** ayoung has joined #openstack-keystone | 22:53 | |
*** rcernin has joined #openstack-keystone | 22:58 | |
*** tkajinam has joined #openstack-keystone | 23:01 | |
*** ayoung has quit IRC | 23:11 | |
*** ayoung has joined #openstack-keystone | 23:13 | |
*** awalende has joined #openstack-keystone | 23:21 | |
*** awalende has quit IRC | 23:26 | |
*** ivve has quit IRC | 23:32 | |
*** ayoung has quit IRC | 23:41 | |
*** ayoung has joined #openstack-keystone | 23:42 | |
*** ayoung has quit IRC | 23:52 | |
*** ayoung has joined #openstack-keystone | 23:54 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!