Monday, 2019-11-11

*** eandersson has quit IRC00:44
*** spsurya has joined #openstack-keystone01:18
*** ayoung has quit IRC01:56
*** ayoung has joined #openstack-keystone01:57
*** ayoung has quit IRC02:53
*** ayoung has joined #openstack-keystone02:54
*** ayoung has quit IRC03:04
*** ayoung has joined #openstack-keystone03:07
*** ayoung has quit IRC03:41
*** ayoung has joined #openstack-keystone03:42
*** ayoung has quit IRC04:01
*** ayoung has joined #openstack-keystone04:04
*** ayoung has quit IRC04:48
*** ayoung has joined #openstack-keystone04:51
*** ayoung has quit IRC05:27
*** ayoung has joined #openstack-keystone05:29
*** ayoung has quit IRC05:56
*** ayoung has joined #openstack-keystone05:58
*** ayoung has quit IRC07:07
*** rcernin has quit IRC07:08
*** ayoung has joined #openstack-keystone07:08
*** jmlowe has quit IRC07:19
*** awalende has joined #openstack-keystone08:09
*** ayoung has quit IRC08:19
*** tkajinam has quit IRC08:19
*** ayoung has joined #openstack-keystone08:21
*** shyamb has joined #openstack-keystone08:40
*** trident has quit IRC08:45
*** jrist- has quit IRC08:51
*** jrist has joined #openstack-keystone08:53
*** gshippey has joined #openstack-keystone08:55
*** trident has joined #openstack-keystone08:59
*** jrist has quit IRC09:00
*** rcernin has joined #openstack-keystone09:03
*** jrist has joined #openstack-keystone09:09
*** trident has quit IRC09:16
*** ivve has joined #openstack-keystone09:17
*** dancn has joined #openstack-keystone09:19
*** trident has joined #openstack-keystone09:24
*** ayoung has quit IRC09:35
*** shyamb has quit IRC09:36
*** ayoung has joined #openstack-keystone09:37
*** dancn has quit IRC09:55
*** rcernin has quit IRC09:56
awalendehello, I have a question concerning the "new" policy rules coming with stein, where there is the transition to system_scopes. Consider the following new rule: "identity:list_roles": "role:reader and system_scope:all"09:56
awalendeUsually the admin account does not have a reader role, not even in devstack stein.09:57
awalendeSo i have to create a reader role with system_scope:all and add it to the admin rule? The admin role alone does not do the trick?09:57
awalende*to the admin user09:57
*** rcernin has joined #openstack-keystone10:12
*** ayoung has quit IRC10:49
*** rcernin has quit IRC10:49
*** ayoung has joined #openstack-keystone10:52
*** ayoung has quit IRC11:06
*** ayoung has joined #openstack-keystone11:07
wdoekesheh, I also ran into the scope issue for the list_roles. I disabled the new enforce_scopes for now. otherwise I couldn't create domain admins without system scope11:11
*** FlorianFa has quit IRC11:26
*** pcaruana has joined #openstack-keystone11:47
*** awalende has quit IRC11:48
*** awalende has joined #openstack-keystone11:49
*** ayoung has quit IRC12:01
*** ayoung has joined #openstack-keystone12:02
*** pcaruana has quit IRC12:09
*** rcernin has joined #openstack-keystone12:16
*** awalende has quit IRC12:33
*** awalende has joined #openstack-keystone12:39
*** rcernin has quit IRC12:44
awalendewdoekes, Is this a keytone.conf option?12:47
*** kumar_biplab has joined #openstack-keystone12:52
*** raildo has joined #openstack-keystone13:25
*** dancn has joined #openstack-keystone13:27
*** jaosorior has joined #openstack-keystone13:35
kumar_biplabHello Everyone .. I am running an openstack in a system where I am trying to create and delete 150 projects through an automation script but while deleting I am running into a problem of "Failed to delete project with name or ID 'xxx': Internal Server Error (HTTP 500).  resetting dropped connection: VM". Is there any limit on deleting/creating projects in bulk ? I also tried to delete the projects through cli and  in debug mo13:50
kumar_biplabde same error appears. Please help on this.13:50
*** ayoung has quit IRC14:23
*** ayoung has joined #openstack-keystone14:25
*** bnemec has joined #openstack-keystone14:29
*** bnemec has quit IRC14:29
wdoekesawalende: yes, enforce_scope=False in keystone.conf, and possibly "identity:list_roles": "role:reader" in your policy file (depending on your permissions).14:38
wdoekesI think setting enforce_scope=False changes a lot of policies though (to the old defaults). so you'll want to look into what you're altering14:39
wdoekesgithub.com/ossobv/horizon/blob/osso/train/ossobv_policy.yaml <- a listing of the changed policies I fetched from the deprecationwarnings14:41
awalendeoh nice! I was about to fetch them for myself from the wsgi logs :D14:42
*** bnemec has joined #openstack-keystone14:49
*** dancn has quit IRC14:53
*** dancn has joined #openstack-keystone15:00
*** ayoung has quit IRC15:02
*** ayoung has joined #openstack-keystone15:05
*** jaosorior has quit IRC15:06
*** dancn has quit IRC15:13
*** dancn has joined #openstack-keystone15:15
*** awalende has quit IRC15:19
*** awalende has joined #openstack-keystone15:20
*** jaosorior has joined #openstack-keystone15:22
*** awalende_ has joined #openstack-keystone15:23
*** awalende has quit IRC15:24
*** awalende_ has quit IRC15:27
*** kumar_biplab has quit IRC15:40
*** ayoung has quit IRC15:41
*** kumar_biplab has joined #openstack-keystone15:42
*** stingrayza has quit IRC15:44
*** ayoung has joined #openstack-keystone15:45
*** stingrayza has joined #openstack-keystone15:47
*** jaosorior has quit IRC15:47
*** awalende has joined #openstack-keystone15:50
*** kumar_biplab has quit IRC15:51
*** also_stingrayza has joined #openstack-keystone15:53
*** stingrayza has quit IRC15:53
*** awalende has quit IRC15:54
*** dancn has quit IRC15:57
*** jaosorior has joined #openstack-keystone15:57
*** jaosorior has quit IRC16:04
*** jaosorior has joined #openstack-keystone16:05
*** ayoung has quit IRC16:17
*** ayoung has joined #openstack-keystone16:17
*** bnemec has quit IRC16:20
*** ivve has quit IRC16:32
*** pcaruana has joined #openstack-keystone16:45
*** bnemec has joined #openstack-keystone16:47
*** ayoung has quit IRC16:56
*** ayoung has joined #openstack-keystone16:59
*** dancn has joined #openstack-keystone17:10
*** jaosorior has quit IRC18:06
*** jmlowe has joined #openstack-keystone18:38
*** ayoung has quit IRC18:39
*** ayoung has joined #openstack-keystone18:42
*** ayoung has quit IRC18:47
*** ayoung has joined #openstack-keystone18:49
*** ivve has joined #openstack-keystone18:55
*** pcaruana has quit IRC18:57
*** pcaruana has joined #openstack-keystone18:58
*** ayoung has quit IRC19:04
*** ayoung has joined #openstack-keystone19:05
*** dancn has quit IRC19:11
*** awalende has joined #openstack-keystone19:21
*** awalende has quit IRC19:25
*** ayoung has quit IRC19:26
*** ayoung has joined #openstack-keystone19:26
*** efried is now known as efried_afk21:01
*** raildo has quit IRC21:05
*** spsurya has quit IRC21:07
*** ayoung has quit IRC21:10
*** ayoung has joined #openstack-keystone21:13
cmurphymordred: https://review.opendev.org/687753 and https://review.opendev.org/687756 are the foreign key changes i mentioned last week21:31
*** ayoung has quit IRC21:34
*** ayoung has joined #openstack-keystone21:37
*** pcaruana has quit IRC21:42
*** gshippey has quit IRC21:44
*** efried_afk is now known as efried21:53
*** ayoung has quit IRC22:16
*** ayoung has joined #openstack-keystone22:17
*** dklyle has quit IRC22:35
*** david-lyle has joined #openstack-keystone22:35
*** ayoung has quit IRC22:43
*** ayoung has joined #openstack-keystone22:44
*** ayoung has quit IRC22:52
*** ayoung has joined #openstack-keystone22:53
*** rcernin has joined #openstack-keystone22:58
*** tkajinam has joined #openstack-keystone23:01
*** ayoung has quit IRC23:11
*** ayoung has joined #openstack-keystone23:13
*** awalende has joined #openstack-keystone23:21
*** awalende has quit IRC23:26
*** ivve has quit IRC23:32
*** ayoung has quit IRC23:41
*** ayoung has joined #openstack-keystone23:42
*** ayoung has quit IRC23:52
*** ayoung has joined #openstack-keystone23:54

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!