*** jmlowe has joined #openstack-keystone | 00:15 | |
*** dave-mccowan has joined #openstack-keystone | 00:18 | |
*** jmlowe has quit IRC | 00:33 | |
*** migawa is now known as migawa|AFK | 00:52 | |
*** migawa|AFK is now known as migawa | 00:52 | |
*** spatel has joined #openstack-keystone | 01:01 | |
*** dave-mccowan has quit IRC | 01:32 | |
*** gyee has quit IRC | 01:36 | |
*** vishalmanchanda has joined #openstack-keystone | 01:54 | |
*** dave-mccowan has joined #openstack-keystone | 01:56 | |
*** jawad_axd has joined #openstack-keystone | 02:22 | |
*** jawad_axd has quit IRC | 02:27 | |
*** jawad_axd has joined #openstack-keystone | 02:43 | |
*** migawa is now known as migawa|AFK | 02:45 | |
*** migawa|AFK is now known as migawa | 02:47 | |
*** jawad_axd has quit IRC | 02:47 | |
*** jamesmcarthur has joined #openstack-keystone | 02:50 | |
*** migawa is now known as migawa|AFK | 02:53 | |
*** jamesmcarthur has quit IRC | 03:08 | |
*** jamesmcarthur has joined #openstack-keystone | 03:15 | |
*** spatel has quit IRC | 03:17 | |
*** migawa|AFK is now known as migawa | 03:56 | |
*** dave-mccowan has quit IRC | 04:13 | |
*** jamesmcarthur has quit IRC | 04:21 | |
*** jamesmcarthur has joined #openstack-keystone | 05:23 | |
*** jamesmcarthur has quit IRC | 05:28 | |
*** evrardjp has quit IRC | 05:34 | |
*** evrardjp has joined #openstack-keystone | 05:34 | |
*** migawa is now known as migawa|AFK | 05:53 | |
*** migawa|AFK is now known as migawa | 05:54 | |
*** wxy-xiyuan has joined #openstack-keystone | 06:16 | |
*** manuvakery has joined #openstack-keystone | 06:27 | |
*** jhesketh has quit IRC | 06:48 | |
*** jhesketh has joined #openstack-keystone | 06:50 | |
*** jhesketh has quit IRC | 07:15 | |
*** dancn has joined #openstack-keystone | 07:17 | |
*** jawad_axd has joined #openstack-keystone | 07:22 | |
*** jhesketh has joined #openstack-keystone | 07:25 | |
*** shyamb has joined #openstack-keystone | 07:41 | |
*** shyamb has quit IRC | 07:47 | |
*** ivve has joined #openstack-keystone | 07:56 | |
*** dancn has quit IRC | 08:12 | |
openstackgerrit | Vishakha Agarwal proposed openstack/keystone-tempest-plugin master: Test case for openstack_groups https://review.opendev.org/704271 | 08:21 |
---|---|---|
*** tesseract has joined #openstack-keystone | 08:21 | |
openstackgerrit | Vishakha Agarwal proposed openstack/keystone-tempest-plugin master: Test case for openstack_groups https://review.opendev.org/704271 | 08:23 |
*** tkajinam has quit IRC | 08:42 | |
*** shyamb has joined #openstack-keystone | 08:51 | |
*** rcernin has quit IRC | 09:12 | |
*** xek has joined #openstack-keystone | 09:16 | |
*** dancn has joined #openstack-keystone | 09:27 | |
*** baffle has joined #openstack-keystone | 09:29 | |
*** shyamb has quit IRC | 09:33 | |
openstackgerrit | Vishakha Agarwal proposed openstack/keystone-tempest-plugin master: Test case for openstack_groups https://review.opendev.org/704271 | 09:38 |
*** shyamb has joined #openstack-keystone | 09:40 | |
*** shyamb has quit IRC | 09:52 | |
*** rcernin has joined #openstack-keystone | 09:59 | |
*** rcernin has quit IRC | 10:17 | |
*** vishalmanchanda has quit IRC | 10:28 | |
openstackgerrit | Vishakha Agarwal proposed openstack/keystone master: Add openstack_groups to assertion https://review.opendev.org/588211 | 10:34 |
*** shyamb has joined #openstack-keystone | 10:36 | |
openstackgerrit | Vishakha Agarwal proposed openstack/keystone-tempest-plugin master: Test case for openstack_groups https://review.opendev.org/704271 | 10:38 |
openstackgerrit | Vishakha Agarwal proposed openstack/keystone-tempest-plugin master: Test case for openstack_groups https://review.opendev.org/704271 | 10:43 |
*** jopdorp has joined #openstack-keystone | 10:48 | |
jopdorp | hi! | 10:48 |
jopdorp | can anyone help me with role assignments through the api? | 10:49 |
jopdorp | I was able to create a project with is_domain=True | 10:49 |
jopdorp | I was able to create a user and a role on that project | 10:49 |
jopdorp | but I wasn't able to assign that role to the user | 10:49 |
jopdorp | I'm using a token from admin on the default domain with scope system all | 10:50 |
jopdorp | keystone give me 403 when i try to assign the role to the user | 10:52 |
jopdorp | could it be that what I'm trying to do is only possible with the cli? | 11:05 |
jopdorp | because it seems that the admin user from domain 'default' has no rights to assign roles to users on the newly created domain | 11:06 |
jopdorp | or should i always add the 'default' project as the parent id? | 11:10 |
jopdorp | I'm trying to make a multi tenant cloud | 11:10 |
jopdorp | It's going to be a public cloud | 11:11 |
*** dancn has quit IRC | 11:14 | |
vishakha | jopdorp Could you share the api you used to assign a system scoped token with the logs? | 11:19 |
*** tkajinam has joined #openstack-keystone | 11:58 | |
*** shyamb has quit IRC | 11:59 | |
*** shyamb has joined #openstack-keystone | 12:01 | |
*** shyamb has quit IRC | 12:25 | |
*** raildo has joined #openstack-keystone | 12:44 | |
*** jopdorp has quit IRC | 12:55 | |
*** dave-mccowan has joined #openstack-keystone | 13:03 | |
*** tkajinam has quit IRC | 13:17 | |
*** ivve has quit IRC | 13:28 | |
*** jawad_axd has quit IRC | 14:38 | |
*** jawad_axd has joined #openstack-keystone | 14:39 | |
*** jawad_axd has quit IRC | 14:41 | |
*** manuvakery has quit IRC | 14:47 | |
*** xek has quit IRC | 16:10 | |
*** jamesmcarthur has joined #openstack-keystone | 16:16 | |
*** manuvakery has joined #openstack-keystone | 16:24 | |
*** jmlowe has joined #openstack-keystone | 16:57 | |
*** tesseract has quit IRC | 17:29 | |
*** evrardjp has quit IRC | 17:34 | |
*** evrardjp has joined #openstack-keystone | 17:34 | |
*** mvkr has quit IRC | 17:42 | |
*** gmann is now known as gmann_afk | 17:42 | |
*** jamesmcarthur has quit IRC | 17:54 | |
*** jamesmcarthur has joined #openstack-keystone | 17:58 | |
*** jamesmcarthur has quit IRC | 18:07 | |
*** jamesmcarthur has joined #openstack-keystone | 18:09 | |
*** jamesmcarthur has quit IRC | 18:25 | |
*** jamesmcarthur has joined #openstack-keystone | 18:26 | |
*** manuvakery has quit IRC | 18:27 | |
*** jamesmcarthur has quit IRC | 18:31 | |
*** jamesmcarthur has joined #openstack-keystone | 18:36 | |
openstackgerrit | Colleen Murphy proposed openstack/keystone master: Constraint dependencies for docs build https://review.opendev.org/707895 | 18:38 |
cmurphy | could use a fast review of ^ once it passes ci so that we can get that backported and fix the stable branches | 18:39 |
*** dancn has joined #openstack-keystone | 18:45 | |
*** jmlowe has quit IRC | 18:46 | |
*** jamesmcarthur has quit IRC | 18:48 | |
gagehugo | done | 18:53 |
cmurphy | tyty | 18:58 |
*** cmurphy is now known as cmorpheus | 19:05 | |
*** mvkr has joined #openstack-keystone | 19:10 | |
*** dancn has quit IRC | 19:26 | |
*** mvkr has quit IRC | 19:29 | |
*** jmlowe has joined #openstack-keystone | 20:03 | |
*** gmann_afk is now known as gmann | 20:12 | |
cmorpheus | lbragstad__: knikolla https://review.opendev.org/707895 is green | 20:19 |
*** xek has joined #openstack-keystone | 20:32 | |
*** jmlowe has quit IRC | 21:00 | |
cmorpheus | lbragstad__: i'm playing with unified limits, i have enforcement_model=strict_two_level and a registered resource limit of 3 and i want to set the project limit to 5, and it fails - i guess because its parent is the default domain and it's effective limit is the same as the registered limit? is that what it's supposed to do? i can override the registered limit when i'm using the flat enforcement | 21:05 |
cmorpheus | model | 21:05 |
*** mvkr has joined #openstack-keystone | 21:20 | |
*** dave-mccowan has quit IRC | 21:23 | |
*** raildo has quit IRC | 21:29 | |
*** jmlowe has joined #openstack-keystone | 21:36 | |
*** jmlowe has quit IRC | 22:04 | |
*** xek has quit IRC | 22:13 | |
*** xek has joined #openstack-keystone | 22:15 | |
*** xek has quit IRC | 22:47 | |
*** jmlowe has joined #openstack-keystone | 23:48 | |
*** spatel has joined #openstack-keystone | 23:58 | |
cmorpheus | the more i think about it the more it makes sense. i can override the limit for the default domain and then set a project limit. | 23:59 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!