Monday, 2023-01-30

*** ministry is now known as __ministry03:31
*** blarnath is now known as d34dh0r5305:06
kpdevhi09:29
kpdevall example I see in Nova and cinder with service-token are in format of user_auth(password) + service_auth.09:30
kpdevdo we have example where user_auth is derived from token instead of password09:30
*** dviroel_ is now known as dviroel|rover11:24
*** tkajinam is now known as Guest288213:11
*** dasm|off is now known as dasm13:57
opendevreviewDavid Wilde proposed openstack/keystone master: Add oidc federation test setup  https://review.opendev.org/c/openstack/keystone/+/86456615:28
*** dviroel|rover is now known as dviroel|rover|lunch16:15
*** dviroel|rover|lunch is now known as dviroel|rover17:20
kpdevHi17:59
kpdevI want to use service token for long running operation17:59
kpdevif I use user_token _ service_token where user_token is derived from password , it works18:00
kpdevhowever when user_token is derived from auth_token, it expires after 1 hour eventhough used with service token wrapper18:00
kpdevhow can i use user_token provided by customer to perform long running operation alongwith service user credential based service token ?18:01
opendevreviewDavid Wilde proposed openstack/keystone master: Add oidc federation test setup  https://review.opendev.org/c/openstack/keystone/+/86456618:28
*** dviroel|rover is now known as dviroel|out21:54
zaitcevI'm looking at /etc/keystone and it seems like we do not allow pipeline to be configured aside from [wsgi] debug thing. Is it really the case?23:03

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!