| *** mhen_ is now known as mhen | 02:09 | |
| cardoe | gtema: so something I'd like to do since I run all my OpenStack in k8s is actually get rid of the nova, neutron, etc service accounts and utilize k8s service accounts and tokenreview. | 02:12 |
|---|---|---|
| gtema | cardoe: please open an issue or discussion in Ng describing that. I want to have a fixed discussion about the details outside of chat room | 06:49 |
| *** ykarel__ is now known as ykarel | 08:01 | |
| opendevreview | Takashi Kajinami proposed openstack/keystoneauth master: Enable logging related ruff checks https://review.opendev.org/c/openstack/keystoneauth/+/970587 | 08:21 |
| opendevreview | Ivan Anfimov proposed openstack/keystone-tempest-plugin master: Remove url tags from README https://review.opendev.org/c/openstack/keystone-tempest-plugin/+/970590 | 08:44 |
| opendevreview | Ivan Anfimov proposed openstack/keystone-specs master: Remove url tags from README https://review.opendev.org/c/openstack/keystone-specs/+/970591 | 08:46 |
| opendevreview | Ivan Anfimov proposed openstack/keystone-specs master: Remove url tags from README https://review.opendev.org/c/openstack/keystone-specs/+/970591 | 08:48 |
| opendevreview | Ivan Anfimov proposed openstack/keystone-specs master: setup.cfg: Replace dashes with underscores https://review.opendev.org/c/openstack/keystone-specs/+/970592 | 08:50 |
| opendevreview | Ivan Anfimov proposed openstack/keystone-specs master: setup.cfg: Replace dashes with underscores https://review.opendev.org/c/openstack/keystone-specs/+/970592 | 08:51 |
| opendevreview | Ivan Anfimov proposed openstack/keystone-specs master: setup.cfg: Replace dashes with underscores https://review.opendev.org/c/openstack/keystone-specs/+/970592 | 08:51 |
| opendevreview | Ivan Anfimov proposed openstack/keystone-specs master: setup.cfg: Replace dashes with underscores https://review.opendev.org/c/openstack/keystone-specs/+/970592 | 09:02 |
| opendevreview | Ivan Anfimov proposed openstack/keystone-specs master: setup.cfg: Replace dashes with underscores https://review.opendev.org/c/openstack/keystone-specs/+/970592 | 09:03 |
| jkulik | gtema: in https://github.com/sapcc/keystone/commit/37b02476e77750d349f9db29036d57fbd5a079d7 when the project list gets limited by the `max_db_limit`, no `next` link gets generated. this breaks listing projects in e.g. openstacksdk | 10:25 |
| jkulik | https://bugs.launchpad.net/keystone/+bug/2134607 | 10:32 |
| gtema | jkulik - ack | 10:38 |
| gtema | just any reference to sapcc is here wrong - it is a fork "we" are not responsible for | 10:39 |
| jkulik | sorry. edited | 10:40 |
| jkulik | listing users shows the same problem with the 1000 limit, but there, providing a limit makes openstacksdk fail in its endless pagination detection (it gets the same next link marker in two consecutive requests: https://github.com/openstack/openstacksdk/blob/master/openstack/resource.py#L2142-L2148) | 10:52 |
| jkulik | hm ... there are no next links generated for /users even with limit being set at least when queried via openstacksdk | 10:58 |
| jkulik | we're using the ldap backend for parts of our users though. only parts are in the sql backend. so not sure how that plays together. | 11:12 |
| jkulik | looking through the ldap driver code, it seems to only support `limit` and not `marker`. so limit-marker pagination cannot work with ldap backend, I guess? | 11:18 |
| gtema | nope | 11:25 |
| jkulik | ah, I see. We ehave `list_limit` set to 1500, which acts as a default in the new code when the user didn't provide a limit and this gets pulled down to 1000 by max_db_limit: https://github.com/openstack/keystone/blob/master/keystone/server/flask/common.py#L954-L963 | 11:30 |
| jkulik | well, but it's set to 1500 ... so my idea seems incorrect, as I still only get 1000 after we bumped `max_db_limit` | 11:39 |
| opendevreview | Grzegorz Grasza proposed openstack/keystonemiddleware master: Change service_token_roles_required default config https://review.opendev.org/c/openstack/keystonemiddleware/+/970607 | 12:36 |
| opendevreview | Merged openstack/oslo.limit master: Enable logging related ruff checks https://review.opendev.org/c/openstack/oslo.limit/+/970435 | 13:53 |
| opendevreview | Grzegorz Grasza proposed openstack/keystonemiddleware master: Change service_token_roles_required default config https://review.opendev.org/c/openstack/keystonemiddleware/+/970607 | 14:24 |
| cardoe | stephenfin: since you're good at the build env stuff... can you help me with https://review.opendev.org/c/openstack/keystoneauth/+/970328 its failing the tox-docs job because sphinx doesn't like the docstring on /usr/lib/python3.12/http/server.py which is from Python 3.12's stdlib. Nothing I can fix... | 14:36 |
| opendevreview | Merged openstack/oslo.limit stable/2025.2: Fix region query https://review.opendev.org/c/openstack/oslo.limit/+/970419 | 17:59 |
| opendevreview | Takashi Kajinami proposed openstack/keystoneauth master: Drop redundant target-version option https://review.opendev.org/c/openstack/keystoneauth/+/970668 | 18:22 |
| stephenfin | cardoe: That's happening because the docstring in stdlib is invalid rst https://github.com/python/cpython/blob/3.10/Lib/http/server.py#L147 | 19:31 |
| stephenfin | copy paste that docstring to e.g. https://rsted.info.ucl.ac.be/ | 19:31 |
| stephenfin | and we're using sphinxcontrib.api (and by extension sphinx.ext.autodoc) which is doing discovery of that module since you now depend on it as an import | 19:32 |
| stephenfin | you can fix this by mocking that module in docs builds | 19:32 |
| stephenfin | https://www.sphinx-doc.org/en/master/usage/extensions/autodoc.html#confval-autodoc_mock_imports | 19:33 |
| opendevreview | Stephen Finucane proposed openstack/keystoneauth master: Add v3websso OpenID Connect Web SSO authentication plugin https://review.opendev.org/c/openstack/keystoneauth/+/970328 | 19:35 |
| opendevreview | Stephen Finucane proposed openstack/keystoneauth master: Fix docs builds on Python 3.14 https://review.opendev.org/c/openstack/keystoneauth/+/970686 | 19:35 |
| stephenfin | cardoe: found a better way ^ | 19:36 |
| cardoe | ah nice | 19:37 |
| cardoe | Thank you. I knew you were the right person. :-D | 19:38 |
| winiciusallan[m] | hi gtema, when you have some time, could you do a follow-up here? https://review.opendev.org/c/openstack/keystone/+/970170 | 20:00 |
Generated by irclog2html.py 4.0.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!