| cardoe | gtema: https://review.opendev.org/c/openstack/keystone/+/981321 you can already get a system scoped token. | 00:21 |
|---|---|---|
| cardoe | gtema: the issue was actually related to keystoneauth returning the unscoped token and then that was sent to a system scoped request. That was the underlying issue. | 00:22 |
| opendevreview | Merged openstack/keystoneauth master: trivial: Make Adapter, Session register methods classmethods https://review.opendev.org/c/openstack/keystoneauth/+/1003232 | 00:24 |
| tkajinam | d34dh0r53, hi could you please check https://review.opendev.org/c/openstack/keystonemiddleware/+/979375 to to unblock the series ? | 02:48 |
| *** zseguin is now known as Guest17005 | 06:27 | |
| *** EugenMayer4401800 is now known as EugenMayer440180 | 06:37 | |
| opendevreview | Artem Goncharov proposed openstack/keystone stable/2026.1: Ban ec2credential tokens from Keystone API https://review.opendev.org/c/openstack/keystone/+/1002082 | 07:09 |
| gtema | cardoe: I know you can get system scoped token. This test is barely verifying something not very relevant to the issue. Of course you can get a system scoped token after authenticated through federation with rescoping (what is itself a bug), but you can't get system scope token for federated user during initial authentication (token payload is missing). Failing skyline usecase demonstrates that the token it has is technically corrupted | 07:15 |
| gtema | and we first need to figure out what is this token really is and how it was retrieved. Just adding new payload type is closing eyes to the real bug by providing a workaround | 07:15 |
| gtema | cardoe, so if you wanna help debugging the real cause please add the following to the failing place: ``` def _determine_payload_class_from_token(self, token): | 07:26 |
| gtema | print(f" the token expanded is {token.__dict__}")``` and let me know the content of the token that fails for you so that we can understand what is inside the token that skyline gets (you can pass me details in private if concerned of the privacy) | 07:26 |
| *** zseguin_ is now known as zseguin | 07:28 | |
| opendevreview | OpenStack Release Bot proposed openstack/oslo.limit stable/2026.2: Update .gitreview for stable/2026.2 https://review.opendev.org/c/openstack/oslo.limit/+/1003683 | 10:54 |
| opendevreview | OpenStack Release Bot proposed openstack/oslo.limit stable/2026.2: Update TOX_CONSTRAINTS_FILE for stable/2026.2 https://review.opendev.org/c/openstack/oslo.limit/+/1003684 | 10:54 |
| opendevreview | OpenStack Release Bot proposed openstack/oslo.limit master: Update master for stable/2026.2 https://review.opendev.org/c/openstack/oslo.limit/+/1003685 | 10:54 |
| opendevreview | OpenStack Release Bot proposed openstack/oslo.policy stable/2026.2: Update .gitreview for stable/2026.2 https://review.opendev.org/c/openstack/oslo.policy/+/1003698 | 10:55 |
| opendevreview | OpenStack Release Bot proposed openstack/oslo.policy stable/2026.2: Update TOX_CONSTRAINTS_FILE for stable/2026.2 https://review.opendev.org/c/openstack/oslo.policy/+/1003699 | 10:55 |
| opendevreview | OpenStack Release Bot proposed openstack/oslo.policy master: Update master for stable/2026.2 https://review.opendev.org/c/openstack/oslo.policy/+/1003700 | 10:55 |
| opendevreview | Merged openstack/keystone stable/2026.1: Ban ec2credential tokens from Keystone API https://review.opendev.org/c/openstack/keystone/+/1002082 | 10:59 |
| opendevreview | OpenStack Release Bot proposed openstack/keystoneauth stable/2026.2: Update .gitreview for stable/2026.2 https://review.opendev.org/c/openstack/keystoneauth/+/1003738 | 11:06 |
| opendevreview | OpenStack Release Bot proposed openstack/keystoneauth stable/2026.2: Update TOX_CONSTRAINTS_FILE for stable/2026.2 https://review.opendev.org/c/openstack/keystoneauth/+/1003739 | 11:06 |
| opendevreview | OpenStack Release Bot proposed openstack/keystoneauth master: Update master for stable/2026.2 https://review.opendev.org/c/openstack/keystoneauth/+/1003740 | 11:06 |
| opendevreview | Merged openstack/oslo.policy stable/2026.2: Update .gitreview for stable/2026.2 https://review.opendev.org/c/openstack/oslo.policy/+/1003698 | 12:28 |
| opendevreview | Merged openstack/oslo.limit stable/2026.2: Update .gitreview for stable/2026.2 https://review.opendev.org/c/openstack/oslo.limit/+/1003683 | 12:45 |
| opendevreview | Merged openstack/oslo.limit stable/2026.2: Update TOX_CONSTRAINTS_FILE for stable/2026.2 https://review.opendev.org/c/openstack/oslo.limit/+/1003684 | 12:49 |
| opendevreview | Merged openstack/oslo.limit master: Update master for stable/2026.2 https://review.opendev.org/c/openstack/oslo.limit/+/1003685 | 12:49 |
| opendevreview | Merged openstack/oslo.policy master: Update master for stable/2026.2 https://review.opendev.org/c/openstack/oslo.policy/+/1003700 | 12:51 |
| opendevreview | Merged openstack/keystoneauth master: Update master for stable/2026.2 https://review.opendev.org/c/openstack/keystoneauth/+/1003740 | 12:58 |
| cardoe | gtema: Yeah I had given that previously and Boris used that for his patches. | 13:31 |
| gtema | I have never seen this info. Maybe because of this I do not understand how he came to the fix. It seems logical, but a "workaround" rather then fix the root bug. I have a different opinion over the crash reasons | 13:36 |
| opendevreview | Stephen Finucane proposed openstack/keystoneauth master: typing: Use objects from typing https://review.opendev.org/c/openstack/keystoneauth/+/994713 | 13:48 |
| opendevreview | Stephen Finucane proposed openstack/keystoneauth master: typing: Remove unnecessary use of TYPE_CHECKING https://review.opendev.org/c/openstack/keystoneauth/+/1003777 | 13:48 |
| opendevreview | Stephen Finucane proposed openstack/keystoneauth master: trivial: Remove type info from docstrings https://review.opendev.org/c/openstack/keystoneauth/+/1003778 | 13:48 |
| opendevreview | Stephen Finucane proposed openstack/keystoneauth master: typing: Allow None passed to set_auth_state https://review.opendev.org/c/openstack/keystoneauth/+/1003780 | 13:49 |
| *** zigo_ is now known as zigo | 14:07 | |
| *** sfinucan is now known as stephenfin | 14:58 | |
| cardoe | gtema: I'll rerun it tomorrow and get you info. | 14:58 |
| gtema | thanks | 14:59 |
| opendevreview | Merged openstack/keystone master: Use a %% to escape the % sign https://review.opendev.org/c/openstack/keystone/+/930180 | 15:06 |
| opendevreview | Merged openstack/keystoneauth master: typing: Allow None passed to set_auth_state https://review.opendev.org/c/openstack/keystoneauth/+/1003780 | 16:52 |
| gouthamr | release-team: anyone else around to review/merge: https://review.opendev.org/c/openstack/releases/+/1003379 | 17:39 |
| gouthamr | ty fungi \o/ | 17:39 |
| fungi | better to ping folks in #openstack-releases, but yes i can expedite it | 17:41 |
| fungi | er, #openstack-release (no trailing plural "s") | 17:41 |
| fungi | we've discussed that set of release requests thoroughly now and it appears any concerns previously raised have been addressed | 17:42 |
| gouthamr | i did post in the wrong channel, my bad.. | 17:47 |
| opendevreview | Merged openstack/oslo.policy master: Fix typo https://review.opendev.org/c/openstack/oslo.policy/+/1003373 | 17:59 |
| opendevreview | Benjamin Lasseye proposed openstack/keystone master: Fix: TOTP authentication lockout risk in Keystone https://review.opendev.org/c/openstack/keystone/+/985969 | 21:27 |
| opendevreview | Benjamin Lasseye proposed openstack/keystone master: Fix: TOTP authentication lockout risk in Keystone https://review.opendev.org/c/openstack/keystone/+/985969 | 21:32 |
Generated by irclog2html.py 4.1.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!