| opendevreview | Doug Goldstein proposed openstack/keystoneauth master: Add a v3websso authentication plugin https://review.opendev.org/c/openstack/keystoneauth/+/1000759 | 15:48 |
|---|---|---|
| cardoe | stephenfin: any chance you've had a moment to think about the scope question above? | 16:11 |
| cardoe | So I dug a bit further. get_auth_state() and set_auth_state() always return the scoped token. get_cache_id() is also required by design to return NotImplemented for federated plugins because we're not suppose to cache scoped tokens. | 16:23 |
| opendevreview | Doug Goldstein proposed openstack/keystoneauth master: Rescope federated tokens to a system scope https://review.opendev.org/c/openstack/keystoneauth/+/1001382 | 16:44 |
| opendevreview | Doug Goldstein proposed openstack/keystoneauth master: Let a caller hold the unscoped token of a federated plugin https://review.opendev.org/c/openstack/keystoneauth/+/1001419 | 20:04 |
| opendevreview | Doug Goldstein proposed openstack/keystoneauth master: Let a caller hold the unscoped token of a federated plugin https://review.opendev.org/c/openstack/keystoneauth/+/1001419 | 20:11 |
| cardoe | Silly robots don't listen., | 20:15 |
| opendevreview | Doug Goldstein proposed openstack/keystoneauth master: Expose the unscoped token of a federated plugin https://review.opendev.org/c/openstack/keystoneauth/+/1001419 | 20:23 |
| opendevreview | Doug Goldstein proposed openstack/keystoneauth master: Add a v3websso authentication plugin https://review.opendev.org/c/openstack/keystoneauth/+/1000759 | 20:35 |
| cardoe | stephenfin: so I've validated the keystoneauth changes without caching | 20:43 |
| opendevreview | Doug Goldstein proposed openstack/openstacksdk master: Keep the unscoped credential of a federated plugin https://review.opendev.org/c/openstack/openstacksdk/+/1001423 | 20:47 |
| cardoe | The cache works but minimally tested... like I dunno what's gonna happen once my token expires... will it clean it up properly or not. | 20:48 |
| cardoe | I suspect it'll work poorly since there's no mechanism to evict entries from the keyring | 20:50 |
| cardoe | While you're at it, mind looking at https://review.opendev.org/c/openstack/python-openstackclient/+/1000146 as well? | 21:10 |
| opendevreview | Doug Goldstein proposed openstack/openstacksdk master: Add a way to discard the authentication cached for a cloud https://review.opendev.org/c/openstack/openstacksdk/+/1001431 | 21:11 |
| cardoe | I picked "cloud" as my top-level command because I've locally got a number of other commands under "cloud" which interact with your clouds.yaml | 21:16 |
| opendevreview | Oria Weng proposed openstack/openstacksdk master: Identity: Add support for endpoint groups https://review.opendev.org/c/openstack/openstacksdk/+/995762 | 21:17 |
| opendevreview | Oria Weng proposed openstack/openstacksdk master: Identity: Add support for endpoint group/endpoint and endpoint group/project associations https://review.opendev.org/c/openstack/openstacksdk/+/999040 | 21:17 |
| opendevreview | Doug Goldstein proposed openstack/python-openstackclient master: Add a "cloud cache delete" command https://review.opendev.org/c/openstack/python-openstackclient/+/1001433 | 21:23 |
| * TheJulia hands rm_work the required -sdk uniform | 22:07 | |
| TheJulia | Its a very warm jacket :) | 22:07 |
| rm_work | darn no chat history | 22:14 |
| rm_work | there's still a logs site somewhere right | 22:15 |
| TheJulia | rm_work: yes, eavesdrop.openstack.org | 22:20 |
Generated by irclog2html.py 4.1.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!