*** queria is now known as Guest5952 | 02:30 | |
*** arxcruz is now known as arxcruz|training | 08:16 | |
*** sshnaidm|afk is now known as sshnaidm | 09:08 | |
*** Guest5533 is now known as marlinc | 10:01 | |
*** rlandy is now known as rlandy|rover | 11:38 | |
mloza | frickler: hi, did you get a chance to reproduce the bug? | 15:53 |
---|---|---|
frickler | mloza: I tried, but it does seem to work just fine for me. what versions are you using for osc and openstack? I tested with a fresh devstack on master | 16:22 |
mloza | frickler: stable/ussuri | 17:16 |
mloza | python-openstackclient==5.2.0 | 17:17 |
mloza | did you add reader role to the user at system or domain level ? | 17:17 |
frickler | mloza: system. nova doesn't support domain scope, see https://review.opendev.org/c/openstack/nova/+/762013/4/doc/source/configuration/policy-concepts.rst | 17:33 |
*** tavasti__ is now known as tavasti | 18:19 | |
marlinc | Hey, I'm running into a strange issue where sometimes when creating a trust Keystone returns an error saying the role doesn't exist even though it does. It's extra strange because when specifying the rule in the trust I actually use the name of the role not the id, but in the error message it says (with the correct id) that that id cannot be found | 18:36 |
marlinc | as a role: https://gist.github.com/Marlinc/1a0533958a17296ab9fbe9035c078a1a | 18:36 |
mloza | frickler: I see. Does it matter if the user that I assign reader role at system level is from LDAP ? | 19:36 |
mloza | I haven't tested local acount | 19:36 |
*** rlandy|rover is now known as rlandy|rover|mtg | 20:29 | |
*** rlandy|rover|mtg is now known as rlandy|rover | 21:19 | |
*** rlandy|rover is now known as rlandy|rover|bbl | 22:23 | |
*** queria is now known as Guest6015 | 23:02 | |
*** queria is now known as Guest6017 | 23:30 |
Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!