19:19:41 <lbragstad> #startmeeting keystone-office-hours 19:19:42 <openstack> Meeting started Tue Feb 6 19:19:41 2018 UTC and is due to finish in 60 minutes. The chair is lbragstad. Information about MeetBot at http://wiki.debian.org/MeetBot. 19:19:43 <openstack> Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. 19:19:45 <openstack> The meeting name has been set to 'keystone_office_hours' 19:19:48 <lbragstad> sorry about that 19:19:54 <cmurphy> lol 19:20:09 <gagehugo> :) 19:51:50 <lbragstad> cmurphy: https://review.openstack.org/#/c/529914/ looks ok to me, but it'd be good to get your feedback on it whenever you have a minute 19:52:03 <cmurphy> lbragstad: yeah i'm looking at it now 19:55:07 <lbragstad> wunderbar 19:57:39 <openstackgerrit> Eric Fried proposed openstack/keystoneauth master: DNM: Debug nova-next failure: user headers https://review.openstack.org/541425 20:02:43 <openstackgerrit> Eric Fried proposed openstack/keystoneauth master: DNM: Debug nova-next failure: invalidate https://review.openstack.org/541429 20:04:32 <openstackgerrit> Eric Fried proposed openstack/keystoneauth master: DNM: Debug nova-next failure: connection params https://review.openstack.org/541431 20:08:52 <lbragstad> kmalloc: https://review.openstack.org/#/c/541074/ finishes up the self.<api> refactor in tests 20:10:37 <lbragstad> https://review.openstack.org/#/c/531915/ closes a bug, too 20:53:45 <kmalloc> lbragstad: sorry missed the meeting, was picking up Brie from the airport 20:53:57 <lbragstad> no worries 20:54:20 <cmurphy> lbragstad: +2 but with comments, maybe knikolla could take a look? https://review.openstack.org/#/c/529914/ 21:01:21 <kmalloc> lbragstad: +2/+A on both of those 1074 and 1915 21:01:45 <lbragstad> fantastic 21:04:11 <lbragstad> quick question 21:04:31 <lbragstad> our install guide goes through port 35357 21:04:36 <lbragstad> and does the install based on that port 21:05:03 <lbragstad> thoughts on rewriting the install guide to use uwsgi + apache instead? 21:05:42 <lbragstad> and ProxyPass? 21:06:31 <lbragstad> so something like this for uwsgi https://github.com/openstack/openstack-ansible-os_keystone/blob/master/templates/keystone-uwsgi.ini.j2 and something like this for apache https://github.com/openstack/openstack-ansible-os_keystone/blob/master/templates/keystone-httpd.conf.j2#L109-L110 ? 21:07:47 <cmurphy> +1 but you might need to coordinate with distros who are shipping default vhost files 21:07:48 <lbragstad> with the removal of v2.0, we don't actually need both ports 21:08:04 <lbragstad> yeah - that's a good point 21:09:42 <gagehugo> so just 5000? 21:10:01 <lbragstad> well - it could be up to the deployers discretion 21:10:24 <lbragstad> because the port would only get used in the ProxyPass statement in apache configuration 21:10:59 <lbragstad> apache would be doing something like `ProxyPass /identity uwsgi://127.0.0.1:5000/` 21:11:11 <lbragstad> or `ProxyPass /identity uwsgi://127.0.0.1:8443/` 21:12:03 <lbragstad> and uwsgi would be running keystone on that port 21:13:30 <lbragstad> but you could also specify that port in apache, too i suppose 21:13:37 <lbragstad> https://github.com/openstack/openstack-ansible-os_keystone/blob/master/templates/keystone-httpd.conf.j2#L71-L72 21:13:43 <lbragstad> kinda like what osa does ^ 21:14:49 <gagehugo> yea 21:15:11 <lbragstad> so you could specify http:$CONTROLLER_IP:5000/identity 21:15:48 <lbragstad> wait - actually 21:15:59 <lbragstad> it would be http://$CONTROLLER_IP/identity 21:16:12 <lbragstad> which would route to uwsgi internally on port 5000 21:16:58 <lbragstad> if i'm understand the apache config correctly 21:20:32 <openstackgerrit> Lance Bragstad proposed openstack/keystone master: Update sample configuration file for Queens https://review.openstack.org/541447 21:30:36 <openstackgerrit> Kristi Nikolla proposed openstack/keystone master: WIP - Add opts --only-invalid and --remove-assignment for mapping_purge https://review.openstack.org/487579 21:31:15 <openstackgerrit> Kristi Nikolla proposed openstack/keystone master: WIP - Add opts --invalid and --assignments for mapping_purge https://review.openstack.org/487579 21:42:02 <lbragstad> cmurphy: do you know who maintains the package files for suse? 21:42:41 <cmurphy> lbragstad: yes 21:42:55 <cmurphy> my team 21:43:02 <cmurphy> can def help there 21:43:08 <lbragstad> sweet 21:43:23 <lbragstad> i kinda went down a rabbit hole looking for the debian packagers 21:43:50 <lbragstad> https://github.com/openstack/deb-keystone 21:43:57 <lbragstad> i think that's where they used to be 21:44:28 * lbragstad wonders if hrybacki knows who maintains the redhat package files for keystone 21:44:47 <gagehugo> lol 21:44:48 <cmurphy> i think the debian packages moved off of openstack infra 21:45:01 <cmurphy> but we don't have docs for debian anyways, need to engage the ubuntu people 21:45:28 <gagehugo> think the raspbian package for keystone is icehouse 21:45:35 <cmurphy> lol 21:45:39 <lbragstad> nice 21:45:44 <lbragstad> get it while it's hot 21:46:00 <hrybacki> oh jeez, ayoung might still be in charge of them? I'm sure that falls on my team however 21:47:37 <lbragstad> cmurphy: this looks like the right ubuntu team? https://wiki.openstack.org/wiki/Packaging/Ubuntu 21:47:44 <cmurphy> hrybacki: it's not just using delorean? 21:48:38 <cmurphy> lbragstad: yeah that looks right? 21:48:44 <hrybacki> cmurphy: I know that's involved but I'm not sure what's pushing the last leg of that (RDO->OSP) The pipeline is kind of confusing 21:49:02 <hrybacki> s/kind of// 21:49:33 <cmurphy> lbragstad: btw we're crunching to get a huge release out the door this month so i'm not going to want to propose major changes to the keystone package till march 21:50:01 <lbragstad> ack 21:50:48 <lbragstad> so - even though we don't include v2.0 in Queens, you think we should push of refactoring the entire install guide to include uwsgi + apache on a single port until later/ 21:51:23 <cmurphy> ah actually scratch that, our release is based on pike so i can probably do whatever with the queens packages 21:52:10 <lbragstad> ok 21:52:12 <lbragstad> cool 21:54:15 <lbragstad> i was thinking it would be nice to have the install guide reflect the removal of v2.0 21:54:26 <lbragstad> i'm just wondering if it will be too late for that 21:54:49 <lbragstad> i kinda spaced on the whole default package files thing... 21:55:07 <lbragstad> and how that is not controlled in our repository 22:04:29 <hrybacki> lots of moving parts to juggle 22:14:32 <openstackgerrit> Colleen Murphy proposed openstack/keystone master: Remove all v2.0 APIs except the ec2tokens API https://review.openstack.org/540141 22:19:08 <openstackgerrit> Lance Bragstad proposed openstack/keystone master: Remove v2 and v2-admin API documentation https://review.openstack.org/540529 22:19:18 <openstackgerrit> Lance Bragstad proposed openstack/keystone master: Update curl request documentation to remove v2.0 https://review.openstack.org/539342 22:19:28 <openstackgerrit> Lance Bragstad proposed openstack/keystone master: Remove v2.0 extension documentation https://review.openstack.org/540525 22:19:38 <openstackgerrit> Lance Bragstad proposed openstack/keystone master: Remove v2.0 from documentation guides https://review.openstack.org/540499 22:21:24 <cmurphy> oops sorry :( 22:22:18 <lbragstad> cmurphy: you're good - thanks for fixing that 22:24:21 <lbragstad> getting some information on the ubuntu packages http://paste.openstack.org/show/664081/ 22:24:35 <lbragstad> ^ because they don't have logging on that channel 22:24:49 <lbragstad> but the TL;DR is that it is here - https://git.launchpad.net/~ubuntu-server-dev/ubuntu/+source/keystone/tree/debian/keystone.conf 22:28:31 <cmurphy> lbragstad: we still have this in ksm http://git.openstack.org/cgit/openstack/keystonemiddleware/tree/keystonemiddleware/auth_token/_auth.py#n66 :( we should probably fix that 22:29:31 <lbragstad> yeah... we have a card for all that https://trello.com/c/rP53zMgc/16-remove-v20-api-support-from-libraries 22:33:39 <lbragstad> cmurphy: that can be fixed in rocky, yeah? 22:38:29 <cmurphy> lbragstad: yeah i guess? some people are going to have broken paste configs and it's not going to be clear why 22:38:34 <cmurphy> http://git.openstack.org/cgit/openstack/keystonemiddleware/tree/keystonemiddleware/auth_token/__init__.py#n889 22:40:46 <cmurphy> i think this is what broke tripleo's CI, someone might think they're all converted to v3 but the weirdness in ksm's auth plugin handler can trick you 22:43:16 <lbragstad> hmm 22:43:33 <lbragstad> if we were go to a single port with package installs, would there be a recommended port to listen on? 22:43:38 <lbragstad> 35357 or 5000? 22:44:24 <cmurphy> 80/443 :) 22:45:06 <lbragstad> ++ 22:47:29 <lbragstad> full conversation from #openstack-pkg http://paste.openstack.org/show/664112/ 22:47:44 <lbragstad> looks like we'll get some assistance from the ubuntu folks! 23:07:22 <cmurphy> #endmeeting