This is a known issue which I've fixed upstream -- the keystone notification is sent before the record is updated, so when we query keystone we get the pre-deletion user list.
We need to work around it, or at least figure out what gives with the upstream fix.
| Subject | Repo | Branch | Lines +/- | |
|---|---|---|---|---|
| wmfkeystonehooks: Work around a keystone bug with role removal | operations/puppet | production | +54 -10 |
Change 348135 had a related patch set uploaded (by Andrew Bogott):
[operations/puppet@production] wmfkeystonehooks: Work around a keystone bug with role removal
Change 348135 merged by Andrew Bogott:
[operations/puppet@production] wmfkeystonehooks: Work around a keystone bug with role removal