Thursday, 2023-02-23

johnsomgmann ack00:55
johnsomI will poke at that patch a little later tonight01:53
johnsomAh, it looks like you are already looking at it.02:09
opendevreviewGhanshyam proposed openstack/designate-tempest-plugin master: Add project_reader in new RBAC tests  https://review.opendev.org/c/openstack/designate-tempest-plugin/+/87121502:17
opendevreviewErik Olof Gunnar Andersson proposed openstack/designate master: Move to a batch model for incrementing serial  https://review.opendev.org/c/openstack/designate/+/87125505:25
opendevreviewArkady Shtempler proposed openstack/designate-tempest-plugin master: New boundray scenario tests for a Quota test suite  https://review.opendev.org/c/openstack/designate-tempest-plugin/+/86093510:07
opendevreviewElod Illes proposed openstack/designate-dashboard master: DNM: dummy change to test gate health  https://review.opendev.org/c/openstack/designate-dashboard/+/87487610:44
opendevreviewArkady Shtempler proposed openstack/designate-tempest-plugin master: New boundray scenario tests for a Quota test suite  https://review.opendev.org/c/openstack/designate-tempest-plugin/+/86093513:20
opendevreviewMichael Johnson proposed openstack/designate-tempest-plugin master: Add tempest tests for shared zones  https://review.opendev.org/c/openstack/designate-tempest-plugin/+/73037015:29
opendevreviewErik Olof Gunnar Andersson proposed openstack/designate master: Move to a batch model for incrementing serial  https://review.opendev.org/c/openstack/designate/+/87125518:00
gmannjohnsom: it seems project member and reader are able to get the list items instead of [] https://review.opendev.org/c/openstack/designate-tempest-plugin/+/87121518:47
gmannI did not dig into the code flow but it seems admin  cannot get but project member/reader can get list items18:48
johnsomgmann Hi, I'm juggling two RBAC issues, so splitting my time a bit. Yeah, I'm wondering if  project member and project reader have the same project ID as os_primary????  That would cause this.18:51
johnsomI just haven't had a minute to test that theory18:51
gmannjohnsom: oh, yes they do have same project id as os_primary18:51
gmannjohnsom: so in my tempest change I am keeping os_admin as legacy admin with separate project_id and 'os_promary, project_admin, project_member, project_reader' will have same project id18:52
johnsomOk... So, I guess the question is if that is the "right" expected thing, or not. It's obviously an easy fix in Designate.18:52
gmannos_promary is nothing but the member role in project so it should be same as project_member18:52
gmannany member role in projectA either it is via os_primary should be within same project18:53
gmannfor another project we can use os_alt, oa_alt_project_member and so on18:53
johnsomYeah, ok, I can be ok with that. Let me take another look at our tests and update the patch.18:55
gmannjohnsom: I think here we need to create zone with os_alt right ? https://review.opendev.org/c/openstack/designate-tempest-plugin/+/871215/9/designate_tempest_plugin/tests/api/v2/test_zones.py#b22718:55
gmannjohnsom: thanks, I will leave those updates to you.18:56
johnsomYeah, I think your change is correct, I just need to verify. I will post something in the next 30 minutes18:56
gmannsure. 18:59
opendevreviewMichael Johnson proposed openstack/designate-tempest-plugin master: Add project_reader in new RBAC tests  https://review.opendev.org/c/openstack/designate-tempest-plugin/+/87121519:05
opendevreviewMichael Johnson proposed openstack/designate-tempest-plugin master: Add project_reader in new RBAC tests  https://review.opendev.org/c/openstack/designate-tempest-plugin/+/87121519:07
johnsomgmann We are ready to merge that20:20
opendevreviewMichael Johnson proposed openstack/designate master: DNM: Testing openstackdoctheme fix  https://review.opendev.org/c/openstack/designate/+/87496120:24
opendevreviewErik Olof Gunnar Andersson proposed openstack/designate stable/zed: [CI] Reduce workers and disable cinder to save on memory  https://review.opendev.org/c/openstack/designate/+/87484020:48
gmannjohnsom: perfect, will get tempest one merged which is in gate too https://review.opendev.org/c/openstack/tempest/+/87101821:39
opendevreviewMerged openstack/designate-tempest-plugin master: Add tempest tests for shared zones  https://review.opendev.org/c/openstack/designate-tempest-plugin/+/73037022:34

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!