| *** yamamoto has joined #openstack-fwaas | 00:10 | |
| *** yamamoto has quit IRC | 00:15 | |
| *** longkb has joined #openstack-fwaas | 00:26 | |
| *** longkb1 has joined #openstack-fwaas | 00:47 | |
| *** yamamoto has joined #openstack-fwaas | 01:12 | |
| *** yamamoto has quit IRC | 01:17 | |
| *** yamamoto has joined #openstack-fwaas | 01:49 | |
| *** yamamoto has quit IRC | 02:09 | |
| *** yamamoto has joined #openstack-fwaas | 02:10 | |
| *** yamamoto_ has joined #openstack-fwaas | 02:48 | |
| *** yamamoto has quit IRC | 02:50 | |
| *** threestrands has joined #openstack-fwaas | 03:59 | |
| *** threestrands has quit IRC | 03:59 | |
| *** threestrands has joined #openstack-fwaas | 03:59 | |
| *** threestrands_ has joined #openstack-fwaas | 04:00 | |
| *** threestrands_ has quit IRC | 04:01 | |
| *** threestrands_ has joined #openstack-fwaas | 04:02 | |
| *** threestrands has quit IRC | 04:04 | |
| *** threestrands_ has quit IRC | 04:39 | |
| *** threestrands has joined #openstack-fwaas | 05:04 | |
| *** threestrands has quit IRC | 05:07 | |
| openstackgerrit | Reedip proposed openstack/neutron-fwaas master: WIP :RBAC DB setup and migration for FWP https://review.openstack.org/491704 | 05:56 |
|---|---|---|
| *** reedip has joined #openstack-fwaas | 05:57 | |
| reedip | xgerman_ , bzhao__ : if you get time, can you tell me your opinion about https://review.openstack.org/#/c/491704/ ? | 05:57 |
| *** annp has joined #openstack-fwaas | 06:34 | |
| *** AlexeyAbashkin has joined #openstack-fwaas | 07:46 | |
| *** longkb has quit IRC | 07:57 | |
| *** annp has quit IRC | 07:57 | |
| *** longkb has joined #openstack-fwaas | 07:58 | |
| *** annp has joined #openstack-fwaas | 07:58 | |
| *** longkb1 has quit IRC | 07:59 | |
| *** longkb1 has joined #openstack-fwaas | 08:01 | |
| *** annp has quit IRC | 09:04 | |
| *** annp has joined #openstack-fwaas | 09:05 | |
| *** yamamoto_ has quit IRC | 10:13 | |
| *** yamamoto has joined #openstack-fwaas | 10:14 | |
| *** yamamoto_ has joined #openstack-fwaas | 10:19 | |
| *** yamamoto has quit IRC | 10:22 | |
| *** longkb has quit IRC | 11:27 | |
| *** yamamoto_ has quit IRC | 11:44 | |
| *** yamamoto has joined #openstack-fwaas | 11:45 | |
| *** yamamoto has quit IRC | 11:50 | |
| *** yamamoto has joined #openstack-fwaas | 11:51 | |
| *** yamamoto has quit IRC | 11:51 | |
| *** yamamoto has joined #openstack-fwaas | 12:42 | |
| *** yamamoto has quit IRC | 12:48 | |
| * bzhao__ reedip: I think the rbac shared should be nested, if we shared a parent resource, the children resources should also be shared with the target tenant. But through checking the existing FWR model, it's not suitable for share if both tenant own the same network topology and attach different router if setting src_fwg/dst_fwg/src_ip/dst_ip in fw rule. So I think it's so limited for FW. The shared FW policy | 12:54 | |
| * bzhao__ should be more generic rules defined. | 12:54 | |
| bzhao__ | 2. If tenant A willing to define/sell the policy to tenant B, it's valuable to share using RBAC. | 12:55 |
| *** yamamoto has joined #openstack-fwaas | 13:05 | |
| *** yamamoto has quit IRC | 13:14 | |
| *** njohnston has joined #openstack-fwaas | 13:26 | |
| *** yamamoto has joined #openstack-fwaas | 13:31 | |
| *** yamamoto has quit IRC | 13:36 | |
| *** yamamoto has joined #openstack-fwaas | 13:53 | |
| *** yamamoto has quit IRC | 13:57 | |
| *** hongbin has joined #openstack-fwaas | 14:05 | |
| *** yamamoto has joined #openstack-fwaas | 14:13 | |
| *** yamamoto has quit IRC | 14:21 | |
| *** yamamoto has joined #openstack-fwaas | 14:38 | |
| *** yamamoto has quit IRC | 14:42 | |
| *** yamamoto has joined #openstack-fwaas | 14:59 | |
| *** yamamoto has quit IRC | 15:03 | |
| *** yamamoto has joined #openstack-fwaas | 15:19 | |
| *** yamamoto has quit IRC | 15:26 | |
| *** yamamoto has joined #openstack-fwaas | 15:42 | |
| *** yamamoto has quit IRC | 15:47 | |
| *** AlexeyAbashkin has quit IRC | 16:57 | |
| *** yamamoto has joined #openstack-fwaas | 17:28 | |
| *** yamamoto has quit IRC | 17:32 | |
| *** yamamoto has joined #openstack-fwaas | 17:49 | |
| *** yamamoto has quit IRC | 17:53 | |
| xgerman_ | Agree, we hould allow access hierarchical so tenant A can’t change tenant B’s fw rules/policies if they share the FWG but everything else belongs to tenant A. | 18:19 |
| xgerman_ | I can see different roles so this is a good addition. | 18:21 |
| openstackgerrit | German Eichberger proposed openstack/neutron-fwaas master: Adds remote firewall group to plugin https://review.openstack.org/521207 | 18:52 |
| *** yamamoto has joined #openstack-fwaas | 19:15 | |
| *** yamamoto has quit IRC | 19:20 | |
| *** yamamoto has joined #openstack-fwaas | 19:57 | |
| *** yamamoto has quit IRC | 20:02 | |
| *** yamamoto has joined #openstack-fwaas | 20:19 | |
| *** yamamoto has quit IRC | 20:24 | |
| *** yamamoto has joined #openstack-fwaas | 20:40 | |
| *** yamamoto has quit IRC | 20:45 | |
| *** yamamoto has joined #openstack-fwaas | 21:01 | |
| *** yamamoto has quit IRC | 21:06 | |
| *** yamamoto has joined #openstack-fwaas | 21:22 | |
| *** yamamoto has quit IRC | 21:28 | |
| *** yamamoto has joined #openstack-fwaas | 21:45 | |
| *** yamamoto has quit IRC | 21:49 | |
| *** yamamoto has joined #openstack-fwaas | 22:06 | |
| *** yamamoto has quit IRC | 22:10 | |
| *** threestrands has joined #openstack-fwaas | 22:16 | |
| *** yamamoto has joined #openstack-fwaas | 22:26 | |
| *** yamamoto has quit IRC | 22:33 | |
| *** hongbin has quit IRC | 22:40 | |
| *** yamamoto has joined #openstack-fwaas | 22:49 | |
| *** yamamoto has quit IRC | 22:54 | |
| *** yamamoto has joined #openstack-fwaas | 23:10 | |
| *** yamamoto has quit IRC | 23:16 | |
| *** yamamoto has joined #openstack-fwaas | 23:32 | |
| *** yamamoto has quit IRC | 23:37 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!