Monday, 2021-08-30

opendevreviewAbhishek Kekane proposed openstack/glance master: Check policies for image tasks information in API  https://review.opendev.org/c/openstack/glance/+/80559005:57
opendevreviewAbhishek Kekane proposed openstack/glance master: Move metadef property policy checks in the API  https://review.opendev.org/c/openstack/glance/+/79963505:57
opendevreviewAbhishek Kekane proposed openstack/glance master: Move metadef tag policy checks in the API  https://review.opendev.org/c/openstack/glance/+/79963605:58
opendevreviewAbhishek Kekane proposed openstack/glance master: Move metadef tag policy checks in the API  https://review.opendev.org/c/openstack/glance/+/79963605:58
opendevreviewAbhishek Kekane proposed openstack/glance master: Check policies for Image Cache in API  https://review.opendev.org/c/openstack/glance/+/80579707:32
opendevreviewPranali Deore proposed openstack/glance-tempest-plugin master: Add protection testing for metadef namespaces  https://review.opendev.org/c/openstack/glance-tempest-plugin/+/80090210:54
opendevreviewPranali Deore proposed openstack/glance-tempest-plugin master: Add protection testing for metadef namespaces  https://review.opendev.org/c/openstack/glance-tempest-plugin/+/80090211:01
opendevreviewPranali Deore proposed openstack/glance-tempest-plugin master: Implement API protection testing for metadef objects  https://review.opendev.org/c/openstack/glance-tempest-plugin/+/80279312:32
opendevreviewPranali Deore proposed openstack/glance-tempest-plugin master: Implement API protection testing for metadef resource types  https://review.opendev.org/c/openstack/glance-tempest-plugin/+/80279213:55
abhishekklooks like nova patch is not merged yet14:14
opendevreviewPranali Deore proposed openstack/glance-tempest-plugin master: Implement API protection testing for metadef properties  https://review.opendev.org/c/openstack/glance-tempest-plugin/+/80279414:29
opendevreviewPranali Deore proposed openstack/glance-tempest-plugin master: Implement API protection testing for metadef properties  https://review.opendev.org/c/openstack/glance-tempest-plugin/+/80279414:31
akekane_dansmith, I have added test case for cache policy enforcement patch14:38
akekane_#link https://review.opendev.org/c/openstack/glance/+/80579714:39
dansmithcool, I have to do something urgently for nova this morning but will circle back14:39
akekane_yep, no worries, take your time14:39
akekane_lbragstad, if you could take a look at metadef rbac patches, then we will be able to get it merge this cycle14:40
*** akekane_ is now known as abhishekk14:41
lbragstadack14:41
abhishekkthank you14:51
dansmithabhishekk: glad it wasn't hard :)15:05
abhishekk:D15:06
abhishekkLearning the art of writing easy and simple tests 15:06
lbragstadabhishekk ok -i think i worked through most of the metadef changes in glance-tempest-plugin and glance proper16:31
lbragstadbut most of my comments are the same across patches16:31
abhishekklbragstad, ack, going through them now16:31
abhishekklbragstad, just replied to one of the patch (related to comment in .zuul.yaml)16:35
abhishekkand thank you for your time16:35
lbragstadabhishekk all in all - i think the changes for the metadef parts look good16:50
abhishekkcool16:50
lbragstadthe only real concern i think i had outside of organization stuff was we were still using metadef:rule_default 16:51
abhishekkack, I think we reverted that because policy check is like noop there as db was actually returning us the valid result before the policy enforcement16:52
lbragstadah 16:52
lbragstadso - is the plan to put the policy check back in? 16:52
abhishekkkind of16:53
lbragstadsince the hard-coded checks (in the database for example) are what we're trying to remove?16:59
abhishekklbragstad, we were working on this parallel (policy moving to API and RBAC for metadefs) at that time we reverted to old policy check for RBAC as policy checks were not moved to API layer17:02
abhishekkbut now as it is done, I think we can change this policy to RBAC kind policy17:03
opendevreviewMerged openstack/glance master: Move metadef property policy checks in the API  https://review.opendev.org/c/openstack/glance/+/79963517:05
opendevreviewMerged openstack/glance master: Move metadef tag policy checks in the API  https://review.opendev.org/c/openstack/glance/+/79963617:08
opendevreviewMerged openstack/glance master: Check policies for image tasks information in API  https://review.opendev.org/c/openstack/glance/+/80559017:16
lbragstadnice - only two patches left in the refactoring17:18
abhishekkdansmith, I guess since cyril is not around and he has +2ed the cache patch before adding test, I guess you ninja approve that17:18
abhishekklbragstad, yep, one is ^^ and other is release note17:18
dansmithabhishekk: sure, wasn't sure if you were ready to approve, I had just +2d before you know, but seems unlikely the cache patch is going to have all that feedback and testing resolved by thursday17:19
abhishekkI am trying my hard to work on fixing those comments, but it is unlikely to get it done in time17:20
opendevreviewPranali Deore proposed openstack/glance master: Implement project personas for metadef namespaces  https://review.opendev.org/c/openstack/glance/+/79870019:47
opendevreviewPranali Deore proposed openstack/glance master: Implement project personas for metadef objects  https://review.opendev.org/c/openstack/glance/+/80205419:47
opendevreviewPranali Deore proposed openstack/glance master: Implement project personas for metadef resource-types  https://review.opendev.org/c/openstack/glance/+/79967119:47
opendevreviewPranali Deore proposed openstack/glance master: Implement project personas for metadef properties  https://review.opendev.org/c/openstack/glance/+/80205519:47
opendevreviewPranali Deore proposed openstack/glance master: Implement project personas for metadef tags  https://review.opendev.org/c/openstack/glance/+/80205619:47
opendevreviewPranali Deore proposed openstack/glance-tempest-plugin master: Add protection testing for metadef namespaces  https://review.opendev.org/c/openstack/glance-tempest-plugin/+/80090220:26
* abhishekk signing out fir the day21:16

Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!