Friday, 2021-11-19

opendevreviewOpenStack Proposal Bot proposed openstack/glance master: Imported Translations from Zanata  https://review.opendev.org/c/openstack/glance/+/81356502:54
*** EugenMayer4 is now known as EugenMayer07:34
*** akekane_ is now known as abhishekk07:52
opendevreviewMridula Joshi proposed openstack/glance-specs master: Expose store specific information  https://review.opendev.org/c/openstack/glance-specs/+/81739108:33
opendevreviewMerged openstack/glance_store master: Cleanup devstack jobs  https://review.opendev.org/c/openstack/glance_store/+/81734411:13
opendevreviewMridula Joshi proposed openstack/glance-specs master: Append new tags to existing tags  https://review.opendev.org/c/openstack/glance-specs/+/81342911:28
lbragstadpdeore did you have some rbac questions?14:04
pdeorelbragstad, yeah just wanted a brief idea of how much impact the new role project-manager would have on the current project personas?14:04
pdeoreI've gone thro' the updated patch of RBAC community goals, but couldn't get which image apis would be impacted with this new role14:05
lbragstadpdeore that's a good question14:05
lbragstadpulling up the image API docs14:06
lbragstadit looks like most of the image API is exposed to project-members14:09
pdeoreyes, except publicize_image and some metadef apis14:10
lbragstadwith the exception of copy_image, manage_image_cache, delete_image_location, and publicize_image (which all require role:admin)14:10
pdeoreyes14:10
lbragstadso - i guess if there is a use case to expose one of those to a project-manager, then maybe?14:11
lbragstadi doubt poublicize_image would fall into that category, since it affects every project in the deployment, that should remain project-admin specific14:11
pdeoreright14:12
lbragstadi think image location APIs (delete_image_location) requires knowledge of the underlying storage configuration ( dansmith can keep me honest here)14:12
lbragstadso - i'm not sure how useful it is to expose that to privileged end-users14:12
lbragstadmanage_image_cache and copy_image feel like that fall into the same category - where they require knowledge about the deployment, right?14:13
pdeoreyes14:14
lbragstadso - maybe the project-manager personas isn't necessary useful for glance (at least initially)14:15
lbragstadpersona*14:15
pdeorehmm looks so... 14:15
lbragstadbut - glance doesn't need to use it if there isn't a valid use case for it - it'll be there if presents itself in the future though14:16
lbragstadif one presents*14:16
pdeoreyeah, atm I don't see any valid use case in glance, but I think it would be more clear if abhishekk or dansmith give ack on this.. :)14:20
lbragstad++14:20
pdeoreand same with system scope right? there won't be system personas required for glance, right?14:22
rosmaitaprobably for image sharing ... you might not just want any ol' member in your project to share images14:32
rosmaita(for project-manager use-case ^^)14:32
dansmithhmm, I was going to say probably nothing for manager, but yeah sharing  might be legit14:38
dansmithit's member now, AFAIK, but maybe if we *had* the extra level, it would make sense to go there14:38
*** whoami-rajat__ is now known as whoami-rajat17:42

Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!