*** gcb has joined #openstack-interop | 02:04 | |
*** gcb has quit IRC | 02:09 | |
*** yuanying has quit IRC | 02:47 | |
*** gcb has joined #openstack-interop | 03:01 | |
*** galstrom_zzz is now known as galstrom | 03:34 | |
*** yuanying has joined #openstack-interop | 03:49 | |
*** galstrom is now known as galstrom_zzz | 04:34 | |
*** galstrom_zzz is now known as galstrom | 04:36 | |
*** galstrom is now known as galstrom_zzz | 05:32 | |
*** yuanying has quit IRC | 08:01 | |
*** yuanying has joined #openstack-interop | 08:05 | |
*** yuanying has quit IRC | 08:51 | |
*** yuanying has joined #openstack-interop | 08:55 | |
*** yuanying has quit IRC | 09:16 | |
*** yuanying has joined #openstack-interop | 10:00 | |
*** pcaruana has joined #openstack-interop | 10:24 | |
*** zhipeng has joined #openstack-interop | 14:40 | |
*** zhipeng has quit IRC | 15:02 | |
*** galstrom_zzz is now known as galstrom | 15:54 | |
*** zhipeng has joined #openstack-interop | 15:58 | |
*** zhipeng has quit IRC | 16:51 | |
*** galstrom is now known as galstrom_zzz | 17:23 | |
*** galstrom_zzz is now known as galstrom | 17:24 | |
hogepodge | markvoelker: | 18:06 |
---|---|---|
hogepodge | markvoelker: eglute: how strongly do we feel about setting administrator password in a server through the api? | 18:07 |
hogepodge | I know of one public cloud that is pretty interoperable, except on that point. | 18:07 |
eglute | i think it is ok not to set password through api. | 18:08 |
eglute | ssh keys on creation would be nice though, not sure if we already have that in place | 18:09 |
markvoelker | What an odd thing to block...any idea what the rationale is? Personally I use this somewhat often. | 18:09 |
eglute | i think security. passwords are not considered as safe as ssh keys | 18:10 |
eglute | and public clouds are subject to brute force attacks | 18:10 |
markvoelker | On instances though? | 18:10 |
eglute | yes | 18:10 |
markvoelker | That seems well within the bounds of something a tenant would typically provide rather than a provider... | 18:11 |
eglute | personally i seen my instances attacked | 18:11 |
markvoelker | Oh sure, that happens to me all the time. =) I'm just saying password disablement on guest instances seems like a tenant decision rather than a provider one. | 18:11 |
markvoelker | (as I could see that breaking a lot of tools) | 18:12 |
markvoelker | hogepodge: I think it's something we could discuss. I'm not entirely sure which guest OS types that even works on, frankly. | 18:14 |
hogepodge | from my discussions with qa, it can be disabled because some hypervisors don't allow it. I don't know which, though | 18:15 |
hogepodge | I'm not strongly either way on it, I was just curious if either of you had opinions on it. I'm checking in with the provider to see how they feel about it. | 18:16 |
markvoelker | Ok, makes sense. I don't think I have super strong feelings about it (although as noted, I do use it personally so I'm maybe a little biased toward keeping it). | 18:17 |
markvoelker | If they feel strongly about it, perhaps a flag request makes sense and we can discuss there. | 18:18 |
markvoelker | This was the test_create_server_with_admin_password test I presume? | 18:18 |
hogepodge | markvoelker: that test fails, yes, but many other server tests will fail because strict schema checking wants that value returned in the response, even if an adminPass isn't being used | 18:19 |
*** pcaruana has quit IRC | 19:58 | |
*** galstrom is now known as galstrom_zzz | 20:40 | |
*** beisner- has joined #openstack-interop | 20:50 | |
*** beisner has quit IRC | 20:53 | |
*** beisner- is now known as beisner | 20:53 | |
*** pcaruana has joined #openstack-interop | 21:30 | |
*** pcaruana has quit IRC | 21:33 | |
*** jmckind has joined #openstack-interop | 23:36 | |
*** jmckind has left #openstack-interop | 23:38 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!