| *** mhen_ is now known as mhen | 01:08 | |
| opendevreview | Takashi Kajinami proposed openstack/pycadf master: Remove Python 3.8 support https://review.opendev.org/c/openstack/pycadf/+/930969 | 02:48 |
|---|---|---|
| opendevreview | Takashi Kajinami proposed openstack/pycadf master: Remove unused debtcollector https://review.opendev.org/c/openstack/pycadf/+/930970 | 02:50 |
| opendevreview | Takashi Kajinami proposed openstack/pycadf master: Remove Python 3.8 support https://review.opendev.org/c/openstack/pycadf/+/930969 | 02:51 |
| opendevreview | Takashi Kajinami proposed openstack/pycadf master: Remove audit map for retired ceilometer-api and panko https://review.opendev.org/c/openstack/pycadf/+/930971 | 02:52 |
| opendevreview | Takashi Kajinami proposed openstack/pycadf master: Fix outdated cinder api version https://review.opendev.org/c/openstack/pycadf/+/930972 | 02:54 |
| opendevreview | Hiromu Asahina proposed openstack/keystone master: Add doc of OAuth 2.0 Mutual-TLS Authenticate https://review.opendev.org/c/openstack/keystone/+/860928 | 08:38 |
| JayF | d34dh0r53: https://bugs.launchpad.net/keystone/+bug/2069063 just got opened, it passed the limit for how long we keep those things closed, can you put a comment in there about how severe it actually is? I assume it's a little misleading or it would've been prioritized | 19:15 |
| gmann | dmendiza[m]: ^^ | 19:24 |
| gtema | JayF: description is bit misleading and confusing: EC2 and Application Credentials are different things. I'll look tomorrow as much as I can | 19:38 |
| JayF | yeah, it smells like maybe a weak bug, but it can also read as scary | 19:38 |
| JayF | definately valuable to clean up the language in there, especially if it's invalid or low prio | 19:38 |
| gtema | I'll have a look as said, but first idea is that it lists creds of the same user ignoring project separation. I doubt heavily it lists creds of other user (unless you are admin) | 19:42 |
| JayF | that's basically my thought, someone didn't understand scoping | 19:42 |
| JayF | but I'm not a keystone expert :) | 19:42 |
| gtema | Both app creds and creds belong to the user and it just able to list them in depending on the project ( just like keypair in Nova) | 19:42 |
| gtema | And since there is no way to filter creds by project_id (no query param) is returns all creds of the current user | 19:44 |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!