| *** sdague has joined #openstack-meeting-cp | 00:02 | |
| *** diablo_rojo_ has quit IRC | 00:37 | |
| *** ducttape_ has quit IRC | 00:47 | |
| *** sdague has quit IRC | 01:01 | |
| *** jkomg_ has joined #openstack-meeting-cp | 01:08 | |
| *** ducttape_ has joined #openstack-meeting-cp | 01:19 | |
| *** jkomg_ has quit IRC | 01:36 | |
| *** ducttape_ has quit IRC | 02:06 | |
| *** ducttape_ has joined #openstack-meeting-cp | 02:10 | |
| *** jkomg has joined #openstack-meeting-cp | 02:45 | |
| *** jkomg has quit IRC | 02:46 | |
| *** ducttape_ has quit IRC | 03:57 | |
| *** ducttape_ has joined #openstack-meeting-cp | 04:24 | |
| *** ducttape_ has quit IRC | 04:46 | |
| *** diablo_rojo_ has joined #openstack-meeting-cp | 05:03 | |
| *** ducttape_ has joined #openstack-meeting-cp | 05:46 | |
| *** ducttape_ has quit IRC | 05:51 | |
| *** diablo_rojo_ has quit IRC | 07:08 | |
| *** ducttape_ has joined #openstack-meeting-cp | 07:17 | |
| *** ducttape_ has quit IRC | 07:22 | |
| *** lcastell has quit IRC | 07:40 | |
| *** luzC has quit IRC | 07:40 | |
| *** MarkBaker has quit IRC | 08:05 | |
| *** lcastell has joined #openstack-meeting-cp | 08:37 | |
| *** luzC has joined #openstack-meeting-cp | 08:38 | |
| *** ducttape_ has joined #openstack-meeting-cp | 08:48 | |
| *** ducttape_ has quit IRC | 08:52 | |
| *** MarkBaker has joined #openstack-meeting-cp | 09:40 | |
| *** MarkBaker has quit IRC | 09:41 | |
| *** MarkBaker has joined #openstack-meeting-cp | 09:42 | |
| *** MarkBaker has quit IRC | 10:25 | |
| *** dfflanders has quit IRC | 10:59 | |
| *** MarkBaker has joined #openstack-meeting-cp | 11:33 | |
| *** ducttape_ has joined #openstack-meeting-cp | 11:49 | |
| *** ducttape_ has quit IRC | 11:53 | |
| *** ducttape_ has joined #openstack-meeting-cp | 12:48 | |
| *** stvnoyes has quit IRC | 13:05 | |
| *** stvnoyes has joined #openstack-meeting-cp | 13:05 | |
| *** jkomg has joined #openstack-meeting-cp | 13:18 | |
| *** jkomg has quit IRC | 13:22 | |
| *** ducttape_ has quit IRC | 13:34 | |
| *** xyang1 has joined #openstack-meeting-cp | 13:39 | |
| *** ducttape_ has joined #openstack-meeting-cp | 14:06 | |
| *** sdague has joined #openstack-meeting-cp | 14:15 | |
| *** gouthamr has joined #openstack-meeting-cp | 14:31 | |
| *** ducttape_ has quit IRC | 14:33 | |
| *** jaugustine has joined #openstack-meeting-cp | 14:40 | |
| *** ducttape_ has joined #openstack-meeting-cp | 15:08 | |
| *** sdague has quit IRC | 15:12 | |
| *** stvnoyes1 has joined #openstack-meeting-cp | 15:19 | |
| *** stvnoyes has quit IRC | 15:21 | |
| *** markvoelker has quit IRC | 15:31 | |
| *** markvoelker has joined #openstack-meeting-cp | 15:32 | |
| *** markvoelker has quit IRC | 15:36 | |
| *** jkomg has joined #openstack-meeting-cp | 15:40 | |
| *** diablo_rojo_phon has joined #openstack-meeting-cp | 15:53 | |
| *** gagehugo has joined #openstack-meeting-cp | 15:56 | |
| *** _ducttape_ has joined #openstack-meeting-cp | 15:58 | |
| *** edmondsw has joined #openstack-meeting-cp | 15:59 | |
| lbragstad | #startmeeting policy | 16:00 |
|---|---|---|
| openstack | Meeting started Wed Jan 25 16:00:52 2017 UTC and is due to finish in 60 minutes. The chair is lbragstad. Information about MeetBot at http://wiki.debian.org/MeetBot. | 16:00 |
| openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 16:00 |
| *** openstack changes topic to " (Meeting topic: policy)" | 16:00 | |
| openstack | The meeting name has been set to 'policy' | 16:00 |
| lbragstad | ping raildo, ktychkova, dolphm, dstanek, rderose, htruta, atrmr, gagehugo, lamt, thinrichs, edmondsw, ruan, ayoung, stevemar, ravelar, morgan | 16:00 |
| lbragstad | agenda #link https://etherpad.openstack.org/p/keystone-policy-meeting | 16:01 |
| lbragstad | o/ | 16:01 |
| gagehugo | o/ | 16:01 |
| lbragstad | Just a heads up - our schedule is really light today and I think that's fine because I know several of you are swapped with last minute ocata thing (including me!) | 16:01 |
| lbragstad | so this will more or less just be a touch base unless various folks have specific things they want to talk about | 16:02 |
| *** ducttape_ has quit IRC | 16:02 | |
| gagehugo | alrighty | 16:02 |
| *** ayoung has joined #openstack-meeting-cp | 16:03 | |
| *** lamt has joined #openstack-meeting-cp | 16:03 | |
| lbragstad | ayoung o/ | 16:03 |
| lbragstad | lamt o/ | 16:03 |
| lamt | o/ | 16:03 |
| * lbragstad feels like a greeter | 16:03 | |
| *** sdague has joined #openstack-meeting-cp | 16:03 | |
| lbragstad | alright - let's get going | 16:04 |
| lbragstad | I only have a couple annoucements | 16:04 |
| lbragstad | #topic announcement: reminder about policy actions thread | 16:04 |
| *** openstack changes topic to "announcement: reminder about policy actions thread (Meeting topic: policy)" | 16:04 | |
| knikolla | o/ | 16:04 |
| lbragstad | last week we had a really good discussion about the various policy files | 16:04 |
| rderose | o/ | 16:04 |
| lbragstad | and plans we have to try and consolidate them (moving to the nova model of consolidation policy into code) | 16:05 |
| lbragstad | or at least the defaults | 16:05 |
| lbragstad | I attempted to summarize the options we talked about in a ML thread | 16:05 |
| lbragstad | #link http://lists.openstack.org/pipermail/openstack-dev/2017-January/109639.html | 16:05 |
| lbragstad | it hasn't gotten any feedback yet - but I am open to any/all feedback | 16:05 |
| lbragstad | (people for the idea, against the idea, or proposing alternatives wrt the goal listed in the thread) | 16:06 |
| lbragstad | I want to try and keep that fresh on people's minds so that it helps us prepare for discussions in ATL | 16:06 |
| lbragstad | (as I'm assuming we will have some sort of topic on it) | 16:07 |
| lbragstad | any questions on that? | 16:07 |
| lbragstad | alright | 16:08 |
| lbragstad | next | 16:08 |
| lbragstad | #topic announcement: interesting video from KubeCon wrt policy | 16:08 |
| *** openstack changes topic to "announcement: interesting video from KubeCon wrt policy (Meeting topic: policy)" | 16:08 | |
| lbragstad | thanks to ayoung for posting this yesterday - #link https://www.youtube.com/watch?v=WvnXemaYQ50 | 16:09 |
| ayoung | Yeah | 16:09 |
| dstanek | lbragstad: that looks really interesting. have you watched it yet? | 16:09 |
| lbragstad | ^ if you haven't seen it yet, it's pretty interesting and thought I'd throw it up here | 16:09 |
| lbragstad | dstanek yeah - i haev | 16:09 |
| ayoung | My take away is that they are ahead of us in the things that I am proposing for RBAC from middleware, but missing impliedroles | 16:09 |
| lbragstad | there are a lot of similarities with things we have faced or are facing | 16:10 |
| ayoung | a namespace in Kubernetes is comparable to a domain/project in Keystone | 16:10 |
| lbragstad | they've solved a few problems that we want to solve | 16:10 |
| ayoung | don't know if namespaces are hierarchical yet | 16:10 |
| lbragstad | ayoung i don't think it is | 16:10 |
| lbragstad | I thought I remember them saying it wasn't | 16:10 |
| lbragstad | s/them/Eric/ | 16:10 |
| lbragstad | anyway - it's a cool video, and figured it would give some good perspective from another group facing the same problems we are | 16:11 |
| ayoung | and what naming constraints they have | 16:11 |
| ayoung | from a interop perspective, we should make sure we can map cleanly | 16:11 |
| lbragstad | yeah - they implement RBAC and a version of scoped-RBAC (like what keystone does) | 16:11 |
| ayoung | Murano esp should be able to use the Keystone data | 16:11 |
| lbragstad | they also provide *sane* defaults out of the box | 16:11 |
| lbragstad | they also scope the equivalent of service accounts to very specific roles | 16:12 |
| ayoung | ClusterRoles, which are outside of regular roles | 16:12 |
| lbragstad | that only consist of operations a service accounts needs (and not admin) | 16:12 |
| lbragstad | yeah - in my mind, ClusterRoles are the equivalent to global role assignments | 16:12 |
| lbragstad | but - if anyone watches that and wants to have a discussion about it later, feel free to ping me | 16:13 |
| lbragstad | (in #openstack-keystone obviously) | 16:14 |
| lbragstad | #topic open discussion | 16:14 |
| *** openstack changes topic to "open discussion (Meeting topic: policy)" | 16:14 | |
| lbragstad | does anyone have anything they wanna air out? | 16:15 |
| lbragstad | otherwise we can be done early (i know several of you have a lot on your plates) | 16:15 |
| lbragstad | well - thanks everyone for coming! we will plan on meeting next week and I'm going to see if I can push for some representation from other projects | 16:16 |
| *** markvoelker has joined #openstack-meeting-cp | 16:17 | |
| lbragstad | #endmeeting | 16:17 |
| *** openstack changes topic to "OpenStack Meetings || https://wiki.openstack.org/wiki/Meetings" | 16:17 | |
| openstack | Meeting ended Wed Jan 25 16:17:39 2017 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 16:17 |
| openstack | Minutes: http://eavesdrop.openstack.org/meetings/policy/2017/policy.2017-01-25-16.00.html | 16:17 |
| openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/policy/2017/policy.2017-01-25-16.00.txt | 16:17 |
| openstack | Log: http://eavesdrop.openstack.org/meetings/policy/2017/policy.2017-01-25-16.00.log.html | 16:17 |
| *** edmondsw has left #openstack-meeting-cp | 16:17 | |
| *** gagehugo has left #openstack-meeting-cp | 16:18 | |
| *** markvoelker_ has joined #openstack-meeting-cp | 16:18 | |
| *** markvoelker has quit IRC | 16:22 | |
| *** _ducttape_ has quit IRC | 16:23 | |
| *** ducttape_ has joined #openstack-meeting-cp | 16:23 | |
| *** markvoelker_ has quit IRC | 16:59 | |
| *** diablo_rojo_ has joined #openstack-meeting-cp | 16:59 | |
| *** markvoelker has joined #openstack-meeting-cp | 16:59 | |
| *** ruan_20 has joined #openstack-meeting-cp | 17:00 | |
| *** markvoelker has quit IRC | 17:03 | |
| *** ruan_20 has quit IRC | 17:07 | |
| *** MarkBaker has quit IRC | 17:21 | |
| *** diablo_rojo_ is now known as diablo_rojo | 17:44 | |
| *** diablo_rojo has quit IRC | 17:45 | |
| *** diablo_rojo has joined #openstack-meeting-cp | 17:45 | |
| *** sdague has quit IRC | 18:03 | |
| *** MarkBaker has joined #openstack-meeting-cp | 18:17 | |
| *** sdague has joined #openstack-meeting-cp | 19:00 | |
| *** benj_ has quit IRC | 19:00 | |
| *** MarkBaker has quit IRC | 19:02 | |
| *** benj_ has joined #openstack-meeting-cp | 19:04 | |
| *** cebreidian has quit IRC | 19:05 | |
| *** cebreidian has joined #openstack-meeting-cp | 19:12 | |
| *** diablo_rojo_phon has quit IRC | 19:20 | |
| *** diablo_rojo_phon has joined #openstack-meeting-cp | 19:22 | |
| *** sdague has quit IRC | 19:26 | |
| *** sdague has joined #openstack-meeting-cp | 19:27 | |
| *** cebreidian has quit IRC | 19:59 | |
| *** sdague has quit IRC | 20:06 | |
| *** jaugustine has quit IRC | 20:07 | |
| *** cebreidian has joined #openstack-meeting-cp | 20:08 | |
| *** MarkBaker has joined #openstack-meeting-cp | 20:11 | |
| *** sdague has joined #openstack-meeting-cp | 20:18 | |
| *** MarkBaker has quit IRC | 20:22 | |
| *** sdague has quit IRC | 20:53 | |
| *** sdague has joined #openstack-meeting-cp | 20:54 | |
| *** breitz has quit IRC | 22:00 | |
| *** breitz has joined #openstack-meeting-cp | 22:01 | |
| *** sdague has quit IRC | 22:02 | |
| *** _ducttape_ has joined #openstack-meeting-cp | 22:09 | |
| *** ducttape_ has quit IRC | 22:12 | |
| *** gouthamr has quit IRC | 22:24 | |
| *** _ducttape_ has quit IRC | 22:29 | |
| *** ducttape_ has joined #openstack-meeting-cp | 22:29 | |
| *** _ducttape_ has joined #openstack-meeting-cp | 22:53 | |
| *** ducttape_ has quit IRC | 22:56 | |
| *** _ducttape_ has quit IRC | 22:57 | |
| *** cebreidian has quit IRC | 23:09 | |
| *** cebreidian has joined #openstack-meeting-cp | 23:18 | |
| *** xyang1 has quit IRC | 23:20 | |
| *** ducttape_ has joined #openstack-meeting-cp | 23:25 | |
| *** jkomg has quit IRC | 23:26 | |
| *** jkomg has joined #openstack-meeting-cp | 23:29 | |
| *** jkomg has quit IRC | 23:33 | |
| *** jkomg has joined #openstack-meeting-cp | 23:36 | |
| *** jkomg has quit IRC | 23:41 | |
| *** lamt has quit IRC | 23:42 | |
| *** lamt has joined #openstack-meeting-cp | 23:58 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!