| *** xyang1 has quit IRC | 00:35 | |
| *** gouthamr has quit IRC | 01:06 | |
| *** dfflanders has quit IRC | 01:26 | |
| *** nhelgeson has quit IRC | 01:47 | |
| *** yamahata has quit IRC | 02:00 | |
| *** iyamahat has quit IRC | 02:00 | |
| *** hongbin has joined #openstack-meeting-cp | 02:09 | |
| *** gouthamr has joined #openstack-meeting-cp | 02:25 | |
| *** yamahata has joined #openstack-meeting-cp | 02:50 | |
| *** gouthamr has quit IRC | 03:46 | |
| *** tonyb has quit IRC | 04:05 | |
| *** tonyb has joined #openstack-meeting-cp | 04:28 | |
| *** hongbin has quit IRC | 04:35 | |
| *** coolsvap has joined #openstack-meeting-cp | 04:56 | |
| *** diablo_rojo has joined #openstack-meeting-cp | 04:59 | |
| *** smcginnis has quit IRC | 06:39 | |
| *** smcginnis has joined #openstack-meeting-cp | 06:43 | |
| *** diablo_rojo has quit IRC | 07:02 | |
| *** edmondsw has joined #openstack-meeting-cp | 07:24 | |
| *** edmondsw has quit IRC | 07:29 | |
| *** gouthamr has joined #openstack-meeting-cp | 08:02 | |
| *** MarkBaker has joined #openstack-meeting-cp | 08:10 | |
| *** gouthamr has quit IRC | 08:21 | |
| *** dklyle has joined #openstack-meeting-cp | 08:45 | |
| *** david-lyle has quit IRC | 08:45 | |
| *** iyamahat has joined #openstack-meeting-cp | 09:06 | |
| *** edmondsw has joined #openstack-meeting-cp | 09:12 | |
| *** iyamahat has quit IRC | 09:15 | |
| *** edmondsw has quit IRC | 09:16 | |
| *** yamahata has quit IRC | 09:34 | |
| *** dklyle has quit IRC | 10:28 | |
| *** david-lyle has joined #openstack-meeting-cp | 10:28 | |
| *** markvoelker has quit IRC | 11:09 | |
| *** markvoelker has joined #openstack-meeting-cp | 11:10 | |
| *** markvoelker has quit IRC | 11:14 | |
| *** markvoelker has joined #openstack-meeting-cp | 11:55 | |
| *** kbyrne has quit IRC | 12:28 | |
| *** kbyrne has joined #openstack-meeting-cp | 12:30 | |
| *** kbyrne has quit IRC | 12:38 | |
| *** kbyrne has joined #openstack-meeting-cp | 12:39 | |
| *** hrybacki_ has joined #openstack-meeting-cp | 12:40 | |
| *** sballe__ has joined #openstack-meeting-cp | 12:40 | |
| *** soren_ has joined #openstack-meeting-cp | 12:40 | |
| *** persia__ has joined #openstack-meeting-cp | 12:40 | |
| *** zerick has quit IRC | 12:41 | |
| *** soren has quit IRC | 12:41 | |
| *** hrybacki has quit IRC | 12:41 | |
| *** sballe_ has quit IRC | 12:41 | |
| *** persia has quit IRC | 12:41 | |
| *** eglute_s has quit IRC | 12:41 | |
| *** melwitt has quit IRC | 12:41 | |
| *** hrybacki_ is now known as hrybacki | 12:41 | |
| *** soren_ is now known as soren | 12:41 | |
| *** sballe__ is now known as sballe_ | 12:41 | |
| *** zerick has joined #openstack-meeting-cp | 12:41 | |
| *** melwitt has joined #openstack-meeting-cp | 12:41 | |
| *** melwitt is now known as Guest86208 | 12:41 | |
| *** eglute has joined #openstack-meeting-cp | 12:42 | |
| *** notmyname has quit IRC | 12:44 | |
| *** kbyrne has quit IRC | 12:44 | |
| *** kbyrne has joined #openstack-meeting-cp | 12:46 | |
| *** notmyname has joined #openstack-meeting-cp | 12:47 | |
| *** edmondsw has joined #openstack-meeting-cp | 12:50 | |
| *** edmondsw_ has joined #openstack-meeting-cp | 12:51 | |
| *** edmondsw has quit IRC | 12:52 | |
| *** coolsvap has quit IRC | 13:45 | |
| *** zhipeng has joined #openstack-meeting-cp | 13:50 | |
| *** xyang1 has joined #openstack-meeting-cp | 13:56 | |
| *** zhipeng has quit IRC | 14:01 | |
| *** zhipeng has joined #openstack-meeting-cp | 14:01 | |
| *** zhipeng has quit IRC | 14:16 | |
| *** zhipeng has joined #openstack-meeting-cp | 14:17 | |
| *** zhipeng has quit IRC | 14:18 | |
| *** zhipeng has joined #openstack-meeting-cp | 14:19 | |
| *** gouthamr has joined #openstack-meeting-cp | 14:35 | |
| *** zhipeng has quit IRC | 14:36 | |
| *** zhipeng has joined #openstack-meeting-cp | 14:36 | |
| *** zhipeng has quit IRC | 14:39 | |
| *** zhipeng has joined #openstack-meeting-cp | 14:40 | |
| *** david-lyle has quit IRC | 14:58 | |
| *** david-lyle has joined #openstack-meeting-cp | 14:58 | |
| *** felipemonteiro has joined #openstack-meeting-cp | 15:07 | |
| *** felipemonteiro_ has joined #openstack-meeting-cp | 15:08 | |
| *** zhipeng has quit IRC | 15:11 | |
| *** MarkBaker has quit IRC | 15:11 | |
| *** zhipeng has joined #openstack-meeting-cp | 15:11 | |
| *** felipemonteiro has quit IRC | 15:12 | |
| *** zhipeng has quit IRC | 15:17 | |
| *** zhipeng has joined #openstack-meeting-cp | 15:17 | |
| *** coolsvap has joined #openstack-meeting-cp | 15:34 | |
| *** edmondsw_ is now known as edmondsw | 15:34 | |
| *** yamahata has joined #openstack-meeting-cp | 15:35 | |
| *** zhipeng has quit IRC | 15:40 | |
| *** iyamahat has joined #openstack-meeting-cp | 15:51 | |
| *** MarkBaker has joined #openstack-meeting-cp | 15:57 | |
| *** Rockyg has joined #openstack-meeting-cp | 15:59 | |
| *** blancos has joined #openstack-meeting-cp | 16:00 | |
| lbragstad | #startmeeting policy | 16:00 |
|---|---|---|
| openstack | Meeting started Wed Jul 12 16:00:30 2017 UTC and is due to finish in 60 minutes. The chair is lbragstad. Information about MeetBot at http://wiki.debian.org/MeetBot. | 16:00 |
| openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 16:00 |
| *** openstack changes topic to " (Meeting topic: policy)" | 16:00 | |
| openstack | The meeting name has been set to 'policy' | 16:00 |
| hrybacki | o/ | 16:00 |
| lbragstad | #link https://etherpad.openstack.org/p/keystone-policy-meeting | 16:00 |
| *** gagehugo has joined #openstack-meeting-cp | 16:00 | |
| lbragstad | agenda ^ | 16:00 |
| blancos | o/ | 16:00 |
| gagehugo | this always sneaks up on me | 16:01 |
| gagehugo | o/ | 16:01 |
| lbragstad | ping raildo, ktychkova, rderose, htruta, hrybacki, atrmr, gagehugo, lamt, thinrichs, edmondsw, ruan, ayoung, morgan, raj_singh, johnthetubaguy, knikolla, nhelgeson | 16:01 |
| lbragstad | hi folks! | 16:01 |
| lamt | o/ | 16:01 |
| lbragstad | #topic global roles and admin project | 16:02 |
| *** openstack changes topic to "global roles and admin project (Meeting topic: policy)" | 16:02 | |
| lbragstad | gagehugo: o/ | 16:02 |
| gagehugo | lbragstad so I was just curious what moving to global roles means in regards to admin_project | 16:03 |
| lbragstad | gagehugo: well - they are both trying to solve the same goal | 16:03 |
| lbragstad | with is elevating privileges | 16:03 |
| gagehugo | yup | 16:03 |
| gagehugo | it looks like global roles is probably the better way to go imo | 16:04 |
| lbragstad | #link https://review.openstack.org/#/c/464763/ | 16:04 |
| lbragstad | ^ specification | 16:04 |
| lbragstad | which i need to respin because i noticied a couple things that need to be fixed as I started working on the implementation | 16:04 |
| lbragstad | #link https://review.openstack.org/#/c/481781/ WIP implementation | 16:04 |
| lbragstad | ^ that's the implementation | 16:04 |
| lbragstad | which is kind of a hot mess at the moment | 16:04 |
| lbragstad | and it still failing some tests | 16:05 |
| lbragstad | the assignment code is pretty intense - we have some monsterous methods in there | 16:05 |
| gagehugo | ah | 16:06 |
| lbragstad | if anyone is interested in helping out with that - i'm happy to collaborate | 16:06 |
| hrybacki | lbragstad: I'm happy to help refactor messy bits to get more familiar with the code | 16:07 |
| lbragstad | hrybacki: awesome | 16:07 |
| lbragstad | that'd be a useful exercise for me, too | 16:07 |
| lbragstad | my goal is to have the implementation cleaned up by the time we go to the PTG | 16:08 |
| lbragstad | then we can show how this works to other projects | 16:08 |
| lbragstad | since they will be consuming it | 16:08 |
| * hrybacki nods | 16:08 | |
| gagehugo | that'd be good | 16:08 |
| lbragstad | it should also give us a good platform to starting thinking about next steps with policy as far as community goals go | 16:08 |
| hrybacki | agreed | 16:09 |
| lbragstad | anyone else have anything for the global roles stuff? | 16:09 |
| lbragstad | #topic Testing Policy | 16:10 |
| *** openstack changes topic to "Testing Policy (Meeting topic: policy)" | 16:10 | |
| lbragstad | hrybacki: o/ | 16:10 |
| hrybacki | o/ | 16:10 |
| hrybacki | I'm just curious if anyone has exp. testing policy outside of the defaults | 16:10 |
| lbragstad | hrybacki: not really - most of policy is tested in keystone's unit tests :( | 16:11 |
| hrybacki | I've heard someone using patrol to this end but that only works with newer version of OS | 16:11 |
| hrybacki | hmm | 16:11 |
| lbragstad | blancos: has experience with patrole i believe | 16:11 |
| hrybacki | this might be something we want to think about as we eventually head towards more granular control in policy | 16:11 |
| lbragstad | absolutely | 16:11 |
| hrybacki | bc people are going to want this | 16:11 |
| blancos | lbragstad Yes, that's true | 16:12 |
| lbragstad | s/are going to/already/ | 16:12 |
| hrybacki | ^^ +1 | 16:12 |
| blancos | We've used Patrole internally to test custom policy changes | 16:12 |
| lbragstad | hrybacki: most of the policy rules are tested here internally https://github.com/openstack/keystone/blob/9b3d99ea24da0fa1c6257ecd633d1349a2a5fbe7/keystone/tests/unit/test_v3_protection.py | 16:12 |
| lbragstad | s/internally// | 16:12 |
| hrybacki | blancos: is there anything you could share with external community? | 16:12 |
| hrybacki | lessons learned or w/e | 16:13 |
| hrybacki | lbragstad: ack | 16:13 |
| hrybacki | #link https://github.com/openstack/keystone/blob/9b3d99ea24da0fa1c6257ecd633d1349a2a5fbe7/keystone/tests/unit/test_v3_protection.py | 16:13 |
| blancos | hrybacki #link https://github.com/openstack/patrole | 16:13 |
| blancos | We've migrated most of our tests upstream for the big tent that also has support in Tempest; they work for any policy | 16:13 |
| blancos | (i.e., they test access for both custom and default policies) | 16:14 |
| hrybacki | blancos: which versions of OS have you been testing against? | 16:14 |
| blancos | Internally we're a bit behind but the tests upstream work against master | 16:15 |
| hrybacki | ack, thank you | 16:15 |
| blancos | Our first release (0.1.0, I believe) is for Pike | 16:15 |
| * hrybacki nods | 16:15 | |
| hrybacki | we have someone trying to get it to work against Newton atm | 16:15 |
| hrybacki | with some success but mostly headaches | 16:16 |
| hrybacki | that's all I had lbragstad | 16:16 |
| hrybacki | thanks for the input blancos! | 16:16 |
| blancos | :) | 16:16 |
| lbragstad | hrybacki: sounds good | 16:16 |
| lbragstad | #topic open discussion | 16:16 |
| *** openstack changes topic to "open discussion (Meeting topic: policy)" | 16:16 | |
| lbragstad | the floor is open | 16:16 |
| * hrybacki has nothing to add atm | 16:16 | |
| lbragstad | #info policy-in-code and policy-docs has been accepted for an official community goal | 16:17 |
| lbragstad | for queens | 16:17 |
| blancos | hrybacki If you have any more questions I or felipemonteiro can answer them in openstack-qa | 16:17 |
| gagehugo | \o/ | 16:17 |
| hrybacki | blancos++ | 16:17 |
| lbragstad | i imagine i'll be spending a good amount of time in queens working with other teams to implement that goal | 16:17 |
| hrybacki | lbragstad: I'm hoping to assist you to that end | 16:18 |
| * hrybacki will be your shadow at PTG | 16:18 | |
| lbragstad | hrybacki: ++ thank you! | 16:18 |
| lbragstad | we have a lot of projects to help :) | 16:18 |
| * hrybacki nods | 16:19 | |
| lbragstad | nova and keystone are done once https://review.openstack.org/#/c/449278/ merges | 16:19 |
| lbragstad | #link https://review.openstack.org/#/c/449278/ | 16:19 |
| lbragstad | so - great work there | 16:19 |
| hrybacki | nice | 16:19 |
| lbragstad | forward thinking - we have a few other things that we need to do with policy, too | 16:20 |
| lbragstad | one of them is to implement a way to deprecate old policy rules using oslo.policy | 16:20 |
| lbragstad | at the PTG we should think about discussing a default set of roles we (as OpenStack) would like to offer by default | 16:21 |
| lbragstad | read-only for example | 16:21 |
| hrybacki | ^^ is a great idea | 16:21 |
| hrybacki | I'll add that to the etherpad now | 16:21 |
| lbragstad | then we can start looking at the work required to make something like that happen | 16:21 |
| lbragstad | across project | 16:21 |
| lbragstad | that'd be a great goal for us to have going into Rocky | 16:22 |
| * hrybacki nods | 16:22 | |
| lbragstad | getting consensus is going to be the first step and the PTG would be a good place to do that | 16:23 |
| lbragstad | anyway - that's about all I have as far as policy communication goes | 16:23 |
| lbragstad | does anyone have anything else for open discussion? | 16:23 |
| hrybacki | no | 16:24 |
| gagehugo | im good | 16:24 |
| lbragstad | ack - looks like we can get some time back | 16:24 |
| lbragstad | thanks for coming! | 16:24 |
| lbragstad | #endmeeting | 16:24 |
| *** openstack changes topic to "OpenStack Meetings || https://wiki.openstack.org/wiki/Meetings" | 16:24 | |
| openstack | Meeting ended Wed Jul 12 16:24:41 2017 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 16:24 |
| openstack | Minutes: http://eavesdrop.openstack.org/meetings/policy/2017/policy.2017-07-12-16.00.html | 16:24 |
| openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/policy/2017/policy.2017-07-12-16.00.txt | 16:24 |
| openstack | Log: http://eavesdrop.openstack.org/meetings/policy/2017/policy.2017-07-12-16.00.log.html | 16:24 |
| *** gagehugo has left #openstack-meeting-cp | 16:24 | |
| hrybacki | o/ | 16:25 |
| *** blancos has quit IRC | 16:26 | |
| *** Guest86208 is now known as melwitt | 16:36 | |
| *** iyamahat has quit IRC | 17:09 | |
| *** EmilienM has left #openstack-meeting-cp | 17:18 | |
| *** yamahata has quit IRC | 17:25 | |
| *** iyamahat has joined #openstack-meeting-cp | 17:43 | |
| *** diablo_rojo has joined #openstack-meeting-cp | 17:48 | |
| *** yamahata has joined #openstack-meeting-cp | 17:54 | |
| *** Rockyg has quit IRC | 18:23 | |
| *** coolsvap has quit IRC | 19:03 | |
| *** nhelgeson has joined #openstack-meeting-cp | 19:15 | |
| *** harlowja has quit IRC | 19:17 | |
| *** david-lyle has quit IRC | 19:17 | |
| *** david-lyle has joined #openstack-meeting-cp | 19:17 | |
| *** harlowja has joined #openstack-meeting-cp | 20:02 | |
| *** iyamahat_ has joined #openstack-meeting-cp | 21:03 | |
| *** iyamahat has quit IRC | 21:04 | |
| *** iyamahat_ has quit IRC | 21:07 | |
| *** iyamahat has joined #openstack-meeting-cp | 21:07 | |
| *** edmondsw has quit IRC | 21:12 | |
| *** edmondsw has joined #openstack-meeting-cp | 21:13 | |
| *** edmondsw_ has joined #openstack-meeting-cp | 21:14 | |
| *** edmondsw has quit IRC | 21:14 | |
| *** edmondsw_ has quit IRC | 21:15 | |
| *** edmondsw has joined #openstack-meeting-cp | 21:15 | |
| *** edmondsw has quit IRC | 21:20 | |
| *** iyamahat_ has joined #openstack-meeting-cp | 21:31 | |
| *** iyamahat has quit IRC | 21:32 | |
| *** edmondsw has joined #openstack-meeting-cp | 21:46 | |
| *** edmondsw has quit IRC | 21:50 | |
| *** felipemonteiro_ has quit IRC | 21:52 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!