| *** jgriffith has quit IRC | 00:01 | |
| *** felipemonteiro has joined #openstack-meeting-cp | 00:01 | |
| *** John has joined #openstack-meeting-cp | 00:02 | |
| *** John is now known as Guest63378 | 00:02 | |
| *** felipemonteiro_ has joined #openstack-meeting-cp | 00:02 | |
| *** Guest63378 is now known as jgriffith | 00:03 | |
| *** felipemonteiro has quit IRC | 00:06 | |
| *** diablo_rojo has joined #openstack-meeting-cp | 00:07 | |
| *** yamahata has quit IRC | 00:18 | |
| *** felipemonteiro_ has quit IRC | 00:21 | |
| *** nhelgeson has quit IRC | 00:30 | |
| *** lamt has quit IRC | 02:42 | |
| *** lamt has joined #openstack-meeting-cp | 02:46 | |
| *** lamt is now known as Guest41495 | 02:46 | |
| *** markvoelker has quit IRC | 02:54 | |
| *** yamahata has joined #openstack-meeting-cp | 03:17 | |
| *** coolsvap has joined #openstack-meeting-cp | 04:41 | |
| *** markvoelker has joined #openstack-meeting-cp | 04:55 | |
| *** gouthamr has quit IRC | 05:12 | |
| *** markvoelker has quit IRC | 05:30 | |
| *** diablo_rojo has quit IRC | 05:42 | |
| *** markvoelker has joined #openstack-meeting-cp | 06:26 | |
| *** markvoelker has quit IRC | 07:00 | |
| *** nikhil has quit IRC | 07:34 | |
| *** markvoelker has joined #openstack-meeting-cp | 07:57 | |
| *** aselius has quit IRC | 08:18 | |
| *** yamahata has quit IRC | 08:19 | |
| *** markvoelker has quit IRC | 08:30 | |
| *** markvoelker has joined #openstack-meeting-cp | 09:28 | |
| *** markvoelker has quit IRC | 10:01 | |
| *** sdague has joined #openstack-meeting-cp | 10:03 | |
| *** MarkBaker has joined #openstack-meeting-cp | 10:43 | |
| *** markvoelker has joined #openstack-meeting-cp | 10:58 | |
| *** MarkBaker has quit IRC | 11:04 | |
| *** brault has quit IRC | 11:04 | |
| *** markvoelker has quit IRC | 11:30 | |
| *** edmondsw has joined #openstack-meeting-cp | 12:04 | |
| *** MarkBaker has joined #openstack-meeting-cp | 12:06 | |
| *** markvoelker has joined #openstack-meeting-cp | 12:18 | |
| *** gouthamr has joined #openstack-meeting-cp | 13:23 | |
| *** Guest41495 has quit IRC | 13:29 | |
| *** lamt has joined #openstack-meeting-cp | 13:31 | |
| *** sballe_ has joined #openstack-meeting-cp | 13:47 | |
| *** zhipeng has joined #openstack-meeting-cp | 13:52 | |
| *** zhipeng has quit IRC | 14:04 | |
| *** zhipeng has joined #openstack-meeting-cp | 14:04 | |
| *** coolsvap has quit IRC | 14:31 | |
| *** felipemonteiro has joined #openstack-meeting-cp | 14:38 | |
| *** felipemonteiro_ has joined #openstack-meeting-cp | 14:40 | |
| *** felipemonteiro has quit IRC | 14:44 | |
| *** MarkBaker has quit IRC | 15:05 | |
| *** zhipeng has quit IRC | 15:19 | |
| *** zhipeng has joined #openstack-meeting-cp | 15:19 | |
| *** aselius has joined #openstack-meeting-cp | 15:26 | |
| *** gagehugo has joined #openstack-meeting-cp | 15:54 | |
| *** Rockyg has joined #openstack-meeting-cp | 15:56 | |
| *** coolsvap has joined #openstack-meeting-cp | 15:56 | |
| *** zhipeng has quit IRC | 15:57 | |
| *** blancos has joined #openstack-meeting-cp | 15:58 | |
| lbragstad | #startmeeting keystone | 16:00 |
|---|---|---|
| openstack | Meeting started Wed Oct 11 16:00:25 2017 UTC and is due to finish in 60 minutes. The chair is lbragstad. Information about MeetBot at http://wiki.debian.org/MeetBot. | 16:00 |
| openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 16:00 |
| *** openstack changes topic to " (Meeting topic: keystone)" | 16:00 | |
| openstack | The meeting name has been set to 'keystone' | 16:00 |
| lbragstad | #endmeeting | 16:00 |
| *** openstack changes topic to "OpenStack Meetings || https://wiki.openstack.org/wiki/Meetings" | 16:00 | |
| openstack | Meeting ended Wed Oct 11 16:00:34 2017 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 16:00 |
| openstack | Minutes: http://eavesdrop.openstack.org/meetings/keystone/2017/keystone.2017-10-11-16.00.html | 16:00 |
| openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/keystone/2017/keystone.2017-10-11-16.00.txt | 16:00 |
| openstack | Log: http://eavesdrop.openstack.org/meetings/keystone/2017/keystone.2017-10-11-16.00.log.html | 16:00 |
| lbragstad | bah... | 16:00 |
| lbragstad | #startmeeting policy | 16:00 |
| openstack | Meeting started Wed Oct 11 16:00:55 2017 UTC and is due to finish in 60 minutes. The chair is lbragstad. Information about MeetBot at http://wiki.debian.org/MeetBot. | 16:00 |
| openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 16:00 |
| *** openstack changes topic to " (Meeting topic: policy)" | 16:00 | |
| openstack | The meeting name has been set to 'policy' | 16:01 |
| cmurphy | o/ | 16:01 |
| lbragstad | o/ | 16:01 |
| lbragstad | #link https://etherpad.openstack.org/p/keystone-policy-meeting | 16:01 |
| lbragstad | ^ agenda | 16:01 |
| lbragstad | ping raildo, ktychkova, rderose, htruta, hrybacki, atrmr, gagehugo, lamt, thinrichs, edmondsw, ruan_he, ayoung, kmalloc, raj_singh, johnthetubaguy, knikolla, nhelgeson | 16:01 |
| gagehugo | o/ | 16:01 |
| edmondsw | o/ | 16:01 |
| blancos | o/ | 16:01 |
| knikolla | o/ | 16:01 |
| lamt | o/ | 16:01 |
| kmalloc | here | 16:02 |
| lbragstad | alrighty | 16:02 |
| lbragstad | #topic AWS IAM session scheduling | 16:02 |
| *** openstack changes topic to "AWS IAM session scheduling (Meeting topic: policy)" | 16:02 | |
| lbragstad | in case you haven't seen it yet | 16:03 |
| lbragstad | #link http://lists.openstack.org/pipermail/openstack-dev/2017-October/123069.html | 16:03 |
| *** nhelgeson has joined #openstack-meeting-cp | 16:03 | |
| lbragstad | #link https://etherpad.openstack.org/p/analyzing-other-policy-systems | 16:03 |
| lbragstad | i know i mentioned this last week | 16:03 |
| lbragstad | but i think it would be useful to go over some stuff before we start the sessions so that we know what we want out of it | 16:04 |
| lbragstad | after this meeting - i'll build a doodle with some possible times | 16:04 |
| lbragstad | and send a summary | 16:04 |
| gagehugo | sounds good | 16:05 |
| lbragstad | so, as far as policy "flows" go, is there anything you want to see done in AWS or GKE? | 16:05 |
| lbragstad | (ideally we will have a list of these to go through together) | 16:06 |
| knikolla | i know nothing about either. would be helpful to start with the basics. | 16:07 |
| edmondsw | +1 | 16:07 |
| lbragstad | ok | 16:08 |
| lbragstad | so - assigning a role basics? | 16:08 |
| lbragstad | or creating a policy? | 16:08 |
| edmondsw | policy | 16:08 |
| lbragstad | ok | 16:08 |
| edmondsw | though we probably need to understand a little about their concept of roles | 16:08 |
| lbragstad | yeah - | 16:08 |
| lbragstad | i know they have principals/resource/actions | 16:09 |
| lbragstad | but i don't think i fully understand how they work, or work together (a resource can be a thing and a user?) | 16:09 |
| knikolla | i know amazon has a free kindle book for IAM, i'll do some homework reading | 16:10 |
| lbragstad | knikolla: nice | 16:10 |
| kmalloc | there is also a Free tier for AWS | 16:10 |
| kmalloc | you can play with it and some basic stuff for no cost for a year (within limits) and the IAM bits shouldn't cost anything to poke at | 16:11 |
| knikolla | nice,didn't know about that | 16:11 |
| lbragstad | cool - because that was my next question | 16:11 |
| lbragstad | does anyone have an AWS account? | 16:11 |
| kmalloc | yes. | 16:12 |
| kmalloc | i do ;) | 16:12 |
| * lbragstad puts up the "Judge Free Zone" sign | 16:12 | |
| kmalloc | i use it for my DNS (route53 is great) | 16:12 |
| knikolla | i know we have a VM or two there | 16:12 |
| lbragstad | cool | 16:12 |
| lbragstad | second question | 16:12 |
| kmalloc | we can sign up a new account JUST for this, since all it takes is an email | 16:12 |
| lbragstad | is there a way for us to use an existing account (from a team member) or should we use a new one? | 16:13 |
| kmalloc | (might need a CC too) | 16:13 |
| kmalloc | make a new one | 16:13 |
| knikolla | kmalloc: accepts guerillamail? | 16:13 |
| kmalloc | knikolla: i think they rely on CC info for security | 16:13 |
| kmalloc | of the user. | 16:13 |
| lbragstad | ah | 16:13 |
| knikolla | i see | 16:14 |
| kmalloc | for signup purposes (aka, valid user), not "security" in the sense of what we do | 16:14 |
| knikolla | makes senes | 16:14 |
| kmalloc | or preventing access... bah you know what i mean | 16:14 |
| kmalloc | anyway, i would vote a new account, that way nothing accidently gets touched/mucked with | 16:14 |
| lbragstad | right | 16:14 |
| lbragstad | fwiw - i'm taking notes | 16:15 |
| lbragstad | #link https://etherpad.openstack.org/p/analyzing-other-policy-systems | 16:15 |
| kmalloc | and ftr, aws does support the email+<tag>@gmail format | 16:15 |
| kmalloc | so it could be lbragstad+aws-demo-account-blah-thing@gmail.com | 16:15 |
| lbragstad | oh - nice | 16:17 |
| lbragstad | ok - so it sounds like we can get some good mileage out of the free account | 16:18 |
| lbragstad | i'll take an action to set on up | 16:18 |
| lbragstad | #action lbragstad to setup a free AWS account for the session | 16:18 |
| lbragstad | ok - while we're talking about accounts and workflows | 16:19 |
| lbragstad | i assume most of this can be applied to google, too | 16:19 |
| lbragstad | or GKE | 16:19 |
| lbragstad | (which we can either do in the same session or a separate one) | 16:19 |
| lbragstad | looks like they have a free tier, too | 16:21 |
| lbragstad | #link https://cloud.google.com/container-engine/ | 16:21 |
| lbragstad | we can start with AWS and if we run over we'll have a separate session for GKE | 16:25 |
| edmondsw | time to actually talk about scheduling that discussion? :) | 16:28 |
| lbragstad | i know we have to accommodate AU time | 16:28 |
| lbragstad | does anyone know what AU timezone zaneb is in? | 16:29 |
| *** yamahata has joined #openstack-meeting-cp | 16:30 | |
| lbragstad | 1100 utc or 1900 utc might work for AU, US, and Germany | 16:32 |
| lbragstad | ahh - 1900 is going to be hard | 16:33 |
| cmurphy | it is basically impossible to get a time that works in those three places | 16:33 |
| lbragstad | yeah | 16:33 |
| lbragstad | #link https://www.worldtimebuddy.com/?pl=1&lid=100,6,2174003,2911298&h=100 | 16:33 |
| cmurphy | if I'm the only EU person feel free to optimize for AU + US | 16:34 |
| lbragstad | the only reasonable time for AU and US is 2200, but that leaves EU attending at midnight | 16:34 |
| lbragstad | i'll try and schedule for 1100 and 2000 UTC | 16:36 |
| edmondsw | or 1200? | 16:37 |
| lbragstad | UTC? | 16:37 |
| *** diablo_rojo has joined #openstack-meeting-cp | 16:37 | |
| lbragstad | it would be late for brisbane, but I can propose it | 16:37 |
| edmondsw | yeah, utc | 16:37 |
| lbragstad | i'll throw it up as a possibility | 16:38 |
| edmondsw | if it's just zaneb there, maybe ask him how late is ok for him | 16:38 |
| lbragstad | it can't hurt | 16:38 |
| lbragstad | yeah | 16:38 |
| edmondsw | sometimes later is better, even | 16:38 |
| edmondsw | spend time with the fam, put them to bed, and then get back online | 16:38 |
| lbragstad | should we record this? | 16:38 |
| edmondsw | probably | 16:38 |
| lbragstad | just thinking if it's going to be hard for people to attend, at least they can catch the recording | 16:39 |
| edmondsw | yep | 16:39 |
| lbragstad | cool | 16:39 |
| lbragstad | i'll propose a few times for next week and the week after | 16:39 |
| *** felipemonteiro_ has quit IRC | 16:40 | |
| lbragstad | i think having this before Sydney is going to be good | 16:40 |
| lbragstad | anyone else have suggestions for the session? | 16:41 |
| lbragstad | if not - i'll get to work recapping and planning | 16:41 |
| lbragstad | #topic open discussion | 16:42 |
| *** openstack changes topic to "open discussion (Meeting topic: policy)" | 16:42 | |
| lbragstad | looks like we can get some time back - thanks for coming folks! | 16:43 |
| lbragstad | #endmeeting | 16:43 |
| *** openstack changes topic to "OpenStack Meetings || https://wiki.openstack.org/wiki/Meetings" | 16:43 | |
| openstack | Meeting ended Wed Oct 11 16:43:49 2017 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 16:43 |
| openstack | Minutes: http://eavesdrop.openstack.org/meetings/policy/2017/policy.2017-10-11-16.00.html | 16:43 |
| openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/policy/2017/policy.2017-10-11-16.00.txt | 16:43 |
| openstack | Log: http://eavesdrop.openstack.org/meetings/policy/2017/policy.2017-10-11-16.00.log.html | 16:43 |
| *** blancos has quit IRC | 16:44 | |
| *** gagehugo has left #openstack-meeting-cp | 16:44 | |
| *** diablo_rojo has quit IRC | 16:57 | |
| *** diablo_rojo has joined #openstack-meeting-cp | 16:58 | |
| *** felipemonteiro has joined #openstack-meeting-cp | 17:00 | |
| *** felipemonteiro_ has joined #openstack-meeting-cp | 17:01 | |
| *** gouthamr has quit IRC | 17:04 | |
| *** felipemonteiro has quit IRC | 17:06 | |
| *** nikhil has joined #openstack-meeting-cp | 17:14 | |
| *** MarkBaker has joined #openstack-meeting-cp | 17:55 | |
| *** hrybacki is now known as hrybacki|trainin | 18:03 | |
| *** brault has joined #openstack-meeting-cp | 18:19 | |
| *** brault has quit IRC | 18:23 | |
| *** Rockyg has quit IRC | 18:46 | |
| *** brault has joined #openstack-meeting-cp | 19:09 | |
| *** MarkBaker has quit IRC | 19:09 | |
| *** brault has quit IRC | 19:13 | |
| *** brault has joined #openstack-meeting-cp | 19:22 | |
| *** coolsvap has quit IRC | 19:36 | |
| *** harlowja has quit IRC | 20:00 | |
| *** edmondsw_ has joined #openstack-meeting-cp | 20:08 | |
| *** edmondsw has quit IRC | 20:08 | |
| *** edmondsw_ is now known as edmondsw | 20:12 | |
| *** MarkBaker has joined #openstack-meeting-cp | 20:37 | |
| *** MarkBaker has quit IRC | 21:05 | |
| *** edmondsw has quit IRC | 21:07 | |
| *** harlowja has joined #openstack-meeting-cp | 21:07 | |
| *** diablo_rojo has quit IRC | 21:09 | |
| *** diablo_rojo has joined #openstack-meeting-cp | 21:13 | |
| *** edmondsw has joined #openstack-meeting-cp | 21:14 | |
| *** edmondsw has quit IRC | 21:19 | |
| *** edmondsw has joined #openstack-meeting-cp | 22:25 | |
| *** edmondsw has quit IRC | 22:30 | |
| *** felipemonteiro_ has quit IRC | 22:34 | |
| *** felipemonteiro_ has joined #openstack-meeting-cp | 22:34 | |
| *** kbyrne has quit IRC | 22:48 | |
| *** edmondsw has joined #openstack-meeting-cp | 22:48 | |
| *** kbyrne has joined #openstack-meeting-cp | 22:50 | |
| *** edmondsw has quit IRC | 22:54 | |
| *** felipemonteiro_ has quit IRC | 23:12 | |
| *** ttx has quit IRC | 23:20 | |
| *** ttx has joined #openstack-meeting-cp | 23:21 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!