Wednesday, 2023-05-24

tobberydbergo/07:01
fkro/07:01
gtemahey07:01
fkrtotally forgot that we're having our scs summit ;)07:01
gtemalol07:01
fkrtobberydberg: Johan was here yesterday :)07:01
tobberydbergAh, right! Going well?07:01
fkrtotally07:01
tobberydbergYea, on stage right?07:02
fkrindeed. with kurt.07:02
tobberydbergexactly 07:02
tobberydbergA lot of people? 07:02
fkri'll actually have to be on a panel shortly, so I'll not be able to stick around too long07:02
fkr140 people07:02
fkrso really good07:02
fkrwe aimed for 10007:02
tobberydbergOk, that is great! I waned to be there, but didn't fit the schedule07:03
tobberydbergOk. So lets start then 07:03
tobberydberg#startmeeting publiccloud_sig07:03
opendevmeetMeeting started Wed May 24 07:03:31 2023 UTC and is due to finish in 60 minutes.  The chair is tobberydberg. Information about MeetBot at http://wiki.debian.org/MeetBot.07:03
opendevmeetUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.07:03
opendevmeetThe meeting name has been set to 'publiccloud_sig'07:03
tobberydberg#topic 1. Use of domain admin users / domain manager role - Invitation to Lean Coffee @ SCS (fkr)07:03
fkrindeed07:04
fkrwe want to discuss the use of  domains and 'admin' role within it07:04
fkr(basically what also came up here again: https://lists.openstack.org/pipermail/openstack-discuss/2023-May/033803.html)07:04
fkrI already reached out to cleura and my proposal would be to have a joined call on June 5th 15:05 CEST07:05
fkrsince we would like to see wether we can help push this forward, but in order to we'd like to understand better how the CSPs currently work with this07:06
gtemalooking forward on that really. We have this in OTC and I would love upstream to have it as well07:06
fkrgtema: I'd really like you to join there as well :)07:06
tobberydbergI think that suits me fine ... will try to invite som more people internally07:06
fkrare there others you two are aware of, that we should actively reach out to?07:07
tobberydberg(FYI - I have a hard stop at 0730 UTC today, will have to drop of then)07:07
tobberydbergI think a email to the mailing list with the invite would be good?07:07
gtemayeah07:07
fkrI will take care of that07:08
fkrok. this was what I wanted to achieve with the agenda point :)07:09
tobberydbergThis would actually also qualify as a Forum session in vancouver...but a little bit late now...07:09
tobberydbergThanks07:09
tobberydberg#topic 2. Further things regarding Forum session Vancouver?07:09
gtemasince PTG is during same time we can easily put it there if necessary07:09
fkraye07:09
tobberydbergTrue gtema 07:09
fkrand some PTG rooms can be used hybrid if I understood mailing list correct07:09
gtemaright07:10
fkr(that way I could join - a bit selfish here ;)07:10
gtema:)07:10
tobberydberg+107:10
tobberydbergSo, regarding forum sessions .... I've added the session proposed by gtema ... haven't seen if it got to the schedule or not07:10
gtemagreat07:11
tobberydbergSo lets wait and see07:11
tobberydbergExcept for that, I think that qualifies to the next topic07:12
tobberydberg#topic 3. Planning PTG sessions Vancouver07:13
tobberydbergFirst on that topic is to schedule the session slots07:13
gtemaI find it so difficult to plan times now. Maybe be spontan?07:14
tobberydbergSuggestion from my side, have two 2 hour blocks - wednesday and thursday afternoons07:14
fkr(am silent, since i'll not be physically there ;)07:15
tobberydbergI feel the same way, but I think it would be good with some plan, for others to plan as well 07:15
gtemaagree on both (proposal)07:16
tobberydbergthe thought with two blocks is more to give option for people to join if they have a block at one slop07:17
fkr+107:17
tobberydbergWhat topics to we want to cover?07:17
gtematesting (certification)07:18
tobberydbergWay forward with the standard properties? Or should that move into various teams meetings?07:18
gtemasurely continue discussion on properties agreements07:18
tobberydbergtesting of course, will be as a followup of the forum session07:19
gtemawith teams we can discuss what we want. But we perfectly know that what they agree on will not come immediately07:19
gtemaso we need to do some interim steps ourselves07:19
tobberydbergMaybe have a BoF kind of thing if we have newcomers?07:19
tobberydbergagreed07:19
fkr+1 on the properties07:19
gtemado we have newcomers (/me scratching my neck)07:20
gtema?07:20
fkrgtema: yes07:20
gtemaahso - ok07:20
fkrgtema: tobberydberg and I have been in touch with them and they will join vancouver iirc07:20
gtemaawesome07:20
fkror we've been reached out to (is the better wording)07:21
tobberydbergThere were a few in Berlin as well that I haven't talked to since then, hopefully some of them join in vancouver as well07:21
tobberydbergThe domain admin thing would be another candidate indeed07:22
fkr+107:22
tobberydbergFor me, roles in general ... I personally don't really get my head around all of that07:23
gtemayou are right07:23
gtemabtw - over the weekend were discussing with noonedeadpunk in sdk room things around service catalog and abilities to hide out non public endpoints07:24
gtemawith also ability to override endpoints based on the domain used07:24
puckApologies for being late.07:25
gtemathis is not really sdk topic, but I see it also fitting the publiccloud domain07:25
tobberydbergfair thing as well07:25
tobberydbergwelcome puck :-) 07:25
fkrhey puck07:25
puckJust seeing a little bit on this topic, we're interested in using domains to provide our customers a better experience.07:26
tobberydbergI said earlier that I need to drop out at 0730 UTC .... but I can make one of you chair if you would like to continue discussing07:27
tobberydbergWill you be in vancouver puck? I might have asked you this previously as well07:27
fkrI'll jump out now. talk to you later. 07:28
puckI don't think you have. Unfortunately it is highly unlikely I will be there (would love to visit Canada though, I'm Canadian, just never been there)07:28
fkrpuck: then you and me are the remotees for the PTG ;) - so I'm not alone. that is good. 07:29
puckaye07:29
tobberydbergOk :-) Yea, nice country and Vancouver super nice city07:29
puckSeems that if two of you will be dropping out of the meeting, there isn't much point in me talking to myself. :)07:30
tobberydbergpuck and gtema ... will you continue the meeting or should I and it now?07:30
gtemaI would say end07:30
puckOh, two of us. I think we might as well end.07:30
tobberydbergOk, then I'll end the meeting now. We can continue discussion here even outside of meeting if needed07:31
gtemagreat07:31
tobberydbergTake care and thanks for today!07:31
tobberydberg#endmeeting07:31
opendevmeetMeeting ended Wed May 24 07:31:24 2023 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)07:31
opendevmeetMinutes:        https://meetings.opendev.org/meetings/publiccloud_sig/2023/publiccloud_sig.2023-05-24-07.03.html07:31
opendevmeetMinutes (text): https://meetings.opendev.org/meetings/publiccloud_sig/2023/publiccloud_sig.2023-05-24-07.03.txt07:31
opendevmeetLog:            https://meetings.opendev.org/meetings/publiccloud_sig/2023/publiccloud_sig.2023-05-24-07.03.log.html07:31
gtemahave a nice day folks07:31
puckLikewise, time to rustle up some dinner here.07:31
noonedeadpunksorry wasn't being in time, but yeah, alternate catalogs and it's filtering I'd say is public cloud topic for sure08:28
stenstadgtema: We have that implemented in our system, no endpoints enabled by default, and customer can enable the services (endpoints) they want via web interface. When they enable the service, we add the endpoint to keystone and also set up resource limits. Customers can only enable services if they have valid billing.12:13
stenstadI'm going to Vancouver, would love to chat about it there. Haven't been to the summit since Tokyo.12:14
fricklerstenstad: that sounds interesting, are you using keystone endpoint groups for that? also I assume that this is a closed-source implementation?12:46
stenstadYes, we're using endpoint groups with project_endpoint_group mappings. It has evolved over the years to adapt to Keystone changes. It's closed source in terms of it not really being anything special (I assume everyone is doing this?) and integrated in internal management system.12:50
stenstadAfter user has been thru registration process (custom workflow on horizon server), and account is activated by us (admin backend), domain gets enabled in Keystone. After they add billing option/get verified for credit (custom horizon panel) they are able to enable services. Enabling a service (defined in admin backend) will add all endpoint dependencies to enable that service, and also set up limits on the account.12:55
stenstadIn our admin backend we define a service with descriptions (shown to user), endpoint groups to add to project, roles to add to project, and dependencies on other services. I.e. the LB (Octavia + Amphora) service has dependencies on Compute service and Secrets (Barbican) service. Also tags for "hidden" services, default services (like keystone), beta or private/dev/testing services that are only available for cloud admins.13:01
stenstadOfcourse, this only affects the catalog, so you have to set quotas to 0 where you can..13:01
knikollao/14:30

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!