Friday, 2025-08-01

gmaanafaik, nova is the first one to add tempest coverager for RBAC at least for existing tests to move to new defaults. I know there are some rbac test in cinder and keystone tempest plugins but those are checking access positive and negative testing at DB layer00:24
gmaanat some point, we need to move all tempest tests to new defaults (least access role) which is in my todo list00:25
*** mhen_ is now known as mhen01:43
opendevreviewDouglas Mendizábal proposed openstack/devstack master: Set password regex for security compliance  https://review.opendev.org/c/openstack/devstack/+/95611104:17
opendevreviewMerged openstack/tempest master: Add new config option for nova policy available defaults  https://review.opendev.org/c/openstack/tempest/+/95326504:21
gibiit seem the openstacksdk-functional-devstack job is failing constantly and blocking the gate https://zuul.opendev.org/t/openstack/builds?job_name=openstacksdk-functional-devstack&skip=012:46
gibi    openstack.exceptions.SDKException: Image creation failed: 'latin-1' codec can't encode character '\u2019' in position 662: ordinal not in range(256)12:46
gibiin openstack.tests.functional.image.v2.test_image.TestImage.test_tags12:46
gibiit seems it is started failing earier today12:48
fricklerstephenfin: ^^ can you take a look? https://review.opendev.org/c/openstack/openstacksdk/+/910218 looks maybe related just from timing and touched code, though the job was passing on that change13:08
stephenfinlooking13:09
stephenfinyeah that fails locally. wtf did it not fail in the gate...13:12
stephenfingibi: frickler: apparently it's this change 😅 https://review.opendev.org/c/openstack/openstacksdk/+/95632913:21
stephenfinah, we consume CONTRIBUTING.rst as part of the image test. TIL.13:24
fricklerfancy. also I spot a wrong project name in that change13:27
gibistephenfin: thanks for taking a look13:30
stephenfinhttps://review.opendev.org/c/openstack/openstacksdk/+/95636913:34
fricklerthx. another point to note is that devstack declares all *.rst files as irrelevant, which is why the functional job wasn't run on the change. maybe using some dedicated data file might be better?14:16
stephenfingood point14:28
gmaanyeah. As this is running in many projects gatre, it make sense to run it in \sdk all changes, just for safer side.15:58

Generated by irclog2html.py 4.0.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!