*** y_sawai has joined #openstack-security | 00:00 | |
*** zul has joined #openstack-security | 00:11 | |
*** zul has quit IRC | 00:20 | |
*** zul has joined #openstack-security | 00:21 | |
*** y_sawai has quit IRC | 01:15 | |
*** y_sawai has joined #openstack-security | 01:46 | |
*** bpokorny has joined #openstack-security | 02:03 | |
*** bren has quit IRC | 02:29 | |
*** bren has joined #openstack-security | 02:41 | |
*** dave-mccowan has quit IRC | 03:27 | |
*** edtubill has quit IRC | 03:41 | |
*** jass93_ has joined #openstack-security | 04:02 | |
*** jass93 has quit IRC | 04:04 | |
*** bpokorny has quit IRC | 04:41 | |
*** bren has quit IRC | 04:56 | |
*** barra204 has quit IRC | 05:13 | |
*** pcaruana has quit IRC | 06:02 | |
*** openstackgerrit has quit IRC | 06:17 | |
*** openstackgerrit_ is now known as openstackgerrit | 06:17 | |
*** openstackgerrit_ has joined #openstack-security | 06:18 | |
*** openstackgerrit_ is now known as openstackgerrit | 06:18 | |
*** openstackgerrit_ has joined #openstack-security | 06:19 | |
*** rcernin has joined #openstack-security | 06:20 | |
*** austin987 has joined #openstack-security | 06:57 | |
openstackgerrit | OpenStack Proposal Bot proposed openstack/security-doc: Updated from openstack-manuals https://review.openstack.org/295093 | 07:07 |
---|---|---|
*** sergio__ has joined #openstack-security | 07:34 | |
openstackgerrit | Merged openstack/security-doc: Updated from openstack-manuals https://review.openstack.org/295093 | 07:38 |
*** y_sawai has quit IRC | 07:48 | |
*** y_sawai has joined #openstack-security | 07:48 | |
*** tesseract has joined #openstack-security | 07:50 | |
*** tesseract is now known as Guest9441 | 07:51 | |
*** liverpooler has joined #openstack-security | 08:07 | |
*** liverpooler has quit IRC | 08:28 | |
*** liverpooler has joined #openstack-security | 08:29 | |
*** ccneill has joined #openstack-security | 08:41 | |
*** y_sawai has quit IRC | 08:41 | |
*** hyakuhei has joined #openstack-security | 08:44 | |
*** ccneill has quit IRC | 08:46 | |
*** liverpooler has quit IRC | 08:53 | |
*** liverpooler has joined #openstack-security | 08:53 | |
*** shohel has joined #openstack-security | 09:18 | |
*** hyakuhei has quit IRC | 09:30 | |
*** shohel has quit IRC | 09:34 | |
*** y_sawai has joined #openstack-security | 09:39 | |
*** shohel has joined #openstack-security | 09:46 | |
*** y_sawai has quit IRC | 09:53 | |
*** shohel has quit IRC | 09:56 | |
*** shohel has joined #openstack-security | 10:33 | |
*** hyakuhei has joined #openstack-security | 10:33 | |
*** hyakuhei has quit IRC | 10:43 | |
*** shohel1 has joined #openstack-security | 11:01 | |
*** shohel2 has joined #openstack-security | 11:03 | |
*** shohel has quit IRC | 11:03 | |
*** shohel1 has quit IRC | 11:06 | |
*** edmondsw has joined #openstack-security | 11:27 | |
*** dave-mccowan has joined #openstack-security | 11:47 | |
openstackgerrit | Tim Kelsey proposed openstack/bandit: Improving config handling https://review.openstack.org/295244 | 12:02 |
openstackgerrit | Tim Kelsey proposed openstack/bandit: Delete the config, we dont need it now and its also invalid https://review.openstack.org/295254 | 12:11 |
*** tkelsey has joined #openstack-security | 12:11 | |
openstackgerrit | Tim Kelsey proposed openstack/bandit: Improving config handling https://review.openstack.org/295244 | 12:24 |
openstackgerrit | Tim Kelsey proposed openstack/bandit: Delete the config, we dont need it now and its also invalid https://review.openstack.org/295254 | 12:25 |
*** sergio__ has quit IRC | 12:40 | |
*** sergio__ has joined #openstack-security | 12:41 | |
openstackgerrit | Tim Kelsey proposed openstack/bandit: Delete the config, we dont need it now and its also invalid https://review.openstack.org/295254 | 12:51 |
*** tkelsey has quit IRC | 12:59 | |
*** cleong has joined #openstack-security | 12:59 | |
*** ninag has joined #openstack-security | 13:00 | |
*** ametts has joined #openstack-security | 13:21 | |
*** jmckind has joined #openstack-security | 13:23 | |
*** shohel2 has quit IRC | 13:24 | |
*** shohel has joined #openstack-security | 13:24 | |
*** hyakuhei has joined #openstack-security | 13:24 | |
*** shohel has quit IRC | 13:24 | |
*** hyakuhei has quit IRC | 13:25 | |
*** jmckind_ has joined #openstack-security | 13:27 | |
*** jmckind has quit IRC | 13:30 | |
*** hyakuhei has joined #openstack-security | 13:49 | |
*** sigmavirus24_awa is now known as sigmavirus24 | 13:51 | |
*** dave-mccowan has quit IRC | 13:55 | |
*** BigWillie has joined #openstack-security | 13:55 | |
*** avarner_ has joined #openstack-security | 13:58 | |
*** cjschaef has joined #openstack-security | 14:03 | |
*** pcaruana has joined #openstack-security | 14:05 | |
*** hyakuhei has quit IRC | 14:07 | |
*** hyakuhei has joined #openstack-security | 14:10 | |
*** dave-mccowan has joined #openstack-security | 14:12 | |
*** alejandrito has joined #openstack-security | 14:18 | |
*** hyakuhei has quit IRC | 14:33 | |
*** hyakuhei has joined #openstack-security | 14:33 | |
*** avarner_ has quit IRC | 14:34 | |
*** tmcpeak has joined #openstack-security | 14:39 | |
*** avarner_ has joined #openstack-security | 14:43 | |
*** hyakuhei has quit IRC | 14:53 | |
*** mvaldes has joined #openstack-security | 14:54 | |
*** gmurphy has joined #openstack-security | 15:10 | |
*** cjschaef has quit IRC | 15:26 | |
*** cjschaef has joined #openstack-security | 15:26 | |
*** alejandrito has quit IRC | 15:47 | |
*** mvaldes has left #openstack-security | 15:47 | |
*** alejandrito has joined #openstack-security | 15:49 | |
*** bpokorny has joined #openstack-security | 15:49 | |
*** austin987 has quit IRC | 15:49 | |
*** jass93 has joined #openstack-security | 15:49 | |
*** jass93_ has quit IRC | 15:50 | |
*** alejandrito has quit IRC | 15:57 | |
*** alejandrito has joined #openstack-security | 15:59 | |
*** rcernin has quit IRC | 15:59 | |
*** liverpooler has quit IRC | 16:00 | |
*** browne has joined #openstack-security | 16:01 | |
*** jass93 has quit IRC | 16:05 | |
*** jass93 has joined #openstack-security | 16:08 | |
*** ccneill has joined #openstack-security | 16:21 | |
*** y_sawai has joined #openstack-security | 16:21 | |
*** pcaruana has quit IRC | 16:25 | |
*** Guest9441 has quit IRC | 16:30 | |
*** pdesai has joined #openstack-security | 16:33 | |
*** ccneill has quit IRC | 16:34 | |
*** hyakuhei has joined #openstack-security | 16:39 | |
*** ccneill has joined #openstack-security | 16:42 | |
bknudson | do we have a list for what projects / repos are using bandit? | 16:45 |
ccneill | bknudson: there used to be a script in /scripts/ for that.. not sure where it went | 16:47 |
*** agireud has quit IRC | 16:49 | |
*** agireud has joined #openstack-security | 16:52 | |
hyakuhei | tmcpeak ? | 16:57 |
hyakuhei | ^^ | 16:57 |
tmcpeak | yo | 16:57 |
tmcpeak | hyakuhei: what's up | 16:57 |
tmcpeak | ahh | 16:57 |
hyakuhei | Is there a list of projects that use Bandit ? | 16:57 |
tmcpeak | we have tooling bundled with bandit that finds it | 16:57 |
tmcpeak | but we don't maintain a list | 16:57 |
tmcpeak | bknudson: if you run tools/openstack_coverage.py it will list projects with Bandit jobs | 16:59 |
tmcpeak | it scrapes infra | 16:59 |
*** sicarie has joined #openstack-security | 17:00 | |
*** mvaldes1 has joined #openstack-security | 17:00 | |
sicarie | hello | 17:00 |
elmiko | yo/ | 17:00 |
bknudson | tmcpeak: neat, thanks | 17:00 |
tmcpeak | sure | 17:00 |
bknudson | and get "AttributeError: 'dict' object has no attribute 'endswith'" | 17:01 |
tmcpeak | yeah I just noticed that | 17:01 |
tmcpeak | that's new and fun | 17:01 |
tmcpeak | didn't used to do that | 17:01 |
sicarie | bknudson tmcpeak: don’t want to shout all over your convo - is this a good time for us to have sec-guide meeting? | 17:02 |
tmcpeak | yep yep | 17:02 |
bknudson | don't let us stop you | 17:02 |
sicarie | cool, thanks! | 17:02 |
sicarie | you agreed to that so readily I didn’t have all my windows open :P | 17:03 |
sicarie | pdesai: ping | 17:04 |
elmiko | haha | 17:05 |
*** sicarie has quit IRC | 17:06 | |
*** sicarie has joined #openstack-security | 17:06 | |
sicarie | whoa, sorry about that, my computer just crashed hard | 17:06 |
elmiko | no worries | 17:06 |
sicarie | So yeah, as soon as I can pull it back up, we do have one new bug | 17:07 |
elmiko | ah, ok | 17:07 |
sicarie | Doesn’t look like we have any pending reviews | 17:07 |
sicarie | https://bugs.launchpad.net/openstack-manuals/+bug/1560088 | 17:08 |
openstack | Launchpad bug 1560088 in openstack-manuals "Signed image validation" [Undecided,New] - Assigned to Bruce Benjamin (bruce-benjamin) | 17:08 |
elmiko | maybe a medium? | 17:08 |
pdesai | hey guys | 17:09 |
elmiko | hi pdesai | 17:09 |
sicarie | ah pdesai welcome! | 17:09 |
pdesai | thanks :) | 17:09 |
sicarie | I was assuming you were here already after my computer crashed | 17:09 |
sicarie | sorry! | 17:09 |
pdesai | yup i was, but was distracted :) | 17:09 |
elmiko | i'll add a question to that bug, is the information wrong, out of date, or absent? | 17:10 |
sicarie | So looking at it, it looks like he wants to advertise it a bit more | 17:10 |
sicarie | s/advertise/highlight/ | 17:10 |
elmiko | gotcha | 17:10 |
* sicarie is thinking blog post | 17:11 | |
elmiko | oh, like make a blog post to talk about the feature and then point to the guide? | 17:11 |
sicarie | hyakuhei ^ signed image validation addition to sec-guide may be worth a blog post? | 17:11 |
sicarie | Yeah | 17:11 |
sicarie | But I do believe the question should go in the bug: what did he have in mind | 17:11 |
hyakuhei | sicarie: yup for sure. | 17:11 |
sicarie | hyakuhei: +1 I’ll take a crack at a quick blurb | 17:12 |
openstackgerrit | Jamie Finnigan proposed openstack/bandit: Fix OpenStack coverage tool https://review.openstack.org/295413 | 17:13 |
sicarie | so my opinion on importance is “undecided” at this point | 17:13 |
sicarie | If there’s no info to be added, then popularizing it with a blog post or something would cover the bug | 17:13 |
elmiko | agreed about undecided | 17:14 |
sicarie | Or if he’s talking about re-arranging sections, I’m okay with that as well, as this is a pretty good feature to have | 17:14 |
elmiko | yea, that's why i added the question | 17:14 |
sicarie | and ‘incomplete’ in status? | 17:14 |
elmiko | +1 | 17:14 |
sicarie | ah, you alrady hit it | 17:14 |
sicarie | thanks! | 17:14 |
elmiko | i can update the status too, 1sec | 17:14 |
sicarie | pdesai: what do you think on the status of https://bugs.launchpad.net/openstack-manuals/+bug/1560088 | 17:15 |
openstack | Launchpad bug 1560088 in openstack-manuals "Signed image validation" [Undecided,Incomplete] - Assigned to Bruce Benjamin (bruce-benjamin) | 17:15 |
elmiko | definitely need to know, "what are we doing here?" | 17:15 |
chair6 | @bknudson, that review should fix it for now but current output is at http://paste.openstack.org/show/491335/ if you need | 17:15 |
pdesai | yup need to know the action on signed image validation | 17:16 |
*** tkelsey has joined #openstack-security | 17:17 | |
sicarie | And then the other “incomplete” bugs look valid, but have outstanding questions - I’ll see if I can bug Mike to update the Audit one | 17:18 |
*** yarkot1 has quit IRC | 17:18 | |
*** z has quit IRC | 17:18 | |
sicarie | There are two in-progress | 17:18 |
openstackgerrit | Travis McPeak proposed openstack/bandit: More resiliant OpenStack coverage with unexpected format https://review.openstack.org/295416 | 17:18 |
sicarie | pdesai: in your opinion as the person who filed the bug, is there more to do on: https://bugs.launchpad.net/openstack-manuals/+bug/1485717 ? | 17:18 |
openstack | Launchpad bug 1485717 in openstack-manuals "Introduction in Security Guide - Issues found during migration to RST" [Low,In progress] - Assigned to venkatamahesh (venkatamaheshkotha) | 17:18 |
pdesai | yup | 17:19 |
sicarie | Cool, so I’ll leave that alone | 17:19 |
sicarie | The other one just had a partial merged last week, so I’ll let that sit fora little bit too | 17:19 |
sicarie | if you’re curious: https://bugs.launchpad.net/openstack-manuals/+bug/1342368 | 17:20 |
openstack | Launchpad bug 1342368 in openstack-manuals "Security Guide - Conventions for referring to people involved in cloud" [Wishlist,In progress] - Assigned to Lana (loquacity) | 17:20 |
sicarie | pdesai: on the subject of creating a new pdf - i saw you emailed andreas but there is no current tooling | 17:20 |
*** z has joined #openstack-security | 17:20 | |
pdesai | yeah there is no tool | 17:20 |
pdesai | i played with rst2pdf but it produces pdf per rst page | 17:21 |
sicarie | Yep! | 17:21 |
openstackgerrit | Travis McPeak proposed openstack/bandit: More resiliant OpenStack coverage with unexpected format https://review.openstack.org/295416 | 17:21 |
pdesai | we want a single pdf out of all the rst pages | 17:21 |
pdesai | i am looking at the openstack doc tools and also rst2pdf and see if we can use both of these tools together to produce a single pdf | 17:22 |
sicarie | Yeah, I think there’s going to need to be some sort of tooling to get everything in a single file, in order, with page breaks in the right spots. That’s what I was going to try to sit down and figure out, but have had a few fire drills interrupt me | 17:22 |
sicarie | awesome! | 17:22 |
elmiko | makes we wonder if we need to make some sort of template for a single-page html version? | 17:22 |
elmiko | possibly something the docs team has considered | 17:23 |
sicarie | yeah, I think the tooling to get everything in a single file would be useful to mroe than one project | 17:23 |
*** yarkot has joined #openstack-security | 17:23 | |
sicarie | well, it’s definitely something that’s on my list if we get the time | 17:24 |
sicarie | s/we/i/ | 17:24 |
* sicarie cannot type today | 17:24 | |
elmiko | right, i'm thinking about the "old days" when online docs had links like "single page html" or "multiple page html" etc... | 17:24 |
sicarie | yeah | 17:24 |
pdesai | yeah that is one of the ways to achieve it, every option boils down to how we resolve references to other rst pages or sections | 17:24 |
elmiko | +1 | 17:24 |
sicarie | yep | 17:24 |
elmiko | definitely a chance to interface with the docs team | 17:25 |
pdesai | i am going to spend some more time this week and see if we can find any solution, i am off next week, i will send email to you guys with my findings | 17:25 |
sicarie | awesome, thanks! | 17:25 |
sicarie | pdesai: did you have any pending reviews I missed or anything else to discuss? | 17:26 |
elmiko | thanks pdesai, hope you are doing something fun ;) | 17:26 |
*** agireud has quit IRC | 17:26 | |
sicarie | +1 | 17:26 |
pdesai | nope, but i am going to have one on identity tokens today, finishing it up | 17:27 |
pdesai | yup elmiko :) | 17:27 |
elmiko | \o/ | 17:27 |
sicarie | awesome | 17:27 |
sicarie | we’ll be looking for that | 17:27 |
sicarie | elmiko: did you have anything? | 17:27 |
elmiko | i've got some internal priorities that are bubbling up, so i'm good for reviews and whatnot but otherwise might be a little distracted :/ | 17:27 |
sicarie | sure | 17:28 |
*** agireud has joined #openstack-security | 17:28 | |
sicarie | cool - thanks everyone! | 17:28 |
elmiko | thanks sicarie ! | 17:28 |
sicarie | pdesai: enjoy your time off! | 17:28 |
pdesai | thanks sicarie | 17:28 |
pdesai | thanks elmiko | 17:28 |
*** agireud has quit IRC | 17:29 | |
*** mvaldes1 has quit IRC | 17:29 | |
*** agireud has joined #openstack-security | 17:31 | |
*** tkelsey has quit IRC | 17:38 | |
*** tkelsey has joined #openstack-security | 17:38 | |
*** y_sawai has quit IRC | 17:51 | |
openstackgerrit | Merged openstack/bandit: Fix OpenStack coverage tool https://review.openstack.org/295413 | 17:52 |
*** jass93 has quit IRC | 17:53 | |
*** bpokorny has quit IRC | 18:00 | |
*** salv-orlando has joined #openstack-security | 18:02 | |
bknudson | thanks ^ | 18:08 |
*** ccneill has quit IRC | 18:11 | |
*** y_sawai has joined #openstack-security | 18:12 | |
*** y_sawai has quit IRC | 18:12 | |
*** y_sawai has joined #openstack-security | 18:13 | |
*** ccneill has joined #openstack-security | 18:17 | |
*** jass93 has joined #openstack-security | 18:18 | |
*** bpokorny has joined #openstack-security | 18:22 | |
*** mvaldes has joined #openstack-security | 18:24 | |
*** sicarie has quit IRC | 18:31 | |
*** hyakuhei has quit IRC | 18:35 | |
*** jass93 has quit IRC | 18:36 | |
*** mvaldes has left #openstack-security | 18:37 | |
*** jass93 has joined #openstack-security | 18:39 | |
*** hyakuhei has joined #openstack-security | 18:41 | |
*** hyakuhei has quit IRC | 18:42 | |
*** hyakuhei has joined #openstack-security | 18:44 | |
*** hyakuhei has quit IRC | 18:44 | |
*** jass93_ has joined #openstack-security | 18:50 | |
*** jass93 has quit IRC | 18:51 | |
*** jass93_ has quit IRC | 19:03 | |
*** jass93 has joined #openstack-security | 19:05 | |
*** dave-mccowan has quit IRC | 19:10 | |
*** mvaldes has joined #openstack-security | 19:28 | |
*** dave-mccowan has joined #openstack-security | 19:36 | |
*** pcaruana has joined #openstack-security | 20:21 | |
*** jass93 has quit IRC | 20:23 | |
*** alejandrito has quit IRC | 20:25 | |
*** alejandrito has joined #openstack-security | 20:31 | |
*** cleong has quit IRC | 20:31 | |
*** austin987 has joined #openstack-security | 20:34 | |
*** jass93 has joined #openstack-security | 20:34 | |
*** pdesai has quit IRC | 20:36 | |
*** BigWillie has quit IRC | 20:51 | |
*** alejandrito has quit IRC | 20:57 | |
*** alejandrito has joined #openstack-security | 20:58 | |
*** mvaldes has quit IRC | 21:03 | |
*** mvaldes has joined #openstack-security | 21:09 | |
*** tkelsey has quit IRC | 21:10 | |
*** cjschaef has quit IRC | 21:43 | |
*** mvaldes1 has joined #openstack-security | 21:53 | |
*** jass93 has quit IRC | 21:54 | |
*** mvaldes has quit IRC | 21:55 | |
*** y_sawai has quit IRC | 22:03 | |
*** pcaruana has quit IRC | 22:06 | |
*** sigmavirus24 is now known as sigmavirus24_awa | 22:13 | |
*** tmcpeak has quit IRC | 22:13 | |
*** mvaldes1 has quit IRC | 22:19 | |
*** avarner_ has quit IRC | 22:20 | |
*** tmcpeak has joined #openstack-security | 22:24 | |
*** bpokorny has quit IRC | 22:25 | |
*** pdesai has joined #openstack-security | 22:27 | |
*** bpokorny has joined #openstack-security | 22:31 | |
*** alejandrito has quit IRC | 22:32 | |
*** ninag has quit IRC | 22:33 | |
*** ninag has joined #openstack-security | 22:33 | |
*** bpokorny has quit IRC | 22:37 | |
*** pdesai has quit IRC | 22:38 | |
*** ninag has quit IRC | 22:38 | |
*** edmondsw has quit IRC | 22:59 | |
*** ametts has quit IRC | 23:00 | |
*** openstackgerrit has quit IRC | 23:03 | |
*** openstackgerrit_ is now known as openstackgerrit | 23:03 | |
*** openstackgerrit has quit IRC | 23:03 | |
*** openstackgerrit_ has joined #openstack-security | 23:03 | |
*** openstackgerrit_ is now known as openstackgerrit | 23:04 | |
*** openstackgerrit_ has joined #openstack-security | 23:08 | |
*** jass93 has joined #openstack-security | 23:30 | |
*** bpokorny has joined #openstack-security | 23:41 |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!