*** tosky has quit IRC | 00:17 | |
openstackgerrit | Merged openstack/election master: Omit leaderless list from TC election results https://review.opendev.org/c/openstack/election/+/779856 | 00:31 |
---|---|---|
openstackgerrit | Merged openstack/election master: Only associate preferred addresses with owners https://review.opendev.org/c/openstack/election/+/784600 | 00:31 |
openstackgerrit | Merged openstack/election master: Adding Feilong Wang for TC Candidacy https://review.opendev.org/c/openstack/election/+/784865 | 00:32 |
*** zaneb has quit IRC | 02:03 | |
*** evrardjp has quit IRC | 02:33 | |
*** evrardjp has joined #openstack-tc | 02:33 | |
*** vishalmanchanda has joined #openstack-tc | 03:57 | |
*** ralonsoh has joined #openstack-tc | 05:51 | |
*** e0ne has joined #openstack-tc | 05:57 | |
*** lpetrut has joined #openstack-tc | 06:02 | |
*** e0ne has quit IRC | 06:03 | |
*** slaweq has joined #openstack-tc | 06:37 | |
*** lpetrut has quit IRC | 06:40 | |
*** dklyle has quit IRC | 06:45 | |
*** rpittau|afk is now known as rpittau | 07:03 | |
*** andrewbonney has joined #openstack-tc | 07:14 | |
*** e0ne has joined #openstack-tc | 07:31 | |
*** tosky has joined #openstack-tc | 07:37 | |
*** tkajinam has quit IRC | 08:25 | |
*** tkajinam has joined #openstack-tc | 08:26 | |
*** kopecmartin has joined #openstack-tc | 08:59 | |
*** rpittau is now known as rpittau|bbl | 09:23 | |
*** kopecmartin has quit IRC | 11:51 | |
*** kopecmartin has joined #openstack-tc | 11:52 | |
*** zaneb has joined #openstack-tc | 12:29 | |
*** rpittau|bbl is now known as rpittau | 12:51 | |
*** lpetrut has joined #openstack-tc | 13:16 | |
openstackgerrit | Hervé Beraud proposed openstack/governance master: Making devstack-plugin-(amqp1|kafka) branchless https://review.opendev.org/c/openstack/governance/+/784544 | 14:30 |
*** dklyle has joined #openstack-tc | 14:52 | |
*** lpetrut has quit IRC | 14:54 | |
*** belmoreira has joined #openstack-tc | 14:58 | |
yoctozepto | \o/ | 15:01 |
*** kopecmartin has quit IRC | 15:01 | |
*** kopecmartin has joined #openstack-tc | 15:01 | |
openstackgerrit | Merged openstack/governance master: Making devstack-plugin-(amqp1|kafka) branchless https://review.opendev.org/c/openstack/governance/+/784544 | 15:03 |
openstackgerrit | Merged openstack/governance master: Switch Keystone to DPL https://review.opendev.org/c/openstack/governance/+/784102 | 15:04 |
*** andrewbonney has quit IRC | 15:22 | |
*** andrewbonney has joined #openstack-tc | 15:24 | |
*** timburke__ has joined #openstack-tc | 15:29 | |
*** timburke_ has quit IRC | 15:30 | |
*** lourot has quit IRC | 15:32 | |
*** belmoreira has quit IRC | 15:37 | |
*** lourot has joined #openstack-tc | 15:59 | |
noonedeadpunk | Hey! I wasn't really following here (probably had to), but is there any places where community goals are stated or you can suggest one? | 16:20 |
noonedeadpunk | I guess there is, the question is where it is:) I believe it's smth that has been discussed _a lot_ but enough efforts have been never made | 16:21 |
fungi | noonedeadpunk: https://governance.openstack.org/tc/goals/ outlines the process | 16:25 |
noonedeadpunk | oh, indeed, I guess evrardjp has created the repo with goals back then :) | 16:28 |
gmann | noonedeadpunk: you can propose the goals in this dir https://opendev.org/openstack/governance/src/branch/master/goals/proposed | 16:33 |
gmann | noonedeadpunk: this is example https://review.opendev.org/c/openstack/governance/+/759881 | 16:33 |
noonedeadpunk | gmann: fungi thanks, will follow template from policy-json-to-yaml | 16:34 |
noonedeadpunk | yeah, already found it :) | 16:34 |
gmann | and later we select the per cycle goal from proposed one | 16:34 |
*** rpittau is now known as rpittau|afk | 16:46 | |
noonedeadpunk | doh, I was thinking about implementing reader role across all projects, but once started to looking deeper, it seems this has been implemented in W without a goal :) | 17:22 |
*** timburke__ is now known as timburke | 17:23 | |
*** lbragstad has quit IRC | 17:25 | |
fungi | sometimes goals are just window dressing | 17:25 |
fungi | things *can* get done without one ;) | 17:25 |
noonedeadpunk | Yeah, it was bliueprint https://blueprints.launchpad.net/neutron/+spec/secure-rbac-roles :) | 17:25 |
noonedeadpunk | well, good to know) | 17:26 |
fungi | actually i think there was a goal | 17:26 |
noonedeadpunk | Can't grep in repo neither via topic nor via blueprint... | 17:26 |
fungi | yeah i'm not finding it either. i must have imagined it | 17:27 |
noonedeadpunk | but whatever - great that it's implemented and I won't be ashamed by writing bad goal :) | 17:27 |
fungi | i know the reader role was basically phase 1 of the rbac effort, maybe we only talked about making it a multi-phase goal | 17:28 |
gmann | noonedeadpunk: that work is done as part of policy popup team. | 17:30 |
gmann | noonedeadpunk: https://wiki.openstack.org/wiki/Consistent_and_Secure_Default_Policies_Popup_Team | 17:30 |
gmann | and we are going to discuss a lot on this topic in coming PTG also https://etherpad.opendev.org/p/policy-popup-xena-ptg | 17:31 |
gmann | in Wallaby cycle, many projects has implemented it but not all | 17:31 |
fungi | oh, right, we talked about making it a goal and then determined a pop-up team would suit better | 17:31 |
gmann | yeah | 17:31 |
gmann | based on progress and discussion in PTG we will see on possibility of making this as goal for Y cycle or so | 17:32 |
fungi | one of the outcomes of the pop-up team could have been poc in some services with a goal to have the other services complete the same work | 17:32 |
gmann | depends on how much work is pending | 17:32 |
noonedeadpunk | Well, looking at codesearch, looks like a really decent progress has been made | 17:32 |
gmann | yes | 17:33 |
noonedeadpunk | it's not everywhere reflected in docs or policy samples, but still it feels it should jsut work | 17:33 |
gmann | policy doc should have that, at least for nova it is there when I implemented in Ussuri cycle | 17:34 |
noonedeadpunk | ok, cool, thanks for the info! | 17:34 |
* noonedeadpunk drops draft | 17:34 | |
gmann | like this https://docs.openstack.org/nova/latest/configuration/policy.html | 17:35 |
gmann | you can search with 'Scope Types' field | 17:35 |
gmann | and in sample policy file too https://docs.openstack.org/nova/latest/configuration/sample-policy.html | 17:36 |
gmann | 'Intended scope(s)' | 17:36 |
noonedeadpunk | I think I more meant cinder | 17:36 |
fungi | noonedeadpunk: instead of writing a goal, now you can just help complete the implementation instead ;) | 17:36 |
gmann | noonedeadpunk: cinder is not yet finished. there are patch up but not merged in WALLABY | 17:37 |
noonedeadpunk | oh, hm, I just found that https://opendev.org/openstack/cinder/src/branch/master/cinder/policies/base.py#L40 so suggested it should reflect behaviour | 17:38 |
gmann | there were two blocker for cinder, 1. project-id in endpoint 2. testing strategy | 17:38 |
noonedeadpunk | fair | 17:39 |
gmann | that is only common persona definition in base class but policy still not moved to scope_type or reader rols | 17:39 |
gmann | noonedeadpunk: we are going to discuss such blocker/progress in PTG in various sessions. if you have something you want to discuss from usage point of view in openstack-ansible or so then feel free to add topic in this etherpad https://etherpad.opendev.org/p/policy-popup-xena-ptg | 17:41 |
gmann | how to use the scope_type is pretty hot topic for this PTG and something we all are looking forward to solve/consolidate | 17:42 |
noonedeadpunk | I think I'm more interested from jsut regular operator prespective. Not sure that have more input then you already have though | 17:43 |
gmann | basically topic of this etherpad https://etherpad.opendev.org/p/consuming-system-scope | 17:43 |
noonedeadpunk | I will try to join anyway:) | 17:43 |
gmann | perfect, that will help | 17:43 |
fungi | as an interested user you can at least give your perspective on relative importance of the feature or user-facing implementation details | 17:44 |
gmann | usage perspective we will cover in nova+keystone session on Thursday 5-16UTC in keystone room - https://ethercalc.net/oz7q0gds9zfi | 17:44 |
gmann | 15-16 UTC | 17:44 |
* noonedeadpunk started filling in PTG calendar | 17:45 | |
gmann | noonedeadpunk: operator feedback is something we are looking forward to have. we do not have much feedback yet as not many project implemented it till Wallaby | 17:46 |
*** slaweq has quit IRC | 17:47 | |
noonedeadpunk | gotcha | 17:49 |
*** timburke has quit IRC | 17:56 | |
*** timburke has joined #openstack-tc | 17:57 | |
*** andrewbonney has quit IRC | 18:13 | |
*** lbragstad has joined #openstack-tc | 18:19 | |
*** e0ne has quit IRC | 18:35 | |
*** ralonsoh has quit IRC | 19:50 | |
*** slaweq has joined #openstack-tc | 19:53 | |
*** vishalmanchanda has quit IRC | 20:16 | |
*** mgagne has joined #openstack-tc | 20:22 | |
spotz | We probably need to work on starting to recruit for ops meetup team. There's just Chris Morgan and I left | 20:35 |
*** spotz has quit IRC | 20:38 | |
*** lbragstad has quit IRC | 21:32 | |
*** zaneb has quit IRC | 21:37 | |
*** spotz has joined #openstack-tc | 21:38 | |
*** slaweq has quit IRC | 21:57 | |
*** ianw_pto is now known as ianw | 22:14 | |
*** lbragstad has joined #openstack-tc | 22:15 | |
*** tosky has quit IRC | 23:11 |
Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!