Monday, 2016-03-14

*** markvoelker has quit IRC00:00
openstackgerritPaul Van Eck proposed openstack/refstack: Refactor capabilities  https://review.openstack.org/29217900:11
*** markvoelker has joined #refstack01:56
*** markvoelker has quit IRC02:00
*** markvoelker has joined #refstack03:57
*** markvoelker has quit IRC04:01
*** markvoelker has joined #refstack05:58
*** markvoelker has quit IRC06:02
*** markvoelker has joined #refstack07:58
*** markvoelker has quit IRC08:03
*** pilgrimstack has joined #refstack08:43
*** pilgrimstack has quit IRC08:46
*** pilgrimstack has joined #refstack08:50
*** markvoelker has joined #refstack09:59
*** markvoelker has quit IRC10:03
*** dmellado has joined #refstack10:59
dmelladoHi hogepodge, I've a question, in the lists from http://git.openstack.org/cgit/openstack/defcore/plain/2016.01/2016.01.required.txt11:06
dmelladoit states two tests that aren't really in that form anymore11:06
dmellado+ tempest.api.image.v2.test_images.ListImagesTest.test_list_no_params11:06
dmelladoand11:06
dmellado+ empest.api.compute.servers.test_servers_negative.ServersNegativeTestJSON.test_rebuild_deleted_server11:06
dmelladothis test doesn't exist:11:08
dmellado tempest.api.image.v2.test_images.ListImagesTest.test_list_no_params11:08
dmelladois istill 2016.1 a WIP ?11:08
dmelladoand in this case  tempest.api.compute.servers.test_servers_negative.ServersNegativeTestJSON.test_rebuild_deleted_server11:09
dmelladoit looks like it got moved to test_rebuild_reboot_deleted_server11:10
*** markvoelker has joined #refstack12:00
*** markvoelker has quit IRC12:04
*** edmondsw has joined #refstack12:31
*** markvoelker has joined #refstack12:51
*** cjvolzka has joined #refstack13:07
*** esker has quit IRC13:13
*** esker has joined #refstack13:14
*** krotscheck has joined #refstack13:32
*** pilgrimstack1 has joined #refstack14:54
*** pilgrimstack has quit IRC14:54
*** esker has quit IRC15:15
hogepodgedmellado: sometimes tests get moved, you should search against the idempotent ID in Tempest to find the new name if they have.16:15
dmelladohogepodge: but shouldn't the list be changed too then?16:16
dmelladoi.e. https://refstack.openstack.org/#/results/93b8abbf-6563-43ff-8ec9-fd8ca061d3cf16:16
openstackgerritPaul Van Eck proposed openstack/refstack: Refactor capabilities  https://review.openstack.org/29217916:16
hogepodgedmellado: we rely upon updates to the standard that include aliases to account for moved tests. I can take a look later today and submit the review to gerrit16:18
dmelladohogepodge: that'd be great, if you tell me when do you keep the gerrit for the test list maybe I could even send the patch myself16:19
dmelladohogepodge: yep, different name but same id16:25
dmellado169     @test.idempotent_id('98fa0458-1485-440f-873b-fe7f0d714930')16:25
dmellado170     def test_rebuild_reboot_deleted_server(self):16:25
dmelladowould you need to change the test list then?16:25
dmelladothis is all on the commit 551e1a9701e7e2b3edf6d49a2eaa62b7ab2435ad from tempest that refstack-client uses16:27
hogepodgedmellado: we add an alias field to the test entry for the active guidelines that has the new name of the test16:51
openstackgerritCatherine Diep proposed openstack/refstack: REST API specification for product management.  https://review.openstack.org/29252617:35
*** pvaneck has joined #refstack17:57
catherineDdmellado: RefStack is working on providing an API for listing of the required test list per specific Guideline file including alias ...18:00
*** pilgrimstack1 has quit IRC18:11
*** pilgrimstack has joined #refstack18:12
catherineDhogepodge: dmellado: I submitted this bug https://bugs.launchpad.net/refstack/+bug/155710918:38
openstackLaunchpad bug 1557109 in refstack "RefStack UI should display test alias names" [Undecided,Confirmed]18:38
*** eglute_s is now known as eglute18:39
*** esker has joined #refstack19:20
openstackgerritPaul Van Eck proposed openstack/refstack: Add link to pubkey/signature instructions  https://review.openstack.org/29256019:26
openstackgerritPaul Van Eck proposed openstack/refstack: Add link to pubkey/signature instructions  https://review.openstack.org/29256019:30
catherineDhi20:02
*** alexandrelevine has joined #refstack20:02
*** elmiko has joined #refstack20:02
sslypushenkohi20:03
elmikohi, i just happened to catch the end of your meeting, but i also participate with the security project. was there a question about how we can help?20:03
catherineDelmiko: we have an email that discuss about the subject ... I guess I will need to send it to the distribution list20:04
catherineDbut we can discuss here20:04
catherineDbackground info:20:04
catherineD1) When a user registers at RefStack, RefStack does not request any user information input from the user,  Instead, RefStack redirects the registration process to OpenstackId Identity Provider ( https://openstackid.org/  ) and acquires three pieces of  user information ( Full Name, email, OpenID )  from the OpenstackId Identity Provider.20:05
catherineD2)  OpenstackId Identity Provider ( https://openstackid.org/  ) treats email as private information.  You will not find email or OpenID information on any member's public profile on https://www.openstack.org/community/members/ .  Furthermore, if you look at your own profile on https://www.openstack.org/profile/ , you will find that email information is listed under the "private information" sectio20:05
catherineD3) Since OpenstackId Identity Provider is the source of the user information of RefStack,  RefStack should respect and not relax the privacy policy set  by its source .20:05
catherineDWe would like to get answer for the following:20:06
*** rockyg has joined #refstack20:06
catherineD1)  Should a regular user ( authenticated or anonymous) be able to list all users in RefStack?20:06
catherineDIf the answer is yes, then which user information should be returned (Full name, email, OpenID)?20:06
alexandrelevine1) Not anonymous, though20:06
catherineD2) Or  ONLY foundation members can list all users in RefStack?20:07
elmikogood questions20:07
catherineDNote:  the user information for review.openstack.org is set in https://review.openstack.org/#/settings/web-identities and not from OpenstackId Identity Provider.20:07
elmikoi'd need to read up on refstack a little more, but i think this is something that would be worth bringing up on the dev list with the [security] tag in the subject, i can also bring some attention to it at our meeting this week20:07
catherineDon review.openstack.org email seems to be public data20:08
catherineDelmiko: good suggestion20:08
elmikoseems like just listing the users isn't so bad, emails might be another issue20:08
alexandrelevineelmiko: A little more on background. We need to have Vendor to add co-admins by choosing them somehow.20:08
elmikohmm, interesting20:08
catherineDelmiko: we just want to be careful with the data that we fetch from some where20:08
elmikocatherineD: +120:09
elmikodo you have a link to the email?20:09
alexandrelevineelmiko: What do you mean "have a link"?20:09
catherineDso far it is a private email among us ... I can send it out to the distribution list20:09
elmikoto the archived email message that catherineD references earlier. (or is that not written yet)20:09
elmikoah, cool20:09
elmikocatherineD: definitely send it to the list, and if nothing comes up i will make sure to bring it up at our meeting on thursday20:10
catherineDI just want to be careful and responsible with data20:10
elmikocatherineD: +120:10
catherineDelmiko: will do thank you20:10
elmikocatherineD: np, thanks for bringing it up =)20:10
alexandrelevinethanks, bye.20:11
catherineDthank you everyone ... does not matter what the outcome is .... we show that we care about what we do ... :-)20:11
*** alexandrelevine has quit IRC20:11
sslypushenkocatherineD:  also we can do lookup only by user name, but it is less handy20:11
catherineDsslypushenko: I think so20:12
sslypushenkoalexandrelevine We can right now implement openid lookup by names right now and add email later we get an agreement here20:14
sslypushenkocatherineD: I see that user can control a visibility of email  on openstackid.org20:16
sslypushenkoso, it looks like we should stick to idea that only user names and openids can be shared without any security impact20:18
catherineDyea I think so20:19
catherineDI have an other idea20:19
catherineDmaybe the user can request for adding user to vendor .. instead of vendor admin to add user to vendor20:20
*** edmondsw has quit IRC20:35
*** cjvolzka has left #refstack21:24
*** markvoelker has quit IRC22:39
*** rockyg has quit IRC23:07

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!