| *** rajpatel1 has joined #osic | 00:03 | |
| *** rajpatel has quit IRC | 00:03 | |
| *** rajpatel1 has quit IRC | 00:06 | |
| *** ccneill has quit IRC | 00:15 | |
| *** asettle has joined #osic | 00:50 | |
| *** asettle has quit IRC | 00:55 | |
| *** cathrich_ has joined #osic | 01:35 | |
| *** cathrichardson has quit IRC | 01:35 | |
| *** fnaval has joined #osic | 01:35 | |
| *** asettle has joined #osic | 01:52 | |
| *** adrian_otto has quit IRC | 01:54 | |
| *** valw has joined #osic | 01:54 | |
| *** asettle has quit IRC | 01:56 | |
| *** ccneill has joined #osic | 02:12 | |
| *** ccneill has quit IRC | 02:17 | |
| *** rloo has quit IRC | 02:22 | |
| *** valw has quit IRC | 02:50 | |
| *** asettle has joined #osic | 02:52 | |
| *** asettle has quit IRC | 02:57 | |
| *** valw has joined #osic | 03:12 | |
| *** john-davidge has joined #osic | 03:22 | |
| *** pramodrj07 has quit IRC | 03:25 | |
| *** PramodJayathirth has quit IRC | 03:25 | |
| *** john-davidge has quit IRC | 03:26 | |
| *** knangia has quit IRC | 03:30 | |
| *** asettle has joined #osic | 03:53 | |
| *** asettle has quit IRC | 03:58 | |
| *** fnaval has quit IRC | 04:08 | |
| *** ccneill has joined #osic | 04:14 | |
| *** ccneill has quit IRC | 04:18 | |
| *** JRobinson__ is now known as JRobinson__afk | 04:23 | |
| *** cathrich_ has quit IRC | 04:26 | |
| *** cathrichardson has joined #osic | 04:26 | |
| *** cathrichardson has quit IRC | 04:31 | |
| *** adrian_otto has joined #osic | 04:41 | |
| *** valw has quit IRC | 04:43 | |
| *** dfflanders has quit IRC | 04:48 | |
| *** JRobinson__afk is now known as JRobinson__ | 04:51 | |
| *** asettle has joined #osic | 04:54 | |
| *** asettle has quit IRC | 04:59 | |
| *** csomerville has quit IRC | 05:01 | |
| *** Mudpuppy has quit IRC | 05:08 | |
| *** Mudpuppy has joined #osic | 05:08 | |
| *** Mudpuppy has quit IRC | 05:13 | |
| *** adrian_otto has quit IRC | 05:39 | |
| *** adrian_otto has joined #osic | 05:40 | |
| *** john-davidge has joined #osic | 05:49 | |
| *** john-davidge has quit IRC | 05:54 | |
| *** asettle has joined #osic | 05:55 | |
| *** asettle has quit IRC | 06:00 | |
| *** JRobinson__ has quit IRC | 06:09 | |
| *** ccneill has joined #osic | 06:15 | |
| *** di has quit IRC | 06:17 | |
| *** ccneill has quit IRC | 06:19 | |
| *** knangia has joined #osic | 06:20 | |
| *** adrian_otto has quit IRC | 06:42 | |
| *** asettle has joined #osic | 06:56 | |
| *** asettle has quit IRC | 07:01 | |
| *** ravelar has quit IRC | 07:12 | |
| *** asettle has joined #osic | 07:57 | |
| *** asettle has quit IRC | 08:02 | |
| *** ccneill has joined #osic | 08:16 | |
| *** ccneill has quit IRC | 08:20 | |
| *** knangia has quit IRC | 08:40 | |
| *** di has joined #osic | 08:49 | |
| *** di2 has joined #osic | 08:54 | |
| *** di has quit IRC | 08:54 | |
| *** asettle has joined #osic | 09:20 | |
| *** asettle has quit IRC | 09:22 | |
| *** asettle has joined #osic | 09:22 | |
| *** di2 has quit IRC | 09:36 | |
| *** knangia has joined #osic | 09:37 | |
| *** john-davidge has joined #osic | 09:48 | |
| *** Mudpuppy has joined #osic | 10:07 | |
| *** Mudpuppy has quit IRC | 10:12 | |
| *** ccneill has joined #osic | 10:17 | |
| *** ravelar has joined #osic | 10:18 | |
| *** ccneill has quit IRC | 10:21 | |
| *** ravelar has quit IRC | 10:23 | |
| *** asettle has quit IRC | 10:30 | |
| *** asettle has joined #osic | 10:36 | |
| *** asettle has quit IRC | 10:37 | |
| *** asettle has joined #osic | 10:37 | |
| *** woodster_ has quit IRC | 10:45 | |
| *** ntpttr has quit IRC | 11:30 | |
| *** ntpttr has joined #osic | 11:39 | |
| *** revon has quit IRC | 11:43 | |
| *** knangia has quit IRC | 12:00 | |
| *** ccneill has joined #osic | 12:18 | |
| *** ccneill has quit IRC | 12:23 | |
| *** di has joined #osic | 12:34 | |
| *** di has quit IRC | 12:37 | |
| *** di has joined #osic | 12:56 | |
| *** di1 has joined #osic | 12:59 | |
| *** di has quit IRC | 13:01 | |
| *** asettle has quit IRC | 13:19 | |
| *** asettle has joined #osic | 13:19 | |
| *** valw has joined #osic | 13:58 | |
| *** di1 has quit IRC | 14:00 | |
| *** di has joined #osic | 14:01 | |
| *** valw_ has joined #osic | 14:06 | |
| *** valw has quit IRC | 14:09 | |
| *** cathrichardson has joined #osic | 14:14 | |
| *** ccneill has joined #osic | 14:20 | |
| *** rloo has joined #osic | 14:21 | |
| *** ccneill has quit IRC | 14:24 | |
| dstanek | kencjohnston: good morning | 14:27 |
|---|---|---|
| *** adrian_otto has joined #osic | 14:35 | |
| kencjohnston | dstanek: Good morning! | 14:39 |
| *** adrian_otto1 has joined #osic | 14:39 | |
| lbragstad | kencjohnston do you happen to have a like to the RBAC testing framework? | 14:39 |
| *** adrian_otto has quit IRC | 14:40 | |
| dstanek | Do you happen to have a patrole link handy? Nothing jumped out at me | 14:40 |
| * kencjohnston checks | 14:40 | |
| kencjohnston | Here is the Governance review for adding it to the QA deliverables - https://review.openstack.org/#/c/409843/ | 14:41 |
| kencjohnston | And that review references a tempest spec - https://review.openstack.org/#/c/382672/ | 14:41 |
| kencjohnston | But I couldn't find any code anywhere | 14:41 |
| *** fnaval has joined #osic | 14:41 | |
| lbragstad | kencjohnston is there any sort of documentation around the plugin? or is this all completely fresh? | 14:42 |
| kencjohnston | lbragstad: After digging a bit yesterday I assumed it was completely fresh | 14:42 |
| dstanek | lbragstad: looks new. The dev site doesn't exist yet | 14:42 |
| kencjohnston | no github repos that I could find called patrole | 14:43 |
| lbragstad | huh - hot off the press! | 14:43 |
| kencjohnston | lbragstad: dstanek - Nope found it after looking for the review author - https://github.com/DavidPurcellATT/patrole | 14:44 |
| *** cathrich_ has joined #osic | 14:44 | |
| *** cathrichardson has quit IRC | 14:44 | |
| dstanek | kencjohnston: nice, thanks | 14:46 |
| *** valw_ has quit IRC | 14:46 | |
| *** TravT has joined #osic | 14:47 | |
| *** cathrich_ is now known as cathrichardson | 14:58 | |
| *** rajpatel has joined #osic | 15:05 | |
| *** TxGirlGeek has joined #osic | 15:05 | |
| *** rajpatel has quit IRC | 15:09 | |
| *** knangia has joined #osic | 15:11 | |
| *** rajpatel has joined #osic | 15:16 | |
| *** valw has joined #osic | 15:21 | |
| *** rajpatel has quit IRC | 15:21 | |
| *** rajpatel has joined #osic | 15:24 | |
| *** ravelar has joined #osic | 15:25 | |
| *** rajpatel1 has joined #osic | 15:29 | |
| *** rajpatel has quit IRC | 15:29 | |
| *** adrian_otto has joined #osic | 15:48 | |
| *** adrian_otto1 has quit IRC | 15:49 | |
| *** chris_hultin|AWA is now known as chris_hultin | 15:56 | |
| *** TxGirlGeek has quit IRC | 16:00 | |
| *** TxGirlGeek has joined #osic | 16:00 | |
| *** TxGirlGeek has quit IRC | 16:04 | |
| *** TxGirlGeek has joined #osic | 16:04 | |
| *** Mudpuppy has joined #osic | 16:10 | |
| *** john-davidge has quit IRC | 16:11 | |
| *** john-davidge has joined #osic | 16:11 | |
| *** john-davidge has quit IRC | 16:13 | |
| *** john-dav_ has joined #osic | 16:13 | |
| *** Mudpuppy has quit IRC | 16:15 | |
| *** ccneill has joined #osic | 16:16 | |
| *** john-dav_ has quit IRC | 16:18 | |
| *** Mudpuppy has joined #osic | 16:19 | |
| *** zz_pwnall1337 is now known as pwnall1337 | 16:23 | |
| *** ccneill has quit IRC | 16:43 | |
| *** ccneill has joined #osic | 16:46 | |
| *** asettle__ has joined #osic | 16:49 | |
| *** mmalik4 has joined #osic | 16:50 | |
| *** asettle has quit IRC | 16:53 | |
| *** asettle__ is now known as asettle | 17:01 | |
| *** asettle has quit IRC | 17:15 | |
| *** rajpatel1 has quit IRC | 17:44 | |
| *** revon has joined #osic | 17:54 | |
| *** valw has quit IRC | 18:02 | |
| *** cathrichardson has quit IRC | 18:02 | |
| *** fnaval_ has joined #osic | 18:09 | |
| *** cathrichardson has joined #osic | 18:10 | |
| *** fnaval__ has joined #osic | 18:11 | |
| *** fnaval has quit IRC | 18:11 | |
| *** fnaval has joined #osic | 18:12 | |
| *** fnaval_ has quit IRC | 18:13 | |
| *** fnaval_ has joined #osic | 18:14 | |
| *** asettle has joined #osic | 18:14 | |
| *** pramodrj07 has joined #osic | 18:15 | |
| *** PramodJayathirth has joined #osic | 18:15 | |
| *** fnaval__ has quit IRC | 18:15 | |
| *** fnaval__ has joined #osic | 18:16 | |
| *** fnaval has quit IRC | 18:17 | |
| *** fnaval___ has joined #osic | 18:17 | |
| *** fnaval has joined #osic | 18:19 | |
| *** ravelar has quit IRC | 18:19 | |
| *** fnaval_ has quit IRC | 18:19 | |
| *** fnaval__ has quit IRC | 18:20 | |
| *** fnaval___ has quit IRC | 18:23 | |
| *** cody-somerville has joined #osic | 18:38 | |
| *** cody-somerville has quit IRC | 18:38 | |
| *** cody-somerville has joined #osic | 18:38 | |
| *** dharinic is now known as dharinic|lunch | 18:44 | |
| *** ravelar has joined #osic | 18:48 | |
| *** valw has joined #osic | 18:50 | |
| *** ravelar has quit IRC | 18:51 | |
| *** ccneill has quit IRC | 18:56 | |
| *** asettle has quit IRC | 19:08 | |
| *** dharinic|lunch is now known as dharinic | 19:09 | |
| *** ccneill has joined #osic | 19:17 | |
| *** ccneill has quit IRC | 19:20 | |
| *** princenana has joined #osic | 19:20 | |
| *** ccneill has joined #osic | 19:20 | |
| *** princenana has quit IRC | 19:21 | |
| *** rajpatel has joined #osic | 19:28 | |
| *** cathrichardson has quit IRC | 19:31 | |
| *** ccneill has quit IRC | 19:35 | |
| *** princenana has joined #osic | 19:36 | |
| *** rajpatel has quit IRC | 19:44 | |
| *** rajpatel1 has joined #osic | 19:44 | |
| *** PramodJayathirth has quit IRC | 19:48 | |
| *** pramodrj07 has quit IRC | 19:50 | |
| *** cathrichardson has joined #osic | 19:53 | |
| *** TravT has quit IRC | 19:57 | |
| *** pwnall1337 is now known as zz_pwnall1337 | 20:03 | |
| *** princenana has quit IRC | 20:06 | |
| *** princenana has joined #osic | 20:06 | |
| lbragstad | johnthetubaguy ping | 20:08 |
| johnthetubaguy | lbragstad: I am around, but its 8pm over here, so really just around for the TC meeting really | 20:09 |
| lbragstad | johnthetubaguy awesome - i'll try to make it quick | 20:09 |
| lbragstad | johnthetubaguy i was curious if you happen to have any details on nova's work around codifying policy defaults in oslo.policy and if there was more work nova was planning to do around that | 20:10 |
| lbragstad | i remember andrew laski talking about that in austin | 20:10 |
| johnthetubaguy | lbragstad: yeah, theres a heap of stuff still to do, but we have all the defaults in code now | 20:10 |
| lbragstad | johnthetubaguy i'd be super interested in hearing what all is left on nova's plate | 20:10 |
| johnthetubaguy | lbragstad: we want to document all the rules, and basically do the centralize config sweep of all our policy rules | 20:11 |
| johnthetubaguy | unit tests need sorting out | 20:11 |
| johnthetubaguy | (they over-ride the defaults too much, because there didn't used to be defaults in code) | 20:12 |
| johnthetubaguy | also generally need to think about the capabilities discovery and how to better match things up | 20:12 |
| lbragstad | johnthetubaguy ah - like the whole I have this role, what can I do in nova problem? | 20:13 |
| *** ccneill has joined #osic | 20:15 | |
| *** PramodJayathirth has joined #osic | 20:23 | |
| *** pramodrj07 has joined #osic | 20:23 | |
| *** princenana has quit IRC | 20:24 | |
| johnthetubaguy | lbragstad: right now, Nova work is stalled purely due to reviewer bandwidth, and too many other high priority things really | 20:25 |
| johnthetubaguy | the policy stuff that is | 20:25 |
| lbragstad | johnthetubaguy got it | 20:25 |
| *** ravelar has joined #osic | 20:25 | |
| lbragstad | johnthetubaguy there is a spec proposed to keystone that'd I think needs some more exposure to from other projects https://review.openstack.org/#/c/391624/21 | 20:26 |
| lbragstad | and since nova has kind of blazed the path for policy, it would be cool to see the responses from the group as a whole | 20:27 |
| johnthetubaguy | lbragstad: I am not really sure how that works for Nova right now, although I think I get what it is trying to do, help create a clear security "barrier" | 20:27 |
| johnthetubaguy | the policy doesn't map directly like that really (although thats possible an issue in its own right) | 20:28 |
| lbragstad | johnthetubaguy what do you mean by map directly? | 20:29 |
| *** dfflanders has joined #osic | 20:31 | |
| *** fnaval_ has joined #osic | 20:39 | |
| johnthetubaguy | lbragstad: its probably easier to point you at the default policy file: http://docs.openstack.org/developer/nova/sample_policy.html | 20:41 |
| johnthetubaguy | lbragstad: you need to inspect the payload to know what policy is relavant | 20:42 |
| *** fnaval has quit IRC | 20:43 | |
| lbragstad | johnthetubaguy got it | 20:43 |
| dstanek | lbragstad: johnthetubaguy: a part of that spec is to have a check in addition to policy that checks roles before any policy checks happen | 20:51 |
| *** PramodJ has joined #osic | 21:01 | |
| *** rajpatel1 has quit IRC | 21:01 | |
| johnthetubaguy | dstanek: lbragstad: I think its worth getting an overall where we want policy to be picture drawn up | 21:02 |
| *** csomerville has joined #osic | 21:02 | |
| johnthetubaguy | Nova has some strong opinions, mostly due to strong operator feedback we have had over the years | 21:03 |
| dstanek | johnthetubaguy: ++ that's what we are driving towards | 21:03 |
| dstanek | johnthetubaguy: are those opinions documented somewhere? | 21:04 |
| *** cody-somerville has quit IRC | 21:05 | |
| *** rajpatel has joined #osic | 21:06 | |
| johnthetubaguy | dstanek: sadly strong and slightly conflicting ideas, so we haven't got anything more than whats merged so far, the next step I think is this: https://review.openstack.org/#/c/386555 | 21:08 |
| johnthetubaguy | once we agree the direction with capability discovery, and we made some progress at the summit, I think lots of the other pieces should be much clearer | 21:09 |
| lbragstad | johnthetubaguy nice - i need to read that | 21:10 |
| johnthetubaguy | me too | 21:10 |
| johnthetubaguy | well, re-review it | 21:10 |
| *** princenana has joined #osic | 21:11 | |
| dstanek | johnthetubaguy: thanks I'll start there then | 21:13 |
| johnthetubaguy | after discussion, in Nova land we kinda decided we should prototype as much of capabilities as we can | 21:14 |
| johnthetubaguy | once its clear how users know if something is available for them or not, then policy is largely about how an admin restricts (or loosens) one of those presented API concepts (or some sub part of that) | 21:15 |
| lbragstad | sure | 21:15 |
| *** chris_hultin is now known as chris_hultin|AWA | 21:16 | |
| johnthetubaguy | capability includes the concept of is it possible and am I allowed, but that once thats straight, you don't worry about tweaking policy to get a better experience for users when something isn't possible on the system | 21:17 |
| johnthetubaguy | all sounds a bit basic, but we have problems at that level right now | 21:18 |
| lbragstad | johnthetubaguy well - right now there seems to be a lot of inconsistencies across openstack and policy | 21:18 |
| lbragstad | which no doubt makes the problem hard | 21:18 |
| johnthetubaguy | yep, the ideas around standard role groups between all the projects make sense | 21:20 |
| johnthetubaguy | but right now we have no way to change our defaults without breaking everyone | 21:21 |
| *** asettle has joined #osic | 21:21 | |
| *** JRobinson__ has joined #osic | 21:22 | |
| johnthetubaguy | wanting to get the deprecation warnings and alias stuff from config world to help with some of that | 21:22 |
| johnthetubaguy | I need to write this up before the PTG really, and ideally sooner | 21:23 |
| * johnthetubaguy turns of laptop, so he can get some rest before tomorrow | 21:23 | |
| lbragstad | johnthetubaguy thanks for the links, lets touch base soon! | 21:23 |
| *** TravT has joined #osic | 21:28 | |
| *** valw has quit IRC | 21:29 | |
| *** rajpatel has quit IRC | 21:31 | |
| *** rajpatel has joined #osic | 21:34 | |
| *** princenana has quit IRC | 21:34 | |
| *** princenana has joined #osic | 21:35 | |
| *** rajpatel has quit IRC | 21:37 | |
| *** rajpatel has joined #osic | 21:38 | |
| *** sonu has joined #osic | 21:39 | |
| *** asettle has quit IRC | 21:39 | |
| *** valw has joined #osic | 21:43 | |
| *** mmalik4 has quit IRC | 21:53 | |
| *** asettle has joined #osic | 21:58 | |
| *** csomerville has quit IRC | 22:00 | |
| *** princenana has quit IRC | 22:06 | |
| *** princenana has joined #osic | 22:07 | |
| *** chris_hultin|AWA is now known as chris_hultin | 22:08 | |
| *** asettle has quit IRC | 22:09 | |
| *** princenana has quit IRC | 22:13 | |
| *** csomerville has joined #osic | 22:13 | |
| *** ccneill has quit IRC | 22:14 | |
| *** valw has quit IRC | 22:17 | |
| *** princenana has joined #osic | 22:17 | |
| *** TxGirlGeek has quit IRC | 22:18 | |
| *** chris_hultin is now known as chris_hultin|AWA | 22:19 | |
| *** ccneill has joined #osic | 22:30 | |
| *** cathrichardson has quit IRC | 22:33 | |
| *** rajpatel has quit IRC | 22:36 | |
| jlopezgu | raddaoui: have u used Salt? | 22:43 |
| *** adrian_otto has quit IRC | 22:50 | |
| *** valw has joined #osic | 22:55 | |
| *** ccneill has quit IRC | 22:58 | |
| *** valw has quit IRC | 23:17 | |
| *** knangia has quit IRC | 23:20 | |
| *** princenana has quit IRC | 23:48 | |
| *** zz_pwnall1337 is now known as pwnall1337 | 23:48 | |
| *** JRobinson__ has quit IRC | 23:51 | |
| *** chris_hultin|AWA is now known as chris_hultin | 23:52 | |
| *** TravT has quit IRC | 23:53 | |
| *** JRobinson__ has joined #osic | 23:54 | |
| *** princenana has joined #osic | 23:57 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!