17:00:12 #startmeeting policy_popup 17:00:12 Meeting started Tue Dec 6 17:00:12 2022 UTC and is due to finish in 60 minutes. The chair is gmann. Information about MeetBot at http://wiki.debian.org/MeetBot. 17:00:12 Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. 17:00:12 The meeting name has been set to 'policy_popup' 17:00:15 this is RBAC meeting 17:00:23 o/ 17:00:27 #link https://etherpad.opendev.org/p/rbac-goal-tracking#L154 17:00:31 johnsom: hi 17:00:54 there is nothing in agenda but we can discuss here if any open question 17:01:12 I don't have anything this week 17:01:17 johnsom: ok 17:02:09 one update, I am preparing the tempest jobs enabling the RBAC for few services and it is passing (after neutron bugs fixed) 17:02:28 #link https://review.opendev.org/c/openstack/tempest/+/614484?tab=comments 17:02:40 Both Octavia and Designate have RBAC testing in the API tests. 17:02:45 this will help to enable the new defaults and scope by default 17:03:00 on nova, neutron, glance etc side not at oslo level 17:03:13 johnsom: perfect. 17:03:35 Did the bug in tempest where you can't have a project reader and project member credential in the same project ID ever get fixed? 17:04:10 johnsom: not yet, I was on that and then got distracted. even I know i had some half backed fix in my local env 17:04:27 let me fix that on priority this or next week for sure 17:05:10 Yeah, I looked at it briefly, but there is some "complexity" in that area of the tempest code and I decided I should not poke at it. 17:05:44 Ok, cool. That is really the only open item I had in the RBAC testing. 17:05:48 I think I was writing unit tests for those to make sure we check such cases but then got distracted 17:05:58 sure, will take it on priority 17:06:27 #link https://bugs.launchpad.net/tempest/+bug/1964509 17:06:51 yeah 17:08:33 ok, seems that is all for today. let's close then? 17:08:39 Sounds good 17:08:56 thanks johnsom for joining 17:08:58 #endmeeting