[openstack-dev] [OpenStack-dev][heat][keystone][security sig][all] SSL option for keystone session
Hi all I would like to trigger a discussion on providing directly SSL content for KeyStone session. Since all team using SSL, I believe this maybe concerns to other projects as well. As we consider to implement customize SSL option for Heat remote stack [3] (and multicloud support [1]), I'm trying to figure out what is the best solution for this. Current SSL option in KeyStone session didn't allow us to provide directly CERT/Key string, instead only allow us to provide CERT/Key file path. Which is actually a limitation of python with the version less than 3.7 ([2]). As we not gonna easily get ride of previous python versions, we try to figure out what is the best solution we can approach here. Some way, we can think about, like using pipeline, or create a file, encrypted it and send the file path out to KeyStone session. Would like to hear more from all for any advice or suggestion on how can we approach this. [1] https://etherpad.openstack.org/p/ptg-rocky-multi-cloud [2] https://www.python.org/dev/peps/pep-0543/ [3] https://review.openstack.org/#/c/480923/ -- May The Force of OpenStack Be With You, *Rico Lin*irc: ricolin __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
Re: [openstack-dev] [neutron] Port mirroring for SR-IOV VF to VF mirroring
Wondering if Tap-as-a-Service would play a role here? :) Related patch : https://review.openstack.org/#/c/584892/1 On Sun, Aug 5, 2018 at 9:57 PM Miguel Lavalle wrote: > Hi Forrest, > > Please place your name / irc nick next to the topics you propose > > Regards > > > > > On Fri, Aug 3, 2018 at 8:18 PM, Zhao, Forrest > wrote: > >> Hi Miguel, >> >> >> >> Can we put the proposed topics to this PTG etherpad directly? Or we >> should first discuss it in weekly Neutron project meeting? >> >> >> >> Please advise; then we’ll follow the process to propose the PTG topics. >> >> >> >> Thanks, >> >> Forrest >> >> >> >> *From:* Miguel Lavalle [mailto:mig...@mlavalle.com] >> *Sent:* Friday, August 3, 2018 11:41 PM >> *To:* OpenStack Development Mailing List (not for usage questions) < >> openstack-dev@lists.openstack.org> >> >> *Subject:* Re: [openstack-dev] [neutron] Port mirroring for SR-IOV VF to >> VF mirroring >> >> >> >> Forrest, Manjeet, >> >> >> >> Here you go: https://etherpad.openstack.org/p/neutron-stein-ptg >> >> >> >> Best regards >> >> >> >> On Wed, Aug 1, 2018 at 11:49 AM, Bhatia, Manjeet S < >> manjeet.s.bha...@intel.com> wrote: >> >> Hi, >> >> >> >> Yes, we need to refine spec for sure, once a consensus is reached focus >> will be on implementation, >> >> Here’s implementation patch (WIP) >> https://review.openstack.org/#/c/584892/ , we can’t really >> >> review api part until spec if finalized but, other stuff like config and >> common issues can >> >> still be pointed out and progress can be made until consensus on api is >> reached. Miguel, I think >> >> this will be added to etherpad for PTG discussions as well ? >> >> >> >> Thanks and Regards ! >> >> Manjeet >> >> >> >> >> >> >> >> >> >> *From:* Miguel Lavalle [mailto:mig...@mlavalle.com] >> *Sent:* Tuesday, July 31, 2018 10:26 AM >> *To:* Zhao, Forrest >> *Cc:* OpenStack Development Mailing List < >> openstack-dev@lists.openstack.org> >> *Subject:* Re: [openstack-dev] [neutron] Port mirroring for SR-IOV VF to >> VF mirroring >> >> >> >> Hi Forrest, >> >> >> >> Yes, in my email, I was precisely referring to the work around >> https://review.openstack.org/#/c/574477. Now that we are wrapping up >> Rocky, I wanted to raise the visibility of this spec. I am glad you >> noticed. This week we are going to cut our RC-1 and I don't anticipate that >> we will will have a RC-2 for Rocky. So starting next week, let's go back to >> the spec and refine it, so we can start implementing in Stein as soon as >> possible. Depending on how much progress we make in the spec, we may need >> to schedule a discussion during the PTG in Denver, September 10 - 14, in >> case face to face time is needed to reach an agreement. I know that Manjeet >> is going to attend the PTG and he has already talked to me about this spec >> in the recent past. So maybe Manjeet could be the conduit to represent this >> spec in Denver, in case we need to talk about it there >> >> >> >> Best regards >> >> >> >> Miguel >> >> >> >> On Tue, Jul 31, 2018 at 4:12 AM, Zhao, Forrest >> wrote: >> >> Hi Miguel, >> >> >> >> In your mail “PTL candidacy for the Stein cycle”, it mentioned that “port >> mirroring for SR-IOV VF to VF mirroring” is within Stein goal. >> >> >> >> Could you tell where is the place to discuss the design for this feature? >> Mailing list, IRC channel, weekly meeting or others? >> >> >> >> I was involved in its spec review at >> https://review.openstack.org/#/c/574477/; but it has not been updated >> for a while. >> >> >> >> Thanks, >> >> Forrest >> >> >> >> >> __ >> OpenStack Development Mailing List (not for usage questions) >> Unsubscribe: >> openstack-dev-requ...@lists.openstack.org?subject:unsubscribe >> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev >> >> >> > > __ > OpenStack Development Mailing List (not for usage questions) > Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe > http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev > -- Thanks and Regards, Reedip Banerjee IRC: reedip __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
Re: [openstack-dev] [oslo] Proposing Zane Bitter as oslo.service core
+1 2018-08-04 2:58 GMT+08:00 Davanum Srinivas : > +1 from me! > On Fri, Aug 3, 2018 at 12:58 PM Ben Nemec wrote: > > > > Hi, > > > > Zane has been doing some good work in oslo.service recently and I would > > like to add him to the core team. I know he's got a lot on his plate > > already, but he has taken the time to propose and review patches in > > oslo.service and has demonstrated an understanding of the code. > > > > Please respond with +1 or any concerns you may have. Thanks. > > > > -Ben > > > > > __ > > OpenStack Development Mailing List (not for usage questions) > > Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject: > unsubscribe > > http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev > > > > -- > Davanum Srinivas :: https://twitter.com/dims > > __ > OpenStack Development Mailing List (not for usage questions) > Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe > http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev > -- ChangBo Guo(gcb) Community Director @EasyStack __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
Re: [openstack-dev] [neutron] Stein PTG etherpad
Dear Neutron members, I should have mentioned it before Please place your name / nick irc next to the topics you propose in the etherpad, so we can coordinate as the PTG approaches Thanks and regards Miguel On Fri, Aug 3, 2018 at 10:39 AM, Miguel Lavalle wrote: > Dear Stackers, > > I have started an etherpad to collect topic proposals to be discussed > during the PTG in Denver, September 10th - 14th: > https://etherpad.openstack.org/p/neutron-stein-ptg . Please feel free to > add your proposals under the "Proposed topics to be scheduled" section. > Please also sign in under the "Attendance at the PTG" if you plan to be in > Denver, indicating the days you will be there. > > I am looking forward to see many of you in Denver and have a very > productive PTG! > > Best regards > > Miguel > __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
Re: [openstack-dev] [neutron] Port mirroring for SR-IOV VF to VF mirroring
Hi Forrest, Please place your name / irc nick next to the topics you propose Regards On Fri, Aug 3, 2018 at 8:18 PM, Zhao, Forrest wrote: > Hi Miguel, > > > > Can we put the proposed topics to this PTG etherpad directly? Or we > should first discuss it in weekly Neutron project meeting? > > > > Please advise; then we’ll follow the process to propose the PTG topics. > > > > Thanks, > > Forrest > > > > *From:* Miguel Lavalle [mailto:mig...@mlavalle.com] > *Sent:* Friday, August 3, 2018 11:41 PM > *To:* OpenStack Development Mailing List (not for usage questions) < > openstack-dev@lists.openstack.org> > > *Subject:* Re: [openstack-dev] [neutron] Port mirroring for SR-IOV VF to > VF mirroring > > > > Forrest, Manjeet, > > > > Here you go: https://etherpad.openstack.org/p/neutron-stein-ptg > > > > Best regards > > > > On Wed, Aug 1, 2018 at 11:49 AM, Bhatia, Manjeet S < > manjeet.s.bha...@intel.com> wrote: > > Hi, > > > > Yes, we need to refine spec for sure, once a consensus is reached focus > will be on implementation, > > Here’s implementation patch (WIP) https://review.openstack.org/#/c/584892/ > , we can’t really > > review api part until spec if finalized but, other stuff like config and > common issues can > > still be pointed out and progress can be made until consensus on api is > reached. Miguel, I think > > this will be added to etherpad for PTG discussions as well ? > > > > Thanks and Regards ! > > Manjeet > > > > > > > > > > *From:* Miguel Lavalle [mailto:mig...@mlavalle.com] > *Sent:* Tuesday, July 31, 2018 10:26 AM > *To:* Zhao, Forrest > *Cc:* OpenStack Development Mailing List openstack.org> > *Subject:* Re: [openstack-dev] [neutron] Port mirroring for SR-IOV VF to > VF mirroring > > > > Hi Forrest, > > > > Yes, in my email, I was precisely referring to the work around > https://review.openstack.org/#/c/574477. Now that we are wrapping up > Rocky, I wanted to raise the visibility of this spec. I am glad you > noticed. This week we are going to cut our RC-1 and I don't anticipate that > we will will have a RC-2 for Rocky. So starting next week, let's go back to > the spec and refine it, so we can start implementing in Stein as soon as > possible. Depending on how much progress we make in the spec, we may need > to schedule a discussion during the PTG in Denver, September 10 - 14, in > case face to face time is needed to reach an agreement. I know that Manjeet > is going to attend the PTG and he has already talked to me about this spec > in the recent past. So maybe Manjeet could be the conduit to represent this > spec in Denver, in case we need to talk about it there > > > > Best regards > > > > Miguel > > > > On Tue, Jul 31, 2018 at 4:12 AM, Zhao, Forrest > wrote: > > Hi Miguel, > > > > In your mail “PTL candidacy for the Stein cycle”, it mentioned that “port > mirroring for SR-IOV VF to VF mirroring” is within Stein goal. > > > > Could you tell where is the place to discuss the design for this feature? > Mailing list, IRC channel, weekly meeting or others? > > > > I was involved in its spec review at https://review.openstack.org/# > /c/574477/; but it has not been updated for a while. > > > > Thanks, > > Forrest > > > > > __ > OpenStack Development Mailing List (not for usage questions) > Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe > http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev > > > __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev