[openstack-dev] [keystone] Sydney Summit Recap

2017-11-14 Thread Lance Bragstad
Hey all, I just finished dumping everything from the summit into a blog post [0]. If you have a summary or feedback - we can use this thread to advertise it and discuss. Thanks, Lance [0] https://www.lbragstad.com/blog/openstack-summit-sydney-recap signature.asc Description: OpenPGP

[openstack-dev] [keystone] Gerrit cleanup

2017-11-27 Thread Lance Bragstad
Hey all, One of the items that came out of our retrospective was to cleanup stale reviews in Gerrit [0]. I spent some time last week working on this and I think I've cleaned up most things. All reviews I abandon should have a clear reason why. If you find that is not the case, please don't

[openstack-dev] [all] [tc] Policy Goal Queens-2 Update

2017-11-28 Thread Lance Bragstad
Hi all, As Queens 2 comes to a close next week, I figured it was a good time to recap the policy goal [0]. The following is the breakdown of where projects stand with how I've been tracking things. * Not Started** * openstack/ceilometer openstack/congress openstack/networking-bgpvpn

Re: [openstack-dev] [all] [tc] Policy Goal Queens-2 Update

2017-11-28 Thread Lance Bragstad
-in-code.html#completion-criteria On 11/28/2017 11:18 AM, Harry Rybacki wrote: > On Tue, Nov 28, 2017 at 12:14 PM, Lance Bragstad <lbrags...@gmail.com> wrote: >> Hi all, >> >> As Queens 2 comes to a close next week, I figured it was a good time to >> recap t

[openstack-dev] [keystone] office hours report 2017-11-21

2017-11-22 Thread Lance Bragstad
Hey all, Yesterday in office hours we recapped the main topic from the keystone user and operator feedback session at the forum, which is possibly allowing the project API to accept user-specified project IDs when creating projects. Full context from that conversation can be found in the logs

[openstack-dev] [keystone] Queens-2 Retrospective

2017-11-29 Thread Lance Bragstad
Hey all, Just like for Queens-1, we're going to reuse the weekly meeting time [0] for the retrospective. That means we'll be holding our retrospective on December 12th during normal meeting hours. Some information can be found in Trello [1]. We had some issues last time with video conferencing,

[openstack-dev] [keystone] Queens-2 Retrospective

2017-11-29 Thread Lance Bragstad
Hey all, Just like for Queens-1, we're going to reuse the weekly meeting time [0] for the retrospective. That means we'll be holding our retrospective on December 12th during normal meeting hours. Some information can be found in Trello [1]. We had some issues last time with video conferencing,

Re: [openstack-dev] [all] [tc] Policy Goal Queens-2 Update

2017-11-30 Thread Lance Bragstad
should be available in the burndown chart. > Thanks, > Hieu. > > [1]. > https://github.com/openstack/ceilometer/commit/d881dd52289d453b9f9d94c7c32c0672a70a8064 > [2]. https://github.com/lbragstad/openstack-doc-migration-burndown/pull/1 > > >> -Original Mes

Re: [openstack-dev] [keystone][zuul] A Sad Farewell

2017-11-22 Thread Lance Bragstad
I've gone ahead and removed Jamie from the core reviewer group and the keystone-drivers group in Launchpad. Jamie, thanks again for all your hard work and remember that you're more than welcome to come back anytime. On 10/03/2017 05:54 PM, Monty Taylor wrote: > On 10/03/2017 11:17 AM, Dean

Re: [openstack-dev] [all] [tc] Policy Goal Queens-2 Update

2017-11-30 Thread Lance Bragstad
On 11/29/2017 09:13 PM, da...@vn.fujitsu.com wrote: > Hi all, > > I just want to share some related things to anyone are interested in. > > For the Neutron projects, I have discussed with them[1] but it is not really > started, > they want to consider more about all of networking projects

[openstack-dev] [all] [policy] [rbac] RBAC status & progress

2017-12-01 Thread Lance Bragstad
Hi all, I'm following up a thread we started earlier this year with proposals for fixing RBAC [0]. Just wanted to give a quick update that the specification has merged [1] and the implementation is underway [2]. I will have a few more patches up shortly to handle the token scoping bits. Adding

[openstack-dev] [keystone] office hours report 2017-11-28

2017-12-01 Thread Lance Bragstad
Hey all, Here is the weekly report for what was accomplished during office hours this week. Full logs are available [0]. Bug #1734871 in OpenStack Identity (keystone): "overcloud deployment fails on mistral action DeployStackAction" https://bugs.launchpad.net/keystone/+bug/1734871 Triaged,

Re: [openstack-dev] [keystone] Upcoming Deadlines

2017-12-12 Thread Lance Bragstad
h (if I'm understanding correctly). [0] http://specs.openstack.org/openstack/oslo-specs/specs/queens/oslo-config-drivers.html > > [4] https://review.openstack.org/#/c/283905/16 > [5]  > https://docs.openstack.org/keystone/pike/advanced-topics/federation/mapping_combinations.html > > On Mon

[openstack-dev] [keystone] Keystone weekly update - Week of 11 December 2017

2017-12-15 Thread Lance Bragstad
Hey all, Things were pretty light this week since people are preparing for the holidays. Colleen is out this week, so I'm going to take a stab at the weekly report. # Keystone Team Update - Week of 11 December 2017 ## News ### Specification Freeze December 8th was specification freeze for

Re: [openstack-dev] [all] Switching to longer development cycles

2017-12-13 Thread Lance Bragstad
I have two concerns. 1.) I'm hesitant to lose developer <---> operator communication more than we already have. Outcomes and conversations from the PTGs are super useful, but we don't exactly have rooms full of operators to bounce ideas off of. We can summarize outcomes and socialize reports on

[openstack-dev] [keystone] federated performance feedback

2017-12-19 Thread Lance Bragstad
Hey all, We've had a topic come up a few times about making it so IDs can be specified in the API request when creating a project [0]. This has come up over several releases, including the Queens release and in today's keystone meeting [1]. The proposal is meant to solve spanning keystone in

[openstack-dev] [keystone] Bug Smash Reminder

2017-11-13 Thread Lance Bragstad
Hey all, Just a friendly reminder that this will be happening in APAC timezones next week [0]. Sounds like a good opportunity to catch up on reviews and get things merged if you're interested. Thanks, Lance [0] http://lists.openstack.org/pipermail/openstack-dev/2017-November/124453.html

[openstack-dev] [keystone] Upcoming Deadlines

2017-11-20 Thread Lance Bragstad
Sending out a reminder that we have a couple deadlines approaching. First, *specification* *freeze* is *two weeks away*. Here is a short list of things we've committed to but need the specification to merge: - Unified Limits API [0] - Application Credentials [1] - System Scope [2] - Scope Types

[openstack-dev] [all] [policy] [keystone] Support for deprecating policies

2017-11-15 Thread Lance Bragstad
Hey all, I wanted to let everyone know that we just merged a patch [0] that allows developers to deprecate policies (just like deprecating configuration options). The functionality is implemented using the DeprecatedRule object [1] and emits a warning to operators when deprecated policies are

[openstack-dev] [keystone] Forum etherpads

2017-11-01 Thread Lance Bragstad
Hey all, I've bootstrapped the etherpads for our forum sessions with a little content and they've been linked to the etherpad wiki [0]. Please add additional context as you see fit. Thanks, Lance [0] https://wiki.openstack.org/wiki/Forum/Sydney2017 signature.asc Description: OpenPGP

[openstack-dev] [keystone] [policy] Meetings next week

2017-11-01 Thread Lance Bragstad
Hey all, Just a reminder that we won't be holding a team meeting or a policy meeting next week in lieu of the summit. We will resume our normal meeting schedule the week of November 12th. Safe travels for those going to Sydney! Thanks, Lance signature.asc Description: OpenPGP digital

[openstack-dev] [keystone] [policy] RBAC/Policy Roadmap Feedback Session Moved

2017-11-03 Thread Lance Bragstad
Hey all, We noticed a couple days ago that the feedback session for the policy roadmap [0] conflicted with feedback for application credentials [1]. To avoid having to split the team for coverage, we've moved the RBAC roadmap session to Wednesday at 11:00 - 11:40 AM. The application credentials

Re: [openstack-dev] [keystone] multiple federated keystones with single Identity Provider

2017-12-07 Thread Lance Bragstad
On 12/07/2017 12:27 PM, Colleen Murphy wrote: > On Thu, Dec 7, 2017 at 5:37 PM, Pavlo Shchelokovskyy > wrote: >> Hi all, >> >> We have a following use case - several independent keystones (say KeyA and >> KeyB), using fernet tokens and synchronized fernet keys, and

[openstack-dev] [keystone] specification freeze exception for unified limits

2017-12-08 Thread Lance Bragstad
Hey all, We had a really productive conversation [0] regarding the outstanding concerns with the unified limits proposal. The initial implementation for unified limits should target a model so that we can do proper limit validation. The specification has been reworked to include the outcomes of

[openstack-dev] [policy] [rbac] No meetings until 2017-01-03

2017-12-06 Thread Lance Bragstad
Hey all, Sending out a note that there won't be a policy meeting for the remainder of December. Folks are focusing on the community goal and feature work. We'll pick up policy meetings once things settle down after the holidays. Thanks! Lance signature.asc Description: OpenPGP digital

Re: [openstack-dev] [policy] [rbac] No meetings until 2017-01-03

2017-12-06 Thread Lance Bragstad
The date in the subject line should be 2018-01-03, not 2017... Sorry about the confusion. On 12/06/2017 10:12 AM, Lance Bragstad wrote: > Hey all, > > Sending out a note that there won't be a policy meeting for the > remainder of December. Folks are focusing on the community goal a

Re: [openstack-dev] [keystone] Upcoming Deadlines

2017-12-11 Thread Lance Bragstad
://review.openstack.org/#/c/455709/ On 11/20/2017 11:25 AM, Lance Bragstad wrote: > Sending out a reminder that we have a couple deadlines approaching. > > First, *specification* *freeze* is *two weeks away*. Here is a short > list of things we've committed to but need the specificat

Re: [openstack-dev] [keystone] Queens-2 Retrospective

2017-12-04 Thread Lance Bragstad
a few minutes to share your thoughts before tomorrow's meeting. We'll start the meeting by jumping right into the topics. Thanks! [0] https://postfacto.io/retros/openstack-keystone [1] https://trello.com/b/jrpmDKtf/keystone-retrospective On 11/29/2017 08:57 AM, Lance Bragstad wrote: > Hey

[openstack-dev] [policy] [rbac] Analyzing other policy systems

2017-12-04 Thread Lance Bragstad
Hey all, We had a couple sessions over the last month or two analyzing RBAC in other systems. The notes from the sessions can be found in etherpad [0]. The discussions and outcomes are useful for thinking about how we want things to work in the near future, specifically highlighting the

[openstack-dev] [keystone] tomorrow's meeting and queens-1 retrospective

2017-10-30 Thread Lance Bragstad
Hey all, Just a reminder that tomorrow's team meeting will be dedicated to our queens-1 retrospective. Harry and I cleared the board from the Pike retrospective [0] and it should be ready to go. Given the last retrospective took longer than an hour, we want to try and jump start the process.

Re: [openstack-dev] [policy] AWS IAM session

2017-10-25 Thread Lance Bragstad
today's discussion was helpful, it was very free-form. Let's aim to target a very specific flow for next week. What do we want that to be? Thanks! [0] https://etherpad.openstack.org/p/analyzing-other-policy-systems On 10/24/2017 02:02 PM, Lance Bragstad wrote: > Gentle remin

Re: [openstack-dev] [policy] AWS IAM session

2017-10-25 Thread Lance Bragstad
will be recorded. Previous context and information is in this thread. Thanks! On 10/25/2017 01:29 PM, Lance Bragstad wrote: > I've recapped the notes from today's session and I'll post a follow up > with the recording as soon as it's available. All notes can be found > in the etherpad (

Re: [openstack-dev] [policy] AWS IAM session

2017-10-24 Thread Lance Bragstad
Gentle reminder that this will be happening tomorrow. See you then! On 10/20/2017 09:46 AM, Lance Bragstad wrote: > I just sent a calendar invite to everyone who responded to this thread > or voted in the agenda. The session will be recorded if you are unable > to make it. > > Th

[openstack-dev] [keystone] Queens-1 Retrospective

2017-10-24 Thread Lance Bragstad
Hey all, We're going to hold our queens-1 retrospective next week during the keystone weekly meeting [0]. All information for the retro can be found in Trello [1]. Thanks! [0] http://eavesdrop.openstack.org/#Keystone_Team_Meeting [1]

[openstack-dev] [keystone] Keystone Team Update - Week of 30 April 2018

2018-05-04 Thread Lance Bragstad
# Keystone Team Update - Week of 30 April 2018 ## News Most of this week was spent firming up specification details. There were a couple good discussions on unified limits and the default role work we're targeting for the release. ## Open Specs Dashboard: https://tinyurl.com/yagxuyfr We had

Re: [openstack-dev] [tc] [nova] [octavia] [ironic] [keystone] [policy] Spec. Freeze Exception - Default Roles

2018-05-04 Thread Lance Bragstad
On 05/04/2018 02:55 PM, Harry Rybacki wrote: > Greetings All, > > After a discussion in #openstack-tc[1] earlier today, the Keystone > team is adjusting its approach in proposing default roles[2]. > Subsequently, I have ported the current default roles specification > from openstack-specs[3] to

Re: [openstack-dev] [ALL][PTLs] Community Goals for Rocky: Toggle the debug option at runtime

2018-05-14 Thread Lance Bragstad
On 05/14/2018 02:24 PM, Doug Hellmann wrote: > Excerpts from Lance Bragstad's message of 2018-05-14 13:13:51 -0500: >> On 03/19/2018 09:22 AM, Jim Rollenhagen wrote: >>> On Sat, Mar 17, 2018 at 9:49 PM, Doug Hellmann >> > wrote: >>> >>>

Re: [openstack-dev] [ALL][PTLs] Community Goals for Rocky: Toggle the debug option at runtime

2018-05-14 Thread Lance Bragstad
On 03/19/2018 09:22 AM, Jim Rollenhagen wrote: > > On Sat, Mar 17, 2018 at 9:49 PM, Doug Hellmann > wrote: > > Both of those are good ideas. > > > Agree. I like the socket idea a bit more as I can imagine some > operators don't want

Re: [openstack-dev] [ALL][PTLs] Community Goals for Rocky: Toggle the debug option at runtime

2018-05-14 Thread Lance Bragstad
On 05/14/2018 05:46 PM, Doug Hellmann wrote: > Excerpts from Lance Bragstad's message of 2018-05-14 15:20:42 -0500: >> On 05/14/2018 02:24 PM, Doug Hellmann wrote: >>> Excerpts from Lance Bragstad's message of 2018-05-14 13:13:51 -0500: On 03/19/2018 09:22 AM, Jim Rollenhagen wrote: >

Re: [openstack-dev] [edge][keystone][forum]: Keystone edge brainstorming etherpad

2018-05-11 Thread Lance Bragstad
On 05/10/2018 06:30 AM, Csatari, Gergely (Nokia - HU/Budapest) wrote: > > Hi, > >   > > I’ve added some initial text to the Etherpad [1 > ] of > the Possible edge architectures for Keystone Forum session [2 >

Re: [openstack-dev] [all] Topics for the Board+TC+UC meeting in Vancouver

2018-05-11 Thread Lance Bragstad
On 05/11/2018 02:00 PM, Fox, Kevin M wrote: > Who are your users, what do they need, are you meeting those needs, and what > can you do to better things? > > If that can't be answered, how do you know if you are making progress or > staying relevant? > > Lines of code committed is not a metric

[openstack-dev] [forum] [keystone] unified limits etherpad

2018-05-11 Thread Lance Bragstad
Hi all, I've created an etherpad for the unified limits session at the forum [0]. I've bootstrapped it with some basic context so that we can spend as much time as possible on the session goals. If you have questions, comments, or additional session goals, please feel free to add them to the

[openstack-dev] [forum] [keystone] default roles etherpad

2018-05-11 Thread Lance Bragstad
Hey everyone, I've created an etherpad for the default roles discussion in Vancouver [0]. It currently contains basic context and some session goals. If you have any input or additional session goals, please don't hesitate to add to the etherpad. Thanks and hope to see you there, Lance [0]

Re: [openstack-dev] [tc] [nova] [octavia] [ironic] [keystone] [policy] Spec. Freeze Exception - Default Roles

2018-05-08 Thread Lance Bragstad
/2018 03:16 PM, Lance Bragstad wrote: > > On 05/04/2018 02:55 PM, Harry Rybacki wrote: >> Greetings All, >> >> After a discussion in #openstack-tc[1] earlier today, the Keystone >> team is adjusting its approach in proposing default roles[2]. >> Subsequently, I h

Re: [openstack-dev] [keystone] team dinner

2018-05-20 Thread Lance Bragstad
://urbansushi.com/ There is also other stuff close by like: http://steamworks.com/brew-pub https://www.cactusclubcafe.com/?utm_source=google-maps_medium=organic_campaign=coal-harbour Or if you've gone to a place you'd like to recommend, suggestions are welcome! On 05/18/2018 08:39 AM, Lance Bragstad

[openstack-dev] [keystone] project onboarding

2018-05-18 Thread Lance Bragstad
Hey all, We've started an etherpad in an attempt to capture information prior to the on-boarding session on Monday [0]. If you're looking to get something specific out of the session, please let us know in the etherpad [1]. This will help us come to the session prepared and make the most of the

[openstack-dev] [keystone] team dinner

2018-05-18 Thread Lance Bragstad
Hey all, I put together a survey to see if we can plan a night to have supper together [0]. I'll start parsing responses tomorrow and see what we can get lined up. Thanks and safe travels to Vancouver, Lance [0] https://goo.gl/forms/ogNsf9dUno8BHvqu1 signature.asc Description: OpenPGP

Re: [openstack-dev] [User-committee] [Forum] [all] [Stable] OpenStack is "mature" -- time to get serious on Maintainers -- Session etherpad and food for thought for discussion

2018-05-18 Thread Lance Bragstad
Here is the link to the session in case you'd like to add it to your schedule [0]. [0] https://www.openstack.org/summit/vancouver-2018/summit-schedule/events/21759/openstack-is-mature-time-to-get-serious-on-maintainers On 05/17/2018 07:55 PM, Rochelle Grober wrote: > > Folks, > >   > > TL;DR > >

[openstack-dev] [keystone] Keystone Team Update - Week of 4 June 2018

2018-06-11 Thread Lance Bragstad
opened 7 new bugs, closed 5, and fixed 5. Bugs opened (7) Bug #1775094 (keystone:Medium) opened by Lance Bragstad https://bugs.launchpad.net/keystone/+bug/1775094 Bug #1774654 (keystone:Undecided) opened by Wyllys Ingersoll https://bugs.launchpad.net/keystone/+bug/1774654 Bug #1774688

[openstack-dev] [all] default and implied roles changes

2018-06-19 Thread Lance Bragstad
Hi all, Keystone recently took a big step in implementing the default roles work that's been a hot topic over the past year [0][1][2][3][4], and a big piece in making RBAC more robust across OpenStack. We merged a patch [5] that ensures the roles described in the specification [6] exist. This was

Re: [openstack-dev] Questions about token scopes

2018-05-30 Thread Lance Bragstad
On 05/30/2018 08:47 AM, Matt Riedemann wrote: > I know the keystone team has been doing a lot of work on scoped tokens > and Lance has been trying to roll that out to other projects (like nova). > > In Rocky the nova team is adding granular policy rules to the > placement API [1] which is a good

[openstack-dev] [keystone] test storyboard environment

2018-06-04 Thread Lance Bragstad
Hi all, The StoryBoard team was nice enough to migrate existing content for all keystone-related launchpad projects to a dev environment [0]. This gives us the opportunity to use  StoryBoard with real content. Log in and check it out. I'm curious to know what the rest of the team thinks. [0]

[openstack-dev] [keystone] failing documentation jobs

2018-05-31 Thread Lance Bragstad
Hi all, If you've been trying to write documentation patches, you may have noticed them tripping over unrelated errors when building the docs. We have a bug opened detailing why this happened [0] and a fix working its way through the gate [1]. The docs job should be back up and running soon. [0]

Re: [openstack-dev] Questions about token scopes

2018-06-01 Thread Lance Bragstad
It looks like I had a patch up to improve some developer documentation that is relevant to this discussion [0]. [0] https://review.openstack.org/#/c/554727/ On 06/01/2018 08:01 AM, Jens Harbott wrote: > 2018-05-30 20:37 GMT+00:00 Matt Riedemann : >> On 5/30/2018 9:53 AM, Lance Brags

Re: [openstack-dev] [keystone] Signing off

2018-05-30 Thread Lance Bragstad
I remember when I first started contributing upstream, I spent a Saturday sending you internal emails asking about the intricacies of database migrations :) Since then you've give me (or I've stolen) a number of other tools and techniques. Thanks for everything you've done for this community,

Re: [openstack-dev] Questions about token scopes

2018-05-31 Thread Lance Bragstad
On 05/30/2018 03:37 PM, Matt Riedemann wrote: > On 5/30/2018 9:53 AM, Lance Bragstad wrote: >> While scope isn't explicitly denoted by an >> attribute, it can be derived from the attributes of the token response. >> > > Yeah, this was confusing to me, which is

Re: [openstack-dev] Questions about token scopes

2018-05-31 Thread Lance Bragstad
On 05/31/2018 12:09 AM, Ghanshyam Mann wrote: > On Wed, May 30, 2018 at 11:53 PM, Lance Bragstad wrote: >> >> On 05/30/2018 08:47 AM, Matt Riedemann wrote: >>> I know the keystone team has been doing a lot of work on scoped tokens >>> and Lance has been trying t

Re: [openstack-dev] [all][requirements][docs] sphinx update to 1.7.4 from 1.6.5

2018-06-26 Thread Lance Bragstad
thub.com/oauthlib/oauthlib/issues/558 [1] https://review.openstack.org/#/c/577974/ > >> Doug >> >>> On 06/25/2018 07:27 PM, Tony Breeds wrote: >>>> On Mon, Jun 25, 2018 at 05:42:00PM -0500, Lance Bragstad wrote: >>>>> Keystone is hitting this, to

Re: [openstack-dev] [all][requirements][docs] sphinx update to 1.7.4 from 1.6.5

2018-06-25 Thread Lance Bragstad
Keystone is hitting this, too [0]. I attempted the same solution that Tony posted, but no luck. I've even gone so far as removing every comment from the module to see if that helps narrow down the problem area, but sphinx still trips. The output from the error message isn't very descriptive

Re: [openstack-dev] [all][requirements][docs] sphinx update to 1.7.4 from 1.6.5

2018-06-25 Thread Lance Bragstad
://review.openstack.org/#/c/577974/ On 06/25/2018 07:27 PM, Tony Breeds wrote: > On Mon, Jun 25, 2018 at 05:42:00PM -0500, Lance Bragstad wrote: >> Keystone is hitting this, too [0]. I attempted the same solution that >> Tony posted, but no luck. I've even gone so far as removing every

Re: [openstack-dev] [tc] [all] TC Report 18-26

2018-07-02 Thread Lance Bragstad
On 06/28/2018 02:09 PM, Fox, Kevin M wrote: > I'll weigh in a bit with my operator hat on as recent experience it pertains > to the current conversation > > Kubernetes has largely succeeded in common distribution tools where OpenStack > has not been able to. > kubeadm was created as a way

[openstack-dev] [keystone] [policy] no policy meeting today

2018-05-02 Thread Lance Bragstad
Hi all, I'm going to cancel the policy meeting today since attendance has been waning the last month or two and there are no items on the agenda. We should discuss whether or not we want to continue using this meeting. At this point, most of the policy work is in helping projects consume

[openstack-dev] [keystone][all] v2.0 API removal

2017-10-19 Thread Lance Bragstad
Hey all, Now that we're finishing up the last few bits of v2.0 removal, I'd like to send out a reminder that *Queens* will not include the *v2.0 keystone APIs* except the ec2-api. Authentication and validation of v2.0 tokens has been removed (in addition to the public and admin APIs) after a

Re: [openstack-dev] [keystone][all] v2.0 API removal

2017-10-19 Thread Lance Bragstad
AM, Lance Bragstad <lbrags...@gmail.com> wrote: >> Hey all, >> >> Now that we're finishing up the last few bits of v2.0 removal, I'd like to >> send out a reminder that Queens will not include the v2.0 keystone APIs >> except the ec2-api. Authentication and valida

Re: [openstack-dev] [policy] AWS IAM session

2017-10-20 Thread Lance Bragstad
I just sent a calendar invite to everyone who responded to this thread or voted in the agenda. The session will be recorded if you are unable to make it. Thanks! On 10/18/2017 10:10 AM, Lance Bragstad wrote: > Now that we have some good feedback on the doodle, it looks like we > ha

[openstack-dev] [keystone] office hours report 2017-10-24

2017-10-27 Thread Lance Bragstad
Hey all, Here is the recap of what we worked on during office hours [0] this week: Bug #1726736 in OpenStack Identity (keystone): ""no auth token" debug logs are confusing" https://bugs.launchpad.net/keystone/+bug/1726736 discussed, proposed fix, reviewed, and merged Outside of that, we spent

[openstack-dev] [policy] [keystone] Analyzing other access-control systems

2018-01-05 Thread Lance Bragstad
Hey all, This note is a continuation of a thread we started last year on analyzing other policy systems [0]. Now that we're back from the holidays and having policy meetings on Wednesdays [1], it'd be good to pick up the conversation again. We had a few good sessions a couple months ago going

Re: [openstack-dev] [nova][oslo] API extension policy deprecation warnings

2018-01-05 Thread Lance Bragstad
I thought we planned for that case, but it looks like we log a warning regardless (obviously from your trace) so that operators don't miss opportunities to clean up code. In addition to that, the removal of a policy might make a role obsolete, which is harder to check for than just seeing if they

Re: [openstack-dev] [nova][oslo] API extension policy deprecation warnings

2018-01-05 Thread Lance Bragstad
of self.rules [0]. I'll slap together a test and we should be able to get this in before library freeze for sure. Thanks for raising the issue. [0] https://review.openstack.org/#/c/531497/ On 01/05/2018 01:08 PM, Lance Bragstad wrote: > I thought we planned for that case, but it looks like we

Re: [openstack-dev] Openstack CLI issues

2018-01-09 Thread Lance Bragstad
On 01/09/2018 11:57 AM, Akshay Kapoor wrote: > Hello Everyone ! > > I am facing some issues with the Openstack CLI > > Scenario: > > I have a domain admin user account (say 'A') > > I want to assign this user as an 'admin' to two projects X and Y in > the same domain. > > When I trigger the

Re: [openstack-dev] [oslo] proposing Stephen Finucan for oslo-core

2018-01-08 Thread Lance Bragstad
+1 from an oslo.policy perspective, his reviews have really been helping me out there. On 01/08/2018 08:58 AM, Jay Pipes wrote: > big +1 from me. > > On 01/08/2018 09:55 AM, Doug Hellmann wrote: >> Stephen (sfinucan) has been working on pbr, oslo.config, and >> oslo.policy and reviewing several

Re: [openstack-dev] [keystone] Stepping down from Keystone core

2018-01-15 Thread Lance Bragstad
Boris, Thank you for all the contributions you've made to the project. I always found your reviews extremely thorough and they certainly improved the quality of our code. I'm sad to see you go, but I'm relieved to know that you're not completely leaving us :) This goes without being said, but

[openstack-dev] [keystone] priority review etherpad

2018-01-21 Thread Lance Bragstad
Happy NFL Divisional Playoff Day, We're getting down to the wire and I decided to make an etherpad to track feature reviews that we need to land before feature freeze [0]. I'll attempt to keep it updated the best I can. If you're looking for things to review, it's a great place to start. If I

[openstack-dev] [keystone] FFE for application credentials

2018-01-25 Thread Lance Bragstad
Hey all, The work for application credentials [0] has been up for a while, reviewers are happy with it, and it is slowly making it's way through the gate. I propose we consider a feature freeze exception given the state of the gate and the frequency of rechecks/failures. Thoughts, comments, or

[openstack-dev] [keystone] FFE for unified limits

2018-01-25 Thread Lance Bragstad
Hey all, The work for unified limits [0] has been up for a while, reviewers are happy with it being experimental, and it is slowly making it's way through the gate. I propose we consider a feature freeze exception given the state of the gate and the frequency of rechecks/failures. Thoughts,

[openstack-dev] [keystone] FFE for application credentials

2018-01-25 Thread Lance Bragstad
Hey all, The work for system assignments and system scope [0] has been up for a while, reviewers are happy with it, and it is slowly making it's way through the gate. I propose we consider a feature freeze exception given the state of the gate and the frequency of rechecks/failures. Thoughts,

Re: [openstack-dev] [keystone] FFE for application credentials

2018-01-25 Thread Lance Bragstad
The subject of this message should have been "FFE for system scope"... not application credentials. Apologies for the confusion. On 01/25/2018 03:15 PM, Lance Bragstad wrote: > Hey all, > > The work for system assignments and system scope [0] has been up for a > whil

Re: [openstack-dev] [all] [tc] Community Goals for Rocky

2018-01-12 Thread Lance Bragstad
On 01/12/2018 11:09 AM, Tim Bell wrote: > I was reading a tweet from Jean-Daniel and wondering if there would be an > appropriate community goal regarding support of some of the later API > versions or whether this would be more of a per-project goal. > >

Re: [openstack-dev] [keystone] Keystone Team Update - Week of 22 January 2018

2018-01-30 Thread Lance Bragstad
On 01/27/2018 01:16 PM, Colleen Murphy wrote: > # Keystone Team Update - Week of 22 January 2018 > > ## News > > ### Feature freeze > > This week was feature freeze and client freeze. While we approved > everything we cared about for this release on time, some CI issues > (some unexpected and

[openstack-dev] [keystone] [ptl] PTL candidacy for Rocky

2018-01-31 Thread Lance Bragstad
Hey folks, I'm writing to express my interest in continuing to serve as keystone's PTL for the Rocky release. Even though we're a few weeks away from an official Queens release, I felt we had an extremely productive cycle. The outcome of the Queens PTG in Denver was nothing short of ambitious.

Re: [openstack-dev] [keystone][nova][ironic][heat] Do we want a BM/VM room at the PTG?

2018-02-02 Thread Lance Bragstad
I apologize for using the "baremetal/VM" name, but I wanted to get an etherpad rolling sooner rather than later [0], since we're likely going to have to decide on a new name in person. I ported the initial ideas Colleen mentioned when she started this thread, added links to previous etherpads from

Re: [openstack-dev] [keystone] FFE for application credentials

2018-01-29 Thread Lance Bragstad
+1 I agree. Thanks for the heads up, Colleen. On 01/29/2018 09:53 AM, Colleen Murphy wrote: >> On Thu, Jan 25, 2018 at 10:15 PM, Lance Bragstad <lbrags...@gmail.com> wrote: >>> Hey all, >>> >>> The work for application credentials [0] has been

[openstack-dev] [keystone] Queens RC review dashboard

2018-02-01 Thread Lance Bragstad
Hey all, Just like with feature freeze, I put together a review dashboard that contains patches we need to land in order to cut a release candidate [0]. I'll be adding more patches throughout the day, but so far there are 21 changes there waiting for review. If there is something I missed, please

Re: [openstack-dev] [keystone][nova][ironic][heat] Do we want a BM/VM room at the PTG?

2018-01-31 Thread Lance Bragstad
On 01/30/2018 09:33 AM, Colleen Murphy wrote: > At the last PTG we had some time on Monday and Tuesday for > cross-project discussions related to baremetal and VM management. We > don't currently have that on the schedule for this PTG. There is still > some free time available that we can ask

[openstack-dev] [barbican] [glance] [ironic] [neutron] [tacker] [tc] policy in code goal

2018-01-31 Thread Lance Bragstad
Hey folks, The tracking tool for the policy-and-docs-in-code goal for Queens [0] lists a couple projects remaining for the goal [1].  I wanted to start a discussion with said projects to see how we want to go about the work in the future, we have a couple of options. I can update the document

Re: [openstack-dev] [barbican] [glance] [ironic] [neutron] [tacker] [tc] policy in code goal

2018-01-31 Thread Lance Bragstad
On 01/31/2018 11:20 AM, Dmitry Tantsur wrote: > Hi! > > On 01/31/2018 06:16 PM, Lance Bragstad wrote: >> Hey folks, >> >> The tracking tool for the policy-and-docs-in-code goal for Queens [0] >> lists a couple projects remaining for the goal [1].  I wanted t

Re: [openstack-dev] [barbican] [glance] [ironic] [neutron] [tacker] [tc] policy in code goal

2018-01-31 Thread Lance Bragstad
l be removed from that list. > > Cheers, > > On Wed, Jan 31, 2018 at 7:23 PM, Lance Bragstad <lbrags...@gmail.com > <mailto:lbrags...@gmail.com>> wrote: > > > > On 01/31/2018 11:20 AM, Dmitry Tantsur wrote: > > Hi! >

[openstack-dev] [keystone] milestone-3 retrospective

2018-01-31 Thread Lance Bragstad
Hey all, Now that we're past the 3rd milestone, we can step a time to hold a retrospective. Let's shoot for next week during the weekly keystone meeting. We'll get the board cleaned up before then [0]. Thanks, Lance [0] https://trello.com/b/jrpmDKtf/keystone-retrospective signature.asc

Re: [openstack-dev] [CI][Keystone][Requirements][Release] What happened to the gate on Feb 4th?

2018-02-05 Thread Lance Bragstad
On 02/04/2018 10:44 PM, Qiming Teng wrote: > Starting about 24 hours ago, we have been notified CI gate failure > although we haven't changed anything to our project locally. Before that > we have spent quite some time making the out-of-tree tempest plugins > work on gate. > > After checking the

Re: [openstack-dev] [ptg] Dublin PTG proposed track schedule

2018-02-05 Thread Lance Bragstad
Colleen started a thread asking if there was a need for a baremetal/vm group session [0], which generated quite a bit of positive response. Is there still a possibility of fitting that in on either Monday or Tuesday? The group is usually pretty large. [0]

Re: [openstack-dev] [ptg] Dublin PTG proposed track schedule

2018-02-05 Thread Lance Bragstad
On 02/05/2018 09:34 AM, Thierry Carrez wrote: > Lance Bragstad wrote: >> Colleen started a thread asking if there was a need for a baremetal/vm >> group session [0], which generated quite a bit of positive response. Is >> there still a possibility of fitting tha

Re: [openstack-dev] [keystone] [ptg] Rocky PTG planning

2018-02-05 Thread Lance Bragstad
and we can be flexible in shuffling things around. Thanks for taking a look! [0] https://etherpad.openstack.org/p/keystone-rocky-ptg On 01/03/2018 03:43 PM, Lance Bragstad wrote: > Hey all, > > It's about that time to start our pre-PTG planning activities. I've > started

Re: [openstack-dev] [keystone][nova][ironic][heat] Do we want a BM/VM room at the PTG?

2018-02-05 Thread Lance Bragstad
On 02/02/2018 11:56 AM, Lance Bragstad wrote: > I apologize for using the "baremetal/VM" name, but I wanted to get an > etherpad rolling sooner rather than later [0], since we're likely going > to have to decide on a new name in person. I ported the initial ideas > Coll

[openstack-dev] [keystone] Queens backports

2018-02-12 Thread Lance Bragstad
Hey all, Now that we have a stable/queens branch, I've created a "queens-backport-potential" bug tag. Feel free to use this if you triage a bug that needs to be backported. Thanks, Lance __ OpenStack Development Mailing

Re: [openstack-dev] [keystone] priority review etherpad

2018-02-13 Thread Lance Bragstad
, Jan 21, 2018 at 12:12 PM, Lance Bragstad <lbrags...@gmail.com> wrote: > Actually - we've tracked this kind of work with etherpad in the past and > it becomes cumbersome and duplicates information after a while. Instead, I > built a dashboard to do this [0]. > > Please refer

[openstack-dev] [keystone] [policy] policy meeting update

2018-02-14 Thread Lance Bragstad
Last week during the policy meeting we questioned whether or not we needed weekly meetings anymore [0], especially since the agenda has been relatively sparse recently. Let's hold off on policy meetings until we get to the PTG. There, we're going to be discussing RBAC and all that fun stuff

Re: [openstack-dev] [keystone] Keystone Team Update - Weeks of 29 January and 5 February 2018

2018-02-10 Thread Lance Bragstad
On Fri, Feb 9, 2018 at 4:51 PM, Colleen Murphy wrote: > # Keystone Team Update - Weeks of 29 January and 5 February 2018 > > It's been a busy couple of weeks and I missed the last update, here's > an update for the last two weeks. > > ## News > > ### RC1 > > RC1 was cut

Re: [openstack-dev] [ptg] Dublin PTG proposed track schedule

2018-02-07 Thread Lance Bragstad
On 02/07/2018 05:28 AM, Thierry Carrez wrote: > Lance Bragstad wrote: >> On 02/05/2018 09:34 AM, Thierry Carrez wrote: >>> Lance Bragstad wrote: >>>> Colleen started a thread asking if there was a need for a baremetal/vm >>>> group session [0], which

Re: [openstack-dev] [keystone] Queens RC review dashboard

2018-02-19 Thread Lance Bragstad
Nice, thanks for the reviews. I'll check with the release team if we don't have a stable core approve them by midday. On Sun, Feb 18, 2018 at 6:31 PM, Matt Riedemann <mriede...@gmail.com> wrote: > On 2/1/2018 9:51 AM, Lance Bragstad wrote: > >> Just like with feature free

[openstack-dev] [keystone] PTG etherpads

2018-02-22 Thread Lance Bragstad
Hey all, The schedule has been posted for a while, but I went through and filled out some etherpads for each topic. All of them should be discoverable from the main keystone etherpad [0]. This applies to the identity integration etherpad as well [1]. As always, there is usually some amount of

<    1   2   3   4   5   >