Re: [openstack-dev] [oslo][oslo.config][ansible][tripleo][kolla][ptg] Pluggable drivers and protect plaintext secrets

[Emilien Macchi]

On Thu, Aug 24, 2017 at 4:54 AM, Raildo Mascena de Sousa Filho <
rmasc...@redhat.com> wrote:

> So, I didn't find that topic in the TripleO umbrella[1]. Emilien, can you
> confirm that?
>

It was part of "Follow-up of future of configuration management - what we
have done - where we are and what we plan to do" which is a large topic
that include this effort I believe.



> If not, I have a suggestion, we can schedule into the reservable rooms and
> if we confirm that it will be able to do in the TripleO or any other team's
> agenda, we can remove it.
>
What do you guys think?
>

On another thread [1] we're trying to find the best slot to talk about
common topics between deployment tools. I see this one a really good topic
to discuss together.
Note if we don't have a room (worst case), tripleo team can probably host
the meeting.

Let's find a schedule that works for most of us, in the other thread.

Thanks,

[1]
http://lists.openstack.org/pipermail/openstack-dev/2017-August/121509.html
-- 
Emilien Macchi
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

Re: [openstack-dev] [oslo][oslo.config][ansible][tripleo][kolla][ptg] Pluggable drivers and protect plaintext secrets

[Raildo Mascena de Sousa Filho]

So, I didn't find that topic in the TripleO umbrella[1]. Emilien, can you
confirm that?
If not, I have a suggestion, we can schedule into the reservable rooms and
if we confirm that it will be able to do in the TripleO or any other team's
agenda, we can remove it.

What do you guys think?

[1] https://etherpad.openstack.org/p/tripleo-ptg-queens

On Mon, Aug 21, 2017 at 11:54 AM Doug Hellmann 
wrote:

> Excerpts from Raildo Mascena de Sousa Filho's message of 2017-08-17
> 12:16:15 +:
> > Hi all,
> >
> > Should we reserve a room in the extra session ethercalc [0
> > ] or we
> > already have a time slot scheduled for that discussion?
> >
> > [0] https://ethercalc.openstack.org/Queens-PTG-Discussion-Rooms
>
> I think this topic was on Emilien's list for TripleO. Would the other
> groups mind if the TripleO team hosts the discussion in their room? That
> would save the more limited reserveable rooms for discussions that don't
> have an obvious host.
>
> Doug
>
> __
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>
-- 

Raildo mascena

Software Engineer, Identity Managment

Red Hat



TRIED. TESTED. TRUSTED. 
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

Re: [openstack-dev] [oslo][oslo.config][ansible][tripleo][kolla][ptg] Pluggable drivers and protect plaintext secrets

[Doug Hellmann]

Excerpts from Raildo Mascena de Sousa Filho's message of 2017-08-17 12:16:15 
+:
> Hi all,
> 
> Should we reserve a room in the extra session ethercalc [0
> ] or we
> already have a time slot scheduled for that discussion?
> 
> [0] https://ethercalc.openstack.org/Queens-PTG-Discussion-Rooms

I think this topic was on Emilien's list for TripleO. Would the other
groups mind if the TripleO team hosts the discussion in their room? That
would save the more limited reserveable rooms for discussions that don't
have an obvious host.

Doug

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

Re: [openstack-dev] [oslo][oslo.config][ansible][tripleo][kolla][ptg] Pluggable drivers and protect plaintext secrets

[Raildo Mascena de Sousa Filho]

Well, it was the first option but unfortunately, Doug doesn't have any free
time slot on those days, so we have to postpone that discussion to the end
of the week.

On Thu, Aug 17, 2017 at 9:41 AM Thierry Carrez 
wrote:

> Raildo Mascena de Sousa Filho wrote:
> > Hi all,
> >
> > Should we reserve a room in the extra session ethercalc [0
> > <%20https://ethercalc.openstack.org/Queens-PTG-Discussion-Rooms%20>] or
> > we already have a time slot scheduled for that discussion?
> >
> > [0] https://ethercalc.openstack.org/Queens-PTG-Discussion-Rooms
>
> It feels like this discussion could be scheduled in the Oslo room as
> well. I guess it depends whether you need extra room :)
>
> --
> Thierry Carrez (ttx)
>
> __
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>
-- 

Raildo mascena

Software Engineer, Identity Managment

Red Hat



TRIED. TESTED. TRUSTED. 
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

Re: [openstack-dev] [oslo][oslo.config][ansible][tripleo][kolla][ptg] Pluggable drivers and protect plaintext secrets

[Thierry Carrez]

Raildo Mascena de Sousa Filho wrote:
> Hi all,
> 
> Should we reserve a room in the extra session ethercalc [0
> <%20https://ethercalc.openstack.org/Queens-PTG-Discussion-Rooms%20>] or
> we already have a time slot scheduled for that discussion?
> 
> [0] https://ethercalc.openstack.org/Queens-PTG-Discussion-Rooms

It feels like this discussion could be scheduled in the Oslo room as
well. I guess it depends whether you need extra room :)

-- 
Thierry Carrez (ttx)

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

Re: [openstack-dev] [oslo][oslo.config][ansible][tripleo][kolla][ptg] Pluggable drivers and protect plaintext secrets

[Raildo Mascena de Sousa Filho]

Hi all,

Should we reserve a room in the extra session ethercalc [0
] or we
already have a time slot scheduled for that discussion?

[0] https://ethercalc.openstack.org/Queens-PTG-Discussion-Rooms

Cheers,

On Tue, Aug 8, 2017 at 7:49 AM Thierry Carrez  wrote:

> Emilien Macchi wrote:
> > On Mon, Aug 7, 2017 at 9:15 AM, Doug Hellmann 
> wrote:
> >> Kendall & Thierry, what do we need to do to reserve that room if we
> >> can't find space in another team room?
> >
> > Worst case, we can use a slot from TripleO - this topic is also
> > critical to us and I think we can make our schedule to have one free
> > room during the 2 and a half days that we have.
> > Just let me know.
>
> It could also be scheduled in one of the extra reservable rooms we have
> on Thursday/Friday. The ethercalc for that should be up next week.
>
> --
> Thierry Carrez (ttx)
>
> __
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>
-- 

Raildo mascena

Software Engineer, Identity Managment

Red Hat



TRIED. TESTED. TRUSTED. 
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

Re: [openstack-dev] [oslo][oslo.config][ansible][tripleo][kolla][ptg] Pluggable drivers and protect plaintext secrets

[Thierry Carrez]

Emilien Macchi wrote:
> On Mon, Aug 7, 2017 at 9:15 AM, Doug Hellmann  wrote:
>> Kendall & Thierry, what do we need to do to reserve that room if we
>> can't find space in another team room?
> 
> Worst case, we can use a slot from TripleO - this topic is also
> critical to us and I think we can make our schedule to have one free
> room during the 2 and a half days that we have.
> Just let me know.

It could also be scheduled in one of the extra reservable rooms we have
on Thursday/Friday. The ethercalc for that should be up next week.

-- 
Thierry Carrez (ttx)

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

Re: [openstack-dev] [oslo][oslo.config][ansible][tripleo][kolla][ptg] Pluggable drivers and protect plaintext secrets

[Emilien Macchi]

On Mon, Aug 7, 2017 at 9:15 AM, Doug Hellmann  wrote:
> Kendall & Thierry, what do we need to do to reserve that room if we
> can't find space in another team room?

Worst case, we can use a slot from TripleO - this topic is also
critical to us and I think we can make our schedule to have one free
room during the 2 and a half days that we have.
Just let me know.
-- 
Emilien Macchi

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

Re: [openstack-dev] [oslo][oslo.config][ansible][tripleo][kolla][ptg] Pluggable drivers and protect plaintext secrets

[Doug Hellmann]

Excerpts from Raildo Mascena de Sousa Filho's message of 2017-08-04 19:34:25 
+:
> Hi all,
> 
> We had a couple of discussions with the Oslo team related to implement
> Pluggable drivers for oslo.config[0] and use those feature to implement
> support to protect plaintext secret on configuration files[1].
> 
> In another hand, due the containerized support on OpenStack services, we
> have a community effort to implement a k8s ConfigMap support[2][3], which
> might make us step back and consider how secret management will work, since
> the config data will need to go into the configmap *before* the container
> is launched.
> 
> So, I would like to see what the community think. Should we continue
> working on that pluggable drivers and protect plain text secrets support
> for oslo.config? Makes sense having a PTG session[4] on Oslo to discuss
> that feature?
> 
> Thanks for the feedback in advance.
> 
> Cheers,
> 
> [0] https://review.openstack.org/#/c/454897/
> [1] https://review.openstack.org/#/c/474304/
> [2]
> https://github.com/flaper87/keystone-k8s-ansible/blob/6524b768d75a28adf44c74aca77ccf13dd66b1a9/provision-keystone-apb/tasks/main.yaml#L71-L108
> [3] https://kubernetes.io/docs/
> 
> tasks/configure-pod-container/configmap/
> 
> [4] https://etherpad.openstack.org/p/oslo-ptg-queens

I've added some of the deployment project tags to the subject line to
expand the audience for this discussion.

We're trying to decide what to do about space at the PTG for this
conversation. My Monday-Wednesday are completely booked, so I was
hoping we could do it Thursday. The Oslo team won't have a room then, so
we need to either find space in another room or reserve one of the extra
rooms mentioned on the schedule [1].

Kendall & Thierry, what do we need to do to reserve that room if we
can't find space in another team room?

Before we meet in Denver, it would be very useful to have some documents
describing the end-to-end processes teams foresee using for managing
secrets.

Doug

[1] 
https://docs.google.com/spreadsheets/u/1/d/1xmOdT6uZ5XqViActr5sBOaz_mEgjKSCY7NEWcAEcT-A/pubhtml?gid=397241312=true

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev