Re: [openstack-dev] [policy] AWS IAM session

[Lance Bragstad]

I'm not sure how I didn't include -operators the first time around, but
adding them to this thread now.

TL;DR

We're going through policy/RBAC for other systems to get an idea of how
we want to shape OpenStack's policy and RBAC model. We're going to meet
next Wednesday at 15:00 UTC. The meeting will be recorded. Previous
context and information is in this thread.

Thanks!

On 10/25/2017 01:29 PM, Lance Bragstad wrote:
> I've recapped the notes from today's session and I'll post a follow up
> with the recording as soon as it's available. All notes can be found
> in the etherpad (agreement and outcomes are in *bold*)**[0]. Next week
> at the same time (15:00 UTC) we will continue going through AWS IAM
> flows.
>
> While today's discussion was helpful, it was very free-form. Let's aim
> to target a very specific flow for next week. What do we want that to be?
>
> Thanks!
>
> [0] https://etherpad.openstack.org/p/analyzing-other-policy-systems
>
> On 10/24/2017 02:02 PM, Lance Bragstad wrote:
>> Gentle reminder that this will be happening tomorrow. See you then!
>>
>> On 10/20/2017 09:46 AM, Lance Bragstad wrote:
>>> I just sent a calendar invite to everyone who responded to this
>>> thread or voted in the agenda. The session will be recorded if you
>>> are unable to make it.
>>>
>>> Thanks!
>>>
>>> On 10/18/2017 10:10 AM, Lance Bragstad wrote:
 Now that we have some good feedback on the doodle, it looks like we
 have two sessions that will work for everyone. One is October 25th
 from 15:00 - 16:00 UTC and the other is also the 25th from 16:00 -
 17:00.

 Let's shoot to meet at *15:00 UTC* on *October 25th* and if the
 meeting goes over, we have time allocated for that. Would anyone
 like a formal calendar invite? If so, I can send one out. The
 etherpad [0] will act as our "schedule", but we'll likely just work
 through the cases we've documented.

 Thanks!

 [0] https://etherpad.openstack.org/p/analyzing-other-policy-systems


 On 10/16/2017 08:45 AM, Lance Bragstad wrote:
> Sending out a gentle reminder to vote for time slots that work for
> you [0]. We'll keep the poll open for a few more days, or until we
> reach quorum. Thanks!
>
> [0] https://beta.doodle.com/poll/ntkpzgmcv3k6v5qu
>
> On 10/11/2017 01:48 PM, Lance Bragstad wrote:
>> Oh - one note about the doodle [0]. All proposed times are in
>> UTC, so just keep that in mind when selecting your availability.
>>
>> Thanks!
>>
>> [0] https://beta.doodle.com/poll/ntkpzgmcv3k6v5qu
>>
>> On 10/11/2017 01:44 PM, Lance Bragstad wrote:
>>> In today's policy meeting we went through and started prepping
>>> for the session. Relevant information has been captured in the
>>> etherpad [0].
>>>
>>> We're going to hold the meeting using *Google* *Hangouts*. I'll
>>> update the etherpad with a link to the hangout once we settle on
>>> a date. If you plan on attending, please *vote* *for*
>>> *available* *times* [1]. I've proposed a bunch of time slots (4
>>> each day for the next two weeks) to try and find a time that
>>> works for everyone. People from US, AU, and EU will be trying to
>>> attended, so we're not going to find a perfect time for
>>> everyone. Having said that, *we're going to record the session*.
>>>
>>> Most of what we talked about in the meeting today uncovered the
>>> need to go over the basics of AWS IAM. That should be something
>>> we can do with a free account, which I'm going to sign up for.
>>> If we need more time we can have another session or look at
>>> options for upgrading the account.
>>>
>>>
>>> [0] https://etherpad.openstack.org/p/analyzing-other-policy-systems
>>> [1] https://doodle.com/poll/ntkpzgmcv3k6v5qu
>>>
>>> On 10/09/2017 04:23 PM, Lance Bragstad wrote:
 I've put a scheduling session on the books for the next policy
 meeting [0][1]. Advertising it here since folks who want to be
 involved have responded to the thread.

 Let's use this meeting time to iron out account details and
 figure out what exactly we want to get out of the session.


 [0] http://eavesdrop.openstack.org/#Keystone_Policy_Meeting
 [1] https://etherpad.openstack.org/p/keystone-policy-meeting

 On 10/05/2017 02:24 AM, Colleen Murphy wrote:
> On Tue, Oct 3, 2017 at 10:08 PM, Lance Bragstad
> > wrote:
>
> Hey all,
>
> It was mentioned in today's keystone meeting [0] that it
> would be useful
> to go through AWS IAM (or even GKE) as a group. With all
> the recent
> policy discussions and work, it seems useful to get our
> eyes on another
> system. The idea would be to 

Re: [openstack-dev] [policy] AWS IAM session

[Lance Bragstad]

I've recapped the notes from today's session and I'll post a follow up
with the recording as soon as it's available. All notes can be found in
the etherpad (agreement and outcomes are in *bold*)**[0]. Next week at
the same time (15:00 UTC) we will continue going through AWS IAM flows.

While today's discussion was helpful, it was very free-form. Let's aim
to target a very specific flow for next week. What do we want that to be?

Thanks!

[0] https://etherpad.openstack.org/p/analyzing-other-policy-systems

On 10/24/2017 02:02 PM, Lance Bragstad wrote:
> Gentle reminder that this will be happening tomorrow. See you then!
>
> On 10/20/2017 09:46 AM, Lance Bragstad wrote:
>> I just sent a calendar invite to everyone who responded to this
>> thread or voted in the agenda. The session will be recorded if you
>> are unable to make it.
>>
>> Thanks!
>>
>> On 10/18/2017 10:10 AM, Lance Bragstad wrote:
>>> Now that we have some good feedback on the doodle, it looks like we
>>> have two sessions that will work for everyone. One is October 25th
>>> from 15:00 - 16:00 UTC and the other is also the 25th from 16:00 -
>>> 17:00.
>>>
>>> Let's shoot to meet at *15:00 UTC* on *October 25th* and if the
>>> meeting goes over, we have time allocated for that. Would anyone
>>> like a formal calendar invite? If so, I can send one out. The
>>> etherpad [0] will act as our "schedule", but we'll likely just work
>>> through the cases we've documented.
>>>
>>> Thanks!
>>>
>>> [0] https://etherpad.openstack.org/p/analyzing-other-policy-systems
>>>
>>>
>>> On 10/16/2017 08:45 AM, Lance Bragstad wrote:
 Sending out a gentle reminder to vote for time slots that work for
 you [0]. We'll keep the poll open for a few more days, or until we
 reach quorum. Thanks!

 [0] https://beta.doodle.com/poll/ntkpzgmcv3k6v5qu

 On 10/11/2017 01:48 PM, Lance Bragstad wrote:
> Oh - one note about the doodle [0]. All proposed times are in UTC,
> so just keep that in mind when selecting your availability.
>
> Thanks!
>
> [0] https://beta.doodle.com/poll/ntkpzgmcv3k6v5qu
>
> On 10/11/2017 01:44 PM, Lance Bragstad wrote:
>> In today's policy meeting we went through and started prepping
>> for the session. Relevant information has been captured in the
>> etherpad [0].
>>
>> We're going to hold the meeting using *Google* *Hangouts*. I'll
>> update the etherpad with a link to the hangout once we settle on
>> a date. If you plan on attending, please *vote* *for* *available*
>> *times* [1]. I've proposed a bunch of time slots (4 each day for
>> the next two weeks) to try and find a time that works for
>> everyone. People from US, AU, and EU will be trying to attended,
>> so we're not going to find a perfect time for everyone. Having
>> said that, *we're going to record the session*.
>>
>> Most of what we talked about in the meeting today uncovered the
>> need to go over the basics of AWS IAM. That should be something
>> we can do with a free account, which I'm going to sign up for. If
>> we need more time we can have another session or look at options
>> for upgrading the account.
>>
>>
>> [0] https://etherpad.openstack.org/p/analyzing-other-policy-systems
>> [1] https://doodle.com/poll/ntkpzgmcv3k6v5qu
>>
>> On 10/09/2017 04:23 PM, Lance Bragstad wrote:
>>> I've put a scheduling session on the books for the next policy
>>> meeting [0][1]. Advertising it here since folks who want to be
>>> involved have responded to the thread.
>>>
>>> Let's use this meeting time to iron out account details and
>>> figure out what exactly we want to get out of the session.
>>>
>>>
>>> [0] http://eavesdrop.openstack.org/#Keystone_Policy_Meeting
>>> [1] https://etherpad.openstack.org/p/keystone-policy-meeting
>>>
>>> On 10/05/2017 02:24 AM, Colleen Murphy wrote:
 On Tue, Oct 3, 2017 at 10:08 PM, Lance Bragstad
 > wrote:

 Hey all,

 It was mentioned in today's keystone meeting [0] that it
 would be useful
 to go through AWS IAM (or even GKE) as a group. With all
 the recent
 policy discussions and work, it seems useful to get our
 eyes on another
 system. The idea would be to spend time using a video
 conference/screen
 share to go through and play with policy together. The end
 result should
 keep us focused on the implementations we're working on
 today, but also
 provide clarity for the long-term vision of OpenStack's
 RBAC system.

 Are you interested in attending? If so, please respond to
 the thread.
 Once we have some interest, we can gauge when to hold the
 

Re: [openstack-dev] [policy] AWS IAM session

[Lance Bragstad]

Gentle reminder that this will be happening tomorrow. See you then!

On 10/20/2017 09:46 AM, Lance Bragstad wrote:
> I just sent a calendar invite to everyone who responded to this thread
> or voted in the agenda. The session will be recorded if you are unable
> to make it.
>
> Thanks!
>
> On 10/18/2017 10:10 AM, Lance Bragstad wrote:
>> Now that we have some good feedback on the doodle, it looks like we
>> have two sessions that will work for everyone. One is October 25th
>> from 15:00 - 16:00 UTC and the other is also the 25th from 16:00 - 17:00.
>>
>> Let's shoot to meet at *15:00 UTC* on *October 25th* and if the
>> meeting goes over, we have time allocated for that. Would anyone like
>> a formal calendar invite? If so, I can send one out. The etherpad [0]
>> will act as our "schedule", but we'll likely just work through the
>> cases we've documented.
>>
>> Thanks!
>>
>> [0] https://etherpad.openstack.org/p/analyzing-other-policy-systems
>>
>>
>> On 10/16/2017 08:45 AM, Lance Bragstad wrote:
>>> Sending out a gentle reminder to vote for time slots that work for
>>> you [0]. We'll keep the poll open for a few more days, or until we
>>> reach quorum. Thanks!
>>>
>>> [0] https://beta.doodle.com/poll/ntkpzgmcv3k6v5qu
>>>
>>> On 10/11/2017 01:48 PM, Lance Bragstad wrote:
 Oh - one note about the doodle [0]. All proposed times are in UTC,
 so just keep that in mind when selecting your availability.

 Thanks!

 [0] https://beta.doodle.com/poll/ntkpzgmcv3k6v5qu

 On 10/11/2017 01:44 PM, Lance Bragstad wrote:
> In today's policy meeting we went through and started prepping for
> the session. Relevant information has been captured in the
> etherpad [0].
>
> We're going to hold the meeting using *Google* *Hangouts*. I'll
> update the etherpad with a link to the hangout once we settle on a
> date. If you plan on attending, please *vote* *for* *available*
> *times* [1]. I've proposed a bunch of time slots (4 each day for
> the next two weeks) to try and find a time that works for
> everyone. People from US, AU, and EU will be trying to attended,
> so we're not going to find a perfect time for everyone. Having
> said that, *we're going to record the session*.
>
> Most of what we talked about in the meeting today uncovered the
> need to go over the basics of AWS IAM. That should be something we
> can do with a free account, which I'm going to sign up for. If we
> need more time we can have another session or look at options for
> upgrading the account.
>
>
> [0] https://etherpad.openstack.org/p/analyzing-other-policy-systems
> [1] https://doodle.com/poll/ntkpzgmcv3k6v5qu
>
> On 10/09/2017 04:23 PM, Lance Bragstad wrote:
>> I've put a scheduling session on the books for the next policy
>> meeting [0][1]. Advertising it here since folks who want to be
>> involved have responded to the thread.
>>
>> Let's use this meeting time to iron out account details and
>> figure out what exactly we want to get out of the session.
>>
>>
>> [0] http://eavesdrop.openstack.org/#Keystone_Policy_Meeting
>> [1] https://etherpad.openstack.org/p/keystone-policy-meeting
>>
>> On 10/05/2017 02:24 AM, Colleen Murphy wrote:
>>> On Tue, Oct 3, 2017 at 10:08 PM, Lance Bragstad
>>> > wrote:
>>>
>>> Hey all,
>>>
>>> It was mentioned in today's keystone meeting [0] that it
>>> would be useful
>>> to go through AWS IAM (or even GKE) as a group. With all the
>>> recent
>>> policy discussions and work, it seems useful to get our eyes
>>> on another
>>> system. The idea would be to spend time using a video
>>> conference/screen
>>> share to go through and play with policy together. The end
>>> result should
>>> keep us focused on the implementations we're working on
>>> today, but also
>>> provide clarity for the long-term vision of OpenStack's RBAC
>>> system.
>>>
>>> Are you interested in attending? If so, please respond to
>>> the thread.
>>> Once we have some interest, we can gauge when to hold the
>>> meeting, which
>>> tools we can use, and setting up a test IAM account.
>>>
>>> Thanks,
>>>
>>> Lance
>>>
>>> [0]
>>> 
>>> http://eavesdrop.openstack.org/meetings/keystone/2017/keystone.2017-10-03-18.00.log.html#l-119
>>> 
>>> 
>>>
>>> Please count me in.
>>>
>>> Colleen
>>>
>>>
>>> __
>>> OpenStack Development Mailing List (not for usage questions)
>>> Unsubscribe: 
>>> 

Re: [openstack-dev] [policy] AWS IAM session

[Lance Bragstad]

I just sent a calendar invite to everyone who responded to this thread
or voted in the agenda. The session will be recorded if you are unable
to make it.

Thanks!

On 10/18/2017 10:10 AM, Lance Bragstad wrote:
> Now that we have some good feedback on the doodle, it looks like we
> have two sessions that will work for everyone. One is October 25th
> from 15:00 - 16:00 UTC and the other is also the 25th from 16:00 - 17:00.
>
> Let's shoot to meet at *15:00 UTC* on *October 25th* and if the
> meeting goes over, we have time allocated for that. Would anyone like
> a formal calendar invite? If so, I can send one out. The etherpad [0]
> will act as our "schedule", but we'll likely just work through the
> cases we've documented.
>
> Thanks!
>
> [0] https://etherpad.openstack.org/p/analyzing-other-policy-systems
>
>
> On 10/16/2017 08:45 AM, Lance Bragstad wrote:
>> Sending out a gentle reminder to vote for time slots that work for
>> you [0]. We'll keep the poll open for a few more days, or until we
>> reach quorum. Thanks!
>>
>> [0] https://beta.doodle.com/poll/ntkpzgmcv3k6v5qu
>>
>> On 10/11/2017 01:48 PM, Lance Bragstad wrote:
>>> Oh - one note about the doodle [0]. All proposed times are in UTC,
>>> so just keep that in mind when selecting your availability.
>>>
>>> Thanks!
>>>
>>> [0] https://beta.doodle.com/poll/ntkpzgmcv3k6v5qu
>>>
>>> On 10/11/2017 01:44 PM, Lance Bragstad wrote:
 In today's policy meeting we went through and started prepping for
 the session. Relevant information has been captured in the etherpad
 [0].

 We're going to hold the meeting using *Google* *Hangouts*. I'll
 update the etherpad with a link to the hangout once we settle on a
 date. If you plan on attending, please *vote* *for* *available*
 *times* [1]. I've proposed a bunch of time slots (4 each day for
 the next two weeks) to try and find a time that works for everyone.
 People from US, AU, and EU will be trying to attended, so we're not
 going to find a perfect time for everyone. Having said that, *we're
 going to record the session*.

 Most of what we talked about in the meeting today uncovered the
 need to go over the basics of AWS IAM. That should be something we
 can do with a free account, which I'm going to sign up for. If we
 need more time we can have another session or look at options for
 upgrading the account.


 [0] https://etherpad.openstack.org/p/analyzing-other-policy-systems
 [1] https://doodle.com/poll/ntkpzgmcv3k6v5qu

 On 10/09/2017 04:23 PM, Lance Bragstad wrote:
> I've put a scheduling session on the books for the next policy
> meeting [0][1]. Advertising it here since folks who want to be
> involved have responded to the thread.
>
> Let's use this meeting time to iron out account details and figure
> out what exactly we want to get out of the session.
>
>
> [0] http://eavesdrop.openstack.org/#Keystone_Policy_Meeting
> [1] https://etherpad.openstack.org/p/keystone-policy-meeting
>
> On 10/05/2017 02:24 AM, Colleen Murphy wrote:
>> On Tue, Oct 3, 2017 at 10:08 PM, Lance Bragstad
>> > wrote:
>>
>> Hey all,
>>
>> It was mentioned in today's keystone meeting [0] that it
>> would be useful
>> to go through AWS IAM (or even GKE) as a group. With all the
>> recent
>> policy discussions and work, it seems useful to get our eyes
>> on another
>> system. The idea would be to spend time using a video
>> conference/screen
>> share to go through and play with policy together. The end
>> result should
>> keep us focused on the implementations we're working on
>> today, but also
>> provide clarity for the long-term vision of OpenStack's RBAC
>> system.
>>
>> Are you interested in attending? If so, please respond to the
>> thread.
>> Once we have some interest, we can gauge when to hold the
>> meeting, which
>> tools we can use, and setting up a test IAM account.
>>
>> Thanks,
>>
>> Lance
>>
>> [0]
>> 
>> http://eavesdrop.openstack.org/meetings/keystone/2017/keystone.2017-10-03-18.00.log.html#l-119
>> 
>> 
>>
>> Please count me in.
>>
>> Colleen
>>
>>
>> __
>> OpenStack Development Mailing List (not for usage questions)
>> Unsubscribe: 
>> openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>

>>>
>>
>



signature.asc
Description: OpenPGP digital signature

Re: [openstack-dev] [policy] AWS IAM session

[Lance Bragstad]

Now that we have some good feedback on the doodle, it looks like we have
two sessions that will work for everyone. One is October 25th from 15:00
- 16:00 UTC and the other is also the 25th from 16:00 - 17:00.

Let's shoot to meet at *15:00 UTC* on *October 25th* and if the meeting
goes over, we have time allocated for that. Would anyone like a formal
calendar invite? If so, I can send one out. The etherpad [0] will act as
our "schedule", but we'll likely just work through the cases we've
documented.

Thanks!

[0] https://etherpad.openstack.org/p/analyzing-other-policy-systems


On 10/16/2017 08:45 AM, Lance Bragstad wrote:
> Sending out a gentle reminder to vote for time slots that work for you
> [0]. We'll keep the poll open for a few more days, or until we reach
> quorum. Thanks!
>
> [0] https://beta.doodle.com/poll/ntkpzgmcv3k6v5qu
>
> On 10/11/2017 01:48 PM, Lance Bragstad wrote:
>> Oh - one note about the doodle [0]. All proposed times are in UTC, so
>> just keep that in mind when selecting your availability.
>>
>> Thanks!
>>
>> [0] https://beta.doodle.com/poll/ntkpzgmcv3k6v5qu
>>
>> On 10/11/2017 01:44 PM, Lance Bragstad wrote:
>>> In today's policy meeting we went through and started prepping for
>>> the session. Relevant information has been captured in the etherpad [0].
>>>
>>> We're going to hold the meeting using *Google* *Hangouts*. I'll
>>> update the etherpad with a link to the hangout once we settle on a
>>> date. If you plan on attending, please *vote* *for* *available*
>>> *times* [1]. I've proposed a bunch of time slots (4 each day for the
>>> next two weeks) to try and find a time that works for everyone.
>>> People from US, AU, and EU will be trying to attended, so we're not
>>> going to find a perfect time for everyone. Having said that, *we're
>>> going to record the session*.
>>>
>>> Most of what we talked about in the meeting today uncovered the need
>>> to go over the basics of AWS IAM. That should be something we can do
>>> with a free account, which I'm going to sign up for. If we need more
>>> time we can have another session or look at options for upgrading
>>> the account.
>>>
>>>
>>> [0] https://etherpad.openstack.org/p/analyzing-other-policy-systems
>>> [1] https://doodle.com/poll/ntkpzgmcv3k6v5qu
>>>
>>> On 10/09/2017 04:23 PM, Lance Bragstad wrote:
 I've put a scheduling session on the books for the next policy
 meeting [0][1]. Advertising it here since folks who want to be
 involved have responded to the thread.

 Let's use this meeting time to iron out account details and figure
 out what exactly we want to get out of the session.


 [0] http://eavesdrop.openstack.org/#Keystone_Policy_Meeting
 [1] https://etherpad.openstack.org/p/keystone-policy-meeting

 On 10/05/2017 02:24 AM, Colleen Murphy wrote:
> On Tue, Oct 3, 2017 at 10:08 PM, Lance Bragstad
> > wrote:
>
> Hey all,
>
> It was mentioned in today's keystone meeting [0] that it would
> be useful
> to go through AWS IAM (or even GKE) as a group. With all the
> recent
> policy discussions and work, it seems useful to get our eyes
> on another
> system. The idea would be to spend time using a video
> conference/screen
> share to go through and play with policy together. The end
> result should
> keep us focused on the implementations we're working on today,
> but also
> provide clarity for the long-term vision of OpenStack's RBAC
> system.
>
> Are you interested in attending? If so, please respond to the
> thread.
> Once we have some interest, we can gauge when to hold the
> meeting, which
> tools we can use, and setting up a test IAM account.
>
> Thanks,
>
> Lance
>
> [0]
> 
> http://eavesdrop.openstack.org/meetings/keystone/2017/keystone.2017-10-03-18.00.log.html#l-119
> 
> 
>
> Please count me in.
>
> Colleen
>
>
> __
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

>>>
>>
>



signature.asc
Description: OpenPGP digital signature
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

Re: [openstack-dev] [policy] AWS IAM session

[Lance Bragstad]

Sending out a gentle reminder to vote for time slots that work for you
[0]. We'll keep the poll open for a few more days, or until we reach
quorum. Thanks!

[0] https://beta.doodle.com/poll/ntkpzgmcv3k6v5qu

On 10/11/2017 01:48 PM, Lance Bragstad wrote:
> Oh - one note about the doodle [0]. All proposed times are in UTC, so
> just keep that in mind when selecting your availability.
>
> Thanks!
>
> [0] https://beta.doodle.com/poll/ntkpzgmcv3k6v5qu
>
> On 10/11/2017 01:44 PM, Lance Bragstad wrote:
>> In today's policy meeting we went through and started prepping for
>> the session. Relevant information has been captured in the etherpad [0].
>>
>> We're going to hold the meeting using *Google* *Hangouts*. I'll
>> update the etherpad with a link to the hangout once we settle on a
>> date. If you plan on attending, please *vote* *for* *available*
>> *times* [1]. I've proposed a bunch of time slots (4 each day for the
>> next two weeks) to try and find a time that works for everyone.
>> People from US, AU, and EU will be trying to attended, so we're not
>> going to find a perfect time for everyone. Having said that, *we're
>> going to record the session*.
>>
>> Most of what we talked about in the meeting today uncovered the need
>> to go over the basics of AWS IAM. That should be something we can do
>> with a free account, which I'm going to sign up for. If we need more
>> time we can have another session or look at options for upgrading the
>> account.
>>
>>
>> [0] https://etherpad.openstack.org/p/analyzing-other-policy-systems
>> [1] https://doodle.com/poll/ntkpzgmcv3k6v5qu
>>
>> On 10/09/2017 04:23 PM, Lance Bragstad wrote:
>>> I've put a scheduling session on the books for the next policy
>>> meeting [0][1]. Advertising it here since folks who want to be
>>> involved have responded to the thread.
>>>
>>> Let's use this meeting time to iron out account details and figure
>>> out what exactly we want to get out of the session.
>>>
>>>
>>> [0] http://eavesdrop.openstack.org/#Keystone_Policy_Meeting
>>> [1] https://etherpad.openstack.org/p/keystone-policy-meeting
>>>
>>> On 10/05/2017 02:24 AM, Colleen Murphy wrote:
 On Tue, Oct 3, 2017 at 10:08 PM, Lance Bragstad
 > wrote:

 Hey all,

 It was mentioned in today's keystone meeting [0] that it would
 be useful
 to go through AWS IAM (or even GKE) as a group. With all the recent
 policy discussions and work, it seems useful to get our eyes on
 another
 system. The idea would be to spend time using a video
 conference/screen
 share to go through and play with policy together. The end
 result should
 keep us focused on the implementations we're working on today,
 but also
 provide clarity for the long-term vision of OpenStack's RBAC
 system.

 Are you interested in attending? If so, please respond to the
 thread.
 Once we have some interest, we can gauge when to hold the
 meeting, which
 tools we can use, and setting up a test IAM account.

 Thanks,

 Lance

 [0]
 
 http://eavesdrop.openstack.org/meetings/keystone/2017/keystone.2017-10-03-18.00.log.html#l-119
 
 

 Please count me in.

 Colleen


 __
 OpenStack Development Mailing List (not for usage questions)
 Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
 http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>>>
>>
>



signature.asc
Description: OpenPGP digital signature
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

Re: [openstack-dev] [policy] AWS IAM session

[Lance Bragstad]

Oh - one note about the doodle [0]. All proposed times are in UTC, so
just keep that in mind when selecting your availability.

Thanks!

[0] https://beta.doodle.com/poll/ntkpzgmcv3k6v5qu

On 10/11/2017 01:44 PM, Lance Bragstad wrote:
> In today's policy meeting we went through and started prepping for the
> session. Relevant information has been captured in the etherpad [0].
>
> We're going to hold the meeting using *Google* *Hangouts*. I'll update
> the etherpad with a link to the hangout once we settle on a date. If
> you plan on attending, please *vote* *for* *available* *times* [1].
> I've proposed a bunch of time slots (4 each day for the next two
> weeks) to try and find a time that works for everyone. People from US,
> AU, and EU will be trying to attended, so we're not going to find a
> perfect time for everyone. Having said that, *we're going to record
> the session*.
>
> Most of what we talked about in the meeting today uncovered the need
> to go over the basics of AWS IAM. That should be something we can do
> with a free account, which I'm going to sign up for. If we need more
> time we can have another session or look at options for upgrading the
> account.
>
>
> [0] https://etherpad.openstack.org/p/analyzing-other-policy-systems
> [1] https://doodle.com/poll/ntkpzgmcv3k6v5qu
>
> On 10/09/2017 04:23 PM, Lance Bragstad wrote:
>> I've put a scheduling session on the books for the next policy
>> meeting [0][1]. Advertising it here since folks who want to be
>> involved have responded to the thread.
>>
>> Let's use this meeting time to iron out account details and figure
>> out what exactly we want to get out of the session.
>>
>>
>> [0] http://eavesdrop.openstack.org/#Keystone_Policy_Meeting
>> [1] https://etherpad.openstack.org/p/keystone-policy-meeting
>>
>> On 10/05/2017 02:24 AM, Colleen Murphy wrote:
>>> On Tue, Oct 3, 2017 at 10:08 PM, Lance Bragstad >> > wrote:
>>>
>>> Hey all,
>>>
>>> It was mentioned in today's keystone meeting [0] that it would
>>> be useful
>>> to go through AWS IAM (or even GKE) as a group. With all the recent
>>> policy discussions and work, it seems useful to get our eyes on
>>> another
>>> system. The idea would be to spend time using a video
>>> conference/screen
>>> share to go through and play with policy together. The end
>>> result should
>>> keep us focused on the implementations we're working on today,
>>> but also
>>> provide clarity for the long-term vision of OpenStack's RBAC system.
>>>
>>> Are you interested in attending? If so, please respond to the
>>> thread.
>>> Once we have some interest, we can gauge when to hold the
>>> meeting, which
>>> tools we can use, and setting up a test IAM account.
>>>
>>> Thanks,
>>>
>>> Lance
>>>
>>> [0]
>>> 
>>> http://eavesdrop.openstack.org/meetings/keystone/2017/keystone.2017-10-03-18.00.log.html#l-119
>>> 
>>> 
>>>
>>> Please count me in.
>>>
>>> Colleen
>>>
>>>
>>> __
>>> OpenStack Development Mailing List (not for usage questions)
>>> Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
>>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>>
>



signature.asc
Description: OpenPGP digital signature
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

Re: [openstack-dev] [policy] AWS IAM session

[Lance Bragstad]

In today's policy meeting we went through and started prepping for the
session. Relevant information has been captured in the etherpad [0].

We're going to hold the meeting using *Google* *Hangouts*. I'll update
the etherpad with a link to the hangout once we settle on a date. If you
plan on attending, please *vote* *for* *available* *times* [1]. I've
proposed a bunch of time slots (4 each day for the next two weeks) to
try and find a time that works for everyone. People from US, AU, and EU
will be trying to attended, so we're not going to find a perfect time
for everyone. Having said that, *we're going to record the session*.

Most of what we talked about in the meeting today uncovered the need to
go over the basics of AWS IAM. That should be something we can do with a
free account, which I'm going to sign up for. If we need more time we
can have another session or look at options for upgrading the account.


[0] https://etherpad.openstack.org/p/analyzing-other-policy-systems
[1] https://doodle.com/poll/ntkpzgmcv3k6v5qu

On 10/09/2017 04:23 PM, Lance Bragstad wrote:
> I've put a scheduling session on the books for the next policy meeting
> [0][1]. Advertising it here since folks who want to be involved have
> responded to the thread.
>
> Let's use this meeting time to iron out account details and figure out
> what exactly we want to get out of the session.
>
>
> [0] http://eavesdrop.openstack.org/#Keystone_Policy_Meeting
> [1] https://etherpad.openstack.org/p/keystone-policy-meeting
>
> On 10/05/2017 02:24 AM, Colleen Murphy wrote:
>> On Tue, Oct 3, 2017 at 10:08 PM, Lance Bragstad > > wrote:
>>
>> Hey all,
>>
>> It was mentioned in today's keystone meeting [0] that it would be
>> useful
>> to go through AWS IAM (or even GKE) as a group. With all the recent
>> policy discussions and work, it seems useful to get our eyes on
>> another
>> system. The idea would be to spend time using a video
>> conference/screen
>> share to go through and play with policy together. The end result
>> should
>> keep us focused on the implementations we're working on today,
>> but also
>> provide clarity for the long-term vision of OpenStack's RBAC system.
>>
>> Are you interested in attending? If so, please respond to the thread.
>> Once we have some interest, we can gauge when to hold the
>> meeting, which
>> tools we can use, and setting up a test IAM account.
>>
>> Thanks,
>>
>> Lance
>>
>> [0]
>> 
>> http://eavesdrop.openstack.org/meetings/keystone/2017/keystone.2017-10-03-18.00.log.html#l-119
>> 
>> 
>>
>> Please count me in.
>>
>> Colleen
>>
>>
>> __
>> OpenStack Development Mailing List (not for usage questions)
>> Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>



signature.asc
Description: OpenPGP digital signature
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

Re: [openstack-dev] [policy] AWS IAM session

[Lance Bragstad]

I've put a scheduling session on the books for the next policy meeting
[0][1]. Advertising it here since folks who want to be involved have
responded to the thread.

Let's use this meeting time to iron out account details and figure out
what exactly we want to get out of the session.


[0] http://eavesdrop.openstack.org/#Keystone_Policy_Meeting
[1] https://etherpad.openstack.org/p/keystone-policy-meeting

On 10/05/2017 02:24 AM, Colleen Murphy wrote:
> On Tue, Oct 3, 2017 at 10:08 PM, Lance Bragstad  > wrote:
>
> Hey all,
>
> It was mentioned in today's keystone meeting [0] that it would be
> useful
> to go through AWS IAM (or even GKE) as a group. With all the recent
> policy discussions and work, it seems useful to get our eyes on
> another
> system. The idea would be to spend time using a video
> conference/screen
> share to go through and play with policy together. The end result
> should
> keep us focused on the implementations we're working on today, but
> also
> provide clarity for the long-term vision of OpenStack's RBAC system.
>
> Are you interested in attending? If so, please respond to the thread.
> Once we have some interest, we can gauge when to hold the meeting,
> which
> tools we can use, and setting up a test IAM account.
>
> Thanks,
>
> Lance
>
> [0]
> 
> http://eavesdrop.openstack.org/meetings/keystone/2017/keystone.2017-10-03-18.00.log.html#l-119
> 
> 
>
> Please count me in.
>
> Colleen
>
>
> __
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev



signature.asc
Description: OpenPGP digital signature
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

Re: [openstack-dev] [policy] AWS IAM session

[Colleen Murphy]

On Tue, Oct 3, 2017 at 10:08 PM, Lance Bragstad  wrote:

> Hey all,
>
> It was mentioned in today's keystone meeting [0] that it would be useful
> to go through AWS IAM (or even GKE) as a group. With all the recent
> policy discussions and work, it seems useful to get our eyes on another
> system. The idea would be to spend time using a video conference/screen
> share to go through and play with policy together. The end result should
> keep us focused on the implementations we're working on today, but also
> provide clarity for the long-term vision of OpenStack's RBAC system.
>
> Are you interested in attending? If so, please respond to the thread.
> Once we have some interest, we can gauge when to hold the meeting, which
> tools we can use, and setting up a test IAM account.
>
> Thanks,
>
> Lance
>
> [0]
> http://eavesdrop.openstack.org/meetings/keystone/2017/
> keystone.2017-10-03-18.00.log.html#l-119
>
> Please count me in.

Colleen
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

Re: [openstack-dev] [policy] AWS IAM session

[Fox, Kevin M]

Yeah. Very interesting. Thanks for sharing.

Kevin

From: Adam Heczko [ahec...@mirantis.com]
Sent: Wednesday, October 04, 2017 2:18 PM
To: OpenStack Development Mailing List (not for usage questions)
Subject: Re: [openstack-dev] [policy] AWS IAM session

Hi Devdatta, excellent post on IAM models.
Thank you!

On Wed, Oct 4, 2017 at 10:59 PM, Devdatta Kulkarni 
<kulkarni.devda...@gmail.com<mailto:kulkarni.devda...@gmail.com>> wrote:
+1

I spent some time recently studying IAM models of AWS and GCP.
Based on this I had created following post comparing and summarizing the two 
models at high-level:

http://devcentric.io/2017/07/13/comparing-iam-models-of-aws-and-gcp/

Thought of sharing it here as it may help with big-picture comparison of the 
two models.

Best regards,
Devdatta


On Wed, Oct 4, 2017 at 11:12 AM, Kristi Nikolla 
<kri...@nikolla.me<mailto:kri...@nikolla.me>> wrote:
+1

--
  Kristi Nikolla
  Software Engineer @ massopen.cloud
  kri...@nikolla.me<mailto:kri...@nikolla.me>

On Wed, Oct 4, 2017, at 10:08 AM, Zane Bitter wrote:
> On 03/10/17 16:08, Lance Bragstad wrote:
> > Hey all,
> >
> > It was mentioned in today's keystone meeting [0] that it would be useful
> > to go through AWS IAM (or even GKE) as a group. With all the recent
> > policy discussions and work, it seems useful to get our eyes on another
> > system. The idea would be to spend time using a video conference/screen
> > share to go through and play with policy together. The end result should
> > keep us focused on the implementations we're working on today, but also
> > provide clarity for the long-term vision of OpenStack's RBAC system.
> >
> > Are you interested in attending? If so, please respond to the thread.
> > Once we have some interest, we can gauge when to hold the meeting, which
> > tools we can use, and setting up a test IAM account.
>
> +1, I'd like to attend this.
>
> Also I highly recommend
> http://start.jcolemorrison.com/aws-iam-policies-in-a-nutshell/ over the
> actual AWS docs as a compact reference.
>
> - ZB
>
> > Thanks,
> >
> > Lance
> >
> > [0]
> > http://eavesdrop.openstack.org/meetings/keystone/2017/keystone.2017-10-03-18.00.log.html#l-119
> >
> >
> >
> >
> > __
> > OpenStack Development Mailing List (not for usage questions)
> > Unsubscribe: 
> > openstack-dev-requ...@lists.openstack.org?subject:unsubscribe<http://openstack-dev-requ...@lists.openstack.org?subject:unsubscribe>
> > http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
> >
>
>
> __
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe:
> openstack-dev-requ...@lists.openstack.org?subject:unsubscribe<http://openstack-dev-requ...@lists.openstack.org?subject:unsubscribe>
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: 
openstack-dev-requ...@lists.openstack.org?subject:unsubscribe<http://openstack-dev-requ...@lists.openstack.org?subject:unsubscribe>
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev


__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: 
openstack-dev-requ...@lists.openstack.org?subject:unsubscribe<http://openstack-dev-requ...@lists.openstack.org?subject:unsubscribe>
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev




--
Adam Heczko
Security Engineer @ Mirantis Inc.
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

Re: [openstack-dev] [policy] AWS IAM session

[Adam Heczko]

Hi Devdatta, excellent post on IAM models.
Thank you!

On Wed, Oct 4, 2017 at 10:59 PM, Devdatta Kulkarni <
kulkarni.devda...@gmail.com> wrote:

> +1
>
> I spent some time recently studying IAM models of AWS and GCP.
> Based on this I had created following post comparing and summarizing the
> two models at high-level:
>
> http://devcentric.io/2017/07/13/comparing-iam-models-of-aws-and-gcp/
>
> Thought of sharing it here as it may help with big-picture comparison of
> the two models.
>
> Best regards,
> Devdatta
>
>
> On Wed, Oct 4, 2017 at 11:12 AM, Kristi Nikolla  wrote:
>
>> +1
>>
>> --
>>   Kristi Nikolla
>>   Software Engineer @ massopen.cloud
>>   kri...@nikolla.me
>>
>> On Wed, Oct 4, 2017, at 10:08 AM, Zane Bitter wrote:
>> > On 03/10/17 16:08, Lance Bragstad wrote:
>> > > Hey all,
>> > >
>> > > It was mentioned in today's keystone meeting [0] that it would be
>> useful
>> > > to go through AWS IAM (or even GKE) as a group. With all the recent
>> > > policy discussions and work, it seems useful to get our eyes on
>> another
>> > > system. The idea would be to spend time using a video
>> conference/screen
>> > > share to go through and play with policy together. The end result
>> should
>> > > keep us focused on the implementations we're working on today, but
>> also
>> > > provide clarity for the long-term vision of OpenStack's RBAC system.
>> > >
>> > > Are you interested in attending? If so, please respond to the thread.
>> > > Once we have some interest, we can gauge when to hold the meeting,
>> which
>> > > tools we can use, and setting up a test IAM account.
>> >
>> > +1, I'd like to attend this.
>> >
>> > Also I highly recommend
>> > http://start.jcolemorrison.com/aws-iam-policies-in-a-nutshell/ over the
>> > actual AWS docs as a compact reference.
>> >
>> > - ZB
>> >
>> > > Thanks,
>> > >
>> > > Lance
>> > >
>> > > [0]
>> > > http://eavesdrop.openstack.org/meetings/keystone/2017/keysto
>> ne.2017-10-03-18.00.log.html#l-119
>> > >
>> > >
>> > >
>> > >
>> > > 
>> __
>> > > OpenStack Development Mailing List (not for usage questions)
>> > > Unsubscribe: openstack-dev-requ...@lists.op
>> enstack.org?subject:unsubscribe
>> > > http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>> > >
>> >
>> >
>> > 
>> __
>> > OpenStack Development Mailing List (not for usage questions)
>> > Unsubscribe:
>> > openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
>> > http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>>
>> 
>> __
>> OpenStack Development Mailing List (not for usage questions)
>> Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscrib
>> e
>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>>
>
>
> __
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>
>


-- 
Adam Heczko
Security Engineer @ Mirantis Inc.
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

Re: [openstack-dev] [policy] AWS IAM session

[Devdatta Kulkarni]

+1

I spent some time recently studying IAM models of AWS and GCP.
Based on this I had created following post comparing and summarizing the
two models at high-level:

http://devcentric.io/2017/07/13/comparing-iam-models-of-aws-and-gcp/

Thought of sharing it here as it may help with big-picture comparison of
the two models.

Best regards,
Devdatta


On Wed, Oct 4, 2017 at 11:12 AM, Kristi Nikolla  wrote:

> +1
>
> --
>   Kristi Nikolla
>   Software Engineer @ massopen.cloud
>   kri...@nikolla.me
>
> On Wed, Oct 4, 2017, at 10:08 AM, Zane Bitter wrote:
> > On 03/10/17 16:08, Lance Bragstad wrote:
> > > Hey all,
> > >
> > > It was mentioned in today's keystone meeting [0] that it would be
> useful
> > > to go through AWS IAM (or even GKE) as a group. With all the recent
> > > policy discussions and work, it seems useful to get our eyes on another
> > > system. The idea would be to spend time using a video conference/screen
> > > share to go through and play with policy together. The end result
> should
> > > keep us focused on the implementations we're working on today, but also
> > > provide clarity for the long-term vision of OpenStack's RBAC system.
> > >
> > > Are you interested in attending? If so, please respond to the thread.
> > > Once we have some interest, we can gauge when to hold the meeting,
> which
> > > tools we can use, and setting up a test IAM account.
> >
> > +1, I'd like to attend this.
> >
> > Also I highly recommend
> > http://start.jcolemorrison.com/aws-iam-policies-in-a-nutshell/ over the
> > actual AWS docs as a compact reference.
> >
> > - ZB
> >
> > > Thanks,
> > >
> > > Lance
> > >
> > > [0]
> > > http://eavesdrop.openstack.org/meetings/keystone/2017/
> keystone.2017-10-03-18.00.log.html#l-119
> > >
> > >
> > >
> > >
> > > 
> __
> > > OpenStack Development Mailing List (not for usage questions)
> > > Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:
> unsubscribe
> > > http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
> > >
> >
> >
> > 
> __
> > OpenStack Development Mailing List (not for usage questions)
> > Unsubscribe:
> > openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
> > http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>
> __
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

Re: [openstack-dev] [policy] AWS IAM session

[Kristi Nikolla]

+1

-- 
  Kristi Nikolla
  Software Engineer @ massopen.cloud
  kri...@nikolla.me

On Wed, Oct 4, 2017, at 10:08 AM, Zane Bitter wrote:
> On 03/10/17 16:08, Lance Bragstad wrote:
> > Hey all,
> > 
> > It was mentioned in today's keystone meeting [0] that it would be useful
> > to go through AWS IAM (or even GKE) as a group. With all the recent
> > policy discussions and work, it seems useful to get our eyes on another
> > system. The idea would be to spend time using a video conference/screen
> > share to go through and play with policy together. The end result should
> > keep us focused on the implementations we're working on today, but also
> > provide clarity for the long-term vision of OpenStack's RBAC system.
> > 
> > Are you interested in attending? If so, please respond to the thread.
> > Once we have some interest, we can gauge when to hold the meeting, which
> > tools we can use, and setting up a test IAM account.
> 
> +1, I'd like to attend this.
> 
> Also I highly recommend 
> http://start.jcolemorrison.com/aws-iam-policies-in-a-nutshell/ over the 
> actual AWS docs as a compact reference.
> 
> - ZB
> 
> > Thanks,
> > 
> > Lance
> > 
> > [0]
> > http://eavesdrop.openstack.org/meetings/keystone/2017/keystone.2017-10-03-18.00.log.html#l-119
> > 
> > 
> > 
> > 
> > __
> > OpenStack Development Mailing List (not for usage questions)
> > Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
> > http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
> > 
> 
> 
> __
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe:
> openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

Re: [openstack-dev] [policy] AWS IAM session

[Zane Bitter]

On 03/10/17 16:08, Lance Bragstad wrote:

Hey all,

It was mentioned in today's keystone meeting [0] that it would be useful
to go through AWS IAM (or even GKE) as a group. With all the recent
policy discussions and work, it seems useful to get our eyes on another
system. The idea would be to spend time using a video conference/screen
share to go through and play with policy together. The end result should
keep us focused on the implementations we're working on today, but also
provide clarity for the long-term vision of OpenStack's RBAC system.

Are you interested in attending? If so, please respond to the thread.
Once we have some interest, we can gauge when to hold the meeting, which
tools we can use, and setting up a test IAM account.


+1, I'd like to attend this.

Also I highly recommend 
http://start.jcolemorrison.com/aws-iam-policies-in-a-nutshell/ over the 
actual AWS docs as a compact reference.


- ZB


Thanks,

Lance

[0]
http://eavesdrop.openstack.org/meetings/keystone/2017/keystone.2017-10-03-18.00.log.html#l-119




__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev




__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

Re: [openstack-dev] [policy] AWS IAM session

[William M Edmonds]

+1

Lance Bragstad  wrote on 10/03/2017 04:08:31 PM:
> Hey all,
>
> It was mentioned in today's keystone meeting [0] that it would be useful
> to go through AWS IAM (or even GKE) as a group. With all the recent
> policy discussions and work, it seems useful to get our eyes on another
> system. The idea would be to spend time using a video conference/screen
> share to go through and play with policy together. The end result should
> keep us focused on the implementations we're working on today, but also
> provide clarity for the long-term vision of OpenStack's RBAC system.
>
> Are you interested in attending? If so, please respond to the thread.
> Once we have some interest, we can gauge when to hold the meeting, which
> tools we can use, and setting up a test IAM account.
>
> Thanks,
>
> Lance
>
> [0]
> http://eavesdrop.openstack.org/meetings/keystone/2017/keystone.
> 2017-10-03-18.00.log.html#l-119
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

[openstack-dev] [policy] AWS IAM session

[Lance Bragstad]

Hey all,

It was mentioned in today's keystone meeting [0] that it would be useful
to go through AWS IAM (or even GKE) as a group. With all the recent
policy discussions and work, it seems useful to get our eyes on another
system. The idea would be to spend time using a video conference/screen
share to go through and play with policy together. The end result should
keep us focused on the implementations we're working on today, but also
provide clarity for the long-term vision of OpenStack's RBAC system.

Are you interested in attending? If so, please respond to the thread.
Once we have some interest, we can gauge when to hold the meeting, which
tools we can use, and setting up a test IAM account.

Thanks,

Lance

[0]
http://eavesdrop.openstack.org/meetings/keystone/2017/keystone.2017-10-03-18.00.log.html#l-119




signature.asc
Description: OpenPGP digital signature
__
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev