| *** markvoelker has quit IRC | 00:20 | |
| *** lbragstad has quit IRC | 01:52 | |
| *** markvoelker has joined #edge-computing-group | 02:25 | |
| *** lbragstad has joined #edge-computing-group | 02:35 | |
| *** markvoelker has quit IRC | 02:55 | |
| *** markvoelker has joined #edge-computing-group | 03:52 | |
| *** markvoelker has quit IRC | 04:25 | |
| *** markvoelker has joined #edge-computing-group | 05:22 | |
| *** markvoelker has quit IRC | 05:54 | |
| *** jaewookoh has quit IRC | 06:20 | |
| *** nguyenhai_ has left #edge-computing-group | 07:16 | |
| *** lbragstad has quit IRC | 07:45 | |
| *** markvoelker has joined #edge-computing-group | 07:52 | |
| *** jrbalderrama has joined #edge-computing-group | 08:16 | |
| *** markvoelker has quit IRC | 08:25 | |
| *** markvoelker has joined #edge-computing-group | 09:22 | |
| *** bogdando has joined #edge-computing-group | 09:40 | |
| *** markvoelker has quit IRC | 09:55 | |
| *** markvoelker has joined #edge-computing-group | 10:52 | |
| *** jaosorior has quit IRC | 11:07 | |
| *** markvoelker has quit IRC | 11:25 | |
| *** jrbalderrama has quit IRC | 11:30 | |
| *** kgiusti has joined #edge-computing-group | 14:00 | |
| *** kgiusti has left #edge-computing-group | 14:20 | |
| *** kgiusti has joined #edge-computing-group | 14:26 | |
| *** lbragstad has joined #edge-computing-group | 14:49 | |
| *** lbragstad is now known as elbragstad | 15:43 | |
| *** cmurphy is now known as cmorpheus | 15:51 | |
| *** elbragstad has quit IRC | 16:06 | |
| *** lbragstad has joined #edge-computing-group | 16:07 | |
| *** lbragstad is now known as elbragstad | 16:07 | |
| *** mrhillsman is now known as mrhillsman_lunch | 17:13 | |
| *** bogdando has quit IRC | 17:59 | |
| *** mrhillsman_lunch is now known as mrhillsman | 18:15 | |
| elbragstad | ildikov http://lists.openstack.org/pipermail/edge-computing/2019-January/000520.html is a summary of what we've uncovered this week with respect to the keystone federation work | 19:17 |
|---|---|---|
| ildikov | elbragstad: thank you!! | 19:20 |
| elbragstad | no problem | 19:21 |
| ildikov | I will check, I also got a response from James I didn't get a chance to check yet | 19:21 |
| elbragstad | i was planning on putting that together sooner, but it took us a bit longer than expected to unwind thinsg | 19:21 |
| ildikov | Better later than never :) | 19:21 |
| elbragstad | true | 19:22 |
| ildikov | This year is busy already and it's still January | 19:22 |
| elbragstad | ++ | 19:22 |
| ildikov | I'm traveling home today and will check all this | 19:23 |
| elbragstad | sounds good | 19:23 |
| ildikov | elbragstad: anything in that summary to keep a better eye on? | 19:24 |
| elbragstad | i think the TL;DR is that there doesn't appear to be a need for a keystone spec | 19:25 |
| ildikov | Ah cool | 19:25 |
| elbragstad | apparently, keystone a really old feature that fills oath's use case | 19:25 |
| elbragstad | has a* | 19:25 |
| elbragstad | but - it was never really updated with the rest of the federated implementations, so it's missing the auto-provisioning functionality you get with normal federated identity (say through something like SAML or Open ID Connect) | 19:26 |
| ildikov | Oh wow, so even with having that there it was still beneficial to have Oath's use case to get it polished | 19:27 |
| ildikov | And I assume we can still think of ways to test it | 19:27 |
| elbragstad | right | 19:27 |
| elbragstad | i guess what we need to do is to make x509 a first class federated protocol | 19:28 |
| elbragstad | it might be easier to test than other federation implementations, too | 19:28 |
| ildikov | Music to my ears :) | 19:28 |
| elbragstad | because you don't really need an identity provider, you could use the tls-proxy service in devstack to self-sign x509 certificates | 19:29 |
| ildikov | We still need people to get this done I guess? | 19:29 |
| elbragstad | yeah - i think help would be good if people are interested in it | 19:29 |
| ildikov | Oh nice, I didn't think of Devstack like that | 19:29 |
| elbragstad | yeah - as opposed to standing up an formal identity provider that issues SAML assertions | 19:30 |
| ildikov | Cool, we should touch base on this on the next call next week | 19:30 |
| elbragstad | sounds good | 19:30 |
| ildikov | Thanks so much to you and the team for looking into this!! | 19:30 |
| elbragstad | it was all cmorpheus - she got all of this rolling | 19:31 |
| elbragstad | i'm hoping she'll be on the call next week - but it not i'll try and relay things the best i can | 19:31 |
| elbragstad | but if not* | 19:31 |
| ildikov | Nice! I'll thank her too :) | 19:31 |
| ildikov | Sounds good, thanks much again! | 19:32 |
| elbragstad | no problem | 19:32 |
| cmorpheus | i can join this week | 19:34 |
| cmorpheus | i mean next week | 19:34 |
| ildikov | cmorpheus: awesome, thank you!! | 20:41 |
| *** kgiusti has left #edge-computing-group | 23:04 | |
| *** elbragstad has quit IRC | 23:54 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!