| rlandy | jgilaber: hi - added the temoplate for tomorrow's IRC meeting https://etherpad.opendev.org/p/openstack-cyborg-irc-meeting#L45 | 13:51 |
|---|---|---|
| rlandy | also adding bug review as sean-k-mooney has updated the permissions enough for us to edit | 13:52 |
| rlandy | I'll add a list to the meeting agenda | 13:52 |
| jgilaber | thanks rlandy! | 14:01 |
| opendevreview | sean mooney proposed openstack/cyborg master: Fix resource provider hostname mismatch https://review.opendev.org/c/openstack/cyborg/+/970153 | 16:38 |
| opendevreview | sean mooney proposed openstack/cyborg master: Fix resource provider hostname mismatch https://review.opendev.org/c/openstack/cyborg/+/970153 | 18:02 |
| opendevreview | sean mooney proposed openstack/cyborg master: Fix resource provider hostname mismatch https://review.opendev.org/c/openstack/cyborg/+/970153 | 18:29 |
| opendevreview | Merged openstack/cyborg master: Remove unnecessary options from tox https://review.opendev.org/c/openstack/cyborg/+/977238 | 18:45 |
| opendevreview | sean mooney proposed openstack/cyborg master: Add release liaison guide for Cyborg https://review.opendev.org/c/openstack/cyborg/+/977177 | 18:46 |
| opendevreview | sean mooney proposed openstack/cyborg master: Add 2026.1 release cycle prelude note https://review.opendev.org/c/openstack/cyborg/+/977020 | 18:56 |
| opendevreview | sean mooney proposed openstack/cyborg master: Add release liaison guide for Cyborg https://review.opendev.org/c/openstack/cyborg/+/977177 | 19:36 |
| opendevreview | sean mooney proposed openstack/cyborg master: Add 2026.1 release cycle prelude note https://review.opendev.org/c/openstack/cyborg/+/977020 | 19:36 |
| sean-k-mooney | gmaan: https://bugs.launchpad.net/openstack-cyborg/+bug/1954886/comments/3 cyborg does not impalment even phase 1 of the SRBAC goal for all apis and many of the exsting poicles are less secure then they shold be ... | 20:21 |
| sean-k-mooney | so that is going to have to be a goal of the 2026.2 cycle | 20:22 |
| sean-k-mooney | when we get around to implementing it i may ask you to take a look to ensure we are doing it correctly | 20:22 |
| sean-k-mooney | cyborg has a pretty small api and im not sure a pahse approch really will help in this case so my inlcination is to propsoes a spec to implemnt all 4 roles reader,member,admin and manager in one go and just map out all the api endpoint at once | 20:23 |
| sean-k-mooney | in terems of timeline i was thinking 2026.2 implement but do not enable by default, 2027.1 enable by defualt and in 2027.2 perhaps drop the old policies | 20:25 |
| sean-k-mooney | but i think this si one of the topic im goign to bring to the cybrog ptg | 20:25 |
| gmaan | sean-k-mooney: I thought phase 1 was completed but maybe wrong. I can see the base project persona in base file but do not know how they are used https://github.com/openstack/cyborg/blob/master/cyborg/policies/base.py#L100-L103 | 20:25 |
| sean-k-mooney | does ^ sound even remotely reasonabl | 20:25 |
| sean-k-mooney | gmaan: the problem is https://github.com/openstack/cyborg/blob/master/cyborg/common/policy.py | 20:26 |
| gmaan | yeah | 20:26 |
| sean-k-mooney | the device profiel endpoint has been moved https://github.com/openstack/cyborg/blob/master/cyborg/policies/device_profiles.py | 20:26 |
| sean-k-mooney | but the rest have not | 20:26 |
| sean-k-mooney | so we need to do all the rest of the apis | 20:27 |
| gmaan | yeah, it is good to audit and do it in all policy rules | 20:27 |
| gmaan | anyways, I will be happy to review once you have something up or discuss in PTG | 20:27 |
| sean-k-mooney | thanks. not urgent now i just started doing some bug triage and realses this was a gap | 20:28 |
| gmaan | ++ | 20:29 |
Generated by irclog2html.py 4.0.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!