| *** zhurong has joined #openstack-dns | 00:42 | |
| *** hoangcx has joined #openstack-dns | 00:45 | |
| *** cuongnv has joined #openstack-dns | 00:48 | |
| *** EricGonczer_ has joined #openstack-dns | 00:56 | |
| *** KeithMnemonic1 has quit IRC | 01:00 | |
| *** zhurong has quit IRC | 01:23 | |
| *** GonZo2K has joined #openstack-dns | 01:43 | |
| *** zhurong has joined #openstack-dns | 01:43 | |
| *** GonZo2K has quit IRC | 01:43 | |
| *** ianychoi has quit IRC | 01:48 | |
| *** ianychoi has joined #openstack-dns | 01:54 | |
| *** sonuk has joined #openstack-dns | 02:59 | |
| *** zhurong has quit IRC | 03:48 | |
| *** khushbu has joined #openstack-dns | 03:52 | |
| *** yee379 has quit IRC | 04:30 | |
| *** yee37914 has joined #openstack-dns | 04:31 | |
| *** EricGonczer_ has quit IRC | 05:01 | |
| *** EricGonczer_ has joined #openstack-dns | 05:23 | |
| *** cuongnv has quit IRC | 05:25 | |
| *** khushbu has quit IRC | 05:32 | |
| *** khushbu has joined #openstack-dns | 05:32 | |
| *** cuongnv has joined #openstack-dns | 05:32 | |
| *** richm has quit IRC | 05:43 | |
| *** EricGonczer_ has quit IRC | 05:51 | |
| *** zhurong has joined #openstack-dns | 05:53 | |
| *** sonuk has quit IRC | 05:57 | |
| *** haplo37_ has joined #openstack-dns | 06:06 | |
| *** kbyrne_ has joined #openstack-dns | 06:09 | |
| *** lkoranda_ has joined #openstack-dns | 06:10 | |
| *** sonuk has joined #openstack-dns | 06:11 | |
| *** lkoranda has quit IRC | 06:13 | |
| *** haplo37 has quit IRC | 06:13 | |
| *** kbyrne has quit IRC | 06:13 | |
| *** lkoranda_ is now known as lkoranda | 06:13 | |
| *** haplo37_ is now known as haplo37 | 06:13 | |
| *** kbyrne_ is now known as kbyrne | 06:13 | |
| *** abalutoiu_ has joined #openstack-dns | 06:33 | |
| *** abalutoiu has quit IRC | 06:37 | |
| *** abalutoiu_ has quit IRC | 06:38 | |
| *** hoangcx_ has joined #openstack-dns | 06:54 | |
| *** hoangcx has quit IRC | 06:57 | |
| *** dmellado has quit IRC | 07:03 | |
| *** vills has joined #openstack-dns | 07:07 | |
| *** dmellado has joined #openstack-dns | 07:08 | |
| *** cuongnv has quit IRC | 07:29 | |
| *** khushbu has quit IRC | 07:41 | |
| *** khushbu has joined #openstack-dns | 07:42 | |
| *** hoangcx has joined #openstack-dns | 07:58 | |
| *** cuongnv has joined #openstack-dns | 07:58 | |
| *** hoangcx_ has quit IRC | 08:01 | |
| *** pcaruana has joined #openstack-dns | 08:06 | |
| *** vills has quit IRC | 08:07 | |
| *** openstackgerrit has quit IRC | 09:03 | |
| *** Andrew_jedi has joined #openstack-dns | 10:00 | |
| *** Andrew_jedi has quit IRC | 10:09 | |
| *** richm has joined #openstack-dns | 10:13 | |
| *** sonuk has quit IRC | 10:15 | |
| *** cuongnv has quit IRC | 10:18 | |
| *** sonuk has joined #openstack-dns | 10:26 | |
| *** hoangcx has quit IRC | 10:47 | |
| *** EricGonczer_ has joined #openstack-dns | 10:54 | |
| *** Drankis has joined #openstack-dns | 11:13 | |
| *** EricGonczer_ has quit IRC | 11:14 | |
| *** khushbu_ has joined #openstack-dns | 11:15 | |
| *** khushbu has quit IRC | 11:18 | |
| *** khushbu_ has quit IRC | 11:24 | |
| *** EricGonczer_ has joined #openstack-dns | 11:42 | |
| *** EricGonczer_ has quit IRC | 12:06 | |
| *** EricGonczer_ has joined #openstack-dns | 12:15 | |
| *** EricGonczer_ has quit IRC | 12:19 | |
| *** zhurong has quit IRC | 12:22 | |
| *** Andrew_jedi has joined #openstack-dns | 12:43 | |
| *** catintheroof has joined #openstack-dns | 12:44 | |
| *** catintheroof has quit IRC | 13:03 | |
| *** sonuk has quit IRC | 13:09 | |
| *** haplo37 has quit IRC | 13:11 | |
| *** sonuk has joined #openstack-dns | 13:20 | |
| *** haplo37 has joined #openstack-dns | 13:20 | |
| *** cleong has joined #openstack-dns | 13:23 | |
| *** mlavalle has joined #openstack-dns | 13:41 | |
| *** vills has joined #openstack-dns | 14:00 | |
| *** Andrew_jedi has quit IRC | 14:34 | |
| *** Andrew_jedi has joined #openstack-dns | 14:41 | |
| *** fandi has joined #openstack-dns | 14:42 | |
| *** Andrew_jedi has quit IRC | 14:53 | |
| *** sonuk has quit IRC | 14:57 | |
| *** fandi has quit IRC | 14:58 | |
| *** rektide has joined #openstack-dns | 15:03 | |
| *** Andrew_jedi has joined #openstack-dns | 15:09 | |
| *** LNO has joined #openstack-dns | 15:13 | |
| LNO | Hello. Is designate-mdns IPv6 compliant (Newton) ? Can't find a way to get it listening other than IPv4. Thx. | 15:17 |
|---|---|---|
| LNO | related to https://bugs.launchpad.net/designate/+bug/1501396 ? | 15:21 |
| openstack | Launchpad bug 1501396 in Designate "Not able to assign octects to the format in designate.conf for IPv6 ips" [Undecided,Won't fix] | 15:21 |
| mugsie | LNO: we have an issue currently binding to IPv6 addresses afaik | 15:31 |
| LNO | @mugsie: Thanks for the info | 15:31 |
| *** LNO has quit IRC | 15:32 | |
| *** vills has quit IRC | 15:42 | |
| *** KeithMnemonic has joined #openstack-dns | 16:02 | |
| *** Andrew_jedi has quit IRC | 16:11 | |
| *** Andrew_jedi has joined #openstack-dns | 16:33 | |
| *** sgr7 has joined #openstack-dns | 16:35 | |
| *** corey_ has joined #openstack-dns | 16:46 | |
| sgr7 | Hi, we operate Designate as a hidden master for a single zone in a corporate DNS system. This designate zone covers a private cloud environment where multiple tenants/users shall be allowed to set their own records (within that zone). We have tried tweaks to policy.json and managed to allow users to create their entries, but the ownership of the recordsets is derived from the zone itself (from the code: recordset.tenant_id = z | 16:46 |
| *** sgr7 has quit IRC | 16:47 | |
| *** sgr7 has joined #openstack-dns | 16:47 | |
| *** cleong has quit IRC | 16:47 | |
| sgr7 | Hi, we operate Designate as a hidden master for a single zone in a corporate DNS system. | 16:48 |
| sgr7 | This designate zone covers a private cloud environment where multiple tenants/users shall be allowed to set their own records (within that zone). | 16:48 |
| sgr7 | We have tried tweaks to policy.json and managed to allow users to create their entries, but the ownership of the recordsets is derived from the zone itself (from the code: recordset.tenant_id = zone.tenant_id) and not from the user/tenant executing it (as we would have hoped). | 16:48 |
| sgr7 | So this approach basically fails. | 16:48 |
| sgr7 | What is the recommended approach for our scenario? (Create per tenant sub-zones, transfer ownership to single tenants and go from there?) | 16:48 |
| sgr7 | Thanks in advance | 16:48 |
| mugsie | sgr7: yeah, creating sub zones per project is probably the way forward | 16:54 |
| mugsie | you could try just creating the zone with "--sudo-project-id <project-id>" with an admin account | 16:55 |
| mugsie | I *think* that will work | 16:55 |
| sgr7 | ok, so the owner of the parent zone creates the sub zones and then transfers the ownership to the other tenants? That sounds quite cumbersome | 16:55 |
| sgr7 | ok, that would create the ownership of the other tenant? | 16:56 |
| mugsie | yeah | 16:56 |
| sgr7 | ok, will try that | 16:56 |
| mugsie | or, you could use the tld feature, and allow users create their own zones | 16:56 |
| mugsie | (set the main zone as a tld in designate) | 16:57 |
| mugsie | this will limit the zones users can create to sub.<tld> | 16:57 |
| sgr7 | and .<tld> could be whatever possible or does it need to be a real TLD (like .com., ...)? | 16:58 |
| mugsie | it can be whatever you want | 16:59 |
| mugsie | as long as it starts with a letter, and ends in a . | 16:59 |
| sgr7 | ok, I guess I will have a look at the TLD feature first | 17:00 |
| sgr7 | everything *.<tld> will be treated like a normal zone, right? I mean with regards of MiniDNS (DNS Notify and AXFR) | 17:01 |
| mugsie | yup | 17:01 |
| sgr7 | So <TLD> would be the parent zone I was talking about - the one Designate is the Hidden Master for. That would be great | 17:02 |
| mugsie | yeah, that should do it | 17:04 |
| *** EricGonczer_ has joined #openstack-dns | 17:05 | |
| *** catintheroof has joined #openstack-dns | 17:07 | |
| *** pcaruana has quit IRC | 17:14 | |
| *** sgr7 has quit IRC | 17:28 | |
| *** Drankis has quit IRC | 17:59 | |
| *** Andrew_jedi has quit IRC | 18:03 | |
| *** catintheroof has quit IRC | 18:07 | |
| *** puck has quit IRC | 18:29 | |
| *** puck has joined #openstack-dns | 18:33 | |
| *** Andrew_jedi has joined #openstack-dns | 19:19 | |
| *** mlavalle has quit IRC | 19:34 | |
| *** Andrew_jedi has quit IRC | 19:57 | |
| *** castlemilk has quit IRC | 20:17 | |
| *** castlemilk has joined #openstack-dns | 20:18 | |
| *** castlemilk has quit IRC | 20:22 | |
| *** mlavalle has joined #openstack-dns | 20:29 | |
| *** KeithMnemonic has quit IRC | 20:29 | |
| *** castlemilk has joined #openstack-dns | 20:34 | |
| *** corey_ has quit IRC | 20:38 | |
| *** castlemilk has quit IRC | 21:01 | |
| *** castlemilk has joined #openstack-dns | 21:19 | |
| *** catintheroof has joined #openstack-dns | 23:13 | |
| *** catintheroof has quit IRC | 23:20 | |
| *** catintheroof has joined #openstack-dns | 23:21 | |
| *** catintheroof has quit IRC | 23:33 | |
| *** mlavalle has quit IRC | 23:36 | |
| *** catintheroof has joined #openstack-dns | 23:38 | |
| *** catintheroof has quit IRC | 23:45 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!