Wednesday, 2017-03-01

*** gcb has joined #openstack-interop02:04
*** gcb has quit IRC02:09
*** yuanying has quit IRC02:47
*** gcb has joined #openstack-interop03:01
*** galstrom_zzz is now known as galstrom03:34
*** yuanying has joined #openstack-interop03:49
*** galstrom is now known as galstrom_zzz04:34
*** galstrom_zzz is now known as galstrom04:36
*** galstrom is now known as galstrom_zzz05:32
*** yuanying has quit IRC08:01
*** yuanying has joined #openstack-interop08:05
*** yuanying has quit IRC08:51
*** yuanying has joined #openstack-interop08:55
*** yuanying has quit IRC09:16
*** yuanying has joined #openstack-interop10:00
*** pcaruana has joined #openstack-interop10:24
*** zhipeng has joined #openstack-interop14:40
*** zhipeng has quit IRC15:02
*** galstrom_zzz is now known as galstrom15:54
*** zhipeng has joined #openstack-interop15:58
*** zhipeng has quit IRC16:51
*** galstrom is now known as galstrom_zzz17:23
*** galstrom_zzz is now known as galstrom17:24
hogepodgemarkvoelker:18:06
hogepodgemarkvoelker: eglute: how strongly do we feel about setting administrator password in a server through the api?18:07
hogepodgeI know of one public cloud that is pretty interoperable, except on that point.18:07
eglutei think it is ok not to set password through api.18:08
eglutessh keys on creation would be nice though, not sure if we already have that in place18:09
markvoelkerWhat an odd thing to block...any idea what the rationale is?  Personally I use this somewhat often.18:09
eglutei think security. passwords are not considered as safe as ssh keys18:10
egluteand public clouds are subject to brute force attacks18:10
markvoelkerOn instances though?18:10
egluteyes18:10
markvoelkerThat seems well within the bounds of something a tenant would typically provide rather than a provider...18:11
eglutepersonally i seen my instances attacked18:11
markvoelkerOh sure, that happens to me all the time. =) I'm just saying password disablement on guest instances seems like a tenant decision rather than a provider one.18:11
markvoelker(as I could see that breaking a lot of tools)18:12
markvoelkerhogepodge: I think it's something we could discuss.  I'm not entirely sure which guest OS types that even works on, frankly.18:14
hogepodgefrom my discussions with qa, it can be disabled because some hypervisors don't allow it. I don't know which, though18:15
hogepodgeI'm not strongly either way on it, I was just curious if either of you had opinions on it. I'm checking in with the provider to see how they feel about it.18:16
markvoelkerOk, makes sense.  I don't think I have super strong feelings about it (although as noted, I do use it personally so I'm maybe a little biased toward keeping it).18:17
markvoelkerIf they feel strongly about it, perhaps a flag request makes sense and we can discuss there.18:18
markvoelkerThis was the test_create_server_with_admin_password test I presume?18:18
hogepodgemarkvoelker: that test fails, yes, but many other server tests will fail because strict schema checking wants that value returned in the response, even if an adminPass isn't being used18:19
*** pcaruana has quit IRC19:58
*** galstrom is now known as galstrom_zzz20:40
*** beisner- has joined #openstack-interop20:50
*** beisner has quit IRC20:53
*** beisner- is now known as beisner20:53
*** pcaruana has joined #openstack-interop21:30
*** pcaruana has quit IRC21:33
*** jmckind has joined #openstack-interop23:36
*** jmckind has left #openstack-interop23:38

Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!