Wednesday, 2021-03-03

*** whoami-rajat has quit IRC00:15
*** johanssone has quit IRC00:16
*** tosky has quit IRC00:17
*** johanssone has joined #openstack-keystone00:19
*** gyee has quit IRC01:17
*** rcernin has quit IRC02:00
*** hamalq has quit IRC02:25
*** rcernin has joined #openstack-keystone02:29
*** rcernin has quit IRC02:29
*** gagehugo has quit IRC02:29
*** rcernin has joined #openstack-keystone02:30
*** gagehugo has joined #openstack-keystone02:33
*** __ministry has quit IRC02:33
*** rcernin has quit IRC02:44
*** __ministry has joined #openstack-keystone03:00
*** rcernin has joined #openstack-keystone03:16
*** dasp has quit IRC03:34
*** dasp has joined #openstack-keystone03:45
*** shyamb has joined #openstack-keystone04:16
*** zzzeek has quit IRC04:17
*** zzzeek has joined #openstack-keystone04:17
*** zzzeek has quit IRC04:22
*** zzzeek has joined #openstack-keystone04:23
*** dviroel has quit IRC04:55
*** whoami-rajat has joined #openstack-keystone04:58
*** vishalmanchanda has joined #openstack-keystone05:27
*** zzzeek has quit IRC06:06
*** shyamb has quit IRC06:24
*** zzzeek has joined #openstack-keystone06:41
*** bnemec has quit IRC06:41
*** bnemec has joined #openstack-keystone06:49
openstackgerritOpenStack Proposal Bot proposed openstack/keystonemiddleware master: Imported Translations from Zanata  https://review.opendev.org/c/openstack/keystonemiddleware/+/76007107:00
*** rcernin has quit IRC07:44
*** bengates has joined #openstack-keystone08:03
*** bengates has quit IRC08:03
*** bengates has joined #openstack-keystone08:04
*** iurygregory_ has joined #openstack-keystone08:17
*** iurygregory has quit IRC08:18
*** sapd1 has quit IRC08:21
*** sapd1 has joined #openstack-keystone08:21
*** ccstone has quit IRC08:22
*** ccstone has joined #openstack-keystone08:22
*** tosky has joined #openstack-keystone08:34
*** bengates_ has joined #openstack-keystone09:05
*** bengates has quit IRC09:09
*** shyamb has joined #openstack-keystone09:16
*** shyam89 has joined #openstack-keystone09:16
*** xek has joined #openstack-keystone10:07
*** shyam89 has quit IRC10:11
*** shyamb has quit IRC10:11
*** gshippey has joined #openstack-keystone10:15
*** shyam89 has joined #openstack-keystone10:37
*** shyamb has joined #openstack-keystone10:37
*** dviroel has joined #openstack-keystone11:05
*** iurygregory_ is now known as iurygregory11:19
*** shyam89 has quit IRC12:00
*** shyamb has quit IRC12:00
*** legochen_ has joined #openstack-keystone12:42
*** legochen_ is now known as legochen12:43
lbragstadgagehugo relatively straight forward if you're OK with the protection tests we landed yesterday https://review.opendev.org/c/openstack/keystone/+/76047813:26
*** takamatsu has joined #openstack-keystone14:17
*** iurygregory has quit IRC14:27
*** iurygregory has joined #openstack-keystone14:29
gagehugolbragstad: done15:34
lbragstadgagehugo thank you sir15:35
*** hemna has quit IRC15:39
*** hemna has joined #openstack-keystone15:40
*** takamatsu has quit IRC16:11
*** ayoung has quit IRC16:24
*** Madkiss has quit IRC16:48
*** hemna has quit IRC17:01
*** hoonetorg has quit IRC17:01
*** stand has quit IRC17:01
*** etp has quit IRC17:01
*** redrobot has quit IRC17:01
*** lifeless_ has quit IRC17:01
*** openstackgerrit has quit IRC17:02
*** stand has joined #openstack-keystone17:05
*** hemna has joined #openstack-keystone17:06
*** hoonetorg has joined #openstack-keystone17:06
*** etp has joined #openstack-keystone17:06
*** redrobot has joined #openstack-keystone17:06
*** lifeless_ has joined #openstack-keystone17:06
*** ayoung has joined #openstack-keystone17:24
*** bengates_ has quit IRC17:26
*** bengates has joined #openstack-keystone17:27
*** bengates has quit IRC17:32
*** bengates has joined #openstack-keystone17:42
*** bengates_ has joined #openstack-keystone18:04
*** bengates has quit IRC18:08
*** xek has quit IRC18:47
*** whoami-rajat has quit IRC19:50
*** lifeless_ is now known as lifeless19:56
*** CitadelCore has joined #openstack-keystone20:41
CitadelCoreHi, all. What is the "best practice" method of restrictive access control for services that do not support Application Credential access rules?20:42
CitadelCoreThe Ceph RADOS gateway implementation does not actually support them20:42
CitadelCore(which means I can't restrict an application credential to a specific object storage container, which is a serious security concern)20:43
CitadelCoreI understand it's also possible to create a keystone user and then use swift ACLs to limit its access, but this then exposes the entire project if the user credentials are compromised20:45
CitadelCoreAlso users can only be created with keystone administrator permissions, something I obviously don't want to delegate to individual project admins20:46
*** rcernin has joined #openstack-keystone20:46
*** gyee has joined #openstack-keystone21:01
*** rcernin has quit IRC21:17
*** openstackgerrit has joined #openstack-keystone21:19
openstackgerritMerged openstack/keystone master: Add job for keystone functional protection tests  https://review.opendev.org/c/openstack/keystone/+/76047821:19
*** gary_perkins has joined #openstack-keystone21:27
*** irclogbot_0 has quit IRC21:33
*** ianw has quit IRC21:33
*** tristanC has quit IRC21:33
*** DinaBelova has quit IRC21:33
*** freerunner has quit IRC21:33
*** amotoki has quit IRC21:33
*** irclogbot_0 has joined #openstack-keystone21:34
*** ianw has joined #openstack-keystone21:34
*** tristanC has joined #openstack-keystone21:34
*** DinaBelova has joined #openstack-keystone21:34
*** freerunner has joined #openstack-keystone21:34
*** amotoki has joined #openstack-keystone21:34
*** zzzeek has quit IRC21:44
*** zzzeek has joined #openstack-keystone21:45
*** CitadelCore has quit IRC21:49
*** rcernin has joined #openstack-keystone22:05
*** rcernin has quit IRC22:11
*** timburke_ has joined #openstack-keystone22:11
*** rcernin has joined #openstack-keystone22:11
*** timburke__ has quit IRC22:13
*** gshippey has quit IRC22:25
*** bengates_ has quit IRC22:47
*** bengates has joined #openstack-keystone22:48
*** bengates has quit IRC22:52
*** rcernin has quit IRC22:56
*** rcernin has joined #openstack-keystone23:01
*** timburke__ has joined #openstack-keystone23:01
*** timburke_ has quit IRC23:04
*** rcernin has quit IRC23:26
*** zzzeek has quit IRC23:40
*** zzzeek has joined #openstack-keystone23:42
*** vishalmanchanda has quit IRC23:44

Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!