*** whoami-rajat has quit IRC | 00:15 | |
*** johanssone has quit IRC | 00:16 | |
*** tosky has quit IRC | 00:17 | |
*** johanssone has joined #openstack-keystone | 00:19 | |
*** gyee has quit IRC | 01:17 | |
*** rcernin has quit IRC | 02:00 | |
*** hamalq has quit IRC | 02:25 | |
*** rcernin has joined #openstack-keystone | 02:29 | |
*** rcernin has quit IRC | 02:29 | |
*** gagehugo has quit IRC | 02:29 | |
*** rcernin has joined #openstack-keystone | 02:30 | |
*** gagehugo has joined #openstack-keystone | 02:33 | |
*** __ministry has quit IRC | 02:33 | |
*** rcernin has quit IRC | 02:44 | |
*** __ministry has joined #openstack-keystone | 03:00 | |
*** rcernin has joined #openstack-keystone | 03:16 | |
*** dasp has quit IRC | 03:34 | |
*** dasp has joined #openstack-keystone | 03:45 | |
*** shyamb has joined #openstack-keystone | 04:16 | |
*** zzzeek has quit IRC | 04:17 | |
*** zzzeek has joined #openstack-keystone | 04:17 | |
*** zzzeek has quit IRC | 04:22 | |
*** zzzeek has joined #openstack-keystone | 04:23 | |
*** dviroel has quit IRC | 04:55 | |
*** whoami-rajat has joined #openstack-keystone | 04:58 | |
*** vishalmanchanda has joined #openstack-keystone | 05:27 | |
*** zzzeek has quit IRC | 06:06 | |
*** shyamb has quit IRC | 06:24 | |
*** zzzeek has joined #openstack-keystone | 06:41 | |
*** bnemec has quit IRC | 06:41 | |
*** bnemec has joined #openstack-keystone | 06:49 | |
openstackgerrit | OpenStack Proposal Bot proposed openstack/keystonemiddleware master: Imported Translations from Zanata https://review.opendev.org/c/openstack/keystonemiddleware/+/760071 | 07:00 |
---|---|---|
*** rcernin has quit IRC | 07:44 | |
*** bengates has joined #openstack-keystone | 08:03 | |
*** bengates has quit IRC | 08:03 | |
*** bengates has joined #openstack-keystone | 08:04 | |
*** iurygregory_ has joined #openstack-keystone | 08:17 | |
*** iurygregory has quit IRC | 08:18 | |
*** sapd1 has quit IRC | 08:21 | |
*** sapd1 has joined #openstack-keystone | 08:21 | |
*** ccstone has quit IRC | 08:22 | |
*** ccstone has joined #openstack-keystone | 08:22 | |
*** tosky has joined #openstack-keystone | 08:34 | |
*** bengates_ has joined #openstack-keystone | 09:05 | |
*** bengates has quit IRC | 09:09 | |
*** shyamb has joined #openstack-keystone | 09:16 | |
*** shyam89 has joined #openstack-keystone | 09:16 | |
*** xek has joined #openstack-keystone | 10:07 | |
*** shyam89 has quit IRC | 10:11 | |
*** shyamb has quit IRC | 10:11 | |
*** gshippey has joined #openstack-keystone | 10:15 | |
*** shyam89 has joined #openstack-keystone | 10:37 | |
*** shyamb has joined #openstack-keystone | 10:37 | |
*** dviroel has joined #openstack-keystone | 11:05 | |
*** iurygregory_ is now known as iurygregory | 11:19 | |
*** shyam89 has quit IRC | 12:00 | |
*** shyamb has quit IRC | 12:00 | |
*** legochen_ has joined #openstack-keystone | 12:42 | |
*** legochen_ is now known as legochen | 12:43 | |
lbragstad | gagehugo relatively straight forward if you're OK with the protection tests we landed yesterday https://review.opendev.org/c/openstack/keystone/+/760478 | 13:26 |
*** takamatsu has joined #openstack-keystone | 14:17 | |
*** iurygregory has quit IRC | 14:27 | |
*** iurygregory has joined #openstack-keystone | 14:29 | |
gagehugo | lbragstad: done | 15:34 |
lbragstad | gagehugo thank you sir | 15:35 |
*** hemna has quit IRC | 15:39 | |
*** hemna has joined #openstack-keystone | 15:40 | |
*** takamatsu has quit IRC | 16:11 | |
*** ayoung has quit IRC | 16:24 | |
*** Madkiss has quit IRC | 16:48 | |
*** hemna has quit IRC | 17:01 | |
*** hoonetorg has quit IRC | 17:01 | |
*** stand has quit IRC | 17:01 | |
*** etp has quit IRC | 17:01 | |
*** redrobot has quit IRC | 17:01 | |
*** lifeless_ has quit IRC | 17:01 | |
*** openstackgerrit has quit IRC | 17:02 | |
*** stand has joined #openstack-keystone | 17:05 | |
*** hemna has joined #openstack-keystone | 17:06 | |
*** hoonetorg has joined #openstack-keystone | 17:06 | |
*** etp has joined #openstack-keystone | 17:06 | |
*** redrobot has joined #openstack-keystone | 17:06 | |
*** lifeless_ has joined #openstack-keystone | 17:06 | |
*** ayoung has joined #openstack-keystone | 17:24 | |
*** bengates_ has quit IRC | 17:26 | |
*** bengates has joined #openstack-keystone | 17:27 | |
*** bengates has quit IRC | 17:32 | |
*** bengates has joined #openstack-keystone | 17:42 | |
*** bengates_ has joined #openstack-keystone | 18:04 | |
*** bengates has quit IRC | 18:08 | |
*** xek has quit IRC | 18:47 | |
*** whoami-rajat has quit IRC | 19:50 | |
*** lifeless_ is now known as lifeless | 19:56 | |
*** CitadelCore has joined #openstack-keystone | 20:41 | |
CitadelCore | Hi, all. What is the "best practice" method of restrictive access control for services that do not support Application Credential access rules? | 20:42 |
CitadelCore | The Ceph RADOS gateway implementation does not actually support them | 20:42 |
CitadelCore | (which means I can't restrict an application credential to a specific object storage container, which is a serious security concern) | 20:43 |
CitadelCore | I understand it's also possible to create a keystone user and then use swift ACLs to limit its access, but this then exposes the entire project if the user credentials are compromised | 20:45 |
CitadelCore | Also users can only be created with keystone administrator permissions, something I obviously don't want to delegate to individual project admins | 20:46 |
*** rcernin has joined #openstack-keystone | 20:46 | |
*** gyee has joined #openstack-keystone | 21:01 | |
*** rcernin has quit IRC | 21:17 | |
*** openstackgerrit has joined #openstack-keystone | 21:19 | |
openstackgerrit | Merged openstack/keystone master: Add job for keystone functional protection tests https://review.opendev.org/c/openstack/keystone/+/760478 | 21:19 |
*** gary_perkins has joined #openstack-keystone | 21:27 | |
*** irclogbot_0 has quit IRC | 21:33 | |
*** ianw has quit IRC | 21:33 | |
*** tristanC has quit IRC | 21:33 | |
*** DinaBelova has quit IRC | 21:33 | |
*** freerunner has quit IRC | 21:33 | |
*** amotoki has quit IRC | 21:33 | |
*** irclogbot_0 has joined #openstack-keystone | 21:34 | |
*** ianw has joined #openstack-keystone | 21:34 | |
*** tristanC has joined #openstack-keystone | 21:34 | |
*** DinaBelova has joined #openstack-keystone | 21:34 | |
*** freerunner has joined #openstack-keystone | 21:34 | |
*** amotoki has joined #openstack-keystone | 21:34 | |
*** zzzeek has quit IRC | 21:44 | |
*** zzzeek has joined #openstack-keystone | 21:45 | |
*** CitadelCore has quit IRC | 21:49 | |
*** rcernin has joined #openstack-keystone | 22:05 | |
*** rcernin has quit IRC | 22:11 | |
*** timburke_ has joined #openstack-keystone | 22:11 | |
*** rcernin has joined #openstack-keystone | 22:11 | |
*** timburke__ has quit IRC | 22:13 | |
*** gshippey has quit IRC | 22:25 | |
*** bengates_ has quit IRC | 22:47 | |
*** bengates has joined #openstack-keystone | 22:48 | |
*** bengates has quit IRC | 22:52 | |
*** rcernin has quit IRC | 22:56 | |
*** rcernin has joined #openstack-keystone | 23:01 | |
*** timburke__ has joined #openstack-keystone | 23:01 | |
*** timburke_ has quit IRC | 23:04 | |
*** rcernin has quit IRC | 23:26 | |
*** zzzeek has quit IRC | 23:40 | |
*** zzzeek has joined #openstack-keystone | 23:42 | |
*** vishalmanchanda has quit IRC | 23:44 |
Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!