| andreykurilin | Hi folks! I have a question regarding projects/users/… list APIs: I see there are query API filters like `name__startswith`, `name__contains`, but they are missing from the API ref docs. Is it an intentional decision? Can I rely on those filters? | 14:19 |
|---|---|---|
| gtema | please don't use them - we do not want to support them | 15:03 |
| cardoe | Was todays meeting canceled? | 15:49 |
| gtema | yeah, majority off | 15:49 |
| cardoe | oh okay | 15:50 |
| cardoe | I was looking through https://review.opendev.org/q/project:openstack/keystonemiddleware+status:open and there's a lot of great changes suggested in there. | 15:50 |
| cardoe | It'd be good to get some of those in | 15:50 |
| gtema | yeah, but ... not enough reviewers | 15:51 |
| gtema | I'll try to update the ruff-ication of it. Regarding your comment on bandit - this is a followup change enabling it | 15:51 |
| gtema | at least I was sure previously | 15:52 |
| moutazchaara[m] | Would be also great if you a chance to take a look at this here: https://review.opendev.org/c/openstack/keystone/+/999379 gtema | 15:52 |
| gtema | yeah yeah, so many reviews and things to implement and so few time | 15:53 |
| moutazchaara[m] | Yeah totally understandable | 15:54 |
| gtema | btw cardoe - how interested are you in nova VMs automatically getting keystone authentication (with fine-grane rules in future). hyperscalers offer this since decades and OpenStack still doesn't support this. This is something I am currently on | 15:54 |
| cardoe | My personal area is all about baremetal. We use nova to provision ironic nodes. | 15:55 |
| gtema | ok, this is mostly relevant to end-users of openstack | 15:56 |
| cardoe | Well I suspect it's similar to how nova VMs can get their metadata securely | 15:56 |
| gtema | but then you would be interested in getting rid of passwords for connection between control plane | 15:57 |
| cardoe | yeah | 16:05 |
| cardoe | We've already written our own auth plugin and middleware that's using Kubernetes Token Review | 16:05 |
| cardoe | Likely similar to what https://review.opendev.org/c/openstack/keystone-specs/+/984642 proposes | 16:06 |
| cardoe | I'm actually working out how to bring back system scope to other services after we've rolled that back. | 16:06 |
| gtema | Not that, much wider and not focused on k8s, both covered by keystone-rs | 16:07 |
| opendevreview | Doug Goldstein proposed openstack/keystoneauth master: Add a v3websso authentication plugin https://review.opendev.org/c/openstack/keystoneauth/+/1000759 | 17:48 |
Generated by irclog2html.py 4.1.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!