| stromgren | Is there any support for MFA with TOTP (https://www.openstack.org/blog/new-in-openstack-bobcat-horizon-team-introduces-time-based-one-time-password-totp-authentication-support/) or would this be a manual configuration? | 06:29 |
|---|---|---|
| mnasiadka | stromgren: manual | 06:54 |
| stromgren | mnasiadka: thanks! | 06:55 |
| SvenKieske | stromgren: notice that the linked blog talks about keystone/horizon totp. depending on your needs you might want to integrate some third party auth provider as keystone backend and use maybe their 2FA, which are different of course. | 07:12 |
| stromgren | SvenKieske: OK. I've just starting looking into this. Do you have any tips on providers? | 07:23 |
| SvenKieske | keycloak oidc and zitadel are popular, or the usual stuff with active directory/ldap as keystone backend, but I don't know if AD works with 2FA with regards to openstack | 07:30 |
| SvenKieske | https://github.com/zitadel/zitadel https://github.com/keycloak/keycloak | 07:30 |
| stromgren | SvenKieske: Thanks, will look into that :) | 07:31 |
| SvenKieske | you're welcome :) | 07:32 |
| sylvr | Hello Kolla ! | 07:45 |
| sylvr | jovial: Hello! | 08:21 |
| jovial | slyvr: Morning | 08:26 |
| opendevreview | Ivan Halomi proposed openstack/kolla-ansible master: Refactor of docker worker https://review.opendev.org/c/openstack/kolla-ansible/+/908295 | 10:29 |
| kevko | morning | 10:33 |
| opendevreview | Matt Crees proposed openstack/kolla stable/2023.2: Move apt_prefs pins to respective images https://review.opendev.org/c/openstack/kolla/+/922605 | 10:36 |
| opendevreview | Ivan Halomi proposed openstack/kolla-ansible master: Refactor of docker worker https://review.opendev.org/c/openstack/kolla-ansible/+/908295 | 10:48 |
| opendevreview | Ivan Halomi proposed openstack/kolla-ansible master: Documentation addition https://review.opendev.org/c/openstack/kolla-ansible/+/922717 | 10:51 |
| sylvr | jovial: about the patch, do I apply to be contributor or a github PR will do ? I'm reading the doc for contributing to submit the patch you told me about yesterday, but seemed overkill | 11:19 |
| jovial | slyvr: You will have to sign up to gerrit and accept the contributor agreement. Doesn't take too long and then you will be able to submit to all openstack projects :) | 11:50 |
| jovial | slyvr: The process is documented here: https://docs.opendev.org/opendev/infra-manual/latest/developers.html#developer-s-guide | 11:52 |
| sylvr | thanks ! | 12:03 |
| opendevreview | Jay Jahns proposed openstack/kolla-ansible master: Change from PERCONA_SCHEMA to mysql for mariabackup https://review.opendev.org/c/openstack/kolla-ansible/+/922729 | 12:53 |
| kevko | SvenKieske: i reworked it and it's huge :D | 14:07 |
| kevko | SvenKieske: everyday up until 5 am :D | 14:07 |
| PrzemekK | Could someone introduce in kolla-ansible vpnaas with ovn - Its already done in openstack-ansible https://bugs.launchpad.net/kolla-ansible/+bug/2048392 https://docs.openstack.org/openstack-ansible-os_neutron/latest/configure-network-services.html#vpnaas-agent-for-ovn | 14:14 |
| kevko | PrzemekK: go ahead :) | 14:17 |
| PrzemekK | waiting for my network team ^^ | 14:18 |
| PrzemekK | but they broke our deployment by pulling master from repo and master binaries for kolla-ansible | 14:19 |
| opendevreview | Rafal Lewandowski proposed openstack/kolla-ansible master: [WIP] Enable ML2/OVN and distributed FIP by default. https://review.opendev.org/c/openstack/kolla-ansible/+/904959 | 16:08 |
| opendevreview | Rafal Lewandowski proposed openstack/kolla-ansible master: [WIP] Enable ML2/OVN and distributed FIP by default. https://review.opendev.org/c/openstack/kolla-ansible/+/904959 | 17:15 |
| opendevreview | Rafal Lewandowski proposed openstack/kolla-ansible master: [WIP] Enable ML2/OVN and distributed FIP by default. https://review.opendev.org/c/openstack/kolla-ansible/+/904959 | 17:21 |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!