| opendevreview | Merged openstack/devstack-plugin-ceph stable/2023.2: Remote Ceph with cephadm https://review.opendev.org/c/openstack/devstack-plugin-ceph/+/917082 | 00:50 |
|---|---|---|
| frickler | skipping the wed meetings is fine for me, I'm mostly not around at that time either | 05:10 |
| lajoskatona | kopecmartin, (or anybody smarter than me:-)): Hi, a tempest config question: we have deployments where we have keystone settings like change_password_upon_first_use, is there way for tempest to deal with such situation? | 07:06 |
| lajoskatona | kopecmartin, (or anybody smarter than me:-)): I saw some tests and cfg options for identitty that test similar settings but those seems to be only related to the given tempest identity v3 tests | 07:07 |
| frickler | lajoskatona: you can run tempest with pre-created accounts, which I would suggest to do for production deployments anyway, would that be an option for you? | 07:35 |
| kopecmartin | lajoskatona: uff, i don't think so there is anything in tempest that would deal with that, not sure if it's even possible .. a similar situation: some time ago we made tempest to skip tests if minimum_password_age > 0 - https://review.opendev.org/c/openstack/tempest/+/890653 | 07:36 |
| kopecmartin | iiuic, it won't work even with the pre-created accounts, once the pre-created password is used, it's gonna need a change/be changed | 07:37 |
| frickler | well you could make the first use happen during the pre-creation step I guess? | 07:38 |
| kopecmartin | hmm, i see, it's only for the first use .. isn't it simpler to turn off that setting for the duration of testing? .. if we don't want to test the first password change specifically | 07:39 |
| frickler | well if it is part of the security policy for a production cluster you don't get to turn it off easily. or at all. | 07:50 |
| lajoskatona | frickler, kopecmartin: thanks | 08:13 |
| lajoskatona | frickler, kopecmartin: preceated account can work if somebody first logs in perhaps and add new password and set thtat to tempest.conf | 08:14 |
| lajoskatona | frickler, kopecmartin: yeah switching off is not easy as hardening teams has eyes everywhere :-) | 08:16 |
| *** whoami-rajat_ is now known as whoami-rajat | 10:19 | |
| frickler | clarkb: elodilles: kopecmartin: finally getting back to ds-gate, is this fine as msg for abandoning the open reviews or would you like to include some reference? "openstack/devstack-gate has been retired. Therefore all open patches need to be abandoned." | 10:47 |
| kopecmartin | frickler: i think it's fine, if we want to highlight the change of the patches' status, it could be phrased like ".. patches are being abandoned." | 11:01 |
| elodilles | sounds fine to me, too | 11:03 |
| frickler | ah, that part of the message comes from the original script, but good idea, yes | 11:03 |
| frickler | done, oldest abandoned review was untouched since 2015 ... https://review.opendev.org/c/openstack/devstack-gate/+/248275 | 12:40 |
| oschwart | Hi, anyone tests *-manage (cli) commands on tempest? E.g. designate-mange / octavia-manage | 12:45 |
| frickler | oschwart: no, iiuc the idea of tempest is to test API, not clients, even less project-specific tools. those tests are (or should be) done within the respective projects | 13:38 |
| oschwart | hmm ok, because for designate we have most of the pool API commands deprecated, that's why I am considering having it meanwhile on tempest, at least until there will be pool APIs again (if there will be) | 13:43 |
| clarkb | frickler: that message is fine with me | 15:23 |
| gmann | lajoskatona: we do not have change_password_upon_first_use config handling in Tempest but I think this is valid thing to do in tempest tests. for that we need to do 1. add config option for corresponding keyston config' change_password_upon_first_use with default false 2. modify dynamic-creds and a few users tests to change user password if this config is set to true | 16:40 |
| gmann | lajoskatona: feel free to propose it if that complete your requirement or file a bug in tempest and I can do it but I might take some time after finishing ongoing tasks | 16:40 |
| lajoskatona | gmann: thanks, I will check it, and come back with questions if I am lost somewhere :-) | 16:47 |
| gmann | sure | 16:48 |
| opendevreview | Ghanshyam proposed openstack/tempest master: Add releasenote page for v39.0.0 https://review.opendev.org/c/openstack/tempest/+/920320 | 19:57 |
| gmann | kopecmartin: ^^ releasenote page for latest release | 19:58 |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!