| *** jamielennox|away is now known as jamielennox | 00:06 | |
| *** dlitz has quit IRC | 00:08 | |
| *** dlitz has joined #openstack-security | 00:13 | |
| *** salv-orlando has quit IRC | 00:26 | |
| *** sdake has joined #openstack-security | 00:30 | |
| *** sdake_ has quit IRC | 00:34 | |
| *** sdake_ has joined #openstack-security | 00:46 | |
| *** tmcpeak has joined #openstack-security | 00:47 | |
| *** sdake has quit IRC | 00:49 | |
| *** sdake has joined #openstack-security | 00:52 | |
| *** sdake_ has quit IRC | 00:56 | |
| *** Kennan2 has joined #openstack-security | 02:02 | |
| *** Kennan has quit IRC | 02:03 | |
| *** Kennan has joined #openstack-security | 02:06 | |
| *** Kennan2 has quit IRC | 02:06 | |
| *** sdake_ has joined #openstack-security | 02:11 | |
| *** tmcpeak has quit IRC | 02:13 | |
| *** sdake has quit IRC | 02:14 | |
| *** salv-orlando has joined #openstack-security | 02:15 | |
| *** salv-orl_ has joined #openstack-security | 02:18 | |
| *** salv-orlando has quit IRC | 02:20 | |
| *** salv-orl_ has quit IRC | 02:49 | |
| *** subscope_ has joined #openstack-security | 03:12 | |
| *** sdake_ has quit IRC | 03:25 | |
| *** Guest41353 is now known as smuxx | 03:36 | |
| *** salv-orlando has joined #openstack-security | 03:39 | |
| *** salv-orlando has quit IRC | 04:02 | |
| *** subscope_ has quit IRC | 04:43 | |
| *** Kennan has quit IRC | 04:56 | |
| *** Kennan has joined #openstack-security | 04:57 | |
| *** aswadr has joined #openstack-security | 06:08 | |
| *** dave-mccowan has joined #openstack-security | 06:30 | |
| *** dave-mccowan has quit IRC | 06:34 | |
| *** Kennan has quit IRC | 06:46 | |
| *** Kennan has joined #openstack-security | 06:46 | |
| *** jamielennox is now known as jamielennox|away | 07:11 | |
| *** jamielennox|away is now known as jamielennox | 09:02 | |
| *** salv-orlando has joined #openstack-security | 09:04 | |
| *** salv-orlando has quit IRC | 09:07 | |
| *** aswadr has quit IRC | 09:14 | |
| openstackgerrit | Zhenyu Zheng proposed openstack/security-doc: Fix grammatical mistakes in Networking architecture https://review.openstack.org/172857 | 09:39 |
|---|---|---|
| openstackgerrit | Zhenyu Zheng proposed openstack/security-doc: Fix grammatical mistakes in Networking architecture https://review.openstack.org/172861 | 09:54 |
| openstackgerrit | Zhenyu Zheng proposed openstack/security-doc: Fix grammatical mistakes in Networking architecture https://review.openstack.org/172864 | 09:58 |
| *** markvoelker has joined #openstack-security | 09:59 | |
| openstackgerrit | Zhenyu Zheng proposed openstack/security-doc: Fix grammatical mistakes in Networking architecture https://review.openstack.org/172857 | 10:09 |
| *** sdake has joined #openstack-security | 10:09 | |
| *** markvoelker has quit IRC | 10:16 | |
| *** markvoelker has joined #openstack-security | 10:18 | |
| *** sdake_ has joined #openstack-security | 10:28 | |
| *** markvoelker has quit IRC | 10:29 | |
| *** sdake has quit IRC | 10:31 | |
| *** salv-orlando has joined #openstack-security | 10:35 | |
| *** sdake_ has quit IRC | 10:53 | |
| *** tmcpeak has joined #openstack-security | 10:59 | |
| *** sdake has joined #openstack-security | 12:00 | |
| *** sdake_ has joined #openstack-security | 12:01 | |
| *** sdake has quit IRC | 12:04 | |
| *** jamielennox is now known as jamielennox|away | 12:12 | |
| *** tmcpeak has quit IRC | 12:18 | |
| *** tmcpeak has joined #openstack-security | 12:18 | |
| *** salv-orl_ has joined #openstack-security | 12:20 | |
| *** salv-orlando has quit IRC | 12:24 | |
| *** sdake_ has quit IRC | 12:25 | |
| *** sdake has joined #openstack-security | 12:25 | |
| *** sdake_ has joined #openstack-security | 12:27 | |
| *** sdake has quit IRC | 12:31 | |
| *** bknudson has quit IRC | 12:51 | |
| *** markvoelker has joined #openstack-security | 12:52 | |
| *** markvoelker_ has joined #openstack-security | 12:54 | |
| *** markvoelker has quit IRC | 12:58 | |
| *** openstackgerrit has quit IRC | 13:00 | |
| *** openstackgerrit has joined #openstack-security | 13:03 | |
| *** bknudson has joined #openstack-security | 13:14 | |
| *** vozcelik has joined #openstack-security | 13:21 | |
| *** singlethink has joined #openstack-security | 13:33 | |
| *** vozcelik has quit IRC | 13:38 | |
| *** markvoelker_ has quit IRC | 13:46 | |
| *** sdake has joined #openstack-security | 13:59 | |
| *** sdake_ has quit IRC | 14:02 | |
| *** nkinder has joined #openstack-security | 14:04 | |
| *** dave-mccowan has joined #openstack-security | 14:09 | |
| *** sdake_ has joined #openstack-security | 14:18 | |
| *** sdake has quit IRC | 14:21 | |
| *** markvoelker has joined #openstack-security | 14:47 | |
| *** sdake has joined #openstack-security | 14:47 | |
| *** markvoelker_ has joined #openstack-security | 14:48 | |
| *** sdake_ has quit IRC | 14:50 | |
| *** voodookid has joined #openstack-security | 14:51 | |
| *** markvoelker has quit IRC | 14:52 | |
| *** markvoelker has joined #openstack-security | 14:52 | |
| *** markvoelker_ has quit IRC | 14:52 | |
| *** markvoelker has quit IRC | 14:58 | |
| *** bpokorny has joined #openstack-security | 15:00 | |
| *** sdake_ has joined #openstack-security | 15:07 | |
| *** dave-mccowan has quit IRC | 15:10 | |
| *** sdake has quit IRC | 15:13 | |
| *** dave-mccowan has joined #openstack-security | 15:30 | |
| *** singlethink has quit IRC | 15:48 | |
| *** markvoelker_ has joined #openstack-security | 15:53 | |
| *** markvoelker_ has quit IRC | 15:59 | |
| openstackgerrit | Merged openstack/security-doc: Fix grammatical mistakes in Networking architecture https://review.openstack.org/172857 | 16:00 |
| *** bpokorny_ has joined #openstack-security | 16:06 | |
| *** bpokorny has quit IRC | 16:08 | |
| openstackgerrit | Michael McCune proposed openstack/security-doc: Minor grammar fix in Identity/Authorization sec. https://review.openstack.org/172981 | 16:12 |
| *** singlethink has joined #openstack-security | 16:14 | |
| *** bpb has joined #openstack-security | 16:31 | |
| openstackgerrit | Priti Desai proposed openstack/security-doc: Restructuring sections from Identity chapter https://review.openstack.org/172992 | 16:34 |
| *** pdesai has joined #openstack-security | 16:35 | |
| *** bknudson has quit IRC | 16:40 | |
| *** subscope_ has joined #openstack-security | 16:41 | |
| openstackgerrit | Merged openstack/security-doc: Fix run on sentence https://review.openstack.org/172643 | 16:49 |
| *** bdpayne has joined #openstack-security | 16:51 | |
| *** bdpayne has quit IRC | 16:56 | |
| *** sicarie has joined #openstack-security | 16:59 | |
| pdesai | Hi sicarie | 17:00 |
| sicarie | pdesai: hello! | 17:00 |
| pdesai | I am sorry i missed the meeting last week, was on spring break :) | 17:00 |
| elmiko | nice! | 17:00 |
| elmiko | good reason to miss =) | 17:01 |
| pdesai | yup :) | 17:01 |
| sicarie | Nice - I wish I got a spring break. When I have a vacation it means my kids are home and wanting food/entertainment :( | 17:01 |
| elmiko | hehe | 17:01 |
| *** MikeL_ has joined #openstack-security | 17:01 | |
| pdesai | hehe | 17:01 |
| sicarie | Cool, so let's get started | 17:02 |
| sicarie | I want to give a shout out to pdesai who just submitted an Identity chapter structural update | 17:02 |
| elmiko | yea, just reviewed it | 17:02 |
| sicarie | Awesome, I have not had a chance to review yet | 17:02 |
| sicarie | https://review.openstack.org/#/c/172992/ | 17:02 |
| sicarie | elmiko: you just submitted a change as well, correct/ | 17:03 |
| elmiko | yea, just a grammar tweak | 17:03 |
| pdesai | thanks, i have introduced a small intro to the chapter, not much new content | 17:03 |
| elmiko | i'm considering rebasing on pdesai change | 17:03 |
| elmiko | pdesai: hmm, is the intro in the same review? | 17:03 |
| pdesai | yup | 17:04 |
| elmiko | ok, i need to re-read then ;) | 17:04 |
| pdesai | its in the ch_identity.xml | 17:04 |
| elmiko | i added this bug https://bugs.launchpad.net/openstack-manuals/+bug/1443495 | 17:04 |
| openstack | Launchpad bug 1443495 in openstack-manuals "Chapter 6. Identity in OpenStack Security Guide - current, chapter introduction" [Undecided,New] | 17:04 |
| elmiko | it might be unnecessary though given the change | 17:04 |
| pdesai | we can merge both of these into single review request, as i have already added small intro, thoughts? | 17:05 |
| sicarie | elmiko: I like the bug being open, we can always close it out later | 17:06 |
| elmiko | k | 17:07 |
| pdesai | ok | 17:07 |
| elmiko | pdesai's change does address my issue from the bug though | 17:07 |
| sicarie | elmiko: which one? :) | 17:07 |
| sicarie | The new bug, or your new change? | 17:07 |
| elmiko | the bug, https://bugs.launchpad.net/openstack-manuals/+bug/1443495 | 17:08 |
| openstack | Launchpad bug 1443495 in openstack-manuals "Chapter 6. Identity in OpenStack Security Guide - current, chapter introduction" [Undecided,New] | 17:08 |
| elmiko | the old intro was a little odd | 17:08 |
| *** subscope_ has quit IRC | 17:08 | |
| sicarie | +1 | 17:08 |
| elmiko | pdesai: could you add the closes-bug:1443495 to your patch? | 17:08 |
| pdesai | sure, i will add that in the commit message | 17:09 |
| elmiko | thanks | 17:09 |
| sicarie | Awesome | 17:09 |
| pdesai | sure :) | 17:10 |
| sicarie | So we have a few new bugs as well: https://bugs.launchpad.net/openstack-manuals/+bugs?field.tag=sec-guide | 17:10 |
| sicarie | However it looks like the doc core team has triaged them, which is very cool | 17:10 |
| elmiko | the 2 new undecideds i added today | 17:11 |
| sicarie | elmiko: are they tagged sec-guide? | 17:11 |
| elmiko | yes | 17:11 |
| *** dave-mccowan has quit IRC | 17:11 | |
| elmiko | at the bottom of the list you just linked ;) | 17:11 |
| sicarie | weird, they didn't pop up for me | 17:12 |
| *** dave-mccowan has joined #openstack-security | 17:12 | |
| sicarie | well: https://bugs.launchpad.net/openstack-manuals/+bug/1443500 | 17:12 |
| openstack | Launchpad bug 1443500 in openstack-manuals "Chapter 6. Identity in OpenStack Security Guide - current, authentication section" [Undecided,New] | 17:12 |
| elmiko | yea, so i thought that section just plunges into a discussion of invalid logins and multi-factor stuff | 17:13 |
| elmiko | might be nice to have a small setup for those sub-sections | 17:13 |
| pdesai | yup i agree | 17:13 |
| sicarie | +1 | 17:13 |
| sicarie | So what do you guys think for importance? | 17:14 |
| pdesai | low | 17:14 |
| elmiko | yea, low/med | 17:14 |
| pdesai | or med | 17:14 |
| sicarie | Yeah, i was thinking low | 17:15 |
| elmiko | works for me | 17:15 |
| pdesai | +1 | 17:15 |
| sicarie | Cool | 17:15 |
| elmiko | https://bugs.launchpad.net/openstack-manuals/+bug/1443518 | 17:16 |
| openstack | Launchpad bug 1443518 in openstack-manuals "Chapter 6. Identity in OpenStack Security Guide - current, authorization section" [Undecided,New] | 17:16 |
| elmiko | that's the other one | 17:16 |
| elmiko | basically, that second paragraph i call out sounds a little fishy | 17:16 |
| elmiko | i can't tell if the second and third sentences are examples or what | 17:16 |
| sicarie | +1 for sure | 17:16 |
| elmiko | in the doc conext it just reads weird | 17:17 |
| pdesai | also, it has policy from block storage | 17:17 |
| sicarie | Yeah | 17:17 |
| pdesai | which i find weird | 17:17 |
| elmiko | in the Policies section, yea. that whole section could use some work | 17:17 |
| pdesai | yup | 17:18 |
| sicarie | hehe, yeah, this is a fun chapter | 17:18 |
| elmiko | i actually think if this authorization section is going to mention policy it should forward reference to it | 17:18 |
| elmiko | sicarie: lol, yea | 17:18 |
| sicarie | So I'd say when the examples are actually more confusing it should definitely be more of a 'medium' | 17:18 |
| pdesai | hehe, yeah forward reference sounds reasonable | 17:18 |
| pdesai | yup med | 17:19 |
| sicarie | elmiko: could you expand on 'forward reference'? I'm not familiar with that term | 17:19 |
| elmiko | agreed about medium for confusing stuff | 17:19 |
| elmiko | oh, i just meant that if the authorization section will talk about policy examples it should probably just have a link to the Policies section | 17:19 |
| sicarie | +1 | 17:19 |
| elmiko | and that section should contain the authoritative info | 17:19 |
| sicarie | Yep | 17:19 |
| elmiko | i guess i just meant a link before the actual section has been covered | 17:20 |
| sicarie | Yeah, and very clear examples | 17:21 |
| pdesai | yeah | 17:21 |
| elmiko | i'm still working through the chapter, but i'm guessing i'll have more bugs along these lines | 17:21 |
| sicarie | elmiko: you read my mind, I was just about to ask | 17:22 |
| elmiko | hehe | 17:22 |
| sicarie | Is there a bug open on this policy example? | 17:22 |
| elmiko | not yet | 17:22 |
| elmiko | not for the Policy section itself | 17:22 |
| sicarie | Is it on someone's list? (ie, can someone take that as an action?) | 17:22 |
| pdesai | i will take it | 17:22 |
| elmiko | cool | 17:22 |
| sicarie | Thanks! | 17:22 |
| pdesai | sure | 17:22 |
| sicarie | Okay, anything on bugs/reviews that I have not addressed? | 17:23 |
| sicarie | or have forgotten about? | 17:23 |
| elmiko | not that i can think of | 17:24 |
| sicarie | Cool | 17:24 |
| sicarie | I did want to discuss a few things | 17:24 |
| sicarie | The documentation team is moving stuff to rst format | 17:24 |
| sicarie | I volunteered us to move after 'Liberty' | 17:25 |
| pdesai | what | 17:25 |
| sicarie | Apparently there is general unhappiness with DocBook format | 17:25 |
| pdesai | wow | 17:25 |
| elmiko | yea, big shift | 17:25 |
| sicarie | The first big guide was migrated last week, and they're starting on the fringe guides | 17:25 |
| sicarie | lower-impact guides | 17:25 |
| sicarie | shouldn't say 'fringe' | 17:26 |
| sicarie | So for us | 17:26 |
| sicarie | There is docbook automation tooling | 17:26 |
| sicarie | Do we want to invest in developing automation tooling for docbook when we are going to move off it in ~7 months? | 17:26 |
| elmiko | only if folks have tons of free time ;) | 17:27 |
| sicarie | specifically around the end-of-chapter checklists | 17:27 |
| sicarie | Hahaha | 17:27 |
| pdesai | i think we can wait | 17:27 |
| pdesai | hehe | 17:27 |
| sicarie | Cool | 17:28 |
| sicarie | So then the last thing I had was the Case Studies | 17:28 |
| sicarie | https://etherpad.openstack.org/p/sec-guide-case-studies | 17:28 |
| sicarie | I've started the new sections at the bottom, working only on Alice's at the moment | 17:28 |
| sicarie | and thanks to MikeL_ the recommended workload is healthcare.gov | 17:28 |
| elmiko | yea, i owe you some comments about the data processing studies | 17:29 |
| sicarie | I think that's a very good federal workload with additional compliance implications - it'll give a good foil for Bob's Public cloud | 17:29 |
| elmiko | +1 | 17:29 |
| MikeL_ | lol, my first contribution in a lon time and I didn't have to touch docbook...wonderful | 17:29 |
| elmiko | lol! | 17:30 |
| sicarie | Cool, well we have 1 minute so I just wanted to point that out and say I'm still open to discussion, but will probably start ot flesh out more of those sections at the bottom going based on that | 17:30 |
| sicarie | Please feel free to grab a section or recommend a different workload | 17:30 |
| elmiko | ack | 17:30 |
| sicarie | Anything else? | 17:30 |
| sicarie | (in general?) | 17:30 |
| pdesai | do we have a session in summit? if not, we can grab a lunch | 17:31 |
| sicarie | I did ask for a fishbowl room for a secguide meeting | 17:31 |
| pdesai | cool | 17:32 |
| elmiko | nice, that could be fun =) | 17:32 |
| sicarie | As soon as I get word on that I'll be pinging around for availability | 17:32 |
| pdesai | +1 | 17:32 |
| sicarie | elmiko: will you be at the summit? | 17:32 |
| sicarie | pdesai will you? | 17:32 |
| pdesai | yup, coming | 17:32 |
| sicarie | cool | 17:32 |
| elmiko | yea, i'll be there | 17:33 |
| pdesai | nice | 17:33 |
| sicarie | great | 17:33 |
| sicarie | So yeah, hopefully we'll be able to sit down and do some good work face to face! | 17:33 |
| sicarie | Thanks everyone! See you next week! | 17:33 |
| pdesai | thanks :) | 17:34 |
| elmiko | thanks! | 17:34 |
| *** MikeL_ has quit IRC | 17:36 | |
| *** browne has joined #openstack-security | 17:36 | |
| *** bknudson has joined #openstack-security | 17:48 | |
| *** markvoelker has joined #openstack-security | 17:56 | |
| *** mgagne_ is now known as mgagne | 17:58 | |
| *** markvoelker has quit IRC | 18:01 | |
| *** pdesai has quit IRC | 18:02 | |
| *** pdesai has joined #openstack-security | 18:07 | |
| *** edmondsw has joined #openstack-security | 18:09 | |
| *** bdpayne has joined #openstack-security | 18:19 | |
| *** tkelsey has joined #openstack-security | 18:48 | |
| *** bdpayne has quit IRC | 18:56 | |
| *** sicarie has quit IRC | 19:10 | |
| elmiko | pdesai: re: policy update stuff, check out this review too https://review.openstack.org/#/c/166853 | 19:35 |
| pdesai | thanks elimko, we can point to this guide for further information on the policy engine | 19:39 |
| elmiko | pdesai: yea, i was thinking something similar | 19:43 |
| pdesai | cool, i will add this review request in the bug description so that we can track it | 19:43 |
| pdesai | elmiko: created bug for policies: https://bugs.launchpad.net/openstack-manuals/+bug/1443615 | 19:49 |
| openstack | Launchpad bug 1443615 in openstack-manuals "Chapter 6. Identity - Policies Section - rewrite this section" [Undecided,New] | 19:49 |
| *** sdake has joined #openstack-security | 19:53 | |
| elmiko | pdesai: awesome! | 19:56 |
| *** sdake_ has quit IRC | 19:56 | |
| openstackgerrit | Priti Desai proposed openstack/security-doc: Restructuring sections from Identity chapter https://review.openstack.org/172992 | 19:57 |
| openstackgerrit | Priti Desai proposed openstack/security-doc: Restructuring sections from Identity chapter https://review.openstack.org/172992 | 20:00 |
| *** pdesai has quit IRC | 20:15 | |
| *** pdesai has joined #openstack-security | 20:23 | |
| *** sdake_ has joined #openstack-security | 20:53 | |
| *** sdake has quit IRC | 20:57 | |
| *** markvoelker has joined #openstack-security | 20:59 | |
| *** tkelsey has quit IRC | 21:02 | |
| *** markvoelker has quit IRC | 21:03 | |
| *** pdesai has quit IRC | 21:46 | |
| *** dave-mccowan has quit IRC | 21:55 | |
| *** dave-mccowan has joined #openstack-security | 21:56 | |
| *** pdesai has joined #openstack-security | 21:56 | |
| *** markvoelker_ has joined #openstack-security | 22:00 | |
| *** nkinder has quit IRC | 22:05 | |
| *** bpb has quit IRC | 22:16 | |
| bknudson | pdesai: here's some more info on keystone policy: https://review.openstack.org/#/c/168521/ | 22:32 |
| bknudson | pdesai: also http://docs.openstack.org/developer/oslo.policy/api.html#module-oslo_policy.policy | 22:32 |
| bknudson | not sure why https://review.openstack.org/#/c/166853 is referencing keystone/openstack/common/policy.py since that doesn't exist anymore. | 22:33 |
| *** singlethink has quit IRC | 22:42 | |
| *** bknudson has quit IRC | 23:02 | |
| *** pdesai has quit IRC | 23:04 | |
| *** jamielennox|away is now known as jamielennox | 23:22 | |
| *** dave-mccowan has quit IRC | 23:28 | |
| *** tmcpeak has quit IRC | 23:30 | |
| *** tmcpeak has joined #openstack-security | 23:32 | |
| *** bpokorny has joined #openstack-security | 23:36 | |
| *** bpokorny_ has quit IRC | 23:39 | |
| *** gabriela has joined #openstack-security | 23:48 | |
| gabriela | HOLIS | 23:48 |
| *** markvoelker has joined #openstack-security | 23:49 | |
| *** markvoelker_ has quit IRC | 23:51 | |
| *** markvoelker_ has joined #openstack-security | 23:53 | |
| *** markvoelker_ has quit IRC | 23:54 | |
| *** voodookid has quit IRC | 23:55 | |
| *** markvoelker has quit IRC | 23:56 | |
| *** voodookid has joined #openstack-security | 23:57 | |
| *** salv-orl_ has quit IRC | 23:57 | |
| *** voodookid has quit IRC | 23:58 | |
Generated by irclog2html.py 2.14.0 by Marius Gedminas - find it at mg.pov.lt!