Friday, 2026-07-10

opendevreviewGoutham Pacha Ravi proposed openstack/security-doc master: OSSN-0102: Neutron sub-resource parent ownership  https://review.opendev.org/c/openstack/security-doc/+/99620917:46
gouthamr^ lazily gathering reviews from neutron folks for this one.. no rush, didn't plan to email until Tuesday17:57
fungii'll try to remember to check it out on monday, but please don't hesitate to pester me if i don't18:12
gouthamr++ ty fungi 18:13
TheJuliaSo regarding OSSN-101, looks like the same change needs to be made to ironic actually.18:29
gouthamrah18:29
fungioh neat18:30
fungiopenstack is an actual cargo cult18:30
TheJuliasome stuff is, espescially when you have to isolate a whole other field of hardware ;)18:30
gouthamroye, this is a public channel18:31
fungiyeah, i didn't mean it negatively18:31
gouthamr:D18:31
fungiwell, that ossn is public18:31
fungii don't think it's a stretch to assume people recognize a lot of openstack services were copied around from the same code18:32
TheJuliadefinitely not18:32
TheJulia(a stretch)18:32
fungiwhat's now oslo was literally just a "openstack/common" directory we used to automatically sync from nova to all other services (besides swift)18:33
gouthamrarguably, that cargoculting created an easier operator experience because user patterns  were also a big part of it besides internals18:34
fungiyes, it was how we bootstrapped standardization between services, which is why i say "cargo cult" in a not necessarily negative sense18:35
gouthamr++18:40
JayFTo be clear, I suggested Julia make that comment here since I was under the impression that Nova issue was not even embargoed19:30
JayFAnd it's even less impactful for the ironic case19:30
gouthamrack19:31
gouthamrwill you be creating an ironic bug for this?19:32
JayFI am personally not acting on this information right now.19:35
JayFMy recommended course of action would be a bug and a backported fix. We can eratta the OSSN if we want, but this really is a significantly less major bug in ironic19:35
gouthamryeah.. it's a low-prio hardening opportunity then19:39

Generated by irclog2html.py 4.1.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!