| opendevreview | Goutham Pacha Ravi proposed openstack/security-doc master: OSSN-0102: Neutron sub-resource parent ownership https://review.opendev.org/c/openstack/security-doc/+/996209 | 17:46 |
|---|---|---|
| gouthamr | ^ lazily gathering reviews from neutron folks for this one.. no rush, didn't plan to email until Tuesday | 17:57 |
| fungi | i'll try to remember to check it out on monday, but please don't hesitate to pester me if i don't | 18:12 |
| gouthamr | ++ ty fungi | 18:13 |
| TheJulia | So regarding OSSN-101, looks like the same change needs to be made to ironic actually. | 18:29 |
| gouthamr | ah | 18:29 |
| fungi | oh neat | 18:30 |
| fungi | openstack is an actual cargo cult | 18:30 |
| TheJulia | some stuff is, espescially when you have to isolate a whole other field of hardware ;) | 18:30 |
| gouthamr | oye, this is a public channel | 18:31 |
| fungi | yeah, i didn't mean it negatively | 18:31 |
| gouthamr | :D | 18:31 |
| fungi | well, that ossn is public | 18:31 |
| fungi | i don't think it's a stretch to assume people recognize a lot of openstack services were copied around from the same code | 18:32 |
| TheJulia | definitely not | 18:32 |
| TheJulia | (a stretch) | 18:32 |
| fungi | what's now oslo was literally just a "openstack/common" directory we used to automatically sync from nova to all other services (besides swift) | 18:33 |
| gouthamr | arguably, that cargoculting created an easier operator experience because user patterns were also a big part of it besides internals | 18:34 |
| fungi | yes, it was how we bootstrapped standardization between services, which is why i say "cargo cult" in a not necessarily negative sense | 18:35 |
| gouthamr | ++ | 18:40 |
| JayF | To be clear, I suggested Julia make that comment here since I was under the impression that Nova issue was not even embargoed | 19:30 |
| JayF | And it's even less impactful for the ironic case | 19:30 |
| gouthamr | ack | 19:31 |
| gouthamr | will you be creating an ironic bug for this? | 19:32 |
| JayF | I am personally not acting on this information right now. | 19:35 |
| JayF | My recommended course of action would be a bug and a backported fix. We can eratta the OSSN if we want, but this really is a significantly less major bug in ironic | 19:35 |
| gouthamr | yeah.. it's a low-prio hardening opportunity then | 19:39 |
Generated by irclog2html.py 4.1.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!