17:04:22 <lbragstad> #startmeeting keystone-office-hours
17:04:23 <openstack> Meeting started Tue May 15 17:04:22 2018 UTC and is due to finish in 60 minutes.  The chair is lbragstad. Information about MeetBot at http://wiki.debian.org/MeetBot.
17:04:24 <openstack> Useful Commands: #action #agreed #help #info #idea #link #topic #startvote.
17:04:26 <openstack> The meeting name has been set to 'keystone_office_hours'
17:41:57 <gagehugo> o/
17:42:28 <knikolla> lbragstad, hrybacki: what happened to service specific default roles in the ? (nova_auditor, etc)
17:43:16 <hrybacki> knikolla: removed during de-scope most likely. That happened a number of revisions ago so the specifics are a bit foggy
17:44:46 <knikolla> is that something we want to introduce? i remember people at the ptg seemed happy about that feature.
17:48:09 <hrybacki> knikolla: not at this stage. I'm sure it will be brought up at the next PTG -- which I will use to pivot us into discussing the community goal aimed at release T
17:50:08 <knikolla> okay
17:51:28 <knikolla> it sort of feels like since we are pushing everyone to standardize on {auditor,member,admin}. It's the same amount of effort to have them standardize on <service>_{auditor,member,admin} since <service> will be the same across that service.
17:52:42 <knikolla> it is true though that requires more operator effort since they have to create the implied roles, though it's only 3 commands per service.
17:54:04 <hrybacki> knikolla: I think that would be a great next step but I'd really like to KISS and proof out the work within Keystone and Barbican (and work on getting testing in place for this and future work)
17:55:42 <knikolla> ack. also it's easy enough to generate policy files with service specific roles for the operators who might really want it sooner.
17:56:25 <hrybacki> that's true. I'm remembering more of the conversation from before -- I think we basically decided that we would work with Octavia to /document/ how to do just that
17:58:41 <knikolla> ++ on documenting how
17:58:54 <hrybacki> adding a work item for that knikolla
17:59:48 <openstackgerrit> Harry Rybacki proposed openstack/keystone-specs master: Define a set of basic default roles  https://review.openstack.org/566377
17:59:53 <hrybacki> done
18:00:00 <hrybacki> that should be enough of a reminder :)
18:02:16 <knikolla> hrybacki: cool, thanks!
19:19:44 <openstackgerrit> Ben Nemec proposed openstack/oslo.policy master: Include both new and deprecated rules in generated sample  https://review.openstack.org/568676
20:11:18 <openstackgerrit> Monty Taylor proposed openstack/keystoneauth master: Expose version_between as a real function  https://review.openstack.org/568640
20:20:58 <openstackgerrit> Ben Nemec proposed openstack/oslo.policy master: Include deprecated_reason when deprecated_rule is set  https://review.openstack.org/568687
21:13:48 <lbragstad> #endmeeting