settingsLogin | Registersettings


Recent questions tagged enforcement

0 votes
23 responses 226 views

Hi all, I wanted to start some discussion re $subject, because it's been apparrent that we have a lack of clarity on this issue (and have done ever since we started using parameter_defaults). Some context: - Historically TripleO has ...

asked Nov 10, 2017 in openstack-dev by Steven_Hardy (16,900 points)   2 7 12
0 votes
11 responses 11 views

Should this kind of change be discussed and have an agreement of the TC and User committee? ---------- Forwarded message ---------- From: Lance Bragstad Date: Fri, Oct 20, 2017 at 12:08 AM Subject: [Openstack-operators] [keystone][all] v2.0 ...

asked Oct 23, 2017 in openstack-dev by Yaguang_Tang (1,180 points)   1 3 4
4 x  
0 votes
27 responses 23 views

In the past year or so, has there been anything that made you think “I wish the TC would do something about that!” ? If so, what was it, and what would you have wanted the TC to do about it? -- Ed Leafe ...

asked Oct 13, 2017 in openstack-dev by Ed_Leafe (11,720 points)   1 3 6
3 x  
0 votes
1 response 5 views

As my first year on the OpenStack Technical Committee draws to a close, I'm standing for reelection to a second term. I hold consistent, strong views in favor of free software and open/transparent community process, and vote my conscience ...

asked Oct 10, 2017 in openstack-dev by Jeremy_Stanley (56,700 points)   3 5 7
0 votes
8 responses 274 views

Openstack version: Ocata Mech driver: OVS Security: Linuxbridge Hello! Anyone have any idea why DHCP for IPv4 works fine but DHCP for IPv6 doesn't? With Stateless or just SLAAC, the VM's calculate a correct IPv6 address from the IPv6 prefix ...

asked Sep 29, 2017 in openstack by Sterdnot_Shaken (900 points)   2 4 10
2 x  
0 votes
2 responses 34 views

We are in the process of integrating MAGNUM into our OpenStack distribution. We are working with NEWTON version of MAGNUM. We have the MAGNUM processes up and running and configured. However we are seeing the following error (see stack ...

asked Sep 22, 2017 in openstack-dev by Waines,_Greg (2,700 points)   1 5 10
0 votes
0 responses 10 views

* Hi all, ** I'd like to formally communicate my desire to continue serving as the keystone PTL for the upcoming Queen’s release. Despite some turbulence throughout the Pike development cycle, keystone has managed to make progress on some ...

asked Aug 4, 2017 in openstack-dev by Lance_Bragstad (11,080 points)   2 3 6
0 votes
2 responses 88 views

Hello, I've run into an issue regarding policies with Glance on the Ocata release. Essentially, I'd like to restrict the actions of listing images and viewing/editing their details to either members of the same project or the global admin. ...

asked Jun 20, 2017 in openstack by Markus_Hentsch (260 points)   1
0 votes
2 responses 4 views

The recent thread about updating the pylint version in global-requirements.txt raised an issue because it was trying to update the pylint version for all projects using it, but some teams were not ready for the new tests in the latest ...

asked Jun 12, 2017 in openstack-dev by Doug_Hellmann (87,520 points)   3 4 12
0 votes
20 responses 15 views

We had a very lively discussion this morning during the Scheduler subteam meeting, which was continued in a Google hangout. The subject was how to handle claiming resources when the Resource Provider is not "simple". By "simple", I mean a ...

asked Jun 9, 2017 in openstack-dev by Ed_Leafe (11,720 points)   1 3 6
2 x  
0 votes
26 responses 11 views

There's no TC meeting this week. Thierry did a second weekly status report[^1]. There will be a TC meeting next week (Tuesday, 6th June at 20:00 UTC) with the intention of discussing the proposals about postgreSQL (of which more below). ...

asked Jun 5, 2017 in openstack-dev by cdent_plus_os_at_ant (12,800 points)   2 2 6
9 x  
0 votes
15 responses 15 views

Hi all! As the discussion around PostgreSQL has progressed, it has come clear to me that there is a decently deep philosophical question on which we do not currently share either definition or agreement. I believe that the lack of clarity ...

asked May 23, 2017 in openstack-dev by Monty_Taylor (22,780 points)   2 5 8
0 votes
3 responses 8 views

Hi all, I have a question regarding patrole and release management. Many projects like heat or murano have a tempest plugin within their repos, so by extension their tempest plugins have releases, as the projects change over time. However, ...

asked Apr 21, 2017 in openstack-dev by MONTEIRO,_FELIPE_C (520 points)  
0 votes
5 responses 7 views

[tl;dr I want to remove the artificial restriction of not allowing FKs between subsystems and I want to stop FK enforcement in code.] The keystone code architecture is pretty simple. The data and functionality are divided up into ...

asked Apr 12, 2017 in openstack-dev by dstanek_at_dstanek.c (2,440 points)   1 2
0 votes
2 responses 5 views

Hi, At the PTG we briefly discussed a generic system for verifying that the appropriate drivers are enforcing a particular user-requested feature in ML2 (e.g. security groups, qos, etc). Is someone planning on working on this for Pike? If ...

asked Mar 15, 2017 in openstack-dev by (15,600 points)   2 3 5
0 votes
3 responses 4 views

One of the things that came out of the PTG was perhaps a new path forward on hierarchical limits that involves storing of limits in keystone doing counting on the projects. Members of the developer community are working through all that ...

asked Mar 8, 2017 in openstack-operators by Sean_Dague (66,200 points)   4 9 16
0 votes
3 responses 9 views

We talked about a few things related to quotas at the PTG, some in cross-project sessions earlier in the week and then some on Wednesday morning in the Nova room. The full etherpad is here [1]. Counting quotas --------------- Melanie hit a ...

asked Mar 3, 2017 in openstack-dev by mriedemos_at_gmail.c (15,720 points)   2 5 10
0 votes
20 responses 188 views

Hello everyone, PKI/PKIZ token has been removed from keystone in Ocata. But recently our production team did some test about PKI and Fernet token (With Keystone Mitaka). They found that in large-scale production environment, Fernet token's ...

asked Feb 26, 2017 in openstack-dev by 王玺源 (680 points)   1 1
0 votes
3 responses 8 views

Hello, I'm running a Newton setup where I'm trying to restrict the volume attachment actions using Nova's policy file. I want to check for both the VM ownership as well as the volume ownership, so that users should be unable to attach ...

asked Feb 20, 2017 in openstack by Markus_Hentsch (260 points)   1
0 votes
3 responses 4 views

The patches about validation the filters and sorts for servers API are merged [0]. But we still have something left [1]. The left is about the proposal of introducing the new rule 'os_compute_api:servers:all_tenants_visible' which is soft ...

asked Jan 29, 2017 in openstack-dev by Alex_Xu (8,960 points)   1 3 3