Re: [openstack-dev] [keystone] FFE Request for Reseller

2015-09-07 Thread Rodrigo Duarte
ists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev > > > > > __ > OpenStack Development Mailing List (not for usage questions) > Unsubscribe: openstack-dev-requ...@lists

Re: [openstack-dev] [keystone] PTL non-candidacy

2015-09-11 Thread Rodrigo Duarte
. I wish the best of luck to the next > PTL. > > > > I guess this is where I get to write a lot more code soon! > > > > See you all (in person) in Tokyo! > > --Morgan > > __ > OpenStack Development Mailing List (not for usage questions) > Unsubscribe: openstack-dev-requ

Re: [openstack-dev] [keystone] Single Sign On integration research

2016-03-15 Thread Rodrigo Duarte
ineer @ Mirantis Inc. > __ > OpenStack Development Mailing List (not for usage questions) > Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsub

Re: [openstack-dev] [QA][all] Propose to remove negative tests from Tempest

2016-03-19 Thread Rodrigo Duarte
vertently. > > andrea > > >> >> Thanks >> Ken Ohmichi >> >> ______ >> OpenStack Development Mailing List (not for usage questions) >> Unsubscribe: >> openstack-dev-requ...@lists.

Re: [openstack-dev] [tempest] Implementing tempest test for Keystone federation functional tests

2016-04-01 Thread Rodrigo Duarte
sting in tempest you'll have to also ensure there is > a > CI job setup in infra to configure the necessary environment. While I think > this is a good thing to have in the long run, it's not necessarily a small > undertaking. > > -Matt Treinish > > ____

Re: [openstack-dev] [tempest] Implementing tempest test for Keystone federation functional tests

2016-04-05 Thread Rodrigo Duarte
gt;> small >>>> undertaking. >>>> >>> >>>> -Matt Treinish >>>> >>>> >>>> __ >>>> OpenStack Development Mailing List (not for usage questions) >&

Re: [openstack-dev] How to single sign on with windows authentication with Keystone

2016-05-19 Thread Rodrigo Duarte
hout passing the password in the api. > > __ > OpenStack Development Mailing List (not for usage questions) > Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe > http://lists.openstack.org/cgi-bin/mailman/listinfo/

Re: [openstack-dev] [nova][keystone] Nova calls to Keystone

2015-06-23 Thread Rodrigo Duarte
ible. It seems to match the scope of what you > > are testing. However, you might want to consider doing a mock for the > whole > > Keystoneclient call, as that really should beo utside of the unit test > for > > the Nova code. > > > > Please use mock to do that for you, following the pattern of the > e

[openstack-dev] [keystone] SPF exception: Extend endpoint filtering to Service Providers

2015-06-25 Thread Rodrigo Duarte
onses [3] https://review.openstack.org/#/c/188534/ Thanks! -- Rodrigo Duarte Sousa Senior Software Engineer at Advanced OpenStack Brazil Distributed Systems Laboratory MSc in Computer Science Federal University of Campina Grande Campina Grande, PB - Brazil http://rodrigods.com <http://lsd.ufc

[openstack-dev] [keystone] SPF exception: Recursive deletion and project disabling

2015-02-08 Thread Rodrigo Duarte
spec to be a Spec Proposal Freeze exception? -- Rodrigo Duarte Sousa Senior Software Engineer at Advanced OpenStack Brazil Distributed Systems Laboratory MSc in Computer Science Federal University of Campina Grande Campina Grande, PB - Brazil http://rodrigods.com <http://lsd.ufcg.edu

Re: [openstack-dev] [Keystone] Proposing Marek Denis for the Keystone Core Team

2015-02-13 Thread Rodrigo Duarte
t; team. This poll will remain open until Feb 13. > > -- > Morgan Fainberg > > > __ > OpenStack Development Mailing List (not for usage questions) > Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe > http://lists.openstack.org/cgi-bin/mailman/listi

Re: [openstack-dev] [Keystone] SQLite support (migrations, work-arounds, and more), is it worth it?

2015-04-04 Thread Rodrigo Duarte
v >> > > __ > OpenStack Development Mailing List (not for usage questions) > Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe > http://lists.ope

Re: [openstack-dev] [keystone][reseller] New way to get a project scoped token by name

2015-06-04 Thread Rodrigo Duarte
_ > > > > OpenStack Development Mailing List (not for usage questions) > > > > Unsubscribe: > > > openstack-dev-requ...@lists.openstack.org?subject:unsubscribe > > < > http://openstack-dev-requ...@lis

Re: [openstack-dev] [all][policy][keystone] Better Policy Model and Representing Capabilites

2014-10-13 Thread Rodrigo Duarte
be something to be expected within the current development cycle > (Kilo) or even the next, but this is a conversation that needs to be > started as it will help make OpenStack better. > > Thanks, > Morgan > > — > Morgan Fainberg > > > > ___

Re: [openstack-dev] [oslo] kilo graduation plans

2014-11-13 Thread Rodrigo Duarte
t;> > >>>> > >>>> Other work: > >>>> > >>>> We will continue the work on oslo.concurrency and oslo.log that we > started during Juno. > >>>> > >>>> [1] https://etherpad.openstack.org/p/kilo-oslo-library-prop

Re: [openstack-dev] [oslo] kilo graduation plans

2014-11-13 Thread Rodrigo Duarte
ack/keystone-specs there's a template spec too. > > Thanks, > > _ > Steve Martinelli > OpenStack Development - Keystone Core Member > Phone: (905) 413-2851 > E-Mail: steve...@ca.ibm.com > > > > From:Rodrig

Re: [openstack-dev] [keystone] New Core Reviewer (sent on behalf of Steve Martinelli)

2016-05-25 Thread Rodrigo Duarte
ject: Re: [openstack-dev] [keystone] New Core Reviewer (sent on behalf > of Steve Martinelli) > -- > > > > Congratulations Rodrigo! > > Thank you for all the continued and consistent reviews. > > On Tue, May 24, 2016 at 1:28 PM, Morgan Fainberg &

Re: [openstack-dev] [keystone] Who is going to fix the broken non-voting tests?

2016-05-26 Thread Rodrigo Duarte
sts.openstack.org/cgi-bin/mailman/listinfo/openstack-dev >> >> >> >> __ >> OpenStack Development Mailing List (not for usage questions) >> Unsubscribe: >> openstack-dev-requ...@lists.openstack.org?subject:unsubscribe >> http://l

Re: [openstack-dev] [cinder] [keystone] cinder quota behavior differences after Keystone mitaka upgrade

2016-06-28 Thread Rodrigo Duarte
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev > > > > __________ > OpenStack Development Mailing List (not for usage questions) > Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubs

Re: [openstack-dev] Subject: [Keystone][Tempest][QA] Tempest full fails with policy.v3cloudsample.json and gate is using old policy.json

2017-01-24 Thread Rodrigo Duarte
e > v3 policy.json and make it more relaxed so tempest can authorize with users > created for each test with separate projects(tenants) because we set > tenant_isolation to True in tempest.conf ... > > This suggests to me that it is expected

Re: [openstack-dev] [keystone] removing Guang Yee (gyee) from keystone-core

2017-02-02 Thread Rodrigo Duarte
_ > OpenStack Development Mailing List (not for usage questions) > Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe > http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev > > -- Rodrigo Duarte Sousa Senior

Re: [openstack-dev] [QA] Announcing my candidacy for PTL of the Pike cycle

2017-02-07 Thread Rodrigo Duarte
interfaces. Lot of others >> > framework/interface also available in lib. But still lot of unstable >> > interfaces are being used in Plugins which should be migrated to lib >> soon. >> > In Pike cycle, we will wind up all remaining service client migration

Re: [openstack-dev] [keystone] User survey feedback

2017-02-20 Thread Rodrigo Duarte
t; Lance > > __________ > OpenStack Development Mailing List (not for usage questions) > Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe > http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack

Re: [openstack-dev] [keystone][defcore][refstack] Removal of the v2.0 API

2017-03-01 Thread Rodrigo Duarte
ttps://etherpad.openstack.org/p/pike-ptg-keystone-deprecations > > __ > OpenStack Development Mailing List (not for usage questions) > Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe > http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev >

Re: [openstack-dev] [Keystone] Admin or certain roles should be able to list full project subtree

2017-03-14 Thread Rodrigo Duarte
tps://bugs.launchpad.net/keystone/+bug/1434916 > https://review.openstack.org/#/c/167231 > > > > __________ > OpenStack Development Mailing List (not for usage questions) > Unsubscribe: openstack-dev-requ...@lists.openst

Re: [openstack-dev] [Keystone] Admin or certain roles should be able to list full project subtree

2017-03-14 Thread Rodrigo Duarte
penstack/keystone-specs/ > specs/keystone/mitaka/reseller.html > > On Tue, Mar 14, 2017 at 7:38 AM, Rodrigo Duarte > wrote: > >> Hi Adrian, >> >> In project hierarchies, it is not that simple to have a "tree admin". >> Imagine you have something like the fo

Re: [openstack-dev] [keystone] slide deck

2017-03-15 Thread Rodrigo Duarte
___ > OpenStack Development Mailing List (not for usage questions) > Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe > http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev > > -- Rodrigo Duarte Sousa Senior Quality Engineer @

Re: [openstack-dev] [Keystone] Admin or certain roles should be able to list full project subtree

2017-03-16 Thread Rodrigo Duarte
rison here, with this in mind, we can try to improve the design of the current solution. > TL DR: let's not try and hide projects from users with rights in the same > (peer, or above) hierarchy. > > __ > OpenStack Development Mailing List (not for usage questions) > Unsubscribe: opens

Re: [openstack-dev] [Keystone] Admin or certain roles should be able to list full project subtree

2017-03-16 Thread Rodrigo Duarte
_ >> OpenStack Development Mailing List (not for usage questions) >> Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscrib >> e >> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev >> >> > > _

Re: [openstack-dev] [keystone] Adding foreign keys between subsystems

2017-04-12 Thread Rodrigo Duarte
___ >> __ >> OpenStack Development Mailing List (not for usage questions) >> Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscrib >> e >> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev >> > > > ___

Re: [openstack-dev] [keystone] Adding foreign keys between subsystems

2017-04-12 Thread Rodrigo Duarte
On Wed, Apr 12, 2017 at 2:47 PM, David Stanek wrote: > On 12-Apr 14:30, Rodrigo Duarte wrote: > > Just to illustrate the discussion, we have a bug fix that currently tries > > to drop a FK between the federation and identity subsystems [1]. > > > > [1] https://revi

Re: [openstack-dev] [keystone] adding Gage Hugo to keystone core

2018-01-18 Thread Rodrigo Duarte
Congrats, Gage. Well deserved! On Tue, Jan 16, 2018 at 6:16 PM, Harry Rybacki wrote: > +100 -- congratulations, Gage! > > > On Tue, Jan 16, 2018 at 2:24 PM, Raildo Mascena de Sousa Filho < > rmasc...@redhat.com> wrote: > >> +1 >> >> Congrats Gage, very well deserved! >> >> Cheers, >> >> On Tue,

Re: [openstack-dev] [keystone] Signing off

2018-06-05 Thread Rodrigo Duarte
Henry, I'm really sad to see you go, you were a terrific mentor when I first joined the community - I remember all the thorough reviews and nice discussions ranging from topics on how to model the root domain for the reseller usecase to how to improve the role assignments API. :) Thanks for every

Re: [openstack-dev] [keystone] new core reviewer (rderose)

2016-09-01 Thread Rodrigo Duarte
Development Mailing List (not for usage questions) > Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe > http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev > > -- Rodrigo Duarte Sousa Senior Quality Engineer @ Red Hat MSc in Computer Science http://rodrigod

Re: [openstack-dev] [neutron] Skip-only tests

2016-09-13 Thread Rodrigo Duarte
Cheers, > Joe > > __ > OpenStack Development Mailing List (not for usage questions) > Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsu

Re: [openstack-dev] [keystone] gate-keystoneclient-dsvm-functional-ubuntu-xenial is broken

2016-09-21 Thread Rodrigo Duarte
Forgot to add the commit reference :) [1] https://review.openstack.org/#/c/368244/ On Wed, Sep 21, 2016 at 10:59 AM, Rodrigo Duarte wrote: > After some investigation I've found the possible issue: the functional > tests run in parallel, some of them create and delete roles and

Re: [openstack-dev] [keystone] gate-keystoneclient-dsvm-functional-ubuntu-xenial is broken

2016-09-21 Thread Rodrigo Duarte
velopment Mailing List (not for usage questions) > Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe > http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev > > -- Rodrigo Duarte Sousa Senior Quality Engi

Re: [openstack-dev] [keystone] Adding Kristi Nikolla to keystone-core

2017-08-15 Thread Rodrigo Duarte
Congrats Kristi! Well deserved. On Tue, Aug 15, 2017 at 4:54 PM, Davanum Srinivas wrote: > Go Kristi! > > On Tue, Aug 15, 2017 at 3:00 PM, Lance Bragstad > wrote: > > I made the announcement in today's keystone meeting [0] that the current > > reviewers have decided to add Kristi Nikolla (kniko

Re: [openstack-dev] Stepping down as coordinator for the Outreachy internships

2018-08-17 Thread Rodrigo Duarte
Thanks for everything, Victoria. On Fri, Aug 17, 2018 at 1:07 PM Victoria Martínez de la Cruz < victo...@vmartinezdelacruz.com> wrote: > Thanks everyone for your words! > > I really love the OpenStack community and I'm glad I could contribute back > with this. > > Samuel has been a great mentor f

[openstack-dev] [keystone][qa] PCI-DSS (security compliance tests)

2016-10-14 Thread Rodrigo Duarte
this approach is acceptable and, if not, what are the options. Thanks! [1] https://blueprints.launchpad.net/keystone/+spec/pci-dss [2] https://review.openstack.org/#/c/382018/ [3] https://review.openstack.org/#/c/377004/ [4] https://review.openstack.org/#/c/378624/ -- Rodrigo Duarte Sousa Sen

Re: [openstack-dev] [keystone][qa] PCI-DSS (security compliance tests)

2016-10-14 Thread Rodrigo Duarte
On Fri, Oct 14, 2016 at 1:10 PM, Clark Boylan wrote: > On Fri, Oct 14, 2016, at 08:21 AM, Rodrigo Duarte wrote: > > Hi all, > > > > Recently in keystone we got merged the PCI-DSS feature [1]. Basically, we > > have new settings that enforce password security practices.

Re: [openstack-dev] [keystone][qa] PCI-DSS (security compliance tests)

2016-10-14 Thread Rodrigo Duarte
On Fri, Oct 14, 2016 at 2:23 PM, Rodrigo Duarte wrote: > > > On Fri, Oct 14, 2016 at 1:10 PM, Clark Boylan > wrote: > >> On Fri, Oct 14, 2016, at 08:21 AM, Rodrigo Duarte wrote: >> > Hi all, >> > >> > Recently in keystone we got merged the PCI

Re: [openstack-dev] [keystone] new keystone core (breton)

2016-11-02 Thread Rodrigo Duarte
.openstack.org?subject:unsubscrib >> e >> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev >> >> > > __ > OpenStack Development Mailing List (not for usage questions) > Unsubscribe:

Re: [openstack-dev] [keystone] Pike PTL

2016-11-21 Thread Rodrigo Duarte
ocs/2016 >>> -November/009357.html >>> >> >> >> >> __ >> OpenStack Development Mailing List (not for usage questions) >> Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscrib >> e >> http://lists.openstack.org/cgi-bin/mailman/li

Re: [openstack-dev] [keystone] Stepping down from keystone core

2016-11-24 Thread Rodrigo Duarte
___ > OpenStack Development Mailing List (not for usage questions) > Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe > http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev > > > > _

Re: [openstack-dev] [keystone] office hours starting January 6th

2016-12-21 Thread Rodrigo Duarte
openstack.org/cgi-bin/mailman/listinfo/openstack-dev >> >> > > __________ > OpenStack Development Mailing List (not for usage questions) > Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe > h

Re: [openstack-dev] [Keystone][Glance] Hierarchical multitenancy and Glance?

2015-04-28 Thread Rodrigo Duarte Sousa
in participating the proposed design session and discussions that could emerge from it. -- Rodrigo Duarte On 28-04-2015 10:59, Geoff Arnold wrote: Yes. 100% upstream. And although I’ve referred to it as “reseller” (following the previous Keystone BP), it’s a much more generic pattern. Long term, I

[openstack-dev] [Keystone] Feature to enable domain-related role validation

2014-07-01 Thread Rodrigo Duarte Sousa
; * "domain_admin":"http://localhost:5000/v3/projects/%(project_id) s/roles/admin" Once the request arrives into Keystone, it checks if the the logged user has /admin/ role at /project_id/'s domain. So, what do you think? We would like your feedback before giving extra e