<div dir="ltr">Thanks to everyone who attended the Security SIG BoF session!<div><br></div><div>Attached are the notes taken from the discussion during the session with relevant links.  If there was anything missed, please feel free to mention it here or reach out in #openstack-security.</div><div><br></div><div><div id="gmail-magicdomid568" class="gmail-ace-line" style="margin:0px;padding:0px;color:rgb(0,0,0);font-family:"Helvetica Neue",Arial,sans-serif;font-size:12px"><span class="gmail-" style="margin:0px;padding:1px 0px">Board Picture: </span><span class="gmail-url" style="margin:0px;padding:1px 0px"><a href="https://drive.google.com/open?id=1YWYdp9F5faGzlww1Cr7-i2TawDh60trg" style="margin:0px;padding:0px;white-space:pre-wrap">https://drive.google.com/open?id=1YWYdp9F5faGzlww1Cr7-i2TawDh60trg</a></span></div><div id="gmail-magicdomid19" class="gmail-ace-line" style="margin:0px;padding:0px;color:rgb(0,0,0);font-family:"Helvetica Neue",Arial,sans-serif;font-size:12px"><br style="margin:0px;padding:0px"></div><div id="gmail-magicdomid569" class="gmail-ace-line" style="margin:0px;padding:0px;color:rgb(0,0,0);font-family:"Helvetica Neue",Arial,sans-serif;font-size:12px"><span class="gmail-" style="margin:0px;padding:1px 0px">Topics:</span></div><div id="gmail-magicdomid570" class="gmail-ace-line" style="margin:0px;padding:0px;color:rgb(0,0,0);font-family:"Helvetica Neue",Arial,sans-serif;font-size:12px"><ul class="gmail-list-bullet1" style="margin:0px 0px 0px 1.5em;padding:0px"><li style="margin:0px;padding:0px"><span class="gmail-" style="margin:0px;padding:1px 0px">Overall Security SIG</span></li></ul></div><div id="gmail-magicdomid571" class="gmail-ace-line" style="margin:0px;padding:0px;color:rgb(0,0,0);font-family:"Helvetica Neue",Arial,sans-serif;font-size:12px"><ul class="gmail-list-bullet2" style="margin:0px 0px 0px 3em;padding:0px;list-style-type:circle"><li style="margin:0px;padding:0px"><span class="gmail-" style="margin:0px;padding:1px 0px">Links:</span></li></ul></div><div id="gmail-magicdomid572" class="gmail-ace-line" style="margin:0px;padding:0px;color:rgb(0,0,0);font-family:"Helvetica Neue",Arial,sans-serif;font-size:12px"><ul class="gmail-list-bullet3" style="margin:0px 0px 0px 4.5em;padding:0px;list-style-type:square"><li style="margin:0px;padding:0px"><span class="gmail-url" style="margin:0px;padding:1px 0px"><a href="https://security.openstack.org/" style="margin:0px;padding:0px;white-space:pre-wrap">https://security.openstack.org/</a></span></li></ul></div><div id="gmail-magicdomid573" class="gmail-ace-line" style="margin:0px;padding:0px;color:rgb(0,0,0);font-family:"Helvetica Neue",Arial,sans-serif;font-size:12px"><ul class="gmail-list-bullet3" style="margin:0px 0px 0px 4.5em;padding:0px;list-style-type:square"><li style="margin:0px;padding:0px"><span class="gmail-url" style="margin:0px;padding:1px 0px"><a href="https://wiki.openstack.org/wiki/Security-SIG" style="margin:0px;padding:0px;white-space:pre-wrap">https://wiki.openstack.org/wiki/Security-SIG</a></span></li></ul></div><div id="gmail-magicdomid574" class="gmail-ace-line" style="margin:0px;padding:0px;color:rgb(0,0,0);font-family:"Helvetica Neue",Arial,sans-serif;font-size:12px"><ul class="gmail-list-bullet2" style="margin:0px 0px 0px 3em;padding:0px;list-style-type:circle"><li style="margin:0px;padding:0px"><span class="gmail-" style="margin:0px;padding:1px 0px">Security SIG: </span><span class="gmail-url" style="margin:0px;padding:1px 0px"><a href="https://wiki.openstack.org/wiki/Security-SIG" style="margin:0px;padding:0px;white-space:pre-wrap">https://wiki.openstack.org/wiki/Security-SIG</a></span></li></ul></div><div id="gmail-magicdomid575" class="gmail-ace-line" style="margin:0px;padding:0px;color:rgb(0,0,0);font-family:"Helvetica Neue",Arial,sans-serif;font-size:12px"><ul class="gmail-list-bullet2" style="margin:0px 0px 0px 3em;padding:0px;list-style-type:circle"><li style="margin:0px;padding:0px"><span class="gmail-" style="margin:0px;padding:1px 0px">Weekly Agenda: </span><span class="gmail-url" style="margin:0px;padding:1px 0px"><a href="https://etherpad.openstack.org/p/security-agenda" style="margin:0px;padding:0px;white-space:pre-wrap">https://etherpad.openstack.org/p/security-agenda</a></span></li></ul></div><div id="gmail-magicdomid576" class="gmail-ace-line" style="margin:0px;padding:0px;color:rgb(0,0,0);font-family:"Helvetica Neue",Arial,sans-serif;font-size:12px"><ul class="gmail-list-bullet2" style="margin:0px 0px 0px 3em;padding:0px;list-style-type:circle"><li style="margin:0px;padding:0px"><span class="gmail-" style="margin:0px;padding:1px 0px">Meeting Time: Weekly on Thursday at 1500 UTC #openstack-meeting</span></li></ul></div><div id="gmail-magicdomid577" class="gmail-ace-line" style="margin:0px;padding:0px;color:rgb(0,0,0);font-family:"Helvetica Neue",Arial,sans-serif;font-size:12px"><ul class="gmail-list-bullet2" style="margin:0px 0px 0px 3em;padding:0px;list-style-type:circle"><li style="margin:0px;padding:0px"><span class="gmail-" style="margin:0px;padding:1px 0px">IRC Server: <a href="http://irc.freenode.net">irc.freenode.net</a></span></li></ul></div><div id="gmail-magicdomid578" class="gmail-ace-line" style="margin:0px;padding:0px;color:rgb(0,0,0);font-family:"Helvetica Neue",Arial,sans-serif;font-size:12px"><ul class="gmail-list-bullet1" style="margin:0px 0px 0px 1.5em;padding:0px"><li style="margin:0px;padding:0px"><span class="gmail-" style="margin:0px;padding:1px 0px">Key Lime: </span><span class="gmail-url" style="margin:0px;padding:1px 0px"><a href="https://github.com/keylime/keylime" style="margin:0px;padding:0px;white-space:pre-wrap">https://github.com/keylime/keylime</a></span></li></ul></div><div id="gmail-magicdomid579" class="gmail-ace-line" style="margin:0px;padding:0px;color:rgb(0,0,0);font-family:"Helvetica Neue",Arial,sans-serif;font-size:12px"><ul class="gmail-list-bullet2" style="margin:0px 0px 0px 3em;padding:0px;list-style-type:circle"><li style="margin:0px;padding:0px"><span class="gmail-" style="margin:0px;padding:1px 0px">Integration with Ironic </span><span class="gmail-url" style="margin:0px;padding:1px 0px"><a href="https://github.com/keylime/keylime/issues/101" style="margin:0px;padding:0px;white-space:pre-wrap">https://github.com/keylime/keylime/issues/101</a></span></li></ul></div><div id="gmail-magicdomid580" class="gmail-ace-line" style="margin:0px;padding:0px;color:rgb(0,0,0);font-family:"Helvetica Neue",Arial,sans-serif;font-size:12px"><ul class="gmail-list-bullet1" style="margin:0px 0px 0px 1.5em;padding:0px"><li style="margin:0px;padding:0px"><span class="gmail-" style="margin:0px;padding:1px 0px">Bandit: </span><span class="gmail-url" style="margin:0px;padding:1px 0px"><a href="https://github.com/PyCQA/bandit" style="margin:0px;padding:0px;white-space:pre-wrap">https://github.com/PyCQA/bandit</a></span></li></ul></div><div id="gmail-magicdomid581" class="gmail-ace-line" style="margin:0px;padding:0px;color:rgb(0,0,0);font-family:"Helvetica Neue",Arial,sans-serif;font-size:12px"><ul class="gmail-list-bullet2" style="margin:0px 0px 0px 3em;padding:0px;list-style-type:circle"><li style="margin:0px;padding:0px"><span class="gmail-" style="margin:0px;padding:1px 0px">Running bandit as part of tox gate</span></li></ul></div><div id="gmail-magicdomid582" class="gmail-ace-line" style="margin:0px;padding:0px;color:rgb(0,0,0);font-family:"Helvetica Neue",Arial,sans-serif;font-size:12px"><ul class="gmail-list-bullet3" style="margin:0px 0px 0px 4.5em;padding:0px;list-style-type:square"><li style="margin:0px;padding:0px"><span class="gmail-" style="margin:0px;padding:1px 0px">Keystone does this: </span><span class="gmail-url" style="margin:0px;padding:1px 0px"><a href="https://github.com/openstack/keystone/blob/master/tox.ini#L40" style="margin:0px;padding:0px;white-space:pre-wrap">https://github.com/openstack/keystone/blob/master/tox.ini#L40</a></span></li></ul></div><div id="gmail-magicdomid583" class="gmail-ace-line" style="margin:0px;padding:0px;color:rgb(0,0,0);font-family:"Helvetica Neue",Arial,sans-serif;font-size:12px"><ul class="gmail-list-bullet2" style="margin:0px 0px 0px 3em;padding:0px;list-style-type:circle"><li style="margin:0px;padding:0px"><span class="gmail-" style="margin:0px;padding:1px 0px">Run as a separate job</span></li></ul></div><div id="gmail-magicdomid584" class="gmail-ace-line" style="margin:0px;padding:0px;color:rgb(0,0,0);font-family:"Helvetica Neue",Arial,sans-serif;font-size:12px"><ul class="gmail-list-bullet3" style="margin:0px 0px 0px 4.5em;padding:0px;list-style-type:square"><li style="margin:0px;padding:0px"><span class="gmail-" style="margin:0px;padding:1px 0px">Example (not tox): </span><span class="gmail-url" style="margin:0px;padding:1px 0px"><a href="https://github.com/openstack/openstack-helm/blob/master/zuul.d/jobs-openstack-helm.yaml#L27-L36" style="margin:0px;padding:0px;white-space:pre-wrap">https://github.com/openstack/openstack-helm/blob/master/zuul.d/jobs-openstack-helm.yaml#L27-L36</a></span></li></ul></div><div id="gmail-magicdomid585" class="gmail-ace-line" style="margin:0px;padding:0px;color:rgb(0,0,0);font-family:"Helvetica Neue",Arial,sans-serif;font-size:12px"><ul class="gmail-list-bullet1" style="margin:0px 0px 0px 1.5em;padding:0px"><li style="margin:0px;padding:0px"><span class="gmail-" style="margin:0px;padding:1px 0px">Host Intrusion </span></li></ul></div><div id="gmail-magicdomid586" class="gmail-ace-line" style="margin:0px;padding:0px;color:rgb(0,0,0);font-family:"Helvetica Neue",Arial,sans-serif;font-size:12px"><ul class="gmail-list-bullet2" style="margin:0px 0px 0px 3em;padding:0px;list-style-type:circle"><li style="margin:0px;padding:0px"><span class="gmail-" style="margin:0px;padding:1px 0px">Wazuh was mentioned: </span><span class="gmail-url" style="margin:0px;padding:1px 0px"><a href="https://wazuh.com/" style="margin:0px;padding:0px;white-space:pre-wrap">https://wazuh.com/</a></span></li></ul></div><div id="gmail-magicdomid587" class="gmail-ace-line" style="margin:0px;padding:0px;color:rgb(0,0,0);font-family:"Helvetica Neue",Arial,sans-serif;font-size:12px"><ul class="gmail-list-bullet1" style="margin:0px 0px 0px 1.5em;padding:0px"><li style="margin:0px;padding:0px"><span class="gmail-" style="margin:0px;padding:1px 0px">Ansible Hardening</span></li></ul></div><div id="gmail-magicdomid588" class="gmail-ace-line" style="margin:0px;padding:0px;color:rgb(0,0,0);font-family:"Helvetica Neue",Arial,sans-serif;font-size:12px"><ul class="gmail-list-bullet2" style="margin:0px 0px 0px 3em;padding:0px;list-style-type:circle"><li style="margin:0px;padding:0px"><span class="gmail-" style="margin:0px;padding:1px 0px">OpenStack Ansible: </span><span class="gmail-url" style="margin:0px;padding:1px 0px"><a href="https://docs.openstack.org/openstack-ansible/latest/" style="margin:0px;padding:0px;white-space:pre-wrap">https://docs.openstack.org/openstack-ansible/latest/</a></span></li></ul></div><div id="gmail-magicdomid589" class="gmail-ace-line" style="margin:0px;padding:0px;color:rgb(0,0,0);font-family:"Helvetica Neue",Arial,sans-serif;font-size:12px"><ul class="gmail-list-bullet1" style="margin:0px 0px 0px 1.5em;padding:0px"><li style="margin:0px;padding:0px"><span class="gmail-" style="margin:0px;padding:1px 0px">Security SIG "Help Wanted"</span></li></ul></div><div id="gmail-magicdomid590" class="gmail-ace-line" style="margin:0px;padding:0px;color:rgb(0,0,0);font-family:"Helvetica Neue",Arial,sans-serif;font-size:12px"><ul class="gmail-list-bullet2" style="margin:0px 0px 0px 3em;padding:0px;list-style-type:circle"><li style="margin:0px;padding:0px"><span class="gmail-url" style="margin:0px;padding:1px 0px"><a href="https://docs.openstack.org/security-analysis/latest/" style="margin:0px;padding:0px;white-space:pre-wrap">https://docs.openstack.org/security-analysis/latest/</a></span></li></ul></div><div id="gmail-magicdomid591" class="gmail-ace-line" style="margin:0px;padding:0px;color:rgb(0,0,0);font-family:"Helvetica Neue",Arial,sans-serif;font-size:12px"><ul class="gmail-list-bullet3" style="margin:0px 0px 0px 4.5em;padding:0px;list-style-type:square"><li style="margin:0px;padding:0px"><span class="gmail-" style="margin:0px;padding:1px 0px">Only has Barbican, missing other projects that have been added since</span></li></ul></div><div id="gmail-magicdomid592" class="gmail-ace-line" style="margin:0px;padding:0px;color:rgb(0,0,0);font-family:"Helvetica Neue",Arial,sans-serif;font-size:12px"><ul class="gmail-list-bullet3" style="margin:0px 0px 0px 4.5em;padding:0px;list-style-type:square"><li style="margin:0px;padding:0px"><span class="gmail-" style="margin:0px;padding:1px 0px">Multiple other libraries in review to be added</span></li></ul></div><div id="gmail-magicdomid593" class="gmail-ace-line" style="margin:0px;padding:0px;color:rgb(0,0,0);font-family:"Helvetica Neue",Arial,sans-serif;font-size:12px"><ul class="gmail-list-bullet3" style="margin:0px 0px 0px 4.5em;padding:0px;list-style-type:square"><li style="margin:0px;padding:0px"><span class="gmail-url" style="margin:0px;padding:1px 0px"><a href="https://review.openstack.org/#/q/project:openstack/security-analysis+is:open" style="margin:0px;padding:0px;white-space:pre-wrap">https://review.openstack.org/#/q/project:openstack/security-analysis+is:open</a></span></li></ul></div><div id="gmail-magicdomid594" class="gmail-ace-line" style="margin:0px;padding:0px;color:rgb(0,0,0);font-family:"Helvetica Neue",Arial,sans-serif;font-size:12px"><ul class="gmail-list-bullet2" style="margin:0px 0px 0px 3em;padding:0px;list-style-type:circle"><li style="margin:0px;padding:0px"><span class="gmail-url" style="margin:0px;padding:1px 0px"><a href="https://docs.openstack.org/security-guide/" style="margin:0px;padding:0px;white-space:pre-wrap">https://docs.openstack.org/security-guide/</a></span></li></ul></div><div id="gmail-magicdomid595" class="gmail-ace-line" style="margin:0px;padding:0px;color:rgb(0,0,0);font-family:"Helvetica Neue",Arial,sans-serif;font-size:12px"><ul class="gmail-list-bullet3" style="margin:0px 0px 0px 4.5em;padding:0px;list-style-type:square"><li style="margin:0px;padding:0px"><span class="gmail-" style="margin:0px;padding:1px 0px">Security guide doesn’t seem to have been updated since Pike, so it’s a good 1.5 years behind</span></li></ul></div><div id="gmail-magicdomid596" class="gmail-ace-line" style="margin:0px;padding:0px;color:rgb(0,0,0);font-family:"Helvetica Neue",Arial,sans-serif;font-size:12px"><ul class="gmail-list-bullet2" style="margin:0px 0px 0px 3em;padding:0px;list-style-type:circle"><li style="margin:0px;padding:0px"><span class="gmail-url" style="margin:0px;padding:1px 0px"><a href="https://security.openstack.org/#secure-development-guidelines" style="margin:0px;padding:0px;white-space:pre-wrap">https://security.openstack.org/#secure-development-guidelines</a></span></li></ul></div><div id="gmail-magicdomid597" class="gmail-ace-line" style="margin:0px;padding:0px;color:rgb(0,0,0);font-family:"Helvetica Neue",Arial,sans-serif;font-size:12px"><ul class="gmail-list-bullet3" style="margin:0px 0px 0px 4.5em;padding:0px;list-style-type:square"><li style="margin:0px;padding:0px"><span class="gmail-" style="margin:0px;padding:1px 0px">Improve documentation of secure coding practices</span></li></ul></div><div id="gmail-magicdomid598" class="gmail-ace-line" style="margin:0px;padding:0px;color:rgb(0,0,0);font-family:"Helvetica Neue",Arial,sans-serif;font-size:12px"><ul class="gmail-list-bullet2" style="margin:0px 0px 0px 3em;padding:0px;list-style-type:circle"><li style="margin:0px;padding:0px"><span class="gmail-" style="margin:0px;padding:1px 0px">improve coverage of bandit and syntribos jobs across projects, and look into other similar tools we could be using to better secure the software we write</span></li></ul></div><div id="gmail-magicdomid599" class="gmail-ace-line" style="margin:0px;padding:0px;color:rgb(0,0,0);font-family:"Helvetica Neue",Arial,sans-serif;font-size:12px"><ul class="gmail-list-bullet2" style="margin:0px 0px 0px 3em;padding:0px;list-style-type:circle"><li style="margin:0px;padding:0px"><span class="gmail-url" style="margin:0px;padding:1px 0px"><a href="https://wiki.openstack.org/wiki/Security_Notes" style="margin:0px;padding:0px;white-space:pre-wrap">https://wiki.openstack.org/wiki/Security_Notes</a></span></li></ul></div><div id="gmail-magicdomid600" class="gmail-ace-line" style="margin:0px;padding:0px;color:rgb(0,0,0);font-family:"Helvetica Neue",Arial,sans-serif;font-size:12px"><ul class="gmail-list-bullet3" style="margin:0px 0px 0px 4.5em;padding:0px;list-style-type:square"><li style="margin:0px;padding:0px"><span class="gmail-" style="margin:0px;padding:1px 0px">Help with writing security notes and triaging the backlog</span></li></ul></div><div id="gmail-magicdomid601" class="gmail-ace-line" style="margin:0px;padding:0px;color:rgb(0,0,0);font-family:"Helvetica Neue",Arial,sans-serif;font-size:12px"><ul class="gmail-list-bullet3" style="margin:0px 0px 0px 4.5em;padding:0px;list-style-type:square"><li style="margin:0px;padding:0px"><span class="gmail-url" style="margin:0px;padding:1px 0px"><a href="https://wiki.openstack.org/wiki/Security/Security_Note_Process" style="margin:0px;padding:0px;white-space:pre-wrap">https://wiki.openstack.org/wiki/Security/Security_Note_Process</a></span></li></ul></div><div id="gmail-magicdomid602" class="gmail-ace-line" style="margin:0px;padding:0px;color:rgb(0,0,0);font-family:"Helvetica Neue",Arial,sans-serif;font-size:12px"><ul class="gmail-list-bullet3" style="margin:0px 0px 0px 4.5em;padding:0px;list-style-type:square"><li style="margin:0px;padding:0px"><span class="gmail-url" style="margin:0px;padding:1px 0px"><a href="https://bugs.launchpad.net/ossn" style="margin:0px;padding:0px;white-space:pre-wrap">https://bugs.launchpad.net/ossn</a></span></li></ul></div><div id="gmail-magicdomid603" class="gmail-ace-line" style="margin:0px;padding:0px;color:rgb(0,0,0);font-family:"Helvetica Neue",Arial,sans-serif;font-size:12px"><ul class="gmail-list-bullet2" style="margin:0px 0px 0px 3em;padding:0px;list-style-type:circle"><li style="margin:0px;padding:0px"><span class="gmail-" style="margin:0px;padding:1px 0px">Security blog: </span><span class="gmail-url" style="margin:0px;padding:1px 0px"><a href="http://openstack-security.github.io/" style="margin:0px;padding:0px;white-space:pre-wrap">http://openstack-security.github.io/</a></span></li></ul></div><div id="gmail-magicdomid604" class="gmail-ace-line" style="margin:0px;padding:0px;color:rgb(0,0,0);font-family:"Helvetica Neue",Arial,sans-serif;font-size:12px"><ul class="gmail-list-bullet2" style="margin:0px 0px 0px 3em;padding:0px;list-style-type:circle"><li style="margin:0px;padding:0px"><span class="gmail-" style="margin:0px;padding:1px 0px">VMT Public Bug Assistance</span></li></ul></div><div id="gmail-magicdomid605" class="gmail-ace-line" style="margin:0px;padding:0px;color:rgb(0,0,0);font-family:"Helvetica Neue",Arial,sans-serif;font-size:12px"><ul class="gmail-list-bullet3" style="margin:0px 0px 0px 4.5em;padding:0px;list-style-type:square"><li style="margin:0px;padding:0px"><span class="gmail-" style="margin:0px;padding:1px 0px">Many reports of suspected vulnerabilities start out as public bugs or are made public over the course of being triaged, and assistance with those is encouraged from the entire community</span></li></ul></div><div id="gmail-magicdomid606" class="gmail-ace-line" style="margin:0px;padding:0px;color:rgb(0,0,0);font-family:"Helvetica Neue",Arial,sans-serif;font-size:12px"><ul class="gmail-list-bullet4" style="margin:0px 0px 0px 6em;padding:0px"><li style="margin:0px;padding:0px"><span class="gmail-url" style="margin:0px;padding:1px 0px"><a href="https://bugs.launchpad.net/ossa" style="margin:0px;padding:0px;white-space:pre-wrap">https://bugs.launchpad.net/ossa</a></span></li></ul></div><div id="gmail-magicdomid607" class="gmail-ace-line" style="margin:0px;padding:0px;color:rgb(0,0,0);font-family:"Helvetica Neue",Arial,sans-serif;font-size:12px"><ul class="gmail-list-bullet3" style="margin:0px 0px 0px 4.5em;padding:0px;list-style-type:square"><li style="margin:0px;padding:0px"><span class="gmail-" style="margin:0px;padding:1px 0px">Having someone who is familiar with the affected project provide context to a security bug really helps the VMT definine concrete impact statements and speeds up the overall process</span></li></ul></div><div id="gmail-magicdomid608" class="gmail-ace-line" style="margin:0px;padding:0px;color:rgb(0,0,0);font-family:"Helvetica Neue",Arial,sans-serif;font-size:12px"><ul class="gmail-list-bullet1" style="margin:0px 0px 0px 1.5em;padding:0px"><li style="margin:0px;padding:0px"><span class="gmail-" style="margin:0px;padding:1px 0px">Bootstrapping AWS / Windows Guest Domains / Guest VMs</span></li></ul></div><div id="gmail-magicdomid609" class="gmail-ace-line" style="margin:0px;padding:0px;color:rgb(0,0,0);font-family:"Helvetica Neue",Arial,sans-serif;font-size:12px"><ul class="gmail-list-bullet2" style="margin:0px 0px 0px 3em;padding:0px;list-style-type:circle"><li style="margin:0px;padding:0px"><span class="gmail-" style="margin:0px;padding:1px 0px">nova-join: </span><span class="gmail-url" style="margin:0px;padding:1px 0px"><a href="https://github.com/openstack/novajoin" style="margin:0px;padding:0px;white-space:pre-wrap">https://github.com/openstack/novajoin</a></span></li></ul></div><div id="gmail-magicdomid610" class="gmail-ace-line" style="margin:0px;padding:0px;color:rgb(0,0,0);font-family:"Helvetica Neue",Arial,sans-serif;font-size:12px"><ul class="gmail-list-bullet2" style="margin:0px 0px 0px 3em;padding:0px;list-style-type:circle"><li style="margin:0px;padding:0px"><span class="gmail-" style="margin:0px;padding:1px 0px">application credentials: </span><span class="gmail-url" style="margin:0px;padding:1px 0px"><a href="https://docs.openstack.org/keystone/latest/user/application_credentials.html" style="margin:0px;padding:0px;white-space:pre-wrap">https://docs.openstack.org/keystone/latest/user/application_credentials.html</a></span></li></ul></div><div id="gmail-magicdomid611" class="gmail-ace-line" style="margin:0px;padding:0px;color:rgb(0,0,0);font-family:"Helvetica Neue",Arial,sans-serif;font-size:12px"><ul class="gmail-list-bullet2" style="margin:0px 0px 0px 3em;padding:0px;list-style-type:circle"><li style="margin:0px;padding:0px"><span class="gmail-" style="margin:0px;padding:1px 0px">Barbican: </span><span class="gmail-url" style="margin:0px;padding:1px 0px"><a href="https://wiki.openstack.org/wiki/Barbican" style="margin:0px;padding:0px;white-space:pre-wrap">https://wiki.openstack.org/wiki/Barbican</a></span></li></ul></div><div id="gmail-magicdomid612" class="gmail-ace-line" style="margin:0px;padding:0px;color:rgb(0,0,0);font-family:"Helvetica Neue",Arial,sans-serif;font-size:12px"><ul class="gmail-list-bullet1" style="margin:0px 0px 0px 1.5em;padding:0px"><li style="margin:0px;padding:0px"><span class="gmail-" style="margin:0px;padding:1px 0px">Policy</span></li></ul></div><div id="gmail-magicdomid613" class="gmail-ace-line" style="margin:0px;padding:0px;color:rgb(0,0,0);font-family:"Helvetica Neue",Arial,sans-serif;font-size:12px"><ul class="gmail-list-bullet2" style="margin:0px 0px 0px 3em;padding:0px;list-style-type:circle"><li style="margin:0px;padding:0px"><span class="gmail-" style="margin:0px;padding:1px 0px">Cross-project policy effort:</span></li></ul></div><div id="gmail-magicdomid614" class="gmail-ace-line" style="margin:0px;padding:0px;color:rgb(0,0,0);font-family:"Helvetica Neue",Arial,sans-serif;font-size:12px"><ul class="gmail-list-bullet3" style="margin:0px 0px 0px 4.5em;padding:0px;list-style-type:square"><li style="margin:0px;padding:0px"><span class="gmail-url" style="margin:0px;padding:1px 0px"><a href="https://governance.openstack.org/tc/goals/queens/policy-in-code.html" style="margin:0px;padding:0px;white-space:pre-wrap">https://governance.openstack.org/tc/goals/queens/policy-in-code.html</a></span></li></ul></div><div id="gmail-magicdomid615" class="gmail-ace-line" style="margin:0px;padding:0px;color:rgb(0,0,0);font-family:"Helvetica Neue",Arial,sans-serif;font-size:12px"><ul class="gmail-list-bullet3" style="margin:0px 0px 0px 4.5em;padding:0px;list-style-type:square"><li style="margin:0px;padding:0px"><span class="gmail-url" style="margin:0px;padding:1px 0px"><a href="https://specs.openstack.org/openstack/keystone-specs/specs/keystone/ongoing/policy-goals.html" style="margin:0px;padding:0px;white-space:pre-wrap">https://specs.openstack.org/openstack/keystone-specs/specs/keystone/ongoing/policy-goals.html</a></span></li></ul></div></div></div>