<html>
  <head>
    <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
  </head>
  <body>
    I'm not sure how I didn't include -operators the first time around,
    but adding them to this thread now.<br>
    <br>
    TL;DR<br>
    <br>
    We're going through policy/RBAC for other systems to get an idea of
    how we want to shape OpenStack's policy and RBAC model. We're going
    to meet next Wednesday at 15:00 UTC. The meeting will be recorded.
    Previous context and information is in this thread.<br>
    <br>
    Thanks!<br>
    <br>
    <div class="moz-cite-prefix">On 10/25/2017 01:29 PM, Lance Bragstad
      wrote:<br>
    </div>
    <blockquote type="cite"
      cite="mid:2c4125f5-a551-36dc-1051-fe9135b6f029@gmail.com">
      <meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
      I've recapped the notes from today's session and I'll post a
      follow up with the recording as soon as it's available. All notes
      can be found in the etherpad (agreement and outcomes are in <b>bold</b>)<b>
      </b>[0]. Next week at the same time (15:00 UTC) we will continue
      going through AWS IAM flows. <br>
      <br>
      While today's discussion was helpful, it was very free-form. Let's
      aim to target a very specific flow for next week. What do we want
      that to be?<br>
      <br>
      Thanks!<br>
      <br>
      [0] <a class="moz-txt-link-freetext"
        href="https://etherpad.openstack.org/p/analyzing-other-policy-systems"
        moz-do-not-send="true">https://etherpad.openstack.org/p/analyzing-other-policy-systems</a><br>
      <br>
      <div class="moz-cite-prefix">On 10/24/2017 02:02 PM, Lance
        Bragstad wrote:<br>
      </div>
      <blockquote type="cite"
        cite="mid:9b185d47-b504-e535-5869-ded60d0954c0@gmail.com">
        <meta http-equiv="Content-Type" content="text/html;
          charset=UTF-8">
        Gentle reminder that this will be happening tomorrow. See you
        then!<br>
        <br>
        <div class="moz-cite-prefix">On 10/20/2017 09:46 AM, Lance
          Bragstad wrote:<br>
        </div>
        <blockquote type="cite"
          cite="mid:64d8d01e-b544-3b8e-d30e-c110eb7a7866@gmail.com">
          <meta http-equiv="Content-Type" content="text/html;
            charset=UTF-8">
          I just sent a calendar invite to everyone who responded to
          this thread or voted in the agenda. The session will be
          recorded if you are unable to make it.<br>
          <br>
          Thanks!<br>
          <br>
          <div class="moz-cite-prefix">On 10/18/2017 10:10 AM, Lance
            Bragstad wrote:<br>
          </div>
          <blockquote type="cite"
            cite="mid:671d3f20-2351-cabb-0bae-c415a09199d7@gmail.com">
            <meta http-equiv="Content-Type" content="text/html;
              charset=UTF-8">
            Now that we have some good feedback on the doodle, it looks
            like we have two sessions that will work for everyone. One
            is October 25th from 15:00 - 16:00 UTC and the other is also
            the 25th from 16:00 - 17:00.<br>
            <br>
            Let's shoot to meet at <b>15:00 UTC</b> on <b>October 25th</b>
            and if the meeting goes over, we have time allocated for
            that. Would anyone like a formal calendar invite? If so, I
            can send one out. The etherpad [0] will act as our
            "schedule", but we'll likely just work through the cases
            we've documented.<br>
            <br>
            Thanks!<br>
            <br>
            [0] <a class="moz-txt-link-freetext"
              href="https://etherpad.openstack.org/p/analyzing-other-policy-systems"
              moz-do-not-send="true">https://etherpad.openstack.org/p/analyzing-other-policy-systems</a><br>
            <br>
            <br>
            <div class="moz-cite-prefix">On 10/16/2017 08:45 AM, Lance
              Bragstad wrote:<br>
            </div>
            <blockquote type="cite"
              cite="mid:6a1e3721-a20b-78dd-99e6-9aa7042ba41d@gmail.com">
              <meta http-equiv="Content-Type" content="text/html;
                charset=UTF-8">
              Sending out a gentle reminder to vote for time slots that
              work for you [0]. We'll keep the poll open for a few more
              days, or until we reach quorum. Thanks!<br>
              <br>
              [0] <a class="moz-txt-link-freetext"
                href="https://beta.doodle.com/poll/ntkpzgmcv3k6v5qu"
                moz-do-not-send="true">https://beta.doodle.com/poll/ntkpzgmcv3k6v5qu</a><br>
              <br>
              <div class="moz-cite-prefix">On 10/11/2017 01:48 PM, Lance
                Bragstad wrote:<br>
              </div>
              <blockquote type="cite"
                cite="mid:00a75fb8-1465-8c47-0e94-755d168889df@gmail.com">
                <meta http-equiv="Content-Type" content="text/html;
                  charset=UTF-8">
                Oh - one note about the doodle [0]. All proposed times
                are in UTC, so just keep that in mind when selecting
                your availability.<br>
                <br>
                Thanks!<br>
                <br>
                [0] <a class="moz-txt-link-freetext"
                  href="https://beta.doodle.com/poll/ntkpzgmcv3k6v5qu"
                  moz-do-not-send="true">https://beta.doodle.com/poll/ntkpzgmcv3k6v5qu</a><br>
                <br>
                <div class="moz-cite-prefix">On 10/11/2017 01:44 PM,
                  Lance Bragstad wrote:<br>
                </div>
                <blockquote type="cite"
                  cite="mid:cb3e6456-7c7f-3701-8635-acc8d27bd0d9@gmail.com">
                  <meta http-equiv="Content-Type" content="text/html;
                    charset=UTF-8">
                  In today's policy meeting we went through and started
                  prepping for the session. Relevant information has
                  been captured in the etherpad [0].<br>
                  <br>
                  We're going to hold the meeting using <b>Google</b> <b>Hangouts</b>.
                  I'll update the etherpad with a link to the hangout
                  once we settle on a date. If you plan on attending,
                  please <b>vote</b> <b>for</b> <b>available</b> <b>times</b>
                  [1]. I've proposed a bunch of time slots (4 each day
                  for the next two weeks) to try and find a time that
                  works for everyone. People from US, AU, and EU will be
                  trying to attended, so we're not going to find a
                  perfect time for everyone. Having said that, <b>we're
                    going to record the session</b>.<br>
                  <br>
                  Most of what we talked about in the meeting today
                  uncovered the need to go over the basics of AWS IAM.
                  That should be something we can do with a free
                  account, which I'm going to sign up for. If we need
                  more time we can have another session or look at
                  options for upgrading the account.<br>
                  <br>
                  <br>
                  [0] <a class="moz-txt-link-freetext"
                    href="https://etherpad.openstack.org/p/analyzing-other-policy-systems"
                    moz-do-not-send="true">https://etherpad.openstack.org/p/analyzing-other-policy-systems</a><br>
                  [1] <a class="moz-txt-link-freetext"
                    href="https://doodle.com/poll/ntkpzgmcv3k6v5qu"
                    moz-do-not-send="true">https://doodle.com/poll/ntkpzgmcv3k6v5qu</a><br>
                  <br>
                  <div class="moz-cite-prefix">On 10/09/2017 04:23 PM,
                    Lance Bragstad wrote:<br>
                  </div>
                  <blockquote type="cite"
                    cite="mid:94b033cb-3ceb-cf34-bd5b-d1ad29ba9949@gmail.com">
                    <meta http-equiv="Content-Type" content="text/html;
                      charset=UTF-8">
                    I've put a scheduling session on the books for the
                    next policy meeting [0][1]. Advertising it here
                    since folks who want to be involved have responded
                    to the thread.<br>
                    <br>
                    Let's use this meeting time to iron out account
                    details and figure out what exactly we want to get
                    out of the session.<br>
                    <br>
                    <br>
                    [0] <a class="moz-txt-link-freetext"
                      href="http://eavesdrop.openstack.org/#Keystone_Policy_Meeting"
                      moz-do-not-send="true">http://eavesdrop.openstack.org/#Keystone_Policy_Meeting</a><br>
                    [1] <a class="moz-txt-link-freetext"
                      href="https://etherpad.openstack.org/p/keystone-policy-meeting"
                      moz-do-not-send="true">https://etherpad.openstack.org/p/keystone-policy-meeting</a><br>
                    <br>
                    <div class="moz-cite-prefix">On 10/05/2017 02:24 AM,
                      Colleen Murphy wrote:<br>
                    </div>
                    <blockquote type="cite"
cite="mid:CAJkgcEm+TkiY=9C+yjLP4thWE6JC09_KzLY5UNqJGzh6qgCUDw@mail.gmail.com">
                      <div dir="ltr">
                        <div class="gmail_extra">
                          <div class="gmail_quote">On Tue, Oct 3, 2017
                            at 10:08 PM, Lance Bragstad <span dir="ltr"><<a
                                href="mailto:lbragstad@gmail.com"
                                target="_blank" moz-do-not-send="true">lbragstad@gmail.com</a>></span>
                            wrote:<br>
                            <blockquote class="gmail_quote"
                              style="margin:0 0 0 .8ex;border-left:1px
                              #ccc solid;padding-left:1ex">Hey all,<br>
                              <br>
                              It was mentioned in today's keystone
                              meeting [0] that it would be useful<br>
                              to go through AWS IAM (or even GKE) as a
                              group. With all the recent<br>
                              policy discussions and work, it seems
                              useful to get our eyes on another<br>
                              system. The idea would be to spend time
                              using a video conference/screen<br>
                              share to go through and play with policy
                              together. The end result should<br>
                              keep us focused on the implementations
                              we're working on today, but also<br>
                              provide clarity for the long-term vision
                              of OpenStack's RBAC system.<br>
                              <br>
                              Are you interested in attending? If so,
                              please respond to the thread.<br>
                              Once we have some interest, we can gauge
                              when to hold the meeting, which<br>
                              tools we can use, and setting up a test
                              IAM account.<br>
                              <br>
                              Thanks,<br>
                              <br>
                              Lance<br>
                              <br>
                              [0]<br>
                              <a
href="http://eavesdrop.openstack.org/meetings/keystone/2017/keystone.2017-10-03-18.00.log.html#l-119"
                                rel="noreferrer" target="_blank"
                                moz-do-not-send="true">http://eavesdrop.openstack.<wbr>org/meetings/keystone/2017/<wbr>keystone.2017-10-03-18.00.log.<wbr>html#l-119</a><br>
                              <br>
                            </blockquote>
                            <div>Please count me in.</div>
                            <div><br>
                            </div>
                            <div>Colleen</div>
                          </div>
                        </div>
                      </div>
                      <br>
                      <fieldset class="mimeAttachmentHeader"></fieldset>
                      <br>
                      <pre wrap="">__________________________________________________________________________
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: <a class="moz-txt-link-abbreviated" href="mailto:OpenStack-dev-request@lists.openstack.org?subject:unsubscribe" moz-do-not-send="true">OpenStack-dev-request@lists.openstack.org?subject:unsubscribe</a>
<a class="moz-txt-link-freetext" href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" moz-do-not-send="true">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a>
</pre>
                    </blockquote>
                    <br>
                  </blockquote>
                  <br>
                </blockquote>
                <br>
              </blockquote>
              <br>
            </blockquote>
            <br>
          </blockquote>
          <br>
        </blockquote>
        <br>
      </blockquote>
      <br>
    </blockquote>
    <br>
  </body>
</html>