[all][tc][goals] Migrate RBAC Policy Format from JSON to YAML: Week R-16 Update

Ghanshyam Mann gmann at ghanshyammann.com
Tue Dec 29 17:41:21 UTC 2020

---- On Tue, 29 Dec 2020 09:15:43 -0600 Takashi Kajinami <tkajinam at redhat.com> wrote ----
 > Hello,
 > For Puppet OpenStack projects I have submitted a series of changes to use policy.yaml instead of policy.json[1]. [1] https://review.opendev.org/q/topic:%22policy-yaml%22+(status:open%20OR%20status:merged)

Thanks, Takashi for taking care of it. I have modified the review topic to 'policy-json-to-yaml' so that we track all work together.
- https://review.opendev.org/q/topic:%22policy-json-to-yaml%22+(status:open%20OR%20status:merged)

 > One problem I noticed during making these patches is that Gnocchi still uses policy.json.IIUC that policy-in-code is not implemented in gnocchi and the default contents shouldbe migrated to policy.yaml appropriately to keep its functionality.
 > I have submitted a pull request to introduce policy.yaml to replace policy.json to replacepolicy.json by policy.yaml.
 >  [2] https://github.com/gnocchixyz/gnocchi/pull/1108
 > I know that Gnocchi is not a part of OpenStack projects but we should be careful about itbefore we make any changes in oslo.policy because Gnocchi is currently consuming the library.

I agree, also gnoochi capped the oslo.policy with 3.4.0 and we need 3.6.0 for this migration. Matthias
already pushed the PR for that https://github.com/gnocchixyz/gnocchi/pull/1097

I hope both of these PRs will be merged soon.


 > Thank you,Takashi
 > On Tue, Dec 29, 2020 at 4:58 PM Dmitriy Rabotyagov <noonedeadpunk at ya.ru> wrote:
 > Hi! Regarding OpenStack-Ansible I was planning to land patches early January. We eventually need to patch every role to change "dest" and "config_type" for placing template, ie. [1] Also we will need to think through removal of old json file for ppl that will perform upgrade, to avoid any possible conflicts and confusions because of the prescence of both files. [1] https://opendev.org/openstack/openstack-ansible-os_glance/src/branch/master/tasks/glance_post_install.yml#L78-L82
 >  26.12.2020, 00:41, "Ghanshyam Mann" <gmann at ghanshyammann.com>:Hello Everyone,
 > Please find the week's R-16 updates on 'Migrate RBAC Policy Format from JSON to YAML' community-wide goals.
 > Tracking: https://etherpad.opendev.org/p/migrate-policy-format-from-json-to-yaml
 > Gerrit Topic: https://review.opendev.org/q/topic:%22policy-json-to-yaml%22+(status:open%20OR%20status:merged)
 > Progress:
 > =======
 > * Projects completed: 5
 > * Projects left to merge the patches: 25
 > * Projects left to push the patches: 2 (horizon and Openstackansible)
 > * Projects do not need any work: 17
 > Updates:
 > =======
 > * I have pushed the patches for all the required service projects.
 > ** Because of many services gate is already broken for lower constraints job, these patches might not be green in the
 > test results. I request projects to fix the gate so that we can merge this goal work before m-2.
 > ** There are many project tests where CONF object was not fully initialized before the policy is init. This was working till now
 > as policy init did not use the CONF object but oslo_policy 3.6.0 onwards it needs fully initialized CONF object during init only.
 > ** Aodh work for this goal is blocked because it needs oslo_policy 3.6.0 but gnocchi is capped for oslo_policy 3.4.0 [1]
 > - https://review.opendev.org/c/openstack/aodh/+/768499
 > * Horizon and Openstackansible work is pending to use/deploy the YAML formatted policy file. I will start exploring this
 > next week or so.
 > [1] https://github.com/gnocchixyz/gnocchi/blob/e19fda590c7f7f07f1df0ba93177df07d9802300/setup.cfg#L33
 > Merry Christmas and Happy Holidays!
 > -gmann
 >   -- 
 > Kind Regards,Dmitriy Rabotyagov 

More information about the openstack-discuss mailing list