Commit Graph

670 Commits

Author SHA1 Message Date
Stephen Finucane 3c2a55a737 [goal] Propose migration from WSGI scripts to Python module paths
Change-Id: I509c42942b65f202270486a89a9071c7bf7e6595
Signed-off-by: Stephen Finucane <stephenfin@redhat.com>
2023-12-07 12:29:51 +00:00
Ghanshyam Mann f0a23fb1bf Correct the old deprecated policies removal timeline for SLURP release
In vPTG (bobcat), we discussed about removal of old deprecated rules
and we should have at least one SLURP release between we enable the
new defaults by default and remove the old rules. For example, if
new rules are enabled in B(non SLURP) then removal should not be done
in C (SLURP) so that SLURP upgrade can notice the new rules enable
for at least one SLURP release.

- https://etherpad.opendev.org/p/rbac-2023.2-ptg#L36

Change-Id: I2cc408c4c7b8b147217b2f11697d36e58017db91
2023-04-12 15:07:42 -05:00
Jake Yip 072655035f Fix doc referencing 'admin_api' rule
Change-Id: I85763795b7a9b909c51a1cffb0a0424489e9c1e9
2023-03-01 21:23:42 +11:00
Dmitriy Rabotyagov 8724efb270 [goal] Select Ubuntu 22.04 for CI/CD as current goal
Goal implementation should be finished during 2023.1 development cycle.
In order to start progressing on it we should select goal for
implementation first.

Change-Id: Ib3893bc1fafd8626465de4f9d9ff467404bea97c
2022-10-01 01:13:10 +02:00
Dmitriy Rabotyagov 75e3a3fa2f [goal] Propose to use Ubuntu 22.04 for CI/CD
Ubuntu 22.04 has been released on April 21 and by now already have first
point release as well as upgrade path from 20.04 (Focal). By the end of
Antelope development cycle Ubuntu 22.04 will be around for a year,
which makes a good timing for us to set a goal of migrating CI/CD jobs
to start using this distro.

Change-Id: Ic89ae25dcaebc4f27e9214a857d4d681d0992667
2022-09-27 11:44:03 +02:00
Ghanshyam Mann 1909d4f7a0 Updating the RBAC goal as per new direction in zed cycle
In Zed cycle, we started collecting the operators feedback
- https://etherpad.opendev.org/p/BER-2022-OPS-SRBAC
- https://etherpad.opendev.org/p/rbac-operator-feedback

and based on that we changed the direction for RBAC goal:

1. Finish delivering project personas. This is to introduce the member
   and reader roles to operate things within their project. By default,
   any other project role like foo will not be allowed to do anything
   in the project.

2. Change in scope implementation. Services with project resources
   (except Ironic as they have user using the system scope) that have
   already implemented scope (or have yet to) should make all policy
   rules set scope_types=['project'].

Discussion reference for policy popup team
- https://etherpad.opendev.org/p/rbac-zed-ptg#L171

Change-Id: If7b052149df3f37f2173e6719c8c6d0d81787cc7
2022-07-21 10:43:27 +02:00
Ade Lee b9ca3302cd Move FIPS goal from proposed to selected.
Also fixed a couple of minor typos.

Change-Id: Ia7a52330f0b52fdddd1ac947d83b955e2909ce87
2022-05-06 10:56:26 -04:00
Ade Lee 9b6103d5c6 Update milestones for FIPS goal
Updated the milestones for the FIPS goal as of the beginning of the
Zed cycle.

Change-Id: I9e9dcb0b7e42afaf99b7679baad78f21de984550
2022-05-06 10:27:55 -04:00
Zuul 04abe9c3cd Merge "Add goal readiness checklist" 2022-04-08 01:22:35 +00:00
Ghanshyam Mann 72a20ab455 Add goal readiness checklist
As discussed in Yoga PTG TC+PTL interaction sessions[1],
adding goal checklist to know if goal is ready or not.

Also, remove the goal schedule which was needed when goal
were coupled with development cycle.

[1] https://etherpad.opendev.org/p/tc-ptl-interaction

Change-Id: I91c21233673c75f37461094dcf1fbb9ef4ca2e5e
2022-03-31 13:16:38 -05:00
Ghanshyam Mann 430531fc28 Add tracking etherpad link in rbac goal
Change-Id: Ic5089c581361cdf56e15c4775dcff4cf3917eab3
2022-03-25 11:03:06 -05:00
Radosław Piliszek b7f45e2266 Remove the tags framework (part 1)
This change enacts the first steps of the TC's decision to remove
the tags framework. [1]

This change does not remove all the parts to avoid breaking
the releases tooling as well as to preserve useful information
as discussed under this change and during one of the TC meetings.
[2]

[1] http://lists.openstack.org/pipermail/openstack-discuss/2021-October/025554.html
[2] https://meetings.opendev.org/meetings/tc/2022/tc.2022-01-20-15.00.log.html

Change-Id: Iab4a136905a9c7a61530ff7576a216d229f717a0
2022-02-03 18:32:27 +00:00
Zuul f272a40df0 Merge "Add proposed community goal for FIPS compatibility and compliance" 2022-01-28 03:35:39 +00:00
Ghanshyam Mann b3e4cc67ec Fix hardcoded extlinks link error in sphinx 4.4.0
governance doc job is failing because sphinx 4.4.0
raise error for hardcoded extlinks link
- https://github.com/sphinx-doc/sphinx/pull/9800

Warning, treated as error:
/home/zuul/src/opendev.org/openstack/governance/doc/source/goals/completed/pike/deploy-api-in-wsgi.rst:269:hardcoded link '6ef5fa9adc'

https://zuul.opendev.org/t/openstack/build/b84dd8d2989243bfa0cebee1a21dc4ff

we have 'repo' as extlinks
- 16302d8a2f/doc/source/conf.py (L50)

This fixes the hardcoded extlinks link and unblock the gate.

Change-Id: I61873080e0ebaa679fee191e1ae968a488bd637b
2022-01-19 12:25:29 -06:00
Ade Lee 4348fb36bd Add proposed community goal for FIPS compatibility and compliance
Change-Id: Ie1b5e613974e898202d2e5856980c39842cd27f7
2022-01-17 20:01:24 +00:00
Ghanshyam Mann 312e1c7022 Clarify that selected are Active goal as per new model
Community-wide goals are not coupled with cycle so
this commit adds a clarity on slected goals are Active goals
even they are targetted for more than one cycle.

Change-Id: I900a3912dd2e78fa5b267512e0f817db8bda1ec2
2021-12-07 18:17:32 +00:00
Lance Bragstad 076ffed03c Address followup comments to secure RBAC community goal
We're happy with the overall direction in
https://review.opendev.org/c/openstack/governance/+/815158 but these
changes are catching some minor comments.

Change-Id: If2c601b95952cadaacc9cf46a80e93b9c01b351d
2021-12-07 08:19:39 -06:00
Ghanshyam Mann ac29ea216f Move completed goals into the completed directory
As per the new structure of community-wide goal[1],
we will keep all the completed goals into separate
directory 'goals/completed/' which will help to
track the goals and a clear view on what all goals
still need more work.

Keeping 'Migrate from oslo.rootwrap to oslo.privsep'
goal in the selected directory only as this still need to
finish the work. Rest all previous cycle goals are moved
to 'goals/completed/' directory

[1] https://governance.openstack.org/tc/goals/#completing-goals

Change-Id: I6c0d979038f65abb091db646ddb4c0d09c43735a
2021-11-29 16:12:54 +00:00
Ghanshyam Mann acdf04a91e Select secure and consistent RBAC as a community-wide goal
RBAC goal has been reworked and has clear direction now.
As per the new structure of community-wide goals, goal
will not be associated with any cycle release but will have
different milestones. This goal has defined the different
milestones to complete the work.

Change-Id: I52744507cf5be6e47e96c69af4300cb84018c2e9
2021-11-29 09:32:09 -06:00
Ghanshyam Mann 4a2df75171 Rework the yoga secure RBAC community goal
The Yoga PTG shed a lot of discussion on the useage of system scope and
default roles.

The yoga community goal is still useful, but the discussions highlighted
some confusion in the current approach. We should update the goal to be
consistent with the discussions from the yoga PTG.

This goal is divided into phases spanning the next few development
cycles.

Co-Authored-By: Ghanshyam Mann <gmann@ghanshyammann.com>

Change-Id: I061994e17bd96ace9e3d2040d342b71d3add99cc
2021-11-29 09:21:57 -06:00
Zuul 8b7a9a2840 Merge "Unselect RBAC goal to rework the implementation" 2021-11-11 18:38:43 +00:00
Ghanshyam Mann 3d8d0e0b17 Decouple the community-wide goals from cycle release
As discussed in Yoga PTG[1], we are decoupling the
community-wide goals from release cycle which will
give us benefit to:
- have a set of goals always active for community to work
whenever we get help or bandwidth.
- Divide the goal into different milestones
- Complete the goal as per set targets instead of fogetting
it once cycle is completed.

[1] https://etherpad.opendev.org/p/tc-yoga-ptg

Change-Id: I6a3120193147cd0d46c04106283fa7d5519f9cb0
2021-11-04 17:07:44 +00:00
Ghanshyam Mann 1a93556774 Unselect RBAC goal to rework the implementation
As discussed in Yoga PTG, we need to rework the implementation
for the new secure RBAC.
- https://etherpad.opendev.org/p/tc-yoga-ptg

We will continue to rework the implementation in
goals/proposed folder and once it is ready then we will select this
as goal.

Change-Id: I1ce58b1c42ce1e24116a54b6fc136bf6bbcdc818
2021-11-01 19:25:35 -05:00
Ghanshyam Mann 922699aade Select secure RBAC community-wide goal for Yoga cycle
Change-Id: Ic365d05bdccaa9d9ea76a2314084eb34fa79f5ed
2021-08-06 11:20:10 -05:00
Ghanshyam Mann 551c109b68 Proposing consistent and secure RBAC as a community-wide goal
We have been doing a lot of work towards the secure RBAC for
many cycles. popup team also served its purpose since four
release cycle
- https://wiki.openstack.org/wiki/Consistent_and_Secure_Default_Policies_Popup_Team#Team_Progress

There is a lot of work completed and going on:
- https://review.opendev.org/q/topic:%2522secure-rbac%2522+(status:open+OR+status:merged)

Its time to define this as one of the community-wide goals so that
all remaining projects can finish this work on priority.

Change-Id: Ide5c6d6a58c8550f505b8286a5f7d98218091572
2021-07-06 13:15:53 -05:00
Belmiro Moreira ff79a011d3 No community goals for a release cycle
It was already mentioned that: "There is no minimum or maximum limit
on the number of goals to be selected per cycle".
With this change we explicitly mention that the TC can decided that
a release cycle can have no community goals.

Change-Id: I47ff25f7b1b7b712628f0c6ca03886a7de929a0c
2021-02-25 16:46:03 +00:00
Zuul f0ea971c87 Merge "Remove already done use-builtin-mock from goal" 2020-12-03 15:28:36 +00:00
Ghanshyam Mann 0a8d633169 Update example and oslo code usage in JSON->YAML goal
Change-Id: I962a1a0e610f65a4192d071e744db068885f293a
2020-11-26 17:30:35 +00:00
Ghanshyam Mann 8239004a7b Remove already done use-builtin-mock from goal
use-builtin-mock work is already done under:
https://review.opendev.org/q/topic:%22unittest.mock%22+(status:open%20OR%20status:merged)

We do not need to keep it in proposal goal doc.

Change-Id: Icc1e837c1de964caba505c1d7cfe0467ef88808e
2020-11-25 19:30:02 -06:00
Ghanshyam Mann c4ee55d882 Select JSON to YAML goal for Wallaby cycle
Change-Id: I457cb456cdc4e96cdff75691c7485beb91bcb458
2020-11-02 13:44:46 -06:00
Ghanshyam Mann 533b6542d6 Adding reno and warnings example for JSON->YAML goal doc
Change-Id: I6d56870b4e3afe8691051a7e6acb250be3652ba0
2020-11-02 19:43:24 +00:00
Ghanshyam Mann fe7e4a908d Add goal for migrate RBAC policy format from JSON to YAML
Change-Id: Iea9c2c02c031df4ecae358ca017e4743b9db4ef9
2020-11-02 16:22:00 +00:00
Graham Hayes 67acc15352
Select Privsep as the Wallaby Goal
Change-Id: I3eb2b04249a0c649ab738e77aab77197fb54bbc5
Signed-off-by: Graham Hayes <gr@ham.ie>
2020-10-21 16:23:04 +01:00
Sean McGinnis f1e5071a28
Reverse sort series in selected goals
The default sort is alphabetical, causing the most recent goals to be
further and further down the list of selected goals. This reverses the
sort order so that the most recent and relevant series goals are at the
top of the list.

Change-Id: Ifd0cb584d71e7d08acc5c5960707d2bd954f48ae
Signed-off-by: Sean McGinnis <sean.mcginnis@gmail.com>
2020-08-05 07:37:18 -05:00
Luigi Toscano eeb625a6d0 V goals, Zuul v3 migration: update links and grenade
Update a few links:
- to the restored Zuul v3 migration guide;
- to the Zuul jobs reference;

Update the information about the grenade jobs and add
a few examples.

Change-Id: I85090964cbccb0796552f61556dfaa9591a6d459
2020-07-28 19:30:43 +02:00
Ghanshyam Mann 8a0478f30c Update goal selection docs to clarify the goal count
We discussed this in Victoria PTG to clarify the goal
count which is not always two goals per cycle
- https://etherpad.opendev.org/p/tc-victoria-ptg

Change-Id: I9f471207e8af750e579b475874b247662604cbbb
2020-07-02 21:41:46 +00:00
Lance Bragstad f766a03b01 Update policy in code goal for glance
The existing goal for glance references a stale specification, but the
code actually merged.

Change-Id: Ic38769412d25c06751cd66499b88a9469d2b485c
2020-06-26 15:47:04 -05:00
Ghanshyam Mann 4959ad5416 Add storyboard link to migrate-to-focal goal
Change-Id: I1e7fd5f755fabac506c2586cc7bcffaa73413428
2020-06-25 20:39:03 -05:00
Zuul bae39ea1f2 Merge "Add QA branchless projects also in py3.5 support list." 2020-06-12 14:55:23 +00:00
Ghanshyam Mann b809f3846a Select migrate-to-focal goal for Victoria cycle
Change-Id: Ief1c45f46d106f806d68aab19ace6db5407d0506
2020-05-27 08:45:45 -05:00
Zuul e43038dd9a Merge "Fix bullet list formatting for drop-py2 goal" 2020-05-25 16:39:09 +00:00
Zuul 1c9758b5f2 Merge "Add goal to migrate CI/CD jobs to Ubuntu Focal" 2020-05-25 16:38:39 +00:00
Zuul a9f114de78 Merge "Loosen voting for community goal proposals" 2020-05-25 16:27:27 +00:00
Ghanshyam Mann 669f0e6f96 Add goal to migrate CI/CD jobs to Ubuntu Focal
Change-Id: I2057f598c4bc9fdff3795ca0550a7269e4677f0f
2020-05-20 15:01:18 +00:00
Ghanshyam Mann fdc2847428 Add QA branchless projects also in py3.5 support list.
There are few QA projects keeping py3.5 support,
let's document them also in list to know complete list of projetcs
keeping py3.5 support.

Change-Id: I410b9e2072460c568a15546c4605fab154299104
2020-05-19 16:48:59 +00:00
Sean McGinnis 2481375bf5
Fix bullet list formatting for drop-py2 goal
Some bullet items were over-indented, causing bullet items to also be
block quoted.

Change-Id: Ic4cbf0518216521bbbebd9d439e39289705cf625
Signed-off-by: Sean McGinnis <sean.mcginnis@gmail.com>
2020-05-19 11:03:43 -05:00
Zuul 831207826a Merge "Adding Storlets in the list of keeping py2" 2020-05-10 17:55:33 +00:00
Zuul 7b93ccfc09 Merge "Add keystoneauth to the python3.5 list" 2020-05-10 17:52:30 +00:00
Zuul cf6f8c46e8 Merge "Add note that OpenStackSDK kept 3.5 support" 2020-05-10 17:52:24 +00:00
Zuul 5a424d8826 Merge "migrate from mock to built in unittest.mock" 2020-05-07 00:18:08 +00:00