Lwood-20160918
Introduction
Welcome to Last week on OpenStack Dev (“Lwood”) for the week just past. For more background on Lwood, please refer here.
Basic Stats for week 12 to 18 September for openstack-dev:
- ~499 Messages (down about 10% relative to last week)
- ~216 Unique threads (up about 35% relative to last week)
Another pretty typical week on the list message count down a bit from last week but the thread count up as there weren’t any particularly long threads to jiggle the metrics (a single message is counted as a thread).
Notable Discussions – openstack-dev
New OpenStack Security Notices
MongoDB guest instance allows any user to connect [OSSN-0066]
From the summary “When creating a new MongoDB single instance or cluster the default setting in MongoDB `security.authorization` was set as disabled. This resulted in no need to provide user credentials to connect to the mongo instance and perform read / write operations from any network that is attached on instance create.” The original email or the SSN itself has more information.
Deleted Glance image IDs may be reassigned [OSSN-0075]
From the summary (paraphrase and so errors mine) “It is possible for image IDs from deleted images to be reassigned to other images. This creates the possibility that by creating a nefarious image that shares the ID with a previously deleted but trusted image, the nefarious image can be booted without the user realising it was quietly changed.” The original post and/or the SSN has more information.
Writing down OpenStack Principles – thread continues and a great quote
The thread that started last week with this a post from Chris Dent trundled along a bit more this week with a few more messages. Most of the substantive commentary seems to have moved to the review that Thierry Carrez created, the last message in the thread being that Thierry has now posted a revised version which seeks to incorporate the various bits of feedback.
A brief side discussion on the thread popped up between Clay Gerrard and Thierry where they both acknowledged somewhat different views but also an appreciation for the others willingness to embrace new information and change their outlook as appropriate. Collaborative Open Source development at its best there I reckon.
I’ll close this item with a quote from Thierry’s email which is, I think, one of the most eloquent summaries of the relationship between governance and code in an Open Source project I’ve read.
“It is important for open source projects to have a strong governance model, but it is only the frame that holds the canvas and defines the space. The important part is the painting.”
Nicely put :)
Stewardship Working Group (SWG) meeting report
The SWG was mentioned in Lwood-20160717 – as Amrith Kumar noted in the post in question, the group was set up by the Technical Commitee (TC) with the intent that this small group would “review the leadership, communication, and decision making processes of the TC and OpenStack projects as a whole, and propose a set of improvements to the TC.”
During the week past Colette Alexander posted with an update on recent activities. Of note is that there is work under way to refine the vision for what the SWG will accomplish in Barcelona and feedback is sought from the community.
Election Season Continues
This week marked the end of the PTL nomination period as Tristan Cacqueray notes here – there were four projects (Astara, OpenStack Salt, OpenStack UX and Security) that were without candidates and so the TC will appoint the PTL. Six projects had more than one PTL nominate and so will have an election: Freezer, Ironic, Keystone, Kolla, Magnum and Quality Assurance. There’s a full list of candidates below or on the official site here.
At the time of writing the election itself has just kicked off and will run until 23:45 September 25, 2016 (UTC) If you’re eligible, please vote! :)
End of Cycle Retrospectives / Postmortems
As Newton draws to an end, projects are starting to do retrospectives. Three I spotted were for Keystone (Steve Martinelli) Neutron (Armando Migliaccio) and Nova (Matt Riedemann) with more likely over the next few weeks. These are all works in progress so if you’ve something constructive to contribute please do!
Beautiful Music in Barcelona
While the gathering proposed may not quite reach the vocal, choral and orchestral grandeur of this if you’re a musician and will be at the Barcelona Summit, please read Amrith Kumar’s post here.
Amrith asks “would y’all musicians who plan to bring your gear to Barcelona please start a little thread here on the ML and let’s get a band going?”. While I won’t alas be in Barcelona I’ve had the good fortune to be involved in these sorts of FOSS meets music gatherings in the past back in the Canonical days – it’s a ton of fun and I commend it to you :)
Notable Discussions – other OpenStack lists
Nothing that leapt out from the other lists this week.
Upcoming OpenStack Events
Best I can tell no OpenStack related events mentioned this week. Don’t forget the OpenStack Foundation’s Events Page for a list of general events that is frequently updated.
People and Projects
PTL’s stepping down
- [Congress] Tim Hinrichs
- [Fuel] Vladimir Kozhukalov
- [Glance] Nikhil Komawar
- [Kolla] Steve Dake
- [Kuryr][Dragonflow] Gal Sagle
- [Puppet] Emilien Macchi
- [Searchlight] Travis Tripp
PTL Candidates
- [Barbican] Dave McCowan (New)
- [Charms] James Page (Continuing)
- [Chef] Samuel Cassiba (Continuing)
- [Cloudkitty] Christophe Sauthier (New)
- [Congress] Eric Kao (New)
- [Cinder] Sean McGinnis (Continuing)
- [Designate] Graham Hayes (Continuing)
- [Docs] Lana Brindley (Continuing)
- [Fuel] Alexey Shtokolov (New)
- [Glance] Brian Rosmaita (New)
- [Heat] Rabi Mishra (New)
- [Horizon] Richard Jones (New)
- [I18n/Internationalisation] Ian Choi (New)
- [Ironic] Dimitri Tantsur (New)
- [Ironic] Jim Rollenhagen (Continuing)
- [Keystone] Steve Martinelli (Continuing)
- [Keystone] Samuel de Medeiros Queiroz (New)
- [Kolla] Jeffrey Zhang (New)
- [Kolla] Michał Jastrzębski (New)
- [Kuryr] Antoni Segura Puimedon (New)
- [Magnum] Adrian Otto (New)
- [Magnum] Hongbin Lu (Continuing)
- [Mistral] Renat Akhmerov (Continuing)
- [Murano] Kirill Zaitsev (Continuing)
- [Nova] Matt Riedemann (Continuing)
- [OSC/OpenStackClient] Dean Troyer (Continuing)
- [Oslo] Josh Harlow (Continuing)
- [Packaging-Deb] Thomas Goirand (Continuing)
- [Packaging-RPM] Haïkel Guémar (New)
- [Puppet] Alex Shultz (New)
- [QA] Kenichi Omichi (Continuing)
- [QA] Masayuki Igawa (New)
- [Rally] Andrey Kurilin (New)
- [Release] Doug Hellmann (Continuing)
- [Searchlight] Steve McLellan (New)
- [Solum] Devdatta Kulkarni (Continuing)
- [Swift] John Dickinson (Continuing)
- [Tacker] Sridhar Ramaswamy (Continuing)
- [Telemetry] Julien Danjou (Continuing)
- [Tricircle] Chaoyi (Joe) Huang (Continuing)
- [TripleO] Emilien Macchi (New)
- [Trove] Amrith Kumar (Continuing)
- [Virtage] Ifat Afek (Continuing)
- [Watcher] Antoine Cabot (Continuing)
- [Zaqar] Fei Long Wang (Continuing)
Core nominations & changes
- [Diskimage-Builder] Stepping down as core – Clint Byrum
- [Heat] Resigning from heat-cores – Pavlo Shchelokovskyy
- [Neutron] Adding Ihar Hrachyshka to the neutron-drivers team – Armando M
- [Puppet] Core nominations for Dmitry Tantsur, Pradeep Kilambi and Iury Gregory – Emilien Macchi
- [TripleO] Core nominations for Brent Eagles, Pradeep Kilambi, Carlos Camacho, Ryan Brady and Dan Sneddon – Steve Hardy
- [Security] Proposing Doug Chivers for Core – Rob C
Further Reading & Miscellanea
Don’t forget these excellent sources of OpenStack news – most recent ones linked in each case
- What’s Up, Doc? by Lana Brindley
- What’s Happening in OpenStack Ansible (WHOA) by Major Hayden
- API Working Group newsletter – Michael McCune and the API WG
- OpenStack Developer Mailing List Digest by Mike Perez
- OpenStack news over on opensource.com by Jason Baker
This weeks edition of Lwood brought to you by the background noise of Brunswick, Victoria. Not as tuneful as Weather Report last week, but a pleasant hum and bustle none the less :) Oh and a quick reprise of Barcelona featuring Freddie Mercury and Montserrat Caballé.
Last but by no means least, thanks, as always, to Rackspace :)