Hi folks,

We held our regular weekly design meeting today via Hangout. Summary of discussion:

1. [stevanr] LAVA auth revamp 1. Restricted for authenticated users use case 1. With current design, everything should be open (visible permission) by default; user, group, is_public fields removed and permissions assigned by groups 1. [dean] would be useful to restrict to only authenticated or per group devices/testjobs 2. So if someone wants to restrict visibility to let’say only authenticated users, it’s a bit tricky to support it with the current design 2. Device owner 1. My plan is to remove every way of having some arbitrary field mess with authorization other then permissions. Does anyone see a problem with removing this field? (physical_owner will still remain in place but it has no say in auth) 1. [Steve] Check with Dave? 2. Do they use device owner? 3. [Rémi] how to allow one group to update one device object? 1. Is it of any use? 4. [Rémi] code/design/schema available somewhere?

2. [Steve] Future plans - when/how/where do we notify of upcoming changes? 1. lava-devel by default for most things 2. lava-announce for breaking changes, and give notice 1. how much notice? 1. 1m? 3m? agree on 2 months for things like BD migrations 2. 2019.05 will have some migrations, then no more yet planned until .08 or .09

3. [Steve] When will schema validation become rigid? .08 or .09 as well? 1. Print warnings before then 2. Schema validation in strict mode will complain about most jobs (80%?), so we can't turn that on! 3. For now, allow submissions. Also run the validator again in strict mode and print its output as a warning on submission. Can we put the same output into the test log too? Should we? 1. Some users may look at the LAVA job results page 2. Some may just grab the logs 3. Maybe start mailing admins with a daily summary of warnings? Add a management command to check for warnings. 4. Talk to other people (e.g. Matt about kernelci) 4. Maybe look into versioning of schemas and support validation of supported versions? Lots of work… :-/ 5. Not complete yet, we still want people running schema checks and letting us know about any problems found 1. lavacli jobs validate <job-def.yaml> 2. share/lava-schema.py job <job-def.yaml>

4. [Rémi] doc canonicalization 1. https://moz.com/learn/seo/canonicalization 2. Add links back to https://docs.lavasoftware.org/lava in our help information 3. Need to get docs.ls.o set up!

5. [Steve] Stevan being added as a reviewer/admin 1. Sort out details offline

============================================================================

The LAVA design meeting is held weekly, every Wednesday at 13:00 to 14:00 UTC using Google Hangouts Meet: https://meet.google.com/qre-rgen-zwc Feel free to comment here or join us directly in the meeting.

Minutes from this and previous meetings are also stored in the LAVA wiki:

https://git.lavasoftware.org/lava/lava/wikis/design-meetings/index

Cheers,