StoryBoard Authentication and Authorization
During the OpenStack Summit in Paris this last week, we made a concerted effort to finally migrate the openstack-infra projects over to StoryBoard. This is a pretty big milestone for us, because it’s...
View ArticleGoodbye Launchpad, Hello Storyboard
The OpenStack Infrastructure team has successfully migrated all of the openstack-infra project bugs from LaunchPad to StoryBoard. With the exception of openstack-ci bugs tracked by elastic recheck, all...
View ArticleJavaScript Dependency Management in OpenStack
A problem that I’ve been working on the last week has been JS dependency management – driven by npm and bower – inside of OpenStack. To be honest, this problem can be extended to JS dependency...
View ArticleHorizon Usage Survey
Over the past few weeks, I’ve run a survey that attempts to discover how people use OpenStack’s Horizon (aka openstack-dashboard), and I’d like to publish some preliminary results. I’ll be soliciting...
View ArticleSecurely publishing to NPM, the OpenStack way
The following article has been making the rounds, claiming a new worm exploit against npm. First of all, this is not a new exploit, nor is it in any way unique to npm – pip, gem, rpm, and deb have the...
View ArticleOpenStack Infra now uses Node.js v4 and npm v2
OpenStack’s Infrastructure is now running all of its NPM and NodeJS-based test jobs using the newer NodeJS v4, and npm 2.15. That’s pretty awesome, given that previously we were running on 0.10.25....
View ArticleJavaScript on the Trailing Edge
The public opinion of the JavaScript community is that it’s fast. We break things, we’re hungry for the latest features, and none of us want to return to the days of slow innovation that ended with the...
View ArticleJavaScript RoadMap for OpenStack Newton
This post contains the current working draft of the OpenStack JavaScript roadmap. It’s a big list, and we need help to land it during the Newton cycle. Overall themes for this cycle are Consistency,...
View ArticleHow to simulate an OpenStack Infra Slave
Situation: You’ve committed your code, you’ve submitted a patch, and yet for some reason, and regardless of the number of rechecks, your tests simply won’t pass the gate? How can you test the gate,...
View ArticleEncrypting sensitive variables in terraform using GnuPG agent
This post will walk you through how to encrypt sensitive terraform variables in a way that still permits them to be committed to VCS, while also being reasonably easy to decrypt. Examples use bash,...
View ArticleAngular > React
I’ve been overseeing UI projects for … oh, decades now. I’ve shipped production applications in backbone.js, SproutCore, Angular 1, Angular 2, React/Redux, even going back to the old days of the Adobe...
View ArticleClik here to view.
The case for Edge on OSX & Linux
Ever since Microsoft Edge was leaked for OSX, I’ve used it. Not exclusively, however as a UI Architect it’s both my job and my hobby to keep an eye on the landscape. I’ve certainly gotten a lot of...
View ArticleRunning a Successful Bug Bash
A bug bash, much like any coordinated effort, requires planning. Here’s a guide on how to get the most out of everyone’s time. Preparation Step 1: Collect your use cases This is where you scour all the...
View ArticleFree (as in Tier) OAuth2
Are services like Auth0 or Okta really worth paying for? For a business, perhaps; the overhead of paying for an auth-focused software engineer, as well as the operational overhead of monitoring, could...
View ArticleHow to write a Recommendation
Here’s a quick, three-paragraph template for writing a letter of recommendation. Don’t overthink it; these should be quick to read, and leave a strong positive feeling on behalf of the candidate....
View ArticleEV’s, and the return of the Great American Road Trip
My family and I took a well-earned road trip back in the spring; two days in Portland, after which we picked up the kids and took them up to the Olympic Peninsula. We drove our EV, bought as a splurge...
View ArticleYin/Yang Coasters
A set of coasters featuring Yin and Yang. The coasters themselves are made out of birch plywood, stained black for the Yin and left natural for the Yang. The coaster is backed by cork, and finished...
View ArticleClik here to view.
Chakra Coasters
A set of 7 coasters featuring the seven Chakra. The coasters are made out of birch plywood, stained in the appropriate color for each of the chakra. Each is backed by cork, and finished with clear,...
View ArticleOIDC Federation on a Grand Scale
Content Warning: Identity Nerd, snapshot 2023. The OIDC Federation Specification (draft) has been stuck in my brain for about a year now because it changes how I think about my job. On its surface, the...
View ArticleHow /.well-known is your Issuer?
TL/DR: Never have an issuer claim with a path component. There’s an unintended interaction between the OIDC base specification, the OIDC Discovery specification, and the Well-known URI RFC, one which...
View Article
