Wednesday, 2026-09-23

opendevreviewOpenStack Proposal Bot proposed openstack/horizon stable/2026.1: Imported Translations from Zanata  https://review.opendev.org/c/openstack/horizon/+/100613902:49
opendevreviewOpenStack Proposal Bot proposed openstack/horizon master: Imported Translations from Zanata  https://review.opendev.org/c/openstack/horizon/+/100614804:57
opendevreviewJan Jasek proposed openstack/horizon master: Fix selenium local-file image upload format mismatch  https://review.opendev.org/c/openstack/horizon/+/100693111:37
tmazur#startmeeting horizon15:00
opendevmeetMeeting started Wed Sep 23 15:00:43 2026 UTC and is due to finish in 60 minutes.  The chair is tmazur. Information about MeetBot at http://wiki.debian.org/MeetBot.15:00
opendevmeetUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.15:00
opendevmeetThe meeting name has been set to 'horizon'15:00
tmazurHello everyone and welcome to the weekly meeting!15:00
omcgonago/15:00
jjasekHello everyone :-)15:01
rdopiera_o/15:01
tmazurThere's agenda for today: https://etherpad.opendev.org/p/horizon-release-priorities#L4315:01
tmazur#topic Notices15:03
tmazurThis week is R-1: https://releases.openstack.org/hibiscus/schedule.html15:03
tmazurFinal RC deadline is tomorrow15:04
tmazurAnd Hibiscus release is next Wednesday15:04
tmazurPTG reminder: it is happening on October 12 - 16, 202615:05
tmazurRegistration is here: https://ptg.openinfra.org/15:05
tmazurMeetbot is alive now, so I have booked our usual time slots:15:05
tmazurTuesday October 13, 14 UTC-17 UTC and Wednesday October 14, 14 UTC-16 UTC15:06
tmazurPTG Etherpad is here: https://etherpad.opendev.org/p/oct2026-ptg-horizon15:06
tmazurPlease feel free to add any topic15:07
tmazurThat's it for the announcements15:09
tmazur#topic Release priorities15:10
tmazurI still keep TOTP feature here15:11
tmazur977939: Add Horizon panel to enable TOTP MFA enrollment | https://review.opendev.org/c/openstack/horizon/+/97793915:11
tmazurjjasek it's a comment there, could you please look at it when you have a minute?15:11
tmazurThe patch is not going to make it into release, but it would be great to keep the activity there going at least15:12
jjasekSorry, I was/am super busy in downstream the last few days/weeks. I will try to do my best to reserve some time tomorrow or on Friday for upstream reviews.15:13
tmazurSure, thanks a lot15:13
tmazurI am adding one more SDK patch:15:13
tmazur1006815: SDK for Nova Usage | https://review.opendev.org/c/openstack/horizon/+/100681515:14
tmazurMarked it as WIP for now, I need to test it properly first, so don't look at it yet :)15:14
kalliolitmazur, jjasek: that comment is mine. Short version, I think I have the cause of the missing MFA tab you both hit.15:15
kallioliMFAPanel.allowed() passes target={"user_id": ...} but keystone's credential rules interpolate %(target.credential.user_id)s. oslo.policy formats the placeholder against the target dict, so the key never resolves, the check returns False, and the panel is hidden for every non-admin.15:15
kallioliPatch set 30 fixes that and documents the four prerequisites together under OPENSTACK_KEYSTONE_MFA_TOTP_ENABLED, including the one that is easy to miss: the policy rules also have to be in Horizon's own copy of the keystone policy file, not just keystone's. jjasek no rush, tomorrow or Friday is fine.15:15
jjasekkallioli, thanks!15:17
tmazurOh cool, thanks kallioli15:17
tmazurkallioli are you planning to join our PTG sessions? Could be a great opportunity to discuss things15:18
kalliolitmazur: I would like to, the slots look workable for me. I will register and confirm once I have checked my schedule.15:19
tmazurAwesome15:19
tmazurOne more patch I am adding: 1000331: Make kernel and ramdisk fields editable in Image Update form | https://review.opendev.org/c/openstack/horizon/+/100033115:20
tmazurThanks omcgonag15:20
omcgonagnp - thank you for all the reveiws/comments - will have an update today on most recent comments15:20
tmazurCool15:21
tmazurLet's move to the next topic15:21
tmazur#topic Bug deputy report15:21
tmazurWe have 3 bugs reported this week15:22
tmazurhttps://bugs.launchpad.net/horizon/+bug/2167652 -- WebSSO logout does not flush the session: the record survives with the same session key15:22
tmazurThanks kallioli for the patch:15:22
tmazur1006122: Flush the session on WebSSO logout | https://review.opendev.org/c/openstack/horizon/+/100612215:22
kalliolitmazur: one nuance on that one, it is not an authentication bypass. Replaying the surviving session gives AnonymousUser, because the backend compares the stored id against a session value the old code had already cleared. The defect is that the protection rested on that comparison rather than on the session being destroyed, and that logout did not cycle the session key.15:23
tmazurYeah, I see it in the commit message15:24
tmazurTeam, please take a look at this patch when you have some time15:26
jjasekWill do!15:27
tmazurThanks jjasek :)15:28
tmazurThere's two more bugs:15:28
tmazurhttps://bugs.launchpad.net/horizon/+bug/2167686 -- Neutron quota panel broken 15:28
tmazurhttps://bugs.launchpad.net/horizon/+bug/2167732 -- Provider network information not displayed in Launch Instance -> Networks panel15:28
tmazurBoth look valid, but I didn't have a chance to try reproducing them15:29
kalliolitmazur: I can try to reproduce those two if nobody else has started. No promise on a fix, but at least a confirmation and a root cause in the bug report.15:30
tmazurThat would be great, thank you!15:30
tmazurNext topic15:34
tmazur#topic Open reviews15:34
tmazurhttps://review.opendev.org/q/project:openstack/horizon+status:open15:35
tmazurWe have quite a few patches on review15:35
tmazurAlso there's a few backports for 2026.1: https://etherpad.opendev.org/p/horizon-release-priorities#L7415:36
tmazurIt's probably a good idea to decide whether we want them or not15:37
tmazurAnd that's all from me for today15:39
tmazur#topic Open discussion15:39
tmazurDo we have anything else to discuss?15:39
jjasekNothing from me, thank you all!15:40
omcgonagall set15:40
tmazurOkay, let's wrap it up earlier then and have some time back. Thanks everyone for joining!15:42
tmazurSee you next week!15:42
jjasekbye bye15:42
tmazur#endmeeting15:42
opendevmeetMeeting ended Wed Sep 23 15:42:19 2026 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)15:42
opendevmeetMinutes:        https://meetings.opendev.org/meetings/horizon/2026/horizon.2026-09-23-15.00.html15:42
opendevmeetMinutes (text): https://meetings.opendev.org/meetings/horizon/2026/horizon.2026-09-23-15.00.txt15:42
opendevmeetLog:            https://meetings.opendev.org/meetings/horizon/2026/horizon.2026-09-23-15.00.log.html15:42
kallioliThanks everyone, nothing more from me.15:42
opendevreviewMerged openstack/horizon master: Fix selenium local-file image upload format mismatch  https://review.opendev.org/c/openstack/horizon/+/100693116:27
opendevreviewMerged openstack/horizon master: Imported Translations from Zanata  https://review.opendev.org/c/openstack/horizon/+/100614816:28
opendevreviewMerged openstack/horizon stable/2026.1: Imported Translations from Zanata  https://review.opendev.org/c/openstack/horizon/+/100613916:28
opendevreviewOwen McGonagle proposed openstack/horizon master: Make kernel and ramdisk fields editable in Image Update form  https://review.opendev.org/c/openstack/horizon/+/100033119:16
opendevreviewOwen McGonagle proposed openstack/horizon master: Make kernel and ramdisk fields editable in Image Update form  https://review.opendev.org/c/openstack/horizon/+/100033121:17

Generated by irclog2html.py 4.1.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!