| lbragstad | gagehugo knikolla easy patch to unblock the python-keystoneclient gate | 14:35 |
|---|---|---|
| lbragstad | https://review.opendev.org/c/openstack/python-keystoneclient/+/813810 | 14:35 |
| redrobot | #startmeeting keystone | 15:00 |
| opendevmeet | Meeting started Tue Nov 2 15:00:55 2021 UTC and is due to finish in 60 minutes. The chair is redrobot. Information about MeetBot at http://wiki.debian.org/MeetBot. | 15:00 |
| opendevmeet | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 15:00 |
| opendevmeet | The meeting name has been set to 'keystone' | 15:00 |
| redrobot | #topic Roll Cal | 15:01 |
| opendevreview | Merged openstack/python-keystoneclient master: Fix doc error to unblock the gate https://review.opendev.org/c/openstack/python-keystoneclient/+/813810 | 15:01 |
| redrobot | *Call | 15:01 |
| knikolla | o/ | 15:01 |
| redrobot | Courtesy ping for ayoung, bbobrov, crisloma, d34dh0r53, dpar, dstanek, gagehugo, hrybacki, knikolla, lamt, lbragstad, lwanderley, kmalloc, rodrigods, samueldmq, spilla, ruan_he, wxy, sonuk, vishakha,Ajay, raildo, rafaelweingartner, xek | 15:01 |
| gagehugo | o/ | 15:01 |
| lbragstad | o/ | 15:02 |
| redrobot | Hi y'all! | 15:02 |
| redrobot | Let's get started | 15:02 |
| redrobot | #topic Review Past Meeting Action Items | 15:02 |
| redrobot | #link https://meetings.opendev.org/meetings/keystone/2021/keystone.2021-10-26-15.00.html | 15:03 |
| redrobot | We didn't have any action items... | 15:03 |
| redrobot | ... moving on | 15:03 |
| redrobot | #topic Liaison Updates | 15:03 |
| redrobot | knikolla anything you want to sahre today? | 15:03 |
| redrobot | *share | 15:03 |
| knikolla | no, not really | 15:05 |
| redrobot | Cool beans | 15:06 |
| redrobot | let's move on | 15:06 |
| knikolla | that probably says more about my not devoting a lot of time to doing those liaison roles, than anything, though. | 15:06 |
| redrobot | Gotcha ... I'll try to keep an eye out on some of that stuff too | 15:08 |
| redrobot | #topic OAuth 2.0 | 15:09 |
| redrobot | #link https://review.opendev.org/c/openstack/keystone-specs/+/813152 | 15:09 |
| redrobot | thanks for reviewing knikolla | 15:10 |
| redrobot | still looking for gagehugo and lbragstad reviews | 15:10 |
| lbragstad | ack | 15:10 |
| redrobot | Does not look like h_asahina is online so we can move on | 15:11 |
| redrobot | #topic Secure RBAC | 15:13 |
| redrobot | lbragstad any updates for today? | 15:13 |
| lbragstad | just one | 15:13 |
| lbragstad | #link https://review.opendev.org/c/openstack/governance/+/815158/ has been taking most if not all of my time upstream | 15:14 |
| lbragstad | and it's currently under review and discussion | 15:14 |
| lbragstad | any additional input is greatly appreciated | 15:14 |
| lbragstad | we will be having a meeting on it tomorrow - gmann set that up | 15:14 |
| lbragstad | but - it could affect things in keystone | 15:14 |
| lbragstad | and it might lead to another default role | 15:14 |
| redrobot | Ah yeah, good to know | 15:15 |
| redrobot | Do you have the details for the meeting tomorrow for folks interested in listening in? | 15:15 |
| lbragstad | i don't but let me check the mailing list | 15:15 |
| lbragstad | gmann sent out a poll last week | 15:15 |
| lbragstad | http://lists.openstack.org/pipermail/openstack-discuss/2021-October/025569.html | 15:16 |
| lbragstad | http://lists.openstack.org/pipermail/openstack-discuss/2021-November/025619.html | 15:16 |
| lbragstad | details ^ | 15:16 |
| lbragstad | tomorrow @ 15:00 UTC | 15:17 |
| redrobot | awesome, thanks lbragstad | 15:17 |
| lbragstad | that's all i have unless folks have questions | 15:17 |
| redrobot | Looks like we're good on questions | 15:20 |
| redrobot | moving on | 15:20 |
| redrobot | #topic Open Discussion | 15:21 |
| redrobot | Anything else y'all want to talk about right now? | 15:21 |
| redrobot | I'll take that as a no | 15:28 |
| redrobot | let's move on to bugs | 15:28 |
| redrobot | #topic Bug Review | 15:28 |
| redrobot | #link https://bugs.launchpad.net/keystone/?orderby=-id&start=0 | 15:28 |
| redrobot | No new bugs | 15:29 |
| redrobot | #link https://bugs.launchpad.net/python-keystoneclient/?orderby=-id&start=0 | 15:29 |
| redrobot | and no new client bugs | 15:29 |
| redrobot | #link https://bugs.launchpad.net/keystonemiddleware/+bugs?orderby=-id&start=0 | 15:30 |
| redrobot | and no new middleware bugs | 15:30 |
| redrobot | Looking at the newest bugs | 15:32 |
| redrobot | #link https://bugs.launchpad.net/keystone/+bug/1947870 | 15:32 |
| redrobot | > Keystone Kerberos auth broken when delegate to HTTP | 15:33 |
| redrobot | We talked about this briefly last week. Anyone become a Kerberos expert since last week? | 15:33 |
| lbragstad | i have not | 15:33 |
| lbragstad | i'm still looking for that specific matrix card | 15:33 |
| redrobot | heh | 15:35 |
| redrobot | #link https://bugs.launchpad.net/python-keystoneclient/+bug/1945785 | 15:35 |
| redrobot | > Can't find project by project_id | 15:36 |
| redrobot | This looks fairly easy to try to recreate | 15:39 |
| redrobot | I might try to take a look at this one | 15:40 |
| redrobot | seems like good low-hanging-fruit | 15:40 |
| redrobot | #link https://bugs.launchpad.net/keystonemiddleware/+bug/1946117 | 15:40 |
| redrobot | > Unify keystone and keystonemiddleware cache | 15:40 |
| * redrobot realizes he doesn't know anything about Keystone caching | 15:44 | |
| lbragstad | i think the benefit of that it that it would allow a token to get cached immediately, and then as soon as someone goes to nova to use that token and create a server - they would see the performance benefit | 15:45 |
| lbragstad | the keystone caching implementation is completely separate from ksm i think | 15:45 |
| redrobot | It's an intersting bug report. I wonder why keystone and keystonemiddleware have different code for storing tokens to cache? Seems like a good place where common code could be used. | 15:45 |
| lbragstad | but if the keystone caching implementation for tokens and the caching implementation for ksm could be generalized - they could be shared | 15:46 |
| redrobot | Is it typicall that the same cache is used for the keystone service and other services using the middleware? | 15:48 |
| lbragstad | i don't think so? | 15:48 |
| redrobot | I can see where this would improve performance when they do | 15:49 |
| lbragstad | yeah for sure | 15:49 |
| redrobot | What do we user for cache? Memcached? | 15:50 |
| lbragstad | yeah | 15:50 |
| redrobot | So you'd have to have the same authn/authz for memcached in both services for this to work | 15:52 |
| lbragstad | well - we don't implement authn/authz for memcached yet | 15:56 |
| lbragstad | i think memcached supports SASL, but we don't support that yet in openstakc | 15:57 |
| lbragstad | or the python clients we use don't have support for it yet? | 15:57 |
| lbragstad | real quick - we do need to merge https://review.opendev.org/c/openstack/python-keystoneclient/+/784744 to unblock the python-keystoneclient gate | 15:59 |
| redrobot | Looks like it's on its way to the merge gate | 16:02 |
| redrobot | Aaaand that's all the time we have. | 16:03 |
| redrobot | Thanks for joining, everyone! | 16:03 |
| redrobot | #endmeeting | 16:03 |
| opendevmeet | Meeting ended Tue Nov 2 16:03:18 2021 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 16:03 |
| opendevmeet | Minutes: https://meetings.opendev.org/meetings/keystone/2021/keystone.2021-11-02-15.00.html | 16:03 |
| opendevmeet | Minutes (text): https://meetings.opendev.org/meetings/keystone/2021/keystone.2021-11-02-15.00.txt | 16:03 |
| opendevmeet | Log: https://meetings.opendev.org/meetings/keystone/2021/keystone.2021-11-02-15.00.log.html | 16:03 |
| opendevreview | Merged openstack/python-keystoneclient master: Drop lower-constrait job https://review.opendev.org/c/openstack/python-keystoneclient/+/784744 | 18:06 |
| *** ianw_pto is now known as ianw | 19:00 | |
Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!