Wednesday, 2023-08-02

opendevreviewKe Niu proposed openstack/keystone master: Use py3 as the default runtime for tox  https://review.opendev.org/c/openstack/keystone/+/89028202:51
*** d34dh0r5- is now known as d34dh0r5314:59
d34dh0r53#startmeeting keystone15:00
opendevmeetMeeting started Wed Aug  2 15:00:12 2023 UTC and is due to finish in 60 minutes.  The chair is d34dh0r53. Information about MeetBot at http://wiki.debian.org/MeetBot.15:00
opendevmeetUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.15:00
opendevmeetThe meeting name has been set to 'keystone'15:00
d34dh0r53o/15:00
d34dh0r53#topic roll call15:00
d34dh0r53admiyo, bbobrov, crisloma, d34dh0r53, dpar, dstanek, hrybacki, knikolla[m], lbragstad, lwanderley, kmalloc, rodrigods, samueldmq, ruan_he, wxy, sonuk, vishakha, Ajay, rafaelwe, xek, gmann, zaitcev, reqa, dmendiza[m]15:00
knikollao/15:00
dmendiza[m]🙋‍♂️15:00
xeko/15:01
d34dh0r53howdy all15:04
d34dh0r53#topic review past meeting work items15:05
d34dh0r53no movement on either15:05
d34dh0r53#action d34dh0r53 Look into adding/restoring a known issues section to our documentation15:05
d34dh0r53#action d34dh0r53 add https://bugs.launchpad.net/keystone/+bug/1305950 to the known issues section of our documentation15:05
d34dh0r53#topic liaison updates15:06
d34dh0r53no news from the VMT15:06
d34dh0r53moving on15:08
d34dh0r53#topic specification OAuth 2.0 (hiromu)15:08
d34dh0r53#link https://review.opendev.org/q/topic:bp%252Foauth2-client-credentials-ext15:09
d34dh0r53External OAuth 2.0 Specification15:09
d34dh0r53#link https://review.opendev.org/c/openstack/keystone-specs/+/86155415:09
d34dh0r53OAuth 2.0 Implementation15:09
d34dh0r53#link https://review.opendev.org/q/topic:bp%252Fsupport-oauth2-mtls15:09
d34dh0r53OAuth 2.0 Documentation15:09
d34dh0r53#link https://review.opendev.org/c/openstack/keystone/+/83810815:09
d34dh0r53#link https://review.opendev.org/c/openstack/keystoneauth/+/83810415:09
hiromuo/15:11
d34dh0r53o/ hiromu 15:12
hiromunothing special this week15:12
d34dh0r53ok, thank you15:12
d34dh0r53#topic specification Secure RBAC (dmendiza[m])15:12
d34dh0r53#link https://governance.openstack.org/tc/goals/selected/consistent-and-secure-rbac.html#z-release-timeline_15:12
d34dh0r53Service Role Implementation15:12
d34dh0r53#link https://review.opendev.org/c/openstack/keystone/+/86342015:12
dmendiza[m]No updates from me. 😅15:12
d34dh0r53Manager Role Implementation15:12
d34dh0r53#link https://review.opendev.org/c/openstack/keystone/+/82260115:12
d34dh0r53Keystone Tempest Plugin Updates15:12
d34dh0r53#link https://review.opendev.org/c/openstack/keystone-tempest-plugin/+/88579915:12
dmendiza[m]Didn't get around to deploying the Manager patch15:12
d34dh0r53ack, thanks dmendiza[m] 15:13
d34dh0r53#topic open discussion15:13
d34dh0r53(drencrom) Remove cache invalidation when using expired token15:13
d34dh0r53#link https://review.opendev.org/c/openstack/keystonemiddleware/+/88919115:13
d34dh0r53dmendiza[m], knikolla, xek can y'all do the needful on that patch?15:14
d34dh0r53I had to resubmit it to get around some zuul/gerrit confusion15:14
drencromthanks d34dh0r53, zuul is working now15:14
xekah, with a different change-id15:15
d34dh0r53yeah, gerrit must have had communication issues with the DB because 3 different patches (2 were abandoned) had the same change-id which made zuul angry15:15
d34dh0r53(reqa) Add openstack cli support for OAuth 2.0 Device Authorization Grant with PKCE:15:17
d34dh0r53review request15:17
d34dh0r53#link https://review.opendev.org/c/openstack/keystoneauth/+/88385215:17
d34dh0r53Reasoning: When switching wsgi-keystone.conf to use PKCE for WebSSO, this also applies to the CLI (e.g. ForgeRock implemented the same)15:17
d34dh0r53also review requests on this one15:17
d34dh0r53anything else for open discussion?15:21
d34dh0r53#topic bug review15:22
d34dh0r53#link https://bugs.launchpad.net/keystone/?orderby=-id&start=015:23
d34dh0r53there are a couple of new bugs for keystone that have to do with the bcrypt password length truncation15:23
d34dh0r53#link https://bugs.launchpad.net/keystone/+bug/202913415:24
d34dh0r53and15:24
d34dh0r53#link https://bugs.launchpad.net/keystone/+bug/202880915:24
d34dh0r53sorry, only the second bug is related to that, the first is another upgrade bug15:26
d34dh0r53I'll take a look at those15:26
d34dh0r53Next up15:27
d34dh0r53#link https://bugs.launchpad.net/python-keystoneclient/?orderby=-id&start=015:27
d34dh0r53no new bugs15:27
d34dh0r53#link https://bugs.launchpad.net/keystoneauth/+bugs?orderby=-id&start=015:27
d34dh0r53nothing new in keystoneauth15:28
d34dh0r53#link https://bugs.launchpad.net/keystonemiddleware/+bugs?orderby=-id&start=015:28
d34dh0r53no new bugs in keystonemiddleware15:28
d34dh0r53#link https://bugs.launchpad.net/pycadf/+bugs?orderby=-id&start=015:29
d34dh0r53pycadf is clean15:29
d34dh0r53#link https://bugs.launchpad.net/ldappool/+bugs?orderby=-id&start=015:29
d34dh0r53as is ldappool15:29
d34dh0r53#topic conclusion15:29
d34dh0r53Anyone have anything?15:29
d34dh0r53Ok, thanks folks!15:30
d34dh0r53See you at the reviewathon on Friday :)15:30
d34dh0r53#endmeeting15:30
opendevmeetMeeting ended Wed Aug  2 15:30:46 2023 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)15:30
opendevmeetMinutes:        https://meetings.opendev.org/meetings/keystone/2023/keystone.2023-08-02-15.00.html15:30
opendevmeetMinutes (text): https://meetings.opendev.org/meetings/keystone/2023/keystone.2023-08-02-15.00.txt15:30
opendevmeetLog:            https://meetings.opendev.org/meetings/keystone/2023/keystone.2023-08-02-15.00.log.html15:30
zaitcevI should be able to make Friday.16:25

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!