| *** mhen_ is now known as mhen | 01:24 | |
| opendevreview | OpenStack Release Bot proposed openstack/keystone master: reno: Update master for unmaintained/zed https://review.opendev.org/c/openstack/keystone/+/918617 | 12:39 |
|---|---|---|
| opendevreview | OpenStack Release Bot proposed openstack/keystoneauth master: reno: Update master for unmaintained/zed https://review.opendev.org/c/openstack/keystoneauth/+/918619 | 12:39 |
| opendevreview | OpenStack Release Bot proposed openstack/keystonemiddleware master: reno: Update master for unmaintained/zed https://review.opendev.org/c/openstack/keystonemiddleware/+/918622 | 12:40 |
| opendevreview | OpenStack Release Bot proposed openstack/python-keystoneclient master: reno: Update master for unmaintained/zed https://review.opendev.org/c/openstack/python-keystoneclient/+/918627 | 12:40 |
| d34dh0r53 | #startmeeting keystone | 15:02 |
| opendevmeet | Meeting started Wed May 8 15:02:56 2024 UTC and is due to finish in 60 minutes. The chair is d34dh0r53. Information about MeetBot at http://wiki.debian.org/MeetBot. | 15:02 |
| opendevmeet | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 15:02 |
| opendevmeet | The meeting name has been set to 'keystone' | 15:02 |
| d34dh0r53 | #topic roll call | 15:03 |
| d34dh0r53 | admiyo, bbobrov, crisloma, d34dh0r53, dpar, dstanek, hrybacki, knikolla[m], lbragstad, lwanderley, kmalloc, rodrigods, samueldmq, ruan_he, wxy, sonuk, vishakha, Ajay, rafaelwe, xek, gmann, zaitcev, reqa, dmendiza[m], mharley, jph, gtema | 15:04 |
| xek | o/ | 15:04 |
| gtema | o/ | 15:04 |
| d34dh0r53 | o/ | 15:07 |
| d34dh0r53 | #topic review past meeting work items | 15:07 |
| d34dh0r53 | #link https://meetings.opendev.org/meetings/keystone/2024/keystone.2024-05-01-14.59.html | 15:08 |
| d34dh0r53 | no updates from me | 15:08 |
| d34dh0r53 | #action d34dh0r53 Look into adding/restoring a known issues section to our documentation | 15:08 |
| d34dh0r53 | moving on | 15:08 |
| d34dh0r53 | #topic liaison updates | 15:09 |
| d34dh0r53 | nothing from VMT or Releases | 15:09 |
| d34dh0r53 | next up | 15:12 |
| d34dh0r53 | #topic specification OAuth 2.0 (hiromu) | 15:12 |
| d34dh0r53 | #link https://review.opendev.org/q/topic:bp%252Foauth2-client-credentials-ext... (full message at <https://matrix.org/_matrix/media/v3/download/matrix.org/ividHSpkyyILFlvpvWGNiSaT>) | 15:12 |
| d34dh0r53 | not sure if hiromu is around | 15:13 |
| d34dh0r53 | moving on | 15:14 |
| d34dh0r53 | #topic specification Secure RBAC (dmendiza[m]) | 15:14 |
| d34dh0r53 | #link https://governance.openstack.org/tc/goals/selected/consistent-and-secure-rbac.html#z-release-timeline_... (full message at <https://matrix.org/_matrix/media/v3/download/matrix.org/MRXZRGTYcLqxLCnIuKMEUOqq>) | 15:14 |
| d34dh0r53 | dmendiza: is on PTO this week, so no SRBAC update | 15:15 |
| d34dh0r53 | next up | 15:15 |
| d34dh0r53 | #topic specification Improve federated users management (gtema) | 15:15 |
| d34dh0r53 | #link https://review.opendev.org/c/openstack/keystone-specs/+/748748 | 15:15 |
| d34dh0r53 | gtema: clearly against of introducing bad API precedent, desperately waiting for other opinions | 15:15 |
| gtema | as stated in etherpad - against of bad api design, but desperately waiting for feedback from others | 15:16 |
| gtema | and btw - thinking further (next step) I am actually wondering how external IdP should represent projects and roles | 15:17 |
| d34dh0r53 | yeah, I'm not sure, I think it would likely be IdP dependent and might make keystones job very difficult | 15:18 |
| gtema | right, and I do not want to invent workarounds. On the other side IdP is not really responsible for tracking of provider resources. It just takes care of user/group/role | 15:19 |
| gtema | but anyway - now there is a problem that any sort of info must come from IdP | 15:19 |
| gtema | today I started thinking about introducing a plugin to keystone that may be invoked to sync some group/project/role data with external system | 15:20 |
| gtema | this is just thinking at the moment | 15:20 |
| gtema | so imagine user wants to login and pre-auth plugin does the job to manage groups for the user in question (or just syncs data with some external system) | 15:21 |
| gtema | there is definitely a performance issue to keep in mind | 15:22 |
| gtema | anyway - please please please do review the spec (wrt my comments) | 15:23 |
| gtema | any opinions are better then silence, because it stuck | 15:23 |
| d34dh0r53 | ack, I'll add my thoughts as well | 15:24 |
| d34dh0r53 | next up | 15:24 |
| d34dh0r53 | #topic specification OpenAPI support (gtema) | 15:25 |
| d34dh0r53 | #link https://review.opendev.org/c/openstack/keystone-specs/+/910584 | 15:25 |
| d34dh0r53 | gtema: waiting for reviews | 15:25 |
| gtema | yupp, 2 weeks ago dimendiza added comments and stephenfin updated the change (sadly breaking it). But now it passes and following reviews are necessary | 15:25 |
| d34dh0r53 | Yeah, I read this but forgot to review, I'm all for it | 15:26 |
| gtema | awesome, thanks Dave Wilde (d34dh0r53) | 15:26 |
| d34dh0r53 | np | 15:26 |
| d34dh0r53 | #topic open discussion | 15:27 |
| d34dh0r53 | passlib update... (full message at <https://matrix.org/_matrix/media/v3/download/matrix.org/qZwZoezsFFwXlIPJOhwabZWn>) | 15:27 |
| d34dh0r53 | no update, the maintainer is missing again, we may have to pin requirements until either we can a) find a maintainer for passlib or b) replace it with something else. Option a is vastly superior as replacing passlib will be difficult to say the least and might break existing deployments. | 15:29 |
| d34dh0r53 | several projects rely on passlib and my hope is for a takeover of the maintenance | 15:30 |
| gtema | I am really wondering that after all discussion it again got stuck | 15:30 |
| d34dh0r53 | I just bumped the maintenance thread on passlib | 15:34 |
| d34dh0r53 | #link https://foss.heptapod.net/python-libs/passlib/-/issues/187 | 15:34 |
| gtema | cool | 15:34 |
| d34dh0r53 | next up | 15:35 |
| d34dh0r53 | domain manager (mhen)... (full message at <https://matrix.org/_matrix/media/v3/download/matrix.org/cZdscGyOSLzDuLBOrUwzdJTm>) | 15:35 |
| gtema | yupp, here few +1 | 15:35 |
| d34dh0r53 | yeah, I'm good with that, I'll let dmendiza give the final +2 | 15:36 |
| gtema | awesome, thanks | 15:36 |
| d34dh0r53 | domain list scoping fix (mhen)... (full message at <https://matrix.org/_matrix/media/v3/download/matrix.org/jUIcjXEcXUXxYElGGWKOpXMR>) | 15:37 |
| gtema | I think it does not harm | 15:38 |
| gtema | it extends verification | 15:38 |
| d34dh0r53 | ack | 15:39 |
| gtema | ah, but dmendiza wrote this was already adapted recently | 15:39 |
| gtema | and still he was not against of that (just asking for rebase) | 15:40 |
| d34dh0r53 | Yeah, that's the question I have, I'll bug dmendiza about it when he gets back | 15:40 |
| d34dh0r53 | next up | 15:41 |
| d34dh0r53 | Enforcing scope in keystone breaks heat (and probably magnum) (tkajinam)... (full message at <https://matrix.org/_matrix/media/v3/download/matrix.org/eoeipWuHhWbAXsurVjJXfmJB>) | 15:41 |
| tkajinam | ok the first one got 2nd +2. that's nice | 15:42 |
| d34dh0r53 | I'm going to merge 914759, I just saw that dmendiza gave it a | 15:42 |
| d34dh0r53 | +c | 15:42 |
| d34dh0r53 | keyboard fail +2 | 15:42 |
| tkajinam | thx. I'll submit backport once these are merged in master. | 15:42 |
| d34dh0r53 | thank you tkajinam ! | 15:43 |
| tkajinam | :-) | 15:43 |
| d34dh0r53 | I'll go through the rest of the reviews after the meeting | 15:43 |
| tkajinam | thanks | 15:44 |
| d34dh0r53 | FYI. Some of the post-release patches are still open (tkajinam)... (full message at <https://matrix.org/_matrix/media/v3/download/matrix.org/FgMfMrBJsuDCSfWaTPwoMYBN>) | 15:44 |
| d34dh0r53 | ditto for these | 15:44 |
| d34dh0r53 | anything that needs special attention? | 15:44 |
| tkajinam | yeah. I think you already gave your +2 to these. | 15:44 |
| tkajinam | because these are automated patches, I'd suggest single core approval rather than leaving these for long | 15:44 |
| tkajinam | but it's basically up to the team. I just want to make sure these are in radar of cores | 15:44 |
| tkajinam | that's it | 15:45 |
| d34dh0r53 | no, I owe reviews for these, I'll take care of them today | 15:45 |
| d34dh0r53 | thanks | 15:45 |
| d34dh0r53 | moving on | 15:45 |
| d34dh0r53 | #topic bug review | 15:45 |
| d34dh0r53 | #link https://bugs.launchpad.net/keystone/?orderby=-id&start=0 | 15:45 |
| d34dh0r53 | no new bugs for keystone | 15:46 |
| d34dh0r53 | #link https://bugs.launchpad.net/python-keystoneclient/?orderby=-id&start=0 | 15:46 |
| d34dh0r53 | keystoneclient is good | 15:46 |
| d34dh0r53 | #link https://bugs.launchpad.net/keystoneauth/+bugs?orderby=-id&start=0 | 15:46 |
| d34dh0r53 | no new bugs in keystoneauth | 15:47 |
| d34dh0r53 | #link https://bugs.launchpad.net/keystonemiddleware/+bugs?orderby=-id&start=0 | 15:47 |
| d34dh0r53 | keystonemiddleware is also good | 15:47 |
| d34dh0r53 | #link https://bugs.launchpad.net/pycadf/+bugs?orderby=-id&start=0 | 15:47 |
| d34dh0r53 | pycadf is clean | 15:48 |
| d34dh0r53 | #link https://bugs.launchpad.net/ldappool/+bugs?orderby=-id&start=0 | 15:48 |
| d34dh0r53 | as is ldappool | 15:48 |
| d34dh0r53 | #topic conclusion | 15:48 |
| d34dh0r53 | Thanks everyone! | 15:48 |
| d34dh0r53 | Anyone have anything before we close? | 15:49 |
| gtema | nothing from me | 15:49 |
| tkajinam | it'd be nice if https://review.opendev.org/c/openstack/keystonemiddleware/+/909322 can be merged soon. we are quite close to get rid of six which has been unnecessary for long. | 15:49 |
| tkajinam | that's all from me :-) | 15:49 |
| d34dh0r53 | indeed | 15:50 |
| gtema | I left +2, d34dh0r53 - feel free to +w | 15:51 |
| d34dh0r53 | done | 15:51 |
| tkajinam | thanks, both :-D | 15:51 |
| d34dh0r53 | Awesome, thanks again all! | 15:51 |
| d34dh0r53 | #endmeeting | 15:51 |
| opendevmeet | Meeting ended Wed May 8 15:51:48 2024 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 15:51 |
| opendevmeet | Minutes: https://meetings.opendev.org/meetings/keystone/2024/keystone.2024-05-08-15.02.html | 15:51 |
| opendevmeet | Minutes (text): https://meetings.opendev.org/meetings/keystone/2024/keystone.2024-05-08-15.02.txt | 15:51 |
| opendevmeet | Log: https://meetings.opendev.org/meetings/keystone/2024/keystone.2024-05-08-15.02.log.html | 15:51 |
| opendevreview | Merged openstack/python-keystoneclient master: reno: Update master for unmaintained/xena https://review.opendev.org/c/openstack/python-keystoneclient/+/914308 | 16:01 |
| opendevreview | Merged openstack/python-keystoneclient master: reno: Update master for unmaintained/wallaby https://review.opendev.org/c/openstack/python-keystoneclient/+/914300 | 16:01 |
| opendevreview | Merged openstack/python-keystoneclient master: reno: Update master for unmaintained/victoria https://review.opendev.org/c/openstack/python-keystoneclient/+/914291 | 16:01 |
| opendevreview | Merged openstack/keystonemiddleware master: reno: Update master for unmaintained/xena https://review.opendev.org/c/openstack/keystonemiddleware/+/914306 | 16:13 |
| opendevreview | Merged openstack/keystonemiddleware master: reno: Update master for unmaintained/wallaby https://review.opendev.org/c/openstack/keystonemiddleware/+/914298 | 16:13 |
| opendevreview | Merged openstack/keystonemiddleware master: reno: Update master for unmaintained/victoria https://review.opendev.org/c/openstack/keystonemiddleware/+/914289 | 16:13 |
| opendevreview | Merged openstack/keystonemiddleware master: Update master for stable/2024.1 https://review.opendev.org/c/openstack/keystonemiddleware/+/912182 | 16:13 |
| opendevreview | Merged openstack/keystoneauth master: reno: Update master for unmaintained/xena https://review.opendev.org/c/openstack/keystoneauth/+/914304 | 16:19 |
| opendevreview | Merged openstack/keystoneauth master: reno: Update master for unmaintained/wallaby https://review.opendev.org/c/openstack/keystoneauth/+/914296 | 16:19 |
| opendevreview | Merged openstack/keystoneauth master: reno: Update master for unmaintained/victoria https://review.opendev.org/c/openstack/keystoneauth/+/914287 | 16:19 |
| opendevreview | Merged openstack/keystone master: Allow domain admin to view roles https://review.opendev.org/c/openstack/keystone/+/914759 | 17:04 |
| opendevreview | Andrew Bogott proposed openstack/keystone master: UserAppCredListCreateResource: remove check for third-part app cred creation https://review.opendev.org/c/openstack/keystone/+/918697 | 20:03 |
| opendevreview | Merged openstack/keystone-tempest-plugin master: Allow domain admin to list/show roles https://review.opendev.org/c/openstack/keystone-tempest-plugin/+/916705 | 20:28 |
| opendevreview | Merged openstack/keystone master: Allow domain users to manage credentials https://review.opendev.org/c/openstack/keystone/+/916130 | 20:28 |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!