Wednesday, 2025-01-08

*** mhen_ is now known as mhen02:30
*** __ministry is now known as Guest530203:31
*** __ministry is now known as Guest531206:39
*** thuvh1 is now known as thuvh09:10
*** __ministry is now known as Guest532611:26
d34dh0r53#startmeeting keystone15:01
opendevmeetMeeting started Wed Jan  8 15:01:12 2025 UTC and is due to finish in 60 minutes.  The chair is d34dh0r53. Information about MeetBot at http://wiki.debian.org/MeetBot.15:01
opendevmeetUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.15:01
opendevmeetThe meeting name has been set to 'keystone'15:01
d34dh0r53Reminder: This meeting takes place under the OpenInfra Foundation Code of Conduct15:01
d34dh0r53#link https://openinfra.dev/legal/code-of-conduct15:01
d34dh0r53#topic roll call15:01
d34dh0r53admiyo, bbobrov, crisloma, d34dh0r53, dpar, dstanek, hrybacki, lbragstad, lwanderley, kmalloc, rodrigods, samueldmq, ruan_he, wxy, sonuk, vishakha, Ajay, rafaelwe, xek, gmann, zaitcev, reqa, dmendiza[m], dmendiza, mharley, jph, gtema, cardoe15:02
d34dh0r53#topic review past meeting work items15:05
d34dh0r53#link https://meetings.opendev.org/meetings/keystone/2024/keystone.2024-12-18-15.04.html15:06
gtemao/15:06
d34dh0r53hi gtema (Artem Goncharov) Happy New Year :)15:06
d34dh0r53nothing to review from our last meeting15:06
gtemahappy New Year Dave15:06
d34dh0r53#topic liaison updates15:06
d34dh0r53nothing from VMT or releases15:07
d34dh0r53#topic specification OAuth 2.0 (hiromu)15:07
d34dh0r53#link https://review.opendev.org/q/topic:bp%252Foauth2-client-credentials-ext15:07
d34dh0r53#link https://review.opendev.org/q/topic:bp%252Fenhance-oauth2-interoperability15:07
d34dh0r53External OAuth 2.0 Specification15:07
d34dh0r53#link https://review.opendev.org/c/openstack/keystone-specs/+/861554 (merged)15:07
d34dh0r53OAuth 2.0 Implementation15:07
d34dh0r53#link https://review.opendev.org/q/topic:bp%252Fsupport-oauth2-mtls15:07
d34dh0r53OAuth 2.0 Documentation15:07
d34dh0r53#link https://review.opendev.org/c/openstack/keystone/+/838108 (merged)15:07
d34dh0r53#link https://review.opendev.org/c/openstack/keystoneauth/+/838104 (merged)15:08
d34dh0r53no updates from me on this stuff, going to look at it this week15:08
d34dh0r53#topic specification Secure RBAC (dmendiza[m])15:08
d34dh0r53#link https://governance.openstack.org/tc/goals/selected/consistent-and-secure-rbac.html#z-release-timeline_15:08
d34dh0r532024.1 Release Timeline15:08
d34dh0r53Update oslo.policy in keystone to enforce_new_defaults=True15:08
d34dh0r53Update oslo.policy in keystone to enforce_scope=True15:08
d34dh0r53Sorry, had to step away for a minute15:14
d34dh0r53Guess dmendiza isn't around15:14
gtemanp15:14
d34dh0r53next up15:14
d34dh0r53#topic specification OpenAPI support (gtema)15:14
d34dh0r53#link https://review.opendev.org/q/topic:%22openapi%22+project:openstack/keystone15:14
gtemafew changes are reviewed by me and are ok to go15:15
gtemafew changes are now parent-less since one student graduated, so I will take ownership over them15:15
d34dh0r53ack15:15
gtematoday wanted to start working on pagination of users/groups and figured those are still without openapi, so will do that first15:16
d34dh0r53ok15:16
d34dh0r53I'll take a look at the remaining openapi patches15:16
gtemagreat, thks15:16
gtemathere are still lots of resources not touched yet, but - it goes slowly15:17
dmendiza[m]🙋15:17
d34dh0r53ohai dmendiza 15:17
gtemahey ho15:18
dmendiza[m]For some reason the roll call ping never dings on my end15:19
d34dh0r53hmm, might be my copy pasta15:21
gtemamaybe it's a global notification settings?15:22
gtemaI just switched to mac (new employer) and also first didn't got any notification do some global mess15:22
dmendiza[m]yeah, might be something with paste, because only the > "Guess /me is not here" dinged15:23
d34dh0r53ack, I'll special ding you from now on15:24
d34dh0r53:)15:24
d34dh0r53any updates on s-rbac?15:24
d34dh0r53I wonder if Grzegorz Grasza 's ding is the same15:25
d34dh0r53ok, moving on15:30
d34dh0r53#topic specification domain manager (mhen)15:30
d34dh0r53still unmerged are:15:31
d34dh0r53documentation: https://review.opendev.org/c/openstack/keystone/+/92813515:31
d34dh0r53tempest tests: https://review.opendev.org/c/openstack/keystone-tempest-plugin/+/92422215:31
d34dh0r53dmendiza: can you review these this week?15:31
dmendiza[m]Ack, I'll get those going15:33
d34dh0r53thank you15:33
d34dh0r53next up15:33
d34dh0r53#topic specification Include bad password details in audit messages (stanislav-z)15:33
d34dh0r53#link https://review.opendev.org/c/openstack/keystone-specs/+/91548215:33
d34dh0r53#link https://review.opendev.org/c/openstack/keystone/+/93242315:34
d34dh0r538-Jan update: there are some open conversations in the spec - would appreciate the feedback15:34
d34dh0r53Docs build/gate fix is here #link https://review.opendev.org/c/openstack/keystone-specs/+/93801215:34
gtemai +1ed job fix15:34
d34dh0r53I reviewed the docs build/gate patch15:34
d34dh0r53dmendiza: maybe you can give https://review.opendev.org/c/openstack/keystone-specs/+/938012 the final push15:35
stanislav-zmany thanks!15:35
d34dh0r53np Sta15:38
d34dh0r53* np Stanislav Zaprudskiy 15:38
d34dh0r53next up15:38
d34dh0r53#topic open discussion15:38
d34dh0r53I don't have anything15:38
gtemame neither15:39
d34dh0r53ok, next up15:40
d34dh0r53#topic bug review15:40
d34dh0r53#link https://bugs.launchpad.net/keystone/?orderby=-id&start=015:40
d34dh0r53We have one new bug in keystone15:40
d34dh0r53#link https://bugs.launchpad.net/keystone/+bug/209266015:40
d34dh0r53I know we updated our devstack uwsgi configuration15:41
d34dh0r53do our docs need updating as well?15:41
gtemawell, we introduced new modules for wsgi start15:41
gtemaI will check whether docs need update, but afaik that was updated as well.15:42
gtemaone of the reasons behind the change was pbr and python dropping the way for wsgi scripts15:42
gtemai took report over and will check this week15:43
d34dh0r53thanks gtema 15:44
d34dh0r53#link https://bugs.launchpad.net/python-keystoneclient/?orderby=-id&start=015:44
d34dh0r53no new bugs for python-keystoneclient15:45
d34dh0r53#link https://bugs.launchpad.net/keystoneauth/+bugs?orderby=-id&start=015:45
d34dh0r53keystoneauth has no new bugs15:45
d34dh0r53#link https://bugs.launchpad.net/keystonemiddleware/+bugs?orderby=-id&start=015:45
d34dh0r53nor does keystonemiddleware15:45
d34dh0r53#link https://bugs.launchpad.net/pycadf/+bugs?orderby=-id&start=015:45
d34dh0r53pycadf is good15:45
d34dh0r53#link https://bugs.launchpad.net/ldappool/+bugs?orderby=-id&start=015:45
d34dh0r53so is ldappool15:45
d34dh0r53#topic conclusion15:45
d34dh0r53Happy New Year everyone, looking forward to another great year in Keystone land :)15:46
gtemayeah, hopefully it is going to be a good year15:47
d34dh0r53indeed15:47
d34dh0r53#endmeeting15:47
opendevmeetMeeting ended Wed Jan  8 15:47:36 2025 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)15:47
opendevmeetMinutes:        https://meetings.opendev.org/meetings/keystone/2025/keystone.2025-01-08-15.01.html15:47
opendevmeetMinutes (text): https://meetings.opendev.org/meetings/keystone/2025/keystone.2025-01-08-15.01.txt15:47
opendevmeetLog:            https://meetings.opendev.org/meetings/keystone/2025/keystone.2025-01-08-15.01.log.html15:47

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!