Wednesday, 2025-05-28

*** mhen_ is now known as mhen01:24
opendevreviewTakashi Kajinami proposed openstack/oslo.policy master: add pyproject.toml to support pip 23.1  https://review.opendev.org/c/openstack/oslo.policy/+/95106102:43
opendevreviewTakashi Kajinami proposed openstack/ldappool master: add pyproject.toml to support pip 23.1  https://review.opendev.org/c/openstack/ldappool/+/95107502:55
opendevreviewTakashi Kajinami proposed openstack/pycadf master: add pyproject.toml to support pip 23.1  https://review.opendev.org/c/openstack/pycadf/+/95108002:59
opendevreviewMerged openstack/oslo.limit master: add pyproject.toml to support pip 23.1  https://review.opendev.org/c/openstack/oslo.limit/+/94910604:35
opendevreviewEmmanuel Lécharny proposed openstack/keystone master: Fixed the lists numbering  https://review.opendev.org/c/openstack/keystone/+/95108807:33
opendevreviewArtem Goncharov proposed openstack/keystone master: Update pre-commit hook versions  https://review.opendev.org/c/openstack/keystone/+/95015707:47
opendevreviewMerged openstack/ldappool master: add pyproject.toml to support pip 23.1  https://review.opendev.org/c/openstack/ldappool/+/95107507:50
opendevreviewEmmanuel Lécharny proposed openstack/keystone master: Added instruction for MySQL 8+  https://review.opendev.org/c/openstack/keystone/+/95109107:58
opendevreviewArtem Goncharov proposed openstack/keystone master: Prevent MFA bypass  https://review.opendev.org/c/openstack/keystone/+/94542908:03
opendevreviewMerged openstack/pycadf master: add pyproject.toml to support pip 23.1  https://review.opendev.org/c/openstack/pycadf/+/95108008:38
opendevreviewMerged openstack/keystone master: Remove sample mod_wsgi config file  https://review.opendev.org/c/openstack/keystone/+/94933109:00
opendevreviewMerged openstack/keystone master: Use real service type in catalog multi-region test  https://review.opendev.org/c/openstack/keystone/+/94980809:00
opendevreviewMerged openstack/keystone master: Allow additional properties in endpoint schema  https://review.opendev.org/c/openstack/keystone/+/95076609:00
stephenfinxek: dmendiza[m]: gtema: It's not super high priority, but I'd appreciate getting eyes on https://review.opendev.org/c/openstack/keystoneauth/+/945980/ early in the cycle in case there's fallout from dropping Python 3.9 support (there shouldn't be, but it's a critical package in OpenStack land)09:41
stephenfinplus the other patches in the series, naturally09:41
gtemaack stephenfin09:42
opendevreviewArtem Goncharov proposed openstack/keystone master: Update pre-commit hook versions  https://review.opendev.org/c/openstack/keystone/+/95015709:55
stephenfingtema: jfyi I need a +2 on https://review.opendev.org/c/openstack/keystoneauth/+/945980/ also. You just left a +W13:02
gtemaI just left +W because in the history I left already +2 and so was confused13:03
stephenfinack, looks like I bumped the version of ruff further at some point :)13:05
opendevreviewMerged openstack/keystoneauth master: pre-commit: Bump versions  https://review.opendev.org/c/openstack/keystoneauth/+/94598013:13
opendevreviewEmmanuel Lécharny proposed openstack/keystone master: Updated the doc for MySQL > 5.7  https://review.opendev.org/c/openstack/keystone/+/95114514:17
opendevreviewIvan Anfimov proposed openstack/keystone master: docs: identity service now use https  https://review.opendev.org/c/openstack/keystone/+/94786114:41
opendevreviewIvan Anfimov proposed openstack/keystone master: docs: identity service now use https  https://review.opendev.org/c/openstack/keystone/+/94786114:42
d34dh0r53#startmeeting keystone15:02
opendevmeetMeeting started Wed May 28 15:02:21 2025 UTC and is due to finish in 60 minutes.  The chair is d34dh0r53. Information about MeetBot at http://wiki.debian.org/MeetBot.15:02
opendevmeetUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.15:02
opendevmeetThe meeting name has been set to 'keystone'15:02
d34dh0r53Reminder: This meeting takes place under the OpenInfra Foundation Code of Conduct15:02
d34dh0r53#link https://openinfra.dev/legal/code-of-conduct15:02
d34dh0r53#topic roll call15:02
d34dh0r53admiyo, bbobrov, crisloma, d34dh0r53, dpar, dstanek, hrybacki, lbragstad, lwanderley, kmalloc, rodrigods, samueldmq, ruan_he, wxy, sonuk, vishakha, Ajay, rafaelwe, xek, gmann, zaitcev, reqa, dmendiza[m], dmendiza, mharley, jph, gtema, cardoe, deydra15:02
d34dh0r53dmendiza: o/15:03
gtemao/15:03
dmendiza[m]🙋‍♂️15:03
d34dh0r53#topic review past meeting work items15:04
d34dh0r53#link https://meetings.opendev.org/meetings/keystone/2025/keystone.2025-05-21-15.00.html15:04
d34dh0r53no action items from last week15:04
d34dh0r53next up15:04
d34dh0r53#topic liaison updates15:04
gtemanothing from me15:05
d34dh0r53nor me15:05
d34dh0r53#topic specification OAuth 2.0 (hiromu)15:05
d34dh0r53#link https://review.opendev.org/q/topic:bp%252Foauth2-client-credentials-ext15:05
d34dh0r53#link https://review.opendev.org/q/topic:bp%252Fenhance-oauth2-interoperability15:05
d34dh0r53External OAuth 2.0 Specification15:05
d34dh0r53#link https://review.opendev.org/c/openstack/keystone-specs/+/861554 (merged)15:05
d34dh0r53OAuth 2.0 Implementation15:05
d34dh0r53#link https://review.opendev.org/q/topic:bp%252Fsupport-oauth2-mtls (merged)15:05
d34dh0r53OAuth 2.0 Documentation15:05
d34dh0r53#link https://review.opendev.org/c/openstack/keystone/+/838108 (merged)15:06
d34dh0r53#link https://review.opendev.org/c/openstack/keystoneauth/+/838104 (merged)15:06
d34dh0r53no updates on this one15:06
d34dh0r53#topic specification Secure RBAC (dmendiza[m])15:06
d34dh0r53#link https://governance.openstack.org/tc/goals/selected/consistent-and-secure-rbac.html#z-release-timeline_15:06
d34dh0r532024.1 Release Timeline15:06
d34dh0r53Update oslo.policy in keystone to enforce_new_defaults=True15:06
d34dh0r53Update oslo.policy in keystone to enforce_scope=True15:06
d34dh0r53dmendiza: any updates?15:06
dmendiza[m]Negative15:08
d34dh0r53👍️15:09
d34dh0r53#topic specification OpenAPI support (gtema)15:09
d34dh0r53#link https://review.opendev.org/q/topic:%22openapi%22+project:openstack/keystone15:09
gtemaIn my tests with mocked server (based on the spec) I noticed fun stuff when in response the same boolean is reused as in the query15:10
gtemasince on input we support true/false/0/1/t/f/on/off ...15:10
gtemato address this https://review.opendev.org/c/openstack/keystone/+/95064715:10
gtemaat least that is the one for the user. From now we will keep an eye on that case globally15:11
gtemaother than that there is nothing on the openapi front15:11
d34dh0r53ok, I'll take a look15:13
d34dh0r53thanks gtema 15:14
gtemathks15:14
d34dh0r53#topic open discussion15:14
gtemanothing special from me15:14
gtemarust federation work goes smoothly15:15
d34dh0r53awesome15:17
d34dh0r53I don't have anything either15:17
d34dh0r53let's move on to bug review15:17
d34dh0r53#topic bug review15:17
d34dh0r53#link https://bugs.launchpad.net/keystone/?orderby=-id&start=015:17
d34dh0r53new bug in keystone15:18
d34dh0r53#link https://bugs.launchpad.net/keystone/+bug/211183615:18
gtemaI'll check15:19
d34dh0r53ack15:20
d34dh0r53that does it for keystone15:20
d34dh0r53moving on15:20
d34dh0r53#link https://bugs.launchpad.net/python-keystoneclient/?orderby=-id&start=015:21
d34dh0r53nothing new in python-keystoneclient15:21
d34dh0r53#link https://bugs.launchpad.net/keystoneauth/+bugs?orderby=-id&start=015:21
d34dh0r53keystoneauth is good15:21
d34dh0r53#link https://bugs.launchpad.net/keystonemiddleware/+bugs?orderby=-id&start=015:21
d34dh0r53keystonemiddleware looks clean15:22
d34dh0r53#link https://bugs.launchpad.net/pycadf/+bugs?orderby=-id&start=015:22
d34dh0r53no new bugs in pycadf15:22
d34dh0r53#link https://bugs.launchpad.net/ldappool/+bugs?orderby=-id&start=015:22
d34dh0r53nor ldappool15:22
d34dh0r53#topic conclusion15:22
d34dh0r53Thanks folks, short and sweet today15:22
gtemayupp, thanks guys15:23
d34dh0r53#endmeeting15:23
opendevmeetMeeting ended Wed May 28 15:23:37 2025 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)15:23
opendevmeetMinutes:        https://meetings.opendev.org/meetings/keystone/2025/keystone.2025-05-28-15.02.html15:23
opendevmeetMinutes (text): https://meetings.opendev.org/meetings/keystone/2025/keystone.2025-05-28-15.02.txt15:23
opendevmeetLog:            https://meetings.opendev.org/meetings/keystone/2025/keystone.2025-05-28-15.02.log.html15:23
opendevreviewStephen Finucane proposed openstack/keystoneauth master: typing: Correct type (redux)  https://review.opendev.org/c/openstack/keystoneauth/+/95118317:27
-opendevstatus- NOTICE: The Gerrit service on review.opendev.org is temporarily unreachable due to an ongoing issue in the hosting provider where it resides22:07

Generated by irclog2html.py 4.0.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!