| *** mhen_ is now known as mhen | 01:12 | |
| opendevreview | Merged openstack/keystonemiddleware master: Revert "Strip inet(6) prefix" https://review.opendev.org/c/openstack/keystonemiddleware/+/953168 | 13:57 |
|---|---|---|
| gtema | #startmeeting keystone | 15:01 |
| opendevmeet | Meeting started Wed Jul 2 15:01:41 2025 UTC and is due to finish in 60 minutes. The chair is gtema. Information about MeetBot at http://wiki.debian.org/MeetBot. | 15:01 |
| opendevmeet | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 15:01 |
| opendevmeet | The meeting name has been set to 'keystone' | 15:01 |
| gtema | Reminder: This meeting takes place under the OpenInfra Foundation Code of Conduct | 15:01 |
| gtema | #link https://openinfra.dev/legal/code-of-conduct | 15:02 |
| gtema | #topic roll call | 15:02 |
| gtema | admiyo, bbobrov, crisloma, d34dh0r53, dpar, dstanek, hrybacki, lbragstad, lwanderley, kmalloc, rodrigods, samueldmq, ruan_he, wxy, sonuk, vishakha, Ajay, rafaelwe, xek, gmann, zaitcev, reqa, dmendiza[m], dmendiza, mharley, jph, gtema, cardoe, deydra | 15:02 |
| gtema | o/ | 15:02 |
| mharley[m] | o/ | 15:03 |
| gtema | a special ping for dmendiza | 15:04 |
| gtema | quite lonely today | 15:04 |
| gtema | with nobody else from the cores it makes no sense to proceed with the meeting. | 15:06 |
| dmendiza[m] | 🙋♂️ | 15:06 |
| gtema | oh, you are here, great | 15:06 |
| gtema | than let's go on | 15:06 |
| gtema | #topic review past meeting work items | 15:06 |
| gtema | #link https://meetings.opendev.org/meetings/keystone/2025/keystone.2025-06-25-15.00.html | 15:07 |
| gtema | we still have not done any decision on Forum and/or project update. Since lot of folks not traveling most likely we are not going to have anything | 15:08 |
| gtema | #topic liaison updates | 15:08 |
| gtema | there is nothing from me | 15:08 |
| gtema | ok, next | 15:09 |
| gtema | #topic specification | 15:09 |
| gtema | #topic OAuth 2.0 | 15:09 |
| gtema | still not sure why we keep this. There is nothing really open on that | 15:10 |
| gtema | #topic Secure RBAC (dmendiza) | 15:10 |
| gtema | I spotted some changes in the area, am I right dmendiza ? | 15:11 |
| dmendiza[m] | Well, I still need to clean up the doc itself | 15:12 |
| dmendiza[m] | I did talk to Dave Wilde (d34dh0r53) a bit about this the other day | 15:12 |
| dmendiza[m] | I think what we want to do is ensure that we're running with SRBAC turned on in all our gate jobs | 15:12 |
| gtema | isn't it already the case? The defaults are now as we expect in oslo.policy | 15:13 |
| dmendiza[m] | Maybe? ... I want to review the job definitions to double make sure. 😅 | 15:13 |
| gtema | my grep across repo hasn't revealed any overrides to the values | 15:14 |
| dmendiza[m] | Cool cool. We should probably consider removing the old policies at some point | 15:15 |
| gtema | definitely | 15:15 |
| gtema | ok, next | 15:15 |
| gtema | #topic OpenAPI support (gtema) | 15:16 |
| gtema | there are few changes that I myself still need to review. Nothing blocking and nothing urgent this week | 15:16 |
| gtema | #topic open discussion | 15:17 |
| gtema | I spent a little bit time last friday looking at the ldap job | 15:17 |
| gtema | after proposing a "workaround" to devstack I was able to bypass the slapd bug | 15:18 |
| gtema | but now tests fail on jsonschema validation | 15:18 |
| gtema | "enabled" attribute is missing in the response for ldap users | 15:19 |
| gtema | I was not able to find a potential problem quickly | 15:19 |
| gtema | and this week have no time to look into that issue | 15:20 |
| gtema | if anybody with more ldap deployment experience could throw some hints I would be glad to take those | 15:20 |
| gtema | #link https://review.opendev.org/c/openstack/keystone/+/953571 | 15:21 |
| gtema | the change is passing because the job is non-voting, so do not be confused with that | 15:21 |
| gtema | anything else for open discussion? | 15:22 |
| mharley[m] | Yes, how is it going the writing of Keystone to Rust? | 15:23 |
| mharley[m] | The "rewriting", I mean. | 15:23 |
| gtema | Good. I started writing policies. Now we not only have "allowed", "rejected", but we also have explanations like "only admin can list identity providers from other domain ..." | 15:25 |
| gtema | federated login (oidc) works also. Next is to implement exchange of jwt to fernet | 15:26 |
| mharley[m] | Great. Are you doing that all by yourself only (no other contributors)? | 15:26 |
| gtema | So far alone alone | 15:26 |
| gtema | I hoped to have a talk on that during Summit, but it was not accepted | 15:27 |
| gtema | to make an advertisement | 15:27 |
| mharley[m] | Are you organizing this on some public repository, including the planning? | 15:28 |
| gtema | yes, https://github.com/gtema/keystone | 15:29 |
| gtema | I made some org issues, but as long as I work on that myself it is a time waste | 15:29 |
| gtema | anything else folks? | 15:31 |
| gtema | ok, moving on | 15:32 |
| gtema | #topic bug review | 15:32 |
| mharley[m] | Understood. Will have a look. Thanks, gtema. | 15:33 |
| gtema | I am not going to re-paste all the links, but there are no new bug reports for any of our projects, so we are good. | 15:33 |
| gtema | #topic conclusion | 15:33 |
| gtema | with that, thanks guys | 15:33 |
| gtema | and | 15:33 |
| gtema | have a nice day | 15:33 |
| gtema | #endmeeting | 15:34 |
| opendevmeet | Meeting ended Wed Jul 2 15:34:10 2025 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 15:34 |
| opendevmeet | Minutes: https://meetings.opendev.org/meetings/keystone/2025/keystone.2025-07-02-15.01.html | 15:34 |
| opendevmeet | Minutes (text): https://meetings.opendev.org/meetings/keystone/2025/keystone.2025-07-02-15.01.txt | 15:34 |
| opendevmeet | Log: https://meetings.opendev.org/meetings/keystone/2025/keystone.2025-07-02-15.01.log.html | 15:34 |
| opendevreview | Merged openstack/keystonemiddleware master: Revert "Switch from python-memcache to pymemcache" https://review.opendev.org/c/openstack/keystonemiddleware/+/953169 | 16:36 |
Generated by irclog2html.py 4.0.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!