| opendevreview | Dong Ma proposed openstack/keystone master: Validate project access when creating EC2 credentials https://review.opendev.org/c/openstack/keystone/+/973225 | 00:33 |
|---|---|---|
| *** mhen_ is now known as mhen | 02:55 | |
| opendevreview | Michal Nasiadka proposed openstack/keystonemiddleware master: Support Redis and Redis Sentinel Cache https://review.opendev.org/c/openstack/keystonemiddleware/+/915872 | 07:01 |
| d34dh0r53 | #startmeeting keystone | 15:04 |
| opendevmeet | Meeting started Wed Jan 14 15:04:59 2026 UTC and is due to finish in 60 minutes. The chair is d34dh0r53. Information about MeetBot at http://wiki.debian.org/MeetBot. | 15:04 |
| opendevmeet | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 15:04 |
| opendevmeet | The meeting name has been set to 'keystone' | 15:04 |
| d34dh0r53 | Reminder: This meeting takes place under the OpenInfra Foundation Code of Conduct | 15:05 |
| d34dh0r53 | #link https://openinfra.dev/legal/code-of-conduct | 15:05 |
| d34dh0r53 | #topic roll call | 15:05 |
| d34dh0r53 | admiyo, bbobrov, crisloma, d34dh0r53, dpar, dstanek, hrybacki, lbragstad, lwanderley, kmalloc, rodrigods, samueldmq, ruan_he, wxy, sonuk, vishakha, Ajay, rafaelwe, xek, gmann, zaitcev, reqa, dmendiza[m], dmendiza, mharley, jph, gtema, cardoe, deydra | 15:05 |
| d34dh0r53 | dmendiza: o/ | 15:05 |
| gtema | o/ but in a parallel meeting | 15:06 |
| d34dh0r53 | ack | 15:07 |
| d34dh0r53 | #topic review past meeting work items | 15:07 |
| d34dh0r53 | #link https://meetings.opendev.org/meetings/keystone/2026/keystone.2026-01-07-15.03.html | 15:07 |
| d34dh0r53 | one item | 15:07 |
| d34dh0r53 | d34dh0r53 remove OAuth 2.0 section from weekly meeting doc | 15:07 |
| d34dh0r53 | this has been done and placed in the archive | 15:08 |
| d34dh0r53 | moving on | 15:08 |
| d34dh0r53 | #topic liaison updates | 15:08 |
| dmendiza[m] | 🙋 | 15:08 |
| d34dh0r53 | nothing from me | 15:08 |
| gtema | nothing from me | 15:08 |
| d34dh0r53 | #topic specification Secure RBAC (dmendiza) | 15:08 |
| d34dh0r53 | #link https://governance.openstack.org/tc/goals/selected/consistent-and-secure-rbac.html#z-release-timeline_ | 15:09 |
| d34dh0r53 | 2026.1 Release Timeline | 15:09 |
| d34dh0r53 | Update oslo.policy in keystone to enforce_new_defaults=True | 15:09 |
| d34dh0r53 | Update oslo.policy in keystone to enforce_scope=True | 15:09 |
| dmendiza[m] | Right, let me check the status of that patch real quick | 15:10 |
| dmendiza[m] | Hmm... can't find the patch | 15:13 |
| dmendiza[m] | but yeah, looks like devstack still defaults to False for enforcing scope | 15:13 |
| dmendiza[m] | #link https://opendev.org/openstack/devstack/src/commit/f61d747518a3b4896032c7e9440ddf31856a060f/lib/keystone#L122 | 15:13 |
| dmendiza[m] | So we still need to fix that | 15:14 |
| d34dh0r53 | okay | 15:14 |
| cardoe | nada from me at the moment... need to get caught up on keystone stuff | 15:14 |
| d34dh0r53 | cool, thanks dmendiza | 15:14 |
| d34dh0r53 | #topic specification Secuirty Compliance Testing (dmendiza) | 15:15 |
| d34dh0r53 | #link https://review.opendev.org/c/openstack/devstack/+/957969 | 15:15 |
| dmendiza[m] | No progress since last week. IIRC some of the patches are still failing | 15:15 |
| d34dh0r53 | ack, thanks | 15:16 |
| d34dh0r53 | #topic specification OpenAPI support (gtema) | 15:17 |
| d34dh0r53 | #link https://review.opendev.org/q/topic:%22openapi%22+project:openstack/keystone | 15:17 |
| gtema | nothing new this time | 15:17 |
| d34dh0r53 | ack, thanks gtema | 15:17 |
| d34dh0r53 | #topic open discussion | 15:17 |
| gtema | nothing from me | 15:18 |
| d34dh0r53 | cool, I don't have anything either | 15:19 |
| d34dh0r53 | #topic bug review | 15:19 |
| d34dh0r53 | #link https://bugs.launchpad.net/keystone/?orderby=-id&start=0 | 15:19 |
| d34dh0r53 | 3 new bugs in keystone | 15:20 |
| d34dh0r53 | #link https://bugs.launchpad.net/keystone/+bug/2137711 | 15:20 |
| d34dh0r53 | I believe dmendiza is looking at this | 15:20 |
| gtema | isn't it related to the discussion from last week and problem with AC being very bound to the project? | 15:22 |
| d34dh0r53 | I think so | 15:22 |
| d34dh0r53 | next up | 15:25 |
| d34dh0r53 | #link https://bugs.launchpad.net/keystone/+bug/2138295 | 15:25 |
| d34dh0r53 | this is in progress and a patch has been proposed | 15:25 |
| d34dh0r53 | finally | 15:26 |
| d34dh0r53 | #link https://bugs.launchpad.net/keystone/+bug/2138298 | 15:26 |
| d34dh0r53 | also in progress with a proposed patch | 15:26 |
| d34dh0r53 | #link https://bugs.launchpad.net/python-keystoneclient/?orderby=-id&start=0 | 15:26 |
| d34dh0r53 | no new bugs in PKC | 15:27 |
| d34dh0r53 | #link https://bugs.launchpad.net/keystoneauth/+bugs?orderby=-id&start=0 | 15:27 |
| d34dh0r53 | keystoneauth is good | 15:27 |
| d34dh0r53 | #link https://bugs.launchpad.net/keystonemiddleware/+bugs?orderby=-id&start=0 | 15:27 |
| d34dh0r53 | keystonemiddleware is also good | 15:27 |
| d34dh0r53 | #link https://bugs.launchpad.net/pycadf/+bugs?orderby=-id&start=0 | 15:27 |
| d34dh0r53 | pycadf is clear | 15:28 |
| d34dh0r53 | #link https://bugs.launchpad.net/ldappool/+bugs?orderby=-id&start=0 | 15:28 |
| d34dh0r53 | nothing new for ldappool | 15:28 |
| d34dh0r53 | #topic conclusion | 15:28 |
| d34dh0r53 | Thanks folks, that's all I have | 15:28 |
| gtema | thanks guys | 15:28 |
| d34dh0r53 | #endmeeting | 15:29 |
| opendevmeet | Meeting ended Wed Jan 14 15:29:22 2026 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 15:29 |
| opendevmeet | Minutes: https://meetings.opendev.org/meetings/keystone/2026/keystone.2026-01-14-15.04.html | 15:29 |
| opendevmeet | Minutes (text): https://meetings.opendev.org/meetings/keystone/2026/keystone.2026-01-14-15.04.txt | 15:29 |
| opendevmeet | Log: https://meetings.opendev.org/meetings/keystone/2026/keystone.2026-01-14-15.04.log.html | 15:29 |
| opendevreview | Douglas Mendizábal proposed openstack/keystone master: Update hard-coded policy for GET /v3/limits https://review.opendev.org/c/openstack/keystone/+/973163 | 16:27 |
| *** root is now known as Guest35866 | 17:09 | |
Generated by irclog2html.py 4.0.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!