| *** ykarel_ is now known as ykarel | 09:57 | |
| bbobrov | >_> | 15:05 |
|---|---|---|
| bbobrov | <_< | 15:05 |
| bbobrov | am i wrong with keystone meeting time again? | 15:06 |
| d34dh0r53 | #startmeeting keystone | 15:06 |
| opendevmeet | Meeting started Wed Apr 15 15:06:18 2026 UTC and is due to finish in 60 minutes. The chair is d34dh0r53. Information about MeetBot at http://wiki.debian.org/MeetBot. | 15:06 |
| opendevmeet | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 15:06 |
| opendevmeet | The meeting name has been set to 'keystone' | 15:06 |
| d34dh0r53 | no, I'm just late | 15:06 |
| d34dh0r53 | Reminder: This meeting takes place under the OpenInfra Foundation Code of Conduct | 15:06 |
| d34dh0r53 | #link https://openinfra.dev/legal/code-of-conduct | 15:06 |
| d34dh0r53 | #topic roll call | 15:07 |
| d34dh0r53 | admiyo, bbobrov, crisloma, d34dh0r53, dpar, dstanek, hrybacki, lbragstad, lwanderley, kmalloc, rodrigods, samueldmq, ruan_he, wxy, sonuk, vishakha, Ajay, rafaelwe, xek, gmann, zaitcev, reqa, dmendiza[m], dmendiza, mharley, jph, gtema, cardoe, deydra | 15:07 |
| gtema | o/ | 15:07 |
| bbobrov | o/ | 15:08 |
| d34dh0r53 | both dmendiza and Grzegorz Grasza are out today | 15:08 |
| d34dh0r53 | #topic upcoming PTG | 15:09 |
| d34dh0r53 | #link https://etherpad.opendev.org/p/apr2026-ptg-keystone | 15:09 |
| d34dh0r53 | Don't forget to add your topics to the PTG etherpad | 15:09 |
| d34dh0r53 | #topic review past meeting work items | 15:09 |
| d34dh0r53 | #link https://meetings.opendev.org/meetings/keystone/2026 | 15:09 |
| d34dh0r53 | meetings.opendev.org is timing out for me right now so I can't post the latest log, but we didn't have any action items from last week IIRC | 15:10 |
| d34dh0r53 | #topic liaison updates | 15:10 |
| d34dh0r53 | nothing from me | 15:10 |
| gtema | Nothing here, sorry, my client dropped off | 15:11 |
| d34dh0r53 | no worries | 15:11 |
| d34dh0r53 | #topic specification Secure RBAC (dmendiza) | 15:11 |
| d34dh0r53 | #link https://governance.openstack.org/tc/goals/selected/consistent-and-secure-rbac.html#z-release-timeline_ | 15:11 |
| d34dh0r53 | 2026.1 Release Timeline | 15:11 |
| d34dh0r53 | Update oslo.policy in keystone to enforce_new_defaults=True | 15:11 |
| d34dh0r53 | Update oslo.policy in keystone to enforce_scope=True | 15:11 |
| d34dh0r53 | dmendiza: is on PTO so no updates here | 15:11 |
| d34dh0r53 | #topic specification Secuirty Compliance Testing (dmendiza) | 15:11 |
| d34dh0r53 | #link https://review.opendev.org/c/openstack/devstack/+/957969 | 15:11 |
| d34dh0r53 | same | 15:11 |
| d34dh0r53 | #topic keystone-rs | 15:11 |
| d34dh0r53 | #link https://github.com/openstack-experimental/keystone | 15:11 |
| gtema | just landed the improvements to the raft storage with the webauthn changes | 15:12 |
| gtema | this makes raft storage nearly usable, with tls, cluster management, and webauthn driver using it by default | 15:12 |
| gtema | with a series of roundtrip tests validating the credential registration and authentication | 15:13 |
| gtema | now working on improving the skaffold for the K8 setup of the raft (similarly to ZK, etcd, vault there is some work on deploying it on k8) | 15:13 |
| gtema | so that also tests in the CI (the ones on k8) will also include testing full round of raft | 15:14 |
| gtema | and then will also add benchmark test suites to verify the performance of raft. Comparison to sql would be good, but is not easy and heavily depending on the setup | 15:15 |
| gtema | I fell in love with raft and KV db - it is so much fun using it compared to the bloody sql where depending on mysql/postgres you have different crappy behavior | 15:16 |
| gtema | e.g., in my tests ended up seeing the issue that postgres truncates datetime to milliseconds while mysql rounds to seconds so that even the comparison fail | 15:17 |
| gtema | once I am done with those topics I will add k8s auth driver for raft as default instead of sql | 15:17 |
| d34dh0r53 | that's cool | 15:17 |
| gtema | indeed, this is the work that really makes a lot of fun | 15:18 |
| gtema | brings satisfaction compared to python which once I needed to come back this week (for the sake of codegenerator) was angry like hell, it is so much worse | 15:18 |
| gtema | the whole typing is just a joke | 15:19 |
| gtema | and openstack sadly does not make it better by using ugliest ever api decisions | 15:19 |
| gtema | thas't it from me on the topic | 15:19 |
| d34dh0r53 | thanks gtema | 15:20 |
| d34dh0r53 | #topic open discussion | 15:20 |
| d34dh0r53 | going once | 15:22 |
| d34dh0r53 | cool, moving on | 15:24 |
| d34dh0r53 | 'v | 15:24 |
| d34dh0r53 | #topic bug review | 15:24 |
| d34dh0r53 | #link https://bugs.launchpad.net/keystone/?orderby=-id&start=0 | 15:24 |
| d34dh0r53 | one new bug in keystone | 15:24 |
| d34dh0r53 | #link https://bugs.launchpad.net/keystone/+bug/2148259 | 15:24 |
| d34dh0r53 | I might see if I can throw claude at that | 15:26 |
| d34dh0r53 | next up | 15:26 |
| d34dh0r53 | #link https://bugs.launchpad.net/python-keystoneclient/?orderby=-id&start=0 | 15:26 |
| d34dh0r53 | no new bugs here | 15:26 |
| d34dh0r53 | #link https://bugs.launchpad.net/keystoneauth/+bugs?orderby=-id&start=0 | 15:26 |
| d34dh0r53 | nor here | 15:27 |
| d34dh0r53 | #link https://bugs.launchpad.net/keystonemiddleware/+bugs?orderby=-id&start=0 | 15:27 |
| d34dh0r53 | keystonemiddleware is good | 15:27 |
| d34dh0r53 | #link https://bugs.launchpad.net/pycadf/+bugs?orderby=-id&start=0 | 15:27 |
| d34dh0r53 | no new bugs in pycadf | 15:27 |
| d34dh0r53 | #link https://bugs.launchpad.net/ldappool/+bugs?orderby=-id&start=0 | 15:27 |
| d34dh0r53 | ldappool is good to go | 15:27 |
| d34dh0r53 | #topic conclusion | 15:27 |
| d34dh0r53 | Thanks everyone, PTG next week :) | 15:28 |
| d34dh0r53 | No weekly meeting on the 22nd | 15:28 |
| d34dh0r53 | #endmeeting | 15:28 |
| opendevmeet | Meeting ended Wed Apr 15 15:28:57 2026 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 15:28 |
| opendevmeet | Minutes: https://meetings.opendev.org/meetings/keystone/2026/keystone.2026-04-15-15.06.html | 15:28 |
| opendevmeet | Minutes (text): https://meetings.opendev.org/meetings/keystone/2026/keystone.2026-04-15-15.06.txt | 15:28 |
| opendevmeet | Log: https://meetings.opendev.org/meetings/keystone/2026/keystone.2026-04-15-15.06.log.html | 15:28 |
| gtema | thanks Dave Wilde (d34dh0r53) | 15:29 |
Generated by irclog2html.py 4.1.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!