| opendevreview | Merged openstack/keystone master: Fix BOLA in access rule GET/DELETE and ownership check in CREATE https://review.opendev.org/c/openstack/keystone/+/988712 | 14:43 |
|---|---|---|
| opendevreview | Merged openstack/keystone master: Abandon server-side paged search cursor when sizelimit is reached https://review.opendev.org/c/openstack/keystone/+/991061 | 14:44 |
| dmendiza[m] | #startmeeting keystone | 15:03 |
| opendevmeet | Meeting started Wed Aug 5 15:03:07 2026 UTC and is due to finish in 60 minutes. The chair is dmendiza[m]. Information about MeetBot at http://wiki.debian.org/MeetBot. | 15:03 |
| opendevmeet | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 15:03 |
| opendevmeet | The meeting name has been set to 'keystone' | 15:03 |
| blasseye| | Hi o/ | 15:03 |
| dmendiza[m] | Reminder: This meeting takes place under the OpenInfra Foundation Code of Conduct | 15:03 |
| dmendiza[m] | #link https://openinfra.dev/legal/code-of-conduct | 15:03 |
| dmendiza[m] | #topic Roll Call | 15:04 |
| gtema | o/ | 15:04 |
| dmendiza[m] | Courtesy ping: admiyo, bbobrov, crisloma, d34dh0r53, dpar, dstanek, hrybacki, lbragstad, lwanderley, kmalloc, rodrigods, samueldmq, ruan_he, wxy, sonuk, vishakha, Ajay, rafaelwe, xek, gmann, zaitcev, reqa, dmendiza[m], dmendiza, mharley, jph, gtema, cardoe, deydra | 15:04 |
| dmendiza[m] | OK, let's get started | 15:05 |
| dmendiza[m] | #topic review past meeting work items | 15:05 |
| dmendiza[m] | #link https://meetings.opendev.org/meetings/keystone/2026/keystone.2026-07-29-15.01.html | 15:06 |
| dmendiza[m] | No action items from last week | 15:06 |
| dmendiza[m] | #topic liaison updates | 15:07 |
| * dmendiza[m] realizes he's a Release Managment liaison | 15:07 | |
| dmendiza[m] | No updates from me ... | 15:07 |
| dmendiza[m] | I probably should pay more attention to release schedules, lol | 15:07 |
| gtema | lol, dear RM liaison - when do we have a feature freeze? | 15:07 |
| dmendiza[m] | Great question | 15:08 |
| dmendiza[m] | #link https://releases.openstack.org/hibiscus/schedule.html | 15:08 |
| gtema | Aud 24 | 15:09 |
| dmendiza[m] | Feature Freeze is usually milestone 3 | 15:09 |
| gtema | s/Aud/Aug | 15:09 |
| dmendiza[m] | so, Hibiscus-3 on the week of Aug 24-28 | 15:09 |
| gtema | so just 2 weeks left | 15:09 |
| dmendiza[m] | Not looking good for the UUID specs | 15:09 |
| gtema | specs doesn't care, the implementation will definitely not land | 15:10 |
| gtema | but right - not looking good | 15:10 |
| dmendiza[m] | Right, it's looking like a Indri feature | 15:11 |
| dmendiza[m] | OK, moving on ... | 15:11 |
| dmendiza[m] | #topic specification | 15:12 |
| dmendiza[m] | Secure RBAC | 15:12 |
| dmendiza[m] | No updates on this ... not sure we have anything else we're needing for SRBAC? 🤔 | 15:12 |
| gtema | what about https://review.opendev.org/c/openstack/keystone-tempest-plugin/+/993910 - does it relate to that? | 15:12 |
| gtema | ok, not directly | 15:13 |
| dmendiza[m] | Yeah, not related to the Secure RBAC goal | 15:13 |
| gtema | and what about https://review.opendev.org/c/openstack/keystone/+/999476 with srbac as toic | 15:14 |
| gtema | topic | 15:14 |
| gtema | and it conflicts with https://review.opendev.org/c/openstack/keystone/+/930828 which is itself in the merge conflict | 15:15 |
| gtema | good luck figuring out | 15:15 |
| dmendiza[m] | lol, yeah I'll sort those ot | 15:16 |
| dmendiza[m] | *out | 15:16 |
| dmendiza[m] | OK, moving on | 15:16 |
| dmendiza[m] | #topic Keystone RS | 15:16 |
| dmendiza[m] | gtema 🎤 | 15:16 |
| gtema | not much to report here this week. Busy polishing the code, adding tests | 15:17 |
| gtema | the TC resolution was uploaded few weeks ago | 15:17 |
| gtema | #link https://review.opendev.org/c/openstack/governance/+/998652 | 15:17 |
| gtema | feel free to have a look and review | 15:17 |
| gtema | Students have finished their course, but some still continue actively pushing 5000+loc patches | 15:18 |
| gtema | this was a tremendous success - in 2 month code base doubled the size to 200,000loc | 15:18 |
| gtema | that's it, nothing that special this time | 15:19 |
| dmendiza[m] | 😵 | 15:19 |
| dmendiza[m] | thanks for the update | 15:19 |
| dmendiza[m] | #topic UUID spec | 15:19 |
| dmendiza[m] | Not sure if afariasa is around? 🤔 | 15:19 |
| dmendiza[m] | I guess not | 15:22 |
| dmendiza[m] | Still waiting for an update to the Project/Domain spec: | 15:23 |
| dmendiza[m] | #link https://review.opendev.org/c/openstack/keystone-specs/+/997320 | 15:23 |
| dmendiza[m] | and waiting for more reviews on the User spec: | 15:23 |
| dmendiza[m] | #link https://review.opendev.org/c/openstack/keystone-specs/+/998242 | 15:23 |
| gtema | so review comments were not addressed yet? I had also no chance to have any look | 15:23 |
| dmendiza[m] | Not yet | 15:23 |
| dmendiza[m] | I did go over them with Andre, so he should be working on an update | 15:23 |
| gtema | ok, I really need to allocate review slot in my calendar | 15:24 |
| dmendiza[m] | OK, moving on | 15:24 |
| dmendiza[m] | #topic Open Discussion | 15:25 |
| dmendiza[m] | anything else y'all want to talk about? | 15:25 |
| gtema | proposal: clean the courtesy ping list from people that are just not around anymore | 15:25 |
| dmendiza[m] | Yeah, sure we can do that ... | 15:26 |
| dmendiza[m] | ... but then i'll be empty 😠| 15:26 |
| gtema | but that is then the reality. I mean let's just remove people who we know not participated since a year | 15:27 |
| gtema | people anyway always can re-add themselves if they want | 15:27 |
| gtema | #action gtema to clean courtesy ping list | 15:28 |
| dmendiza[m] | sounds good, yeah, I can see a bunch of folks I know for sure are not involved in OpenStack anymore | 15:28 |
| gtema | good. I do not have anything else | 15:29 |
| dmendiza[m] | blasseye|: any topics on your end, or just here to listen? 👀 | 15:30 |
| blasseye| | I propose a fix to a risk of lockout with totp : https://review.opendev.org/c/openstack/keystone/+/985969 | 15:30 |
| gtema | yeah, I was looking to it but have not made a formal review. | 15:31 |
| gtema | I had issue with some aspects | 15:31 |
| gtema | but in general fine | 15:31 |
| blasseye| | Ok, thanks | 15:32 |
| dmendiza[m] | Cool, OK, moving on to Bug Review | 15:32 |
| dmendiza[m] | #topic Bug Review | 15:32 |
| dmendiza[m] | #link https://bugs.launchpad.net/keystone/?orderby=-id&start=0 | 15:32 |
| dmendiza[m] | No new bugs in Keystone | 15:32 |
| dmendiza[m] | #link https://bugs.launchpad.net/python-keystoneclient/?orderby=-id&start=0 | 15:33 |
| dmendiza[m] | no new bugs in python-keystoneclient | 15:33 |
| dmendiza[m] | #link https://bugs.launchpad.net/keystoneauth/+bugs?orderby=-id&start=0 | 15:33 |
| dmendiza[m] | No new bugs in keystoneauth | 15:33 |
| dmendiza[m] | #link https://bugs.launchpad.net/keystonemiddleware/+bugs?orderby=-id&start=0 | 15:34 |
| dmendiza[m] | No new bugs in keystonemiddleware | 15:34 |
| dmendiza[m] | #link https://bugs.launchpad.net/pycadf/+bugs?orderby=-id&start=0 | 15:34 |
| dmendiza[m] | No new bugs in pycadf | 15:35 |
| dmendiza[m] | #link bugs.launchpad.net/ldappool/+bugs?orderby=-id&start=0 | 15:35 |
| dmendiza[m] | and no new bugs in ldappool | 15:35 |
| dmendiza[m] | That wraps it up for the week. | 15:35 |
| dmendiza[m] | Thanks for joining, everyone! | 15:36 |
| dmendiza[m] | #endmeeting | 15:36 |
| opendevmeet | Meeting ended Wed Aug 5 15:36:08 2026 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 15:36 |
| opendevmeet | Minutes: https://meetings.opendev.org/meetings/keystone/2026/keystone.2026-08-05-15.03.html | 15:36 |
| opendevmeet | Minutes (text): https://meetings.opendev.org/meetings/keystone/2026/keystone.2026-08-05-15.03.txt | 15:36 |
| opendevmeet | Log: https://meetings.opendev.org/meetings/keystone/2026/keystone.2026-08-05-15.03.log.html | 15:36 |
| gtema | thanks Doug | 15:36 |
| *** Unknown123 is now known as Mike-- | 16:28 | |
| cardoe | What'd I do? | 17:05 |
| cardoe | oh dmendiza[m]. :D | 17:05 |
| cardoe | gtema: keep me on the ping list. I know I'm super infrequent. | 17:05 |
| cardoe | But I'm interested in the SSO / federation bits. I'm interested in the ability to re-create a project with a specific ID. | 17:06 |
| cardoe | I'm also interested in working on the roles and token scopes in various projects. | 17:06 |
| cardoe | I've just had a bajillion things on my plate and haven't had cycles to get to it. | 17:08 |
| gtema | Sure cardoe, will keep you | 17:58 |
| moutazchaara[m] | Hi, i couldn't join the prev meeting. | 18:00 |
| moutazchaara[m] | if you have any feedback on this let me know: https://review.opendev.org/c/openstack/keystone/+/999379 | 18:00 |
| -opendevstatus- NOTICE: The Gerrit service on review.opendev.org will be offline momentarily at 20:00 UTC (an hour from now) while we restart for a patch upgrade, but should return within a few minutes. | 19:02 | |
| -opendevstatus- NOTICE: The Gerrit service on review.opendev.org will not be restarted at 20:00 UTC after all, due to unanticipated image build regressions, and will be rescheduled to a later time/date. | 19:13 | |
Generated by irclog2html.py 4.1.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!