| opendevreview | Merged openstack/keystonemiddleware master: tox: Drop redundant injection of VIRTUAL_ENV variable https://review.opendev.org/c/openstack/keystonemiddleware/+/976871 | 00:25 |
|---|---|---|
| opendevreview | Merged openstack/keystonemiddleware master: Use oslo.config to document valid choices https://review.opendev.org/c/openstack/keystonemiddleware/+/973569 | 00:25 |
| opendevreview | Merged openstack/keystonemiddleware master: Mock discovery of www_authenticate_uri https://review.opendev.org/c/openstack/keystonemiddleware/+/989187 | 00:25 |
| opendevreview | Merged openstack/keystonemiddleware master: Mark client_secret as secret in configuration https://review.opendev.org/c/openstack/keystonemiddleware/+/1001478 | 00:25 |
| opendevreview | Merged openstack/keystonemiddleware master: cache: change log level for handled token corruption https://review.opendev.org/c/openstack/keystonemiddleware/+/895652 | 00:25 |
| opendevreview | Merged openstack/keystonemiddleware master: auth_token: Add popular auth plugin options in generated config https://review.opendev.org/c/openstack/keystonemiddleware/+/915543 | 00:25 |
| opendevreview | Takashi Kajinami proposed openstack/keystonemiddleware master: Drop unused or unnecessary oslo.cache call https://review.opendev.org/c/openstack/keystonemiddleware/+/979375 | 02:06 |
| opendevreview | Takashi Kajinami proposed openstack/keystonemiddleware master: Un-deprecate memcache_use_advanced_pool = False https://review.opendev.org/c/openstack/keystonemiddleware/+/979409 | 02:06 |
| opendevreview | Takashi Kajinami proposed openstack/keystonemiddleware master: Install memcached https://review.opendev.org/c/openstack/keystonemiddleware/+/979411 | 02:06 |
| opendevreview | Takashi Kajinami proposed openstack/keystonemiddleware master: Drop redundant encode/decode check https://review.opendev.org/c/openstack/keystonemiddleware/+/979412 | 02:06 |
| opendevreview | Takashi Kajinami proposed openstack/keystonemiddleware master: Add oslo.cache backend support https://review.opendev.org/c/openstack/keystonemiddleware/+/979374 | 02:06 |
| opendevreview | Takashi Kajinami proposed openstack/keystonemiddleware master: Add oslo.cache backend support https://review.opendev.org/c/openstack/keystonemiddleware/+/979374 | 06:32 |
| opendevreview | Takashi Kajinami proposed openstack/keystonemiddleware master: Drop remaining logic for identity v2 API https://review.opendev.org/c/openstack/keystonemiddleware/+/979376 | 06:43 |
| frickler | gtema: xek: seems keystone-protection-functional is always failing on 2026.1 and 2025.2 because all tests are skipped, is that a known issue already? not sure why only these branches are affected | 06:44 |
| opendevreview | Grzegorz Grasza proposed openstack/keystone stable/2025.1: credentials: reject delegated tokens, restrict PATCH to blob only https://review.opendev.org/c/openstack/keystone/+/1002335 | 07:12 |
| opendevreview | Grzegorz Grasza proposed openstack/keystone-tempest-plugin master: Keep KEYSTONE_ENFORCE_SCOPE in the protection job https://review.opendev.org/c/openstack/keystone-tempest-plugin/+/1002440 | 07:17 |
| opendevreview | Grzegorz Grasza proposed openstack/keystone stable/2026.1: Fix keystone scope flag in tempest.conf https://review.opendev.org/c/openstack/keystone/+/1002441 | 07:17 |
| opendevreview | Grzegorz Grasza proposed openstack/keystone stable/2026.1: devstack: honor KEYSTONE_ENFORCE_NEW_DEFAULTS for protection tests https://review.opendev.org/c/openstack/keystone/+/1002442 | 07:17 |
| opendevreview | Grzegorz Grasza proposed openstack/keystone stable/2025.2: Fix keystone scope flag in tempest.conf https://review.opendev.org/c/openstack/keystone/+/1002443 | 07:17 |
| opendevreview | Grzegorz Grasza proposed openstack/keystone stable/2025.2: devstack: honor KEYSTONE_ENFORCE_NEW_DEFAULTS for protection tests https://review.opendev.org/c/openstack/keystone/+/1002444 | 07:17 |
| opendevreview | Grzegorz Grasza proposed openstack/keystone stable/2025.1: Fix keystone scope flag in tempest.conf https://review.opendev.org/c/openstack/keystone/+/1002445 | 07:18 |
| opendevreview | Grzegorz Grasza proposed openstack/keystone stable/2025.1: devstack: honor KEYSTONE_ENFORCE_NEW_DEFAULTS for protection tests https://review.opendev.org/c/openstack/keystone/+/1002446 | 07:18 |
| xek | frickler https://review.opendev.org/c/openstack/keystone-tempest-plugin/+/1002440 should fix this | 07:19 |
| opendevreview | Grzegorz Grasza proposed openstack/keystone stable/2026.1: devstack: honor KEYSTONE_ENFORCE_NEW_DEFAULTS for protection tests https://review.opendev.org/c/openstack/keystone/+/1002442 | 07:25 |
| opendevreview | Grzegorz Grasza proposed openstack/keystone stable/2025.2: devstack: honor KEYSTONE_ENFORCE_NEW_DEFAULTS for protection tests https://review.opendev.org/c/openstack/keystone/+/1002444 | 07:25 |
| opendevreview | Grzegorz Grasza proposed openstack/keystone stable/2025.1: devstack: honor KEYSTONE_ENFORCE_NEW_DEFAULTS for protection tests https://review.opendev.org/c/openstack/keystone/+/1002446 | 07:25 |
| frickler | xek: ah, thx, I was just confused because 2025.1 seems to be passing anyway | 07:26 |
| opendevreview | Grzegorz Grasza proposed openstack/keystone stable/2026.1: DNM: exercise keystone-protection-functional with Depends-On 1002440 https://review.opendev.org/c/openstack/keystone/+/1002448 | 07:35 |
| opendevreview | Takashi Kajinami proposed openstack/keystonemiddleware master: Add oslo.cache backend support https://review.opendev.org/c/openstack/keystonemiddleware/+/979374 | 07:50 |
| tobias-urdin | xek: i updated the large backport train for unmaintained/2024.1 with your 2025.1 backports cherry-picked with changes so that they apply https://review.opendev.org/c/openstack/keystone/+/1002455 | 09:03 |
| frickler | tobias-urdin: thank you, I started merging some of the older changes yesterday, will check the new ones, too. but likely it's better to wait until the stable branch patches are merged | 09:28 |
| *** darmach3 is now known as darmach | 09:58 | |
| *** darmach0 is now known as darmach | 10:13 | |
| opendevreview | Mauricio Harley proposed openstack/keystone-tempest-plugin master: Add Tempest coverage for default JWS algorithm and PBKDF2 https://review.opendev.org/c/openstack/keystone-tempest-plugin/+/1002469 | 10:26 |
| opendevreview | Merged openstack/keystone-tempest-plugin master: Keep KEYSTONE_ENFORCE_SCOPE in the protection job https://review.opendev.org/c/openstack/keystone-tempest-plugin/+/1002440 | 11:19 |
| tobias-urdin | frickler: thanks, yes let's do everything in the correct order | 11:35 |
| opendevreview | Merged openstack/keystoneauth master: Prefer out-of-tree auth plugins on entry-point conflicts https://review.opendev.org/c/openstack/keystoneauth/+/1002397 | 12:18 |
| opendevreview | Andre Aranha proposed openstack/keystone master: Allow caller-specified IDs when creating projects and domains https://review.opendev.org/c/openstack/keystone/+/1002519 | 15:01 |
| dmendiza[m] | 🙋♂️ | 15:04 |
| blasseye- | Hi o/ | 15:08 |
| dmendiza[m] | Hi blasseye- ... I don't think we have quorum for a meeting | 15:15 |
| blasseye- | Oh :/ | 15:16 |
| blasseye- | dmendiza[m], because you are here haha, Did you get a chance to watch the review https://review.opendev.org/c/openstack/keystone/+/985969 ? | 15:21 |
| opendevreview | Julia Kreger proposed openstack/keystoneauth master: Add minimum tls version and caller cipher controls https://review.opendev.org/c/openstack/keystoneauth/+/988544 | 18:23 |
| opendevreview | Grzegorz Grasza proposed openstack/keystone master: credentials: reject delegated tokens, restrict PATCH to blob only https://review.opendev.org/c/openstack/keystone/+/1002330 | 20:26 |
| opendevreview | Grzegorz Grasza proposed openstack/keystone stable/2026.1: credentials: reject delegated tokens, restrict PATCH to blob only https://review.opendev.org/c/openstack/keystone/+/1002333 | 20:36 |
| cardoe | dmendiza[m]: if you're around still I've got an ask. | 20:38 |
| cardoe | gtema: you as well | 20:38 |
| cardoe | I've debugged what brought us to https://review.opendev.org/c/openstack/keystone/+/975342 | 20:39 |
| cardoe | And it was a bug with keystoneauth where it didn't actually use a system scoped token when the user was federated. It was sending the unscoped token. | 20:39 |
| opendevreview | Grzegorz Grasza proposed openstack/keystone stable/2025.2: credentials: reject delegated tokens, restrict PATCH to blob only https://review.opendev.org/c/openstack/keystone/+/1002334 | 20:40 |
| cardoe | errr other way. | 20:40 |
| opendevreview | Grzegorz Grasza proposed openstack/keystone stable/2025.1: credentials: reject delegated tokens, restrict PATCH to blob only https://review.opendev.org/c/openstack/keystone/+/1002335 | 20:40 |
| cardoe | It's a federated system scoped token | 20:41 |
| cardoe | I can reproduce it 100% of the time because that case isn't handled. | 20:41 |
Generated by irclog2html.py 4.1.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!