| *** darmach2 is now known as darmach | 14:34 | |
| gtema | #startmeeting keystone | 15:01 |
|---|---|---|
| opendevmeet | Meeting started Wed Oct 28 15:01:56 2026 UTC and is due to finish in 60 minutes. The chair is gtema. Information about MeetBot at http://wiki.debian.org/MeetBot. | 15:01 |
| opendevmeet | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 15:01 |
| opendevmeet | The meeting name has been set to 'keystone' | 15:01 |
| gtema | Reminder: This meeting takes place under the OpenInfra Foundation Code of Conduct | 15:02 |
| gtema | #link https://openinfra.dev/legal/code-of-conduct | 15:02 |
| gtema | #topic roll call | 15:02 |
| gtema | d34dh0r53, xek, dmendiza[m], dmendiza, mharley, jph, gtema, cardoe, deydra | 15:02 |
| d34dh0r53 | o/ | 15:02 |
| cardoe | o/ | 15:02 |
| gtema | xek was around today, so a gentle ping | 15:03 |
| gtema | and a new one for dmendiza | 15:04 |
| gtema | hm, ok, going on | 15:04 |
| gtema | #topic review past meeting work items | 15:04 |
| gtema | #link https://meetings.opendev.org/meetings/keystone/2026 | 15:04 |
| gtema | there were no action items logged last meeting | 15:05 |
| gtema | as such we can jump next into | 15:05 |
| gtema | #topic liaison updates | 15:05 |
| gtema | I do not have anything | 15:05 |
| gtema | assume there is nothing else from anybody | 15:06 |
| gtema | #topic specification | 15:06 |
| gtema | #topic Secuirty Compliance Testing (dmendiza) | 15:06 |
| gtema | #link https://review.opendev.org/c/openstack/devstack/+/957969 | 15:06 |
| gtema | no changes here since a while, last rebase happened 1 month ago | 15:07 |
| gtema | there is really work needed, change is so old and fails | 15:07 |
| gtema | hoping dmendiza will find time to work on it sometime | 15:08 |
| gtema | #topic User Specified Project/User UUIDs (dmendiza, alee) | 15:08 |
| gtema | I haven't seen any changes in specs since last reviews | 15:08 |
| gtema | going on | 15:09 |
| gtema | #topic keystone-rs (gtema) | 15:09 |
| gtema | there was another "warm" discussion in the TC about the resolution yesterday | 15:09 |
| gtema | in general some members would like to see the rest of Keystone team explicilty +1-ing the resolution to signal it is a team effort | 15:10 |
| gtema | on the project side itself I was spending now time doing deeper benchmarks against python code base to present the real figures into the resolution. Not sure it is going to be useful though | 15:11 |
| gtema | as such I am now working on the rewrite of the resolution to frame it on the less arguable requirements and explicitly talking about starting a new project rather then simply rewriting Keystone | 15:12 |
| gtema | this is the last try before I completely give up on that | 15:12 |
| gtema | on the technical side of keystone-rs I have nearly completed implementing oauth2 DPoP | 15:13 |
| gtema | service grants (trust replacement) are also nearly completed | 15:13 |
| gtema | and I started working on https://review.opendev.org/c/openstack/keystone-specs/+/1011888 which introduces an abstraction over the delegation so that OpenStack services can migrate only once on something that is plugable and allow them abstract from technical details of trusts and other means of delegations. Of course it comes at another "abstraction" level cost (in all means) | 15:15 |
| gtema | once we land the spec and "interface" implementation we can send out message to projects on what is the strategy with trusts | 15:16 |
| gtema | that's it on that topic | 15:16 |
| gtema | #topic open discussion | 15:16 |
| gtema | cardoe, unfortunately I had no chance to look into the federated system scope deeper due to other priorities. | 15:17 |
| cardoe | wanted to see if the keystoneauth typing improvements from stephenfin are okay with folks. | 15:17 |
| cardoe | no worries I understand | 15:17 |
| gtema | I do not think I manage it this week as well and next week there is another conference I am participating | 15:17 |
| gtema | typing is surely fine | 15:17 |
| gtema | unless we can really enforce typing in the runtime the benefit is not complete though | 15:18 |
| gtema | but everybody is aware of that | 15:18 |
| gtema | btw, my talk over the weekend about zero trust and our roadmap was very welcome by present german operators | 15:20 |
| gtema | everybody understands need and challenges though | 15:20 |
| gtema | but nobody was objecting showing support for the work | 15:20 |
| gtema | anything else for the open discussion? | 15:21 |
| gtema | #topic bug review | 15:21 |
| gtema | #link https://bugs.launchpad.net/keystone/?orderby=-id&start=0 | 15:22 |
| gtema | keystone has one new bug https://bugs.launchpad.net/keystone/+bug/2172068 | 15:22 |
| gtema | Greg already reviewed the referred patch, so it is in progress | 15:23 |
| gtema | all other deliverables do not have new bugs | 15:24 |
| gtema | but as everybody knows it doesn't mean we have nothing to do ;-) | 15:24 |
| gtema | with that we are actually done | 15:26 |
| gtema | #topic conclusion | 15:26 |
| gtema | thanks to those who participated | 15:26 |
| gtema | #endmeeting | 15:26 |
| opendevmeet | Meeting ended Wed Oct 28 15:26:56 2026 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 15:26 |
| opendevmeet | Minutes: https://meetings.opendev.org/meetings/keystone/2026/keystone.2026-10-28-15.01.html | 15:26 |
| opendevmeet | Minutes (text): https://meetings.opendev.org/meetings/keystone/2026/keystone.2026-10-28-15.01.txt | 15:26 |
| opendevmeet | Log: https://meetings.opendev.org/meetings/keystone/2026/keystone.2026-10-28-15.01.log.html | 15:26 |
| d34dh0r53 | thanks @gtem | 15:31 |
| d34dh0r53 | @gtema | 15:31 |
| gtema | :) welcome | 15:31 |
| d34dh0r53 | ElementX is not an improvement :/ | 15:31 |
| gtema | you are so right, after few days fighting with it to support encryption the UX looks very weird | 15:32 |
| opendevreview | Merged openstack/oslo.limit master: Capture outputs and logs https://review.opendev.org/c/openstack/oslo.limit/+/1012158 | 17:04 |
Generated by irclog2html.py 4.1.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!