*** yamamoto has joined #openstack-meeting-alt | 00:02 | |
*** markvoelker has quit IRC | 00:24 | |
*** _erlon_ has quit IRC | 00:29 | |
*** Adri2000 has quit IRC | 00:40 | |
*** Adri2000 has joined #openstack-meeting-alt | 00:45 | |
*** ttsiouts has joined #openstack-meeting-alt | 01:00 | |
*** yamamoto has quit IRC | 01:03 | |
*** bobmel has joined #openstack-meeting-alt | 01:05 | |
*** ttsiouts has quit IRC | 01:06 | |
*** bobmel has quit IRC | 01:09 | |
*** lseki has quit IRC | 01:10 | |
*** gyee has quit IRC | 01:19 | |
*** jamesmcarthur has quit IRC | 01:22 | |
*** jamesmcarthur has joined #openstack-meeting-alt | 01:31 | |
*** jamesmcarthur has quit IRC | 01:43 | |
*** jamesmcarthur has joined #openstack-meeting-alt | 01:44 | |
*** jamesmcarthur has quit IRC | 02:00 | |
*** jamesmcarthur has joined #openstack-meeting-alt | 02:00 | |
*** hongbin has joined #openstack-meeting-alt | 02:17 | |
*** yamahata has quit IRC | 02:24 | |
*** jamesmcarthur has quit IRC | 02:39 | |
*** jamesmcarthur has joined #openstack-meeting-alt | 02:40 | |
*** jamesmcarthur has quit IRC | 02:43 | |
*** jamesmcarthur has joined #openstack-meeting-alt | 02:43 | |
*** yamamoto has joined #openstack-meeting-alt | 02:51 | |
*** whoami-rajat has joined #openstack-meeting-alt | 03:14 | |
*** igordc has quit IRC | 03:39 | |
*** jamesmcarthur has quit IRC | 03:45 | |
*** jamesmcarthur has joined #openstack-meeting-alt | 03:46 | |
*** jamesmcarthur has quit IRC | 03:49 | |
*** jamesmcarthur_ has joined #openstack-meeting-alt | 03:49 | |
*** yamahata has joined #openstack-meeting-alt | 04:02 | |
*** igordc has joined #openstack-meeting-alt | 04:06 | |
*** bobmel has joined #openstack-meeting-alt | 04:06 | |
*** bobmel has quit IRC | 04:11 | |
*** hongbin has quit IRC | 04:17 | |
*** haleyb has quit IRC | 04:22 | |
*** baojg has quit IRC | 04:35 | |
*** baojg has joined #openstack-meeting-alt | 04:41 | |
*** bobmel has joined #openstack-meeting-alt | 04:47 | |
*** bobmel has quit IRC | 04:51 | |
*** lbragstad has quit IRC | 05:09 | |
*** radeks has joined #openstack-meeting-alt | 05:18 | |
*** bobmel has joined #openstack-meeting-alt | 05:27 | |
*** ccamacho has quit IRC | 05:28 | |
*** jamesmcarthur_ has quit IRC | 05:29 | |
*** bobmel has quit IRC | 05:31 | |
*** e0ne has joined #openstack-meeting-alt | 05:43 | |
*** jtomasek has joined #openstack-meeting-alt | 05:45 | |
*** belmoreira has joined #openstack-meeting-alt | 05:49 | |
*** igordc has quit IRC | 05:51 | |
*** bobmel has joined #openstack-meeting-alt | 05:58 | |
*** bobmel has quit IRC | 06:02 | |
*** kopecmartin|off is now known as kopecmartin | 06:07 | |
*** lpetrut has joined #openstack-meeting-alt | 06:10 | |
*** slaweq has joined #openstack-meeting-alt | 06:13 | |
*** bobmel has joined #openstack-meeting-alt | 06:30 | |
*** jbadiapa has joined #openstack-meeting-alt | 06:41 | |
*** yamamoto has quit IRC | 06:41 | |
*** belmoreira has quit IRC | 06:43 | |
*** rdopiera has joined #openstack-meeting-alt | 06:56 | |
*** ianychoi has quit IRC | 06:57 | |
*** ianychoi has joined #openstack-meeting-alt | 06:58 | |
*** yamamoto has joined #openstack-meeting-alt | 06:59 | |
*** ccamacho has joined #openstack-meeting-alt | 07:04 | |
*** ccamacho has quit IRC | 07:04 | |
*** ccamacho has joined #openstack-meeting-alt | 07:04 | |
*** ttsiouts has joined #openstack-meeting-alt | 07:09 | |
*** e0ne has quit IRC | 07:09 | |
*** _pewp_ has quit IRC | 07:16 | |
*** _pewp_ has joined #openstack-meeting-alt | 07:16 | |
*** slaweq has quit IRC | 07:16 | |
*** yamamoto has quit IRC | 07:20 | |
*** yamamoto has joined #openstack-meeting-alt | 07:21 | |
*** yamamoto has quit IRC | 07:30 | |
*** markvoelker has joined #openstack-meeting-alt | 07:32 | |
*** yamamoto has joined #openstack-meeting-alt | 07:33 | |
*** bobmel has quit IRC | 07:34 | |
*** ttsiouts has quit IRC | 07:34 | |
*** ttsiouts has joined #openstack-meeting-alt | 07:35 | |
*** yamamoto has quit IRC | 07:39 | |
*** ttsiouts has quit IRC | 07:39 | |
*** slaweq has joined #openstack-meeting-alt | 07:40 | |
*** bobmel has joined #openstack-meeting-alt | 07:42 | |
*** yamamoto has joined #openstack-meeting-alt | 07:42 | |
*** ttsiouts has joined #openstack-meeting-alt | 08:02 | |
*** markvoelker has quit IRC | 08:05 | |
*** tetsuro has joined #openstack-meeting-alt | 08:07 | |
*** priteau has joined #openstack-meeting-alt | 08:23 | |
*** e0ne has joined #openstack-meeting-alt | 08:32 | |
*** janki has joined #openstack-meeting-alt | 08:39 | |
*** tssurya has joined #openstack-meeting-alt | 08:40 | |
*** derekh has joined #openstack-meeting-alt | 08:44 | |
*** lennyb has quit IRC | 08:53 | |
*** ayoung has quit IRC | 08:54 | |
*** tesseract has joined #openstack-meeting-alt | 08:56 | |
priteau | #startmeeting blazar | 09:00 |
---|---|---|
openstack | Meeting started Tue Jun 4 09:00:07 2019 UTC and is due to finish in 60 minutes. The chair is priteau. Information about MeetBot at http://wiki.debian.org/MeetBot. | 09:00 |
openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 09:00 |
*** openstack changes topic to " (Meeting topic: blazar)" | 09:00 | |
openstack | The meeting name has been set to 'blazar' | 09:00 |
priteau | #topic Roll call | 09:00 |
*** openstack changes topic to "Roll call (Meeting topic: blazar)" | 09:00 | |
*** ttsiouts has quit IRC | 09:01 | |
*** ttsiouts has joined #openstack-meeting-alt | 09:02 | |
*** bertys has joined #openstack-meeting-alt | 09:02 | |
priteau | Good morning bertys | 09:03 |
bertys | o/ | 09:03 |
bertys | Hi all | 09:03 |
priteau | We're waiting for tetsuro and masahito | 09:03 |
tetsuro | o/ | 09:04 |
priteau | Hi tetsuro | 09:04 |
tetsuro | Thank you for the mention | 09:04 |
priteau | Do you know if masahito is planning to join today? | 09:04 |
tetsuro | I don't know... | 09:05 |
tetsuro | Let me see if he's on internal chat | 09:05 |
*** ttsiouts has quit IRC | 09:06 | |
*** rcernin has quit IRC | 09:07 | |
tetsuro | No, he does not respond. | 09:08 |
priteau | Thanks for trying | 09:08 |
priteau | Let's start then | 09:08 |
priteau | #topic Code review priorities | 09:08 |
*** openstack changes topic to "Code review priorities (Meeting topic: blazar)" | 09:08 | |
priteau | I'd like to highlight patches that require attention from the team | 09:09 |
priteau | Folks from NTT Data have submitted several interesting patches | 09:09 |
*** asmita has joined #openstack-meeting-alt | 09:10 | |
priteau | Some of these patches have been up for a while, but didn't get much attention due to focus on other areas for the Stein release. | 09:10 |
priteau | Hi asmita, we were just discussing your patches :-) | 09:10 |
asmita | Hi | 09:10 |
asmita | Thank you so much for your review. | 09:11 |
priteau | In particular I would like to get more reviews of these two: https://review.opendev.org/#/c/637140/ and https://review.opendev.org/#/c/655837/ | 09:11 |
*** lennyb has joined #openstack-meeting-alt | 09:12 | |
priteau | asmita: Sorry it took so long. I think they're good patches, just need a bit of improvement | 09:13 |
priteau | Did you try adding microversion support to python-blazarclient already? | 09:13 |
asmita | Thanks Pierre. I will work on your review comments. Not yet, haven't worked on adding microversion support in client. | 09:14 |
priteau | OK. I will try to test it with curl soon. | 09:15 |
tetsuro | Will have a look on the branch this week. Sorry to keep you waiting, asmita, but thank you very much | 09:17 |
priteau | asmita: Do you know if Neha Alhat will be able to revisit their request_id patch? | 09:18 |
asmita | Yes , we can add "OpenStack-API-Version:reservation 1.0" in headers of curl.. | 09:18 |
*** masahito has joined #openstack-meeting-alt | 09:19 | |
asmita | request_id patch will be addressed by me | 09:19 |
priteau | Great, thanks! | 09:19 |
asmita | Fixing the review comments of request _id patch is in progress | 09:19 |
priteau | Sorry for taking so long to review this patch. It wasn't a priority for Stein so I focused on other patches first. | 09:20 |
asmita | Tetsuro san, Thank you so much. | 09:20 |
asmita | Better late than never, Pierre:) | 09:21 |
*** masahito_ has joined #openstack-meeting-alt | 09:21 | |
masahito_ | hi. sorry late | 09:21 |
priteau | Hi masahito_ | 09:21 |
asmita | Hi masahito san | 09:21 |
masahito_ | hi priteau, asmita | 09:23 |
priteau | masahito_: We're discussing patches that should be reviewed as a priority. I highlighted the patches from NTT Data with topic bug/1740091 | 09:23 |
priteau | https://review.opendev.org/#/q/status:open+project:openstack/blazar+topic:bug/1740091 | 09:23 |
priteau | It would be good to get your input, as you know well the API layer. | 09:24 |
masahito_ | okay | 09:25 |
masahito_ | I'll check it. | 09:25 |
priteau | Are there other patches that you want to highlight for review? | 09:26 |
priteau | This one is an easy +2: https://review.opendev.org/#/c/662777/ | 09:29 |
priteau | Sorry, wrong link | 09:29 |
priteau | https://review.opendev.org/#/c/628469/ | 09:29 |
priteau | masahito_: Is https://review.opendev.org/#/c/606875/ something we should add with a microversion? | 09:30 |
masahito_ | Yes, if blazar supports microversion. | 09:32 |
priteau | That's what asmita implemented ;-) | 09:32 |
masahito_ | The asmita's patches support the microvesion from V1? | 09:32 |
asmita | Yes V1 | 09:33 |
masahito_ | I didn't read the previous discussion yet. One of my concern is should blazar support microversion from V1? or should start from V3? | 09:33 |
priteau | I think it's fine to add it to v1. If you don't provide the microversion header, you would get the regular v1 API | 09:34 |
masahito_ | okay, just for clarification. Is the regular v1 API latest microversion? or oldest version? | 09:36 |
priteau | oldest version | 09:36 |
priteau | see e.g. https://review.opendev.org/#/c/655838/1/blazar/api/v1/api_version_request.py | 09:37 |
masahito_ | got it. LGTM :-) | 09:38 |
*** panda is now known as panda|ruck | 09:38 | |
*** shilpasd has joined #openstack-meeting-alt | 09:38 | |
priteau | My understanding is that it is modelled after Nova's microversions | 09:38 |
asmita | yes exactly. | 09:39 |
asmita | Nova and Cinder have microversion support | 09:40 |
*** tesseract has quit IRC | 09:40 | |
priteau | asmita: If you have some time to implement the client support, it would be good to see how it all works together. | 09:41 |
asmita | Sure thing Pierre. | 09:41 |
priteau | Thank you | 09:42 |
asmita | I would like some suggestions regarding patch https://review.opendev.org/#/c/625783. | 09:42 |
asmita | any suggestion will help. | 09:43 |
priteau | I think masahito_ has a relevant comment here, specifically about the help message | 09:44 |
priteau | I would also say "reduce" is not the right term | 09:44 |
priteau | Why not use "defer" like for the lease start/end time? | 09:45 |
asmita | Right. | 09:46 |
priteau | I added it to Gerrit | 09:47 |
priteau | Any other patches that we should be focusing on? | 09:47 |
tetsuro | https://review.opendev.org/#/c/661680/ can go if no objection is made | 09:48 |
priteau | Good point, do we have a +2 from masahito_ or bertys? | 09:49 |
masahito_ | masahito_ is reading it | 09:50 |
*** mugsie_ is now known as mugsie | 09:52 | |
priteau | We're almost out of time. Let's continue discussion on Gerrit. | 09:54 |
priteau | #topic AOB | 09:54 |
*** openstack changes topic to "AOB (Meeting topic: blazar)" | 09:54 | |
priteau | Anything else to discuss today? | 09:54 |
asmita | For this patch: https://review.opendev.org/#/c/625783, masahito san is suggesting that: The 2 options should be a relative value from the previous before_end_date, but before_end_date is not in response of lease get api. so in that patch Neha Alhat has calculated from start date and end date. | 09:55 |
masahito_ | LGTM for the validation spec | 09:55 |
asmita | If we have to calculate it from previous before_end_date then we can return before_end_date in lease response under particular microversion. Kindly suggest. | 09:56 |
priteau | asmita: I'll have to take a look at the API again. Let's discuss on Gerrit. | 09:57 |
asmita | Sure thing. Thanks. | 09:57 |
shilpasd | priteau, Tetsuro, masahito_: thank you for spec review | 09:58 |
priteau | Thanks all for the good discussion today | 09:59 |
priteau | Talk to you next week and until then on Gerrit | 09:59 |
priteau | #endmeeting | 09:59 |
*** openstack changes topic to "OpenStack Meetings || https://wiki.openstack.org/wiki/Meetings/" | 09:59 | |
openstack | Meeting ended Tue Jun 4 09:59:38 2019 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 09:59 |
openstack | Minutes: http://eavesdrop.openstack.org/meetings/blazar/2019/blazar.2019-06-04-09.00.html | 09:59 |
openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/blazar/2019/blazar.2019-06-04-09.00.txt | 09:59 |
openstack | Log: http://eavesdrop.openstack.org/meetings/blazar/2019/blazar.2019-06-04-09.00.log.html | 09:59 |
masahito_ | thanks | 10:00 |
tetsuro | thanks | 10:00 |
asmita | Thanks | 10:01 |
*** markvoelker has joined #openstack-meeting-alt | 10:02 | |
*** masahito_ has quit IRC | 10:09 | |
*** shilpasd has left #openstack-meeting-alt | 10:17 | |
*** slaweq has quit IRC | 10:30 | |
*** baojg has quit IRC | 10:33 | |
*** asmita has quit IRC | 10:35 | |
*** markvoelker has quit IRC | 10:36 | |
*** yamamoto has quit IRC | 10:36 | |
*** yamamoto has joined #openstack-meeting-alt | 10:37 | |
*** yamamoto has quit IRC | 10:38 | |
*** baojg has joined #openstack-meeting-alt | 10:59 | |
*** slaweq has joined #openstack-meeting-alt | 11:01 | |
*** beagles has quit IRC | 11:03 | |
*** carloss has joined #openstack-meeting-alt | 11:09 | |
*** jcoufal has joined #openstack-meeting-alt | 11:16 | |
*** yamamoto has joined #openstack-meeting-alt | 11:21 | |
*** ttsiouts has joined #openstack-meeting-alt | 11:22 | |
*** raildo has joined #openstack-meeting-alt | 11:26 | |
*** janki has quit IRC | 11:30 | |
*** ttsiouts has quit IRC | 11:33 | |
*** markvoelker has joined #openstack-meeting-alt | 11:33 | |
*** ttsiouts has joined #openstack-meeting-alt | 11:34 | |
*** ttsiouts_ has joined #openstack-meeting-alt | 11:37 | |
*** dave-mccowan has joined #openstack-meeting-alt | 11:37 | |
*** ttsiouts has quit IRC | 11:38 | |
*** tetsuro has quit IRC | 11:39 | |
*** panda|ruck is now known as panda|ruck|eat | 11:45 | |
*** ccamacho has quit IRC | 11:45 | |
*** panda|ruck|eat is now known as panda|ruck | 11:51 | |
*** yamahata has quit IRC | 11:56 | |
*** yamamoto has quit IRC | 11:58 | |
*** yamamoto has joined #openstack-meeting-alt | 12:00 | |
*** b3nt_pin has joined #openstack-meeting-alt | 12:02 | |
*** baojg has quit IRC | 12:02 | |
*** baojg has joined #openstack-meeting-alt | 12:04 | |
*** markvoelker has quit IRC | 12:05 | |
*** yamamoto has quit IRC | 12:13 | |
*** mugsie is now known as mugsie_ | 12:18 | |
*** mugsie_ is now known as mugsie | 12:18 | |
*** masahito has quit IRC | 12:27 | |
*** priteau has quit IRC | 12:34 | |
*** panda|ruck is now known as panda|ruck|eat | 12:37 | |
*** yamamoto has joined #openstack-meeting-alt | 12:51 | |
*** panda|ruck|eat is now known as panda|ruck | 12:51 | |
*** priteau has joined #openstack-meeting-alt | 12:58 | |
*** yamamoto has quit IRC | 12:59 | |
*** yamamoto has joined #openstack-meeting-alt | 12:59 | |
*** jamesmcarthur has joined #openstack-meeting-alt | 13:00 | |
*** priteau has quit IRC | 13:04 | |
*** baojg has quit IRC | 13:09 | |
*** baojg has joined #openstack-meeting-alt | 13:10 | |
*** ttsiouts_ has quit IRC | 13:10 | |
*** ttsiouts has joined #openstack-meeting-alt | 13:11 | |
*** bertys has quit IRC | 13:12 | |
*** baojg has quit IRC | 13:14 | |
*** ttsiouts has quit IRC | 13:15 | |
*** diablo_rojo has joined #openstack-meeting-alt | 13:18 | |
*** b3nt_pin is now known as beagles | 13:19 | |
*** jamesmcarthur has quit IRC | 13:20 | |
*** jamesmcarthur has joined #openstack-meeting-alt | 13:20 | |
*** diablo_rojo has quit IRC | 13:22 | |
*** diablo_rojo has joined #openstack-meeting-alt | 13:23 | |
*** jamesmcarthur has quit IRC | 13:25 | |
*** ttsiouts has joined #openstack-meeting-alt | 13:26 | |
*** lbragstad has joined #openstack-meeting-alt | 13:32 | |
*** lpetrut has quit IRC | 13:43 | |
*** liuyulong has joined #openstack-meeting-alt | 13:53 | |
*** jrbalderrama has joined #openstack-meeting-alt | 13:58 | |
*** lseki has joined #openstack-meeting-alt | 14:01 | |
*** haleyb has joined #openstack-meeting-alt | 14:03 | |
*** munimeha1 has joined #openstack-meeting-alt | 14:04 | |
*** jcoufal_ has joined #openstack-meeting-alt | 14:09 | |
*** jcoufal has quit IRC | 14:13 | |
*** jcoufal_ has quit IRC | 14:31 | |
*** gagehugo has joined #openstack-meeting-alt | 14:32 | |
*** vishakha has joined #openstack-meeting-alt | 14:38 | |
*** yamamoto has quit IRC | 14:48 | |
*** yamamoto has joined #openstack-meeting-alt | 14:53 | |
*** yamamoto has quit IRC | 14:53 | |
*** yamamoto has joined #openstack-meeting-alt | 14:54 | |
*** yamamoto has quit IRC | 14:55 | |
*** yamamoto has joined #openstack-meeting-alt | 14:55 | |
*** yamamoto has quit IRC | 14:55 | |
*** lpetrut has joined #openstack-meeting-alt | 14:57 | |
*** jrbalderrama has quit IRC | 14:57 | |
*** jcoufal has joined #openstack-meeting-alt | 14:58 | |
*** bswartz has joined #openstack-meeting-alt | 15:04 | |
*** ttsiouts has quit IRC | 15:04 | |
*** ttsiouts has joined #openstack-meeting-alt | 15:05 | |
*** ttsiouts has quit IRC | 15:09 | |
*** jamesmcarthur has joined #openstack-meeting-alt | 15:11 | |
*** yamamoto has joined #openstack-meeting-alt | 15:15 | |
*** yamamoto has quit IRC | 15:15 | |
*** yamamoto has joined #openstack-meeting-alt | 15:15 | |
*** yamamoto has quit IRC | 15:20 | |
*** lpetrut has quit IRC | 15:29 | |
*** e0ne has quit IRC | 15:32 | |
*** gyee has joined #openstack-meeting-alt | 15:35 | |
*** yamahata has joined #openstack-meeting-alt | 15:39 | |
*** bnemec has quit IRC | 15:44 | |
*** bnemec has joined #openstack-meeting-alt | 15:46 | |
*** iyamahat has joined #openstack-meeting-alt | 15:46 | |
*** ccamacho has joined #openstack-meeting-alt | 15:57 | |
cmurphy | #startmeeting keystone | 16:00 |
openstack | Meeting started Tue Jun 4 16:00:56 2019 UTC and is due to finish in 60 minutes. The chair is cmurphy. Information about MeetBot at http://wiki.debian.org/MeetBot. | 16:00 |
openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 16:00 |
*** openstack changes topic to " (Meeting topic: keystone)" | 16:00 | |
cmurphy | o/ | 16:00 |
openstack | The meeting name has been set to 'keystone' | 16:00 |
knikolla | o/ | 16:01 |
gagehugo | o/ | 16:01 |
cmurphy | #link https://etherpad.openstack.org/p/keystone-weekly-meeting agenda | 16:01 |
vishakha | o/ | 16:01 |
lbragstad | o/ | 16:01 |
cmurphy | I don't have much for today's agenda...feel free to add things | 16:02 |
cmurphy | #topic announcements | 16:03 |
*** openstack changes topic to "announcements (Meeting topic: keystone)" | 16:03 | |
cmurphy | based on the polling, the best time to do our M-1 retrospective/check-in is pretty much the same times as the meetings, with an edge toward having it next week (which also gives me more time to prepare) | 16:04 |
cmurphy | so it's scheduled for June 11 at 15:00 | 16:04 |
cmurphy | i'll set up some kind of video conference call for it | 16:05 |
knikolla | cool | 16:05 |
gagehugo | 1500 utc? | 16:05 |
lbragstad | are we going to use trello? | 16:05 |
gagehugo | nvm I can't read | 16:05 |
cmurphy | gagehugo: yes utc | 16:06 |
gagehugo | lemme make a calender meeting before I forget | 16:06 |
cmurphy | lbragstad: probably, unless you have another tool you want to experiment with :) | 16:06 |
lbragstad | nope | 16:06 |
cmurphy | i'm happy to explore non-proprietary alternatives to trello if someone else wants to put in the effort to finding one :) | 16:08 |
cmurphy | any other questions/concerns about it? | 16:09 |
lbragstad | i don't have an alternative to propose | 16:09 |
kmalloc | o/ | 16:09 |
cmurphy | next announcement is that spec proposal freeze is this week | 16:11 |
kmalloc | eh, trello is fine for now | 16:11 |
cmurphy | afaict we're on track with that | 16:11 |
cmurphy | with what we were expecting from the ptg | 16:11 |
cmurphy | but it means we only have six weeks until the spec freeze date and 10 weeks until feature proposal freeze :) | 16:12 |
lbragstad | that's fast | 16:13 |
cmurphy | ikr | 16:13 |
cmurphy | #topic open reviews | 16:14 |
*** openstack changes topic to "open reviews (Meeting topic: keystone)" | 16:14 | |
cmurphy | anyone have open reviews they want to highlight? | 16:14 |
knikolla | i renamed and updated the "expiring users" spec | 16:15 |
cmurphy | i started reviewing it right before the meeting | 16:15 |
knikolla | #link https://review.opendev.org/#/c/604201/ | 16:15 |
cmurphy | knikolla: anything you want to highlight about the update? | 16:16 |
knikolla | sure | 16:16 |
knikolla | so the expiry is on the user now, and it gets refreshed only by logging in through the idp | 16:17 |
knikolla | the app cred doesn't expire, the user does. but the app cred will get invalidated if the user logs in with less roles than the app cred has. | 16:18 |
knikolla | regardless of user expiry. | 16:18 |
lbragstad | at the ptg - wasn't there a case to set expiry on local users, too? | 16:18 |
knikolla | i'm not sure. that wasn't in my notes. | 16:19 |
cmurphy | lbragstad: do you remember what the case was? | 16:19 |
kmalloc | no | 16:19 |
kmalloc | wait. | 16:19 |
lbragstad | i thought there was someone in the room that asked about that? | 16:19 |
lbragstad | i could be hallucinating | 16:19 |
cmurphy | there would be no way to do that in a backwards compatible way since the ttl is on the idp the user comes from | 16:19 |
kmalloc | so the expiry was strictly for federation granted groups and granted roles | 16:20 |
kmalloc | but no expiry on the local user itself. | 16:20 |
kmalloc | all federation originated grant information would be subject to the expiry | 16:20 |
kmalloc | but otherwise would look like a concrete role assignment until such time as it expires. | 16:20 |
kmalloc | and it can only be refreshed by logging in via the IDP. | 16:20 |
lbragstad | so expiration is only going to be an attribute of federated users? | 16:21 |
kmalloc | of federated conveyed grants | 16:21 |
lbragstad | it won't be a first-class attribute of users | 16:21 |
cmurphy | the spec right now is on the users, not the grants | 16:21 |
cmurphy | which was my understanding from the ptg | 16:21 |
lbragstad | same here | 16:21 |
kmalloc | it was supposed to be the addition of the group to the user and the grants. | 16:22 |
kmalloc | to the user | 16:22 |
kmalloc | the grants/inclusion to a group would have a TTL | 16:22 |
knikolla | discussion was also for disabling users, since federation leaves a lot of db cruft | 16:22 |
kmalloc | concrete user or otherwise | 16:22 |
kmalloc | so federated user or local user linked (future) to federation | 16:23 |
* kmalloc only remembers talking about the grant bits | 16:23 | |
knikolla | from an implementation perspective, i don't like the expire on role assignment bits too much. | 16:23 |
knikolla | but from a ux perspective it makes more sense. | 16:23 |
kmalloc | originally we talked just about the group inclusion | 16:24 |
kmalloc | because that would unblock group-conveyed roles to app creds | 16:24 |
kmalloc | but it was (at the end) brought up that non-group conveyed roles could/should also be covered | 16:24 |
knikolla | the idea behind my spec update, was that: expiring users, and allowing creation of app creds with non concrete roles (but check them every log in), would give the same result with less work. | 16:26 |
knikolla | (minus trusts) | 16:26 |
kmalloc | if we ever support linking federation to a concrete user for logins (not just mapped) | 16:27 |
kmalloc | that will need to be reworked. | 16:27 |
kmalloc | s/concrete/local user. | 16:27 |
*** lpetrut has joined #openstack-meeting-alt | 16:27 | |
cmurphy | we do support that | 16:27 |
kmalloc | e.g. MOC and Red Hat separate IDPs to the same knikolla, with different permissions | 16:27 |
knikolla | kmalloc: i think that is less important if we do spectroscope and do that there | 16:27 |
kmalloc | knikolla: i'm fine with either way | 16:28 |
kmalloc | just making sure it's clear what we're punting on if the user itself expires | 16:28 |
kmalloc | spectroscope is a ways out still | 16:28 |
cmurphy | spectroscope? | 16:28 |
kmalloc | cmurphy: identity broker project | 16:28 |
kmalloc | *service, whatever | 16:29 |
* cmurphy didn't know it had a name | 16:29 | |
kmalloc | it does now ;) | 16:29 |
*** jcoufal has quit IRC | 16:29 | |
knikolla | i'll have a look at the code/model changes required for expiring role assignment | 16:29 |
kmalloc | needed a name so i could start discussing it without saying "that identity broker service that does a thing" | 16:29 |
kmalloc | ;) | 16:29 |
*** jcoufal has joined #openstack-meeting-alt | 16:30 | |
knikolla | or group membership | 16:30 |
knikolla | cause it has to be on both. | 16:30 |
kmalloc | and like i said, i'm fine with punting on it. | 16:30 |
kmalloc | as long as we are clear on where the lines are drawn for support to the end consumers | 16:31 |
kmalloc | i don't want folks to be too confused on what functionality is provided internal to keystone | 16:31 |
knikolla | ++, i'll propose both approaches as different specs and we can have that discussion during the next meeting | 16:32 |
kmalloc | eh, don't do that | 16:32 |
kmalloc | evaluate and pick one | 16:32 |
kmalloc | offer the other option as an alternative to the spec | 16:32 |
kmalloc | (in the alternative section) | 16:32 |
kmalloc | we can re-spin the spec to swap the alternative if needed. | 16:32 |
knikolla | alright | 16:33 |
kmalloc | i trust you to make the choice that makes the most sense in the spec (implementation and ux wise) | 16:33 |
kmalloc | make sure to get cern's input in either case | 16:33 |
* knikolla brushes away impostor syndrome | 16:34 | |
knikolla | thanks for the input | 16:34 |
cmurphy | sounds good, thanks guys | 16:34 |
cmurphy | any other reviews people want to highlight? | 16:34 |
cmurphy | i have some patches to undo the app cred access rules config which had already merged https://review.opendev.org/#/q/status:open+project:openstack/keystone+branch:master+topic:undo-access-rules-config | 16:35 |
cmurphy | and the spec update for same https://review.opendev.org/661784 | 16:35 |
cmurphy | also some spec repo cleanup which were action items from the ptg https://review.opendev.org/658893 https://review.opendev.org/658894 https://review.opendev.org/659159 | 16:37 |
cmurphy | and one more is the vision reflection update https://review.opendev.org/662106 | 16:38 |
cmurphy | sounds like no other reviews to highlight | 16:40 |
cmurphy | #topic open discussion | 16:40 |
*** openstack changes topic to "open discussion (Meeting topic: keystone)" | 16:40 | |
cmurphy | no office hours after this since there aren't any topics | 16:40 |
cmurphy | if there's nothing else to discuss we can close early and get a few minutes back | 16:43 |
cmurphy | thanks everyone | 16:43 |
cmurphy | #endmeeting | 16:43 |
*** openstack changes topic to "OpenStack Meetings || https://wiki.openstack.org/wiki/Meetings/" | 16:43 | |
openstack | Meeting ended Tue Jun 4 16:43:27 2019 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 16:43 |
lbragstad | o/ | 16:43 |
openstack | Minutes: http://eavesdrop.openstack.org/meetings/keystone/2019/keystone.2019-06-04-16.00.html | 16:43 |
openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/keystone/2019/keystone.2019-06-04-16.00.txt | 16:43 |
openstack | Log: http://eavesdrop.openstack.org/meetings/keystone/2019/keystone.2019-06-04-16.00.log.html | 16:43 |
*** lpetrut has quit IRC | 16:55 | |
*** derekh has quit IRC | 17:06 | |
*** rdopiera has quit IRC | 17:17 | |
*** kopecmartin is now known as kopecmartin|off | 17:18 | |
*** whoami-rajat has quit IRC | 17:24 | |
*** yamahata has quit IRC | 17:27 | |
*** iyamahat has quit IRC | 17:27 | |
*** tssurya has quit IRC | 17:38 | |
*** iyamahat has joined #openstack-meeting-alt | 17:38 | |
*** gyee has quit IRC | 17:41 | |
*** iyamahat_ has joined #openstack-meeting-alt | 17:45 | |
*** jamesmcarthur has quit IRC | 17:46 | |
*** yamamoto has joined #openstack-meeting-alt | 17:47 | |
*** iyamahat has quit IRC | 17:49 | |
*** yamamoto has quit IRC | 17:52 | |
*** jcoufal has quit IRC | 17:57 | |
*** yamahata has joined #openstack-meeting-alt | 17:58 | |
*** jcoufal has joined #openstack-meeting-alt | 17:58 | |
*** brault has joined #openstack-meeting-alt | 18:05 | |
*** brault has quit IRC | 18:09 | |
*** diablo_rojo has quit IRC | 18:12 | |
*** whoami-rajat has joined #openstack-meeting-alt | 18:26 | |
*** diablo_rojo has joined #openstack-meeting-alt | 18:31 | |
*** e0ne has joined #openstack-meeting-alt | 18:54 | |
*** e0ne has quit IRC | 18:55 | |
*** vishakha has quit IRC | 19:05 | |
*** e0ne has joined #openstack-meeting-alt | 19:29 | |
*** e0ne has quit IRC | 19:30 | |
*** jcoufal has quit IRC | 19:33 | |
*** altlogbot_3 has joined #openstack-meeting-alt | 19:40 | |
*** jamesmcarthur has joined #openstack-meeting-alt | 19:42 | |
*** slaweq has quit IRC | 19:43 | |
*** slaweq has joined #openstack-meeting-alt | 19:45 | |
*** jamesmcarthur has quit IRC | 19:45 | |
*** jamesmcarthur has joined #openstack-meeting-alt | 19:45 | |
*** dave-mccowan has quit IRC | 19:55 | |
*** dave-mccowan has joined #openstack-meeting-alt | 20:01 | |
*** radeks_ has joined #openstack-meeting-alt | 20:06 | |
*** radeks has quit IRC | 20:09 | |
*** e0ne has joined #openstack-meeting-alt | 20:23 | |
*** dave-mccowan has quit IRC | 20:27 | |
*** e0ne has quit IRC | 20:41 | |
*** e0ne has joined #openstack-meeting-alt | 20:42 | |
*** e0ne has quit IRC | 20:43 | |
*** dklyle has quit IRC | 20:49 | |
*** dklyle has joined #openstack-meeting-alt | 20:49 | |
*** whoami-rajat has quit IRC | 20:54 | |
*** jamesmcarthur has quit IRC | 21:00 | |
*** jamesmcarthur has joined #openstack-meeting-alt | 21:00 | |
*** jamesmcarthur has quit IRC | 21:04 | |
*** jamesmcarthur has joined #openstack-meeting-alt | 21:14 | |
*** jamesmcarthur has quit IRC | 21:18 | |
*** jamesmcarthur has joined #openstack-meeting-alt | 21:20 | |
*** jamesmcarthur has quit IRC | 21:28 | |
*** raildo has quit IRC | 21:29 | |
*** munimeha1 has quit IRC | 21:39 | |
*** jamesmcarthur has joined #openstack-meeting-alt | 21:49 | |
*** yamamoto has joined #openstack-meeting-alt | 21:50 | |
*** jamesmcarthur has quit IRC | 21:51 | |
*** yamamoto has quit IRC | 21:55 | |
*** jamesmcarthur has joined #openstack-meeting-alt | 22:04 | |
*** jtomasek has quit IRC | 22:05 | |
*** slaweq has quit IRC | 22:07 | |
*** slaweq has joined #openstack-meeting-alt | 22:11 | |
*** jamesmcarthur has quit IRC | 22:16 | |
*** slaweq has quit IRC | 22:24 | |
*** slaweq has joined #openstack-meeting-alt | 22:34 | |
*** slaweq has quit IRC | 22:47 | |
*** dave-mccowan has joined #openstack-meeting-alt | 22:57 | |
*** radeks_ has quit IRC | 22:58 | |
*** slaweq has joined #openstack-meeting-alt | 23:04 | |
*** slaweq has quit IRC | 23:17 | |
*** rcernin has joined #openstack-meeting-alt | 23:20 | |
*** lseki has quit IRC | 23:22 | |
*** gyee has joined #openstack-meeting-alt | 23:29 | |
*** masahito has joined #openstack-meeting-alt | 23:41 | |
*** yamamoto has joined #openstack-meeting-alt | 23:41 | |
*** slaweq has joined #openstack-meeting-alt | 23:50 | |
*** lseki has joined #openstack-meeting-alt | 23:53 |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!