Friday, 2023-02-17

*** dasm|off is now known as dasm14:11
fungirosmaita: i tried to reply to your message about openinfraid as an openid provider, but your mail host apparently doesn't want to allow me to send things to you (bounce says "Our system has detected that this message is likely unsolicited mail."), not sure if adding me as a known sender in your address book would help, or we could switch to using a mailing list to talk about translations17:22
fungiinfrastructure work17:22
rosmaitafungi: checking to see where i sent that from, sorry about that17:23
fungirosmaita: seems to be gmail deciding it doesn't like me today17:24
clarkbfungi: do you have dmarc and dkim set up?17:24
fungidefinitely not17:25
clarkbI suspect that is the issue. I do and gmail accepts email from my domain17:25
fungiif those have become requirements for talking to people who use gmail, i'll just start rejecting messages from gmail at my mailserver to save myself the hassle17:25
fungii don't need to have private conversations with anyone that badly17:26
dansmithdmarc and dkim are enough to get it to accept your mail, not enough to get it to actually land in an inbox17:30
dansmithfriggin gmail man17:30
dansmithmeanwhile I get tons of real spam from gmail accounts17:30
* dansmith shakes his fist17:30
clarkbdansmith: ya the rate of spam has gone way up. I suspect that some of these gmail behaviors are in response to that, but it is a losing battle17:30
dansmithindeed it is17:31
clarkb*rate of spam that doesn't get identified as spam17:31
dansmithI feel like gmail will become an island at some point, and you'll need a gmail account to email gmail people17:31
rosmaitafungi: not sure what the deal is, you show up in my contacts on that account, and it lists a bunch of "recent interactions"17:31
rosmaitai would say use my red hat email, but that's actually ... gmail17:32
fungino worries, i can just reply here...17:32
rosmaitasure17:32
dansmithsomething about a car extended warranty has expired17:32
fungirosmaita: Seems like the social_core.* things are Weblate's drivers for different identity providers. Maybe we can get a better idea of what they're asking for if we can find the relevant part of Weblate's source code.17:33
rosmaitaok, i can look for that17:34
fungirosmaita: As far as using OpenInfraID as an identity provider, we should only need to set https://id.openinfra.dev/accounts/openid2 as the endpoint, like we do here: https://opendev.org/opendev/system-config/src/branch/master/inventory/service/group_vars/refstack.yaml#L217:34
fungirosmaita: I'm checking with the OpenInfraID maintainers to find out if there's any additional information Weblate would need, but if all else fails we can try to put the Weblate and OpenInfraID people in touch with each other rather than having you and us as two useless hops in between.17:34
rosmaitaok, thanks, that sounds good17:35
fungirosmaita: also clarkb surmises that when weblate says "openid" they actually mean "oauth" instead, which does require registering an application to the oauth endpoint and possibly other additional steps, but all openid integration should need is the endpoint in theory17:35
clarkbya thats based on their need for secrets17:36
rosmaitai think they can do both, so maybe benjamin was confused about what i wanted17:36
fungiright, as far as i know we don't have any need for group management or authorization, we just want users to be able to log in with an identity provided by id.openinfra.dev via openid2 protocol17:43
rosmaitafungi: looks like the backend drivers are here (in a different project): https://github.com/python-social-auth/social-core/tree/master/social_core/backends17:54
rosmaitaalso, there are 2 openstack related ones:17:54
rosmaitahttps://github.com/python-social-auth/social-core/blob/master/social_core/backends/openstack.py17:54
rosmaitahttps://github.com/python-social-auth/social-core/blob/master/social_core/backends/openstackdev.py17:54
rosmaitaguess we need to update (or remove) those and add one for opendev?17:54
rosmaita(i'm off to walk the dog, grab lunch ... bbiab)17:56
fungioh neat17:59
fungirosmaita: yes, it would be great to get that library updated18:00
fungilooks like at least one of the weblate devs contributes to that project18:01
fungitechnically the openstackid.org url is being left in place for a transitional period to allow users to update, so may not make sense to remove it from python-social-auth/social-core yet18:03
fungithough openstackid-dev.openstack.org no longer exists (but looks like we forgot to clean up the dns records so now it takes you to some other rackspace customer... i'll fix)18:04
fungiand deleted18:07
gmanntc-members: need one more vote in this https://review.opendev.org/c/openstack/governance/+/87223318:12
noonedeadpunkIt's quite TL;DR thing...18:12
noonedeadpunkWill need to dedicate time for reading this18:13
fungiif you read the ones for 2022 you can probably just diff them18:15
gmannnoonedeadpunk: it is same as of 2022 with some nits. but sure, i can hold this for next week 18:16
gmannnot urgent 18:16
dansmithI've had it open since yesterday's ping, but I keep getting distracted because it's a wall of text :)18:18
dansmithlol, the diff is tiny18:19
dansmithbasically removing Puppet :D18:19
dansmith(of the investment one I mean)18:19
gmannyeah I am adding the same opportunities of 202218:19
dansmithI guess if I had read the commit message I would have known18:20
noonedeadpunkWell, I can't say I read thoroughly last year either :)18:26
gmannnoonedeadpunk: no worry, I will keep it open for you by early next week. 18:31
gmanntc-members: need one more review on this project-update https://review.opendev.org/c/openstack/governance/+/87283721:03
JayFlookin21:04
JayFalso, I'm back and better, thank you for the concern during the meeting o/21:04
dansmithdibe21:04
JayFmodern medicine is a marvel21:04
dansmithalso, done21:04
gmannthanks21:04
gmannJayF: glad to know.21:04
opendevreviewMerged openstack/governance master: Step 3: Retire repo from the Governance repo - Retire xstatic-font-awesome  https://review.opendev.org/c/openstack/governance/+/87283721:36

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!