18:01:39 <stevemar> #startmeeting keystone
18:01:40 <openstack> Meeting started Tue Jan 24 18:01:39 2017 UTC and is due to finish in 60 minutes.  The chair is stevemar. Information about MeetBot at http://wiki.debian.org/MeetBot.
18:01:42 <openstack> Useful Commands: #action #agreed #help #info #idea #link #topic #startvote.
18:01:43 <nishaYadav> o/
18:01:43 <stevemar> ping ping agrebennikov, amakarov, annakoppad, antwash, ayoung, bknudson, breton, browne, chrisplo, crinkle, davechen, dolphm, dstanek, edmondsw, edtubill, gagehugo, gyee, henrynash, hrybacki, jamielennox, jaugustine, jgrassler, knikolla, lamt, lbragstad, kbaikov, ktychkova, morgan, nisha, nkinder, notmorgan, raildo, ravelar, rderose, rodrigods, roxanaghe, samueldmq, shaleh, spilla, srwilkers, StefanPaetowJisc,
18:01:43 <stevemar> stevemar, topol, portdirect, SamYaple
18:01:45 <gagehugo> o/
18:01:45 <openstack> The meeting name has been set to 'keystone'
18:01:45 <rodrigods> o/
18:01:47 <lbragstad> o/
18:01:49 <knikolla> \o/
18:01:51 <ayoung> Oyez
18:01:52 <morgan> o/
18:01:53 <spilla> \o
18:01:54 <lamt> o/
18:01:55 <rderose> o/
18:01:58 <samueldmq> howdy
18:01:59 <diablo_rojo> o/
18:02:00 <bknudson> hi
18:02:03 <stevemar> #agenda https://etherpad.openstack.org/p/keystone-weekly-meeting
18:02:06 <stevemar> #link https://etherpad.openstack.org/p/keystone-weekly-meeting
18:02:39 <stevemar> quickly do announcements i suppose
18:02:44 <stevemar> #topic announcements
18:02:59 <stevemar> today is the last week for ocata-3 and keystoneclient!
18:03:09 <stevemar> we'll be releasing both on thursday
18:03:30 <dstanek> o/
18:03:38 <stevemar> we've got a few major patches that need to get in
18:03:39 <crinkle> o/
18:03:43 <stevemar> https://review.openstack.org/#/c/409874/ (add domaind_id to user table)
18:03:44 <stevemar> https://review.openstack.org/#/c/423705/ (refactor shadow user tests)
18:03:44 <stevemar> https://review.openstack.org/#/c/423708/ (set domain for federated users)
18:03:45 <stevemar> https://review.openstack.org/#/c/403916/ (PCI: force password reset) (has +2) (and a -1)
18:04:01 <lbragstad> #link https://etherpad.openstack.org/p/keystone-sprint-to-ocata
18:04:05 <stevemar> https://review.openstack.org/#/c/424334/ (code defined resource specific options)
18:04:20 <stevemar> so it
18:04:29 <stevemar> so it's an all-hands on deck sort of week :)
18:04:41 <breton> i would like to ask to review one more -- https://review.openstack.org/#/c/415545/
18:05:05 <breton> or decide what we do with it, if https://review.openstack.org/#/c/423708/ doesn't go in
18:05:10 <stevemar> breton: add it to the etherpad
18:05:19 <rderose> breton: federated user will belong to a domain soon
18:05:44 <stevemar> i will release keystoneclient soon, no necessary work there
18:05:52 <morgan> rderose: replied to your comment(s)
18:06:00 <morgan> (whoopse meant that to be in -keystone)
18:06:03 <rderose> morgan: thanks
18:06:07 <lbragstad> spilla had a patch that needed to go in keystoneclient for the password expires query stuff
18:06:21 <spilla> https://review.openstack.org/#/c/423339/
18:06:23 <stevemar> lbragstad: add it to the etherpad too
18:06:28 <stevemar> i didn't see that one
18:06:42 <stevemar> thanks for the heads up
18:07:06 <stevemar> i'll postpone the ksc release until its in then
18:07:08 <morgan> ftr, i am very close to a -2 on the password expires on first use due to it lumping more fucntionality on a terrible config option.
18:07:21 <ayoung> spilla, +2 from me.  Nice
18:07:26 <stevemar> morgan: yeah, i think that's the most bumpable from me
18:07:29 <morgan> i have been working on a way to unwind it.
18:07:42 <morgan> but it depends on if we want to land the code i've been working on and do the deprecation
18:07:55 <morgan> i didn't -2 since it was possible to unwind it.
18:08:03 <ayoung> morgan, I can +2 that -2.
18:08:05 <ayoung> :)
18:08:13 <morgan> but if we're not i'd like to hold until pike
18:08:29 <morgan> ayoung: hehee
18:08:46 <rderose> morgan: I'm happy to deprecate and use the new options list if we can get that in
18:09:06 <stevemar> rderose: sounds like a plan
18:09:12 <morgan> yeah, lets see how we go on that front w/ dstanek and i'll solicit a review from ayoung too
18:09:23 <stevemar> morgan: happy to review
18:09:28 <morgan> stevemar: i assumed you would :P
18:09:52 <stevemar> #topic ptg
18:09:54 <ayoung> rderose, when did you get the OK to go ahead with Triggers?  I'm OK with it, in general, but I thought there was real pushback. Are we just ignoring that, or have we convince d the amorphous OTHERS that it  is the only way
18:10:10 <rderose> the okay or the force to use trigger?
18:10:11 <rderose> :)
18:10:17 <morgan> ayoung: didn't convince, we didn't -2 it
18:10:23 <ayoung> rderose, yes
18:10:25 <morgan> ayoung: they went forward because not enough push back
18:10:32 <ayoung> morgan, you still against?
18:10:36 <morgan> ayoung: oh well. not worth fighting it now
18:10:43 <morgan> i am, but it's landed and has prior art in newton
18:10:48 <knikolla> this takes 2 seconds to review https://review.openstack.org/#/c/424704/ and was slipped in by my previous change
18:10:49 <morgan> i'm not foinf to force the issue
18:10:55 <rderose> ayoung: since triggers was the agreed upon approach for zero downtime, had to implement
18:11:09 <ayoung> morgan, rderose OK..then I can get behind that patch stack
18:11:12 <morgan> triggers are still terrible imsho
18:11:24 <morgan> imnsho*
18:11:38 <ayoung> knikolla, +2A
18:12:14 <knikolla> ayoung: thanks!
18:12:22 <stevemar> okay, back to ptg
18:12:23 <ayoung> So...I am not going to the PTG.
18:12:30 <stevemar> anyone else not going?
18:12:39 <morgan> i need to book a plane ticket
18:12:42 <bknudson> I got approval to go so plan to be there
18:12:53 <browne> i'll be there
18:12:55 * breton waiting for visa
18:12:58 <bknudson> looks like it's in the same place where lbragstad got stabbed.
18:13:05 <lbragstad> bknudson ack
18:13:07 <rderose> ayoung: that sucks
18:13:11 <stevemar> bknudson: really? thats surprising to hear :)
18:13:13 <knikolla> i'm going
18:13:23 <stevemar> bknudson: (about the approval, not lbragstad's stabbing)
18:13:24 <lbragstad> the flashbacks have already started
18:13:29 <morgan> wait lbragstad was stabbed? wut did I miss?
18:13:32 * rodrigods not going
18:13:38 <stevemar> he actually didn't
18:13:40 <lbragstad> morgan it was terrible
18:13:40 <stevemar> rodrigods: :(
18:13:43 <morgan> lol
18:13:59 <rodrigods> ayoung was supposed to go
18:14:13 <stevemar> sounds like we'll have more people at ptg than the last summit
18:14:20 <ayoung> rodrigods, yeah, was hoping to hand on my ticket, too
18:14:21 <lbragstad> ++
18:14:29 <lbragstad> I have approval and my trip is booked, so i'll be there
18:14:57 <stevemar> #topic Pike PTG etherpad
18:15:00 <stevemar> lbragstad: you're up
18:15:09 <lbragstad> ok - this has been around for a few weeks
18:15:21 <lbragstad> #link https://etherpad.openstack.org/p/keystone-pike-ptg
18:15:23 <ayoung> link?
18:15:28 <lbragstad> ayoung ^
18:15:41 <ayoung> yeah, I'm either too fast or too slow
18:15:52 <lbragstad> want to make sure people have had the chance to absorb it before we start grouping things into buckets and start planning
18:16:08 * stevemar has to dial into org meeting, apparently there are 150 on the call
18:16:14 <armstrong> Hello is this the scientific-wg meeting?
18:16:20 <ayoung> armstrong, not yet
18:16:24 <ayoung> armstrong, keystone
18:16:26 <stevemar> armstrong: nope, keystone time
18:16:26 <lbragstad> armstrong nope - this is the keystone team meeting
18:16:38 <armstrong> ok thanks
18:16:59 <stevemar> lbragstad: i was going to wait until after this week to start adding to the etherpad
18:17:03 <lbragstad> so that's all I really have for that, just a reminder for folks to look into the etherpad and make sure we have everything we want to talk abou ton there
18:17:16 <lbragstad> stevemar cool
18:17:26 <lbragstad> stevemar that's it for me then
18:17:42 <samueldmq> I've added somehting about having a pool of ideas for outreachy/gsoc programs
18:17:53 <samueldmq> it'd be nice to have internships going from times to times :)
18:18:16 <nishaYadav> samueldmq, oh, that's nice
18:18:24 <stevemar> lbragstad: there was https://etherpad.openstack.org/p/keystone-ocata-summit-brainstorm from last summit
18:18:30 <samueldmq> nishaYadav: :)
18:18:36 <stevemar> we could also look at the existing backlog
18:18:57 <lbragstad> stevemar ++
18:19:18 <stevemar> lbragstad: done on this topic?
18:19:24 <lbragstad> stevemar I can take an action item to parse that and add backlogged topics from the last summit
18:19:25 <lbragstad> stevemar yeah
18:19:45 <stevemar> #topic Should we move to storyboard
18:19:51 <stevemar> lbragstad: your item again
18:19:58 <lbragstad> whoo!
18:20:17 <dstanek> ++ to storyboard
18:20:22 <morgan> please not fungi and my comment
18:20:23 <lbragstad> diablo_rojo pinged me with a bunch of information about story board
18:20:35 <morgan> it is highly recomended we do not move until the minimum VMT requirements are met
18:20:39 <morgan> since keystone is VMT managed
18:20:42 <lbragstad> morgan sure - that's valid
18:20:56 <morgan> i am a huge fan of storyboard over LP provided the VMT minimums are met
18:21:01 <morgan> for keystone
18:21:11 <fungi> yeah, i believe the point of diablo_rojo's questions was to ferret out whether there are any additional blockers the keystone team might have above and beyond other already identified blockers
18:21:14 <lbragstad> the main thing diablo_rojo was asking in his note was if there was anything else we could think of that needs to be added to storyboard
18:21:20 <diablo_rojo> It would be awesome if you all could take a look to see if there is anything else that keystone needs besides VMT support :)
18:21:23 <lbragstad> fungi ++
18:21:26 <samueldmq> what is VMT ?
18:21:32 <morgan> vulnerability management team
18:21:33 <lbragstad> vulnerability management team
18:21:37 <lbragstad> (ah!)
18:21:38 <samueldmq> thanks
18:21:44 <topol> o/
18:22:01 <lbragstad> so - i spent a bunch of time playing with it last week
18:22:10 <lbragstad> i encourage others to do the same
18:22:19 <morgan> diablo_rojo: iow, i personally don't see anything needed for keystone besides the features the VMT requires, but i'll defer to other cores
18:22:29 <lbragstad> also there is a bunch of good resources in the etherpad
18:22:29 <samueldmq> lbragstad: link ?
18:22:33 <lbragstad> #link https://storyboard-blog.sotk.co.uk/why-storyboard-for-openstack.html
18:22:36 <stevemar> same opinion morgan
18:22:58 <knikolla> i generally like new shiny toys
18:23:09 <diablo_rojo> morgan, noted :)
18:23:14 <lbragstad> #link sandbox https://storyboard-dev.openstack.org/#!/board/list
18:23:28 <fungi> yeah, we need people getting familiar with it. for projects like keystone i expect the main determining factor will be that you share quite a few lp bugs with other teams (nova, oslo, cinder, whatever) and will need to wait until you're all ready to migrate together
18:23:33 <lbragstad> fungi diablo_rojo would keystone be migrated to the existing deployment here - https://storyboard.openstack.org/#!/story/2000814 ?
18:23:40 <fungi> lbragstad: yes
18:23:48 <lbragstad> fungi cool
18:24:09 <diablo_rojo> fungi,  beat me to it :)
18:24:18 <fungi> other more tangential/ancillary teams are free to start migrating sooner since they have less overlap
18:24:31 <lbragstad> if anyone decides to play with it and has feedback - feel free to pass it along to me and I can aggregate the notes
18:24:32 <ayoung> Just do it
18:24:46 <ayoung> we are never going to close 968696 anyway
18:24:48 <fungi> infra migrated a couple years ago and have been dogfooding it for some time already, to increasing levels of success
18:24:50 <nishaYadav> lbragstad, will try
18:25:01 <knikolla> fungi: unrelated question. is it available for non-big-tent teams?
18:25:06 <fungi> knikolla: yes
18:25:31 <diablo_rojo> lbragstad, that would be a huge help if you wanna be my point of contact :)
18:25:36 <lbragstad> fwiw - i think the concept of worklists is going to be super nice
18:25:55 <samueldmq> so the idea is that we partially migrate for next cycle ?
18:26:06 <lbragstad> (a worklist for a release for example)
18:26:07 <samueldmq> keeping VMT related bugs in LP ?
18:26:23 <lbragstad> diablo_rojo yeah - i can do that
18:26:30 <ayoung> what is the relationship going to be between Specs and Storyboard?
18:27:00 <diablo_rojo> samueldmq, I would think you would want to wait so that you aren't using two tools at once, but I would think that would be okay. fungi?
18:27:14 <morgan> ayoung: hopefully stories can encompass specs
18:27:25 <morgan> but i am unsure if that is really the case
18:27:33 <fungi> yeah, how to migrate private lp bugs is still up in the air since the migration tool isn't able to query them. sb does support creating private stories already for quite some time
18:27:33 <ayoung> morgan, so we are not going to submit them via Gerrit once we migrate?
18:27:36 <lbragstad> I believe we will create a story in storyboard for a feature, but the description can still ink to the detailed specification in the keystone-specs repo (I could be corrected by fungi or diablo_rojo though)
18:27:45 <morgan> i would hope that would be the case ayoung
18:27:50 <samueldmq> diablo_rojo: that makes sense. is there support for it upstream ? (is it just anything to be enabled in OpenStack's storyboad)
18:27:56 <samueldmq> or does it need to be implemented yet ?
18:27:58 <morgan> long term i would like to see the gerrit reviews drop
18:28:02 <morgan> and just use stories
18:28:10 <morgan> but there will be transition regardless
18:28:16 <fungi> lbragstad: yep, and for infra specs we create a specs repo task in the story as teh first task
18:28:19 <ayoung> Gah...can't we use one tool. lbragstad lets lock the git repo, and just use storyboard.  Gerrit is tough way to edit what should be collaborative documents
18:28:35 <ayoung> blueprints die, too
18:28:39 <morgan> fungi: i would like to just work so there is no longer a keystone-specs repo
18:28:41 <morgan> fungi: tbh
18:28:49 <lbragstad> fungi do you break stories across worklists then (per release, backlog, accepted, etc..)?
18:28:51 <morgan> fungi: it would be nice if stories could fill that need
18:29:04 <morgan> diablo_rojo: ^ i can talk with you on specifics for that
18:29:16 * morgan has always hated needing multiple (3?) methods of documenting work
18:29:20 <fungi> right, infra's "feature" stories are very hollow. they just link to/from a spec and then gerrit auto-updates the tasks in the story as they're implemented for tracking purposes
18:29:28 <morgan> fungi: ah cool
18:29:51 <ayoung> OK...close out Ocata with existing toolchain, all Pike+ work on storyboard?  We ready for it?
18:29:52 <lbragstad> we'd have to have some way to denote state in a story for "accepted" or "bumped" specs
18:30:16 <fungi> infra's use of worklists and boards has been fairly ad-hoc so far. they're getting used more heavily for the zuul v3/nodepool v1 implementation work for example
18:30:18 <morgan> fungi: i'd like to see that inverted personally. i really dislike the specs-repo. gerrit is a bad tool for that.. but SB can grow to fill that need eventually
18:30:19 <diablo_rojo> lbragstad, I think you could just move the story to a different worklist
18:30:32 <stevemar> fungi: is there tooling to move existing bugs and bps to storyboard?
18:30:35 <lbragstad> diablo_rojo oh - good point (that reminds me of trello)
18:30:38 <diablo_rojo> morgan, definitely a direction it could take.
18:30:45 <morgan> to begin with best bet is going to be move bugs/work -> SB
18:30:49 <diablo_rojo> lbragstad, I <3 trello :)
18:30:50 <morgan> and keep specs repo for now
18:30:52 <fungi> stevemar: yes, we have an import script for lp bugs, though not for blueprints i don't think
18:31:02 <lbragstad> diablo_rojo so does dstanek!
18:31:08 <morgan> fungi: bps can die in keystone
18:31:14 <dstanek> :-)
18:31:16 <morgan> as long as we do the switch at a release marker
18:31:28 <morgan> i'm ok with bps being left behind
18:31:38 <morgan> (we tend to close non-active ones now)
18:31:45 <stevemar> morgan: some BPs are actually good ideas
18:31:48 <morgan> and use them just as a "hey X patch is associated to them"
18:32:06 <stevemar> we would need to vet each of the open BPs (there are about 75 i think)
18:32:07 <morgan> stevemar: manual resubmission (those are far anf few w/o a spec already)
18:32:19 <fungi> storyboard's boards feature is fairly basic trello-like kanban, with the addition that you can have cards automatically transition between colum,ns as the story tasks change state (usually triggered automatically by changes being proposed to or merging in gerrit)
18:32:30 <fungi> if that's of interest
18:32:42 <lbragstad> fungi I like that
18:32:59 <diablo_rojo> A much nicer organization and flow than lp
18:33:47 <nishaYadav> ooh
18:33:52 <fungi> the subteam in infra working on zuul v3 have been doing more and more with automatic worklists and boards, so they can probably provide some better evaluations of what it's like for real-world use. i haven't done much but skim them so far
18:34:58 <lbragstad> is the api documented somewhere?
18:35:19 <stevemar> well OK, sounds like we can move to LP maybe during the PTG timeframe (before ideally)
18:35:22 <lbragstad> i know various folks here have their own tools for pulling info from launchpad, so those would need to be rewritten to talk to storyboard
18:35:48 <stevemar> will LP be open for people to report bugs? like users and operator?
18:36:00 <lbragstad> LP or storyboard?
18:36:06 <stevemar> i can't imagine this change will go over well with them :)
18:36:06 <diablo_rojo> stevemar, they will be able to report them in SB
18:36:10 <samueldmq> stevemar: lbragstad perhaps we could use one of the Fridays/sprints for bugs for the initialmigration ?
18:36:11 <lbragstad> or are you talking about after the migration?
18:36:11 <Zara> lbragstad: it is documented, will get link now (hi!)
18:36:20 <lbragstad> Zara thanks!
18:36:25 <stevemar> lbragstad: talking about after
18:36:32 <lbragstad> stevemar ah - good question
18:36:33 <Zara> lbragstad: http://docs.openstack.org/infra/storyboard/webapi/v1.html
18:36:39 <diablo_rojo> Zara, the queen of storyboard :)
18:37:27 <stevemar> diablo_rojo: have you received feedback from ops and users about the SB move?
18:37:34 <stevemar> will it require a new id?
18:37:40 <Zara> diablo_rojo: hah, I only know where the docs are
18:37:52 <lbragstad> right now it bases auth on ubuntu ONe
18:38:02 <diablo_rojo> stevemar, Not a whole lot yet, thats another thing that's on my todo list :)
18:38:09 <lbragstad> but it sounds like we can switch that to the OpenStackID auth system
18:38:13 <bknudson> doesn't even use keystone for authentication.
18:38:16 <diablo_rojo> stevemar, it should be the same id
18:38:25 <stevemar> diablo_rojo: okay cool
18:38:29 <samueldmq> bknudson ++
18:38:35 <lbragstad> bknudson good?
18:38:38 <lbragstad> ;)
18:38:40 <diablo_rojo> lbragstad, yep OpenStackID will rule all
18:38:48 <stevemar> i just don't want our consumers thinking this is yet-another-openstack-tooling-change :P
18:38:58 <stevemar> unless theres a large benefit
18:39:09 <ayoung> diablo_rojo, has it been reimplemented in a reasonable IdP yet?
18:39:12 <fungi> right, auth will initially be openid via lp because we need to keep account parity when we're importing bugs, but after the import is done teh plan is to switch it to openstackid.org authentication
18:39:26 <diablo_rojo> stevemar, understandable. I think this change has been a long time coming. There are a lot of things that SB sets out to fix that LP struggled with.
18:39:29 <lbragstad> i think ttx does a good job explaining that in #link https://storyboard-blog.sotk.co.uk/why-storyboard-for-openstack.html
18:39:43 <diablo_rojo> ayoung, IdP ?
18:39:52 <samueldmq> fungi: nice, makes sense
18:39:56 <stevemar> my worry is that folks will bail on filing a bug because they dont want to do a bit of extra work
18:40:03 <ayoung> diablo_rojo, openstackid was using some proprietary 3rd party hard to work with implementation
18:40:10 <stevemar> we already have a hard time getting feedback from users and operators
18:40:10 <diablo_rojo> lbragstad, stevemar yes, I plan on pointing out that article.
18:40:11 <ayoung> IdP is Identity Provider
18:40:32 <diablo_rojo> stevemar, I want to do a talk on storyboard at the summit and then again at the ops meetup
18:40:46 <stevemar> diablo_rojo: okie :)
18:40:50 <fungi> diablo_rojo: ayoung: there is a separate but related effort to reimplement the openid provider piece of openstackid with ipsilon, though that effort is currently stalling for available interested devs
18:41:32 <ayoung> fungi, Yay!
18:41:49 <fungi> there is a poc ipsilon server up with some minimal glue to query the openstackid backend, and an emerging puppet module for deploying it, but that's as far as it's gotten
18:42:15 <diablo_rojo> ayoung, so if you are interested in a little bit of work on the side we would love you to get involved ;)
18:42:17 <stevemar> so many bookmarks will be deleted :|
18:42:32 <fungi> the idea there being that we would do a seamless transition for the openid provider interface when the time comes, so that effort can proceed in parallel
18:43:12 <ayoung> diablo_rojo, ask nkinder.
18:44:18 <diablo_rojo> ayoung, ha ha okay :)
18:45:24 <stevemar> alright, i think we can move to open discussion
18:45:30 <stevemar> #topic open discussion
18:45:35 <rderose> please welcome antwash_ (anthony), he was recently added to our team from qa (intel). he'll now be 100% on keytone.
18:45:48 <lbragstad> whoop
18:45:51 <stevemar> ohhh just when i thought we were going to end early
18:45:55 <stevemar> hi antwash_ !
18:45:58 <rderose> any good hazing ideas?
18:46:03 <rderose> :)
18:46:16 <samueldmq> rderose: nice!
18:46:20 <lbragstad> i could come up with a few
18:46:21 <antwash_> haha -- thanks for the intro ron! Hey everyone -- very happy to be apart of the team :)
18:46:23 <samueldmq> antwash_:  welcome aboard!
18:46:27 <stevemar> antwash_: it's customary to buy the incoming and outgoing ptl a beer at the ptg/summit -- just saying
18:46:28 <breton> i want to discuss https://pp.vk.me/c837734/v837734937/1d76a/ZYkP7Ez5HpU.jpg
18:46:32 <breton> oh wow
18:46:34 <breton> not this
18:46:40 <stevemar> lol
18:46:41 <breton> https://review.openstack.org/#/c/415545/
18:46:43 <breton> this
18:46:57 <breton> (don't pin that visa photo for darts)
18:47:05 <rderose> :)
18:47:10 <stevemar> breton: you look more aerodynamic
18:47:11 <morgan> breton: nice!
18:47:14 <antwash_> stevemar : haha I got you a nice cold one promise
18:47:49 <rderose> breton: what happened!
18:47:56 <stevemar> breton: if rderose's patch merges, it'll add domain id to federated users, do we still need yours?
18:48:05 <rderose> breton: how much did you pay for that haircut?
18:48:14 <stevemar> rderose: he clearly lost a bet
18:48:22 <breton> stevemar: yes. Federated users still need to be in the groups
18:48:28 <samueldmq> stevemar: "breton: you look more aerodynamic" this is the best comment ever possible :-)
18:48:37 <breton> rderose: $10 :p
18:48:46 <rderose> haha you paid too much
18:48:48 <ayoung> Trusts for Federated users should be solved by rderose 's current efforts
18:48:49 <lbragstad> $free.99
18:49:11 <ayoung> breton, is there anything you need beyond that?
18:49:42 <ayoung> you are adding groups to the identity via mapped...I think that is OK
18:49:44 <breton> ayoung: no, only add federated users to groups when they authenticate
18:50:11 <ayoung> breton, you might need to be forgiving there:
18:50:21 <ayoung> if groups don't exist...I know that has come up
18:50:35 <stevemar> breton: got it, that makes sense
18:50:42 <breton> i would rebase the patch on rderose's, but i am not sure that it will get in
18:50:51 <ayoung> I think https://review.openstack.org/#/c/415545/2/keystone/identity/core.py  will be superceded by rderose work
18:50:55 <ayoung> you will always have a domain
18:51:15 <breton> i agree
18:51:24 <stevemar> breton: i will release ocata with rderose's patch
18:51:25 <breton> i just want the patch to get merged in Ocata
18:51:26 <ayoung> breton, so rebase on his changes, please
18:51:41 <stevemar> breton: we won't release ocata without rderose's patch
18:51:47 <breton> (and backport it to newton)
18:52:02 <breton> ok, sounds good. Will rebase.
18:52:05 <stevemar> breton: backporting won't happen since it depends no a migration :9
18:52:07 <ayoung> ++
18:52:26 <breton> stevemar: can we backport with https://review.openstack.org/#/c/415545/2/keystone/identity/core.py ?
18:52:52 <breton> the patch actuall works even for Mitaka
18:52:58 <ayoung> breton, oh
18:53:33 <breton> people are now testing it for a customer who ran into the issue
18:53:39 <stevemar> breton: eh... you're going to be doing that same check all over the place
18:53:45 <stevemar> even in clients
18:54:54 <stevemar> i don't think its a good backport candidate
18:54:54 <breton> ok, i am good with what we have decided for the main patch. I will rebase and then will propose a backport and we'll talk about it
18:55:06 <stevemar> okay with me
18:55:27 <breton> (and sorry for the photo. stupid ctrl+v)
18:55:36 <stevemar> :)
18:55:40 <rderose> :)
18:55:41 <breton> (aerodynamics is cool indeed)
18:55:42 <stevemar> it gave us some lulz
18:55:42 <rderose> hilarious
18:55:59 <stevemar> only because we were not expecting it :)
18:56:30 <stevemar> anyone else?
18:56:49 <stevemar> antwash_: it's also customary that the outgoing ptl's beer be served in a pitcher
18:57:17 <stevemar> ok ok, enough with the jokes stevemar
18:57:24 <stevemar> lets wrap up ocata and ship it!
18:57:40 <stevemar> thanks for coming everyone ! and for your hard work that will happen this week :)
18:57:44 <lbragstad> ++
18:57:49 <knikolla> \o/
18:57:51 <stevemar> #endmeeting