17:00:36 #startmeeting keystone 17:00:37 Meeting started Tue May 26 17:00:36 2020 UTC and is due to finish in 60 minutes. The chair is cmurphy. Information about MeetBot at http://wiki.debian.org/MeetBot. 17:00:39 Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. 17:00:41 The meeting name has been set to 'keystone' 17:00:42 o/ 17:00:46 #link https://etherpad.opendev.org/p/keystone-weekly-meeting agenda 17:01:02 good morning/good evening 17:01:14 good morning 17:01:21 Oh hey, it's Tuesday. :-) 17:01:27 Not Friday... 17:01:42 bnemec: this is disappointing news 17:02:07 +1 17:03:24 o/ 17:05:31 let's get started 17:05:39 #topic PTG next week 17:06:05 all of a sudden it's june 17:06:43 the schedule and more information can be found on https://www.openstack.org/ptg/ 17:06:47 #link https://www.openstack.org/ptg/ 17:07:05 we're signed up for two sessions on thursday and friday 17:07:32 i'm not sure offhand if there are other cross-project sessions that we should plan for 17:08:07 #link https://etherpad.opendev.org/p/yvr-ptg-keystone PTG etherpad 17:09:08 our topic brainstorm is ^ we may want to turn it into a more structured schedule, will check in with knikolla on that 17:09:28 ++ 17:10:00 anyone have questions or thoughts about the ptg? 17:10:12 The only cross-project stuff I can think of is oslo.limit for Glance and policy in Nova. 17:11:07 ++ 17:11:07 Although I might be thinking of the healthchecks in Nova, which wouldn't be relevant to Keystone. 17:11:33 I thought there were still some open policy discussions too though. 17:12:27 gmann: raildo are you planning on doing any policy sync-up next week? 17:13:19 cmurphy: i was thinking to start the biweekly meeting for that and get projects to be more active 17:13:42 gmann, cmurphy yeah, I was thinking about today, we need to sync about the PTG needs for this topic 17:14:16 for PTG, we have one cross sesison with nova/oslo 17:14:26 * lbragstad walks in late 17:14:42 mainly for policy.json which came up during nova policy work and endup breaking operators 17:14:58 gmann, I added a topic on barbican etherpad as well 17:15:00 may be bnemec and gibi will figure out the slot for that 17:15:10 raildo: +1 17:15:24 that is something we should solve before more projects start implementing that 17:15:31 👀 17:15:49 gmann, how is your time slots for thursday? is it a good day for you? 17:15:55 * cmurphy can tell redrobot highlights on "barbican" 17:16:29 Haha, yup. Also "castellan" 😁 17:17:33 raildo: thursday i have nova form 13-15 i think same as baribian initial slot 17:17:49 13-15 UTC 17:18:08 gmann: raildo you can send a notice to the mailing list when you figure out a good time, i'll keep my eye on it and try to join if i can 17:18:52 sure 17:19:14 gmann, I'm free for now on on Thursday, is it a good time for you as well cmurphy? 1700 or 1800UTC? 17:20:11 raildo: works for me 17:20:46 raildo: are you talking about biweekly meeting or ptg session? 1700 isn't a bookable slot for the ptg 17:21:17 cmurphy, I'm talking about the biweekly meeting 17:21:36 ah okay 17:21:49 that's fine for me but let's take this offline 17:21:56 ohk, i also thought PTG :). but meeting slot we need to find slot for meeting 17:21:56 any other discussion items about the ptg? 17:22:19 cmurphy, for the PTG we can talk more during the meeting, but I believe that we just need to fit on whenever will be the teams time slot 17:22:40 oh, sorry about the misunderstanding... 17:24:27 no problem 17:25:47 if there are no other questions about the ptg let's move on to the next topic 17:25:57 #topic review requests 17:26:16 vishakha: want to take the floor? 17:26:22 Thanks cmurphy For the reviews. 17:27:19 #link https://review.opendev.org/#/q/status:open+project:openstack/keystone+branch:master+topic:update-onboarding I need another +2s for them to get merged 17:27:49 #link https://review.opendev.org/#/c/728387/ 17:28:20 closes bug #link https://bugs.launchpad.net/keystone/+bug/1872753 17:28:20 Launchpad bug 1872753 in OpenStack Identity (keystone) "Updating EC2 credential blob can lead to a ec2 credential id / credential id mismatch" [Medium,In progress] - Assigned to Vishakha Agarwal (vishakha.agarwal) 17:29:12 #link https://review.opendev.org/#/c/725634/ #link https://review.opendev.org/#/c/724915/ keystone-tempest-plugin 17:30:09 #link https://review.opendev.org/#/c/712724 17:30:09 Record last_active_at for local users using keystone as IdP 17:31:10 thats it from my side 17:32:04 thanks for going through all that documentation vishakha, really important work 17:32:28 any other review requests? 17:33:40 Hi, I have an easy one, hopefully https://review.opendev.org/#/c/727357 17:36:27 carthaca: thanks, looks like it's on the right branch :) 17:37:20 I started on the wrong one and vishakha pointed me in the right direction in https://review.opendev.org/#/c/726170 :) 17:37:46 yeah the release notes are tricky like that 17:38:44 moving on 17:38:56 #topic L1 bug duty 17:39:04 I was on duty last week 17:39:29 we had talked a little about https://bugs.launchpad.net/keystone/+bug/1878938 I didn't look deeply into it but confirmed and triaged it 17:39:29 Launchpad bug 1878938 in OpenStack Identity (keystone) "System role assignments exist after system role delete" [Medium,Triaged] - Assigned to Vishakha Agarwal (vishakha.agarwal) 17:40:13 we also had https://bugs.launchpad.net/keystone/+bug/1880252 come in and a change proposed for it, I also haven't looked at the review yet but I think the idea is interesting 17:40:13 Launchpad bug 1880252 in OpenStack Identity (keystone) "RFE: allow regexes in blacklist and whitelist conditionals" [Low,In progress] - Assigned to Jason Anderson (jasonandersonatuchicago) 17:40:28 but i wonder if there are any security concerns with the idea 17:41:27 #link https://review.opendev.org/#/c/730423/ Patch is up for it 17:42:29 actually it seems that at least any_one_of already supports regexes so probably makes sense for blacklist and whitelist to do so too if they don't already https://docs.openstack.org/keystone/latest/admin/federation/mapping_combinations.html#regular-expressions 17:43:55 vishakha is up this week, gagehugo could you take the following week? 17:44:52 The week of the PTG? 17:45:17 actually yeah I can since I can justify not sitting in 100 work meetings that week lol 17:45:51 heh okay cool 17:46:20 #topic open floor 17:46:31 any other business? 17:47:50 looking forward to seeing y'all next week :D 17:48:28 I should hang some cool posters behind my PC 17:48:39 hehe 17:48:51 so it's not just a blank wall 17:50:15 we should find some looping video of sea planes taking off to have on in the background 17:50:33 could just green-screen that in haha 17:50:45 ++ 17:51:22 I like the idea of sea planes 17:51:24 :) 17:53:09 alright thanks everyone 17:53:12 #endmeeting