16:59:37 <knikolla> #startmeeting keystone
16:59:38 <openstack> Meeting started Tue Feb  9 16:59:37 2021 UTC and is due to finish in 60 minutes.  The chair is knikolla. Information about MeetBot at http://wiki.debian.org/MeetBot.
16:59:39 <openstack> Useful Commands: #action #agreed #help #info #idea #link #topic #startvote.
16:59:39 <knikolla> o/
16:59:42 <openstack> The meeting name has been set to 'keystone'
17:01:34 <gagehugo> o/
17:01:44 <lbragstad> o/
17:03:10 <knikolla> #topic stable/ussuri federation job not working
17:03:21 <knikolla> I have a patch up to switch the opensuse job to ubuntu xenial
17:03:23 <knikolla> #link https://review.opendev.org/c/openstack/keystone/+/774678
17:03:46 <knikolla> Hopefully that fixes it
17:04:57 <lbragstad> if we rename it - do we need keystone-dsvm-py35-functional-federation ?
17:05:12 <lbragstad> i'm wondering what the differences are
17:06:10 <lbragstad> looks like the only thing that's different is a devstack setting?
17:06:41 <knikolla> https://zuul.opendev.org/t/openstack/status#774678
17:06:53 <knikolla> these are the jobs that are currently running on it
17:07:54 <knikolla> functional-federation is just a superclass of functional-federation-ubuntu-xenial
17:07:57 <knikolla> and not being run itself
17:09:44 <lbragstad> ok
17:10:13 <lbragstad> i have several backports to stable/ussuri that i'll rebase if your patch passes
17:12:16 <lbragstad> do we know if anyone from SUSE is looking into it?
17:12:44 <lbragstad> or do we know if this is going to be a temporary fix?
17:13:20 <knikolla> we have already switched to ubuntu from V onwards for the federation jobs
17:13:29 <lbragstad> ok
17:13:38 <knikolla> So this is permanent
17:13:44 <gagehugo> is there a reason we are using xenial and not bionic?
17:14:25 <knikolla> i saw that's what the zuul file was mostly using and kept at it
17:14:30 <knikolla> i'm open to revising and using bionic instead
17:14:38 <gagehugo> ah ok
17:14:45 <cmurphy> one of the ubuntus is the version that has a bug in the shibboleth package
17:14:58 <cmurphy> and was why we switched to opensuse in the first place
17:15:16 <cmurphy> the latest ubuntu unbroke it so we were able to switch back for newer jobs
17:15:50 <cmurphy> i think it's bionic that has the bug
17:16:07 <cmurphy> we could use bionic but we might also have to switch to mellon instead of shibboleth which would be a bigger overhaul
17:17:16 <gagehugo> focal? lol
17:17:30 <cmurphy> i'm not sure ussuri devstack runs on focal
17:17:39 <gagehugo> Im sad disco dingo was only a short-term release
17:17:46 <cmurphy> lol
17:17:46 <gagehugo> such a good name
17:17:52 <knikolla> haha
17:19:16 <lbragstad> so are we just going to see what shakes out with xenial and consider bionic only if we need to?
17:19:21 <knikolla> cmurphy: do you have a link back to the discussion/issue with shibboleth. i can't find my notes on it.
17:19:37 <cmurphy> sure one sec
17:20:13 <gagehugo> Im fine with xenial if bionic is borked atm
17:20:40 <cmurphy> here's the ubuntu bug https://bugs.launchpad.net/ubuntu/+source/shibboleth-sp2/+bug/1776489
17:20:42 <openstack> Launchpad bug 1776489 in xmltooling (Ubuntu) "libxmltooling7 depends on libcurl3, which has been replaced by libcurl4 in Bionic" [Undecided,Confirmed]
17:22:00 <cmurphy> and here's our bug https://bugs.launchpad.net/keystone/+bug/1802901
17:22:02 <openstack> Launchpad bug 1802901 in OpenStack Identity (keystone) "Federation functional job failing on Bionic" [Medium,Confirmed]
17:22:50 <knikolla> thanks
17:23:56 <cmurphy> here's where we switched to opensuse https://review.opendev.org/c/openstack/keystone/+/640724 and here's where we partially switched back to ubuntu https://review.opendev.org/c/openstack/keystone/+/726995
17:23:56 <knikolla> xenial isn't supported anymore though, i think, i've lost track of the ubuntu alphabet
17:24:03 <knikolla> ?
17:24:19 <cmurphy> right
17:24:56 <knikolla> looks like another 2 months, till april 2021
17:28:26 <knikolla> and ussuri will pass into EM in november 2021
17:29:37 <knikolla> so let's have xenial unblock the gate for now so we can merge the backports, and that should give us more time to work on a longer term solution
17:30:13 <knikolla> #topic Open Discussion
17:33:46 <lbragstad> i have a doc clarification up for review if people want to take a look at it
17:33:51 <lbragstad> #link https://review.opendev.org/c/openstack/keystone/+/771509/3
17:43:36 <knikolla> looking into it, thanks
17:44:27 <lbragstad> yep - people have been asking for clarification around reader role use cases now that they're implementing it in several projects
17:45:37 * lbragstad drops early to hop into another meeting
17:48:08 <knikolla> thanks all
17:48:10 <knikolla> #endmeeting