15:02:33 <d34dh0r53> #startmeeting keystone
15:02:33 <opendevmeet> Meeting started Wed Aug 23 15:02:33 2023 UTC and is due to finish in 60 minutes.  The chair is d34dh0r53. Information about MeetBot at http://wiki.debian.org/MeetBot.
15:02:33 <opendevmeet> Useful Commands: #action #agreed #help #info #idea #link #topic #startvote.
15:02:33 <opendevmeet> The meeting name has been set to 'keystone'
15:02:37 <d34dh0r53> #topic roll call
15:02:44 <noonedeadpunk> o/
15:02:46 <d34dh0r53> admiyo, bbobrov, crisloma, d34dh0r53, dpar, dstanek, hrybacki, knikolla[m], lbragstad, lwanderley, kmalloc, rodrigods, samueldmq, ruan_he, wxy, sonuk, vishakha, Ajay, rafaelwe, xek, gmann, zaitcev, reqa, dmendiza[m]
15:02:48 <d34dh0r53> o/
15:03:01 <xek> o/
15:03:03 <hiromu> o/
15:04:26 <dmendiza[m]> 🙋
15:05:00 <d34dh0r53> greetings all, let's get started
15:05:19 <d34dh0r53> #topic review past meeting work items
15:05:33 <d34dh0r53> #link https://meetings.opendev.org/meetings/keystone/2023/keystone.2023-08-16-15.01.html
15:05:55 <d34dh0r53> no updates on the known issues stuff this week, not enough cycles
15:06:05 <d34dh0r53> #action d34dh0r53 Look into adding/restoring a known issues section to our documentation (d34dh0r53, 15:03:57)
15:06:18 <d34dh0r53> #action d34dh0r53 add https://bugs.launchpad.net/keystone/+bug/1305950 to the known issues section of our documentation
15:06:30 <d34dh0r53> next up
15:06:50 <d34dh0r53> https://review.opendev.org/q/Iea95a3c2df041a0046647b3d3dadead1a6d054d1 - noonedeadpunk
15:07:19 <d34dh0r53> I think these are all done, additional backports need both patches applied
15:07:30 <noonedeadpunk> I think what's left is Yoga - sqash patch with original one
15:07:45 <noonedeadpunk> #link https://review.opendev.org/c/openstack/keystone/+/890661
15:08:59 <d34dh0r53> yeah that one, and then I'd like to get these into wallaby if possible
15:09:10 <d34dh0r53> but we'll have to see
15:09:58 <d34dh0r53> #action reviewathon get https://review.opendev.org/c/openstack/keystone/+/890661 merged
15:10:37 <d34dh0r53> next up https://bugs.launchpad.net/keystone/+bug/2030061 - noonedeadpunk
15:10:52 <d34dh0r53> any update on that?
15:11:19 <noonedeadpunk> Nah, and I can't recall saying I will look into that to be frank...
15:11:35 <d34dh0r53> I don't either, not sure how that got there
15:11:53 <d34dh0r53> next up d34dh0r53 test https://review.opendev.org/c/openstack/keystone/+/891024/3
15:12:04 <noonedeadpunk> It's smth I'm interested to get fixed, ofc, but it's not high enough prio yet
15:13:17 <d34dh0r53> I've reviewed this, looks to be a drop in replacement for bcrypt and is a great solution to the oddities of hash trimming
15:13:45 <d34dh0r53> next up hiromu test and review https://review.opendev.org/c/openstack/keystone/+/891521
15:13:45 <noonedeadpunk> ++ maybe default change will land for 2024.1 :D
15:14:03 <noonedeadpunk> there was minor note I've addressed
15:14:07 <d34dh0r53> yeah, we should get to that one in the reviewathon as well
15:14:25 <noonedeadpunk> and would be awesome to backport to 2023.1
15:14:44 <noonedeadpunk> as it's actually where it is needed at the first place
15:15:35 <d34dh0r53> ack
15:15:45 <noonedeadpunk> I was also wondering if it would make sense to convert other conditions to the same pattern
15:16:04 <noonedeadpunk> so that next time some will add a property - they follow the pattern
15:16:12 <d34dh0r53> the prefix pattern?
15:16:48 <noonedeadpunk> yeah, to use getattr rather then just assume attribute is there
15:17:32 <noonedeadpunk> as having a cache can easily slipp of mind with some next adjustment of the object
15:17:38 <noonedeadpunk> but that's minor...
15:18:52 <d34dh0r53> yeah, that seems much more robust to me
15:19:05 <d34dh0r53> cool
15:19:33 <d34dh0r53> #action reviewathon https://review.opendev.org/c/openstack/keystone/+/891024
15:19:33 <noonedeadpunk> I can propose a follow up then
15:19:44 <d34dh0r53> yes please, and thank you :)
15:20:22 <d34dh0r53> hiromu: any update on https://review.opendev.org/c/openstack/keystone/+/891521 ?
15:21:16 <hiromu> No. I think it's ready to be merged
15:21:23 <noonedeadpunk> I'd say update is pretty much represented in a comment?:) https://review.opendev.org/c/openstack/keystone/+/891521/4#message-3204e6e1b5bc7d7488c5126110313f3aefa0f42e
15:22:22 <d34dh0r53> I missed the convo in the review
15:22:24 <d34dh0r53> sorry
15:22:26 <d34dh0r53> my bad
15:22:59 <noonedeadpunk> it's easy to miss marked as resolved ones
15:23:32 <d34dh0r53> indeed :)
15:23:40 <d34dh0r53> cool, moving on
15:23:51 <d34dh0r53> d34dh0r53 look into doc bug of missing Identity section on https://docs.openstack.org/2023.1/projects.html
15:23:56 <d34dh0r53> no updates there
15:23:58 <d34dh0r53> #action d34dh0r53 look into doc bug of missing Identity section on https://docs.openstack.org/2023.1/projects.html
15:24:15 <d34dh0r53> #topic liaison updates
15:25:13 <d34dh0r53> VMT side, we had a 12 year old invalid bug necro bumped to be security related.  We have no idea why and have reverted it back but if you got a strange email about a security issue in Keystone that was likely it
15:28:23 <d34dh0r53> cool, moving on
15:28:35 <d34dh0r53> #topic specification OAuth 2.0 (hiromu)
15:28:42 <d34dh0r53> #link https://review.opendev.org/q/topic:bp%252Foauth2-client-credentials-ext
15:28:44 <d34dh0r53> #link https://review.opendev.org/q/topic:bp%252Fenhance-oauth2-interoperability
15:28:46 <d34dh0r53> External OAuth 2.0 Specification
15:28:48 <d34dh0r53> #link https://review.opendev.org/c/openstack/keystone-specs/+/861554
15:28:50 <d34dh0r53> OAuth 2.0 Implementation
15:28:52 <d34dh0r53> #link https://review.opendev.org/q/topic:bp%252Fsupport-oauth2-mtls
15:28:54 <d34dh0r53> OAuth 2.0 Documentation
15:28:56 <d34dh0r53> #link https://review.opendev.org/c/openstack/keystone/+/838108
15:28:58 <d34dh0r53> #link https://review.opendev.org/c/openstack/keystoneauth/+/838104
15:29:29 <d34dh0r53> #action reviewathon https://review.opendev.org/q/topic:bp%252Fenhance-oauth2-interoperability
15:29:45 <d34dh0r53> we need to look at these during the reviewathon
15:31:25 <hiromu> maybe I can explain them at the reviewathon in two weeks.
15:32:33 <hiromu> Unfortunately, I can't attend reviewathon this week. will lose the chance to merge them in this cycle, but we're not in hurry.
15:32:44 <d34dh0r53> ok, thank you hiromu
15:32:49 <d34dh0r53> I'll push that to two weeks
15:33:14 <hiromu> thanks
15:33:41 <d34dh0r53> #topic specification Secure RBAC (dmendiza[m])
15:33:50 <d34dh0r53> #link https://governance.openstack.org/tc/goals/selected/consistent-and-secure-rbac.html#z-release-timeline_
15:33:51 <d34dh0r53> Manager Role Implementation
15:33:53 <d34dh0r53> #link https://review.opendev.org/c/openstack/keystone/+/822601
15:35:51 <d34dh0r53> I don't think there are any updates on this one
15:35:59 <d34dh0r53> #topic open discussion
15:36:21 <d34dh0r53> nothing on the etherpad, anyone have anything before we move on to bug review?
15:37:21 <dmendiza[m]> yeah, sorry, no updates on SRBAC
15:37:39 <d34dh0r53> no worries, thanks dmendiza[m]
15:37:46 <d34dh0r53> moving on to bug review
15:37:54 <d34dh0r53> #topic bug review
15:38:00 <d34dh0r53> #link https://bugs.launchpad.net/keystone/?orderby=-id&start=0
15:38:16 <d34dh0r53> no new bugs for keystone
15:38:26 <d34dh0r53> #link https://bugs.launchpad.net/python-keystoneclient/?orderby=-id&start=0
15:38:41 <d34dh0r53> nothing new for python-keystoneclient
15:38:46 <d34dh0r53> #link https://bugs.launchpad.net/keystoneauth/+bugs?orderby=-id&start=0
15:38:58 <d34dh0r53> nor keystoneauth
15:39:16 <d34dh0r53> #link https://bugs.launchpad.net/keystonemiddleware/+bugs?orderby=-id&start=0
15:39:31 <d34dh0r53> keystonemiddleware is good
15:39:36 <d34dh0r53> #link https://bugs.launchpad.net/pycadf/+bugs?orderby=-id&start=0
15:39:44 <d34dh0r53> so is pycadf
15:39:50 <d34dh0r53> #link https://bugs.launchpad.net/ldappool/+bugs?orderby=-id&start=0
15:40:01 <d34dh0r53> ldappool is also good
15:40:07 <d34dh0r53> #topic conclusion
15:40:51 <d34dh0r53> Register for the vptg http://ptg2023.openinfra.dev/
15:40:54 <d34dh0r53> #link http://ptg2023.openinfra.dev/
15:41:25 <d34dh0r53> PTL and TC nominations are open, they started 16-Aug-2023 and go till 30-Aug-2023
15:42:07 <d34dh0r53> #link https://governance.openstack.org/election/#how-to-submit-a-candidacy
15:43:45 <d34dh0r53> Finally, we're coming up on bobcat-3 and feature freeze, 28-Aug - 01-Sep
15:43:54 <d34dh0r53> #link https://releases.openstack.org/bobcat/schedule.html
15:44:37 <d34dh0r53> Thanks everyone! Have a fantastic rest of your day, and I hope to see y'all at the reviewathon Friday.
15:44:40 <d34dh0r53> #endmeeting