15:01:37 <d34dh0r53> #startmeeting keystone
15:01:37 <opendevmeet> Meeting started Wed Sep  6 15:01:37 2023 UTC and is due to finish in 60 minutes.  The chair is d34dh0r53. Information about MeetBot at http://wiki.debian.org/MeetBot.
15:01:37 <opendevmeet> Useful Commands: #action #agreed #help #info #idea #link #topic #startvote.
15:01:37 <opendevmeet> The meeting name has been set to 'keystone'
15:01:43 <d34dh0r53> #topic roll call
15:01:50 <d34dh0r53> admiyo, bbobrov, crisloma, d34dh0r53, dpar, dstanek, hrybacki, knikolla[m], lbragstad, lwanderley, kmalloc, rodrigods, samueldmq, ruan_he, wxy, sonuk, vishakha, Ajay, rafaelwe, xek, gmann, zaitcev, reqa, dmendiza[m]
15:01:54 <d34dh0r53> o/
15:02:14 <hiromu> o/
15:05:15 <xek> o/
15:05:36 <d34dh0r53> let's get started :)
15:05:45 <d34dh0r53> #topic review past meeting work items
15:06:13 <d34dh0r53> no movement on the docs things :(... I'll get to those this cycle
15:06:21 <d34dh0r53> #action d34dh0r53 Look into adding/restoring a known issues section to our documentation
15:06:29 <d34dh0r53> #action d34dh0r53 add https://bugs.launchpad.net/keystone/+bug/1305950 to the known issues section of our documentation
15:06:36 <d34dh0r53> #action d34dh0r53 add https://bugs.launchpad.net/keystone/+bug/1305950 to the known issues section of our documentation
15:06:39 <d34dh0r53> #undo
15:06:39 <opendevmeet> Removing item from minutes: #action d34dh0r53 add https://bugs.launchpad.net/keystone/+bug/1305950 to the known issues section of our documentation
15:06:47 <d34dh0r53> #action d34dh0r53 look into doc bug of missing Identity section on https://docs.openstack.org/2023.1/projects.html
15:06:59 <d34dh0r53> next up we had reviewathon https://review.opendev.org/c/openstack/keystone/+/891024
15:07:27 <d34dh0r53> that has the votes but is having issues gating, I'll look into that today as there are a couple of failures with other patches
15:07:32 <d34dh0r53> something may be borked in our gates
15:08:02 <d34dh0r53> and we're pushing the oauth2-interopability patches to this Friday where we will very likely merge them
15:08:09 <d34dh0r53> #action reviewathon https://review.opendev.org/q/topic:bp%252Fenhance-oauth2-interoperability
15:08:15 <d34dh0r53> next up
15:08:23 <d34dh0r53> #topic liaison updates
15:08:30 <d34dh0r53> nothing from VMT
15:09:39 <d34dh0r53> we're in feature freeze for Bobcat and RC1 is next week
15:10:47 <d34dh0r53> #topic specification
15:10:49 <d34dh0r53> OAuth 2.0 (hiromu)
15:10:50 <d34dh0r53> #link https://review.opendev.org/q/topic:bp%252Foauth2-client-credentials-ext
15:10:52 <d34dh0r53> #link https://review.opendev.org/q/topic:bp%252Fenhance-oauth2-interoperability
15:10:54 <d34dh0r53> External OAuth 2.0 Specification
15:10:56 <d34dh0r53> #link https://review.opendev.org/c/openstack/keystone-specs/+/861554
15:10:58 <d34dh0r53> OAuth 2.0 Implementation
15:11:00 <d34dh0r53> #link https://review.opendev.org/q/topic:bp%252Fsupport-oauth2-mtls
15:11:02 <d34dh0r53> OAuth 2.0 Documentation
15:11:04 <d34dh0r53> #link https://review.opendev.org/c/openstack/keystone/+/838108
15:11:06 <d34dh0r53> #link https://review.opendev.org/c/openstack/keystoneauth/+/838104
15:11:36 <d34dh0r53> We're going to look at these again this week at the reviewathon with the expectation that they will merge and we will tag a new version of keystonemiddleware
15:12:03 <d34dh0r53> hiromu: anything else?
15:12:46 <hiromu> no. thank you for the remind
15:13:09 <d34dh0r53> :) you're welcome
15:13:13 <d34dh0r53> next up
15:13:25 <d34dh0r53> Secure RBAC (dmendiza[m])
15:13:27 <d34dh0r53> #link https://governance.openstack.org/tc/goals/selected/consistent-and-secure-rbac.html#z-release-timeline_
15:13:29 <d34dh0r53> Manager Role Implementation
15:13:51 <dmendiza[m]> 🙋
15:13:51 <d34dh0r53> #link https://review.opendev.org/c/openstack/keystone/+/822601
15:14:02 <d34dh0r53> that patch has the votes, but is failing on gate :/
15:14:17 <dmendiza[m]> bah
15:15:21 <d34dh0r53> the k2k job is failing :/
15:15:24 <d34dh0r53> #link https://zuul.opendev.org/t/openstack/build/9c46f2b0d8b64115937f2db533e95e48
15:15:29 <dmendiza[m]> Yeah, not sure what the k2k job is?
15:15:56 <d34dh0r53> keystone to keystone federation
15:16:04 <d34dh0r53> looks like we need to update devstack for focal?
15:17:34 <d34dh0r53> I'll dig into that today, dmendiza[m] I might need your help
15:18:03 <dmendiza[m]> ack, just ping me after lunch
15:18:16 <d34dh0r53> will do, tys!
15:18:22 <d34dh0r53> next up
15:18:26 <d34dh0r53> #topic open discussion
15:18:30 <d34dh0r53> anyone have anything?
15:20:27 <d34dh0r53> cool, moving on
15:20:34 <d34dh0r53> #topic bug review
15:20:42 <d34dh0r53> #link https://bugs.launchpad.net/keystone/?orderby=-id&start=0
15:21:05 <d34dh0r53> we had a new bug in keystone that looks like it's a duplicate of
15:21:13 <d34dh0r53> #link https://bugs.launchpad.net/keystone/+bug/2030061
15:21:31 <d34dh0r53> from last week, I think there is something wrong with the implied roles and application credentials
15:21:57 <d34dh0r53> I'd like to test out Andrews patch but not sure if I'll have cycles this week to do it
15:23:20 <d34dh0r53> #link https://bugs.launchpad.net/python-keystoneclient/?orderby=-id&start=0
15:23:24 <d34dh0r53> nothing here
15:23:41 <d34dh0r53> #link https://bugs.launchpad.net/keystoneauth/+bugs?orderby=-id&start=0
15:23:49 <d34dh0r53> no new bugs in keystoneauth
15:24:03 <d34dh0r53> #link https://bugs.launchpad.net/keystonemiddleware/+bugs?orderby=-id&start=0
15:24:15 <d34dh0r53> keystonemiddleware is clean
15:24:29 <d34dh0r53> #link https://bugs.launchpad.net/pycadf/+bugs?orderby=-id&start=0
15:24:42 <d34dh0r53> pycadf has no new bugs
15:24:48 <d34dh0r53> #link https://bugs.launchpad.net/ldappool/+bugs?orderby=-id&start=0
15:24:53 <d34dh0r53> nor does ldappool
15:25:06 <d34dh0r53> that does it for bugs
15:25:12 <d34dh0r53> #topic conclusion
15:26:12 <d34dh0r53> I don't have anything else
15:26:35 <d34dh0r53> Remember to register for the Virtual PTG, it's free :)
15:26:48 <d34dh0r53> Thanks folks!
15:26:52 <d34dh0r53> #endmeeting