15:00:45 <d34dh0r53> #startmeeting keystone
15:00:45 <opendevmeet> Meeting started Wed Jul 10 15:00:45 2024 UTC and is due to finish in 60 minutes.  The chair is d34dh0r53. Information about MeetBot at http://wiki.debian.org/MeetBot.
15:00:45 <opendevmeet> Useful Commands: #action #agreed #help #info #idea #link #topic #startvote.
15:00:45 <opendevmeet> The meeting name has been set to 'keystone'
15:00:58 <d34dh0r53> #topic roll call
15:01:06 <d34dh0r53> admiyo, bbobrov, crisloma, d34dh0r53, dpar, dstanek, hrybacki, knikolla[m], lbragstad, lwanderley, kmalloc, rodrigods, samueldmq, ruan_he, wxy, sonuk, vishakha, Ajay, rafaelwe, xek, gmann, zaitcev, reqa, dmendiza[m], mharley, jph, gtema
15:01:08 <gtema> o/
15:01:08 <d34dh0r53> o/
15:01:11 <mhen> o/
15:03:19 <d34dh0r53> #topic review past meeting work items
15:03:35 <d34dh0r53> #link https://meetings.opendev.org/meetings/keystone/2024/keystone.2024-07-03-15.01.html
15:03:48 <d34dh0r53> d34dh0r53 move reviewathon to 14:00 UTC for Daylight time
15:04:01 <d34dh0r53> this has been done, let me know if you need an invite and I can add you
15:04:09 <d34dh0r53> no more action items from last week
15:04:20 <d34dh0r53> #topic liaison updates
15:04:27 <d34dh0r53> nothing from either vmt or releases
15:04:39 <d34dh0r53> #topic specification
15:04:50 <d34dh0r53> #undo
15:04:50 <opendevmeet> Removing item from minutes: #topic specification
15:05:01 <d34dh0r53> #topic specification OAuth
15:05:14 <d34dh0r53> #undo
15:05:14 <opendevmeet> Removing item from minutes: #topic specification OAuth
15:05:20 <d34dh0r53> stupid fingers
15:05:39 <d34dh0r53> #topic specification OAuth 2.0
15:05:48 <d34dh0r53> #link https://review.opendev.org/q/topic:bp%252Foauth2-client-credentials-ext
15:05:57 <d34dh0r53> #link https://review.opendev.org/q/topic:bp%252Fenhance-oauth2-interoperability
15:06:06 <d34dh0r53> External OAuth 2.0 Specification
15:06:16 <d34dh0r53> #link https://review.opendev.org/c/openstack/keystone-specs/+/861554 (merged)
15:06:24 <d34dh0r53> OAuth 2.0 Implementation
15:06:30 <d34dh0r53> #link https://review.opendev.org/q/topic:bp%252Fsupport-oauth2-mtls
15:06:42 <d34dh0r53> OAuth 2.0 Documentation
15:06:48 <d34dh0r53> #link https://review.opendev.org/c/openstack/keystone/+/838108 (merged)
15:06:54 <d34dh0r53> #link https://review.opendev.org/c/openstack/keystoneauth/+/838104 (merged)
15:06:59 <d34dh0r53> no updates from me
15:07:11 <d34dh0r53> next up
15:07:30 <d34dh0r53> #topic specification Secure RBAC ( dmendiza )
15:07:37 <d34dh0r53> #link https://governance.openstack.org/tc/goals/selected/consistent-and-secure-rbac.html#z-release-timeline_
15:07:45 <d34dh0r53> 2024.1 Release Timeline
15:07:49 <dmendiza[m]> 🙋‍♂️
15:07:52 <d34dh0r53> Update oslo.policy in keystone to enforce_new_defaults=True
15:07:52 <dmendiza[m]> Heya!
15:07:58 <d34dh0r53> Update oslo.policy in keystone to enforce_scope=True
15:08:08 <dmendiza[m]> I don't think I have any updates this week.
15:08:08 <d34dh0r53> #link https://review.opendev.org/c/openstack/keystone/+/902730 (Merged)
15:08:14 <d34dh0r53> #link https://review.opendev.org/c/openstack/keystone-tempest-plugin/+/903713 (Merged)
15:08:22 <d34dh0r53> #link https://review.opendev.org/c/openstack/tempest/+/912489 (Merged)
15:08:25 <dmendiza[m]> I meant to look at the domain-manager spec, but I can't remember if I saw it or not? 🤔
15:08:40 <d34dh0r53> ack, thanks dmendiza
15:08:43 <gtema> generally you saw it few times
15:08:59 <gtema> and there were just minor nits which were addressed
15:09:19 <d34dh0r53> it's coming up in just a second dmendiza
15:09:43 <d34dh0r53> #topic specification Improve federated users management (gtema)
15:09:51 <d34dh0r53> #link https://review.opendev.org/c/openstack/keystone/+/920892
15:09:56 <d34dh0r53> ready for review
15:10:06 <gtema> thanks Dave Wilde (d34dh0r53) for review. Anybody else?
15:10:23 <d34dh0r53> dmendiza can you also look at this one ^^?
15:11:52 <d34dh0r53> next up
15:12:07 <d34dh0r53> #topic specification OpenAPI support (gtema)
15:12:16 <d34dh0r53> #link https://review.opendev.org/c/openstack/keystone-specs/+/910584 (merged)
15:12:25 <d34dh0r53> #link https://review.opendev.org/q/topic:%22openapi%22+project:openstack/keystone
15:12:31 <gtema> #https://review.opendev.org/c/openstack/keystone/+/923324
15:12:31 <d34dh0r53> gtema: first changes pushed
15:12:39 <gtema> this is one of the good examples of how it looks like
15:12:59 <gtema> you can also see a new job added that is producing openapi
15:13:22 <gtema> but back to the change - this is how things in Nova/Cinder/Manila are now looking like
15:13:26 <d34dh0r53> very cool
15:13:30 <gtema> and we make it very similar to that
15:14:08 <gtema> I will proceed with next resources in next days
15:15:51 <gtema> Ideally I will remove the existing validation framework
15:16:06 <gtema> or better to say - it is replaced (and in details it is very very similar)
15:16:32 <gtema> but the point is to try to unify how we deal with schemas across projects so that maintenance is a bit easier
15:17:03 <gtema> so after resources are extended I will cleanup existing validation framework
15:17:39 <d34dh0r53> ok, that sounds like a good plan
15:18:09 <d34dh0r53> I'm excited for this work, it feels like a very good modernization step for the project
15:18:17 <gtema> :)
15:18:24 <gtema> thanks
15:19:28 <d34dh0r53> #topic open discussion
15:19:37 <d34dh0r53> domain manager (mhen)
15:19:48 <d34dh0r53> #link https://review.opendev.org/c/openstack/keystone-specs/+/903172
15:19:54 <d34dh0r53> addressed review comments
15:20:02 <d34dh0r53> rebased on 2024.1, renamed to domain-manager-persona (from "...-role")
15:20:16 <d34dh0r53> dmendiza: this is the link ^^
15:20:22 <d34dh0r53> it would be awesome if we could get this merged this week
15:20:32 <mhen> the spec still needs to be merged but I started implementation already nonetheless
15:21:01 <gtema> great
15:22:14 <d34dh0r53> awesome, thanks mhen
15:22:43 <d34dh0r53> that's all we have on the agenda for open discussion, anything else before we move on?
15:23:02 <gtema> not from me
15:23:20 <d34dh0r53> cool
15:23:23 <d34dh0r53> #topic bug review
15:23:31 <d34dh0r53> #link https://bugs.launchpad.net/keystone/?orderby=-id&start=0
15:24:01 <d34dh0r53> one new bug in keystone
15:24:06 <d34dh0r53> #link https://bugs.launchpad.net/keystone/+bug/2072639
15:24:18 <d34dh0r53> This may be a configuration issue
15:24:22 <d34dh0r53> dmendiza: can you take a look at this one?
15:25:19 <d34dh0r53> next up
15:25:21 <d34dh0r53> #link https://bugs.launchpad.net/python-keystoneclient/?orderby=-id&start=0
15:25:25 <d34dh0r53> no new bugs here
15:25:36 <d34dh0r53> #link https://bugs.launchpad.net/keystoneauth/+bugs?orderby=-id&start=0
15:25:42 <d34dh0r53> there is a new bug in keystoneauth
15:26:03 <d34dh0r53> #link https://bugs.launchpad.net/keystoneauth/+bug/2072481
15:26:28 <d34dh0r53> we probably need to update our pin of betamax, a new version was released not too long ago
15:26:35 <d34dh0r53> I can look at that one
15:26:53 <d34dh0r53> #link https://bugs.launchpad.net/keystonemiddleware/+bugs?orderby=-id&start=0
15:27:13 <d34dh0r53> keystonemiddleware is good
15:27:14 <d34dh0r53> #link https://bugs.launchpad.net/pycadf/+bugs?orderby=-id&start=0
15:27:30 <d34dh0r53> so is pycadf
15:27:31 <d34dh0r53> #link https://bugs.launchpad.net/ldappool/+bugs?orderby=-id&start=0
15:27:42 <d34dh0r53> ldappool is also good
15:27:48 <d34dh0r53> #topic conclusion
15:28:04 <d34dh0r53> There will not be a weekly meeting next week as I'm on PTO
15:28:20 <d34dh0r53> I won't cancel next weeks reviewathon but I will not be there
15:28:21 <gtema> ack
15:28:40 <d34dh0r53> That's all I have
15:28:47 <d34dh0r53> Thanks everyone!
15:28:58 <d34dh0r53> #endmeeting