#openstack-keystone: keystone

Meeting summary

1. 1. https://openinfra.dev/legal/code-of-conduct (d34dh0r53, 15:05:23)
   
   
2. roll call (d34dh0r53, 15:05:38)
   
3. review past meeting work items (d34dh0r53, 15:07:50)
   1. https://meetings.opendev.org/meetings/keystone/2024/keystone.2024-10-02-15.00.html (d34dh0r53, 15:08:01)
   
   
4. liaison updates (d34dh0r53, 15:12:53)
   
5. specification OAuth 2.0 (hiromu) (d34dh0r53, 15:13:33)
   1. https://review.opendev.org/q/topic:bp%252Foauth2-client-credentials-ext (d34dh0r53, 15:13:55)
   2. https://review.opendev.org/q/topic:bp%252Fenhance-oauth2-interoperability (d34dh0r53, 15:13:56)
   3. https://review.opendev.org/c/openstack/keystone-specs/+/861554 (merged) (d34dh0r53, 15:13:59)
   4. https://review.opendev.org/q/topic:bp%252Fsupport-oauth2-mtls (d34dh0r53, 15:14:02)
   5. https://review.opendev.org/c/openstack/keystone/+/838108 (merged) (d34dh0r53, 15:14:10)
   6. https://review.opendev.org/c/openstack/keystoneauth/+/838104 (merged) (d34dh0r53, 15:14:13)
   
   
6. specification Secure RBAC (dmendiza[m]) (d34dh0r53, 15:15:09)
   1. https://governance.openstack.org/tc/goals/selected/consistent-and-secure-rbac.html#z-release-timeline_ (d34dh0r53, 15:15:20)
   
   
7. specification OpenAPI support (gtema) (d34dh0r53, 15:15:53)
   1. https://review.opendev.org/q/topic:%22openapi%22+project:openstack/keystone (d34dh0r53, 15:15:57)
   2. https://review.opendev.org/c/openstack/keystone/+/925020 could now also land to ease api-ref work (d34dh0r53, 15:16:01)
   
   
8. specification domain manager (mhen) (d34dh0r53, 15:22:55)
   1. https://review.opendev.org/q/topic:%22domain-manager%22 (d34dh0r53, 15:22:57)
   
   
9. specification Type annotations (stephenfin) (d34dh0r53, 15:26:35)
   1. https://review.opendev.org/q/project:openstack/keystoneauth+topic:typing (d34dh0r53, 15:26:39)
   2. https://github.com/openstack/openstacksdk/blob/master/tox.ini#L143-L151 (stephenfin, 15:31:33)
   
   
10. open discussion (d34dh0r53, 15:34:12)
    1. https://github.com/openstack/keystone/blob/f7ffacb7ad2d09da01b00cf50192a5c2b2d899a1/.zuul.yaml#L68 (d34dh0r53, 15:40:35)
    2. https://docs.openstack.org/api-ref/identity/v3/#assign-role-to-user-on-projects-owned-by-domain claims you grant to the use certain role on all projects owned by domain (gtema, 15:50:32)
    3. https://github.com/int128/kubelogin (cardoe, 15:55:36)
    4. https://github.com/vexxhost/keystone-keycloak-backend is the backend that Vexxhost uses. (cardoe, 15:58:06)

Action items

1. (none)

People present (lines said)

1. d34dh0r53 (73)
2. noonedeadpunk (46)
3. gtema (44)
4. cardoe (28)
5. stephenfin (7)
6. opendevmeet (3)
7. jph (1)
8. xek (1)