15:04:25 <d34dh0r53> #startmeeting keystone
15:04:25 <opendevmeet> Meeting started Wed Dec 18 15:04:25 2024 UTC and is due to finish in 60 minutes.  The chair is d34dh0r53. Information about MeetBot at http://wiki.debian.org/MeetBot.
15:04:25 <opendevmeet> Useful Commands: #action #agreed #help #info #idea #link #topic #startvote.
15:04:25 <opendevmeet> The meeting name has been set to 'keystone'
15:04:33 <xek> o/
15:04:33 <d34dh0r53> Reminder: This meeting takes place under the OpenInfra Foundation Code of Conduct
15:04:43 <d34dh0r53> #link https://openinfra.dev/legal/code-of-conduct
15:04:53 <d34dh0r53> #topic roll call
15:04:56 <gtema> o/
15:05:01 <d34dh0r53> admiyo, bbobrov, crisloma, d34dh0r53, dpar, dstanek, hrybacki, lbragstad, lwanderley, kmalloc, rodrigods, samueldmq, ruan_he, wxy, sonuk, vishakha, Ajay, rafaelwe, xek, gmann, zaitcev, reqa, dmendiza[m], dmendiza, mharley, jph, gtema, cardoe
15:05:59 <d34dh0r53> #topic review past meeting work items
15:06:15 <d34dh0r53> #link https://meetings.opendev.org/meetings/keystone/2024/keystone.2024-12-11-15.00.html
15:06:22 <d34dh0r53> no action items from last week
15:06:36 <d34dh0r53> #topic liaison updates
15:06:43 <d34dh0r53> no updates from releases or VMT
15:07:28 <d34dh0r53> moving on
15:07:32 <d34dh0r53> #topic specification OAuth 2.0 (hiromu)
15:07:37 <d34dh0r53> #link https://review.opendev.org/q/topic:bp%252Foauth2-client-credentials-ext
15:07:40 <d34dh0r53> #link https://review.opendev.org/q/topic:bp%252Fenhance-oauth2-interoperability
15:07:42 <d34dh0r53> External OAuth 2.0 Specification
15:07:45 <d34dh0r53> #link https://review.opendev.org/c/openstack/keystone-specs/+/861554 (merged)
15:07:47 <d34dh0r53> OAuth 2.0 Implementation
15:07:51 <d34dh0r53> #link https://review.opendev.org/q/topic:bp%252Fsupport-oauth2-mtls
15:07:54 <d34dh0r53> OAuth 2.0 Documentation
15:07:57 <d34dh0r53> #link https://review.opendev.org/c/openstack/keystone/+/838108 (merged)
15:08:00 <d34dh0r53> #link https://review.opendev.org/c/openstack/keystoneauth/+/838104 (merged)
15:08:07 <d34dh0r53> no updates this week
15:08:17 <d34dh0r53> #topic specification Secure RBAC (dmendiza[m])
15:08:19 <d34dh0r53> #link https://governance.openstack.org/tc/goals/selected/consistent-and-secure-rbac.html#z-release-timeline_
15:08:22 <d34dh0r53> 2024.1 Release Timeline
15:08:24 <d34dh0r53> Update oslo.policy in keystone to enforce_new_defaults=True
15:08:27 <d34dh0r53> Update oslo.policy in keystone to enforce_scope=True
15:08:40 <d34dh0r53> dmendiza: you around?
15:09:10 <dmendiza[m]> 🙋‍♂️
15:09:47 <d34dh0r53> any s-rbac updates?
15:10:12 <dmendiza[m]> Negative, sorry.  I've been living in Barbican land for a while 😅
15:10:53 <d34dh0r53> hah, no worries
15:10:57 <d34dh0r53> next up
15:11:01 <d34dh0r53> #topic specification OpenAPI support (gtema)
15:11:04 <d34dh0r53> #link https://review.opendev.org/q/topic:%22openapi%22+project:openstack/keystone
15:11:26 <gtema> he, also no updates
15:11:54 <d34dh0r53> cool, next up
15:11:58 <d34dh0r53> #topic specification domain manager (mhen)
15:12:00 <d34dh0r53> still unmerged are:
15:12:03 <d34dh0r53> documentation: https://review.opendev.org/c/openstack/keystone/+/928135
15:12:06 <d34dh0r53> tempest tests: https://review.opendev.org/c/openstack/keystone-tempest-plugin/+/924222
15:12:30 <d34dh0r53> dmendiza: can you review these?
15:15:15 <d34dh0r53> ok, next up
15:15:21 <d34dh0r53> #topic specification Include bad password details in audit messages (stanislav-z)
15:15:24 <d34dh0r53> #link https://review.opendev.org/c/openstack/keystone-specs/+/915482
15:15:26 <d34dh0r53> #link https://review.opendev.org/c/openstack/keystone/+/932423
15:15:29 <d34dh0r53> 11-Dec update: thanks for reviews, I've updated the spec according to comments, or otherwise raised my questions in Gerrit - would appreciate your feedback.
15:15:31 <d34dh0r53> CI for keystone-spec is failing :/
15:16:40 <stanislav-z> CI is failing not being able to build the docs. The fix would be similar to https://review.opendev.org/c/openstack/keystone/+/935685. I started it, but was wondering - does the job of migrating from seqdiag to graphviz is manual? :)
15:17:07 <gtema> yes, I was preparing this change manually
15:17:25 <gtema> I wasn't able to find any tool that is able to convert from seqdiag to graphviz
15:18:31 <stanislav-z> for Keystone keeping the diagrams makes complete sense. but perhaps for specs we could omit them? or save the current ones as images and source them as images?
15:19:40 <gtema> yes, this could be done
15:20:02 <d34dh0r53> I'm fine with that
15:20:52 <stanislav-z> I'll check it out and submit something.
15:20:52 <stanislav-z> And gtema (Artem Goncharov) I would appreciate you checking out the conversation in the spec :) https://review.opendev.org/c/openstack/keystone-specs/+/915482/comment/0270700d_3a3cb9f8/ thanks
15:21:04 <gtema> ok
15:23:03 <d34dh0r53> great, that does it for specifications
15:23:11 <d34dh0r53> #topic open discussion
15:23:15 <d34dh0r53> I don't have anything
15:23:42 <gtema> me neither
15:24:05 <d34dh0r53> cool
15:24:11 <d34dh0r53> #topic bug review
15:24:13 <d34dh0r53> #link https://bugs.launchpad.net/keystone/?orderby=-id&start=0
15:24:39 <d34dh0r53> no new bugs for keystone
15:24:46 <d34dh0r53> #link https://bugs.launchpad.net/python-keystoneclient/?orderby=-id&start=0
15:25:47 <d34dh0r53> no new bugs for python-keystoneclient
15:26:01 <d34dh0r53> #link https://bugs.launchpad.net/keystoneauth/+bugs?orderby=-id&start=0
15:26:06 <d34dh0r53> keystoneauth is good as well
15:26:10 <d34dh0r53> #link https://bugs.launchpad.net/keystonemiddleware/+bugs?orderby=-id&start=0
15:26:30 <d34dh0r53> nothing new in keystonemiddleware
15:26:36 <d34dh0r53> #link https://bugs.launchpad.net/pycadf/+bugs?orderby=-id&start=0
15:26:55 <d34dh0r53> pycadf is good
15:27:11 <d34dh0r53> #link https://bugs.launchpad.net/ldappool/+bugs?orderby=-id&start=0
15:27:15 <d34dh0r53> as is ldappool
15:27:21 <d34dh0r53> #topic conclusion
15:27:30 <d34dh0r53> last meeting of the year
15:27:49 <d34dh0r53> thank you for everything everyone, it's been a really good 2024 for Keystone!
15:27:58 <gtema> yey, thanks guys
15:28:15 <xek> Thank you!
15:28:30 <d34dh0r53> Also, no meeting on the 1st as it's a holiday
15:28:53 <d34dh0r53> All the best to everyone and see you next year :)
15:29:09 <gtema> happy holidays :)
15:29:18 <d34dh0r53> #endmeeting