15:01:12 <d34dh0r53> #startmeeting keystone
15:01:12 <opendevmeet> Meeting started Wed Jan  8 15:01:12 2025 UTC and is due to finish in 60 minutes.  The chair is d34dh0r53. Information about MeetBot at http://wiki.debian.org/MeetBot.
15:01:12 <opendevmeet> Useful Commands: #action #agreed #help #info #idea #link #topic #startvote.
15:01:12 <opendevmeet> The meeting name has been set to 'keystone'
15:01:42 <d34dh0r53> Reminder: This meeting takes place under the OpenInfra Foundation Code of Conduct
15:01:49 <d34dh0r53> #link https://openinfra.dev/legal/code-of-conduct
15:01:58 <d34dh0r53> #topic roll call
15:02:08 <d34dh0r53> admiyo, bbobrov, crisloma, d34dh0r53, dpar, dstanek, hrybacki, lbragstad, lwanderley, kmalloc, rodrigods, samueldmq, ruan_he, wxy, sonuk, vishakha, Ajay, rafaelwe, xek, gmann, zaitcev, reqa, dmendiza[m], dmendiza, mharley, jph, gtema, cardoe
15:05:50 <d34dh0r53> #topic review past meeting work items
15:06:05 <d34dh0r53> #link https://meetings.opendev.org/meetings/keystone/2024/keystone.2024-12-18-15.04.html
15:06:08 <gtema> o/
15:06:26 <d34dh0r53> hi gtema (Artem Goncharov) Happy New Year :)
15:06:39 <d34dh0r53> nothing to review from our last meeting
15:06:41 <gtema> happy New Year Dave
15:06:55 <d34dh0r53> #topic liaison updates
15:07:03 <d34dh0r53> nothing from VMT or releases
15:07:21 <d34dh0r53> #topic specification OAuth 2.0 (hiromu)
15:07:24 <d34dh0r53> #link https://review.opendev.org/q/topic:bp%252Foauth2-client-credentials-ext
15:07:34 <d34dh0r53> #link https://review.opendev.org/q/topic:bp%252Fenhance-oauth2-interoperability
15:07:40 <d34dh0r53> External OAuth 2.0 Specification
15:07:41 <d34dh0r53> #link https://review.opendev.org/c/openstack/keystone-specs/+/861554 (merged)
15:07:46 <d34dh0r53> OAuth 2.0 Implementation
15:07:51 <d34dh0r53> #link https://review.opendev.org/q/topic:bp%252Fsupport-oauth2-mtls
15:07:53 <d34dh0r53> OAuth 2.0 Documentation
15:07:56 <d34dh0r53> #link https://review.opendev.org/c/openstack/keystone/+/838108 (merged)
15:08:00 <d34dh0r53> #link https://review.opendev.org/c/openstack/keystoneauth/+/838104 (merged)
15:08:21 <d34dh0r53> no updates from me on this stuff, going to look at it this week
15:08:26 <d34dh0r53> #topic specification Secure RBAC (dmendiza[m])
15:08:29 <d34dh0r53> #link https://governance.openstack.org/tc/goals/selected/consistent-and-secure-rbac.html#z-release-timeline_
15:08:31 <d34dh0r53> 2024.1 Release Timeline
15:08:34 <d34dh0r53> Update oslo.policy in keystone to enforce_new_defaults=True
15:08:41 <d34dh0r53> Update oslo.policy in keystone to enforce_scope=True
15:14:29 <d34dh0r53> Sorry, had to step away for a minute
15:14:36 <d34dh0r53> Guess dmendiza isn't around
15:14:37 <gtema> np
15:14:38 <d34dh0r53> next up
15:14:44 <d34dh0r53> #topic specification OpenAPI support (gtema)
15:14:48 <d34dh0r53> #link https://review.opendev.org/q/topic:%22openapi%22+project:openstack/keystone
15:15:02 <gtema> few changes are reviewed by me and are ok to go
15:15:33 <gtema> few changes are now parent-less since one student graduated, so I will take ownership over them
15:15:44 <d34dh0r53> ack
15:16:04 <gtema> today wanted to start working on pagination of users/groups and figured those are still without openapi, so will do that first
15:16:15 <d34dh0r53> ok
15:16:40 <d34dh0r53> I'll take a look at the remaining openapi patches
15:16:58 <gtema> great, thks
15:17:26 <gtema> there are still lots of resources not touched yet, but - it goes slowly
15:17:45 <dmendiza[m]> 🙋
15:17:53 <d34dh0r53> ohai dmendiza
15:18:02 <gtema> hey ho
15:19:16 <dmendiza[m]> For some reason the roll call ping never dings on my end
15:21:32 <d34dh0r53> hmm, might be my copy pasta
15:22:25 <gtema> maybe it's a global notification settings?
15:22:59 <gtema> I just switched to mac (new employer) and also first didn't got any notification do some global mess
15:23:01 <dmendiza[m]> yeah, might be something with paste, because only the > "Guess /me is not here" dinged
15:24:34 <d34dh0r53> ack, I'll special ding you from now on
15:24:49 <d34dh0r53> :)
15:24:56 <d34dh0r53> any updates on s-rbac?
15:25:14 <d34dh0r53> I wonder if Grzegorz Grasza 's ding is the same
15:30:53 <d34dh0r53> ok, moving on
15:30:59 <d34dh0r53> #topic specification domain manager (mhen)
15:31:02 <d34dh0r53> still unmerged are:
15:31:05 <d34dh0r53> documentation: https://review.opendev.org/c/openstack/keystone/+/928135
15:31:08 <d34dh0r53> tempest tests: https://review.opendev.org/c/openstack/keystone-tempest-plugin/+/924222
15:31:40 <d34dh0r53> dmendiza: can you review these this week?
15:33:38 <dmendiza[m]> Ack, I'll get those going
15:33:46 <d34dh0r53> thank you
15:33:50 <d34dh0r53> next up
15:33:56 <d34dh0r53> #topic specification Include bad password details in audit messages (stanislav-z)
15:33:59 <d34dh0r53> #link https://review.opendev.org/c/openstack/keystone-specs/+/915482
15:34:01 <d34dh0r53> #link https://review.opendev.org/c/openstack/keystone/+/932423
15:34:04 <d34dh0r53> 8-Jan update: there are some open conversations in the spec - would appreciate the feedback
15:34:06 <d34dh0r53> Docs build/gate fix is here #link https://review.opendev.org/c/openstack/keystone-specs/+/938012
15:34:33 <gtema> i +1ed job fix
15:34:35 <d34dh0r53> I reviewed the docs build/gate patch
15:35:00 <d34dh0r53> dmendiza: maybe you can give https://review.opendev.org/c/openstack/keystone-specs/+/938012 the final push
15:35:32 <stanislav-z> many thanks!
15:38:01 <d34dh0r53> np Sta
15:38:13 <d34dh0r53> * np Stanislav Zaprudskiy
15:38:23 <d34dh0r53> next up
15:38:28 <d34dh0r53> #topic open discussion
15:38:32 <d34dh0r53> I don't have anything
15:39:21 <gtema> me neither
15:40:15 <d34dh0r53> ok, next up
15:40:20 <d34dh0r53> #topic bug review
15:40:23 <d34dh0r53> #link https://bugs.launchpad.net/keystone/?orderby=-id&start=0
15:40:31 <d34dh0r53> We have one new bug in keystone
15:40:44 <d34dh0r53> #link https://bugs.launchpad.net/keystone/+bug/2092660
15:41:08 <d34dh0r53> I know we updated our devstack uwsgi configuration
15:41:16 <d34dh0r53> do our docs need updating as well?
15:41:57 <gtema> well, we introduced new modules for wsgi start
15:42:15 <gtema> I will check whether docs need update, but afaik that was updated as well.
15:42:50 <gtema> one of the reasons behind the change was pbr and python dropping the way for wsgi scripts
15:43:49 <gtema> i took report over and will check this week
15:44:49 <d34dh0r53> thanks gtema
15:44:58 <d34dh0r53> #link https://bugs.launchpad.net/python-keystoneclient/?orderby=-id&start=0
15:45:06 <d34dh0r53> no new bugs for python-keystoneclient
15:45:09 <d34dh0r53> #link https://bugs.launchpad.net/keystoneauth/+bugs?orderby=-id&start=0
15:45:15 <d34dh0r53> keystoneauth has no new bugs
15:45:18 <d34dh0r53> #link https://bugs.launchpad.net/keystonemiddleware/+bugs?orderby=-id&start=0
15:45:24 <d34dh0r53> nor does keystonemiddleware
15:45:28 <d34dh0r53> #link https://bugs.launchpad.net/pycadf/+bugs?orderby=-id&start=0
15:45:31 <d34dh0r53> pycadf is good
15:45:35 <d34dh0r53> #link https://bugs.launchpad.net/ldappool/+bugs?orderby=-id&start=0
15:45:40 <d34dh0r53> so is ldappool
15:45:47 <d34dh0r53> #topic conclusion
15:46:18 <d34dh0r53> Happy New Year everyone, looking forward to another great year in Keystone land :)
15:47:00 <gtema> yeah, hopefully it is going to be a good year
15:47:33 <d34dh0r53> indeed
15:47:36 <d34dh0r53> #endmeeting