15:01:41 <gtema> #startmeeting keystone 15:01:41 <opendevmeet> Meeting started Wed Jul 2 15:01:41 2025 UTC and is due to finish in 60 minutes. The chair is gtema. Information about MeetBot at http://wiki.debian.org/MeetBot. 15:01:41 <opendevmeet> Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. 15:01:41 <opendevmeet> The meeting name has been set to 'keystone' 15:01:51 <gtema> Reminder: This meeting takes place under the OpenInfra Foundation Code of Conduct 15:02:09 <gtema> #link https://openinfra.dev/legal/code-of-conduct 15:02:27 <gtema> #topic roll call 15:02:38 <gtema> admiyo, bbobrov, crisloma, d34dh0r53, dpar, dstanek, hrybacki, lbragstad, lwanderley, kmalloc, rodrigods, samueldmq, ruan_he, wxy, sonuk, vishakha, Ajay, rafaelwe, xek, gmann, zaitcev, reqa, dmendiza[m], dmendiza, mharley, jph, gtema, cardoe, deydra 15:02:45 <gtema> o/ 15:03:09 <mharley[m]> o/ 15:04:26 <gtema> a special ping for dmendiza 15:04:49 <gtema> quite lonely today 15:06:05 <gtema> with nobody else from the cores it makes no sense to proceed with the meeting. 15:06:16 <dmendiza[m]> 🙋♂️ 15:06:29 <gtema> oh, you are here, great 15:06:39 <gtema> than let's go on 15:06:51 <gtema> #topic review past meeting work items 15:07:07 <gtema> #link https://meetings.opendev.org/meetings/keystone/2025/keystone.2025-06-25-15.00.html 15:08:07 <gtema> we still have not done any decision on Forum and/or project update. Since lot of folks not traveling most likely we are not going to have anything 15:08:25 <gtema> #topic liaison updates 15:08:34 <gtema> there is nothing from me 15:09:30 <gtema> ok, next 15:09:33 <gtema> #topic specification 15:09:47 <gtema> #topic OAuth 2.0 15:10:25 <gtema> still not sure why we keep this. There is nothing really open on that 15:10:52 <gtema> #topic Secure RBAC (dmendiza) 15:11:45 <gtema> I spotted some changes in the area, am I right dmendiza ? 15:12:10 <dmendiza[m]> Well, I still need to clean up the doc itself 15:12:17 <dmendiza[m]> I did talk to Dave Wilde (d34dh0r53) a bit about this the other day 15:12:36 <dmendiza[m]> I think what we want to do is ensure that we're running with SRBAC turned on in all our gate jobs 15:13:12 <gtema> isn't it already the case? The defaults are now as we expect in oslo.policy 15:13:43 <dmendiza[m]> Maybe? ... I want to review the job definitions to double make sure. 😅 15:14:19 <gtema> my grep across repo hasn't revealed any overrides to the values 15:15:03 <dmendiza[m]> Cool cool. We should probably consider removing the old policies at some point 15:15:27 <gtema> definitely 15:15:52 <gtema> ok, next 15:16:00 <gtema> #topic OpenAPI support (gtema) 15:16:30 <gtema> there are few changes that I myself still need to review. Nothing blocking and nothing urgent this week 15:17:24 <gtema> #topic open discussion 15:17:50 <gtema> I spent a little bit time last friday looking at the ldap job 15:18:25 <gtema> after proposing a "workaround" to devstack I was able to bypass the slapd bug 15:18:49 <gtema> but now tests fail on jsonschema validation 15:19:12 <gtema> "enabled" attribute is missing in the response for ldap users 15:19:39 <gtema> I was not able to find a potential problem quickly 15:20:04 <gtema> and this week have no time to look into that issue 15:20:45 <gtema> if anybody with more ldap deployment experience could throw some hints I would be glad to take those 15:21:12 <gtema> #link https://review.opendev.org/c/openstack/keystone/+/953571 15:21:49 <gtema> the change is passing because the job is non-voting, so do not be confused with that 15:22:35 <gtema> anything else for open discussion? 15:23:41 <mharley[m]> Yes, how is it going the writing of Keystone to Rust? 15:23:53 <mharley[m]> The "rewriting", I mean. 15:25:23 <gtema> Good. I started writing policies. Now we not only have "allowed", "rejected", but we also have explanations like "only admin can list identity providers from other domain ..." 15:26:03 <gtema> federated login (oidc) works also. Next is to implement exchange of jwt to fernet 15:26:33 <mharley[m]> Great. Are you doing that all by yourself only (no other contributors)? 15:26:47 <gtema> So far alone alone 15:27:27 <gtema> I hoped to have a talk on that during Summit, but it was not accepted 15:27:43 <gtema> to make an advertisement 15:28:34 <mharley[m]> Are you organizing this on some public repository, including the planning? 15:29:03 <gtema> yes, https://github.com/gtema/keystone 15:29:37 <gtema> I made some org issues, but as long as I work on that myself it is a time waste 15:31:37 <gtema> anything else folks? 15:32:25 <gtema> ok, moving on 15:32:27 <gtema> #topic bug review 15:33:03 <mharley[m]> Understood. Will have a look. Thanks, gtema. 15:33:16 <gtema> I am not going to re-paste all the links, but there are no new bug reports for any of our projects, so we are good. 15:33:27 <gtema> #topic conclusion 15:33:47 <gtema> with that, thanks guys 15:33:49 <gtema> and 15:33:56 <gtema> have a nice day 15:34:10 <gtema> #endmeeting