| *** dviroel|rover|out is now known as dviroel|rover | 01:12 | |
| *** dviroel|rover is now known as dviroel|rover|out | 01:36 | |
| *** blarnath is now known as d34dh0r53 | 03:37 | |
| *** blarnath is now known as d34dh0r53 | 03:52 | |
| *** dviroel|rover|out is now known as dviroel|rover | 11:18 | |
| *** sfinucan is now known as stephenfin | 12:04 | |
| pengo_ | Hello, Does application credentials created as member role with access rule needs any special permissions to list hypervisors via cli? | 12:54 |
|---|---|---|
| pengo_ | Access rule i created for application credentials https://www.irccloud.com/pastebin/1qT5bRY3/ | 12:55 |
| pengo_ | after sourcing the credentials if i would like to list any or resources nothing works | 12:56 |
| pengo_ | openstack hypervisor list | 12:57 |
| pengo_ | The request you have made requires authentication. (HTTP 401) (Request-ID: req-c4532458-5606-4c85-8f93-20e61f57e2c9) | 12:57 |
| pengo_ | is it bug ? | 12:59 |
| *** dasm|off is now known as dasm | 14:00 | |
| knikolla[m] | d34dh0r53: i have a scheduling conflict so i can't make the meeting. | 14:23 |
| d34dh0r53 | knikolla[m]: ack, no worries | 14:24 |
| opendevreview | Hiromu Asahina proposed openstack/keystone-specs master: OAuth 2.0 Mutual-TLS Support https://review.opendev.org/c/openstack/keystone-specs/+/843765 | 14:54 |
| d34dh0r53 | #startmeeting keystone | 15:00 |
| opendevmeet | Meeting started Tue Dec 13 15:00:00 2022 UTC and is due to finish in 60 minutes. The chair is d34dh0r53. Information about MeetBot at http://wiki.debian.org/MeetBot. | 15:00 |
| opendevmeet | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 15:00 |
| opendevmeet | The meeting name has been set to 'keystone' | 15:00 |
| d34dh0r53 | #topic roll call | 15:00 |
| d34dh0r53 | admiyo, bbobrov, crisloma, d34dh0r53, dpar, dstanek, hrybacki, knikolla, lbragstad, lwanderley, kmalloc, rodrigods, samueldmq, ruan_he, wxy, sonuk, vishakha, Ajay, rafaelwe, xek, gmann, zaitcev | 15:00 |
| d34dh0r53 | #topic review past meeting work items | 15:02 |
| d34dh0r53 | #link https://meetings.opendev.org/meetings/keystone/2022/keystone.2022-12-06-15.00.html | 15:03 |
| gmann | o/ | 15:03 |
| d34dh0r53 | we didn't really have a reviewathon so I'm going to push those items to next week | 15:03 |
| d34dh0r53 | o/ gmann | 15:03 |
| d34dh0r53 | err, this week | 15:03 |
| d34dh0r53 | #action reviewathon https://review.opendev.org/c/openstack/keystoneauth/+/838104 | 15:03 |
| hiromu | o/ | 15:03 |
| d34dh0r53 | #action reviewathon https://review.opendev.org/c/openstack/keystone/+/838108 | 15:04 |
| d34dh0r53 | o/ hiromu | 15:04 |
| d34dh0r53 | #action reviewathon https://review.opendev.org/c/openstack/keystone/+/860928 | 15:04 |
| d34dh0r53 | #action reviewathon https://review.opendev.org/c/openstack/keystoneauth/+/860923 | 15:04 |
| d34dh0r53 | I still haven't had a chance to look at the user-defined attribute control, but things are starting to slow down for the end of the year so I should be able to look into that | 15:05 |
| gmann | there is service role implementation also up https://review.opendev.org/c/openstack/keystone/+/863420 | 15:05 |
| d34dh0r53 | #action d34dh0r53 look into user-defined attribute access control | 15:06 |
| d34dh0r53 | gmann: ack, thanks, I'll add it to the list to look at this week | 15:07 |
| d34dh0r53 | #action reviewathon https://review.opendev.org/c/openstack/keystone/+/863420 | 15:07 |
| d34dh0r53 | and a couple of house cleaning reviews for knikolla[m] :) | 15:08 |
| d34dh0r53 | #action knikolla[m] please review https://review.opendev.org/c/openstack/pycadf/+/863702 | 15:08 |
| d34dh0r53 | #action knikolla[m] please review https://review.opendev.org/c/openstack/keystonemiddleware/+/866805 | 15:08 |
| d34dh0r53 | I think that does it for the past meeting work items | 15:09 |
| d34dh0r53 | #topic liaison updates | 15:09 |
| d34dh0r53 | nothing from VMT | 15:09 |
| d34dh0r53 | and I don't think we have anything from release management | 15:10 |
| d34dh0r53 | #help Please let me know if you're interested in volunteering for a liaison role | 15:10 |
| d34dh0r53 | #topic specification OAuth 2.0 (hiromu) | 15:10 |
| d34dh0r53 | #link https://review.opendev.org/q/topic:bp%252Foauth2-client-credentials-ext | 15:11 |
| d34dh0r53 | #link https://review.opendev.org/c/openstack/keystone-specs/+/843765 | 15:11 |
| hiromu | i've just updated the spec according to knikolla's comment | 15:11 |
| hiromu | https://review.opendev.org/c/openstack/keystone-specs/+/843765 | 15:11 |
| hiromu | https://review.opendev.org/c/openstack/keystone-specs/+/843765/17..18 . this might be better. | 15:12 |
| d34dh0r53 | hiromu: I saw that, thank you! | 15:12 |
| hiromu | :) | 15:12 |
| hiromu | i'd like to quickly check it again at the reviewathon this week | 15:12 |
| hiromu | also, move forward to the review of codes: https://review.opendev.org/c/openstack/keystone/+/860613, if possible. | 15:13 |
| d34dh0r53 | hiromu: ok, I'll make sure we hold one and try to ensure that knikolla[m] and xek are there | 15:13 |
| hiromu | great. thanks. | 15:13 |
| d34dh0r53 | no problem, thank you | 15:14 |
| d34dh0r53 | #topic specification Secure RBAC (dmendiza[m]) | 15:14 |
| d34dh0r53 | #link https://governance.openstack.org/tc/goals/selected/consistent-and-secure-rbac.html#z-release-timeline_ | 15:15 |
| d34dh0r53 | The Service Role Spec was merged, yay! | 15:15 |
| d34dh0r53 | now on to reviewing the implementation code | 15:16 |
| d34dh0r53 | #link https://review.opendev.org/c/openstack/keystone/+/863420 | 15:17 |
| d34dh0r53 | also, we need more reviews on the Manager Role Implementation | 15:17 |
| d34dh0r53 | #link https://review.opendev.org/c/openstack/keystone/+/822601 | 15:17 |
| d34dh0r53 | anything I missed for Secure RBAC? | 15:18 |
| gmann | I think that is all | 15:19 |
| d34dh0r53 | ack, thanks gmann! | 15:20 |
| d34dh0r53 | moving on to open discussion | 15:20 |
| d34dh0r53 | #topic open discussion | 15:20 |
| d34dh0r53 | drencrom: zuul failing because test-requirements not compatible with python 3.10 (see https://review.opendev.org/c/openstack/keystonemiddleware/+/860481) | 15:21 |
| zaitcev | Is Dave our PTL still? | 15:21 |
| d34dh0r53 | zaitcev: yes, I'm the PTL | 15:21 |
| d34dh0r53 | zaitcev: can I help with something? | 15:25 |
| zaitcev | d34dh0r53: Did you see my e-mail on Thursday? Maybe it went to wrong Dave. | 15:25 |
| d34dh0r53 | zaitcev: what was the subject, I was heads down last week and may have missed it | 15:26 |
| zaitcev | d34dh0r53: "Keystone work" | 15:26 |
| d34dh0r53 | zaitcev: ahh, just found it, you sent it to the correct Dave, the correct Dave didn't reply, my bad | 15:29 |
| zaitcev | d34dh0r53: np | 15:30 |
| d34dh0r53 | zaitcev: are you available on Friday from 9-10 Central (15:00-16:00 UTC)? | 15:31 |
| zaitcev | d34dh0r53: yes | 15:31 |
| d34dh0r53 | that is when we have our reviewathons, I'll forward you the invite and it will give you a good idea of what we're prioritizing in terms of reviews/issues | 15:31 |
| d34dh0r53 | awesome! | 15:31 |
| d34dh0r53 | back to the meeting | 15:32 |
| zaitcev | oh, I tried to make it, but I was unable to find out where review-a-thon was held. | 15:32 |
| d34dh0r53 | drencrom: zuul failing because test-requirements not compatible with python 3.10 (see https://review.opendev.org/c/openstack/keystonemiddleware/+/860481) | 15:32 |
| d34dh0r53 | this needs one of the housekeeping reviews to merge: https://review.opendev.org/c/openstack/keystonemiddleware/+/866805 | 15:32 |
| d34dh0r53 | hopefully knikolla[m] can give that one the go ahead | 15:33 |
| d34dh0r53 | anything else before we move to bug review? | 15:33 |
| d34dh0r53 | #topic bug review | 15:33 |
| d34dh0r53 | first up #link https://bugs.launchpad.net/keystone/?orderby=-id&start=0 | 15:34 |
| d34dh0r53 | I just replied to https://bugs.launchpad.net/keystone/+bug/1999294 asking for more information | 15:36 |
| d34dh0r53 | another new one, https://bugs.launchpad.net/keystone/+bug/1999068 | 15:37 |
| d34dh0r53 | that's interesting, we'll need to dig into that one | 15:38 |
| d34dh0r53 | that's the new bugs for Keystone | 15:38 |
| d34dh0r53 | next up we have | 15:39 |
| d34dh0r53 | #link https://bugs.launchpad.net/python-keystoneclient/?orderby=-id&start=0 | 15:39 |
| d34dh0r53 | nothing new for python-keystoneclient | 15:39 |
| d34dh0r53 | #link https://bugs.launchpad.net/keystoneauth/+bugs?orderby=-id&start=0 | 15:39 |
| d34dh0r53 | https://bugs.launchpad.net/keystoneauth/+bug/1999431 is new | 15:40 |
| zaitcev | Hooold on. Is this not the time when you make someone volunteer for every specific bug and see it through? Or how it's done in Keystone? The one you answered and asked for logs is fine, but the other is set to fall through cracks. | 15:40 |
| d34dh0r53 | zaitcev: well, we're running a bit short on volunteers these days :) | 15:41 |
| zaitcev | ok, sorry. How about this, I'll try to reproduce 1999068 | 15:41 |
| d34dh0r53 | I'm planning on using some of my EOY time to try to triage and wrangle our bug backlogs | 15:42 |
| d34dh0r53 | zaitcev: that would be awesome! | 15:42 |
| d34dh0r53 | https://bugs.launchpad.net/keystoneauth/+bug/1999431 is low-hanging-fruit, any volunteers on that one? | 15:43 |
| d34dh0r53 | let me know, or I'll take it | 15:44 |
| d34dh0r53 | that does it for keystoneauth | 15:45 |
| d34dh0r53 | #link https://bugs.launchpad.net/keystonemiddleware/+bugs?orderby=-id&start=0 | 15:46 |
| d34dh0r53 | nothing new for keystonemiddleware | 15:46 |
| d34dh0r53 | #link https://bugs.launchpad.net/pycadf/+bugs?orderby=-id&start=0 | 15:46 |
| d34dh0r53 | pycadf has nothing new | 15:46 |
| d34dh0r53 | #link https://bugs.launchpad.net/ldappool/+bugs?orderby=-id&start=0 | 15:47 |
| d34dh0r53 | neither does ldappool | 15:47 |
| d34dh0r53 | that does it for bug review, thanks for taking the reproducer on the app-cred bug zaitcev | 15:47 |
| d34dh0r53 | #topic conclusion | 15:48 |
| d34dh0r53 | anything else before we go? | 15:48 |
| d34dh0r53 | thanks everyone! see y'all at the reviewathon | 15:49 |
| d34dh0r53 | #endmeeting | 15:49 |
| opendevmeet | Meeting ended Tue Dec 13 15:49:09 2022 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 15:49 |
| opendevmeet | Minutes: https://meetings.opendev.org/meetings/keystone/2022/keystone.2022-12-13-15.00.html | 15:49 |
| opendevmeet | Minutes (text): https://meetings.opendev.org/meetings/keystone/2022/keystone.2022-12-13-15.00.txt | 15:49 |
| opendevmeet | Log: https://meetings.opendev.org/meetings/keystone/2022/keystone.2022-12-13-15.00.log.html | 15:49 |
| *** dviroel|rover is now known as dviroel|rover|lunch | 15:57 | |
| *** dviroel|rover|lunch is now known as dviroel|rover | 16:50 | |
| *** dasm is now known as dasm|off | 19:26 | |
| *** dviroel|rover is now known as dviroel|out | 21:58 | |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!