opendevreview | Rafael Weingartner proposed openstack/keystone master: Keystone to honor the "domain" attribute mapping rules. https://review.opendev.org/c/openstack/keystone/+/739966 | 14:10 |
---|---|---|
d34dh0r53 | #startmeeting keystone | 15:00 |
opendevmeet | Meeting started Wed Jan 3 15:00:13 2024 UTC and is due to finish in 60 minutes. The chair is d34dh0r53. Information about MeetBot at http://wiki.debian.org/MeetBot. | 15:00 |
opendevmeet | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 15:00 |
opendevmeet | The meeting name has been set to 'keystone' | 15:00 |
d34dh0r53 | #topic roll call | 15:00 |
xek | o/ | 15:00 |
d34dh0r53 | admiyo, bbobrov, crisloma, d34dh0r53, dpar, dstanek, hrybacki, knikolla[m], lbragstad, lwanderley, kmalloc, rodrigods, samueldmq, ruan_he, wxy, sonuk, vishakha, Ajay, rafaelwe, xek, gmann, zaitcev, reqa, dmendiza[m], mharley | 15:00 |
d34dh0r53 | o/ | 15:00 |
dmendiza[m] | 🙋 | 15:01 |
d34dh0r53 | #topic review past meeting work items | 15:02 |
d34dh0r53 | #link https://meetings.opendev.org/meetings/keystone/2023/keystone.2023-12-20-15.01.html | 15:02 |
d34dh0r53 | both are for me, and I don't have an update on either | 15:02 |
d34dh0r53 | #action d34dh0r53 Look into adding/restoring a known issues section to our documentation | 15:03 |
d34dh0r53 | #action d34dh0r53 add https://bugs.launchpad.net/keystone/+bug/1305950 to the known issues section of our documentation | 15:03 |
d34dh0r53 | next up | 15:03 |
d34dh0r53 | #topic liaison updates | 15:03 |
d34dh0r53 | nothing from release or VMT | 15:03 |
d34dh0r53 | #topic specification OAuth 2.0 (hiromu) | 15:04 |
d34dh0r53 | #link https://review.opendev.org/q/topic:bp%252Foauth2-client-credentials-ext | 15:05 |
d34dh0r53 | #link https://review.opendev.org/q/topic:bp%252Fenhance-oauth2-interoperability | 15:05 |
d34dh0r53 | External OAuth 2.0 Specification | 15:05 |
d34dh0r53 | #link https://review.opendev.org/c/openstack/keystone-specs/+/861554 | 15:05 |
d34dh0r53 | OAuth 2.0 Implementation | 15:05 |
d34dh0r53 | #link https://review.opendev.org/q/topic:bp%252Fsupport-oauth2-mtls | 15:05 |
d34dh0r53 | OAuth 2.0 Documentation | 15:05 |
d34dh0r53 | #link https://review.opendev.org/c/openstack/keystone/+/838108 | 15:05 |
d34dh0r53 | #link https://review.opendev.org/c/openstack/keystoneauth/+/838104 | 15:05 |
d34dh0r53 | doesn't look like hiromu is around today | 15:07 |
d34dh0r53 | #topic Secure RBAC (dmendiza[m]) | 15:07 |
d34dh0r53 | #link https://governance.openstack.org/tc/goals/selected/consistent-and-secure-rbac.html#z-release-timeline_ | 15:07 |
d34dh0r53 | 2024.1 Release Timeline | 15:07 |
d34dh0r53 | Update oslo.policy in keystone to enforce_new_defaults=True | 15:07 |
d34dh0r53 | Update oslo.policy in keystone to enforce_scope=True | 15:07 |
d34dh0r53 | #link https://review.opendev.org/c/openstack/keystone/+/902730 | 15:07 |
dmendiza[m] | 🙋 | 15:09 |
dmendiza[m] | Yeah, so, I'm just getting back into the swing of things after the holiday break | 15:09 |
dmendiza[m] | Policy changes for Phase 1 are still in flight | 15:09 |
d34dh0r53 | understood, I'm trying to remember the before times as well :) | 15:10 |
dmendiza[m] | I updated the patch you linked before the break | 15:10 |
dmendiza[m] | to change a few policies I missed that only had scope = ['system', 'domain'] | 15:10 |
d34dh0r53 | cool, I'll take a look at it today | 15:10 |
dmendiza[m] | so I added 'project' to those | 15:10 |
d34dh0r53 | ok | 15:11 |
dmendiza[m] | and now I've still got to update the Tempest patch to account for those changes | 15:11 |
d34dh0r53 | are they linked as dependent? | 15:11 |
dmendiza[m] | Yeah, the tempest patch depends on the Keystone one | 15:13 |
dmendiza[m] | give me a sec I'll get the link to that one | 15:13 |
d34dh0r53 | cool | 15:13 |
dmendiza[m] | #link https://review.opendev.org/c/openstack/keystone-tempest-plugin/+/903713 | 15:14 |
d34dh0r53 | thanks dmendiza[m] | 15:16 |
d34dh0r53 | #topic specification Add schema version and support to "domain" attribute in mapping rules (gtema) | 15:16 |
d34dh0r53 | #link https://review.opendev.org/c/openstack/keystone-specs/+/748042 (merged) | 15:16 |
d34dh0r53 | #link https://review.opendev.org/c/openstack/keystone/+/739966 | 15:16 |
gtema | I started testing the change of Rafael yesterday and found some issues, but we are definitely having progress on it | 15:17 |
d34dh0r53 | excellent, thanks for the update gtema | 15:18 |
d34dh0r53 | I'll take a look this week as well | 15:19 |
gtema | awesome | 15:19 |
d34dh0r53 | #topic open discussion | 15:19 |
d34dh0r53 | nothing on the agenda, anyone have anything? | 15:19 |
d34dh0r53 | #topic bug review | 15:21 |
d34dh0r53 | #link https://bugs.launchpad.net/keystone/?orderby=-id&start=0 | 15:22 |
d34dh0r53 | keystone has one new bug that has a review up | 15:22 |
d34dh0r53 | #link https://bugs.launchpad.net/keystone/+bug/2047641 | 15:22 |
d34dh0r53 | please review if you have the chance | 15:23 |
d34dh0r53 | #link https://bugs.launchpad.net/python-keystoneclient/?orderby=-id&start=0 | 15:23 |
d34dh0r53 | no bugs in python-keystoneclient | 15:23 |
d34dh0r53 | #link https://bugs.launchpad.net/keystoneauth/+bugs?orderby=-id&start=0 | 15:24 |
d34dh0r53 | nor in keystoneauth | 15:24 |
d34dh0r53 | #link https://bugs.launchpad.net/keystonemiddleware/+bugs?orderby=-id&start=0 | 15:24 |
d34dh0r53 | keystonemiddleware is clean | 15:24 |
d34dh0r53 | #link https://bugs.launchpad.net/pycadf/+bugs?orderby=-id&start=0 | 15:25 |
d34dh0r53 | pycadf is looking good | 15:25 |
d34dh0r53 | #link https://bugs.launchpad.net/ldappool/+bugs?orderby=-id&start=0 | 15:25 |
d34dh0r53 | as is ldappool | 15:25 |
d34dh0r53 | #topic conclusion | 15:25 |
d34dh0r53 | Happy | 15:25 |
d34dh0r53 | New Year! | 15:25 |
d34dh0r53 | My resolution this year is to learn where the enter key is | 15:26 |
d34dh0r53 | Thanks for joining folks! | 15:26 |
d34dh0r53 | Let me know if you need anything | 15:26 |
d34dh0r53 | #endmeeting | 15:26 |
opendevmeet | Meeting ended Wed Jan 3 15:26:41 2024 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 15:26 |
opendevmeet | Minutes: https://meetings.opendev.org/meetings/keystone/2024/keystone.2024-01-03-15.00.html | 15:26 |
opendevmeet | Minutes (text): https://meetings.opendev.org/meetings/keystone/2024/keystone.2024-01-03-15.00.txt | 15:26 |
opendevmeet | Log: https://meetings.opendev.org/meetings/keystone/2024/keystone.2024-01-03-15.00.log.html | 15:26 |
gtema | same to you, thanks | 15:26 |
*** dasm is now known as Guest12729 | 16:20 |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!