| *** mhen_ is now known as mhen | 02:03 | |
| opendevreview | Jake Yip proposed openstack/keystone master: Fix inconsistency in CADF initiator name field https://review.opendev.org/c/openstack/keystone/+/916880 | 10:06 |
|---|---|---|
| dmendiza[m] | d34dh0r53 no weekly meeting this week? | 15:04 |
| *** blarnath is now known as d34dh0r53 | 15:10 | |
| d34dh0r53 | o/ | 15:10 |
| d34dh0r53 | sorry, got lost trying to fix a vim configuration issue :/ | 15:11 |
| d34dh0r53 | #startmeeting keystone | 15:11 |
| opendevmeet | Meeting started Wed Apr 24 15:11:15 2024 UTC and is due to finish in 60 minutes. The chair is d34dh0r53. Information about MeetBot at http://wiki.debian.org/MeetBot. | 15:11 |
| opendevmeet | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 15:11 |
| opendevmeet | The meeting name has been set to 'keystone' | 15:11 |
| d34dh0r53 | #topic roll call | 15:11 |
| xek | o/ | 15:11 |
| d34dh0r53 | admiyo, bbobrov, crisloma, d34dh0r53, dpar, dstanek, hrybacki, knikolla[m], lbragstad, lwanderley, kmalloc, rodrigods, samueldmq, ruan_he, wxy, sonuk, vishakha, Ajay, rafaelwe, xek, gmann, zaitcev, reqa, dmendiza[m], mharley, jph, gtema | 15:11 |
| d34dh0r53 | o/ | 15:11 |
| gtema | o/ | 15:11 |
| dmendiza[m] | 🙋♂️ | 15:12 |
| d34dh0r53 | #topic review past meeting work items | 15:13 |
| d34dh0r53 | #link https://meetings.opendev.org/meetings/keystone/2024/keystone.2024-04-17-15.05.html | 15:14 |
| d34dh0r53 | I've started looking at where to add the known issues to the keystone docs, not sure what the best place for it is now, thinking User | 15:14 |
| d34dh0r53 | #action d34dh0r53 Look into adding/restoring a known issues section to our documentation | 15:17 |
| d34dh0r53 | wow, gremlins are real today | 15:17 |
| dmendiza[m] | Does reno have a space for it? | 15:17 |
| d34dh0r53 | these are more global than reno known-issues which to me are per-release | 15:18 |
| dmendiza[m] | Release notes just seems like the natural place to look for known issues | 15:19 |
| dmendiza[m] | 🤷 | 15:19 |
| d34dh0r53 | and then just carry them forward? | 15:21 |
| dmendiza[m] | Yup, unless they get fixed | 15:21 |
| JayF | Reno does have a "issues" section which maps to known issues https://docs.openstack.org/releasenotes/ironic/2024.1.html#known-issues | 15:21 |
| JayF | at least in the way Ironic has it implemented | 15:21 |
| d34dh0r53 | ack, maybe I'll do it there then | 15:22 |
| d34dh0r53 | cool, thanks for the feedback | 15:23 |
| d34dh0r53 | next up | 15:23 |
| d34dh0r53 | #topic liaison updates | 15:23 |
| d34dh0r53 | nothing from VMT or releases | 15:23 |
| d34dh0r53 | moving on to specifications | 15:25 |
| d34dh0r53 | #topic specification OAuth 2.0 (hiromu) | 15:25 |
| d34dh0r53 | #link https://review.opendev.org/q/topic:bp%252Foauth2-client-credentials-ext | 15:25 |
| d34dh0r53 | #link https://review.opendev.org/q/topic:bp%252Fenhance-oauth2-interoperability | 15:25 |
| d34dh0r53 | External OAuth 2.0 Specification | 15:25 |
| d34dh0r53 | #link https://review.opendev.org/c/openstack/keystone-specs/+/861554 | 15:26 |
| d34dh0r53 | OAuth 2.0 Implementation | 15:26 |
| d34dh0r53 | #link https://review.opendev.org/q/topic:bp%252Fsupport-oauth2-mtls | 15:26 |
| d34dh0r53 | OAuth 2.0 Documentation | 15:26 |
| d34dh0r53 | #link https://review.opendev.org/c/openstack/keystone/+/838108 | 15:26 |
| d34dh0r53 | #link https://review.opendev.org/c/openstack/keystoneauth/+/838104 | 15:26 |
| d34dh0r53 | doesn't look like hiromu is around | 15:26 |
| d34dh0r53 | moving on | 15:27 |
| d34dh0r53 | #topic specification | 15:27 |
| d34dh0r53 | #undo | 15:27 |
| opendevmeet | Removing item from minutes: #topic specification | 15:27 |
| d34dh0r53 | #topic specification Secure RBAC (dmendiza[m]) | 15:27 |
| d34dh0r53 | #link https://governance.openstack.org/tc/goals/selected/consistent-and-secure-rbac.html#z-release-timeline_ | 15:27 |
| d34dh0r53 | 2024.1 Release Timeline | 15:27 |
| dmendiza[m] | 🙋♂️ | 15:27 |
| d34dh0r53 | Update oslo.policy in keystone to enforce_new_defaults=True | 15:27 |
| d34dh0r53 | Update oslo.policy in keystone to enforce_scope=True | 15:27 |
| d34dh0r53 | #link https://review.opendev.org/c/openstack/keystone/+/902730 (Merged) | 15:27 |
| d34dh0r53 | #link https://review.opendev.org/c/openstack/keystone-tempest-plugin/+/903713 (Merged) | 15:28 |
| d34dh0r53 | #link https://review.opendev.org/c/openstack/tempest/+/912489 | 15:28 |
| d34dh0r53 | o/ | 15:28 |
| dmendiza[m] | Looks like that last tempest patch merged | 15:28 |
| dmendiza[m] | 🎉 | 15:29 |
| dmendiza[m] | which means that all tempest test for Keystone are being run with SRBAC turned on for new tempest patches | 15:29 |
| dmendiza[m] | We might be able to change the defaults for oslo.policy this cycle. 👀 | 15:31 |
| dmendiza[m] | d34dh0r53 got disconnected :( | 15:33 |
| dmendiza[m] | #chair dmendiza[m] | 15:33 |
| dmendiza[m] | Any questions RE: RBAC? | 15:34 |
| dmendiza[m] | ... OK, moving on ... | 15:34 |
| dmendiza[m] | #topic Improve federated users management (gtema) | 15:35 |
| dmendiza[m] | #link https://review.opendev.org/c/openstack/keystone-specs/+/910584 | 15:35 |
| gtema | on friday there was one comment added to the spec, but it does not really help to move forward. Otherwise still waiting for useful reviews in the spec | 15:35 |
| dmendiza[m] | haven't had a chance to read through it yet. 😅 | 15:38 |
| dmendiza[m] | but in general I am pro-swagger | 15:39 |
| gtema | that was the other spec | 15:39 |
| dmendiza[m] | oops wrong link | 15:39 |
| dmendiza[m] | hmm ... | 15:39 |
| gtema | for adding users projects mapping from external IDP | 15:39 |
| * dmendiza[m] is reading the agenda like a teleprompter | 15:39 | |
| * dmendiza[m] I am dmendiza? 🤔 | 15:39 | |
| gtema | do we have AI kicked in? | 15:40 |
| dmendiza[m] | ok, bad copy pasta on my end | 15:40 |
| dmendiza[m] | 🍝 | 15:40 |
| dmendiza[m] | #undo | 15:40 |
| dmendiza[m] | #link https://review.opendev.org/c/openstack/keystone-specs/+/748748 | 15:40 |
| dmendiza[m] | I think Grzegorz Grasza and d34dh0r53 were looking at this one ... | 15:41 |
| gtema | right | 15:41 |
| dmendiza[m] | I need to make some time to catch up on specs | 15:42 |
| gtema | and as said one non-review comment has been added (only) | 15:42 |
| dmendiza[m] | Ack, we'll discuss on video at this Friday's reviewathon. | 15:44 |
| gtema | thks | 15:44 |
| dmendiza[m] | #action Review https://review.opendev.org/c/openstack/keystone-specs/+/748748 at Reviewathon on 2024-04-26 | 15:45 |
| dmendiza[m] | #topic OpenAPI support (gtema) | 15:46 |
| dmendiza[m] | #link https://review.opendev.org/c/openstack/keystone-specs/+/910584 | 15:46 |
| dmendiza[m] | OK, I am still pro-swagger | 15:46 |
| gtema | great | 15:46 |
| gtema | and here same - waiting for reviews ;-) | 15:46 |
| dmendiza[m] | #action Review https://review.opendev.org/c/openstack/keystone-specs/+/910584 at Reviewathon on 2024-04-26 | 15:49 |
| gtema | thks | 15:49 |
| dmendiza[m] | OK, moving on | 15:49 |
| dmendiza[m] | #topic Open Discussion | 15:49 |
| gtema | nothing from my side | 15:50 |
| *** tobias-urdin4 is now known as tobias-urdin | 15:57 | |
| dmendiza[m] | OK, looks like we're done then | 15:59 |
| dmendiza[m] | since we're almost out of time. | 15:59 |
| dmendiza[m] | We'll review the bug boards next week. | 16:00 |
| dmendiza[m] | #endmeeting | 16:00 |
| dmendiza[m] | I guess the meetbot is not listening to me 😢 | 16:00 |
| dmendiza[m] | See y'all online. Thanks for joining! | 16:01 |
| xek | dmendiza Thanks! | 16:01 |
| d34dh0r53 | #endmeeting | 16:02 |
| opendevmeet | Meeting ended Wed Apr 24 16:02:31 2024 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 16:02 |
| opendevmeet | Minutes: https://meetings.opendev.org/meetings/keystone/2024/keystone.2024-04-24-15.11.html | 16:02 |
| opendevmeet | Minutes (text): https://meetings.opendev.org/meetings/keystone/2024/keystone.2024-04-24-15.11.txt | 16:02 |
| opendevmeet | Log: https://meetings.opendev.org/meetings/keystone/2024/keystone.2024-04-24-15.11.log.html | 16:02 |
| d34dh0r53 | sorry about that, the host my bouncer is running on died for a minute | 16:02 |
| d34dh0r53 | I thought it was gone for good this time | 16:02 |
| d34dh0r53 | Dell 2950x | 16:03 |
| d34dh0r53 | thanks for taking over dmendiza[m] | 16:03 |
| dmendiza[m] | d34dh0r53 I definitely don't miss having to run a bouncer. | 16:05 |
| dmendiza[m] | Now I just use the Matrix -> OFTC bridge on element.io | 16:06 |
| dmendiza[m] | https://matrix-org.github.io/matrix-appservice-irc/latest/bridged_networks.html | 16:06 |
| d34dh0r53 | yeah, I think I just found my reason to get off of it | 16:06 |
| d34dh0r53 | I think that's what I'll do | 16:06 |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!