| opendevreview | Merged openstack/keystone-specs master: Keystone identity mapping to support project definition as a JSON https://review.opendev.org/c/openstack/keystone-specs/+/748748 | 14:53 |
|---|---|---|
| d34dh0r53 | #startmeeting keystone | 15:00 |
| opendevmeet | Meeting started Wed Jul 10 15:00:45 2024 UTC and is due to finish in 60 minutes. The chair is d34dh0r53. Information about MeetBot at http://wiki.debian.org/MeetBot. | 15:00 |
| opendevmeet | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 15:00 |
| opendevmeet | The meeting name has been set to 'keystone' | 15:00 |
| d34dh0r53 | #topic roll call | 15:00 |
| d34dh0r53 | admiyo, bbobrov, crisloma, d34dh0r53, dpar, dstanek, hrybacki, knikolla[m], lbragstad, lwanderley, kmalloc, rodrigods, samueldmq, ruan_he, wxy, sonuk, vishakha, Ajay, rafaelwe, xek, gmann, zaitcev, reqa, dmendiza[m], mharley, jph, gtema | 15:01 |
| gtema | o/ | 15:01 |
| d34dh0r53 | o/ | 15:01 |
| mhen | o/ | 15:01 |
| d34dh0r53 | #topic review past meeting work items | 15:03 |
| d34dh0r53 | #link https://meetings.opendev.org/meetings/keystone/2024/keystone.2024-07-03-15.01.html | 15:03 |
| d34dh0r53 | d34dh0r53 move reviewathon to 14:00 UTC for Daylight time | 15:03 |
| d34dh0r53 | this has been done, let me know if you need an invite and I can add you | 15:04 |
| d34dh0r53 | no more action items from last week | 15:04 |
| d34dh0r53 | #topic liaison updates | 15:04 |
| d34dh0r53 | nothing from either vmt or releases | 15:04 |
| d34dh0r53 | #topic specification | 15:04 |
| d34dh0r53 | #undo | 15:04 |
| opendevmeet | Removing item from minutes: #topic specification | 15:04 |
| d34dh0r53 | #topic specification OAuth | 15:05 |
| d34dh0r53 | #undo | 15:05 |
| opendevmeet | Removing item from minutes: #topic specification OAuth | 15:05 |
| d34dh0r53 | stupid fingers | 15:05 |
| d34dh0r53 | #topic specification OAuth 2.0 | 15:05 |
| d34dh0r53 | #link https://review.opendev.org/q/topic:bp%252Foauth2-client-credentials-ext | 15:05 |
| d34dh0r53 | #link https://review.opendev.org/q/topic:bp%252Fenhance-oauth2-interoperability | 15:05 |
| d34dh0r53 | External OAuth 2.0 Specification | 15:06 |
| d34dh0r53 | #link https://review.opendev.org/c/openstack/keystone-specs/+/861554 (merged) | 15:06 |
| d34dh0r53 | OAuth 2.0 Implementation | 15:06 |
| d34dh0r53 | #link https://review.opendev.org/q/topic:bp%252Fsupport-oauth2-mtls | 15:06 |
| d34dh0r53 | OAuth 2.0 Documentation | 15:06 |
| d34dh0r53 | #link https://review.opendev.org/c/openstack/keystone/+/838108 (merged) | 15:06 |
| d34dh0r53 | #link https://review.opendev.org/c/openstack/keystoneauth/+/838104 (merged) | 15:06 |
| d34dh0r53 | no updates from me | 15:06 |
| d34dh0r53 | next up | 15:07 |
| d34dh0r53 | #topic specification Secure RBAC ( dmendiza ) | 15:07 |
| d34dh0r53 | #link https://governance.openstack.org/tc/goals/selected/consistent-and-secure-rbac.html#z-release-timeline_ | 15:07 |
| d34dh0r53 | 2024.1 Release Timeline | 15:07 |
| dmendiza[m] | 🙋♂️ | 15:07 |
| d34dh0r53 | Update oslo.policy in keystone to enforce_new_defaults=True | 15:07 |
| dmendiza[m] | Heya! | 15:07 |
| d34dh0r53 | Update oslo.policy in keystone to enforce_scope=True | 15:07 |
| dmendiza[m] | I don't think I have any updates this week. | 15:08 |
| d34dh0r53 | #link https://review.opendev.org/c/openstack/keystone/+/902730 (Merged) | 15:08 |
| d34dh0r53 | #link https://review.opendev.org/c/openstack/keystone-tempest-plugin/+/903713 (Merged) | 15:08 |
| d34dh0r53 | #link https://review.opendev.org/c/openstack/tempest/+/912489 (Merged) | 15:08 |
| dmendiza[m] | I meant to look at the domain-manager spec, but I can't remember if I saw it or not? 🤔 | 15:08 |
| d34dh0r53 | ack, thanks dmendiza | 15:08 |
| gtema | generally you saw it few times | 15:08 |
| gtema | and there were just minor nits which were addressed | 15:08 |
| d34dh0r53 | it's coming up in just a second dmendiza | 15:09 |
| d34dh0r53 | #topic specification Improve federated users management (gtema) | 15:09 |
| d34dh0r53 | #link https://review.opendev.org/c/openstack/keystone/+/920892 | 15:09 |
| d34dh0r53 | ready for review | 15:09 |
| gtema | thanks Dave Wilde (d34dh0r53) for review. Anybody else? | 15:10 |
| d34dh0r53 | dmendiza can you also look at this one ^^? | 15:10 |
| d34dh0r53 | next up | 15:11 |
| d34dh0r53 | #topic specification OpenAPI support (gtema) | 15:12 |
| d34dh0r53 | #link https://review.opendev.org/c/openstack/keystone-specs/+/910584 (merged) | 15:12 |
| d34dh0r53 | #link https://review.opendev.org/q/topic:%22openapi%22+project:openstack/keystone | 15:12 |
| gtema | #https://review.opendev.org/c/openstack/keystone/+/923324 | 15:12 |
| d34dh0r53 | gtema: first changes pushed | 15:12 |
| gtema | this is one of the good examples of how it looks like | 15:12 |
| gtema | you can also see a new job added that is producing openapi | 15:12 |
| gtema | but back to the change - this is how things in Nova/Cinder/Manila are now looking like | 15:13 |
| d34dh0r53 | very cool | 15:13 |
| gtema | and we make it very similar to that | 15:13 |
| gtema | I will proceed with next resources in next days | 15:14 |
| gtema | Ideally I will remove the existing validation framework | 15:15 |
| gtema | or better to say - it is replaced (and in details it is very very similar) | 15:16 |
| gtema | but the point is to try to unify how we deal with schemas across projects so that maintenance is a bit easier | 15:16 |
| gtema | so after resources are extended I will cleanup existing validation framework | 15:17 |
| d34dh0r53 | ok, that sounds like a good plan | 15:17 |
| d34dh0r53 | I'm excited for this work, it feels like a very good modernization step for the project | 15:18 |
| gtema | :) | 15:18 |
| gtema | thanks | 15:18 |
| d34dh0r53 | #topic open discussion | 15:19 |
| d34dh0r53 | domain manager (mhen) | 15:19 |
| d34dh0r53 | #link https://review.opendev.org/c/openstack/keystone-specs/+/903172 | 15:19 |
| d34dh0r53 | addressed review comments | 15:19 |
| d34dh0r53 | rebased on 2024.1, renamed to domain-manager-persona (from "...-role") | 15:20 |
| d34dh0r53 | dmendiza: this is the link ^^ | 15:20 |
| d34dh0r53 | it would be awesome if we could get this merged this week | 15:20 |
| mhen | the spec still needs to be merged but I started implementation already nonetheless | 15:20 |
| gtema | great | 15:21 |
| d34dh0r53 | awesome, thanks mhen | 15:22 |
| d34dh0r53 | that's all we have on the agenda for open discussion, anything else before we move on? | 15:22 |
| gtema | not from me | 15:23 |
| d34dh0r53 | cool | 15:23 |
| d34dh0r53 | #topic bug review | 15:23 |
| d34dh0r53 | #link https://bugs.launchpad.net/keystone/?orderby=-id&start=0 | 15:23 |
| d34dh0r53 | one new bug in keystone | 15:24 |
| d34dh0r53 | #link https://bugs.launchpad.net/keystone/+bug/2072639 | 15:24 |
| d34dh0r53 | This may be a configuration issue | 15:24 |
| d34dh0r53 | dmendiza: can you take a look at this one? | 15:24 |
| d34dh0r53 | next up | 15:25 |
| d34dh0r53 | #link https://bugs.launchpad.net/python-keystoneclient/?orderby=-id&start=0 | 15:25 |
| d34dh0r53 | no new bugs here | 15:25 |
| d34dh0r53 | #link https://bugs.launchpad.net/keystoneauth/+bugs?orderby=-id&start=0 | 15:25 |
| d34dh0r53 | there is a new bug in keystoneauth | 15:25 |
| d34dh0r53 | #link https://bugs.launchpad.net/keystoneauth/+bug/2072481 | 15:26 |
| d34dh0r53 | we probably need to update our pin of betamax, a new version was released not too long ago | 15:26 |
| d34dh0r53 | I can look at that one | 15:26 |
| d34dh0r53 | #link https://bugs.launchpad.net/keystonemiddleware/+bugs?orderby=-id&start=0 | 15:26 |
| d34dh0r53 | keystonemiddleware is good | 15:27 |
| d34dh0r53 | #link https://bugs.launchpad.net/pycadf/+bugs?orderby=-id&start=0 | 15:27 |
| d34dh0r53 | so is pycadf | 15:27 |
| d34dh0r53 | #link https://bugs.launchpad.net/ldappool/+bugs?orderby=-id&start=0 | 15:27 |
| d34dh0r53 | ldappool is also good | 15:27 |
| d34dh0r53 | #topic conclusion | 15:27 |
| d34dh0r53 | There will not be a weekly meeting next week as I'm on PTO | 15:28 |
| d34dh0r53 | I won't cancel next weeks reviewathon but I will not be there | 15:28 |
| gtema | ack | 15:28 |
| d34dh0r53 | That's all I have | 15:28 |
| d34dh0r53 | Thanks everyone! | 15:28 |
| d34dh0r53 | #endmeeting | 15:28 |
| opendevmeet | Meeting ended Wed Jul 10 15:28:58 2024 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 15:28 |
| opendevmeet | Minutes: https://meetings.opendev.org/meetings/keystone/2024/keystone.2024-07-10-15.00.html | 15:28 |
| opendevmeet | Minutes (text): https://meetings.opendev.org/meetings/keystone/2024/keystone.2024-07-10-15.00.txt | 15:28 |
| opendevmeet | Log: https://meetings.opendev.org/meetings/keystone/2024/keystone.2024-07-10-15.00.log.html | 15:28 |
| gtema | thanks a lot guys | 15:30 |
| opendevreview | Merged openstack/keystoneauth master: Remove old excludes https://review.opendev.org/c/openstack/keystoneauth/+/917598 | 16:37 |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!