Wednesday, 2024-08-21

*** mhen_ is now known as mhen01:55
*** __ministry is now known as Guest102102:02
opendevreviewOpenStack Proposal Bot proposed openstack/keystone master: Imported Translations from Zanata  https://review.opendev.org/c/openstack/keystone/+/92446003:49
opendevreviewLajos Katona proposed openstack/keystone master: Don't fail for role_assignment list for bad project id  https://review.opendev.org/c/openstack/keystone/+/92374909:24
opendevreviewmike_mp@zzzcomputing.com proposed openstack/keystone master: enable use of reader session, isolating writer session  https://review.opendev.org/c/openstack/keystone/+/92677614:01
opendevreviewLajos Katona proposed openstack/keystone master: Don't fail for role_assignment list for bad project id  https://review.opendev.org/c/openstack/keystone/+/92374914:03
opendevreviewAdam Young proposed openstack/keystone master: use basic auth to authenticate and fetch an unscoped token  https://review.opendev.org/c/openstack/keystone/+/84163714:29
d34dh0r53#startmeeting keystone15:00
opendevmeetMeeting started Wed Aug 21 15:00:46 2024 UTC and is due to finish in 60 minutes.  The chair is d34dh0r53. Information about MeetBot at http://wiki.debian.org/MeetBot.15:00
opendevmeetUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.15:00
opendevmeetThe meeting name has been set to 'keystone'15:00
d34dh0r53#topic roll call15:01
gtemao/15:01
d34dh0r53admiyo, bbobrov, crisloma, d34dh0r53, dpar, dstanek, hrybacki, lbragstad, lwanderley, kmalloc, rodrigods, samueldmq, ruan_he, wxy, sonuk, vishakha, Ajay, rafaelwe, xek, gmann, zaitcev, reqa, dmendiza[m], mharley, jph, gtema15:01
d34dh0r53o/15:01
jpho/15:01
xeko/15:01
d34dh0r53#topic review past meeting work items15:02
mheno/15:02
d34dh0r53#link https://meetings.opendev.org/meetings/keystone/2024/keystone.2024-08-14-15.06.html15:02
d34dh0r53two work items15:02
d34dh0r53reviewathon look at updated https://review.opendev.org/c/openstack/keystone/+/92413215:02
d34dh0r53there wasn't a reviewathon last week, but I'd really like to get dmendiza to look at this one15:03
d34dh0r53#action dmendiza please review the updates to https://review.opendev.org/c/openstack/keystone/+/92413215:04
d34dh0r53next up15:04
d34dh0r53d34dh0r53 review https://review.opendev.org/c/openstack/keystone/+/92408515:05
d34dh0r53I have reviewed this and it's being gated now15:05
gtema:party: - thanks Dave15:05
d34dh0r53that does it for the review of last weeks work items15:05
d34dh0r53next up 15:05
d34dh0r53#topic liaison updates15:05
d34dh0r53releases, milestone-3 is next week15:06
d34dh0r53nothing from vmt15:07
d34dh0r53that does it for liaison updates15:07
d34dh0r53#topic specification OAuth 2.0 (hiromu)15:07
d34dh0r53#link https://review.opendev.org/q/topic:bp%252Foauth2-client-credentials-ext15:08
d34dh0r53#link https://review.opendev.org/q/topic:bp%252Fenhance-oauth2-interoperability15:08
d34dh0r53External OAuth 2.0 Specification15:08
d34dh0r53#link https://review.opendev.org/c/openstack/keystone-specs/+/861554 (merged)15:09
d34dh0r53OAuth 2.0 Implementation15:09
d34dh0r53#link https://review.opendev.org/q/topic:bp%252Fsupport-oauth2-mtls15:09
d34dh0r53#link https://review.opendev.org/c/openstack/keystone/+/838108 (merged)15:09
d34dh0r53#link https://review.opendev.org/c/openstack/keystoneauth/+/838104 (merged)15:09
d34dh0r53no updates from me on this one15:09
d34dh0r53next up15:09
d34dh0r53#topic specification Secure RBAC (dmendiza[m])15:09
d34dh0r53#link https://governance.openstack.org/tc/goals/selected/consistent-and-secure-rbac.html#z-release-timeline_15:09
d34dh0r532024.1 Release Timeline15:10
d34dh0r53Update oslo.policy in keystone to enforce_new_defaults=True15:10
d34dh0r53Update oslo.policy in keystone to enforce_scope=True15:10
d34dh0r53#link https://review.opendev.org/c/openstack/keystone/+/902730 (Merged)15:10
d34dh0r53#link https://review.opendev.org/c/openstack/keystone-tempest-plugin/+/903713 (Merged)15:10
d34dh0r53#link https://review.opendev.org/c/openstack/tempest/+/912489 (Merged)15:10
d34dh0r53any updates dmendiza ?15:10
d34dh0r53doesn't look like dmendiza is around, moving on15:12
d34dh0r53#topic specification OpenAPI support (gtema)15:12
d34dh0r53#link https://review.opendev.org/c/openstack/keystone-specs/+/910584 (merged)15:12
dmendiza[m]👋15:12
d34dh0r53#link https://review.opendev.org/q/topic:%22openapi%22+project:openstack/keystone15:12
dmendiza[m]hey, sorry, just catching up15:12
d34dh0r53oh hi :)15:12
d34dh0r53#undo15:13
opendevmeetRemoving item from minutes: #link https://review.opendev.org/q/topic:%22openapi%22+project:openstack/keystone15:13
d34dh0r53#undo15:13
opendevmeetRemoving item from minutes: #link https://review.opendev.org/c/openstack/keystone-specs/+/91058415:13
d34dh0r53#undo15:13
opendevmeetRemoving item from minutes: #topic specification OpenAPI support (gtema)15:13
dmendiza[m]Heh15:13
d34dh0r53the floor is yours :)15:13
dmendiza[m]... was out on PTO last week so not much progress since ...15:13
dmendiza[m]Definitely going to look at the Domain Manager before the reviewathon15:14
d34dh0r53Thanks!15:14
dmendiza[m]I want to set up a local env and do some manual testing15:14
d34dh0r53sounds good15:15
d34dh0r53#topic specification OpenAPI support (gtema)15:17
d34dh0r53#link https://review.opendev.org/c/openstack/keystone-specs/+/910584 (merged)15:17
d34dh0r53#link https://review.opendev.org/q/topic:%22openapi%22+project:openstack/keystone15:17
d34dh0r53gtema: changes awaiting review15:18
gtemaI desperately need reviews since otherwise we end up also here in a big dependency hell15:18
d34dh0r53ack, I'll review this week15:18
gtemaalready had last week few issues since the student supporting me accidentially re-pushed the wrong state15:19
d34dh0r53ok15:20
d34dh0r53#topic specification domain manager (mhen)15:21
d34dh0r53#link https://review.opendev.org/q/topic:%22domain-manager%2215:21
d34dh0r53keystone: releasenotes entry added15:21
d34dh0r53#link https://review.opendev.org/c/openstack/keystone/+/924132/9/releasenotes/notes/domain-manager-persona-7921587ce2fab4fd.yaml15:21
mhenis the format and content for the releasenotes okay like that?15:22
d34dh0r53test implementation for project manager now equals project member15:22
d34dh0r53(as discussed in the reviewathon, verify that manager in project scope does not receive any magic permissions accidentally)15:22
d34dh0r53keystone patchset has three open discussion threads from dmendiza15:23
gtemamhen - yes, it is ok15:23
d34dh0r53it looks good to me15:23
d34dh0r53dmendiza is going to test this and we can hopefully get this version merged quickly15:24
mhenalright, thanks for the feedback15:24
d34dh0r53thank you!15:25
d34dh0r53#topic open discussion15:25
d34dh0r53codebase renovation (gtema)15:25
d34dh0r53#link https://review.opendev.org/q/topic:%22renovate%22+is:open15:26
gtemaonce the mypy merges last change is moving of hacking under the pre-commit and I am done for now15:26
d34dh0r53sweet15:26
d34dh0r53mypy should merge in a bit15:26
gtemayes, and after that I rebase the hacking check since I see it is now in the merge conflict15:27
gtemabtw thanks for merging the py312 fix15:27
d34dh0r53sure thing, we need a good review push to get everything in flight merged before the freeze15:28
gtemaexactly15:28
d34dh0r53that brings us to the reviewathon, unfortunately we have to cancel this week again.  Red Hat has a company wide recharge day on Friday so I'd like to ask that the cores try to review upstream as much as possible this week15:29
gtemawould appreciate that15:30
d34dh0r53👍️15:30
d34dh0r53anything else before we move on?15:30
d34dh0r53cool, moving on15:32
d34dh0r53#topic bug review15:32
d34dh0r53#link https://bugs.launchpad.net/keystone/?orderby=-id&start=015:32
d34dh0r53no new bugs for keystone15:34
d34dh0r53#link https://bugs.launchpad.net/python-keystoneclient/?orderby=-id&start=015:34
d34dh0r53no new bugs for python-keystoneclient15:35
d34dh0r53#link https://bugs.launchpad.net/keystoneauth/+bugs?orderby=-id&start=015:35
d34dh0r53keystoneauth is good15:35
d34dh0r53#link https://bugs.launchpad.net/keystonemiddleware/+bugs?orderby=-id&start=015:36
d34dh0r53keystonemiddleware is also good15:36
d34dh0r53#link https://bugs.launchpad.net/pycadf/+bugs?orderby=-id&start=015:36
d34dh0r53pycadf is fine15:36
d34dh0r53#link https://bugs.launchpad.net/ldappool/+bugs?orderby=-id&start=015:37
mharley[m]Dave Wilde (d34dh0r53): any news about that S3 token stuff?15:37
d34dh0r53mharley: no15:37
mharley[m]Ok, thank you!15:37
d34dh0r53ldappool is good15:37
d34dh0r53I think fixing S3 is a good upstream Friday project for a security minded individual ;)15:38
d34dh0r53#topic conclusion15:39
d34dh0r53other than the canceling of the reviewathon on Friday I don't have anything15:39
gtemame neither15:40
d34dh0r53Thanks everyone!15:40
d34dh0r53#endmeeting15:40
opendevmeetMeeting ended Wed Aug 21 15:40:39 2024 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)15:40
opendevmeetMinutes:        https://meetings.opendev.org/meetings/keystone/2024/keystone.2024-08-21-15.00.html15:40
opendevmeetMinutes (text): https://meetings.opendev.org/meetings/keystone/2024/keystone.2024-08-21-15.00.txt15:40
opendevmeetLog:            https://meetings.opendev.org/meetings/keystone/2024/keystone.2024-08-21-15.00.log.html15:40
gtemathanks15:41
mharley[m]>I think fixing S3 is a good upstream Friday project for a security minded individual ;)15:41
mharley[m]:-) 15:41
opendevreviewMerged openstack/keystone master: Enable mypy  https://review.opendev.org/c/openstack/keystone/+/92408516:56
opendevreviewAdam Young proposed openstack/keystone master: rendering HTML for versions  https://review.opendev.org/c/openstack/keystone/+/84163518:06
opendevreviewAdam Young proposed openstack/keystone master: Change Header to Basic auth on authenticaltion failure.  https://review.opendev.org/c/openstack/keystone/+/84163618:06
opendevreviewAdam Young proposed openstack/keystone master: use basic auth to authenticate and fetch an unscoped token  https://review.opendev.org/c/openstack/keystone/+/84163718:06
opendevreviewAdam Young proposed openstack/keystone master: render html for RESTful Pages  https://review.opendev.org/c/openstack/keystone/+/84163818:06
opendevreviewAdam Young proposed openstack/keystone master: bring tox up to python3.9  https://review.opendev.org/c/openstack/keystone/+/92683718:06

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!