*** mhen_ is now known as mhen | 01:55 | |
*** __ministry is now known as Guest1021 | 02:02 | |
opendevreview | OpenStack Proposal Bot proposed openstack/keystone master: Imported Translations from Zanata https://review.opendev.org/c/openstack/keystone/+/924460 | 03:49 |
---|---|---|
opendevreview | Lajos Katona proposed openstack/keystone master: Don't fail for role_assignment list for bad project id https://review.opendev.org/c/openstack/keystone/+/923749 | 09:24 |
opendevreview | mike_mp@zzzcomputing.com proposed openstack/keystone master: enable use of reader session, isolating writer session https://review.opendev.org/c/openstack/keystone/+/926776 | 14:01 |
opendevreview | Lajos Katona proposed openstack/keystone master: Don't fail for role_assignment list for bad project id https://review.opendev.org/c/openstack/keystone/+/923749 | 14:03 |
opendevreview | Adam Young proposed openstack/keystone master: use basic auth to authenticate and fetch an unscoped token https://review.opendev.org/c/openstack/keystone/+/841637 | 14:29 |
d34dh0r53 | #startmeeting keystone | 15:00 |
opendevmeet | Meeting started Wed Aug 21 15:00:46 2024 UTC and is due to finish in 60 minutes. The chair is d34dh0r53. Information about MeetBot at http://wiki.debian.org/MeetBot. | 15:00 |
opendevmeet | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 15:00 |
opendevmeet | The meeting name has been set to 'keystone' | 15:00 |
d34dh0r53 | #topic roll call | 15:01 |
gtema | o/ | 15:01 |
d34dh0r53 | admiyo, bbobrov, crisloma, d34dh0r53, dpar, dstanek, hrybacki, lbragstad, lwanderley, kmalloc, rodrigods, samueldmq, ruan_he, wxy, sonuk, vishakha, Ajay, rafaelwe, xek, gmann, zaitcev, reqa, dmendiza[m], mharley, jph, gtema | 15:01 |
d34dh0r53 | o/ | 15:01 |
jph | o/ | 15:01 |
xek | o/ | 15:01 |
d34dh0r53 | #topic review past meeting work items | 15:02 |
mhen | o/ | 15:02 |
d34dh0r53 | #link https://meetings.opendev.org/meetings/keystone/2024/keystone.2024-08-14-15.06.html | 15:02 |
d34dh0r53 | two work items | 15:02 |
d34dh0r53 | reviewathon look at updated https://review.opendev.org/c/openstack/keystone/+/924132 | 15:02 |
d34dh0r53 | there wasn't a reviewathon last week, but I'd really like to get dmendiza to look at this one | 15:03 |
d34dh0r53 | #action dmendiza please review the updates to https://review.opendev.org/c/openstack/keystone/+/924132 | 15:04 |
d34dh0r53 | next up | 15:04 |
d34dh0r53 | d34dh0r53 review https://review.opendev.org/c/openstack/keystone/+/924085 | 15:05 |
d34dh0r53 | I have reviewed this and it's being gated now | 15:05 |
gtema | :party: - thanks Dave | 15:05 |
d34dh0r53 | that does it for the review of last weeks work items | 15:05 |
d34dh0r53 | next up | 15:05 |
d34dh0r53 | #topic liaison updates | 15:05 |
d34dh0r53 | releases, milestone-3 is next week | 15:06 |
d34dh0r53 | nothing from vmt | 15:07 |
d34dh0r53 | that does it for liaison updates | 15:07 |
d34dh0r53 | #topic specification OAuth 2.0 (hiromu) | 15:07 |
d34dh0r53 | #link https://review.opendev.org/q/topic:bp%252Foauth2-client-credentials-ext | 15:08 |
d34dh0r53 | #link https://review.opendev.org/q/topic:bp%252Fenhance-oauth2-interoperability | 15:08 |
d34dh0r53 | External OAuth 2.0 Specification | 15:08 |
d34dh0r53 | #link https://review.opendev.org/c/openstack/keystone-specs/+/861554 (merged) | 15:09 |
d34dh0r53 | OAuth 2.0 Implementation | 15:09 |
d34dh0r53 | #link https://review.opendev.org/q/topic:bp%252Fsupport-oauth2-mtls | 15:09 |
d34dh0r53 | #link https://review.opendev.org/c/openstack/keystone/+/838108 (merged) | 15:09 |
d34dh0r53 | #link https://review.opendev.org/c/openstack/keystoneauth/+/838104 (merged) | 15:09 |
d34dh0r53 | no updates from me on this one | 15:09 |
d34dh0r53 | next up | 15:09 |
d34dh0r53 | #topic specification Secure RBAC (dmendiza[m]) | 15:09 |
d34dh0r53 | #link https://governance.openstack.org/tc/goals/selected/consistent-and-secure-rbac.html#z-release-timeline_ | 15:09 |
d34dh0r53 | 2024.1 Release Timeline | 15:10 |
d34dh0r53 | Update oslo.policy in keystone to enforce_new_defaults=True | 15:10 |
d34dh0r53 | Update oslo.policy in keystone to enforce_scope=True | 15:10 |
d34dh0r53 | #link https://review.opendev.org/c/openstack/keystone/+/902730 (Merged) | 15:10 |
d34dh0r53 | #link https://review.opendev.org/c/openstack/keystone-tempest-plugin/+/903713 (Merged) | 15:10 |
d34dh0r53 | #link https://review.opendev.org/c/openstack/tempest/+/912489 (Merged) | 15:10 |
d34dh0r53 | any updates dmendiza ? | 15:10 |
d34dh0r53 | doesn't look like dmendiza is around, moving on | 15:12 |
d34dh0r53 | #topic specification OpenAPI support (gtema) | 15:12 |
d34dh0r53 | #link https://review.opendev.org/c/openstack/keystone-specs/+/910584 (merged) | 15:12 |
dmendiza[m] | 👋 | 15:12 |
d34dh0r53 | #link https://review.opendev.org/q/topic:%22openapi%22+project:openstack/keystone | 15:12 |
dmendiza[m] | hey, sorry, just catching up | 15:12 |
d34dh0r53 | oh hi :) | 15:12 |
d34dh0r53 | #undo | 15:13 |
opendevmeet | Removing item from minutes: #link https://review.opendev.org/q/topic:%22openapi%22+project:openstack/keystone | 15:13 |
d34dh0r53 | #undo | 15:13 |
opendevmeet | Removing item from minutes: #link https://review.opendev.org/c/openstack/keystone-specs/+/910584 | 15:13 |
d34dh0r53 | #undo | 15:13 |
opendevmeet | Removing item from minutes: #topic specification OpenAPI support (gtema) | 15:13 |
dmendiza[m] | Heh | 15:13 |
d34dh0r53 | the floor is yours :) | 15:13 |
dmendiza[m] | ... was out on PTO last week so not much progress since ... | 15:13 |
dmendiza[m] | Definitely going to look at the Domain Manager before the reviewathon | 15:14 |
d34dh0r53 | Thanks! | 15:14 |
dmendiza[m] | I want to set up a local env and do some manual testing | 15:14 |
d34dh0r53 | sounds good | 15:15 |
d34dh0r53 | #topic specification OpenAPI support (gtema) | 15:17 |
d34dh0r53 | #link https://review.opendev.org/c/openstack/keystone-specs/+/910584 (merged) | 15:17 |
d34dh0r53 | #link https://review.opendev.org/q/topic:%22openapi%22+project:openstack/keystone | 15:17 |
d34dh0r53 | gtema: changes awaiting review | 15:18 |
gtema | I desperately need reviews since otherwise we end up also here in a big dependency hell | 15:18 |
d34dh0r53 | ack, I'll review this week | 15:18 |
gtema | already had last week few issues since the student supporting me accidentially re-pushed the wrong state | 15:19 |
d34dh0r53 | ok | 15:20 |
d34dh0r53 | #topic specification domain manager (mhen) | 15:21 |
d34dh0r53 | #link https://review.opendev.org/q/topic:%22domain-manager%22 | 15:21 |
d34dh0r53 | keystone: releasenotes entry added | 15:21 |
d34dh0r53 | #link https://review.opendev.org/c/openstack/keystone/+/924132/9/releasenotes/notes/domain-manager-persona-7921587ce2fab4fd.yaml | 15:21 |
mhen | is the format and content for the releasenotes okay like that? | 15:22 |
d34dh0r53 | test implementation for project manager now equals project member | 15:22 |
d34dh0r53 | (as discussed in the reviewathon, verify that manager in project scope does not receive any magic permissions accidentally) | 15:22 |
d34dh0r53 | keystone patchset has three open discussion threads from dmendiza | 15:23 |
gtema | mhen - yes, it is ok | 15:23 |
d34dh0r53 | it looks good to me | 15:23 |
d34dh0r53 | dmendiza is going to test this and we can hopefully get this version merged quickly | 15:24 |
mhen | alright, thanks for the feedback | 15:24 |
d34dh0r53 | thank you! | 15:25 |
d34dh0r53 | #topic open discussion | 15:25 |
d34dh0r53 | codebase renovation (gtema) | 15:25 |
d34dh0r53 | #link https://review.opendev.org/q/topic:%22renovate%22+is:open | 15:26 |
gtema | once the mypy merges last change is moving of hacking under the pre-commit and I am done for now | 15:26 |
d34dh0r53 | sweet | 15:26 |
d34dh0r53 | mypy should merge in a bit | 15:26 |
gtema | yes, and after that I rebase the hacking check since I see it is now in the merge conflict | 15:27 |
gtema | btw thanks for merging the py312 fix | 15:27 |
d34dh0r53 | sure thing, we need a good review push to get everything in flight merged before the freeze | 15:28 |
gtema | exactly | 15:28 |
d34dh0r53 | that brings us to the reviewathon, unfortunately we have to cancel this week again. Red Hat has a company wide recharge day on Friday so I'd like to ask that the cores try to review upstream as much as possible this week | 15:29 |
gtema | would appreciate that | 15:30 |
d34dh0r53 | 👍️ | 15:30 |
d34dh0r53 | anything else before we move on? | 15:30 |
d34dh0r53 | cool, moving on | 15:32 |
d34dh0r53 | #topic bug review | 15:32 |
d34dh0r53 | #link https://bugs.launchpad.net/keystone/?orderby=-id&start=0 | 15:32 |
d34dh0r53 | no new bugs for keystone | 15:34 |
d34dh0r53 | #link https://bugs.launchpad.net/python-keystoneclient/?orderby=-id&start=0 | 15:34 |
d34dh0r53 | no new bugs for python-keystoneclient | 15:35 |
d34dh0r53 | #link https://bugs.launchpad.net/keystoneauth/+bugs?orderby=-id&start=0 | 15:35 |
d34dh0r53 | keystoneauth is good | 15:35 |
d34dh0r53 | #link https://bugs.launchpad.net/keystonemiddleware/+bugs?orderby=-id&start=0 | 15:36 |
d34dh0r53 | keystonemiddleware is also good | 15:36 |
d34dh0r53 | #link https://bugs.launchpad.net/pycadf/+bugs?orderby=-id&start=0 | 15:36 |
d34dh0r53 | pycadf is fine | 15:36 |
d34dh0r53 | #link https://bugs.launchpad.net/ldappool/+bugs?orderby=-id&start=0 | 15:37 |
mharley[m] | Dave Wilde (d34dh0r53): any news about that S3 token stuff? | 15:37 |
d34dh0r53 | mharley: no | 15:37 |
mharley[m] | Ok, thank you! | 15:37 |
d34dh0r53 | ldappool is good | 15:37 |
d34dh0r53 | I think fixing S3 is a good upstream Friday project for a security minded individual ;) | 15:38 |
d34dh0r53 | #topic conclusion | 15:39 |
d34dh0r53 | other than the canceling of the reviewathon on Friday I don't have anything | 15:39 |
gtema | me neither | 15:40 |
d34dh0r53 | Thanks everyone! | 15:40 |
d34dh0r53 | #endmeeting | 15:40 |
opendevmeet | Meeting ended Wed Aug 21 15:40:39 2024 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 15:40 |
opendevmeet | Minutes: https://meetings.opendev.org/meetings/keystone/2024/keystone.2024-08-21-15.00.html | 15:40 |
opendevmeet | Minutes (text): https://meetings.opendev.org/meetings/keystone/2024/keystone.2024-08-21-15.00.txt | 15:40 |
opendevmeet | Log: https://meetings.opendev.org/meetings/keystone/2024/keystone.2024-08-21-15.00.log.html | 15:40 |
gtema | thanks | 15:41 |
mharley[m] | >I think fixing S3 is a good upstream Friday project for a security minded individual ;) | 15:41 |
mharley[m] | :-) | 15:41 |
opendevreview | Merged openstack/keystone master: Enable mypy https://review.opendev.org/c/openstack/keystone/+/924085 | 16:56 |
opendevreview | Adam Young proposed openstack/keystone master: rendering HTML for versions https://review.opendev.org/c/openstack/keystone/+/841635 | 18:06 |
opendevreview | Adam Young proposed openstack/keystone master: Change Header to Basic auth on authenticaltion failure. https://review.opendev.org/c/openstack/keystone/+/841636 | 18:06 |
opendevreview | Adam Young proposed openstack/keystone master: use basic auth to authenticate and fetch an unscoped token https://review.opendev.org/c/openstack/keystone/+/841637 | 18:06 |
opendevreview | Adam Young proposed openstack/keystone master: render html for RESTful Pages https://review.opendev.org/c/openstack/keystone/+/841638 | 18:06 |
opendevreview | Adam Young proposed openstack/keystone master: bring tox up to python3.9 https://review.opendev.org/c/openstack/keystone/+/926837 | 18:06 |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!