Wednesday, 2024-12-18

*** mhen_ is now known as mhen02:52
opendevreviewOpenStack Proposal Bot proposed openstack/keystonemiddleware master: Imported Translations from Zanata  https://review.opendev.org/c/openstack/keystonemiddleware/+/93795704:17
*** ykarel_ is now known as ykarel06:02
opendevreviewTakashi Kajinami proposed openstack/keystone master: Add upgrade job from 2024.1  https://review.opendev.org/c/openstack/keystone/+/90774913:31
*** darmach5 is now known as darmach14:24
d34dh0r53o/15:04
d34dh0r53sorry, had to reboot15:04
d34dh0r53#startmeeting keystone15:04
opendevmeetMeeting started Wed Dec 18 15:04:25 2024 UTC and is due to finish in 60 minutes.  The chair is d34dh0r53. Information about MeetBot at http://wiki.debian.org/MeetBot.15:04
opendevmeetUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.15:04
opendevmeetThe meeting name has been set to 'keystone'15:04
xeko/15:04
d34dh0r53Reminder: This meeting takes place under the OpenInfra Foundation Code of Conduct15:04
d34dh0r53#link https://openinfra.dev/legal/code-of-conduct15:04
d34dh0r53#topic roll call15:04
gtemao/15:04
d34dh0r53admiyo, bbobrov, crisloma, d34dh0r53, dpar, dstanek, hrybacki, lbragstad, lwanderley, kmalloc, rodrigods, samueldmq, ruan_he, wxy, sonuk, vishakha, Ajay, rafaelwe, xek, gmann, zaitcev, reqa, dmendiza[m], dmendiza, mharley, jph, gtema, cardoe15:05
d34dh0r53#topic review past meeting work items15:05
d34dh0r53#link https://meetings.opendev.org/meetings/keystone/2024/keystone.2024-12-11-15.00.html15:06
d34dh0r53no action items from last week15:06
d34dh0r53#topic liaison updates15:06
d34dh0r53no updates from releases or VMT15:06
d34dh0r53moving on15:07
d34dh0r53#topic specification OAuth 2.0 (hiromu)15:07
d34dh0r53#link https://review.opendev.org/q/topic:bp%252Foauth2-client-credentials-ext15:07
d34dh0r53#link https://review.opendev.org/q/topic:bp%252Fenhance-oauth2-interoperability15:07
d34dh0r53External OAuth 2.0 Specification15:07
d34dh0r53#link https://review.opendev.org/c/openstack/keystone-specs/+/861554 (merged)15:07
d34dh0r53OAuth 2.0 Implementation15:07
d34dh0r53#link https://review.opendev.org/q/topic:bp%252Fsupport-oauth2-mtls15:07
d34dh0r53OAuth 2.0 Documentation15:07
d34dh0r53#link https://review.opendev.org/c/openstack/keystone/+/838108 (merged)15:07
d34dh0r53#link https://review.opendev.org/c/openstack/keystoneauth/+/838104 (merged)15:08
d34dh0r53no updates this week15:08
d34dh0r53#topic specification Secure RBAC (dmendiza[m])15:08
d34dh0r53#link https://governance.openstack.org/tc/goals/selected/consistent-and-secure-rbac.html#z-release-timeline_15:08
d34dh0r532024.1 Release Timeline15:08
d34dh0r53Update oslo.policy in keystone to enforce_new_defaults=True15:08
d34dh0r53Update oslo.policy in keystone to enforce_scope=True15:08
d34dh0r53dmendiza: you around?15:08
dmendiza[m]🙋‍♂️15:09
d34dh0r53any s-rbac updates?15:09
dmendiza[m]Negative, sorry.  I've been living in Barbican land for a while 😅15:10
d34dh0r53hah, no worries15:10
d34dh0r53next up15:10
d34dh0r53#topic specification OpenAPI support (gtema)15:11
d34dh0r53#link https://review.opendev.org/q/topic:%22openapi%22+project:openstack/keystone15:11
gtemahe, also no updates15:11
d34dh0r53cool, next up15:11
d34dh0r53#topic specification domain manager (mhen)15:11
d34dh0r53still unmerged are:15:12
d34dh0r53documentation: https://review.opendev.org/c/openstack/keystone/+/92813515:12
d34dh0r53tempest tests: https://review.opendev.org/c/openstack/keystone-tempest-plugin/+/92422215:12
d34dh0r53dmendiza: can you review these?15:12
d34dh0r53ok, next up15:15
d34dh0r53#topic specification Include bad password details in audit messages (stanislav-z)15:15
d34dh0r53#link https://review.opendev.org/c/openstack/keystone-specs/+/91548215:15
d34dh0r53#link https://review.opendev.org/c/openstack/keystone/+/93242315:15
d34dh0r5311-Dec update: thanks for reviews, I've updated the spec according to comments, or otherwise raised my questions in Gerrit - would appreciate your feedback.15:15
d34dh0r53CI for keystone-spec is failing :/15:15
stanislav-zCI is failing not being able to build the docs. The fix would be similar to https://review.opendev.org/c/openstack/keystone/+/935685. I started it, but was wondering - does the job of migrating from seqdiag to graphviz is manual? :)15:16
gtemayes, I was preparing this change manually15:17
gtemaI wasn't able to find any tool that is able to convert from seqdiag to graphviz15:17
stanislav-zfor Keystone keeping the diagrams makes complete sense. but perhaps for specs we could omit them? or save the current ones as images and source them as images?15:18
gtemayes, this could be done15:19
d34dh0r53I'm fine with that15:20
stanislav-zI'll check it out and submit something.15:20
stanislav-zAnd gtema (Artem Goncharov) I would appreciate you checking out the conversation in the spec :) https://review.opendev.org/c/openstack/keystone-specs/+/915482/comment/0270700d_3a3cb9f8/ thanks15:20
gtemaok15:21
d34dh0r53great, that does it for specifications15:23
d34dh0r53#topic open discussion15:23
d34dh0r53I don't have anything15:23
gtemame neither15:23
d34dh0r53cool15:24
d34dh0r53#topic bug review15:24
d34dh0r53#link https://bugs.launchpad.net/keystone/?orderby=-id&start=015:24
d34dh0r53no new bugs for keystone15:24
d34dh0r53#link https://bugs.launchpad.net/python-keystoneclient/?orderby=-id&start=015:24
d34dh0r53no new bugs for python-keystoneclient15:25
d34dh0r53#link https://bugs.launchpad.net/keystoneauth/+bugs?orderby=-id&start=015:26
d34dh0r53keystoneauth is good as well15:26
d34dh0r53#link https://bugs.launchpad.net/keystonemiddleware/+bugs?orderby=-id&start=015:26
d34dh0r53nothing new in keystonemiddleware15:26
d34dh0r53#link https://bugs.launchpad.net/pycadf/+bugs?orderby=-id&start=015:26
d34dh0r53pycadf is good15:26
d34dh0r53#link https://bugs.launchpad.net/ldappool/+bugs?orderby=-id&start=015:27
d34dh0r53as is ldappool15:27
d34dh0r53#topic conclusion15:27
d34dh0r53last meeting of the year15:27
d34dh0r53thank you for everything everyone, it's been a really good 2024 for Keystone!15:27
gtemayey, thanks guys15:27
xekThank you!15:28
d34dh0r53Also, no meeting on the 1st as it's a holiday15:28
d34dh0r53All the best to everyone and see you next year :)15:28
gtemahappy holidays :)15:29
d34dh0r53#endmeeting15:29
opendevmeetMeeting ended Wed Dec 18 15:29:18 2024 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)15:29
opendevmeetMinutes:        https://meetings.opendev.org/meetings/keystone/2024/keystone.2024-12-18-15.04.html15:29
opendevmeetMinutes (text): https://meetings.opendev.org/meetings/keystone/2024/keystone.2024-12-18-15.04.txt15:29
opendevmeetLog:            https://meetings.opendev.org/meetings/keystone/2024/keystone.2024-12-18-15.04.log.html15:29
opendevreviewStanislav Zaprudskiy proposed openstack/keystone-specs master: Replace `sphinxcontrib-*diag` with `graphviz`  https://review.opendev.org/c/openstack/keystone-specs/+/93801218:44
opendevreviewStanislav Zaprudskiy proposed openstack/keystone-specs master: Replace `sphinxcontrib-*diag` with `graphviz`  https://review.opendev.org/c/openstack/keystone-specs/+/93801220:01
stanislav-zThis one https://review.opendev.org/c/openstack/keystone-specs/+/938012 is to fix the docs build, plus some additions to fix the gate.20:16
stanislav-zBTW, the similar Keystone patch by gtema (Artem Goncharov) - https://review.opendev.org/c/openstack/keystone/+/935685 - was not linked to https://bugs.launchpad.net/tacker/+bug/2026345, so updating its status/assignments manually would be beneficial.20:16

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!