| opendevreview | wangjiaqi proposed openstack/keystone master: Use TOX_CONSTRAINTS_FILE https://review.opendev.org/c/openstack/keystone/+/850326 | 00:40 |
|---|---|---|
| opendevreview | Ke Niu proposed openstack/keystonemiddleware master: Use TOX_CONSTRAINTS_FILE https://review.opendev.org/c/openstack/keystonemiddleware/+/850973 | 06:12 |
| opendevreview | Ke Niu proposed openstack/keystone-specs master: Use TOX_CONSTRAINTS_FILE https://review.opendev.org/c/openstack/keystone-specs/+/850979 | 08:33 |
| *** dviroel__ is now known as dviroel | 11:05 | |
| *** blarnath is now known as d34dh0r53 | 13:13 | |
| *** dasm|off is now known as dasm | 13:19 | |
| *** dviroel is now known as dviroel|lunch | 14:55 | |
| dmendiza[m] | #startmeeting keystone | 15:00 |
| opendevmeet | Meeting started Tue Jul 26 15:00:48 2022 UTC and is due to finish in 60 minutes. The chair is dmendiza[m]. Information about MeetBot at http://wiki.debian.org/MeetBot. | 15:00 |
| opendevmeet | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 15:00 |
| opendevmeet | The meeting name has been set to 'keystone' | 15:00 |
| xek | o/ | 15:00 |
| dmendiza[m] | #topic Roll Call | 15:01 |
| h_asahina | o/ | 15:01 |
| mauricioharley[m] | o/ | 15:01 |
| dmendiza[m] | Courtesy ping for admiyo, bbobrov, crisloma, d34dh0r53, dpar, dstanek, hrybacki, knikolla, lbragstad, lwanderley, kmalloc, rodrigods, samueldmq, ruan_he, wxy, sonuk, vishakha, Ajay, rafaelwe, xek | 15:02 |
| knikolla | o/ | 15:02 |
| dmendiza[m] | As usual the agenda is over here: | 15:02 |
| dmendiza[m] | #link https://etherpad.opendev.org/p/keystone-weekly-meeting | 15:02 |
| dmendiza[m] | #topic Review Past Meeting Action Items | 15:02 |
| dmendiza[m] | #link https://meetings.opendev.org/meetings/keystone/2022/keystone.2022-07-19-15.02.html | 15:02 |
| d34dh0r53 | o/ | 15:02 |
| dmendiza[m] | I checked on the milestone-2 patches and I didn't see any patches for Keystone | 15:04 |
| dmendiza[m] | I think we're past the deadline, which should be fine, hopefully | 15:04 |
| dmendiza[m] | Looks like we did get releases for keystoneauth, python-keystoneclient and keystonemiddleware | 15:05 |
| dmendiza[m] | #link https://review.opendev.org/c/openstack/releases/+/849559 | 15:05 |
| dmendiza[m] | #link https://review.opendev.org/c/openstack/releases/+/849553 | 15:05 |
| dmendiza[m] | #link https://review.opendev.org/c/openstack/releases/+/849552 | 15:05 |
| dmendiza[m] | #topic Liaison Updates | 15:06 |
| dmendiza[m] | I don't have any updates | 15:06 |
| * dmendiza[m] needs to catch up on oslo happenings | 15:06 | |
| dmendiza[m] | Moving on ... | 15:06 |
| dmendiza[m] | #topic OAuth 2.0 | 15:06 |
| dmendiza[m] | We reviewed the mTLS spec last week during the reviewathon | 15:06 |
| dmendiza[m] | I think we left a few questions on a few points | 15:06 |
| dmendiza[m] | thanks everyone who joined that and took the time to read through the RFC | 15:07 |
| dmendiza[m] | h_asahina: any updates for us this week? | 15:07 |
| h_asahina | I've confirmed it. thanks a lot. I'll update it tomorrow. | 15:07 |
| dmendiza[m] | Great, thanks h_asahina | 15:07 |
| dmendiza[m] | If you can get it updated before Friday we can look at it again this week for the reviewathon | 15:07 |
| gagehugo | o/ | 15:08 |
| h_asahina | great, thanks | 15:08 |
| dmendiza[m] | Hi gagehugo ! | 15:08 |
| knikolla | oh, hi gagehugo! | 15:08 |
| dmendiza[m] | OK, moving on ... | 15:08 |
| h_asahina | can I ask bout xek's comments? | 15:08 |
| dmendiza[m] | #topic Secure RBAC | 15:08 |
| dmendiza[m] | oops | 15:08 |
| dmendiza[m] | sorry, | 15:08 |
| h_asahina | sorry for interruption. | 15:08 |
| dmendiza[m] | #undo | 15:08 |
| opendevmeet | Removing item from minutes: #topic Secure RBAC | 15:08 |
| dmendiza[m] | h_asahina: go ahead | 15:08 |
| h_asahina | What does you mean by "Maybe there is just one common usecase here, that we could describe here, that we want to support,"? | 15:09 |
| h_asahina | should I describe the usecase that we think the ideal, here? | 15:10 |
| xek | h_asahina, maybe it's because my experience with TLS everywhere, where all of the endpoints are encrypted I see many ways this could be configured | 15:10 |
| xek | h_asahina, or enabled on some endpoints, enabled only on the keystone endpoint, or there could be just one additional mtls endpoint to get the authtoken | 15:11 |
| h_asahina | basically we thought of "enabled only on the keystone endpoint" | 15:12 |
| h_asahina | I think forcing enabling mtls for all endpoints is out of scope of this spec | 15:12 |
| xek | h_asahina, yeah, that's reasonable, I didn't want a situation where people open bugs, because they expect something to work which just isn't there | 15:12 |
| h_asahina | So, should I write that is the out of scope clearly? | 15:14 |
| xek | h_asahina, yeah, that would be great :) | 15:16 |
| d34dh0r53 | ++ | 15:17 |
| dmendiza[m] | Thanks h_asahina | 15:17 |
| dmendiza[m] | Anything else on this topic? | 15:17 |
| h_asahina | Got it. | 15:17 |
| h_asahina | We've updated Yoga OAuth2.0 patch | 15:18 |
| h_asahina | but, Zuul jobs in keystonemiddleware one failed. | 15:18 |
| h_asahina | Do you have any clues to fix it. It seems unrealted to this patch. | 15:18 |
| h_asahina | /fix it./fix it?/ | 15:19 |
| h_asahina | https://review.opendev.org/c/openstack/keystonemiddleware/+/830737 | 15:19 |
| h_asahina | Zuul: https://zuul.opendev.org/t/openstack/build/1df2f66746174d7994f698d0170b6d6e | 15:20 |
| h_asahina | File "/home/zuul/src/opendev.org/openstack/keystonemiddleware/keystonemiddleware/tests/unit/audit/test_logging_notifier.py", line 36, in test_api_request_no_messaging | 15:20 |
| h_asahina | call_args = log.call_args_list[0][0] | 15:20 |
| h_asahina | IndexError: list index out of range | 15:20 |
| h_asahina | or maybe I should say Have you seen this error? | 15:21 |
| dmendiza[m] | Hmm... that's strange | 15:22 |
| dmendiza[m] | h_asahina: are you able to reproduce that locally? | 15:23 |
| h_asahina | I did't try yet | 15:24 |
| h_asahina | I've tried, it occurs. | 15:25 |
| dmendiza[m] | Yeah, weird. Works for me locally | 15:28 |
| dmendiza[m] | oh sorry on master branch | 15:29 |
| dmendiza[m] | let me try your patch | 15:29 |
| dmendiza[m] | Yeah, I get the same error | 15:32 |
| dmendiza[m] | I'll have to look into it further after the meeting | 15:32 |
| dmendiza[m] | I'll ping you if I find anything h_h | 15:32 |
| dmendiza[m] | h_asahina: ^^^ | 15:32 |
| dmendiza[m] | OK, moving on ... | 15:33 |
| h_asahina | thanks. I'll do so too. | 15:33 |
| dmendiza[m] | #topic Secure RBAC | 15:33 |
| dmendiza[m] | No updates from me this week. The pop-up team should be meeting again next week, so we'll see how that goes. | 15:33 |
| dmendiza[m] | #topic Implement pagination in list APIs | 15:34 |
| dmendiza[m] | #link https://etherpad.opendev.org/p/Horizon_pagination_discussion | 15:34 |
| dmendiza[m] | sdrozdov: around? | 15:34 |
| dmendiza[m] | I guess not | 15:38 |
| dmendiza[m] | but they were asking about this in the channel yesterday | 15:38 |
| dmendiza[m] | I don't know the historical context, but the Keystone API does not support pagination in list calls? | 15:38 |
| dmendiza[m] | but it was supported before? | 15:39 |
| gagehugo | I thought it was supported | 15:39 |
| dmendiza[m] | So the ask is to re-enable, or I guess re-implement pagination. | 15:39 |
| gagehugo | but it's been awhile since I last looked | 15:39 |
| dmendiza[m] | Yeah, I haven't dug into the code | 15:39 |
| dmendiza[m] | sdrozdov is running a cloud with lots of entities | 15:39 |
| dmendiza[m] | and having issues with certain horizon pages crashing because they cannot paginate through our APIs | 15:40 |
| dmendiza[m] | It seems like a reasonable request to me. | 15:40 |
| mauricioharley[m] | Agreed. | 15:41 |
| dmendiza[m] | I think we might need a spec for that though | 15:42 |
| dmendiza[m] | OK, moving on ... | 15:44 |
| dmendiza[m] | #topic Open Discussion | 15:44 |
| dmendiza[m] | Any other topics we should cover before we look at bug reports? | 15:45 |
| gagehugo | sorry I stepped away for a second | 15:46 |
| gagehugo | If anyone has time to review https://review.opendev.org/c/openstack/keystone/+/849724, I'd appreciate it | 15:46 |
| gagehugo | that's all I got | 15:46 |
| dmendiza[m] | Ack, I'll take a look | 15:47 |
| dmendiza[m] | #topic Bug Review | 15:52 |
| dmendiza[m] | Let's quickly go through the new bugs | 15:52 |
| dmendiza[m] | #link https://bugs.launchpad.net/keystone/+bug/1982489 | 15:52 |
| dmendiza[m] | > keystoneauth dependencies appear broken | 15:52 |
| dmendiza[m] | I was not able to recreate this in Fedora | 15:52 |
| dmendiza[m] | I was talking to Julia about it, and she mentioned she's using Debian | 15:53 |
| dmendiza[m] | so I'll have to set up a Debian VM to check this out | 15:54 |
| dmendiza[m] | unless someone is a Debian user here? | 15:54 |
| dmendiza[m] | And that's the only new bug this week. | 15:58 |
| dmendiza[m] | That's all the time we have for today | 15:58 |
| dmendiza[m] | thanks for joining, y'all | 15:58 |
| dmendiza[m] | #endmeeting | 15:58 |
| opendevmeet | Meeting ended Tue Jul 26 15:58:23 2022 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 15:58 |
| opendevmeet | Minutes: https://meetings.opendev.org/meetings/keystone/2022/keystone.2022-07-26-15.00.html | 15:58 |
| opendevmeet | Minutes (text): https://meetings.opendev.org/meetings/keystone/2022/keystone.2022-07-26-15.00.txt | 15:58 |
| opendevmeet | Log: https://meetings.opendev.org/meetings/keystone/2022/keystone.2022-07-26-15.00.log.html | 15:58 |
| *** dviroel|lunch is now known as dviroel | 16:01 | |
| sdrozdov | I do apologise, it seems like Ive missed the meeting all together, I thought that It will take place at 18:00 BST | 17:30 |
| sdrozdov | dmendiza[m]: Would it be possible to get an update regarding keystone pagination, I do apologise for my absence! | 17:33 |
| dmendiza[m] | HI sdrozdov | 19:33 |
| dmendiza[m] | sdrozdov: I am unsure about the current state of pagination. Seems Keystone used to do it? In any case, maybe it would make sense to write a quick spec about the change. | 19:33 |
| dmendiza[m] | sdrozdov: this is the log from today's meeting: https://meetings.opendev.org/meetings/keystone/2022/keystone.2022-07-26-15.00.log.html | 19:33 |
| *** dasm is now known as dasm|off | 22:17 | |
| *** dviroel is now known as dviroel|out | 23:29 | |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!