Tuesday, 2023-01-24

yasufum0Hi tacker team.08:00
yasufum0sorry08:00
*** dviroel|out is now known as dviroel11:18
*** dasm|off is now known as dasm13:58
d34dh0r53#startmeeting keystone15:00
opendevmeetMeeting started Tue Jan 24 15:00:34 2023 UTC and is due to finish in 60 minutes.  The chair is d34dh0r53. Information about MeetBot at http://wiki.debian.org/MeetBot.15:00
opendevmeetUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.15:00
opendevmeetThe meeting name has been set to 'keystone'15:00
d34dh0r53#topic roll call15:00
d34dh0r53admiyo, bbobrov, crisloma, d34dh0r53, dpar, dstanek, hrybacki, knikolla[m], lbragstad, lwanderley, kmalloc, rodrigods, samueldmq, ruan_he, wxy, sonuk, vishakha, Ajay, rafaelwe, xek, gmann, zaitcev15:00
d34dh0r53#topic review past meeting work items15:02
knikolla[m]o/15:02
d34dh0r53first up we have15:02
d34dh0r53o/ knikolla[m] 15:02
d34dh0r53d34dh0r53 update the CrossProjectLiaisons wiki https://wiki.openstack.org/wiki/CrossProjectLiaisons15:02
d34dh0r53I didn't get a chance, will try this week15:02
d34dh0r53#action d34dh0r53 update the CrossProjectLiaisons wiki https://wiki.openstack.org/wiki/CrossProjectLiaisons15:02
d34dh0r53same for d34dh0r53 look into the keystone-groups members as well https://review.opendev.org/admin/groups/d7203dc55fa9bdf98c578b16ac398e0c754a1a67,members not sure if it's used any more15:02
d34dh0r53#action d34dh0r53 look into the keystone-groups members as well https://review.opendev.org/admin/groups/d7203dc55fa9bdf98c578b16ac398e0c754a1a67,members not sure if it's used any more15:02
d34dh0r53reviewathon https://review.opendev.org/c/openstack/keystoneauth/+/83810415:03
d34dh0r53looks like this was reviewed by xek, thanks!15:03
d34dh0r53reviewathon https://review.opendev.org/c/openstack/keystone/+/83810815:03
d34dh0r53also has been reviewed15:04
d34dh0r53reviewathon https://review.opendev.org/c/openstack/keystone/+/86092815:04
d34dh0r53that was reviewed by knikolla[m], and pending testing looks like a good start15:05
d34dh0r53reviewathon https://review.opendev.org/c/openstack/keystone/+/86342015:05
knikolla[m]yeah, i've been working on that on and off for the past few days. 15:05
d34dh0r53knikolla[m]: great, how's it looking?15:05
d34dh0r53reviewathon https://review.opendev.org/c/openstack/keystone/+/863420 was reviewed as well15:06
d34dh0r53reviewathon https://review.opendev.org/c/openstack/keystoneauth/+/867603 is the last one and it may be gating15:07
d34dh0r53it has all of the votes15:07
knikolla[m]d34dh0r53: mostly okay. i'm also trying to fill the gaps in my understanding of mtls and tls15:07
d34dh0r53knikolla[m]: cool, good to hear15:08
d34dh0r53that does it for the past meeting items, thanks for handling all of those reviews15:09
d34dh0r53#topic liaison updates15:10
d34dh0r53nothing from the VMT end15:10
d34dh0r53moving on then15:10
d34dh0r53#topic specification OAuth 2.0 (hiromu)15:11
hiromuo/15:11
d34dh0r53#link https://review.opendev.org/q/topic:bp%252Foauth2-client-credentials-ext15:11
d34dh0r53External OAuth 2.0 Specification15:11
d34dh0r53#link https://review.opendev.org/c/openstack/keystone-specs/+/86155415:11
d34dh0r53OAuth 2.0 Implementation15:11
d34dh0r53#link https://review.opendev.org/q/topic:bp%252Fsupport-oauth2-mtls15:11
d34dh0r53OAuth 2.0 Documentation15:11
d34dh0r53#link https://review.opendev.org/c/openstack/keystone/+/83810815:11
d34dh0r53#link https://review.opendev.org/c/openstack/keystoneauth/+/83810415:11
d34dh0r53hello hiromu o/15:11
d34dh0r53any updates for the OAuth 2.0 Spec?15:12
hiromuno update from me15:12
hiromui have one question15:13
hiromuwill you two try mtls patch this week reviewathon?15:13
d34dh0r53I will not have time to test it this week, not sure about knikolla[m] or xek 15:13
knikolla[m]i am in the process of15:14
hiromui see. it would be good if you could notify me when you try them15:15
knikolla[m]https://review.opendev.org/c/openstack/keystone/+/860613 needs to be update to not pass credential_id as per your comment as well15:15
knikolla[m]another thing i noticed, is that this method of authentication can only work for a single project of users. corresponding to the default_project_id15:16
hiromuyes, i will update https://review.opendev.org/c/openstack/keystone/+/860613 15:16
hiromuah, yes. basically, user (or client) belongs to the single project that what we assumed15:18
d34dh0r53cool, we'll re-sync on this during the reviewathon this week15:19
d34dh0r53next up we have15:19
d34dh0r53#topic specification Secure RBAC (dmendiza[m])15:19
d34dh0r53#link https://governance.openstack.org/tc/goals/selected/consistent-and-secure-rbac.html#z-release-timeline_15:19
*** dviroel is now known as dviroel|lunch15:19
d34dh0r53Service Role Implementation15:19
d34dh0r53#link https://review.opendev.org/c/openstack/keystone/+/86342015:19
d34dh0r53Manager Role Implementation15:20
d34dh0r53#link https://review.opendev.org/c/openstack/keystone/+/82260115:20
d34dh0r53the service role looks good to go, but the manager role still needs feedback15:21
d34dh0r53#topic open discussion15:22
d34dh0r53(drencrom) Need a review for this cherry pick https://review.opendev.org/c/openstack/keystonemiddleware/+/86828415:22
d34dh0r53I need to port it all the way to ussuri15:22
d34dh0r53drencrom: anything you'd like to add? If not I'll add it to the reviewathon queue for this Friday15:23
drencromhi o/. No nothing special to add.15:24
d34dh0r53#action reviewathon https://review.opendev.org/c/openstack/keystonemiddleware/+/86828415:24
d34dh0r53drencrom: cool, thanks for that patch!15:24
d34dh0r53next up we have:15:24
d34dh0r53PooledLdapHandler MaxConnectionReachedError bug15:25
d34dh0r53#link https://bugs.launchpad.net/keystone/+bug/199878915:25
d34dh0r53Review request15:25
d34dh0r53#link https://review.opendev.org/c/openstack/keystone/+/86672315:25
d34dh0r53adding this to the reviewathon queue as well15:25
d34dh0r53#action reviewathon https://review.opendev.org/c/openstack/keystone/+/86672315:25
d34dh0r53anything else before we move on to bug review?15:26
d34dh0r53#topic bug review15:26
d34dh0r53#link https://bugs.launchpad.net/keystone/?orderby=-id&start=015:26
d34dh0r53nothing new for keystone15:27
d34dh0r53#link https://bugs.launchpad.net/python-keystoneclient/?orderby=-id&start=015:29
d34dh0r53nothing new for python-keystoneclient15:29
d34dh0r53#link https://bugs.launchpad.net/keystoneauth/+bugs?orderby=-id&start=015:29
d34dh0r53no new bugs in keystoneauth15:30
d34dh0r53#link https://bugs.launchpad.net/keystonemiddleware/+bugs?orderby=-id&start=015:30
d34dh0r53no new issues here15:31
d34dh0r53#link https://bugs.launchpad.net/pycadf/+bugs?orderby=-id&start=015:31
d34dh0r53pycadf is clear15:31
d34dh0r53#link https://bugs.launchpad.net/ldappool/+bugs?orderby=-id&start=015:31
d34dh0r53as is ldappool15:31
d34dh0r53that does it for bug review15:31
d34dh0r53#topic conclusion15:32
d34dh0r53anyone have anything before we go?15:32
d34dh0r53thanks folks!15:34
d34dh0r53#endmeeting15:34
opendevmeetMeeting ended Tue Jan 24 15:34:07 2023 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)15:34
opendevmeetMinutes:        https://meetings.opendev.org/meetings/keystone/2023/keystone.2023-01-24-15.00.html15:34
opendevmeetMinutes (text): https://meetings.opendev.org/meetings/keystone/2023/keystone.2023-01-24-15.00.txt15:34
opendevmeetLog:            https://meetings.opendev.org/meetings/keystone/2023/keystone.2023-01-24-15.00.log.html15:34
*** dviroel|lunch is now known as dviroel16:30
*** dviroel is now known as dviroel|doc_appt16:43
*** dviroel|doc_appt is now known as dviroel19:13
*** dviroel is now known as dviroel|out22:44
*** dasm is now known as dasm|off23:09

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!