Tuesday, 2023-01-31

*** dasm is now known as dasm|off01:44
opendevreviewDavid Wilde proposed openstack/keystone-tempest-plugin master: Add keystone oidc tests  https://review.opendev.org/c/openstack/keystone-tempest-plugin/+/86457104:33
*** dviroel|out is now known as dviroel|rover11:29
*** tkajinam is now known as Guest300312:02
opendevreviewDavid Wilde proposed openstack/keystone-tempest-plugin master: Add keystone oidc tests  https://review.opendev.org/c/openstack/keystone-tempest-plugin/+/86457114:12
*** dasm|off is now known as dasm14:28
d34dh0r53#startmeeting keystone15:01
opendevmeetMeeting started Tue Jan 31 15:01:40 2023 UTC and is due to finish in 60 minutes.  The chair is d34dh0r53. Information about MeetBot at http://wiki.debian.org/MeetBot.15:01
opendevmeetUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.15:01
opendevmeetThe meeting name has been set to 'keystone'15:01
d34dh0r53#topic roll call15:02
d34dh0r53admiyo, bbobrov, crisloma, d34dh0r53, dpar, dstanek, hrybacki, knikolla[m], lbragstad, lwanderley, kmalloc, rodrigods, samueldmq, ruan_he, wxy, sonuk, vishakha, Ajay, rafaelwe, xek, gmann, zaitcev15:02
knikolla[m]o/15:02
d34dh0r53hi knikolla[m] 15:02
zaitcevHi15:02
xeko/15:02
d34dh0r53hello zaitcev, xek o/15:03
hiromuo/15:03
d34dh0r53hi hiromu 15:05
d34dh0r53#topic review past meeting work items15:05
d34dh0r53#link https://meetings.opendev.org/meetings/keystone/2023/keystone.2023-01-24-15.00.html15:05
d34dh0r53first up we have d34dh0r53 update the CrossProjectLiaisons wiki https://wiki.openstack.org/wiki/CrossProjectLiaisons15:05
d34dh0r53looking at that right now15:06
d34dh0r53next d34dh0r53 look into the keystone-groups members as well https://review.opendev.org/admin/groups/d7203dc55fa9bdf98c578b16ac398e0c754a1a67,members not sure if it's used any more15:06
d34dh0r53haven't done that yet, will try to take care of it today as well15:06
d34dh0r53#action d34dh0r53 look into the keystone-groups members as well https://review.opendev.org/admin/groups/d7203dc55fa9bdf98c578b16ac398e0c754a1a67,members not sure if it's used any more15:06
d34dh0r53reviewathon https://review.opendev.org/c/openstack/keystonemiddleware/+/86828415:06
*** dviroel|rover is now known as dviroel|rover|lunch15:08
d34dh0r53that one has merged, thanks for the reviews!15:09
d34dh0r53reviewathon https://review.opendev.org/c/openstack/keystone/+/866723 is next15:09
d34dh0r53that looks good to me, but it would be good if xek can look at it too15:11
xekd34dh0r53: ack, I'll take a look15:12
d34dh0r53that does it for the past action items15:12
d34dh0r53thanks xek15:12
d34dh0r53#topic liaison updates15:12
d34dh0r53nothing from VMT15:13
d34dh0r53that does it for liaison updates15:13
d34dh0r53#topic specification OAuth 2.0 (hiromu)15:14
d34dh0r53    #link https://review.opendev.org/q/topic:bp%252Foauth2-client-credentials-ext15:14
d34dh0r53    External OAuth 2.0 Specification15:14
d34dh0r53    #link https://review.opendev.org/c/openstack/keystone-specs/+/86155415:14
d34dh0r53    OAuth 2.0 Implementation15:14
d34dh0r53    #link https://review.opendev.org/q/topic:bp%252Fsupport-oauth2-mtls15:14
d34dh0r53    OAuth 2.0 Documentation15:14
d34dh0r53    #link https://review.opendev.org/c/openstack/keystone/+/83810815:14
d34dh0r53    #link https://review.opendev.org/c/openstack/keystoneauth/+/83810415:14
hiromuI couldn't update mTLS patches, yet, sorry.15:15
hiromuI have one topic regarding ext. OAuth2.0 server support15:15
hiromuhttps://etherpad.opendev.org/p/keystone-weekly-meeting15:16
d34dh0r53    OAuth2.0 External Authorization Server Support (hiromu)15:16
d34dh0r53    I would like to suggest starting ML for pre-PTG discussion by Keystone-Tacker and announcing that we'll discuss about this topic at vPTG to Ironic and Barbican.15:16
d34dh0r53    Also, I would like to hold "cross project sessions" at vPTG for this topic.15:16
hiromuyes that's it. thank you d34dh0r53.15:16
d34dh0r53hiromu: I think now is a good time to start the ML discussion15:17
hiromugood to hear that. BTW, is it possible to hold that session at vPTG by Keystone?15:17
d34dh0r53yes, please let me know how much time you will need and I'll get it on the agenda15:18
hiromugreat! I'll tell you.15:20
d34dh0r53thanks, anything else for this topic?15:21
hiromunothing. thanks.15:21
d34dh0r53ok, moving on15:22
d34dh0r53#topic specification Secure RBAC (dmendiza[m])15:22
d34dh0r53    #link https://governance.openstack.org/tc/goals/selected/consistent-and-secure-rbac.html#z-release-timeline_15:23
d34dh0r53    Service Role Implementation15:23
d34dh0r53    #link https://review.opendev.org/c/openstack/keystone/+/86342015:23
d34dh0r53    Manager Role Implementation15:23
d34dh0r53    #link https://review.opendev.org/c/openstack/keystone/+/82260115:23
d34dh0r53I don't think we have any updates here15:23
d34dh0r53#topic open discussion15:24
d34dh0r53    (drencrom) Need a review for this cherry pick https://review.opendev.org/c/openstack/keystonemiddleware/+/86828415:24
d34dh0r53    I need to port it all the way to ussuri15:24
d34dh0r53the stable/yoga backport needs the go button15:24
d34dh0r53and we also have this15:25
d34dh0r53PooledLdapHandler MaxConnectionReachedError bug15:25
d34dh0r53#link https://bugs.launchpad.net/keystone/+bug/199878915:26
d34dh0r53Review request15:26
d34dh0r53#link https://review.opendev.org/c/openstack/keystone/+/86672315:26
d34dh0r53which we've already talked about, xek is going to look at it15:26
d34dh0r53anything else before we move on to the bug review?15:26
d34dh0r53#topic bug review15:28
d34dh0r53#link https://bugs.launchpad.net/keystone/?orderby=-id&start=015:29
d34dh0r53nothing new for keystone15:29
d34dh0r53#link https://bugs.launchpad.net/python-keystoneclient/?orderby=-id&start=015:29
d34dh0r53python-keystoneclient is good15:30
d34dh0r53#link https://bugs.launchpad.net/keystoneauth/+bugs?orderby=-id&start=015:30
d34dh0r53keystoneauth is clean15:31
d34dh0r53#link https://bugs.launchpad.net/keystonemiddleware/+bugs?orderby=-id&start=015:31
d34dh0r53no new bugs in keystonemiddleware15:31
d34dh0r53#link https://bugs.launchpad.net/pycadf/+bugs?orderby=-id&start=015:31
d34dh0r53nothing new in pycadf15:32
d34dh0r53#link https://bugs.launchpad.net/ldappool/+bugs?orderby=-id&start=015:32
d34dh0r53and ldappool is looking good15:32
d34dh0r53#topic conclusion15:32
d34dh0r53anyone have anything before we wrap up?15:33
d34dh0r53thanks folks, have a great week!15:34
d34dh0r53hopefully I'll see y'all at the reviewathon on Friday15:34
d34dh0r53#endmeeting15:34
opendevmeetMeeting ended Tue Jan 31 15:34:39 2023 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)15:34
opendevmeetMinutes:        https://meetings.opendev.org/meetings/keystone/2023/keystone.2023-01-31-15.01.html15:34
opendevmeetMinutes (text): https://meetings.opendev.org/meetings/keystone/2023/keystone.2023-01-31-15.01.txt15:34
opendevmeetLog:            https://meetings.opendev.org/meetings/keystone/2023/keystone.2023-01-31-15.01.log.html15:34
zaitcevI'm still working my way through how pieces fit together. This is in context of the authorization of the rules in application credentials.15:38
opendevreviewDavid Wilde proposed openstack/keystone-tempest-plugin master: Add keystone oidc tests  https://review.opendev.org/c/openstack/keystone-tempest-plugin/+/86457115:42
*** dviroel|rover|lunch is now known as dviroel|rover16:14
opendevreviewDavid Wilde proposed openstack/keystone-tempest-plugin master: Add keystone oidc tests  https://review.opendev.org/c/openstack/keystone-tempest-plugin/+/86457116:45
opendevreviewDavid Wilde proposed openstack/keystone-tempest-plugin master: Add keystone oidc tests  https://review.opendev.org/c/openstack/keystone-tempest-plugin/+/86457117:49
*** dasm is now known as dasm|off19:33
opendevreviewArvid Requate proposed openstack/keystoneauth master: New auth plugin v3oidcdeviceauthz  https://review.opendev.org/c/openstack/keystoneauth/+/86987619:42
*** dviroel|rover is now known as dviroel|uot21:00

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!