Tuesday, 2023-02-21

opendevreviewYonggen Sun proposed openstack/keystone-tempest-plugin master: [DNM] Test tempest code for yoga keystone  https://review.opendev.org/c/openstack/keystone-tempest-plugin/+/87272500:24
opendevreviewYonggen Sun proposed openstack/keystone-tempest-plugin master: [DNM] Test tempest code for yoga keystone  https://review.opendev.org/c/openstack/keystone-tempest-plugin/+/87272500:46
opendevreviewYonggen Sun proposed openstack/keystone-tempest-plugin master: [DNM] Test tempest code for yoga keystone  https://review.opendev.org/c/openstack/keystone-tempest-plugin/+/87272500:58
opendevreviewYonggen Sun proposed openstack/keystone-tempest-plugin master: [DNM] Test tempest code for yoga keystone  https://review.opendev.org/c/openstack/keystone-tempest-plugin/+/87272501:09
opendevreviewDavid Wilde proposed openstack/keystone master: Force algo specific maximum length  https://review.opendev.org/c/openstack/keystone/+/82859501:10
opendevreviewYonggen Sun proposed openstack/keystone-tempest-plugin master: [DNM] Test tempest code for yoga keystone  https://review.opendev.org/c/openstack/keystone-tempest-plugin/+/87272501:38
opendevreviewYonggen Sun proposed openstack/keystone-tempest-plugin master: [DNM] Test tempest code for yoga keystone  https://review.opendev.org/c/openstack/keystone-tempest-plugin/+/87272501:51
opendevreviewYonggen Sun proposed openstack/keystone-tempest-plugin master: [DNM] Test tempest code for yoga keystone  https://review.opendev.org/c/openstack/keystone-tempest-plugin/+/87272502:27
opendevreviewYonggen Sun proposed openstack/keystone-tempest-plugin master: [DNM] Test tempest code for yoga keystone  https://review.opendev.org/c/openstack/keystone-tempest-plugin/+/87272504:01
opendevreviewYonggen Sun proposed openstack/keystone-tempest-plugin master: [DNM] Test tempest code for yoga keystone  https://review.opendev.org/c/openstack/keystone-tempest-plugin/+/87272504:41
opendevreviewYonggen Sun proposed openstack/keystone-tempest-plugin master: [DNM] Test tempest code for yoga keystone  https://review.opendev.org/c/openstack/keystone-tempest-plugin/+/87272505:06
opendevreviewYonggen Sun proposed openstack/keystone-tempest-plugin master: [DNM] Test tempest code for yoga keystone  https://review.opendev.org/c/openstack/keystone-tempest-plugin/+/87272505:09
opendevreviewYonggen Sun proposed openstack/keystone-tempest-plugin master: [DNM] Test tempest code for yoga keystone  https://review.opendev.org/c/openstack/keystone-tempest-plugin/+/87272506:04
opendevreviewYonggen Sun proposed openstack/keystone-tempest-plugin master: [DNM] Test tempest code for yoga keystone  https://review.opendev.org/c/openstack/keystone-tempest-plugin/+/87272506:59
opendevreviewYonggen Sun proposed openstack/keystone-tempest-plugin master: [DNM] Test tempest code for yoga keystone  https://review.opendev.org/c/openstack/keystone-tempest-plugin/+/87272507:47
opendevreviewYonggen Sun proposed openstack/keystone-tempest-plugin master: [DNM] Test tempest code for yoga keystone  https://review.opendev.org/c/openstack/keystone-tempest-plugin/+/87272508:42
*** dasm|off is now known as dasm14:12
d34dh0r53#startmeeting keystone15:00
opendevmeetMeeting started Tue Feb 21 15:00:08 2023 UTC and is due to finish in 60 minutes.  The chair is d34dh0r53. Information about MeetBot at http://wiki.debian.org/MeetBot.15:00
opendevmeetUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.15:00
opendevmeetThe meeting name has been set to 'keystone'15:00
d34dh0r53#topic roll call15:00
d34dh0r53admiyo, bbobrov, crisloma, d34dh0r53, dpar, dstanek, hrybacki, knikolla[m], lbragstad, lwanderley, kmalloc, rodrigods, samueldmq, ruan_he, wxy, sonuk, vishakha, Ajay, rafaelwe, xek, gmann, zaitcev, arequate15:00
zaitcevo715:00
xeko/15:00
hiromu_o/15:01
knikolla[m]o/15:01
d34dh0r53dmendiza[m], do you want to be added to the roll call list?15:01
dmendiza[m]Sure15:01
d34dh0r53#topic review past meeting work items15:05
d34dh0r53#link https://meetings.opendev.org/meetings/keystone/2023/keystone.2023-02-14-15.03.html15:05
d34dh0r53d34dh0r53 look into the keystone-groups members as well https://review.opendev.org/admin/groups/d7203dc55fa9bdf98c578b16ac398e0c754a1a67,members not sure if it's used any more15:06
d34dh0r53I started doing this, but didn't finish, I don't think we use that group though15:06
d34dh0r53#action d34dh0r53 look into the keystone-groups members as well https://review.opendev.org/admin/groups/d7203dc55fa9bdf98c578b16ac398e0c754a1a67,members not sure if it's used any more15:06
d34dh0r53#topic liaison updates15:07
d34dh0r53Nothing new from VMT15:08
d34dh0r53Antelope release is in full swing15:08
d34dh0r53hiromu_ has asked for a feature freeze exception for OAuth 2.015:12
d34dh0r53#link https://lists.openstack.org/pipermail/openstack-discuss/2023-February/032278.html15:12
d34dh0r53I have no objections15:12
d34dh0r53with that moving on to 15:13
d34dh0r53#topic specifications OAuth 2.0 (hiromu_)15:13
d34dh0r53#link https://review.opendev.org/q/topic:bp%252Foauth2-client-credentials-ext15:13
d34dh0r53External OAuth 2.0 Specification15:13
d34dh0r53#link https://review.opendev.org/c/openstack/keystone-specs/+/86155415:13
d34dh0r53OAuth 2.0 Implementation15:13
d34dh0r53#link https://review.opendev.org/q/topic:bp%252Fsupport-oauth2-mtls15:13
d34dh0r53OAuth 2.0 Documentation15:13
d34dh0r53#link https://review.opendev.org/c/openstack/keystone/+/83810815:13
d34dh0r53#link https://review.opendev.org/c/openstack/keystoneauth/+/83810415:13
hiromu_I couldn't find any comments yet. is there anything I can do for the review process?15:14
*** JasonF is now known as JayF15:15
hiromu_regarding mTLS Oauth2.0, to be clear. https://review.opendev.org/q/topic:bp%252Fsupport-oauth2-mtls 15:16
zaitcevBeat the drum more, I suppose. Who do we have on core? Nikola, Greg...?15:17
d34dh0r53correct15:17
d34dh0r53knikolla[m], xek and dmendiza[m] 15:17
d34dh0r53Ok, cores, please focus on reviewing this feature15:22
d34dh0r53next up15:23
d34dh0r53#topic specification Secure RBAC (dmendiza[m])15:23
d34dh0r53#link https://governance.openstack.org/tc/goals/selected/consistent-and-secure-rbac.html#z-release-timeline_15:23
d34dh0r53Service Role Implementation15:23
d34dh0r53#link https://review.opendev.org/c/openstack/keystone/+/86342015:23
d34dh0r53Manager Role Implementation15:23
d34dh0r53#link https://review.opendev.org/c/openstack/keystone/+/82260115:23
d34dh0r53dmendiza[m], I think we need to have another look at the manager role15:25
dmendiza[m]Still kind of out of the loop 15:25
dmendiza[m]No updates from me this week 15:25
dmendiza[m]d34dh0r53: ack15:25
d34dh0r53ack15:25
d34dh0r53moving on to15:25
d34dh0r53#topic open discussion15:25
d34dh0r53The TC is calling for Antelope cycle highlights15:25
d34dh0r53I'd like to mention mTLS support15:26
knikolla[m]++15:27
knikolla[m]I would also love to see this merge for this cycle https://review.opendev.org/c/openstack/keystoneauth/+/86987615:28
d34dh0r53knikolla[m]++ agreed15:28
d34dh0r53I don't mind removing my -1 if it help, we can remove six in a follow up patch15:29
d34dh0r53anything else for Antelope cycle highlights?15:29
knikolla[m]We can just push a new patchset15:30
d34dh0r53ack15:30
d34dh0r53Ok, anything else for open discussion before we move to bug review?15:32
d34dh0r53#topic bug review15:34
d34dh0r53#link https://bugs.launchpad.net/keystone/?orderby=-id&start=015:34
d34dh0r53#link https://bugs.launchpad.net/keystone/+bug/200798215:35
d34dh0r53keystone role cache misbehaving in HA setup15:36
d34dh0r53Interesting, does anyone have any cycles to look into this?15:38
d34dh0r53ack15:39
d34dh0r53next up we have another bug in keystone15:39
d34dh0r53#link https://bugs.launchpad.net/keystone/+bug/200791515:39
d34dh0r53this reads as a ML question for the nova folks?15:40
d34dh0r53I also think the answer to their question is no15:41
d34dh0r53I'll reply to that15:42
d34dh0r53that does it for keystone15:43
d34dh0r53next up we have15:43
d34dh0r53#link https://bugs.launchpad.net/python-keystoneclient/?orderby=-id&start=015:43
d34dh0r53we don't have any bugs but the gate is broken15:43
d34dh0r53I have submitted15:43
d34dh0r53#link https://review.opendev.org/c/openstack/python-keystoneclient/+/87426315:44
d34dh0r53to fix it, for bobcat I'd like to look at deprecating python-keystoneclient15:44
d34dh0r53other than that nothing new in python-keystoneclient15:45
d34dh0r53next up15:45
d34dh0r53#link https://bugs.launchpad.net/keystoneauth/+bugs?orderby=-id&start=015:45
d34dh0r53no new bugs there15:45
d34dh0r53#link #link https://bugs.launchpad.net/keystonemiddleware/+bugs?orderby=-id&start=015:45
d34dh0r53#link https://bugs.launchpad.net/keystonemiddleware/+bugs?orderby=-id&start=015:45
d34dh0r53nothing new15:46
d34dh0r53#link https://bugs.launchpad.net/pycadf/+bugs?orderby=-id&start=015:46
d34dh0r53pycadf is clean15:46
d34dh0r53#link https://bugs.launchpad.net/ldappool/+bugs?orderby=-id&start=015:46
d34dh0r53so is ldappool15:46
d34dh0r53did we miss anything?15:46
d34dh0r53#topic conclusion15:47
hiromu_I'd like to mention one thing for ptg15:47
d34dh0r53A couple of things before we go, first off don't forget to register for the Virtual PTG15:47
d34dh0r53go ahead hiromu_ 15:47
hiromu_thanks. recently I sent this email to ML https://lists.openstack.org/pipermail/openstack-discuss/2023-February/032143.html15:48
hiromu_this is the proposal of making discussion time at PTG for External OAuth 2.0 Specification15:49
d34dh0r53ack, I will make sure that we don't conflict with any ironic times15:49
hiromu_great. thanks a lot.15:50
d34dh0r53thank you15:50
d34dh0r53Speaking of the PTG, it's free15:50
d34dh0r53#link https://openinfra-ptg.eventbrite.com/15:50
d34dh0r53Also, please let me know if you have any additional highlights you'd like to call out for the Antelope cycle15:51
d34dh0r53Thanks folks, have a great rest of your day!15:51
d34dh0r53#endmeeting15:51
opendevmeetMeeting ended Tue Feb 21 15:51:50 2023 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)15:51
opendevmeetMinutes:        https://meetings.opendev.org/meetings/keystone/2023/keystone.2023-02-21-15.00.html15:51
opendevmeetMinutes (text): https://meetings.opendev.org/meetings/keystone/2023/keystone.2023-02-21-15.00.txt15:51
opendevmeetLog:            https://meetings.opendev.org/meetings/keystone/2023/keystone.2023-02-21-15.00.log.html15:51
dmendiza[m]d34dh0r53: looking at https://review.opendev.org/c/openstack/keystone/+/864566 and https://review.opendev.org/c/openstack/keystone-tempest-plugin/+/86457117:00
dmendiza[m]d34dh0r53: I'm confused about the depends-on17:00
dmendiza[m]the comment on  864571 makes it sound like it depends on 864566, but 864566 says it depends on 864571? 🤔17:01
*** dasm is now known as dasm|off19:56
d34dh0r53sorry I missed your message dmendiza[m], the depends-on is for the experimental jobs where the test is run20:19
dmendiza[m]Gotcha20:19
opendevreviewDavid Wilde proposed openstack/keystone-tempest-plugin master: Add keystone oidc tests  https://review.opendev.org/c/openstack/keystone-tempest-plugin/+/86457120:49
opendevreviewDavid Wilde proposed openstack/keystone-tempest-plugin master: Add keystone oidc tests  https://review.opendev.org/c/openstack/keystone-tempest-plugin/+/86457120:54

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!