Tuesday, 2023-05-09

opendevreviewOpenStack Proposal Bot proposed openstack/keystonemiddleware master: Imported Translations from Zanata  https://review.opendev.org/c/openstack/keystonemiddleware/+/86155203:22
opendevreviewOpenStack Proposal Bot proposed openstack/keystone master: Imported Translations from Zanata  https://review.opendev.org/c/openstack/keystone/+/85780503:25
opendevreviewArvid Requate proposed openstack/keystoneauth master: Add RFC required headers and data to the request  https://review.opendev.org/c/openstack/keystoneauth/+/87689309:34
opendevreviewArvid Requate proposed openstack/keystone master: Fix typo in openid federation diagram  https://review.opendev.org/c/openstack/keystone/+/88269211:10
dmendiza[m]🙋‍♂️15:07
d34dh0r53o/15:07
d34dh0r53#startmeeting keystone15:07
opendevmeetMeeting started Tue May  9 15:07:11 2023 UTC and is due to finish in 60 minutes.  The chair is d34dh0r53. Information about MeetBot at http://wiki.debian.org/MeetBot.15:07
opendevmeetUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.15:07
opendevmeetThe meeting name has been set to 'keystone'15:07
d34dh0r53admiyo, bbobrov, crisloma, d34dh0r53, dpar, dstanek, hrybacki, knikolla[m], lbragstad, lwanderley, kmalloc, rodrigods, samueldmq, ruan_he, wxy, sonuk, vishakha, Ajay, rafaelwe, xek, gmann, zaitcev, reqa, dmendiza[m]15:07
d34dh0r53#topic roll call15:07
zaitcevo/15:08
dmendiza[m]🙋‍♂️15:08
d34dh0r53o/15:08
d34dh0r53#topic review past meeting work items15:09
d34dh0r53#link https://meetings.opendev.org/meetings/keystone/2023/keystone.2023-05-02-15.03.html15:09
d34dh0r53dmendiza[m], d34dh0r53 update the keystone groups to inherit from keystone-core15:09
d34dh0r53This is pretty much done, thanks dmendiza[m] 15:09
d34dh0r53Lance changed the group we needed and I now have access to update the release groups15:10
dmendiza[m]😎15:10
dmendiza[m]I think there was one ldappool group that'll need infra intervention to fix15:10
dmendiza[m](since the members are now long gone)15:10
dmendiza[m]?15:10
d34dh0r53I think I now have access to fix that, I'll test today15:11
d34dh0r53next up: d34dh0r53 investigate https://bugs.launchpad.net/keystone/+bug/200975215:11
d34dh0r53I still need to do this, working on a reproducer environment now15:11
d34dh0r53#action d34dh0r53 investigate https://bugs.launchpad.net/keystone/+bug/200975215:11
d34dh0r53d34dh0r53 Look into adding/restoring a known issues section to our documentation15:12
d34dh0r53need to look at this, unless someone wants to take it15:12
d34dh0r53it goes along with d34dh0r53 add https://bugs.launchpad.net/keystone/+bug/1305950 to the known issues section of our documentation15:12
d34dh0r53#action d34dh0r53 Look into adding/restoring a known issues section to our documentation15:13
d34dh0r53#action d34dh0r53 add https://bugs.launchpad.net/keystone/+bug/1305950 to the known issues section of our documentation15:13
d34dh0r53#action d34dh0r53 review our open LDAP bugs https://bugs.launchpad.net/keystone/+bugs?field.tag=ldap15:14
d34dh0r53Ok, that does it for the past meeting work items15:14
d34dh0r53#topic liaison updates15:15
knikollao/15:15
d34dh0r53Hi knikolla o/15:15
d34dh0r53No updates from VMT15:15
hiromuo/15:16
dmendiza[m]This week is Bobcat-115:16
dmendiza[m]I don't think we need to do anything other than +1 the release patch.15:16
d34dh0r53ack15:16
d34dh0r53Ok, moving on15:18
d34dh0r53#topic specification OAuth 2.0 (hiromu)15:18
d34dh0r53External OAuth 2.0 Specification15:18
d34dh0r53#link https://review.opendev.org/c/openstack/keystone-specs/+/86155415:18
d34dh0r53OAuth 2.0 Implementation15:18
d34dh0r53#link https://review.opendev.org/q/topic:bp%252Fsupport-oauth2-mtls15:18
d34dh0r53OAuth 2.0 Documentation15:18
d34dh0r53#link https://review.opendev.org/c/openstack/keystone/+/83810815:18
d34dh0r53#link https://review.opendev.org/c/openstack/keystoneauth/+/83810415:18
knikollaThere were some comments from Julia on the spec which I would like to see addressed.15:21
hiromuI'll reply them until next week.15:22
d34dh0r53thank you hiromu 15:23
d34dh0r53any other comments on OAuth 2.0?15:23
hiromuI have one15:23
hiromuis there any chance to discuss the spec which should be updated soon at PTG at June? 15:24
hiromuI mean do you plan to attend PTG in person?15:25
hiromuespecially knikolla and d34dh0r5315:25
d34dh0r53I will be there15:26
knikollaI will be attending and we can discuss it there, sure15:26
hiromuthanks. i'll remind you when PTG is approaching.15:26
d34dh0r53thank you hiromu 15:27
d34dh0r53next up we have:15:27
d34dh0r53#topic specification Secure RBAC (dmendiza[m])15:27
d34dh0r53#link https://governance.openstack.org/tc/goals/selected/consistent-and-secure-rbac.html#z-release-timeline_15:27
d34dh0r53Service Role Implementation15:27
d34dh0r53#link https://review.opendev.org/c/openstack/keystone/+/86342015:28
d34dh0r53Manager Role Implementation15:28
d34dh0r53#link https://review.opendev.org/c/openstack/keystone/+/82260115:28
dmendiza[m]Not a whole lot of progress on those15:28
dmendiza[m]There's an RBAC pop-up meeting scheduled for later today15:28
dmendiza[m]so I'll sync up with gmann then15:28
d34dh0r53ack, thanks dmendiza[m]15:29
d34dh0r53#topic SQLAlchemy 2.0 (stephenfin)15:29
d34dh0r53#link https://review.opendev.org/q/topic:sqlalchemy-20+is:open+project:openstack/keystone15:29
d34dh0r53Can I get reviews on this, while I have context/time to close it out?15:29
d34dh0r53What more do you need from me?15:29
d34dh0r53we need to review these patches15:29
d34dh0r53anything else before we move on?15:31
d34dh0r53#topic open discussion15:32
d34dh0r53first up15:32
d34dh0r53(drencrom) We need to merge these backports to fix pep8 tests15:32
d34dh0r53we started doing the backports, the gates look like they may be failing due to a Stevedore issue15:33
d34dh0r53does anyone here know how to troubleshoot those?15:33
zaitcevNot me.15:34
drencromWhere do you see these errors? I see all green on opendev15:34
d34dh0r53drencrom: https://review.opendev.org/c/openstack/keystonemiddleware/+/88240115:35
d34dh0r53the cover test, a couple of months ago I traced a failure that looks like that to stevedore15:35
d34dh0r53ok, maybe drencrom and I can sync on this15:40
d34dh0r53next up15:40
d34dh0r53(mustafakemalgilor) PooledLdapHandler message.clean() patch backports15:40
d34dh0r53we looked at these during the reviewathon as well and I think the backports are now getting votes15:41
d34dh0r53we still need +2 +W on 15:42
d34dh0r53#link ussuri: https://review.opendev.org/c/openstack/keystone/+/87484615:42
d34dh0r53#link victoria: https://review.opendev.org/c/openstack/keystone/+/87484715:42
d34dh0r53#link wallaby: https://review.opendev.org/c/openstack/keystone/+/87484415:42
d34dh0r53#link xena: https://review.opendev.org/c/openstack/keystone/+/87484315:42
d34dh0r53next up (reqa) OAuth 2.0 Device Authorization Grant bugfix15:42
d34dh0r53#link https://review.opendev.org/c/openstack/keystoneauth/+/87689315:43
d34dh0r53it has votes, but knikolla has a question on that one15:43
d34dh0r53anything else for open discussion before we move on to bug review?15:44
d34dh0r53#topic bug review15:45
d34dh0r53#link https://bugs.launchpad.net/keystone/?orderby=-id&start=015:45
d34dh0r53Keystone has a new bug #link https://bugs.launchpad.net/keystone/+bug/201864415:46
d34dh0r53this looks like an S-RBAC bug, dmendiza[m] mind taking a look at it?15:46
dmendiza[m]Sure.  I'll assign it to myself.15:47
d34dh0r53thanks15:47
d34dh0r53next up is #link https://bugs.launchpad.net/python-keystoneclient/?orderby=-id&start=015:48
d34dh0r53nothing new for python-keystoneclient15:48
d34dh0r53#link https://bugs.launchpad.net/keystoneauth/+bug/201204715:48
d34dh0r53#undo15:48
opendevmeetRemoving item from minutes: #link https://bugs.launchpad.net/keystoneauth/+bug/201204715:48
d34dh0r53#link https://bugs.launchpad.net/keystoneauth/+bugs?orderby=-id&start=015:48
d34dh0r53nothing new for keystoneauth15:49
d34dh0r53#link https://bugs.launchpad.net/keystonemiddleware/+bugs?orderby=-id&start=015:49
d34dh0r53keystonemiddleware is the same as last week15:49
d34dh0r53#link https://bugs.launchpad.net/pycadf/+bugs?orderby=-id&start=015:49
d34dh0r53pycadf has no new bugs15:49
zaitcevWhat's going on with all these undecideds in keystoneauth15:50
d34dh0r53#link https://bugs.launchpad.net/ldappool/+bugs?orderby=-id&start=015:50
zaitcevOh, it's a priority, not disposition. Okay, sorry.15:50
d34dh0r53yeah15:50
d34dh0r53ldappool is clean as well15:51
d34dh0r53but to your point zaitcev we need to set priority on some of those as they are valid bugs15:51
d34dh0r53#topic conclusion15:51
d34dh0r53No reviewathon this week as it's a day off for Red Hat15:52
d34dh0r53any this else?15:52
zaitcevAs usual I need to drum up reviews15:52
d34dh0r53*thing15:52
zaitcevSee https://review.opendev.org/c/openstack/keystone/+/87434615:52
zaitcevI thought it was okay to let it sit because it's attached to a bug and eventually you'll notice that the bug is fixed.15:53
zaitcevBut I'm getting impatient :-)15:53
d34dh0r53ack, I'll take a look today15:53
d34dh0r53thank you15:53
zaitcevWell, it's my real contribution to Keystone. Not just fixing typos in setup.cfg.15:53
d34dh0r53:)15:54
d34dh0r53Thanks Folks! See everyone online and have a great rest of your week.  Please reach out if you need anything :)15:54
d34dh0r53#endmeeting15:54
opendevmeetMeeting ended Tue May  9 15:54:40 2023 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)15:54
opendevmeetMinutes:        https://meetings.opendev.org/meetings/keystone/2023/keystone.2023-05-09-15.07.html15:54
opendevmeetMinutes (text): https://meetings.opendev.org/meetings/keystone/2023/keystone.2023-05-09-15.07.txt15:54
opendevmeetLog:            https://meetings.opendev.org/meetings/keystone/2023/keystone.2023-05-09-15.07.log.html15:54
drencromd34dh0r53: About https://review.opendev.org/c/openstack/keystonemiddleware/+/882401 I agree with Hiromu that you are missing the patches to test_ec2_token_middleware.py. I amended my previous patches with that code to make them work.19:03
d34dh0r53ack, thank you drencrom 19:04

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!