Tuesday, 2019-01-15

*** yamamoto has quit IRC00:03
*** yamamoto has joined #openstack-meeting-alt00:05
*** markvoelker has quit IRC00:06
*** yamamoto has quit IRC00:07
*** ttsiouts has joined #openstack-meeting-alt00:08
*** jbadiapa has quit IRC00:10
*** yamamoto has joined #openstack-meeting-alt00:11
*** yamamoto has quit IRC00:13
*** yamamoto has joined #openstack-meeting-alt00:14
*** yamamoto has quit IRC00:16
*** macza has quit IRC00:18
*** ttsiouts has quit IRC00:26
*** ttsiouts has joined #openstack-meeting-alt00:27
*** yamamoto has joined #openstack-meeting-alt00:27
*** yamamoto has quit IRC00:31
*** ttsiouts has quit IRC00:32
*** rdopiera has quit IRC00:58
*** yamamoto has joined #openstack-meeting-alt01:15
*** rdopiera has joined #openstack-meeting-alt01:16
*** whoami-rajat has joined #openstack-meeting-alt01:20
*** yamamoto has quit IRC01:21
*** markvoelker has joined #openstack-meeting-alt01:35
*** markvoelker has quit IRC01:40
*** rdopiera has quit IRC01:41
*** hongbin has joined #openstack-meeting-alt01:57
*** hongbin has quit IRC01:59
*** hongbin has joined #openstack-meeting-alt02:04
*** macza has joined #openstack-meeting-alt02:06
*** macza has quit IRC02:11
*** erlon_ has quit IRC02:11
*** rdopiera has joined #openstack-meeting-alt02:17
*** TxGirlGeek has quit IRC02:23
*** yamamoto has joined #openstack-meeting-alt02:32
*** alex_xu has quit IRC02:37
*** yamamoto has quit IRC02:37
*** iyamahat_ has quit IRC02:44
*** yamahata has quit IRC02:45
*** apetrich has quit IRC03:16
*** TxGirlGeek has joined #openstack-meeting-alt03:19
*** yamamoto has joined #openstack-meeting-alt03:30
*** diablo_rojo has quit IRC03:45
*** TxGirlGeek has quit IRC03:51
*** vishakha has joined #openstack-meeting-alt03:54
*** dave-mccowan has quit IRC04:11
*** hongbin has quit IRC04:25
*** radeks has joined #openstack-meeting-alt04:33
*** yamamoto has quit IRC04:34
*** vishalmanchanda has joined #openstack-meeting-alt04:40
*** iyamahat has joined #openstack-meeting-alt05:29
*** yamamoto has joined #openstack-meeting-alt05:42
*** markvoelker has joined #openstack-meeting-alt05:48
*** yamamoto has quit IRC05:49
*** lbragstad has quit IRC05:56
*** markvoelker has quit IRC05:59
*** brault has quit IRC06:33
*** yamahata has joined #openstack-meeting-alt06:36
*** diablo_rojo has joined #openstack-meeting-alt06:46
*** rcernin has quit IRC06:59
*** yamamoto has joined #openstack-meeting-alt07:08
*** yamamoto has quit IRC07:13
*** tetsuro has joined #openstack-meeting-alt07:14
*** jbadiapa has joined #openstack-meeting-alt07:15
*** tetsuro has quit IRC07:16
*** iyamahat has quit IRC07:20
*** e0ne has joined #openstack-meeting-alt07:30
*** kopecmartin|off is now known as kopecmartin07:35
*** tetsuro has joined #openstack-meeting-alt07:47
*** apetrich has joined #openstack-meeting-alt07:48
*** tetsuro has quit IRC07:52
*** tetsuro has joined #openstack-meeting-alt07:54
*** tetsuro has quit IRC07:55
*** ccamacho has joined #openstack-meeting-alt07:56
*** e0ne has quit IRC08:04
*** tetsuro has joined #openstack-meeting-alt08:06
*** tetsuro has quit IRC08:07
*** radeks has quit IRC08:08
*** panda|off is now known as panda08:19
*** ccamacho has quit IRC08:25
*** tetsuro has joined #openstack-meeting-alt08:38
*** yamamoto has joined #openstack-meeting-alt08:39
*** iyamahat has joined #openstack-meeting-alt08:42
*** rdopiera has quit IRC08:42
*** rdopiera has joined #openstack-meeting-alt08:43
*** yamamoto has quit IRC08:44
*** tetsuro has quit IRC09:02
*** ccamacho has joined #openstack-meeting-alt09:08
*** diablo_rojo has quit IRC09:26
*** derekh has joined #openstack-meeting-alt09:33
*** ttsiouts has joined #openstack-meeting-alt09:36
*** e0ne has joined #openstack-meeting-alt09:38
*** jungleboyj has quit IRC09:39
*** jungleboyj has joined #openstack-meeting-alt09:42
*** masahito has joined #openstack-meeting-alt09:57
*** yamamoto has joined #openstack-meeting-alt10:09
*** yamamoto has quit IRC10:12
*** yamamoto has joined #openstack-meeting-alt10:12
*** lpetrut has joined #openstack-meeting-alt10:39
*** jtomasek has quit IRC10:40
*** jtomasek has joined #openstack-meeting-alt10:40
*** masahito has quit IRC10:47
*** macza has joined #openstack-meeting-alt10:50
*** brault has joined #openstack-meeting-alt10:54
*** apetrich has quit IRC10:54
*** macza has quit IRC10:54
*** apetrich has joined #openstack-meeting-alt11:07
*** erlon_ has joined #openstack-meeting-alt11:15
*** masahito has joined #openstack-meeting-alt11:31
*** ttsiouts has quit IRC11:37
*** ttsiouts has joined #openstack-meeting-alt11:37
*** ttsiouts has quit IRC11:42
*** apetrich has quit IRC11:44
*** apetrich has joined #openstack-meeting-alt12:01
*** ttsiouts has joined #openstack-meeting-alt12:18
*** jcoufal has joined #openstack-meeting-alt12:27
*** radeks has joined #openstack-meeting-alt12:31
*** raildo has joined #openstack-meeting-alt12:34
*** panda is now known as panda|lunch12:47
*** gyee has joined #openstack-meeting-alt12:53
*** radeks has quit IRC13:00
*** radeks has joined #openstack-meeting-alt13:01
*** dave-mccowan has joined #openstack-meeting-alt13:29
*** radeks has quit IRC13:29
*** gyee has quit IRC13:34
*** panda|lunch is now known as panda13:43
*** raildo has quit IRC13:56
*** raildo has joined #openstack-meeting-alt14:03
*** efried1 has joined #openstack-meeting-alt14:06
*** apetrich has quit IRC14:07
*** masahito has quit IRC14:08
*** efried has quit IRC14:10
*** efried1 is now known as efried14:10
*** apetrich has joined #openstack-meeting-alt14:12
*** lbragstad has joined #openstack-meeting-alt14:24
*** jgrosso has joined #openstack-meeting-alt14:35
*** jgrosso has quit IRC14:35
*** masahito has joined #openstack-meeting-alt14:37
*** jgrosso has joined #openstack-meeting-alt14:40
*** rossella_s has quit IRC14:46
*** masahito has quit IRC14:49
*** rossella_s has joined #openstack-meeting-alt14:59
*** ttsiouts has quit IRC15:19
*** ttsiouts has joined #openstack-meeting-alt15:19
*** ttsiouts has quit IRC15:24
*** efried has quit IRC15:24
*** efried has joined #openstack-meeting-alt15:25
*** ttsiouts has joined #openstack-meeting-alt15:28
*** hongbin has joined #openstack-meeting-alt15:28
*** TxGirlGeek has joined #openstack-meeting-alt15:30
*** IgorYozhikov__ has quit IRC15:34
*** IgorYozhikov__ has joined #openstack-meeting-alt15:35
*** efried has quit IRC15:36
*** efried has joined #openstack-meeting-alt15:37
*** efried has quit IRC15:40
*** gagehugo has joined #openstack-meeting-alt15:53
*** efried has joined #openstack-meeting-alt15:53
*** radeks has joined #openstack-meeting-alt15:57
lbragstad#startmeeting keystone16:00
openstackMeeting started Tue Jan 15 16:00:48 2019 UTC and is due to finish in 60 minutes.  The chair is lbragstad. Information about MeetBot at http://wiki.debian.org/MeetBot.16:00
openstackUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.16:00
*** openstack changes topic to " (Meeting topic: keystone)"16:00
openstackThe meeting name has been set to 'keystone'16:00
*** jgrosso has quit IRC16:00
lbragstad#link https://etherpad.openstack.org/p/keystone-weekly-meeting16:00
lbragstadagenda ^16:00
gagehugoo/16:01
vishakhao/16:01
knikollao/16:02
lbragstadwe don't have much on the agenda - let's give people a minute or two to join16:02
*** radeks has quit IRC16:04
lbragstadalright16:04
lbragstad#topic announcements16:04
*** openstack changes topic to "announcements (Meeting topic: keystone)"16:04
lbragstad#info specification freeze was last week16:04
lbragstadnote that we can still file exceptions16:04
lbragstad#info feature proposal freeze is in a couple weeks16:04
lbragstad#link https://releases.openstack.org/stein/schedule.html16:04
lbragstadso not far away - something to be aware of if you're planning feature work and have yet to start the implementation16:05
lbragstad#topic previous action items16:05
*** openstack changes topic to "previous action items (Meeting topic: keystone)"16:05
lbragstadi sent a note to the mailing list about the unified limits discussions16:05
lbragstadand what we need to do to pick that back up again16:05
lbragstadi'll be pinging people again this week -16:06
lbragstadbut if you know of anyone internally or something that is looking forward to this work, feel free to socialize into other circles16:06
lbragstadotherwise - we, as a team, had another action item16:06
lbragstad#topic keystone team to review TC vision statement16:06
*** openstack changes topic to "keystone team to review TC vision statement (Meeting topic: keystone)"16:06
lbragstad#link https://governance.openstack.org/tc/reference/technical-vision.html16:07
lbragstaddoes anyone have feedback on this?16:07
knikollanot yet16:07
lbragstaddo people still need more time to look?16:08
knikolla++, i remember reading it around october, but need a refresher16:08
vishakhasorry I also missed it.16:08
* gagehugo also should re-read it16:08
lbragstadok - let's reassign the action item for next week16:08
gagehugothis is our homework then :)16:09
lbragstadessentially16:09
lbragstad:)16:09
lbragstad#action keystone team to review the TC vision statement for OpenStack Clouds16:09
lbragstadi can send out reminder pings on Monday if people need a nudge16:10
lbragstadjust let me know - moving on16:10
lbragstad#topic reviews16:10
*** openstack changes topic to "reviews (Meeting topic: keystone)"16:10
lbragstaddoes anyone have reviews up that need attention?16:10
lbragstadwxy has a bunch of reviews up for domain_id support in unified limits16:11
*** wxy-xiyuan has joined #openstack-meeting-alt16:11
lbragstadspeaking of wxy-xiyuan16:11
lbragstadthere he is16:11
lbragstadcaught him trying to sneak in late ;)16:11
*** e0ne has quit IRC16:11
wxy-xiyuanJust online.16:11
cmurphyo/16:11
vishakhaI have one https://review.openstack.org/#/c/627364/16:12
lbragstadvishakha ah - i've seen that one come through a couples times16:12
lbragstadi can take a look16:12
lbragstad#link https://review.openstack.org/#/q/status:open+project:openstack/keystone+branch:master+topic:bp/domain-level-limit is the unified limit work16:12
vishakhathanks16:12
lbragstadi have a couple of questions on the configuration + keystone-manage commands for jwt16:13
lbragstad#link https://review.openstack.org/#/c/628676/116:13
lbragstadotherwise - i was just going to take a stab at implementing whatever and see what people thoguht16:14
* gagehugo looks16:14
lbragstadi also have a pile of other reviews up16:14
lbragstad#link https://review.openstack.org/#/q/status:open+project:openstack/keystone+branch:master+topic:implement-default-roles16:14
lbragstadif anyone has questions on those - please don't hesitate to ask16:14
lbragstadi realize it's a monster of a series, so i'm happy to make myself available for helping people understand the approach or answer questions16:15
gagehugosomething something of doom16:15
lbragstadaccording to cmurphy, yeah16:15
*** ccamacho has quit IRC16:16
lbragstaddoes anyone else have reviews up that need attention?16:16
* cmurphy nope16:18
lbragstadalright - moving on16:18
lbragstad#topic SFE for Renewable Application Credentials16:18
*** openstack changes topic to "SFE for Renewable Application Credentials (Meeting topic: keystone)"16:18
lbragstadknikolla o/16:18
knikollao/16:18
knikollawhatever the title says :)16:18
knikollaany objections to a spec freeze exception?16:19
lbragstad#link https://review.openstack.org/#/c/604201/16:19
lbragstadlooks like it's still pending some updates?16:19
knikollathere has been some good feedback which i plan to incorporate, and then take it from there16:19
knikollabut wanted to see if people were ok with this being done in stein before i spend the time on that16:20
cmurphyhow long do you think that will take? and then is there enough time to do the implementation?16:20
lbragstadknikolla with the updates you plan to make, do you think you'll have something up code-wise in a couple weeks?16:20
*** munimeha1 has joined #openstack-meeting-alt16:20
knikollai think so.16:20
lbragstadi think, based on the discussions we've had with people, there is agreement on the feature in general16:20
lbragstaddiscussions at summit/ptgs16:21
cmurphyafter reading the spec I was actually a little confused on the need for the feature, which i documented in the comments16:21
knikollai think i responded to that?16:21
knikollawe can rediscuss here though, plenty of time left in the meeting16:22
cmurphywell do we need refreshable application credentials if using autoprovisioning instead of group mapping?16:22
knikollaautoprovisioning does concrete role assignments, so if the users groups change in the external idp changes, the change will not be reflected in the users permissions16:23
lbragstad#link https://review.openstack.org/#/c/604201/2/specs/keystone/stein/renewable-app-creds.rst@2916:24
lbragstadin case you're following along at home16:24
lbragstadwe have always made the assumption that if people are doing concrete role assignments, they need to be prepared to clean up those resources16:25
knikollain case you want the permissions to expire if the user is disabled in the idp, or removed from idp groups, autoprovisioning won't work.16:25
cmurphyokay16:26
lbragstadcmurphy in your comment - you mention something about moving both federated implementations in the same direction?16:27
cmurphyi think in rereading it now it makes a little more sense that they behave differently16:29
cmurphyit seemed unintuitive at the time16:29
lbragstadok - is there anything else folks having regarding this?16:30
lbragstadotherwise - we'll probably need to see an update to the spec before formally issuing a freeze exception16:30
lbragstad(which we can do on the ML)16:30
knikollaalright, cool :)16:31
lbragstadanything else here?16:31
lbragstad#topic open discussion16:32
*** openstack changes topic to "open discussion (Meeting topic: keystone)"16:32
cmurphyI got here late but I did go through the technical vision16:32
lbragstadcmurphy awesome16:32
lbragstadthank you16:32
cmurphyit seems like a lot of it applies to us, either with things we're already doing or working on or things we really should be doing16:32
cmurphyi made some rough notes https://etherpad.openstack.org/p/keystone-technical-vision-notes16:32
cmurphycan turn that into a vision document but probably won't have time for a while16:33
lbragstadi didn't put my notes on etherpad - but i had a few of the same points16:34
lbragstadespecially with the whole self-service thing16:34
*** dklyle has joined #openstack-meeting-alt16:35
lbragstadcmurphy already eluded too it, but is anyone opposed to using this as the basis for keystone vision statement?16:35
lbragstadi know we tried doing something like this when we were in denver the first time around16:36
cmurphyi think that was part of what julia asked for, wasn't it? to make a vision statement as part of our contributor guide?16:36
lbragstadyes16:36
knikollawhat does a vision statement have to include exactly?16:37
lbragstadit can be anything really16:37
cmurphyi think the tc made it easy, we can copy bits and pieces from the technical vision that apply to us16:37
lbragstadbut - it should help us make decisions about the direction of the project and it should help people understand why keystone exists16:38
knikollahow in depth should it be?16:39
knikollaor mostly just a paragraph or two16:39
lbragstadi think it should be deep enough to accurate relay the information we want to relay16:39
lbragstadi don't think we have to follow guidelines for it16:39
lbragstadand i would hate to constrict detail that would be useful because we have to keep it to 3 sentences16:39
lbragstadi would say - let's go through cmurphy's notes and come up with *something*16:40
lbragstadand then we can copy-edit it into something more concise16:40
cmurphyif i was writing it i would start with just a few sentences on each point describing how we're meeting or planning on meeting that part of the vision16:40
vishakhaThe vision should be based on the these highlights like self service, applcation control etc?16:40
cmurphythose are pulled from the statements in the tc technical vision16:40
vishakhaok Great.16:41
cmurphywe can add more to it if we have thoughts and ideas that aren't encompassed by the tc vision16:41
lbragstadexactly16:42
vishakhaYes I was about to ask this :)16:42
lbragstadthe TC wants to encourage that, too16:42
lbragstadeven if it doesn't completely jive with the TC vision16:42
*** ttsiouts has quit IRC16:44
lbragstadif we see something that isn't in the TC vision, but we think it applies to keystone, then we should talk about it and document it - it might be reusable and worked into the TC vision16:44
*** ttsiouts has joined #openstack-meeting-alt16:44
cmurphy++16:45
vishakhaok thanks for the info16:45
lbragstadwe'll still plan to follow-up on this next week16:46
lbragstadi assume we can just keep using cmurphy's etherpad for additional notes16:46
cmurphysure16:46
lbragstadcool  - thanks for kicking starting that16:47
lbragstaddoes anyone else have anything for open discussion?16:47
*** iyamahat has quit IRC16:47
lbragstaddoes anyone know when kmalloc gets back from his forever-long hiatus?16:47
cmurphyi think he said 17th?16:49
*** yamahata has quit IRC16:49
lbragstadsweet16:49
*** ttsiouts has quit IRC16:50
lbragstadin other news - i filled out the survey from the foundation about the PTG16:50
lbragstadi used a ceiling estimate based on our last PTG16:50
lbragstadi also said that we'd like to have 3 days16:51
lbragstadbut would probably be fine if we had 2 or 2.5 to get through all of our keystone topics16:51
lbragstadif anyone disagrees, let me know and I'll see if i can amend my submission16:51
cmurphyi think 2.5-3 is good if we're going to use forum time for cross-project things that we would usually have had the first two days of ptg16:52
knikolla++16:52
lbragstadi also expect we will be working with the edge group - which i would expect to have their own room, like in denver16:52
lbragstadbut that could be done in the forum, too i suppose16:54
lbragstadif there isn't anything else - we can wrap up16:54
*** yamamoto has quit IRC16:55
lbragstadthanks for the time, everyone16:56
lbragstad#endmeeting16:56
*** openstack changes topic to "OpenStack Meetings || https://wiki.openstack.org/wiki/Meetings/"16:56
openstackMeeting ended Tue Jan 15 16:56:19 2019 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)16:56
openstackMinutes:        http://eavesdrop.openstack.org/meetings/keystone/2019/keystone.2019-01-15-16.00.html16:56
openstackMinutes (text): http://eavesdrop.openstack.org/meetings/keystone/2019/keystone.2019-01-15-16.00.txt16:56
openstackLog:            http://eavesdrop.openstack.org/meetings/keystone/2019/keystone.2019-01-15-16.00.log.html16:56
*** iyamahat has joined #openstack-meeting-alt17:06
*** macza has joined #openstack-meeting-alt17:08
*** macza_ has joined #openstack-meeting-alt17:13
*** e0ne has joined #openstack-meeting-alt17:13
*** macza has quit IRC17:14
*** lbragstad has quit IRC17:22
*** derekh has quit IRC17:22
*** yamahata has joined #openstack-meeting-alt17:24
*** lbragstad has joined #openstack-meeting-alt17:26
*** e0ne has quit IRC17:28
*** lbragstad has quit IRC17:33
*** lbragstad has joined #openstack-meeting-alt17:33
*** jgrosso has joined #openstack-meeting-alt17:41
*** yamamoto has joined #openstack-meeting-alt17:45
*** ttsiouts has joined #openstack-meeting-alt17:47
*** yamamoto has quit IRC17:48
*** yamamoto has joined #openstack-meeting-alt17:48
*** yamamoto has quit IRC17:48
*** yamamoto has joined #openstack-meeting-alt17:53
*** lbragstad is now known as lbragstad_lunch17:58
*** yamamoto has quit IRC18:01
*** TxGirlGeek has quit IRC18:04
*** TxGirlGeek has joined #openstack-meeting-alt18:07
*** yamamoto has joined #openstack-meeting-alt18:07
*** diablo_rojo has joined #openstack-meeting-alt18:12
*** brault has quit IRC18:14
*** brault has joined #openstack-meeting-alt18:15
*** panda is now known as panda|off18:19
*** yamamoto has quit IRC18:19
*** brault has quit IRC18:20
*** efried has quit IRC18:21
*** yamamoto has joined #openstack-meeting-alt18:23
*** efried has joined #openstack-meeting-alt18:26
*** yamamoto has quit IRC18:32
*** yamamoto has joined #openstack-meeting-alt18:33
*** yamamoto has quit IRC18:36
*** yamamoto has joined #openstack-meeting-alt18:37
*** yamamoto has quit IRC18:45
*** yamamoto has joined #openstack-meeting-alt18:45
*** kopecmartin is now known as kopecmartin|off18:52
*** lbragstad_lunch is now known as lbragstad18:52
*** yamamoto has quit IRC18:59
*** yamamoto has joined #openstack-meeting-alt19:05
*** e0ne has joined #openstack-meeting-alt19:07
*** yamamoto has quit IRC19:09
*** lbragstad has quit IRC19:10
*** lbragstad has joined #openstack-meeting-alt19:11
*** yamamoto has joined #openstack-meeting-alt19:16
*** lbragstad has quit IRC19:20
*** lbragstad has joined #openstack-meeting-alt19:21
*** lpetrut has quit IRC19:38
*** yamamoto has quit IRC19:42
*** yamamoto has joined #openstack-meeting-alt19:42
*** ttsiouts has quit IRC19:45
*** ttsiouts has joined #openstack-meeting-alt19:46
*** ttsiouts has quit IRC19:51
*** whoami-rajat has quit IRC20:00
*** erlon_ has quit IRC20:05
*** brault has joined #openstack-meeting-alt20:06
*** brault has quit IRC20:11
*** rfolco has quit IRC20:28
*** yamamoto has quit IRC20:28
*** yamamoto has joined #openstack-meeting-alt20:49
*** yamamoto has quit IRC21:02
*** yamamoto has joined #openstack-meeting-alt21:17
*** whoami-rajat has joined #openstack-meeting-alt21:18
*** yamamoto has quit IRC21:20
*** jgrosso has quit IRC21:35
*** yamamoto has joined #openstack-meeting-alt21:52
*** yamamoto has quit IRC21:52
*** raildo has quit IRC21:58
*** yamamoto has joined #openstack-meeting-alt22:05
*** yamamoto has quit IRC22:14
*** jcoufal has quit IRC22:22
*** yamamoto has joined #openstack-meeting-alt22:23
*** lpetrut has joined #openstack-meeting-alt22:34
*** lpetrut has quit IRC22:38
*** yamamoto has quit IRC22:40
*** yamamoto has joined #openstack-meeting-alt22:41
*** yamamoto has quit IRC22:44
*** brault has joined #openstack-meeting-alt22:45
*** brault has quit IRC22:45
*** rcernin has joined #openstack-meeting-alt22:46
*** jtomasek has quit IRC23:01
*** hongbin has quit IRC23:01
*** jcoufal has joined #openstack-meeting-alt23:06
*** efried1 has joined #openstack-meeting-alt23:06
*** efried has quit IRC23:06
*** efried1 is now known as efried23:06
*** yamamoto has joined #openstack-meeting-alt23:08
*** yamamoto has quit IRC23:08
*** munimeha1 has quit IRC23:14
*** ijw has joined #openstack-meeting-alt23:21
*** efried has quit IRC23:22
*** efried has joined #openstack-meeting-alt23:22
*** e0ne has quit IRC23:24
*** rossella_s has quit IRC23:45
*** jcoufal has quit IRC23:45
*** rossella_s has joined #openstack-meeting-alt23:45
*** whoami-rajat has quit IRC23:47
*** yamamoto has joined #openstack-meeting-alt23:51
*** yamamoto has quit IRC23:58

Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!