15:00:11 <d34dh0r53> #startmeeting keystone
15:00:11 <opendevmeet> Meeting started Tue Dec  6 15:00:11 2022 UTC and is due to finish in 60 minutes.  The chair is d34dh0r53. Information about MeetBot at http://wiki.debian.org/MeetBot.
15:00:11 <opendevmeet> Useful Commands: #action #agreed #help #info #idea #link #topic #startvote.
15:00:11 <opendevmeet> The meeting name has been set to 'keystone'
15:00:22 <d34dh0r53> #topic roll call
15:00:29 <d34dh0r53> admiyo, bbobrov, crisloma, d34dh0r53, dpar, dstanek, hrybacki, knikolla, lbragstad, lwanderley, kmalloc, rodrigods, samueldmq, ruan_he, wxy, sonuk, vishakha, Ajay, rafaelwe, xek, gmann
15:02:36 <d34dh0r53> let's get started
15:02:37 <opendevreview> Rafael Weingartner proposed openstack/keystone-specs master: Add schema version and add support to "domain" attribute in mapping rules  https://review.opendev.org/c/openstack/keystone-specs/+/748042
15:02:52 <d34dh0r53> #topic review past meeting work items
15:03:14 <d34dh0r53> #link https://meetings.opendev.org/meetings/keystone/2022/keystone.2022-11-29-15.01.html
15:05:23 <d34dh0r53> sorry, copy pasta issues :/
15:05:33 <d34dh0r53> first up we have reivewathon review https://review.opendev.org/c/openstack/keystoneauth/+/838104
15:06:04 <d34dh0r53> we actually have several OAuth 2.0 things to review, we focused on getting the Spec for M+TLS merged which we're close to doing
15:06:25 <d34dh0r53> once that merges we can focus on the actual code for OAuth 2.0 with M+TLS
15:06:41 <d34dh0r53> #action reviewathon https://review.opendev.org/c/openstack/keystoneauth/+/838104
15:07:10 <d34dh0r53> #action reviewathon https://review.opendev.org/c/openstack/keystone/+/838108
15:07:42 <d34dh0r53> #action reviewathon https://review.opendev.org/c/openstack/keystone/+/860928
15:08:00 <d34dh0r53> #action reviewathon https://review.opendev.org/c/openstack/keystoneauth/+/860923
15:08:28 <d34dh0r53> next up is d34dh0r53 look into user-defined attribute access control
15:08:32 <d34dh0r53> didn't get to it, so pushing
15:08:35 <d34dh0r53> #action d34dh0r53 look into user-defined attribute access control
15:08:54 <d34dh0r53> next up d34dh0r53 request pycadf release once https://review.opendev.org/c/openstack/pycadf/+/863702 merges
15:09:25 <d34dh0r53> we need another core reviewer on this one, going to assign it to knikolla[m] so we can get it merged
15:09:44 <d34dh0r53> #action knikolla[m] please review https://review.opendev.org/c/openstack/pycadf/+/863702
15:10:01 <d34dh0r53> that does it for last meeting action items
15:10:28 <d34dh0r53> #topic liaison updates
15:10:54 <d34dh0r53> nothing from VMT, and neither Doug nor knikolla[m] are here so we can move on
15:11:18 <d34dh0r53> #help Let me know if you're interested in volunteering for a liaison role
15:11:48 <d34dh0r53> #topic specification OAuth 2.0 (hiromu)
15:11:59 <d34dh0r53> #link https://review.opendev.org/q/topic:bp%252Foauth2-client-credentials-ext
15:12:05 <d34dh0r53> #link https://review.opendev.org/c/openstack/keystone-specs/+/843765
15:12:56 <d34dh0r53> I think we're ready to merge this spec, there were just a couple of nits that came out during the reviewathon which Hiromu has cleared up
15:13:22 <d34dh0r53> #topic specification Secure RBAC (dmendiza[m])
15:13:32 <d34dh0r53> #link https://governance.openstack.org/tc/goals/selected/consistent-and-secure-rbac.html#z-release-timeline_
15:13:42 <d34dh0r53> Service Role Spec
15:13:44 <d34dh0r53> #link https://review.opendev.org/c/openstack/keystone-specs/+/818616
15:14:03 <d34dh0r53> the service role spec has merged! Thanks for all the reviews and work on this
15:14:15 <d34dh0r53> Manager Role Implementation
15:14:23 <d34dh0r53> #link https://review.opendev.org/c/openstack/keystone/+/822601
15:14:33 <d34dh0r53> There are some valid -1's on this so more work is needed
15:15:02 <d34dh0r53> I don't think any of the stakeholders are here today so we'll move on, but please update/review if you get a chance
15:15:14 <d34dh0r53> #topic open discussion
15:15:36 <d34dh0r53> drencrom: zuul failing because test-requirements not compatible with python 3.10 (see https://review.opendev.org/c/openstack/keystonemiddleware/+/860481)
15:15:47 <d34dh0r53> I'll look at that this week and try to get it cleared
15:16:11 <d34dh0r53> #action d34dh0r53 unblock https://review.opendev.org/c/openstack/keystonemiddleware/+/860481
15:16:31 <d34dh0r53> anything else for open discussion?
15:21:20 <d34dh0r53> moving on then
15:21:25 <d34dh0r53> #topic bug review
15:21:33 <d34dh0r53> #link https://bugs.launchpad.net/keystone/?orderby=-id&start=0
15:22:30 <d34dh0r53> looks like we have a couple of new bugs with fixes proposed
15:22:40 <d34dh0r53> #link https://bugs.launchpad.net/keystone/+bug/1998268
15:22:48 <d34dh0r53> Fernet uid/gid logic issue
15:23:13 <d34dh0r53> #action d34dh0r53 review https://review.opendev.org/c/openstack/keystone/+/866096
15:23:39 <d34dh0r53> #link https://bugs.launchpad.net/keystone/+bug/1998789
15:23:44 <d34dh0r53> PooledLDAPHandler.result3 does not release pool connection back when an exception is raised Edit
15:24:07 <d34dh0r53> #action d34dh0r53 review https://review.opendev.org/c/openstack/keystone/+/866723
15:24:23 <d34dh0r53> thanks for the bug reports and fixes, I'll review this week
15:24:31 <d34dh0r53> next up
15:24:53 <d34dh0r53> #link https://bugs.launchpad.net/python-keystoneclient/?orderby=-id&start=0
15:25:10 <d34dh0r53> nothing new for python-keystoneclient
15:25:22 <d34dh0r53> #link https://bugs.launchpad.net/keystoneauth/+bugs?orderby=-id&start=0
15:25:47 <d34dh0r53> keystoneauth has a new bug
15:25:57 <d34dh0r53> #link https://bugs.launchpad.net/keystoneauth/+bug/1998366
15:26:04 <d34dh0r53> Federated auth plugins do not work with unversioned auth_url
15:26:16 <d34dh0r53> and there is a review, I'll take a look this week
15:26:28 <d34dh0r53> #action d34dh0r53 review https://review.opendev.org/c/openstack/keystoneauth/+/866189
15:26:48 <d34dh0r53> that does it for keystoneauth
15:26:52 <d34dh0r53> next up is
15:26:55 <d34dh0r53> #link https://bugs.launchpad.net/keystonemiddleware/+bugs?orderby=-id&start=0
15:27:12 <d34dh0r53> nothing new for keystonemiddleware
15:27:24 <d34dh0r53> #link https://bugs.launchpad.net/pycadf/+bugs?orderby=-id&start=0
15:27:34 <d34dh0r53> pycadf is clean
15:27:39 <d34dh0r53> and finally we have
15:27:52 <d34dh0r53> #link https://bugs.launchpad.net/ldappool/+bugs?orderby=-id&start=0
15:28:02 <d34dh0r53> which has no new issues
15:28:24 <d34dh0r53> #topic conclusion
15:28:36 <d34dh0r53> anyone have anything they need before we close?
15:29:15 <rafaelweingartn> What about this spec https://review.opendev.org/c/openstack/keystone-specs/+/748042?
15:30:46 <d34dh0r53> thanks for bringing that up rafaelweingartn
15:30:57 <d34dh0r53> I will review that this week and bring it up in the reviewathon
15:31:13 <d34dh0r53> #action d34dh0r53 review https://review.opendev.org/c/openstack/keystone-specs/+/748042
15:31:45 <d34dh0r53> AFAIK we've fully moved to alembic but I need to double check that there aren't any lingering dependencies
15:33:00 <d34dh0r53> Anything else?
15:33:35 <d34dh0r53> thanks everyone!
15:33:41 <d34dh0r53> #endmeeting