15:03:37 <d34dh0r53> #startmeeting keystone 15:03:37 <opendevmeet> Meeting started Tue May 2 15:03:37 2023 UTC and is due to finish in 60 minutes. The chair is d34dh0r53. Information about MeetBot at http://wiki.debian.org/MeetBot. 15:03:37 <opendevmeet> Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. 15:03:37 <opendevmeet> The meeting name has been set to 'keystone' 15:03:46 <dmendiza[m]> 🙋♂️ 15:04:12 <d34dh0r53> #topic roll call 15:04:19 <d34dh0r53> admiyo, bbobrov, crisloma, d34dh0r53, dpar, dstanek, hrybacki, knikolla[m], lbragstad, lwanderley, kmalloc, rodrigods, samueldmq, ruan_he, wxy, sonuk, vishakha, Ajay, rafaelwe, xek, gmann, zaitcev, reqa, dmendiza[m] 15:04:24 <d34dh0r53> o/ 15:05:55 <knikolla> o/ got pulled into a work meeting, sorry 15:06:20 <d34dh0r53> no problem knikolla 15:06:31 <d34dh0r53> #topic review past meeting work items 15:06:56 <d34dh0r53> #link https://meetings.opendev.org/meetings/keystone/2023/keystone.2023-04-25-15.15.html 15:07:17 <d34dh0r53> first up dmendiza[m], d34dh0r53 update the keystone groups to inherit from keystone-core 15:07:32 <d34dh0r53> did you ever get this inheriting properly dmendiza[m] ? 15:08:31 <dmendiza[m]> d34dh0r53: negative ... but we can look at it after this meeting if we end early? 15:08:36 <d34dh0r53> sure 15:08:41 <d34dh0r53> #action dmendiza[m], d34dh0r53 update the keystone groups to inherit from keystone-core 15:09:00 <d34dh0r53> next up d34dh0r53 investigate https://bugs.launchpad.net/keystone/+bug/2009752 15:09:45 <d34dh0r53> I need to test this, my federation environment was donated to someone else so I need a new one 15:09:55 <d34dh0r53> #action d34dh0r53 investigate https://bugs.launchpad.net/keystone/+bug/2009752 15:10:08 <d34dh0r53> d34dh0r53 Look into adding/restoring a known issues section to our documentation 15:10:17 <opendevreview> John Garbutt proposed openstack/oslo.limit master: Two level limit enforcer https://review.opendev.org/c/openstack/oslo.limit/+/695527 15:10:18 <opendevreview> John Garbutt proposed openstack/oslo.limit master: Fix up tox -e cover to use coverage https://review.opendev.org/c/openstack/oslo.limit/+/882072 15:10:20 <d34dh0r53> also did not get to this last week 15:10:24 <d34dh0r53> #action d34dh0r53 Look into adding/restoring a known issues section to our documentation 15:10:33 <d34dh0r53> #action d34dh0r53 add https://bugs.launchpad.net/keystone/+bug/1305950 to the known issues section of our documentation 15:10:35 <d34dh0r53> as well 15:10:43 <d34dh0r53> d34dh0r53 to review LDAP bugs https://bugs.launchpad.net/keystone/+bugs?field.tag=ldap 15:11:13 <opendevreview> John Garbutt proposed openstack/oslo.limit master: Two level limit enforcer https://review.opendev.org/c/openstack/oslo.limit/+/695527 15:11:35 <d34dh0r53> I need to do this as well 15:11:38 <d34dh0r53> #action https://bugs.launchpad.net/keystone/+bugs?field.tag=ldap 15:12:00 <d34dh0r53> next up we have 15:12:07 <d34dh0r53> #topic liaison updates 15:12:13 <d34dh0r53> nothing from VMT 15:13:21 <d34dh0r53> cool, as always help wanted 15:13:44 <d34dh0r53> #help If you'd like to be a cross-project liaison please let d34dh0r53 know 15:14:03 <d34dh0r53> moving on to specifications 15:14:15 <d34dh0r53> #topic specification OAuth 2.0 (hiromu) 15:14:32 <d34dh0r53> #link https://review.opendev.org/q/topic:bp%252Foauth2-client-credentials-ext 15:16:34 <zaitcev> So, what's left there? I was reviewing stuff on and off, but I lost the big picture. 15:17:17 <d34dh0r53> hiromu isn't around, I think it's mostly reviewing the patches listed in the link above 15:17:35 <zaitcev> I see. 15:17:43 <d34dh0r53> primarily #link https://review.opendev.org/c/openstack/keystone-tempest-plugin/+/874716 15:18:19 <d34dh0r53> next up 15:18:24 <d34dh0r53> #topic specification Secure RBAC (dmendiza[m]) 15:18:34 <d34dh0r53> #link https://governance.openstack.org/tc/goals/selected/consistent-and-secure-rbac.html#z-release-timeline_ 15:19:57 <d34dh0r53> hi hiromu 15:20:24 <d34dh0r53> do you have any updates on the OAuth 2.0 BZ? Anything in particular you need reviews or input on? 15:22:39 <d34dh0r53> guess it was just his client re-connecting, moving on. 15:22:46 <d34dh0r53> dmendiza[m]: any s-rbac updates/asks? 15:23:21 <dmendiza[m]> Not anything off the top of my head. 15:23:32 <dmendiza[m]> I think we need to move the "manager" role spec forward? 15:24:00 <dmendiza[m]> I'll have to check ... I've been mostly looking at downstream stuff for SRBAC. 15:24:14 <d34dh0r53> yeah, we need to get that moving again 15:24:14 <dmendiza[m]> Not sure if gmann is around for any asks? 15:24:50 <gmann> yeah, manager and service role is needed and good to have merged 15:25:11 <gmann> but not sure if review comment are fixed there. I will ping abhishek about those 15:25:45 <dmendiza[m]> Thanks gmann . I'll try to catch up on both of those efforts this week. 15:25:57 <gmann> thanks dmendiza[m] really appreciate 15:26:17 <d34dh0r53> awesome, thanks gmann and dmendiza[m] 15:26:49 <d34dh0r53> #topic SQLAlchemy 2.0 (stephenfin) 15:26:56 <d34dh0r53> #link https://review.opendev.org/q/topic:sqlalchemy-20+is:open+project:openstack/keystone 15:27:22 <d34dh0r53> we really need to review these, perhaps we can dedicate the reviewathon this week to these patches and backports 15:28:30 <d34dh0r53> cool, I think we'll do that 15:28:35 <d34dh0r53> #topic open discussion 15:28:58 <d34dh0r53> lots of backports for drencrom 15:29:05 <opendevreview> John Garbutt proposed openstack/oslo.limit master: Fix up connection object https://review.opendev.org/c/openstack/oslo.limit/+/882077 15:29:09 <d34dh0r53> (drencrom) We need to merge these backports to fix pep8 tests 15:29:12 <d34dh0r53> ussuri #link https://review.opendev.org/c/openstack/keystonemiddleware/+/878028 15:29:14 <d34dh0r53> wallaby #link https://review.opendev.org/c/openstack/keystonemiddleware/+/878026 15:29:16 <d34dh0r53> xena #link https://review.opendev.org/c/openstack/keystonemiddleware/+/878025 15:29:18 <d34dh0r53> yoga #link https://review.opendev.org/c/openstack/keystonemiddleware/+/878024 15:29:20 <d34dh0r53> zed #link https://review.opendev.org/c/openstack/keystonemiddleware/+/878023 15:29:27 <d34dh0r53> cores, please take a look if you get a chance 15:29:46 <opendevreview> John Garbutt proposed openstack/oslo.limit master: Two level limit enforcer https://review.opendev.org/c/openstack/oslo.limit/+/695527 15:29:57 <d34dh0r53> once those are done this needs a WF #link https://review.opendev.org/c/openstack/keystonemiddleware/+/873921 15:30:40 <d34dh0r53> next up we have the PooledLdapHandler message.clean() backports 15:30:43 <d34dh0r53> (mustafakemalgilor) PooledLdapHandler message.clean() patch backports 15:30:46 <d34dh0r53> review request 15:30:48 <d34dh0r53> #link ussuri: https://review.opendev.org/c/openstack/keystone/+/874846 15:30:50 <d34dh0r53> #link victoria: https://review.opendev.org/c/openstack/keystone/+/874847 15:30:52 <d34dh0r53> #link wallaby: https://review.opendev.org/c/openstack/keystone/+/874844 15:30:54 <d34dh0r53> #link xena: https://review.opendev.org/c/openstack/keystone/+/874843 15:31:08 <d34dh0r53> again, these should be easy backports 15:31:24 <d34dh0r53> finally 15:31:28 <d34dh0r53> (reqa) OAuth 2.0 Device Authorization Grant bugfix 15:31:30 <d34dh0r53> review request 15:31:32 <d34dh0r53> #link https://review.opendev.org/c/openstack/keystoneauth/+/876893 15:31:34 <d34dh0r53> that's a fixup https://review.opendev.org/q/topic:reqa/v3oidcdeviceauth - anything left to be done here? 15:33:14 <d34dh0r53> moving on 15:33:19 <d34dh0r53> #topic bug review 15:33:21 <d34dh0r53> #link https://bugs.launchpad.net/keystone/?orderby=-id&start=0 15:33:40 <d34dh0r53> nothing new in keystone 15:33:45 <d34dh0r53> #link https://bugs.launchpad.net/python-keystoneclient/?orderby=-id&start=0 15:34:11 <d34dh0r53> python-keystoneclient has no new bugs 15:34:14 <d34dh0r53> #link https://bugs.launchpad.net/keystoneauth/+bugs?orderby=-id&start=0 15:34:45 <d34dh0r53> keystoneauth is clean 15:34:47 <d34dh0r53> #link https://bugs.launchpad.net/keystonemiddleware/+bugs?orderby=-id&start=0 15:35:20 <d34dh0r53> no new ones in keystonemiddleware either 15:35:22 <d34dh0r53> #link https://bugs.launchpad.net/pycadf/+bugs?orderby=-id&start=0 15:35:39 <d34dh0r53> pycadf is clean 15:35:42 <d34dh0r53> #link https://bugs.launchpad.net/ldappool/+bugs?orderby=-id&start=0 15:35:50 <d34dh0r53> as is ldappool 15:35:58 <d34dh0r53> #topic conclusion 15:36:23 <d34dh0r53> anything else before we go? 15:36:56 <d34dh0r53> Thanks for joining all! Hopefully I'll see you at the reviewathon 14:00 UTC Friday ;) 15:36:59 <d34dh0r53> #endmeeting