15:03:37 <d34dh0r53> #startmeeting keystone
15:03:37 <opendevmeet> Meeting started Tue May  2 15:03:37 2023 UTC and is due to finish in 60 minutes.  The chair is d34dh0r53. Information about MeetBot at http://wiki.debian.org/MeetBot.
15:03:37 <opendevmeet> Useful Commands: #action #agreed #help #info #idea #link #topic #startvote.
15:03:37 <opendevmeet> The meeting name has been set to 'keystone'
15:03:46 <dmendiza[m]> 🙋‍♂️
15:04:12 <d34dh0r53> #topic roll call
15:04:19 <d34dh0r53> admiyo, bbobrov, crisloma, d34dh0r53, dpar, dstanek, hrybacki, knikolla[m], lbragstad, lwanderley, kmalloc, rodrigods, samueldmq, ruan_he, wxy, sonuk, vishakha, Ajay, rafaelwe, xek, gmann, zaitcev, reqa, dmendiza[m]
15:04:24 <d34dh0r53> o/
15:05:55 <knikolla> o/ got pulled into a work meeting, sorry
15:06:20 <d34dh0r53> no problem knikolla
15:06:31 <d34dh0r53> #topic review past meeting work items
15:06:56 <d34dh0r53> #link https://meetings.opendev.org/meetings/keystone/2023/keystone.2023-04-25-15.15.html
15:07:17 <d34dh0r53> first up dmendiza[m], d34dh0r53 update the keystone groups to inherit from keystone-core
15:07:32 <d34dh0r53> did you ever get this inheriting properly dmendiza[m] ?
15:08:31 <dmendiza[m]> d34dh0r53: negative ... but we can look at it after this meeting if we end early?
15:08:36 <d34dh0r53> sure
15:08:41 <d34dh0r53> #action dmendiza[m], d34dh0r53 update the keystone groups to inherit from keystone-core
15:09:00 <d34dh0r53> next up d34dh0r53 investigate https://bugs.launchpad.net/keystone/+bug/2009752
15:09:45 <d34dh0r53> I need to test this, my federation environment was donated to someone else so I need a new one
15:09:55 <d34dh0r53> #action d34dh0r53 investigate https://bugs.launchpad.net/keystone/+bug/2009752
15:10:08 <d34dh0r53> d34dh0r53 Look into adding/restoring a known issues section to our documentation
15:10:17 <opendevreview> John Garbutt proposed openstack/oslo.limit master: Two level limit enforcer  https://review.opendev.org/c/openstack/oslo.limit/+/695527
15:10:18 <opendevreview> John Garbutt proposed openstack/oslo.limit master: Fix up tox -e cover to use coverage  https://review.opendev.org/c/openstack/oslo.limit/+/882072
15:10:20 <d34dh0r53> also did not get to this last week
15:10:24 <d34dh0r53> #action d34dh0r53 Look into adding/restoring a known issues section to our documentation
15:10:33 <d34dh0r53> #action d34dh0r53 add https://bugs.launchpad.net/keystone/+bug/1305950 to the known issues section of our documentation
15:10:35 <d34dh0r53> as well
15:10:43 <d34dh0r53> d34dh0r53 to review LDAP bugs https://bugs.launchpad.net/keystone/+bugs?field.tag=ldap
15:11:13 <opendevreview> John Garbutt proposed openstack/oslo.limit master: Two level limit enforcer  https://review.opendev.org/c/openstack/oslo.limit/+/695527
15:11:35 <d34dh0r53> I need to do this as well
15:11:38 <d34dh0r53> #action https://bugs.launchpad.net/keystone/+bugs?field.tag=ldap
15:12:00 <d34dh0r53> next up we have
15:12:07 <d34dh0r53> #topic liaison updates
15:12:13 <d34dh0r53> nothing from VMT
15:13:21 <d34dh0r53> cool, as always help wanted
15:13:44 <d34dh0r53> #help If you'd like to be a cross-project liaison please let d34dh0r53 know
15:14:03 <d34dh0r53> moving on to specifications
15:14:15 <d34dh0r53> #topic specification OAuth 2.0 (hiromu)
15:14:32 <d34dh0r53> #link https://review.opendev.org/q/topic:bp%252Foauth2-client-credentials-ext
15:16:34 <zaitcev> So, what's left there? I was reviewing stuff on and off, but I lost the big picture.
15:17:17 <d34dh0r53> hiromu isn't around, I think it's mostly reviewing the patches listed in the link above
15:17:35 <zaitcev> I see.
15:17:43 <d34dh0r53> primarily #link https://review.opendev.org/c/openstack/keystone-tempest-plugin/+/874716
15:18:19 <d34dh0r53> next up
15:18:24 <d34dh0r53> #topic specification Secure RBAC (dmendiza[m])
15:18:34 <d34dh0r53> #link https://governance.openstack.org/tc/goals/selected/consistent-and-secure-rbac.html#z-release-timeline_
15:19:57 <d34dh0r53> hi hiromu
15:20:24 <d34dh0r53> do you have any updates on the OAuth 2.0 BZ? Anything in particular you need reviews or input on?
15:22:39 <d34dh0r53> guess it was just his client re-connecting, moving on.
15:22:46 <d34dh0r53> dmendiza[m]: any s-rbac updates/asks?
15:23:21 <dmendiza[m]> Not anything off the top of my head.
15:23:32 <dmendiza[m]> I think we need to move the "manager" role spec forward?
15:24:00 <dmendiza[m]> I'll have to check ... I've been mostly looking at downstream stuff for SRBAC.
15:24:14 <d34dh0r53> yeah, we need to get that moving again
15:24:14 <dmendiza[m]> Not sure if gmann is around for any asks?
15:24:50 <gmann> yeah, manager and service role is needed and good to have merged
15:25:11 <gmann> but not sure if review comment are fixed there. I will ping abhishek about those
15:25:45 <dmendiza[m]> Thanks gmann .  I'll try to catch up on both of those efforts this week.
15:25:57 <gmann> thanks dmendiza[m] really appreciate
15:26:17 <d34dh0r53> awesome, thanks gmann and dmendiza[m]
15:26:49 <d34dh0r53> #topic SQLAlchemy 2.0 (stephenfin)
15:26:56 <d34dh0r53> #link https://review.opendev.org/q/topic:sqlalchemy-20+is:open+project:openstack/keystone
15:27:22 <d34dh0r53> we really need to review these, perhaps we can dedicate the reviewathon this week to these patches and backports
15:28:30 <d34dh0r53> cool, I think we'll do that
15:28:35 <d34dh0r53> #topic open discussion
15:28:58 <d34dh0r53> lots of backports for drencrom
15:29:05 <opendevreview> John Garbutt proposed openstack/oslo.limit master: Fix up connection object  https://review.opendev.org/c/openstack/oslo.limit/+/882077
15:29:09 <d34dh0r53> (drencrom) We need to merge these backports to fix pep8 tests
15:29:12 <d34dh0r53> ussuri #link https://review.opendev.org/c/openstack/keystonemiddleware/+/878028
15:29:14 <d34dh0r53> wallaby #link https://review.opendev.org/c/openstack/keystonemiddleware/+/878026
15:29:16 <d34dh0r53> xena #link https://review.opendev.org/c/openstack/keystonemiddleware/+/878025
15:29:18 <d34dh0r53> yoga #link https://review.opendev.org/c/openstack/keystonemiddleware/+/878024
15:29:20 <d34dh0r53> zed #link https://review.opendev.org/c/openstack/keystonemiddleware/+/878023
15:29:27 <d34dh0r53> cores, please take a look if you get a chance
15:29:46 <opendevreview> John Garbutt proposed openstack/oslo.limit master: Two level limit enforcer  https://review.opendev.org/c/openstack/oslo.limit/+/695527
15:29:57 <d34dh0r53> once those are done this needs a WF #link https://review.opendev.org/c/openstack/keystonemiddleware/+/873921
15:30:40 <d34dh0r53> next up we have the PooledLdapHandler message.clean() backports
15:30:43 <d34dh0r53> (mustafakemalgilor) PooledLdapHandler message.clean() patch backports
15:30:46 <d34dh0r53> review request
15:30:48 <d34dh0r53> #link ussuri: https://review.opendev.org/c/openstack/keystone/+/874846
15:30:50 <d34dh0r53> #link victoria: https://review.opendev.org/c/openstack/keystone/+/874847
15:30:52 <d34dh0r53> #link wallaby: https://review.opendev.org/c/openstack/keystone/+/874844
15:30:54 <d34dh0r53> #link xena: https://review.opendev.org/c/openstack/keystone/+/874843
15:31:08 <d34dh0r53> again, these should be easy backports
15:31:24 <d34dh0r53> finally
15:31:28 <d34dh0r53> (reqa) OAuth 2.0 Device Authorization Grant bugfix
15:31:30 <d34dh0r53> review request
15:31:32 <d34dh0r53> #link https://review.opendev.org/c/openstack/keystoneauth/+/876893
15:31:34 <d34dh0r53> that's a fixup https://review.opendev.org/q/topic:reqa/v3oidcdeviceauth - anything left to be done here?
15:33:14 <d34dh0r53> moving on
15:33:19 <d34dh0r53> #topic bug review
15:33:21 <d34dh0r53> #link https://bugs.launchpad.net/keystone/?orderby=-id&start=0
15:33:40 <d34dh0r53> nothing new in keystone
15:33:45 <d34dh0r53> #link https://bugs.launchpad.net/python-keystoneclient/?orderby=-id&start=0
15:34:11 <d34dh0r53> python-keystoneclient has no new bugs
15:34:14 <d34dh0r53> #link https://bugs.launchpad.net/keystoneauth/+bugs?orderby=-id&start=0
15:34:45 <d34dh0r53> keystoneauth is clean
15:34:47 <d34dh0r53> #link https://bugs.launchpad.net/keystonemiddleware/+bugs?orderby=-id&start=0
15:35:20 <d34dh0r53> no new ones in keystonemiddleware either
15:35:22 <d34dh0r53> #link https://bugs.launchpad.net/pycadf/+bugs?orderby=-id&start=0
15:35:39 <d34dh0r53> pycadf is clean
15:35:42 <d34dh0r53> #link https://bugs.launchpad.net/ldappool/+bugs?orderby=-id&start=0
15:35:50 <d34dh0r53> as is ldappool
15:35:58 <d34dh0r53> #topic conclusion
15:36:23 <d34dh0r53> anything else before we go?
15:36:56 <d34dh0r53> Thanks for joining all! Hopefully I'll see you at the reviewathon 14:00 UTC Friday ;)
15:36:59 <d34dh0r53> #endmeeting