15:12:55 <d34dh0r53> #startmeeting keystone 15:12:55 <opendevmeet> Meeting started Tue May 23 15:12:55 2023 UTC and is due to finish in 60 minutes. The chair is d34dh0r53. Information about MeetBot at http://wiki.debian.org/MeetBot. 15:12:55 <opendevmeet> Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. 15:12:55 <opendevmeet> The meeting name has been set to 'keystone' 15:13:01 <d34dh0r53> o/ sorry I'm late folks 15:13:11 <d34dh0r53> #topic roll call 15:13:14 <dmendiza[m]> 🙋♂️ 15:13:15 <d34dh0r53> admiyo, bbobrov, crisloma, d34dh0r53, dpar, dstanek, hrybacki, knikolla[m], lbragstad, lwanderley, kmalloc, rodrigods, samueldmq, ruan_he, wxy, sonuk, vishakha, Ajay, rafaelwe, xek, gmann, zaitcev, reqa, dmendiza[m] 15:13:16 <hiromu> o/ 15:13:23 <knikolla> o/ 15:14:31 <d34dh0r53> #topic review past meeting work items 15:15:01 <d34dh0r53> no updates on the past meeting action items, they're all on me. Busy trying to get a release out of the door :/ 15:15:44 <xek> o/ 15:15:52 <d34dh0r53> #action d34dh0r53 investigate https://bugs.launchpad.net/keystone/+bug/2009752 15:15:53 <d34dh0r53> #action d34dh0r53 Look into adding/restoring a known issues section to our documentation 15:15:55 <d34dh0r53> #action d34dh0r53 add https://bugs.launchpad.net/keystone/+bug/1305950 to the known issues section of our documentation 15:15:57 <d34dh0r53> #action d34dh0r53 update https://review.opendev.org/c/openstack/keystonemiddleware/+/882401 to include test_ec2_token_middleware.py 15:15:59 <d34dh0r53> #action drencrom look at https://review.opendev.org/c/openstack/keystonemiddleware/+/878027 to see if we can add the test_ec2_token_middleware.py to it 15:16:01 <d34dh0r53> #action d34dh0r53 look at https://bugs.launchpad.net/keystone/+bug/2018644 15:16:32 <d34dh0r53> I'm also trying to get the test_ec2_token stuff into those patches but gerrit is refusing my push's for some reason 15:20:11 <d34dh0r53> #topic liaison updates 15:20:16 <d34dh0r53> nothing from vmt 15:22:43 <d34dh0r53> #topic specification OAuth 2.0 (hiromu) 15:22:57 <d34dh0r53> #link https://review.opendev.org/q/topic:bp%252Foauth2-client-credentials-ext 15:22:59 <d34dh0r53> External OAuth 2.0 Specification 15:23:01 <d34dh0r53> #link https://review.opendev.org/c/openstack/keystone-specs/+/861554 15:23:03 <d34dh0r53> OAuth 2.0 Implementation 15:23:05 <d34dh0r53> #link https://review.opendev.org/q/topic:bp%252Fsupport-oauth2-mtls 15:23:07 <d34dh0r53> OAuth 2.0 Documentation 15:23:09 <d34dh0r53> #link https://review.opendev.org/c/openstack/keystone/+/838108 15:23:11 <d34dh0r53> #link https://review.opendev.org/c/openstack/keystoneauth/+/838104 15:25:21 <hiromu> Julia gave me the additional comments. I'll reply later. 15:25:37 <d34dh0r53> hiromu: ack, thank you 15:25:42 <d34dh0r53> Next up 15:25:57 <hiromu> Sorry, I'd like to confirm that do we have deadline for merging spec? 15:28:25 <d34dh0r53> keystone doesn't have a formal deadline 15:28:58 <hiromu> got it, thanks. 15:29:08 <d34dh0r53> I'd like to say milestone-2 which is 03-07 Jul 15:29:14 <d34dh0r53> but that's a soft date 15:29:27 <hiromu> ok 15:29:57 <d34dh0r53> #topic Secure RBAC (dmendiza[m]) 15:30:07 <d34dh0r53> #link https://governance.openstack.org/tc/goals/selected/consistent-and-secure-rbac.html#z-release-timeline_ 15:30:08 <d34dh0r53> Service Role Implementation 15:30:10 <d34dh0r53> #link https://review.opendev.org/c/openstack/keystone/+/863420 15:30:12 <d34dh0r53> Manager Role Implementation 15:30:14 <d34dh0r53> #link https://review.opendev.org/c/openstack/keystone/+/822601 15:30:21 <dmendiza[m]> heya! 15:30:29 <dmendiza[m]> not a whole lot of progress in keystone 15:30:39 <dmendiza[m]> been looking at srbac stuff in barbican 15:30:46 <d34dh0r53> ok 15:31:25 <d34dh0r53> thanks dmendiza[m] 15:31:48 <d34dh0r53> #topic specification SQLAlchemy 2.0 (stephenfin) 15:31:56 <d34dh0r53> #link https://review.opendev.org/q/topic:sqlalchemy-20+is:open+project:openstack/keystone 15:31:58 <d34dh0r53> Can I get reviews on this, while I have context/time to close it out? 15:32:00 <d34dh0r53> What more do you need from me? 15:32:23 <d34dh0r53> working on these reviews, will try to finish this week but it's getting quite busy 15:34:03 <d34dh0r53> #topic open discussion 15:34:08 <d34dh0r53> (drencrom) We need to merge these backports to fix pep8 tests 15:34:46 <d34dh0r53> I'm probably going to abandon the 2023.1 backport and just re-submit with the test_ec2_token_middleware code added 15:35:06 <d34dh0r53> then I'll start pinging the cores for reviews 15:35:15 <d34dh0r53> next up 15:35:17 <d34dh0r53> (mustafakemalgilor) PooledLdapHandler message.clean() patch backports 15:35:56 <d34dh0r53> review request 15:35:58 <d34dh0r53> #link ussuri: https://review.opendev.org/c/openstack/keystone/+/874846 15:36:00 <d34dh0r53> #link victoria: https://review.opendev.org/c/openstack/keystone/+/874847 15:36:02 <d34dh0r53> #link wallaby: https://review.opendev.org/c/openstack/keystone/+/874844 15:36:19 <d34dh0r53> I think at least one of those may need pep8 fixes before it can go in 15:36:41 <d34dh0r53> any other open discussion items before we move on? 15:39:13 <d34dh0r53> ok 15:39:17 <d34dh0r53> moving on to 15:39:20 <d34dh0r53> #topic bug review 15:39:27 <d34dh0r53> #link https://bugs.launchpad.net/keystone/?orderby=-id&start=0 15:41:39 <d34dh0r53> we have a new security bug for keystone 15:42:18 <d34dh0r53> I'll work with the VMT to determine it's impact 15:42:34 <d34dh0r53> #link https://bugs.launchpad.net/python-keystoneclient/?orderby=-id&start=0 15:42:47 <d34dh0r53> nothing new for python-keystoneclient 15:43:11 <d34dh0r53> #link https://bugs.launchpad.net/keystoneauth/+bugs?orderby=-id&start=0 15:43:18 <d34dh0r53> we have one new bug in keystoneauth 15:43:27 <d34dh0r53> https://bugs.launchpad.net/keystoneauth/+bug/2020112 15:44:17 <d34dh0r53> it's a test regression, possibly a low hanging fruit 15:45:16 <d34dh0r53> I'll look to see if this is actually our bug, looks like it may be elsewhere 15:45:40 <d34dh0r53> #link https://bugs.launchpad.net/keystonemiddleware/+bugs?orderby=-id&start=0 15:45:54 <d34dh0r53> no new issues for keystonemiddleware 15:46:06 <d34dh0r53> #link https://bugs.launchpad.net/pycadf/+bugs?orderby=-id&start=0 15:46:12 <d34dh0r53> pycadf is clean 15:46:23 <d34dh0r53> #link https://bugs.launchpad.net/ldappool/+bugs?orderby=-id&start=0 15:47:18 <d34dh0r53> ldappool is clean as well 15:47:23 <d34dh0r53> #topic conclusion 15:47:40 <d34dh0r53> anyone have anything before we close? 15:48:05 <d34dh0r53> I'm on PTO this Friday, 26-May so I won't be at the reviewathon but I don't want to cancel it 15:48:40 <d34dh0r53> Hopefully people show up, I would like to go through the SQLAlchemy 2.0 patches 15:49:33 <d34dh0r53> That's all folks! 15:49:38 <d34dh0r53> #endmeeting