15:12:55 #startmeeting keystone 15:12:55 Meeting started Tue May 23 15:12:55 2023 UTC and is due to finish in 60 minutes. The chair is d34dh0r53. Information about MeetBot at http://wiki.debian.org/MeetBot. 15:12:55 Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. 15:12:55 The meeting name has been set to 'keystone' 15:13:01 o/ sorry I'm late folks 15:13:11 #topic roll call 15:13:14 🙋‍♂️ 15:13:15 admiyo, bbobrov, crisloma, d34dh0r53, dpar, dstanek, hrybacki, knikolla[m], lbragstad, lwanderley, kmalloc, rodrigods, samueldmq, ruan_he, wxy, sonuk, vishakha, Ajay, rafaelwe, xek, gmann, zaitcev, reqa, dmendiza[m] 15:13:16 o/ 15:13:23 o/ 15:14:31 #topic review past meeting work items 15:15:01 no updates on the past meeting action items, they're all on me. Busy trying to get a release out of the door :/ 15:15:44 o/ 15:15:52 #action d34dh0r53 investigate https://bugs.launchpad.net/keystone/+bug/2009752 15:15:53 #action d34dh0r53 Look into adding/restoring a known issues section to our documentation 15:15:55 #action d34dh0r53 add https://bugs.launchpad.net/keystone/+bug/1305950 to the known issues section of our documentation 15:15:57 #action d34dh0r53 update https://review.opendev.org/c/openstack/keystonemiddleware/+/882401 to include test_ec2_token_middleware.py 15:15:59 #action drencrom look at https://review.opendev.org/c/openstack/keystonemiddleware/+/878027 to see if we can add the test_ec2_token_middleware.py to it 15:16:01 #action d34dh0r53 look at https://bugs.launchpad.net/keystone/+bug/2018644 15:16:32 I'm also trying to get the test_ec2_token stuff into those patches but gerrit is refusing my push's for some reason 15:20:11 #topic liaison updates 15:20:16 nothing from vmt 15:22:43 #topic specification OAuth 2.0 (hiromu) 15:22:57 #link https://review.opendev.org/q/topic:bp%252Foauth2-client-credentials-ext 15:22:59 External OAuth 2.0 Specification 15:23:01 #link https://review.opendev.org/c/openstack/keystone-specs/+/861554 15:23:03 OAuth 2.0 Implementation 15:23:05 #link https://review.opendev.org/q/topic:bp%252Fsupport-oauth2-mtls 15:23:07 OAuth 2.0 Documentation 15:23:09 #link https://review.opendev.org/c/openstack/keystone/+/838108 15:23:11 #link https://review.opendev.org/c/openstack/keystoneauth/+/838104 15:25:21 Julia gave me the additional comments. I'll reply later. 15:25:37 hiromu: ack, thank you 15:25:42 Next up 15:25:57 Sorry, I'd like to confirm that do we have deadline for merging spec? 15:28:25 keystone doesn't have a formal deadline 15:28:58 got it, thanks. 15:29:08 I'd like to say milestone-2 which is 03-07 Jul 15:29:14 but that's a soft date 15:29:27 ok 15:29:57 #topic Secure RBAC (dmendiza[m]) 15:30:07 #link https://governance.openstack.org/tc/goals/selected/consistent-and-secure-rbac.html#z-release-timeline_ 15:30:08 Service Role Implementation 15:30:10 #link https://review.opendev.org/c/openstack/keystone/+/863420 15:30:12 Manager Role Implementation 15:30:14 #link https://review.opendev.org/c/openstack/keystone/+/822601 15:30:21 heya! 15:30:29 not a whole lot of progress in keystone 15:30:39 been looking at srbac stuff in barbican 15:30:46 ok 15:31:25 thanks dmendiza[m] 15:31:48 #topic specification SQLAlchemy 2.0 (stephenfin) 15:31:56 #link https://review.opendev.org/q/topic:sqlalchemy-20+is:open+project:openstack/keystone 15:31:58 Can I get reviews on this, while I have context/time to close it out? 15:32:00 What more do you need from me? 15:32:23 working on these reviews, will try to finish this week but it's getting quite busy 15:34:03 #topic open discussion 15:34:08 (drencrom) We need to merge these backports to fix pep8 tests 15:34:46 I'm probably going to abandon the 2023.1 backport and just re-submit with the test_ec2_token_middleware code added 15:35:06 then I'll start pinging the cores for reviews 15:35:15 next up 15:35:17 (mustafakemalgilor) PooledLdapHandler message.clean() patch backports 15:35:56 review request 15:35:58 #link ussuri: https://review.opendev.org/c/openstack/keystone/+/874846 15:36:00 #link victoria: https://review.opendev.org/c/openstack/keystone/+/874847 15:36:02 #link wallaby: https://review.opendev.org/c/openstack/keystone/+/874844 15:36:19 I think at least one of those may need pep8 fixes before it can go in 15:36:41 any other open discussion items before we move on? 15:39:13 ok 15:39:17 moving on to 15:39:20 #topic bug review 15:39:27 #link https://bugs.launchpad.net/keystone/?orderby=-id&start=0 15:41:39 we have a new security bug for keystone 15:42:18 I'll work with the VMT to determine it's impact 15:42:34 #link https://bugs.launchpad.net/python-keystoneclient/?orderby=-id&start=0 15:42:47 nothing new for python-keystoneclient 15:43:11 #link https://bugs.launchpad.net/keystoneauth/+bugs?orderby=-id&start=0 15:43:18 we have one new bug in keystoneauth 15:43:27 https://bugs.launchpad.net/keystoneauth/+bug/2020112 15:44:17 it's a test regression, possibly a low hanging fruit 15:45:16 I'll look to see if this is actually our bug, looks like it may be elsewhere 15:45:40 #link https://bugs.launchpad.net/keystonemiddleware/+bugs?orderby=-id&start=0 15:45:54 no new issues for keystonemiddleware 15:46:06 #link https://bugs.launchpad.net/pycadf/+bugs?orderby=-id&start=0 15:46:12 pycadf is clean 15:46:23 #link https://bugs.launchpad.net/ldappool/+bugs?orderby=-id&start=0 15:47:18 ldappool is clean as well 15:47:23 #topic conclusion 15:47:40 anyone have anything before we close? 15:48:05 I'm on PTO this Friday, 26-May so I won't be at the reviewathon but I don't want to cancel it 15:48:40 Hopefully people show up, I would like to go through the SQLAlchemy 2.0 patches 15:49:33 That's all folks! 15:49:38 #endmeeting