14:59:42 <d34dh0r53> #startmeeting keystone
14:59:42 <opendevmeet> Meeting started Tue Jul 11 14:59:42 2023 UTC and is due to finish in 60 minutes.  The chair is d34dh0r53. Information about MeetBot at http://wiki.debian.org/MeetBot.
14:59:42 <opendevmeet> Useful Commands: #action #agreed #help #info #idea #link #topic #startvote.
14:59:42 <opendevmeet> The meeting name has been set to 'keystone'
14:59:43 <d34dh0r53> o/
14:59:59 <xek> o/
15:00:15 <d34dh0r53> #topic roll call
15:00:17 <d34dh0r53> admiyo, bbobrov, crisloma, d34dh0r53, dpar, dstanek, hrybacki, knikolla[m], lbragstad, lwanderley, kmalloc, rodrigods, samueldmq, ruan_he, wxy, sonuk, vishakha, Ajay, rafaelwe, xek, gmann, zaitcev, reqa, dmendiza[m]
15:01:24 <dmendiza[m]> 🙋‍♂️
15:01:54 <d34dh0r53> #topic review past meeting action items
15:02:30 <knikolla> o/
15:02:53 <d34dh0r53> #link https://meetings.opendev.org/meetings/keystone/2023/keystone.2023-06-27-15.07.html
15:03:20 <d34dh0r53> I haven't looked at the known issues section yet so those carry forward
15:03:33 <d34dh0r53> #action d34dh0r53 Look into adding/restoring a known issues section to our documentation
15:03:46 <d34dh0r53> #action d34dh0r53 add https://bugs.launchpad.net/keystone/+bug/1305950 to the known issues section of our documentation
15:04:12 <d34dh0r53> Next up is to get the keystonemiddleware gates unblocked
15:04:32 <d34dh0r53> I think they are mostly unblocked, I'm pretty sure master is working and stable/2023.1 is nearly there
15:09:32 <d34dh0r53> sorry, lost my tab
15:09:58 <d34dh0r53> finally d34dh0r53 pin keystone-tempest-plugin to wallaby for keystone stable/wallaby
15:10:05 <d34dh0r53> I still need to look at that
15:10:08 <d34dh0r53> #action d34dh0r53 pin keystone-tempest-plugin to wallaby for keystone stable/wallaby
15:10:12 <d34dh0r53> next up
15:10:21 <d34dh0r53> #topic liaison updates
15:10:25 <d34dh0r53> nothing from VMT
15:11:21 <d34dh0r53> cool
15:11:28 <d34dh0r53> next up we have specifications
15:11:38 <d34dh0r53> #topic specification OAuth 2.0 (hiromu)
15:11:46 <d34dh0r53> #link https://review.opendev.org/q/topic:bp%252Foauth2-client-credentials-ext
15:11:48 <d34dh0r53> External OAuth 2.0 Specification
15:11:50 <d34dh0r53> #link https://review.opendev.org/c/openstack/keystone-specs/+/861554
15:11:52 <d34dh0r53> OAuth 2.0 Implementation
15:11:54 <d34dh0r53> #link https://review.opendev.org/q/topic:bp%252Fsupport-oauth2-mtls
15:11:56 <d34dh0r53> OAuth 2.0 Documentation
15:11:59 <d34dh0r53> #link https://review.opendev.org/c/openstack/keystone/+/838108
15:12:00 <d34dh0r53> #link https://review.opendev.org/c/openstack/keystoneauth/+/838104
15:14:38 <d34dh0r53> I don't think hiromu is around, so we'll move on
15:15:03 <d34dh0r53> #topic specification Secure RBAC (dmendiza[m])
15:15:19 <d34dh0r53> #link https://governance.openstack.org/tc/goals/selected/consistent-and-secure-rbac.html#z-release-timeline_
15:15:21 <d34dh0r53> Service Role Implementation
15:15:23 <d34dh0r53> #link https://review.opendev.org/c/openstack/keystone/+/863420
15:15:26 <d34dh0r53> Manager Role Implementation
15:15:27 <d34dh0r53> #link https://review.opendev.org/c/openstack/keystone/+/822601
15:15:29 <d34dh0r53> Keystone Tempest Plugin Updates
15:15:31 <d34dh0r53> #link https://review.opendev.org/c/openstack/keystone-tempest-plugin/+/885799
15:16:13 <dmendiza[m]> Yeah, still slowly hacking at the Tempest tests ... not sure how much time I'll have to continue that.
15:16:31 <dmendiza[m]> No updates on the specs
15:16:51 <d34dh0r53> ok, thanks dmendiza[m]
15:17:06 <d34dh0r53> next up
15:17:18 <d34dh0r53> #topic specification SQLAlchemy 2.0 (stephenfin)
15:17:25 <d34dh0r53> #link https://review.opendev.org/q/topic:sqlalchemy-20+is:open+project:openstack/keystone
15:18:05 <d34dh0r53> I think we're just about done with this, there is one remaining patch that is currently gating, hopefully no t***outs
15:19:16 <d34dh0r53> Thanks everyone for the reviews and work on those, fantastic work!
15:20:31 <d34dh0r53> #topic open discussion
15:20:35 <d34dh0r53> first up
15:20:44 <d34dh0r53> (drencrom) Remove cache invalidation when using expired token
15:20:46 <d34dh0r53> #link https://review.opendev.org/c/openstack/keystonemiddleware/+/884738
15:21:06 <d34dh0r53> I did a recheck on this and I think it passed but zuul isn't voting for some reason
15:21:20 <d34dh0r53> maybe another core can review and vote?
15:21:38 <drencrom> Yes, that is waht I saw before, zuul runs but no votes
15:21:47 <d34dh0r53> yeah, it's strange
15:23:01 <d34dh0r53> I'll get another core to review and if that doesn't work I'll ping infra about it
15:23:10 <d34dh0r53> next up
15:23:17 <drencrom> thanks d34dh0r53
15:23:28 <d34dh0r53> (mustafakemalgilor) PooledLdapHandler message.clean() patch backports
15:23:30 <d34dh0r53> review request
15:23:32 <d34dh0r53> #link ussuri: https://review.opendev.org/c/openstack/keystone/+/874846
15:23:33 <d34dh0r53> #link victoria: https://review.opendev.org/c/openstack/keystone/+/874847
15:23:36 <d34dh0r53> #link wallaby: https://review.opendev.org/c/openstack/keystone/+/874844
15:23:43 <d34dh0r53> just three backports remaining, take a look when y'all get a chance
15:24:53 <d34dh0r53> the wallaby backport needs
15:24:56 <d34dh0r53> #link https://review.opendev.org/c/openstack/keystone/+/887072
15:24:58 <d34dh0r53> to go in first
15:25:29 <d34dh0r53> next up
15:25:37 <d34dh0r53> (reqa) Add openstack cli support for OAuth 2.0 Device Authorization Grant with PKCE:
15:25:39 <d34dh0r53> review request
15:25:41 <d34dh0r53> #link https://review.opendev.org/c/openstack/keystoneauth/+/883852
15:27:09 <d34dh0r53> cores, please review the last few items when you have a chance
15:27:53 <d34dh0r53> next up for open discussion is the moving of the Keystone Weekly Meeting (this meeting) to Wednesdays at 14:00 UTC, essentially +24 hours from it's current time
15:28:14 <d34dh0r53> I sent an email to openstack-discuss but also wanted to bring it up here
15:30:19 <d34dh0r53> anyone have any thoughts?
15:33:59 <d34dh0r53> ok, with no feedback I'm going to move next weeks meeting to Wednesday at 14:00 UTC.  We'll see how it goes but please feel free to let me know if that time doesn't work for you.
15:34:06 <d34dh0r53> #topic bug review
15:34:12 <d34dh0r53> #link https://bugs.launchpad.net/keystone/?orderby=-id&start=0
15:34:50 <d34dh0r53> we have a new bug in keystone
15:34:52 <d34dh0r53> #link https://bugs.launchpad.net/keystone/+bug/2026361
15:35:14 <d34dh0r53> It looks like the reporter took the bug and will hopefully be able to submit a patch
15:35:39 <d34dh0r53> next up
15:35:42 <d34dh0r53> #link https://bugs.launchpad.net/python-keystoneclient/?orderby=-id&start=0
15:35:56 <d34dh0r53> no new bugs there
15:36:10 <d34dh0r53> #link #link https://bugs.launchpad.net/keystoneauth/+bugs?orderby=-id&start=0
15:36:28 <d34dh0r53> #uno
15:36:30 <d34dh0r53> #undo
15:36:30 <opendevmeet> Removing item from minutes: #link https://bugs.launchpad.net/keystoneauth/+bugs?orderby=-id&start=0
15:36:34 <d34dh0r53> #link https://bugs.launchpad.net/keystoneauth/+bugs?orderby=-id&start=0
15:36:51 <d34dh0r53> no new bugs there :)
15:36:57 <d34dh0r53> moving on
15:37:04 <d34dh0r53> #link https://bugs.launchpad.net/keystonemiddleware/+bugs?orderby=-id&start=0
15:37:27 <d34dh0r53> no new bugs in keystonemiddleware
15:37:42 <d34dh0r53> #link https://bugs.launchpad.net/pycadf/+bugs?orderby=-id&start=0
15:38:06 <d34dh0r53> pycadf is good
15:38:08 <d34dh0r53> #link https://bugs.launchpad.net/ldappool/+bugs?orderby=-id&start=0
15:38:15 <d34dh0r53> as is ldappool
15:38:24 <d34dh0r53> #topic conclusion
15:38:41 <d34dh0r53> Next weeks meeting will be Wednesday at 14:00 UTC
15:40:50 <d34dh0r53> Thanks everyone!
15:40:55 <d34dh0r53> #endmeeting