15:01:00 <d34dh0r53> #startmeeting keystone 15:01:00 <opendevmeet> Meeting started Wed Apr 3 15:01:00 2024 UTC and is due to finish in 60 minutes. The chair is d34dh0r53. Information about MeetBot at http://wiki.debian.org/MeetBot. 15:01:00 <opendevmeet> Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. 15:01:00 <opendevmeet> The meeting name has been set to 'keystone' 15:01:04 <d34dh0r53> bruh 15:01:16 <d34dh0r53> #topic roll call 15:01:19 <d34dh0r53> admiyo, bbobrov, crisloma, d34dh0r53, dpar, dstanek, hrybacki, knikolla[m], lbragstad, lwanderley, kmalloc, rodrigods, samueldmq, ruan_he, wxy, sonuk, vishakha, Ajay, rafaelwe, xek, gmann, zaitcev, reqa, dmendiza[m], mharley, jph, gtema 15:01:21 <d34dh0r53> o/ 15:01:37 <gtema> o/ 15:02:02 <dmendiza[m]> 🙋♂️(ish) 15:03:22 <xek> o/ 15:03:37 <d34dh0r53> hi all! 15:03:49 <d34dh0r53> #topic review past meeting work items 15:04:26 <d34dh0r53> #link https://meetings.opendev.org/meetings/keystone/2024/keystone.2024-03-27-15.02.html 15:04:41 <d34dh0r53> no updates from me and I had the only action items, push them to next week 15:04:52 <d34dh0r53> I should have time to work on them this Friday 15:05:27 <d34dh0r53> #action d34dh0r53 Look into adding/restoring a known issues section to our documentation 15:05:29 <d34dh0r53> #action d34dh0r53 add https://bugs.launchpad.net/keystone/+bug/1305950 to the known issues section of our documentation 15:05:41 <d34dh0r53> #topic liaison updates 15:05:58 <d34dh0r53> nothing from me 15:11:42 <d34dh0r53> #topic specification OAuth 2.0 (hiromu) 15:11:51 <d34dh0r53> #link https://review.opendev.org/q/topic:bp%252Foauth2-client-credentials-ext 15:11:53 <d34dh0r53> #link https://review.opendev.org/q/topic:bp%252Fenhance-oauth2-interoperability 15:11:55 <d34dh0r53> External OAuth 2.0 Specification 15:11:57 <d34dh0r53> #link https://review.opendev.org/c/openstack/keystone-specs/+/861554 15:11:59 <d34dh0r53> OAuth 2.0 Implementation 15:12:01 <d34dh0r53> #link https://review.opendev.org/q/topic:bp%252Fsupport-oauth2-mtls 15:12:03 <d34dh0r53> OAuth 2.0 Documentation 15:12:05 <d34dh0r53> #link https://review.opendev.org/c/openstack/keystone/+/838108 15:12:07 <d34dh0r53> #link https://review.opendev.org/c/openstack/keystoneauth/+/838104 15:13:29 <d34dh0r53> doesn't look like hiromu is around, hopefully we'll see them at the PTG 15:13:52 <d34dh0r53> #topic Secure RBAC (dmendiza[m]) 15:14:01 <d34dh0r53> #link https://governance.openstack.org/tc/goals/selected/consistent-and-secure-rbac.html#z-release-timeline_ 15:14:03 <d34dh0r53> 2024.1 Release Timeline 15:14:05 <d34dh0r53> Update oslo.policy in keystone to enforce_new_defaults=True 15:14:07 <d34dh0r53> Update oslo.policy in keystone to enforce_scope=True 15:14:09 <d34dh0r53> #link https://review.opendev.org/c/openstack/keystone/+/902730 (Merged) 15:14:11 <d34dh0r53> #link https://review.opendev.org/c/openstack/keystone-tempest-plugin/+/903713 (Merged) 15:14:13 <d34dh0r53> #link ttps://review.opendev.org/c/openstack/tempest/+/912489 15:14:59 <dmendiza[m]> Lots of patches up for y 15:15:11 <dmendiza[m]> Review 15:15:49 <dmendiza[m]> I don't have the links on hand though 15:15:52 <dmendiza[m]> 😅 15:16:39 <d34dh0r53> no worries, I think xek and I have reviewed most of them 15:17:48 <d34dh0r53> cool, next up 15:18:04 <d34dh0r53> #topic Improve federated users management (gtema) 15:18:06 <d34dh0r53> #link https://review.opendev.org/c/openstack/keystone-specs/+/748748 - waiting for reviews 15:18:26 <gtema> as stated - still waiting for spec reviews 15:18:43 <gtema> but to remind - I really do not want to screw mapping API more then it is already now 15:19:14 <d34dh0r53> yeah, I see there is a -1 on it right now which is keeping it off my radar but I can read through it again to refresh my memory and vote 15:19:40 <gtema> yes pls, since spec author tend to ignore my review 15:19:52 <d34dh0r53> ack 15:20:04 <d34dh0r53> #topic specification OpenAPI support (gtema) 15:20:06 <d34dh0r53> #link https://review.opendev.org/c/openstack/keystone-specs/+/910584 15:20:53 <gtema> my job situation changed and I have now no confidence on my ability to implement this spec in time (or at all) 15:21:09 <gtema> I think I need 2-3 weeks to sort things out 15:21:22 <d34dh0r53> I was reading this over, and while I really like it I think this should be proposed to the TC as a community goal 15:21:39 <gtema> right, it is submitted to the TC PTG 15:22:39 <d34dh0r53> oh cool 15:23:12 <d34dh0r53> #topic open discussion 15:23:14 <d34dh0r53> passlib update 15:23:16 <d34dh0r53> The maintainer responded to the bug, and one of the top priorities is to fix the bcrypt version bug 15:23:18 <d34dh0r53> #link https://foss.heptapod.net/python-libs/passlib/-/issues/190 15:23:20 <d34dh0r53> Targeted to 1.7.5 15:23:40 <d34dh0r53> I asked today what the status of 1.7.5 is, he said it would be a week ago and we haven't heard anything 15:23:50 <d34dh0r53> hopefully soon 15:24:00 <d34dh0r53> anything else for open discussion? 15:24:09 <gtema> not from my side 15:24:55 <d34dh0r53> cool 15:25:04 <d34dh0r53> #topic bug review 15:25:18 <d34dh0r53> #link https://bugs.launchpad.net/keystone/?orderby=-id&start=0 15:26:35 <d34dh0r53> looks like a new bug with a fix already proposed 15:26:40 <d34dh0r53> #link https://bugs.launchpad.net/keystone/+bug/2059780 15:27:03 <d34dh0r53> dmendiza[m]: mind looking at that review to see if it's included in some of your fixes? 15:27:13 <d34dh0r53> #link https://review.opendev.org/c/openstack/keystone/+/914759 15:27:33 <d34dh0r53> #link https://bugs.launchpad.net/python-keystoneclient/?orderby=-id&start=0 15:27:49 <d34dh0r53> nothing new for python-keystoneclient 15:27:56 <d34dh0r53> #link https://bugs.launchpad.net/keystoneauth/+bugs?orderby=-id&start=0 15:28:06 <d34dh0r53> keystoneauth is good 15:28:13 <d34dh0r53> #link https://bugs.launchpad.net/keystonemiddleware/+bugs?orderby=-id&start=0 15:28:25 <d34dh0r53> keystonemiddleware is also good 15:28:30 <d34dh0r53> #link https://bugs.launchpad.net/pycadf/+bugs?orderby=-id&start=0 15:28:41 <d34dh0r53> pycadf is clean 15:28:51 <d34dh0r53> #link https://bugs.launchpad.net/ldappool/+bugs?orderby=-id&start=0 15:28:54 <d34dh0r53> as is ldappool 15:29:03 <d34dh0r53> that does it for bug review 15:29:06 <d34dh0r53> #topic conclusion 15:29:09 <d34dh0r53> PTG is next week 15:29:26 <d34dh0r53> Keystone rooms are scheduled, but let me know if you need different times 15:29:40 <d34dh0r53> also, please add to the agenda 15:29:54 <d34dh0r53> #link https://etherpad.opendev.org/p/dalmation-ptg-keystone 15:30:01 <d34dh0r53> Thanks everyone! 15:30:03 <d34dh0r53> #endmeeting