<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p>I was able to automate some of this report. I figured a follow up
containing data about what was worked on would be nice.</p>
<p><br>
</p>
<p>Bug #1703467 in OpenStack Identity (keystone): "assert_admin is
checking default policy rule not admin_required"<br>
<a class="moz-txt-link-freetext" href="https://bugs.launchpad.net/keystone/+bug/1703467">https://bugs.launchpad.net/keystone/+bug/1703467</a><br>
participants: lbragstad, edmondsw<br>
Triaged, tagged, set target milestone, and worked on patch</p>
<p>Bug #1696264 in OpenStack Identity (keystone): "Create OpenStack
client environment scripts in Installation Guide INCOMPLETE -
doesn't state path for file"<br>
<a class="moz-txt-link-freetext" href="https://bugs.launchpad.net/keystone/+bug/1696264">https://bugs.launchpad.net/keystone/+bug/1696264</a><br>
participants: lbragstad, wingwj<br>
Triaged and set target milestone</p>
<p>Bug #1703666 in OpenStack Identity (keystone): "Templated catalog
does not handle multi-regions properly"<br>
<a class="moz-txt-link-freetext" href="https://bugs.launchpad.net/keystone/+bug/1703666">https://bugs.launchpad.net/keystone/+bug/1703666</a><br>
participants: lbragstad, eandersson<br>
Triaged, set target milestone, discussed alternatives, and worked
on a patch</p>
<p>Bug #1133435 in OpenStack Identity (keystone): "policy should
return a 400 if a required field is missing"<br>
<a class="moz-txt-link-freetext" href="https://bugs.launchpad.net/keystone/+bug/1133435">https://bugs.launchpad.net/keystone/+bug/1133435</a><br>
participants: lbragstad, edmondsw<br>
Set status, discussed, and proposed a possible solution due to
the work with policy in code</p>
<p>Bug #1689468 in OpenStack Identity (keystone): "odd keystone
behavior when X-Auth-Token ends with carriage return"<br>
<a class="moz-txt-link-freetext" href="https://bugs.launchpad.net/keystone/+bug/1689468">https://bugs.launchpad.net/keystone/+bug/1689468</a> <br>
participants: gagehugo, kaerie<br>
Reproposed patch in review</p>
<p>Bug #1703369 in OpenStack Identity (keystone):
"get_identity_providers policy should be singular"<br>
<a class="moz-txt-link-freetext" href="https://bugs.launchpad.net/keystone/+bug/1703369">https://bugs.launchpad.net/keystone/+bug/1703369</a><br>
participants: lbragstad, edmondsw<br>
Set priority, target to series, set target milestone, proposed and
reviewed patch, discussed backport procedure</p>
<p>Bug #1703438 in keystoneauth: "Discover.version_data: Empty
max_version results in max_microversion=None even if version is
specified"<br>
<a class="moz-txt-link-freetext" href="https://bugs.launchpad.net/keystoneauth/+bug/1703438">https://bugs.launchpad.net/keystoneauth/+bug/1703438</a><br>
participants: efried, mordred, morgan<br>
Merged fix</p>
<p>Bug #1703447 in keystoneauth: "URL caching in
EndpointData._run_discovery is busted"<br>
<a class="moz-txt-link-freetext" href="https://bugs.launchpad.net/keystoneauth/+bug/1703447">https://bugs.launchpad.net/keystoneauth/+bug/1703447</a><br>
participants: efried, morgan<br>
Merged fix</p>
<p>Bug #1689468 in keystonemiddleware: "odd keystone behavior when
X-Auth-Token ends with carriage return"<br>
<a class="moz-txt-link-freetext" href="https://bugs.launchpad.net/keystonemiddleware/+bug/1689468">https://bugs.launchpad.net/keystonemiddleware/+bug/1689468</a><br>
participants: gagehugo, kaerie<br>
Reproposed patch in review<br>
</p>
<p><br>
</p>
<p>For what it's worth, I also apparently thought office hours
occurred on the 7th when it was actually on the 11th. </p>
<p><br>
</p>
<br>
<div class="moz-cite-prefix">On 07/11/2017 08:35 PM, Lance Bragstad
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:75b4eddc-fd0d-a67c-12fb-e0a1cfd1fbd0@gmail.com">
<meta http-equiv="content-type" content="text/html; charset=utf-8">
<p>Hey all,</p>
<p>This is a summary of what was worked on today during office
hours. Full logs of the meeting can be found below:</p>
<p><a class="moz-txt-link-freetext"
href="http://eavesdrop.openstack.org/meetings/office_hours/2017/office_hours.2017-07-11-19.00.log.html"
moz-do-not-send="true">http://eavesdrop.openstack.org/meetings/office_hours/2017/office_hours.2017-07-11-19.00.log.html</a></p>
<p><b>The future of the templated catalog backend<br>
</b></p>
<p>Some issues were uncovered, or just resurfaced, with the
templated catalog backend. The net of the discussion boiled down
to - do we fix it or remove it? The answer actually ended up
being both. It was determined that instead of trying to maintain
and fix the existing templated backend, we should deprecate it
for removal [0]. Since it does provide some value, it was
suggested that we can start implementing a new backend based on
YAML to fill the purpose instead. The advantage here is that the
approach is directed towards a specific format (YAML). This
should hopefully make things easier for both developers and
users.</p>
<p>[0] <a class="moz-txt-link-freetext"
href="https://review.openstack.org/#/c/482714/"
moz-do-not-send="true">https://review.openstack.org/#/c/482714/</a><br>
</p>
<p><b>Policy fixes</b></p>
<p>All the policy-in-code work has exposed several issues with
policy defaults in keystone. We spent time as a group going
through several of the bugs [0] [1] [2] [3], the corresponding
fixes, and impact. One of which will be backported specifically
for the importance of communicating a release note to stable
users [0].<br>
</p>
<p>[0] <a class="moz-txt-link-freetext"
href="https://bugs.launchpad.net/keystone/+bug/1703369"
moz-do-not-send="true">https://bugs.launchpad.net/keystone/+bug/1703369</a><br>
[1] <a class="moz-txt-link-freetext"
href="https://bugs.launchpad.net/keystone/+bug/1703392"
moz-do-not-send="true">https://bugs.launchpad.net/keystone/+bug/1703392</a><br>
[2] <a class="moz-txt-link-freetext"
href="https://bugs.launchpad.net/keystone/+bug/1703467"
moz-do-not-send="true">https://bugs.launchpad.net/keystone/+bug/1703467</a><br>
[3] <a class="moz-txt-link-freetext"
href="https://bugs.launchpad.net/keystone/+bug/1133435"
moz-do-not-send="true">https://bugs.launchpad.net/keystone/+bug/1133435</a><br>
</p>
<p><b>Additional bugs worked</b><br>
</p>
<p>Transient bug with security compliance or PCI-DSS: <a
class="moz-txt-link-freetext"
href="https://bugs.launchpad.net/keystone/+bug/1702211"
moz-do-not-send="true">https://bugs.launchpad.net/keystone/+bug/1702211</a><br>
Request header issues: <a class="moz-txt-link-freetext"
href="https://bugs.launchpad.net/keystone/+bug/1689468"
moz-do-not-send="true">https://bugs.launchpad.net/keystone/+bug/1689468</a></p>
<p><br>
</p>
<p>I hope to find ways to automate most of what is communicated in
this summary. Until then I'm happy to hear feedback if you find
the report lacking in a specific area.<br>
</p>
<p><br>
</p>
<p>Thanks,</p>
<p>Lance<br>
</p>
</blockquote>
<br>
</body>
</html>