| *** noslzzp has quit IRC | 00:01 | |
| *** antosh has quit IRC | 00:06 | |
| *** livelace2 has quit IRC | 00:10 | |
| *** livelace2 has joined #openstack-barbican | 00:10 | |
| openstackgerrit | Duc Nguyen proposed openstack/barbican master: Update http to https and fix link in doc reference https://review.openstack.org/581601 | 01:28 |
|---|---|---|
| *** mhen has quit IRC | 01:40 | |
| *** mhen has joined #openstack-barbican | 01:41 | |
| openstackgerrit | Merged openstack/barbican master: Implement OVO for Barbican [3] https://review.openstack.org/499419 | 01:55 |
| *** jmlowe has joined #openstack-barbican | 02:22 | |
| *** dave-mccowan has quit IRC | 02:31 | |
| lxkong | Hi, barbican team, could you please merge this patch https://review.openstack.org/582812 to enable the non-voting vault plugin job? | 02:45 |
| *** jmlowe has quit IRC | 03:43 | |
| *** Luzi has joined #openstack-barbican | 05:45 | |
| *** pcaruana has joined #openstack-barbican | 06:34 | |
| *** alee has joined #openstack-barbican | 06:45 | |
| *** alee has quit IRC | 07:25 | |
| *** alee has joined #openstack-barbican | 07:25 | |
| *** alee has quit IRC | 07:27 | |
| *** alee has joined #openstack-barbican | 07:27 | |
| *** alee has quit IRC | 07:29 | |
| *** alee has joined #openstack-barbican | 07:29 | |
| *** alee has quit IRC | 07:31 | |
| *** alee has joined #openstack-barbican | 07:31 | |
| *** alee has quit IRC | 07:48 | |
| *** velizarx has joined #openstack-barbican | 07:54 | |
| *** Luzi has quit IRC | 08:11 | |
| *** Luzi has joined #openstack-barbican | 08:26 | |
| *** velizarx has quit IRC | 08:29 | |
| *** velizarx has joined #openstack-barbican | 08:31 | |
| *** pbourke has quit IRC | 08:36 | |
| *** pbourke has joined #openstack-barbican | 08:37 | |
| jaosorior | lxkong: well, it doesn't seem to be passing the gate :/ any idea why? | 08:52 |
| *** d063130_2 has joined #openstack-barbican | 09:44 | |
| *** sapcc-bot2 has joined #openstack-barbican | 09:44 | |
| *** d063130_ has quit IRC | 09:45 | |
| *** sapcc-bot has quit IRC | 09:45 | |
| *** jaosorior has quit IRC | 09:47 | |
| lxkong | that patch is not supposed to solve the failed test cases, it's meant to enable the job. Solving the test issue is the next step. | 10:03 |
| *** jaosorior has joined #openstack-barbican | 10:22 | |
| *** alee has joined #openstack-barbican | 10:42 | |
| *** alee has quit IRC | 10:43 | |
| *** alee has joined #openstack-barbican | 10:43 | |
| *** alee has quit IRC | 10:45 | |
| *** alee has joined #openstack-barbican | 10:45 | |
| *** velizarx has quit IRC | 10:51 | |
| *** velizarx has joined #openstack-barbican | 10:56 | |
| *** alee has quit IRC | 11:01 | |
| *** alee has joined #openstack-barbican | 11:24 | |
| *** serlex has joined #openstack-barbican | 11:49 | |
| *** ducnv has left #openstack-barbican | 11:53 | |
| *** ducnv has joined #openstack-barbican | 11:53 | |
| *** Phuongnh has joined #openstack-barbican | 11:54 | |
| *** namnh has joined #openstack-barbican | 12:01 | |
| redrobot | alee, o/ | 12:02 |
| namnh | o/ | 12:02 |
| redrobot | hi namnh! | 12:03 |
| namnh | hi redrobot :) | 12:03 |
| redrobot | I don't think Dave or Ade are around. | 12:03 |
| redrobot | #startmeeting barbican | 12:03 |
| openstack | Meeting started Tue Jul 24 12:03:36 2018 UTC and is due to finish in 60 minutes. The chair is redrobot. Information about MeetBot at http://wiki.debian.org/MeetBot. | 12:03 |
| openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 12:03 |
| *** openstack changes topic to " (Meeting topic: barbican)" | 12:03 | |
| openstack | The meeting name has been set to 'barbican' | 12:03 |
| redrobot | #topic Roll Call | 12:03 |
| *** openstack changes topic to "Roll Call (Meeting topic: barbican)" | 12:03 | |
| redrobot | o/ | 12:03 |
| namnh | o/ | 12:03 |
| redrobot | #link https://wiki.openstack.org/wiki/Meetings/Barbican | 12:04 |
| redrobot | ^ Agenda for the day | 12:04 |
| Luzi | o/ | 12:04 |
| redrobot | but it looks like nobody updated it... | 12:04 |
| redrobot | so we'll just make it up as we go | 12:05 |
| redrobot | #topic Rocky Milestone-3 | 12:06 |
| *** openstack changes topic to "Rocky Milestone-3 (Meeting topic: barbican)" | 12:06 | |
| redrobot | This week is Rocky milestone 3 week | 12:06 |
| redrobot | I know alee was mentioning we have a lot of reviews on deck | 12:07 |
| redrobot | so I will review some stuff today | 12:07 |
| redrobot | jaosorior is back from vacation so hopefully he'll have some time for reviews as well. | 12:07 |
| redrobot | #link https://releases.openstack.org/rocky/schedule.html | 12:07 |
| redrobot | Also going to look into the KMIP gate today | 12:08 |
| redrobot | If worse comes to worst, then we'll try to make it a non-voting gate for now. | 12:08 |
| redrobot | any questions about rocky-3 ? | 12:10 |
| namnh | yeah, I am trying to understand the error | 12:10 |
| namnh | but, I still don't understand the problem | 12:10 |
| namnh | :) | 12:10 |
| namnh | redrobot: do you have any idea to fix the gate? | 12:11 |
| namnh | Some of my patch sets is being blocked by the gate | 12:11 |
| namnh | s/is/are | 12:11 |
| jaosorior | Sure, let me know if there are some urgent reviews and I'll check them out | 12:11 |
| jaosorior | been a little swamped with bugs and reviews since I got back, but I'll make sure to give some time for any urgent ones here :) | 12:12 |
| jaosorior | redrobot, namnh: The kmip gate seems to have issues with the initial certificate provisioning | 12:12 |
| jaosorior | so it's not an actual barbican issue, but a setup issue | 12:13 |
| *** strigazi has quit IRC | 12:13 | |
| redrobot | thanks jaosorior! | 12:13 |
| namnh | yes, i think so | 12:13 |
| jaosorior | still gotta figure out how that setup bit works | 12:13 |
| redrobot | yeah, I have no idea how to fix the gate issue... but I haven't spent any time looking into it. | 12:13 |
| *** strigazi has joined #openstack-barbican | 12:14 | |
| redrobot | I may try to run the kmip gate locally in a VM to see if I can recreate that failure. | 12:14 |
| namnh | redrobot: we just download the local.conf in the gate and run with devstack on local, is that right? | 12:15 |
| redrobot | namnh, I _think_ so... | 12:16 |
| redrobot | it's been a while since I've set up a devstack vm | 12:16 |
| redrobot | so it should be a nice learning/refresher task for me :) | 12:16 |
| jaosorior | redrobot: here's the issue http://logs.openstack.org/71/578071/3/check/barbican-kmip-devstack-functional/41e126e/logs/devstacklog.txt.gz#_2018-07-24_02_46_31_935 | 12:17 |
| redrobot | jaosorior, thanks | 12:19 |
| redrobot | ok, moving on | 12:19 |
| redrobot | #topic Key Length Validation | 12:20 |
| *** openstack changes topic to "Key Length Validation (Meeting topic: barbican)" | 12:20 | |
| redrobot | #link https://review.openstack.org/#/c/577096/ | 12:20 |
| redrobot | alee, is asking for feedback on that review | 12:20 |
| redrobot | he is of the opinion that Barbican should/could generate keys of arbitrary length | 12:20 |
| redrobot | *symmetric keys | 12:20 |
| redrobot | I kinda think we should only support lengths that can be used with well defined algorithms. | 12:21 |
| redrobot | your opinion is wanted :) | 12:21 |
| redrobot | I think we definitely want to have a max length | 12:22 |
| redrobot | #topic Any other topics? | 12:24 |
| *** openstack changes topic to "Any other topics? (Meeting topic: barbican)" | 12:24 | |
| Luzi | I think it is necessary to define allowed lenghts | 12:24 |
| Luzi | sorry, was late | 12:24 |
| *** namnh has quit IRC | 12:24 | |
| redrobot | Luzi, no worries. Please feel free to add that to the review I linked. | 12:24 |
| Luzi | I think it's also a security issue | 12:24 |
| *** namnh has joined #openstack-barbican | 12:24 | |
| Luzi | if we allow any size, also very small lengths would be okay - and that could be used for brute force attacks | 12:25 |
| Luzi | it just would make it easier to guess the right key | 12:25 |
| Luzi | that's also why we wanted to increase the allowed bot length | 12:25 |
| Luzi | bit | 12:26 |
| *** ducnv has left #openstack-barbican | 12:30 | |
| *** ducnv has joined #openstack-barbican | 12:30 | |
| redrobot | well, if we don't have any other topics to talk about we can call it a day... | 12:30 |
| redrobot | thanks everyone for coming! Please review things if you have time! | 12:30 |
| redrobot | #endmeeting | 12:30 |
| *** openstack changes topic to "Discussion about development of OpenStack Barbican and its client libraries. - Logs: http://eavesdrop.openstack.org/irclogs/%23openstack-barbican/" | 12:30 | |
| openstack | Meeting ended Tue Jul 24 12:30:47 2018 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 12:30 |
| openstack | Minutes: http://eavesdrop.openstack.org/meetings/barbican/2018/barbican.2018-07-24-12.03.html | 12:30 |
| openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/barbican/2018/barbican.2018-07-24-12.03.txt | 12:30 |
| openstack | Log: http://eavesdrop.openstack.org/meetings/barbican/2018/barbican.2018-07-24-12.03.log.html | 12:30 |
| *** ducnv has quit IRC | 12:31 | |
| *** namnh has quit IRC | 12:31 | |
| *** velizarx has quit IRC | 12:53 | |
| *** velizarx has joined #openstack-barbican | 12:58 | |
| *** Phuongnh has quit IRC | 13:00 | |
| *** dave-mccowan has joined #openstack-barbican | 13:11 | |
| *** dave-mcc_ has joined #openstack-barbican | 13:20 | |
| *** dave-mccowan has quit IRC | 13:22 | |
| *** Luzi has quit IRC | 13:53 | |
| *** jmlowe has joined #openstack-barbican | 14:12 | |
| *** antosh has joined #openstack-barbican | 14:23 | |
| *** tidwellr has joined #openstack-barbican | 14:26 | |
| *** tidwellr has quit IRC | 14:27 | |
| *** tidwellr has joined #openstack-barbican | 14:28 | |
| *** tidwellr has quit IRC | 14:28 | |
| *** tidwellr has joined #openstack-barbican | 14:31 | |
| *** jmlowe has quit IRC | 14:41 | |
| *** tidwellr has quit IRC | 15:30 | |
| *** tidwellr has joined #openstack-barbican | 15:31 | |
| *** pcaruana has quit IRC | 15:32 | |
| *** velizarx has quit IRC | 15:53 | |
| *** serlex has quit IRC | 16:10 | |
| *** tidwellr has quit IRC | 16:56 | |
| openstackgerrit | Douglas Mendizábal proposed openstack/barbican master: Fix response status for invalid routes https://review.openstack.org/578590 | 16:59 |
| openstackgerrit | Douglas Mendizábal proposed openstack/barbican master: Remove deprecated secret decrypt https://review.openstack.org/578615 | 17:00 |
| *** tidwellr has joined #openstack-barbican | 17:35 | |
| openstackgerrit | Merged openstack/barbican master: Ensure orders policy-in-code matches controller https://review.openstack.org/575782 | 17:58 |
| openstackgerrit | Merged openstack/barbican master: Implement OVO for Barbican [4] https://review.openstack.org/528972 | 18:53 |
| *** tidwellr has quit IRC | 20:18 | |
| *** jmlowe has joined #openstack-barbican | 21:05 | |
| *** antosh has quit IRC | 21:52 | |
| lxkong | hi, anyone can take a look at https://review.openstack.org/#/c/582812/ please? Just enable vault backend job in CI. | 22:13 |
| *** antosh has joined #openstack-barbican | 22:14 | |
| *** jmlowe has quit IRC | 22:14 | |
| *** antosh has quit IRC | 23:25 | |
| *** alee has quit IRC | 23:31 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!