| *** pbourke has quit IRC | 00:08 | |
| *** pbourke has joined #openstack-barbican | 00:10 | |
| *** Kevin_Zheng has joined #openstack-barbican | 00:20 | |
| *** livelace has quit IRC | 00:30 | |
| *** livelace has joined #openstack-barbican | 00:30 | |
| *** mhen has quit IRC | 01:32 | |
| *** mhen has joined #openstack-barbican | 01:33 | |
| *** annp has joined #openstack-barbican | 01:50 | |
| *** mmethot has quit IRC | 03:41 | |
| *** ducnv has quit IRC | 03:57 | |
| *** ducnv has joined #openstack-barbican | 03:57 | |
| *** jmccrory has quit IRC | 04:09 | |
| *** jmccrory has joined #openstack-barbican | 04:13 | |
| *** mmethot has joined #openstack-barbican | 04:18 | |
| *** ade_lee has quit IRC | 04:36 | |
| *** ade_lee has joined #openstack-barbican | 04:36 | |
| *** jmlowe has quit IRC | 04:50 | |
| *** jmlowe has joined #openstack-barbican | 04:51 | |
| openstackgerrit | Merged openstack/barbican master: Skip some tests for vault plugin https://review.openstack.org/586395 | 04:54 |
|---|---|---|
| *** ade_lee has quit IRC | 05:06 | |
| *** ade_lee has joined #openstack-barbican | 06:29 | |
| *** ade_lee has quit IRC | 06:31 | |
| *** pcaruana has joined #openstack-barbican | 06:37 | |
| *** velizarx has joined #openstack-barbican | 07:04 | |
| *** Luzi has joined #openstack-barbican | 07:04 | |
| *** peereb has joined #openstack-barbican | 07:10 | |
| *** velizarx has quit IRC | 07:25 | |
| *** velizarx has joined #openstack-barbican | 07:32 | |
| *** ade_lee has joined #openstack-barbican | 08:40 | |
| *** serlex has joined #openstack-barbican | 08:47 | |
| *** salmankhan has joined #openstack-barbican | 08:54 | |
| *** jaosorior has quit IRC | 09:53 | |
| *** jaosorior has joined #openstack-barbican | 09:53 | |
| *** annp has quit IRC | 10:49 | |
| *** ducnv has quit IRC | 10:50 | |
| *** ducnv_ has joined #openstack-barbican | 10:50 | |
| *** annp has joined #openstack-barbican | 11:03 | |
| *** salmankhan has quit IRC | 11:06 | |
| *** salmankhan has joined #openstack-barbican | 11:17 | |
| *** velizarx has quit IRC | 11:30 | |
| *** velizarx has joined #openstack-barbican | 11:30 | |
| *** velizarx has quit IRC | 11:30 | |
| *** velizarx has joined #openstack-barbican | 11:32 | |
| *** raildo has joined #openstack-barbican | 11:53 | |
| *** abishop has joined #openstack-barbican | 11:58 | |
| redrobot | o/ | 12:00 |
| redrobot | ade_lee, dave-mccowan o/ | 12:00 |
| *** velizarx has quit IRC | 12:01 | |
| ade_lee | #startmeeting barbican | 12:01 |
| openstack | Meeting started Tue Jul 31 12:01:12 2018 UTC and is due to finish in 60 minutes. The chair is ade_lee. Information about MeetBot at http://wiki.debian.org/MeetBot. | 12:01 |
| openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 12:01 |
| *** openstack changes topic to " (Meeting topic: barbican)" | 12:01 | |
| openstack | The meeting name has been set to 'barbican' | 12:01 |
| ade_lee | #topic roll call | 12:01 |
| *** openstack changes topic to "roll call (Meeting topic: barbican)" | 12:01 | |
| raildo | o/ | 12:01 |
| Luzi | o/ | 12:01 |
| jaosorior | o/ | 12:02 |
| ade_lee | and redrobot is here :) | 12:02 |
| *** velizarx has joined #openstack-barbican | 12:02 | |
| * redrobot waves | 12:02 | |
| ade_lee | a minute or so more .. | 12:02 |
| redrobot | 👋 | 12:02 |
| ade_lee | welcome all -- lets get started | 12:03 |
| ade_lee | #topic rocky | 12:03 |
| *** openstack changes topic to "rocky (Meeting topic: barbican)" | 12:03 | |
| ade_lee | so last week we had the m3 release - thanks to dave-mccowan for kicking that off | 12:04 |
| ade_lee | so that means we're in the final stretches of getting stuff in for rocky | 12:04 |
| lxkong | o/ | 12:04 |
| ade_lee | there is still quite a bit to get in -- so we really need to try to get things reviewed and in | 12:05 |
| ade_lee | I've been using this to track things -- https://tinyurl.com/yctfozgh | 12:05 |
| dave-mccowan | o/ | 12:05 |
| ade_lee | dave-mccowan, hey dave-mccowan | 12:05 |
| ade_lee | the main features we're trying to get in -- | 12:06 |
| ade_lee | OVO patches .. | 12:06 |
| ade_lee | https://review.openstack.org/473658 needs some reviews | 12:06 |
| lxkong | may i ask what's OVO? | 12:06 |
| ade_lee | oslo versioned objects | 12:07 |
| lxkong | ade_lee: thanks | 12:07 |
| ade_lee | allows us to do rolling upgrades | 12:07 |
| ade_lee | and then be able to do database changes etc. more seamlessly | 12:07 |
| lxkong | cool, gotcha | 12:08 |
| ade_lee | there are also some OVO patches which I've reviewed but could use second sets of eyes etc. | 12:08 |
| ade_lee | also -- vault plugin | 12:08 |
| ade_lee | lxkong has done a great job getting the vault plugin tests to pass | 12:09 |
| lxkong | :-) | 12:09 |
| ade_lee | it would be great to be able to get all the tests passing | 12:09 |
| lxkong | we are going to use vault plugin as backend for barbican | 12:09 |
| ade_lee | and that means being able to create asymmetric keys | 12:09 |
| ade_lee | which means a change in castellan | 12:10 |
| lxkong | ade_lee: i have left comment in that patch | 12:10 |
| lxkong | after testing | 12:10 |
| ade_lee | https://review.openstack.org/575800 | 12:10 |
| ade_lee | lxkong, ack - I saw that and will try to address it today or tommorow | 12:10 |
| ade_lee | but we really need some more eyes on this .. | 12:10 |
| lxkong | awesome | 12:10 |
| ade_lee | jaosorior, dave-mccowan , redrobot ^^ | 12:10 |
| ade_lee | I had hoped to get that change in before the client lib deadline - so we may need some feature freze exception for it | 12:11 |
| ade_lee | as its a client library | 12:11 |
| ade_lee | dave-mccowan, redrobot do you know the procedure for that? | 12:12 |
| redrobot | I _think_ you just need to send a message to the ML | 12:12 |
| lxkong | ade_lee: i guess we also need to bump the castellan version dependency in barbican | 12:12 |
| redrobot | I doubt anyone will give us grief about it | 12:12 |
| dave-mccowan | ade_lee you should loop in oslo ptl, since oslo owns it now. | 12:12 |
| ade_lee | ack -- ok - well lets get it ready to merge first | 12:13 |
| ade_lee | I've been trying to test it here - https://review.openstack.org/586571 | 12:13 |
| ade_lee | so far without success - but some folks in #openstack-infra pointed me to LIBS_FROM_GIT parameter | 12:14 |
| ade_lee | so I'm going to try that .. | 12:14 |
| ade_lee | https://docs.openstack.org/devstack/latest/development.html#testing-changes-to-libraries | 12:14 |
| ade_lee | also -- we'd like to get Luzi change in .. | 12:15 |
| ade_lee | so that we have support for xts mode with a large enough bit length | 12:15 |
| ade_lee | jaosorior, redrobot -- would like some feedback from ya'll there | 12:16 |
| ade_lee | https://review.openstack.org/577096 | 12:16 |
| ade_lee | Luzi, I'll approve once you add a release note | 12:16 |
| Luzi | also, i have a question - i was trying to create arelease note, but it failed somehow... | 12:16 |
| Luzi | i used that command: tox -e venv -- reno new | 12:17 |
| ade_lee | hmm .. reno failed ? | 12:17 |
| Luzi | yep | 12:17 |
| jaosorior | logs? | 12:17 |
| Luzi | ERROR: InvocationError: could not find executable 'reno' | 12:17 |
| ade_lee | maybe you need to pip install reno ? | 12:17 |
| Luzi | well, i added a release note to another patch, a few days ago without problems | 12:18 |
| Luzi | oh well, i needed another version as it seemes | 12:19 |
| jaosorior | Luzi: reno is not part of barbican's requirements | 12:19 |
| Luzi | thank you :) | 12:19 |
| jaosorior | either you need to pip install reno in that venv | 12:19 |
| jaosorior | or install it in your host (fedora packages it :D) | 12:19 |
| Luzi | it worked now | 12:20 |
| Luzi | i add the release note after the meeting | 12:20 |
| ade_lee | jaosorior, should we add it to requirements? do other projects have it? | 12:20 |
| jaosorior | not that I know of | 12:20 |
| ade_lee | ok | 12:20 |
| ade_lee | ok - those are the biggest things we need to get in right now - I think | 12:21 |
| redrobot | maybe add it to test-requirements? | 12:21 |
| jaosorior | cool cool | 12:21 |
| ade_lee | are there any others that folks are concerned about ? | 12:21 |
| jaosorior | ade_lee: so your patch depends on Luzi's patch? | 12:21 |
| jaosorior | Luzi: thanks for the commit, by the way | 12:21 |
| raildo | ade_lee, actually, reno is a doc requirement https://github.com/openstack/keystone/blob/199e9b523878c7b0c40750e5534f14ad7bfa5bc2/doc/requirements.txt#L7 | 12:21 |
| redrobot | raildo, that makes sense | 12:22 |
| raildo | ade_lee, so, you can use the reno tool to generate the release notes later | 12:22 |
| redrobot | Luzi, the command should be tox -e docs -- reno new | 12:22 |
| ade_lee | raildo, right | 12:22 |
| ade_lee | raildo, so it should be added to docs requirements.txt? | 12:22 |
| Luzi | ah thanks redrobot - i used the command from the docu | 12:22 |
| ade_lee | which its in actually | 12:23 |
| raildo | ade_lee, yep | 12:23 |
| ade_lee | cool - so nothing to do | 12:23 |
| jaosorior | yay | 12:23 |
| ade_lee | jaosorior, I think my patch is independent of Luzi patch | 12:23 |
| ade_lee | jaosorior, why would it depend on it? | 12:24 |
| jaosorior | ade_lee: I had that notion for some reason. Anyway, might wanna talk to Lingxian Kong to see if his -1 has been addressed elsewhere | 12:24 |
| jaosorior | or if he's alright removing the -1 | 12:25 |
| ade_lee | jaosorior, nah - we should have a better unit test in castellan itself | 12:25 |
| ade_lee | jaosorior, redrobot hrybacki has a patch here -- https://review.openstack.org/575218 | 12:26 |
| ade_lee | about policy changes -- | 12:26 |
| jaosorior | funky it has a "Cannot Merge" sign | 12:26 |
| ade_lee | doc and policy in code -- might be nice to get that in - but it needs to be rebased .. | 12:26 |
| jaosorior | yeah | 12:26 |
| ade_lee | most likely | 12:26 |
| ade_lee | ok - anything else for rocky? | 12:27 |
| jaosorior | merge conflict | 12:27 |
| jaosorior | needs to be re-worked | 12:27 |
| ade_lee | ack | 12:27 |
| ade_lee | #topic barbican-specs | 12:27 |
| *** openstack changes topic to "barbican-specs (Meeting topic: barbican)" | 12:27 | |
| ade_lee | I added a new spec for folks to look at please for stein | 12:28 |
| ade_lee | https://review.openstack.org/586606 | 12:28 |
| ade_lee | not urgent , but these things do take time | 12:28 |
| ade_lee | would especially like imput from the OVO side | 12:29 |
| ade_lee | I'm also planning to add a spec for a feature that abishop asked about -- being able to transfer ownership of secrets | 12:29 |
| jaosorior | alwould be nice to get assignee(s) for that spec | 12:29 |
| ade_lee | jaosorior, indeed -- anyone please feel free to volunteer :) | 12:30 |
| jaosorior | would it be a good idea to have a listing of "open work" in the wiki or something of the sort? | 12:30 |
| ade_lee | jaosorior, well thats what we have storyboard for, right? | 12:31 |
| jaosorior | wasn't my initial impression of storyboard, but sure, I guess we could use it for that. | 12:31 |
| ade_lee | we have open stories -- which is a pretty manageable list right now | 12:31 |
| ade_lee | anyways -- if anyone has stories that are interested in -- lets start getting some specs in there. | 12:32 |
| ade_lee | stories and spec. | 12:32 |
| ade_lee | #topic anything else? | 12:33 |
| *** openstack changes topic to "anything else? (Meeting topic: barbican)" | 12:33 | |
| ade_lee | just as a note, redrobot and I are currently doing interop testing with thales and atos hsms in case anyone is interested -- using the pkcs11 plugin | 12:34 |
| ade_lee | if nothing else ... | 12:35 |
| Luzi | i would tell mhen about it, i guess he might have a few questions - but he is not here right now | 12:35 |
| ade_lee | Luzi, cool - he can ping us anytime | 12:35 |
| Luzi | that's good, thank you :) | 12:35 |
| ade_lee | ok ya'll - thanks for coming! till next week. | 12:36 |
| ade_lee | #endmeeting | 12:36 |
| *** openstack changes topic to "Discussion about development of OpenStack Barbican and its client libraries. - Logs: http://eavesdrop.openstack.org/irclogs/%23openstack-barbican/" | 12:36 | |
| openstack | Meeting ended Tue Jul 31 12:36:08 2018 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 12:36 |
| openstack | Minutes: http://eavesdrop.openstack.org/meetings/barbican/2018/barbican.2018-07-31-12.01.html | 12:36 |
| openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/barbican/2018/barbican.2018-07-31-12.01.txt | 12:36 |
| openstack | Log: http://eavesdrop.openstack.org/meetings/barbican/2018/barbican.2018-07-31-12.01.log.html | 12:36 |
| openstackgerrit | Josephine Seifert proposed openstack/barbican master: Adding support for 512-Bit-Secret-Creation when using xts-mode https://review.openstack.org/577096 | 13:12 |
| openstackgerrit | Merged openstack/barbican master: Initial the unit-tests of OVO for Barbican https://review.openstack.org/576409 | 13:33 |
| *** Luzi has quit IRC | 13:36 | |
| openstackgerrit | Ade Lee proposed openstack/barbican master: Testing - DO NOT MERGE https://review.openstack.org/586571 | 14:12 |
| *** tidwellr has joined #openstack-barbican | 14:43 | |
| *** antosh has joined #openstack-barbican | 14:44 | |
| *** FrankZhang has joined #openstack-barbican | 15:01 | |
| *** peereb has quit IRC | 15:06 | |
| *** tidwellr has quit IRC | 15:07 | |
| *** tidwellr has joined #openstack-barbican | 15:08 | |
| *** pcaruana has quit IRC | 15:10 | |
| *** velizarx has quit IRC | 15:35 | |
| openstackgerrit | Ade Lee proposed openstack/barbican master: Testing - DO NOT MERGE https://review.openstack.org/586571 | 15:35 |
| *** velizarx has joined #openstack-barbican | 15:51 | |
| *** namnh has joined #openstack-barbican | 16:03 | |
| *** zhongjun__ has quit IRC | 16:25 | |
| *** salmankhan has quit IRC | 16:37 | |
| *** velizarx has quit IRC | 16:38 | |
| *** namnh has quit IRC | 17:04 | |
| *** namnh has joined #openstack-barbican | 17:05 | |
| *** namnh has quit IRC | 17:09 | |
| *** serlex has quit IRC | 17:12 | |
| *** ade_lee has quit IRC | 17:48 | |
| *** ade_lee has joined #openstack-barbican | 17:48 | |
| *** ade_lee has quit IRC | 17:53 | |
| *** serlex has joined #openstack-barbican | 18:02 | |
| *** ade_lee has joined #openstack-barbican | 18:12 | |
| *** salmankhan has joined #openstack-barbican | 18:29 | |
| *** salmankhan has quit IRC | 18:33 | |
| *** namnh has joined #openstack-barbican | 19:05 | |
| *** namnh has quit IRC | 19:10 | |
| *** namnh has joined #openstack-barbican | 19:11 | |
| *** namnh has quit IRC | 19:16 | |
| *** namnh has joined #openstack-barbican | 20:08 | |
| *** namnh has quit IRC | 20:12 | |
| *** tidwellr has quit IRC | 20:54 | |
| *** raildo has quit IRC | 21:00 | |
| *** livelace has quit IRC | 21:03 | |
| *** livelace has joined #openstack-barbican | 21:04 | |
| *** antosh has quit IRC | 21:42 | |
| *** antosh has joined #openstack-barbican | 22:04 | |
| *** namnh has joined #openstack-barbican | 22:08 | |
| *** namnh has quit IRC | 22:13 | |
| *** FrankZhang has quit IRC | 22:20 | |
| *** ade_lee has quit IRC | 22:22 | |
| *** serlex has quit IRC | 22:32 | |
| *** namnh has joined #openstack-barbican | 22:37 | |
| *** namnh has quit IRC | 22:41 | |
| *** namnh has joined #openstack-barbican | 22:58 | |
| *** namnh has quit IRC | 23:03 | |
| *** ThomasWhite has quit IRC | 23:06 | |
| *** namnh has joined #openstack-barbican | 23:16 | |
| *** namnh has quit IRC | 23:22 | |
| johnsom | Does barbican client ignore the --os-interface setting on secret gets? | 23:27 |
| johnsom | Octavia is using the barbican client to fetch a secret, but it appears to not be honoring the "interface" we pass in. | 23:28 |
| *** antosh has quit IRC | 23:32 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!