| *** tosky has quit IRC | 00:26 | |
| openstackgerrit | Zihao Wang proposed openstack/barbican-tempest-plugin master: Remove six https://review.opendev.org/761051 | 05:43 |
|---|---|---|
| *** Luzi has joined #openstack-barbican | 07:45 | |
| *** tosky has joined #openstack-barbican | 08:40 | |
| *** d34dh0r53 has quit IRC | 10:50 | |
| *** Luzi has quit IRC | 10:55 | |
| *** raildo has joined #openstack-barbican | 12:25 | |
| *** Luzi has joined #openstack-barbican | 12:56 | |
| redrobot | #startmeeting barbican | 13:00 |
| openstack | Meeting started Tue Nov 3 13:00:21 2020 UTC and is due to finish in 60 minutes. The chair is redrobot. Information about MeetBot at http://wiki.debian.org/MeetBot. | 13:00 |
| openstack | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 13:00 |
| *** openstack changes topic to " (Meeting topic: barbican)" | 13:00 | |
| openstack | The meeting name has been set to 'barbican' | 13:00 |
| redrobot | #topic Roll Call | 13:00 |
| *** openstack changes topic to "Roll Call (Meeting topic: barbican)" | 13:00 | |
| redrobot | Courtesy ping for ade_lee dave-mccowan hrybacki jamespage Luzi lxkong mhen moguimar raildo rm_work xek nearyo | 13:00 |
| noonedeadpunk | o/ | 13:00 |
| redrobot | hi noonedeadpunk! | 13:00 |
| moguimar | o/ | 13:01 |
| raildo | o/ | 13:01 |
| redrobot | As usual our agenda can be found here: | 13:02 |
| redrobot | #link https://etherpad.opendev.org/p/barbican-weekly-meeting | 13:02 |
| redrobot | OK, let's get started | 13:02 |
| redrobot | #topic Previous Meeting Action Items | 13:02 |
| *** openstack changes topic to "Previous Meeting Action Items (Meeting topic: barbican)" | 13:02 | |
| redrobot | #link http://eavesdrop.openstack.org/meetings/barbican/2020/barbican.2020-10-20-13.00.html | 13:02 |
| redrobot | There was only one action item for me to check the stable branch health | 13:03 |
| redrobot | And I did do it! :D | 13:03 |
| redrobot | Actually a few brances are still failing | 13:03 |
| redrobot | but at least T, U, V, are all green now | 13:04 |
| redrobot | unfortunately dave-mccowna has not been around | 13:04 |
| redrobot | and he's the only one on our team with merge privileges on stable/* | 13:04 |
| redrobot | I've been poking at the folks in #openstack-stable to get myself added | 13:04 |
| redrobot | or get them to +2 the dozen or so patches that I've put up | 13:05 |
| redrobot | but haven't really gotten any traction with them -___- | 13:05 |
| redrobot | I think maybe they were busy with PTG stuff last week | 13:05 |
| redrobot | so I'll try again this week | 13:05 |
| Luzi | o/ | 13:06 |
| redrobot | hi Luzi! | 13:06 |
| redrobot | #action redrobot to keep pestering the stable team to get backports merged or get added to the stable team | 13:06 |
| redrobot | OK, moving on | 13:06 |
| redrobot | #topic Liaison Updates | 13:07 |
| *** openstack changes topic to "Liaison Updates (Meeting topic: barbican)" | 13:07 | |
| redrobot | moguimar, any Oslo news? | 13:07 |
| moguimar | kinda | 13:07 |
| moguimar | we didn't have a meeting yesterday | 13:07 |
| moguimar | I haven't poked people around about that yet | 13:07 |
| moguimar | meeting time was suposed to overlap our ninja meeting | 13:07 |
| moguimar | due to DST changes | 13:08 |
| redrobot | Ah, gotcha | 13:08 |
| moguimar | but we have the oslo.utils out already | 13:08 |
| redrobot | That's awesome | 13:08 |
| moguimar | the new one with md5 | 13:08 |
| redrobot | pretty cool, thanks moguimar | 13:09 |
| redrobot | tosky, around? | 13:09 |
| tosky | hi! | 13:09 |
| tosky | oh, no more summer time | 13:10 |
| redrobot | hi tosky! | 13:10 |
| redrobot | yeah, back to the sad winter hours :( | 13:10 |
| * redrobot does not like early sunsets | 13:10 | |
| tosky | no updates; we discussed a bit about the remaining testing issues during the PTG (grenade), and that's it for now | 13:10 |
| redrobot | tosky, awesome, thank you! | 13:10 |
| redrobot | #topic Kanban Review https://tree.taiga.io/project/dmend-openstack-barbican/kanban | 13:11 |
| *** openstack changes topic to "Kanban Review https://tree.taiga.io/project/dmend-openstack-barbican/kanban (Meeting topic: barbican)" | 13:11 | |
| redrobot | #link https://tree.taiga.io/project/dmend-openstack-barbican/kanban | 13:11 |
| redrobot | Looks like someone added all our PTG tasks to the board :-O | 13:11 |
| redrobot | I'm going to guess that was moguimar :D | 13:11 |
| moguimar | nope | 13:11 |
| redrobot | or maybe that's just the leftovers from last last PTG? | 13:12 |
| * redrobot is still waiting for coffee to kick in | 13:12 | |
| moguimar | haven't opened that board in more than a month | 13:12 |
| redrobot | Hmmm... | 13:12 |
| redrobot | I must be just losing my mind then | 13:12 |
| * moguimar feels ashamed in the shadows | 13:12 | |
| noonedeadpunk | I'm wondering if https://tree.taiga.io/project/dmend-openstack-barbican/us/3?kanban-status=2092516 is the same thing I'm struggling with | 13:12 |
| redrobot | looks like they didn't get the memo that we use storyboard instead of launchpad | 13:13 |
| redrobot | it's a client bug | 13:13 |
| redrobot | #link https://bugs.launchpad.net/ubuntu/+source/python-barbicanclient/+bug/1840162 | 13:13 |
| openstack | Launchpad bug 1840162 in python-barbicanclient (Ubuntu) "Unicode compate for payload_content_type" [Undecided,New] - Assigned to XueFeng Liu (jonnary-liu) | 13:13 |
| noonedeadpunk | Ah, yeah... | 13:13 |
| noonedeadpunk | But still, it might be that cinder puts non base64 encoded content.... | 13:14 |
| noonedeadpunk | As I was just looking from the other side | 13:14 |
| redrobot | I'll add a topic to the agenda for your issue noonedeadpunk | 13:15 |
| redrobot | moguimar, any HVAC updates? | 13:16 |
| moguimar | none | 13:16 |
| redrobot | raildo, any policy updates? | 13:16 |
| raildo | redrobot, nothing besides what we discussed during the PTG | 13:17 |
| redrobot | cool | 13:17 |
| raildo | redrobot, maybe, would be nice to push some of those topics for the kanban? | 13:17 |
| redrobot | raildo, yeah, I still need to see what we're missing from PTG on the Kanban board | 13:17 |
| raildo | like, the json format deprecation, remove any hard coded admin check... | 13:17 |
| moguimar | that sounds like a good idea | 13:17 |
| redrobot | #action redrobot to update the kanban board | 13:17 |
| redrobot | raildo, feel free to add tasks | 13:18 |
| raildo | ack | 13:18 |
| redrobot | #topic PTG recap | 13:19 |
| *** openstack changes topic to "PTG recap (Meeting topic: barbican)" | 13:19 | |
| redrobot | #link https://etherpad.opendev.org/p/wallaby-ptg-barbican | 13:19 |
| redrobot | ^^ is the etherpad from the PTG | 13:19 |
| redrobot | there was not much new in the way of features | 13:19 |
| redrobot | many thanks to everyone who joined | 13:20 |
| redrobot | I'll give y'all a couple of minutes to scan the PTG etherpad for anything we need to discuss further today ... | 13:21 |
| redrobot | Any questions/comments on PTG topics? | 13:23 |
| redrobot | Seems like a no ... let's move on | 13:24 |
| redrobot | #topic Unicode Errors in Vault | 13:24 |
| *** openstack changes topic to "Unicode Errors in Vault (Meeting topic: barbican)" | 13:24 | |
| redrobot | #link https://review.opendev.org/#/c/759067/ | 13:24 |
| redrobot | noonedeadpunk, your topic :) | 13:24 |
| noonedeadpunk | yeah, I know this is damn bad fix but I really not sure about better way. | 13:25 |
| noonedeadpunk | it seems that oslo does right thing as we're passing non encoded strig to get decoded | 13:25 |
| noonedeadpunk | but from other side I really dunno why it's not encoded, as when I create a secret with barbican api it's ok | 13:26 |
| noonedeadpunk | but when cinder does it - it's not | 13:26 |
| redrobot | How are you storing things in barbican? Is it Cinder->Castellan->barbicanclient->Barbican->Vault? | 13:27 |
| noonedeadpunk | and what's interesting store_secret doesn't get executed https://opendev.org/openstack/barbican/src/branch/master/barbican/plugin/resources.py#L67 | 13:27 |
| noonedeadpunk | I think it is | 13:27 |
| noonedeadpunk | except between barbican and vault is castellan again? | 13:28 |
| redrobot | Ugh that's right | 13:28 |
| * redrobot is not a fan of that castellan+vault rube goldberg machine | 13:28 | |
| redrobot | What does the secret look like coming from cinder? Byte string? Base64 encoded? | 13:28 |
| redrobot | or I guess, can you point me to the cinder side code? | 13:29 |
| redrobot | I can maybe trace through that after the meeting | 13:29 |
| noonedeadpunk | I think in my case it's https://opendev.org/openstack/cinder/src/branch/master/cinder/volume/drivers/rbd.py#L898 | 13:31 |
| tosky | is this issue visible from some (high-level) test? | 13:31 |
| redrobot | cool, I'll ping you when I have more questions noonedeadpunk | 13:33 |
| redrobot | hopefully we can get y'all sorted out | 13:33 |
| noonedeadpunk | tosky: I guess not at the moment. I saw it only when I linked cinder to barbican, so it should be some integration test only | 13:34 |
| redrobot | tosky, may be something we can add to our tempest tests | 13:34 |
| redrobot | we may need a different gate that configures Hashicorp Vault though | 13:34 |
| tosky | is it a matter of setting it up a specific barbican backend? | 13:34 |
| noonedeadpunk | oh, well, and barbican to vault... | 13:34 |
| tosky | I see, that | 13:34 |
| tosky | specific environment | 13:34 |
| noonedeadpunk | because cinder-barbican is working nicely until vault key store is configured | 13:35 |
| redrobot | #action redrobot to work with noonedeadpunk to fix the Cinder+Vault issue | 13:35 |
| noonedeadpunk | redrobot: yeah, thanks a lot. I'm not sure if we will be using that in prod at the end of the day but feels that worth fixing anyway | 13:36 |
| moguimar | I'm not sure how that helps, but in my demos of castellan I can use docker compose to bring vault up | 13:36 |
| moguimar | and I think castellan CI uses pifpaf | 13:36 |
| noonedeadpunk | well, if I use CInder - Castellan - vault (without barbican in the middle) it works perfectly as well | 13:37 |
| redrobot | gotcha | 13:38 |
| redrobot | so it's something in barbican->Vault | 13:38 |
| noonedeadpunk | and what I do not understand, is how this method got omited when key is created by cinder https://opendev.org/openstack/barbican/src/branch/master/barbican/plugin/resources.py#L67 | 13:39 |
| noonedeadpunk | but it executes when I create secret manually in barbican | 13:39 |
| redrobot | Yeah, that's really weird | 13:41 |
| redrobot | OK, let's move on | 13:44 |
| redrobot | #topic Bug Review | 13:44 |
| *** openstack changes topic to "Bug Review (Meeting topic: barbican)" | 13:44 | |
| redrobot | #link https://storyboard.openstack.org/#!/project_group/barbican | 13:44 |
| redrobot | Looks like we have one new bug | 13:45 |
| redrobot | #link https://storyboard.openstack.org/#!/story/2008259 | 13:45 |
| redrobot | But it looks like it'snot valid | 13:45 |
| redrobot | as we do not have a working Train Barbican-UI | 13:46 |
| redrobot | #link https://bugs.launchpad.net/castellan/+bugs?orderby=-id&start=0 | 13:47 |
| redrobot | and no new bugs in Castellan | 13:47 |
| redrobot | Moving on ... | 13:47 |
| redrobot | #topic Wayward Reviews | 13:47 |
| *** openstack changes topic to "Wayward Reviews (Meeting topic: barbican)" | 13:47 | |
| redrobot | #link https://tinyurl.com/y3ydwmkl | 13:48 |
| redrobot | Looks like the no-feedback top 3 are all failing the gates | 13:48 |
| moguimar | redrobot++ and ade_lee++ for cleaning the review dashboard a lot during the PTG | 13:50 |
| redrobot | :D | 13:50 |
| redrobot | I think that's all for today, folks! | 13:52 |
| redrobot | see y'all online! | 13:52 |
| redrobot | #endmeeting | 13:52 |
| *** openstack changes topic to "OpenStack Barbican Development - Weekly Meeting Agenda: https://etherpad.openstack.org/p/barbican-weekly-meeting" | 13:52 | |
| openstack | Meeting ended Tue Nov 3 13:52:16 2020 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 13:52 |
| openstack | Minutes: http://eavesdrop.openstack.org/meetings/barbican/2020/barbican.2020-11-03-13.00.html | 13:52 |
| openstack | Minutes (text): http://eavesdrop.openstack.org/meetings/barbican/2020/barbican.2020-11-03-13.00.txt | 13:52 |
| openstack | Log: http://eavesdrop.openstack.org/meetings/barbican/2020/barbican.2020-11-03-13.00.log.html | 13:52 |
| *** d34dh0r53 has joined #openstack-barbican | 14:10 | |
| openstackgerrit | Dmitriy Rabotyagov (noonedeadpunk) proposed openstack/barbican master: Fix translation for vault https://review.opendev.org/759067 | 14:52 |
| *** andrewbogott has quit IRC | 14:54 | |
| *** andrewbogott has joined #openstack-barbican | 14:55 | |
| *** Luzi has quit IRC | 15:10 | |
| *** dwilde has joined #openstack-barbican | 16:22 | |
| *** d34dh0r53 has quit IRC | 16:24 | |
| *** dwilde has quit IRC | 16:24 | |
| *** d34dh0r53 has joined #openstack-barbican | 16:24 | |
| *** dave-mccowan has joined #openstack-barbican | 17:17 | |
| openstackgerrit | Ade Lee proposed openstack/barbican master: DNM: testing FIPS gate job https://review.opendev.org/760665 | 17:26 |
| *** tosky has quit IRC | 17:57 | |
| *** dwilde has joined #openstack-barbican | 18:05 | |
| *** d34dh0r53 has quit IRC | 18:05 | |
| openstackgerrit | Ade Lee proposed openstack/barbican master: DNM: testing FIPS gate job https://review.opendev.org/760665 | 18:19 |
| openstackgerrit | Moisés Guimarães proposed openstack/barbican master: Fix translation for vault https://review.opendev.org/759067 | 19:46 |
| *** tosky has joined #openstack-barbican | 20:27 | |
| *** jmlowe has quit IRC | 20:36 | |
| *** jmlowe has joined #openstack-barbican | 20:38 | |
| *** raildo has quit IRC | 21:35 | |
| openstackgerrit | Merged openstack/barbican stable/victoria: Update .gitreview for stable/victoria https://review.opendev.org/754819 | 22:45 |
| openstackgerrit | Merged openstack/barbican stable/victoria: Update TOX_CONSTRAINTS_FILE for stable/victoria https://review.opendev.org/754820 | 22:55 |
| openstackgerrit | Merged openstack/barbican stable/ussuri: Update .gitreview for stable/ussuri https://review.opendev.org/722953 | 22:55 |
| *** tkajinam has joined #openstack-barbican | 22:59 | |
| *** tosky has quit IRC | 23:01 | |
| openstackgerrit | Merged openstack/barbican stable/victoria: Use serial number or label for PKCS#11 tokens https://review.opendev.org/760965 | 23:39 |
| openstackgerrit | Merged openstack/barbican stable/train: Fix stable/train gates https://review.opendev.org/760447 | 23:52 |
| openstackgerrit | Merged openstack/barbican stable/stein: Fix stable/stein gates https://review.opendev.org/760546 | 23:52 |
Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!