| opendevreview | Lingxian Kong proposed openstack/castellan master: Support setting Vault kv version config https://review.opendev.org/c/openstack/castellan/+/807664 | 03:18 |
|---|---|---|
| redrobot | #startmeeting barbican | 13:00 |
| opendevmeet | Meeting started Tue Sep 7 13:00:15 2021 UTC and is due to finish in 60 minutes. The chair is redrobot. Information about MeetBot at http://wiki.debian.org/MeetBot. | 13:00 |
| opendevmeet | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 13:00 |
| opendevmeet | The meeting name has been set to 'barbican' | 13:00 |
| redrobot | #topic Roll Call | 13:00 |
| redrobot | Courtesy ping for ade_lee dave-mccowan d34dh0r53 hrybacki jamespage Luzi lxkong mhen moguimar raildo rm_work tosky xek nearyo oleksandry | 13:00 |
| tosky | hi (but no news really) | 13:02 |
| redrobot | Hi tosky! | 13:02 |
| redrobot | #topic Liaison Updates | 13:02 |
| redrobot | No news from Tosky | 13:02 |
| redrobot | Also no news from me. (I've been trying to keep an eye out for Oslo news) | 13:02 |
| tosky | oh, maybe a technical question (but for later) | 13:03 |
| redrobot | #topic Open Discussion | 13:03 |
| redrobot | :D | 13:03 |
| redrobot | tosky what's up? | 13:04 |
| tosky | so | 13:06 |
| tosky | I was looking for a way to test encryption with a different key size | 13:07 |
| tosky | I was hoping to find a configuration key which would have just switched all key sizes for all tests | 13:07 |
| tosky | there is none in tempest (buu), so that's a problem, ok | 13:07 |
| tosky | then I've checked barbican-tempest-plugin | 13:07 |
| tosky | and there seems to be a configuration key here: https://opendev.org/openstack/barbican-tempest-plugin/src/branch/master/barbican_tempest_plugin/config.py | 13:07 |
| tosky | key_size (and cypher), BUT it seems it's only relevant for the Ephemeral storage encryption test | 13:08 |
| tosky | added here back in the days: https://opendev.org/openstack/barbican-tempest-plugin/commit/ab903f340b10446257ce33ab36151d8849f9792e | 13:08 |
| tosky | now... I'm not even sure the test itself uses that configuration options (neither key_size nor cypher!) | 13:09 |
| tosky | https://opendev.org/openstack/barbican-tempest-plugin/src/branch/master/barbican_tempest_plugin/tests/scenario/test_ephemeral_disk_encryption.py | 13:09 |
| tosky | so I'm puzzled | 13:09 |
| tosky | I guess such a key could be added (maybe even in tempest, now that we have a stable scenario manager) and used all around for any test which creates an encyrpted volume? | 13:10 |
| redrobot | I'll have to dig into the tempest-plugin code, but I would not be surprised to see those options not used | 13:11 |
| redrobot | Yeah, looks like we're not using that at all | 13:13 |
| redrobot | that same commit added this create_keypair function https://opendev.org/openstack/barbican-tempest-plugin/src/branch/master/barbican_tempest_plugin/tests/scenario/manager.py#L101-L108 | 13:13 |
| redrobot | tosky we can certainly change anything needed to get these options working | 13:13 |
| tosky | okidoki, it would be very useful to be able to change the key size globally without having to rewrite custom tests | 13:19 |
| redrobot | for sure | 13:19 |
| redrobot | #help we need to update the tempest plugin to actually use the key size option | 13:20 |
| redrobot | #topic Bug Review | 13:20 |
| redrobot | I did add a new bug report last week: | 13:21 |
| redrobot | #link https://storyboard.openstack.org/#!/story/2009170 | 13:21 |
| redrobot | in a nutshell, Barbican returns 500 errors when you turn on scope enforcement | 13:21 |
| redrobot | for some APIs | 13:21 |
| redrobot | I'm currently working on getting that sorted out. | 13:22 |
| redrobot | That's all I have for today | 13:24 |
| redrobot | thanks for joining tosky! | 13:24 |
| redrobot | #endmeeting | 13:24 |
| opendevmeet | Meeting ended Tue Sep 7 13:24:32 2021 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 13:24 |
| opendevmeet | Minutes: https://meetings.opendev.org/meetings/barbican/2021/barbican.2021-09-07-13.00.html | 13:24 |
| opendevmeet | Minutes (text): https://meetings.opendev.org/meetings/barbican/2021/barbican.2021-09-07-13.00.txt | 13:24 |
| opendevmeet | Log: https://meetings.opendev.org/meetings/barbican/2021/barbican.2021-09-07-13.00.log.html | 13:24 |
Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!