Tuesday, 2021-09-21

mvpniteshI'm new to barbican. I've few queries on Barbican-tempest-plugin11:55
redrobotooops13:11
redrobotasleep at the wheel over here13:11
redrobot#startmeeting barbican13:11
opendevmeetMeeting started Tue Sep 21 13:11:45 2021 UTC and is due to finish in 60 minutes.  The chair is redrobot. Information about MeetBot at http://wiki.debian.org/MeetBot.13:11
opendevmeetUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.13:11
opendevmeetThe meeting name has been set to 'barbican'13:11
redrobot#topic Roll Call13:11
redrobotCourtesy ping for ade_lee dave-mccowan d34dh0r53 hrybacki jamespage Luzi lxkong mhen moguimar raildo rm_work tosky xek nearyo oleksandry13:12
Luzio/13:14
redrobotHi Luzi!13:16
redrobotLet's get started13:19
redrobotNo action items last week13:19
redrobotso we can skip those.13:19
redrobot#topic Liaison Updates13:19
redrobottosky around?13:19
redrobotI guess not, moving on13:25
redrobot#topic Yoga cycle13:25
redrobotJust a reminder that the Barbican master branch is now tracking Yoga13:25
redrobotRC1 for Xena is out, and it will likely be the final Xena release unless someone finds a showstopper bug13:26
redrobot#topic Kanban Review13:27
redrobot#link https://tree.taiga.io/project/dmend-openstack-barbican/kanban13:27
redrobotSorry, had to get logged in13:30
redrobotThe Vault encoding issue is now fixed! :D13:30
redrobot#link https://tree.taiga.io/project/dmend-openstack-barbican/us/16?kanban-status=209251913:30
redrobotAnd now I'm back to working on the Microversions patches for Yoga13:32
redrobotmoving on ...13:32
redrobot#topic Bug Review13:32
redrobot#link https://storyboard.openstack.org/#!/project_group/barbican13:32
redrobotLooks like we do have a new bug in Barbican13:33
redrobot#link https://storyboard.openstack.org/#!/story/200923613:33
redrobot> Barbican keystone listener functionality broken when it uses different messaging queues for RPC and oslo_message_notification13:33
mvpniteshhi Doglus, i had found out this issue. Can it be fixed for Xena ?13:33
redrobotmvpnitesh typically we fix bugs on the master branch and then backport the fixes to stable branches after that.13:35
mvpniteshokay13:35
redrobotmvpnitesh I don't currently have the bandwith to work on this bug, but if you want to work on a patch, I should be able to review it.13:36
mvpniteshokay Doglus, i'll give a try13:36
redrobot#link https://bugs.launchpad.net/castellan/+bugs?orderby=-id&start=013:40
redrobotLooks like no new Castellan bugs13:40
redrobot#link https://bugs.launchpad.net/cursive/+bugs?orderby=-id&start=013:40
redrobotAnd also no new Cursive bugs13:40
redrobot#topic Open Discussion13:40
redrobotAnything else y'all want to talk about?13:40
mvpniteshi have couple of queries13:41
redrobotmvpnitesh sure, what's up?13:41
mvpniteshWill tpm be supported by Barbican to store the secrets13:41
mvpniteshis it in pipe line ?13:41
redrobotSome work for TPM support has been done in the past.  There may be some old OpenStack Summit videos of presentations that were given on that topic.  Howver, the folks who wrote that proof-of-concept did not contribute the code back into Barbican.13:42
redrobotWe don't currently have it on our roadmap, but we are certainly open to reviewing and merging patches that  implement TPM support.13:43
mvpniteshok13:43
redrobotThe first step would be to write a spec with some design details13:43
redrobot#link https://opendev.org/openstack/barbican-specs13:44
mvpniteshokay. If need by my company will try to start with a Spec13:44
redrobotgreat.13:44
redrobotwhat else did you want to talk about, mvpnitesh?13:44
mvpniteshabout the tempest plugin, i'm using tempest 25 and trying to run barbican-tempest-plugin. I'm ending up in this error @ https://paste.openstack.org/show/809460/13:45
tosky(abusing this open discussion time to say there are no updates from me, sorry)13:45
redrobotthanks for the update, tosky :)13:46
redrobotmvpnitesh that is strange, I've been doing a lot of work on those RBAC tests, and have not run into that issue13:47
redrobotmvpnitesh are you able to share your tempest config?13:47
toskymvpnitesh: you should use a newer tempest13:47
toskyor an older barbican-tempest-plugin13:47
redrobottosky++13:47
toskyboth are branchless, so they should either be used from the last commit of the master branch, or you need to pin both to a specific tag, depending on the support for each openstack release13:48
mvpniteshactually we are stuck to use tempest 25  and some version of barbican-tempest-plugin13:49
mvpniteshtempest.conf @ https://paste.openstack.org/show/809466/13:49
toskywhich version of barbican-tempest-plugin? Probably too new13:49
toskywith tempest 25 you probably can use at most barbican-tempest-plugin 1.1.013:50
toskythe newer code contains RBAC testing which requires a newer tempest13:50
toskyso please make sure to pin barbican-tempest-plugin to 1.1.013:50
mvpniteshi'm not sure about this barbican-tempest-plugin what we are picking. Will check and get back to you13:50
toskyI would also check whether you can move to a newer tempest as well - but that depends also on the openstack version you use13:51
toskywhich you may have mentioned, I need to recheck the backlog13:51
mvpniteshi'm using Openstack Victoria ?13:51
mvpniteshcan you guys tell me how i've to check the barbican-tempest-plugin13:52
toskyit depends on how you installed it13:52
toskythe same why you checked the version of tempest13:53
toskyif it's installed from some vendor packages, check the packages version13:53
redrobotif it's installed from git you can just git checkout 1.1.0 https://opendev.org/openstack/barbican-tempest-plugin/src/tag/1.1.013:53
toskyif it's installed through pip, check with pip list/pip show13:53
toskyand if you installe from git with pip but without the -e option, you need to uninstall and reinstall it13:54
toskybut again a good part of the answer depends on your setup13:54
redrobotpip install barbican-tempest-plugin==1.1.013:54
mvpniteshwe are using a private repo13:55
mvpnitesh~/Data/barbican-tempest-plugin (master) $ git branch * master  enitmvp@IN-00252509 MINGW64 ~/Data/barbican-tempest-plugin (master) $ git tag 0.1.0 0.2.0 0.3.0 1.0.0 1.1.0 1.2.0 1.2.1 1.3.0 1.5.0 stein-last13:55
redrobotyeah, git checkout 1.1.0 after you clone should do the trick13:56
mvpniteshi did git clone of my private repo for this , can i know which is the upstream version that it is13:56
mvpniteshok Doglus, i'll give a try13:56
redrobotWe're just about out of time13:57
redrobotany last minute questions or comments?13:57
mvpniteshi'm using the master barbican-tempest-plugin13:59
mvpniteshgot to know that from the git log13:59
mvpniteshAuthor: Douglas Mendizábal <dmendiza@redhat.com> Date:   Wed Sep 1 20:35:45 2021 +0000      Add secure-rbac tests for Quotas across projects      This patch refactors some test for Quotas and adds tests for     checking quotas for different projects than the one the persona     is authenticated as.      Change-Id: Iff17a51d6d23f99376119249c046a84cdfc438e013:59
mvpniteshso i'll try to git checkout 1.1.0 and try it out13:59
redrobotawesome mvpnitesh, glad we could help13:59
redrobot(and glad tosky is a tempest pro!)13:59
toskynaaah13:59
redrobotThanks for joining, everyone!14:00
redrobot#endmeeting14:00
opendevmeetMeeting ended Tue Sep 21 14:00:09 2021 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)14:00
opendevmeetMinutes:        https://meetings.opendev.org/meetings/barbican/2021/barbican.2021-09-21-13.11.html14:00
opendevmeetMinutes (text): https://meetings.opendev.org/meetings/barbican/2021/barbican.2021-09-21-13.11.txt14:00
opendevmeetLog:            https://meetings.opendev.org/meetings/barbican/2021/barbican.2021-09-21-13.11.log.html14:00
mvpniteshthank you guys.14:00

Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!