mvpnitesh | I'm new to barbican. I've few queries on Barbican-tempest-plugin | 11:55 |
---|---|---|
redrobot | ooops | 13:11 |
redrobot | asleep at the wheel over here | 13:11 |
redrobot | #startmeeting barbican | 13:11 |
opendevmeet | Meeting started Tue Sep 21 13:11:45 2021 UTC and is due to finish in 60 minutes. The chair is redrobot. Information about MeetBot at http://wiki.debian.org/MeetBot. | 13:11 |
opendevmeet | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 13:11 |
opendevmeet | The meeting name has been set to 'barbican' | 13:11 |
redrobot | #topic Roll Call | 13:11 |
redrobot | Courtesy ping for ade_lee dave-mccowan d34dh0r53 hrybacki jamespage Luzi lxkong mhen moguimar raildo rm_work tosky xek nearyo oleksandry | 13:12 |
Luzi | o/ | 13:14 |
redrobot | Hi Luzi! | 13:16 |
redrobot | Let's get started | 13:19 |
redrobot | No action items last week | 13:19 |
redrobot | so we can skip those. | 13:19 |
redrobot | #topic Liaison Updates | 13:19 |
redrobot | tosky around? | 13:19 |
redrobot | I guess not, moving on | 13:25 |
redrobot | #topic Yoga cycle | 13:25 |
redrobot | Just a reminder that the Barbican master branch is now tracking Yoga | 13:25 |
redrobot | RC1 for Xena is out, and it will likely be the final Xena release unless someone finds a showstopper bug | 13:26 |
redrobot | #topic Kanban Review | 13:27 |
redrobot | #link https://tree.taiga.io/project/dmend-openstack-barbican/kanban | 13:27 |
redrobot | Sorry, had to get logged in | 13:30 |
redrobot | The Vault encoding issue is now fixed! :D | 13:30 |
redrobot | #link https://tree.taiga.io/project/dmend-openstack-barbican/us/16?kanban-status=2092519 | 13:30 |
redrobot | And now I'm back to working on the Microversions patches for Yoga | 13:32 |
redrobot | moving on ... | 13:32 |
redrobot | #topic Bug Review | 13:32 |
redrobot | #link https://storyboard.openstack.org/#!/project_group/barbican | 13:32 |
redrobot | Looks like we do have a new bug in Barbican | 13:33 |
redrobot | #link https://storyboard.openstack.org/#!/story/2009236 | 13:33 |
redrobot | > Barbican keystone listener functionality broken when it uses different messaging queues for RPC and oslo_message_notification | 13:33 |
mvpnitesh | hi Doglus, i had found out this issue. Can it be fixed for Xena ? | 13:33 |
redrobot | mvpnitesh typically we fix bugs on the master branch and then backport the fixes to stable branches after that. | 13:35 |
mvpnitesh | okay | 13:35 |
redrobot | mvpnitesh I don't currently have the bandwith to work on this bug, but if you want to work on a patch, I should be able to review it. | 13:36 |
mvpnitesh | okay Doglus, i'll give a try | 13:36 |
redrobot | #link https://bugs.launchpad.net/castellan/+bugs?orderby=-id&start=0 | 13:40 |
redrobot | Looks like no new Castellan bugs | 13:40 |
redrobot | #link https://bugs.launchpad.net/cursive/+bugs?orderby=-id&start=0 | 13:40 |
redrobot | And also no new Cursive bugs | 13:40 |
redrobot | #topic Open Discussion | 13:40 |
redrobot | Anything else y'all want to talk about? | 13:40 |
mvpnitesh | i have couple of queries | 13:41 |
redrobot | mvpnitesh sure, what's up? | 13:41 |
mvpnitesh | Will tpm be supported by Barbican to store the secrets | 13:41 |
mvpnitesh | is it in pipe line ? | 13:41 |
redrobot | Some work for TPM support has been done in the past. There may be some old OpenStack Summit videos of presentations that were given on that topic. Howver, the folks who wrote that proof-of-concept did not contribute the code back into Barbican. | 13:42 |
redrobot | We don't currently have it on our roadmap, but we are certainly open to reviewing and merging patches that implement TPM support. | 13:43 |
mvpnitesh | ok | 13:43 |
redrobot | The first step would be to write a spec with some design details | 13:43 |
redrobot | #link https://opendev.org/openstack/barbican-specs | 13:44 |
mvpnitesh | okay. If need by my company will try to start with a Spec | 13:44 |
redrobot | great. | 13:44 |
redrobot | what else did you want to talk about, mvpnitesh? | 13:44 |
mvpnitesh | about the tempest plugin, i'm using tempest 25 and trying to run barbican-tempest-plugin. I'm ending up in this error @ https://paste.openstack.org/show/809460/ | 13:45 |
tosky | (abusing this open discussion time to say there are no updates from me, sorry) | 13:45 |
redrobot | thanks for the update, tosky :) | 13:46 |
redrobot | mvpnitesh that is strange, I've been doing a lot of work on those RBAC tests, and have not run into that issue | 13:47 |
redrobot | mvpnitesh are you able to share your tempest config? | 13:47 |
tosky | mvpnitesh: you should use a newer tempest | 13:47 |
tosky | or an older barbican-tempest-plugin | 13:47 |
redrobot | tosky++ | 13:47 |
tosky | both are branchless, so they should either be used from the last commit of the master branch, or you need to pin both to a specific tag, depending on the support for each openstack release | 13:48 |
mvpnitesh | actually we are stuck to use tempest 25 and some version of barbican-tempest-plugin | 13:49 |
mvpnitesh | tempest.conf @ https://paste.openstack.org/show/809466/ | 13:49 |
tosky | which version of barbican-tempest-plugin? Probably too new | 13:49 |
tosky | with tempest 25 you probably can use at most barbican-tempest-plugin 1.1.0 | 13:50 |
tosky | the newer code contains RBAC testing which requires a newer tempest | 13:50 |
tosky | so please make sure to pin barbican-tempest-plugin to 1.1.0 | 13:50 |
mvpnitesh | i'm not sure about this barbican-tempest-plugin what we are picking. Will check and get back to you | 13:50 |
tosky | I would also check whether you can move to a newer tempest as well - but that depends also on the openstack version you use | 13:51 |
tosky | which you may have mentioned, I need to recheck the backlog | 13:51 |
mvpnitesh | i'm using Openstack Victoria ? | 13:51 |
mvpnitesh | can you guys tell me how i've to check the barbican-tempest-plugin | 13:52 |
tosky | it depends on how you installed it | 13:52 |
tosky | the same why you checked the version of tempest | 13:53 |
tosky | if it's installed from some vendor packages, check the packages version | 13:53 |
redrobot | if it's installed from git you can just git checkout 1.1.0 https://opendev.org/openstack/barbican-tempest-plugin/src/tag/1.1.0 | 13:53 |
tosky | if it's installed through pip, check with pip list/pip show | 13:53 |
tosky | and if you installe from git with pip but without the -e option, you need to uninstall and reinstall it | 13:54 |
tosky | but again a good part of the answer depends on your setup | 13:54 |
redrobot | pip install barbican-tempest-plugin==1.1.0 | 13:54 |
mvpnitesh | we are using a private repo | 13:55 |
mvpnitesh | ~/Data/barbican-tempest-plugin (master) $ git branch * master enitmvp@IN-00252509 MINGW64 ~/Data/barbican-tempest-plugin (master) $ git tag 0.1.0 0.2.0 0.3.0 1.0.0 1.1.0 1.2.0 1.2.1 1.3.0 1.5.0 stein-last | 13:55 |
redrobot | yeah, git checkout 1.1.0 after you clone should do the trick | 13:56 |
mvpnitesh | i did git clone of my private repo for this , can i know which is the upstream version that it is | 13:56 |
mvpnitesh | ok Doglus, i'll give a try | 13:56 |
redrobot | We're just about out of time | 13:57 |
redrobot | any last minute questions or comments? | 13:57 |
mvpnitesh | i'm using the master barbican-tempest-plugin | 13:59 |
mvpnitesh | got to know that from the git log | 13:59 |
mvpnitesh | Author: Douglas Mendizábal <dmendiza@redhat.com> Date: Wed Sep 1 20:35:45 2021 +0000 Add secure-rbac tests for Quotas across projects This patch refactors some test for Quotas and adds tests for checking quotas for different projects than the one the persona is authenticated as. Change-Id: Iff17a51d6d23f99376119249c046a84cdfc438e0 | 13:59 |
mvpnitesh | so i'll try to git checkout 1.1.0 and try it out | 13:59 |
redrobot | awesome mvpnitesh, glad we could help | 13:59 |
redrobot | (and glad tosky is a tempest pro!) | 13:59 |
tosky | naaah | 13:59 |
redrobot | Thanks for joining, everyone! | 14:00 |
redrobot | #endmeeting | 14:00 |
opendevmeet | Meeting ended Tue Sep 21 14:00:09 2021 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 14:00 |
opendevmeet | Minutes: https://meetings.opendev.org/meetings/barbican/2021/barbican.2021-09-21-13.11.html | 14:00 |
opendevmeet | Minutes (text): https://meetings.opendev.org/meetings/barbican/2021/barbican.2021-09-21-13.11.txt | 14:00 |
opendevmeet | Log: https://meetings.opendev.org/meetings/barbican/2021/barbican.2021-09-21-13.11.log.html | 14:00 |
mvpnitesh | thank you guys. | 14:00 |
Generated by irclog2html.py 2.17.2 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!