Tuesday, 2022-08-23

*** mhen_ is now known as mhen01:55
opendevreviewOpenStack Proposal Bot proposed openstack/barbican master: Imported Translations from Zanata  https://review.opendev.org/c/openstack/barbican/+/85406004:35
*** tkajinam|off is now known as tkajinam05:48
dmendiza[m]#startmeeting barbican13:01
opendevmeetMeeting started Tue Aug 23 13:01:00 2022 UTC and is due to finish in 60 minutes.  The chair is dmendiza[m]. Information about MeetBot at http://wiki.debian.org/MeetBot.13:01
opendevmeetUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.13:01
opendevmeetThe meeting name has been set to 'barbican'13:01
dmendiza[m]#topic Roll Call13:01
dmendiza[m]Courtesy ping for ade_lee dave-mccowan d34dh0r53 hrybacki jamespage Luzi lxkong mhen rm_work tosky xek nearyo oleksandry13:01
toskyhi13:01
Luzio/13:01
dmendiza[m]Hi y'all!13:01
dmendiza[m]Welcome back, Luzi !13:02
dmendiza[m]OK, let's get started13:02
dmendiza[m]#topic Review Past Meeting Action Items13:02
dmendiza[m]#link https://meetings.opendev.org/meetings/barbican/2022/barbican.2022-08-16-13.00.html13:02
dmendiza[m]We didn't have any13:02
dmendiza[m]#topic Liaison Updates13:02
dmendiza[m]tosky: any updates from you this week?13:02
toskyI've noticed a recent fix to the devstack plugin which may have fixed the granade job - or at least my old review which fixes the grenade job now passes (!) 13:02
dmendiza[m]Nice!13:03
dmendiza[m]Yeah, there was a devstack patch that landed yesterday, so maybe that was it?13:03
toskyit's about https://review.opendev.org/c/openstack/barbican/+/72425813:03
toskyyes, I guess so13:03
toskyAlan was asking me about that patch and I noticed it was exactly about that area13:03
dmendiza[m]right onw13:04
toskyand that's it from me today :)13:04
dmendiza[m]*on13:04
dmendiza[m]Thanks, tosky !13:04
dmendiza[m]No updates from my side.13:04
dmendiza[m]So let's move on13:04
dmendiza[m]#topic Microversions + Secret Consumers13:04
dmendiza[m]API changes and Tempest tests have merged13:04
dmendiza[m]ade_lee and/or I will be working on the client changes this week13:04
dmendiza[m]Castellan will be a stretch goal this week13:06
dmendiza[m]but as soon as everything is landed I'll ask the release folks to do the needful.13:06
dmendiza[m]Any questions/comments on Secret Consumers?13:07
Luzino thank you13:09
ade_leeo/13:10
ade_leeLuzi, hi - nice to be in the same timezone as you :)13:11
dmendiza[m]Cool, moving on13:12
dmendiza[m]#topic Secure RBAC13:12
dmendiza[m]I was brushing up on the latest changes to the Secure RBAC goal13:12
dmendiza[m]looks like we'll need to go double check to make sure that project tokens work for the admin apis13:13
toskyaren't those basically matching what was already there, reducing the general scope?13:13
dmendiza[m]tosky: for SRBAC? yeah, the scope was reduced, but also we're going backwards to re-enable project-scoped tokens on all APIs :-\13:14
dmendiza[m]#link https://governance.openstack.org/tc/goals/selected/consistent-and-secure-rbac.html13:14
toskyoh, because there is no system stuff anymore13:16
dmendiza[m]yup13:17
dmendiza[m]I'm also working on fixing the SRBAC policy implementation in Barbican13:18
dmendiza[m]WIP patch is here:13:18
dmendiza[m]#link https://review.opendev.org/c/openstack/barbican/+/85368013:18
dmendiza[m]The srbac job is failing because the client used in the scenario tests does not have the "member" role13:19
dmendiza[m]so I'm working on a fix for that before I update the rest of the policies13:19
dmendiza[m]That's it for SRBAC on my end.  Any questions/comments?13:20
dmendiza[m]OK, moving on 13:23
dmendiza[m]#topic Open Discussion13:23
dmendiza[m]Anything else y'all want to talk about before we look at the bug reports?13:23
Luzii've heard the ptg will be online again?13:26
dmendiza[m]Yeah, they decided to make it virtual and canceled the in-person meeting in Columbus, OH. 😞13:27
dmendiza[m]OK, moving on to bug review13:28
dmendiza[m]#topic Bug Review13:28
dmendiza[m]#link https://storyboard.openstack.org/#!/project_group/barbican13:28
dmendiza[m]We've got one new story:13:29
dmendiza[m]#link https://storyboard.openstack.org/#!/story/201023513:29
dmendiza[m]I reported this, and it's the reason I'm re-working the SRBAC policies13:29
dmendiza[m]#link https://bugs.launchpad.net/castellan/+bugs?orderby=-id&start=013:30
dmendiza[m]No new Castellan bugs13:30
dmendiza[m]#link https://bugs.launchpad.net/cursive/+bugs?orderby=-id&start=013:30
dmendiza[m]and no new Cursive bugs13:30
dmendiza[m]...13:30
dmendiza[m]That's all I have on the agenda for today13:30
dmendiza[m]Thanks for joining, y'all!13:31
dmendiza[m]#endmeeting13:31
opendevmeetMeeting ended Tue Aug 23 13:31:07 2022 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)13:31
opendevmeetMinutes:        https://meetings.opendev.org/meetings/barbican/2022/barbican.2022-08-23-13.01.html13:31
opendevmeetMinutes (text): https://meetings.opendev.org/meetings/barbican/2022/barbican.2022-08-23-13.01.txt13:31
opendevmeetLog:            https://meetings.opendev.org/meetings/barbican/2022/barbican.2022-08-23-13.01.log.html13:31
opendevreviewDouglas Mendizábal proposed openstack/barbican-tempest-plugin master: Add "member" role to tempest tests  https://review.opendev.org/c/openstack/barbican-tempest-plugin/+/85425018:20
opendevreviewDouglas Mendizábal proposed openstack/barbican master: Fix Secure RBAC policies backwards compatibility  https://review.opendev.org/c/openstack/barbican/+/85368018:30
opendevreviewDouglas Mendizábal proposed openstack/barbican-tempest-plugin master: Add "member" role to tempest tests  https://review.opendev.org/c/openstack/barbican-tempest-plugin/+/85425019:57
opendevreviewDouglas Mendizábal proposed openstack/barbican-tempest-plugin master: Add "member" role to tempest tests  https://review.opendev.org/c/openstack/barbican-tempest-plugin/+/85425021:29

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!