Tuesday, 2022-11-15

*** mhen_ is now known as mhen02:15
xek#startmeeting barbican12:00
opendevmeetMeeting started Tue Nov 15 12:00:44 2022 UTC and is due to finish in 60 minutes.  The chair is xek. Information about MeetBot at http://wiki.debian.org/MeetBot.12:00
opendevmeetUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.12:00
opendevmeetThe meeting name has been set to 'barbican'12:00
xek#topic Roll Call12:00
xekCleaned up: Courtesy ping for dmendiza[m] ade_lee d34dh0r53 Luzi tosky12:01
Luzio/12:01
xeklooks like the meeting time changed again due to DST12:02
xekLuzi: o/12:02
xekade_lee_: o/12:03
xekI saw Ade on IRC today, maybe he'll join us later12:05
xekdmendiza might have just started his PTO12:05
xek#topic Review Past Meeting Action Items12:05
xek#link https://meetings.opendev.org/meetings/barbican/2022/barbican.2022-10-25-12.00.html12:06
xekno action items from last meeting12:06
xek#topic Liaison Updates12:06
xekThe Antelope-1 milestone is this week! Project team plans for the Antelope cycle should now be solidified.12:07
xekI've seen dmendiza reworking some patches for secret consumers, I'll be reviewing those later12:08
xeklet's go over the rest of our agenda12:10
xek#link https://etherpad.openstack.org/p/barbican-weekly-meeting12:10
xek#topic Released CVE fixes12:11
xekI touched on some of this in the last meeting, but I'll just paste the notes from dmendiza12:12
xekWallaby and newer were released12:12
xekTrain through Victoria fixes were backported, but no release was made since they're EM branches12:12
xekSpeaking of EM, Wallaby is transitioning to EM:12:12
xek#link https://review.opendev.org/c/openstack/releases/+/86231112:13
xekBranches older than train are moving to EOL12:13
xek#link https://review.opendev.org/c/openstack/releases/+/86251512:13
xeknote: this is -1, since we need to send a notice to the mailing list12:14
xek#action send a notice to the mailing list about branches older than train are moving to EOL12:14
xekAlright, moving to the next topic12:14
xek#topic Storyboard is basically unmaintained12:15
xekThere were discussions about it in the service-discuss mailing list12:15
xek#link https://lists.opendev.org/pipermail/service-discuss/2022-October/000370.html12:15
xekAfter discussing this with dmendiza and others my plan is to retire Storyboard in favour of launchpad12:16
xekThis won't happen this week, but I have all the things I need to bring back our old launchpad12:17
xekI'll do some upkeep first, before getting it online12:18
xek#topic Bug review12:21
xekNot sure when we did our last Bug review, but I saw one new bug:12:22
xek#link https://storyboard.openstack.org/#!/story/201038312:22
xekand we already have a fix that merged:12:22
xek#link https://review.opendev.org/c/openstack/python-barbicanclient/+/85875612:22
xekI've also seen this new review, fixing a typo in check_str for system_admin policy rule12:23
xek#link https://review.opendev.org/c/openstack/barbican/+/86422612:23
xekThis came up this week, I still have to look into what's breaking the CI12:24
xek#action look into CI failing in https://review.opendev.org/c/openstack/barbican/+/86422612:24
xekThese are all the topics for today :)12:26
xek#topic Open Discussion12:26
xekOk, see y'all reading these logs next week!12:30
xek#endmeeting12:30
opendevmeetMeeting ended Tue Nov 15 12:30:09 2022 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)12:30
opendevmeetMinutes:        https://meetings.opendev.org/meetings/barbican/2022/barbican.2022-11-15-12.00.html12:30
opendevmeetMinutes (text): https://meetings.opendev.org/meetings/barbican/2022/barbican.2022-11-15-12.00.txt12:30
opendevmeetLog:            https://meetings.opendev.org/meetings/barbican/2022/barbican.2022-11-15-12.00.log.html12:30
JohnnyWHello, just a question about nova and barbican cooperation, maybe someone faced such issue already. I have two volumes encrypted, one is using a key which was created before an upgrade of barbican from ussuri version to yoga version, so far both are OK, but if I detach volume which is using ussuri key, then I cannot attach that volume to another13:07
JohnnyWinstance with information in nova logs: "libvirt.libvirtError: internal error: unable to execute QEMU command 'blockdev-add': Invalid password, cannot unlock any keyslot", but if I do the same operation with a volume which is using yoga key, then everything is fine. So far I checked that I'm able to retrieve secret payload from ussuri and yoga keys13:07
JohnnyWand everything looks fine, there is no error logs in barbican. So I'm wondering what can be an issue here, any ideas? Thanks in advance for suggestions! 13:07
opendevreviewAndre Aranha proposed openstack/python-barbicanclient master: Remove test_cafile_certfile_keyfile_kwargs_set_correctly  https://review.opendev.org/c/openstack/python-barbicanclient/+/86455214:38

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!