| *** tkajinam is now known as Guest2162 | 02:04 | |
| *** mhen_ is now known as mhen | 02:43 | |
| *** tkajinam is now known as Guest2174 | 03:28 | |
| *** tkajinam is now known as Guest2179 | 05:36 | |
| JohnnyW | Hi, just a question if someone knows, is there a correlation between secret id in barbican database and vault secret name, if vault is SSM backend for barbican? Or only created_at column can be used as a correlation for secrets between barbican and vault? | 10:49 |
|---|---|---|
| JohnnyW | at least here: https://github.com/openstack/barbican/blob/master/barbican/plugin/crypto/base.py I do not see any correlation, seems like a vault secret name is choosen randomly. Here is an example from vault DB: map[algorithm:aes bit_length:256 created:1653290642 name:da8c056d64a745308b2e688d79fa4358 type:symmetric | 11:05 |
| JohnnyW | value:52c0ed7128d96c8aa1dafb70asd34dd1199ed25873c9a00cb] | 11:05 |
| JohnnyW | it seems I can only try to map by value or - sometimes indirectly, because of 1 second delay - by created | 11:06 |
| xek | #startmeeting barbican | 12:00 |
| opendevmeet | Meeting started Tue Nov 22 12:00:07 2022 UTC and is due to finish in 60 minutes. The chair is xek. Information about MeetBot at http://wiki.debian.org/MeetBot. | 12:00 |
| opendevmeet | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 12:00 |
| opendevmeet | The meeting name has been set to 'barbican' | 12:00 |
| xek | #topic Roll Call | 12:00 |
| xek | Courtesy ping for dmendiza[m] ade_lee d34dh0r53 Luzi tosky | 12:00 |
| xek | As usual our agenda can be found here: | 12:00 |
| Luzi | o/ | 12:00 |
| xek | #link https://etherpad.openstack.org/p/barbican-weekly-meeting | 12:00 |
| xek | ping ade_lee__ | 12:01 |
| xek | No extra topics on the agenda, so this will be a short meeting :) | 12:02 |
| xek | Luzi: o/ | 12:03 |
| xek | #topic Review Past Meeting Action Items | 12:03 |
| xek | #link https://meetings.opendev.org/meetings/barbican/2022/barbican.2022-11-15-12.00.html | 12:04 |
| xek | I've sent out a notice about EOLing branches older than train | 12:04 |
| xek | I'll unblock the patch doing it next week | 12:05 |
| xek | #link https://review.opendev.org/c/openstack/releases/+/862515 | 12:05 |
| xek | Next one is the typo fix and CI issues | 12:06 |
| xek | #link https://review.opendev.org/c/openstack/barbican/+/864226 | 12:06 |
| xek | tobias-urdin ^ | 12:06 |
| xek | tobias-urdin: thanks for working on this | 12:06 |
| xek | I pushed a new release of cursive to pypi | 12:06 |
| xek | #link https://pypi.org/project/cursive/ | 12:06 |
| xek | but it didn't fix the CI | 12:07 |
| xek | needs a further look | 12:07 |
| xek | also, the change to devstack needs further work | 12:08 |
| xek | #link https://review.opendev.org/c/openstack/devstack/+/864848 | 12:08 |
| tobias-urdin | o/ | 12:08 |
| xek | so I'll put it again on our action items | 12:09 |
| xek | tobias-urdin: o/ | 12:09 |
| xek | #action Look into CI failing in https://review.opendev.org/c/openstack/barbican/+/864226 | 12:09 |
| tobias-urdin | that is probably due to upper-constraint being pinned to 2.2 https://github.com/openstack/requirements/blob/ac763e3124cccf1c13e871699eb0337a3a13bf2e/upper-constraints.txt#L38 | 12:09 |
| tobias-urdin | we need to propose a bump there | 12:10 |
| tobias-urdin | or perhaps bot will pick that up soon | 12:10 |
| xek | tobias-urdin: right, makes sense | 12:10 |
| tobias-urdin | i'll wait and see if bot picks it up | 12:11 |
| xek | tobias-urdin: I released it yesterday, so I'm guessing any bot would have picked it by now, but I'm not sure | 12:11 |
| tobias-urdin | hm yeah | 12:11 |
| xek | ok, good we're making progress | 12:13 |
| xek | let's go to the next topic | 12:13 |
| xek | #topic Liaison Updates | 12:14 |
| xek | We are now past the Antelope-1 milestone. Teams should now be focused on feature development and completion of release cycle goals. | 12:16 |
| xek | For our team it's the secret consumers work | 12:16 |
| xek | Since the work is mostly limited to Red Hat, I think we will be syncing on it daily on internal meetings, until the work is complete | 12:18 |
| xek | but I'll try to put all of the patches under the same topic | 12:18 |
| xek | all of the patches are already put forward, but some of them require more work | 12:19 |
| xek | #link https://review.opendev.org/q/topic:secret-consumers | 12:19 |
| xek | Ok, it's time to wrap up | 12:20 |
| xek | #topic Open Discussion | 12:20 |
| xek | See y'all next week! | 12:22 |
| xek | #endmeeting | 12:22 |
| opendevmeet | Meeting ended Tue Nov 22 12:22:36 2022 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 12:22 |
| opendevmeet | Minutes: https://meetings.opendev.org/meetings/barbican/2022/barbican.2022-11-22-12.00.html | 12:22 |
| opendevmeet | Minutes (text): https://meetings.opendev.org/meetings/barbican/2022/barbican.2022-11-22-12.00.txt | 12:22 |
| opendevmeet | Log: https://meetings.opendev.org/meetings/barbican/2022/barbican.2022-11-22-12.00.log.html | 12:22 |
| *** blarnath is now known as d34dh0r53 | 14:53 | |
| opendevreview | Dr. Jens Harbott proposed openstack/barbican master: Fix typo in check_str for system_admin policy rule https://review.opendev.org/c/openstack/barbican/+/864226 | 15:09 |
| opendevreview | Andre Aranha proposed openstack/python-barbicanclient master: DNM - Add unit tests for microversion https://review.opendev.org/c/openstack/python-barbicanclient/+/865294 | 15:25 |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!