Tuesday, 2023-01-17

songwenpinghi team, what's the usage of barbican-keystone-listener? how can we forbidden it to consume the notifications message?02:48
*** mhen_ is now known as mhen02:57
songwenping__ hi team, what's the usage of barbican-keystone-listener? how can we forbidden it to consume the notifications message?03:31
rajivHi, is the weekly meeting at 11 or 12 UTC ? the below link says 12 UTC 10:43
rajivhttps://wiki.openstack.org/wiki/Meetings/Barbican10:43
xek#startmeeting barbican12:01
opendevmeetMeeting started Tue Jan 17 12:01:06 2023 UTC and is due to finish in 60 minutes.  The chair is xek. Information about MeetBot at http://wiki.debian.org/MeetBot.12:01
opendevmeetUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.12:01
opendevmeetThe meeting name has been set to 'barbican'12:01
xek#topic Roll Call12:01
xekCourtesy ping for dmendiza[m] ade_lee d34dh0r53 Luzi tosky tobias-urdin12:01
xekrajiv: o/12:01
xekrajiv: yes, the meeting is 12 UTC12:01
rajivHEY12:01
xekAs usual our agenda can be found here:12:02
xek#link https://etherpad.openstack.org/p/barbican-weekly-meeting12:02
rajivroger!12:02
Luzio/12:02
xekJust the usual topics on the agenda today12:04
xekLuzi: o/12:05
xek#topic Review Past Meeting Action Items12:05
xek#link https://meetings.opendev.org/meetings/barbican/2023/barbican.2023-01-10-12.01.html12:05
xekThere are no action items from previous meetings12:05
xek#topic Liaison Updates12:06
xekNo updates from me12:06
xek#topic Open Discussion12:07
rajivHey, i have a couple topics, can i ask now ? or is there Q&A session ?12:07
xekrajiv: yes you can :)12:08
rajivFirst, Zed release notes is broken, can i it be fixed ? https://docs.openstack.org/releasenotes/barbican/zed.html12:08
rajivi observed the latest stable release notes is always broken, but (latest release notes - 1) works12:08
rajivsecond, any change this bug could be merged in upcoming release cycle ? https://storyboard.openstack.org/#!/story/200932212:09
xekrajiv: I think we may need a patch for stable/zed to fix that,  I'll look into it12:10
xek(the release notes)12:10
rajivokay12:10
xekrajiv: are there patches to fix this error?12:10
rajivi am unaware if there are any, i followed up during last cycle as well but there wasnt any patch.12:11
xekrajiv: yeah, a quick search doesn't bring any12:12
xekrajiv: someone would have to volunteer to prepare those patches12:12
rajivi see, idk how the workflow wrt zuul goes, hence i wasnt able to figure it out.12:13
rajivmaybe once Doug is back, we can re-connect.12:13
xekrajiv: what do you mean workflow with zuul? do you need help on setting your environment up?12:14
rajivsry, are we referring to first or second topic ?12:14
xekrajiv: second, sorry I wasn't clear12:14
xekrajiv: I'll look into why the release notes are not appearing12:15
rajivah ok, second issue, i have a ready env, but wasnt able figure this out. Any suggestions ? i can work on a patch though12:15
xekrajiv: you probably need to figure out how to pass the filter into the part that generates that next URL for pagination12:17
rajivi tried this but had no luck : https://github.com/sapcc/barbican/commit/cafde97c72171c9f0bd07cb3df6f20a8ade52e3312:17
rajivokay, last topic, i am testing Zed upgrade, is there a config to enable microversions ? 12:18
rajivi get the below error even though i have added microversions in the paste.ini file :12:18
rajivLookupError: No section 'microversion' (prefixed by 'filter') found in config /etc/barbican/barbican-api-paste.ini12:18
rajivi added it here : https://github.com/sapcc/helm-charts/commit/f82748a378bf40116cfd2183b02ce6f38e9685f512:19
xekrajiv: I think you also need [filter:microversion] section12:25
xekrajiv: with paste.filter_factory = barbican.api.middleware.microversion:MicroversionMiddleware.factory12:26
rajivokay12:27
xekrajiv: see the last 2 commits here: https://github.com/openstack/barbican/commits/master/etc/barbican/barbican-api-paste.ini12:27
rajivhttps://github.com/openstack/barbican/blob/master/etc/barbican/barbican-api-paste.ini12:27
xekrajiv: the last commit also added it to the barbican_version pipeline, since it is also versioned for backwards compatibility12:28
rajivthanks, are there any other changes in zed ?12:28
rajivi am asking release notes arent there12:28
xekrajiv: no, I don't think there are any other major changes, and also the microversion implementation is still not well tested, since the python-barbicanclient implementation is not ready12:29
xekrajiv: we are working on it this cycle, but will likely backport it to zed12:30
rajivoh ok, so do i need to enable microversion or drop it for now ?12:30
xekrajiv: you don't need it, if you don't need secret consumers functionality12:31
xekrajiv: and as of now, no other service uses this functionality12:31
rajivis there docu on secret consumers functionality ?12:31
rajivmy barbican backend is Thales HSM A790 with FIPS mode enabled.12:32
xekrajiv: yes, let me find a link12:32
rajivthis https://specs.openstack.org/openstack/barbican-specs/specs/train/secret-consumers.html ?12:33
xekrajiv: https://specs.openstack.org/openstack/barbican-specs/specs/train/secret-consumers.html12:33
xekyep12:33
rajivthanks, could you elaborate "we are working on it this cycle, but will likely backport it to zed" 12:34
rajivwill this feature be rolled back in Antelope ?12:34
xekthat's the spec, there is also the api documentation12:34
xekrajiv: https://docs.openstack.org/barbican/latest/api/reference/secret_consumers.html12:35
xekrajiv: it won't be rolled back, we will fix any issues and backport them to zed12:36
rajivokay, thats it from my end. Thanks for clarifying.12:37
xekrajiv: ack, happy to help :)12:38
xek#topic Bug Review12:38
xekThere are no new bugs12:39
xekAllright, thanks for attending!12:39
xek#endmeeting12:39
opendevmeetMeeting ended Tue Jan 17 12:39:59 2023 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)12:39
opendevmeetMinutes:        https://meetings.opendev.org/meetings/barbican/2023/barbican.2023-01-17-12.01.html12:39
opendevmeetMinutes (text): https://meetings.opendev.org/meetings/barbican/2023/barbican.2023-01-17-12.01.txt12:39
opendevmeetLog:            https://meetings.opendev.org/meetings/barbican/2023/barbican.2023-01-17-12.01.log.html12:39
rajivHi, are these policies renamed ? secret_consumers:get, secret_consumers:post, secret_consumers:delete ?13:15
rajivis it container_consumers:get ?13:20
rajivfound it : https://github.com/openstack/barbican/blob/stable/zed/releasenotes/notes/fix-story-2009664-042ef282c0dd6b6a.yaml13:21
rajivhttps://github.com/openstack/barbican/commit/b6002aa3d04c0dc3bf49c05686b76f1780de358f13:26
xekrajiv: no, there are container consumers and secret consumers, these are distinct13:38
xekrajiv: the container consumers were implemented a long time ago13:39
opendevreviewAndre Aranha proposed openstack/python-barbicanclient master: Unit tests for microversion, initial change for consumers  https://review.opendev.org/c/openstack/python-barbicanclient/+/87007713:40
xekrajiv: so they can be referred to just by "consumers"13:40
xek(in older documentation and other places)13:41
opendevreviewMauricio Harley proposed openstack/python-barbicanclient master: Added the force parameter to consumer removal and the corresponding CLI commands  https://review.opendev.org/c/openstack/python-barbicanclient/+/86551914:49
opendevreviewAndre Aranha proposed openstack/python-barbicanclient master: Unit tests for microversion, initial change for consumers  https://review.opendev.org/c/openstack/python-barbicanclient/+/87007715:12
opendevreviewAndre Aranha proposed openstack/python-barbicanclient master: Unit tests for microversion, initial change for consumers  https://review.opendev.org/c/openstack/python-barbicanclient/+/87007716:06
JayFHey, I'm trying to get some Castellan changes merged (and then some barbican changes that depend on it). Is this the right place to ask about it? https://review.opendev.org/c/openstack/castellan/+/86938618:37
opendevreviewJay Faulkner proposed openstack/barbican master: Add support for Vault KV path  https://review.opendev.org/c/openstack/barbican/+/86938718:40
ade_leeJayF, yes it is 19:38
JayFgood stuff :) I don't usually contribute to barbican/castellan, but am sheparding some changes that have been carried downstream 19:39
JayFhappy to respond to any PR feedback on those, just lmk :D thanks \o19:39
ade_leeJayF, cool - I'll try to take an initial look tomorrow19:39

Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!