| *** mhen_ is now known as mhen | 01:53 | |
| opendevreview | OpenStack Release Bot proposed openstack/barbican stable/2025.2: Update .gitreview for stable/2025.2 https://review.opendev.org/c/openstack/barbican/+/961108 | 09:28 |
|---|---|---|
| opendevreview | OpenStack Release Bot proposed openstack/barbican stable/2025.2: Update TOX_CONSTRAINTS_FILE for stable/2025.2 https://review.opendev.org/c/openstack/barbican/+/961109 | 09:28 |
| opendevreview | OpenStack Release Bot proposed openstack/barbican master: Update master for stable/2025.2 https://review.opendev.org/c/openstack/barbican/+/961110 | 09:28 |
| opendevreview | OpenStack Release Bot proposed openstack/ansible-role-lunasa-hsm stable/2025.2: Update .gitreview for stable/2025.2 https://review.opendev.org/c/openstack/ansible-role-lunasa-hsm/+/961114 | 09:32 |
| mharley[m] | #startmeeting barbican | 15:00 |
| opendevmeet | Meeting started Mon Sep 15 15:00:48 2025 UTC and is due to finish in 60 minutes. The chair is mharley[m]. Information about MeetBot at http://wiki.debian.org/MeetBot. | 15:00 |
| opendevmeet | Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. | 15:00 |
| opendevmeet | The meeting name has been set to 'barbican' | 15:00 |
| mharley[m] | #topic Roll Call | 15:01 |
| mharley[m] | Courtesy ping for dmendiza[m] ade_lee d34dh0r53 Luzi tosky tobias-urdin jjung mharley Freeman Boss lpiwowar xek tkajinam LinuZZ | 15:01 |
| mharley[m] | You can find the meeting's agenda at the following link: | 15:01 |
| mharley[m] | #link https://etherpad.openstack.org/p/barbican-weekly-meeting | 15:01 |
| tkajinam | o/ | 15:02 |
| LinuZZ | hi | 15:02 |
| mharley[m] | We finally have attendees. :-) | 15:02 |
| dmendiza[m] | 🙋♂️ | 15:02 |
| mharley[m] | Hello, everybody. | 15:03 |
| mharley[m] | #topic Review Past Meeting Action Items | 15:03 |
| mharley[m] | As the last meeting didn't happen because of the lack of attendance, there's nothing to review. | 15:04 |
| mharley[m] | #topic Liaison Updates | 15:05 |
| mharley[m] | We are 2 weeks from Flamingo's release date. | 15:05 |
| mharley[m] | #link https://releases.openstack.org/flamingo/schedule.html | 15:05 |
| mharley[m] | Also, we have the 2026.1 election polling beginning this week. | 15:05 |
| mharley[m] | #link https://governance.openstack.org/election/ | 15:05 |
| mharley[m] | There are currently no more news for Flamingo. | 15:05 |
| mharley[m] | I'm not sure if Grzegorz Grasza is here. He's the security liaison for Barbican. | 15:06 |
| tkajinam | one more important note maybe be that 2025.2 rc was already cut | 15:06 |
| tkajinam | or should be cut asap | 15:06 |
| tkajinam | the deadline was last Thursday afaik | 15:06 |
| mharley[m] | Thanks for the info, tkajinam. | 15:07 |
| mharley[m] | #topic Bug Review | 15:07 |
| mharley[m] | For Barbican, there's a bug raised by tkajinam on early August. | 15:08 |
| mharley[m] | #link https://bugs.launchpad.net/barbican/+bug/2119531 | 15:08 |
| tkajinam | I've already proposed its fix so appreciate any feedback :-) https://review.opendev.org/c/openstack/barbican/+/956550 | 15:09 |
| mharley[m] | Yes, I've seen it, tkajinam. I'll review it. dmendiza, mind doing it as well? | 15:09 |
| dmendiza[m] | ack, looking | 15:10 |
| mharley[m] | There are no bugs for Python Barbican client. | 15:10 |
| mharley[m] | #link https://bugs.launchpad.net/python-barbicanclient/+bugs?orderby=-id&start=0 | 15:10 |
| mharley[m] | Also, no new bugs for Castellan. | 15:10 |
| mharley[m] | #link https://bugs.launchpad.net/castellan/+bugs?orderby=-id&start=0 | 15:10 |
| mharley[m] | And finally, no new bugs for Cursive. | 15:11 |
| mharley[m] | #link https://bugs.launchpad.net/cursive/+bugs?orderby=-id&start=0 | 15:11 |
| mharley[m] | #topic Open Discussion | 15:12 |
| rajiv | hey | 15:13 |
| rajiv | i wanted to know if anyone has experience with Utimaco backend integration ? | 15:13 |
| mharley[m] | Hi, rajiv. I haven't yet. | 15:13 |
| mharley[m] | Can you elaborate on your use case? | 15:14 |
| rajiv | we are trying to switch our backend to use Utimaco Se40k device | 15:14 |
| rajiv | i wanted to get feedback wrt integration | 15:14 |
| dmendiza[m] | rajiv a long time ago someone used an Utimaco and contributed docs for it | 15:15 |
| rajiv | i see, do you also get 403 when you try to launch https://docs.openstack.org/barbican/latest/install/barbican-backend.html ? | 15:16 |
| mharley[m] | For your information, this is the product's page: https://utimaco.com/data-protection/gp-hsm/utrust-general-purpose-hsm. | 15:16 |
| rajiv | yep, i reached out to Utimaco but apparently dont have an expert on this topic, was wondering how i can proceed or if there are any consultancy services we are aware of ? | 15:17 |
| dmendiza[m] | #link https://docs.openstack.org/barbican/latest/install/barbican-backend.html#utimaco | 15:17 |
| rajiv | the forbidden seems to be a short issues, yes, i was about to share the same https://docs.openstack.org/barbican/latest/install/barbican-backend.html#utimaco | 15:17 |
| tkajinam | maybe you can drop an email to openstack-discuss ml though there would be no such services if utimaco does not provide any | 15:18 |
| rajiv | i presume the latest information is published ? | 15:18 |
| rajiv | okay, thanks :) | 15:18 |
| mharley[m] | Nice, guys. Anything else to add? | 15:18 |
| LinuZZ | yes | 15:18 |
| LinuZZ | is there something we can do for the YubiHSM? | 15:19 |
| LinuZZ | we changed the code to work with the new key wrap code and verified it works with 2025.1 | 15:20 |
| dmendiza[m] | Hi LinuZZ ... I have an old YubiHSM, not sure if the latest revisions still work the same. I have it on my todo to look at that patch, but I admit it has been low priority for me. I'll take a look this Friday for Upstream Friday at work. | 15:20 |
| mharley[m] | Can you paste the patch's link here, dmendiza ? | 15:21 |
| LinuZZ | if the firmware is before 2.3 it won work | 15:21 |
| tkajinam | maybe https://etherpad.opendev.org/p/barbican-weekly-meeting#L75 ? | 15:21 |
| LinuZZ | https://review.opendev.org/c/openstack/barbican/+/900107 | 15:21 |
| mharley[m] | Thanks, tkajinam. I didn't realize the Etherpad has been edited. ;-) | 15:21 |
| tkajinam | (I'll talk shortly about my lists there after the current topic | 15:22 |
| tkajinam | (maybe I can start now ? | 15:23 |
| mharley[m] | I believe so, tkajinam. | 15:25 |
| tkajinam | I've left list of patches which I'd like to ask for some attentions to | 15:25 |
| tkajinam | in https://etherpad.opendev.org/p/barbican-weekly-meeting#L53 | 15:25 |
| tkajinam | 1. https://review.opendev.org/c/openstack/barbican/+/956356 fixes config error, which is blocking job update now. this may need urgent attention | 15:26 |
| tkajinam | 2. https://review.opendev.org/c/openstack/barbican/+/956553 is the first step to fix broken grenade job. once that is merged I'll backport it to stable branches | 15:26 |
| tkajinam | 3. https://review.opendev.org/c/openstack/python-barbicanclient/+/953096 removes python 3.9 support which is kept only in barbicanclient atm | 15:27 |
| tkajinam | these three may need to get some priorities | 15:27 |
| mharley[m] | Gotcha. Unfortunately, I can't still +2 is any patch, as I'm waiting for someone to add me as a core reviewer. | 15:27 |
| mharley[m] | s/is/in/ | 15:27 |
| tkajinam | I've also left a patches which xek added his +2 to some time ago in https://etherpad.opendev.org/p/barbican-weekly-meeting#L63 so would appreciate 2nd review | 15:27 |
| tkajinam | maybe dmendiza[m] can add you ? | 15:28 |
| mharley[m] | Probably. | 15:28 |
| tkajinam | I'd appreciate any feedback. please feel free to reach me if you have any questions | 15:28 |
| mharley[m] | Great, tkajinam. Anyone else would like to add anything? | 15:28 |
| tkajinam | one more thing to add is that there are a few open patches to cursive to clean up deprecation. | 15:28 |
| tkajinam | that's all. | 15:28 |
| mharley[m] | Understood. | 15:28 |
| tkajinam | dmendiza[m], if you can spare some time to these, that would be great | 15:29 |
| LinuZZ | thanks all | 15:29 |
| dmendiza[m] | tkajinam: ack, thanks for looking at that job .. I don't even remember the last time it passed. | 15:32 |
| mharley[m] | Upstream Friday is gonna be full. :-) | 15:32 |
| dmendiza[m] | 💯 full | 15:32 |
| tkajinam | dmendiza[m], yeah. there was an issue with grenade which has been breaking it | 15:32 |
| tkajinam | I'll ask qa folks to take a look about it, too | 15:32 |
| mharley[m] | I believe we are sorted for now, guys. | 15:33 |
| mharley[m] | See you all in two weeks. | 15:34 |
| tkajinam | yup | 15:34 |
| mharley[m] | #endmeeting | 15:34 |
| opendevmeet | Meeting ended Mon Sep 15 15:34:10 2025 UTC. Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4) | 15:34 |
| opendevmeet | Minutes: https://meetings.opendev.org/meetings/barbican/2025/barbican.2025-09-15-15.00.html | 15:34 |
| opendevmeet | Minutes (text): https://meetings.opendev.org/meetings/barbican/2025/barbican.2025-09-15-15.00.txt | 15:34 |
| opendevmeet | Log: https://meetings.opendev.org/meetings/barbican/2025/barbican.2025-09-15-15.00.log.html | 15:34 |
| LinuZZ | dmendiza[m] if your YubiHSM is from before august 2023, i would not bother in searching for it, the feature required has been added in firmware version 2.3 and we returned our units we ordered in august 2023 to get newer ones | 15:34 |
| LinuZZ | dmendiza[m] if your YubiHSM is from before august 2023, i would not bother searching for it, the feature required has been added in firmware version 2.3 and we returned our units we ordered in august 2023 to get newer ones | 15:35 |
| LinuZZ | https://support.yubico.com/hc/en-us/articles/10624391004188-YubiHSM-AES-support-2-3 | 15:37 |
| opendevreview | Takashi Kajinami proposed openstack/barbican-tempest-plugin master: Add stable/2025.2 job https://review.opendev.org/c/openstack/barbican-tempest-plugin/+/961279 | 18:50 |
| tkajinam | mharley[m], dmendiza[m] oops. I didn't notice https://review.opendev.org/c/openstack/barbican-tempest-plugin/+/951231/ is still open. This needs to be merged asap | 18:51 |
| -opendevstatus- NOTICE: The Gerrit service on review.opendev.org will be offline briefly for a quick patch update, but will return within a few minutes | 21:08 | |
Generated by irclog2html.py 4.0.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!