Tuesday, 2026-07-07

opendevreviewGoutham Pacha Ravi proposed openstack/security-doc master: OSSN-0102: Neutron sub-resource parent ownership  https://review.opendev.org/c/openstack/security-doc/+/99620906:37
opendevreviewGoutham Pacha Ravi proposed openstack/security-doc master: WIP: OSSN-0103: Glance legacy Tasks import SSRF  https://review.opendev.org/c/openstack/security-doc/+/99621006:47
gouthamrtc-members: a gentle reminder that the weekly meeting will be hosted here in ~50 minutes16:10
gouthamrthe agenda is here: https://wiki.openstack.org/wiki/Meetings/TechnicalCommittee#Next_Meeting16:10
*** opendevstatus_ is now known as opendevstatus__16:38
*** opendevstatus__ is now known as opendevstatus16:38
*** opendevstatus is now known as Guest1285016:38
gouthamr#startmeeting tc17:01
opendevmeetMeeting started Tue Jul  7 17:01:39 2026 UTC and is due to finish in 60 minutes.  The chair is gouthamr. Information about MeetBot at http://wiki.debian.org/MeetBot.17:01
opendevmeetUseful Commands: #action #agreed #help #info #idea #link #topic #startvote.17:01
opendevmeetThe meeting name has been set to 'tc'17:01
gouthamrWelcome to the weekly meeting of the OpenStack Technical Committee. A reminder that this meeting is held under the OpenInfra Code of Conduct available at https://openinfra.dev/legal/code-of-conduct.17:01
gouthamrToday's meeting agenda can be found at https://wiki.openstack.org/wiki/Meetings/TechnicalCommittee#Agenda17:01
gouthamr#topic Roll Call17:01
spotz[m]o/17:02
gouthamrcourtesy-ping: cardoe, bauzas, noonedeadpunk, frickler, mnasiadka17:03
frickler\o17:03
gouthamrnoted absence: d a n s m i t h17:03
mnasiadkao/17:03
cardoeo/17:04
cardoedual wielding as 7th grade math tutor sorry17:04
gouthamr:) 17:05
gouthamrlet's get started.. 17:05
gouthamr#topic Last Week's Action Items17:05
gouthamrwe discussed x/cursive's move into the openstack/ namespace17:06
noonedeadpunko/17:06
gouthamrthe move itself is scheduled in a couple of days (July 9th), but, we wanted to inform/get consent from existing core reviewers or original maintainers17:06
gouthamri dug into this a little bit and shared context on the openstack-discuss list17:07
gouthamr#link https://lists.openstack.org/archives/list/openstack-discuss@lists.openstack.org/thread/YBU4IAB3EEMXG6H6JCZH4DRYCV2FK3O3/ ([oslo][barbican][nova][glance][cinder][tc] Bringing cursive under Oslo governance)17:07
gouthamrbefore doing this, I tried to track down the original maintainers from JHU17:08
gouthamrbut folks have either left JHU or have switched roles internally.. so, this seemed like a futile attempt17:08
fungithe project-config change still needs fixing17:09
gouthamri do think their goodbye email to the openstack-discuss list which has been brought up a couple of times is sufficient to indicate their consent to this: https://lists.openstack.org/pipermail/openstack-dev/2018-July/131978.html17:09
fungii can try to fix it up if nobody from the project side has time17:10
gouthamrack, ty for offering; if they seem non-controversial - it definitely makes sense17:10
fungialso we may be unexpectedly short some coverage on the opendev sysadmins team now at the planned time, we'll discuss at the opendev meeting in a couple of hours but may proceed regardless17:11
gouthamrah ack17:11
gouthamranything else to discuss regarding cursive?17:12
gouthamrtkajinam: ty for your response on the ML thread17:12
cardoeI think we just do it17:12
gouthamr+1, lazy consensus will work here.. and i've seen the pattern across our community that we're willing to add past reviewers back to core reviewer groups in case they resume their activity17:14
funginote that barbican folks also have maintainer access to the repo, were they some of the ones you tried to contact?17:15
gouthamrno those folks are on the openstack-discuss list17:15
fungicool, wfm17:15
gouthamrthe "castellan" ownership comparison was made by them originally.. oslo+barbican co-maintain that repo17:16
gouthamrmharley[m]: ^ hope the team's still aligned with decisions from 2020/202117:17
gouthamrnext action item was around PyPI archival for retired projects17:17
gouthamrnoonedeadpunk: did you explore this for venus? any insights to share?17:18
gouthamrrelated: launchpad tracker cleanup.. 17:19
gouthamrthis is all onerous stuff.. but, great for hygiene17:19
gouthamrwe can add cleanups to the tracker etherpad and do it slowly over time too, but, it'd be nice to get the project-team-guide language added when we align on the process17:21
noonedeadpunkunfortunatelly I didn't made any progress there, as got quite tackled with internal issues17:22
noonedeadpunkI am hoping to close that topic this week 100%17:23
gouthamrack no problem; can check on it again next week.. 17:23
gouthamrty for tackling it!17:23
noonedeadpunksorry :(17:23
spotz[m]Doug was around Barbican during 2020/2021 and still is FYI17:23
gouthamri suppose the vitrage cleanup is progressing fine17:24
gouthamrlet us know if you need any reviews/assistance for it17:24
gouthamrthe next action item was around the Contributor Experience Working Group. I owe the ML a post - didn't work on this last week - however, i was trying to recruit some folks and discussing ideas17:25
gouthamrthe ML post can be a good way to seed that discussion publicly and organize better.. 17:26
gouthamrnow that i'm over a loong weekend, i'll get to this soon-ly17:26
gouthamrthe final action item i see is the one around formalizing what counts as activity in the TC and seeding some process on inactivity.. this will be good to throw some proposals about so we can gain some consensus on the rare occasions that this happens17:30
gouthamri don't expect to work on it myself, but the consensus here seemed to be allowing the impending elections to tackle the existing issue17:31
fungii have an outstanding todo for adding active core reviewer querying to the election tooling some time this year. if that's meant to go into effect for the indri cycle elections i can prioritize work on it17:31
gouthamrway to name drop the lemur 17:31
fungioh, sorry, activity in the tc, not review activity for electorate, i misread17:32
gouthamrbut great/timely question :D 17:32
* fungi was on a completely different topic17:32
mnasiadkaAlthough somewhat related17:32
gouthamras you may be aware, election officials and spotz[m] have been doing some election prep.. i mentioned that early nominations are encouraged in case of holidays - same stuff as usual17:33
gouthamron this week's TC post to the ML17:33
gouthamrplease, do especially encourage folks to consider being a part of the TC17:33
gouthamri will ask folks to get in touch with existing TC members if they want to learn more about the role and if they'd like mentorship/shadow you :) 17:34
spotz[m]Land we can always use more officials17:34
gouthamrwe are doing a _lot_ of work, and many times, we end up backfilling some work and helping out the community - this might all be exciting for someone you know in the community17:35
gouthamrspotz[m]: +117:35
gouthamralright, about the AC changes17:37
gouthamr#link https://review.opendev.org/c/openstack/governance/+/995535 (Add reviewers as Active Contributors)17:37
gouthamrthis is a charter change proposal ^17:37
gouthamrand it needs 2/3rds of the TC to vote positively17:37
gouthamrit might take time to review/iterate on this, and so i want to know if there are any hard objections to this proposal17:38
fungifrom an election tooling perspective, the main thing i need to know is whether it's expected to take effect for the 2027.1/indri cycle electorate or 2027.2/j cycle17:40
gouthamrknowing that might help fungi land these changes in the election tooling prior to the "email deadline": https://releases.openstack.org/hibiscus/schedule.html#i-election-email-deadline17:40
fungiyes17:40
gouthamrthe deadline is August 19th, 2026 at 00:00 UTC17:40
spotz[m]I do want to do a grammar change in the sentence before it after it merged17:41
fungiso roughly 6 weeks to decide and develop the implementation17:41
gouthamryes, hopefully we can all look and comment this week17:42
gouthamranything else about ongoing action items?17:42
gouthamrwe've been quite busy :P where tracking action items week on week is taking up most of our meeting17:45
gouthamri'll table the TC visioning kick-off again, and probably seed it async17:45
gouthamrmy goal is to begin the scatter-gather on ideas with you, and the community could weigh in as well17:46
gouthamrlet me see how much progress i can make async about this.. 17:47
gouthamrif you would like to work on it with me, please ping me here after the meeting17:47
gouthamr#topic Barbican UI situation 17:48
gouthamrnoonedeadpunk: the floor is yours17:48
gouthamr*crickets* 17:50
spotz[m]Hehe17:50
fungiapropos17:50
gouthamrhaha, okay, i think the situation is that a bunch of contributors have been working on barbican-ui 17:51
spotz[m]He could be typing a wall of text…..17:51
gouthamroh, if that's the case, i'd stop trying to fill that in17:51
spotz[m]I was giving him the benefit of the doubt:)17:53
dmendiza[m]🙋‍♂️17:53
gouthamrdmendiza[m], ty for joining17:54
gouthamrare you still involved with barbican development/maintenance? and can you help address this situation17:54
gouthamrnoonedeadpunk said this about barbican-ui on the TC meeting wiki: "new contributors are volunteering to revive the project, but are denied by current project leadership, because project considered as unmaintained by them"17:55
dmendiza[m]Right, so17:55
dmendiza[m]barbican-ui never really got off the ground.  17:56
dmendiza[m]There was interest to make it happen a long time ago, but the issue that the core team had -- and we still have -- is that we are not front end developers17:56
dmendiza[m]So there is no one in the core reviewer team that is confident enough to review front end code17:57
gouthamrah i see, i totally sympathize with that.. we have a number of horizon plugins which share that issue... and we keep trying to gather help from the horizon team that's stretched thin..17:58
fungido the core reviewers for other services typically review changes to their horizon plugins, or do they have separate groups of reviewers on those repositories?17:58
gouthamrfungi: manila-core does its own, poorly.. and relies a lot on borrowed help from horizon-core (tmazur/rdopiera/jjasek/others) 17:59
mnasiadkaGerrit groups are separate, but I don’t think any service team has a dedicated UI reviewer17:59
mnasiadkagouthamr: Manila is still in a better shape, because it has some functional tests (I think watcher also has them or has them in progress) - majority of the *-ui/*-dashboard projects are in far worse shape testing wise18:00
gouthamrso this could spiral into a bigger "we need UI (and also specific domain) expertise" question.. 18:01
noonedeadpunkafaik horizon team has access to the most of plugins18:01
gouthamryes18:01
noonedeadpunkcan't say they actively maintain them18:01
fungimaybe ask the prospective maintainers for barbican-ui to start by improving its test coverage?18:01
noonedeadpunkbut18:01
noonedeadpunkthere're folks who decided to step in and refactor and make a barbican-ui a proper one18:02
spotz[m]Well I think they would need to write the tests and the code to start with?18:02
noonedeadpunkI am not really sure about how continious their maintenance should be18:02
noonedeadpunkbut we either need to be clear that project is dead18:02
noonedeadpunkor allow other parties to step in18:02
noonedeadpunkspotz[m]: they already did I thnk18:03
noonedeadpunk#link https://review.opendev.org/c/openstack/barbican-ui/+/98669018:03
fungiwhen it comes tounfamiliar  parts of projects i'm a maintainer for, solid existing test coverage makes me a lot more confident that things i approve aren't going to break intended functionality at least, and makes me more willing to review18:03
noonedeadpunkbut I think they've accidentally dropped zuul.yaml18:03
dmendiza[m]I think we would not be opposed to barbican-ui being maintained by other folks.  Maybe x/barbican-ui or a separate barbican-ui-core team.18:03
gouthamri think the latter is a better course of action18:04
spotz[m]I also have possibly a radical thought and definitely don’t want to throw more work on the horizon team, but what if ui repos fell under them vs the service as it should be front end dev and API calls? Or atleast it is in my head without looking18:04
noonedeadpunkI'd say that barbican-ui-core team makes total sense for me18:04
fungiand people implementing good testing gives me better confidence in their capability to review changes to the software as well18:05
gouthamr++18:05
gouthamrwe're five minutes over, this can be a discussion that we can have on openstack-discuss and draw in the horizon team as well18:05
noonedeadpunksure, and they did some testing. I think the effort was a bit dead due to response in line with - don't try to contribute here, it's dead anyway18:05
noonedeadpunkand then I realized it's not marked as dead and we have no tracktion on it at all....18:06
noonedeadpunkanyway18:06
gouthamrmy knee-jerk reaction is that's weird, and we should be having an open discussion about it and steering interested parties towards a feasible solution to the problem18:07
noonedeadpunkI'd vote for a separate core team for it, and then we can add horizon people or these folks if they're interested in continious mintenance18:07
noonedeadpunkor just kill it off properly if there's nobody to step in for future as well18:08
gouthamrthis does have governance/release implications though - for one, we're past the membership deadline for hibiscus18:08
noonedeadpunkas vibe code ui is not same as provide continious maintenance...18:08
gouthamrdo you mind seeding this discussion on the ML? or if it can wait until next week's meeting, that's fine too18:08
noonedeadpunkI can try to :)18:09
gouthamrthanks noonedeadpunk 18:09
gouthamrwe're ~10 minutes past18:09
noonedeadpunksorry18:09
gouthamrthank you all for participating, let's wrap it up here18:09
gouthamra couple of late breaking minutes items.. 18:10
gouthamrall hail Indri, our new animal overlord.. 18:10
gouthamrOpenInfra Days NA is being planned, talk to spotz[m] if you need more info, CFP is open already, details will be coming to your favorite mailing list soon18:10
gouthamr#endmeeting18:10
opendevmeetMeeting ended Tue Jul  7 18:10:45 2026 UTC.  Information about MeetBot at http://wiki.debian.org/MeetBot . (v 0.1.4)18:10
opendevmeetMinutes:        https://meetings.opendev.org/meetings/tc/2026/tc.2026-07-07-17.01.html18:10
opendevmeetMinutes (text): https://meetings.opendev.org/meetings/tc/2026/tc.2026-07-07-17.01.txt18:10
opendevmeetLog:            https://meetings.opendev.org/meetings/tc/2026/tc.2026-07-07-17.01.log.html18:10
funginoonedeadpunk: maybe encourage the prospective new contributors/maintainers for barbican-ui to engage on the ml thread when you start it. that also helps set expectations for community involvement rather than quitely working in isolation18:10
gouthamryes, kpdev, ivan anfimov, dmitri chubinidze et al aren't here.. and i'd nudge them all to air their concerns out in the open, on the ML18:13
noonedeadpunk++18:13
noonedeadpunkI will18:13
noonedeadpunkjust got an email from Ivan with excuses not being able to participate in TC meeting today18:14
gouthamrah, np.. this is a good forum for visibility, but not as good as openstack-discuss imo for this topic :) 18:32
fungialso folks from zte are reaching out to the foundation again about the risc-v sig proposal. i once again pointed them to the motion voting rules, noted that the proposer had just addressed prior review comments in a revision yesterday, and that the current state is short one roll-call vote but also needs 6 more calendar days before it's eligible for approval18:45
fungithey seemed disheartened that the only reply to their ml post introducing the idea for the sig was someone asking for test resources for another community18:47
gouthamrah, makes sense.. I can reiterate the review rules on the patch if they're unfamiliar with it.. and good to whip votes too18:51
fungithe opendev sysadmins are planning to move forward with the cursive project rehoming on thursday as previously scheduled, i intend to run the maintenance19:31
gouthamrneat, ty for handling that fungi!20:13
gouthamrfungi: quick question on https://review.opendev.org/c/openstack/project-config/+/990122/1/zuul.d/projects.yaml20:28
gouthamrfungi: do i need to set up the "official-openstack-repo-jobs" here?20:28
gouthamrstephenfin was just dropping the existing publish-to-pypi job, i don't know if he meant to do that stuff in another change, and if it'll matter20:29
fungii would add it, yes20:34
fungithat way things like automated github mirroring will get set up20:35
gouthamr++20:35
opendevreviewMerged openstack/governance master: Retire cinderlib  https://review.opendev.org/c/openstack/governance/+/99400420:44

Generated by irclog2html.py 4.1.0 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!