20:00:12 #startmeeting barbican 20:00:13 Meeting started Mon Feb 6 20:00:12 2017 UTC and is due to finish in 60 minutes. The chair is dave-mccowan. Information about MeetBot at http://wiki.debian.org/MeetBot. 20:00:14 Useful Commands: #action #agreed #help #info #idea #link #topic #startvote. 20:00:17 The meeting name has been set to 'barbican' 20:00:31 #topic roll call 20:02:21 o/ 20:02:35 * dave-mccowan waves to redrobot 20:02:42 o/ 20:02:45 o/ 20:03:11 \o/ 20:03:19 woo! 20:03:24 it's a party! 20:03:39 o/ 20:03:55 as usual, our agenda is here: 20:03:57 #link https://wiki.openstack.org/wiki/Meetings/Barbican 20:04:30 #topic Summit 20:04:31 today is the last day to submit a proposal for the Boston summit. 20:04:54 has anyone submitted a barbican talk? (or want to throw one together quickly today?) 20:05:21 I'm thinking a Vault vs Barbican talk 20:05:30 will try to throw something together 20:05:50 I'm thinking a security model comparison 20:05:59 maybe a feature comparison as well 20:06:08 obviously very biased towards Barbican :D 20:06:14 dave-mccowan, thanks for the reminder -- I had completely forgotten .. 20:06:49 redrobot i like it! what use case for each one would be good too. 20:06:56 yup 20:07:09 maybe even throw in possible integration 20:07:20 like Vault as a backend for Barbican 20:07:31 or Keystone as an auth backend for Vault 20:08:30 do we want to submit the hands-on barbican session again? 20:09:55 let me know if anyone wants help putting something together. 20:09:57 moving on... 20:09:58 I thought Fernando was going to do that? 20:10:13 I'd love some help on the Vault v Barbican talk if anyone is interested 20:10:40 redrobot count me in 20:11:01 #topic PTG 20:11:02 dave-mccowan \o/ 20:11:11 I'm officially not going :( 20:11:23 two weeks until the PTG. we've got a pretty good agenda, but we're light on attendees. 20:11:23 but I'd love to be a floating head on the projector 20:11:34 https://etherpad.openstack.org/p/ptg-barbican-pike 20:11:51 maybe we can schedule a couple of 1hr hangouts each day? 20:11:56 I'll definitely set up something for anyone who want to attend remotely. 20:12:04 dave-mccowan, I think we're going to feel like an episode of futurama .. 20:12:30 alee lol 20:12:30 the PTG is intended to kick off the Pike cyle 20:13:17 you all do not have an open item on the agenda 20:13:25 so will drop in something here if ok 20:13:37 alee, kfarr i know you are coming, but also have other project sessions you want to go to. we should try to firm up an agenda with days and times to help with coordination. 20:13:37 https://etherpad.openstack.org/p/ops-adopt-a-project-pike 20:13:48 it is 'relevant' i think to ptg 20:14:26 within osic the ops team would like to assist with offering feedback to barbican, details in the etherpad 20:14:42 #topic Ops Proposition 20:14:47 hi mrhillsman 20:14:51 if possible at ptg it can be brought up and how it could be beneficial that would be great 20:14:56 or not beneficial :) 20:15:23 and how we can collaborate to be successful over pike with some expected outcomes 20:15:34 we just put what we thought made sense there and looking for feedback 20:15:40 hey dave-mccowan 20:16:03 mrhillsman that sounds great. we, as a community, have been wanting to boost our adoption. we're open to any contributions in that regards. 20:16:48 is the PTG the best place to start the conversation? 20:16:55 that's fine with me. 20:16:59 we will not be at the ptg i believe 20:17:04 "we plan to add to OSIC for Pike" YES!!! :D 20:17:09 ^^ this makes me happy 20:17:29 we just thought maybe you all could discuss and we could work to define some goals together through this effort 20:17:38 amongst the other items you all come up with 20:17:52 mrhillsman are you at OSIC in San Antonion? 20:17:58 *Antonio 20:18:08 if you do however setup remote access, someone will sit in for sure 20:18:15 i am not redrobot, in Houston 20:18:19 but our team is there 20:18:26 redrobot ah, ok 20:18:36 i can schedule a time after the ptg to be in sa though and we can get together 20:18:43 barbican and osic ops folks 20:18:51 mrhillsman sounds good 20:18:59 cool, i'll email you 20:19:14 that is all i wanted to offer 20:19:17 mrhillsman I'm is Douglas Mendizábal at Rackspace btw 20:19:20 thanks for your time 20:19:33 yep, i got you :) 20:19:50 😎 20:19:57 we've talked/met 20:20:30 mrhillsman thanks! i'll add this as a standing agenda item for our weekly calls, so we can track this going into Pike. 20:20:32 #topic Ocata Status 20:20:50 thx dave-mccowan 20:21:01 Last Friday, we released RC1 and pulled stable/ocata for Barbican 20:21:28 also kfarr pull stable/ocata for Castellan (the first stable branch for Castellan) 20:21:43 Yup! 20:21:51 barbican master is for Pike developmet 20:22:22 woot! 20:22:29 can I resubmit the ID change? 20:22:30 if we don't find any showstoppers this week, RC1 will become our Ocata release. 20:23:01 redrobot yes, let's do that soon. we need the co-requisite changes to client. 20:23:24 dave-mccowan ack, I can work on the client bits and then submit both at the same time 20:23:52 great! thanks! 20:24:30 any other questions on Ocata? 20:24:54 #topic tempest testing 20:25:44 there is one outstanding review now in barbican-tempest-plugin 20:26:02 Dane and Peter are planning on working on scenario tests this week 20:26:18 to test the integration with Glance / Nova / etc 20:26:41 \o/ kfarr let them know we appreciate it. :-) 20:27:02 Yeah, thanks for the code reviews! 20:27:36 #topic payload_content_type bug 20:27:59 this morning, someone in the channel asked about https://bugs.launchpad.net/barbican/+bug/1479439 20:27:59 Launchpad bug 1479439 in Barbican "cannot retrieve certificate payload with snakeoil plugin" [Undecided,Confirmed] 20:28:08 which is a really old bug, that is apparently still there 20:29:02 he's using the python client, and it is sending the content type as None which failing 20:30:12 comments in the code from 2015 say we've deprecated support for a user specifying payload_content_type, but it seems we need to for the code work. 20:31:32 if you have any thoughts on this, please attach them to the bug. 20:31:44 #topic any other business 20:32:46 ok... we're done a little early. 20:33:08 everyone can use the time to submit summit talk proposals. :-) 20:33:29 o/ 20:33:36 oh I have a spec I'm working on 20:33:48 for Pike 20:34:20 basically I want to steal some ideas from Vault and add Shamir's Secret Sharing support to SimpleCrypto 20:35:38 redrobot cool. i think the community is hoping for something like this... 20:35:39 so instead of storing an encryption key in the conf file, we would be able to split the key into K pieces and only require N of them to start up Barbican 20:35:55 anyway, I'll try to get an initial spec this week 20:36:17 thinking maybe API calls to provide the key pieces... 20:37:32 cool. 6 months to go until Pike release. :-) 20:38:30 last call for any other business 20:38:44 o/ sorry was in a meeting 20:38:54 diazjf did you submit the workshop? 20:39:10 redrobot, nope. When is the deadline? 20:39:16 diazjf today 20:39:45 midnight tonight (i think PST) 20:39:59 redrobot, I'll put it up within the next hour 20:40:09 diazjf awesome! 20:40:23 kfarr, dave-mccowan, alee, I will add all of you as well :) 20:40:39 diazjf thanks! 20:41:17 diazjf we're just wrapping up. did you want to bring anything up? 20:41:30 dave-mccowan so are you officially PTL for Pike now? 20:42:07 yes. i couldn't pass off the hot potato. :-) 20:42:30 lol, congrats dave-mccowan ! 20:42:37 congrats dude! and thanks 20:42:50 yeah, thanks for hanging on to the patata :D 20:44:11 no worries. happy to help. everyone start thinking about next cycle, if you're interested. 20:44:18 congrats!! 20:45:14 catch everyone later... 20:45:19 #endmeeting